skysight-inc/HackerNews huggingface dataset:
I work at smallstep and we support a wide range of Linux distros already. https://smallstep.com/docs/step-cli/installation

One of the things on my punch list is to get step CLI into upstream Fedora, Debian, and Ubuntu to make installation a bit more easy.
If it turns off, you die.
lol.

I mean, yes... but also - have you really never seen a bug make it to production?
That latency really is the killer. The web needs a fast UI layer separate from the DOM. I’m waiting for WebGPU to roll out and build a UI library on top of it, forgoing the DOM. But then this is just another “hack”. I wish the web had something a bit better.
> But I don't see an ethical imperative for, say, Giphy (pre-acquisition) to provide that kind of support.

Giphy hosts user-generated content and encourages sharing.

Imagine someone uploads a gif of you and fake subtitles of racial slurs and calls to violence.

It starts trending. Your friends and families are asking you about it. You've submitted a request to remove it, but got no response yet. You can't get hold of any human at Giphy. You get a call from your company's HR.

Giphy definitely needs human customer support.
That didn't answer their question.

Nobody is advised to run Tails in a VM, only as the host OS, so the dual VM part isn't that relevant.

I've used both, only pointing out how your response didn't match

The article does briefly mention Tails and how it does a RAM rewrite upon shutdown for you

> If you're planning to use TAILS, it will scrub the RAM for you automatically when you shut down.
I think most rural counties would struggle to attract remote workers. People have this dream of rural and small town life, and much it may be based on travel to destination rural and small towns, but most of non-urbanized America has little infrastructure, services, or cultural institutions. Good luck even getting a decent Internet connection.

The small towns that have this stuff also have very high cost of living. Small towns and exurbs on the fringes of metros may pick up people as workers can go into cities when they need to for work or play, but you couldn’t pay me to live in most rural counties in this country.

People not from small towns also underestimate the level of substance abuse that these areas have — either from excessive drinking (and often drinking and driving) and drugs. I’ve had multiple high school classmates from my Ohio town die of opioid overdoses.
I think psychlops suggests seeing the pandemic as a catalyst rather than the cause.
They also have to stir up outrage by falsifying not only how much the person was billed, but also implying that the bill was simply for an x ray.
Comparing europe with the US when it comes to the police killings is ridicolous. Sure there was attempts to bring it to europe but that is besides the point. There are a lot of countries in the world, many without any issues in which the BLM protested against. Why should we get pushed american politics for? What is the point?

The UK as an example had something like 6 people killed that year when protests arrived. Most of which wasn't black if I remember correctly. Do you really think it's comparable to the issues that exists in the US?

My critique is still valid tho, doesn't ukrainian lives matter? Why are there no banners for them?
I was doing it daily for a while. For some reason the acquisition news made me stop, or maybe it was just the timing. Maybe it's time to get back into the zone.
No repro here (Chrome 99 on Windows): right-clicking the button works the same as left-clicking it (yes, there's my browser's context-menu, but it doesn't seem to interfere with the webpage's logic at my end).
From what I've read, a fair number of people had the same idea. E.g.,

https://www.theguardian.com/world/2021/mar/23/a-new-obsessio...

https://www.aarp.org/home-family/friends-family/info-2020/le...

https://www.wpr.org/more-people-are-playing-instruments-duri...

https://www.bbc.com/news/business-58556770

https://www.surrey.ac.uk/news/five-tips-learning-play-musica...

Studies have shown that taking up an instrument does have excellent mental health benefits:

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6368928/

https://consequence.net/2020/07/musical-instrument-mental-he...
The modern OSS scene where people file DMCA notices and other legal actions against forks because, well, because, does not jive with that view.
For some, it's the worst thing imaginable to have to put something other than themselves first.

For others, finding something more important than themselves is what gives their life meaning.
> You also shouldn't go out and
buy a Tesla. Living beyond your means is a key red flag that triggers
financial and fraud investigations [..]

