skysight-inc/HackerNews huggingface dataset:
Yes, maybe after that it will come for people who can't tell plural from singular. I am all for grammatical punishments of the most grim variety.
The political divisions over masks, vaccines, lockdowns, etc. are a feature not a problem to the political class. Politicians salivate when they find issues that can drive wedges between groups of people. COVID will be over when it's no longer politically useful (i.e. when everyone becomes tired of it and it no longer works as a wedge).
As a kid, I treasured the family vacations more than anything else. Don't neglect that.
is paying for Google One subscription give me any support?
I went from electrical engineering (logic design and then aerospace) and went to law school (night school) specifically for patent law. I now have 14 years as a patent attorney writing patents. It is definitely a change of pace from designing circuits to a largely technical writing career.

However, (with a small "boutique" firm) the hours are more flexible, the work is rewarding due to always learning new technology at the bleeding edge, and you get to interact with engineers/developers in the industry. Having a strong engineering/science background helps you in getting up to speed on new technology quickly, and having a strong writing background is a required skillset (but that can be developed over time). As with many careers, having good mentor(s) does make a difference. The "lawyer" part is definitely present, but more in the background for drafting/obtaining patents (referred to as "prosecution") vs. litigation work. For prosecution, "the law" is more about learning a set of "operating rules" and applying those rules to your daily work to both comply with the requirements and to anticipate litigation issues in the future. Patent work can also encompass licensing, employment agreements, trademarks, portfolio strategy, competitor analysis - all of which vary from firm to firm on how deeply that sort of work crops up. For litigation, you are definitely more involved in traditional attorney work, sometimes courtroom work/sometimes behind the scenes.

To become a patent agent, passing the Patent Bar Exam is required, and takes a bit of studying - it is not trivial and largely learning a set of rules/procedures to practice in the field. Of course, adding the "attorney" title requires yet another more comprehensive Bar Exam (state-by-state) and most states also require attending a law school prior.
Exactly. COVID has made very clear humanity’s amazing ability to play make-believe, making failed attempt after failed attempt to get “back to normal”. We have this idea that “life as it was in November 2019” is the One True Normal, and we must keep trying to return to this Normal lifestyle, despite that pesky, stubborn reality.

Every time restrictions relax, and we rush back to capital-N Normal, cases rise, deaths rise, hospitals fill up, and it’s nothing but “Surprised Pikachu” faces from politicians! We keep not learning, over and over.

I don’t know what it’s going to take to snap us out of this trance and accept lifestyle changes. A “9/11 quantity of deaths” every 3 days is apparently not enough.
That’s not very very and objective when you dig into, though. Take twins separated at birth, raise one in a good school system, and the other in a shoddy one. Guess which is likely to have the higher SAT/ACT, even though they were born with the same abilities.

There are plenty of brilliant kids who made the mistake of being born in the wrong zip code. Something sane and fair would take that into account. Thing is, that’s good for the rest of us, too. I want the best and brightest to be found and educated so they can invent cool things and make my life better. If you reject people just because of their birthplace, you’re drastically limiting the talent pool.
> I don't get it, who is going to pay for the time and energy required to audit everything?

Not everything has to be audited. That's why there's different levels of attestations.

In terms of economic incentives: If you're a company bit by one of the recent supply chain issues (colors.js, etc.), you might be able to justify hiring a security vendor to audit the code that your company depends on. This would provide a net-positive benefit to the entire ecosystem, even if it's only a small set of audited code.

Maybe one day, we can even make this an expectation of large players. But that's a discussion for down the road.

On the opposite end of things, you have independent security consultants that want to establish their reputation so they can get paid engagements with software companies.

