skysight-inc/HackerNews huggingface dataset:
On the "base install". OpenBSD's attitude is, if you install insecure 3rd party code, it's on you.

QubesOS, based on Xen hypervisor, provides compartmented security: a hole in an app need not provide access to anything else. You have multiple mostly long-running VMs for different roles. Hardware access is managed in VMs that do not run app code. 16GB RAM is just barely enough, and apps get no access to a GPU. But it's solid and mature. The 4.1 release, due someday, has had a lot of UX attention.

SpectrumOS is an an attempt at lighter-weight security. Based on NixOS, apps run in a minimal, temporary VM spun up just for the app, sub-second, for experience more like Docker than Virtualbox. Still very much under development. Donate to Alyssa Ross on Github to accelerate dev work.
> If you want to get _more_, ask a team what's making them slow and then prioritize fixing the things they bring up

Exactly, the answers might surprise you
He probably meant guys who call themselves good. Like preaching their exceptionalism while killing and otherwise fucking up truckloads of "they hate our freedoms" people.
Jellyfin doesn't run on FreeBSD because .NET doesn't run on FreeBSD. This is sad.
Nope, because they aren’t making a legal claim, just a commercial one (a route YouTube setup specifically because the dcma misuse provisions are harsher than they’d like).
He's an Australian, and so am I. His ISP (Optus) doesn't go out their way to block ports.

However, he says he's using a AC800s 4G/LTE modem and backs that up by saying is using mobile data. The default mobile data service from all telco's will use CGNAT and will hand him some 10.0.0.0 address. I presume that's because mobile phones don't run servers as a rule, so no one notices and it saves them a bit of money. They don't deliberately block any particular port, but CGNAT effectively blocks all of them.

He could pay a extra and get mobile data with a static IP Address if he wished. Not from Optus - they discontinued that service (which gives an indication of popular it is), but other virtual carriers based on Optus still offer it. I guess it's not worth the money to him.

Everything supports IPv6 now, and IPv6 happily carries IPv4. Why the telco's are still dicking around with CGNAT and IPv4 is a bit of a mystery.
I recommend you this book: “Microsoft Azure For Dummies”
I am suddenly reminded of this earlier discussion:

https://news.ycombinator.com/item?id=28263721
a very unfair characterization of Australia, we also invest heavily in institutional education, as an export, wine producing, tourism and other pretentious things like that.

You see innovation is about profit margin, technology is for China and that kind of countries.
Using a separate device (yubikey, mobile phone, etc) is always recommended, but this is a bit more secure than meets the eye. Someone would have to get access to your Slack account to view the codes, and to do that, they'd have to first get access to your work email (because Slack is password-less and emails auth links to you).
I have Google Sheets that have a moderate number of cells (~500k, so 10% of the maximum allowed), and I can’t get mobile Safari to load them most of the time. When they do load, it is invariably impossible to switch tabs more than once within the sheet.

Luckily, Chrome for iOS exists :(
Have you ever read an academic paper? This is a pretty bog standard layout.
If I'm not mistaken, rear fog lamps are required by UNECE regulations and would mitigate this issue. Unfortunately, in the US rear fog lamps are not required.
This should be illegal because it's going to cause accidents. Someone behind one of these cars is going to get distracted and crash.
AWS Lambdas are bane of my existance. Many of issues I was involved over years*. From issues with performance, deployments, cold start, api gateway integrations, arbitrary limits or just random failures. Debuging is difficult and whole thing is dog slow. Even today I have two outstanding issues that I need to investigate, lambdas fail to connect to redis and pino not logging correctly response times.

Some of that can be blamed for misusing lambdas, but I hate FaaS concept. AWS ECS, google app engine and k8 where you deploy container are imo better and give you more control.

Edit not hundreds but probably close to 70 in total.
“The string is a stark data structure and everywhere it is passed there is much duplication of process. It is a perfect vehicle for hiding information.” - Alan J. Perlis
>He didn't just "receive" classified information. He's alleged to have not only communicated with Manning to direct her to grab specific information and tried to help her break into systems.

