skysight-inc/HackerNews huggingface dataset:
I can't see where It fails... let's check...

1 - Somebody writes a very simple assembler that can be easily checked.

2 - I type-in that assembler from hex using specialized hardware for that purpose. What is typed is exactly what is turned into data unless hardware is compromised.

3 - From that assembler, I type-in a more advanced assembler that was checked by hand from more people and whose hash was hand-calculated. After that, I check its hash. Software on my machine can only be compromised if the people who wrote this more advanced assembler are compromised, I also check the hash to guarantee it was typed exactly.

5 - From this more advanced assembler I type-in the source code of a compiler or interpreter which was checked by more people and its hash was hand calculated. Same as before with regard to chances of being compromised.

6 - I can then bootstrap more advanced software whose source code I trust and I can check the source code was not tampered with with hashes.

What step fails?
As someone in the sleeptech space, I feel like this is written by someone who doesn't understand sleep.

It isn't just "peptides" and "circadian rhythms". Sleep is about much more than just being unconscious, which why sleeping pills don't solve the problem of sleep, they solve the problem of consciousness.

Sleep is what your brain and body do during the time you are asleep. Just because you're unconscious, doesn't mean you are getting good sleep.

At my company SoundMind we're identifying bursts of brain activity in your deepest sleep called Slow-Wave Oscillations (SWOs). When we detect an SWO, we have a short window in which to stimulate your brain, which causes your SWOs to increase in both power, and the number of slow waves. This results in up to 40% improvement in the performance of deep sleep. This is an improvement to the most important part of sleep, which is why we're starting here. SWOs are responsible for the clearing of Amyloid plaques, memory consolidation, and regulation of hormones such as GH, cortisol, insulin, and prolactin.

If you want to find out more, check us out at https://soundmind.co
Eventually people decide they have enough house.
And people scoff at cryptocurrencies...
> I've never found a great way to run excel in a headless way

Do not ask me for source, but I remember opting to do just that and making it work after being unable to replicate Excel's results in an app that was supposed to replicate it. This was using Delphi, and the solution was to load the Excel spreadsheet as a COM object, programmatically write input data and collect the results. Loading the COM object was as slow as starting Excel but no Excel window ever showed up. This was circa Windows NT 4.0, so possibly 1998? And I would bet this would still work.
Does this even matter? If LE only issues 90 day certs there shouldn’t be any certs they’re signing with this CA Cert that are even valid now either way.

If so then it’s yet another testament to their opinionated decision to only issue 90 day certs. (Which I strongly support)
Two examples I remember researching Ruby for and ended up giving up: hardcore statistics stuff (I'm using using Python's scipy.stats now) and GUI toolkits (yes, there are some toolkits available, but nothing like Python's official bindings for gtk/qt).

It's hard to remember more examples. I remember having problems even with FastCGI on Ruby, but I ended up not writing the code at all so that won't count. Also something related to parsing emails.
I do agree that polluting the planet is bad and we should do everything we can do reduce our impact on the environment.

But I do think it's funny global warming is universally condemned as being bad.

I think a more honest assessment would be, "There are unknown risks to warming the up planet and we don't want to tinker with that."

Russia, Canada, and parts of norther Europe would benefit quite a bit from it.
https://archive.is/Ikjro
> Separation of "developer" and "user" is artificial and more should be done to recognize that.

I've seen some company ROI models built in excel that I think would change your mind about this.
> It’s really helpful to respond to a person’s ineffective behavior with curiosity rather than judgment.

Especially initially. But if one sympathizes with a Wally figure, then one will become adept at sympathizing with that Wally figure.
A side effect of energy shortages? (CO2 is a byproduct of fertilizer production using natgas which has spiked in price across the EU)

Or is it due to brexit cutting UK off from the EU?
Will never be as dramatic as spying over hundreds of millions of sheeple!!
> > I'm a highly visual thinker

> Most people of average IQ say that.

