skysight-inc/HackerNews huggingface dataset:
I don't like this at all. The Firefox snap has really bad crashing issues, and the filesystem sandbox makes using the file picker confusing especially for my nontechnical family members.

I tried using the snap, I really gave it an honest attempt, and it stinks. The final straw was when removing and reinstalling the snap deleted my Firefox profile. That was really unacceptable. Removing Firefox via apt doesn't wipe out ~/.mozilla

Snapd is now removed and pinned with negative priority on my Ubuntu systems so it will never be installed.

I'd like to find a PPA that builds vanilla Firefox but so far I've only come across ESR and Beta.

I've considered switching to Chromium over this nonsense though I'll try running tarball Firefox first, I didn't realize it could update itself. Maybe Librewolf is an option too.
Last I heard, it was doing some power glitching to bypass/nop-out some signature check or some such. There aren't much details in the public, but a very similar hack is publicly documented for the vita: https://arxiv.org/pdf/1903.08102.pdf .
Most loadbalancers do use the readiness probes tough
I agree. I think Nintendo makes fantastic games but I don't like the idea of consoles. They'll repeatedly port their own games to newer and newer console but won't release the games for any general purpose platform. I don't want a pile of electronic waste growing under my TV to play my favourite games spread over hardware generations, I want to just have one computer that I can use as a computer and playing games.
First of all, it is amazing that the author managed to analyze the patch in so much details, it probably is an effort comparable to the bug fix itself. Still I think the article is missing some bits. I would expect any core migration to require barriers (either implicit or explicit) on both the old and new core otherwise the process would risk seeing its own stores and loads out of order.

But in this case the barrier is predicated on the execution of some cache manipulation instruction, so I suspect things are more complicated. Maybe these specific cache manipulation instructions do not respect the usual architectural memory ordering and require some different set of barriers. Possibly they bypass cache coherence completely and require an actual flush of the cache. That is going to be very expensive and it make sense that it is only done only if the process was actually fiddling with these instructions. 'jmgao' else thread reported that tegra has coherency issues on migration, so it might be related.
The web was "normal" before corporations started abusing it since it was not regulated. Europe is merely putting adding those regulations so corporations can stop ruining the web for us.

If you think this is bad, our (Italy) privacy laws in meatspace are orders of magnitude more annoying than GDPR, to the point where we have to write in our resumes that we allow whoever reads it to use it, otherwise they wouldn't be even able to store them in their archives.
I watched a show on this, maybe 60 minutes, I can't remember, it was 100% not amateurish.
> My daily driver for many years already.

Would you like to share more about your experience? How resource-intensive is it, what you do, what would a normal workflow look like with it compared to, say, a Fedora desktop?
I'm often confused because "decentralized" means different things to different people, like the fable of the blind men and the elephant.

BitTorrent and other peer to peer apps are decentralized, but are they really when the data flows through the pipes of a few Telco's?

I think web3 means there isn't a central authority for conducting transactions with other people, but I have a nagging feeling that this could be accomplished without a blockchain and proof of work waste.

https://en.wikipedia.org/wiki/Blind_men_and_an_elephant
Cool blog, is there an RSS feed available anywhere?
experienced these too, wonder too what actuall the works system, method or style/way
I am not an expert on sleep medicine, and so I recognize it's bold to claim that the American Academy of Sleep Medicine is wrong. But they are. Many good scientists still struggle with translating research data into real-world predictions. And these scientist don't have a reasonable causal model of the relationship between biological clocks, wall clocks, and social clocks. They assume that people's social clocks are not only associated with the wall clock, but determined by it..

Below I'll repeat part of a comment I made here: https://news.ycombinator.com/item?id=30695603

They are correct that there are negative health effects for people being on the western edge of time zones because their social clocks are earlier than their biological clocks. But this is because people synchronize their social clocks with people in their time zones. But if an entire timezone shifts by an hour, they will naturally adjust their social clocks accordingly. As a thought experiment, imagine shifting the time zone by 12 hours, so midnight was called noon and noon was called midnight. People would simply shift their social clocks by 12 hours to compensate.

An actual example of this is Spain, which since WWII has been on the central European time zone, even though it is one of the most westernmost countries in Europe. According to this article, people in Spain should have more health problems and shorter lifespans, because their social clock is so much earlier than their body clocks. However as everyone who has ever been to Spain knows, the social clock in Spain does not have the same relationship to the wall clock as it does in other countries. In fact, relative to say the US, the social clock in Spain seems to be shifted a good two hours, for example with dinner at 9pm or 10pm. So their social clock relative to the sun is actually not so different from other European countries.
I never thought I would dislike HDR, but Somehow companies are managing to make it a terrible experience on PCs (macs included).
Please cite specific policies that are examples of this "exercise of naked power, without any mask of moral pretenses"...
> is the lowest cost complete titanium bike on the market, folding or not.