One of the seventeen charges is about this. The others are all solely to do with publishing classified information.

If all of the other charges were dropped, maybe you'd have a point but it's clear that the entire thing is primarily about his work as a journalist publishing documents.
Anecdotally, I'm pretty happy in my marriage. There are hard times, as there are with anything, but overall I'm glad I married my wife and she's glad she married me. We enjoy each other's company and have a relationship that is built on trust, compassion, and commitment. We are far from miserable.

I think it's interesting that commitment to children is honorable but commitment to spouse is not. My oldest son, due to selfish life choices, has caused me far more misery than my wife ever has. I still love him, and want good things for him, but my life is now very separate from his. And, perhaps, that's how it should be for children. It's expected that they grow up and leave the nest. But my wife is the one I made a life long commitment to. That seems like the higher priority to me.

FWIW, I'm not advocating staying in a miserable marriage. I'm advocating for, having already committed to staying in the marriage (when you took your vows) do everything possible to have a robust and joy-filled marriage.
It looks like with this service the user who can generate a TOTP can't see the backing seed. Therefore, if they leave, and get removed from Slack, they can't generate a code.
If you just shared the seed then everytime someone left the team you'd need to regenerate.
The moire is an artifact of the scanning or scaling process, and is by no means historic. Removing it is certainly legitimate. That is particularly true since scaling the image can make it worse.

If you are talking about preserving the halftone in an original scan, then yes I agree that it should be preserved. Yet you must also accept that the periodic pattern will have to be removed prior to publishing the image since it will be scaled at some point.
as well you should be.

I'm a long term melbourne resident: this was a photo my wife took at a similar time, in our local park in an almost adjacent suburb:

https://imgur.com/assTtuS

Whether the lockdowns are justified or not (I think it's complicated, sure, no one likes them but that doesn't mean they're not the right thing or on the alternative side that there haven't been mistakes in their implementation), there has been a coordinated attempt with protests recently attracting low thousands, but dwindling to hundreds in recent days.

that video I believe is from St kilda, which a particular small group of protesters targeted on that day for their specific actions. this was day 5 or so of them effectively playing tag with police around the inner city. the rest of us have largely been getting on with our lives.

the first video is from the cbd during similar actions, and while it's likely unjustified behaviour from police, it has to be taken in the context of an organised movement that has targeted and injured police in recent times, and an extreme right wing subset deliberately provoking and trying to get as much of a response from police as possible (they then film, edit and post things out of context)
Apple still has an active trademark for MacPaint in UK [1].

If you're app is for sale in the UK, which almost all are, then Apple is obliged to enforce their trademark.

[1] https://trademarks.ipo.gov.uk/ipo-tmcase/page/Results/1/UK00...
Ask HN: Oldest Code Still in Production
Hi HN

What's the oldest code you've ever seen in production, as in it's still running.

I'm imagining a very cheesey Netflix movie where our protagonist has to fix some code her late grandfather wrote. And in fixing this code she's able to connect with him.
I'm curious - why does it matter if Plex is pushing their streaming services? Isn't it really easy to ignore?
COVID jumps from humans to cats and dogs because the virus is well adapted to our lungs and throat, where it's easily aerosolized and expelled. Bats are a completely different organism with different adaptations.

Most viruses that live in bats get shed through their feces which animals and humans come into contact with quite frequently in the wild (again, just look at hendra outbreaks). Chances are, even more people are exposed to the droppings in industrial settings before the sterilization step. A few scientists handling bats with protective gear is a drop in the bucket to real world exposure and it's hardly whataboutism when it's about research meant to protect the whatabouts.
Also check out funkwhale!
3x fits pretty much every engineering project I've worked on.
Not your direct question, but it does seem to be musical composition on a computer using Markov chains earlier than your first in 63

