skysight-inc/HackerNews huggingface dataset:
> I have been writing for years that package managers are a big security risk

Like all tools used by humans, package managers are used for great good, and terrible evil. The great good (from a security point of view) is that we can distribute new features and patches quickly and freely. The bad: we can distribute nefarious code just as easily.

> Or just write it yourself.

Writing code is how bugs are created. Often popular libraries are much more robust and secure than bespoke code. Sometimes they are not.

> Learn what your code base does.

Great advice.
Wasm doesn’t have any built in garbage collector (yet) and so by building on top of Javascript (especially for a language like Lua that has a lot of alignment with it) you are reusing that machinery which is easer.

True you could take an existing lua implementation and compile to WASM but then as the other comment explained interacting with the DOM would need to be implemented.
Wow, cannot wait to try it! Thanks for the tip.
Cutting animal agriculture has the potential to stabilize greenhouse gas levels
Title shortened due to character limit.
Came here to say something similar. Sometimes the best policy is to avoid creating policies.
Now that is good advice!
Real Me and Fake Me
I’ve heard much more cyberpunk people than I’ll ever be argue it’s the other way around. That WG didn’t predict the future but the futures comes to be as there’s a generation of people really kinda thinking it makes sense and living it. I guess we’ll find out.
THANKS!!! I keep trying to get a good understanding of at least the beginnings, i.e., foundations, of quantum mechanics and of the Heiserberg uncertainty principle, but I get frustrated at everything I can find on the Internet including the lectures of courses at MIT. So, for me, the physics is an obscure disaster.

But Fourier theory!!!! That's FINE!!! I went carefully through the very careful treatment of Fourier series in the third edition of the W. Rudin Principles of Mathematical Analysis and also his very careful treatment of the Fourier transform in his Real and Complex Analysis, also distributions in his Functional Analysis. Also read and used the Blackman and Tukey The Measurement of Power Spectra, wrote some corresponding software that pleased some people in the US Navy, etc. Then I took a course at the level of the second Rudin book, and in the class when the prof got to the Fourier transform one of the students, with a physics background blurted out "That's the Heisenberg uncertainty principle!"

So, now as I look at the MIT lectures, etc., I expect to see a good, solid, clear connection with the Fourier transform -- but so far I've found NOTHING.

Yup, so, thanks for confirming that, yup, the Heisenberg uncertainty principle is not some weird and obscure feature of nature but, really, just an elementary result of any elementary but precise math derivation of the Fourier transform!!!!

But, looks like I will have to make the connections with the basics of quantum mechanics myself.

Yup, multiply in the time domain is the same as doing a convolution in the frequency domain -- that is, if take the Fourier transform of a function zero outside of a finite interval, then in effect have multiplied the function by a box, 1 in the interval and 0 otherwise, and then for the transform are doing a convolution, that is, a weighted sum, of the transform of the box which is just a version of sin(x)/x, that is, with a peak at the origin and falling off rapidly away from the origin. That is, the weighted sum of the convolution is a "smearing out". So, on to the connection with the physics ..., hopefully.
Sounds like a service worker, for which there's only one active at a time for all tabs (and can communicate with them) could help with your client side issues.
I remember the whole egg-gate with talk they shrunk the creme eggs and only admitted after a picture of comparison to an older one surfaced -https://www.chocablog.com/news/cadbury-admits-creme-egg-shri...

So there is a history of changing things and not saying.

That all said, I find coca cola tastes different depending upon location of production. Personally I found the south African cola tastes better, then Canadian and was able to blind taste them. So hardly not all brands are that verbatim across production lines globally and if a production line is moved, so does it's sourced ingredients more so as well as quality of aforementioned ingredients. Equally, local regulation may also play into those small changes.

