skysight-inc/HackerNews huggingface dataset:
List is saying "personal checklist" and then each point has "recommended", "optional", "advanced".

By reading with understanding - threat model for this list is average Joe that is using internet on daily basis, but is not too technical maybe decent at using computers, so recommended for me seems like good baseline for everyone.

Optional is for showing what are other options that someone might try out, but mostly are not that important.

Advanced is for showing off that author knows more than basics, hence implementing any of it would be security larping most of the time.

Well maybe author should add more context but from what I see, someone can still infer context of recommendations, without stating it explicitly.
Recently worked on migrating a number of services (largely CPU bound) to Graviton 2. It was a bit of hit and mess. For some services, it worked great. Very negligible hit to performance, and since equivalent Graviton2 instances cost 20% less, it was a no brainer. Others needed a little bit of rewrite. There were also a couple that just didn't see good performance on ARM (very branchy code)
So much fun working on that project!

Turns out it's really hard to beat the productivity of rails
> If section 230 or whatever does not provide for free speech. Then that is what needs to be improved upon.

The problem is that people have wildly different takes on how to "fix" section 230.

One group wants to eliminate the liability protections, regardless of how much moderating you do. The concern is that this basically makes hosting user generated content at any sort of scale impractical from a business perspective since scaling competent human review to reduce the legal liability below the value per user is impractical for any sort of modern social media.

One group want so eliminate section 230 so only companies that do no moderation have liability protection, forcing social media companies to stop doing any moderation. The concern here is that some level of moderation of abuse / spam seems necessary to keep platforms from degrading into wastelands that no-one wants to use.

The moderate middle ground is reforming section 230 to limit the types of moderation activity that can be performed without losing liability protection.

This last seems politically unlikely as it doesn't provide a political win, despite being good for society.

One group wants to eliminate
Get Familiar with Go Workspaces
No paywall: https://www.researchgate.net/publication/318714639_The_antib...
> Exactly, that's why people tend not to choose Windows for development unless they're forced to.

In my experience, most people who are developing software for Windows choose to use it to develop that software. There are a great many people who choose to develop software for Windows.
Legally it depends on the service that was stolen. Was this a banking or credit website where some consumer protections might apply or do you have any contractual limitations on cost that may protect you?

But generally you will be liable for the costs incurred from items stolen from your custody. You must then recover those costs from whoever stolen from you
The recently popular Lost Ark is another video game by Korea.

I'm surprised you've never heard of the kpop groups BTS or Blackpink in Germany.
The video was reported on and has been available since July of 2021. Saying you lost an election because it was rigged is basically the same as saying you won the election because the other party cheated. There is no progress here. Just click bait.
>According to the National Institutes of Health, puberty usually begins in girls between 8 and 13 years of age, and in boys between 9 and 14

Idk, I'd definitely be forced to talk to a teacher if you were my parent
Sounds like an advertisement.
Recently Unity released a video with quite impressive facial animations. Unlike unreal, this version is not yet ready to actually try yourself yet unfortunately.

https://youtube.com/watch?v=eXYUNrgqWUU
Absolutely rampant. I think most communities that were still on the canvas day 2 and on either had a huge inbuilt following or resorted to bots.

I think Osu, the superstonk people and France probably were botting, but unless those bots were incredibly poorly written, I don't think were the cause of the sudden erasure - the bot code I saw shared most widely was definitely looking up which colour to pick based on the rendered colour code, and one discord I was in that was using it was definitely alerted to the white starting because the bots started erroring out for being unable to find the desired colour. I think it's more likely hostile bots were the cause of the swift erasure. If they're just picking a random or first colour to try wipe it out, they'd still function and contribute to swift deletion
Sorry, I don't understand how this reply relates to my comment.

Are you saying that the price bump will keep him on the board? The fear of a drop will keep him on the board? I can see that, but in the long run the valuation shouldn't be affected unless he is actually a good member of the board.
> As a normal user, on a Windows box, if you log into say a corporate Microsoft 365 account with your corporate credentials that device may get managed by the domain (pending any admin approvals needed on the management end) in some fashion because by default the local user/MS account user is a local admin…

The parent owns the device and would have the local admin account. They aren't joining the device to a managed domain where something like GPO would be relevant (unless configured by the parent, naturally). The student would only have a non-admin local account, and would be incapable of granting device administration privileges to the school. The school could still manage their browser profile, of course—if the browser itself is actually signed in to the school account, which is something you can disable while still logging in to the account on the web—but they would have no access to or control over other user accounts or anything else requiring local admin privileges.
Cherry picked examples are proof that the OP is wrong, at least to an extent, and that there exists data that doesn't change or changes slow enough to be re-tagged (and this poses the issue in question).