One avenue available to everyone is review open source software, report vulnerabilities to their maintainers. This can be thankless or even traumatic; i.e. https://github.com/opencart/opencart/pull/1594

Gossamer would open an alternative approach: Hang your shingle out by publishing negative (vote-against) attestations of vulnerable versions of open source software and positive attestations (e.g. code-review) of the versions that mitigated the issues they disclosed. Anti-malware vendors (e.g. WordFence) could even issue weaker positive assertions (spot-check) for WordPress plugin/theme updates after vetting the known-good releases. Security companies depend heavily on their ability to earn trust to thrive, and that's a hard market to break into; this offers another way in.

In short, the economic challenges you're imagining aren't the ones that this project will face. (Although, there will assuredly be challenges.)

Companies acting in their own self-interest can be leveraged to cover the hot paths of the universal dependency graph, and security up-starts can be leveraged to cover their blind spots. Given enough time, the ecosystem will eventually reach some sort of equilibrium, and many new opportunities will be made in the process.

> I presume the big package maintainers already have eyes on their stuff - symfony etc.

Read the discussion on the Symfony Encryption component: https://github.com/symfony/symfony/pull/39344

Just because they have eyes on their stuff doesn't mean that those eyes have the necessary domain-specific expertise to identify problems. If it weren't for Paragon (paragonie-security on Github) and their associates in the security industry, the issues identified in the earlier versions of the module would likely have persisted and been shipped.
I've recently switched my home server to Freebsd after it was on Debian for who even knows how long (Debian still virtualized on bhyve for some tasks).

My take: I love FreeBSD as a server os. It's really, really well designed. Spend a bit of time with the handbook and after a while it's really simple to hack on. I really like the separation of the base OS, I like the init, I like jails, documentation puts every Linux distribution to SHAME.

But laptop?... Unless you scour for exactly the parts that will work (esp for wifi), you're going to have a bad time, even on old equipment. At the same time as I rebooted my server, I had an old ThinkPad I decided I wanted to FreeBSD for the hell of it. I gave up on it. It may have been possible but it was just too much work. In this day and age when almost any Linux desktop distro boots without a hitch on hardware that's not completely brand spanking new, it was just not worth it
Ah yeah, the perfect time to post some extra negative news, kick crypto when it's down.
https://digitalmars.com/d/archives/digitalmars/D/Transitive_...
Systemd has only one advantage, which is also it's prime disadvantage: It's paws are everywhere in your system. Before there was Systemd, init systems worked okay too - in that space nothing was changed by it.
Being/not being wrong and being a jerk are two different things.

As for blanket reason. I have a rich friend. He has Tesla. He does not give a flying fuck about carbon footprint. The only reason he bought is is that famous acceleration.
First off FreeBSD FTW. I use it everywhere over Linux now for the first time in 25 years and couldn’t be happier. My only wish is that BSD had a better non-CoW file system. Databases and Blockchains are already CoW so it does irk me slightly to use zfs for them. That being said, I’ve never had a problem because of it.
> it's not doing any better

Really? As of writing, the S&P500 is down ~10% from its all-time-high. Bitcoin is currently down over 50% of its ATH. Other cryptocurrencies are faring even worse. The stock market is doing significantly better.

This is an oft frustrating topic in the world of cryptocurrency enthusiasm. The contemporary American banking and finance system is awful. It's worthy of a great many of criticisms. But crypto solves none of them, and removes the few, feeble protections that are in place to protect average everyday people.
semver.org -- which did an amazing job popularizing this idea -- did not yet have its webpage up in July 2009 (archive.org has it in December)
They are using a different notion of “measure” than the standard notion of absolute value of the difference. Under the standard measure every number is within epsilon distance of a rational for any positive epsilon. Thank you for the clarification.
>> Investors are also assessing the impact of further regulation on the cryptocurrency market. Last week, Russia’s central bank proposed banning the use and mining of cryptocurrencies.

