skysight-inc/HackerNews huggingface dataset:
BitTorrent, in my view, is a messy format, while IPFS is more clear in design. BitTorrent, namely, has fixed chunks and data overlaps in them from adjacent files which make the format artificially merging different files and create difficulties to treat parts individually, e.g. pick a single random file and check its only hash from a torrent. It looks like they couldn't get the basics deeply comprehended at the design stage.

This is much neater in IPFS. Files and data blocks are individually handled, and there is no situation when a hash embraces several independent file fragments. Adaptive block sizes are also supported which is extremely useful for handling such collections as LG is (however I haven't checked if it's really used at present) instead of having an extra layer of hashes to rehash files individually after the torrent hashed their chopped "tape/tar" chucks. The forced
BitTorrent serialization and subsequent fixed-size chunk chopping are basically absent in IPFS. This helps structuring the search and facilitates deduplication, too, through the strict Merkel tree correspondence to files, as opposed to the randomized data chunks having a fixed size for no real necessity and meaningless hashes for wider applications.

To me these are the key aspects, even torrent bug fixes, that IPFS possesses.
Why AI Tools Failed to Help with Detecting Covid
TIL 'jenkem'.

BRRR!

edit: though bulk delivery by railroad car may be technically correct, just add some heat, or let the car stand for a while.

One does not need to imagine the 'epic whiffs' coming from that, because it happens IRL!

[0] https://www.fox10phoenix.com/news/poop-train-full-of-nyc-sew...
The real question: is it really mightier than the SWORD
It's really odd: In the previous election, you couldn't see/hear one news report about the election without mentioning the Wahl-O-Mat. This election-time it was some internet meme that reminded me it existed.

After usage of it, it becomes apparent as to why it gets zero coverage: Almost everyone I've asked (migrant/unemployed/self-employed/postal-worker/cooks/farmer/cab-driver/...) experienced a stark surprise.

The parties they came out with, did not match at all with what is presented to them as a "good choice" by the media.

Some of my migrant friends joked that I should label them a right-winger now.

I'm not sure whether they will base their election on the Wahl-O-Mat experience alone. But it does show a huge difference in the agenda-setting of our media vs. the needs of individuals.
Cross Browser Testing Automation: Basic Principles
And by grace which ugly unstable country has the capability to do something to contrast the incoming jet in the scenario described?
It's impossible at the package manager level.

First, install python 2 and python 3. Next, install a script that calls "#!/usr/bin/python". How do you make the script work, without modifying the script, so that it will work with the specific version of Python it was designed against? You can't. You have to either modify the script to point at the specific executable it was designed for, or you have to modify the environment to point "/usr/bin/python" at either python2 or python3.

The former, "modifying the script", is recompiling all applications to point all of the executables they run at a custom executable, like "/run/app/v2/bin/app".

The latter, "changing the environment", requires that you specify the environment before you run the script (". /etc/python2.env ; /some/script.py"). But then you have to know that, right now, you want to run the script against Python 2. What if you install an upgraded version of the script that's built against Python 3? How do you know which script to run when? You have to have an interface and pick which one to use each time you run it. And every application that runs that script.

You can, of course, install two versions of your script, and rename the scripts, so that you know script2.py runs against python2 and script3.py runs against python3. But what if you have another program that needs to call the script? How does it know which of these 2 custom names to run? Now you'll have to compile a new custom package for this new program, and rename it too, and hard-code that one to call the specific new custom script name that targets the specific Python version.

And on, and on, and on, you will need to have duplicate packages for every possible dependency graph that could possibly exist of different versions of different programs. You would end up with 16,000 packages of this python script, each with a custom name and custom paths. Because some combination of dependent packages could lead to a recursive bug where the wrong app eventually calls the wrong script.

And it also requires patching literally every single application that is ever packaged by Nix to be able to rename applications and libraries. Every C program that ever calls "wc" needs to be patched to run "wc" version 2.0.0, "wc" version 2.0.1, "wc" version 3.0.0, etc, for every version of wc that may exist, and for every version of wc that may call a different program which also has multiple versions.

This is why the problem is unsolvable with any tooling whatsoever. There is no way to automatically determine the correct dependencies without modifying and packaging every application for every dependency tree that could possibly exist. The only solution is what containers give you: an interface that forces you to pick a version of an application with one dependency tree, and lets you figure out how to combine them (how to run containers together).

The only way to solve it without either 16,000 variants of one package, or an interface to pick environments at exec time, is to fundamentally change how software is designed and run today.
Xata looks neat! A few queries, if I may:

Is it NoSQL / NewSQL?

Distributed by default?

Global? serverless apps run at the edge. The database (or its read-copies at least) then could not oceans away? see: macrometa.com / workers.dev kv

Based on any open source backend like Postgres or OpenSearch? see: rocketset.com / quickwit.io / timescale.com

Will it have a free-tier?

