skysight-inc/HackerNews huggingface dataset:
from https://github.com/movim/movim/issues/63

>"edhelas commented Nov 26, 2021

As OMEMO is now part of Movim master and that the main working features are working I'm considering this ticket as solved.
There is still a lot of small things to fix but the main is done.

It took 6 years but Movim is finally having end to end encryptio edhelas commented Nov 26, 2021

As OMEMO is now part of Movim master and that the main working features are working I'm considering this ticket as solved.
There is still a lot of small things to fix but the main is done.

It took 6 years but Movim is finally having end to end encryption."
You Feel Like Shit
Yes, in fact, GrapheneOS will help by exposing memory corruption issues
Quite interesting - didn't consider going beyond the GDP per capita.

> but here are a couple of rankings placing Vilnius above Bucharest [0][1][2][3]

informative, thanks for this!

> HDI

dang, i didn't consider looking into HDI. not sure how it's measured but it places bucharest-ilfov on par with parts of the UK and east switzerland?

https://globaldatalab.org/shdi/shdi/ROU+CHE+GBR/?levels=1%2B...

Either way you are right, quality of life is subjective. I don't particularly enjoy life here overall, just taxes and the group of friends I have. Romania is far behind central and western europe in terms of mindset, but is nowhere near the low level i thought it was.
I've been hanging around on an X201t for almost a decade now, but finally upgraded to an X270 last October. Its the last X series machine they sold with non-soldered RAM. So far things have been pretty good, Fedora works almost perfectly out of the box, but there is a nasty issue where the third party 65Wh battery I have causes the laptops embedded controller to scream that the CPU is overheating. I've had to write a script to squelch that to stop the thing from throttling down to 400mhz all the time.

I've had the thing in pieces, keyboard, trackpad, palmrest, lcd and RAM have all been replaced and the build quality really pales compared to the older machines, there is no magnesium midframe here, its plastic everywhere. But at least I can get a solid 10 hours work out of the battery, and decent quality IPS panels are widely available.

I'm not sure what to do once thing thing reaches the end of its life, all the replacement models are going to have every component soldered down, the batteries are all internal and not hot-swappable. Grim, I had might as well buy a Macbook.
You don't, but I've tried what you suggested and it fills with thousands of xml files attachments you have no hope of reading. You could just ignore them, but that gets down to what I mean by "doing it properly".
I'm using an X220 which is even older than the T430. It is on its last legs and its keyboard doesn't work at all (using an external) but I feel that it is fast enough in terms of cpu, storage, etc. I do some programming on it but it is not a hardcore dev box. I use remote servers for that. I don't feel like I need multiple disk drives: if I want to back up on the same machine, 1TB microsdxc cards are a thing (in fact I only need 256gb or so).

I need to replace the X220 quite soon and there are way fewer used Thinkpads on Craigslist than there used to be (any vintage, not just that era). I don't know why that is. But I agree with the article that the newer stuff is way too crapified and that the 2012 era machines are about the best ones to use right now. Older ones were even more solidly constructed, but had DDR2 memory, considerably slower processors, etc. So I will probably look for another X220. (X230 is similar and a little newer, but has the silly 6 row keyboard instead of the nicer old 7 row one).
I doubt it can be compared to that now, given how it's already a reality and in production (unlike that historic debacle)
From:

> Linux distributions: Can we do without hooks and triggers? (2019)

https://michael.stapelberg.ch/posts/2019-07-20-hooks-and-tri...

> If we want to get rid of hooks, we need another mechanism to achieve what we currently achieve with hooks.

> If the hook is not specific to the package, it can be moved to the package manager. The desired system state should either be derived from the package contents (e.g. required system users can be discovered from systemd service files) or declaratively specified in the package build instructions—more on that in another blog post. This turns hooks (arbitrary code) into configuration, which allows the package manager to collapse and sequence the required state changes. E.g., when 5 packages are installed which each need a new system user, the package manager could update /etc/passwd just once.

