skysight-inc/HackerNews huggingface dataset:
Even if you do it is pretty much impossible to get them to check their safety numbers and keep them checked.
Pretty sure they're referencing https://en.wikipedia.org/wiki/Capitol_Hill_Occupied_Protest
There's only 24 hours in a day, so I try to kind of create a gradient of things important to me and try to weave one into the other. Each activity I do should somehow compliment something I already know, or fill in a need somewhere else, leading to a compounding effect. Example: I'm a pianist, so instead of picking up electronic music and getting lost in analog stuff, I'd pick up something like a clarinet, which works towards my goal of creating the sound I am after (helping me launch my album quicker), and doesn't require relearning multiple fields. This is the "density" factor of an activity I consider. Then I figure out where on the gradient between founder and career and hobby it falls on. The further the activity is towards hobby, and the less dense it is, the less time I will spend on it. The reason is at this point in my life founder/career trajectory is more important to me, to be able to afford the space and time to fully enter the hobby realm, at which point the hobbies are no longer hobbies, but become what I love doing, and cease to be either a career or a hobby.

Right now I am doing:

1) Leetcode in the mornings. On my (founder -> career -> hobby) continuum, this falls firmly on career, as it doesn't help me as a founder (except tangentially), and I don't code for fun (not a hobby). I will spend only a little time on this every day, 30m-1hr.

2) Language study - I am deeply interested in language. I am also studying math.

3) Math study - relearning my highschool math so I can get into a good university (sort of a backup plan if my MVP's fail)

4) My MVP - since the leetcode, language, and math all sort of work into each other on a loose level, I consider these small tasks I have to accomplish daily but with minimal time dedicated to each, such that I am still making progress in them, but with the bulk of my progress on my MVP.

When all of these wrap up, they will compliment each other very well. Once the MVP is launched, I plan to use that money to go back to school for math, where the Russian will help me. The MVP will also help me establish my skills in the public domain, helping me land a career, in which case the leetcode will also come through.

When I am done wrapping up the founder/career portion of my life, I will drift further towards hobby, trying to replace one with the other (replace career with hobby, hobby becoming the main thing I do), and then these hobby activities will take up a larger portion of my day.

I try to arrange all of my interests this way so I don't waste my own time on things that don't matter and don't help me. I focus on what fulfills me most, and place it last in the gradient, as a point to move towards.
Please don't take HN threads on offtopic flamewar tangents. That's not what this site is for, and it destroys what it is for.

Edit: And boy was this a doozy. Not cool.

https://news.ycombinator.com/newsguidelines.html
> you know - if you have two equally skilled people... and one of them has tattoos on 90% of his/her body and your company works for banking industry, then is it pros or con?

It's a huge pro.

"Wow, they hired him despite the stigma around his looks in our hugely conservative business, he's that good."

Same thing with hiring a non-minority candidate from a school that's known to do a lot of affirmative action, you know he's there for the right reasons.
Bungie Recalls Myth II (1998)
for a very particular definition of "cool" that IMHO should be retired asap.
This doesn’t make any sense. If people are willing to pay for a Twitter like service they are going to pay Twitter before they pay for mastodon instances
Cool idea. I tried to install the VSCode extension but not sure if its working because there was no feedback.
The command-line is the gateway to scriptability.

> I just can't get cozy with doing a lot of heavy lifting in any shell environment

I've argued that undergrads should spend their first year (or first semester) almost exclusively on the terminal/in the shell. Sure it makes some operations cumbersome but after you get over the learning curve the returns are spectacular.
And now thanks to you, google recommends me to look into DuckDuckGo for that search https://ibb.co/WKg4h6Z :D
I got the impression this is Amazon providing Airave-type "femotcells" that emit a low-powered cellular signal and use your wired network for calls and data service. Seems to also imply Amazon would be providing SIM cards.

I'm not sure of the advantage of this over Wi-Fi, though, except to get devices that have no other option other than cellular connectivity to be forced to go over your own network.

