skysight-inc/HackerNews huggingface dataset:
In this case it isn't a blogging platform per se, it is a single blog for one person. Luke's a designer that can also make any changes necessary.
If Vitalik is correct that the only viable defense against the attack described in this article is users validating nodes en masse, then blockchain is doomed, because you're never going to convince more than a small percentage of users to validate blocks.

Personally, I think that custodial entities such as Coinbase (or in the future, banks) can probably be relied on to not do anything too controversial.
Current situation and hype aside — obviously software engineering is more wide and flexible term than just devops.

As it is now.

Modern devops knowledge is mostly declarative (hence doesn’t inherently have as much value and is subject to stronger and stronger automation).

While software engineers are the ones who usually automate things.

And who’s knowledge is mostly procedural => more valuable.

Of course all this is “other things equal” because these days one can find devops and programming jobs of any level of complexity/value/salary.
I read of some Israeli’s landing in Syria and Iran due to an emergency landing (eg. health emergency, plane malfunction).

Similar to an embassy, the onboard territory is based on which country the aircraft is registered to.

In the previous cases, the aircrew assured those people they’re in charge of them.

So this seems to be a diplomatic incident with Ireland?

Two differences though.
- low cost company, maybe aircrew are less knowledgeable.
- bomb alert.
tldr; worker libraries are a catch-22: they help a lot for people who don’t need them, and they don’t help much for people who do need them.

I had a pretty clear use-case: running a cpu-hungry ML model at 5-10 FPS without locking a dynamic UI that needed to stay around 60fps.

I tried out all the various worker libraries: thread.js, comlink, etc. What I found is that while these libraries do make it easier to get a worker up and running, they introduce abstractions that make it harder to achieve the goal of using workers in the first place: performance.

The browser APIs for WebWorkers are not difficult to learn and use. But stashing code into a worker doesn’t magically solve performance issues. It’s just the first step.

In my case, I had to optimize the transfer of data to and from the worker. Any abstraction that sits in front of that transfer ends up being at best being an additional and unnecessary cognitive load, and at worst being an obstacle to my original goal of improving performance. While I’m sure these libraries take pains to ensure they don’t do anything that might impact performance, the slightest possibility of a library’s contribution to degraded performance means that your cognitive load now includes ensuring the library is performant too.

It’s analogous to hunting down a tricky bug. Whenever I get a bug that is particularly hard to understand, I end up performing dramatic (albeit temporary) surgery on the codebase to remove anything extraneous to the bug. If I can remove 95% of the code, then I only need to think about 5% of the code. While it is true that the code I removed had nothing to do with the bug, my eyes and brain have an easier time ignoring code that doesn’t exist rather than code that doesn’t matter.

Same for these worker libraries. It’s more code that you have to consider. And if you are using a worker for a good reason — to solve a hard performance issue — you really don’t want to have to consider any more lines of code than absolutely necessary, and ideally you only have to consider lines you’ve written yourself.

I’m not usually in the camp of “write everything yourself”, but leveraging WebWorkers for performance is one of those cases where you are going to get your hands dirty anyway. You might as well embrace it from the start.

Now, if you already understand workers inside and out, then these libraries probably would save you time and be less bug-prone in handling thorny use-cases like workers that run in isometric codebases. Ironically, those who least need a library gain the most from it, while those who most need a library gain the least from it.
I work in applied Cryptography so I’m well placed to judge.