But then wine from different years, from the same production run/winery will taste different and that is probably the best example of how ingredient changes, however small, play a big factor in the end product.
The solution is decentralizing.
The multi-user install isn't very intrusive I think. Would definitely go this way if possible.
I wish it would be as easy as to disable ipv6 from sysctl:

net.ipv6.conf.all.disable_ipv6=1
They are better than most VAE models at not averaging, but they may still not be covering the entire data distribution. That would probably imply that the underdispersed samples are closer to the average. We don’t have great metrics for figuring out how complete that coverage is.
Timeline of the far future (including 350B years from now)

https://en.m.wikipedia.org/wiki/Timeline_of_the_far_future
I hope this means jail time for decision makers. After all this is clearly at least manslaughter.
That seems to be the norm for low cost Kubernetes services ( the control plane is free, you only pay for the underlying storage, compute, networking you use) like Scaleway, OVH, Digital Ocean.
It wasn't a claim, as the winking smiley ought to have suggested to you.

It was a joke, and one based on nearly 27 years of writing Perl at that.
Carbon capture tech is advancing in the wrong direction
This may sound controversial, initially:

Consider getting a good pair of sound isolating earphones, or even ear defenders!

Not to neglect your child; but to reduce stress levels so you can problem solve effectively.

The cry of your baby is one of the most emotionally powerful sounds there is. You'll experience extreme stress if you can't calm them down quickly.
Probably for good evolutionary reasons, so the parent doesn't ignore their child.

But sometimes there's a problem you just can't instantly solve.

If you find yourself getting really stressed, and losing your ability to act effectively, being able to put something on your ears and reduce the volume while you, e.g. change the nappy/diaper, can reduce stress and help you be a better parent.

I only had to do this a handful of times for each of our kids, but when it was helpful, it was really helpful.
There is quite a lot of natural forest in Singapore, although you’re never far from the roar of a highway.
Yes they did make changes https://www.chocablog.com/reviews/cadbury-old-gold-before-af...
Unsure if it's night terrors. We went through it twice. Both times lasted 3-4 weeks.

Daughter would go to bed, fall asleep, all happy, full belly etc. At around 2am, wake up screaming at the top of her lungs. I would pick her up and hold her and pace back and forth for about 2 hours while she sobbed. If my wife tried to touch her the crying would go back up full blast.

After the 4th night on the first time I just threw her over my sholder and hummed to her until she fell asleep, then wife got her blanket and pillow and put it in our bed between us and i would slowly move to the bed, gently put her down trying not to wake her (she woke easy a few times doing this) and then that was usually it for the rest of the night.

1st time was at about 20 months, second time at about 28 months. Bar none the WORST experience we've had so far.

In terms of sleeping through the night, she took ~18 months before not waking for milk in the middle of the night. In the early days I had her crib next to my bed and if she began to stir I would instantly wake, make a bottle. (we did formula for the whole thing, kept a flask of warm water and pre-measured milk powder next to the bed). Change her nappy, feed her, and put her back to sleep. I would be awake for 10 minutes and back to sleep.

I consider myself very lucky in this regard because I've heard horror stories.

Edit: Oh, the other thing with the night terrors, one thing the internet told us to do was get a night light. And don't turn the room light on when they wake. Makes getting back to sleep much harder.
I may have missed something here, but the write-up seems to be missing the main problem with OTR, which is that both parties need to be online at the same time to do the key-exchange to set up the session - at least in OTRv3 (https://otr.cypherpunks.ca/Protocol-v3-4.0.0.html)

This is why the Double Ratchet Algorithm was created (back in 2013!) where you prepublish a pool of one-time-keys which can be used to establish sessions without you having to be online - as well as defining how to ratchet the message keys forwards both by new DH exchanges and simple hash ratchets (hence the name Double Ratchet).

OTRv3 has the sole advantage that you can trivially tunnel it over any existing synchronous transport (e.g. an IRC DM), given it doesn't have the concept of setting up sessions asynchronously. However, this is a bit of a moot point these days, given modern messaging systems like Matrix, XMPP and Signal natively support the Double Ratchet via Olm, OMEMO & libsignalprotocol respectively - so OTRv3 really is a bit of a historical curiosity at this point.

