skysight-inc/HackerNews huggingface dataset:
This is pretty incredible. These aren't just good practices, they're the fairly bleeding edge best practices.

1. No more SMS and TOTP. FIDO2 tokens only.

2. No more unencrypted network traffic - including DNS, which is such a recent development and they're mandating it. Incredible.

3. Context aware authorization. So not just "can this user access this?" but attestation about device state! That's extremely cutting edge - almost no one does that today.

My hope is that this makes things more accessible. We do all of this today at my company, except where we can't - for example, a lot of our vendors don't offer FIDO2 2FA or webauthn, so we're stuck with TOTP.
I worked in Russia and used to think this way too. But once we managed to hire person how couldn't code. At all. He was intelligent during the interview, talked his way through system design section.
But during the probation period he basically couldn't do anything, even simple stuff.
After that I started to block any candidate, who couldn't provide code solution for at least simple problem.
Is JRE "art"? I'll retract if you can show that it is, but it seems to be framed more as a sort of factual news media.
Neil Young seems pretty on top of things, generally.

You can buy any of his music DRM-free directly: https://store.neilyoungarchives.com/
I think his idea is that if a few popular artists took a stand like him, Spotify would have to change their decision.
Do you believe that for empirical reasons or ideological reasons? So far this appears to be false.
Show HN: Beth's Lux Mix – Compilation Albums and the Stories Behind Them
The lingo makes this sound a bit confusing to me.

In the Philippines, you get prepaid promos. Nobody calls them "plans" here. Some of the promos are slim, like you might get 100MB or less of data along with texting.

Getting "charged" also sounds strange, because you don't get charges. You just use up your data and then you can no longer browse. But that's not quite true. If your data is gone, then you can still use Free Facebook. I always assumed that was the point of using Free Facebook. You don't use it when you have data, you only use it when your data is gone. But I guess there are people who are super conserving their data.

Free Facebook sucks, because you can't see images. I guess it sucks worse when Facebook is unexpectedly using up your data. I LOVE it because it's far less distracting.

Facebook isn't the only quirky service here. Many of the promos also give you a certain amount of data for YouTube. I found that the service I use just allows all Google data through. With YouTube data, I can still use Google and check Gmail. So, when I'm feeling cheap, I just proxy my connection through an instance on Google Compute, which I had already been using for other purposes.
Who can tell me the atomic weight of Bolognium?
Lots of good questions here but I'll focus on two that I have the most experience with:

> Is it better to grow it internally?...Or the best way is to recruit a skilled DevRel person or instead of a marketing person and collaborate in creating great content?

I work with ~70 developer tools companies on devrel/marketing and the biggest killer has got to be founders who think they can just throw marketing over a wall to someone else.

Initially, you as the founder need to become that skilled DevRel person.

If not you, get a co-founder level person to help you. The truth is, in the early days, nobody else will care about the project like you do, so you need to be out there:

- Writing about it

- Demo-ing it

- Talking about it (eg: conferences and meetups)

- Talking to users and contributors

Eventually, you'll need to build a playbook that another DevRel or Marketing person can execute, but you can't outsource this when you're still finding product-market fit.
> The edge cases and quirky impl detail questions are what src is for.

Literally the most important thing you can document.
>Fortunately, lately I don't see any new article from the USA praising MMT.

UBI certainly died as a subject as well. The "basic income" benefits wasn't even universal and exactly what everyone said would happen has happened.

I still think a fiscal conservative with an army of accountants could figure out UBI and make it work. Effectively it would greatly punish anyone who works under the table.
I do agree with you, and Rogan has platformed a lot of people who are famous for opposing the medical consensus.
World-changing (robotics) invention and the epic legal fight
First, it seems you didn't read the article, the comparison is not between various ages of a given person but between a bunch of human life now and a bunch of other life in the future.

To make it even simpler, the DCF arises because you can simply show that receiving a dollar now is preferable to a dollar in the future. Can you even claim that about human life? If you cannot even find a good explanation for your theory how can you claim you can come with an equation for it? The DCF is a very precise way to compare mesurable quantities. How would you even define the value of a human life?

You cannot randomly pick known equations and apply them to unrelated topics because there is a vague resemblance. This is supermarket philosophy. That's why it's ridiculous.
Yes, I'm handwaving that even if you very conservatively estimate factoring back in for the externalized costs etc., you still are a couple of orders at least for cheapest garments.

i.e. the GP has a valid point but it doesn't undermine OP article at all. I expanded a little.
Leetcode prep is less time and money than getting a degree in anything. Anybody with sufficient interest can find the time to get to a basic competence level in leetcode and system design. Getting real life experience or a college degree has got to be the bigger gate.
The UK Design System's page banner takes up 70% of the vertical space on my browser.
I was looking into the same thing recently. The price is right ($10/TB tape vs $13/TB HDD) and it’d be nice to have fewer HBAs and SAS cables, but having to swap the tapes manually every 2TB (every 6 hours?) kinda ruins it for me. An automatic tape library would be ideal, but I couldn’t find any in the 100TB range that are cheaper than spinning rust.
Not surprised to see the good old liberal outlets like WaPo changing the narratives and trying to tell us how inflation is all normal and to suck it up. Guess what serfs, Argentina has it way worse.

