skysight-inc/HackerNews huggingface dataset:
VMD isn't the only method Intel has used to mess with how NVMe works. Their consumer chipsets going back at least to Kaby Lake had an even weirder "feature" that hid NVMe devices from PCIe enumeration and made them only accessible through proprietary interfaces on the chipset's SATA controller. Intel had to start using VMD on consumer platforms instead when AMD forced them to start providing more PCIe lanes from the CPU.
The US home ownership rate has bounced around about 65% for decades. There was a temporary spike during the real estate boom that ended in 2006. Now we're back close to the usual rate.

https://fred.stlouisfed.org/series/RHORUSQ156N

Homes are only expensive if you want to live in a popular urban area. In less fashionable areas they're still affordable for most families.
With respect to date and guests (though the latter is usually stated anyway), aren't you typically coming into the episode through some mechanism that provides you with that information?
Lobby for change in regulations to make it easier for all of us to change our behavior.
So, we have (at least) different evaluation orders, different meanings of the % operator (How are negative numbers handled?), different meanings of the / operator (is 10/3=3 or 3.3333 — notice that Python3 joins the 8.29e+12 fold!). This shows two things: 1) Even though it is syntactically correct in N different languages, it does not necessarily mean the same thing, and 2) floating-point math has many traps. Neither should be news to the HN readership.
> This is why American porn companies shy away from cheerleader outfits, or any other suggestion of highschools.

Lol I'm not sure if this is the case anymore? I've seen tons of "high-school-ish" professional produced porn completely with cheerleading outfits.
This is quite interesting. I'm writing this on their Librem 15 and can't recommend it enough. No problems with booting or anything. Battery life got short with time (but I never cared about it).

> Wifi had a range of maybe ten feet (not joking).

Purism is using the only existing WiFi card that works with free firmware. It is less performant than typical proprietary ones. If you don't care about your freedom strongly, you can replace the card (they are very cheap on ebay). Also, check Purism forums for such questions. It works better than "ten feet" for me.

> On the other hand, Pine64 is very focused on their hardware stack.

And the software is provided by Purism (Phosh, for most Pinephone users). Pinephone is great, I'm using it, too. But Librem 5 is much more performant. Many videos show it's working fine, except of the non-finished software (same as for Pinephone).
> I don't understand why Mozilla don't offer this themselves though, is it too complicated to put the effort in given the size of the userbase?

That's the short answer to the question.

A longer answer: the underlying Exchange protocol is another IMAP-level of complexity of protocol, and the IMAP protocol implementation in Thunderbird is itself running somewhere in the 50KLOC region. On top of that, the protocol itself (I believe) largely works in Outlook's not-a-regular-RFC 822-email-message representation, which means you need to build in a translation layer to make it work well. Finally, a lot of the logic in Thunderbird isn't really designed for pluggable account types, and that it's even possible to a degree is up to work that rkent and I did to make it barely possible for extensions to do so; incorporating the code in core would require properly fixing several of the places rather than continuing the various levels of hacks in place.

Now what's the benefit of adding it core? If you're using TB for your small/medium enterprise, then the better answer is to just switch on IMAP access on the server, which is much better supported in TB (and other clients). So the value-add is comparatively minimal, especially compared to doing something like supporting JMAP (which is somewhat closer to a sane modernization of IMAP than EWS is). It's going to rank lower priority than other fixes, then, especially given the technical debt TB suffers from.
Setting Slack Status for Remote Work
St. Gallen Uni kicks PhD candidate for tweets critical of China's Covid handling
(Edwin from Stripe here.) Just saw your email. I’m sorry for the trouble—we’re looking into this now.
Privacy is not something Apple, or any company, gives us. But it’s something they extract from us; by tracking us and harvesting data. If Apple were serious, as opposed to positioning themselves as less extractive than GFAM and others, they would not be taking this road. Yes, they say it’s on iCloud for now, but the signs are that it will be done client side in future. Whether you believe that will happen or not the risks are too high; so it’s prudent to assume the worst.