> Cellular technology such as 4G/LTE and 5G augments existing networks with higher bandwidth, lower latency, and reliable long-range coverage to an increasing number of devices. With AWS Private 5G, you can build private cellular networks to take advantage of the technology benefits of 5G while maintaining the security and granular application and device controls of a private network.

That's from the Amazon website. Why not just deploy Wi-Fi?
Solana’s Energy Use Report
ah nice, I wish i could have held onto my SE for life (water damaged), i would literally buy upgraded internals inside an iphone 4 body for the rest of my life if that were possible
Pricey NFT metaverse sales give me serious Entropia Universe déjà vu
> But employers are free to make offers conditional on joining a union.

Here's Alabama's Right to Work amendment, which is broadly representative: https://ballotpedia.org/Alabama_Right_to_Work,_Amendment_8_(...

Key passages are

> (c) No person shall be required by an employer to become or remain a member of any labor union or labor organization as a condition of employment or continuation of employment.

> (e) An employer may not require a person, as a condition of employment or continuation of employment, to pay dues, fees, or other charges of any kind to any labor union or labor organization.

The employer is not allowed to make union membership or dues a condition of employment, whether due to a union contract or out of their own volition.

Interestingly, if you want to look at my other post where I discuss noncompetes vs. Right to Work, you'll find that a number of states, when dealing with noncompetes, consider continued employment "sufficient consideration" for the noncompete. This means that in practice, they're allowed to change your employment contract (w.r.t. a noncompete, and presumably other things), and continuing to employ you is enough to make the contract valid, they don't need to offer you anything additional.

Georgia and Florida are two (but there are more) "right to work" states, where the employer is fully within their rights to change your employment contract ex-post-facto, except in regards to union membership.
No disagreement with me there, the copyright laws are a disaster and have long lost their way from the 'means' to "promote the Progress of Science and useful Arts, by securing for limited Times to Authors and Inventors the exclusive Right to their respective Writings and Discoveries."

The purpose is to incentivize creative works for the public benefit with the limited time exclusive rights, not retroactively extend copyright years after the death of the author to enrich their rights-holders in perpetuity every time expiration comes up.

As it is, you can't even make something public domain yourself - the best you can do is add a permissive license since all rights are reserved by default without registration.

But this is getting somewhat off topic.
I don't think that fits. Someone following a strict keto or low-carb diet is typically going to have healthier levels of fat in their blood e.g. lower cholesterol. Add to that a greatly reduced risk of diabetes and if these findings prove true it may end up being another reason to adopt such a diet.
I find it is more the 5th to 8th income/wealth deciles being temporarily embarrassed 9th decilers, and wanting to believe they will possibly join the 10th decilers someday. The bottom 5 deciles do not have much hope of getting to the top in the first place, they are aiming to get to the middle deciles.

Everyone wants to believe they are marching upward, so if they or their children are trending up (no matter that they are probabilistically not likely to get near the very top), they still do not want to lower the ceiling.

I feel like this quote summarized a lot of tribal conflict, whether it be delineated along socioeconomic class or race or whatever:

https://www.snopes.com/fact-check/lbj-convince-the-lowest-wh...

Everyone is happy when the tide is lifting all boats, but when some are rising more relative to others, implying some are moving down relative to others, there is inevitable chafing as resources are re-allocated.
I think you read it wrong.

I have three side projects right now that are like Mercury, Gemini and Apollo. The first one is reaching a point where it is "done" enough I can think about the other two. Then effort goes into the next two.

I started the first of those projects a year ago without really understanding what I was getting into. The hiatus started circa 2013 or so and ended last year.
Can't the FBI do a Pegasus style remote access thing on an appropriate warrant themselves?
Terrence Tao https://terrytao.wordpress.com/

Nick Higham https://nhigham.com/
I wish it took 3 - 5 minutes, I’ve built it projects that are far longer than that. I know this isn’t just me though, because the GHC build documentation tells you to go read stuff for a while as it builds. Longest I can remember is 2 hours.
Thus, "probably".
Ok. That's what your economics textbook thinks. What do you think?

