skysight-inc/HackerNews huggingface dataset:
A somewhat suspicious aspect of these claims is that not all of the studies actually attempt to isolate poverty as a causal factor of tersity, rather than tersity and poverty sharing a causal factor (which a priori seems much more likely to me). One of the studies does use time-of-month vs tersity, to attempt to control for such shared factors, but time-of-month seems like a questionably accurate (if clever) proxy variable here.
Nor does he need to, because one art form is clearly superior to the other.

It's not like we are talking Raffaello paintings vs. Bernini sculptures here
Saying the database is encrypted when the database key has to sit in the RAM of the server is as disingenuous as saying this is proper way to lock up gems: https://i.imgur.com/0gBOPoQ.png

You're basically arguing that "you can't say it's not locked when the lock is right there"
i hope i aint being toxic

but i wonder what if the same db was written in c++, would it get a post in HN?
Is there a version with engine sound instead? :)
BLUF: government should attack vulnerabilities first, disabling systems until they are patched.

Very creative. It might also be done better with an open market where companies set the price there’re willing to pay for red hats.

This also requires some understanding of how zero-days come to exist. Briefly, insiders, many of them foreign assets developed from their earliest education and helped along the way to get to their target. There are some ‘in the wild’ discoveries, but the sophisticated attack chains do not rely on luck.

Given that, here’s another viewpoint: $70m in ransom might be a far better deal than exploitation by a nation state. It’s quite possible that these guys are actually defectors doing us a favor.

So, we should consider that security is something we’ll have to pay for one way or another, and we should seek to establish markets that make that cost predictable and minimize disruption. And yes, I do understand the moral hazard this would create, and I don’t have any good ideas to fix that right now.
It is the goal of the gov't contractors that the gov't has hired to do the actual work of the gov't
My original comment does not cover depression. Without going into the underlying biology, it is safe to say that it is exceedingly rare for individuals with depression to be able to break out, because there are biochemical or structural changes in the brain that require either substantial changes in the individual's environment, or clinical intervention to overcome.

There is also a fundamental difference between the experience of feeling happy and viewing something from a positive perspective. Even someone with depression could choose a positive interpretation for an potentially saddening event, but that choice alone would be unlikely to result in the experience of happiness, precisely because depression impacts the very ability to experience happiness, it is something more fundamental. There is also the question of whether depression makes it difficult to pick positive interpretations for events, but that is orthogonal to the point here.
My guess: because most parsing uses the stack a lot, and the parsed language often allows arbitrary length inputs, both of which are connected to overflow problems, which in turn can often be exploited.
> The greatest threat facing humanity today isn't climate change. It's the current Republican Party

> I didn't attack any particular ideology.

Well, sorry, my fault, it just seemed that when you aligned anyone right of center with neo-Nazis that some people probably took it that way.
Care to give some sources for this claim? Even with some examples, it seems very vulnerable to the survival bias (examples where small flaws did not lead to a big blowdown are not paid attention to).
Gmail does all kinds of filtering on the incoming messages, such as detecting spam, malware and phishing. So it certainly isn't the case that they're just delivering every email to your inbox. Do they block misinfo? I genuinely have no idea.

But if it's not happening, it seems pretty obviously like an explicit product decision rather than some kind of regulatory requirement.
The uncomfortable heat/fan issue is what ultimately pushed me over the edge to become familiar with Kubernetes. Now I just offload the compute heavy tasks to a desktop in a different room.
Edge and Samsung Internet are both still Chrome.
The Android VPN app has just had wireguard added. It's not on the pc or iOS version I believe as of now
Because what are ideas in technology without adoption?

To your point, arguably not enough people have cared about climate issues for too long… It is only now that pressure is piling up on governments and corporations to change, and arguably it’s late and much remains to be done.

Similarly, the trends towards a gated web described in the article continue to grow.

I want more people to care because my rights and those of my loved ones are better protected if enough people care.

I also want people to care because I prefer to develop open web products and services, and the more demand there is for them, the easier designers and developers in the space can make a living.

Why would anyone not want more people to care?
And you will be jailed should you murder someone with a shield. But since the primary purpose of a shield is defense, it's assumed you will not use it as a blunt weapon. Buying a two handed longsword will definitely get you on some list, however.

Stop trying to find gotchas. Weapons (read: items whose primary goals are to inflict damage, maim, kill, injure, destroy) are and should be regulated.
Upthread you said: "Of course if you tried that I could immediately name you a real number, or a pair of them, for which your rule doesn't work."

