skysight-inc/HackerNews huggingface dataset:
"Do only one thing and do it well" is highly dependent on how you define "thing", yes.

Is awk bad because you can't compose the internals of its built-in functions? Are vim and emacs bad because they have multiple modes of operation? Is bash violating the unix spirit by doing both the job of an interactive shell and a C API extensible scripting engine?

I don't think so.

ZFS, BTRFS, and advanced ext4 features like encryption are more arguments that layered block devices may have been a poor choice of abstraction.
Nah, I'm still in the bemused stage. They may actually succeed in making crypto a normal thing adopted by society. At which point I'll transition to my usual next stage. Being resigned to yet another bad technology solution to what is fundamentally a people problem.
It happened fairly regularly that in the middle of the night I'd hear the windows notification chime, because my wife's desktop decided to wake up and do things.
Follow the links to GitHub, the code there compiles perfectly, the PoC inside the article is just a shortened version
Were in a room with 150 engineers, techies, and problem solvers who have been asked whether a cutting implement is overly complex or dangerous.

100 of them have provided an opinion and 99 of the opinions are that it is. Everyone in the room is bleeding.

I think it's fair to say that there's an issue with the tool, Stockholm syndrome not withstanding.
Obscurity and secrecy seem to be so ingrained in the Apple culture that I don't see this changing anytime soon short of some kind of existential crisis or a major threat to a substantial amount of their revenue. And even then it isn't likely to be easy to turn the tide.

Right now we see these negative externalities of security vulnerabilities being "paid for" by their customers, in the vast majority of cases seemingly unwittingly, but that can only go on for so long before it backfires (even if it's a long time).
Learnability of Rust
It reflects how much people think the company is worth, which is 5B less (-0.5%) than it was before.
One thing funny about cryptocurrency is that it's built for highly technical group of audience. But in my peers, a majority of people who get benefit from it are non-tech user.

Think of wallet concept. The wallet literally hold nothing. The fund isn't a file or something that the wallet keep. The wallet is simply server as an interface. The transaction can generate off chain. You can signed the transactionor any message to prove who you are. Read is essentially free but write contract cost gas. How can we explain these to a normal user? Why Solana is so fast and Ethereum is slow?

Now, the highly technical user understand those concept and feel something shady about a certain thing. Then they don't buy it. Meanwhile, othergroup get rich so quick and it makes the world feel like crypto is a ripoff.

Add in the controversal stuff such as Sushi fork Uni, then founder run off with $14m(and later return)...

all of that made crypto looks really bad.

But now let's see what blockchaing give us from a technical perspective. It's a distributed database where you can store data into it, like git, and can prove and trust it's what you write into it.

Example, DNS. DNS is very decentralize but what if your DNS server decided to return something different from the name server. What if we store DNS into blockchain? Write to it cost money but read is essentially free as long as you have a node.

But due to the highly cost of mining, and the craziness of its price, develop on blockchain is costly and it push people away because the people who want to build something on it doesn't have the fun. I, for one, want to do the above DNS idea with Ethereum but choose to go with Solana because Ethereum cost is just so damn high...
Incorrect. That would be hindered by a lack of access to the majority of customers who are on an iPhone in the US.
This is just wrong; The cell quality needed for organs vs a meat slurry are totally different. You don’t even need the cells to be alive in the final serving.
Did you create this as your side project or spend your time creating this emulator full time?
I wish the downvotes would explain how they plan to solve these problems, or otherwise concede the argument of the linked article.
This is the exact kind of utopian fantasizing that the article talks about. Charming!
What's not to understand? Feature requests are closed if there are no plans to implement a certain feature. The developers are just being honest about their plans. Users wanting it or making arguments as to why they want it is irrelevant. Surely there have been times when you've said "no we're not going to implement that feature"?
That strategy has been used throughout the decades after WW2, including in various parts of Croatia to help instigate secession. Maybe it has to do something with the mentality of the region? There is a fantastic movie [1] by Emir Kusturica that absolutely nails the way of thinking, where a protagonist lives in a bunker believing the war never ended.