Meanwhile OTRv4 does introduce the idea of offline conversation initialisation (https://github.com/otrv4/otrv4/blob/master/otrv4.md#offline-...), but it doesn't seem to have got much traction, relative to the fairly ubiquitous Double Ratchet. (Has anyone seen it in the wild? It looks like coy.im might speak it? https://github.com/otrv4 seems fairly dead :/)

Finally, lots of E2EE research is going into efficient shared ratchets for group communication rather than 1:1 sessions - such as MLS (https://datatracker.ietf.org/wg/mls/about/), DMLS (https://matrix.uhoreg.ca/mls/decentralised.html) and DCGKA (https://www.cylab.cmu.edu/news/2021/11/23-group-messaging.ht...).
I've only ever done body weight and know that get more muscle when training. I think you are doing premature optimizing. I know nothing about exercise theory but I know what gets me fat and what makes me strong, I do not care about what is optimal since I do fun things for exercise, not for strength.

Do you think this is the difference, the mindset we have in our training.
I was 7 words away from being spear-phished (2019)
There was as similar discussion about Barclay's bank, and a list of 74,000 numbers:

https://shkspr.mobi/blog/2021/05/the-74000-numbers-of-barcla...

I tried a similar scheme of sorting the list and storing the delta of the previous number:

https://news.ycombinator.com/item?id=28348965
Film grain is (used to be? It's been a while since I've seen one) added to hollywood movies despite the entire pipeline being digital, and noise can be instrumental in masking hard edges and artifacts while tying together an audio mix. Painters will drag a brush with only medium and no pigment across a canvas just to "glue" the elements together. So yes, People do enjoy this.
> So let's say the developer has a Mac and wants to have Go and Node on their machine; how do you specify these versions in a central way so that all team members have the same versions of tools?

The easiest setup would be to use `nix-shell`. This would also have the benefit that you could have different versions for different projects.

If you also install `direnv` on the machines you can use `use nix` in the `.envrc` file to automatically load the packages that are declared in `shell.nix` into the PATH once a developer enters the project directory in the terminal.

Containerization is also one thing that's awesome about Nix: Instead of saying: "start with image xyz, then run apt-get to install further software, then do some cleanup" you can just say "please build me an image with e.g. jdk11 and openssl".

Nix will put everything into the image thats required for those packages, not more, not less. And for Nix that's easy to: It just has to put all the packages in a tar file and call it a day (more or less).

At work we use this for Java Spring Boot projects and we started using Nix container images in production as well.

For development we still use a JDK installed through IntelliJ as it is not that easy to teach IntelliJ about a JDK installed through Nix.

But on CI and when running the project from terminal we can use exactly the same JDK as in the container images.
The fitness industry is an endless string of fashions and fads to get people motivated to workout and convince themselves that this new method is the one they will actually do.

The novelty of VR aerobics will have the shelf life of Tae Bo, Jazzercise, on and on. I have seen more variations on this theme than the Fast & Furious franchise.

At least when you get sick of the workouts you still have the VR headset that can do other things instead of a rowing machine or treadmill that collects dust.

I even have a decent home gym but go to the commercial gym 90% of the time because working out at home is boring and demotivating. You can't replicate the stimulation of the gym at home. The ritual of going, the other people, not to mention the variety of physical stimulus.
Since I didn't see this mentioned in the article or the comments:

Checking for temperature is pretty easy. If their neck is a bit sweaty, they're too warm, remove a layer.

If their feet or hands feel colder than usual, too cold, add a layer (maybe warm on them on your own body first, if practical).

(This assumes a healthy baby).
Privacy addresses don't hide what's on your network as much as NAT does, which is what the GP wants.

For example with privacy addreses, monitors outside the network can easily see you have 5 devices on at the same time, 4 of which connect to port 443, 3 of which connects to updates.microsoft.com or whatever (just an example).