That is false - you're actually unable to name these numbers for which the rule doesn't work. Instead you're just insisting we accept on faith the existence of these unnamable numbers.
Because people implement parsers in languages that don’t allow direct expression of grammars (e.g. C). To safely implement parsers you must choose either algebraic datatypes or continuation passing, and a lot of programmers choose neither. CPS is annoying in most languages. ADTs are the obvious choice but somehow in 2021 most people are using languages that don’t have them. If you write a parser in Haskell, for example, you’d have to mess up pretty badly and write totally non-idiomatic code to write a parser that crashes at all, let alone crashes in a way that compromises memory safety.
> forms cysts in the brain that remain for the rest of the life of the organism

where organism = mouse. We are neither mice nor live for one year and then die like mice do.
A few approaches to consider:

1) be fair and decide upon some value that should cover most cases, make the outliers suck it up, like some games kick those with higher pings
2) don't be fair and base the threshold of visibility on some predictions about the movement of the entities in the following ticks, based on their probable movement speeds, as well as the ping times of the each player; the player with the higher ping value might receive the position of the other about 10 frames earlier before they round a corner - imperfect, but should still avoid ESP across the map
3) don't be fair, base this tolerance on hidden metrics about how trustworthy each of the players is considered, based on whatever data about them you can get, a bit like hidden ELO - you can probably game or abuse this system with enough effort, but it shouldn't make a difference in the lives of most legit players, since it shouldn't matter whether a model that you're about to see was rendered 5 or 10 frames before you actually did
4) enforce regional matchmaking by default and only show servers with acceptable ping times for your system (if any at all)

As for RTS games, that should be even simpler - most have some sort of a fog of war mechanic. Given that, you could probably come up with some data structure to represent everything that's visible to your side (like an octree) and send all of the models within it, without worrying about checking individual positions.

As for warping: the exact same way as in any online game, probably by some interpolation. If you receive a position from the server, the entity should be visible at a certain position, if you do not, then it shouldn't be visible (or maybe send the position in which it should disappear, with an additional flag). If you don't get the data for a while, handle it however you would stale data - like ARMA 3 does with entities just standing around or other games with them running in place, which is pretty funny.
I worry that making voting more complicated and giving people more candidates to vote for might actually backfire.

We already see this in American primary elections where the incumbent runs against a half dozen or more “nobodies” and seems to win on name recognition and vote splitting alone.
The issue is that a lot of places are ran on thin profit margins. You would have to raise the price of goods, which then means you have to raise the quality of goods as well to outcompete highly optimized chain restaurants.
> There are a plethora of torts and laws where you will get sued or jailed for lying about something important (like a court matter) and in those cases the truth is a defense! That means a court decides what is true and what is false.

Yes. Courts do that. They decide on what the facts are, and on how the law applies to those facts.

I don't have a problem with a court doing that. I have a problem with Facebook doing that. Even more I have a problem with some government agency telling Facebook to do that (unless the government agency is a court, and they have a finding of fact on that particular issue).

And, "the reality-based community"? Was that the community that agreed that masks wouldn't help? Or was it the exact same community a month later, that said that masks would help? I mean, it's good that they're trying to follow the evidence. But no, I won't let them censor, because they've been wrong before, and will be again.
The paper mentions that the Colonies first started growing European hemp varieties but by the mid 1800s had largely switched to (more recently) Chinese origin hemp varieties. I hope your grandfather's seeds are original Colony day seeds and you get to find out some day for a low cost but based on this paper, chances are that it isn't :(.
I think "died by suicide" is a good phrasing; I'd prefer that to "took their own life" or "committed suicide".

But, yeah, as you say, that's not a good analogy. Barring a scenario like extreme drug influence or a total psychotic fugue, suicide is still generally an intentional or mostly intentional act, even if it may be an impulsive one. If you shoot and kill someone in a crime of passion, you're absolved of some blame, but not all of it. It may be the potentially deeply regrettable intentions of someone who's in a very bad state of mind, but unfortunately a lot of decisions a lot of people make fall into that category.

For me, the important bit is the clear, grave consequence ("killed"). My goal isn't to suggest blame should be put on anyone. I don't think such a term would work in English, but if there were something like "were killed by themselves" or "auto-killed", I would've said that, instead.

My intention was to just prevent sugarcoating it and hopefully slightly reduce the chance that a suicidal person might read it in an abstract or idyllic way. "Died", "passed away", "life taken", "perished", "succumbed", "departed", "deceased", and even "suicide" just don't have the same gravitas as "killed". I know that's partly because "killed" implies intentionality, but I think it's also because it also encompasses the visceral act of it truly happening. And the word itself has a visual and verbal harshness to it. It's not just that they were here and now they weren't; they were killed.
+1, I also found it hard to follow the thread here. For instance, they spend a lot of time on IP address scarcity, and then imply - without explaining why - that it has something to do with Facebook or Google's dominance. Is a lack of IP addresses really preventing folks from competing with the giants? No, FB and Google are huge because they provide more value and people want to use them, not because Ello or Ask Jeeves were starved for IP addresses.
Telegram messages do sometimes randomly go out of order, especially under bad network conditions.
There was a period from about 3 weeks to one week ago where I had crashes almost every day from Safari, Snapchat, and a few other apps. Maybe 1-3 times a day?
Yes, For example, nearly all job advertisements used to be in newspapers. Rivers of gold, they were called in the Australian print media. All that revenue is long gone from newspapers.
You are conflating needing information about player position with visibility of individual polygons.

