skysight-inc/HackerNews huggingface dataset:
The problem is that it's just that - the feeling of being seen and understood - the whole point is that there is no actual interaction with you. Depending on your life situation, you can keep up the delusion for quite a while and be happy with it (like the guy who happened an anime character) - things get problematic once you require some actual understanding and life advice.

Even in interactive context, things are treacherous. Sure, you can have this online community who totally get you, who you can talk to about anything and get back compassion, support and useful advice - but do you have any idea who those people actually are, what their life situations are, what values they have and what views they are basing that advice on?
Yes, of course your moral value is based, at least in large part, on what you read. How could it not be?!?

If you read nothing but bullshit, and furthermore not just read but "like" and share and amplify and spread it on, you not just "might as well be [a] second-class citizen", but absolutely reveal yourself to be a second-class human being.
Stirling engines can be run in reverse to act as a heat pump.

In fact, I have a two 25 liter coolers that utilize Stirling engines, they run silently and cycle between using 5 and 33 watts, averaging about 11 watts once the components the contents have settled on the 4 C set point.

Curious if anyone has looked into utilizing larger ones for cooling buildings.
Nope, the Assembly one is one line longer.
I saw the flash, and around three minutes later, heard the sound. It was impressive!

If I'm right about the time between the light and the sound, it was around ~60km/37mi away, but still clearly audible!
I have no horse in this race. I don't use Signal or any of its competitors, so allow me to ask some basic questions.

Could some users explain why you currently use Signal, and additionally, why you would continue to do so? It appears to me that not only this bug, but more importantly, the laissez-faire resolution of it is the opposite of what a privacy based app should do.

Based on their homepage, it looks like they're proud of the fact that Snowden uses the app. I'm interested if he, as a person with "real shit" to hide, still does.
I wonder if "VC funding" lives in a space between old-style business development and hierarchy, vs. new-style revenue expectations. We get middle-heavy startups (backbiting optional) trying to cover zillion dollar AWS bills by perpetually pretending they're on the verge of a Google-up. This is why they need $50MM rather than 1/10th that.
I really wish the West wasn't so hypocritical. Between Assange, Iraq and Guantanamo Bay, we show all the wrong people what to do. A pity and a shame. I hope Assange is freed soon and can get on with his life.
It's been a while since I read that book but I believe the message was also that money allowed groups to grow larger than the Dunbar number. In a small community, you can keep track of the favours with everyone. It's also highly likely that you'll see someone you help out with again so there is a good chance you'll get paid back.
You'd think and hope so. To be honest, I think they're trying to have their cake and eat it too - that's part of why I left. They wanted to grow and had all these strategies for doing so, but not nearly the resources to do it, and were unwilling to invest in getting more of them. We got a lot done with a little, but there were clear limitations.

It was an outlook I never quite understood. The core business was and is strong, reliably profitable and has made plenty of people quite wealthy and employed dozens more gainfully. Why mess with that success? What's in it for them? What's the point of (fake numbers) $100m in sales vs $50m when it comes to our 70-person company and small number of private, non-institutional owners?

But I am, of course, not the one who makes such decisions.
Why don't you call her Dr. Kiesenhofer then? Esp. Austrians love their titles.
> Did PGP and S/MIME fail? Services like ProtonMail use that tech to great effect. IMO it never hit the main stream because mainstream mail providers, etc want to read your email. There's some argument about usability but after using ProtonMail I don't buy those arguments.

In my personal experience, I've never seen anyone use PGP extensively for more than a month or so. The lack of PGP in most common mobile mail clients certainly doesn't help; switching email apps is annoying.

I don't think companies reading your email is the main incentive for companies to not implement PGP. It's perfectly possible to do PGP server side for free mail accounts like Gmail or Outlook, with proper PGP support in Outlook, Thunderbird, Apple Mail, etc.

PGP is complex, especially for people who don't know cryptography, and the lack of cloud sync of private keys and central account management makes it much harder to use than modern chat applications even for non-novice users.

I've never used ProtonMail and I don't know anyone who does, so my experience may not be representative. Then again, the fact I don't know anyone who uses ProtonMail might also indicate that PGP still hasn't gained that much market share.
Second time in under 2 weeks[0]. I wonder how much of this is related to people having paved over their lawns and gardens.

