skysight-inc/HackerNews huggingface dataset:
I don't understand your point at all.

I can be mowing my lawn when it's 110F outside and say, "Gosh, I'm boiling." But if a recipe tells me to "boil" something, and it means anything other than put it in 212F water with heat applied in such a way that the water is bubbling, then the recipe is a shitty recipe, and I will diagnose the author with a confusion of the mind. The fact that the term now encompasses a much broader range of meaning in other contexts is completely irrelevant: I am not in those other contexts, in this context, it is a word with a very specific meaning.
And the children of those broken 1990 families are now the ones responding to the polls in 2021.

The ones responding to the polls then were divorced men who had been raised in stabler 1960's families.

Maybe being divorced isn't the problem, being raised by broken families is.
> I'd suggest reading the relevant portions of the muller report and the related indictments of the GRU agents.

Why can't you just spell out the method of attribution, instead requiring me to read trough dozens of, mostly political, reports?

> The attack, carried out with many technical signifiers of a Russian state backed attack, that was used to geopolitically help Russia was Russian.

Technical signifiers are not difficult to spoof, nothing about them requires any nation state backing as they rely on heuristics which are semi-public.

That's been the reality of the "cyber theater" for decades: It's asymmetric, there's been more than one example of some lone kid on the spectrum, living in their parents basement, pwning very important and advanced national infrastructure at scale.

That's why I'm very skeptical when a cyber incident is instantly declared as "state level!", usually that's just part of PR and damage control script, along the lines of: "The adversary was a whole nation state, there's nothing we could have done to prevent this from happening!".

Even when the methods deployed are anything but exclusive to nation state actors: Spear-phishing and social engineering are not types of attacks that require nation state resources or knowledge, there's a whole grey market industry offering such attacks as a service.

> The alternative is that someone (who?) was capable enough to infiltrate Russian cyber intelligence resources to then launch an attack on the us, which they then used to geopolitically assist Russia.

Why would that be the only alternative? Your alternative assumes that the attribution to the Russian cyber intelligence is a fact beyond doubt.

> I'm not sure I can think of any attack where someone tried to successfully frame another nation.

That's because if said attack is successful, you wouldn't even know about it being such an attack, that's the crux of the problem.

> Far more likely is that successfully impersonating a state cyber attack is actually really really difficult, because doing so successfully would in general require persistent access to the state actor you're impersonating.

As mentioned before: Nobody needs to impersonate a state cyber attack because by now that's the default assumption not just by media but often enough by those affected themselves to cover up for their own InfoSec negligence.

"We got pwned by the whole Russian intelligence apparatus using massive resources!" sounds much more impressive, and sympathy inducing ,than "We got pwned by some kid from Ukraine because we don't patch our stuff/one of our employees got phished".
It works with or without internet : Bluetooth is enough. Check their "How it works" page.
The chart comes from Rich Hickey’s Simple Made Easy presentation. Watching that will provide missing context that may answer some of your questions.

https://www.infoq.com/presentations/Simple-Made-Easy/
Tankers are cargo ships.
But that’s negate many of the benefits of quic!
>the author is not arguing semantics.

I agree that the author is not dissecting semantics and that omission is my point. It's the flaw with his essay. I'm saying the best way to explain the widespread "lie" (across books, Youtube videos, etc) is via differing language usage.

And look closely again (freeze the frame) at that deep link of the onions in the Vivek Singh of Cinnamon Club video... those are not deep dark brown onions (scientific chemistry of caramelization) -- and yet he calls that 5-7 minute heating of onions ... "caramelization".

>There's no lost in translation here.

Those videos and this entire HN thread full of contradictory comments about "caramelization" and various posters trying to correct each other ... seems like evidence that there's plenty lost in translation. :-)

The author quotes Madhur Jaffrey's cookbook for rogan josh and the Youtube video shows Madhur Jaffrey re-iterating that it's 7-10 minutes to brown the onions.
1. So what?

Some of those "protected wines" didn't even exist before the agreement and no one cares if they are protected, or not.

This is basically a "in exchange of a few thousand names [1] that you can never use even if you produce an identical product, we will protect some names many of which not even you care about, or weren't even ever used before this agreement".

2. That "protected spirit"? That's the new invented name for cognac.

As wikipedia puts it [2], emphasis mine:

=== start quote ===

Divin - represents the name, patented in the Republic of Moldova, of the country's brandy, produced in conformity with the classic technology of cognac production.

=== end quote ===

So, it's produced like cognac, looks like cognac, has the same ingredients as cognac, smells like cognac, tastes like cognac, but don't you dare call it cognac, invent a new non-sensical name to call it something else but cognac.

The same goes for dozens of other names. And we're talking only about wine and spirits. Imagine if no country could call whisky, well, whisky, and each country had to invent their own name for it.

