skysight-inc/HackerNews huggingface dataset:
I worked in DSL support for one of the baby bells back in 2002 and talked to a customer who had a line item in her bill for telephone rental that went back as far as the billing system could show me. It jumped out at me since I'd seen thousands of bill plans and never saw that line item before.

She said she had the phone installed on the kitchen wall around the time her grandson was born. He was 27. I told her she could replace it for less than 20 bucks and she said no thank you she liked this phone very much.

She wasn't calling about the bill, she just wanted to get her e-mail working.

She spent upwards of $3,000 on that phone in rental fees alone. She might be still paying it today for all I know.
Trickiest problem? Not clear who's going to pay for all this? The people are going to pay for all of it and then some. That's the entire point of this operation.

As for the second part of your post: are you playing devil's advocate here? Planting trees, sustainable agriculture - that's not great way to generate fantastic profit at everyone's expense. It's not going to happen any time soon. Sorry for being a nihilistic prick but surely you're not that naive.

We need some kind of agrarian Elon Musk to shake things up while making profit.
> The simple solution for this problem is that Apple should actually provide all of the security updates for all of the operating systems that it is actively updating

That's circular reasoning. The older operating systems are only getting security updates, as the article notes, so their definition of "actively updating" is "getting security updates". When Apple isn't issuing security updates, it is not "actively updating".

Maybe what the author wants to say is something along the lines that Apple should provide timely security updates for all operating systems released over the past 10-15 years.
One of the reasons I prefer restic to borg is it is trivial to maintain a standalone copy of the executable. Wherever I put backups, I keep a copy of the restic executable used to generate the dump.

For extra paranoid, could clone the restic source tree (with vendored dependencies). Go language backwards compatibility is such that I should always be able to read my data.
I know... not much. And it's the same kind of argument one would use when postponing say, garden work, cleaning the oven, etc. I have taken a vacation day next week to get this done - not just the macOS upgrade of course, but a long list of pending household tasks.
Use the -k switch on curl to skip certificate verification.

Use a phone, or a phone call to a trusted friend, to verify the signature of the certificate.

Obviously not instructions you can give to an ordinary user, but that line was crossed at curl.
It's also hard to believe that insurance against theft could ever be less expensive than nobody stealing anything, but that doesn't imply insurance is a fraud to allow people to carry on stealing. We live in a world where theft and carbon emissions are going to happen with or without the blessing of the US government, so if they want to spend some money seeing how far they can mitigate the damage then good.

I'd rather pin my hopes on technological progress than political magic.
NFT Art Online Store
You won't find many like-minded folks here (hopefully, at least). DRM is inherently wrong, and it's not something anyone should be supporting in any way.
Art of Computer programming starts at a high school level.

It's very rigorous and considered one of the more difficult reads. But if you start at chapter 1 page 1, it covers all the math you'll ever need for the rest of the books (which is sufficient maths to reach masters or even PH.d level comp sci)

I know I've recommended it to high schoolers. A lot of math is just getting used to the nomenclature and vocabulary. The sooner you get used to rigor the better
Okay, let me give another try for this:

So then we have 2 APIs. That is, we have the C standard library (as an API) and the POSIX API.
The POSIX API defines the syscalls such as write, read, open, ...
The C or C++ standard library provide the header files (function declarations etc.) and its .so file (the shared library) is in the memory.
Take the Microsoft C++ Compiler as an example. I cannot see how the standard library is implemented, because only the headers are defined and the actual compiled code "lives" as a .so file in memory. This .so file as an object in memory is accessible to all C/C++ applications. The .so file is essentially C's runtime environment (RTE).
(Also, C and C++ are standardized so no matter who implements the compiler and the standard library, it has to follow the language standard.)

The standard library among other things is not only providing a wrapper for syscalls such as malloc and printf (POSIX API), it is also providing some useful functions or algorithms such as qsort, std::transform... Furthermore, data structure or containers can also be part of a standard library: std::vector, std::unordered_map, ...