> If the hook is specific to the package, it should be moved into the package contents. This typically means moving the functionality into the program start (or the systemd service file if we are talking about a daemon). If (while?) upstream is not convinced, you can either wrap the program or patch it. Note that this case is relatively rare: I have worked with hundreds of packages and the only package-specific functionality I came across was automatically generating host keys before starting OpenSSH’s sshd(8).
I don't see why this is a numbers thing. A total utility of a franchise? Come on.
I have a Surface Go 2 running Arch. Great for dev work, aside from the low amount of storage (128 GB).

Its portability is hard to beat for trips; Patagonia’s lovely Atom 8L sling bag is big enough for the tablet with some room left over.
When I was a teen, I didn't get much artificial light. There was no phones yet to ruin that since it was in the late 90s and iirc incandescent light bulbs do not emit as much of the problematic wavelength as modern lightbulbs. It was also light out in my bedroom between 9 and 9:30pm further reducing how much artificial light I got.

Nowadays, I'm extremely careful to use blue light filters in the evening, I use f.lux or equivalent on any devices I own (due to my work, I cannot avoid using those devices at night) and I make sure to choose appropriate lighting for my house.

It's not insomnia because if I go to sleep at 3am, I fall asleep instantly. When I go to sleep at that time and wake up every day around 10am, 11am (which I luckily can do because as an adult, I work remotely), I can be well rested, having a regular schedule and sleep very quickly. If it were insomnia, then the issue would exist

If, however, I try to go to sleep before midnight, even if I feel tired, I do not fall asleep. I'm pretty much the textbook definition of a night owl and pretty much an extreme one at that. It's not for lack of trying, because, when I first started working, I had to wake up early, had to try to go to sleep early and was unable to. It's been a significant handicap and it's why I had to find ways to get jobs that work with my schedule to improve my quality of life.

You might be right that teens have a tendency to want to push bedtime but there's also been plenty of studies that have shown that teens have better sleep when going to sleep late and waking up late. At this point, it's well established that people have different chronotype and a small minority are "night owls" to varying degrees.

Please read the research and don't make generalisations based on your own experience. I've been told before by acquaintances and family that not going to bed early and waking up early is unhealthy, lazy, name any negative adjectives you can think of. And yes, if I try hard, I can wake up early every weekday, it's just that I'll be exhausted by the end of the week, will need the weekend to recover and will have very poor quality of life.
A couple of things from this thread:

1. Asking users to enter their seed phrase is like a finance app asking you to give them your bank login. Except worse because in crypto you don’t have the same protections as you do with your bank. This is reckless.

2. Storing a backup of it on your google drive. What?! So now google knows it? Why would you do this. There is literally no point to decentralised architectures if we just give google all our data anyway.
I have been using as my only machine a T530 uninterrupted (think 10h/day uptime) since Nov 2012, both as a desktop replacement and to carry it around. I had to replace its motherboard recently but it was my fault as I put it in too enclosed of a space and overheated/burned it. Aside from a bit of fan noise, it's still going strong. It's definitely underspecced wtr to graphics nowadays, but still able to run things like League of Legends smoothly with just the integrated chip. Happy to answer questions about it if anyone is interested.
What's up with the ponzi scheme hate?

The people in the pyramid are making a lot of money...

(sarcasm if it isn't clear).
If we are willing to admit that repositories like npm are useful, what can be done to mitigate these issues?

Is there some tooling we can build?
Is it possible to make the more tricky upgrades (CPU, display, fan) on similar models but from the X-series ? X201, X210, X220? I would love to do it on mine.
> The advantage is you don't put dirt/dust, and whatever else you drag off your floors, inside your shoes.

You put the dirt inside your sock instead though.
I love these projects. I have T430 with 16GB of RAM. Sadly, it is i5 version.

So far:
- replaced fan to DELTA
- refreshed thermal paste
- added Samsung 860 EVO Pro
- acquired (yet to install) USB-C charging port

Until I replace the CPU, it is not good enough for Scala development.

