skysight-inc/HackerNews huggingface dataset:
Consoles have less anti-cheat bypasses for a number of reasons, mostly related to obscurity, not security. The relative scarcity of gamers running homebrew-ed consoles makes developing bypasses of limited appeal. There's also a cultural difference, where gamers with an interest in mods, etc. will tend to gravitate toward PC as a platform, since it's a multi-use platform. There's still plenty of AC bypass on consoles, just significantly less.

A similar example outside of gaming is Linux as an OS platform: antivirus software isn't a big thing, despite Linux being continuously behind bigger desktop OSes with their security mitigations - (e.g. things like strong ASLR). It's less of a concern, not because Linux is more secure, but just because desktop applications there aren't a large target market for malware, and because of large cultural differences in usage.

On the other hand, AC bypasses on PC happen not because of a lack of console-esque hardware mitigations, but simply because software AC is not particularly advanced (yet). Popular AC solutions tend to employ non-engine-specific solutions that match known cheat signatures - bypasses inject cheat dlls and hope they don't get caught "too often", rather than using in-engine verification of non-cheat behaviours. I think this is primarily just an issue with software maturity and likely to solve itself over time. The general non-gaming software space has gone through similar evolution, whereby we used to rely heavily on signature matching on malware, and have evolved toward a more integrated "zero trust" approach to mitigating threats - signature-matching still exists for things like software-composition analysis, but in general is not a primary mitigation strategy for runtime security.

> the only way to hide the code to prevent cheating is to physically embalm it into the CPU, in a way that, if physically accessed, will break the machine, rendering the effort fruitless.

> PC's are going that way, the way GPU's are containing more "black box" mechanisms themselves.

Hiding code has historically never succeeded in preventing anything. The trend toward black-box is about a combination of corporate IP protection, vendor lock-in (see also the Apple T2 SoCs) and almost certainly APT actors (disclaimer: speculation). It's not about security, least of all anti-cheat.
lol, it's the same strike. Watch carefully.
Just the angle is different.

upd: you would see the tower itself shackles somehow if it was hit. It don't

upd2: so who is lying on events picking angles?
GNOME seems to take more Mac cues, as someone that grew up on (and has always used) Macs I feel like GNOME fits me better. It's also designed to be very keyboard navigable.

I think that's okay, KDE and GNOME can coexist and approach things differently, but standardize on things that matter through FreeDesktop.org
Clinical trials and particularly their design is a technical issue -I was a research statistition at one time so this is of interest to me technically and medically.

If you get shingles you wont be doing any hacking for awhile, so health issues are relevant. There are many HN topics on Coronavirus and other health issues. Someone recently asked how to deal with depression and no one challenged that.
This is a wonderful response in that it points clearly to the modern disconnect between physics theory and the experimentation which led to its greatest advances. Simplifying assumptions can be very useful for didactic purposes, but nature isn't simple. There are many sciences which put observations that threaten the status quo into a (physical or dogmatic) closet.

"the problem comes from combining a certain set of assumptions, doing a calculation, and arriving at a contradiction.... without data, the question is not which solution to the problem is correct, but which one you like best."
"Flip the wrong switch and you expose something to the world."

One strategy for dealing with accidental misconfigurations is to employ a "network slug"[1]:

"A Network Slug, or "Slug", is a transparent layer 2 firewall running on a device with only two interfaces. ... The purpose of a Slug is to reinforce a security policy or to block uninentional leaks of information."

[1] https://john.kozubik.com/pub/NetworkSlug/tip.html
Amazing. Almost makes me want to move to the states (from NZ) to work with you. Always gratifying to see a job posting where you tick every box.

What a great automation environment! Almost clean-slate too, you don't need to integrate with a patchwork of other solutions that are different per site.

Robots as a service is definitely the way to go. Much lower apparent risk for your clients, less support costs for out of date product you sold early on... many great reasons.
I mean that's pretty fair, car ownership is both cheap and mandatory in Columbus but I'll be damned suddenly not having one didn't feel like a significant quality of life downgrade.

I'll spare the rant that cities seem to conflate walkability with "can go places without car" instead of "can actually walk to places of interest" but it was super annoying to lose so much time waiting around for the bus, paying for delivery, movers, Lyfts to fill the gaps. Unless I missed the secret SF feels really really dependent on cars but good luck owning one. Boston and NY by comparison I never once felt the need to own a car.
It makes me physically ill seeing what houses have gone for in the bay after all the bids are in. A couple I know have been searching for a year and they’ve been consistently outbid by people offering 40% over ask which is obnoxious.
> If you have your own domain pointed at your server, the Let's Encrypt certbot can automatically pull in a certificate

Yeah, but don't have a mistake too many times, or Let's Encrypt will block you for a week until your rate limit times out.