[1] Annex XXX-C https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=15828875... and Annex XXX-D https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=15828875...

[2] https://en.wikipedia.org/wiki/Moldovan_wine#Divin
Have you ever been to India/Pakistan/Bangladesh?
Starlink, unfortunately, will not present meaningful competition. It will really only be viable in sparsely populated areas--even once the full constellation is deployed, there simply won't be the bandwidth for large numbers of users in densely populated areas like major cities--and both Starlink spokespeople and Musk himself have not been particularly coy about that fact...though I suppose neither have they tried particularly hard to push back against the prevailing tech-media narrative that once Starlink is fully armed and operational it will have Comcast, Spectrum, Cox, et al. quaking in their boots.
This comment is really ambiguous to me. Your friends wouldn't hang out because of the pandemic? If you were criticizing that decision, surely you'd write that more explicitly. But you make it sound like they refuse to spare time, in which case, surely you'd clarify that it was not because of the virus, but then you'd have to explain what you mean by "Covid showed me...".
Dictionary has

1) a person who secretly supports or adheres to a group, party, or belief.

2) cryptocurrency.

3) cryptography.

obvs the perceived meaning of words depends on context. You can't really just declare 3) is the only true meaning.
Gamification, life, and the pursuit of a gold badge
The substance you're talking about is already essentially banned in the developed world.
Poland welcomes them:

1. Any Belarusian can get humanitarian visa without priori job offer or any serious requirement that allow to enter and work up to a year.

2. Meantime if one of your grandparent got Polish origin, you can go straight to get pernament residency. Polish equivalent of USA green card. Given history this situations are common.

3. The alternative path is to get work permit. Super easy for IT. It took my company 1.5-3 months at total cost 3000 pln including fancy legal advisor (790 usd).
What you say is not true:

https://en.m.wikipedia.org/wiki/Demographics_of_Israel
With P2P sound there is no need for expensive slow servers serving free tier users. Scalable! But companies have a hard time letting go of control and 'value add'.
Does the slider also physically disconnect the microphone, or alternatively is there a separate switch for it?

I find this popular trend of webcam sliders for purported security reasons is mere security theatre as long as microphones cannot be physically disconnected.
But the solution is for it to not try make the socket rather than needing another system to correct bad behaviour of the first system?
I agree with the GP in that I can never remember the order of args for systemctl either. But I also accept that systemd is here to stay (and I like it, especially for writing services, and across distros!), and I'll get used to it eventually. For example, I managed to get over `ifconfig -> ip addr` fairly quicker, even if it was really annoying at the start!
Before you build this, I'd suggest you read "Punished By Rewards": https://www.amazon.com/Punished-Rewards-Twenty-fifth-Anniver...

It makes the case that extrinsic motivations like reward systems harm intrinsic motivation, the natural desire to learn.

That's certainly been my experience. For example I think of all the books people hated reading because they were forced to in high school. I've read many of those books on my own and really appreciated them. Or all the people who got into tech because they loved it but ended up burning out and leaving the field because doing it for money slowly leached the joy out, leaving them only pain and resentment.

And it happens in the short term, too. If people are doing something for an intrinsic reward, those who just want the reward are going to do the absolute minimal job of it. Or just lie entirely. So reward systems that in theory are training kids to do good work instead can train them to slack off or become good liars.

I'm not saying don't do it. But I am saying that if you do, you should make very sure you're not harming children and child-parent relationships in the process.
Rural?
Impressions of Swift from Go
The Slate article and this very HN discussion (broadly, not this sub-thread) are evidence that the phrase “caramelized onions” does not appear to have a singular, very specific meaning in this context. If it did, cookbooks wouldn’t make the claim and the Slate article and this discussion wouldn’t exist.
I wouldn’t worry too much. The voltage is low. More importantly, the three prong (grounded) plugs have longer ground pins than the other pins, so the most electrically convenient return path will always be connected while any current is present.

You can’t see this structure in the standard diagrams such as the ones in the article but you can tell it for yourself by inspection.
Windows 11 is a free upgrade.
Seems like a good thread to ask for suggestions: I've been looking for a CSS-stylesheet that can be applied to HTML against tools that render PDFs (such as xhtml2pdf / wkhtml2pdf etc) to produce pandoc-like PDFs. All CSS stylesheets in this regard are focused on the "web" side of rendering obviously, and while tools like xhtml2pdf provide additional CSS classes for special handling of PDF components, I haven't found any templates for the same.
Good book on building organizational systems that are able to deal with many different situations:

One Mission: How Leaders Build a Team of Teams:

https://www.amazon.ca/One-Mission-Leaders-Build-Teams/dp/073...
By "cannot block systemd from making a network socket connection", I think GP meant that your system will break if you block systemd from making network socket connections, not that it's physically impossible to do so.
> In the US context I would say this is a privacy violation.

