skysight-inc/HackerNews huggingface dataset:
This isn’t worth worrying about. The atmosphere has a CO2 concentration of about 413 ppm. The International Space Station operates at a maximum CO2 concentration of over 5000 ppm. 5000 ppm is also the maximum safe CO2 concentration recommended by OSHA and the approximate average CO2 concentration aboard nuclear submarines. This still might be slightly too high—astronauts and submariners commonly report headaches, for instance—but it’s about ten times the concentration of the outside atmosphere and the health effects are a little hard to measure. Plus, the people in these conditions are still capable of safely operating space stations and nuclear submarines, which is not a cognitively easy feat. If the CO2 concentration of Earth’s atmosphere got that high, we’d have much bigger problems.
>But it's not misinformation to float the idea and explore the possibility

Tell that to the fact checkers and the social media companies that display the fact checks.
Stripe's Evident Conflict of Interest
Stripe has an evident conflict of interest when it comes to approving or disapproving of who it will do business with.
Or file a police report and charge you with felony degree embezzlement 20 years later: https://gizmodo.com/woman-hit-with-embezzlement-charges-for-...
To be clear I'm saying the only way I know to make:

> hospitals are filling up with the vulnerable population

From the Swiss numbers is to really assume the worst in people.
Used this for a while and loved it. I just find the icon to be an eyesore on my dock.
For the WebAuthn scenario there is no inherent backup, there's deliberately no way to export the keys. For a random web site, they're likely going to offer some way back in - albeit Google is content to make that quite hard if you choose their "Advanced Protection" scheme (and I think one of the free Git offerings just says too bad, you gave us no money, you're locked out but you lost nothing of value), but an employer might very reasonably issue employees a Security Key and say something like, look, if you lose it that sucks but go to Front Desk with your Line Manager, and they can issue you a new one, there is no bypass.

As a user, it also makes sense (particularly if you know you're a real target, e.g. a political journalist, politician, activist) to just own more than one.

> Yubikey should at least be able to rate limit attempts and erase its internal state if there are too many attempts.

On the previous generation with a PIN as second factor, if you guess the PIN wrong repeatedly it locks you out.
I wonder if atmospheric CO2 increase is correlated with the massive reduction in insect biomass we've seen. If so, would it be possible for us to reverse if we decrease insecticides and allow insect population regrowth.

[1] https://en.wikipedia.org/wiki/Decline_in_insect_populations
I completely disagree with Thomas' first point. It is better IMO to always log before you do something so that if you crash during whatever was happening, you know what you were trying to do. Additionally, if you have enough logging, you can figure out that some call did succeed by implication so long as you have access to the source code/know what the order of high level operations are.

If for some reason you can't easily figure out whether something succeeded, you should probably log before and after the operation. I personally try to avoid doing this since it can clutter up the log, but it can be useful depending on how code is structured.

Another minor point is that I prefer to have INFO cram as much information as possible with DEBUG reserved for stuff which is ignored unless you explicitly turn it on either due to lack of utility vs cost.
> I would hope you wouldn't be designing cs curricula around javascript

I didn't propose that.

I'd expect a good curriculum to expose students to several languages, so that picking up another one is not an ordeal.
I'm sympathetic to marcan's points and I don't think Apple is likely to do anything like this, personally, but this argument isn't very convincing. All this means is that they can't release a firmware update blocking use of a third party OS on existing hardware (contra techrat).

OK, great, but we're talking about a manufacturer that makes products designed to go in the rubbish bin 2-4 years after manufacture (witness the half dozen comments by users in this thread saying they have already put their M1 computers in a drawer somewhere!). Apple are constantly iterating, and the goal of a project like Asahi is to stay ahead of the game and continue running on new hardware.