An Experiment in Musical Composition (1957) DOI:10.1109/TEC.1957.5222016

"Several analyses of the sample and syntheses of new hymn melodies were performed with a large-scale computer. The machine has random-access storage of 230 sixteen-decimal digit numbers and separate magnetic drum storage of 4000 numbers and 10,000 instructions. It is synchronous in operation with most instructions requiring 1.3u sec"
both china and russia have ridiculous claims for every day of the week just as well.

at some level all political claims are ridiculous but all countries mentioned in your post are pathological liars, they just lie about different things in different ways.
For that one vital service which doesn’t support multiple users on a single account (or locks it away behind an eye-wateringly expensive enterprise plan). Every org has one, for a long time in mine it was access to the Alexa developer console, which supported a single Amazon account being able to publish updates.

If you find yourself in this situation and use 1Password for business you can share credentials, including a TOTP token, using that.
Yeah, but the amazing thing about software is that updates can arrive.

It shouldn't matter if the APIs in use are deprecated, or a new API that is designed for the use case arrives in three weeks after the application was initially released (the APIs were not ready when COVIDSafe was made available to the public).

Get the app - even if it's imperfect - in the hands of users. Admit fault for the issues that do exist, and commit to a timeline to remedy the issues and update APIs.
Just being an user of a FOSS system is already a huge contribution. It provides a good feedback loop for developers and brings motivation for the teams to solve issues that are sidelined when no one seems to care.

Granted, FOSS developers don't live off user feedback alone, but if you depend on 1% of your user base becoming faithful financial backers, the more users you have, the better it is.
There's also no evidence the hacked laptop's data was offered to Wikileaks.
You can also take a look at Atom. Which is open source code editor (similar with Visual Studio Code). https://github.com/atom/atom
Okay? You gave one example, C#, and extrapolated that to every single serious programming language you've ever used. I just took a quick look and none of Java, ruby, python, and PHP has this functionality in its standard library. Also yes ANSI codes work but it's not easy to write or read, so that's what these libraries are for. I'm not a JS apologist but it seems inaccurate to imply that its need for a terminal colorization library is a unique deficiency of the language.
Have you considered a "no maintenance intended" badge on those repos?

https://unmaintained.tech/
20 years ago you could just type in the rotation angle you wanted for each color separation into your film plotter.

If you ask your printer, they should be able tell you what lpi/dpi they can resolve on the media you're printing onto (you may be limited due to dot gain on uncoated stock).
> Instead, every techie I spoke to either hated it wasn't open source; or used the fact that the app was based on Singapore's app, but was not subsequently open sourced itself.

Singaporean here. Our app has never really been open sourced either, contrary to claims from our previous Smart Nation Minister [1].

The only things that were open sourced were the BlueTrace protocol, which Australia uses, and some really outdated reference app implementations.

I think Singapore has given up on the Bluetooth tracing approach as well, and has pivoted to requiring everyone to check in at various buildings and eating establishments [2].

Then again, Singapore, despite being one of the most vaccinated countries in the world, imposed further restrictions on eating out that take effect today. [3] Hurray. :) /s

[1] https://www.smartnation.gov.sg/whats-new/speeches/clarificat...

[2] https://en.wikipedia.org/wiki/SafeEntry

[3] https://www.straitstimes.com/singapore/health/dine-in-social...
This video format is challenging to watch. It's one presenter with a (co-host? I haven't seen this podcast/show/whatever before), and they keep going off into "oh you know what that reminds me of". The tangents seem like they (or at least the co-host) is showing off "this is what I know" and it makes the main message really hard to follow. I'm 30 minutes in and I'm giving up. Two people talking over each other takes away from the presentation / main thread.
>> Per miles driven the US has an average number of traffic deaths.

> Maybe the root cause is the laughably easy barrier of entry to have a license to drive a death missile?

You're saying we should make driver's licenses punitively difficult to get in order to shift American population structure in the direction of dense settlements?