Proof of existence is enough to invalidate a claim of non-existence, even if it doesn't hold for any condition in the world.
No, it is highly relevant as some USB-A to USB-A cables do function exactly like that.

And again there seems to be some serious disconnect somewhere here because I've got no clue what you are trying to say. My made-up usb-to-serial adapter example will work as is - even with two hosts talking to each other (through a intermediary). Just as well as such a cable will work.

Why talk about corruption? Why would host-centric be a problem in this scenario?
This is my biggest concern. The more we centralise on GitHub, the more we centralise the risk on a service which goes down harder and more often than our Jenkins infrastructure did.
Meh, I could be into it without them providing a FOSS implementation. Think of Microsoft's language server protocol. It's nice that VS Code is open source, but even if it weren't, we might still be using this protocol with rust-analyzer and neovim. Or any number of older protocols/formats with RFCs that didn't start with good FOSS implementations.

In the case of completion, if you can generate (less rich but still useful) bash/zsh/fish completion scripts from these files, program authors might be happy to use it even in the absence of a fancy terminal.
depending on wether your definitions of propoganda and malware include rick astley, thats exactly what they did
After using lots of antidepressants and therapy, i solved it with meditation. I recommend the book "practical insight meditation" by venerable mahasi sayadaw. I applied the technique he teaches to the feeling of being sad, however it manifests physically.
Who in this thread said "we wouldn't have EVs without Musk"?

To say that the idea of one person changing the world has been discredited is so wildly wrong I don't even know where to start. We can't neglect the background but we can't neglect individuals and the choices they make either.

What we can say is that Musk presided over the growth of a company that has sold 2 million EVs. We can't say "someone else would have done that if he had never been born," which is what you said. Unreal.
I like a good rant as well as the next person, but had some issues with this one.

> What if we have a scenario where a third party authenticates the client (by verifying that they have a valid token issued by their ID provider) and then uses that to issue their own token that's much longer lived?

He might as well be complaining about car keys. Yes, if I leave my car key in the door of my car, bad things will happen. If you issue
a long lived bearer token, bad things will happen.

Bearer tokens are credentials. Short lived and limited, but still credentials. You have to take care of credentials!

Use short lived bearer tokens and refresh tokens. Threat model the ramifications of someone stealing the token. If you really higher assurances, look into client bound bearer tokens (DPoP and MTLS in the OAuth world.)

For a common use case (I work for an auth provider, more details in my bio) of browsers or native applications integrating with other applications and APIs, what are other options for verifying a client is authorized to access a resource:

* sessions, probably with cookies. Well known, solid technology. Requires you to either have sticky sessions (so every client request goes to the same server) or a common session store (redis, etc).

* client certificates. If you control all deployment (intranet, employee laptops, etc) can be an option. https://buoyant.io/mtls-guide/ is a good resource if you are doing service to service communication.

* API keys. How do you like your credentials with no internal data structure. Plus, they live forever until you build a rotation system. Yay!

* client bound tokens as mentioned above

I'm not sure what other options are available.

Edit: formatting
The VAX backend in GCC was recently modernized and improved so it could survive the cc0 removal.

There was a fundraiser which I created for that purpose.
Also here https://www.redditinc.com/blog/how-we-built-rplace
Typically in Ruby (which is heavily Smalltalk-influenced) we do ad-hoc type annotations anyway and call it documentation.

So you've got the camp that favors type annotations for various reasons and the camp that is opposed. There is also a third camp: the DBC (design by contract) camp. Their argument is that type annotations don't go far enough and that's what you really need is to enforce preconditions and postconditions. While I see their point, I think DBC lacks a "killer app" -- which as you pointed out, for type annotations, is static analysis (which leads to tools like code completion, refactoring browsers, performance improvements, and more).
Don't worship the man. Hard work and ambition are aspects of his character deserving respect, no doubt. But he's not perfect. Not all aspects of his character are worth emulating, and he has his blindspots like everyone else.
It’s absolutely relative. But what’s the dimension we’re measuring this relativity on? I’d say it’s ideology.
Zig is not C++.
The "tired" bit that I was referring to is the popular compulsion to miss the point in order to score a "gotcha!" by invoking the strict philosophical definition when someone says something like, "Twitter Inc is too ideological". Of course, when people say things like this, they're not usually meaning "Twitter Inc" is too ideological, it's that they are too aggressive about pushing their ideology. They could remain devout leftists without spamming everyone's feeds with leftist propaganda, for example.

> To be much more specific: the idea that Twitter has a free speech problem is itself immoderate and ideological.

It's ideological in the sense that "free speech is desirable" is ideological. Arguing that it's "immoderate" implies that arguing for stronger free speech protections is radical, which is untrue.

