skysight-inc/HackerNews huggingface dataset:
This sort of discussion of encrypted instant messengers is fun and all but as usual misses the elephant in the room:

Only a small percentage of people verify the identities of their correspondents.

Here is a discussion of this with respect to Signal:

* https://sequoia-pgp.org/blog/2021/06/28/202106-hey-signal-gr...

Presumably the situation with Threema is as bad if not worse. So in either case the people that run the servers can usually get access to actual encrypted content with a straightforward MITM attack.

Some random observations:

Most users of encrypted instant messengers keep their old messages around. That for all practical purposes negates the forward secrecy right up to the point that those messages are somehow securely deleted. If someone can get access to your secret key information they pretty much for sure can get access to your saved messages. As a result forward secrecy is not very valuable in practice for encrypted messaging.

AFAIK, Signal does not offer any sort of strong passphrase feature to protect secret key information or stored data. That is why successful attacks from things like Cellebrite forensic boxes get a fair bit of saved Signal information and it is then possible to impersonate you. So it seems odd to complain that the passphrase feature offered by Threema requires longer passphrases than it should.
Aren’t some of the game systems like D20 patented/copy written
whoa, trippy - i didn't know tech companies were going the part-time route already.

that's the one danger about the 4-day work week i'm not crazy about.

my guess is, if you had a relatively valuable skillset, say coding of some type that was reasonably in demand for, say, a contract rate in the US that would get you $65/hr or more on a W-2 basis, then you would be able to find some decent, possibly long-term work _if_ you were willing to put in the effort.

what's the effort? start pitching companies. find full-time listings and submit your resume, tell them what you're seeking (20 hours/wk, 4 hrs/day, $50/hr, employed normally, but just part-time instead of full time, presumably no bennies, etc.), and that's about it.

ping 10 companies a day from the "Who's hiring?" threads, and see what you get back, rinse, refine, repeat.

also, pay linkedin $30/mo and ping dev managers directly with your pitch.

and try to talk to an HR-type person at a startup to get the lowdown on what it would actually take to get hired part-time - it might end up being pretty simple, or not, but you'd be in a much better position if you knew, and might not take more than a simple message or phone call, or ask a friend of a friend who is in HR.
React Aria is a great project! We used it to meet WCAG 2.1 level AA requirements in our chat widget. It's even hard to assess how many days of work we have saved thanks to this solution. We've covered a bit of our experience in multiple posts, e.g. with handling keyboard navigation: https://developers.livechat.com/updates/livechat-accessibili...).
Do you really not see what the issue may be with constantly broadcasting a sonar signal would be from a military submarine?
>"Nuclear-powered residential heating is distinct from running space or water heaters with electricity generated from nuclear sources. Direct nuclear heating, tried in small pockets of Russia and Sweden, circulates water between a power plant and homes, transferring heat directly from fissioning uranium atoms to residences."
There seems to be a call for action [0] directed at NPM.

[0] https://www.change.org/p/npm-please-secure-package-releasing
Just checked my backups. Wildly popular Skanavi books [1] have copy-pasteable text, so they OCRed it.

https://www.amazon.com/Problems-Mathematics-education-instit...
Had an experience like this recently with a certain media streaming hardware company that starts with an "R". Their process had six points of contact, starting with an initial technical phone screen (with a language feature quiz), an hour long algorithm session (actually surprisingly fair), and then four more 45 minute interviews after that. They'd made a point of saying how good they were at getting back to people in 24 hours, and then they ghosted me. As far as I could tell, it was going alright, too.
It makes me want an extension that redirects to the lite version of every site if it exists.
> Similarly, I personally view the AGPL as a nonfree license, although it's being pushed by anticapitalist zealots at the FSF who of course invented the notion of software freedom in the first place so my classification is, of course, controversial.

I don't think that world should be licensed with A/GPL all over, but I don't think A/GPL is the second coming of Evil, either.

