skysight-inc/HackerNews huggingface dataset:
Memory barrier instructions on ARM exist to force ordering of memory operations as seen by external hardware (generally software on other cores). They obviously interact with the cache at a hardware level, but they're different layers of abstraction.

And the reason those memory operations might be seen in an order different from their appearance in the machine code is precisely the fact that the processor executes them in parallel and potentially out of order. On x86, the hardware does magic (in almost all cases) to prevent this artifact. But ARM puts the responsibility on the programmer.

But all that stuff is specified (even if it's hard to reason about). What's happening here is extra-specification, something about that cache invalidate and barrier interacts in a way that an interrupt can mess up. But we don't know what it is, because it seems like ARM didn't tell anyone.

Basically: as I see it, any OS author writing interrupt entry code on ARM64 (I work on Zephyr, though not on the ARM port) needs to put a barrier instruction on the entry path for safety, because at least some hardware misbehaves without it. But that said, almost all real OSes are going to have one anyway for locking purposes (i.e. you have to take a spinlock to interact with OS state somewhere, and htat requires a barrier on SMP ARM systems). It's likely that this Nintendo sequence is part of some kind of micro-optimized thing and not a general purpose ISR.
I disagree, it sounds like if you steal a device, the best you can do is part it out because of the activation lock. That raises the barrier to entry (must be able to part out the device or add a middle man), lowers the margin per device , making the endeavor much less attractive overall. I'd be willing to wager this reduces stolen devices in aggregate.
One of the most important aspects of choosing a solution is understanding the problem first.

There's a place for both:

1. Blogs that moralize and talk about a much larger philosophical underlying problem. These help the reader understand a problem that they may not have fully understood. Before, the problem was: "I need a place to host my photos". If that's your only problem, there's no reason not to choose something easy like Google Photos.

Only by digging deeper does one start to understand that there's more to it than this, and choosing certain solutions bring with those solutions a whole set of new problems. Now, you realize "I need a place to host my photos and I need it to provide a certain level of privacy, and a certain degree of predictability..." etc. A set of problems that can be solved by self hosting.

2. Blogs that are solution oriented. You already know what you want, now go do it.

If all you ever present are solutions, the reader is left to wonder why they'd ever invest the time and effort in doing something that is much easier elsewhere. An investment that does start to make sense if you have problems with the implications of hosting elsewhere.
I did for a long time but I stopped. Real time is still super useful though. I have Cloudflare and Let's Encrypt email me now. Mostly it's been helpful for tracking down old boxes/services that are still running that have been lost/forgotten.
I'm not sure what's the point of arguing semantics, call them "people with opinions similar to that of the russian state TV channels". My usage of the word was more along the lines of "historically, propaganda has been a neutral descriptive term of any material that promotes certain opinions or ideologies".
Dear Gods of OPSEC, I hope your username isn’t your real name.
Ah I forgot about that, I have only watched it twice as an adult with no children ;)
Tangential curiosity: how did traveling with just an RPi work for you? Were you borrowing screens and keyboards, or using your own keyboard with a hotel TV? Any other accessories you used? Anything you'd do differently next time?
I feel like I use strangers as unwitting tools in my own psychological therapy all the time, but yes here it's sketchy because rejecting someone (the intended response) is an unpleasant activity.
Power glove.
This one says it was a bad randomizer, which I vaguely recall as being behind another vulnerability from ~10 years ago where a researcher found that many RSA keys shared a prime factor with another key, which allows the pair to be easily factored — so you could just iterate over all the pairs and quickly check which one share a factor, which breaks them.

I’ll see if I can find details.