Okay, so why would I go through all this trouble then? I could think of other hobbies to escape a "cookie-cutter" life.
Pass phrase not password. You are going for length to protect from brute force.

Soylent Green is NOT people

Was one of my shorter pass phrases
Well, at least one source[1] suggests that sexlessness for men was actually dropping during the pandemic, breaking a quite significant trend. Meanwhile, it was rising for women. Seems there is at least room for skepticism, both towards the lackluster amount of evidence as well as what actually happened.

[1]: https://ifstudies.org/blog/number-4-in-2021-more-faith-less-...
> Suppose US government did this to sabotage Russia, since it cannot directly act against Russia because it would trigger WWIII. Nobody would care about.

I would care even more about it. I absolutely don't want our government destroying trust in open source in such a fashion.
Not only is it religious, its not founded in any empiricism or medical study. Here's a decent article laying out the critiques, the opening paragraph is what everyone should keep in mind: https://www.theatlantic.com/health/archive/2014/03/the-surpr...

> Say you’ve been diagnosed with a serious, life-altering illness or psychological condition. In lieu of medication, psychotherapy, or a combination thereof, your doctor prescribes nightly meetings with a group of similarly afflicted individuals, and a set of 12 non-medical guidelines for recovery, half of which require direct appeals to God. What would you do?
> You can't blame people for doing whatever they can when they are literally being bombed.

I can't remember when people cared about the bombs falling everyday in Yemen. How absurd is it for people to suddenly care and cry publicly about one country's conflict while another much bloodier one, not too far away, is being completely ignored. Is their blood less red? Are their children worth less? Systemic racism maybe, since these are not white people?

Mass media (including social media nowadays) is what shapes what people care and feel concerned about. It's not about people's values, this goes on to say a lot more about how easy people can be manipulated to project violence onto anything they had no clue about 5 minutes ago, as long as you repeat it all day long.
It's not like that -- that BTW is super simple to achieve with either of the existing online schema change tools (pt-online-schema-change, gh-ost, facebook's OSC) -- they all end up with your old table renamed away, and which you can instantly reinstate back in place. Very cool and important feature! But then, you lose data; all the data you've accumulated since the migration completed; or some data you've deleted will suddenly reappear.

Rewind does not move you back to an old snapshot, but rather keeps you on your current timeline, with the current data, but with the old schema.

Technically, there are two tables involved, yes! And a synching mechanism that compensates for the structural differences between them. But perhaps I should just point to this technical explanation of how this works internally: https://planetscale.com/blog/behind-the-scenes-how-we-built-...
Could (/should) this be mitigated on the repository host side by scanning for and flagging malicious commits?

A paper from last year evaluating this on Github achieves a ~50% success rate[0].

Given Github already training ml models across all repositories for Copilot I would guess higher rates would be possible.

[0] https://arxiv.org/abs/2103.03846

Edit: add link
"This" as the ancient-easter-egg-finding, or as spending days on youtube?
I’ll be using Deno for new projects from now on.
Somewhere in Japan a lawyer picks up a pencil https://en.wikipedia.org/wiki/NES_Open_Tournament_Golf
Previous discussions on the underlying project fwiw:

https://news.ycombinator.com/item?id=22301091

https://news.ycombinator.com/item?id=22440944

https://news.ycombinator.com/item?id=22413526
> Users are exposed to key material and encouraged to reuse keys across devices. Keys are trusted permanently, so mistakes are fail-open.

What? This just sounds like you're doing it all wrong then blaming the tools.

Maybe I'm just thinking about it from my POV as a mainly hobbyist user of SSH, but I rotate my keys (not as frequently as I should, but I do), and I remove old ones from .authorized_keys files and I use different keypairs for different servers sometimes too. I never copy keys to other devices - I ssh-keygen on every device, and add my pub key to the authorized_keys file manually.

