skysight-inc/HackerNews huggingface dataset:
In the client-side cryptography layer, a trusted keypair is able to sign a new public key, allowing that new key to be trusted by others in organization--this delegation of signing authority is what makes it a web of trust rather than a PKI.

Importantly, this is also restricted by the API server in the authorization layer. To invite a new user to an organization, authorize a device, or generate a new ENVKEY for an environment, a user must have appropriate permissions in the organization.

The trusted root is passed along, signed, through the invitation flow or ENVKEY generation, so that all keypairs in the organization agree on the trusted root of the organization, and can verify signature chains back to that root in order to trust a public key. Initially, the trusted root will be the keypair associated with the device that created the organization, but it can be revoked and replaced by another trusted keypair (again, given appropriate API permissions).
> I'll mention that while winter wheat is planted in the winter, it's harvested in the summer or fall.

Who is harvesting winter wheat in the fall? Even here in snowy Canada it's a late harvest if the winter wheat comes off in August. Mid-July is typical. Spring wheat is a different story.
I would agree.

I was a big mask wearer from the start. The baloney about N95's not working for some reason against THIS airborne hazard (with lots of great evidence of efficacy against other airborne viruses) was ridiculous.

The other issue - despite the case rates / volume of data that SHOULD be publically available, these scientists WILL NOT quantify stuff numerically.

Fatality rate risk by age / gender / race tables should be trivial to pull up for the US. Add in vaccine status once you have it. With the number of cases / size of data / money spent it's just crazy.

Same thing with vaccine efficacy against variants. The math on these things should be pretty straightforward. Look at fatalities from covid, ask if they were vaccinated, publish some numbers. Just backwards looking at rates by county I wasn't seeing huge differences with some variants.
> So should we ban it then since anyone can get around sanctions using it? Might as well ban encryption then. /s

Encryption has no middle man and is free, and unlike cypto, you are untraceable. So no idea ho you can compare the two

> What would do you suggest then for those who are in countries like Ukraine or Afghanistan then?

A good start would be instigating peace and not war. Stop having the US fight these proxy resource wars by destabilizing them and trying to put in our puppet leaders.
> Why do you recommend against using a modern distributed database?

Call me maybe. This is a newer technology and the growing pains have been dramatic. I assume you've followed Jespen?

https://aphyr.com/tags/jepsen

I use MongoDB all the time, for a lot of projects. But I'm also keenly aware of how many years they have struggled to pass the Jespen tests. I can also recall several times engineers from MongoDB have said "We have finally resolved all of the issues raised by Jespen" and then another bug was discovered.

Again, I use MongoDB all the time. But I'm aware it is simpler and safer to use Postgres, for many, many use cases.
the experience will be different, something like watching 3d content on a 2d screen vs watching it in oculus
Linux users probably skew more ethical than the average Mac user. Otherwise, Apple wouldn't make so much money locking down future generations freedoms.
> developers did not inform them

That's not how this works. Mastodon has an AGPL license on their repo. The burden is on you to read and follow the license. If your devs don't tell you they were illegally ripping code then you need better devs. The burden still falls on you.
> I feel that by reusing address bits for other purposes in a non-flexible way like this, we're just repeating the mistakes of history.

Those old schemes were permanent machine-wide assumptions on physical addresses. They were essentially saying "32 - N bits is enough for anyone" (on this hardware design).

This is on virtual addresses, and the kernel developers want (and it sounds like the Intel feature allows) this to be configured per-process. I think it's totally reasonable for some process to say at runtime "56 bits is enough for me". In fact, it's common for Java code to run with "Compressed Oops" (32-bit pointers to 8-byte-aligned addresses, for a total of 32 GiB of addressable heap). This happens automatically when the configured heap size is sufficiently small.

> After all, there are 44 zettabytes of data in the world (in 2020), and addressing that is already beyond what a 64 bit number can do!

I don't think it makes sense for one process to be able to mmap all the data in the world. The major page fault latency would be nasty!

> And one day, we'll have that much storage in your hand - your phone has about 2^80 atoms in it, so storing 2^64 bytes in there is totally physically possible.

That day is pretty far off I think, but even when it happens I'm not sure it makes sense for all virtual pointers to be >=64-bit. A couple reasons it might not:

* Most programs (depending somewhat on programming language) use a lot of their memory for pointers, so it seems wasteful.

