skysight-inc/HackerNews huggingface dataset:
not to get too off-topic but does it feel like Signal is more or less a rudderless ship these days?

nobody asked for this sort of thing, just like no one asked for signals bizarre crypto currency or the security passphrase stuff that comes with a weekly reminder. what we did ask for was a full post-mortem of the outage that crippled the service six months ago, and a better more consistent (and buildable) source code released to the git repo regularly but we still didnt get those.

we've pushed (albeit for a while now) for a decentralized signal...one that would arguably be more resilient and reliable, but still havent seen it. It feels like the projects just doing whatever Moxie wants.
I would like to preemptively distance myself from this guy even though i never met him. Need to keep this as public record
I love that KeePass works with pretty much whatever sync service you prefer. Personally, I use it with Google Drive and it even works with Android/iOS clients. However, would definitely recommend KeePassXC for desktop.
> No, theorems are not scary things mathematicians do. For programmers, they’re more like unit tests, except they can involve symbols, allowing you to cover infinitely many test cases. If you like unit tests, you’ll love theorems.

It's a little more complicated than that. On the one hand, it is true that a theorem can be more exhaustive than a test, but on the other hand, a test can be black box on any chosen scale while a proof cannot. While a test could assert that, foo(3) = 5 and a theorem could assert that ∀ n ∈ Nat . foo(n) = 2n-1, the test case is the same regardless of how complex foo is, while proving the theorem requires examining foo's inner workings (and changing the proof when the implementation changes), and the effort does not scale kindly with the size of foo [1].

If proving theorems were really like unit tests only stronger, we'd prove our programs all the time, where in reality, the only programs ever proven correct (with respect to some specification) using proof assistants corresponded to fewer than 10KLOC of C, took years of effort by well-trained experts, and even then required extreme simplification and a limited choice of algorithms to keep proofs manageable. Research into formal methods -- using deductive proofs written with proof assistants or many other more automated methods -- is largely if not mostly about managing what you want to know about your program with how costly it is to know it, and practitioners also make similar choices on their end.

[1]: Proofs of some properties do scale well with program size, but they are special properties, called inductive invariants or composable properties (an example is memory safety, which is why it's relatively easy to show that programs written in memory-safe languages, like most high-level languages these days, are memory-safe).
Why do you think it’s going to be slower, and in comparison to what?
I thought about it, but decided I’d miss 1Password’s 2FA auto-fill too much — it’s a huge timesaver for me.
> Why not distribute pre-built artifacts?

Back in the day (ahem), I’d have solved the problem by building new .deb or .rpm packages and letting the OS manage the updates for us. This is a lot harder for languages like node/js, ruby, python, etc… Dealing with a system level packages vs local packages is hard, so almost all management happens out-of-band. Older versions of packages was/is still an issue for many distro-managed libraries. And different projects have different requirements.

In the end, I’m largely okay with this… I’d rather have my choice in local OS and be able to work on my client of choice. I see the rise of containers was more of a response to heavyweight VMs as a dev environment.

But it’s good to remember — these are not unique problems and we’ve solved them all before.
There is a way to group a set of your videos by topic, they call the feature “playlists” and it was introduced in March 2021.
> Anyone with this attitude shouldn't be mentoring in the first place.

Nah, you can mentor young women just fine. The key is to always follow the Mike Pence rule. No reason not to, given a professional context.
Unfortunately, Bitwarden uses Electron as well.
Better UX. System keychain UI is very primitive…
I would have settled for an acknowledgement that users are demanding this change. No need to fake believing it’s a good thing for users or Facebook’s business, even. Simply: “Users are becoming increasingly concerned with how their data is processed. To meet this concern, and maintain personalization that benefits them, we…”

But they couldn’t muster that.
I have used the Dropbox sync for a long time.
The Linux app is electron as well.

