skysight-inc/HackerNews huggingface dataset:
> Building those tools in-house or not using interest-based advertising would make those websites economically not viable.

Interest-based advertising is a huge con, and in my opinion an egregious waste of energy doing all the data processing, an affront to people’s privacy, and has spent decades now distracting people who could be working on things with actual value.

Sure, you can track my every move on the internet and burn vast amounts of energy analysing that data to say “this is someone with disposable income who likes technology”, or you could just… advertise directly on the sites I frequent, and on YouTube channels I watch. The “targeted” ads I’m exposed to are invariably utterly irrelevant to me anyway. I had a recent spate of adverts for head of department teaching jobs in Dubai… I’ve never taught in my life, and I’ve got no idea what got interpreted as wanting to move to the Middle East.

I doubt it will happen, but I’d love nothing more than advertisers to stop drinking the kool-aid on targeted ads.
Those benchmark results might be caused by a very poor hardware implementation on Intel Ice Lake (the first Intel Core with SHA, neglecting Cannon Lake).

In my tests on AMD Zen 3, BLAKE3 is much faster only when multi-threaded and that should be true on any CPU where the SHA instructions are well implemented.

You are right that it is a little exaggerated to say that BLAKE3 is the only hash with these properties.

Using a similar construction with BLAKE3 to allow parallel computation, instead of using the traditional Merkle–Damgård iterated construction, like SHA-1, SHA-2 and many others, it is possible to design many other fast hash algorithms and there already are many such experimental hashes.

What I have meant was that BLAKE3 is, for now, the only one that has both a freely available and easy to install high-quality implementation, and it is based on a theory that has been studied long enough to have confidence in it.

There are many other hashes that are candidates for being useful fast cryptographic hashes, but it is likely that a few more years are needed to trust them enough.
Same, but with books and audiobooks I just misuse them in the same way, feels like consumption addiction, even though, like you, it is all in the selfhelp / tutorial / learning space.
The uber rich decide the laws and control the government and security forces though so that will never happen.

Instead you end up with hypocritical rules against normal people like in the lockdowns where you could still travel abroad if owned multiple houses, etc. - like now how the EU has introduced fuel duty on airlines, but not on private jets.

And reducing supply lines leads to supply-side inflation like we're seeing in Europe now - 10+% inflation, interest rates going up, possible rationing coming in winter, etc. - no-one wants that.

I'd just try not to worry about it, we can't change anything anyway. Just focus on what you can do yourself, like trying to work remotely to buy a house in a less affected area, etc.
It's a "Trusted Platform Module". The high level summary is that it's a chip that sits inside your computer that is designed to only allow only signed code to run.

The computer's manufacturer loads it with a special certificate, so when the computer tries to boot, the bootloader has to include a signature signed with that initial certificate. This bootloader can in turn contain the next certificate to verify the operating system is signed correctly, the operating system in turn contains certificates that verify that user applications are signed correctly.

In theory this is a sound idea, in practice things and implementations are a lot more messy.
Oh FB/Meta wont leave an opportunity to make you feel FOMO.

They sent me an email "We are not hiring anymore for your position" couple of weeks ago.

I never ever applied to FB/Meta for any position.
As I understand it, it's mainly collected when the car goes in for maintenance.
Very interesting. My motherboard has a TPM header but MSI sold at most 100 TPMs for it and then changed the spec (LPC to I2C if I recall correctly), never producing them again. Because TPM pinouts differ per manufacturer despite using the same physical connector (because of course they do) it's not quite so easy to take a widely available TPM and use it, even if it speaks the same protocol.

This might be a good solution for this. I can also see more opportunities for TPM customisation. For example, with a few leads you could lead the header to a connector outside the case and use the TPM containing the LUKS/Bitlocker key as a portable device safety guarantee; a hacky Yubikey for disk encryption, if you will. Depending on the OS you may even get away with swapping out the TPM between boots, giving you a different set of credentials.

TPMs can also be used for some more obscure stuff. With the right library you can use them for things like storing certificate authorities or providing SSH authorization through private keys. Getting proper TPMs into the hands of the people can make for some very interesting experiments.

I'm no master solderer so I probably won't solder my own TPM chip. Still, this is a very cool project!
You and your cofounder were invited more because of you than your idea. Definitely go to that interview.
It says it works only with mechanical keyboards. I wonder if it works with regular ones too if you have the mike really close? Worth a try!

I've seen this technique demonstrated on other types of keyboards but it was probably in lab conditions.
I mostly work with python and drop pdb into my code if I want to step through and see what’s going on. I run tests with the make command so I can use the quickfix list to skip between errors.
He did not say "Seriously, you probably have time to go for a junk hikes or cooking or whatever" - he talked about watching silly youtube videos which most people feel guilty about. I might choose to watch cute cats for 3 hours but I won't be proud of it.

