skysight-inc/HackerNews huggingface dataset:
> SSH keys make sense. But certificates?

I am equally mystified... Never understood how involving a possibly malicious third party can make communication more trustworthy.

But then again, I was also sure when I first heard about it that public key cryptography was obviously impossible. You just could not have secret communication when everything is on the open! Is there any simple explanation that we ignorant people can read about certificates to get an "aha! insight" moment? For the case of public key cryptography, the moment where everything snapped together was when I read the mathematical description of the Diffie-Helman key exchange [0].

I'm not interested in how to do certificates with ssh, but on what problem do certificates solve, exactly.

[0] https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exc...
I agree with you, but I wanted to add this stupid detail into the conversation:

USB-C doesn’t ensure that you have any of these features. It’s just the style of connector.

You can have best-of-breed USB with any connector type you want, but obviously the most current hardware is using usb-c.

Not really relevant, but I know, now, to not have any expectations based on the fact that I’m using usb-c.
There are actually people working on things other than CRUD web apps!
I think it's always fascinating to find situations where counterintuitively it is faster to do more work.

For example, it took me a while to realize that most of the it's actually faster to read/write compressed data overall - you'd think that reading from a disk and decompressing the data would be slower than just reading uncompressed data from a disk directly, but due to the vast difference in disk IO performance and CPU decompression performance it's almost always faster to perform disk IO compressed. I'm writing almost always since I'm not sure how the tradeoff looks for current high performance PCIe SSDs (or other storage devices with very fast IO).
did they say "let them eat cake" while they had those babies?
If this is true then why does ssh not get set up this way by default?

Honestly what I would prefer is a better (and faster) version of monkeysphere [1]. That was honestly the most natural-feeling solution to SSH security.

(1) https://www.systutorials.com/docs/linux/man/1-monkeysphere/
Maybe, but the CEO can probably get good support already.
Under Fire, OO Fuel, No Air Support: Intercepted Russian Radio Chatter Reveals
aye - and it took time to setup all of those things, time to maintain the gear, delays for business/dev teams while the IT department made sure they knew how to run something stably.

> Build servers took a day or so depending on the approval chain.

This would only be true in a large shop with cold spares or virtualization. Server hardware generally has a 6-12 week lead time. The exception being if you are paying out the nose to a reseller who could do faster delivery.

Just imagine the time it took to setup Nagios or Zabbix for monitoring. In a small shop you are probably talking about at least 1-3 days of work + calendar time for hardware. Add to that some time for dealing with scale of metrics storage etc. depending on the shop.
> but it does add to the experience of using a laptop around the house where you also have a car and a 3 year old.

I got a 2019 MBP and my 3 year old spilled water on it. The repair cost more than an M1 Air. My next computer will be a cheap air I think. I won't feel bad upgrading early or if something happens to it.
It's a mix of strict politics and financial problems. Millions of dollars may sound like a lot, but those are some of their only sources of income and they rarely seem viable.

Google has hired Lars Bak and many distinguished WebKit and Runtime environment developers to make a high performance browser. They're practically leading the standards, the aging Gecko/SpiderMonkey codebase can't keep up because no one feels secure working for a dying company that likely doesn't have a competitive salary. That combined with how little a development team there is to work with.

To work on the technical side of Firefox is philanthropic at this point, to steer away from Chromium dominance.
Yes, it may affect a lot more people. And not only in Yemen. Remember: a hungry mob is an angry mob.
I recently had the experience of trying to do a banking operation that required an in-person visit. For some reason this bank required me to do this operation at the branch that I originally opened the account, which is not where I live anymore, and it's very inconvenient for me to go there.

So, while I was in another city of that country, I decided to try and handle that problem. I went to a branch and asked them to do the operation, saying that there must be a way to do it without me having to travel hundreds of km. The person absolutely refused to even try to help me. "No, there's no way to do it, you'll have to go to your branch office." I begged, I got angry. (This was after leaving this issue for a couple of years -- travel has not exactly been easy, so there are reasons I didn't manage to do it yet, and was getting desperate.) All to no avail, the person just. could. not. help me.

Fine, I left, very annoyed. The next day, I went to a different branch, told the same story, and explained how extremely inconvenient the whole thing is. I went in expecting failure. To my surprise, the person responded kindly, said "okay, I can send an inter-branch memo, I'll do the operation you pay this much, done and done." I signed something, walked out smiling, and the next business day, received a confirmation email from my branch in the other city.