Competition is not the only way to get things done. Humans are definitely capable of collective action. You may recall a few weeks ago where hundreds of millions of
Americans just said "fuck 2 AM, it's now 1 AM" early one Sunday. How would you harness that?
Is it?

Mobile devices drove 61% of visits to U.S. websites in 2020, up from 57% in 2019. Desktops were responsible for 35.7% of all visits in 2020, and tablets drove the remaining 3.3% of visitors.

Globally, 68.1% of all website visits in 2020 came from mobile devices—an increase from 63.3% in 2019. Desktops drove 28.9% of visits, while 3.1% of visitors came from tablets. However, desktop devices remain very important, as they drove 53.3% of total time on site in the U.S. and 46.4% of total time on site globally.

https://www.perficient.com/insights/research-hub/mobile-vs-d...
So I must be missing something here. They drive to your workplace with a truck and drop off a bunch of servers and wires and stuff and get them all set up for you. Then you log into them and use the same APIs that you'd use if you connected to a normal AWS bucket? Why not just do the cloud server instead? Is this for people who have to move/store very large amounts of data such that transfer time is an issue? Or is it just a thing to let you not worry about sysadmin-type stuff because the Amazon dude does all of it for you?
Excellent essay, highly recommended.

> With the popularity of Curve25519 and the desire for cryptographers to design more exotic protocols with it, the cofactor value of 8 resurfaced as a potential source of problems. Ristretto was designed as a solution to the cofactor pitfalls.

I’m a bit two face about this: on the one hand, if you don’t want to think and just want a prime order group to work with, Ristretto is a Blessing from the Heavens: fast validation, fast curve operations (thanks to the underlying curve), and no pesky cofactor death trap. Thanks Mike Hamburg, may you live long and happy.

On the other hand, if we know our way around cyclic groups¹, there are almost always very simple (implementation-wise) ways to deal with the cofactor, which lessens the need for Ristretto on carefully crafted protocols—though Ristretto would still simplify those protocols, making them easier to audit.

[1]: https://loup-vaillant.fr/tutorials/cofactor

> Recently, we also uncovered a critical vulnerability in a number of open-source ECDSA libraries, in which the verification function failed to check that the signature was non-zero, allowing attackers to forge signatures on arbitrary messages

Oh. That explains a lot.

See, I made one significant mistake in all my time as a cryptographic implementer². The effect was, all-zero signatures were accepted half the time, with any public key. Sounds familiar?

In any case, some people were quick to assume I was a drooling incompetent for failing to perform such a basic check as rejecting the all-zero signature. If I was implementing ECDSA, they’d have been right. Except I was implementing EdDSA, which already rejects all-zero signatures with its main algorithm. An explicit all-zero check is not needed at all. DJB himself for instance omits it in TweetNaCl. My bug was more subtle: I didn’t fail to check a standard edge case any decent specification would mention. I introduced an edge case by doing a less-than-safe conversion with a less-than-perfect understanding of the maths involved.

(To those who wonder why I even tried, I asked around before attempting this, and no one warned me—cryptographers are busy. And to those who are wondering why I didn’t check with Whycheproof from the beginning, that’s because I looked at their list of supported protocols, and didn’t found EdDSA. To this day, their GitHub main page lists neither EdDSA nor Ed25519, despite my pull request from nearly 2 years ago.³ If someone from Google hears this, please…)

In any case, I now understand the mockery better. Those people likely pattern matched my vulnerability with the corresponding ECDSA beginner error, and shot me down without checking what was actually going on. I guess they too were busy.

[2]: https://monocypher.org/quality-assurance/disclosures

[3]: https://github.com/google/wycheproof/pull/79
Which telecom would really want to partner with Amazon?
German Court Rules Against Internet Security Non-Profit Quad9
Didn’t Nvidia attempt to market silicon that would slow crypto mining to prioritize gaming customers? That doesn’t sound like they’re happy to be cleared out of inventory, but would rather cater to a specific demo that is more price sensitive. Good will has tangible value.

https://blogs.nvidia.com/blog/2021/02/18/geforce-cmp/
Why does plex have subscriptions at all? I understand (at least theoretically) that not all software is free, but charging for it the normal way (you pay money and buy a copy that you then use without it phoning home) works perfectly well too. Anyway I had had the impression that Plex also sends at least the metadata of your video library to its home server.