The proper and correct point that techrat should have made is that the second something like Asahi is a threat to Apple for any reason, Apple can release new hardware that's locked down similar to iOS. You'll even have people on this site defending the changes too, in the name of security or something.
There's a market for stolen art; surely you could find a buyer for the coin. You'd get nothing near the face value though.
Yep. This seems to be the point the "FUD! FUD!" criers are ignoring.

Apple has a long, continuous history of locking down hardware. Never having a bootloader unlockable iDevice, unibody, glue, soldered on components that are traditionally user replaceable, soldering in displays and backs when people try to repair batteries, serializing the components so you can't even swap official parts.

Apple has never gone in the reverse direction to make components more easily user serviceable. It's always been in the more restrictive direction. More proprietary with every iteration. Now it's the CPU. Bootloader locking on an M1 Macbook is the next logical step.
I wonder if Alyssa (or other devs that took a deeper look at the DCP) have any idea why the builtin HDMI port of the Mac Mini would not send DDC messages to the connected monitor.

I’ve been struggling with this in Lunar (https://lunar.fyi) for a long time and while I tried my best by comparing ioreg dumps and looking at the DCP driver in IDA, I couldn’t find any obvious logic would block this communication voluntarily.

I should mention that on M1, the DDC messages are sent to the monitor by calling IOAVServiceWriteI2C on the DCPAVServiceProxy of the monitor as seen here: https://gist.github.com/alin23/b476a02a8cd298436848e28476aed...

I’m thinking that this logic might either exist in the DCP firmware which is not accessible from userspace, or it might just be a side effect of some out of spec behavior that the HDMI port might have.
The health effects of high CO2 concentration start to appear in the mid-thousands of ppm. These problems are about an order of magnitude away from each other.
Where does taking the code from Bethesda falls into that?
29 is not correct as stated and falls prey to logical errors. Hamkins presents a formal take on it here: https://mathoverflow.net/questions/44102/is-the-analysis-as-...

His conclusion (which I agree with) is

> The claims made in both in your question and the Wikipedia page on the existence of non-definable numbers and objects, are simply unwarranted. For all you know, our set-theoretic universe is pointwise definable, and every object is uniquely specified by a property.

Despite arguments about countability, which ignore how difficult it is to pin down "what is definable," it is possible (although not necessary) for all real numbers to be describable/definable in ZFC.
True, although research is ongoing into minimising this[1] and a product based on the above research is being prepared for the market.

[1]: https://journals.plos.org/plosone/article?id=10.1371/journal...
The one to unlock my Samsung Galaxy whatever-number-it-is works pretty consistently.
A flood of unknown products is making online shopping impossible
Un-Gaming Your Culture
Android supports registering multiple fingerprints to get around this. I wonder if that's also possible with this key.
No, it's my observation that conspiracy theories about organized child sex abuse are largely a right-wing narrative. For example:

> QAnon (/ˌkjuː.əˈnɒn/) is a far-right conspiracy movement centered on false claims made by an anonymous individual or individuals, known by the name "Q", that a cabal of Satanic, cannibalistic pedophiles operate a global child sex trafficking ring

https://en.wikipedia.org/wiki/QAnon

It plays into classic themes of degeneracy and a need to return to traditionalism, and is designed to shock and whip up passions among the family-values crowd.

But it's the comment about the Taliban that really showed your hand. The meme on the right is a grudging admiration for the Taliban because of their highly conservative social ideology; i.e. commitment to traditional gender roles, forbidding abortion, persecuting trans people, etc.
Lots of books on the secondary market have library markings (usually, lined out with Sharpies or the like), because lots of them are stuff retired from library collections.
The threat model is that people can't ssh to your machine in order to elevate their access (e.g. corporate VPN), because they can't physically touch the key. Example: whatever happened when major Twitter accounts were compromised.
Commandeering Facebook
Best explanation I have read of what happened to FB
> If you were a child with a Nintendo DS like myself

Well, apparently I'm officially old ;)

WOW, think about my mom or wife's grandma, and even though they are very unlikely to download a Mario Kart game, they are more susceptible to things like "Your computer has a virus" and other things like that.