This is this a first step to "Detective in your Pocket", cloaked intentionally, or not, by a well-meaning objective. An objective we can all support. If you wanted to put in a thin wedge on distributed surveillance, where better to start? As pointed out CSAM filtering/scanning is already done so that’s not the issue here. There’s a big debate to be had, and being had, on the upsides/downsides and benefits/dangers of AI and false positives. That’s a huge issue in itself; but that’s not the biggest concern with this move. If Apple pushes on with this it’s a clear signal that they wish to march us all to a new world order with Distributed Surveillance, as a Service. A march in step with the drumbeat of your increasingly authoritarian (or if you are lucky or more generous, safety conscious) government.

I have signed the letter to express my very strong personal concerns but also as a CEO of a company that takes CSAM seriously and seeks to provide solutions, in search, without surveillance.
I'm claiming they use the content of your messages to profile you and better target their ads until they stopped this practice in 2017 in favour of reading your email "for better product personalisation".
Cold snaps in Europe and the USA right now end up killing quite a few people. Hundreds of lives directly lost because of this destabilization in developed countries is not unlikely. See the Texas cold snap for a really recent example. And further from that there will be a lot of economic damage and long term costs associated with such an extreme swing in average winter temperatures. Everything from housing to infrastructure isn't setup to cope with it.
I'm sort of surprised that Force Touch is still in Macs considering it was removed from the iPhone and Apple Watch. Then again, I suppose space is at less of a premium in a laptop/standalone trackpad.

Like the author I tend to only use it for looking up words on Mac, but I really miss it on the iPhone. The text selection functionality it offered was leagues ahead of the "hold space bar" feature they replaced it with.
"no code", "serverless"

Is anyone else annoyed by these terms?
I'd pay an annual subscription if it was supported and advanced like a real product. A viable alternative to chrome is worth money to me.
Where Your Money Goes: The Irish Government's Expenditure Data
Important due to natural gas being a bridge between coal and renewables for electrical generation. Nat gas price increases stoke demand for more renewables and energy storage.
Anecdotally, I don’t visualize my code, however there is a sense of distance and depth between things (in the functional sense, not the lexical sense).

I feel like this visualization goes a long way to showing the distance I feel when working on the code, but that’s only because the visualization captures the lexical distance and we generally group functionally close things together.
Exactly. I'd really pay for Firefox. But I don't want to sponsor their foundation even though I have a few times in the past. I'd just like to help with Firefox development.

I understand about the corporate/foundation split, but they could just sell 'subscriptions' that don't really give anything so they're basically donations. If the pencil pushers really insist something is given in return, they can make a cool subscriber badge in the app or something.

Right now they're focusing too much on their VPN stuff which isn't available here and I have no need for anyway.
I applaud Apple for this. It reaffirms the reasons why it's one of the few companies I feel strongly about. If you can't understand the logic of a decision like this, maybe you don't realize the mountain of suffering that is caused from people trading this material. I recommend listening to Sam Harris's podcast with Gabriel Dance (#213 - THE WORST EPIDEMIC) to get a better picture of the problem.

The main beef people seem to have here is the slippery slope argument. Binary choices are nice, I agree - but almost always they obscure a complex surface that deserves nuance.
A slight tangent, but what kind of hardware are you using for this kind of home lab setup?
Hopefully this is another configurable option that falls under the already very extensive family screen time feature. I understand where you're coming from and respect your position, but I fall on the opposite side. This is something I do want for my kid.
Anyone have a sense of how much of a problem this is?

It's not surprising that a network can be fooled by small input changes, but if some image preprocessing is enough to solve this It's not a big problem.

On the other hand, if I can make a sign that looks like a stop sign to people but looks like a road work sign to a tesla, that's obviously a big deal.