I seriously question that. Can you point us to any evidence that people of average IQ are most often visual thinkers? (Or most often say that they're visual thinkers, if that's where you were going with this.)
I've done this with a tube as a kid and get what your saying. But would a goat skin underwater be the same? The tube example is because of the pressure difference. Having a bladder underwater the air would easily come out to breath. IMO the harder thing would be getting the bladder to stay underwater, especially at the picture size, that would have a heap of buoyancy to offset.
Given Martha's brand is doing exceptionally well and she uses her prison stay for gags in commercials and appearances on talk shows, more like thrown to a bunch of golden retriever puppies.

Her appearance on Ellen alongside Snoop was pretty funny, though.
Impunity? But seriously, I am far removed from the San Francisco news cycle. Has Mayor Breed been overly vocal or cruel to those who have differing views on masking? Does this seem as tone deaf as Newsom dining at the French Laundry?
If that's the quality of advice from Kim or from the article, it's best to disregard it.

Drinking alcohol when you're cold and don't have access to shelter is dangerous: https://www.accuweather.com/en/weather-news/how-drinking-alc...
OnePlus scales back smartphone production as it announces the end of OxygenOS
> What step fails?

I already wrote it out twice, and manquer provided a link to the paper (which is also linked from your page, https://bootstrappable.org/) called Reflections on Trusting Trust. This is not a supply chain issue but a trust issue. This is the very reason Thompson's paper was called, Reflections on Trusting Trust.

If you still cannot see this, look at PKI and ask where trust can be broken.
Graph structures in general are painful in Excel. You can generate adjacency lists or matrices and do stuff that way, but it's painful and non-intuitive. I'm currently helping some people who started modeling such a datastructure in Excel. You end up with massive sparse matrices that aren't intuitive to work with, visualize, traverse, and so forth.
This is an extremely bad take. Instead of standing up a hypothetical strawman, let's look at what Microsoft has actually replaced the password with. There are quite a few, ahem, choices.

From the blog post the article cites, those options are: Microsoft Authenticator app, Windows Hello, a security key, or a verification code sent to your phone or email. Note that Windows hello is also carrying a lot of water here, as that's facial recognition, pin, pattern, or fingerprint.

The biggest place that the password argument falls apart is, these choices are not exclusive. You can use any combination of them that you want. You can use multiple of the same option i.e. security keys or fingerprints.
It appears to be caused by the former and compounded by the latter.
Yes, exactly! Even Python's object orientation feels like a hack made on top of a procedural language.
> Creating more housing doesn't "fix" the problem, because the more wealthy buy two or more houses, and are happy to leave one empty

This surely can't go on forever though. People's ability and desire to consume housing is not infinite, particular in a given locale. If they're buying them to rent out, then a flood of other wealthy people looking for tenants reduces the landlords' bargaining power in the market, which means rents have to drop eventually. If this isn't happening yet, it's most likely because the amount of housing being produced is still too small.

You can't purely demand-side subsidy your way out of housing being expensive. You have to build.
You’re mean haha
Welcome to the suburbs
It doesn't makes it impossible but it makes it morally wrong. You can't go around criticizing people and then do worst. You are just biased. And that's what I'm calling out. Also is not only Surfside, this is one that I remember as well (https://en.wikipedia.org/wiki/Florida_International_Universi...), obviously no one went to jail for that. I live in Miami, I know first hand the pain of the people in this community, but hey, I'm probably just some chinese asset pointing out facts over here.
So in other words, the only thing stopping Apple from viewing my iCloud photos is an if statement.
Don't you check for the hash before you begin compiling? If not, you are in serious trouble.
From step 2 to 3 you need some combination of hardware and software that you trust to take the bytes you typed in, run them exactly as you typed them, passing input and output between your program and a data store without modifying them. This involves the basic parts of an OS: filesystem, program loader, whatever you're using to calculate the hash, etc; you have to trust those too.

You also have to trust the CPU to run your program exactly as it appears in memory.
Yes, I was referring to HSPD-12 of 27-AUG-2004.
> 61% of Americans pay zero income tax.