I didn't realize Kodi was XBMC or that you could build it yourself. Thanks for that info.
I found https://media.ccc.de/v/rc3-709912-adopting_the_noise_key_exc... which might be it.
Also videos are regular webtorrents, they can be downloaded (or watched) without any support from the instance, as long as one peer is online. Less sure about video description and comments (though comments received by your instance should be displayed).
Pointer authentication has been around for several years already. As with many things in hardware, though, it takes time for the software ecosystem around it to mature. Still, I've found it to be quite influential.

Here are a couple "real world" examples--

Project Zero had a blogpost about some of the weaknesses on the original Pointer Auth spec [0], and even had a follow up [1].

Here is an example of what some mitigation might look like, showing how gets(), which is a classically trivially vulnerable primitive, becomes not-so-trivial (but still feasible enough to do in a blogpost, obviously) [2].

Cost-wise, in terms of both hardware and software, it's rather cheap. The hardware to support this isn't too expensive, about on par with a multiplier. On the software end, like I said, it's taken some time to mature and gotten to a pretty good state IMO, with basically all compilers providing simple usage since 2019-- just turn on a flag!

ARM also did a performance vs. ROP gadget reduction analysis [3]. The takeaway is, as others have mentioned, while it doesn't completely mitigate, it does heavily increase the complexity for rather cheap.

In fact, I'm rather annoyed Amazon didn't include this feature on Graviton2, and to claim it as new or innovative on their end feels just like marketing speak. Any CPU that claims to be ARMv8.5-a compliant *must* have this feature, and that's been around for quite a few years now.

[0]: https://googleprojectzero.blogspot.com/2019/02/examining-poi...

[1]: https://bazad.github.io/presentations/BlackHat-USA-2020-iOS_...

[2]: https://blog.ret2.io/2021/06/16/intro-to-pac-arm64/

[3]: https://developer.arm.com/documentation/102433/0100/Applying...
It may interest you to know ATSC 3.0 has specifications for a "return path" to the broadcast station in it.
It looks like you're not afraid of publicly talking about your discovery. For that reason, I recommend going to the papers you read with previous solutions and send everyone an email explaining what you discovered (the ones who are alive). Academics are very aproachable if they know what they're doing (AKA not famous).

If they respond to you, ask them if they would be willing to review your draft. Write a draft of a whitepaper in the format of abstract, content, conclusion and send it to them attached. Only if they agree to review to you, if they claim that it's their discovery you have paper trail to prove otherwise and they'll lose their reputation, they won't do that. Try to get feedback of as many people you can, trying to prove your discovery have some flaws or that it was already discovered by somebody else.

If you have enough evidence that it's a new discover, now next step is to ask them for contacts of some credible comp-sci publication that you can publish it. Add them as thank you for reviewing your draft and publish it. After you publish, post in HN with the name of the journal for credibility.
>Only large companies can build CPUs based on ARM....

Only large companies can build any modern CPUs.

> improvements to the memory hierarchy, a GPU, or perhaps even their own management engine

None of these has anything to do with ISA nor ARM. As a matter of fact adding any of these does not contribute to lock in. They are ( potentially ) fragmentation in terms of optimisation requirement.

If I am inferring correctly, the only thing that wouldn't count as locked down and walled garden by your definition would be a total open source design from Hardware to Software.
I'm from Chicago. The difference in the amount of crime vs what gets reported on in the Trib and local news is astonishing, and the number of people I know (myself included) who have left Chicago in the last couple years is wild. So, I lived it.
great, so they'll just be able to hit you with lewd charges on top of everything else they are filing.
Like many people in this thread, I used DESQview for BBSes and later DESQview/X, but there wasn’t much graphical that I could find for it. Eventually I moved to OS/2 because it was easier to program, but it still holds a fond place in my heart. I just wish I would’ve realized the real power of X back when I was on DESQview/X, not that it would’ve mattered with only one PC in the house.