I never considered that with a executable malware, the cookies and/or passwords could be compromised. Further more, that the computer could be made slave to a botnet.

Is this how machines are taken captive to do a DDoS? Terrifying stuff!
Workers benefit from less flexibility on remote work
First came global warming. Then hurricanes. Then more migratory bird deaths?
I mean, they don't mind giving out their phone numbers, and contact lists as well.
This is why I don't like when bigco's interview process discounts candidates' open source contributions; it's the only proof of someone being a "do-er!"

As an example, it's pretty hard to fake that you're a top contributor to an open source project.
Two common examples from the Ocaml world are promises through the LWT library and options.

If you just wanted to open a file, maybe you would write something like this:

run(create_file("filename"))

Here `create_file("filename")` is a pure value, no side effects. It's a value that represents the concept of creating `"filename"` (and maybe returning a handle). When passed to `run`, that value is inspected and only then the actual action it corresponds to, creating a file, is executed.

What if you want to do something with the file? That looks like this:

let create_then_delete = and_then(open_file("filename"), (handle) -> delete_file(handle))
run(create_then_delete)

`create_then_delete` represents the concept of opening a file and giving it to `(handle) -> delete_file(handle)`. If you want to actually do that, you pass `create_then_delete` to `run`.

Functions with a type signature similar to `and_then` turn out to be pretty common, so it's nice to have a way to talk about them. That's basically what monads are for. In OCaml, all functions that have a similar type signature can use the new "let-monadic syntax", which basically lets you rewrite

and_then(open_file("filename"), (handle) -> delete_file(handle))

to

let\* handle = open_file("filename");
delete_file(handle)

Which is a lot more readable if you ask me. Any type that has a function like `and_then` works with this syntax, and those types called monads.
Exciting things are happening, but to set the record straight, we (Timescale) went "all in" on the cloud over a year ago :-)

[0] https://blog.timescale.com/blog/building-open-source-busines...
> Never measure yourself by others.

Yeah this is something I definitely struggle with
> Society "cancelled" Harvey Weinstein because he raped multiple women, to the point where it was an in-joke in Hollywood. I don't think he's much of a good example except to identify how long it takes for justice to reach someone.

He caused lifechanging trauma to 10-20 people. That is not excusable.

What is not brought up in the assesment of his persona is the amount of entertainment he provided to the world.

The aggregate of 40 hours of AAA movies being enjoyed by 3 billion people between theatre, DVD, streaming, TV and piracy.

But of course you can't call 3 billion people up to provide their account of what positive impact Wienstin had on their lives. Plus while the trauma caused is substantial, the entertainment provided to the aforementioned 3 billion people is marginal.

When you judge somebody you should see the whole picture.
Thanks for that quote about officers, it's excellent! Indeed hardworking and stupid are dangerous. I'm not sure if clever and lazy should be put at the top, but they will often find the best solutions.
So in theory, I can pay a small premium to rob you. Is that the basic premise of how this works?

You (assuming you are the author of the service) challenge people to find a flaw in your game theory.

Here it is. The world if full of trolls.

You have a 1000 dollar camera and I want to borrow it. I put up 1100 bucks and you put up your camera and 100 bucks.

If I'm a troll and enjoy making internet people suffer and happen to actually want a camera.

Then I can get yours and for an extra 100 bucks cause you to personally lose your camera and 100 bucks.

