skysight-inc/HackerNews huggingface dataset:
>Linux owners, were crying when trivial initd and trivial shell scripts, which are easy to read and understand in about an hour or two, were replaced by Systemd, which may take days just to read source.

Not sure I understand why you would cry about that, systemd is actually not a very complex project if you're used to low level C daemons. The most complicated part is the d-bus portions, but those are mostly a lot of boilerplate, and you should be understanding it anyway if you use a modern system with d-bus. Trivial initd and trivial shell scripts are also lacking in quite a bit of functionality compared to systemd, at least in my experience those would tend to grow until they became brittle and unmaintanable.
Do poor people not have a right to secure devices?

Should it be legal to make cars for poor people without airbags and seatbelts?

And are we really gonna argue that this idea would be for the benefit of the poor people?
Ask HN: Have you started getting “old-fashioned” spam in your Gmail account?
The last couple of weeks I've gotten ≈5 emails per day in my inbox about car insurance, that I owe money or can claim money, medicines for penile problems etc.

Badly spelled and looking like straight out of my 2000's spam folder.

I can't remember I last had such blatant spam get through Gmail's filters.

Have anyone noticed a similar uptick?
Thanks, I'm interested in this too.

I have seen talk about the issue of your restore image containing unpatched (or even zero day) vulnerabilities. So you need to worry about your restored systems quickly becoming compromised again.

Also that your backups should be pulled to an independent backup system instead of pushed so the compromised machine can't potentially ruin your backups. (Then you would need to wait longer for your off site backup to restore your backup.)

If you can't audit that it was simply a successful phishing attempt and you just need to revoke keys and passwords. I suppose a super expensive solution would be to use multiple operating systems and software platforms so you have a chance to get yourself back up and running on a different environment with different vulnerabilities that aren't being presently being attacked?

I'm excited to hear from someone who sounds like a professional.

I suppose this is really a more general question of how do I prevent remote code execution? Traffic analysis probably has to be done on an independent gateway? I assume that's hard in a large network vs botnet... Block Tor ips from any ports except your application/web ports? Because I'd like to support the good guys on Tor...
I think this is much more reasonable as well, for many kinds of devices. Either give people the ability to update the device themselves, or you have to supply updates. (I think 7 years is a bit much, but the duration is a quibble over a minor detail rather than a fundamental principle.)
Rails 7 will have three great answers to JavaScript in 2021
you don't deserve to be downvoted (this place is ridiculous) because saying that there's a "boy crying wolf" aspect is true, and it was the whole point of learning that story which point apparently some people missed.

but there is also a position I'd like to point out between the one most people here are taking ("NASA over-engineers every part individually to avoid failures")

and yours ("here's our reasonably expected life, but could come up short")

and that is: they need to set a bar that evaluates a reasonable amount of science they need to accomplish to justify the budget.

It's not the minimum number ("crashed in flames but we learned some things")

and it's not the gloriously optimistic number ("this thing's still going after 12 years, it's really worth it!")

and it's not a fake marketing expectations number ("we'll fake the budget numbers so we can razzle dazzle by blowing past the expectations")

rather it's just, "for X hundred million we expect to spend a month taking pics in every direction and gathering and analyzing some rocks from different promising places, and that mission alone is worth it" because that's what congress is approving
That moment when you realize that a multiplayer game is actually also a distributed database :)
Fine was the original alternative.
she anwers the title question in the last paragraph: "curiosity is everything, losing is a part of playing, and our opponents in life are less important than the choices we make ourselves."
I don't know why I expected more, guess I'm still prone to clickbait. Nonetheless, her story is interesting anyway. But she doesn't answer the real leading question of her story, which was whether she won against the misogynistic‎ Dan B. (quick google search didn't help me with that..).

Actually, the best advice in the article is in the middle: "don’t play when tired, stressed or distracted."
> If we go by this figure, Hyundai's EVs need to waste 10% of its energy on Si chips.

Most of it is not lost in the silicon, but in the interconnects (wiring and connectors) and motor(s).

SiC is better (more robust) than Si with high voltage, high current, and/or high temperature. Specifically, kilovolt-level, kiloamp-level, and temperatures above 150 celsius.

If you double your battery voltage from 400V (current standard) to 800V, you halve your resistive losses in the "wires" for the same electrical power demanded. Silicon MOSFETS that can withstand a kilovolt and a kiloamp are very big and very expensive.

You get more power delivered for the same power leaving the battery.

Size: SiC's very high thermal conductivity means less of a margin of safety for secondary breakdown. SiC tolerates higher current density (amps/square mm) than Si, so smaller devices are possible, saving mass.

Its temperature stability allows it to be sintered to the package heatsink--further improving heat removal. Tolerance for high temperatures means you need less mass and volume for heat dissipation structures.