Now, if we compile a C or C++ program, the ABI is basically a set of definitions/rules, that the compiler has to abide to.
Meaning things like how function parameters are stored (stacked or in registers), how a function should be called, how arguments are passed, how operations are mapped to machine code etc.
But not only is an ABI a mapping or layout between C instructions and machine code, it is also a mapping between OS syscalls and C or C++ code.

Exception handling in C and POSIX is basically this:

#include <stdio.h>

#include <setjmp.h>

int main()
{

jmp_buf env;

if (!setjmp(env)) /* try - something might go wrong in the subsequent code block (try block) better bookmark this line */

longjmp(env, 1); /* throw an exception trigger the catch (else) block by going back to that bookmarked line */

else /* catch */

fprintf(stderr, "Yikes, something went wrong! ;)\n");

return 0;

}

So if I do exception handling in C++, then the ABI of C++ should follow an exception handling routine. For example, virtual functions in C are basically this:

https://godbolt.org/z/x94cdb1Y5

So vtables are structs of function pointers. The C++ compiler has to follow some ABI convention (namely, some rule how to map or translate a vtable implementation such that it corresponds to the C++ code.)

- syscalls ~ POSIX API (operating systems API) ~ write, read, open, ...

- C/C++ standard library (.so files loaded in computer memory) ~ wrapper for syscalls (printf, malloc, ...), containers/data structures/algorithms (std::vector, std::unordered_map, qsort, ...)

-ABI ~ rules for the compiler that tell how vtables, function calls, exceptions should be implemented

Correct so far? Or am I still wrong?
Apple iPhone 3G vs. BlackBerry Storm: Reasons to Pick the iPhone (2008)
Bitcoin creator Satoshi Nakamoto could be unmasked at Florida trial
Starlink is the most signifiant rural broadband access development in decades, and the FCC seems somewhat hostile to it.

Its only difficulty is that you need almost a totally clear view of the sky since it's not like a geosync satellite where you point to one place in the sky. They need to track satellites in motion, so a single tree will disrupt a bit.

I would guess as the flotilla expands they might not need as much of the sky and the "arc" would decrease, and their software will adapt on the fly.

Starlink is another example of a "Musk" company with an active software update loop that shows active ongoing improvement. It's not quite as revolutionary in this space but it is nice to see.

5G also has a lot of potential but still requires a lot of towers.

Of course the biggest economic revolution in broadband is 5G and Starlink in the third world. Starlink should bring good broadband to all of Africa, rural Asia, etc. Combined with Solar+Storage for independent power, that leaves water and food as the primary necessities for living in places / off grid.

Global Warming is of course extremely dangerous, but the amount of habitable land that will be opened in Siberia is enormous. Which is good, because we might need to resettle billions of people there.
maybe because is a political buzzword to weaken the opposition power and nothing more
Driver support isn't a given. There's lots of normal hardware which may never be server qualified. You can make a desktop that will run server fine, but it's kind of a Linux situation; you can't pick random parts and assume they'll work.
In real life puzzles you can often see the correct orientation from the grain of the paper so it's not completely unrealistic.
>It wouldn't work without greed. Same as any other form of money.

I'm not so sure about that. I've seen plenty of people at the grocery store spending USD in exchange for food who don't appear greedy. I haven't actually ran a survey, though. But I'm mostly confident that USA doesn't run on greed.
I also felt that it would get more traction :-)
> These are timing attacks. They're heavily dependent on the specifics of the target. The code has to know what it's measuring in minute detail, because the timing is affected by nearly everything. The exact instructions being executed by the target program, the size and associativity of the processor caches, everything.

So they are absolutely positively irrelevant in the real world.

> In a VM doing what? It can't just be idle. It has to be executing some code whose timing you can measure to extract its secrets, and the secrets in the address space of that process have to be useful in order to get the file, e.g. a password that can be used to sign into the VM. Then the exploit has to be tailored to that software and hardware.