These slides touch on the difference by saying that physical examples of adversarial inputs are harder, and they mention some mitigation techniques, but they don't seem to really quantify how effective mitigation is in real world scenarios.
Having a podcast makes you very aware of verbal tics, including your own. I don't knock myself out over it but I typically spend a couple hours on a podcast removing umms, pauses, general verbal stumbles, etc.
All Work and No Play (2021)
In this context, “imminent” can be 20-100 years.

Here’s a graph of historic CO2 levels over recent geological history, note that 2008 and (forecasts for) 2100 are the same column of pixels: https://blueskiesmeteorology.com/carbon-dioxide-at-400-ppm-w...
There’s a big difference between password reset rules, and giving third-parties access to emails and calendar.

There is nothing draconian about restricting IMAP - any app could exfiltrate confidential emails once granted access. It’s a very sane rule to disallow everything except webmail or first party apps.
Guess I'll just keep my spyPhone then. /s
Regulators are aware and are creating rules to prevent this. For example, the upcoming EU AI law requires companies to provide a detailed explanation for eg credit scoring if requested.
Unpopular truth time: don't have kids. That's any given individual's biggest impact to the environment... creating more mouths to feed. If you insist that you need to raise a family, there are plenty of kids out there that need adopting.
You are correct, and that's the classic rationale for "MVP."

But I also follow a development methodology that I call "paving the bare spots."[0] It adjusts the design, as the project progresses. Not for the faint of heart. It means that I may toss out a month's work, because it does not fit the user experience (which is under constant revision). We have also made a couple of major pivots, during the project, to fit new realities.

I have probably tossed out three months' worth of work, as the project has progressed. Happy to do so. The best code, is the code I don't write.

The nice thing is, is that the product is constantly at "ship" Quality. Makes demos, user testing, and begging for money, easier.

[0] https://littlegreenviper.com/miscellany/the-road-most-travel...
Anything for the children!!

I think that earnest acceptance of “well, it’s for a good cause” style arguments indicates a severely stunted ability to generalize: either to generalize applications of the technology (it works on any proscribed content, not just stuff people generally agree is bad) or to generalize outcomes of this kind of corporate behavior (Apple will continue to actively spy on their customers as long as they can come up with a tenuous justification for it).
Suppose Apple flags some image in iCloud using a hash that was probably sent from the device. Do they currently have the capability to decrypt the image to check if the content is actually illegal before reporting it to the authorities without needing access to the physical device?

(Not trying to make a counter-argument to your comment. I genuinely don't get this part).
Take that, downvoters! :-D

Myself, I'm so old I genuinely still think of that first when I see the string "M1". (Also, I hear it's a motorway in England.) So I thought it could be worth mentioning as A) a reminder that headlines could be clearer, and B) an interesting tidbit of knowledge for those who weren't familiar with what else the name could refer to.
"I thought about writing an email to these people, let them know about the vulnerabilities in their code, and the bad practices they have, but I didn’t at this point. I felt like I was able to find more things regarding this company."

Oof, that's bad behavior. I wouldn't be proudly blogging about this.
right. it was a noticeable pain point in early versions so they fixed good and hard for the last few.
I have used Thunderbird at some point in my job, and I might say that it is not the easiest to set up, but it makes the job done.
Office365 supports Kerberos with IMAP, which would be the proper thing to do anyways. Giving passwords to a browser or email application is wrong.
Heroku is by far the easiest and cheapest (free for light usage) way to get a Rails app into production.

Heroku‘a preference is Postgres over SQLite: https://devcenter.heroku.com/articles/sqlite3
Developers Should Treat Job Interviews Like a First Date
Well, the market does not select for low quality, it just selects for an attribute that often coincides with low quality, like time to market or low cost.
> I guess the only pushback is that apple has decided to do it on-device.

This is exactly what my problem is. They are using my CPU, battery time and network bandwidth to do this when they should be using their own resources. I know I can turn off iCloud but I am paying for that and we already have an agreement in place.