That said, compared to AMD Ryzen 7 PRO 4700U and 32 GB in ThinkPad T14 it falls short quite fast.

T430, X230 and T61p hold a special place in my heart, but these are dated platforms. Once to start getting to media processing, paying attention to battery life, CPU performance per Watt, etc you will look for modern architecture.

I am personally pleased about move to Performance/Efficiency cores architecture. Not all tasks are created equal :)
How would this idea be against the spirit of open source?

> As an Open Source developer, you build a new cool library or a tool and license it under AGPL. This preserves all the Free Software freedoms for all the non-commercial users out there.

This is the part that earns my support. I see some B2B software use dual licensing arrangements that offer a proprietary commercial license alongside a source-available license that is not a free software or open source software license. While having the source available is better than not having it (since it can be publicly audited), being able to use, modify, and redistribute the software for any purpose is an essential part of FOSS. But as long as the AGPL or another FOSS license is offered as an option, the software is still free and open source.
That's the service I generally recommend but you're looking at $199 per month for even small businesses.
> At work for new devs we bought ThinkPads with Ryzen. These are in general fine, except that multiple people have this weird issue with the computer completely freezing at random times on Linux. The one person who had Windows didn't have this issue. If it weren't for this issue that would be our default buy for new hires. Now, I don't know really.

Likely an issue with the C6 power state. Try searching for "ryzen linux c6 state" and you'll find plenty of people with these issues. Try updating BIOS, disabling C6 in BIOS or with https://github.com/jfredrickson/disable-c6.
Full disclosure: I haven't read the book, but reading the "Criticism"-Section on Wikipedia I would be very cautious. While investing and building wealth is certainly an important issue, there's just so much mischief going on with investing-related "advice".

https://en.wikipedia.org/wiki/Rich_Dad_Poor_Dad#Criticism
Say you were immortal and witnessed a supernova from a million light-years away. Eventually, after another million years have passed, you meet another immortal who happened to be right next to the supernova when it happened. When talking to this other immortal, would you refer to the event as happening two million years ago (when you witnessed it), or three million years ago (when the other immortal witnessed it)?
I'd like to use some modern common ground for js/ts development, but the entire toolchain is not ready for this, somehow turning it into chicken/egg problem. Typescript, webpack, babel contribute to that. For last 10 days I tried to pull my generic project as much to the top as I could^, but modules are still commonjs, because to use imports I have to "type":"module" in package.json, which makes webpack.server.config.ts fail because typescript is not ready for type:module until 4.6. I can't even recall now what's with Babel, I guess the same issue, since I'm using it to strip types in development builds. And then there are modules from ESM movement which are incompatible with this state of things. I understand their idea that nothing will move if not kicked further, but I hate it in real production where I can't upgrade because the author said so. Once ESM transition will be done, Deno will get much more modules, I believe. But right now the friction is unbelievable. Idk why they can't just allow all of the things like imports, requires, sync/async, side effects thing at least for a while, to cooperate. It's a matter of a form, not of a content. And there is no reason seemingly why nodejs couldn't make main.js async by default — sync modules would return a resolved promise. There is so much circus in all of that, which makes you pull hairs for weeks of a setup process.

^ I'm bundling server-side for hmr/watch functionality in a monorepo with many cross-side shared code/modules.
VCs only care if NFTs have enough legs to make it to an exit. Just like everyone else in crypto, they think someone else will be holding the bag.
Clickable uri to the right page: https://www.uriports.com/dmarc :)
"Why not just pass an array of arguments?"

Speed and convenience, I'd imagine? IIRC, arrays are marshalled as SAFEARRAYs in COM and those things are quite heavy-weight, you'd really rather call a 31-parameter function and pass it 27 NULLs in places of extraneous parameters.
That might be because they still believe every single problem on Earth is solvable by technology - their technology in the optimal case.
> I had no idea laughter had previously been believed as confined to so few species.