I guess after 5yrs of covering Trump and spreading wokeness, WaPo forgot what struggle really feels like for people here.
> There’s a long tradition here of purchasing U.S. dollars as a hedge.

There's a 200 usd quota per month shared between products, services and currency exchange. If you buy something that exceeds your monthly quota it means that your quota for the next months will be affected.

It's a system designed so that no one who can save money can buy dollars. When poor people started selling their quotas the practice got quickly stopped with taxes that got its price above illegaly traded dollars.

So basically if you need to buy dollars here you are a criminal.
TLDR someone invented a better warehouse configuration and tried to patent it
The (old) DVLA web site is merely a shallow front end for the 30 year old incompetent bureaucratic triangle of carnage that hides behind it.

To get a decent result on any IT project you have to fix the organisation behind it before you even think about replicating that organisation digitally.
From reading the links, you can modify a cold volume, so that next time it's loaded and written, cryptsetup will write out the data decrypted to the disk, so that you can access it cold a second time and the data will be decrypted.

So a legitimate user does have to decrypt it in the middle, but you don't need to control what they do or access it the same time they do.
Can you do that without knowing what apps are running on them? Your entire platform say "do a rolling update" and don't look back?

I wouldn't want to have paid for the engineering that went into that if you could actually do that.
I'm sorry for being thick, but this sentence sounds like LUKS1 can be update to LUKS2 in-place, so it is affected.
Not sure where I changed the definition of censorship - I was saying that using the word censorship can easily lead to false equivalences, such as

> they're doing exactly the same thing.

No, they aren't, baseline and context matters. You are falsely equating the removal of say, anti-vax conspiracy content in the US, with the removal of say, political/homosexual/religious/ethnic content in an authoritarian regime. If you don't believe me, ask somebody who was forced to flee their country due to any of the above reasons.

> point out the fault in the argument.

Let's assume 'censorship' == any restriction to free speech. We already agreed that every Western democracy has such restrictions or 'censorship'. How can "authoritarian regimes use 'censorship'" now be an argument against 'censorship'?

To paraphrase (not a perfect analogy), murderers use knives, and chefs use knives, but "murderers use knives" is not valid argument against knives?

I understand if you disagree with already existing restrictions of free speech in Western democracies, is that what you mean?
Just want to point out, this is a graduate course(although 1st year). Many students taking it are phd students, who at Michigan can do quite theoretical research. Its not uncommon to take graduate math and cs courses as an engineering phd at Michigan
For your final project, please explain, using market cap and consumer reach, why Amazon is a moral good for humanity.
Ask HN: Good (or any) guides on software patents?
How do you support yourself?
You would assume wrongly, then.
Unrelated but similar, https://blog.maximeheckel.com/posts/cubic-bezier-from-math-t....

Includes hands-on examples to help understand the math behind bezier curves.
I imagine leaving the most popular streaming platform is going to be hurt financially in the long run.
There's a lot of great comments in this thread pointing at different aspects of this issue. I think it's actually more complex than all of that, because while all of these things are true, it misses the primary cause of bad information security: People.

At every layer of nearly every company, nobody has any understanding of information security. Where-as, as a society, we have at least a basic understanding of physical security (we understand the gist of a lock, and use them regularly, and guard the keys), we have basically zero understanding of information security.

I've worked, in some capacity, around information security for nearly my entire career and I have found that even people I highly respect as technologists rarely have any knowledge of information security. Most of the information security side of the industry is filled with people who are trained on compliance and regulations, not on security, and they are seen as completely synonymous. Security has to be layered in order to be effective, yet that's been taken to mean several layers of different types of brightly colored middle-boxes with pretty dashboards, rather than an actual layering of security principles and a reasonable organizational posture. While these things can be tools, they are treated as solutions rather than tools that help you create a solution.

Most SWEs know next to nothing about application security. Most web devs don't even know what OWASP is, much less have any understanding of web security. Most networking folks (even those with Network Security in their title) know little about network protocols and protocol security, instead being glorified firewall rule writers. Most security architects only know about compliance and policy, nothing about actually identifying threat vectors and constructing robust organizational postures. And most executives don't care beyond what's required to comply with the law or their contractual agreements so leave it to "experts".

Most of the "experts" aren't experts. The fraud with information security isn't just what's being perpetrated by attackers, it's also what's being perpetrated by the entire information security industry, which is mostly filled with puff pieces calling themselves "experts" who don't actually understand anything about security at all, as well as vendors who sell security products that themselves may not be secure on the backend but have privileged access within their client's data environments.