> There is an unquestionably huge range of ideas that can be not only freely but rather aggressively expressed on twitter. There is a very narrow range of speech that is disallowed and even a considerable amount of that actually gets through.

I'm not going to die on the hill of "Twitter needs to be less censorious", but free speech proponents can still legitimately find Twitter problematic even if the censors allow a lot of wrongthink through. For example, Twitter can sort replies by ideology such that wrongthink is much less likely to be seen. It could hide wrongthink from various users altogether. Whether or not it actually does any of these is difficult to assess because there's no transparency.

> Combine that with the culture that understands free speech issues in this way more generally: less from a regard for the value of liberal discourse and more for the privilege of indulgent speech, related to the idea “my ignorance is as good as your knowledge” but extended into the realm of stewardship or even ownership of an entire platform.

Yes, we have a broken epistemology, but this is the result of the politicization of institutions (especially by the left wing). Specifically, the left wing argues that because perfect neutrality and objectivity are impossible thus we should wholesale abandon the pursuit thereof and instead be doggedly (and ideologically homogeneously) activist. This predictably damages trust in the institutions which in turn drives people toward other institutions, many of which are less savory.
I believe that they can turn this around with more transparency going forward. I also see value in how it can help a tech company, being able to onboard people into specific workflows (dev,ops..etc) using a combination of docs and team capabilities.

I'm sure some people wouldn't like what I'm about to propose as it again "phones home" but I encourage the team to take a look at GPT models for converting text to commands, I have a simple fine-tuned model that does wonders when I'm in the terminal.

As for me at home, all I need are those sweet blocks with text-editing mode in any open source terminal.
Usually the practice in these scenarios is to try out all possible ways to make out money and then go a little backwards once the public outcry is big enough. At some point you find the most profitable balance situation, before you have expelled all customers.
If there is any next Google (or Google Search competitor) it would be, in my mind, something like Wolfram Alpha. I can search for things like today + 160 days and get much more rich results (as a simple example). Google does have some features like this already such as weather/climate, calculator, translate, etc. This area however is much weaker than I would like it to be. Wolfram can tell me how long it will take me to get a sunburn in my current location, and all kinds of stuff like that. Virtual assistants like Siri and "OK Google" might be heading in this direction, but why can't I ask "Ok Google, I will take a photo, then can you compress it and send it as an email attachment to Dave from work." Or something along those lines...
Is this satire or something? Since when is being a snitch a bad thing? Isn't that what people complain about with cops, that they don't report each other?

So now what, we want the same thing with academia? That they can do whatever they want, secure in the knowledge no one will report them?

And isn't "craven snitch" an oxymoron? To be a snitch you need at least a bit of bravery, even if you are being anonymous, since there's always the chance you'll be found out.
How do you access it in Roku? I have a Roku TV and haven't discovered this feature yet. Seeing all content in one place would extremely useful.
Slightly off-topic, but I have been interested in setting up Plex (or similar) in my homeserver but never figured out a good workflow or source to add movies/shows to it? Are people generally just torrenting, or are there DRM-free stores that I do not know exist? Or if there is an efficient workflow for ripping blurays?
What Does RISC and CISC Mean in 2020? (2020)
Unsnap – Quickly migrate from using snap packages to flatpaks
I love one click checkout. Amazon is okay, and I've used it a few times on sites that support it. But if a site has one click Apple checkout it makes it so much easier. I don't have to worry about them having my credit card info, and it takes 1 second to check out.
It's a very little free press in US...Inconvenient people for the authorities have almost no chance of getting on TV.
HN is a forum for entrepreneurs and techies. Anonymity is probably a non-goal.
Or maybe I believe playing by known and accepted rules is the only thing holding our country, democracy, and the global economic system together. And this guy seeks and promotes activity (SEC, crypto, ripping off cofounders, his positions on taxes, never ceasing misinformation, and so on) that dilutes this. You can’t have a democracy without common rules and a common currency. If he’d just stick to building stuff, he’d be awesome, but no, he’s gotta break all the rules for his ego for vanity projects.
> Scribus is very serious about PDFs

This is its killer feature! I've had compliments from multiple pro printers regarding my print PDFs produced with Scribus. Even though most usual PDF pipelines are Adobe based, Scribus PDF files are superior.
Possibly, but being able to add in your email and private services is interesting.

Crazy from a privacy perspective, but potentially very seductive in terms of convenience.
I'm actually a little out of date - the newest ones are about 300kg.

https://en.m.wikipedia.org/wiki/Starlink
Fast is out of business after raising $120M with her boy $600k revenue
That's really lovely to hear, and to be honest, makes me more hopeful about the direction of the project in general.
I'm a bit confused. Isn't it possible that they actually were lonely/bored weirdos who are bad at social boundaries and host a (probably mind-numbingly uninteresting) discussion group?