Do you have sources to back that up?

In the UK, the price on your website lists it as £2,025 (or £3,003 for the higher-end model). I can get a PlanetX titanium gravel bike for £1,799 - granted it's not folding, but you specified "folding or not"!
Hmm I will try to debug this one, this one is using a CDN and you shouldn’t have to wait this long since it is fully optimised!

Otherwise thanks for the feedback
Intro to Thread-Safety in Ruby on Rails
That is all fair. Again, I don't have a problem with you, your project or the code you shared at all. I think it looks fantastic, and I applaud sharing the reverse engineering efforts. I only take issue with the choice of words, in calling Lunar open-source.
Really curious how this works under the hood!
Incorrect. Cyber Brokers, Chain Runners and umpteen others going back years are 100% on-chain. But the majority are either on a centralized cloud provider at worst and IPFS at best, yes.
China Faces Worst Crop Conditions Ever Due to Climate Change
I agree this is not how you should evaluate. But it is not how things are done in (correctly executed) ML. What is described is a validation set, not a test set. The test set should not be involved in training or(hyper)parameter optimization at any time.
Just wait until you reach the statute of limitations and post it
I like the not opinionated format. What is your vision so it doesn’t become yet-another-productivity-tool-for-teams?
This app looks amazing! What a fantastic job!

To be honest, some of it should be native to macOS.

Some of it is very smart (like using your monitor as a soft box for online calls)!
I rather make more salary and take 6 - 12 months off after 2 years.

The counter is, in the USA, FIRE is a possibility. Few, if any, Software Developers talk about FIRE in Europe.

Pensions in Europe will be under pressure. I doubt they will keep up with inflation. Particularly with stagnant productivity and aging populations.

History has shown its better to have your own savings than rely on public pension systems (this is a long discussion.)

The US simply values software more than anyone else.
Proof of work is not needed, just a pool of time servers that you can make a quorum out of. We're working on exactly this on top of roughtime (https://roughtime.googlesource.com/roughtime) for a future version of QR Date (https://qrdate.org/)
Corset: Declarative data bindings, bring your own back end
Both assessments were clearly wrong, Out side of Harse words on twitter I would love to have anyone point to actual policy positions / actions that the Trump Administration took that put the world or the EU in greater danger?
This is scary to read. We use code reviews for changes and we’ve found that our more junior team members can bring a point of view our more senior team members can’t and vice versa. It’s one of the best parts of working in code for me.

With that said, code reviews only work, in my experience, if team members are strong communicators. Understanding each other, empathizing with issues, and being collaborative rather than tearing people down is critical.

Code reviews are a “we” activity not a “your” and “my” activity.
Original source code for the PowerVR Series 1 GPUs
I've been contributing to OSS projects for a few years now and all I can say is that it depends on the project.

I have a few open PRs to a small-ish project for about a year now. The maintainers haven't even looked at it. The PRs in question replace broken CI, fix bugs etc.

On the other hand, I have merged PRs to a large project that took the maintainers a few hours to review and merge. The PRs here are minor improvements.

My take is: do not give up. There is a random person in Nebraska that would appreciate your help, you just didn't find them yet.
I’ve already told you that I accept that. But odious cuts both ways: people like me find people who would shun and shame someone for holding a differing view odious, and we wouldn't want to work with them. Or hire them. I would never have shunned and/or shamed them had they not started it, but I am capable of retaliation.

In fact, this conversation has inspired me. I interview for SWE positions. It's time to stand up against these people. I will argue against hiring anyone whom I suspect would engage in shunning/shaming someone for failing to fall into line with progressive dogma; I'll find excuses for making the argument on technical grounds.
Gatekeeping what defines art.... Not a great look even if I understand where you're coming from. But check out Cyber Brokers which is super detailed and entirely on-chain.
Thank you HN!

I wonder what are the costs to run a community of this size (hosting and moderation) and no ads.
I guarantee this is a group of less than 8, most of whom are under 23 and grew up in middle-class Brazilian families and have had access to computers (unfiltered and unmoderated) since age 10.
You are most likely right. I would expect that barriers would be needed unconditionally. This patch is likely working around some hole in the SoC where the usual barrier is not sufficient for some instructions and some additional ritual need to be performed.
Leaking data isn't petty crime. I can believe a student with anti-corporate views could see what LAPSUS$ are doing as a good thing. Or just a student who is good at cracking and wants to show off, criminality be damned.
I admit I wasn’t aware open-source was such a strict term. I always used it where the source code was available.