Other than Monero and ZEC (the latter of which has some issues for me which I posted about before) Grin is the only other project that isn’t a clone.
I was responding to the comment in general: that having advertisers in no way compromises your credibility.
It depends. For projects which are never really 'done' (i.e. there's always more polish you can put on), they can help focus things to get them out the door. However for other projects they can be extremely counterproductive, especially if the priority is on having something done by the deadline over having something which is good enough as soon as possible (in which case sufficiently poorly defined deadlines can basically prolong a project indefinitely).
Still basically an infinitely larger attack surface than what OP describes which was fancy wording for some basic IPC primitives to synchronize some game state.
> just like a retail mall charges stores

Of course, as we all know, rent in a retail mall often includes a percentage cut of monthly revenue, so we would be right back where we started.
This feels like a misunderstanding of how the syncing process works. You don't only download the last n blocks and assume the current state is accurate. You download the entire chain, validate it, and optionally discard the redundant information. As far as your client is concerned it still verified the entire chain end-to-end. The only difference with pruning is that you can't revalidate the chain end-to-end without redownloading the whole chain, but I'm not sure why you'd want to do that unless your machine was compromised.
You accept from the start that you will be the only critic, user and contributor of the project, so you do whatever you want.
I wonder...

The problem with dubbing is that it inherently sucks. That's a poor starting point for making something good. Any kind of connoisseur would watch the original anyway. Not many actors would be enthusiastic about being the voice of Renee Zellweger for the unwashed masses.

Animated films, OTOH, tend to have great dubbing. They hire famous actors, put in the effort... just like they do for the original language.

If dubbing didn't suck, it might start a whole chain reaction towards good.
Interpreting Free Monads
Please god, not again.
That said, in northern Europe and post-Soviet countries it's a lot more prevalent than elsewhere.
They are closed their airspace in coordinated effort to land the plane within reach of authorities searching for Snowden. It's same.
In theory yes, you want a 1:1 partition to consumer ratio, that would give you the most optimal throughput, but it’s okay if you have less consumers than partitions, you’ll just have consumers doing more work.

Keep in mind you shouldn’t really go over 20k partitions in a Kafka cluster (recommended by Confluent), as that’s when things will start to get unstable. 10k is a lot of partitions, we have a hundred topics in our main cluster and only are at 15k partitions total. But if your running a high scale low latency environment then that sounds like what you’d need.
The Cache Is Full
Perhaps we don’t change our minds because we haven’t seen a convincing counter-argument to the thesis that blockchains are fundamentally about getting rich quick through buying in early (or pre-mining) and then finding greater fools.

The most successful actual applications thus far, as far as I can tell, have been silk road and paying ransoms.

I know people that send money home and they don’t use cryptocoins. These remittances communities are savvy and price sensitive, if there was a superior product it would be spreading like wildfire.
The point GP is making is that the game within the cartridge is immutable.

But, I actually think cartridges are a great demonstration of how the hardware-software divide isn't obvious. Byuu used to write about the importance of capturing a cartridge's mapping. The chips in different cartridges are also connected differently, and if you don't capture that information, they game can't be fully recreated. Emulators either have to guess or use a database of known titles.
Well, sorta. TCP MD5 hasn't had preauth exploits. OpenSSH has.

But also, like I said in my blog post (https://blog.habets.se/2019/11/TCP-MD5.html) this isn't just about targeted attacks, but this also hides from things like Shodan, which connects to all your ports and records your headers.

It helps with wide-scale scanning and wide exploitation. Security isn't a yes/no, and getting out these databases without restricting by IP address isn't without actual security value.

E.g. if you do this then next time there's an OpenSSH bug, you won't be in Shodan and other more secret scanning databases to be picked off right away.

Port knocking is just plain overengineered silliness. If plaintext password to unlock another port is what you want, set up a UDP server. "Connecting to random ports" is just fooling yourself about what you're doing.

TCP MD5 least has the benefit that it prevents any kind of shenanigans happening to your connection.

fail2ban, agreed. The value fail2ban adds is keeping your logs more quiet.

nonstandard SSH ports, agreed. Especially after everyone and their dog scans all ports on the whole internet now anyway.
This observation is probably correct.

A “subnet” is simply a predefined and dedicated space of IP addresses given on any type of network (most likely public or at least not-private).

What you probably want is a Private Network (or Private Cloud).

The “cloud” industry has really run rampant with standard networking terminology being used in Marketing and UI labels in ways unaligned to standard definitions, so double check.