* I assume this hypothetical future device will still have slower and faster bytes to access. It may still make more sense to have different APIs for the fast stuff and the slow stuff. mmap's limitation of stalling the thread while something is paged in is a real problem today, and I don't know if that would get any better. Likewise error handling.
I'm extremely interested in the mind and how it works. The ways that it can work differently under chemical stimulus seems helpful to understanding it better. It hints at a few dimensions of the vast parameter space that alternative (biological, alien, or AI) minds could exist in.
I will grant that many (I would go so far as saying most, and to a very rough approximation, all) users do not have the same purist attitude towards privacy that is common on HN. Metrics on app usage and such would be seen as nefarious here but the average user doesn't care at all.
I miss seti@home.
"an Illiterate Populous" is a satisfyingly ironic typo.
I think when I get my passport soon I’m going to get this, and the same for my wife. Heck I wonder if I can get it for my two daughters too. The less information I have to give out the better. I do wonder if this would get my family hassled at the border to some countries.
How Go mitigates supply chain attacks
If Dropbox engineers are so good across the board, why are they interviewing at all? Surely the desire to move away from this kind of technical nirvana would be almost zero?
ChromeOS has natively supported running full linux containers for a several years, with basically full GUI support. You can essentially treat it as a normal linux dev machine whose browser lives outside your chroot.
Correct, and not even on ideological grounds for me. Intel's stuff was good enough at the time and a lot cheaper.
You can't just put Chrome OS on any laptop. It's cheaper by far, and there's not dealing with cruft building up, updates mangling your install, patch Tuesday nonsense, slowing down over time, drive-by downloads, you name it. I admit that I do most of my work on remote machines, so I don't have to have a machine with heaps of horsepower to crunch code, compile, etc. I also don't use an IDE. I write code in a terminal window. I'm not a pure programmer, more dev/ops. I do work with a fair amount of code, but it's all Linux (Bash, Python) or PowerShell based, meaning the majority of my work is done in terminal windows. This approach doesn't work for everyone. My work-issued laptop runs Fedora 35 and it's a lower-end machine (i5 processor, 8GB RAM, run-of-the-mill Dell workstation laptop). I can use Remmina for RDP stuff, and the rest I can do with a terminal window.
Sysadmins are expensive. >$100k/yr (in the US, at least) for a full time sysadmin when your other employees are taking $40-60k/yr is a pretty huge expense. If you're not a technology company, there's a good chance you'll look to just outsource it anyway (how are you even going to vet/hire someone in IT when you have no IT department already)
> Minnesota’s Department of Health used a scoring calculator that counted “BIPOC status” as equivalent to being 65 years and older in its risk assessment.

That seems like an absurdly high weighting, and is from the article and is not from the specific case you mentioned.
The New Zealand Passport Office reviewed the utility of the sex marker on passports [1], in the context of calls to remove it, and concluded:

> The costs of the removing the requirement to display the holder’s gender on travel documents
outweigh the benefits at this stage. The costs of the change would be more significant given the adverse
affects on the operations of border authorities and the potential inconvenience for passengers.

In particular, they noted that border authorities use this data for risk assessment, the significant cost of modifying existing software that processes this, and that many countries would not accept passports without a sex marker.

[1] https://www.icao.int/Meetings/TAG-MRTD/Documents/Tag-Mrtd-21...
Better headline would be, “The black MacBook cost $200 extra in part because it came with $150 of additional storage”
Ridiculous. no one should be jailed for words. No matter how much we hate those words. Justice is in correcting the world so we never think like this. But that would be impossible with these kind of thoughts.
Bitcoin is a tool that can be used to enable something. If I want to get value out of a hammer, I don't care whether that value comes from me using it directly or indirectly, and I don't care whether the useful properties of my hammer are intentionally designed or are circumstantial.
The point of name-based analysis wasn't for publication or even "science", but to instead show that the analysis done by the researcher was very likely wrong in order to prevent its publication. There is no way in hell I would ever publish anything that relied on name-based analysis as an accurate measure, that would be deeply unethical as far as I'm concerned.

I did ask around with these exact concerns in-mind, which led to this paper by the census in their evaluation of this exact problem (the Passel-Word Spanish Surname List was what I compared against): https://www.census.gov/library/working-papers/1993/demo/POP-...

So, I get it, and I had the same concerns as you, but I like to believe I followed proper due diligence in making sure my approach was reasonable. Especially against the risk of the paper being published (consider how the paper could be used in racist narratives).
Can you cite any source for this?
Some of the flags "interfere" with one another (i.e. are mutually exclusive). So you have to find all the relevant places in the code and put "if" branches.

If you have 6 flags, you now have 2^6 = 64 different possible inputs to the program, and your code better handle it well.

And these are all temporary. Once an experiment is over, you have to remove the flag and related if conditions.

You certainly can design it well this way and abstract out the complexity, but that takes skill, and if the tech lead can't handle branches in version control, it's a good guess they won't be able to handle the abstraction needed to make it a good design either.
I believe this thinking is exactly the reason we haven't seen more government crackdowns on Bitcoin and cryptocurrencies.

Think about it - Bitcoins stated aim is to remove government control of currency, something some governments have gone to war over. Yet bitcoin has relatively received very little attention from the US government.

