skysight-inc/HackerNews huggingface dataset:
Yes that's fair, it's a trade-off. Thinking more, there are really three levels of protection I see.

1. Keep keys in a file/the keyring. This protects them somewhat from non-root users on the same machine. It also provides phishing protection, which is really the most important aspect of U2F/WebAuthn to most people. If your computer is compromised, all the keys are compromised.

2. Keep keys in the TPM. The only additional protection over #1 is if you recover your computer after it is compromised, you can be reasonably certain the attacker could not make a copy of the keys and thus can no longer use them to authenticate. Arguably this is not a particularly useful protection.

3. Keep keys in the TPM/secure enclave and unlock them via biometric. This does provide meaningful extra protection if every use requires an unlock. Then if your computer is compromised, the attacker will have to either defeat the biometric unlock, or trick you into unlocking for every authentication attempt.

#1 is what I do right now for rust-u2f, and I think you're right #2 is not really useful. So maybe it's worth just implementing FIDO2 without worrying about TPM support. What I really was talking about was doing #3 for Linux, but I don't see a way to meaningfully accomplish it without tight hardware integration.

P.S. It is recommend to register multiple FIDO keys and/or have backup codes for accounts as a way to mitigate the issue of one physical device breaking toasting an identity. Not all providers may support this, for silly reasons.
We use a cell service called Tello for my kids phones. For $5/mo you can get a plan with 100 minutes of voice calls, sms, and no data whatsoever. It's perfect for my kids, since I don't really want them to have mobile data anyway
Would you say my employer pays my income tax, since they're the ones giving me money?
Apple Maps does some insane stuff. For example, it overlays landscaping - trees / plants - in front of the route I’m trying to drive. I do not need cute digital obstacles in the way of my map. Just tell me how to get there!
Shucks. I was hoping they'd finally release a new one.

I have an old 6th gen iPod touch that I recently replaced the battery in, and my son uses it a lot. I had thought about getting another one for my daughter, but I was waiting in hopes that apple would release an 8th gen sometime soon.
Nice add. I particularly like this one:

> Apple/NeXT have done things that were completely mind-blowing and heretofore impossible.

I actually see this in their transition from amd64 to arm64. While of course they aren't first and there were some bumps, they were confident enough to execute on doing it _at all_.
Why would people put in the collateral in the first place?
Needlessly cynical. Human organizations of all kinds have problems, including governments. If you don't believe that government can ever function in a manner intended by the people it nominally represents, then everything is hopeless, since we (the vast majority of people) were also screwed over without representative government. I don't agree that one needs to conclude this. You can believe in government at the same time as believing that it sometimes (often!) screws up and/or is the subject of regulatory capture.
I know I was practically useless in my stealth bomber, but I had great fun futzing around deep in enemy space scaring their miners and leading response teams on wild goose chases.
Linear Algebra Done Wrong would be my pick among texts I have worked with directly. It's probably not the easiest, but it is certainly workable. Linear Algebra Done Right is more rigorous, and it is a standard text that has easily accessible solutions and a set of video lectures that may prove useful. Gilbert Strang's "introduction to linear algebra" series for MIT OpenCourseWare has also been recommended frequently, but I can't personally vouch for it.
In case you're trying to open the RFC links on the site, the IETF site no longer supports http and does not redirect to https, hence you see a 404 error. You can manually open https versions of the urls to visit them

JSON Patch - https://datatracker.ietf.org/doc/html/rfc6902
JSON Pointer - https://datatracker.ietf.org/doc/html/rfc6901

Tried PR'ing to fix site, but repo didn't seem active
Yeah sure, but so what? Was him getting two scoops of ice cream really worth covering? Something I like to ask people is, how did any of it actually effect your life? The only noticeable change in my life from his presidency was that I paid less in taxes.

I'm just tired of pretending any of it means anything anymore. Both parties won't fix the roads, both parties won't give us healthcare, both parties are pro-war. Why should anyone care who the president is?
The theory seems to be that the lack of minerals in RO water might serve to leech minerals from one's body. I think there's also some concern RO water might leech from cooking vessels and organic compounds in plastic tubing, etc.

I have no idea how real the risk is, and it all seems less risky than drinking unfiltered water in most areas.