Also you are forgetting that you just said that line of sight was done in hardware and you didn't explain how that would work for a server testing if shots actually hit.

> You can see this for yourself if you look at a game being run with wireframe rendering. You'll see it's in the same render node so it's still rendered

What does this even mean? What is "it" here and what is a "render node" ? There are hierarchies of transforms and players are going to be separate from the environment. This doesn't actually mean anything.

> it's just obscured by closer geometry. And it's how some cheats actually work - they basically turn the wireframe back on!

Yes, you are restating the context of what people are talking about, not what is actually being talked about, which is the timing of when the server should send visibility information, which is what your link is actually about.

Your link is actually directly contradicts what you are saying since it uses both an expanded bounding box based motion extrapolation and precomputed visibility, neither of which has anything to do with a z-buffer.
> Or I’m docked and the fact that it’s a laptop isn’t meaningful.

You might be underestimating the value in that. I’ve been working off of MacBooks since 2011, and for almost all of that time I’ve had them docked and hooked up to multiple monitors, and working just like a desktop.

But if I ever need to go anywhere, meet a client, travel, go to another room/office, I just unplug and go. If power goes, I don’t lose anything, the laptop is still running. Whatever happens, it’s all there with me, always. It’s not as comfortable when it’s on laptop mode but it’s better to have a less comfortable experience than not having it available at all.

It’s a portable desktop. And I love it. But yeah if you’re looking for workstation-level specs, then yeah, a laptop is never going to be enough.
This approach only works if you expect other people to do the same. I don't want to be thrown in prison for my beliefs. I'm not certain that "hey, we let you march in public" is going to stop fascists from throwing me in prison or outright killing me.
Not PC cases and not PC power supplies, and probably not PC RAM. ASIC-based miners are built like embedded systems. None of these parts could be reused for general purpose computation.
Wow! A good reason to hold off until all the kinks have been worked out.

Even with "secure boot" and "UEFI", I have no trouble installing other OSs on the latest Intel hardware from Microsoft, Supermicro, or Dell.
That isn’t really the case. Sha1 still isn’t broken in a particularly useful way. Md5 is still basically safe from pre-image attacks.
resounding yes. With an armed drone/robot being in the line of perceived danger instead of a police the police looses that "split second decision" argument that has been letting them to kill all those people just because the shadow looked like a gun instead of a say giraffe.

You remove police from the harms ways - you remove the glorification and their high-caste "above the law" status, and their union wouldn't have such huge political power, nor public support for those state budget crushing humongous pensions.

Also with a robot shooting precisely there would be no need for that "stopping power" BS with illegal under Geneva hollow point bullets killing that violently that the police so likes to use (driving end result more toward death due to large blood loss and tremendous tissue damage inflicted by the hollow point - all unnecessary really). The robot(s) can just precisely disable arms and/or legs with much less severe wounds (like police in some other countries do) using smaller caliber or even just an electric shock or temporarily motor nerve blocking agent, sleeping chemicals, etc.

Also the robots will treat people equally, and thus big people getting the same law enforcement treatment as the rest of us little people may force the big people to adjust the law enforcement toward more reasonable approach. (i mean for example why the corporate IT support sucks so much? Well, what you would expect giving that the execs have their separate IT. Imagine if they had to use the same IT as rank-and-file and the IT couldn't tell whether it is an exec or regular Shmoe :)
If I was big meat I'd sponsor this article.

Not sure if their marketing is that complex, but not sure what's worse, if they did or didn't.
Yes! I was about to post about this. One of my earliest game memories at school.
Same reason I have 3 fire extinguishers although I've never had a fire situation; you don't want to find yourself without if you suddenly need it.

Aer they over-armed, poorly trained, and often unreasonably paranoid? Yes. Being armed doesn't defend one against being surprised, and radios have saved far more police lives than guns on hips. But the work is by nature unpredictable, and the US is an unusually heavily armed society.

You're going to have a hard time recruiting or getting people to pay taxes for unarmed security. That gap is filled to some extent by community volunteers, but sadly that's not a very effective response in political terms.
Is that cynical? It seems like a reasonable guess. It was my first thought before even heading to the article or comments
> They've got initial kernel support in, which allows it to boot. However no drivers have been written yet, there's nothing ready in the userspace and it definitely doesn't have an installer.