All an attacker must do is find your weakest link. What you must do to protect yourself is ensure that your weakest link is stronger than anyone else's strongest link. There's a huge disparity in the effort and investment required, and it's an issue that can't simply be resolved by throwing money at it because most of the people lining up to take your money are their own sort of attacker committing their own sort of fraud.
That was a great read. Would you hire self-taught juniors? Someone from Africa, Madagascar especially? I'm in a process of switching career trying to get into software development. I'm literally following a course¹ teaching your tech stack, I'd really like to apply to your company when I'm done with it. Covid made remote work the norm, so might as well give it a shot.

1. https://fullstackopen.com/en/
The issue with take homes is that they are at the beginning of the process where you might have hundreds of candidates. I won't invest several hours in that. Whereas on-sites are the last stage in the process, so it's better than 50-50 that I'll get an offer out of it. So in that case I'm happy to take the time.
It's very rare that people intend to be racist. Rather, they have intuition of what a "good programmer" is in their head, which is subjective, and thus more likely to be discriminatory. If you give them an leetcode question and a rubric to grade their performance, it's hard to deviate from that rubric to much unless if you're intending to discriminate.

>Does a biotech company make their interviewees do lab work live?

Not biotech, but according to my cousin, pharmaceutical research interviews are even more arbitrary. He had chat with 5 employees who asked questions about their own rather esoteric specialties. Most of the questions were completely unrelated to the work that he ended up doing, and my cousin thought that the interviewers themselves were unlikely to be able to answer each other's questions. Unlike leetcode, this isn't something you can predictably study. It just so happened that the labs my cousin had worked in happened to specialize in those same niches. There are so many qualified postdocs that want to move to industry that interviewers can afford to be picky.
I tapped "Depends," but I wanted to tap "No."

I can tell you that requiring leetcode tests means that you won't be working with me. For a lot of folks, that's no big loss. For me, it's shrug. I'm a bit sad, but I don't cry myself to sleep, over it.

I feel these are tests for conformance and pliability, as opposed to actual prowess. To many corporations, that is much more important. They certainly don't test for many practical applications. Take-home tests are a bit better, but, it has been my experience, that the companies look for rote responses, and don't deal well with the way that I tend to solve problems.

When I interviewed folks, I got them to talk about their favorite projects, and asked them about solving unique, real-world problems, which, to me, was pretty damn important. I looked for enthusiasm and the willingness to solve problems. The code we wrote wasn't exactly stuff that you'll find in a textbook.

I also believe that, for many companies, they are a "young-pass filter." I'm old, cranky, nonconformant, obdurate, and probably a pain to work with (although I have decades of experience, working with teams that say different, I suspect that a lot of folks here, would be unhappy with me).

I won't go where I'm not wanted. I have a great deal of skill and experience, and have been shipping (as opposed to "coding") for my entire adult life. I can prove it, too, with a pretty massive portfolio. If you are interested in delivering modern, high-quality, working, maintainable, software, as opposed to FSM worship code, jargon, and excuses, then I'm a good bet.

There's a small possibility that I may know what I'm doing, and could make other people quite a bit of money.

But I'm not a "cultural fit," and that's fine with me. It wasn't fine with me, for a while, after encountering today's hiring process, but I have learned to accept it, and everything will be fine.

I love to work. Since no one wants to pay me to do it, I'll do it for free; but, of course, that means that I do it on my terms.
Star Trek tribute mission to fly on ULA’s Vulcan inaugural launch
I think this doesn't care about secure boot? As it works on the unauthenticated data, rather than the bootloader + kernel which in a properly configured secure boot system will not boot if modified.
I know it's aimed at businesses, but this would also be a great UX to pay friends or others when selling on Craigslist/Kijiji
This has to be viewed in the broader context of the censorship wars, and it has to be understood that EVERY major distribution platform is now owned/controlled/censored EXCEPT podcasts.

One of the only places in the world left that is mainstream and uncensored is audio podcasting.

Joe Rogan is public enemy #1, not necessarily for his content, but because he represents the largest and last stumbling block to full censorship and control. When Joe falls, the precedent is set, and all the other players in the podcast sphere are wiped out and censored within a matter of weeks and months.

You might say podcasts are uncensorable by nature, but that's just not true. They have been walled off and monetised, and that's a problem. Contractually and for owning your listeners.

And even if someone wants to host a podcast oldschool, RSS style, that's not going to fly. Most hosting services and payment processors feel they have to the right to not host content they don't agree with.

Ultimately Neil Young is just a loser pawn in a bigger game. A useful idiot if you will, because he will never live up to the standard he is advocating for if he lives another decade.

But he gets what he wants: social justice points. I just hope the investors in his catalog sue him for lost profits.