A decade later when I got to CMU for grad school I was talking to a professor when I saw he was using DESQview/X as his desktop OS…in 2004.

I thought that was wild until I met a cluster of folks at IBM Research still running OS/2 in 2012 when my office got moved to Yorktown Heights.

Such pleasant memories…but I think I’ll stick with modern desktop environments.
> currently most Linux-based software targets people with three dots in Computers or more, but is often usable for people with two dots. My wife is a solidly two-dot user who is happily using KDE Neon as her distro.

> But how many zero and one dot users are out there? What fraction of the market are we abandoning by requiring two dots?

"Who is the target user" is a rhetorical question...but the article is trying to make a call for KDE (and linux software in general) to appeal to more novice users. There are a lot of potential novice computer users who would like "a great desktop without the tech giants owning your computer" like KDE if it was “Simple by default, powerful when needed”.
Now you have us interested..
That is a lot of speculation. If you read the encryption protocol, actual methods being used for encryption are well known. Client is open source and supports reproducible builds. If there is a backdoor, it is in front of our eyes.

> What that list doesn't show is what Telegram does when the FSB knocks. By all means, give your potentially embarassing message content to a hostile nation's intelligence service.

Telegram is in a lot of trouble in operating in Russia. It was blocked for two years. [1]

If they are so co-operative, why pass the opportunity to watch on their own people. Or did they become co-operative after unblock? It seems, that they help on some level [2], but does this threaten to other countries? Hard to say so.

[1] https://en.wikipedia.org/wiki/Blocking_Telegram_in_Russia

[2] https://www.independent.co.uk/news/world/europe/telegram-rus...
The Steam Deck also gets a vote from me, but with a couple caveats. First, if you're just now reserving a Deck, availability is currently slated for after Q2 2022. It's already been delayed once, it might be delayed again, thanks to component shortages. And two, it will be using Arch Linux under-the-hood, which can both be a blessing and a curse, with regard to compatibility and usability (though I trust Valve to get most of the issues ironed out). If you're so inclined you will be able to install Windows on it.
But in our case, "piracy" has exactly same meaning as it did 400 years ago: attacks on sea vessels, plunder of wealth and kidnapping of people for ransom or for sale.

It has precisely zero relation to copyright infringement, and should not be used to denote the it.
Where do our emissions numbers come from?
Reading the document answers this for you: It is a declassified government document originally produced by the FBI and was prepared on Jan 2nd, 2021.
Oh, wow. Blast from the past. Let's see... Opus-CBCS, then QuickBBS with FrontDoor, then RemoteAccess with FrontDoor, at some point I was convinced to switch to D'Bridge. All eventually under DesqView for a few years, then under OS/2 until I went off to college...

I bet I still have all the floppies I saved everything to in my garage. Alas, the SyQuest 88MB removable disk drive (in all its SCSI glory) that I eventually ran everything off of once that "huge" 20MB Seagate drive filled up bit the dust a few years ago.
I have a waaay simpler version with only ePub with no pictures support: https://h5reader.azurewebsites.net/

The advantage is you don't have to install anything. Whatever books you upload are simply stored in your browser (might be an issue on iOS). If you want to sync, you login into your Google Drive, and books and positions are synced via it.

It is not correctly set to be a PWA, but if you're offline and the tab is still open, it will continue to work.
What I don't fully subscribe to here is the statement on Stratechery that:

>and given that some of Twitter’s most hard core users use third-party Twitter clients, and thus aren’t monetizable, the revenue per addicted daily active user is even lower

I don't see how this must be true going forward, either by having a standard cost for open access to the API or through inclusion of twitter ads and metrics in the endpoint streams.

As pointed out they are just in the middle of re-opening the API developer ecosystem & it would be a shame to have this reversed by activist investors for the second time.