I like the virality and values which GPL family of licenses stand for, and I personally support them. I license all of my software with GPL, and open source it like that. Why? I don't my code, intended to be open and free for everyone, to be modified and locked up for somewhere for profit, that's all. In other words, if I put out something on my free time, for leisure, I want it to be free for everyone.

For profit work is different. I'm not a fan of capitalism, but I'm not an anticapitalist zealot either. I'd license my work with most permissive license the circumstances allow, and try to open source it with all the power I have, but it's not always feasible, I know. So it can be Apache/MIT, whatever in that circumstances.

So, that's my point of view. Horses for courses, and I refuse to give my honest/hobby work to someone just because it's convenient for someone to integrate it to something closed source or for profit, regardless of usefulness/quality of the software.
I like pages like that. That's because they let me quickly "style" them to optimal size and shape using tools meant for this job - that is, browser zoom feature and/or window manager's facility to resize windows.

It's sad that we've forgotten why web rendering has fluid layout: the whole point was to enable the user to make a web document work for them. In contrast, the modern websites are essentially PDFs emulated with CSS and JS.
Heh, I wonder if there has been an Overton window shift here.

You're making me wonder if having an option to load pages in "readability mode" by default might be a way to go, going forward. That should work great for the majority of content linked from HN at any rate.

The advantage is that you get one consistent view of the web tailored to your preferences. (putting the user back in control, like in early browsers in the 90s).
Ryzen is at a process disadvantage currently so Apple should be more efficient on average. When AMD gets on N5 (soon), it's going to be even more competitive.
This might be of interest as well... https://en.wikipedia.org/wiki/Paranoia_(role-playing_game)
"Occasional positional fixes when a boat surfaces can be used to ‘reset’ where they thought they were whilst running silent."

Yeah, fair enough that makes sense, but what I've read about modern underwater inertial navigation systems is their remarkable accuracy. You'd think that any selected course for the sub would be set well within the tolerance of the inertial navigation system thus the sub would steer well clear of any known seamount. Alternatively, it was uncharted and that brings me back to the accuracy of the maps.

P.S.: I'd also read somewhere that as part of the underwater navigation system that gravity detection was also used and it is sensitive enough to detect changes caused by massive nearby objects, seamounts etc. As they're passive detectors that wouldn't preclude them from being used all the time.
Hell, reading most things about the military doesn’t give this impression.
but what would be the alternative? There is any CPU update that would be possible for us?
So if I’m reading this correctly, only Windows hosts are directly affected by the malware. On macOS and Linux one only needs to rollback to a healthy version of the package?
> As long as you use C's volatile for all the variables that are involved in a (lock-free) transaction, you should be fine I think.

No, you really won't, neither in C nor in Rust. There are (at least) two reasons for that:

1) You can't do atomic read-modify-write operations (like fetch_add) with volatile.

2) "volatile" is meant for the compiler, not for the processor. Volatile accesses are compiled down to regular read and write machine instructions, so you won't get any ordering guarantees for code running concurrently on different cores.

The reason "volatile" is useful for memory-mapped IO is that such memory is mapped with different flags for cacheability than regular memory. For example, given the right flags, the processor won't cache stores in a store-buffer, or won't coalesce smaller stores into larger stores before sending them up the memory hierarchy.
Where does AR sit between Metaverse and Ubiquitous Computing, the middle path seems like the sweet spot to me.
I don't want to start a religious keyboard war but does anybody know the actual rationale for the Ctrl Fn swap in ThinkPads?

I agree that it is more ergonomic, but I am just curious if that is the actual reason for the swap? Or if there is some older legacy aspect or story behind it in the ThinkPads?
Do you know “kill math”?

http://worrydream.com/KillMath/
Wait... electron isn't cross-platform?
China says it will hold supporters of Taiwan's independence responsible for life
If incompetence in the army is rare, this means that when 90% of the "smart i-drone" attacks killed innocent people instead their "real target" it was on purpose?

Hum, or maybe their bosses were just lying to them all of this time to support a theater of competence?...
> This headline is flat wrong. Productivity is not at its lowest level in 40 years.