I don't think there's anything condescending about that, it's probably an advice the author found genuinely helpful in the past as well (well, I did).
> I’m still waiting for the earth to freeze over according to the “agreed science” from the 1970s-80s.

I think that occurs immediately after fresh water dilutes the oceans and shuts down the Thermohaline circulation. Europe freezes, then everything else freezes. [1]

[1] https://en.wikipedia.org/wiki/Atlantic_meridional_overturnin...
Dubbing this “cookie consent” is almost conspiracy level misguiding of the public by advertisers. It’s not about cookies at all, they’re fine, it’s about using those cookies to track people around the internet and sell their data.

Frustratingly it seems to have worked. Recently I had to explain cookies vs tracking to a data protection analyst at work.
wth? That guy isn't even a skier, he needs the parachute to control his speed on the descent because he can't use his edges effectively. Skiing doesn't have to be a game of luck, look at how pro skiers handle extremely steep unpisted terrain (those are show videos because those guys also need to please sponsors and followers to be able keep doing this, but between the backflips and spins you can see extreme control over the skis in extremely rough terrain):

https://youtube.com/watch?v=p-mZTR1glq4
https://youtube.com/watch?v=fbqHK8i-HdA
Do you know the audience you are trying to convince?
The best advice related to this is that your thoughts are just your thoughts, and you can choose whether to give them importance. Reading some Eckhart Tolle helps here. As a founder I experience difficult thoughts all the time but they are just part of the game.

Think about your core values and why you are doing what you are doing, and what you want to achieve. Make some values more important than others. Everything you do should be in support towards those values.

Personally I want to build cool things and organizations that didn’t exist before, and make enough money such that I can one-up and establish egoic superiority over my neighbors, friends, and family (who hardly know anything about what I’m doing). I’m willing to push through difficult things to make this happen. I don’t want to turn this comment into a brag-fest but already reached some mild/decent success so far which gives me a lot of satisfaction.
Just as an thought experiment: What would happen, if legislation would make it mandatory for cookie layers to accept the DNT header (Do Not Track) [1] as input and forbid to ask the user if such a header is present?

Like

DNT: 1 == no cookies, except technical required cookies, like sessions

DNT: 0 == accept all cookies

If you don't like repurposing the DNT header you could also imagine introducing a new header for this purpose.

What would happen?

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/DN...
Considering how badly Salesforce handled communication and bug fixing of log4shell in Tableau that's not really surprising.
>seeing how crap so many people in the world have it while I sit here and earn good money

Whenever I start to feel bad I kinda fantasize about going back to an 'easy' job. One where I was just working physically instead of mentally. Just clock in, work out, clock out, and go relax, my mind fresh to learn new things and do hobbies unrelated to work.

But then I look at the pay rates of those jobs compared to the current cost of bills and my family, and I remember the paycheck-to-paycheck struggles. When we were juggling which utility to pay each month, desperately trying to find a burner car because the last one had broken down, etc.

Work is hard sometimes, but life with an 'easy' job was hard too.
Interestingly, not caring about your children will likely result in little dictators. You might not want to give them attention, they do want it, and they'll get it one way or another.
I don't think this is entirely wrong, but it's drawing a bit of a long bow. The getopt wars on Usenet were interesting, shar files flew around before we settled on gnu's take on things.

I think distinct shell commands are good. MH is my go to instance of doing this right (it's still under active development)
Not sure this fits neatly into a list format but this is essential reading on the topic from Golang’s head of cryptography who as of yesterday quit to go and focus on this particular thing

https://words.filippo.io/professional-maintainers/

https://words.filippo.io/pay-maintainers/
> To make use of snapshots, the backup drive gotta be Btrfs as well. The compression level was turned up to 14 this time (default was 3):

Isn't this useless? My understanding is that compression is only done at file write time. When you "btrfs send" a snapshot, the data is streamed over without recompression, so there's no point in setting up a higher compression level in the backup disk.
I agree, and I'd say good computer guys also make good mechanics. The core skills are the same. There's a guy called M539 on YT who's the best mechanic I know and just started out doing it as a hobby aside his IT job.
Better: https://github.com/cavi-au/Consent-O-Matic#introduction

(blanket denial instead of blanket consent)
The lived experience for most Australian trading is that bilats and multilats with the US are net negative. You have to take a view that things are only better if cheaper, even if you drive your own food security to the floor. It destroyed the Australian car parts sector, and ultimately Ford and GMH left Australia.
One part of Go that really needs optimizing is the regexp library. It's still a pretty "basic" implementation and can't keep up with the optimized implementations of other languages...
> --mail=ADDR

> The --email bit is a joke.

what's the context of the joke?
Unix history is always fascinating.

>None of this explains dd.