Any tentative launch dates?

Thanks.
> Other tool require lots of thought and carefull execution for what Nix gives you for free.

How do I pin ruby version to 2.6.3 in Nix? This is given to me for free in other tools. As are reproducible builds because all modern package/dependency managers lock versions.
That's the thing that annoys me most about Kotlin (even though aside from that it is my personal 10X language). In a large project that uses DSL's, coroutines and flow it quickly becomes a curly brace mess and it gets hard to see what code runs where, when and in which context.
Yes, I remember all the traffic about gimp-print on the mailing lists :-) It was never really the core of my interests, and eventually, I moved to other things. Probably everything you say is right, but also, image processing is sort of a niche topic, so it's hard to attract people in the first place.
You can just skip questions you don't want to answer.
If Americans used that system even one time, it would create the biggest political upheaval since the Civil War
Apple ID Hacked. All Info Changed. Can’t Recover
When we woke up this morning we saw a series of e-mails from Apple on my friend's iPhone.

The e-mails were saying that her Name, Birthdate, Apple ID Login E-Mail, Password, Trusted Phone numbers have all been removed and replaced with another E-Mail, Phone number, name, birthdate and password.

Basically the attacker changed all the infos in just 10 minutes. How could this be possible? 2FA was on.
Apple must provide at least 24 hours if someone tries to change all the information at a very short period of time.

As far as I know the only way to bypass 2FA is to either;

-have physical access to trusted devices
(no one had physical access, the devices were all with us in the room as we were sleeping.)

-have access to the trusted phone number
(called our carrier, the SIM card is not cloned, so no one could have access, the phone was with us as we were sleeping.)

How else can the attacker know the password and also bypass the 2FA?

Her trusted devices were all with us.
She never used that password on any other website and it was not written anywhere.

Since the attacker changed the e-mail as well, we are completely thrown out of the Apple ID.
When we try writing her actual Apple ID E-Mail at https://iforgot.apple.com , it says "This Apple ID is not valid or not supported." Since the attacker also changed trusted phone numbers and devices we are completely lost.

We had a call with Apple technicians for two hours. No solutions.

There should somewhere be a log of her e-mail getting changed to attacker's e-mail. Apple can not find attacker's e-mail.

How could 2FA be bypassed and such an hack could be possible?
How can we fix this? Is there a way to get her account back?

All her data was in iCloud..
Unbelievable Apple.
Graphic Methods for Presenting Facts (1914)
I'm super excited about this!
bitcoin-cli --dumpwallet "filename" should give you the private keys in WIF format
>Makes for weird politics in the end.

- When the going gets weird, the weird turn pro.
-- Hunter S. Thompson

The trend continues where there remains almost no chance of getting someone with actual leadership ability into important leadership positions.

Real leadership is so rare and had been needed more badly than ever for so long, people have been thoroughly conditioned en masse to accept the poorest of substitutes. Especially since the system has been insidiously gamed so that recognized non-leaders could have a shot to begin with, and it has only gotten worse & worse from there.

When a real leader comes along they bear no resemblance to what has now become accepted as a familiar party representative, whose only advantage today is a pop culture following with no higher objective than to join the bandwagon and over-run every alternative voice.

Nobody even recognizes a real leader any more if it's not someone having a formidable machine constantly hustling to manipulate popular opinion in hyperbolic ways.

And when you've got that, you don't need a person of worthwhile substance to be the center of attention, you can move the target and get a block of voters to prefer only non-leaders as electable candidates.

Well every random citizen in good standing might not actually be leadership material themself, but the odds are infinitely better without a doubt now.
Show HN: Run Lambdas from your front-end code
For the vast majority of people, some degree of censorship is deemed a necessary evil..

Where do you draw the line when freenet evolves to be more than just free speech and starts seeing morally reprehensible services pop up..
This isn’t a native desktop app. It’s running Chrome in the background (even downloading it if Chrome isn’t found).

This isn’t meant as a criticism against this project though. Just that “native desktop app” means something specific and that’s not what this is.
> true nature of reality

If it’s as you said,

> Something that science is by design unable to probe, just like someone inside the simulation will not be able to look at its own source code.

Is there a point in creating hypotheses regarding this if none of them will be falsifiable?
> Oh really? Fences are fascist now? And deportations?

I believe you lack some context here. There are a lot of migrants and refugees coming to Europe through the Balkans. Whether to let them in or leave them waiting in improvised camps in countries that are themselves very poor is a very hot political topic in the region and in most of Europe.

The problem is how those people are treated by the police in some places and how everyone, the government, the locals and the neighboring countries are complicit in this. They're constantly being beaten up, their belongings destroyed for no reason and so on. There exists a movement of right wing politicians, journalists and so on, that openly call for killing migrants that approach the border of my country. That's supposed to be a crime, but absolutely nothing happens to them.