I believe thats because while the US government sees bitcoin as a threat to their currency monopoly, they also see it as more of a threat to other smaller countries with weaker economies. Hence, overall it benefits the USA.
It took me an embarrassingly long time to figure out that coayrns meant 'crayons' but it didn't matter for the purposes of the question.
There is a well known issue related to this that gets replaced under warranty. Take to the Apple store they have a way to test it.
I think there's more stuff:

* Inner city car transport will become more popular, since parking won't be a huge limit

* Self-driving rideshare cars can outcompete there consumer counterparts on price - there's no need for a powerful engine, and a large battery since it will be used for small distances at low speeds.

* Car ownership will plummet, which will free a ton of expensive parking lot real-estate to be developed

* Ridesharing will reduce the amount of cars by 2x-4x, eliminating traffic jams

* Owning a house with an 1 hour commute outside city limits will be much more feasible, as you can just sit in the car, and commute into the city, generally the value of inner city lots will go down.

I think this is an absolutely monumental shift.
A lot of musical instruments come to mind.

Also many plumbing related things in a house such as faucets, temperature shutoff valves, toilets.

Manual kitchen gadgets are usually pretty simple but still interesting. Peelers and slicers, pasta machines, oil expeller, scales.
WAF Mitigations for Spring4Shell
Presumably there is a

class="authorization"

or something like that in the enclosing element, so it's not that they're inferring metadata from unstructured content - it's that they're drawing bad inferences from the metadata provided.

That said, inferring metadata from unstructured content is literally the whole goal of Reader mode - to make pages more readable even if the original source didn't design it to be - so while this particular bug is avoidable, others may not be.
This all changes when miners pay for their electricity in bitcoin and electricity companies pay their employees in bitcoin, and their employees pay for their rent and groceries in bitcoin, etc.

Circular economy.
Hm, every abstraction comes with costs and benefits. For information theoretic reasons ("no free lunch folklore"), the costs can never be completely eliminated.

The usual way to make abstractions useful is to choose a restricted problem space, compressible enough to offset the abstraction's overhead.
Calls to mind the infamous "sophisticated, vaccinated" comment:

> NYT reporter slammed for calling Obama’s 60th birthday party low-risk due to ‘sophisticated, vaccinated crowd’

https://www.yahoo.com/video/nyt-reporter-slammed-calling-oba...
Well that's embarrassing. Truthfully though, an Android keyboard with a functioning "swipe" algorithm might be more effective for this one. I swear this used to work way better 5 years ago.
"But I think you're imagining some kind of automatic link between the distributed nature of the blockchain leading to a distributed Postgres. But you would need to write out what your assumptions actually are before I could respond to them."

I think the assumption here is that I'm advocating blockchain, which I'm definitely not. Please see my original comment.
Gotcha.

I'm also excited about the modern distributed databases. They're pretty awesome.

But yeah, a HN comment is not the right place to design a resilient DB setup. Like I said it's not terra incognita, but it's also not just "spin up a postgres".
Have you ever ran interviews? I have, and there's an incredibly wide range of candidates, all of whom with fantastic pedigrees, but some of whom are completely incapable of demonstrating their problem-solving ability. Likewise, some candidates have poor pedigrees, but make it clear to me that they can think, communicate, and code.

I'm not saying that some of my rejections can't do that. But I can't measure what I didn't observe.

I also get mountains of emails from recruiters about how deeply impressed they are with my skills, and how I should go work for their firms. I know that they are completely full of shit, because from looking at my LinkedIn, they have no idea whether or not I have any of those skills.
Tools for sure, power and hand. Aside from a voltage regulating circuit most power tools are super simple, make a thing spin to cut other things. I also love using proper hand tools like a plane or hand saw.
Indeed. If, on the other hand, you had bought a cheap white one and used some masking tape and spray paint, you would have Thought Different™.
I think the use cases in this announcement are well-laid out. There's not _a ton_ that I think fits well for these container apps, but pganalyze or New Relic monitoring etc are great examples. Some of this stuff being just _a little bit easier_ to maintain and manage is a big help to smaller teams.
I do wish it was faster. I will say, however, that I never really noticed it on my new M1 macbook. They made it less intrusive, I guess. It used to be quite bad for a few hours and I'd sometimes just walk away and grab lunch, or time my new system install for bedtime. Perhaps the switch to SSDs helps as well, it's easy to forget how slow laptop spinning rust was.
As someone who used to work at Apple and have this knowledge at my fingertips…

It really is nice to have, when you want to look it up. Userspace daemons and their behavior should not be a mystery.

At an extreme minimum, most daemons on macOS have at least a man page describing their high level function.
this article is shit.
Demand isn't there at current prices.