Edit: found it: here’s the blog post where I first read about it: http://www.thebigquestions.com/2012/03/13/uh-oh/
Oh yeah, Ohio. I've been there. Thats where Kent State happened. Who needs mountains and oceans anyway? The midwest has its charms, and it is warming up so there's that.
Yahoo was also full of extremely talented and capable people at one time.
Noted. Our intent is more 'you don't have to worry about it' vs. 'you're too dumb to do it yourself'.
It is a part of my job, however so far I have found that if your pipelines are getting too complicated, it is time to break them out into build docker images, bash scripts etc.
This comment was brought to you by someone who never produced/maintained software that had to withstand a 24/7 onslaught of automated exploit kits and port scanners over an extended period of time.
I’ve worked for a number of very large, enterprise companies. They use Github Enterprise.

Even banks are moving to SaaS first for their core applications.
They are the payor in every credit card transaction. Merchants aren't waiting for you to pay your credit card bill. The provider gets paid back when you do that.

That's why it's called a "credit" card.
The "make the world a better place" is a jab that got popularized by the show Silicon Valley. They poked fun about how every startup claims they're making the world a better place, and it didn't matter what they actually did. A food delivery service would claim it. Some B2B SaaS would claim it.

And it's all a bunch of baloney. Unless you're solving a problem that threatens the world (climate change, disease, healthcare, hunger, poverty, homelessness, etc.), then "make the world a better place" is eye-roll worthy.
> You need to take care of security

Easiest solution is to just host stuff on a local network without access to the wider internet. E.g. running on an old laptop/raspberry pi/server in your basement.

Sure, that means you can no longer access your self-hosted stuff when you're out of the house, but the tradeoff is peace of mind about your data leaking or worse.
All good ideas — thanks for taking the time. I've been thinking about some of these but not all.

On the 1 customer vs 100, I totally lean towards the 100. I have a blend of these with https://www.pullapprove.com/ and the higher the price, the more it feels like you just work for them. Pros and cons, but personally I don't want something that looks like freelance/consulting/employment.
Or "dead tree"
That calls to mind one of my favorite bits from RFC 1925 ("The Twelve Networking Truths") [0]:

> With sufficient thrust, pigs fly just fine. However, this is not necessarily a good idea. It is hard to be sure where they are going to land, and it could be dangerous sitting under them as they fly overhead.

[0] https://datatracker.ietf.org/doc/html/rfc1925
Self-hosting is something that we should be constantly iterating on making easier; it's really the path forward for privacy centric folks. The main challenges are managing workload scheduling (SystemD is complicated for a layperson). Networking is another challenge; for instance, if you wanted all or part of these services to remain offline or on a Mesh VPN there's a lot of knowledge required.

There's some projects trying to tackle the workload orchestration piece; CasaOS (https://www.casaos.io/) being one of my favorites but there's also Portainer (https://portainer.io). TailScale and and ZeroTier are great for Mesh VPN networking, where you may need to run some workloads in the cloud but want them networked with your home applications (or just to keep them offline). They also allow you to access applications running on a home server that doesn't have a static IP. Cloudflare Access is okay; I haven't tried it because it deviates from the mesh VPN model significantly.
There are far too few technologists in that list. Twitter, for example, certainly drives the decisions of politicians these days; politicians perceive it a pretty good substitute for polling, for better or worse, and have the donations to prove it.
While I had copies of Zork laying around, my formative gaming was done when Sierra's 80s titles were brand new. They were made for another time when people were different. They were more like reading a book than playing a game of paintball or laser tag. Movies have changed since I was a child as well, you don't see the majority of films being like say, Robin Hood Prince of Thieves being made today.

I've read Ken Williams was against putting violence into video games, in case you need another example of how people and times changed. They didn't think it was necessary, and it's not. These days you'd be insulted for holding such a sentiment. Before Half Life, I can count the number of times overt violence was in Sierra's games. Even Half Life, the last project Ken Williams greenlighted, was very tastefully done.

The culture has changed, we don't make founders like the Williams anymore, and thus products aren't like they used to be, which has further changed the culture. Those were good times though! The Williams naturally and effortlessly hired and had many star female game designers, had multicultural elements in their games, and none of it came off awkward or weird like today's forced efforts come across to people. People just acted-good in a low-key and humble way, rather than tried to look-good as with today.