What humans believe about other species tells us a lot about humans, and nothing about other species.
> Most of the time the way key exchange is done in XMPP is very insecure.

How so?
Please take a guess why chicken pox is uncommon in Belgium.
Can you clarify this statement? Because I push and pull git over SSH ProxyJump regularly.
You _CAN_ diy most anything, the question is if you have the time and resources.

But, frankensteining 4 pics to get 2 MiB ram, I don't think it will be beneficial in making a PS1, there is a good article on the architecture, which was also posted here on HN previously https://fabiensanglard.net/doom_psx/

But, making a none-ps1 compatible video game thingy out of 4 pics would be a weird and fun project, and probably a total hell to code for, so go ahead! :D
>anything electronic was utter amazement for most of us

growing up in the UK, this was the same for me - and it still amazes me now
Well, not sure why that's implemented as is, interop is some old technology and there are quirks or whatever. But .NET provides convenience methods/delegates, like typed Action<>[1] (or Func<>) with 16 arguments, so you don't have to explicitly define delegate yourself:
[1] https://docs.microsoft.com/en-us/dotnet/api/system.action-16...

Today as of C# 4 you can for example have optional arguments. Not sure if this applies to this method which surely predates C#4.
It's called mpv. "Command line video player" is the description.
Great resource of open source icons, wonder how these folks make money ?
People will leave anyplace they cannot live in anymore, no matter what the situation is wherever they are obliged to go.

It is easy to say people can move someplace else in their own country, but other people already live in those places you suggest they move to.

People obliged to move out with just what they can carry are generally not equipped to build new cities. People already in places they hope to move to are generally ill-disposed to building them a place to live for free.
For Linux, there’s Midnight Commander.
Well, matrix does a lot of things different. A rewrite seems pretty unavoidable with hat many and significant changes
I have an nft - an ens domain name. Just because people have associated NFTs with the art / collectibles world (which lots of people don't get the value of even in the real world) doesn't mean those are the only use cases.

And I would say that the idea of skins portable between games being controlled by an NFT is absolutely technically possible, it's actually the business side that isn't probable - why would a company spend a bunch of money to make those skins work in their game if they aren't getting paid for it? It's possible to imagine incentive structures that could make it happen, but the reason we don't have it at the moment isn't because NFTs haven't been around, it's because those incentive structures don't exist, or don't exist to the right extent.
Proxyeconomics, the inevitable corruption of proxy-based competition
Actually, MM/DD/YYYY is in the minority worldwide. AFAIK, only the US and Canada use it.

All of Europe uses DD/MM/YYYY (Germany uses dots instead of /) and I believe most (if not all) of South America too.

Chinese and Japan effectively use YYYY-MM-DD because of how it's written normally, YYYY年MM月DD日. A lot of the tech and business world also use YYYY-MM-DD because it's an ISO standard, and makes sorting easier if you assume left-to-right reading order.

However, there are two interesting observations:

* Most of the world reads left-to-right, but uses Arabic numerals which is right-to-left. So, most of the world uses big-endian Arabic numerals when in the original language it was little-endian. Also strange that when we say "Arabic numerals", we also don't use their numerals, only their system...

* The difference in US date formats compared to the rest of the English speaking world boils down to how the dates are spoken. In US English, it's typical to say e.g. "January 10", whereas in British English this is practically unheard of. But this explains why to an American "MM/DD" feels more natural. In Britain, sometimes people might say "January the 10th", but "10th of January" is far more natural. This is why we prefer "DD/MM" because it's a natural abbreviation. You can still see vestiges of the earlier British-style usage in US English, e.g. "4th of July" which is ironic for the date that should be least British is pretty much the only one that's still said the traditional British way!
How much memory do you have? It should use a prebuilt version of V8 by default to speed up the build process.
Public entities goading their (captive) audiences into private social media for "updates" is an abomination that has been inexplicably normalized. Activating RSS feeds for direct interaction with their constituencies is the least one would expect from such publicly funded entities.

