skysight-inc/HackerNews huggingface dataset:
> the monoculture created by systemd

systemd became the de-facto default init sys because Distro Maintainers have chosen it. I posted this link here before, but I will happily post it again:
https://www.reddit.com/r/archlinux/comments/4lzxs3/why_did_a...

Such a thing doesn't happen if the thing offered isn't an improvement over what was before.

As a matter of fact, this doesn't even happen if the thing offered is only a small improvement. We have seen this time and time again in Programmig languages: Exciting, clever new things that offer real advantages vanishing into obscurity because while they were better, they were not better by a large enough margin.

Diversity is great if it offers advantages. Different kinds of RDBMS are a good example. Different kinds of shells. Rust being there as a C alternative, Go being there as a Java alternative, Julia as a possible Python alternative, WASM instead of JS. All great.

But keeping something mainstream just because its different, adds no value. People can and do still use other init systems, but I am very glad I no longer have to wrestle 400-line sh init scripts on my production servers.
Are you sure about this, or just speculating?
The whole law is talking about the case of a developer who wants to change an implementation but maintain compatibility. With deprecation of old functionality, the whole point is moot.
My Brother printer's Bonjour server is wonky, and sometimes the only way it works is if I myself start advertising its IP on Bonjour. Even that doesn't work perfectly, e.g., double-sided printing does not work.
Rescue Sheet
Thanks for the question.

First of all I trust moxie because he has a trustworthy history. Thats TRUST and trust is based on gut feeling and history. And there is a difference between the two messengers. Whatsapp aint open source. They only implement the e2e encryption of signal and not the whole app. They can still gather metadata. Signal cant.

I hope this clears up my statement. :)

Edit: I dont trust facebook at all. I hope this shithole will one time go to hell.
Except you can't do mind control by intercepting someone's steroid supply.
I really liked it, and I will probably use it as documentation for newcomers in my team. However there is one point that I don't really agree:

"it can be difficult to add tests to a large application that has been developed entirely without testing. And that is why testing should be first on your mind when building serious software."

I've being doing it all my life. Join a new project, without any test, and start to add test code, while getting used with the code base. Actually, I would say that "adding tests" for a code base is the easiest and safest way to get used with the code base itself.
Internet has been cut again in Kazakhstan following a brief restoration for some
As I've heard from people in the agro business, the equipments are already communicating on a standard Isobus (non open source), allowing to use differents equipment together.

What would open source bring? You always need a hardware anyway, and the conditions are rough, a RPI would not survive.

And for farmers locked in JD awful customer service, well they have plenty of choices beside JD, except they are not all American.
Strange is an understatement. I can very much relate.

But if I'm being honest, so much has improved for me during the pandemic that I don't know how to feel about it.

I feel very guilty for saying this because people are dying and I've got more privilege than I can handle, but consider the following:

I was already anxious and depressed and wanted to self-isolate. Now everyone is anxious and depressed and forced to self-isolate.

I used to hate interactions with random people, especially delivery drivers. Now nobody wants to interact with anybody.

Being a remote worker was sort of weird. Now I can be remote and competitive.

There's so much more good content because everyone is at home and online. Also bigger gaming playlists.

Being a science news junkie has unlocked some real world value about how to best stay safe.

I learned a lot about how the public gets information and got rid of some "vaccine hesitant" friends and family.

mRNA vaccines are going to treat so many diseases so much faster now. HIV vaccine soon!

It used to be strange to wear a mask anywhere, even though it will keep you from getting sick during flu season, but now it's become normalized.

I'm sure there's a bunch of other things that I've already gotten used to and forgotten about, but mostly it's made avoiding face-to-face contact possible in pretty much every situation, which is really working for me right now.

Sure, I'm dissociating as years drift by with absolutely no social contact or memories, but I was probably going to do that anyway.

For me, this used to be a "mental health issue". Now I'm just responsible!

Of course, I won't be shocked if the virus ends up mutating in a way that wipes out humanity... but so far, with a little bit of luck, it's been a pretty big improvement for me personally.

I hope we somehow bring this to a sane resolution the same as everyone else, but I'm going to capitalize on this guilt-free way to self-isolate for as long as I reasonably can.

Clearly this some sort of bad and unhealthy way to live, but it's kind of comfy. I think English may lack a term for how this feels.
IMO too, it's a stronger argument. The duplicity (which would have been a great word to use in the article) is not the point: open and closed are suitable metaphors for systems. It's the semantic gap/lack of relation between concept and name, and that applies to any other arity as well. It's just that binary separations are very frequent: we really like to split the world in two.
As far as i understand Canon is selling non genuine cartridges :)
Have you ever signed a Salesforce contract? This is how the world works now. It sucks.
my bad I must be remembering things wrong or the old website was too confusing.

there is no better way to get good information on the internet than to post something factually wrong!

it's finally time for me to code that app
Don't use an iPhone. "Problem" solved. Billions of people worldwide pull it off without this faux dread even entering the picture.
Is it better to learn by making a mistake and experiencing the awkwardness of the results, or by having a computer flag it before the interaction takes place?