I’ll fix this wording where I can, thanks for letting me know!
Yeah, the dude looks exactly the archetypical way. I would imagine he codes Lisp, develops Emacs and has something to do with the FSF immediately after a single look at him :-)
Without blaming Hetzner in any way for this, this is the reason why we pay the GCP premium. We hosted at various providers in the past and there have always been problems. At one time it was because the A/Cs weren't working. And that was a big provider.

At GCP we never had any problems with any outage so far. Even with VMs or the hosted features such as Cloud SQL. Whenever there is a maintenance, the systems keep working seamlessly (they migrate the systems somewhere else whenever they do maintenance work or something).

We never felt the need to create high availability services, because it was never necessary so far (the services have always been available). And we've been hosting there for years.
when Silicon Valley still had a stomach for true innovation!! It's sad how the pinnacle of innovation today is one big company copying some stupid thing from another big or small company, like the stupid so-called shorts of youtube!!!
So go and do that, but unless the way that universe works is defined as "whatever is easy for a computer to simulate and render" then you will still likely benefit from techniques that were originally developed to simulate the real world.
Honestly It's not a "reasonably secure OS" but an "absurd OS", absurd because for safety we have since few decades a very lightweight and very effective solutions: Plan 9 namespaces.

Actual older than Plan 9 but still alive OSes have done limited and limiting choices but many have something "somewhat equivalent", for instance GNU/Linux cgroups (see FireJail, BubbleWrap etc) or FreeBSD Capsicum. Choosing anything heavyweight is a nonsense.
The FSB is probably working on it right now /s
It reads like they were trying to catch the employee in the act of doing something nefarious.
Outseta might be what you are looking for? I'm not affiliated with them, I have my own product PriceWell but we only integrate Stripe and you'd have to use something like Auth0 for user authentication.
Not a book but yc startup library
Central apnea is sometimes a symptom of a more serious underlying neurological issue, so it can be important to follow up with a physician to assess other risk symptoms and risk factors.

As for treatment - yes. BiPAP, ASV and nerve stimulation are all more effective for central apnea than CPAP or APAP.
Yea, bleed-through is annoying. But when used in direct sunlight, it’s hardly noticeable.
It's more of a design compromise than an outright flaw though. Since you can't know if your order to shut down a pod has arrived or not in a distributed system (per the CAP theorem), you either have to do it the way k8s has already implemented it or you have to accept potentially unbounded wait pod shutdown (and by extension new release rollout) durations in times of network partitions. K8s just chose Availability over Consistency in this case.

You can argue whether it would not have been preferable to choose C over A instead (or even better, to make this configurable), but in a distributed system you will always have to trade one of these two off. The hacks with shared emptyDir volumes just moves the system back to "Consistency" mode but in a hacky way.
It sounds quite possible that you have a lot of experience and if you have a better way to do some things it may cause them to have to change or threaten their authority..

You could try pre-investigating companies with very different methodology and let yourself make mistakes because you genuinely don't know their methodology.
Those two words mean the same yet are different terms. Thanks for a correction.
It's a book too. Highly recommended, not for the squeamish.
yeah, buried in the hills, no direct access to anything but trees. (and sky)
> Why on earth would anyone support charter cities? Cities are a community of people and should be owned, operated, legislated by and accountable to the community, not outsiders.

What if the outsiders are better at governance and development than the locals? As a Bangladeshi, I’d rather have Americans administering Bangladesh than Bangladeshis. Though I’d rather have Germans administer America than Americans…

> Telling the locals you know better than they do about how their region should be administered, while giving yourself the ability to exploit the living crap out of them thanks to your privileged position of being a foreigner is roughly how colonialism was carried out.

Hong Kong turned out pretty nicely before China took it back.
Failure to update status page should could double against SLA.
Everybody I know strongly dislikes snap because of the machinery it brings and how untidy it is. Also it's forced upon the users.

AppImage and Flatpak are fine, and AppImage is the first choice amongst this "everything included" bundle formats.

However, Ubuntu is forcing snaps as a power move. Both the software, and the treatment from Canonical is off-putting a lot of enthusiasts right now.
I remember a couple years ago we were using Okta for AWS federated access. One day a bunch of role associations disappeared. Ended up badgering support for a couple weeks since the audit logs were empty before they finally admitted it was a "bad migration"

Apparently they had some internal issue with orphaned records or something and deployed a code "fix" that ended up deleting legitimate records in a way that wasn't auditable from the customer side.

I think it took about 4-6 weeks of trying to escalate through support and account reps until we actually got an answer. It was also very surprising to see role associations just disappear without a trace (we associated Okta groups with AWS IAM roles in the Okta integration)
“Have fun staying poor”

It’s so obnoxious to assert that poverty is a choice, or falsely claim that anyone can get rich by investing in crypto.
I do the same.