Moral of the story: I completely agree with the premise here, but just keep in mind that even if you talk to a human, your millage may vary greatly depending on who you speak to and what side of the bed they got up on.
Handouts from the state. Haredi tend to be very non-consumerist so they make do with little money.
This is wishful thinking. There will always be dishonest scientists and we need to keep trying to reproduce everything to filter them out.
I have two USB-C ports in the armrest of my car. One connects to Android Auto and charges my phone to full in about an hour. The other doesn't connect to Android Auto, and charges my phone to full in about six hours.

I've owned the car for three years, and didn't notice the charging difference until a few months ago.
Amazon GameSparks (Preview)
It seems to me that they achieve this by increasing the relevance of common, often made searches at the expense of rare specialized ones. Google used to be very good for special narrow searches on technical topics.

Lately when I search for something like "recipe for borgelnuski" I get a page of links to sites with names like "Molly and Audrey" that first tell you a long story about their grandmothers pet kangaroo, then go through a very long a tedious explanations about ingredients, then vaguely go through the recipe step by step with a lot of pictures, but if you don't mind scrolling for 20 or 30 minutes, you get a very good recipe for borgelnuski.

It seems that when I do a narrow technical search lately, I get a page of links about funeral homes and insurance companies in Haskell, Texas.
I feel the irritations, but for the most part, I find the right cable and device combos and then I'm good to go. It's still a vast improvement over the previous status quo of micro-USB charging and many more cable types.
Minimal. You're talking about highly trained, licensed nuclear power engineers.

That's a community in the US that can safely be estimated as 70% prior US Navy nuclear reactor techs and officers.
"Baud rates" woulda been rs232 serial, unless you were getting really advanced in your parallel port fiddling. rs232 is still recognizably in use in surprising places, often on bare header pins, but still there.

"fair?" I dunno. the problems recur, the intermediate period had "VGA standards" that flowed over a wide range; and others that exhibited the same problems we see with USB-C here.

I'm pretty sure they had similar issues with crap like antenna connectors and tube socket standards back when they were the cutting edge, too.
The idea is that getting the information 5-15 minutes before everyone else could make it much easier to get out of a population center and then live. I already have a place to go in the countryside.

If your "flee-the-city" condition is Putin uses 1-3 tactical nukes in Ukraine, you've probably got an hour until population centers start getting hit if things move quickly.
Do your business with companies who offer human support. There exists one of these for everything you need.
> Kind of embarrassing that it's taking some devs so long.. Steve Duda managed to get Serum updated within a couple months of the original M1 release.

This is seriously overstating things.

Steve has spent years continuously optimizing his code base. It was already clean and relatively free of cruft compared to code bases of similar age.

If you are developing on something like JUCE and don't have an extensive amount of optimized assembly or AVX instructions to deal with, yeah, porting is fast. Likewise if your suite uses a common framework (ala MeldaProduction, FabFilter, uHe, etc.).

NI's code base is not clean, and they have the organizational problem of developers coming, developing a product, and then leaving, orphaning the code base. Brian Clevinger is doing his own thing now with Rhizomatic, so good luck every seeing Absynth native. But NI has maintained active development of Kontakt because it is their cash cow, and thus their first native release. But Reaktor? Massive? Massive X? Nowhere in sight.

Further, like many developers, they have the added problem of VST3, which is a royal PITA to get right. Since Steinberg is trying to pull the rug out from all native VST2 development on M1, many larger developers like NI don't want to risk the potential lawsuits. They also have no choice but to push out native VST3s, since Cubase 12 does not support native VST2s.

So there are a lot of economic and technical pressures at work that you have to take into account.
Typically, it’s 99% per year or something like that. Even with perfect use that’s a 1 in 10 chance per decade.
90% of the problems with USB-C I had went away once I started really overpaying for USB-C cables (I'm talking genuine cable from the Apple store kind of thing). https://www.apple.com/shop/product/MN713AM/A/thunderbolt-4-p... is expensive as hell, but it's actually a Thunderbolt 4 cable and not something else, and so it does what it needs to.
It is. But that's making the assumption that step 1 is where most people fail. I suspect that's not the case.
The only good news I have for you is that _perhaps_ in that case the FBI and CISA will investigate, because there will be a US resident victim.

IP-based geolocation is garbage but there aren't many Russian/Belarusian-attributed IPs in the US so the intersection of those with people using node-ipc was empty, and the US Government couldn't be pressured to investigate/enforce.
Does ADHD affect your ability to hold a committed relationship?
As far as I can tell, the people who are excited about nuclear are mostly people who have fallen for the anti-renewable propaganda.

If they actually wanted nuclear and believed it was better then they'd be in broad agreement with renewables people.

Agreeing timetables to phase out fossil fuels? Check.

Removing fossil subsidies? Check.

Carbon fees? Check.

Pricing in pollution? Check.