It isn't even "hard" to do it this way. Sure, it doesn't "scale" for big corps - but I don't need it to scale, so I'm not "doing SSH wrong" by not using certificates.
The modern story is to use jlink instead of asking the user to download the JRE (which doesn't exist anymore).

https://docs.oracle.com/en/java/javase/11/tools/jlink.html
There is a lot of information like this on Tor forums and Tor marketplaces that I've only seen there.

Sometimes people that never looked casually dismiss the idea that there is obscure useful OPSEC information there.

Selling guides like these for $.99 is a great way to get your marketplace reputation up fast, to sell bigger ticket items.
I think there needs to be a counter effort against these people. Some entity like the EFF should maintain a database of people who have engaged in protestware so that there can exist APIs which will check for whether any of your dependencies come from these blacklisted people... or if you are about to hire them.
In rural areas, safe drinking whatever is often up to you. You’ll have a well, and ideally you’ll get it inspected regularly. You should be able to control this, unless there is something fouling all the water in the immediate area. But many people never inspect their wells, and there are way too many pathogens in their water.

I agree up with well water, a septic field, and no sidewalks. Never doing that again. I want to be apart of human progress and have modern infrastructure. The septic field was probably the worst.
Beginners make that mistake with simple applications.

It's still a chronic problem with major applications from vendors like Microsoft and Adobe because their applications (Office, Creative Cloud) have complex internal state that needs to be managed. The easy way to do it correctly is to put one big lock on the shared data structures which means a minute of beachball at boot and the app locking up periodically.

The counter to that in the asynchronous world (web browsers, electron) is that you search for something and you always see "0 search results" before the search results load. Even when I manage to banish this from an app by putting loading indicators in all the right places somehow this gets lost as soon as another developer patches something. Yet that's what you get when you trade the "dead by default" behavior of desktop UIs for "live by default."
The irony for me here is that while I'd like to comment on this topic my HN account has been throttled because I've commented on these types of threads in the past.
Isn't the same true for USB-C laptops? I've found non-OEM cables as unreliable for anything besides USB data sync. An Apple MagSafe to USB-C costs $60.

I bought one replacement power brick for a laptop I've been using for 10 years. Well worth the $40 or whatever I paid on eBay. Plus there's no way I'd confuse it with the mass of USB-c cables that comes with every modern tech device.
Sounds like you should seek couples counseling. If you’re unable to find a way to explain to your wife how WFH should work, and your wife doesn’t or won’t understand it on her own, there are likely larger issues at play and a few sessions with someone who can mediate might help you guys.
This may be a consequence of copyright law being developed in Europe. The European musical tradition is mostly concerned with harmony, and less with rhythm. A musical culture focusing on harmony would be most of the African traditions.
I don't know what the next step is after "I've deleted your files... now listen to what I have to say."

That makes no sense. It sounds more like an excuse for acting out.
The other capital and operational costs stay the same even if you just discard the production you don't need, so just focusing on fuel costs is not very helpful to determine if it's economical to do that.
I absolutely love the cold pragmatism in his/her writing. It reads like a DIY spark plugs replacement guide :D
I’m sorry your trust was violated. Your traumatic experience where your trust was violated shouldn’t be used as a warning label for others. There is no reason to advocate that other people behave as if their partners are unfaithful without prior evidence because you personally were wronged in a deeply hurtful way.

It is important to healthily evaluate what is a relatively uncommon but seriously hurtful thing that happened to oneself and how that distorts one’s understanding of what’s normal behavior in intimate relationships.
Again, you’re calling this “political” because it doesn’t matter to you, and it certainly sounds like it doesn’t personally affect you. To other people, BLM is a serous existential threat. You’d lose your mind if someone chalked the question of your existence up to “politics”. You’re really showing your hand. And no, I’m not American either, but that doesn’t somehow make me blind to the fact that BLM is a big deal.
It strikes me as kind of an odd position that given political advocacy in open source software, closed source would be safer.