But it's no headache for me to mix RO water with bottled spring water, since I prefer the flavor and it takes seconds.
You should add that you cap founder salaries at $250-$300k/year (if I remember your terms correctly)

If you’re a founder looking at TinySeed, what this means is that if your business reaches a level of success you can pay yourself over $250k-$300k through your W-2, you’ll either have to cap it there or pay the rest through dividends.

That said, this isn’t really a terrible setup if you plan to go down this route. The IRS takes issue when tightly held C-corps pay themselves large amounts via W-2’s because they would want to reclassify those as dividends. They won’t say what the “large amount” is, but I’ve been advised that its around $250k-$300k if you don’t have disinterested stockholders or board members voting on your comp.

As always, consulting with your accountant before making tax and/or fundraising decisions.
Afaik the legislation will force communication service providers (WhatsApp, MSN Messenger, ...) to scan any chat message for illegal material before it is encrypted and sent. The scanning happens against a known database of data fingerprints.
Not just that multi TB are not affordable, but also I can get >1Gbps throughout on my local network and essentially 0 latency - whilst my internet connection is max 1Gbps and effectively a little less, with more significant latency.

When using the file share for something like Lightroom it makes a significant difference.
Alright, I'll buy that argument. It still seems relatively small compared to the consequences imposed on the woman, but it's still a consequence.
Supabase recently shipped with graphql support that is very nice, it maps the query language to the relational schema in a sensible way. Without direct experience I understand this is similar to how Hasura maps it.

As for your preference for Hasura security vs Postgres' native row level security, of course your preference is entirely valid and may also be the best fit for your needs, but consider that RLS works for all database clients, not just Hasura, so if you have a heterogeneous db client environment and you want to enforce one central policy, RLS can do that but a Hasura specific policy checker can't.

Disclaimer: I work at Supabase but not directly on the GraphQL support.
iMessage doesn't require a phone number, it can use email addresses as well.
A long time ago, I was the PM on Firestore security rules, which was intended to solve both of those issues.

https://github.com/FirebaseExtended/protobuf-rules-gen was the closest we got: declaring types as protobufs (because Google, of course) and then generating both security rules to guarantee validity as well as client types that would match. I wanted to add proto annotations to do additional validity (e.g. add a regex to validate the phone number string was correct, do length checks on strings, etc.), but we never quite got there (not sure proto annotations are a thing externally either).

The short answer is that backend rules engines, either in their own DSL or bolted on to e.g. SQL, are pretty tough to get right, and have a super steep learning curve. IMO, AWS API Gateway with Lambda Authorizers get this most correct: it offers a programming model that people are familiar with (writing code to access external resources to make the authZ decision) with a clear performance tradeoff (ability to cache the result for a period of time).
I don't believe this at all. In any system where likes and dislikes have value to recommendations or whatever you have to identify and neutralize those who try to game the system. For example:

1. Sock puppets

2. Brigading

3. Bullying (which is really the dislike version of brigading)

That should be relatively easy to do at scale. Not perfectly but good enough. Once identified just count those votes as nothing. Present them as if the user has still pressed like or dislike but just don't count it.

Instead what Youtube has done has disincentivized people from disliking, which removes a very useful quality signal. Some will still dislike but less will if there's no feedback.

Dislikes provided a very useful signal to viewers about scams, poor videos, wrong information and so on. This provided a disincentive to post such information. So Youtube has removal that signal from users and effectively opened the floodgates to low-quality and scam videos.

That's just crazy.

And to pin that on "bullying" is (IMHO) ridiculous.
> Node.js is too easy to get started. This means that the pool of available programmers is not the highest quality. Runtimes like Go or Deno are still havens for the ‘connoisseur’ programmer.

wat

(Deno seems worth checking out though!)
> Maybe I think hookers should be a priority; sex is correlated with good health. You wouldn't mind if I took a couple hundred from you for my health would you?

Well, different priorities, and that’s fine.

But, let’s assume in a democracy, the majority of people decide to vote for free hookers and blow for everyone, why not :)
It shouldn't (directly) affect ProtonMail — they're based in Switzerland, which is not an EU member and thus not bound by EU law.

That said, it's possible that this could be implemented in a GDPR-like fashion, where non-EU companies offering services to EU persons would be required to follow these laws.

It's also worth noting that the EU and Switzerland do have some bilateral agreements [1] for single market access, though, which involves it adopting some required EU law to facilitate this access; however, that should not be relevant for this specific issue.