They just like to say that they use Rust for the backend code. Rust for the backend of the client apps, React for the UI, wrapped in Electron.
> Another thing Tik Tok does is get rid of people who are obese, queer, or otherwise the target of harassment.

I cannot think of any better metaphor than a virtual American highschool with regard to Facebook or TikTok. The platforms have little to do with what they claim to deliver. That would be connecting with friends and more engaging YouTube. Instead most of the time a user just scrolls through an endless feed. Even worse there is even some kind of actual addicting factor since they are there to replace other actually better working platforms.
Sure it does. It does in the same way if you would use purple bold text in script font. The point is that it’s completely unnecessary.

Imagine emojis in IETF RFCs. No thanks.
Yeah I can totally understand that. I'm similar with the sync feature: the last thing I'm going to do is give them (or their 3rd party provider) my actual bank credentials. I would feel better if they supported some type of end-to-end encryption. I can also understand how, at least from a business perspective, most users probably don't care enough to not use it.
I mean your work suffers when you're distracted by pigeons and small children.
Usually evident from Activity Monitor, if you see <App name> Helper (GPU), then you have an Electron app running.
Kindlang, problem solved
I’ve very recently become a GitHub engineer, and I got pre-access to the beta too and I must say - my absolute favourite thing about CoseSpaces is being able to dev on a repo you don’t work on regularly and probably wouldn’t contribute if it meant having to set up environment etc. It’s really nice to just dip into a project with a working environment in seconds, make your PR and then move on.
Nix seems to have that ability via Disnix[1], though I haven't used it. Looking through the manual[2] it still looks like its in nix.

[1] https://github.com/svanderburg/disnix

[2] http://hydra.nixos.org/job/disnix/disnix-trunk/tarball/lates...
https://news.ycombinator.com/item?id=28143563
I'll recommend Elpass as a much, much better alternative.

Completely native to Mac and iOS, and sync via iCloud.

https://elpass.app
Paid third party password managers (without indemnification or other real skin in the game) have always been a dumb idea. This just makes it worse.
Can someone speak a little bit to the software toolchain for something like Axidraw? Is it SVG converted to GCode? I've build some of these types of machines for other pick and place tasks for my own needs, so just curious what in the opensourse world they are leveraging.
It depends on the model. There were some that would allow one to adjust the contrast/chroma/etc. Of course it was all analog circuits, that's what made it all so accessible! Also, it probably wouldn't blank out the entire blanking as you'd lose CC or Teletext data. I forget the exact lines the macrovision appear on, but it was much higher than 17. We also used to embed ID codes in the blanking that would not get interferred with from macrovision defeaters that was also above line 17, so that was probably also on lines below macro. man, this is some blast from the past type stuff.
> To be clear, referencing such things in a written work email would be regarded as grossly unprofessional no matter what the circumstances, but Laura being 17 and working for him at the time makes it quite outrageous.

I dunno. Ill-advised, sure. Inappropriate, maybe. I've had all kinds of personal conversations with coworkers and bosses, there was never anything more to it. Yes, that she was 17 means he should have been more professional about it, but in and of itself, without knowing the contents of the email, I don't think its any more strange than perfectly normal but personal conversations I've had with people I've worked with.

Without seeing the email and the context around which it was sent, I don't think we can judge in either direction based off the existence of the email alone.
What if I don't know what my sex thing is?
I guess I’m the outlier in being very happy with 1Password and fine with paying for the subscription service. Not only is 1Password the best password manager I’ve used, but it makes it seamless to share stuff with my wife. I don’t care if 8 is an Electron app either, considering I usually interact with it via the browser anyway with their extension. (Also I know that the majority of what they wrote for it is Rust and fast, and I generally trust the engineers to do a good job since they’ve done a good job with it in the past) Also they make a CLI tool for accessing passwords allowing you to integrate password management there: https://1password.com/downloads/command-line/
I guess I was dancing around the point a bit. I meant the definition of relative humidity uses dry/wet-bulb comparisons but we use all sorts of more pragmatic calibrated proxies to measure it in practice.
The writing was on the wall when they took VC money[1]. Anyone has a good guide to move to Bitwarden/Lastpass?