(perhaps they're equivalent, if we step into the belief that we're having a conversation (albeit one-sided, with corrections only allowed in one direction in the case of this program) with the software authors)
With Brother printer here, WiFi works to print straight from iPhones and Androids. This works excellent for apps that otherwise make you mail a pdf to yourself.

The initial WiFi setup was done straight from the printer using buttons. Never asked to install any driver. Hands down the best one I've ever had.
Always check before buying if you stand by good OSS support.

I typically always do. I have a 20 year old HP colour laser, but it is showing its age. All the praise for Brother printers on HN, somehow short circuited, bypassed my check-it filter.

Thanks for kicking it back in gear.
Surely there's an auto maker who wants to deliver the Toyota corolla equivalent of tractors to the world. John Deere sounds so terrible for farmers with it's locked in anti repair machines.
The Great Distractor
They don't cover vision as well. You need part c and part d as supplements to get that.
Exaxtly … there is a fine line between paranoia and distrusting everything
is this unbreakable like OTP?
>But again, note there's nothing fundamental about this problem. People routinely download and run arbitrary code on their desktops, laptops and smartphones...

But isn't that in fact the fundamental problem we're talking about? You get security without knowledge exactly if you give up all control over the device. What's the point of "running" your own server if all control you have left is that you can physically smash it to pieces?

Yes you can take control, but only to the degree to which you acquire the knowledge to keep it secure. I think this is a very fundamental trade-off.
Locations with low level of travel had less severe infections. For example countries in Eastern Europe got the wave later and it was smaller compared to Italy, UK, etc.
In the article, he mentions the need for a DOM parser dependency for his app, as Swift “does not have one.”

> AEXML was needed to parse some XHTML files as the native iOS SDK does not provide a DOM parser.

I have used Foundation XML parsers[0] for many years, but they are general-purpose; not specifically modeled on DOM or HTML, which probably limits usefulness on some Web content.

That said, if he has control of the content (don’t know the app, so I am not sure), then there should be no reason that they couldn’t render it in XHTML, so the Foundation parser could be used reliably. In the article, he mentions that the content is XHTML. I have to assume that AEXML[1] is easier to use than the built-in parser. It uses Foundation parsing (it actually seems to be a lightweight wrapper for the built-in parser), under the hood (and seems to be a very well-written dependency).

So, it could be posited that he would only need one dependency for his native version, if he wanted to handle the XHTML parsing, himself.

Personally, I am a huge believer in native platform development, having many, many scars from the compromises required for cross-platform solutions.

That said, I totally understand why folks prefer cross-platform development, and can’t, in good conscience, recommend a native approach for all apps.

[0] https://developer.apple.com/documentation/foundation/archive...

[1] https://github.com/tadija/AEXML
Mostly agree, but I want to narrow down a few points:

Collectively, we already fail at the first stage, writing code, which is well structured and through its structure conveys meaning and understanding. It is rare, that I see this being done in a way, that makes me think: "Ah, great code!" Perhaps in SICP or in some conference talks I see it more often, when people know, they are going to present it and it should be done really well. When I see some typical algorithm video however, people seem to get a kick out of explaining comparatively unreadable code, instead of first structuring it really well. Structuring code really well is an art and certainly one cannot always do as great as some of the greats, who had years time to improve some snippet.

Code being read 1000x more than written might be an exaggeration, or over-generalization, as not all code will be written to last years, however, I agree with the basic idea it implies.

I do not mind there being long comments in the code. I have done so myself, as long as they are useful for an in-depth understanding. You might get into a situation, where you work with an API, which when the concept that is implemented behind it would make things clear, but you do not want to assume understanding of those concepts by the reader of your code. Of course you could say, that they must read the docs of those concepts then, but what if that is a paper, which takes days to read and understand yourself? Maybe you can put very helpful explanation in some comments, to safe others lots of time.
As the comments below explain, production companies don’t buy any equipment anyways for most things. It’s all rented.

You can’t even buy some of the stuff here even if you wanted to either. Studio-grade camera equipment is like trying to buy a Ferrari.
> the web crowd who refuses to look outside their little ecosystem box

I mean, we usually don't require other developers to actively work in 3 different stacks because there are theoretically better languages around the corner. In fact we even make fun of premature fanboyism such as RIIR.