Sounds like the dream scheme for affluent trolls to leverage 100 bucks into 1100 of pain.
Wow and only a 30 day limit:

Items are declared lost after they have been overdue for 30 days and a replacement fee will be charged to the patron account.
I have also heard about it as radix sort : http://www.codercorner.com/RadixSortRevisited.htm
> coreos archived etcd-operator

doesn't surprise me.

this operator really tarnished coreos in my eyes when I learned that the it worked only with volatile storage, so if for example, your power backup failed and every node went down, you lost your all your etcd data until your last manual backup.

it felt like it was a half-assed attempt of a proof of concept and it was somehow being used in production systems by a lot of people, including the guys in the article.

however, and to be fair, I don't know if it evolved much after our experience, although the fact that it was scrapped doesn't bode well.

luckily it didn't resist much testing so we didn't waste much time with it.
What I find works best is to avoid logging raw datatypes and instead limit it to objects/structs with custom toString. Then just make sure any PII fields are not included with toString either through some sort of annotation or by writing the implementation manually. This also encourages minimizing the code that actually interacts with PII such as replacing emails with user IDs ASAP.
If you wanted OpenPGP to protect SSH, you should consider upgrading clients and servers to a modern OpenSSH which can just speak FIDO (which this and other recent Yubikeys support)
Without this model the attacker needs to steal the Yubikey. With this model the attacker needs to steal the Yubikey and pull a fingerprint.

It remains to be seen if that's a meaningful difference, but it seems reasonable that in some situations it could make the attack much more costly.

I could see myself using this when traveling.
Yeah, I assumed Linux developers wouldn't actually want to hurt the project they contributed their code to. Linux is not protected from that.

Another example: one day the copyright protection of Linux code is going to run out. That'll probably be a very fun day.

> 10,000 legal minefields is not a good way to run a project.

Agreed. Honestly I think these licenses shouldn't even exist to begin with. Copyright needs to be abolished.
I wonder how much they lost from the outage?
It could do the opposite, borrowers may feel that the late fees justify them keeping the book for longer, since they are paying for their excess usage.
> 0% selected the right answer on this SAT question: Circle A has 1/3 the radius of circle B, and circle A rolls one trip around circle B. How many times will circle A revolve in total?

That's fun. I of course immediately selected 3 which means I could have a bright career in test preparation ahead of me.
Fingers crossed ot becomes the spiritual successor for the Pebble that I am looking for.
Indeed - the lack of backups in WebAuthn is a design feature (although I can see credible usability issues in online services where users should really enrol several, but struggle to keep them in different locations and ensure they register their off-site backup key to each service etc.)

I presume (but haven't reviewed in detail) that these bio keys will have a backup PIN in the same way previous models had the PIN available for management and WebAuthn modes of operation - there are some real-world failure modes where wet hands or a bandaged finger may be an issue, but the user still wants to keep using it. I do agree the best solution is to get several tokens, enrol them all for each service, and just keep them as safe as you realistically can.
The stock market is a fine comparison. It's something that's run by, or at least heavily controlled and regulated by the federal government of many nations. Telecom services run on the telecom company's infrastructure. The government just happens to pay for them to build it where I live. The purpose of the analogy is to highlight how the state is pretty bad at managing things, even when it pours billions of dollars into doing so.

> Telecom systems have likely had lesser downtime than Facebook in the last 30 years

I've had a handful outages in the past few years for my telecom services. Rogers' network failed in Canada in 2020 for a full day, crippling communications across the country. I've had one outage with Facebook since 2008. At worst, they're just as reliable. Regardless, the argument here really is "should the state step in and take control of Facebook's uptime because a lot of people chose to use it and it goes offline for a few hours a decade"?. I still maintain that none of this is an affirmative argument.
Off topic, but it’s so frustrating how yubikey (or any non SMS/email 2FA as a matter of fact) is not supported for any bank. I think I would sign up right away to a bank that supports yubikey or authenticator apps.
https://openlibrary.org/developers/dumps

That’s a big download, BTW
Interesting US DOE paid for it. So the lines are 100% efficient... but you have to subtract the cost of refrigeration.
The backup would be another hardware token, ideally. Just one that isn't biometric. You would guard physical access to that token more closely.