Exactly my point as I have already said. We know it is not user ready but the parent comment is making as if it is already running on M1 Macs; which is hardly true.

To debunk the M1 Linux hype squad again, it does not work to the point of it being usable and will take months to get it 'user ready'.
Who do companies like ZDI sell early warnings to? I don't quite understand how a vulnerability could be worth more to them than the vendor who could fix it (assuming they don't somehow abuse the vulnerability).
Dudes, when I say "Speak English" I mean the OP should put it in simple terms that people who are not familiar with stock and performance related earnings for management and investors can understand.

It is gobbledydook to most of us unless HN readers have a better grasp of these issues than most.
What exactly is a rogue nation state? One that doesn’t follow rules?
>ADTs are the obvious choice but somehow in 2021 most people are using languages that don’t have them.

Isn't inheritance to create hierarchy enough? why?

Node
SubNode1 SubNode2
SubNode1.1 SubNode2.1
> iPhone theft has become super rare,

This is simply untrue. It may be hard to activate it, but it still has value for its screen, case, camera, and other parts.

https://cbslocal.com/2018/01/31/despite-anti-theft-features-...
Not sure about that. The ride I took in a model X was pretty uncomfortable for a $100k car. Turned me off Tesla as an option.
Looking back at the time this article was written, I used to believe the same things, that people would rise up, mesh networks were going to change the world, and the distributed web was going to change everything.

I ran IPFS nodes, I was on cjdns (Hyperborea network), I joined all alt sites trying to disrupt FB and whatnot (Diaspora, Friendica, Mastodon). I paid a lot more to my ISP to have no bandwidth caps (a key blocker for dweb technologies).

In the end, nobody came. Nobody else cared. The huge time sink that was necessary only to maintain these technologies was eating either on my work or my personal life. I wasn't even capable of convincing family members in 3 countries to use Signal or Wire instead of WhatsApp. So I gave up.

Every once in a while I take a peek into the dweb world, because I just love the technologies, but I see little to no movement. Outside folks like archive.org, few others have serious, production-quality systems based on dweb techs.

When I was a product lead, the most important question was "why". What problems are you trying to solve. And the problems need to be so clear, obvious and powerful that customers would be willing to pay to solve them.

As I see it now, even if the problems described in the article are real, the great majority of people don't care enough to make the effort required to change their habits.
I feel like the critical bug list being short is basically THE reason power users would go for Apple laptops.
1. In my case, VM image SSDs are formatted using LVM-Thin. Based on this, Proxmox automatically takes care of snapshotting the VM images for backups. It would work the same if you used ZFS for image storage.

2. No, I do not currently backup the Proxmox config. There is a good script here: https://github.com/DerDanilo/proxmox-stuff

3. If you install Proxmox on a "thin" filesystem (ZFS or LVM-Thin), then yes, you will get snapshot functionality for free. Note that you would have to configure this yourself - Proxmox does not expose a backup feature for its own config.

4. I have two NVMe SSDs. The first is 500GB and is split into two partitions: 100GB for the Proxmox install (LVM + ext4), and 400GB for VM images and containers (LVM-Thin). The second is 900GB and is fully used for VM images. Both are using LVM.
General human-level artificial intelligence is in our future
depending on your node.js version. nodejs has a cluster mode. before that tools like pm2 had cluster | loadbalancing modes. But yeah you can easily run as many instances of the node.js app on your 60 virtual cores. Let node use half of those. Then the rest for db, monitoring. Then have a load balance ie nginx.

--Edit
also node.js now has Workers e.g for instances where you need to do CPU bound work.
Remember node.js is really fast. most apps out there won't be able to use it to the max.
They're not wrong in principle: attacks do often start as implausible and then some other shortcut or weakness is found and bam, there is a realistic exploit out of something that was deemed completely infeasible.

I think in this context, it's a bit more nuanced. These shortcomings are fixed (I can't personally vouch for the correctness of the fix as I haven't looked at the source diff, but let's assume it's solid), so they're not left to linger and build on. There was also a more serious bug in the past though I forgot the details. If this is the worst they're finding now, I'm not so worried. What I hear of mtproto doesn't sound like bugs are compounding but rather like they're ironing our small (but not completely unimportant, of course) flaws. But of course we won't truly know if it's secure until someone finds a devastating attack.
>” When you talk about “allowing laws” it makes it sound as if we somehow got conned into letting them have these laws.”

This is a very Machiavellian and realpolitik take, so please keep that in mind. People in a democracy “allow” laws whenever they just continue to live normally. Sure, you can protest with signs and vote differently in the next election, but we know that’s not particularly effective at shaking the status quo.

What does “not allowing” a law look like? Civil disobedience, defiance, harassing politicians, and trying to force change. In essence, it’s average people and activists using every tool at their disposal to force the politicians to act differently. We saw plenty of this in 2020.