But if they have a separate product for VPC/VPN, then the above is most likely true for them.
I didn't say that. You're attacking a straw man.
Oh I see, I thought it was multitenancy etc :)
I recommend Unikraft[1][2][3] as an alternative. It is under active development.

[1] https://unikraft.org/

[2] https://github.com/unikra
ft/unikraft

[3] https://dl.acm.org/doi/10.1145/3447786.3456248
"One time I got a whole lecture from a Docker Zealot about how I need to not treat my servers as pets."

You can always point out that pods are ran on nodes. Nodes use the standard built in GCP Auto-scaler (instance groups + load balancer). So its a great wrapper! But, it's a wrapper. GCP also! has a way to use a docker image as your VM.
wickeditor.com is trying to fill this niche, still pretty young but under active development.
Siri shortcut “I'm getting pulled over” opens your camera and records cops
Use the ISP-provided router as a modem in bridge mode (so it's essentially invisible from the network) and put an enterprise-grade router behind it that you keep up to date and disable any unneeded services (so no web interface, telnet, SSH, etc - at least not on the public-facing interface).

This obviously isn't immune to a zero-day, but at this point you'd be more secure than 99% of the rest of the people so any attacker will just move on (why bother breaking into this router when you have an exploit that will net you hundreds of other ones with much less effort?)
There's worse power supplies sure but this one is still a mess. I don't see anything obviously dangerous but it's still a dirty ugly design and assembly. Other companies like Delta Electronics manage to cram lots of components in small spaces too but they actually do a good, clean job.

Most PCBs with large, heavy through-hole components are still manufactured by hand, by the way.
Amazon boosted senior leadership diversity w. looser definition of ‘executive’
Tip: if you're curious enough to watch a video of Rossmann's, do that in the incognito mode. Otherwise you'll be pestered with recommendations of the other two thousand of his videos, until the end of your days. Perhaps you'll even be able to follow the epic of his fight by the titles of new videos.
I mean, Russian-employed militants in eastern Ukraine downed a civilian airliner and Russia suffered no serious consequences. Russia just denied and obfuscated.

They've poisoned people with radioactive substances on NATO soil, without serious consequences. Just denials issued.

Putin keeps calling the west's bluff. Having a nuclear arsenal seems to let you do that.
You think there’s no difference between non violent protest and sharing state secrets?!?!?
- Fuels research for applied cryptography (example Zero knowledge cryptography) and privacy technologies.

- Pressures existing systems (Fiat, Paypal ...) to improve and keep up.

- Gives options to people living in censored governments

- Shows us that one of our most foundational systems (Money) can be re-engineered using modern tech and experience of studying what happened in the past.
This actually definitely moved it to "not in a million years" for me. What kind of clown show engineering team makes this kind of oversight? They knew there were profiles that would be part of the old 12-month delay feature (and if they didn't know about this feature that also speaks volumes about their internal knowledge of their own product) and neglected to fix it or notify them about their new options. What else are they neglecting?

This is not a weird edge case or a nobody-could-have-caught this. This should have been obvious and come up immediately in the "how are we thoroughly addressing this dark pattern" root-cause.
> So many reputations and projects in blockchain rest on this flawed idea that users need to run nodes.

BSV obviates the idea completely.

Any mistake the miners make, is forever.

Without this, miners could increase the money supply by indefinitely postponing the block reward.

> "He ought to find it more profitable to play by the rules"
> If a group of miners wants to change the protocol, it takes another group of miners to counter it.

No one is going to mine on a chain that produces worthless coins users don't accept. Users forced miners to activate Segwit in 2017, and almost all hashpower is still with Bitcoin.
Out of chip interconnect is always going to be lower performance than having everything on the same die. Apple could technically use DDR4 and NVMe over PCI-e, but the modularity comes at the cost of a performance decrease.