The reason America isn't densely settled is much simpler than that; there aren't very many people in America.
wdym user's world?
In Rust, calling an async function from a sync function looks like this[0]:

block_on(myasyncfn())

This basically repeatedly polls the future returned by the async function, until it completes, and then returns it. (you can also call a full-featured executor like Tokio, but for simple stuff block_on is perfect)

My mental model is like this: just like you use await to wait for a future in an async context, you use block_on to wait for a future in a sync context.

You only need to call block_on on the top-level future, meaning that myasyncfn() can have a lot of futures underneath. The only thing that won't work is spawning other tasks (new top-level futures that can continue executing even after the future returned by the function completes). Which is actually amazing: after block_on returns, there is no async background tasks lurking on: the program just continues as a normal non-async program.

I don't know how async is in other languages, but I guess that every language has something equivalent to block_on? How on Earth you integrate async code into sync code otherwise?

As an aside, calling a potentially blocking sync function from an async function is easy too, like this[1]:

spawn_blocking(myblockingsyncfn)

This spawns a new OS thread (or reuse one from the threadpool dedicated to blocking operations), then run the provided function in there. spawn_blocking returns a future that, when awaited, waits for the function in the other thread to complete, and then returns its value.

[0] https://docs.rs/futures/0.3.17/futures/executor/fn.block_on....

[1] here the exact function to call depends on the executor you use to run the event loop of your async program, but all major ones provides a spawn_blocking API, like https://docs.rs/tokio/1.12.0/tokio/task/fn.spawn_blocking.ht... and https://docs.rs/async-std/1.10.0/async_std/task/fn.spawn_blo...
Which is nowhere near no_wizard's point. And nowhere near what you've done.

Gorge Bucaran, author of Colorette, summarizes your actions here https://github.com/ai/nanocolors/pull/14#issuecomment-927134...:

"Colorette isn't some obscure project either. It is well used. Now imagine I find a project that meets that description. Clone it. Erase the .git directory. Initialize a new repository. Make a few extraneous changes. Incorrectly benchmark it. Falsely claim improved performance. Tweak the docs. Change the name. Add a logo. Start aggressively promoting it and sending PRs to high-profile projects while leveraging a non-trivial social media following. I'm not against forking a project and adding new value to it. I encourage that. But that's not what's going on here. This is the collector getting away with a new piece for their collection."

Comparing that, to "promoting alternatives" to one of your projects on Twitter, shows a creepy lack of acknowledgement.

But that's why we're here, isn't it?
I copied one file and I didn't know a way to keep the history of this file.

When people later explained how to keep the history of single file I tried to restored it.
Airsonic is also nice. I was a long time (paying) Subsonic user, but got a bit fed up with it and migrated.
> The only escape hatch is to assert that humans can't be described by physics.

Or that there is some physics that can’t be described by computation. It seems vanishingly unlikely, but there is no actual proof that everything physical is computable. And even if there was, it probably has nothing do do with minds.
The Mini is designed and manufactured in the UK, Germany and elsewhere in Europe. It's owned by BMW.
I only use Plex because they have a native LG webos app.

jellyfin has one too and are currently in the process of getting into the official LG app store, awesome!

it was rejected a couple of times for some bugs the LG reviewers found, all of which are fixable and being worked on. looks pretty much a done deal.
I'm not sure what makes me angrier, the lack of freedom, or the laziness of the Australian government. It's clear that they don't want people to leave the country because they don't want to deal with people comming back.

Yes they think that far ahead to avoid doing their job.
The halftone pattern itself might look lovely and “historical” on you screen, but the book would not present the image “as-is” (i.e. with all halftone detail from the original photo losslessly captured on the page), but rather through the lens of another halftone printing process, one whose DPI is low-enough that it would arbitrarily interfere with the original photo’s to create a garbled mess. The final product wouldn’t be halftone dots encoding a picture, but rather halftone dots encoding moire stripes from an attempt to replicate other halftone dots from a “sample grid” that doesn’t line up with them.

