skysight-inc/HackerNews huggingface dataset:
> I think 3. is very harmful for actual, real-world use of Free Software.

I hold the reverse view. The only security token I'd trust is the only thing that isn't open is the private keys the device generates when you press the reset button. The rest meaning from the CPU up (say RISC-V) and the firmware must be open to inspection by anybody. In fact, it should also be easy to peel away the silicon protection so you can see everything bar the cells storing the private keys. The other non-negotiable is the thing that computes and transmits the "measures" of the system being attested to (including it’s own firmware) can not be changed - meaning no stinking "security" patches are allowed at that level. If it's found broken, throw it away as the attestation is useless.

The attestation then becomes the device you hold is faithful rendering / compiling of open source design document X by open source compiler Y. And I can prove that myself, by doing building X using Y and verifying the end result looks like the device I hold. This process is also known as reproducible builds.

What we have now (eg, YubiKeys) is not that. Therefore I have to trust Yubi Corp. To see what that's a problem, see the title of this story. It has the words "Zero-Trust" in it.

In reality of course there is no such thing as "Zero-Trust". I will never be able to verify everything myself, ergo I have to trust something. The point is there is a world of difference between trusting an opaque black box like Yubi Corp, and trusting an open source reproducible build, where a cast of random thousands can crawl over it and say, "it seems OK to me". In reality it's not the ones that say "it seems OK" you are trusting. You are trusting the mass media (places like this in other words), to pick up and amplify the one voice among millions that says "I've found a bug - and because it's open I can prove it" so everyone hears it.

So to me it looks to be the reverse of what you say. Remote attestation won't kill software freedom. Remote attestation, done in a way that we can trust, must be built using open source. Anything less simply won’t work.
Element isn't terrible, it's just more like Slack than Signal or WhatsApp (and I like that, different use cases). Other clients, as you mentioned, provide the latter. There's space for everyone.
I was always taught (by extensive reading on SO) that implementing a queue system on top of PGSQL is bad.

So, for small (but critical nonetheless) use cases, do any of you use your own custom built queues on top of a database?
I'd bring it closer to shop class.

They might make a decent birdhouse/python app, but after that most will just put the knowledge on the shelf.
RESEARCH TRIANGLE PARK, NC, CISCO SYSTEMS INC 25-Dec-2021

After only 22 years of service, a 6509 chassis deployed at a customer location has reportedly reached its final end of life. Taken from us in its prime, lon1-gandalf01, known simply as “Gandalf” by those close to it, put in its final notice after the power outage at Interexion’s LON1 facility killed off the last working PSU. Network Engineer Rich Ikhanda, the technician tasked with placing gandalf into its final resting box, stated “it’s a real shame to see this router taken out of service while it still had its youth. I mean, it was barely out of its teens! A true tragedy.” Rich reminisced that “once we disabled that bastard protocol, IPv6, we could easily fit the entire v4 table into Gandalf’s TCAM with plenty of room to spare, until everyone else had the same idea and even the “real” internet table grew too large, referencing the IPv4 default free zone. Luckily we were able to slice, dice, and julienne using as-paths, like real network engineers.”.

Gandalf will be replaced by a UniFi USG-Pro nicknamed “Gandalf the White”. When asked if there were any concerns with Gandalf’s replacement, Rich stated that “I am not sure about this whole app thing to run a network, but it has gigabit interfaces, it should be good to go.”

Gandalf is survived by nearly one million IPv4 routes and a 6513-E named Frodo, all of whom will feel the impact from this loss (as they continue to reconverge).
https://www.facebook.com/journalismproject/programs/third-pa...

tl;dr there's a system that brings third parties and pays them for this. They're not actually Facebook employees but are generally expected to be journalists of some kind. Still, they get it really quite wrong occasionally:

https://www.bmj.com/company/newsroom/facebook-urged-to-act-o...
There's nothing special about software engineering beyond:

- meticulous attention to detail,

- explicit deductive reasoning,

- an ability to understand and build abstractions,

- a high tolerance for frustration,

- and a love of instant gratification when things work.

None of these are rare traits. But the cluster of traits isn't widespread. Which is to say it's not common among people in general, but also not unusual.
Apple is not under obligation to help you yes. However, that is no excuse to limit your property rights of your tangible property via extralegal means. Nor is it okay either. A sale of tangible property generally means the the transfer of all property rights of that object to the buyer.

Also your not free to install any software on the device unless your lucky enough to find an exploit.
It’s not that much about playing NBA.
More being able to play a game of basketball. Or watch one and understand the rules.

Or knowing when you need to call a plumber vs running to Lowe’s and fix it yourself.

I don’t thing we should expect anybody beside software engineers to be software engineers.

But a greater code literacy would go a long way.

Imagine scenarios where you hand over your code delivery to a client that can actually run and manage it.