Google's Advanced Protection Program enforces two keys, since they also make recovery much stricter.
As if we are supposed to trust US or any other countries. Lol
http://csunplugged.org/
http://csfieldguide.org.nz/
https://academy.cs.cmu.edu/course/cs1-20
I'm with you, I've fallen out of the habit of using fingerprint auth on any of my devices that support it (Macbook, Thinkpad, Motorola phone) because it's so unreliable. I have to re-enroll at least weekly if I want to keep it working well. I have eczema issues on my hands, which I think is the main issue, but also have found cuts and paint/glue to be common problems. I can enroll multiple fingers but that means I have to try four fingers before it unlocks... and usually I end up enrolling the same finger multiple times instead since the device has stopped recognizing it.

For what it's worth I used to have a job that involved frequent use of an optical fingerprint reader (the type that's a camera behind a glass platen) and did not have these types of problems with it. I think it's a weakness of the capacitative type of reader that all devices are using now, or possibly just less sophisticated matching software.
From FB themselves
https://engineering.fb.com/2021/10/05/networking-traffic/out...
You shouldn't pull more than ~1 to 2A from a motherboard fan header which means you can probably only have 1-2 fans per fan header. Also controlling the motherboard fan headers from the OS is always finicky (most BIOS are utter garbage anyway). This USB adapter pulls power directly from the PSU so it can have 5+ fans and can be more easily controlled from the OS. This specific one can also control some LED strips, etc.

TBH it's not really necessary but people like to have it.
One reason for late fees I’m not seeing in the comments is high demand inventory management. In small libraries, a popular title might have a long waitlist due to a smaller supply as a budgetary constraint. The late fees correspond with a limited borrowing timeframe so that the popular item gets utilized by more patrons. This seems fair to me, though I appreciate there is another consequence of late fees that others here consider advocating against.
> One built the foundation, the other built the pretty house on top of it.

Though the original Mac didn't use UNIX or C. ;-)
> Most retail and institutional investors in crypto are already KYC

Indeed, because they're there for speculation, not value or utility.

> there's scarcity (Bitcoin), utility (ether), Defi/staking, NFTs, the metaverse, whatever.

Ok, I'll grant scarcity, but it's also part of the previously-mentioned end-run around the worst parts of the current fiat system.

Ether offers no utility beyond token scams. NFTs the same, except double.

> Moving money is a benefit, but the least interesting use case of crypto.

Moving money without the IRS/DOJ/FBI/CIA/NSA/Mossad/PLA peeking over your shoulder is literally the killer app for cryptocurrencies. BTC is obviously failing at this particular task for anyone on a KYC exchange, but cash and tumbler markets are still thriving, and there's always Monero and ZCash, as well.
Thanks, I've never heard of Big O or UML so that's just the kind of thing I was hoping would come up. I have the exact same philosophy as you, constant learning but to always achieve a goal. Makes learning always fun (even when massively frustrating).
It's not there. It's like the redirect replaces the history entry.
We recently purchased a cheap (<$500) Dell Inspiron, and it advertises support for Ubuntu in the specs. Not even one of those fancy XPS "developer edition" laptops or whatever, just an ordinary Inspiron.

It's fine to worry about it (and UEFI was a real threat until Microsoft mandated support for other-os booting), but support for Linux in the PC world has never been as fragile as support for it on Macs. You're entirely at the mercy of Apple's whims; I support the Asahi project, but that's just the truth.
Might be nice to have an 'un-shop' filter based on this or similar technology to give to a young person who feels depressed after comparing their own looks to the people they see on Instagram.
Yeah it’s a little different because the human mind isn’t procedural — you can perceive multiple cards at once, at a fuzzy resolution. You look at a hand and see “okay an ace, 3 face cards, some other cards” then scan to resolve. So an optimal algorithm needs to take that cognition into account.
Any reading on this you'd recommend?
Time to add an embedded EKG as another factor :)
If that is the next logical step why would they go out of their way to design a whole mechanism for running custom kernels?

They could've just released a locked down Macbook in the first place if that was the goal.