This was just last year. The norm is far lower, but was inflated by stimulus checks.
Regardless of limitations, the vast majority of edits tend to be by those whose job it is.
I’m not arguing with anyone or expressing any opinion.
I cannot. I am merely calling out that fact that "I'm a visual thinker" is almost always used as a justification for not being able to keep up. Sort of like saying "My other car is a Porsche."
+1 to this being a bad habit. Even when it's not vaguely threatening (which is the default), it's still annoying.

When on the receiving end of a contextless meeting request I usually say, "Sure, what do you want to talk about?"
I don't think the comment you replied to said anything about having batteries?
Not sure why I assumed going to McGill would mean you are Canadian. My mistake!
Uncredited is the NSA.

/s
Yes, and a simple protocol for curing alcoholism is to moderate one’s drinking. Advice based on the tautology that reduced caloric intake (all else held equal) leads to weight loss is simple, correct, and obviously ineffective on large numbers of people. The problem is not the people, it is the advice.
I used to use DDD as a GUI frontend to GDB.

https://www.gnu.org/software/ddd/
Your step-by-step approach would be vastly more user friendly than the current LAMBDA implementation (where the user needs to put the entire nested function in the Name Manager).

Simon Peyton Jones advocated for a similar step-by-step approach: https://www.microsoft.com/en-us/research/uploads/prod/2018/1....

At least, step-by-step can be facilitated with a programming language (Visual Basic, C++, Python, JavaScript). ...That could be a sweet Excel add-in.
TFA explains that procrastination is not laziness.
This author is a nonsense person.

Laziness exists. . It's nice to think of humans as noble and well intentioned despite some externalities, but some people are consciously, deliberately, knowingly manipulative and deceitful and lazy.

Not everyone is good. Most people aren't. We're vicious, tribal, vengeful, resentful, always looking out for whatever the biggest circle is we feel responsible for, whether it's a country, a company, a team, family, friends, or just ourselves.

The reasons might make sense to the person doing the rationalizing, but that doesn't negate the fact that bad traits exist. You can't rationalize away the consequences of choice in individual life circumstances.

This person is why I have very little respect for academia. If they're a "PhD," then the term means nothing.
Love the project and concept. Signed up to your email list.

My first company was a DARPA R&D contracting firm and at one point we made our own EEG's. We solved some interesting problems but being in a helmet in a war is probably an easier use case than a head band that's comfortable to sleep in... What are you using for electrodes in your prototypes? Do you use an aerogel or the usual synapse paste? I can't imagine a consumer product would work for the later but maybe the former.

The state of the art for my old applications seems to now be micro/nano scale electrodes, from only a quick google. I've been out of the space for a bit shy of a decade so I'm interested to know how far it's come and how you're going to make the product comfortable.
Scientists 3D-Print Microscopic Gas Sensors
Splitting debug symbols into separate packages is expected. Splitting them into a separate repository is a bit surprising but no big deal.

The problem with NixOS is that it doesn’t ship debug symbols at all.

Nix does at least make it easy to rebuild a package with debug symbols enabled, but:

- Some packages take a very long time to rebuild.

- IIUC, the standard builds are done without debug info enabled at all, rather than building with it enabled and then deleting it. Usually, whether debug info is enabled shouldn’t affect any other aspects of code generation, so rebuilding with debug info should produce a symbol-rich binary that’s compatible with existing core dumps for the original binary. But this is not always the case.

- If the package you want debug info for is a library, Nix will want to rebuild not just the library itself but everything that (transitively) depends on it. This is really a more general problem with Nix: it has zero notion of ABI compatibility. But always building with debug info would work around the problem.
True, the network effects of the traditional social media are strong. LinkLonk needs a critical mass of users for network effects to kick in.

To make it worthwhile for the users before the project reaches that point, I am trying to make LinkLonk a better tool that helps you keep track of the content you liked (kind of a bookmarking service) and helps you follow RSS feeds in (kind of a feed reader).

If you have other ideas of how to make it more useful before we have enough users - let me know.
I'm having a hard time finding the original title of this story, The Truth.