With NAT, monitors outside the network can see the connections, but cannot see (from IP/port information alone) that there are 5 distinct devices and what they individually connect to.
We don’t even necessarily know, to what extent we lack fidelity in our understanding of what goes on in pur bodies. I’ve found I have often mistaken thirst for hunger. Also, after having done endurance sport for a few years I’ve realized, that “my stomach is empty”, “my blood sugar is low” and “my internal reserves are depleted” all feel very different. Previously there was just a general feeling of tiredness.
I'd say a Raspberry PI with emulator, for price and flexibility, more so if you have one dusting a draw sitting about. https://retrogamecoders.com/raspberry-pi-amiga-emulation/
Then I would look into home-manager and/or nix-darwin if you are on macOS.

I think under the hood home-manager basically declaratively manages a Nix profile for you. You (or even better a home-manager managed .bash_profile) can then put that profile into your PATH.
I disagree. I think that the main benefits of personal trainers are to:

1. provide accountability, allowing clients to outsource some of the willpower required to exercise, and

2. motivate clients to work harder during sessions

Good form is significant, but easy to learn.
Sorry for the confusion. The x36 I copied from a lecture given by a senior obstetrician. The link was to provide background info on SIDS.
I really don’t want my cloud storage provider to check my files for copyright violations. It’s not required legally and it’s something that I think is anti-user.

Banks don’t have to check safe deposit boxes for stolen art.

Self storage don’t have to check containers for stolen goods.

Of course, I’m against illegal stuff, but I don’t want to waste a single second defending myself from false positives in these situations. Google has no way of knowing whether I own the IP so I could have paid for a license for the material on my drive or many other legitimate cases.
There is a difference between derivative works and composite works. Please learn it. (This specifically applies to the userspace boundary discussions in this article, but for modules it's not 100% clear-cut either.)

I'm not going to try to explain it here because I'm not a lawyer and don't want to propagate what could be my flawed understanding. I do think I've understood it and that it matters here. There's probably a few good explainers from legally versed people out there on the WWW.
The type of files accessed is radically different: The local FS acesses already existing files that users typically manage by hand, whereas the origin-private FS accesses files that the webapp created itself and will typically manage internally.

In Unix terms, the former gives you access to parts of /home, the latter to parts of /var or /tmp.

I'm also not sure if calling them different "implementations" (as I did in the GP) is really the best way to put it. Both filesystem objects implement the same interface, but you call different APIs to obtain the objects in the first place and would use them in different contexts.

My issue was that the motivating example was about rebuilding the "open"/"save as" functionality from desktop apps, which the local FS API was tailor-made for - but the announcement is about the origin-private FS API, which has a completely different purpose.
> One thing I have noticed is that Cadbury in the UK is different from Cadbury in other Countries.

Irish Dairy Milk is the best!

My wife’s family is Irish and I spend a lot of time there. Their Dairy Milk is much creamier, much like their milk. I think their blue top “full” milk is much closer to the old “gold top” we used to have here in the UK.

My in-laws will send over “care packages” of all my wife’s favourite things, Dairy Milk, Tayto Crisps, Red Lemonade and many other little treats.

If you don’t have the opportunity to visit Ireland (you should, it’s beautiful and the people are the best) you can buy Irish Dairy Milk online for delivery on sites catering for Irish expats so you can sample it.
i deleted my acc cause i got rated limited
There's an over representation of people with ADHD in IT, and caffeine may act in a completely different way for them, so be aware that some anecdotes may not be useful for you at all.
I find Whittakers (from NZ) to be a great alternative. Ever since Australian Cadbury's changed their recipe, it seems to give me a "burning" sensation. Whittakers tastes like a decent supermarket chocolate used to taste like.
Yesterday, while discussing backups, someone said end users should basically trust the cloud. This is why it is a bad idea.

The risk is data loss, irrespective if it is because of hardware failure or because of cloud failure connected to overzealous legal enforcement, algorithm decision making failure,or service deprecation.

Part of the risk equation is how big the chance is, and I would really love to see the numbers of hardware faulure vs cloud failure.

