skysight-inc/HackerNews huggingface dataset:
Author here. Sure, maybe successful attacks in those categories are unlikely. But my main point was, so long as I maintain my own VPS, they're still possible, and I'm responsible for defending my box against them. Whereas in SaaS land, I don't even know what physical / virtual boxes the provider has, nor do I care, because I'm not responsible for their security nor for anything else regarding them.
The fact Wasmer even attempted to do this, the PR spin to try cover their motivations and the deceitful astro turfing in this thread by Wasmer employees is enough for me to distrust & discount the entire company and its products entirely.
Thank you for the great response. I am also not a fan of conflating science and religion, so this is a refreshing take. I will take a look into Jonathan Pageau and maybe even visit my local Orthodox church (although I'm very scared)!
p.s. all open source projects mentioned on this thread could be found here: https://www.libhunt.com/posts/658517-start-self-hosting
You seem to have made up your mind about the advantages of TypeScript. The word "evangelism" has come up several times.

I'm a fairly junior dev, but I'd like to suggest caution to anyone who might be inclined to think that a technology like TypeScript will represent a clear step forward for anyone looking to take a step into 2022 and leave Javascript behind. The "evangelist". "Organizations/decision makers who haven't adopted TypeScript yet just haven't been exposed enough/had enough misconceptions debunked, and they need to get on the same page with faster moving companies, or get left behind".

1) I don't think this is how most successful companies/orgs think. 2) It seems to me that, as is the case with literally almost every choice of technology or solution, it's a matter of tradeoffs. Pros and cons. What are the honest disadvantages of your company adopting TypeScript? What are the opportunity costs, or how much quicker could you have addressed urgent sprints if you had left the JS alone? Be honest. Will there be a learning curve? I have to imagine there would at least be some friction... I don't think writing good TypeScript is as simple as doing a 1 hour tutorial plus some fiddling, or taking out a week. The other thing to weigh against that is, companies literally never have time. There is never enough time to do everything that you want to do, especially when it comes to stuff that's probably seen as more quality of life centric. Business oriented people want and are under pressure to put out features, tangible stuff.

The sooner you come to grips with that kind of stuff, will probably be the sooner you can do a solid job of framing and selling TypeScript. Be honest about the drawbacks, and then you can give them their due, while making sure that in your pitch, the payoffs are impossible to ignore. My final piece of advice might be to be a bit more gentle in your pitch. I've definitely run into some friction with what felt to me at that time like stubborn and short-sighted decision makers. Maybe the best thing you can do is to, again, frame the pros and cons, give them a fair and even-handed lay of the land, facts only, and then let it feel like it's them that's coming to the decision to use TypeScript. Almost like Jedi mind tricks.
Something tells me Lucas is going to be a bit of a procrastinator. Congratulations :)
yeah that's a good point
I don't believe that's the origin point of social alienation - it's a cultural bias that develops as societies embrace capitalism.

Social forces encourage people to engage in profitable activities like media consumption over unprofitable activities like community engagement, and the transient and impersonal nature of employment prevents people from easily making connections in the place they spend most of their time around others.
It's super nice. The only issue I have is you released it after I had done my TLS 1.3 work, so I couldn't have referred to it when it would have been most useful to me.
We've compared docker performance between Intel and M1 and the M1 falls quite a bit far behind in response times. We can't do exact comparisons due to CPU differences, but for Docker I can't say it is in a good state right now (yes we enabled the docker filesystem beta enhancement for M1). This is for x86 containers at this time.

It is much better than it was not so long ago due to actually working at all, and it appears there is much more room for optimization, so the comparison is not over yet. But as of right now, it isn't that great.
what an incredible hope-giving story!
How does the credit system encourage borrowing? If you carry a charge on a credit card your score (or 'equivalent') DROPS.

The current system incentivizes card swipes for credit cards, not borrowing.
I thought this was very well explained, but the tests that K Sheldrick did were not actually particularly complicated. I remember learning about the Fisher Exact Test in an introductory college stats class. I have to wonder why any of the nine other groups that tried to replicate the results didn't ask for a statistician to look at the original results first.

This is flat out fraud, and if the research used any public funds the guilty party/parties deserves criminal prosecution.
The price comparisons are odd/wrong, because it appears he simply calculated the AWS price for a year of that machine. But on the one hand he didn’t need to run the AWS machine for a year. And on the other hand, he owns the Mac’s for life, as he pointed out. If you wanted to calculate the cost of having the AWS machine always available to you like the Mac, you’d probably at least want to use three years, which is a fairly normal timeframe for a business to write down the cost of a machine.
I believe it all started when Wasmer's founder allegedly sexually harassed a member of the Bytecode Alliance. From the outside it seems any collaboration was doomed from the start, and the trademark applications and internal conflicts didn't help Wasmer one bit.
> Propose to share a proportional number of correctly predicted examples for every incorrect example they come up with?