I hit this. I understand why Let's Encrypt has to do this, but it's very annoying and you have no choice but to do nothing for a week.

There needs to be something in between Let's Encrypt (free) and a couple thousand a year (other CAs).
I’m not trusting them. If they choose to ban a card, that’s fine since it’s an accepted part of the meta game, but there have been 3rd party services for playing Magic online with people for years. Those third party sites suffer from not having verified card ownership and NFTs would enable that.
Pancake X has always meant to me the first version of X that turns out not well done before you do it right the second time. Like how your first pancake is always a little off because the griddle isn't heated right.
Postfix is a special kind of hell though, in that getting a good setup requires wading though decades of legacy stuff and patching together a bunch of non-default stuff to get, for instance, dkim signing and stuff working right. I've done this before myself, and agree it was super annoying and not fun, but I also think it is potentially the biggest outlier in self-hosting difficulty I've encountered.

Lots of services are barely more than - apt install, systemctl enable --now, ufw allow 8080 (if you even firewall within your network).
I don't know why you think console games don't have cheaters. COD on the Xbox 360 was rampant with cheating, including custom games that gave you huge amounts of XP
Rubblization hasn't worked yet, and so far Russia has only assaulted the easy side of Ukraine. Western Ukraine will be the equivalent of a dozen Mariupols. Putin would have to mobilize all of Russia in the attempt.
First HN comment that ever made me laugh, well done.
I was so sad when sandstorm kind of fizzled out. I'm still hoping Kenton is on a secret mission to somehow bring it to life within Cloudflare. How cool would that be? One-click installs of docs, email hosting, photo sharing, etc apps from a server app marketplace, onto a cloud server you control. (Insofar as you "control" anything on a cloud host, but I feel like that's pretty far, still.)
One photo of Madeline Albright that sticks in my mind is her coming out of a Washington building holding hands with Jesse Helms, one of the most conservative southern Republican senators of the 1990s. This was in the aftermath of a new wave of vocal and angry Republican congressmen, led by Newt Gingrich and keyed up by talk radio, winning the House in 1994.

Both Albright and Helms were smiling like little kids. The friendship was genuine.

From what I recall, she made the effort to reach out to him and break the ice and build that relationship. It yielded dividends many times over for the State Department and I suspect for Mr. Helms as well.
It gets complicated, doesn't it? I mean, in your example, you're doing things that help people, vs. the author creating social pressure to do unreasonable things, but in either case, you're both still pulling people out of their comfort zone without their consent. The way society works vs. community makes all of these things ethically difficult. Communities get built when people step out of their comfort zones and help each other, but society only works because at some point people mind their own business and let people go about their day.

So I think it's a delicate balancing act, and there's no easy test for whether it's good or bad. I think holistically it can come down to what kind of energy you're putting into your environment, and whether it's positive or negative.
"I said a thousand times that I regret that statement. Sanctions never included food and medicine..."

We can quote stuff all day. In the end, we can never understand what it's like to be in someone's shoes when having to make decisions that affect so many people.

You already posted this in another submission. Do you have an axe to grind with Albright? What's your schtick?
>> Trump foreign policy was returning America to what it should have been all along, Free Trade with all nations, entangling alliances with none

> (emphasis mine)

> Interestingly, this is exactly what the EU has been moving towards for the past few decades. Hence the attempt to not be economically dependent from the US. Hence the refusal to take part in the trade war against China.

This fits with my original conclusion that the EU is hopelessly naive when it comes to global politics. Imagine someone with the bright idea to "diversify" so for the sake of diversity they sell half their energy imports to a dictatorship (this is actually what Germany did). It's quite obviously unwise, at least but they do it anyway because of that magic word "diversify".

If I can compare it to my own profession it's like a DevOps guy coming up with the bright idea to go multi-cloud, a tarpit where engineering hours go to die and which most often makes the stack more brittle not less.

Let's move on to Merkel and her magic stroke of genius to sell the EU on more of China, not less. Another bright mind walks in and declares, "with China on our side, we'll never have to worry about those bastards over in the US, protecting our ocean trade with their carrier fleets". Yet China is not a good partner, we know this already from their too-sensitive reproaches to such sovereign nations as Australia.

Every time the EU gets bit. It's as if they don't realize that the foundations of autocracy are poison and any partnership, especially one that puts the junior at risk of coercion, is doomed.