I don’t know what NBA level would mean for software.

You need a uncanny, almost innate ability to perform in a extremely competitive field,
where a ton of other really good agents are operating at the same time.

I can’t think of anything like that in software really. E-sport would apply but it’s not really the subject.
Maybe some demo-scenes? Or raw effective genius ala John carmak.
best practice

Ugh. I hate that phrase. The translation into plain English is almost always "What I read in some blog" or "Because I want to" or "It's what our sales rep told us." Even from C-levels who should know better.
Doesn’t HP require a support contract for firmware updates? That would probably explain why so many of those are on old firmwares.
They recently announced readable standby instances.

https://aws.amazon.com/blogs/database/readable-standby-insta...
And having that much inscrutable and unaccountable power would very quickly attract hundreds more untrustworthy individuals who would be tempted by the very fact that the power could be abused. Once their capability became self-reinforcing, the number of very honest people in the government would trend towards zero.
I recommend https://youtu.be/vAgiHreswj0 for a history of the estimated age of the earth.
This is the reason I really, really love Nix. I have been fighting this same battle for years and Nix finally fixed it.
I think it will be extremely useful to be able to simulate cell at real atomic level with all physics involved. That means that you can introduce changes at atomic level in DNA and see its effects. Introduce experimental medications in cell and see its effects. You can actually study cell processes (many of which are not known yet) in simulation. And many, many more. It will be revolution in medicine and in biology in general!
It's kind of amazing if you think about it that most people are able to learn to read. Spoken language I can understand since it can evolve. Then one day people started writing things down and it turns out somehow we are pretty good at reading things back almost as well as talking to one another. Programming doesn't seem to be like that at all.
Netsend made me feel like a true spooky wizard. It bums me out to see how much of our computing has moved north-south.
i've been homeschooling my daughter through middle school. she's very smart, she's been in the highly capable program since maybe 2nd grade. she honestly surprises me with her ability to reason, but i've yet to hit on a way to get her to understand loops. i've been considering learning an array language with her in the hopes that it would allow her the chance to get interested in programming and excited about its potential without facing loops.
Docker Desktop is just closed source fork of abandoned kitematic.
https://github.com/docker/kitematic
i've been skiing 3-4 days/week with around 8 hrs out in the sun. Would this have the same beneficial effects on me? I am always deficient but i din't bother taking anything so far due to lazyness.
The point is, when the rocket explodes on the launch pad you don't have the head of NASA saying "Well technically all the pieces of the rocket are still there, so technically we didn't lose it."
As mentioned in the comment you're replying to, Element is just one client for Matrix, and there are others like Fluffy Chat that might suit your tastes better. Try some other clients before giving up on Matrix.
> Not everyone can play in the NBA.

Writing code as part of a job isn't being in the NBA, it's just like writing as part of a job.

> Not everyone can safely drive a car.

A better analogy for code, but only a very small share of those who are employable at all are not employable in a job where driving a vehicle is a part (though not necessarily a central part) of the job.

There's no reason coding can't be like that.

> Not everyone can architect and write good code.

Not everyone can organize and write quality prose, either, but most people who can't can still get jobs where writing text is a required part of the job.
My guess as to what will concretely emerge is protocols/standards for things like 3D user avatars and world hopping, so that worlds hosted by anyone can be linked up, rather than only uploaded to a proprietary game with rules/technical limitations decided by the game's devs. The "Metaverse" would be to 3D environments what the Web is to HTML pages.

But the article's "Ask 50 people what the metaverse means, right now, and you’ll get 50 different answers" is very true. I have no idea if this is what Facebook or Epic Games have in mind.
> being able to code makes you no more of a software developer than learning newton's laws of motions makes you a mechanical engineer.

Yes! I wish this point got more attention. So many articles - there was one on here from a16z today - pretend there is this magical thing called learning to code that takes a couple months and suddenly puts you on par with every software developer. The analogy I like to use is claiming that by taking an introduction to statics course you are somehow on par with an architect or engineer that is designing bridges and skyscrapers.

Software development needs wide acknowledgement as an actual trade that takes a broad base of theoretical and practical learning, including time spent writing code, to be proficient, and not seen through the lens of this learn to code nonsense. I've talked to so many business people who see "coding" as a skill they could pick up if they had a couple months, that would then let them be on par with career developers - if only they weren't busy with higher value work. This is one of the big reasons why many companies are so dysfunctional
The author miss the point that coding complexity is exponential, not linear.

I.e. a lot of people can understand 10-20 lines of code, less can 100 LOC, less can 1000 LOC, maybe top 10% can understand 10K, 1% - 100K.

So no code can work, just that the size limit of the program will be low (10-100 LOC) .

However, most program start at low LOC, but ends up with high LOC, where the low code tools breaks.