[1] https://en.wikipedia.org/wiki/Underground_(1995_film)
GKE Clusters Using Crossplane
Beside AppStore ads, how can I buy ads from Apple for the Apple ecosystem to replace Facebook ads?
> I almost never see the EFF propose better ways to solve those problems.

Why does their need to be a better solution in the case of the Apple CSAM phone scanning debacle? The solution is to just not do it.

If Apple is so worried about illegal material being uploaded to iCloud, they can just modify their iCloud encryption logic to give themselves access and scan the material on their own servers when it's uploaded. They have access to the unencrypted content either way, so it's fundamentally no less private. Actually, it's more private because at least Apple wouldn't be giving themselves access to content on my private property.
Surprised this wasn't submitted or treated by Google as a security defect. I don't think Google pays out for DoS typically, but considering how easily this can be weaponized, this one probably should've paid out.

Especially if the mechanism of the crash also allows for an RCE that hasn't been discovered yet. Worth equipping fuzzers with the URL as a prefix.

Edit: They reclassified it as a security defect and restricted permissions on it after my comment directly on the bug.
Yes this could happen. Ideally, we would run enough matches so that over time this would average out and the better AI should come out on top.
One thing I have recently tried out is to prevent all outbound traffic headed towards a port 80. This doesn't necessarily block all HTTP traffic but it blocks any standard http setup.

My expectation was that this would break a lot of the web and a lot of peripheral desktop applications, which I thought would phone home via port 80 to ask for updates and so on. In fact, almost nothing broke at all! So I've kept that turned on. Can recommend doing this if anyone wants peace of mind.

It's very easy to set up with the Windows firewall. Not so sure about other firewalls. (Note the difference between "block outbound traffic on port 80" and "block all traffic destined to port 80 on the remote machine" - I did the latter)
The original post that I replied to only contained the first line regarding 'security Nazis'.

The remainder was edited in after my comment. So, it was impossible for me to recognize the parent posters perspective. Thanks though.
All of those things can be tracked and confiscated - crypto is a lot harder. It's volatile, but it's significantly more secure against state actors.
Inflation already affecting USD. All fiat currencies are inherently inflationary. Thanks but no thanks.
Normal people do not have, use, or understand cryptocurrencies. If you think they do all that means is you live in a very specific bubble.
> Are they pretty effective?

One particular area where I get the impression they have a specific measurable impact is in their legal support on certain cases:

https://www.eff.org/legal-victories

Then there is (for example) their practical solution of how to help increase HTTPS adoption with their excellent software tool, CertBot, which helps automate LetsEncrypt certificates:

https://certbot.eff.org

I’d note that it seems to be exceptionally rare for a politically active organisation to be able to both campaign on issues at a high level AND produce technically viable and relevant software tools. Those are two wildly different areas of expertise, and yet they do this, with a clear overarching narrative.

In terms of proposing more specific solutions to problems they protest against, I don’t have a strong view on whether you’re right to emphasise this or not. Maybe there is more they could do here. But in terms of the larger question of “are EFF effective?” I’d say they are demonstrably having a positive impact.

Is it enough? I don’t know. How do you measure it… Can they do better? Almost certainly.
Indeed, especially for those few spots seemingly in the middle of the ocean where the cables converge it would be interesting to know what land masses (if any) are nearby. Right now this is very difficult to see.
Lack of movement in sales after paying Facebook for advertisements will emerge, and that will certainly be noticed.
If you look at ICANN's .org fiasco, it's pretty clear that they couldn't handle even the relatively small amount of money flowing through that. The corruption opportunities of an entire currency are way too much for them.
Its company culture, some companies see failure as a problem to be avoided others see failure as the road to success.

Evidently apple see failures like bugs as a problem to be avoided and are just trying to avoid the problem with the obvious result that they have problems and look like a failure.