It’d be a bit like taking one of those game emulators that displays the game with a “scanline”-effect filter… and then hooking the computer running the emulator up to an old TV that has a natural built-in scanline effect. You won’t get the pretty scanlines from the emulator, nor will you get the pretty scanlines from the TV; you’ll just get a mess.

(To put it in technical terms: to accurately show the halftone “information” from the original photo in the book, the print resolution of the book would need to be double the Nyquist frequency of said halftone information. But it very likely won’t be.)
I would pick Poland out of these because of human capital, property rights, rule of law(*), etc.

{*} Yes, I understand the EU is accusing Poland of not respecting rule of law because Poland asserts that Polish laws take priority over EU laws when there is a conflict. That's a pis*ing competition about globalism versus nationalism and not about rule of law per se.
Sadly, Chromecast is essentially broken on Android too and has been for about a year. Stable version of the Chromecast plugin in the app is ancient and the nightly version doesn't work with stable server.
I want to say +1 for funkwhale, but I didn't get it to work with the subsonic client and haven't found yet a way to download/cache songs from my library on the phone. Have you figured this out?
Apply to Canada!
Quite a few buildings are heated with datacenter waste heat.
Are we helping Debian get those processed into Bullseye? Or we just barking ideals? We all know FOSS is under staffed and under funded.

Perhaps Google should have one FTE for each major distro to help keep that beast of a codebase up to the standard these threads seem to expect.

It's a heavy burden to place on Debian - and I don't think it's fair to expect them to have eg Chromium and the 10-hundred other packages perfect.

Debian is fscking awesome, they are doing amazing work. Hip Hip Hooray!!
I'm glad you're pleased, although I know that's also a relative experience. I recently helped a colleague using Free[1] in France and was blown away by... pretty much all of it.

He was paying €15/mo for 4K television plus 1/0.6Gbit fiber internet on custom hardware they'd provided. I can't help but feel something went terribly wrong in the US for us to be happy with our $80/mo cable options and dated, generic hardware.

[1] https://www.free.fr/freebox/
TL;DR only estimate the next milestone.

Estimates become less useful the further out they are. To get useful info about how long a project will take requires two large changes; careful definition of the problem and effective scoping of deliverables to validate your solution.

I push teams to understand the problem before attempting any implementations. Without this context people usually make something awesome that isn't useful. That's another thread on how.

The big hack is figuring out what can be delivered to test your assumption quickly. I shoot for about a month of work for this. Give or take.

Up front you get the team to agree, "this milestone should be easy to deliver, assuming we understand the problem and our assumptions are right". Then, if you miss that deliverable you stop work on the project and figure out why you were wrong.

This stop is meant to combat the Sunk Coat Fallacy. Then you can try a new approach, cancel the project, or keep going having only "wasted" a month. These are called Kill Metrics sometimes.

Long term estimates commonly fall to Sunk Cost issues in my experience. This is where a rush hits at the end and you get low quality product.

It takes a shift in how engineering communicates with other orgs to pull this off. You need to account for their needs in the milestones and keep them in the loop as a final delivery date comes into focus. It works to go from second half of the year -> Q4 -> Nov -> date. As long as you refine those with enough lead time.
Chrome for iOS uses the same safari rendering engine as third party browser engines are not allowed. So very curious if it works in iOS Chrome but not Safari as it’s mostly the same.

Also for your specific use case (I realise you were making a point) would be worth using the app I guess.
> secrets are not static, unlike passwords

The TOTP secret is static. The one time codes are just trivially generated from the secret. Now, TOTP is designed to use a cryptographic hash function (I assume SHA-1 is still being used in this case, which is short of ideal but it's not the weakest link here) and so it isn't practical to unwind the hash and get the actual secret but...

> you can revoke access to someone's future ability to authenticate without having to change passwords

The agent knows the secret and so can generate any such codes at any time, I assume it's hard to convince it to give you codes for tomorrow or next Wednesday but who knows?
Some sales people work out how much the client is willing to pay, and that's the price. The deliverables are squeezed in to that price at a later date, by cutting corners if necessary - I think it's quite an effective way for companies to make money.