Anyway, make no mistake, this is the opening salvo, not game set match.
Show HN: Async Social Lounge for Teams
I remember seeing the original Activestate post and porting it to Perl. But it was 12 years ago so took me a while to find it :)

https://gist.github.com/draegtun/540493
Good. Besides the obvious reason that Rogan draws far more money than washed up Neil, I'm sick of these authoritarians. If you disagree with people then state your opinion and factual objections. This idea that you should whine and cry until they get silenced is getting old. It's one of the most anti-American things I can think of. People are sick of it.

Additionally, coming from a dude that based his entire career on singing about the atrocities of government overreach, mob mentality etc. it's pretty disgusting to see him go this direction. It makes me think he really had no fucking clue what he was singing about and was just doing it because it seemed cool at the time.
Those are signals, which may be part of security, but far from adequate if you're talking about operational security, security of health records, security of network-wide root keys, etc.
> Did Young really think that Spotify would drop Rogan over him?

No, he's hoping that other artists will follow suit and that collectively they will choose the artists over Rogan. I don't see it happening, but open to being wrong.
An Introduction to ARM64 Assembly on Apple Silicon Macs
Eh, took me a couple years to figure it out with software.
By "all" do you also mean healthcare workers? Law enforcement? Farmers? Military? Utility workers? Garbage collectors? Homeless people?

Even if you somehow locked all the humans in their homes for a month, someone would catch the virus again from a deer or something and the pandemic would start all over again.
> One could probably take a VHS drive and convert it to a data drive

https://en.wikipedia.org/wiki/ArVid

> More specifically, I was a bit appalled by the "magnetic erasing"

Nobody laments what there is no 'low level format' for HDDs anymore.
> Although inflation is long gone

Well, you say this, but then there was that time in 2014 when the ruble went from about 40 RUB/USD to 60-70RUB/USD...
How to Improve Your Energy
So why do we loudly shame those that don't want to adhere? Who does it benefit? Does my heavily tattooed spouse need to know she's not your version of bangable? Does my bigger friend need to know that people don't find her size attractive, when she's happy about it?

If we're going to discuss being charitable, we should start by allowing people to be happy with themselves and not share our thoughts on what we don't like about them because that's the problem. That's at the root of this whole topic. We are incapable of allowing people to deviate without telling them how we feel about it.

Why? And why don't we do the same thing as to men? (There is no 100% rule. Some men are shamed and some people shame men. It's not at the same rate.)
The understatement of the universe.

Plastic (fiberglass) boats can “last” (continue floating, at least) a very long time. But they can go from well-maintained and usable to immobile and dangerous in months without attention.

Source: owner of a 45-year-old, well-maintained sailboat (not my first).
Correct me if I'm wrong, but I believe the FDA still has not approved Moderna beyond emergency use, due to the myocarditis issues. This, in addition to a number of EU countries that have now stopped giving Moderna to males under 30 for the same reason.
We're likely not seeing myocarditis in AZ shots because it's a very long tail event and the AZ represent an order of magnitude smaller sample size.
In India, the telecom regulatory authority does a great job protecting consumer interests. The article doesn't even mention India. Infact, India has some of the lowest data plan costs, even when adjusted for cost of living.
Aligning Language Models to Follow Instructions
Imagine living that long, that would be some experience witnessing world go faster and faster with each decade.

You'd literally experience steam power industrialisation progressing all the way to information tech era.

That would give you some incredible perspective.
a lovely little factoid is that in elizabethan england, a set of clothes could easily cost more than a house (Shakespeare paid a 60 pounds for the rather large house New Place, while a very fancy set of clothes could cost hundreds of pounds). This makes sense when you consider that the clothes could take more labor than the house!
It's just like flying- throw yourself at the ground and miss...
Didn't know about this! Very cool. Hi-res too.
Id say by leaps and bounds DH

software in companies needs to be as easy to explain as possible to the widest audience.

very few people have a firm understanding of exponential maps
I experienced this recently in a surprise 'shared screen' coding exercise the interviewers threw in at the last minute.

I couldn't even remember how to write a for loop in bash, something so familiar it would be like asking me to recite the alphabet. Utterly humiliating yet comical experience looking back.
> awfully balkanized

What does this phrase mean?
Heh, sort of relates to this amateur NaNoWriMo from 2020. [1]
Not a scientifically interesting paper, from the looks of it, but I'm amused by personal coincidence here.

[1] https://zalbert.net/octo
I'm not sure what a "win" in this case is, but it seems fair. I didn't genuinely get the impression that Young thought he'd push off Rogan, but rather really didn't want to be on the same platform as Rogan. I think he has that right, although I think most people raised in the social media era are more comfortable with sharing platforms with divergent views.
Apple pays out $100k bounty for Safari webcam hack that imperiled victims’