If you, the reader, wasn't cognizant during the 80s and early 90s, I can say for sure to you that this country (speaking to the US) has changed. The Williams to me, always represented the best of it. Roberta Williams is very deserving of recognition.
Xous seems to be one step up from Hubris in terms of being oriented towards interactive applications and running full UI and dynamically loading applications.

I have not enough knowledge about the underlying message passing semantics to give an educated differentiation.

Maybe the most interesting feature is the Plausibly Deniable DataBase (PDDB). See:

https://www.bunniestudios.com/blog/?p=6307

Here is some of the design intent behind Xous explained by its main designer:

https://youtu.be/_pIr3Q7gqNI?t=959

He described Tock as to small and Redox as to big in one of the talks.
Sure, but my old Google cloud apps on python 2.7 will one day get rug-pulled and forced to upgrade. It can only stay working forever if the platform doesn't change underneath it.
How many people feel they get positive value from CT services in general?

I have Cloudflare email me whenever my domain gets a cert, and that is a positive value for me. However, it is very clear to me that bots are watching these logs (in near real time) because obscure hostnames (sometimes UUIDs) that I set up for a quick test but need a real cert will start getting traffic almost immediately after the cert comes back from Let's Encrypt.

As an attacker, this log is a fantastic tool for service/host discovery, but as a defender I kind of wish I could opt out.

Note: a wildcard cert is a good way to avoid the problem, but I prefer to avoid wildcards if possible.
My wife’s company did this, and then backpedaled after a bunch of good people quit.

I would like to talk to the executives making these boneheaded decisions. What is going through your head when you decide to arbitrarily give some people the benefit of working from home and forcing some to come to the office as a function of where their current home address happens to be?
The Soviet invasion of Afghanistan was a slow guerilla war against an insurgency. Russia has lost more troops in Ukraine in a few weeks than in 9 years of Afghanistan. It’s not an insurgency either. Ukraine is outright fielding a proper army with armor and air support and what not.

Hell they’ve got a sizeable amount of the western front of Russia’s army surrounded and set for a strategic rout.
can you explain more about what an offset account is?
Not really from what I’ve seen. There’s a rabbit hole of research reports, but the key chart is shown here: https://www.solarreviews.com/blog/what-is-a-solar-farm-do-i-...

Maybe 10-15% of total cost depending on install type.
I'm amused by the implications here that 1) the outsourced alternatives are better than you are at keeping up with the 'hard stuff', and 2) that in an outsourced scenario you can't "flip the wrong switch and you expose something to the world". This thinking is why I can't tell you how many incident post-mortems I've done where I have to once again hear "...but, but, but...we outsourced this to them so this couldn't happen...".
Stormy Daniels to pay $300k to Donald Trump after losing defamation case appeal
Google Evacuates Russian Staff
Similar to what the famous psychologist Albert Ellis did:

"As an adolescent, Albert was extremely shy around ladies. At age 19, he started showing signs of thinking like a cognitive-behavioral therapist by forcing himself to talk to about 100 women in the Bronx Botanical Gardens within a period of one month. This helped him get rid of his fear of rejection by women."[1]

"He found 130 women sitting alone that month on park benches. He sat next to all of them, whereupon 30 got up and walked away. He spoke to the remaining 100 — for the first time in his life — about the birds and the bees, the flowers, books, whatever came to mind.

Al later said, "If Fred Skinner, who was then teaching at Indiana University, had known about my exploits, he would have thought I would have got extinguished, because of the 100 women I made one date — and she didn't show up!

"But I prepared myself philosophically, even then, by seeing that nobody took out a stiletto and cut my balls off, nobody vomited and ran away, nobody called the cops. I had 100 pleasant conversations and with the second 100 I got good and made a few dates." [2]

"Nobody took out a stiletto and cut my balls off" -- I've always loved that expression.