So again, they are absolutely irrelevant in the real world.

Security industry became an industry of chicken littles. 99.9999% of modern attacks are attacks that were executed successfully because someone was running the code that had sql injections, direct variable substitutions before doing sytem, lack of user input sanitation and validation, or pulling yet another multi-gigabyte unaudited pile of junk dependencies a-la left-pad.js, not because someone mounted a timing attack. Except that dealing with those issues is not sexy so instead we are getting everyone freaking out about some internet villains doing something ( that no one else can do ) to CPUs of a random Joe ( the villains knows everything about Joe's machine and processes running on it and can even control it ) to mount a sophisticated attack, never mind that he can just make Joe install a piece of code that will run with elevated privileges for 0.0001% of the effort.

This is why execs are considering security people to be snake oil salesmen.
they pay 2-3x.
Oddly, this is explicitly spelled out in old versions of iOS. I learned of it recently because my aging iPhone 8 died and I tried to revive my iPhone 5 while waiting for a replacement. (It did start up but was basically useless otherwise.)
Your phone app has an email client (as well)
When you have a large company that recruits in large part on comp, perks, security, and prestige, over time that will destroy the company culture no matter how good it was at the start. Because you're gonna attract bland, boring, competent but mediocre people by recruiting on those things, and their mid-tier mindsets will gradually pollute and dilute everything that might have been remarkable about the place in the early days. At some point it gets bad enough that even the mid-tier people want to leave because the culture and work have gotten too boring even for them, or the prestige/security side has eroded because,...well, because too many people like them have been there for too long. This problem isn't unique to Facebook...all the FAANG type companies share it to various degrees. It is ridiculous and shameful to blame Zuck. Zuck has fed and clothed half this industry for most of two decades
That's based on two very cautious geoengineering approaches that have virtually no negative side effects. If governments were willing to consider other geoengineering approaches, I think that number could be driven down significantly. My favorite candidate is ocean-wave-based olivine weathering, as proposed by Project Vesta. They think that, at scale, that approach could get costs down to $21/ton, plus reduce ocean acidification more effectively too. But it's more complicated and could have some negative effects, such as putting a lot of poisonous heavy metals like nickel in the ocean. But because politicians hate ever having to say that they're knowingly causing any problem, those avenues get starved of research funding, as we see here. But I think that, within 50 years, we're probably going to find a scalable CO2 removal approach for less than half the target cost of this program, and that basically could solve global warming, but because of political cowardice it's discovered 30 years later than it could have been.

Everyone wants to do emission reduction first and delay geoengineering as long as possible, when we should be doing the opposite. Even if the financial cost appears much smaller, it's clear now that large scale emission reduction is politically very expensive. Emission reduction is the clean, ideal solution that we don't have the ability to scalably implement yet. Geoengineering should be temporary quick and dirty approach we use to buy time, creating some problems that last decades in exchange for time to implement a solution for a problem that lasts for millennia. Assuming that cheap geoengineering techniques whose negative side effects are bounded in space and time can be found, but I think that they can.
This week just keeps giving. Google outage, 2Tbps DDoS, FBI mail scam and now this? This one sounds most interesting so far.
Nothing particularly novel but the setup of configuring CloudFront to connect to S3 and handle SSL termination, a DNS record pointing to CloudFront, an S3 bucket to hold the contents, an S3 bucket security policy which restricts access just to CloudFront... well, it's complex and easy to misconfigure.

In terms of pricing, you can store 1GB in S3 for a year for a fraction of a dollar. The majority of the cost comes from CloudFront. Unless you have serious traffic, this is extremely cheap:

https://aws.amazon.com/cloudfront/pricing/

The interface (just put files in S3) suits me. I have a site where I deploy and invalidate the CloudFront cache in a GitHub Action: https://github.com/lifebeyondfife/whisky-menu/blob/master/.g...
Because a project like this is the exact ethos that HN thrives on and the niche that 'Hacker' community exists to fill.