Other efficiencies: With very high currents (kiloamp) and medium frequency switching, SiC IGBTs provide more benefits, because rather than being directly proportional to current as with MOSFETs, losses are proportional to the log of current.

Alternatively, doubling the battery voltage again to 1.5kV (and so halving the currents) might allow Hyundai to use more aluminium for the "wires", with a cost saving over copper.
Theylive.app
Hello everyone...
Telegram is full of ideas:
https://t.me/main_enginer
https://t.me/fabricos.
https://t.me/giflifehac.
It's incredible to me they managed to get it to fly at all considering how thin mars' atmosphere is.
> You don't fight this on the demand side. You fight it on the supply side.

I've actually wondered, greenhouse gasses aside, if the sheer amount of direct and incidental heat generation in a modern civilization, doesn't contribute to global warming. Even on 100% carbon-free electricity, when you run a 500-watt mining unit, it's still kicking out 499.99 watts worth of heat into the air.

> Take responsibility for your life. The government is not your friend.

What is the purpose of government if not to enforce laws and social standards like "don't swindle people"
I'm not sure that any significant number of people have switched phones due to lack of updates. It usually comes down to:

(1) Battery stops holding a charge

(2) The device gets damaged

(3) Cameras get a lot better
Then why would you bring up the nationalities of the folks working there instead of pointing out things about the quality that you find lacking as compared to the advertising?

There wasn't any of that there. The only detail in the complaint was about the non-Swiss folks working there. And I really, really don't understand how it just isn't low-key racism. Could you explain it better for me?
"If users decide that Facebook is too centralized, they can move to a different social network"
I very much hope Rust becomes popular in the embedded space... but other languages are better for apps IMO.

I'd rather use a click listener with TS/Kotlin/Swift than be forced into idiomatic Rust's architectural workarounds.

This project made the right call, using TS for the client.
Pedestrian would have the claim against the car driver surely, the car driver would be unable to blame the "autopilot", just like they can't blame cruise control today.
We may know the same devices - designed to run Flash Lite acceptably then made to just barely support HTML/JS with heroic engineering efforts later. Nobody believes how slow they are until they try.

I think if someone queries the DOM a lot on these things, especially in response to keypresses, they're in trouble whether or not they're doing it with jquery.
Yes, sorry. East Asia is what I meant. To be completely honest, I’m not sure if I read SE Asia somewhere or if I’ve always just thought of Taiwan as SE Asia for some reason. Mercator projections, maybe? Anyway, today I learned Taiwan is in East Asia, north of Southeast Asia.
This kind of app has the problem that people would use it 1-3 times and then just directly call whoever they liked to make the next appointment, cutting the app out of the deal.
It's slow, but so long as you don't do anything “out of the ordinary” (i.e. try to act like the average sort of person who would use Jira), it's decent enough to use. I've personally had no workflow issues, though I could tell there was something deeply wrong with the internals.

Then again, if you're only using the “ordinary” features, Jira doesn't have much advantage over any other bug tracker; Gitea can integrate with Jira just as well as with any other bug tracker, and well enough that the Jira / Confluence integration isn't necessary.

The Atlassian softwares are okay, but (from my limited experience) worse than their alternatives. On several occasions, I expected a bug, but it refreshed or redirected, and there wasn't a bug. I have found no bugs while using Jira, and not unusably many while using Confluence… but I can say the same for Gitea, GitHub, Gitlab and even Bugzilla. (Gitea's native issue tracker is actually good enough – and therefore better than Jira – for everything I ever used Jira for.)
Lately I have been surprised at how much solar and wind play the main role in most reports building pathways to carbon neutrality.

I always believed that the intermittency of solar and wind would be too problematic and that's why people advocated for nuclear energy. However in most recent pathways stamped as "realistic", it seems that nuclear stays pretty much at its current level and solar and wind grows exponentially.

Is intermittency and dispatchability a problem we can really overcome with DC long transmission lines, synthetic gaz, smarter energy consumption and batteries?

I have a hard time understanding to which extent each of those solutions can help solve the dispatch problem. I would love to be pointed out to some good up-to-date resources that go in-depth into that topic.
The do tell you this, up front, if you read.
> Yes it sounds like we're in agreement. We both think the ratio in tech "should" be closer to 50:50 than it is, in the sense that we think that biological differences are not sufficiently pronounced to explain the currently observed skew, and we should get rid of the bad pipeline effects and negative discrimination.

Exactly how I think about this too.

> Is your claim that men also show up more at the bottom of technical subjects for the same reasons? (and is that empirically true?)