[0] https://www.bbc.co.uk/news/av/uk-57811613 from 12 July
I'd bet more American families kick their problem relatives out instead of caring for them within the household. "Not my responsibility."
Backend dev has basically become CRUD API development whereas products end up being differentiated by brand and UX polish.
This is the second time in a few weeks that there has been unprecedented surface water (rain, not river) induced flooding in many parts of London. An NYT article from 13th July:

https://www.nytimes.com/2021/07/13/world/europe/uk-london-fl...
See Polo Fishing ।Catching a Big Fish
Polo fishing
If you watch the reality show Alone, these wilderness survival experts try to do it to win $500k and most of them end up starving and dropping out.
By not allowing 3rd parties apps to coexist with official signal app. (Using same servers)
>So? Isn't that the point though? Having regular audits should have caught this issue? I thought this being 'open source' this would made this even easier.

You have it the wrong way. Testing, audits, and open source are all best practices. They should be done. None of them are guarantees of security.

Open source is not guarantee of finding all bugs, it's a necessity to allow anyone to look for bugs (and backdoors).

Audits can not be passed. They can only be failed. Kind of like how RNG tests can not be passed, they can only be failed. Example: Use SHAKE256 to extrude any keystream on initial value 0x00. It will not be secure, but it will pass any statistical test.

>this issue does not give me any more confidence in Signal being secure.

No application can actively prevent a bug like this. As an author of high assurance comms system, see what I wrote under threat model:

"If hardware such as computers/optocouplers user has bought is pre-compromised to the point it actively undermines the security of the user, TFC (or any other piece of software for that matter) is unable to provide security on that hardware."

This also applies to software issues that actively undermine the security of the user. So the thing is, a software bug that outputs sensitive data to wrong contact, can not be absolutely prevented. You would need a friendly MITM-guard node that runs a Google-grade image recognition algorithm that detects you're trying to output a legal document to the wrong client, or a nude to not-your-SO.

Again, bugs are unavoidable, what matters is the incident response, and is Signal actively trying to protect you from everyone, including themselves.

Another PoV: If you punitively fire people that get caught in social engineering pentests, you're replacing a person who now has real-life experience with social engineers, with someone who may or may not have such experience.

Sure, if the person fails multiple times, it's time to let them go, but Signal's reaction is indication of a good employee who takes personal responsibility in making sure it won't happen again.

I'm extremely careful about what I recommend, and I have serious trouble finding a way to agree with your assessment that just because a rare bug is open 6 months is of serious concern. It wasn't being sat on for six months. But you're very keen on giving that idea. Would you care to elaborate?
> If I am trying to figure out how to do something, I'd rather the help be focused on the thing, and not confuse my by adding the mysqli_real_escape_string stuff.

In this case, the help is fundamentally wrong. Other than "what is an example of a dumb programming mistake?", there aren't really questions to which a valid answer involves concatenating arbitrary strings and executing the result as an SQL command.

If your question is, "how do I execute an SQL command?", there are many better examples to use. If the question is, "how do I store user-supplied data in the database?", or "how do I query using user-supplied values", then the answer should not give you what amounts to an accidentally working hack.

SQL is a language of its own. It has a syntax and a grammar. When generating SQL from PHP (or any other language), you're switching languages - there must be a translation step involved. Any answer that doesn't bring this up explicitly is just wrong.
It makes one long for the days when the FDA was created to combat the use of fillers like sawdust...
You're moving the goalpost while also adding the artificial restriction that people can't cooperate.
Scientific illustration is different than abstract art or cubism or expressionism and has its own rules people. Deal with it.

And by the way, yes, some people like it.

But the biggest problem with the article is that even when lots of people blindly assume that is right, the main idea is wrong. It happens often when people try to use their philosophical ideas to explain nature. Yes, butterflies can spread their wings. If you try to force the wing opened in a impossible position it just will break.

https://www.youtube.com/watch?v=NguiKUyP9r4
> you have to be for something before you’re anti-anything.

I also think that it helps to understand and acknowledge anything you can agree with, don't understand, or can be agnostic about, in ideas you disagree with.

--

When I talk to friends or family with ideologies, I don't waste time trying to correct them.

I admit I don't agree, but focus on what I like about their arguments, and shoot down a low hanging irrational argument or two, to help them make their case better.

Every time we elevate the meta-goals of thinking clearly and being constructive about differences, we move a step closer to solving every other problem.
She looks like she’s <60yo. That’s remarkable
Indeed! But for every topic one chooses to study deeper, one also has to reject some other topics, simply due to the fact that every person has limited time on earth. Thus, one needs to choose wisely. There’s nothing wrong with spending time on learning the skills needed to do self-hosting. But I don’t believe everyone has the same preferences here. Just as not everyone will learn to brew beer, make furniture, sew clothes, make pottery, build a house, etc etc.