Being a cautious optimist of decentralised money I think it's safe to say we've not achieved the main goal of having our currencies shielded from (rougue) government actions with the current designs (ETH, Bitcoin)
In declaring the statement 'false', the Facebook fact checker confirmed there is a longstanding scientific theory it is true and provided confusing would-be counter-examples of variants of viruses exhibiting treatment resistance and cross-species leaps. Omicron demonstrated that treatment resistance is really incidental to severity, and COVID already is a problem for humans -- the question clearly was not asked by a pigeon or monkey for whom cross-species leaps of a human virus could be problematic. The would be fact check was not especially illuminating.

I personally credit the prediction attributed to Luc Montagnier back in 2020 that because COVID exhibited unnatural characteristics that exacerbated the severity of illness, he predicted that over time the characteristics would evolve out of the virus and result in a more benign illness. This is a reason why it would have been useful to have a scientific debate over the lab leak theory, because the origin of the virus informs our best guess of the path it may take in the future, which has so far confirmed to this prediction.
I don't think the point is to fix anything; it's to have remixes/alternatives to what's already out there.

However, using AWS for some things and pinning stuff to IPFS and blockchain for others does prove convenient (I don't have to worry about egress costs w/ IPFS for example)
The supply of Dollars is not limited to 21 million.
‘Borderless’ crypto networks wrestle with state sanction compliance
We're different then. On the road is the only time I truly feel unburdened by the stresses and distractions of everyday life. My best and most creative ideas come while on the road.
Pretty sure this is because markets are going down. if/when prices go up again headlines will be skepticism disappears as people get into crypto again.
The Germans are blocking Estonia from exporting Soviet age howitzers to Ukraine. So until this nonsense stops, I wouldn't say we have the same interests. They can probably remember the GDR. If it were for Western Europe they'd leave us to our own fates, after they invested piles of EU funds into Eastern EU states. Fortunately the US always steps in before it's too late.

Once an European security analyst one said that Russia and China are playing chess with the US and the EU, while the EU is playing backgammon.
Thanks, I'll give a look at your list!
I feel like the best way to handle "small tweaks" would be to group them by target website, and use "Cleanup Google search result pages" as an example. Here's the source file for it: https://github.com/xvello/letsblockit/blob/main/data/filters...
> How do you deal with Microsoft's crap on a daily basis?

I deleted my last remaining Windows installation two days ago.

Linux is better for software development anyways, and with Proton, I can play all the games I like.
Help me out here…

Does it matter?

It feels like most web3 discussion is just discussion and none of the core parts exist at all…. and some folks just threw nfts and crypto currency into the bucket to have something concrete to point to.

I don’t have a problem with discussion about meta discussion but I’m also skeptical that it matters/ that this is just meta about meta …. with nobody doing any of this web3 stuff.
SQL is my least disliked technology of all the ones I use in anger. And reading one solid SQL book has served me well for 10+ years now. The only ask I would want is better errors. But even without it, I rarely spend much time debugging SQL or trying to figure out what Clever Programmer intended their code to do.
Esp thanks to in-kernel TLS, which is fantastic.
What do you think those are, and how much does the average person care?

The original web was more decentralized than what web3 proponents are selling, but over time users consistently chose a few major services. Why will they switch back and what will avoid that repeating again?
This is why we launched leatherboundledger.com if NFTs have value on their own their should be appetite too store their ownership the old fashioned way.
Unity Acquires Ziva Dynamics
This is true and so the solution isn’t really like some magic free power system, it’s more a tool we can use a niche applications where it might be more straightforward to just wrap something around a hot pipe and get a few watts of power than to run electrical wiring.
> [bias in VE for hospitalization]

Well there's no such bias in Australia, AFAIK. Everyone has the same testing requirements.

Let's forget vaccine effectiveness (VE) against hospitalization, because as far as Israel is concerned you may be right.

What about VE against mortality? How could this data be biased? I always focus on VE against mortality, since it's the least prone to bias. (EDIT: I see your link to Fenton & Neil, I will discuss below)

> [Airport testing]

That's interesting, but there are other explanations for this.

For example, natural immunity in a large % of the 'unvaccinated' population by the time that this study was done.