[1] https://totallyhistory.com/albert-ellis/
[2] http://www.rebtnetwork.org/ask/may06.html
Economic destabilisation is perfect excuse for implementing universal basic income, digital bank currency and overall surveillance over citizens and whole global economy.

But we should be more resistant against alarming agenda of news that are constant for few years now. Global warming, plagues, financial crisis, war, etc. It makes people scared. And scared people are easily manipulated to accepting new rules and orders.
It seems strange to me when management makes mistakes like this. It's reminiscent of requiring people to move when the company moves office locations, or offering people money to volunteer to be laid off.

In each of those cases, the ones who are most fearful for their jobs are often the least competent who know they'll have a hard time getting a new job. The highest skilled folks have no problem walking away because they know they can get another job in no time.

I guess it's the management delusion that each employee is fungible and can be replaced with a new employee without any loss of productivity.
> Info about business in Russia

Really? That's screwed up imo. The only reason I might like to see that is to realize the company are ideology focused and want to jump on every bandwagon that rolls by. Such a statement would have nothing to do with actually helping Ukraine or anything else good, it would be as close as you could get to pure virtue signaling, and look ridiculous for any company. I wouldn't be surprised to see companies include something like this, but I am surprised to see a real person request it.
Is there anything on /r/heroku?
> I don't think we have a word for when we force groups who should be cooperating to compete with each other for resources

I agree in terms of forcing, but we have plenty of ways to describe the general idea of choosing this direction, typically in exchange for a (real or perceived) benefit, but almost always with the inefficiency/delay you mentioned:

homegrown

homemade

handmade

handcrafted

artisan

DIY

roll your own
Other things that you can do (to build upon these) is to go for higher-level functions:

- Run n8n.io for inter-SaaS workflows

- Run Node-RED for lower-level automation

- Forego containers and use https://github.com/piku to run simple web apps

(disclaimer: I wrote Piku as a sort of anti-pattern since I wanted Heroku-style deploys without Docker and buildpacks)
Empathy is not being obsessive with the feelings of others. Others are as real people as you are. If you go that way, thinking of what others feel instead of empathizing with what they're experiencing, this immediately becomes an abstraction and you fail to realize the humanity, or lack of, in this.
> Our goal is to have technology companies, research labs, and similar organizations sponsor contests about their respective fields.

Sci-Fi has a strong vein of criticism throughout it's history. A lot of Sci-fi is a critique of modern society, including the potential consequences of a technology, the overreach of business/companies, and failed ethics in research labs.

If there is a sponsor, how separate will the judging of the story be from the topic of story and the sponsors? If the sci-fi story is very critical of something like CRISPR, if a CRISPR related company is the sponsor, how will the sponsorship play into judges decisions? Do judges have complete discretion on what they pick, or is there a final selection that ultimately happens?
It should be for most setups. https://render.com/docs/redirects-rewrites has details.
Apple Launches Driver's License Feature on iPhone in Arizona
Chomsky (or your summary of Chomsky) seems to me to be interestingly parallel to Putin's view of NATO. Putin says it's the US driving NATO expansion to the east. Reality says that it's a bunch of countries that were in the Warsaw Pact desperately trying to get into NATO to protect them from Russia trying to re-add them to a new Russian Empire.

In the same way, I question how much "American hegemony" is pushed by America, and how much of it is "pulled" by other countries finding "American" values, perspectives, and positions to be more attractive than other alternatives.