Lower prices, and demand will rise!
Hi there, Tutanota team here. We noticed your comment and just wanted to ask what client/device you are using to look into this? Usually Tutanota loads much faster, but for some devices we can definitely improve. We are also currently working on offline mode. Once that is done loading time will much reduce!
I was thinking the best performers may very well be at one of those companies, but there's a pretty good chance that they never did any kind of coding interview. Maybe they were hired through a merger or acquisition or perhaps their reputation or portfolio is more than enough.
I'd simply further: people don't enjoy rationing of goods and services.

Inherently if there is more demand for services than there is capacity to provide them, then somebody is going to be left out. And there's a pretty good chance that they'll think the system is unfairly rigged against them, either individually or as a group.
On the fashion wheel, we've circled back to thin clients. At least that's the trend I notice.[0]

And I'm not against it. A cheap, small, arm laptop that can last multiple hours of use and all the work is done on remote beefy hardware.

[0] See JetBrains Fleet/Gateway, talks by Netflix at strangeloop implementing this pattern for their video editors (I think), GitHub codespaces, etc.
What this really tells me is that the best engineerineers at Dropbox are looking to quit.
I don't share your pessimism, I think having a geofenced self-driving experience, on select roads, with the option of occasional manual override by a remote operator, is definitely feasible in 10 years.
Ok - we are definitely at a 'bad point' wherein we intersectionalize everything ... but this is not an example of that.

This is classical stuff: 'the other group is getting the disease, so we should worry less about it' has probably held true since time immemorial.

This is just a study, I don't think it's even 'anti racism' really it's just about studying awareness.

By 'woke flinching' (i.e. assuming malign orientation by those promoting progressive issues) on every issue, than we can fall into the cynical trap and just ignore material issues, which is bad.

This study is fine.
This is the one thing I dislike about Hacker News. We have a diverse and talented commentariat that loses all interest in a topic after 2-3 days max, with no long-term discourse. Perhaps this is by design - a pressure release valve? But it does feel less of a venue for conversation, and more like running down a platform trying to talk to someone whose train is leaving.
I really didn't like C++/CX from the perspective of the fact that it added weird stuff to the existing syntax of the language, and it had no other compiler onboard other than Microsoft. These two probably killed it more than "office politics".
This no longer seems to be the case. I've always found it easy to tell it what format a cell is.
Apple earns tens of billions of dollars per quarter. They don't seem to have any issue coming up with their own standard when it suits them. If Bluetooth is such an issue, there's nothing stopping them from implementing their own protocol for use with their own products.

So I will say yes, this is definitely an AirPods problem.
New Mexico Will Make College Tuition Free for Residents
This uses deno deploy under the hood, which interestingly enough still doesn't list pricing because it is pre-release.
Debug, inspect and run semantic search applications with the txtai console
>Well, pages are coarse grained so you'd end up giving the other quasi-process access to more stuff than it should have.

Good point. Embarrassing oversight on my part. My whole mental model of how this would work has come crashing down. Now obvious to me that to have it work the way I envisioned, you would need a managed-code only environment that supervises all memory accesses.

>I know this because I built such a system as my undergrad thesis project

Very cool!
So are you willing to move?
Paypal is a legal entity and therefore subject to the same laws as you and me. They can't just do whatever they please. If they did prevent their customers from spending their own money or they freezed their accounts for no apparent reason, they wouldn't have any customers.

Transaction processors on blockchains are not infrastructure, they are businesses and they can absolutely choose to not process your transactions.
A lot of people in Lebanon get 2 hours of a electricity a day, if that. Regional slumlords are renting out generators and smuggle oil. The electricity is not so much "mispriced" as it is controlled by various mafias and terrorist organizations.

Sometimes cool cyberpunk theories crash upon the harsh shores of reality.
Theoretical arguments aren't very convincing. We need more real-world reports. How long do these transactions take, compared to credit card transactions in the same shop? What's the total cost for each?
Your multisig partners need to be psychopaths who are willing to let you die to maintain your wealth. Otherwise, they are coerced when you are by violence
I don't think even the most hardcore pro-drug advocates would claim that using MDMA multiple times per week is ever safe, but is there any evidence that that kind of abuse is remotely common? On average taking ecstasy is safer than riding a horse [1], and if you really just love to get fucked up and don't care about burning a hole in your brain, why not just graduate to straight-up meth?

[1]: https://en.wikipedia.org/wiki/David_Nutt#%22Equasy%22
> hired a lot of people from Uber; right now we're getting Amazon and Facebook/Meta.

good luck with that
I think those are the old COCOM limits which are no longer in effect. I believe that currently the only limit is 600 m/s (which is nice, since when there were both speed and altitude limits some manufacturers OR'd them and some manufacturers AND'd them, so it wasn't clear if altitude alone would be enough to disable a device until you found out the hard way)