As Chaucer would have it: “The lyf so short, the craft so longe to lerne”
It helps that .ca domains are not available for all. As an individual, you need to be a Canadian citizen or permanent resident to purchase one. For companies, they need to have presence in Canada.
Interesting, but that kind of code can sometimes be made a lot faster with prefetch instructions, _mm_prefetch intrinsic in C++.
Do you have any data suggesting there has been rapid paving of lawns and gardens since last year?
> What happens when the US government's whole case against Assange collapses?

He walks a free man. Problematic as the American justice system is, Assange’s isolation was a function of his fugitive status. Nothing about U.S. detention per se.

It’s high time, either way, for both sides to be heard in court.
How would an end developer write code in one fashion (f.e. `let foo: string = "hello "`) while the compiler makes that work perfectly in every scenario? It would take a high amount of engineering effort compared to having one format that works well in the web to begin with.

How does a compiler ensure that when that string is passed to a Rust Wasm module it goes to it in UTF-8 and then when moments later the same string is passed by the same module to JS it goes over as WTF-16?

How will the compiler know where the string is being passed after compilation (at runtime)?

What new syntax would you propose for TypeScript to make it possible to work with all strings types? How would you keep TS/JS developer ergonomics up to par with what currently exists?

If Interface Types we're to consider web as a first class citizen (because Wasm originated as a web feature) then interop between Wasm modules and JS would considered of utmost importance, without making a web language ,(such as AssemblyScript) have to go through great lengths to engineer that aforementioned complication.
Not in Google maps on iOS though.
Search rules were written by hand and not left to an automatic process
I believe this article was cited in this paper which was featured on HN recently: https://osf.io/x4fk3/ (https://news.ycombinator.com/item?id=27936016). Two very opposing viewpoints...
This happens to me all the time in Messenger. Just locally though. Like if I sent an image and delete it from the phone, the app shows some other random image instead.
> The ultimate public support is the government, which is officials elected by... wait for it... THE PUBLIC.

Well if that's your definition of "public support", Apollo just barely had enough to succeed. The Lyndon B. Johnson Administration that came after JFK was actively defunding Apollo and trying to dismantle the space program.

Back to my original point, society didn't "collectively decide" to make moon landings happen. JFK made a few bold claims to boost his public image against Russia and his successors tried to dismantle said space program. If it weren't for the tenacious engineers and leaders at NASA, moon landings would not have happened. In other words, if the engineers/leaders at NASA were not passionate enough, LBJ would have succeeded at dismantling Apollo.
That is entirely dependent on your idea of "benefit" to society. Accurate pricing of futures means farmers benefit from a price that accurately reflects the supply and demand of their product. Strong liquidity means farmers can sell large volumes of product without much price slippage. If you take the time to understand what these traders do you'll understand that trading is not parasitic but actually generates value for both sides. What IS parasitic is hedge fund managers that charge fees but deliver subpar investment performance compared to index funds.

You refer to the oil futures issue last year as being negative for society but I argue it was actually positive for the productive members of society: because traders bought oil futures, the oil producers themselves were able to get guaranteed buyers for their oil even though there was very little demand. In effect the traders subsidized the uncertainty of pandemic ups and downs and the producers profited off the traders' loss. This is an example of futures working well because that oil otherwise would've been dumped or burned since the price was negative (just like wind farms stop operating when the price is negative or oil drillers burning natural gas because it's too expensive to transport).

Without futures farmers would have to buy price insurance through some sort of middleman insurance company, which is almost certainly more expensive than the market.
Depends. Temporary, e.g. for an event, can often be done (although usually by operating under someone elses license, not getting one from scratch), with 5G there's likely some interest in femtocell setups where afaik some states are looking into special local licensing. But generally yes, difficult club to get into.
It's a gray area. There are people who, with care and looking-after, can be useful-if-weird members of society, but who without that support would spiral out of control. "Crazy"/"not-crazy" isn't a binary.
Well, have fun paying premium for TLC
4,820 is a large enough sample size to be representative of the population within a few percentage points.
> "Cognitive distortions" are the only tools we have to reason about anything in the presence of limited information

No, clearly they aren't. But you know what does qualify as a cognitive distortion? That very statement[1]. The "only" way to reason about "anything" based on limited evidence? Really? I mean, Kalman and Bayes would maybe like to have words.