Still, one can only applaud the brave souls that buck the trend and restore a sense that there is light at the end of this long and dark tunnel we live through.
I find it funny how people seem to fixate so much on the fact that the author upgraded various components to say the title is misleading.
As someone with apparently similar requirements, the take-away from this should be this:

Even though significant work is required to keep these old machines working, some people prefer to do so. Crucially, they prefer it not because they love tinkering, but simply because the value propositions of 2021/2022 hardware doesn't look better.

As someone running a non-upgradeable Dell nightmare XPS13 2in1 with a nice display, but horrible everything-else, I can relate. I've been looking at recent models lately and find it pretty bleak.
Oh, can you share more? What is your programming environment?

I am debating a move to desktop/workstation with desktop CPU to support smoother Scala/lots-of-containers development experience.

Pandemic made laptops less appealing. With digital nomadism being a question mark for some. Yes, I do know some still continue to practice this lifestyle. I can be only jealous :)
Yes check the app while your limp unconscious body is shoved into the back of an ambulance. Type in appendectomy near me while you're writhing in pain in the passenger seat and decided, the hospital the next town over is a better deal
Well, at least now we know what percentage of the visiting population are monsters who put their toilet paper the wrong way.
China is far more authoritarian and blunt than the United States government.

A famous example would be how clowwindy, the author of the ShadowSocks VPN, was "invited for a cup of tea by the Chinese police".[0]

[0] https://printempw.github.io/about-clowwindy-archive/
> But if I understand things correctly, go, the spec, doesn’t provide the developer a way to control field order.

The spec doesn't, but the actual compiler implementation does. If the compiler is not allowed to re-order fields, they remain in the order the programmer specified in the code. That's why the fix in the article works in the first place.
Reading that makes me so happy to just have to open QtCreator, hit "new project" and get rolling
You keep making arguments specific to Signal-the-app. I'm making arguments about E2E messenger encryption in general (and also servers, decentralization etc).

If Signal-the-app did a WhatsApp and started blocking forwarded messages, or blocking messages that contained a blacklisted domain etc, I think very little would happen and it might take a while for people to even notice. You're assuming it'd be noticed immediately and everyone would find out nearly as quick, but I see no evidence this is true. There is no organized effort to do this type of auditing, let alone make it sustainable for the long run. Even if there was, so what? By the time I somehow find out (how? reading HN?) my message history is already gone.

"What I don’t follow is why you think it requires multiple clients."

I don't ...

"TBH, I didn’t read this part of your post that closely"

... which might explain why you keep mis-characterizing my position. Please RTFA and then opine. The section on threshold signed auditable builds isn't even long or complicated, it's a few paragraphs at most.

With the proposed software update scheme you can at least get closer to the goal of a single-client-single-server but genuinely encrypted system, that meets the social goals people actually have for encryption. It's a form of decentralization that doesn't require everyone to re-write the same code several times, so should mostly dodge the product management and iteration speed issues that causes Signal to reject federation.

It isn't as good as having multiple clients because the auditors can only reject new changes, not actually improve the privacy of the product in the way that a competitive market of clients might allow, but the tradeoff is the central authority can add features more consistently as there's no client capability skew.

"Well, no, I disagree. As a prominent example, Certificate Transparency “Noticing”—aka accountability—is extremely useful."

CT is hardly used. I've never heard of a single incident in which a website operator found a bad cert by monitoring CT logs. If there are any such cases it is very likely to be a big tech firm and not a "normal" SSL user.

Regardless, CT is if anything a better analogy for my own proposal. The actionable outcome of a CA breach detected via CT is that browser makers revoke it and they stop being able to issue certificates. It happens behind the scenes and users don't have to think about it. Imagine if browser makers never revoked any CA and people just had to tell their friends that some padlock icons were trustworthy, others weren't and they shouldn't browse to websites that used the leaky CA. Good luck with that.
Agreed, at least for western and northern European countries. The strategy for the others may look differently.