Another explanation could be old people self-selecting into the vaccinated population. That will again make vaccines seem weaker than they are in reality, especially in their ability to prevent infection.

I also note that the RCT which you like showed strong VE against infection (against an old variant).

> Is that the only reason it doesn't exist?

Probably yes? And if not, it's probably some other basic explanation, such as Pfizer not wanting to waste their own money on a trial if the FDA didn't require it. They are for profit, after all. Is there a need for some deeper reason? Occam's Razor.

> Fenton & Neil's work

Interesting.

Maybe this bias existed in that ONS report at a particular time period, I didn't read the full report, it's quite long. Maybe this bias exists in all the data sets being reported by different countries. It's possible.

But what about the VE against mortality in countries that have plateued vaccination rates, where such a bias is going to be minimal? Wouldn't we find evidence of a sharp drop in VE over a rolling 4-8 week window? Can anyone show me this happening to any of the big countries?

If someone can show me that - and the data public in a number of countries, so it should be possible to show - I will probably change my mind.
> but at least it wouldn't automatically ruin your bank account whenever you got a little traffic.

This only happens when consumers fail to set budget alerts. Troy could have saved himself $10k with 15min worth of work.
As an American, I remain humbled by how far back England is able to trace back its history. Visiting https://en.wikipedia.org/wiki/Museum_of_London was such a highlight of a trip many years ago
We have partially "free market" healthcare in other countries and it works fine.

The problem with US healthcare is not that it's private, it's that it's more expensive than it has any right to be.

A private system with a good framework of regulation would be good.
It seems the messaging from the experts is different in the US and the UK.
The message in the UK broadly is: expect to be infected with COVID multiple times throughout your life, vaccination and prior infection should protect you from serious illness.
In between your two extremes are colocation (no managing buildings, power, cooling, racks, security, optionally network), dedicated servers (no managing/installing servers, disks, warranties) and basic VMs.
Woah, this politifact.com fact check sorted that out. I had gotten really confused into thinking the virus did have feelings.

Thank you politifact.com political fact check fact check for checking that.
Former CFTC commissioner weighs in on Chase unbanking Uniswap founder
Which I think is $0 . Monero has supplanted Bitcoin in the "crime" liquidity department.
It's two sided.

The people getting service often are not ones actually paying (insurance pays, medicaid, medi-Cal etc).

The whole billing thing can be pretty darn maddening for providers as well.

There is absolutely no public pricing.

One thing I couldn't stand. A bunch of policians want to talk about how much money various govt programs save. So they do things like lower of cost or contract (penalizes you if you deliver to much service for same price) or some % of your charge sheet (ie, 50%). If 90% of your patient load is going through these programs, you basically have to set your cash pay charge to 2x it's normal cost, so that all these players can then report "savings".

The reality is there should be a cash pay DISCOUNT, you pay 80% if you pay in cash. But all these programs will not pay more than cash pay even though the overhead of dealing with them is massive. Ie, probably should pay 110% of a reasonable rate.
If you have an article or paper explaining how viruses evolve to be less severe, I'd be interested in reading it.
I don't quite understand how they get away with it, in the most litigious country on the planet.

Also, surely there's a hefty opportunity for someone to be providing a service to audit and reduce bills for x% of the reduction?
>I also think the true meaning of attestations is a bit murky. The `spot-check` and `code-review` attestations are about source code, `reproduced` is about the build artifact, and `sec-audit` is somewhere in the middle (ideally both). But it seems like these attestations are always attached to artifacts, not source code? So spot-check and code-review are really only relevant if the build is reproducible (and has been attested as such), right? Since that's rarely-if-ever going to be the case in the real world, it seems like another reason the attestation system will likely be misused in practice.

This probably should be made clearer, but: Reproducible builds are necessary for the security of any such system. It's outlined in earlier blog posts.

Consequently, the inclusion of reproducible build verification is taken as a premise.

> The authors seem to envision a world where there is an ecosystem of independent security vendors out there doing reviews and publishing attestations, but don't really provide any compelling reason why that world will spring into existence.