Electrifying transport, heating, industry? Check.

Demand response? Check.

Battery storage for short term time shifting? Check.

Efficiency and insulation? Check.

Green hydrogen? Check.

All these things are being done by renewable groups and they are the biggest thing helping keep nuclear plants running.

Does anyone pushing nuclear on HN ever mention any of those things?

Do they mention how renewables don't work, cost too much, it's all the Environmentalists fault, how amazing fossil fuels are?

Yes, they can't see to help themselves for some reason even though it makes their argument for nuclear totally transparent.
>> I think its important to recognise that quite a lot of modern web based companies are running their business on the 0 cents model.

You mean the zero fucks model. What they really want to do is build a money-making machine that requires no humans to operate and somehow generate MRR for them. Hey we all would like to retire some day which requires low effort MRR, but a business serving people often requires a bit more than some fancy infrastructure and a drink on the beach.
This I can understand.

But why would someone want to do this? It feels like mental overhead. So what advantages are there to a system like this?
I agree that companies have a responsibility to listen to and address customer complaints. The problem is that a small percentage of customers create the bulk of the customer support burden. With phone support this gets even more skewed. You can't have engineers do phone support or they won't be able to get any real work done with all the interruptions. You can have engineers investigate and address all complaints that arrive by email. I strongly believe email support that goes directly to the people most knowledgable to fix the underlying problem is the best approach.

Companies that provide bad customer support just don't care. They'll provide phone support if they feel they have to, but they'll outsource it for cost reasons. Talking to people who are friendly but clueless is at least as frustrating for me as creating a ticket that doesn't go anywhere.
I've talked to people who "know" they had covid but never got it confirmed with an official test, they could've easily just had a cold or flu. Likewise, I've talked to people with zero symptoms shocked to learn they had covid. I assume this is what's reflected in this finding.
I can't figure out in what way $1000/hr is tethered to any kind of reality. The bed and room don't cost that much. Nursing doesn't come close. The doctors tend to bill you separately for their services.

I get that isn't the game here. But most games are based on some kind of reality. This one seems completely disconnected.
> I put people on indefinite holds, I let the phones ring a little more than I should hoping they would give up and hang up etc.

The people who call into customer service are those with issues they want to have addressed. By throwing up roadblocks, you're making it even harder for them to get to a solution. They expect the people on the line to provide help, but this behavior puts them in an adversarial mindset by the time they actually talk to someone.

It does seem a like a tragedy of the commons situation here: people only have so much empathy to give, so we all individually pull back, which makes everyone worse off.
There will always be fraud and we will always need to invest in trying to reproduce everything in order to sort them out.

It's absurd to think there will be a way to know which studies need reproduction or not. The whole purpose of reproducing is to find out which ones are true and which are bogus
Zoom Introduces 3D Avatars
It means that some can barring other circumstances. It's a structural design flaw.
> "this was back in the Windows 3.x days when Microsoft sought consent from the user before doing this kind of thing"

Since nobody had an Internet connection in those days, it was literally impossible to get the data back to Microsoft without the user's involvement.

If 1993 Microsoft could have collected this data automatically, they certainly would have.
"A lot of them won't accept you..."

There are tons of religions out there. You have to find one that works for you. Atheist? Join an atheist group. There are options.
Russian stock market reopens, foreign investors prevented from selling shares
Map from Scratch
The issue I've been having is that for whatever reason the USB-C design seems to have a problem with twisting/tension near the ends in a way the USB-A and any of the USB-B varieties ever did. I've gone through more USB-C cables then I have replaced USB-A/USB-B cables from wear and tear then anything else. I'm not sure if it is the compact nature of the shroud to fit the spec but there seems to be no strain relief in the nature of the design and I'm usually breaking through the insulation in the matter of months and breaking the connector entirely to make it stop working a few months after that. Having to go buy replacement USB cables for things that were not my fault (misplacing or accidents) is just alien to me and premium OEM or the cheapest things seem to fail the same way at the same rate. With the increased actual power being sent through these new connectors and wires it just seems like I'm going to get an unfortunate jolt one of these days.

I would also say that the USB-C ports seem to get dirty in ways that end up affecting how the cable seats for a hours or years it always seemed to be reliable positive connection way more than I've had with other USB types. I haven't really looked at the mechanics of it but the number of times I feel like I've plugged in and gotten positive connection only to find out the connection was loose is way higher than I had with USB-A. With USB-A if you got it into the connector whether it was for an hours or years it always seemed to be reliable and not something to worry about.
Just use hexomancer's script. Paste it into the Firefox console, call bionifyPage(), switch to reader mode.
Yes, SSH certificates are the way to go and pretty easy to set up. But what these articles fail to address is the user management aspect.