Companies that accept failure as a consequence of trying will learn and improve until they achieve success.
Weird, I got a newer Asus (Flow X13) and it does S3 just fine.
> Real charities, not those billionaire tax avoidance schemes.

No such thing.
I used to store:

- Casual thoughts and ideas to review and ponder about them later. In case I didn't have a smartphone or notebook near me, I could put them into a palace, into the so-called "random room"(a place that you should review periodically to sort the remaining things out, i.e. categorize, put images into other places). However, it's simpler to spend time looking for a notebook to write the ideas down.

- Phone numbers. In cases such as losing my phone, to call my relatives, friends.

- Information about people I met. Sometimes there were a lot of people I met in a day/week at university. I wanted to remember their names, some general info. The problem with names is they may repeat. One may use an image of a known person with this name and add a few more images to describe the person better. E.g. a place where you've met, hair color, a hobby, other peculiarities.

- First medical aid.

- Books' summaries.

Rather fun to store than useful in real-world situations:

- Bus numbers and their schedule. Also, a schedule for a local airport and railway station. E.g. where this man with luggage is going to? It's winter, yet he wears a Panama hat. Let me check the possible routes...It was fun to guess. p.s. I didn't haunt people.

- Birthday dates.

- Other random information, e.g. historical dates.
This is just a check built into Xcode to try to keep you from accessing XPC in iOS. The code on GitHub bypasses this by calling this method dynamically through Objective-C runtime
I wouldn't normally comment on downvotes, but the torrent on this post caught me by surprise. Probably they just disagree.
>(1) they usually aren't actually very funny

A fair point. I didn't even recognize it as a joke until someone pointed it out. And I'm very easily amused.
Show HN: Pretty Good Audio – WebCall Telephony Server
Standardization is a good thing whether it's an electrical socket, car charger, phone charger, fuel pump nozzle, audio jacks, video jacks, garden hose, or any interface really.

The fact Apple has gotten away with this for so long is impressive. There would be an Unholy shitstorm rained upon Sony if they made their TVs and Play stations have proprietary connectors that required additional adapters to use with non-Sony products
If everyone is just manually running `terraform init` and `terraform apply` post-PR or pre-PR you never really have a good idea of what the state of your current infra is. Tying it to the CI/CD platform seems logical IMO.
Normal people do all that with money and credit cards and debit cards and bank transfers, which works faster and better and are much easier to use and much more convenient. The existing framework is a much better way to do all the things you mentioned. What do you have for which the existing framework isn't better, and how often do "normal" people do that?
Modern Standby is an Intel thing, not a Microsoft thing. Intel has just pressured Microsoft and other OEMs into supporting it. IMO, it's a huge steaming pile-o-crap, and one of the biggest reasons I want my next PC to have a non-Intel CPU. Intel has shown over the past decade that they are quite simply incapable of implementing properly functioning power management, and I'm tired of having machines die because of their stupidity.

I've had two Surface Pro 4's (one of the first "Modern Sleep" devices) develop battery bloat because of this Intel's power mgt incompetence. Microsoft replaced both, but what is this crap costing all of us, both in higher hardware prices and environmental waste?

FWIW, I haven't needed a faster CPU in years - I need more RAM, long, long battery life, and sleep/wake that always works, instantly. If the iPad were capable of being a real computer, it might get me back into the Apple fold, if iOS had a usable UI...
For me the most fascinating thing about this is vast distances through Pacific covered with the cables. One would assume it would be easier to cover the distance around Pacific and not directly through the middle of it, but it seems those milliseconds are truly precious.
Competition and Community Insights from Nvidia’s Kaggle Grandmasters
Using Task.Result or Task.Wait to block wait on an asynchronous operation to complete is MUCH worse than calling a truly synchronous API to block. This phenomenon is dubbed "Sync over async". Here is what happens at a very high level:

An asynchronous operation is kicked off.
The calling thread is blocked waiting for that operation to complete.
When the asynchronous operation completes, it unblocks the code waiting on that operation. This takes place on another thread.
The result is that we need to use 2 threads instead of 1 to complete synchronous operations. This usually leads to thread-pool starvation and results in service outages.
I agree. It is a mess. Worse than that. It creates a very avoidable burden and it takes away some interesting products from us. We were going over Zune case in our last MBA class and one of the things that clearly sunk the product ( as opposed to the Ipod ) was the way it attempts to please IP-holders resulting in god awful experience for the user ( https://answers.microsoft.com/en-us/musicandvideo/forum/all/... ). I am admittedly not an Apple fan, but I personally thought Zune was otherwise quite nifty and would have otherwise seen some adoption. IP craziness crushed it.
Not really. I'd argue that a true status symbol commands the respect of any person in it's presence, whereas any sufficently educated person will look at your 77" OLED NFT display case and scoff before walking away.
I'm sure that's part of the reason they've decided to make their own CPUs. My 2020 M1 has thermals similar to my iPhone.
No, because El Salvador still accepts dollars.
>Yes, if you are not confident that you can keep a trade secret then the patent becomes the better option. (Isn't that what I said before?) "Greater than 50% chance" is not what I would call "confident".

Change it to any arbitrary likelihood below 1. The expected value of a drug during the length of the patent maybe arbitrarily greater than the expected value of a drug after that time period due to reasons other than duplication (alternative unrelated treatments etc..). If it is expected that drug will make nearly all of its total value during the length of the patent, then even a 1% chance of duplication means that the expected value of taking a patent is higher.

Such an extreme disparity between expected value during the patent length and after isn't even necessary when you factor in the additional costs of attempting to maintain a trade secret.

>It doesn't change the fact that patents only have a positive net expected value to the recipient in the situations where the public is expected to lose by granting a patent rather than having the knowledge kept as a trade secret for a time. The interests of the applicant and the public are diametrically opposed; if the patent applicant wins, the public loses.

This is wrong because it ignores the additional costs (both direct and indirect) of maintaining the trade secret.

>We've granted a 20-year monopoly

Minor point--most drug patents have an effective date of about 10 years because of the time it takes to bring a drug to market.

>Maintaining tight control over the distribution of the drug only gets you so far, especially when the underlying research is already public knowledge.

Without the potential benefit of patent protection, we'd almost certainly see research become less open to begin with.

>Trade secrets, unlike patents, don't block independent discovery, and only the rarest and most expensive drugs would warrant complete control over the supply chain.

Probably, but those drugs would become immensely more expensive, or the reward available to an individual company for developing them would go down. Every novel drug would likely warrant some extra level of control (and expense).

>though it would reduce the profitability of individual pharmaceutical companies.

The direct cost of maintaining trade secrets would effectively act as a tax on all pharmaceutical companies doing novel drug development. As would the direct cost caused by duplication of drugs during what would have been the patent protection period. Add in the indirect cost of decreased openness, and the only way to maintain the exact same level of drug research we have today without patents would be to increase public funding for drug development.

I think that's probably a better system to be honest.
Do you use the same memory palace for different "groups" of things to remember? If so, do you ever get items confused because they are at the same location in the palace?
There is a huge difference between moderate inflation and ruinous hyperinflation. For example, before last year Australia had gone almost 30 years without a recession [0], in large part because their central bank's inflation target is a few points higher than the US's hard 2% ceiling. This gives their bank more flexibility in controlling the money supply.

That kind of stability is more beneficial to the middle class than any negatives that may come with that level of inflation.

[0] https://www.nytimes.com/2020/09/02/business/australia-recess...
But Apple has the luxury of controlling both the server and the client. Why isn’t it just a matter of using HTTP range requests?

https://developer.mozilla.org/en-US/docs/Web/HTTP/Range_requ...