Yeah, but that's the US. Which is well known for being pretty wacky on these things.

> It's another avenue of obtaining identifying information about you, to abuse with no restrictions.

How? You hold up your vaccine pass to the bouncer, and your photo ID, so he can see that the vaccine pass is actually yours: He compares the face in the ID to yours, and the name on the pass to that on the ID. Then he turns away from you and says "Next, please". In two minutes he has forgotten your name, and in thirty he remembers your face to the extent that he can say "Yeah, I think I let that one in tonight."

Does he photograph your pass and ID, or type them into some computer system? Hardly. So what's to "abuse"?

> This way you don't have to worry about keeping basic information like your name secret in the first place.

In any sane society, your name isn't supposed to be a secret.

Dang, Americans are a funny people. Paranoid about all the wrong things.
Thanks for sharing that link, I've been exploring options on the best way to learn Latin.
For developers, the key is this:

> organizations should consider implementing a content security policy (CSP) into the application [and] avoid directives such as
unsafe-inline or unsafe-eval

The problem with countering cross-site scripting is that you have to be absolutely perfect in the massive number of output locations. It is a good idea to try, and to use a framework that automatically escapes things properly. But CSP works every time, without requiring perfection.
What are you arguing? That side genocided in the past so other side please go ahead and do so now? Do you realize how absurdly callous that sounds? This isn't a board game we're playing with wooden figures for pieces. These are human lives. We have a chance to do something about these people who are suffering today, now.
I quit drinking 24 years ago in 1997. I haven't had a drop since 19MAR1997, I was 50 years old at the time.
I used to use a black sticker so it wasn't visibly obtrusive, but since the rise of videoconferencing this past year, I now use a yellow sticky note as well, so I can easily verify if it's there or not.
I ran into a lot of difficulty when dealing with devices that needed a bridge to access the internet. So device doesn’t have a tcp stack and requires a socket-like connection to an intentional-man-in-the-middle.

Implementing payload end to end encrypted MQTT was easy enough.

Any thoughts on TLS for that scenario? At best I could have a simulated socket, but always to an untrusted middle man.
I cringe when I see a sliding cover stuck on over a web cam, and you can see stress cracks on the laptop screen
Yes but in doing things differently with the new one people will defend systemd the same way people defend sysvinit was my point. They will claim the new way is too complicated or tries to replace too much.

I might not be getting the point of the talk but I really appreciate the argument that Benno Rice presents.
> I assure you that your customer profile is not representative of the vast majority of your ISP's customers.

The top tier is almost always a tiny minority [1] of any ISP's customers but it's convenient marketing and usually has by far the highest margins. It's like arguing Bugatti buyers aren't the majority of Volkswagen Auto Group's customers: it's true but what difference does that make?

1: Virgin Media offers tiers from 100Mbps to 1Gbps but "The average speed across our U.K. broadband base continues to increase and was 186 Mbps at the end of Q1", https://www.libertyglobal.com/wp-content/uploads/2021/05/Fix...
One reason why application containers are successful is because they eliminate the complexities of a single system where multiple services are running and potentially interfering with each other.

There is no need for PrivateTmp= or some of the other configuration shown in this article because the application container already runs in a separate environment.

I think this is worth considering with respect to this article, even though containers definitely bring their own problems.
This exists in some form. Its called Alteryx, and I have seen non programmers work on gigabytes of table data using it.
"Someone" getting control of my webcam bothers me a lot less then "my workplace's invasive monitoring software (which can be deployed at any time in the future if its not there now) is collecting images of my home workplace.

My webcam on my own computers, no real fear. When that same device is USB connected to a work supplied computer? Zero trust.
Since you’ve been doing this a long time and you are not a professional, please record a video and put it up on YouTube, it would help out a lot of people.
> x: typing.Union[str, typing.Any]

That's absolutely a valid and useful annotation. It tells me, and autocomplete, that "x" is probably a str, more likely than not, but I need to be aware that it might not be.
A friend and I both got really nice microphones but when in a discord call you can not tell the difference between them and an above average wireless headset microphone (these are usually much worse than their wired equivalent).

Recording the audio in windows you can easily tell the difference between them, but not over discord. Even tried upping the bitrate but it made no noticeable difference.
One of a prior boss's war stories was that our CTO once logged in the main production server and did a 'rm -rf '. This is back when it'd actually delete everything. This was also back before most companies had back up prod servers.

From what I understand, it was a long weekend bringing that server up from tape backups.