This one really made me think. I have never thought about dd before. Although I have wondered about other commands. Perhaps the author should also have added some command options not requiring a minus prefix, e.g. tar, ps.

The manpage [0] reads:

In the first (legacy) form, all option flags except for -C and -I must be contained within the first argument to tar and must not be prefixed by a hyphen (`-'). Option arguments, if any, are processed as subsequent arguments to tar and are processed in the order in which their corresponding option flags have been presented on the command line.
In the second and preferred form, option flags may be given in any order and are immediately followed by their corresponding option argument values.

[0]: http://man.openbsd.org/tar
Russian warship Admiral Makarov ‘on fire after being hit by Ukrainian missile’
Now I’m commuting I’m fed up of how noisy the tube is compared to the newer trains, was BREL just crap?

I’ve taken to using an audio spectrograph app on my phone to watch the white noise, and the band of resonances.

Quite interesting in probably far too geeky away, I’ve not been called up for suspicious activity whilst innocuous I’m not sure how I’d be able to explain it.

I’ve also been thinking about tracking the sound of the bath filling to gauge how much is in it, just to track not to use. I guess air pressure, and water temperature play key parts.
Why would your children have a more diverse biome than your aged self?
"Nothing of that explains did"... Made my day
The dangerous thing about reddit is the fact that it has these wonderful nuggets of information. Some really thoughtful opinion, or some unique perspective on things. I always use the example of someone writing essentially an essay on how to make neapolitan pizza [1], including a list of references, one of them being a scientific article. Where would I find this in a book or on the internet? Blog sites and similar things usually are only there to sell ads or something else, are padded with fluff or simply wrong. Here I have someone anonymous without any ulterior motive, without fluff, just exactly what I want: pure information in a useful structure.

Similarly you can sometimes find really cool answers on /r/askscience or /r/askhistorians.

Of course, this is in stark contrast to the vast amounts of low quality posts from people posting thoughtless one-liners while they are waiting on the bus, sitting on the toilet or about to fall asleep. Not to mention many toxic comments. But every now and then I find these little nuggets which keep me hooked.

[1] https://old.reddit.com/r/neapolitanpizza/comments/h8llnp/fre...
It would probably make sense to display <subdomain>.srht.site for submissions which match this domain pattern, similar to github.io sites.
Why can't they? For example, Btrfs reserves some storage for it's internal use which should be more than enough to update the journal to fix a full filesystem.
Feels like they all try to make vscode out of vim. Is there a truly vim-spirited LSP plugin? The one that doesn’t flicker on its own when you type, and only shows issues in quickfix after :make equivalent, even if it works asynchronously (works with Vim would also be great). I don’t mind configuring it for a week, but what’s on gif-shots usually repels me.
I think the reason for asking the question here, rather than Letting Me Google That For Me, is that that it can lead to interesting conversation, especially since many HN conversations seem to have one or more subject matter experts drop in and explain something.
I think Go's "everything is UTF-8 unless you really need something different" approach is pretty sensible - it may not be the best for performance, but it saves you a lot of headaches...
Does anyone know the history or motivation behind this? Wikipedia says "The 64-bit main distribution is now proprietary" implying it used to be free?
Single electrons trapped on solid neon potentially act as stable qubits
Electrons trapped on frozen solid neon could prove a simple yet powerful kind of qubit platform for use in future quantum computers.
This all assumes websites won't just ignore your choices or deceive you either way, which is a real risk whether you do it via browser or not. The only real difference is UX. Users want a "no and never ask me again" button, and that's not possible if every website has to ask you separately.

> If the "browser" did this for me I wouldn't know what absolute illegal nonsense they would try to sneak in via "legitimate interest".

Of course you would, if it's done properly. The browser would be able to list the cookies too, but in this case in one consistent UI that wasn't built with malicious intent.
This is the 2nd most powerful ship on the Black Sea after Moskva. Best and newest, launched 2015. Was hit at about the same place where Moskva had been. Russia as usually denies. The video recorded from Bayraktar of the ship burning https://twitter.com/NavyLookout/status/1522577939669438466

The Russian air defenses seem to be not able to do much when Ukrainians use Bayraktar drones - in this case like in case of Moskva the drone seems to have been around when the anti-ship missile came, and probably it was taking attention away in the same way. And this is drone attack on Russian air-defense on the Zmeiny island (those 2 ships were hit near it) https://twitter.com/UAWeapons/status/1522674375295700993.
And this is Bayraktar hitting other 2 smaller ships, again in the area of that island https://www.youtube.com/watch?v=IKntGdRWatw.