That's true, and should probably be tackled in a future blog post.
How do you know its unique?
>That because the Soviet Union traded raw materials in exchange for knowledge and tech, then they weren't victims even though 20 million of their people were killed in WW2 after the Nazis invaded?

No, I don't endorse that statement.

The leaders of the USSR, like Stalin, enabled the Nazis to invade and kill millions of people (perhaps millions of non-Russians too) by sending them raw materials prior to the attack. That's not a claim about intent, or victimhood or a personified USSR.

If that is/had been identified as the mistake, it wouldn't seem so logical to build an empire for protection. That's why this is not a tangent.
> At the end all of your jails end up on the same loopback interface, making it hard to firewall. I couldn't find a way to have one network interface per jail.

You may want to look at vnet, which gives jails their own networking stack; then you can give interfaces to the jail. If you use ipfw instead of pf, jail id/name is a matchable attribute on firewall rules; although it's not perfect, IIRC I couldn't get incoming SYNs to match by jail id, but you can match the rest of the packets for the connection. And that brings up the three firewalls of FreeBSD debate; maybe you had already picked pf because it met a need you couldn't (easily) meet with ipfw; you can run both simultaneously, but I wouldn't recommend it. Nobody seems to run ipf, though.

Edit: you may also just want to limit each jail to a specific IP address, and then it's easy to firewall.
> I'll stay on top of whether I'm making too much noise, though.

I have my eyes on the Logitech G915 TKL[1]. Apparently, the switches are less noisy. I think it can't be worse than my Razer Blackwidow Chroma. I agree that in a shared space environment, we should at least be mindful of the noise we make.

[1]: https://www.logitechg.com/en-gb/products/gaming-keyboards/g9...
That's a scary thought, being locked out of a primary email address despite taking security seriously.

I currently have it secured with my backup codes (printed and stored in a secure location), as well as two Yubikey (one primary, one backup).

I'd be seriously angry if Google locked me out of my account.
> I don't have to worry about egress costs w/ IPFS for example

IPFS isn’t magic: you have to pay for hosting somewhere - you can use it like a CDN to pick cheaper networks but that’s maintenance optimization.
It’s not that they are too abstract it’s that they only hold in a fantastical alternate reality where the elite resign without a fight.

In reality, if cryptocurrency takes power from the elite they will make it illegal and arrest 95% of its users who are incapable of learning how to mask their network participation. This is not reassuring for an idea whose decentralized powers are predicated on mass adoption.
You can short circuit this by working remotely for a US company from another country with a functioning healthcare system. If done properly (LCOL, excess income is invested), you mitigate not only healthcare system expense issues, but also can get towards a position of financial independence to mitigate the usual delays in finding your next role.

For example, to have a child's broken arm evaluated and casted in a Mexico capital city is less than $100, total. Annual cost of living for a family of four is $25k-30k/US.
There's also Verizon and Microsoft's own CDN. Personally, I use Verizon because Akamai doesn't support wildcard purge.
in theory, web3 has nothing to do with cryptocurrency per se, and only relies on some blockchain technology, which is itself not bound to the value of the currency it is used by.

however, the fact that too many people seem to think that there is in fact a connection between web3 and cryptocurrency just adds to the smell.
From your link https://www.freebsd.org/cgi/man.cgi?query=rcorder

> The `REQUIRE' keyword is misleading: It does not describe which daemons have to be running before a script will be started.

> It describes which scripts must be placed before it in the dependency ordering. For example, if your script has a `REQUIRE' on `sshd', it means the script must be placed after the `sshd' script in the dependency ordering, not necessarily that it requires sshd to be started or enabled.
Since the tomatoes would be worth $8k (or whatever), they might do a bit more diligence on ensuring the customer can pay.

MS's bandwidth cost a fraction of what they're charging, so it's easy to risk people not paying up.
3. both 2, then 1