Honestly, it's the only concrete thing to complain about. Every other complaint is based on a what-if, slippery slope concern.

Of course, as per usual, nobody agrees with me here on HN... but that's fine with me because they simply don't reply which lets me know that they don't have any good arguments against my PoV.
I just got an iPhone 12 a couple months ago because “Hey it’s definitely more private than google”, better control of app permissions, and nice hardware.

Seems unclear what the alternative is now. The Linux phones I’ve looked at have a lot of catching up to do.
While Postgres works fine on macs, being able to run MySQL in a docker container and not have to deal with actually keeping it running on our macs has been a huge time saver.
Just like other malware. Identify it. Isolate it. Remove it.
Yes, this crosses all the lines. You can debate the finer points of the SQL injection bit, but the moment he got into Rocket Chat admin and started gratuitously stealing employee cookies, there's just no way to paint that any color other than black.

As his bio states, he's a software engineer - clearly not a security professional, because he's steamrolling right through all infosec ethics.

A quick Google search for his username yields his GitHub with his real name, and he has a LinkedIn. He graduated from the same university as me.

Blackhat is not a good hobby, especially not with no opsec.
> This defeatist attitude is not helpful.

Maybe, but it's the truth. It's impossible Apple didn't think this through. They did, and they made a decision, and Google will do the exact same thing in 6 months if not earlier.
I am a bit disappointed that no one has mentioned a big problem with all these machines: security. Most of these items were developed by companies with only limited experience in security. They offer a tempting attack surface for attackers. Once they are compromised they can be used to attack other devices in your network. Most of them run proprietary software, so it is not possible to verify its code. They require that the network is correctly configured which is not at all easy. There have already been a lot of incidents where surveillance cameras were exposed on the internet.
You are making a strawman.

If people forget lessons from the past and redo the same mistakes over and over this is the opposite of technology moving forward. It hampers progress. This is why it's called "reinventing the wheel".

Yet, if you want an extreme example here's RISC-V *currently* adding support for vector instructions.

Introduced on DEC Vax in 1970 and forgotten for a good while.

https://riscv.org/wp-content/uploads/2015/06/riscv-vector-wo...
It uses about half a GB of ram when actively running on my system. CPU usage is fine except when I sync an IMAP folder that has over 10k or so messages, at which point it does pin one CPU.

[edit]

I noticed I'm running it with "java -Xmx512M" which probably explains the half-GB of ram usage. It's possible that if I increased that value it would perform better with large folders, but I keep my inbox fairly reasonable and I don't care if the other folders take a bit of time to sync.
Does good faith research in the public interest justify collecting any data through any means and storing it in any way you like ?
On paper fb seems ridiculous but I don’t want to assume that said researchers collected and stored data appropriately. Those skills aren’t necessarily available to them easily
One interesting fact is that minikube actually used to be very similar to k3s. (I used to be a maintainer of minikube)

We called it localkube, and it was an all-in-one binary with features stripped out that ran the kubelet, apiserver, kube-proxy, etcd, and other components as Go routines. Eventually it had to be removed - upstream k8s was moving too fast, and there were fundamental issues that couldn't be fixed without large patches (TPRs, the predecessor to CRDs were one).

The problem with this approach is that it requires a ton of maintenance and there can be subtle bugs that come up.

The other distinction not found on this list is that only Docker for Desktop and minikube are cross-platform solutions. Running Kubernetes and docker on Linux is somewhat trivial, but managing a lightweight virtual machine and adding that extra layer of abstraction is what makes it really difficult.
On second thought, there is one minor annoyance with Haskell: Most companies don’t release an API client for it, so I often have to make the HTTP calls myself to various third party services.
The dell and lenovo laptops are nowhere the quality of the apple machines, sadly.

I have a maxed out xps and it is a downgrade in all respects but privacy. :/
Privacy fears is not the only reason why contact tracing apps failed
I hate the fact that you didn't even bother looking up your claims, because you don't really understand the law. And the fact that I had to just spent 15 minutes on correcting you.