Today, the web works for most purposes, but when it doesn't, you may need native apps. It then makes perfect sense that people can reuse skills, ecosystems and tooling. From a UI perspective, any modern web rendering engine can do pretty much anything GUI fast and consistently.

Dart is a tiny language in comparison, and last I checked Flutter's web target backend used an opaque canvas element for all rendering, which wasn't just terrible for accessibility but also super laggy. I am still excited about Flutter but they have a lot to prove before I'll frown at the web folks.
Same with smart tv, phones etc. They all try to subsidize costs by using ads and only gadfly like us grouse over it. Many people simply accept it and moves on.

Also, many people aren't complaining and the competition is fierce. Many user aren't technical enough to find the skullduggery of such companies and at the end we all have to pay.

Regarding outlaw I don't see it happening soon tbh. Politicians simply doesn't care about such issue.
I’m writing a book about MMORPGs - Why We Play. I think your answer is spot on: we all just need something to loop around.
Just to add, Arcana also makes use of 2d effects animation. You can notice this when there is fire for instance, and in many of the explosions as well. Impact frames are also likely hand drawn.
They didn't release these results. It was leaked.
Having data is not really sufficient to doing as well or better in a business though.

As an example, Zillow had all that house price data, and then blew half a billion dollars because it thought it could use that data to start buying and selling houses itself.
Then, use

jq —-compact-output '.' | head -10 | foo

That is also useful for grepping to filter on records of interest.

jq also has --stream for handling large inputs.
`jql` looks interesting - is there an easy way to do the equivalent of `jq`'s `to_entries[]`? (e.g. turns `{"x":"y"}{"a":"b"}` into `{"key":"x","value":"y"}{"key":"a","value":"b"}` which I've needed a lot recently for dealing with output with unknown keys.)
Yes. The first hit following your instructions takes me to a page with a list of "download sites" like apkleecher.com that has a button labelled "GENARATE DOWNLOAD LINK". I find myself uncertain that such sites can be trusted to give me an actual correct download. Even if they give me one that looks plausible, is it the one on my actual phone?

Note that PCs have this problem less, because there's filesystem access and a culture of direct distribution. I can go find the actual install folder and take a look at what's in there. For mobiles it's harder and we're forced to rely on these shady sites. Even on PC though someone has to reproduce the build, keep doing so and keep up with auditing source code changes. Nowhere does this. Even if there are reproducible builds, who exactly does the reproduction and much more expensive audit work is handwaved away. As an industry we're not even auditing the libraries we include into the final binaries, so we're a long way from being able to have a group of different people make confident claims about what a binary actually does.
The Stakhanovite Movement
I take obvoius comments any day over no comments. I read comments way faster than code. It is also good to have an overview of what stuff does when you try to read it.

The hostility versus unnessecary comments is just making devs cargo cult for "clean code".
I guess the other difference between encryption and hashing is that a hash function need not be one-to-one. Many inputs can result in the same hash, though hopefully it's hard to find collisions.

So a hash function is allowed to destroy information, whereas it's pretty important that an encryption algorithm doesn't!
It's not just hearsay. I've driven a Tesla and seen a bunch of used ones up for sale. The gaps are hilariously huge on one side, and too small to allow a finger nail in on the other side.

Each car varies in their gap consistency, with some "good ones" and some lemons. This inconsistency alone should be a cause for concern.
> there is no easy way to access your NFTs once they are gone from OpenSea

You go to etherscan for the relevant smart contract, query for the metadata URI for your token, and voila you have it. Writing a new page to do this is a 5 minute task.
Agreed, except your last example. Most shows are much too long now, and extend way past after they have exhausted what little they had to say.
Encrypted file systems wants to have a word with you. :)

I don't think it is hard to imagine an increase in throughput for disk encryption due to less time spent in the RNG.
That's not true at all.

https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide...

AWS has "only" replaced the storage layer.
I was looking for a comment like this. To me this is the real news.

This is the first time I’ve seen DuckDuckGo Traffic not look like a steady exponential. With the 365-day rolling average you can see growth leveling off noticeably by the end of 2021. Without the rolling average you can see an unusual spike in Jan 2021 followed by a V for the remainder of the year.
`bool metric` does not ring any bells (I never lived in US, so I had to refer to the comment to understand it), and units of `a` and `b` and result are missing.
Ah, the "I don't own any cryptocurrency (but I own a company that owns a lot of it)"
You do not need to be in the hospital to be too sick to work. Probably 99% of sick days are taken without being hospitalized.
If farmers don’t want to be strangled by John Deere why do they not buy from competitors? It seems that there are so many alternatives:

https://en.wikipedia.org/wiki/List_of_tractor_manufacturers
He's one of those conflicted people that have nothing to hide, and yet are hiding everything.
Unfortunately, we can't see any of the nuance that's inside your head.