I can understand the fear of foreign people and their culture. But the hatred and the fact that political parties actively participate and support that hatred sure sounds like fascism to me.
I think all these fake NASA geniuses in India happens because of competitive pressure. Score 99% in exams is not good enough anymore, you have to standout. And what better way to standout as an exceptional student by claim that you are a NASA genius.

Even small time/low tier colleges in India are creating fake "NASA Challenges" to boost student intake and their bottom lines.
These workers by and large aren't carrying money worth stealing they are being robbed of expensive e-bikes. If these bikes were configured to become inoperable if they couldn't either phone home or talk to the users device then there would be no point in stealing them because nobody would buy them.

The end user could authorize their own new devices unless they lost access to both devices and info needed to do so and the manufacturer could handle same if and only if you were the original registered owner or ownership had been transferred in a verifiable way.

See why phone theft isn't as big a deal anymore they aren't worth anything if they can't easily be used anywhere.

The other ridiculous conditions are solved by making them threat their employees as employees and pay them a minimum wage for time spent including spent idling + millage.

If this plus vc money eventually exiting makes some portion of the work uneconomical so be it.
Not only that. The government also took over the payment of the first 14 days of sick pay - previously paid by the employer.
Another problem is, that currently most parties are claiming to care all about the climate and would immediately take steps to fight the climate change after the election. Just if two of those parties have been in power for the last 8 years, you might want to weight their statement accordingly :)
Same question, but for the telephone.
That's not how it works on iOS. iCloud and App Store accounts can be switched independently. After the installation you can switch back to your main account, and all your data will still be there. Newly installed app should auto-update as well.

I personally have apps from 2-3 different countries' store accounts on my Apple devices.
I posted a thread [1] on VQGAN+CLIP art generation, curious what you think. I definitely see the points you wrote here, but at the same time I -do- like what it generated. I think there'll be versions that will use patterns better. So they won't understand why we like something, but will be close to picking the correct pattern/features to make us like something.

[1] : https://twitter.com/Killa_ru/status/1439299650331320327?s=19
> From a purely-technical lens, that may not seem like a fatal flaw. When viewed through a whole-product lens, it is.

YouTube is an advertising business, Peertube is software. They are like day and night different.

Peertube is developed by a community of developers, governed by a french non-profit called Framasoft. Their primary mission is community governance, establishing a legal footprint, and promoting Peertube, in the same vain as Mozilla, the Drupal Foundation and many others.

According to the Peertube website, 90% of Framasoft's funding consists of donations. Since they don't sell a service, don't have to maintain infrastructure to enable hosting of videos, they don't require a complex organization and large investments.

Sharing the costs of a common good tends to work out on a small scale, and it's a valid alternative to private for-profit initiatives. Reeading tip: ERS's "The Cathedral and the Bazaar"

https://en.wikipedia.org/wiki/The_Cathedral_and_the_Bazaar

> PeerTube's anonymous, censor-proof nature is enough to attract a certain class of content that repels advertisers, but then what? Until the dark side of distributed technologies is addressed instead of touted as a feature, this doesn't have a chance of popular success.

Peertube isn't a single service that contains a "certain class of content that repels advertisers". It's software that allows anyone to set up their own server and hook it up in a federated network of servers.

It's a bit like online fora. Like, PHPbb and vBulletin are just sofware. Anyone can download a copy, install it on their own server, run their own forum and develop their own community. It used to be that there were fora about anything and everything ranging from gaming, knitting, books, history to the less savory topics and themes. Few would argue that these weren't successful in their heyday.

The biggest challenge federated networks face is this: discovery of content. That's what defines how much they will appeal to a large audience.

Centralized services like YouTube are popular because they've perfected the discovery of information relevant to their audience to a fine art. YouTube becoming an ad business is a paradox: they arrived at that point because that's the only viable business model to cover the cost of centralized hosting of billions of videos, and the bandwidth required to serve billions of viewers.

Federated networks don't suffer that problem because the costs of hosting content are shared across the nodes of the network. Peertube leverages WebTorrent as their file sharing protocol. The existence of individual nodes across the network is predicated by local economic conditions. Some nodes may disappear if they can't recoup their own operational costs. But distributed character of the network implies that its enduring success is predicated by the longevity of a majority of nodes.
Let's try to reply at DH6.

The point I have an issue with is this:

> The third illusion: ecosystem is the most important for a language

> There's only one true ecosystem, the C ecosystem. The dynamic language modules are just the bindings of the existing C libraries.

Not all software projects are created equal. If I have to do something quickly, having a wealth of libraries a pip install away is definitely going to be a major factor. For example, I'm in the paradoxical situation where one of the languages I use the most is Python, also one of the languages I like the least.