[1] https://techcrunch.com/2019/11/14/fourteen-years-after-launc...
Never had any reliability issues with iCloud Keychain since switching over 2-3 years ago, but obviously it's less featureful than 1Password. I liked how 1Password had a dedicated section for software licenses, but now just use a Notes note for that.
JetBrains IDEs can require some tweaking of the jvm startup params. Mostly initial and maximum heap size. The defaults are rather low and for projects with lots of dependencies it needs a lot of memory to keep indices and cache warm.

I usually run mine with at least 8GB max heap space (on a 32GB machine) and have a good experience with large Gradle projects.
That’s my setup too - but now I’m running into 1Password changes and the Dropbox free tier restrictions
In the study linked in the article, this is written: "depositional age is known through litho- and chemostratigraphic correlation with the 892 ± 13-Ma (Re–Os black shale) Boot Inlet Formation (Shaler Supergroup (Sg)), together with other geochronological constraints"
I was pretty stubborn at first, but honestly 7 has a lot of nice features, especially for families. You can also continue to use your old vault, though the announcement here seems kind of vague if this will continue to be true.
It may be a good idea to consider a new option unless they are explicitly planning on maintaining security updates for v7.
It's not a problem.

They have an established reputation.
It's electron-based too, Rust is used in a backend lib with FFI:
https://dteare.medium.com/behind-the-scenes-of-1password-for...
Bitwarden's UX is so frustrating. The Firefox extension has no memory to it.

For example, if you're logging into your credit card provider from Mint.com, you have to search your card, copy the username. when you paste the result on Mint, you lose the window, and you have to re-search for your card to get the password. Very frustrating.
I did not realize LastPass has access to your passwords...
Must have been a driveby. Cheers!
Been paying since 2017 and it’s totally worth it.
To me, native apps aren't so much an issue as is bloat. Despite having a Chromium based browser (Vivaldi), I am required to install Chromium all over again with every Electron app, and that really blows up both disk space and memory, considering the number of Electron apps these days. Another big issue is performance, most Electron based apps aren't optimised for performance making them slower than Chrome itself despite using more memory.
> the evolutionary reason for this

Tribes without sociopaths get killed by other tribes' sociopaths.
I'm not sure it's so "broken".

The consequences of breaking a rule are just that you have to... deal with the consequences of breaking that rule. To the extent that that rule has consequences, and the consequences are enforced. Like, if you stop showing up at your job because you disagree with the labor conditions, you get fired. But if everyone in the factory stops showing up at their job, it's suddenly called a "strike" and the apparatus for punishment doesn't work any more... maybe this time, the consequences for the same action are "you get a raise and better healthcare".

The rules for legislative bodies generally allow legislators to take more and more extreme actions to influence which laws get passed. As legislators take more extreme actions, the consequences get correspondingly more severe.

This seems like "functioning as intended" to me. The absentee legislators have skin in the game... it's not like they can freely walk away from the legislature whenever they disagree with a law. Just like a striking factory worker can freely walk away from their job at the factory and go on strike. These more extreme actions fizzle out, force the other side to reach a compromise, or backfire.

The idea that people "should" just sit down and talk things out doesn't scan, IMO. These people are accountable to the people who elected them first, and the legislative body second.
In some places, the age of consent is 17 (or lower), so without physical coercion, Aubrey may not have a legal leg to stand on depending on the content of the message.
Things that are not strictly illegal may still be unethical. Do you feel that individuals should never raise awareness about unethical behavior unless it is illegal?
Bitwarden all the way. I've never had a single issue at all with them, and it always just works which for me is the single most important feature
Damn. This is a huge mistake. I've used 1password for over a decade. I will happily buy an upgrade license. I just don't want another subscription to my credit card. This is rent seeking!