This is what I have been asked to do the whole time. And yes, like you said it's not very efficient. It would just make them think of the incorrect result as something I need to "improve".

Other team members did shrug it off and simply add those incorrect example as label for the new iteration of model, which did the job and receive high praise. But in my opinion, that just seem like poor AI work ethic.

> The whole thing seems like a communication/political problem, not a technical one, and it's hard to give advice when we don't know the specifics.

Thanks, after thinking about it for a whole day, I guess the correct action is to improve my communication skill, and present the pros and cons of my approach better. I just found out that it is very hard to explain machine learning term without proper visualization.
I think we need more than tutorials. The actual software is just harder to host than it needs to be. What we need is some kind of standard where a tool can just automatically plug it in to the stack, start up the docker container, route nginx in, setup certificates automatically, set up SSO automatically in a standard way, Backup the data in a standard way, etc.

These 1 click install services like yuno host achieve it through huge amounts of work per app and patches over upstream.

Problem is its a monster of a job that requires upstream projects to be onboard and ultimately most of these tools are meant for enterprises to run who just have a dedicated ops person so complexity and maintenance are less of an issue.
Ask HN: Isn't any discussion on taxes pointless if budget is never balanced?
I admit I don't have full idea how can govt continue working with ever deepening debt, not an economist. But the govt increases debt limit each time, what's the point of having a debt limit then?... whether govt spends money through budget or create money and distribute it through cheap loans, it's the same, isn't it?... more money supply in the system. i.e. instead of passing a budget that gives small business owners 10k in aid vs allowing small biz to borrow 10k at 1% rate for 30 year payback.. more or less the same thing, in first case budget was already in negative, just became more negative..but so what?

there has been ongoing discussion on taxing income vs wealth, taxing billionares, UBI, etc....

taxing wealth over income only makes sense if income taxes go down.. but even if they go down what's the point.. at this point why does govt even bother collecting taxes obviously doesn't care about how much debt it runs

somehow if govt decided to tax everyone 80%, and balance the budget, in few cycles even that budget will be not enough.

I am really confused about what are implications for govt to perpetually keep going in deeper debt, what would happen if govt just stopped taxing everything and just kept going in debt even faster?
Echoing this. All the services on my servers (Web, Gemini, Matrix, Fediverse servers and a CSP violations collector) are statically-linked binaries running in sandboxed chroots, with no access to the outside filesystem except a subdir of my data volume mounted into the chroot. Privs are limited to a defined list of acceptable syscalls and other limitations. I'm currently working on enforcing the use of this setup with SELinux policies and transitioning my OCSP fetching and session ticket key rotating scripts to statically linked binaries so I can just stick to one template shared across all services.

It would have been much harder to pull this off if these services required large interpreters, adjacent daemons running, and complex orchestration. Given the amount of time I have, I might have just skipped the SELinux step.
> Long term they're toast if Defi succeeds.

Agreed.

> Their only place would be as fiat onramps, and that means they should be pushing for harsher KYC laws, because increasing the cost of business is the usual strategy of incumbents.

I think this is a short/medium term perspective. Long term, crypto expands the existing eurodollar system (decentralized permissioned [via global banks] ledger money -> decentralized permissionless ledger money) and defi has a multitude of on chain credit origination (aka. not reliant upon off chain stablecoin flows/fiat) while friendly jurisdiction have some kind of fiat on/off ramp (and even deeper cash on/off ramps via cryto atms or "localbitcoin"-like markets). People much more researched than I on the inner workings of the eurodollar system think so as well [0]. Even now, I've seen workers for CEX's engage with DAO's of tokens that they've listed (so some CEX's are investing in their eventual demise, on top of being validators/miners of different chains).

[0] https://alhambrapartners.com/2022/03/22/the-monetary-answer-...
My name is NaN Null, and I just hate these forms.
Isn't it unfair to use x86 containers instead of AArch for the M1?
Eh, it seems pretty harmless (and overall beneficial, if it helps people treat a psychological issue). The reason is legitimately good, as it's indirectly helping a person overcome an issue.

The favors seem harmless, with examples from the article including asking to try someone's sunglasses or to meditate with someone. Activities like these are also a part of exposure therapy for people with anxiety and/or a speech disorder.

Separately, though this depends on your location, I already disbelieve that someone asking me for something has a good reason (which is a common attitude in dense cities). I immediately assume they're trying to pull a scam or sell me something, and most of the time, I'm correct. (A funny example of this attitude is one of the top posts on r/AskNYC, though I'm not based there [0].) If someone were to approach me just as an exercise to address a psychological issue, that would be a far better outcome than what I would expect.

[0] "Millionth Cyclist on Manhattan Bridge" https://old.reddit.com/r/AskNYC/comments/dk76kv/millionth_cy...
I’m definitely not a representative human, but here’s a quick set of opinions.