I'd say there are two cases:

- If the project is small enough, the ecosystem is in fact the most important factor. Yes, maybe those libraries are just C FFI, but reimplementing the FFI when somebody has already done the hard part for you is simply uneconomical.

- If the project is big enough to warrant being 'properly engineered', then you probably have a laundry list of requirements, and language, ecosystem, etc. have to be weighed against everything else.
> This attack is still possible (as of 20/09/2021); however, an attacker is required to invest significant compute time (many many years with a single RTX2070) to generate a valid identity

So it's entirely feasible if you have access to any cloud vendor then.
Don’t Share Your Hobby Projects for the Wrong Reasons
Excited to see Trustroots highlighted in the article.

If you're interested to help build Trustroots with us (we're a non-profit, volunteer based) — join us here: https://www.trustroots.org/volunteering

Different skills needed, starting from coding, ops, design, organizing, member support, translating, and more!
NASA has far more astronauts than it needs. During the Shuttle era, they had about 150 and they were busy. Today, they have about 44. A few of them get to go to the Space Station on Space-X rockets.

Right now, there are no astronauts in training, although they are starting a new group in December from people who applied early this year. Not because they need more, but because they need younger ones.

If you want to go to Mars, you're probably better off going to Space-X.

Russia is sending a film director and actress to the ISS on October 5th.
Researchers find a new way to control magnets
At risk of being a brusque, why are you posting this then? It's a waste of time. If you had posted rough technical details of your initial offering you could have gotten real feedback before the launch of the product itself.
Cryptographic part of ZeroTier protocol was audited last year

https://www.zerotier.com/wp-content/uploads/2020/10/ZeroTier...

The code (not the protocol) has not been audited yet apparently.

I wonder if the public key handling was audited above!

Overall, I was surprised of such vulnerability in ZeroTier!
Indeed it doesn't quite capture the cases of the currently reigning parties promising to change things after they got elected :p.
ah, your parents probably didn't let you rent whatever you wanted from Blockbuster or buy porno magazines at the convenience store, seems like it's basically the same thing
Man, my day today was like it was out of an episode of black mirror. It was so fucking boring.
"Approving a pull request without even testing the code it’s very dangerous"

Well; code review is not QA. My approval means - I'm OK with how the code layer is knitted. It doesn't mean I've tested the changes.

Of course, if there's some logical problem with the implementation (such as the author seemingly failing to handle an edge case), any careful reviewer should catch this out.

Still, this is a situation where the overlook could be detected through theoretical code analysis, so to speak: which is what a review is. That's not testing.

"some 2~3 line changes may not need to be tested, but those are the exception, not the rule."

Generally speaking everything needs to be tested (not necessarily manually), but that's beyond the point. Testing is not reviewing, and vice versa.
I appreciate the stated goals of Pen. However, I don't see how these goals translate to language design. Anybody tried the language and can share how the design facilitates these goals more so than other languages?

- Everyone can learn the language and participate in actual development quickly.

- Developers can focus on application logic rather than ever-changing implementation details.
Wikipedia has a partial list of similar voting advice applications in other countries: https://en.wikipedia.org/wiki/Voting_advice_application#See_...
What worries me is that 2 months have passed since the vulnerability was fixed and yet there is no new version released which contains the patch... So you're exposed unless you build ZT from source.
It looks just fine. Powerful functionality. I think this project has a future.
Show HN: I built node dependencies manager for VS Code
Thanks for being here! deinwahl.de generally looks interesting. Some questions for you:

- Is it useful to soberly look at an analysis of a few chosen questions and topics instead of looking at the fuller picture, like for example scandals the parties are involved in? How would a tool look like that includes both?

- The implicit stances of the parties do not seem to really come out. The questions seem to not be designed for that purpose. Is this a limitation of the questions asked, a limitation of the format or are there other limiting factors?
And I can't find a "hello world" or example project at all...
An individual committed a sophisticated crime against a business by recruiting employees of that business. He did so at great cost to that business, while knowing it was a crime, to enrich himself. He got caught and prosecuted. How do you get "capitalist dystopian hellscape" from that?
These tools can be very valuable for people that are not into politics. A friend of mine found out she was much more left wing than she thought after doing one of these tests. A problem I have felt is that people are too focused on the projection and perceived personality of the parties rather than on actual policy.
I've also had the occasional issue with serverless platforms. Not to do with Google indexing, but I had a similar sensation: "well now we're just completely stuck". When something doesn't work the way it should, the whole premise of "you don't have to think about servers" quickly becomes "no, you're not allowed to see the servers" and its horrible.

These days I try to make the case at work for targeting containers and using the cloud platforms' container hosting tools instead.