Personally, I've always thought that it's pretty weird that my NVMe SSD has a CPU and DRAM that I can't use for my own computing purposes -- I have that silicon there and I can't use it. It's kind of a waste unless you are doing something I/O heavy that the proprietary software running on that CPU thinks it can optimize. Imagine if the NAND flash was directly connected to your CPU; you could change how garbage collection, error correction, and redundancy works, right in your OS software. (This isn't really a pipe dream; it's common on embedded systems and Linux has lots of code exactly for this case. Code you can edit, code that has tests. Your off-the-shelf SSD is just a black box. Maybe there's not a bug that corrupts all your data under certain circumstances. But if there is, there is nothing you can do about it. And, that inflexibility and reliability on unauditable proprietary software comes at the cost of lower performance. Makes very little sense to me.)

I feel like there is a strong push from the right to repair movement to have the government mandate obsolete technology, because of its ubiquity and interchangeability at a particular point in time. (For example, forcing Apple to use an NVMe M.2 SSD.) We've seen that in action before; look at things like FIPS. FIPS is behind the modern standards, so if you are required to use FIPS, your users are less safe. Doing the same with hardware means that it's easier to repair, but also slower. I'm not sure that's a good tradeoff.

Finally, I'm not even sure that mandating connectors instead of soldering is a great idea. Look at things like the connectors between WiFi modules and antennas; they are rated for a maximum of 30 cycles, with most vendors recommending that you use them once. Not that repairable.
This is what they're talking about when they say that productivity gains have gone only to the wealthiest. Buying an album digitally, when every single step in the production and distribution of that album have become an order of magnitude cheaper (outside of labor costs, which somehow remain flat no matter what), costs the same as it did 50 years ago.

Every part of application distribution has become cheaper, so you lock down every platform and charge the same percentage.
Lightning is not the only layer 2.

In fact, the most obvious layer 2 is simply to use custodial solutions.

However, I personally think lightning works better in practice than what you're saying.
The US has more resources at its disposal to finesse a forced landing. Less powerful countries have to resort to more barbaric means to achieve the same exact result.
In this quote, what is meant by "respect through imitation" - imitating, or being imitated?
$600 is a lot for a small dev who already has a computer. What if they’re a windows gamer and they’re happy with their old desktop? $600 is a lot to many people if it’s not strictly necessary.
Technically speaking, an Actor does not do a "return" for a

request it has received. Instead, the Actor sends a 1-way

message to the customer Actor that it received with the

request. Actors operate concurrently, which is different

from the object-oriented programming beginning with Simula.
Anytime you want to mute a channel, just click the three dots to the lower right of a video and select "Don't recommend channel"
That is a really hard to achieve definition of useful.
Not quite clear on how this will be "commercial"? Not much demand for netflix on the moon I suspect
It was the other way around. Several exchanges publicly went all-in on various Bitcoin forks, only to turn around on them when all users and economic activity stayed with "regular" Bitcoin.

Many prominent people predicted the mainline Bitcoin chain dead when so many important exchanges and custodians promised to change the consensus rules. In retrospect it may sound like empty threats, it doesn't make much business sense to go up against economic activity, but at the time it was considered a real threat.
That's fair. I'll soften my point, to say merely that the call is often made, not that you were making it.
Many of the problems listed are either overstated or have solutions already. eg.

>you still need on-chain transactions to handle opening connections and creating wallets, which the main chain does not have the throughput to do at scale

channel factories

>have to constantly monitor for fraudulent closing of connections

watchtowers (which are trustless) and you don't actually have to "constantly" monitor, more like once every 2 weeks.
> without [third party] apps the iPhone would be basically useless.

It was good enough for the first year before the App Store existed, and it sold well enough to prove it.

Even now, it's plenty capable right out of the box without installing anything.

A device in 2007 that had first-party apps for email, web browsing, YouTube, weather, calendar, clock, address book, phone, calculator and music player, that also synced with your main personal computer was perfectly fine for many people.
Reviews – A TUI for monitoring code review requests across multiple repositories
What is it?