Hence, the low code tools basically guarantee the future of the elite geeks.
I can count on one hand the number of people I've known in my lifetime who are over 7', but met hundreds of students over four years in college who understood recursion.

And programming is not the NBA, and people who write code are not all-stars. We're plumbers, and the idea that programming is some genius's endeavor that only the smartest people can understand is laughable.
I have dozens of cookbooks. Almost every single one is absolutely packed with personal details about the chef and background information on the recipe (who taught them the recipe, their beloved Nanna's method, the history of nut x in remote tribal desert y, etc).

I've been to cooking schools in multiple countries. All have gone into detail about the background of the chef and each recipe.

Same with restaurants. Many restaurants and certainly almost every fine-dining restaurant pushes the profile of the head chef.
We’re employing crows with health benefits.
My impression is that most people can't be good at it because they have no interest in it, and no willingness to spend time on it, learning and practising.
WhatsApp

MLS makes encryption more scalable
"Explicit deductive reasoning" is pretty darn rare.

(and "meticulous attention to detail" is not strictly necessary, as my own career attests.)
It seems they did not. For more details please read this thread: https://news.ycombinator.com/item?id=30114645
The big problem with regulating big tech is you are punching yourself in the pocketbook.

Even if congressmen are not trading on inside info and getting rich, if you have a 401k you are gonna get dinged in net worth by this kind of regulation. On AAPL especially.
> Collecting personal data like that in Europe is hard and expensive to do legally

Only because the laws grew up around giants like Facebook. Prior to social media, it wouldn't have been a problem at all. You'd have no trouble setting up a small forum, blog, or mailing list.

We're in the predicament we're in precisely because of Facebook.

There might still be a cheap way to accomplish GDPR compliance as a small band, artist, company, etc. It doesn't seem hard to manually implement right to forget / data portability on the small scale. It's bolting onto big, existing businesses with lots of processes already in place that is expensive.
Like this website? Perhaps.
> The people driving in from the suburbs are who work in the city.

This is true but that doesn't mean that the city should go broke catering to their whims — that could be putting tolls on the bridges, encouraging use of transit, etc. but they need some way to balance the budget.

> They could replace the car bridges with train bridges or dedicated bus bridges (after knocking down a lot of houses, which if history repeats itself will be minority-owned houses)

… or simply dedicate a lane for transit. It's not an iron law that the least efficient mode of transportation be given the highest priority.
Technically accurate, but not practically true.

If you've ever needed to teach someone patience, you'd see the futility of trying to teach a random person programming.

Nowadays, I will tell people straight out I can't see them dealing with the frustrations long enough to develop the patience needed to learn the basics.
hate to break it to you, that mess was made by the duck tape specialists.
> It eventual comes to point where people have to take personal responsibility for their actions.

You’re missing the original point I was making though.

In this scenario, Facebook removes their application from Apple’s App Store and almost everybody sideloads it. Ultimately, what happens to the people who do that is their own responsibility. Yeah, I get that.

Where does this leave the people who want to use Facebook under Apple’s rules but refuse to sideload it? They have had something taken away from them. Sideloading affects them even if they choose not to sideload. It affects the entire ecosystem, not just the people who sideload. “Just don’t sideload” advice doesn’t work.
Less plausible since we know what kind of conditions asteroids go through, along with what conditions things outside of a rock in space close to the sun would go through
Helm charts are roughly the k8s equivalent of docker compose. Might be a few years before they’re as widespread but a lot of common things you’d want to host are largely “solved” already.
And if your unlisted app does in-app purchases, you still have to pay 30%, right? Apple used to justify that cut by saying "we deserve it for bringing all these users to your app via the app store catalog", but that's not a valid claim for unlisted apps.

Apple must be forced to allow installing iOS apps from arbitrary sources, signed with arbitrary keys. This is the only way. Or are they afraid that if they do allow that, then the app store would have to truly compete with "just host a self-signed .ipa on your own server" on its own merits?
There is no Python left at all unless you install it via other tools like Xcode or brew
I see it even more simply. Most people can't handle something being so stupid and frustrating. And the bigger their delusions on how smart computers are the less possible it is.
I was in dire need of an Cat 5 cable a few years ago and went to Walmart to get one. Until this point I had always made my own cables, so when I saw the price ($40ish) I was floored. Unfortunately, I had to buy it anyway. As I was checking out I had that cable and a small bag of beef jerky. The cashier wasn’t paying attention and didn’t engage with me at all. She scanned the beef jerky and moved the cable across the scanner, but it didn’t register. She told me it would be ~$3.50. I considered telling her that missed the cable but given the fact I was mad about the cable costing so much I didn’t say anything. I always wondered if I would feel bad about doing that, but several years later I still don’t.
Test Naming Tips – Paperless
It’s surprising to me how many of my disparate interests, unrelated to my work in software, are represented here in HN.
Smart contracts came out in 2015 on Ethereum apparently. What came out in 2008? Bitcoin 1.0? Things do move fast in tech, you may want to keep up with the latest versions before writing off the web saying you've got it figured out based on your experience with the Mosaic browser. Sometimes opinions need updating too, everything evolves.
I'm sorry, but what you're saying has nothing to do with what I linked to. The linked article is about the development of helmet safety standards and their use in bicycle racing.