Another part is impact. Hardware loss might be recoverable via specific services. Cloud failure, basically you're on your own, and they might revoke access to your email a.k.a. digital identity certificate, or even sick the copyright cartel on you, worst case ending in a police visit taking out the other backups.
I know meta commentary is not welcome, but this page leaves my head scratching. Based on the other comments this sounds to be a worthy and insightful read but when I click on it all I see is a single paragraph (using an ipad safari, no extensions or adblocker) It ends at “There’s no trick to designing process…”, no button to read more, no call to subscribe, or pay a paywall. Are we seeing the same page?
That's not the definition the author is going with

I think it is, given that he links to https://xkcd.com/1537/ as stereotypical 'weak' behaviour.

Python sits somewhere inbetween Javascript and Haskell: For example, Haskell does not allow adding floats and integers, which Python will happily do despite a potential loss of precision.
Obsessed is hardly how I would described India's relationship with Cadbury; it is more like Indians didn't know any better because there were hardly any better/decent alternatives with equal or better marketing prowess during the formative years of the Indian consumer with decent spending power (say, between mid 70's to mid/late 90's, loosely speaking). It is akin to their relationship with coffee with respect to Nescafe which was the absolute dominating brand (lesser brands like Bru were present but they didn't make much of a dent and frankly, weren't that much different/better either). Someone for whom the only exposure to coffee has been Nescafe would spit gourmet coffee out on the grounds that its taste is so different ("soooo bitter...") to what he/she considers "good" coffee (i.e. Nescafe). Of course that is no longer the case for younger folks who are regulars to cafes serving gourmet coffee.
Lua is the only language I can truly say I love. If more people used it (and used it responsibly, not letting it become a mess of odd libraries), the world would be a better place.
Firewall traversal for mediated PtP through basic stateful firewalls is simple - both sides start sending UDP packets to each other and outgoing packets open hole in firewall for incoming packets.

The same approach does not work reliably with NAT, mainly because you do not know translated port numbers. It also may fail if both sides are behind the same NAT, as NAT pinning is sometimes not implemented.
I remember seeing lua for the browser quite some years ago (not sure if it was fengari or not) that worked similarly (include the script and then anything of type `application/lua` would execute using it). I ran into it in 2014.

If fengari is that, then I think it predates wasm.

Edit: it is not, since my memory is from 2014. However, the git history says fengari was started 5 years ago and wikipedia says wasm came out 4 years ago.
I think the MiSTer is a good suggestion as it's flexible. Inevitably one day you will decide you want to try something other than an Amiga and then you've got all the cores available for other systems to easily install. The support is also very good from several vendors. Here's quite a nice complete kit of parts to easily make a games console style MiSTer solution:

https://rmcretro.store/multisystem-board-only/

And a review of this set of parts from Anthony of LTT:

https://www.youtube.com/watch?v=AyDqGdY7ffQ
Yep, wild monkeys, civet cats and monitor lizards are regulars outside our living room window in a fairly dense wild rainforest.
Wow, I have never got that error but I haven't used nix-env much.

Yeah, to be honest familiarity with the NixOS module system doesn't hurt for home-manager. For me it was worth it but I was also just interested in Nix enough to read through the Nix-pills, etc.

Maybe given some time Nix will be polished enough that a smaller time investment will be enough.

Another thing: Yes, even if customizing your home-manager config could lead to hard to debug errors, once it works it is hard to brick and it will most likely work on new Laptops, colleagues machines, ...

That's why for my small at work my colleagues don't have to be as deep into Nix as I am but they can still benefit from the changes I am introducing in a pretty "safe" way.
What you gain in definition of some of England's smaller hills, you lose in definition of coastlines. The low lying areas only a few metres above sea level are indistinguishable from sea!
I agree that it is probably a lie. Zuckerberg has shown that he prefers Biden/Trudeau for understandable reasons (from his perspective).

However the important point is that the ranking algorithm is a very powerful and very opaque tool affecting 1B+ people and controlled by effectively 1 person who has unchallengable lifetime reign over it due to priority shares.

We need to find a way to democratise Big Tech without straight handing it over to politicians.

Breaking monopolies and mandatory interoperability is one possible step, but we may need to go beyound that.