Prawda?

Googling around isn't helping...

Anyone know?
Looks like the Mypal project is currently imploding due to a license dispute:

https://github.com/Feodor2/Mypal/issues/3
> While there are some buildings in the US where substandard construction are going to catch up to the building and the owners.
LOL sources? Has anyone being sent to jail because of the collapse of Surfside? or the bridge at FIU in 2016? How do you know that the same doesn't happen in China, or any other countries?
The risk is 0.001%, and it brings in 30% (or whatever) more business. This has nothing to do with trust, it's a simple equation.
This appears to be a map of just cesium, not all radionuclides.
None of these things are exactly groundbreaking discoveries lately. I feel like you are taking a very narrow situation, which is China, and somehow imputing that to every other trading partner in the developing world.

For instance, were you at the time in favor of the Trans-Pacific Partnership? That agreement had provisions in it to cover many of your concerns about environmental externalities or forced labor. Unfortunately it got scuttled by some FUD from people who sound a lot like you.

>Of course it looks like there's a benefit to us. And of course the economists you sponsor can produce studies showing how beneficial it is. That does not mean that it is true, especially in the long term.

The benefits of free trade are pretty universally understood by economists. It's not something you need to "sponsor" to get some slanted take on the benefits.
Cool effort, but why are they all POST requests? These should all be GET requests with either path or query parameters. They're not creating any resources on the server side, only fetching existing resources. HTTP 101! :-)
Classic video on the subject

https://m.youtube.com/watch?v=d-7o9xYp7eE
Better for whom? It’s EOL. Are they just plugging high-visibility issues? That’s not doing anything for individual device’s security. They need a giant INSECURE sign instead of giving that false hope for people: “they might patch me past EOL if it’s bad enough”.
I would then argue that it's that very "stick our heads in the sand and pretend nothing's wrong" attitude that contributed to the massive user-hostile mess that tech, broadly, has become.
Also, having 5 jira issues opened in separate tabs simply kills the browser. It’s awful.
Of course you can do it and it will work.

A "standard" (e.g. 5 stage pipe in-order) 64 bit RISC-V core takes a very small proportion of even a fairly small FPGA such as an Arty 100T. You can even do multiple cores. 128 bit would fit no problem at all.

You'd probably have slightly lower Fmax but there's no question about working and if you actually need 128 bit arithmetic then it will be faster than using multiple instructions on a 64 bit CPU (e.g. 4 instructions for a 128 bit add).
Not if you get a fixed rate.
James Patterson: Author or Brand Manager?
If you care mostly about web browsers or equivalent technology, because you make an actual web site, for visiting with web browsers, probably no, everything is fine, anybody who would be broken by this is probably already annoyed for something else your modern site does.

If your only TLS clients are under your control (e.g. you own an app, the app uses HTTPS or some other TLS protocol to talk to your servers) then you should be able to easily work out if there's any problem [edited to add: Hint, use a tool to wind their clock forward past the deadline by a day or so and see what happens] and decide whether and how to mitigate such problems.

But, if you allow third parties (customers, suppliers, or worst of all, the General Public) to use some protocol (whether that's a RESTful HTTPS server or some custom text protocol from the 1980s) over TLS, you are potentially in for a lot of trouble when DST Root CA X3 expires and you should be on top of that by now.

* If you need everybody and their dog to connect using rusty garbage from last century, too bad, figure out which certificates you need to pay $$$ for to make that happen and authorise the purchases today. In this case though I'm astonished Let's Encrypt has ever worked for you. DST Root X3 was widely accepted, but it was hardly the most popular.

* If you can live with some clients dropping away e.g. because it's a free service anyway, or your SLA or other Ts&Cs say that you use Let's Encrypt and so it's actually in some sense "their problem" when this breaks, or you just hate money and love being sued, you can do nothing.