Don't get me wrong, I shut these sorts of people down at the first conversation because I hate dilettante philosophy with a passion and have a strong distaste for any hint of spiritualism. But there are underemployed folks at all my regular coffee haunts who are always chatting up willing patrons and will ask to exchange numbers if someone is patient enough to engage. But AFAICT they aren't nefarious, just bored and weird. One hocks CDs of his bad garageband compositions, but again, he's harmless.

How did you jump from "cringe" to "cult"?
Yes, "moderate" describes ideology (no one in this thread questions that), but the OP's claim is that the definition of "moderate" is itself an ideological question. It's a bit meta.
For version control they have Iceberg, which should allow you to use git for your projects. It doesn't have to be all in an image.
>I don't know why you think language models are fundamentally unable to deduce the knowledge of the points you mention.

Because the knowledge is not there in the text, the models are not able to represent it, and as seen in the demonstration above, they don't have it.
I have had depression for years.

Slowly creeping in.

Last year three things happened:

1. I got a light antidepressants

2. I switched from smoking weed with tabacco to without tabacco

3. I took ecstasy for the first time

Number one lifted my mood. Number two reduced my lethargic and number three Reminded me how it feels to be happy and it gave me back human empathy as well.

I was wearing glasses for a long time and that always made the idea of needing help for my brain easy to accept. Why do I accept that wearing glasses is normal and just necessary but my brain has to work 'normal enough' without help?

On a side note though: mote depressed you get the less you have to loose anyway right? After all hard depression leads to doing nothing and thriving to end it. You need to realize that this mental state already gives you the chance to do whatever you want.

After all if you really fuck it up, you still are at the same point of ending your life.

Good luck!
I found Unity to be easier to start with but led to a lot of garbage.

Unreal has a steeper initial learning curve but the system itself is more pleasant and the built in components are much more helpful. I switched to unreal after a couple years of Unity and strongly advocate others to do the same.
Interesting. Other than branchy-ness, was there anything else you think correlated to poorer performance on Graviton 2.
Musk has proven to be a 'get shit done' kind of guy though, so if he did want to push through changes he certainly has the capability to do it.
"So whether or not you trust the camera company to do the best job of demosaicing their own sensor is up to you, but if you use open-source software you're still going to get great images, but they're never going to look exactly like the JPEGs you get off the camera. If you're a professional this probably doesn't matter, but for an amateur who just wants to shoot RAW to take great lossless photos and be able to do some tweaking in post-processing it can be frustrating."

I don't really see the distinction between amateurs and professionals here. I think both want the RAW starting point (after import) to look the way it was rendered in-camera.

I think it's a myth that professionals "want" a bland starting point and customize everything. The ideal workflow is that your RAW looks the same as in-camera, and then you use the power of RAW to customize. That's quite different from having a neutral RAW and trying to reconstruct everything.
Most cases of depression are not single isolated episodes but part of a recurring pattern. Sometimes even the intervals between episodes are characterized by mildly depressed mood, mild anhedonia etc., the so-called dysthymia.

I point out the relapsing and remitting behaviour of mood disorders because it shines a light on other ways of managing it. The effect size of SSRI’s is not all that large to be honest. But characterizing the risk of adverse effects as terrorizing is probably over-pessimistic and unwarranted. That said, I’ve taken meds - tricyclics, traditional SSRI’s, atypicals and I can’t say that any were terribly effective. Working with a skilled and trusted therapist has been practically life-saving though. It took a long time to find the right person. Before my current therapist I saw someone for 2-3 sessions and she seemed like she had never even had any experience in clinical interviewing let alone any insight into the sort of existential troubles that I was facing. I am an MD but I try to keep that out of the fray because it can skew the therapeutic relationship in odd ways. I don’t know. Just was “off.” But current therapist is awesome.

I also have two checklists that I review weekly. The first is titled “What’s going on?” It just lists some of my early warning signs. If those start pointing in the wrong direction I look at the second list which is about 60 things I know that have helped me in the past. Exercise or just being outdoors is near the top.

The expectation/anticipation of adverse medication effects is known to increase the risk thereof. The nocebo effect. If you are that agitated about the risk my advice is to work really hard on finding a compatible therapist.

I don’t think you can brute force your way out of depression but you yourself and especially with a therapist can begin to identify patterns of thought and behaviour that can keep you stuck. It’s just a nudge.
In my case, I'm running FreeNAS/TrueNAS for storage and a Plex jail. I'd imagine there are a number of people in the same boat considering the popularity of TrueNAS.