[1] https://ec.europa.eu/commission/presscorner/detail/cs/MEMO_1...
A10 Fusion chip from 5 years back, must be discontinuing the line
> This seems like the most indirect way possible to say "we're discontinuing the last iPod".

To me, the subhead "iPod touch will be available while supplies last" succinctly performs double-duty: (1) We discontinued iPod touch, and (2) if you want (another) one, this is your last chance.
I don't much care about the Heard/Depp case, it's a tabloid sideshow. The story the Atlantic author presents seems bad to me, maybe the ACLU made a mistake there.

Supporting Stacey Abrams makes absolute sense; she's done more work on the ground for voting rights than any politician at her level. As for Kavanaugh, the ACLU's explanation for their opposition satisfies me. https://www.aclu.org/blog/civil-liberties/executive-branch/w...
but how will the LPs brag to their friends about their brilliant investments?

sure 13% IRR is amazing, but it is not going to make my neighbor jealous
I dunno, I'm no cryptocurrency fan, but this style of sarcastic writing just rubs me the wrong way.

I absolutely think we should try to convince people to stop this kind of wasteful work, but belittling someone like this isn't likely to change their mind.
> -significantly raise the penalty for sexual child abuse

I'm sure some dark comic (Boyle, Gervais?) made a joke along these lines, but presumably the problem with this tack is that you end up with more dead children?

Biology, consensus-morality-abiding or otherwise, is a hard thing to ignore and little befearing the meagre laws of man in those that suffer from it.

I'm not sure what the answer is, but I don't see 'sterner sentencing' having much truck here, as much as I'd personally mete the death sentence for anyone raping kids or.. well, anyone.
I appreciate this idea quite a bit -- but it strikes me as a little too simplistic and conclusory for the topic at hand. It's not this simple, which is why I'm harping on "homework." I think this is because you're presently talking about interactions with individuals, and the main topic is about dealing with groups and their dynamics.
Can we not with these crappy growth hacker type articles devoid of substance?
I think you're right. Even this seems like a pretty minor sendoff for such a massively popular product, though.

Will iPhone some day be quietly, ambiguously sent to the grave in a similar fashion?
Which shouldn’t be niche these days. What developer (for example) doesn’t sit 8h per day 98 days of 100 plugged into a wall socket and using external keyboard/screen?

Seems it would be a more common laptop use case than actual mobile use.
Everybody is bad, except me of course, but in the end this is a little step in the right direction.

So... Why is a problem that a few less anemones don't die?. Conservation is not like zapping a magic wand and all is good again.

Even little steps helps and every little problem solved is one less problem that we have.
My key takeaways:

1. Remote work, no code, social media, and ecommerce platforms all make it easier to bootstrap new businesses from zero to revenue

2. (From Wikipedia) Mittelstand commonly refers to a group of stable business enterprises in Germany, Austria and Switzerland that have proved successful in enduring economic change and turbulence. The term is difficult to translate and may cause confusion for non-Germans. It is usually defined as a statistical category of small and medium-sized enterprises with annual revenues up to 50 million Euro and a maximum of 500 employees

3. There are hundreds of YC-backed startups stuck at ~$1M revenue that can predictably grow to $10M+ revenue with the right team and funding structure

4. Many VC-backed startups would be better as Mittelstands

5. My first business, Avomeen, is a classic Mittelstand

6. Mittelstands are already about one-third of our whole economy

7. Mittelstands can launch and get profitable for <$1M
Do people not version their API requests?
Is it?

EVE released an update today (as it does most Tuesdays, and also often the next day or two in the week if there are issues). Part of that update included significant changes to a number of blueprints, which are the plans needed to manufacture items in game. Blueprints come in two varieties: originals and copies, and you can perform various activities on them (manufacturing, research to improve efficiency, copying of originals to make copies, etc.). I wrote a tool which imports the game's Static Data Export (SDE) and makes various calculations about all of blueprints in the game (profitability, etc.), so I ran it on the SDE from the new update. Each 'activity' has a set of fields, like what it outputs, etc. But, the 'copying' activity is hard-coded to output blueprint copies. There is a field to say what it outputs (and that field is sometimes present in the data), but the value is always empty. Except today it was not always empty. A relatively obscure blueprint for a Taipan (a kind of upgraded rookie ship given away as a one-off in a past special event) apparently had the information for its 'manufacturing' activity listed as 'copying' instead. So now it claims that if you copy an original, you get the actual manufactured ship, and not a blueprint copy. This broke my tool, because I had put in a check to see if this field was ever non-empty, because if it was it might mean the game had changed in a way that meant something in my tool needed to be updated.