Wow, it looks like you might be right. I think CNN just completely got this wrong. Another source, emphasis mine:

> Productivity in the U.S fell by the most since 1981

From https://www.bloomberg.com/news/articles/2021-11-04/u-s-produ...
This is a really odd comment. Npm, and the strange, insecure JavaScript packaging ecosystem is the reason this happened in the first place.
First thing that came to mind was a Monk episode.

https://imdb.com/title/tt1268705
Perhaps I'm pedantic here but, no, you don't need "a bookshelf". The PHB/DMG split is obvious; you don't need the DMG (or MM) if you're a player. You don't need any of the supplements.

Also, you can run D&D games with or without TPK, you know. You can do troupe play. You can do all sorts of game modes. Rules are a framework for your game, that you build, not natural law.
Show HN: A Virtual Co-Working Space for Bootstrappers
Windows Containers on Linux
Hello, A short while ago there was a post here about an program that creates windows or macOS containers on linux, that had seamless integration with the host when it comes to gpu passthrough etc. Can somebody give me the name of the program? Thanks in advance.
Google Translate says of the first "Count Carl Piper, 73, was robbed in his home at Högestad Castle by robbers." and "Carl Piper is one of Skåne's most profiled nobles."

The second "Bengtsson, 32, was abducted on January 17th in Gothenburg on his way to work at Siba, a family-owned nationwide home electronics retail chain of which he is managing director and which he will one day inherit."

Is your suggestion that if this information weren't public then no one would know that those men were rich and so they wouldn't have been robbed or abducted?

Because 1) poor people get robbed too, and 2) I usually think someone who lives in a castle, is often profiled in the news for one's wealth-related activities; or someone who is the managing director of a large chain store; probably has money - without having to check their tax records.

Were the attackers of Count Carl Piper ever found? You mentioned "foreign criminals" earlier, but why couldn't they be domestic?

Earlier you wrote "Senior citizens are also targeted by criminals in Sweden".

I'm from the US. Senior citizens are also targeted by criminals in US. Eg, see https://www.fbi.gov/scams-and-safety/common-scams-and-crimes... .

There's no need to know the person's age and address - go to a neighborhood with decent-looking houses and knock on doors pretending to offer services like re-roofing or driveway sealing. If the person who answers is old, and alone, try exactly the same technique you mentioned.

Or, take a down-payment for the roofing work then don't do it, like in https://www.stgeorgeutah.com/news/archive/2021/10/07/cgb-sus... .
I think what confuses people is that the data isn't the facts either. We derive data from the facts, and use the data to test models.

If you go read an empirical paper, there are plenty of facts there, all in a single section that details the experimental outcome. All the other sections are derived (conclusion, abstract) or invented (methodology).
Given the creators, I'd guess the format is also used in certain machine learning circles as well (or was meant to be at least :)).
Basically, just use this: https://github.com/judge0/judge0
I just can't agree with this. The problems npm has are not new, surprising ones. They are happily letting people upload malware.

https://my.diffend.io/npm/coa/2.0.3/2.0.4/

In 2021, why on earth does such a change not trigger a review before release?
The second “chapter” of this post is pretty disappointing. It seems like one of the authors doesn’t like violent video games (and thinks that they’re the cause of school shootings!) and because of that thinks (or at least implies) that educational software is bad because it’s on a spectrum with violent video games.

Also, while even some of the best educational software (like Duolingo) have problems, they’re generally not the problems that the authors expected.
Peterson algorithm is broken on x86 if implemented with just volatiles. The compiler will not emit the required fences.

On x86 if everything that can be potentially shared is volatile, you may get away with it if you only need acquire/release, but in practice not everything being shared are not going to be volatile. For example if you implement a spsc queue only with volatile operations and use it to send a pointer to a non volatile object to another thread, the consumer might see a non initialized object.
> * C, C++, and similar languages, do not have the goal that undefined behavior must always trap in their abstract machines. But Rust does.