Reviews is a terminal UI Dashboard for monitoring requests for code review across several Github repositories and pull requests.

How to use it?

You can install it directly from PyPi and configure it to use and provide your configuration like so

pip install reviews

The following is example configuration for the TUI:

export GITHUB_TOKEN="your-token-here"
export GITHUB_USER="apoclyps"
export REPOSITORY_CONFIGURATION="apoclyps/micropython-by-example,apoclyps/reviews,apoclyps/magic-home,datadog/dd-trace-py"

Once configured you can run it from your terminal using:

reviews dashboard --no-reload

How to get involved?

The code is available on Github https://github.com/apoclyps/reviews and there is a small video demo on the repository. You can install and use it from PyPI: https://pypi.org/project/reviews/

I've also created a number of an issue for first-time contributors, but I'm open to anyone creating a feature request for anything they would like to add. I'm always happy to receive feedback to improve reviews.
Thanks!

That's a great write up. I used this approach: https://wwwtyro.net/2019/11/18/instanced-lines.html
Polish prime minister calls it an "act of state terrorism":
https://twitter.com/MorawieckiM/status/1396486258747183106
They could also be recycled from units with other damaged parts, which is also "legitimate", whatever that means (although I'm sure Apple et.al. don't want that.)

In much the same way that salvage yards are a source of car parts, yet companies like Tesla are trying to stop that.
I'm all for right to repair, but Rossman rubs me the wrong way. He's too much of a Youtube celeb right now for me to still take seriously. They always become caricatures of themselves because their popularity depends on them doing what people know them for: In his case anger at Apple. It makes a balanced discussion impossible.

I don't like what Apple do, I think current Macs are very poor in terms of hardware (ports/keyboards). And in fact I have stopped buying Macs for this reason. But he's a bit too extreme sometimes IMO. Like he's looking for things to complain about, just because that's what 'his thing' is.
Not all journalists. To be fair you said journalist class, and I agree.

One journalist who is clear eyed and a fantastic communicator about this case, based on having heard his interview on the Joe Rogan podcast, is Josh Rogin. Yeah similar names but no relation. Even though it’s a three hour conversation, by the end you’ll be wanting more.

https://en.m.wikipedia.org/wiki/Josh_Rogin
How about throw out Belarus of the international aviation treaties? If they misuse air traffic control to misdirect planes, maybe throw them out of the system.
Math much? 20 million (that's 3-year old numbers [1]) apple developers. Probably a lot of them on the $299 enterprise plan, but let's assume they're all using the $99 one. 20mil * $100 = $2 billions. QED

[1] https://techcrunch.com/2018/06/04/app-store-hits-20m-registe...
Sanctions are not a good thing; they inevitably affect the common person much more than they affect sanctioned governments.
And that is why scaling solutions like Polygon have a future if Ethereum has a future.
As a Apple developer it is not a "seamless, high-performance, safe experience". Anything but.
Proof of stake is six months away and always will be.
my USA bank re-arranged the order of my checks and ATM on a certain day in december of 2007 to create an overdraft, which then was charged large fees, several times. At a similar time, around dec 2007, I stood next to a BofA customer being told that his cash deposit at the BofA window, would be credited on the next business day. I believe that there are documented cases much, much larger, but involving commercial transactions, that ended up with large losses also.
I would rather have the choice, myself.
Maybe try commenting something at least somewhat related to the content of the article?
TBH I'm very skeptical this is usable for a business. Auto generating good code is very very hard
Since a little less than two years, I live from a website I built, and I have a lot more control over my schedule.

Since then, I built a lot more useless stuff. I'm the only user. I can hardcode things, introduce breaking changes, manually migrate data and so on. I can cut corners, or over-engineer everything. Other people can use it, but I don't care about what they think of my variable names, or which features they want.

The turning point for me was the concept of apps as home-cooked meals [0]. If a gardener can grow flowers only he will see, I can write code only I will run.

[0] https://www.robinsloan.com/notes/home-cooked-app/