Maybe I'll try bitwarden.
No we don't.

But now that you've let the cat out of the bag, we might learn how to fake it. ;)
I was talking 'competence' not 'freedom.'

You arguing for more/better regulation speaks to the lack of competence in CA considering the time scales these issues have been ongoing.
> and have a local instance of GitHub.com running in a half-day’s time.

This is totally separate from the gist of this post, but I personally think companies should optimize this number into the ground. It would be awesome to join a microservices company that has an install/running time of 15 minutes. If some company had that level of speed, it would mean developing new features is probably pretty fast too. Not necessarily, but one of the biggest obstacles I think most developers face is not running the entire stack locally. Instead in a lot of companies they commit/push things to a branch and tell their CI/CD to build it out. While that might be useful in some companies, I think the ultimate awesome sauce for a development team is entire product running and editable locally.
Using cryptocurrencies prevents your funds being frozen or seized until a couple of masked men come around and beat it out of you with a $5 wrench.

Eventually, somewhere, you have to spend money or take delivery of goods or services rendered. I don't think you can buttress that.
-Multiplaform support

-Password sharing

There’s some nice “sanity checks” on all passwords, manual or generated, like reused password warnings and by default it checks your logins at haveibeenpwned, which is a nice to have.
I was very confused by this at first! Clearly you know what you're talking about, so I struggled a minute to walk through the math.

My super-naive approach is to say: infinitely thin walls would mean 50x50=2500m^2, but having 0.2m walls would make it really 49.6x49.6=2460.16m^2, so basically what you said. 2m walls would make it 46x46=2116m^2, so again, pretty much what you said.

So I don't disagree on the math, but I guess I'm not sure about how much of an issue that is, especially when other factors are considered, such as:

Generally either a building has a little space to expand outward in a given direction or it's smack against another building in which case that seems like more of an interior wall, not needing to be 2m thick. Right? Maybe that's where I'm lost. Like, you're talking about a 10m wide building, but I'm thinking that a 10m wide building probably already abuts a building on each side, so no airflow there, so no need for 2m walls. Whichever sides do not abut another building, and therefore might get airflow, would need a 2m wall, but it seems likely that could happen by expanding the footprint more easily than by shrinking the interior.

I'm sure there are exceptions, but am I way off-base? I might be.
How about they go and f** right off with that BS!?
Snapchat already has the notion of disappearing messages (or at least media), and it has remained extremely popular among the young crowd who want to share things with their peers that they don't want recorded.

It's not a super alien concept, but it requires getting used to a new social norm. It is difficult, but I don't think one can really get it without actually embracing the concept without questioning it.
So how do you edit media files, using some ssh fuse mount magic ? What happen when you need to work from a shitty internet network ? In train ?
Same situation here. I guess my setup will break once they remove dropbox sync from the android app.
(I'm not heavily experienced with Lambda but) I don't think you're in too bad a position, at least from what I've seen, as there does seem to be a portability story wrt those serverless functions.

The objection here isn't to hosting per-se – most companies aren't in the business of maintaining PostgreSQL and should consider outsourcing that task early on. If your host of choice shuts down, that's a standard service, you can dump and restore your DB and move on. Annoying but NBD.

The danger with jamstack or BaaS or similar approaches is working yourself into a place where a proprietary service API is baked into your product as a critical, fundamental dependency; if and when the host shuts down, you're in extreme trouble. That's what I'd heavily caution against.

(There's an argument that when the proprietary service is run by an MS or AWS or Google "they won't go bankrupt" so there's no risk, but even then those companies shift priorities and shut down services not infrequently).
I care increasingly less about "crowd sourced" reviews. Realizing their (usual absence of) quality, I already started only looking at the bad reviews, with a critical eye to check if the concern is a) sensible in the first place, and b) relevant to me. But as the article demonstrates, those bad reviews might just be extortion anyway. Similarly, the good ones may be gaming metrics, and even for those that are genuine, I just don't see much value in a one paragraph blurb from "random user 1337".