Proprietary software provided by a single vendor is much easier for a government to lock down via actual sanctions. Hypothetically, they can outlaw your company doing business with that vendor.
Especially that there are no privileges to escalate...
>yeah but so what

Being silent about shitty behavior is the same as condoning it, don't you know? Just because you don't like the playbook doesn't mean it doesn't work.

>Anybody who legitimately makes a "liberals only" stand in their license will get forked and their usage will drop off.

Considering that the developer just pulled a "no russians" stand with their software...
... which are both accessible by children. I don't see the point you're making?
> We probably need to think seriously about making people outside of the natural womb, can't see another way to reverse this trend outside of the above mentioned measures / circumstances

Find a way to make the cost to parents zero over the lifetime of the kid for all the basics (child care, healthcare, food, clothing) and I bet rates shoot way up.

Having a kid is an extremely expensive luxury good right now. No wonder people are hesitant to do it.
You'll need to get legislation passed, then.

When a market decides something isn't worth providing, but the public good needs it, legislation is the answer.
Maybe this was the result of an educational exercise. Archaeologists will similarly sift through piles of sand to find little fragments from the past. Or could have been a challenge done simply for fun. Not necessarily "bored".
You can say what you want but this is a risk in remote unpinned dependencies.

As platforms it is important to protect against this making artifacts immutable. As people we can only protect against it by auditing upgrades depending on risk.

I much preferred the old world, where I could pick pretty much any software package and it would be safe but that is not today’s world. It’s entirely possible that a colorizer scans my disk for ethereum keys.

In practice I rely on social validation but it is not a safe thing in general. Unhappy about the outcome but this tends to happen in time.

In the end, it’s true. If you bomb my house, I will strike back in whatever way I can. If the only thing I can do is burn you and your children, I will. If the only thing I can do is destroy your hard disk, I will. I am limited in retaliation not by morality but by ability.

And if I am like this, then I must assume that others are, too. And that I might get caught in the collateral blast zone.
The general preferred choice for energy that can quickly turn on and off (in terms of weather changes that cause low production in wind/solar) is hydro. As long you don't deplete the water reserves it can be turn on and off fairly fast, through there can be considerations downstream. Nuclear can help in keeping those reserves high by reducing demand and letting hydro deal with the peaks.

Using natural gas is non-viable. It funds war as has been fairly obvious lately, and it puts a dependence between those that has the natural resource and those that don't. The climate can also not continue to take the continuous damage that burning/leaking natural gas causes.

The choices that we have is either nuclear, renewables, and batteries. The natural gas plants need to be replaced and so one can either choose nuclear, renewables or batteries.
My apologies. It does say that it's open source on the website, you are right. I merely looked at the GitHub repository and that says at the bottom that it's retired and old code. And i couldn't find any new code posted.

Also, AES is an open standard yes. I was however talking about the file format that it it structures its files as. That is very much non trivial since there are salts, IVs, mode of operation, the actual cipher, ...
Poor biontech is getting left out of the headlines.
Nope, psychologizing real physical disease has caused immense damage. Post Exertional Malaise is very real and physical, fix that and peoples psyche will improve.
I have been struggling with this question myself. Over the last 1.5 years, I have developed a relatively complicated Java desktop application. It is designed for use in a tugboat company. The same application is used by staff at desks on land and by crew operating out in the ocean with only occasional Internet access. A connected web app was out of the question.

It uses a local SQLite database to synchronize when it is connected to the Internet. It has a very rich mapping interface to show courses, routes, etc.

I could not stand the idea of forcing this into an Electron shell and the associated performance problems. As it is, I have a watchdog running inside the app that diagnoses any hangs of more than 100 milliseconds. (Such hangs are easy to fall into when doing GIS SQL queries.)