Please read the linked article, you may find it interesting.
In their defence.. Most modern languages don't really make use of these.

I mean recursion is almost never better than a while loop (stacks don't love it), and pointers... Yeah everything in JS and Python, Elixir and Ruby is really a pointer (most everything) but the average day to day it's not something devs care all that much about.

As an ex c and c++ dev, and CS grad, I know about them. I think if I pushed myself, I could find perhaps 5 times in the last 10 years where knowing that things are pass by references in ruby was expressed as such.
Pretty much just one of the normal and expected outcomes of using any of these services in recent years. So many of these platforms lock, disable, or delete users' accounts seemingly at random and for no reason, then go radio silent when you open a support ticket. Not a lot you can do in most cases. Best of luck.
Don't they need to show up the purchase recipt/bill? Wouldn't the store's location be identified on that?
Funny, I've found that enough time can heal the "overexposure" and I can listen again. Sometimes it takes years, as in 5 to 10. Speaking of the Beatles, I have pretty much all of their songs completely memorized so I need to take long breaks. For quite a while I would listen to them every couple of years and that was it.

I'm now conscious of when I'm overplaying something and lay off it for a while.

A similar thing happens for me when songs are used in commercials or movies and I subsequently have trouble listening to them without the visual association taking over. This has "ruined" many songs for me in the past, but after enough time away I can thankfully appreciate the song on its own.
I unfortunately don't have a list for the US, I'm based in the Baltics (Lithuania). I've heard good stories from US hotlines but don't know any particular names.
What is the deal with so many websites and businesses hiding the email address contact? Not just big sites but even small websites. Are people suddenly afraid of email or something?
Excel is a disaster. It will randomly corrupt input that happens to fit certain patterns by parsing it into "dates" or "numbers", unless you go to the trouble of explicitly setting the right "cell properties" via the incredibly clunky UI. It hides the code that's input in cells, lets it randomly mix with input data and does not support any kind of source control for it. It's not even fit for purpose as a prototyping tool, you're literally better off writing some code in FORTRAN IV and key-punching it into a fresh deck of punched cards. At least you're going to have proper code/data separation.
> Offering third-party distribution channels is no less harmful than forcing users to access your content through a web browser

This technically is ridiculous and completely untrue.

Web applications, by design, have a tiny fraction of the capabilities of a fully fledged mobile app.
Seems to me that we'd get some pretty good infosec bang-for-buck to hire some new FBI agents to just wear badges and knock on doors of businesses with such abjectly shittastic security.

Either their IT people have been begging to fix it and management won't give them the resources, or they don't have IT people who even see it as a problem. Either way, a couple special agents having a sit-down with the CEO might change some course real fast.

Discuss.
> but the screen is going to be much better back in your real living room. You don't want to watch Netflix in VR because the screen door effect sucks

Some of the stuff that’s done well today (e.g. some of the Oculus originals) I already find to be far more immersive and engaging than sitting 20’ away from a screen on the wall.

I think the tech to make AR mainstream for consumers is still years away, and in the meantime, entertainment in VR is the killer app.

I expect this is where Apple may be the main (only?) threat to Oculus. They have the AppleTV+ studios to turn out great original content, and a core skill set in performant and beautiful mobile devices will killer displays. (Not to mention a lot of brand loyalty with folks already in their ecosystem). We’ll see what the price is though…
The “industry” is a bunch of individuals who individually may or may not learn from the experience of others and themselves. And there are a lot more inexperienced developers than experienced. So on average I would say that yes the “industry” is learning but the average skill of developers might not be that high (yet).
You should learn some AWS and use it as a trojan horse to get those jobs. As a former old school sysadmin I really took to it because it's so modular and feels like Unix's "collection of simple tools piped together". Plus, any old school admin is a treasure on any cloud team because the need to drop to shell is unavoidable. People think they don't need sysadmins on cloud teams but behind every good cloud team are a few good sysadmins.
Well that is great news.

It ultimately matters because if we didn't all use Chrome, Google would have to compete more on good things, instead of building bad things that we have to remove. Basically, it's the position of the privacy whack-a-mole oveton window.
what brought you here?

Here's another similar music/band FB page complaint thread from earlier in the week

https://news.ycombinator.com/item?id=30122572
> I would say getting scammed by an app from the apple app store is more likely than downloading a virus in 2022

And you would be wrong.