What do you mean ?
I mean, at some point someone made up the term, but it's been floating around for years to describe this exact concept.
403 forbidden
The Painful Truth About All Your Hard Work
Making people get used to (and be somewhat dependent on) Mathematica, a very expensive proprietary program, is doing people a large disservice. But it is very profitable for Wolfram.

Also, the “video games make people violent” argument rears its ugly head.
NPM seems to be a lot of issues
https://github.com/advisories?page=1&query=malware
> "The draft also suggested that math should not be colorblind"

That is an example of CRT. If our society is colorblind, then there's no oppressor-oppressed divide, the central tenet of CRT.

How schools are infecting kids with critical race theory

https://www.youtube.com/watch?v=A4uZGyh1uTk

What's not said in the article is that the agenda is also to support NCLB (No Child Left Behind), which allows students to graduate without knowing any material, or even being able to read.
From macOS to Arch Linux
I'm not sure where you're getting that from...

The i9-9980HK (released April 2019) in the 16" 2019 Macbook Pro looks like the highest-end mobile i9 Intel had released as of November 2019 when the laptop launched.

And the i7-9750H in the base model was also launched in April of that year, and looks like it was their 2nd-fastest mobile hexacore i7 at the time?
Does this only work on Windows? Theres a table that mentions platform support, but it’s not clear if that’s for the visualizer or the capture library.
The expense depends on your use-case. I think that some SaaS products would be cheaper to host on Lambda. We have short bursts of high load, which led to quite a bit of waste with provisioning of traditional application servers and database.

After moving from traditional servers to Lambda, we had lower hosting cost. After switching, it is easier to deploy new back-end features. It is easier to provision a sandbox for development.
> Well, unless you add a GC, which is what I'd do if I were in charge of Zig.

That is probably not feasible either, for the same reasons the borrow checker isn't feasible. Zig has this pattern where they manually pass in an allocator into functions that allocate memory.
This is untrue. Angular has major version changes twice a year, migration is a time sink for our team to handle breaking changes in our growing codebase. Compare to React with far fewer major version updates, and fewer breaking changes (likely from their deprecation usage)

Your application is likely smaller or a simpler use-case
There's also the sad fact that the more source books you add, the les distinguishable it is from homebrew -- they just can't play test the interactions between 72 different additions well enough to weed out the absurdities and balance everything well.
They originally put it there because it's easier to locate apparently:

> The Fn key was originally placed by the ThinkPad designers in the lower left hand corner to make the key easier to locate when using the keystroke combinations. There was a rationale. This is especially handy for turning on the ThinkLight in the dark. Aim for the two extreme corners.

https://web.archive.org/web/20111115202457/http://www.lenovo...
I’m actually debating if I even want to do a backup and restore because of this. I don’t want my chimera of an environment.

I think I want to just use this machine fresh and just move a few files over as needed.
There should probably be a [2002] date in the title.

The discourse around Mathematica, educational software, and video games has changed a lot in 20 years. I've the whole thing, not much is particularly relevent. Wolfram asks simply too much per license to be widely used in primary and secondary education.
Chishing – An Emerging Threat to Business Chat Applications
>Debt to GDP has actually been declining since Q2 2020 and sits at ~125%.

I don't understand how this argument can be made in good faith. Q2 2020 GDP was down over 9% (32.9% annualized.) That that trend was transitory is shown by the 33.4% annualized growth the following quarter.

You didn't just draw a trend line from an outlier. You drew it from the single most extreme outlier in the recorded history of US GDP.
Peterson Air Force Base History
The trick to fixing wide pages is to

1) open devtools,
2) resize the page,
3) make devtools a popup,
4) then minimize the popup.

It works wonders on amazon cloud reader, read.amazon.com, although I am thinking about writing an dev-tools extension to make it even prettier. I believe text should be human scale, which means minimizing the amount of left-right muscle movement of the eyes, resembling as much as possible the format of paperback books.
I don't care about innovative in that sense, I care about features - what can my text editor actually do, and how well does it fit with how I use my computer in other cases.