The diff between HN & Twitter is voting mechanism at HN.

Voting mechanism when all is said and done, has kept things sane and of high quality (though there is a echo chamber kind of vibe going, to the detriment of diversity of thoughts).
If it's only base64 and not encrypted, that also seems like a bad wrap.
> Shouldn't the scammers pay the cleanup charges?

No. First, the primary culprit is who designs and deploys a mechanism
to do harm. If I set a lethal trap on my property with a sign saying
"Beware the 10,00 Volt mantrap", I am not excused when a burglar is
injured - even though they are breaking the law by trespass. Secondly,
it seems that the manufacturer gets to decide, arbitrarily and
post-facto (post-sale/agreement) what constitutes a "scammer".
Finally, with "e-fuses" you are setting a trap mechanism on my
property which I have purchased in fair expectation of my rights.

> it's on you to ensure that the thing can't be rendered inoperable by
a (third-party?) software update

I believe in many places like the US, it could be breaking the law to
ensure that, since reverse engineering and circumvention of
protections would be required.

Of course you're right that there's a sort of moral responsibility on
people not to vandalise serviceable goods such that they become waste.
But people throw away perfectly working technology every day.

If by "third party" (I think we would use "first party" here) you mean
the vendor/manufacturer when you say:

> it's not the (vendors) responsibility to account for your hardware
when they do software updates.

then I heartily disagree. It's certainly their moral responsibility,
and, unless they offer owners a reasonable way to disable updates, it
ought to be their legal responsibility too.

But that's not what's at issue. Otherwise your argument makes it seem
like the update "accidentally" damaged the owners property. Quite the
contrary, the vendor is sending out updates designed to cause harm,
and in full knowledge and punitive intent. Am I mistaken?

> Doing software updates that brick tampered hardware is harder to
make a sarcastic argument about.

I don't follow you. Sarcasm is the lowest form of wit and discouraged
per HN guidelines in favour of arguing in "good faith".
George W Bush and Putin (2013)
If your work requires GPU acceleration, then you're out of luck [0]. Normal apps like a browser, LibreOffice work fine. Hardware virtualization is extremely secure [1] and also fast. Everything which works on Linux should work on Qubes, including drivers (which are usually isolated in their own VMs). You can also run several different Linux flavors simultaneously [2] and Windows [3], too. The downside is that you really need a lot of RAM for that (unless you try to minimize your VMs [4], which is an advanced feature). I have 32 GB, and I never run out of RAM.

I love that you can explicitly compartmentalize your digital live into independent VMs with a great unified interface. I have "work" VM which contains all work stuff and "personal" VM for personal things. More thoughts from me: https://forum.qubes-os.org/t/how-to-pitch-qubes-os/4499/15.

[0] https://www.qubes-os.org/faq/#can-i-run-applications-like-ga...

[1] https://www.qubes-os.org/security/xsa/

[2] https://www.qubes-os.org/doc/templates/#official

[3] https://www.qubes-os.org/doc/windows/

[4] https://www.qubes-os.org/doc/templates/minimal/
> I doubt very much it will catch on.

There’s little incentive for websites to change to JSON feeds when their RSS feeds are already implemented, working well, and generated automatically. But several good RSS readers added support for JSON feeds when the format was introduced and that’s all you need for it to be viable; it isn’t important if it “catches on” after that when the flexibility is there.

JSON feeds were great for me because I generate my own feeds for personal consumption and can now do so with simpler code. I understand I’m in a minority—most people consume feeds and never create their own—but the larger point is JSON feeds may have already done their job: they exist and are supported if you need them.
> Then it would fit the strictest definitions of open-source (you are free to modify and redistribute), but would miss the community aspect completely due to misaligned incentives. I could add a great feature, but my pull request would be denied if it overlaps a paid feature.

Not every open-source project accepts contributions. This is something that you just interpret into "open source", but was never part of it.

What open source rather means is that you are free to create your own version/forks that you maintain by yourself if you want some personal code included.
I generally try to keep a pretty open mind about new approaches to traditional systems, and I think it's honestly pretty obvious that there is scope for a whole new approach to distributing applications on Linux platforms.

All of that said, snaps are unfortunately not a good solution. The implementation sucks, the tooling sucks, the distribution channels suck. Ubuntu Core is an abomination. The lack of ability to control updates or publish a private repository are basically unforgivable and obvious manipulations of the platform. I don't think it's possible to say too many bad things about how bad the ecosystem is generally and how poorly Canonical have behaved.

The whole situation honestly sucks, because there there really is a need for a comprehensive and open solution for the challenges that the "snap" ecosystem is trying to address. All it's currently managing to do is get me off of Ubuntu as quickly as possible, which is probably not the goal.