Maternity leave is 90 days( Article 74 (Protection of Pregnant Women and Nursing Mothers [0]), paternity leave is actually 10 days( Article 18-2 Paternity Leave [1]).

What you're referring to is CHAPTER III-2 assistance for work-family balance. And it only applies "provided, That this shall not apply to cases prescribed by Presidential Decree, such as where it is impossible to employ his or her substitute or where the normal operation of business is significantly impeded"[1]. The burden of proof like always is on the employee.

And while you can't get fired during(provided the presidential decree doesn't apply to you), the employee may still try to get rid of you after you did it. But this also needs explaining that people in South Korea oftentimes stay with their employer a lifetime, that 1 year maybe chosen across 8 years of the Childs birth, and it's unlikely that in Asian culture someone will dare taking it in the first year of their employment.

[0] https://elaw.klri.re.kr/eng_service/lawView.do?hseq=25437&la...

[1] https://elaw.klri.re.kr/kor_service/lawView.do?lang=ENG&hseq...
Fight forest wildfires, boost biodiversity with Indigenous Cultural Burning
Here's the diff in Pastebin: https://pastebin.com/wT8gXtBJ

One just clones the single word, rather than cloning the whole words vector.

Something that can also be improved in the code above (I've done the most minimal change) is to move the Vector instantiation outside the for loop, since print_translations() guarantees that the vector has the same content before/after invocation.
> You're correct, that is a recent thing and it's because software vendors (Microsoft, etc) are trying to make their delivery system the same for all supported platforms

I don't think the state of Linux package management has anything to do with Microsoft.
Also, I assume there is a special exception for Jewish families of German descent who were unfairly stripped of their nationality during the National Socialist period (early 1940s). There is a programme to help people re-gain their citizenship. I've read a few long-form jounalism articles (in English) about people who don't speak German
and are not German residents applying under this programme.
The Reggit site plan has been upgraded and should load a little faster now.

Also, I'm not technical so I am probably not the best equipped to answer technical comments.

Thanks for all the feedback, both positive and negative. This has been quite the experience.
Yes that. I'd rather take them back to the Apple store and have a large fire out the front while holding up a doom saying sign about their laughable privacy stance, but that'd detract from the point.
Hash collisions are theoretically impossible. It's a completely different issue than a NN misclassifying an image. It reflects poorly on the author that they made this argument.
Surely there's a sense in which the precise meaning of "greedy Frenchmen" still exists? It's obviously a bit difficult to discuss without context, but entirely discarding the accurate meaning based on there being "questions about the motive of the speaker" seems, I dunno, hasty? "I helped my uncle jack off a horse" still has two meanings, even though only one of them is the punchline.

My point, linguistically, is just that "<adjective> <group>" paradoxically both qualifies "<group>" and also links "<adjective>" and "<group>". I think that is just how language works, (I'm admittedly not a proper linguist and kind of freestyling). I think that's true of "greedy Frenchmen", "fundamentalist Christians", "fundamentalist Muslims", "toxic masculinity", "gold-digging women", and, well, just in general.

Whether it matters, whether you care, and what you want to do about it, are separate questions. But I think it's useful to understand that language functions that way, whether you like it or not. I don't think these phrases should be verboten, but I do think it's good to understand what it is you're communicating. Even if what's being understood is not what you intended when you transmitted it, I think communication entails a responsibility for the speaker to consider the impact of their speech on the listener.

Completely honestly I'm a bit bewildered by your bewilderment. While it's obviously a huge, toxic rabbit hole and I don't really want to go there, I think perhaps you're not appreciating that people have genuine sensitivities about things you presumably don't. Maybe if I put it like this: There are contexts in which "toxic masculinity" or "fundamentalist Christians" aren't going to land well, and some people spend a lot of time in those contexts.