Ukraine has agency. The other countries that joined NATO have agency. The Italian universities have agency. They aren't just helpless pawns of "American hegemony".
I think the hard part is that would be largely dependent on specific implementation, which itself is very opinionated. I could write a post on how I run, maintain, and secure Docker Container X on Ubuntu Y using vSphere with Synology and get 100 comments on why CentOS is better and I'm wasting time/money with vSphere over Proxmox, etc. Cloud doesn't have quite this problem. Once you've chosen a cloud provider, you have significantly fewer options in each category, minimizing this option-overload.
It's interesting to see a product around science fiction. In the past, it used to be that science fiction was the leader and science followed the fiction. That hasn't been the case for at least a few decades. Authors don't really keep up with all the science or technology, for whatever reason-- maybe not interesting, too much, or lack of imagination. I like the idea of encouraging more optimistic and positive future science fiction stories.
No. When the average person sees an ad for something they just bought, it increases their satisfaction with their purchase (thus making them less likely to return it.) Also, when you’ve just bought something, there is a non-zero chance you will return it and want to buy a different model of the same type of item.
A meta rant - There's a lot of cancel culture at play around working hard.

I don't understand why people are trying to guilt/shame others into working less. And yet, at the same time, watch documentaries about successful people (Kanye, Michael Jordan) talking about how hard they used to work and celebrate it.

In order for you to be on the top of your field, you need to put in hours and hours of work. You'd have to sacrifice the so called 'life' part of the equation. If you don't want to do that - fine! We just don't share the same values and priorities. Just like how I shouldn't shame you for not working hard, you shouldn't shame me for working hard.

If I start a company, it's totally okay for me to only get employees who share this view. I'd boast about how hard I work and how much we accomplished. I'd let my employees do that. And I'd compensate them accordingly. If you think that's toxic, so be it. I feel the real shame is not realizing your full potential and falling short of your dreams.
Thanks! I appreciate it. I tried to keep it informative without being overwhelming.

Only five judges for this first contest. For future contests, the goal is to expand this number. Ideally, I’d like to have multiple winners for each contest, so that each group can choose their favorite:

- Set up a volunteer program where people can read and help review submissions.

- Have the sponsor pick their favorite story.

- Set up a network of experts in each domain that can review and offer feedback. For example, biologists can review stories involving biology.
Mnemonic NFT Data API Opens Publicly to Developers
Looks great! Will the next Ubuntu LTS be bundled with Gnome 42?
I wish this were satire
Its a fuck you move.
Positive. Schizophrenia and bipolar can be controlled very well with medication, but patient needs monitoring. That's why the weekly visits to the psychiatrist.
I've never worked with a colo vendor that once you contacted them didn't have exhaustive support for "how to we get to the point where we can start billing you", usually including an actual human that you can ask questions.
Although I once loved the idea of self-hosting, my opinion nowadays is that life is too short to self-host. Yea platforms will come and go and sometimes it sucks, but what we really need is easy ways to move data from one place to another, more than we need self-hosting.
Your comment doesn't convince anyone to self-host who isn't already doing so, unlike this blog post. It's absolutely possible to write more concisely if you have a narrower target audience of people who already agree with you.
You don't have to write that stuff. There is a fairly well-known project licensed under AGPL3, that's fine for self-hosting if perhaps not commercial use. Just search around.
so really what likely happens is that for every dollar of bond the fed sells, you're really only reducing pennies in circulation, given capital requirements for secured loans.
If you're trying to frame the problem in your mind like that, I suggest doing an HN search like https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que... to give you a good idea why people self-host. There's lots of prior art.
For many patients, getting the required referrals and finding an available sleep physician can be a barrier to diagnosis. If additional follow-up is required, we connect patients to local sleep physicians in their area for in-lab studies.
We'll be adding CPAP in the next few months. We agree that patients should be presented with it as an option and fully supported in learning how to use it effectively. We'd love to discuss your experience in more detail! Our email address is support@heliosleep.com if you're open to connecting.
Stories vs. Ideas: Finding Something Deeply Personal in the Philosophical Novel
This is a tragedy of the commons scenario that will ultimately lead to people being less friendly. Right now it's assumed that if someone comes up to ask you for something, they have a good reason.
For GitHub? It seems unbelievable that they would use IIS pre-purchase and why in the world would you mix in a second web server for post-purchase enhancements.