My claim is that men tend to show up at the extremes of society for biological and societal reasons. The way I usually put it is "the glass ceiling comes with a glass floor". From my limited understanding of biology, one cause could be the higher testosterone in men which makes them more aggressive. This can lead to someone "crushing the competition", or someone living a life of crime and violence. I would imagine that men show up at the bottom of technial subjects too. Women in general succeed more in high school and college, but the top spots are still taken by men. From what I understand, the bottom spots are taken by men too.
Ah yes, that's true, thank you for trying. I didn't expose email on purpose. You are right LinkedIn would be the only way for now if you didn't want to post it publicly.
if I spend 3 months full time building a product, I have something of value, guaranteed. If I spend 3 months on interview prep, then I still have to start going through the cycles, and it will take another 3 months before I might have a job. No guarantees. Anyone can build something in a month, so the idea you have no time to build a side project is just BS. Especially if you can spend months grinding leetcode.
This ended in a cliffhanger.

We need to know what happened... Did she beat the final boss?
We tend to call this "blockchain", but it's a bit of an overloaded, abused and misunderstood term so it can help to be specific.
It's interviewing season I guess, so we'll see these posts complaining about interviews and algorithm questions for a few months.
This is one of the reasons why companies like Sysco and US Foods have been pushing more and more pre-prepped packaged menu items that restaurants can just heat up and serve. USF calls these Scoop items: https://www.usfoods.com/great-food/scoop-.html You may have noticed how lots of places, including mom and pop shops seem to suddenly have nearly identical menu items and it's partially because of this trend in the foodservice industry.

They are basically taking the economy of scale that a large chain previously exclusively had and bringing it to the market to street sales (e.g. mom & pop joints). They simply took what they were doing for institutional food service and expanded it because it's substantially more profitable for them than selling the raw ingredients.
There is a special place in hell for these cryptards.
It's dead either because my account is new, or because I mentioned a mix network.
> ...It flopped everywhere I promoted it...

Have you considered lowering the barrier-of-entry from $19? For what is effectively a journaling app, you're driving an incredible amount of margin out of a scenario where your audience has no incentive to pay.
The proliferation of this attitude...

https://www.amazon.com/Aint-No-making-2nd-Second/dp/B002NAUW...
Would love to see bridging.
You are correct; there are even tools to view this information. Perhaps these "refurbishers" know how to reset the health data stored in the SSD.
> They still don’t get to hand over your emails

This gets at the key tech question: what's the most they could do? (either in response to a legal order or for any other reason)

ProtonMails answer here is "not much"; they can log IPs and access times. Signal has a great write up about how they respond to warrants, and it's similar: just IP and last access time.

But is that really all?

Protonmail has a web app. This time, a court said "you must add server side logging for these specific accounts". Could a court also say "you must add client side logging for this specific account"? If so, could that come w a gag order such that only that one user gets served different code, almost impossible to detect?

That would let a user read their mail.

I am very curious whether the App Stores have ever served modified versions of apps to specific users in order to, for example, extract Signal messages.

Software update is a key problem, closely related to the
Ken Thompson "Reflections on Trusting Trust" thought experiment. I'm using a tool: how can I know for sure that I'm using the same copy everyone else has, not one that's been compromised?
Huh, practicing should definitely work also on Firefox. Could you give some more details. Does it work for you with Chrome? Does it work when you try the practice demo on the home page directly at keycombiner.com?

The only limitation with Firefox is that it does not support the navigator.keyboard API. So, the visual keyboard and some other advanced KeyCombiner features cannot show your system's keyboard layout but rather have to default to the US layout.
Diamonds are common in an economic sense, there's plenty to go around. But as far as planetary geology goes, diamond is a pretty small share of the crust. I suppose there may be large diamonds in the mantle, that would be cool to see.

But maybe it is similar across the galaxy, except for the odd moon-sized diamond here and there, a light dusting of micro-diamonds.
I just can’t get over how their billing model works. Making bills and locking account suddenly without a warning. It felt so big scam that I’m not coming back regardless of whatever the privacy is.
that's a good heuristic
How is network relevancy calculated? For example, if I'm AWPing the A-site door on Cache from mid, presumably, figuring out that the animation is relevant for me id non trivial.
> Yes, lightning network and centralized payment platforms exist on top of Bitcoin, but these defeat the purpose of bitcoin and add complexity.

It's important to note that the "centralization" of lightning (a statement that I somewhat disagree with, but can understand the basis of) doesn't mean that other parties can steal your money. You the sender decide what route your payment takes, and as such the worst a participant can do is block your payment from arriving at the destination. And, if this occurs, you can just find another route, or open a direct channel to the node you are trying to send to.
Repeating it is fine, but the longer time goes on where it’s repeated, the more the person proposing it looks like they think their opponents are just deficient not merely ignorant of the argument. The person here did us the favor of revealing their belief that their opponents are deficient, so that is helpful in reducing the weight of their post, but often this isn’t so obvious.
> Minecraft does doors right in comparably simple way, and I think few if any players have a problem with it

Ha. This is an amusing claim given that redstone, the whole complicated circuitry used in advanced Minecraft machines, was arguably added for the purpose of powering doors. Years of work have gone into all of the community-made piston doors of various sizes and features. And all interactive components like buttons and pressure plates have to have their signal duration balanced against how long it takes to walk through a door.