In general the way Ukrainians are using drones is just something to behold. In addition to large ones like Bayraktar, they are using smaller ones to laser-paint for high-precision and to correct for unguided artillery, and of course this - https://www.youtube.com/watch?v=BxaG4YdsHTg - looks like a typical quadcopter (22v by 80A means that it is maximum 6-10 kg drone) which dumps something like small mortar shells onto Russian tanks with great success.
Ask HN: How to translate a language to another in Telegram
How the easiest way do we translate a language to another of a Telegram post ?
Dont close your blinds, I need to pay my bills and photographing you through your windows is how I do that. Or do you not care about my children eating?
This is a great comment, thanks. I can't find any fault with the logic of point #1 especially. Since there are a lot more heterosexual men out there than there are bi or lesbian women, bi women will be more likely to settle down with a man due to sheer numbers (and probably men are more aggressive at pursuing partnerships as well). Makes sense.

I still feel like there's something weird going on with the recent surge specifically in bisexuals. Most other LGBT identities are in the low single digits as a percent of US population and have ticked up slowly over time (L and G roughly doubled going from Gen X to Gen Z). But with bisexuals you have a 9x increase in the same time period. If it was just a matter of people in previous generations keeping their mouths shut because of discriminatory attitudes in society, you would think that bisexual identification would tick up at about the same rate as the other identities. Something else must be going on.
It's May 6, 2022. You're launching your startup next month. Are you going to host on-prem? What, with server equipment backlogs now 4-6 months, and that's if you're a large enterprise customer?

On-prem or cloud, why would I be waiting until 1 month before launch to provision anything?

You're pretending like on-prem is full of all these physical limitations, but Amazon, Microsoft, Google, Oracle, et. al. can just magically make hardware appear out of nowhere. It's the same hardware, subject to the same supply limitations, and I'm going to be paying either way. Either I pay more per hour for my cloud instances, or I pay a bunch up front to provision my on-prem servers.

Cloud makes sense if the load on your service is intermittent or unpredictable enough that you're okay paying AWS's premiums in order to have the ability to scale on demand. But if the load on the services is knowable, then hosting that service on the cloud is paying a 25% markup for no reason whatsoever. AWS is by far the most profitable portion of Amazon's business units. Those profits are coming from somewhere. They're coming from your business.
https://docs.microsoft.com/en-us/windows-server/identity/ad-...

This link has some useful details on attestation.

For a lot of software you should be able to still use a custom TPM since you could use the EKPub based attestation which is per-device. This would allow you to bake your custom key into the device prior to installation and then whitelist it.

I'm by no means an expert but since this is mostly handled at the OS level, provided you control the infra you should be able to roll your own custom TPM and still support attestation & endorsement. So if you are dealing with this on your own personal hardware or in your company (and you have IT's blessing), you should be able to do it but it won't work out of the box.
The triple dot syntax (` `) in JavaScript: rest vs. spread
And then there is also the case of CLIs that aren’t written in C: they don’t get the benefits of a unified getopts lib.

One oddity not explained is tar allowing multi options crammed together without any dash, that nobody can ever remember (eg. tar xvf archive.tar)
Win 8 specifically with support backported to Win 7.
> The survival of the entire process is not a decision to delegate to every possible line of code or library author.

Stated like that, who can really disagree?

I remember when I was writing a bunch of Go when the language was still very new (2009 - 2011). One of the most popular use cases for the language was making websites. All sorts of unexpected problems caused the entire website to go down, due to unexpected panics here and there. The suggested solution from the Go team was to just restart the web-server whenever it was killed by a panic. Surely that cannot be the best way to do it..
Pretty sure Signal also collects your phone number.
OneTrust is a funny one: every single OneTrust banner I have seen has been GDPR non-compliant in that the "reject cookies" option requires clicking through a de-emphasised button and finding the "save" button below the fold, while "accept" (aka take all my data) is highlighted and right there.

However, on their own website, they get it right.

So they do know the rules, they just don't actually follow them in their products.
Not to mention that the page doesn't works without JS enabled
Tesla has done something worse than this?

https://www.webmd.com/a-to-z-guides/news/20220304/sackler-fa...
The example in the introduction is a case of over-engineering and should be avoided.

But the article mentions when a project should be over-engineered and the examples used are for existing projects that need to scale.

This is not quite over-engineering IMO, but simply responding to the needs of your users now or in a foreseeable future.
If you want work alongside people experimenting with rejuvenation therapy, Calico labs works on that. They hire in-house software people and also of course use software provided by external companies.

I haven't worked for them or with them directly, so I don't know anything else about it, but it might be one place to look. I'm sure there are others; they must have competition.
Ask HN: Most effective way to transfer button state?
What is the most effective or creative way to transfer a button state over the Internet to another machine?

The consumer should know at ANY time if the button is pressed or released. (and if the connection is up)

WebSocket, WebRTC, ...

Thoughts?
I said marketable features. Outside of HN's demographic, the number of people who even know what an SAE level is would round off to zero.