For the SSH certificate to be accepted, the unix user must first be present on the system. As far as I can understand, FreeIPA(or similar LDAP systems) cannot be used in conjunction with SSH certs. Whereas SSH keys are supported by these systems.

Can anyone provide any insight/experience with this?
> they’re obviously not productive members of society because of their religion?

As shocking as it might sound, yes.
>Multifactor authentication (MFA) is one of the primary lines of defense against DEV-0537. While this group attempts to identify gaps in MFA, it remains a critical pillar in identity security for employees, vendors, and other personnel alike. See the following recommendations to implement MFA more securely

Ah, MFA because bolting more passwords(things user knows and by knowing is able to prove his identity) on top of first one is a great idea. I'm sure no bad actor will try to get this information too.

MFA might or might not authenticate server. And relaying on user action for security is asking for problems. Does user is a security expert to be able to choose appropriate action? Because sometimes even security experts get phished.

I'm thinking about something simple, that have minimal user interactivity.
Something like WireGuard, but not with random keys in plain text. There are ways to prove identity/exchange keys without directly using private keys.

Something like tpm/yubikey.
> my laptop would occasionally end up in some weird state between discharging and charging

Are you sure you can blame this on your USB-C charger and not your laptop's battery management firmware ?

Its possibly just that your laptop GUI is not showing you what's going on it the background.

It is quite likely that the laptop lets the battery drain a bit and then intermittently trickle charges.
Anyone who thinks these are comparable should withhold judgement until they learn more about how different kinds of "radiation" work. It's an overloaded term.

X-rays generated by slamming accelerated electrons into a metal plate turn off immediately once power is removed. There is no residual radioactive decay, because there were no unstable or decaying isotopes at any point in the process. It's not a nuclear process. It does not involve the nucleus.

In contrast, the Goiânia accident was the result of beta radiation from a pile of decaying Cesium 137 that could only be contained, not turned off.
Social local mobile?
What makes you think there is no financial cost to the right to vote?

https://www.ncsl.org/research/elections-and-campaigns/electi...

It’s a cost we can all agree on, but that doesn’t mean it doesn’t exist.
Teleport completely streamlined all sorts of access management in my projects. Every new feature they release (Kubernetes, Database, App access) work as advertised and the Helm chart + Terraform plugin (which for some reason is not published in the marketplace??) are great for automating the whole deployment + configuration. Great piece of software.
Well you clearly didn’t read the article because the entire thing is talking about all of the sorts of causes you listed.
Nope. Once you have kids being the parent is the most important thing.
A heart-breaking story, thank you for sharing.
I can't imagine the flight simulator in Excel went through planning and QA.
I think of this sometimes like a roller coaster park where you pay a flat rate to get in and then ride as much as you want all day. The ideal scenario for the visitor is to go in and ride continuously, not waiting for anything. However, the ideal scenario for the park is for you to spend your whole day in queues, not taking up space on the rides, and not running around making the park feel "crowded". The equilibrium is the park studying what people's upper tolerance is for wait time and then ensuring there are just enough rides that everyone comes close to that but few exceed it.

Obviously it's not a perfect analogy, but having people wait in line on the phone does serve an important function for the CS department in the sense that it gives those folks an extended opportunity to either solve it themselves some other way, or give up. Neither of these are great for long term brand loyalty, and the cost of the added frustration is probably mostly borne by the hapless agents who do finally end up taking those calls. But from the point of view of short term bean-counters, I would guess that it's unlikely any of these dark patterns are an accident (even if they don't implement the patterns themselves, they would hire the consultant who "streamlines" the after-sales experience to optimize for cost).
The US actively spends money propping up a broken healthcare subsidized marketplace and means-testing people as a way to gatekeep Medicaid, both of which prevent people from accessing affordable/single-payer healthcare.
In the real world ARM server processors - like mentioned AWS Graviton - are starting to eat x86 lunch.

I've seen some very serious savings after switching Java workloads to ARM.
I love being introduced to articles like this and the Kung Fu Panda one from yesterday. They seem to always show up on here just at the right time, when you need them most. Thanks!
I still think that it would look a lot less bad than JS callback hell, mostly because of syntax.

actA >>= \a ->
actB a >>= \b ->
pure doSomethingWith b

is a lot better (to my eyes) than:

actA(a =>
actB(a, b =>
doSomethingWith(b)
)
)

and it gets worse from there (blocks to have statements to declare variables, or to call multiple functions. pre ES6 those would've also been functions rather than lambdas. Admittedly monad transformers aren't that great, but that's mostly because of the nxm amount of instances (to avoid explicit lifting).