One thing that I think Fox News does very well compared to other media outlets is that it’s very clear who their straight news people are and who their opinion people are.

You can’t eliminate human bias, but I think if you can make the biases that exist clear and make a crystal clear distinction between news and opinion that would be a good thing.

Also I’d like to see the news spread a healthy bit of skepticism on their own reporting. Occasionally repeat phrases like “this is pretty important, so don’t take our total word for it, verify this fact with multiple sources.” Healthy skepticism in news accuracy is a good thing.

And point out that ideologically different news stations say different things. It’s sort of informative to know that MSNBC says one thing about an event and Fox says something else. Knowing the bias and “talking points” that surround both sides is important to figuring out the truth.

And call yourself out when you get something wrong.

As far as commentating on the news goes (opinion) I’d like to see media focus a bit more on human motivation. When there’s politicians begging for X new powers because of some new media cycle about some scary new things, I’d like the media to be the watchdog that points out that politicians stand to get more influence and that lots of corporations stand to make piles of cash. I don’t think the obvious motivations get pointed out enough sometimes.

At the same time though, ensure that you’re not mind-reading and making clear when you’re guessing on motivations. If you went on CNN during the Trump era, there were times when literally half the headlines on their site were mind-reading what Trump was thinking about some scandal and portraying that as news. Mind-reading is not a thing, yet the media does it routinely and portrays it as news.

I’d also appreciate more out of the box thinking and contrarian opinion. If mainstream media panics about event X, it’s not informative when all of their “experts” have about the same narrow worldview about that topic. I don’t care if they’re commies or libertarians or whatever, but I’d like to see more points of view that don’t get brought up as often in a mainstream setting.
Are there any non-Apple ARM laptops that can reliably run "normal" Linux distros (e.g. Fedora, Alpine, Debian derivatives)? Currently the only options on my radar are the Pinebook (and Pinebook Pro) and MNT Reform.
Oh neat - I didn't realise ACO was even a thing.
Blog post: https://news.ycombinator.com/item?id=30781230
On ChromeOS, our root of trust is actually the SPI ROM. We allocate a RO section of the SPI ROM that is controlled with the write protect pin. This RO section contains a full copy of the BIOS including vboot and the keys used to verify the RW-A/RW-B sections. We use this to build a chain of trust. RO FW verifies RW FW, RW FW verifies the payload (depthcharge), depthcharge verifies the kernel, the kernel verifies the rootfs using dm-verity.

Here is a great video by Duncan explaining the whole processes in detail: https://youtu.be/HwsTRThChn0

All the components are open source too. You can read more about it here: https://doc.coreboot.org/security/vboot/index.html

As for the security chip, all current Chromebooks ship with a CR50. This is a Google designed chip. The boot rom is closed source unfortunately, but it essentially just verifies and jumps to RW. You can find the RW code here if anyone is curious:
https://source.chromium.org/chromiumos/chromiumos/codesearch...

The security chip gives us TPM2 functionality and some ChromeOS specific features like CCD: https://chromium.googlesource.com/chromiumos/platform/ec/+/c...

You should be able to use vboot with a different TPM. Reach out if you want to chat!
I have to stop and comment on parent's behavior. You saw a comment that was poorly written and took on the job to rewrite and extract the good part so it could be understood by the general public. It's such a nice gesture and at the same time shows a lot of initiative and attitude that I wish people in my team had it hard coded in their kernels. Your team, whoever they are, are lucky to have you.
Heres a Joogle Amp link to the article: https://www.google.com/amp/s/www.wavy.com/news/technology/gi...

GIF acronym is pronounced as a hard g, as in Google, graphic, giraffe despite what the author of graphical interchange format might think. May he RIP and be a lesson to all about the dangers of not trusting science, long established language norms, etc.
In many cases “techies” and “those guys” are the same people.
It's a joke - the public health services in places like Canada and the UK have a (mostly unfair) reputation for never getting anything done in a timely manner.
Blindly, nothing is a good answer; you need to weigh your needs. But so most people blindly grab aws; unlike yourself, I find HN actually almost The AWS & K8s Promotion Team. People swear by this stuff here, even if you don’t need it, at all. They forget that not all startups have million$/year to throw away on devops to handle the bizarre complexity of those solutions while they also just really do not need them (now and, statistically, as they will likely fail, ever). It all always reads like resume driven development; I understand it; good people you hire want to do stuff that furthers their career. But it makes it blind in almost all cases I read here (which are tiny companies with no traffic at all, ramping up to be the size of TikTok overnight).

But I digress.

Ec2 is incredibly expensive (outside the free tier that is) compared to many other vps options.