And if they need to get more clever than that, why not have a BitTorrent-like map of chunk hashes. So you download the update, check the hash of the whole thing and if it fails the hash check, download the chunk hashes which will be say a 256 bit hash for every individual 32 MB chunk of the file. And for any chunk that fails the hash check, use a HTTP range request to download it again.
"But NFTs communities host individuals of both low- and high-status positions, making them fundamentally different from country clubs or VIP lounges. Anyone can join, if they have the money."

Actually it's not fundamentally different at all!
> Except… there's nothing to really learn.

Would you mind explaining to us how to add a disk to an array with ZFS? Then same question but with a disk which is not the same size that the rest of the array.
The tool was bad but the data could still be good if they were getting representative samples.
Apple killed a bunch of FB's tracking a few months ago and the story is still making the rounds and is on the front page as we speak.

The point isn't that this isn't a serious vulnerability or is somehow unexploitable. It's just that there's a great deal of friction in exploiting it for relatively paltry returns. Nobody is going to get into a spat with Apple and invite regulatory and law enforcement attention to traceably and with undeniable intent steal your contact list. Nobody is going to (like another commented hypothesized) launch a supply chain attack to steal your contact list with this vuln. At that point you'd find a better vuln. This one isn't all that much better than just misleading people into giving you contact list permission.

The OP is saying it's somehow worse than drive-by or low-interaction vulns that own up entire devices and have been repeatedly found in the wild. I don't think that holds up.
Sure, I give you that ZFS' tooling is much, much more polished.

But of course there are peculiarities that have 'bitten' people (softly) in the past:

- dedup has hardly any use case, novices get enticed to try something that doesn't do what they think it does

- ZIL and SLOG sound like "a simple cache" when in reality they are much more complex

- You can add single devices to a (redundant) pool, at which point you've lost redundancy, perhaps without knowing.

- No defrag

- No re-balance

- No growing pools

- ARC still surprises people (also, I've had kernel crashes under heavy load when the ARC didn't free ram fast enough ... edge case maybe, but still)

That said, of course, ZFS is awesome and I encourage everybody to give it a try.
No, I haven’t used Azure since changing jobs two years ago. Thanks for the heads up.
> True, though you might have tried putting a farm on dirt, like a normal person ;)

I was a dwarf, not a normal person ;>
This WebRTC telephony solution offers high quality audio. When I first posted about this in March [1], it was only possible for others to call me. Now everybody can register unique phone numbers and receive calls from anybody else. WebCall basically mimics a small telco now. You can use my WebCall server, or run your own. If you do this, please let others use your server as well. Traffic and load are really low. It is possible to host up to 30K concurrent users on a 1GB server. But you can also limit the number of users and run WebCall "on the side", like an e-mail server.

I will be here again at 21:00 Berlin (3pm NY) to answer any questions. In the meantime, why not register a (burner) phone number and post it so others can call you? You can always fetch a new phone number when you need one.

[1] https://news.ycombinator.com/item?id=26572925
"Unbearably hot" for meatbags and "unbearably hot" for CPUs are different things; meatbags start having troubles at 50°C, while internal components are fine until 90-120°C.

Traditional hard disks are the biggest exception, but I'm fairly certain that's not a worry for a Surface.
Only thing more secure than a firewall is an ice wall!
Surely you DO want the USA to ban crypto? I'm assured that crypto bans make the price go sky high and then the whales can cash out into dollars.
It's interesting that there are so many cables running through the Suez Canal. I wonder if it's because of geopolitical reasons for avoiding going over land through the Middle East.
Building mobile apps with Vue Native
China Bans Crypto Mining: Chinese Crypto Traders at Loss
Yes ... I learned it the hard way too (long story).
I have never used Twitter, I don’t understand NFTs.

Most of the influencers are shilling something, obviously
I agree with you, but I suspect that is exactly what makes it a great filter for them to include.
People who get them might not have opted into them. That is spam, by definition. Elephant in the room of "foot-in-the-door marketing"? I guess.
Yes, and they should be, in order to deter and punish crime.