I don't see how I could have had any better productivity as a developer using any other software stack, but man, the GUI is very dated and out of place.
Reminds me of Technicolor. The movies company that became a logistics provider once their main vertical went kaput. That's a good way to adapt
I welcome this trend, since it gives workers more leverage to negotiate higher wages. The whole reason serfdom transitioned to capitalism was a massive reduction of workers due to the Black Plague.
At best, this operation could be construed as an act of vandalism or at worst an act of CYBER terrorism. This indiscriminate and malicious act of hostility was carried by what amounted to be a cyber weapon (think IED) housed in a very ordinary and non-suspicious package to cause the greatest damage to the users' data.
I personally think this kind of thing is just a symptom of a larger problem; the modern open source software ecosystem is highly vulnerable to supply chain attacks.

Frankly, given how normal it is to just blindly download unverified, unsandboxed code from random developers and execute it on our machines it's surprising this sort of incident isn't more common.

What we need are better tools and processes to detect and block malicious code in dependencies before it has a chance to execute. I wrote up a few suggestions for that several months ago and I think they're still applicable: https://news.ycombinator.com/item?id=29266992
Please avoid shallow dismissals of other commentors. Everyone here is a real person who has feelings.
The next frontier in medicine: doctors with climate training
Sure, just like most men aren't violent criminals but men are still statistically more likely to be violent criminals. The point is that JS devs seem (perhaps a proper statistical study will show otherwise) more likely per capita to shit up their ecosystem. There are several reasons contributing to this (the limited JS standard lib being a big one) but a major part of it really seems to be that JS devs are a different breed.

I've never seen controversies like this in the .NET/Nuget ecosystem, the only controversies I've ever seen there are over libraries changing licenses to make the authors more money, and controversies over Microsoft exercising too much control over the ecosystem.
Interconnection is a liability.
Study: Every single country is failing the WHO’s new air quality standards
Not one, but three outages in a row [0], if you went 'all in' on GitHub (Including GitHub Actions). Even under 'scheduled maintenance' something else unexpectedly goes down.

From [0]:

>> Until the next time GitHub goes down again (hopefully that won't be in another month's time).

>> That says it all really. Lets reset the counter and try this again.

Going to reset the counter once again. Hopefully GitHub won't have another outage in a week's (or even a months) time.

It turns out that my whole comment chain in [0] was right in the 'long term' of not 'centralizing everything' [1] on GitHub since 2020.

[0] https://news.ycombinator.com/item?id=30784663

[1] https://news.ycombinator.com/item?id=22867803
So you recon a better (bigger?) node stdlib would solve a lot of this?
Copper Modding Helps Cool a Toasty GPU
No one said that. I'm saying that if you cannot answer which "side" you're on, but still engage in the discussion (and thus have knowledge / interest in the subject), it's obvious for everyone to see.
>My point is that I cannot afford not to work

I think you are getting the skepticism from others because most of the time these limitations are artificial and self imposed.

I certainly have felt that way when I was severely depressed and fed up with my job/life.

I felt helpless and blamed my situation, when in reality I was simply refusing to take ownership of my choices. I could quit my job, I could leave my partner, I could abandon my kids and family. I could go sleep in a park, I could buy a van and travel the country.

Why do you think you cannot afford to not work?
I've been reading Steven Sinofsky's extremely detailed blog about those days (it's at https://hardcoresoftware.learningbyshipping.com). He was in charge of Office in the late '90s.

He mentions that Microsoft had a program where they partnered with large enterprises to collect usage data from corporate desktops. But those computers were on a network even if though often not on the Internet yet.

Stats that would show Doom towering over Windows 3.1 must have been collected manually, maybe by sending people a floppy that contained a program to collect the data, and asking them to mail it back in. "Insert floppy, then type A:\SPY.EXE in your DOS prompt" ...
Zero emission deliveries: Amazon puts its first electric HGVs on UK roads
It's more effort than I would like. I should not be bothered with updating hidden config files containing data that is mostly not human readable. I want to prove my identity once and let the system take care of the rest.