[1] I can see a few, but I'll go with "dichotomous" as the biggest mistake you made. You lept straight from "Sometimes these mental tools produce correct results" (which is true) to "These tools are the only way to produce correct results" (a ridiculous distortion).
> German press stays silent on this, again

It’s not pertinent. The journalistic draw of a years-old case and judicial mechanics. Everyone has a pet agenda that seems irresponsibly ignored by the media and the public. Procedural developments are rarely big news.
Well yes, maybe they should have put more people on it, from day one. But even though they have solid funding, doesn't mean they can throw it out the window.

And non reproducible bugs can be hard, even when you throw money at them.

But your quote was almost a textbook example of selective quoting, because you said, that they said they did a quick fix, when it really took over 6 months. But they did not say this - they said "once they pick up the scent" they delivered a quick fix. This is something very different.
Heya, great to see you pop up here! I gotta be honest -- I think EC2 (and, in general, doing computation in units of VMware/Xen-style virtual PCs) is the actual hipster compute substrate. AWS Lambda feels closer to cgi-bin from 1995, i.e. back when things still made sense. (Have you ever joined a tech company and been handed a 10 gigabyte VM image that uses a Vagrant pipeline to provision itself so you can get a working dev environment, except the pipeline only works if 100% of its 10,000 downloads succeed, so the whole thing is super-flaky, but nobody at the company knows because they only ran it once when they first joined and have just kept the same local dev VM ever since? That's what hipster compute means to me.)

All that aside, Cloudflare workers/fly.io/Fastly Compute@edge/Lucet/Google Cloud Run seem really cool, and the resulting work on Wasm and its ecosystem is fantastic, but they're also not exactly what excites me. Deploying code close to the edge (or "anywhere" in particular) isn't very important if the application only makes one round-trip. Even if my code is pure, it's not like fly.io is willing to sign a certificate saying, "We evaluated function <y> on input <z> and the correct answer is <x>, signed Fly Inc., and if you can prove us wrong in the next 10 years, our insurance company will pay you $1 million from our E&O policy." Which would really be cool. And, I don't know of people spinning up 4,000 nodes on those systems in 100 ms to do a 1-second-long computation. I haven't seen any of the providers or outsiders benchmarking the "burst-to-N,000-nodes latency" numbers averaged over many trials at various times of day. (We measured GKE a small number of times in the gg paper [fig. 7] and found it to be... really slow at that particular metric.)

I don't think we want to ignore locality! But I do want the OS to be able to secure access to thousands of cores in <1 second for <10 second duration workloads, and I think many applications would be willing to compromise on locality, or accept heterogeneous/irregular locality, in exchange for that. I'd still love visibility into the locality I end up with, I'd love not to have to do flaky NAT-traversal hacks to get direct communication among nodes, and I could imagine the application bidding more to persuade the infrastructure owner to provide computation in larger units (i.e. more cores on fewer machines, machines in a placement group with full bisection bandwidth, etc.), which is sort of where Lambda seems to be heading already.

(Long term, I don't really think applications should be renting cores and RAM per unit time and thinking about locality; I'd love to be dealing with the infrastructure provider in terms of some higher-level abstraction, because then you could imagine the provider might be genuinely incentivized to discover better ways of computing the same answer, to our mutual benefit.)
I'm guessing that the "soft, bulky stools" is really the limiting factor here.
Just because you don't comprehend vaccines (plural - you know there are multiple right?) doesn't mean that nobody does. There's no conceivable mechanism by which people would drop dead three years from now. And sure you can say "ah but what if we've missed something", but that argument applies equally to the banana I had for lunch - you can't prove it won't cause Armageddon in a hundred years! Maybe I should have played it safe and not eaten it?

At some point you have to draw a line and say yes, I understand how the world works well enough to make intelligent decisions. And if you don't, then listen to those who do.

(It should at least be clear to everyone that not vaccinating definitely kills people, right now, at scale. You're going to need a lot of evidence - specific, direct evidence - that the risk of bad consequences of vaccination is somehow worse than that.)
It’s funny, when it comes to something like, vaccines, we’re supposed to trust “government institutions”.

Then I wake up to this and I wonder, why should I t trust the government ?
Nah. Ignorance is what it is. The US is a lying country with lots of hidden agendas. Not sure there are better alternatives.
The US isn't the only country with homeless people. In much of Europe where people actually can literally go and obtain free social housing there are still sizeable homeless populations for exactly the reason OP pointed out, they cannot manage their day-to-day affairs because they are drug addicted or mentally ill.

In Germany we have about 50k people living on the streets. Technically none of those people need to be. They could all get the necessary financial aid.