Even ignoring redstone, though, doors are complicated to design in the exact same ways. Which way do they swing open? Depends how you’re facing when you place them… unless the game detects double doors, and reverses the second one to match. And each door has to have a corresponding vertical trap door, which can either be flush with a floor or with a ceiling. Which way do trap doors open? Well, whichever way works best with the ladder below them. Oh, which means trap doors must also act like ladders. In fact, you can climb a wall of nothing but trap doors in the game.

What about water? Trap doors can be waterlogged, and that’s a common way to hide irrigation. But normal doors intentionally aren’t. Why? Because doors are the most common early-game tool for scuba diving - a placed door becomes a free pocket of air. Does it seem realistic? No, and maybe they could fix it, but then that would affect anyone who uses doors as entrances to underwater houses, as well as make scuba diving more difficult.

Players argue about the use of doors for diving; they argue about whether they should be able to shoot arrows through the windows in doors; they argue about whether every new tree should bring a new type of wood, and thus a new type of door.

Doors are hard, no matter how simple the game.
A cover letter won't tell you whether the candidate can get anything done. A small coding project will.
That's absolutely true: the golden rule of keeping docs with code assumes that the documentation is /about/ the code - class and function descriptions or web API documentation for example.

For product-level user-facing documentation written by non-engineers I think it's entirely appropriate to use a different tool.
I don't know how this got written without including the words "double spending." I'm shocked how many people have opinions about cryptocurrency without reading Satoshi's surprisingly accessible Bitcoin whitepaper: https://bitcoin.org/bitcoin.pdf

Preventing double spending is the reason for all of this hullaballoo, no more, no less. It's easy to create a distributed ledger, but hard to create one where you cannot double spend, hence mining and staking.

You can't double spend physical cash because you can't give someone else a physical object and have it too.

You can't double spend your fiat because your bank says to your counterparty "trust us bro, he didn't double spend" and your bank is pretty trustworthy.

You can't double spend your bitcoin because to do so you'd have to have more than half of the computing power in the world, which is pretty tough to do, and even if you did actually succeed at double spending it would render your investment worthless, because all transactions are public and someone might notice the double spend and the value of bitcoin would plummet.

Soon, you won't be able to double spend your Ethereum because if you did, everyone would notice, point it out to everyone in the network that you double spent, and then everyone would automatically slash your Ethereum stake to zero going forward and carry on without you.

That's all. It has nothing fundamentally to do with voting or economic distribution or proving ownership of scare resources or anything like that. It's about preventing double spending on a distributed ledger of transactions.

If you solve double spending, then yes, your cryptocurrency will work.

(reposting this from the github)
>If you set your risk-reward profile to "sweet mother of Jesus" in traditional markets you can achieve the same returns with less risk.

I wouldn't pitch anyone on putting their net worth in bitcoin or whatever, but I don't think this is true. If you talk to some quant and the quant tells you to scale your allocations to various assets based on their volatility, then if the underlying assets are not very volatile then you end up really levered and can be wiped out in "out-of-model" events, but if the underlying assets are very volatile then you don't have this issue, and you make a bit of money by rebalancing. Your quant will also tell you, if your plan is to buy and hold a "3x long daily return" ETF, that it is the nature of such ETFs to go to zero, and they can say this much more confidently about the ETF than about bitcoin.

I've also found that one can generate returns similar to the returns historically generated by being 1x long BTC with a really conservative risk-reward profile. My current work is to operate a fund based on this finding.
SMS will still enter through Messages.app if you have SMS enabled through your carrier and plan. But no, iMessage is not used when it's disabled.
> Arbitrary code execution in an on-premise server?

That doesn’t explain what the benefit of the attack is. It just explains that it’s an effective attack.
I'm very excited about this direction (I'm no JavaScript expert, but I didn't like the huge node_modules directory). I think this is noteworthy:

"We've been running a version of HEY on this stack for a few weeks, and it's a peach (full report and rollout coming soon!). No separate watch process needed for builds, no wrestling with configs, instant reloads, none of the node tooling needed at all, with no overall loss of performance or capability. It's the best of all worlds – for us at Basecamp."
by bumping into them?
Rolling Stone didn't even produce a proper retraction (calling it an update) for their fake news piece from that picture caption on horse dewormer and hospitals being allegedly overwhelmed.

https://twitter.com/ggreenwald/status/1434854957614780424
Alchemy and the Laboratory (2015)
Plans for $400B new city in the American desert unveiled
How would that information be useful?