When will they ever learn? When will Germany, a land with personal experience in power-mad dictators learn that the price you pay for throwing your lot in with such company is paid for in blood?
HN is extremely JavaScript-fatigued. Feels like all JavaScript-related novelty has been getting downvoted lately unless it's coming from a small set of "trusted" JS authorities (Next.js maintainers, Kent Dodds, etc.)
This makes me wonder how they're defining "more satisfied":

> The 2016 algorithm was trained so that it showed people whatever content would inspire them to post more, the people said.
Don't have any plans for Wagtail or hosting, but those are interesting questions. I'll have to give it some thought.
MMT isn't just an explanation. It's also predictions - if the Fed and the Treasury do X, the result will be Y. And even recommendations: if the circumstances are A, the correct policy response is B. Those things can be tested - and haven't been. So far, nobody has taken the policy recommendations where they differ from mainstream econ, and (to my knowledge) we haven't been in places where MMT's predictions differ from mainstream econ's.
Been on both camps of this argument. Now tend to favor that responsible seniors should be allowed a fast lane. It depends very much on your team dynamics. Seniors can be very cowboy so some of them actually need even more review than others.

Have been in some teams with very high junior/senior ratio where a junior would need a whole day to review a small thing a senior implemented in an hour, often because understanding the context leads to hundred rabbit holes of more new information, not the small diff itself. Add the one week that PR was waiting for someone to even notice it needed review and you realize the frustration. Vice versa a junior would take a week to implement something a senior can review in 15mins.

Do the math and you realize the senior will quickly get blocked.

Slowing down and teaching others in that situation is a as you say the right thing to do. But that also saturates after a while. You can only pair program x number of hours per day before getting exhausted, especially for a beginner this can feel like a lot of pressure to ingest so much knowledge at that pace. They need to slow down and get in their own zone as well. In the meantime, backlog is on fire with tasks that need to be released yesterday.

Hire smarter people? Yes please, would love to do that, where do I call? “Smarter” doesn’t always help either, the reality is that you often end up with domain experts within some areas of the product, even if you try to keep everyone on board.
> immutable is a pretty shitty property for some of those assets

Because smart contract chains allow for turing complete code, mutability can be programmed in to particular tokens at the smart contract level.

> regulation is there for a reason, for every extra fee you pay to do cross border money transfer, some money is not being laundered.

It shouldn't be my personal financial responsibility to pay for a corporation to double check my own assertion that I am not breaking any law.

> With crypto right now you lose all that protection in exchange for a slow, expensive gas fees, environmentally destructive proofs of work and absolutely no legal protection if you get scammed in the end.

I'm breaking this down.

> slow

Taking Ethereum as an example, payments generally go through within 15 seconds, compared to several hours for a same-day wire transfer or several days for an ACH payment.

> expensive gas fees

Gas fees are expensive because too many people are using it. Ethereum processes over a million transactions daily, not including Layer 2 and side chains which have increased that capacity and lowered gas fees in practice.

> environmentally destructive proofs of work

Proof of Stake reduces energy consumption by over 99%, and most blockchains currently use it.

> absolutely no legal protection if you get scammed in the end

The standard way to send money abroad, international wire transfer, also gives you next to no legal protection if you get scammed.
This is HN nobody gives a shit about the working poor. And neither does our political system.
There are entire neighborhoods were only 40% of voters turn up.
Canada's Forest Trust: Personal Net Zero Calculator
Docker has taken much of the pain out of it though. And if kept on local network safety is largely a non issue.

Drop in replacement while outside LAN are admittedly a little harder and more at risk of mistakes
These are called instruction manuals and no one likes to read them.
National Puppy Day
Pretty sure those humanitarian corridors and theatres marked “Kids” weren’t hiding militias
Always love a good Derek Lowe article. His article "Things I Won't Work With: Dioxygen Diflouride" is terrifying and hilarious at the same time. https://www.science.org/content/blog-post/things-i-won-t-wor...
It seemed clever to do such things in around 2010.
This phenomena was called the "tyranny of the majority" by John Stuart Mill in "On Liberty". The theoretical ability of the majority to bully a minority was a big open question about the viability of democracy, which was to be determined by the American experiment. Results are mixed.
Yes. I'm actually not sure if it works in X though...
If it's illegal for me to send $200 back home to help my family pay for food to be able to eat, call me a criminal I guess.
https://ui.ctsearch.entrust.com/ui/ctsearchui is the only one I could get to work, but I uMatrix things so it could be my own fault.
>These cards had sharper VGA output than the 3dfx Voodoo

These cards had no VGA output whatsoever, and rendered straight to dedicated 2D cards framebuffer.
For those who might be interested in exploring dumb/ feature phones, there are a few out there that offer some kind of Signal/ Whatsapp compatibility. I just made the move. There's a site, Dumbphone Finder [1], that has a number of modern dumbphones organized into categories with different levels of functionality, expense etc. Overall I've been very happy with the move and I haven't lost much in my life. I can do almost everything on the computer and whatever does require a mobile device I run on an emulator. For music, I've moved everything over to an MP3 player [2] that's fairly decent, definitely not iPod quality, but it's not too cheaply made. I threw a 256GB SD card in there and moved almost all my music over. It's way nicer to go for a walk with some music knowing your phone isn't going to start buzzing (or feeling like you have to check because it isn't buzzing!). This is the best system for me.