The funniest thing to me wasn't that it happened. It was who it happened to. The CTO has created (and was granted patents for) multiple utilities still used very frequently in nix environments today.
Groceries and toiletries are rarely shipped by sea. I'd define junk as something disposable that isn't consumed. Really anything by harbor freight that breaks easily.
Say you don't have a lot of cash and you want microblogging and VoIP. Do you spend money to host your own Mastodon and Mumble servers, or use one where many admins (understandably) require payment or donations to cover costs, or do you use the free-because-you're-the-product Twitter and Discord? Do you use GMail or pay for Posteo/ProtonMail/Fastmail/etc.? Do you use the centralizing, closed-source GitHub or pay for SourceHut or host your own Gitea server? Can you afford to build a rack at home to self-host and invest in the skill to maintain and secure it? Do you invest time in learning GIMP despite lower-quality, community tutorials because it's free (as in beer and freedom) or do you follow the crowd and use Creative Suite or Affinity Studio because it's the tool most your jobs will expect you to use?

I think it is (unfortunately) a privilege of being able to afford the FOSS and privacy-focused alternatives--through money and time. A good salary gives you room for privilege. I don't think you can separate finances from the equation. Many people are just out there trying to take the easiest route to survive, and FOSS isn't as easy.

(Heck, even speaking English is a privilege many here on HN have. Many FOSS projects are only in English. I've been in Thailand for a while now and while the much of the youth demographics resents its government, almost no one knows about decentralized, private, FOSS services because it hasn't been localized and people can't afford the bill either--and as such the government has many times censored Facebook and YouTube and other centralized systems.)
Isn’t the recommended approach to use application-level encryption in MQTT? That seems mostly fine to me for a spec with simplicity as a goal.
S/older/poorer/g

Here is the fiber map for a Minneapolis ISP laying their own fiber: https://usinternet.com/fiber/coverage-map/

The unwired parts of the city are where poor people live, the wired parts are where not poor people live.
It’s time to Change your Perspective on Productivity
Why can't you make a hardware switch for the microphone too? Both the PinePhone and Librem 5 have this.

I would like to see more and more of these physical kill switches, hopefully kind of like the silent switches on my iPhone, but maybe with little sliding locks to keep them in position.
What percentage of a Google engineer's salary do you think is taken up by benefits that don't scale with time/compensation? Looking at the data I can find on the web, it looks to me like a pretty small number.
Added benefit of webcam covers: if your office has mandatory cameras on, you can always turn on the video feed with the camera covered and just pretend you don't know why it isn't working.
This is a dumb incentive. You should encourage your employees to buy your competitor's cars.
The inverse of a conditional is not logically equivalent.
True,but you know what else grows at ridiculous rates?

Cancer.

Growth, especially at all costs, leads to a cancerous organization that cannabilizes itself.

But hey,the shareholders!
Are you unhappy with pandoc html input?
Yes, the Schuko is a good design. Probably the best, although it’s a bit inconveniently large for my tastes.

The modern US one (NEC) is probably the best trade off of size and safety (see my parallel comment on its physical design). Though I do think there is still too much use of two-prong plugs, despite the near ubiquity of grounded sockets these days.
In the US, there are a dozen or so legally-protected "engineer" title variants and professional designations like "professional engineer" (PE). My degree is accredited for the path of PE, but I would need a reason to go that route.

If it's unlisted, then it's fair to use by anyone:

https://en.wikipedia.org/wiki/List_of_professional_designati...
At 23 you can have some grand projects, but part of being well-rounded is dealing with seemingly insignificant stuff. We all have to come up with our own ideas about where the threshold should be, and it can be lots of trial and error with differing trade-offs.

If you're good at specialized work then you're probably set long term, which far outweighs short-term confirmation. Maybe nobody will ever value you as you do yourself, but if you keep focusing on improving your skills, you can rely on your own valuations to an extent, enough not to get shaken easily anyway.
"Binance has until Wednesday evening to confirm that it has removed all advertising and financial promotions, according to the FCA’s register. The exchange must also make clear on its website, social media channels and all other communications that it is no longer permitted to operate in the U.K."

"Binance is being probed by several agencies in the U.S., Bloomberg News reported in recent months. And Japan’s Financial Services Agency issued a warning against Binance recently, saying it offered crypto services without registration."
There are Daiso locations in the US (and I think many other countries now), at least in California. They aren't as good as the ones in Japan, and they have somewhat different items in one location than another. But they do have lots of interesting stuff, although most of it is $1.50 and up. The tool section is pretty neat as well as their stationary section.
I use a webcam cover, but I'm not worried about people hacking into my laptop.

What I'm defending against is one of the many apps I have to use for conferencing (Zoom, Google Meet, Bluejeans, Teams) starting up with the camera on when I'm not expecting it (and e.g. not wearing a shirt, my wife getting ready in the background, etc) for example because it was on last time I used that particular app.