I now tend to get my reviews from e.g. Wirecutter (for products), critics that I seem to be aligned with in taste (for books and media), or generally whatever source I consider trustworthy and relevant for a given subject. The important part is that there usually is an identity of sorts attached, with editorial guidelines or maybe just a certain consistent personality. And if I see that that source increasingly diverges from what I'm looking for, I can drop it from what I consider relevant.

For authors, and maybe generally, the problem is that crowd sourced reviews have largely gotten the norm, and their success is at least partly dependent on pleasing (or placating) that crowd.
I've been using KeePass with Syncthing for some time. No problem if you only need to update the database from a single location and access as read-only from the rest, but there are also solutions for shared updating.
Thank you for your kind words. Yes, actually that was one of the reasons we came up with the app, my co-founder has an 8 year old daughter and I remember she said "No kids want to be on Zoom". While Zoom is terrific for our remote team, we hope to bring something more for teaching and learning. Definitely when the time comes, we will approach schools districts and hopefully over the challenge of school district IT!
So if you do an interactive rebase, it's pretty easy to review the past few commits and either keep each commit or squash it in with the previous one.
Have you seen any projects/code that actually use the BBB PRU's to feed NTP? I have a Pi that can get pretty good stats (Chrony reports sub-microsecond) from GPS PPS with only one kernel flag change but I've always wanted to use the spare BBB I have laying around because it seems like it'd be superior. I've seen people talk about using the PRUs for it, but never actually seen anybody document how to do it and I don't have the time nor expertise to hack on it myself, at least not without some hand holding.
Thanks. It's interesting that this hasn't gotten as much attention as the Apple update.
Unit tests are theorems too! When you compute `Test(x)` and check it's `true` you have proven the theorem `Test(x) == true`. However that's only about a specific choice of `x`. Theorems allow you to use math to test all choices of `x` and cover infinitely many test cases.

In theory you could even write an unit test and offer a bounty to the first to write a function that's proven to pass it. So you wouldn't need to write it or review the results for correctness.
right on man! very nice projects!!

here's something in a similar vein:
https://peteshadbolt.co.uk/posts/goldfish/
I use 1Password, and migrated over to their subscription service some time ago. A password manager seems like the best overall option at this time.

However, given they have all the password for many people, how are they not one of the biggest targets in the world? In their old Dropbox model, I understood the security model. In the service model it's moved to "Just Trust Us".

Is there anyone who can help me understand how this model is secure?
You have no conception of how useless if not outright hostile police are to this kind of issue. In this case, the two accusers took the exactly correct action: once they compared experiences and realized there was a pattern here, not a one off isolated mistake, they raised the issue with the organization. The organization is taking what they're saying seriously enough to retain an independent investigator, though almost certainly their ultimate goal is organizational CYA.
> The keyboard on the device? It doesn’t work. Instead, you can use an on-screen virtual keyboard or plug in a USB keyboard for games or other activities that require typing.

That's disappointing... maybe understandable because it's a miniature model that would be hard to type on anyway. But without a functional keyboard it's all too obvious that it's really just an emulator packaged in a shape resembling the Amiga 500.
This looks very nice, congratulations! I've been using HTMX [0], and I think having frameworks that let you have interactivity without having to write Javascript are very powerful.

[0] https://htmx.org/
I've never been one to go 8 hours straight. The refresher pays off in the long run. Not to say my way of working is any better, but the things get done and I'm more satisfied with my work life balance.

And with us soon going back to home schooling (thanks delta...) children happily playing outside is much less distracting than pent up children yelling inside. And mama can't do it all.
No, but Aubrey confirms it:

> "Laura references an email I wrote - inadvisedly, for sure, and which I unreservedly regret - to her when she was 17"