* Otherwise you really need to figure out what fraction of your users will blow up. You should be capturing User Agent info (if HTTPS) and metrics on the types of cipher suite used and other fingerprints that can help you figure out what's connecting and thus what to expect. You need to be contacting "at risk" customers if possible to warn them what's about to happen and point them to resources for what they should do:

1. Software upgrades. Archaic OpenSSL is the biggest problem, if they can go to a much new OpenSSL it's much less likely they're suffering.

2. Trust store updates. By now, just telling them to rip out the (expiring) DST Root CA X3 cert if they have it might be easier than trying to figure out whether it's safe to leave it. But keep it or leave it, they need to make sure they trust ISRG Root X1.
Gmail loads 4MB of compressed JavaScript to render the inbox
> in any way harmful to life on their own

I think it's fairly well accepted that they can cause myocarditis [1], which has killed some [2]. Better than getting the virus, but they appear to be capable of harm. I've naively wondered if the young men are getting jabbed in veins, rather than muscle tissue.

1. https://www.cdc.gov/coronavirus/2019-ncov/vaccines/safety/my...

2. https://www.bbc.com/news/world-asia-58380867
> so bad it needs thirty mulligans

idk, Hash collisions?
Right, but can that realistically be done?
"The price tag is only justified when there's no end in sight to the appreciation."
Isn't that pretty much the definition of an asset bubble. Prices have decoupled from underlying asset utility (eg. rent) and it has become speculation on future price growth. As no return to justify the price all of this seems to hang on optimism/pessimism of future buyers. And availability of easy credit of course.
> That's just laziness from the original developer. To me, no debugger support means it's time for a re-write.

when do you plan to get started on the linux kernel? that Linus is a lazy pri*k, he'll never get to it!

*printk

https://www.kernel.org/doc/html/latest/core-api/printk-basic...
I'm a HN denizen, have a PhD, can code in a multitude of languages, etc etc etc. I don't own a smartphone and it gets less and less appealing every year.

I will fight 'smart passports' tooth and nail to my grave. It's insanity to imagine that if I'm not tethered to a computer chip I'm not a valid member of society. And I say that as someone who loves computer chips. There are complaints on HN every day about the impacts of invasive technologies and then a thread like this comes by where the "solution" is to assume someones identity is their smartphone. Yikes.

Last year I was denied access to a concert because they only gave tickets by a smartphone app and the woman looked at me like I was insane when I explained how that wasn't possible for me. I'm an otherwise normal member of society, a healthy and fit 32 year old male. But apparently I'm an unacceptable outsider if I don't want to carry an always on cell-phone modem directly integrated with one of the most powerful CPUs in history with access to my GPS location that was made in a sweat shop in China by a company with no direct stake in my personal well being. She literally said 'but you look normal' when I explained that I didn't have a smartphone.
> What am I supposed to present?

Facts that support your position, like I did. I provided a couple of in-depth articles about the inner workings of iMessage, with specific emphasis on security. You've yet to even explain in technical terms what is erroneous about my critique.

> Any app on any system, if exploitable, can be used for a chain attack to exploit further vulnerabilities.

That isn't how iOS is structured. If it were normal app developers could design their own apps to gain root, but the system is specifically engineered to combat that and has been quite successful. Whereas Apple's own apps have a set of components that run with elevated privileges that allow sideways exploitation to bypass the normal UID sandboxes, and ultimate cause significant escalation including root.

The two articles I linked explain how this occurs. There's nothing akin to the SYSTEM services within normal (non-Apple) apps, therefore your comparison is technically unfounded.

> This is a not useful conversation that I hesitated engaging in at first glance (when someone does the "if only they just waved hand everything would be great" it's founded in dubious logic 100% of the time), so feel free to reply into the ether.

You're backing out of the conversation because you've shown you lack the technical foundation to participate. You assumed at the start that I knew as little as you and therefore we could both make baseless claims without anyone checking either one. The reality is that I understand iOS's internal structure and can provide founded critiques whereas, you lack the technical foundation to mount a defense of the design (and that your original defense is between confusing and just wrong).
Sheikh Mohammed Sets Up Dubai Authority for Economic Zones