E.g. the simplest example - intellisense and inline linting, debugging etc. are all really awesome features. I've set them up once or twice with vim and emacs, but it's always a pain, always takes a long time, breaks often, etc. With VSCode, I click a button and I have everything I need for Python installed in a second.

That's the difference between actually using a feature, and not. When I install a new computer, I will actually use e.g. Python linting with VSCode, but not with vim, cause I won't bother to set it up.
Looks like you might be compromised by this rogue Coa package if you use Windows and you installed or updated npm packages on November 4.
I think I know what you mean, but I'll counter and say that instead of just focusing on completing the game one should pay some attention to longevity and re-usability of your codebase.

For example I have things like a KD-Tree implementation/wrapper that will always be useful, a maths library, a HexGrid component I use a lot, wrappers for rendering a lot of things fast, an entity system for units/objects, a generic framework/layout for code/objects in Unity etc.

But having said that, it really depends on the type of game that you're making.
At 400% zoom in Chrome in order to have a comfortable reading width about 2 sentences fit on the whole 1080p screen. I'm not sure zooming in and out is exactly a nice or helpful user experience.
How is the M1 Max treating you all, heat wise?
I have a copy of Fun Q sitting in the tsundoku pile on my desk that seems pretty good from a quick flick through.

https://www.fun-q.net/
I've only ever seen them in cartoons, didn't even clock they were a real thing until I read that
Paywalled, so cannot read the article but as this is an "opinion piece" I suspect it's more gaslighting. The fact remains that while EV's are not 100% perfect in every conceivable way, they do improve upon ICE vehicles in virtually every way. Major issues regarding supply chain of batteries are improving with new battery technology like cobalt-free LFP chemistry. The battery recycling and "second life" battery industry is gradually maturing and technologies like Smart Charging and V2G promise to have a major impact helping to modernize the electrical grid as well as improve the conditions for more renewable energy by matching charging times to variable availability of green energy.
There was a short documentary on Pevek and its floating nuclear power plant a few weeks ago on RT News (obviously?).

I didn't know were Pevek was and... it's North and in the middle of nowhere alright. It can be seen quite well along with the floating nuclear plant on Google Maps.

It seems sensible to use small nuclear reactors to power such a town and also provide heat (they mentioned that they essentially put 2 reactors designed for nuclear submarines on a boat). It's far from everything, cold, and sunlight may be an issue, though it does seem quite windy... It's also a coastal town, which apparently means that they drastically cut construction costs by building the thing in St Petersburg and sailing it to destination.
Not a religion, but rather an ideology. It's usually spelled humanism, though.
How are you measuring CPU usage? Presumably whatever monitoring tool you're looking at needs to redraw itself, and that's going to bring in WindowServer…

(FWIW, my WindowServer usage is generally around 3-8% when idling and I am losing about 6% an hour at the moment.)
If browser vendors today can't even decide on uniform search boxes, that's a hypothetical too far away to entertain.
Chaining, or why you should stop returning void (2012)
Show HN: View the patent and innovation history of any company
Mathematica is good. The language itself feels weird though. But for most students using Sage Math[1] would be a much more convenient option.

[1] https://www.sagemath.org/
I don't recall unfortunately, however I suspect that as I often had run-ins (conflict over school regulations) with teachers that it was a reflection of anti-authoritarianism mixed with sympathy for the oppressed. To me the papists seemed like they just wanted to follow their own way (I don't know enough [now] to know if Catesby intended to usher in oppression by Catholics to replace the then oppression by Protestants/Royalists but that certainly didn't cross my mind at the time).

Similarly, when learning about "priest holes" (places to hide a Catholic priest who came, presumably to lead mass, to your home) my sympathy was with those hiding. It never crossed my mind that they might effectively be plotting the otherthrow of the established order, only that they were oppressed and hunted down.

I guess it's a first-order vs second-order level of thinking.

Royals become royals by mass murder, then oppress the people they rule over. In France I would have been on the side of the revolutionaries for sure. You would side with the royals (and now I notice your username)?