[1] https://dumbphones.pory.app/
[2] https://www.surfans.net/products/irulu-f20-hifi-mp3-player-l...
Self hosting can also be a great option to protect against authoritarian regimes. After my family’s VPN was banned in Russia a few weeks ago, it took me an hour to set up Wireguard server with Algo VPN on digital ocean. Now I’m supporting uncensored internet access for 3 families back home, while Russian authorities playing cat and mouse games with popular VPN providers.
Do you have a pointer to Bluespec Classic (not the "modern" Bluespec)?

I would make a distinction between "generator HDLs" like Verilog, Lava, Chisel, MyHDL, nMigen, etc and languages that actually are interpreted as logic (Verilog, Bluespec, Clash, Silice, Handel-C, ...). Yes, Verilog can do both and is a ghastly language. The former class doesn't really raise the abstraction, it just makes generators easier to write.

As I've been saying for decades, I really want a language in which it is as easy to write an implementation as it is to write a [timing] software model; ideally I can use the same language for both! I know it can be done and I have been trying to scratch that itch a few times.
Trump officially won the county by 25,358 votes. With a margin like that, the irregularities are irrelevant in a state where Trump lost by 15%. So, this attention sounds like it's about the races down-the-ticket. Of the state's House races, the closest appears to be District 3, which contains Mesa county. Unsurprisingly, the margin for the House seat was close to the same party lines as the Presidential. But, outside Mesa county, the District was very close.

This report seems to blame Mesa county elections operators (the county clerk) for inadequacies in the database. The total number of votes cast versus counted. But it also makes some very bold claims that certain computer processes are perfect and all error must be from outside an admittedly-imperfect database.
You also need stuff like networking, TLS/certs, and DNS which aren't easily packaged, at least not in a way that doesn't require you to make sketchy changes on every client device.
Russell King on ARM Linux (2002)
I’m shocked by how many paid ‘distraction-free writing’ websites, mobile apps, and desktop programs exist.

I can’t imagine the potential market is large enough to support more than n products, where n <<<< total products.

Given that the express purpose is to _lack_ features, I’m curious how this will all play out in the marketplace.
For now - do you think 7+% CPI inflation is going to persist for 2, 3, or 5 years? What if the Fed manages to tame the beast and we go back down to our average 2% inflation we had for the prior decade?

If you're going long on persistent inflation than go buy TIPS, I know I did as a hedge while the rest of my money is going into 1-year treasury bills because things are going to get crazy volatile as the fed funds rate continues to hike.

Buying housing in a rising rate environment is playing chicken, as rates go up affordability goes down and so does the value of the home. That's the fundamentals in a normal market, at least, because ultimately mortgage payments have to come from wages somehow. I wouldn't buy something banking on the crazy appreciation train continuing at this stage.
Analysis of sounds captured by Perseverance rover reveals speed of sound on Mars
There are no fundamentals hurdles, but because we are currently prevented from properly dogfooding these tools in Nixpkgs, they tend to be unpolished in various ways, they are just used to by a few random projects in relative isolation.
I had no idea so many people tried it. It felt so niche (like more niche than nixos)..
Philosophizing on your blog seems to be the new way to tilt at windmills.

not the first time I’ve seen such comments or sentiments close to it regarding the content of developer blogs, when one gets shared here.

I ask most sincerely: isn’t that just one of the many reasons people chose to launch a personal blog in the first place?
That’s their decision, not yours.
> NPM is painfully slow

Agree on the negativity (surprising and completely unwarranted), but a nitpick: npm install is slow (this doesn't replace that). NPM scripts are generally very fast, unless the implementation of your actual script is slow (in which case it will be similarly slow with Dum).

(the Dum GH has benchmarks showing perf. gains for scripts, but the % improvement is only significant because the script doesn't do anything - the gains would be static for real-world use-cases, making the % gain negligible)

All that said, there are other very valid reasons to use Dum - limited, and containing a lot of caveats, but very valid all the same.
> But you're also training yourself to be indifferent to the feelings of others.

Obsessive focus on the feelings and opinions of others (self consciousness) is at the root of many people's social anxiety.

Complete indifference makes you a pyschopath but there's such a thing as being too concerned about other people's feelings.