You really have to write that out, or people are right to prepare for the risk that you meant exactly what you wrote.
Web3 (or rather Web 3.0) used to mean Tim Berner-Lee's semantic web (RDF etc).
> But people get it from the official app stores

It doesn't matter what "people" do - what matters is whether a third party can obtain the same package and verify it. And they can!

> This claim isn't true - they can read our messages if they want to

They can read our messages if they want to, and we can detect that that happened, and then nobody uses their app any more.

> Samsung presumably watches out for Google playing naughty games with the Android source

Right! And we can watch out for Signal playing naughty games with their source. If you're ok trusting that Samsung will catch Google being untrustworthy, why are you not ok with trusting that signalverifier69's CI toolchain will catch Signal doing the same? The whole point here is that we don't need to trust Signal, we can absolutely verify it.
Enjoyable read for sure. Must have missed this the first time it went around.
Interesting.

1) Why do you need both lunr and elasticsearch as dependencies?

2) You shouldn't pin the exact versions of your dependencies in setup.py. Otherwise it makes it very hard to integrate.
Hashing is also not secure hashing, cryptographic hash functions are a small subset of all hash functions. I wish the author would make that clear. I've seen many abuses of cryptographic hash functions where ordinary (though perhaps specialized) hash functions would be more suitable.
I only print a few times a year. I havent seen anything fade, but I do run the clean procedure a couple of times before I print again each time.

I really need to set up an auto job that just prints a test page once a week to save ink on cleaning. But I still haven't had to buy more ink after a purchase over a year ago, even with all that cleaning I've had it do.
He’s right that ethereum is centralized, and “web3” even more so. If AWS disappeared Ethereum would too.

It’s hilariously wrong to say that paying for things with bitcoin is no better now than in the past.

The country of El Salvador adopted it as a currency and every merchant has the option of easily taking bitcoin via lightning network there— and everywhere else as well. Adoption around the world is growing rapidly. It hasn’t yet broken into mainstream awareness yet, but the graph is exponential.

Lightning is one of those technologies that when you use it you feel like “wow it really is the future!”
"Ethereum isn’t actually decentralized" ok so now there's infighting among who's decentralized and who is not. I suppose driving some money away from ETH to other projects is a logical course of action.

Everything else in this post reminds me of the golden rule of game development: to suspend disbelief in order to make the game sound plausible.

Certainly a decentralized internet, with increased security and less government control sounds good, and plausible. Will this be delivered by a "Respected cryptographer". I doubt it. It is however fun to see how tech illiterate folks spend money on grand ideas that amount to nothing much but a ponzi scheme. Suppose scams had to be elevated to a new state just like anything else connected.
Just look here, you'll find it worthy.
No, because the key stream is not random: It depends functionally on the integer which is sent in plain text, and on the shared secret.

For example, if you pick the same integer twice with the same secret then the XOR of the two ciphertexts is the XOR of the two plaintexts, thus losing confidentiality.
Product designers and developers don’t always play nice – how to work together
> Signal builds are reproducible. You can verify that the apk in the app store corresponds to a specific point in git history, and if you don't trust Google you can sideload that.

Actually, for both the commercial app stores - you cannot. Google requires app bundles where they package different APK for devices and sign it using their keys for new apps from 2021, August.
Well, you don't need to sign up for yet another service for one. People don't want to have yet another email and password to remember. That's what OAuth and all that machinery was invented to solve.

AuthN is one of the few use cases where having a public shared database/blockchain and users authenticate using their private keys works out better in some respects because the alternative is to depend on a centralized user database owned by a private company (eg Facebook). What happens on all of the sites you used Facebook login on, if your Facebook account gets suspended?
Knuth's style allows code to be written in any order using named chunks.

AFAIK, there are some types of notebooks that allow the use of chunks, but I've never seen people writing in those.
The fact that there is no "user override"[0] feature in any of these security processors is blatantly obvious evidence that they are designed to control and restrict first and foremost. I have read mjg's other posts on the topic and have no reason to believe he is arguing in bad faith but I'm still not convinced one bit.

[0]: https://www.eff.org/wp/trusted-computing-promise-and-risk
I am more or less in this rut now. I do SW planning which I now will be impossible to meet. Hopefully we never hit the deadline because priorities, requirements and resources constantly change. So planning is always revised. I am not the only one in this game. One rule I learnt is to never tell the plan cannot be realized. When this is all too obvious though, I let more experienced coworkers handle the situation with appropriate business speak I am far from mastering yet. Kind of a strange situation for an engineer.
Salvador Dali's Creative Secret Is Backed by Science