I would love to see 100 of these a day.
Janelle Shane, who does this sort of thing for real on the excellent blog https://aiweirdness.com gave a good breakdown on Twitter: https://twitter.com/janellecshane/status/1007061610005794817
Microsoft Doom 2021 OMG
Money is nothing but a sophisticated barter system. Instead of “I will give you 3 apples from my tree for a dozen eggs from your hens”, there is an indirection through a standardized property - money. Now we can say my apples are worth 4 shekels each and your eggs are worth 1 shekel each, and we can still agree on the same transaction.

The difference (some would argue, improvement) is that shekels have a worth of their own, so can be stored against harder times, which may not have been possible with the goods they bought. Of course, that shekel value being variable over time, can equally lead to riches or ruin, and requires a more sophisticated treatment by perhaps insufficiently sophisticated participants; snakes and ladders.

In any event, societies existed well before this “money” thing came along, even free ones. High technology societies do need a money system, I think; for automated transactions to take place, there needs to be a standardized good-exchange valuation, but not all high-tech societies are free, and not all free societies are high-tech. Freedom seems orthogonal to money.
I don’t see the concern.

> “Apple requires states to maintain the systems needed to issue and service credentials at taxpayer expense”. I’m not aware of a State that doesn’t already issue and service it’s citizens identification cards. Why would Apple be responsible for it?

The states are ultimately in control of the identification cards issued so it seems reasonable that they would be responsible for the technical implementation.

It also seems completely reasonable that Apple would require they implement the system in a standardized way and have certain people available to make it successful.

> Jason Mikula, a fintech consultant, says “I don’t know of any other example where government-owned systems and identity credentials were made available for commercial purposes in this manner.” but that categorization makes no sense. The ID cards are not be made available for commercial purposes. The ID cards are being made available in a digital form for the use of the identified person.

> Importantly, in its contract, Apple shifts responsibility for confirming the authenticity of user identities onto states.

Yea, who else would have the ability to validate an individual should have access to a particular person’s digital ID? Just like Apple Pay and others require the bank to validate you have permission for a particular card.
Also, red/black isn't 50/50. It's slightly under.
I save the HN page as a PDF and send to DevonThink via the DevonThink browser extension. This way I have all the comments indexed and searchable via Finder or DevonThink. I tried webarchive but found PDF to be more efficient.
The problem is that it's still political magic.

Suppose it costs $1 to avoid emitting CO2 (e.g. replace gas car with electric car) and $10 to extract the CO2 after the fact. If you get the latter down to $3, you're still upside down. So where does the $3 come from? Presumably a government, but it doesn't even matter. Anyone would still be better off spending that money to subsidize electric cars or solar panels or something.
I doubt stability was their intentions. They completely destroyed 3.38 compatibility, and all the poor bastards like me who decided to update their distro got a completely broken desktop. And I mean completely broken, too: my wallpaper was gone, every single extension broke, apps would no longer appear system-native when I defined a stylesheet and GNOME apps themselves looked inconsistent and glued-together.

I really recommend reading Tobias Bernard and other GNOME representative's blogs. Not because they're insightful, but because the self-righteousness that they use to talk about fairly personal and benign things completely clouds their view of the community. People complain about inconsistent apps: his solution is to destroy the theming ecosystem instead of fixing the shit that's wrong in Adwaita. People complain about broken extentions: his solution is to tell people that extentions are dumb, and you shouldn't be using them anyways. People complain about a toxic working environment: his response is to draft an even more exclusive CoC with vaguer rules and no precedent for enforcement. There are so many of these little anecdotes that it blows my mind they even have a desktop left at this point.

Like you say, it's free software so I can't complain too much. Nevertheless, it's wild to see how a perfectly functional desktop has lost the majority of it's beloved features with nothing more than a few philosophy adjustments.
Are we sure that's "good" news?
Correlation with perf wrapping up? :)
It's the antithesis of gambling.