And as for serverless; last month a startup without funding was making a scraper and used aws lambda because it was easy. With their js code it took me 1 day to save them 1/1000th of their cost by using a vps; on ec2 that would’ve been a 1/10th save (outside the free tier which would not work; not enough power). This saving allows them to hire an extra dev for free to work on, you know, extra bottom line features to actually create a business.

For a $10m-for-a-PoC seed invested startup, this is all the usual blah blah about ‘but it saves time on management’ (it doesn’t in this case or many others I have seen in the wild), but if you don’t have prior VC relations on speed dial, you might be funding it all yourself (for now) and cloud stuff is just shovelling money into a pit if you don’t need the upsides at this moment.
Perhaps the methodologies in the article itself are too abrasive (the specific conversation topics used), and I could see taking the side that, yeah, okay, there's some critique here.

But the issue of not communicating for selfish ends seems, not possible. Isn't all conversation, in some form, selfish? You're wanting information from other people (how their day was, what they're interested in), you want to vent about a topic, you want to communicate something that excites yourself and feel a connection, you want to get information for certain actionable issues. Even a purely altruistic use of listening to someone in need has its own selfish motivations, to strengthen a friendship, or to feel good about helping someone else (why do we help people in the first place? Does it feel good to follow our own principles?). There's definitely a spectrum there, and us, trying to perceive someone else's intent, is the framing that would make it right/wrong.
Got damn. I was so scared to finish the article. Glad i pushed through it
Another reason why it’s great to have many, you can round robin the one you wake up hugging in the middle of the night.
“10% talent refresh”

Wow, that DOES sound so…refreshing! :-(
I don't like Wasmer one bit, seems like an aggressive startup with a shady business model that is ultimately bad for the WASM ecosystem.

It's possible what you say is true, but, how could anyone judge the validity of such an allegation from a throwaway account without more info?
I had a problem with a very persistent hacker once. Constantly causing havoc to my systems. I would talk to him on IRC as he wanted to boast about his exploits. Made himself out to be a 24-year-old Russian living in London and had plenty of anecdotes which seemed authentic.

One day I was on IRC talking to him while at home in the evening. He said "Watch this." My wife's cellphone rang and someone screamed down the phone at her. That was the breaking point for me. I put it a €15,000 bounty out there for someone to ID him. A few weeks later I had leads and tracked him down to Germany.

I had German friends dig into it. They found he was a 15-year-old kid working at a video store. My friends called his boss first and gave him the details. Then they called his dear old mother at home and regaled her with the stories of her son's other life.

Never had any trouble from him again after that.
Having N distributions repeat almost identical packaging work on different schedules and sometimes falling many versions behind is not a "non issue". You're excusing something Linux is genuinely bad at. I say this as someone using it personally and professionally for 12+ years.
Because all of those things are about externalities?
Perhaps Nix could help? It's great for configuration and reproducible builds without the overhead of containers (which in practice aren't often reproducible).
Impact of automation on long haul trucking operator-hours in the United States
A pregnancy doesn't show up on a pregnancy test (a read operation) until after implantation and enough fetal growth to significantly impact the mother's hormone levels. So, there was a write (fertilization) followed by a read (pregnancy test) without any synchronizing operation. The pre-op pregnancy test missed the pregnancy because of the race between the read and the write.
Sure. The parent poster was taking about being “impervious to rejection”, which is what I was responding to.
Front run + back run is sandwich. Front running has also been called miner extractable value. This is now called maximal extractable value.

You may want to look a little further, or not.

https://github.com/flashbots/pm

'... mitigating the negative externalities of Maximal Extractable Value ...'
> Presumably life isn't a race at all, which makes you wonder why everyone is in such a rush to attend university when they are young

It’s the networking opportunities (i.e. “the college experience”) which suffer as the age gap grows between you and the other students. Since networking is the bulk of the value of university, your age during attendance is of disproportionate consequence. I’m speaking from personal experience here — going into a post-grad program, it was immediately obvious to me that the age gap would act as an all but uncrossable chasm. And I’ve seen this chasm in action in undergrad, where it was even more pronounced.

Simply put, university is a lot harder to justify when a significant age gap exists. To your point, maybe most people should wait a few years before attending university, but they don’t, and those who’d otherwise prefer to wait before starting university — which is doubtlessly a wise move for some — have to risk their college experience to do so.
The person you're responding to could simply provide every closed source TLS library as an example, because Heartbleed (a memory leak caused by implementing a TLS feature nobody was using) was exclusive to OpenSSL.
> I don't think he creates "nothing of value." How is this any different from influencers promoting and following brands manually?

I agree that he's no different than other "influencers". I would just contend that they also create nothing of value.
If it weren’t for private loans, it would have been impossible for me to go to college.
How to move a node between others in knotend (flowchart editor) [video]
Hopefully you've watched Avatar the Last Airbender by now :)
Thank goodness this was a happy story.