If you bet $10 on black and win straight away, earning $10, and go home with $20, and stay home for the rest of your life and never walk into a casino again, then yes, you won. But you're not really a gambler. You're actually the opposite of a gambler, one that never enters a casino again. Of course you gambled $10, but the amount is meaningless.

If instead you gambled a meaningful amount, say $50k, then indeed it'd be truly gambling something meaningful. But if you'd lose, you'd have to double it to $100k. If you lose that, $200k. It spirals out of control quickly if you're actually betting meaningful amounts.

And the amounts must be meaningful. After all, if you bet $10, lose a few and eventually win and go home with $80, the strategy requires you to never gamble again. If you come back because $80 isn't meaningful, you're really just starting over at a meaningful amount, that could make you win enough to never make you come back. But at that point, you're talking about significant risks (e.g. betting $50k and losing 4 coin unfavourable (47% / 53%) tosses in a row, and you've lost a total of $750k and need to risk losing another $800k to walk away with a profit of just $50k, by flipping another unfavourable coin toss)

If you were Jeff Bezos, of course you could bet a million and walk away with an eventual win before running out of money. But the amount of money isn't meaningful to Bezos. In the same way a kid with $40 of savings could bet $50 cents and walk away with 50 cents of profit by winning the 5th round. But that doesn't make any meaningful difference if it ends there. If the kid comes back to gamble, the strategy falls apart, as the house always wins in the end if people keep coming back.

And that's precisely why the strategy doesn't actually work for anyone. To win any meaningful amount, you'd have to bet a meaningful amount. And to do that, is incredibly risky as there's a good chance you'll run into your limit before you win. And even if you win, that experience will likely pull you back in to try to repeat it, the gambler mindset eventually will lose.

How quickly do you run into your own limit, and the limit of the casino? After all, the odds are against you.

Technical note: your final game winnings are never more than the first game winnings. That's why the first bet must be meaningful.

Say you bet $10 and lose, bet $20 and win, you made $10 profit. Say you lost the $20 too and bet $40, you again still made $10 as you made 80 - (10+20+40). Suppose you lost the $40 too, and the $80, and the $160, and the $320, and the $640, and now bet $1280 and win $2560... subtract 1280+640+320+160+80+40+20+10, and again, you only walked away with $10.

In other words, to walk away with something meaningful like $10k, you may end up having to wager 1.2 million after 7 coin toss losses.
Simple-Awk. A simple and practical guide to Awk
just because Mark's visions are dystopian nightmares ?
Dogfooding the product you're working on isn't that unusual even if it is FB. It dramatically improves quality when you're 'forced' to use the same product you're developing.
I came to say the same thing basically. These are known systems that have a finite set of operations you can perform.
I think one of the most interesting things about the Rubik’s cube was how people viewed it as something only a genius could solve
Exponential: Growing your leadership at the same rate as your business
So you are just trolling me then?

Pity you couldn’t be bothered to hold a proper discussion here because some of your other posts in other threads have been informative. C’est la vie
OneStream is already valued well above that mark and is one of the most successful tech companies in Michigan that no one has heard of.
“#Web3 Needs a Dev DAO.” / Twitter
Everything after 2008R2 is significantly more bloated. I still interact with a few 2008R2 VMs at work and every time I log on to one I'm actually a little freaked out by how much more responsive it is.
It's mentioned in the article.

"Netflix worked with Keaton Patti, who's done this bot thing before. This time round the bot watched over 400,000 hours of horror movies before penning its great masterpiece, 'Mr. Puzzles Wants You to Be Less Alive'."
For most companies, getting people to care about the mission is impossible due to labor alienation ("we're working on creating fake test data for companies that provide cloud services for payroll automation for cloud service companies that vend fake test data"), and comp, perks, security and prestige are all you can offer.