If you look at the information for the blueprint in game, it still claims that the copying activity outputs a blueprint copy. They hard-coded it, too. It now takes as input all of the materials required to manufacture the ship, though. In this case, there are no blueprint originals for a Taipan (if there were you could make an infinite supply of these one-off event items), and any copies that might exist can no longer produce the ship, because you cannot copy a copy. The only valid activites for a copy are 'manufacturing' and 'invention', except a Taipan blueprint no longer has a manufacturing activity and never had an invention one. So I updated my check to ignore this type, and moved on. Needless to say, this change was unrelated to any of the actual announced changes for the update, not mentioned in patch notes, etc. Just another Tuesday in EVE.

[1] https://wiki.eveuniversity.org/Taipan
An older (or new with discounts) iPhone SE isn't much more
"What one programmer can do in one month, two programmers can do in two months." Fred Brooks
Thanks for sharing the show! Here's a transcript for those who'd rather read:

https://changelog.com/podcast/481#transcript

And a couple audiogram snippets from the conversation:

https://www.youtube.com/watch?v=8-5WAKrt9GQ

https://www.youtube.com/watch?v=OE5LzZbojX8
Somewhat tangential; there's a company, clock-o-matic, that makes hardware and software to play carillons (or single bells) programatically using MIDI files.
Correct, and I trust you're intending to point out that the easy answer is also an awful one?
Power Up Docker Desktop with Docker Extensions
my impression is that some chapters/local offices are more focused on traditional civil liberties than others. but fashion is oh-so-hard to resist, especially in places like CA or TX that see themselves as being at the forefront of culture.

side note: "de jure" (by law) should be "du jour" (of the day). i just used this phrase in another post, a funny little coinky-dink (coincidence).
The moment this shit passes is the moment I straight up tell people I will not discuss about anything meaningful in our private online chats and if they want to talk we will have to arrange with proven FOSS tools.
This is a great post illustrative of the currently widespread misunderstanding of freedom of speech in the US. It's not about the powerless wanting to control the speech of the rich and powerful. It's about the powerful of one side wanting to control the speech of the powerful of the other side by weaponizing ignorant masses of the populace to do their fight for them in defeating the ability of their opponents to have speech.

It's a scary precedent and even more scary that so many don't see what's happening.

> Billionaires have been too blatant with media manipulation for everyone else to be OK with the rules as they are.

The powerful have controlled the media in the past WAY more than they do now or even in recent decades. Even the people gaining control of the media recently are outside of the normal historical rich as they're all of the nouveau riche class.

This is all one more example of the recent trend of not wanting to bring UP the less privileged but to tear DOWN the privileged to the level of the less privileged. The former is beneficial for society the latter is self-destructive.

The result of lack of speech is violence. If people (parts of the rich) can't voice their opinion with words they do so with actions by galvanizing people into violent actions.
The EU has always believed privacy only applies between private entities.
> You drew some lines in the sand, some rows and columns. The rows represented the digit magnitude (I, V, X, etc). The columns were for the operands. Two columns for a number. Why two? Because Roman numerals sometimes use negative digits.

Note that this is speculative. We don’t actually have descriptions of how Romans set up or used their counting boards, only indirect evidence that they did most arithmetic and accounting with them. The digits probably went left to right or right to left rather than top to bottom (there is some written account of IIRC Greek and Egyptian counting boards going opposite directions).

The more specific and complete evidence we have today is from medieval Europe, where typically digits were rows and tokens on the lines were used for 1, 10, 100, etc. with tokens in spaces between the lines used for 5, 50, 500. However, since counting board arithmetic was a skill taught directly as oral tradition, most practical algorithms (especially those used by specialists for more obscure operations) have been lost. We can do some additional speculation based on methods used today on bead-on-rod sorobans/suanpans from Japan/Korea/China.

We can speculate (from occasional examples in writing of IX to represent VIIII, etc.) that Romans may have (sometimes? often?) represented "negative" counts on the other side of a dividing line, but this does not have direct evidentiary support.

* * *

For more elaborate speculation about setup and algorithms, Steve Stephenson has done quite a bit of thinking about practical uses of counting boards. It’s impossible to judge how close this is to what ancient people actually did, but it’s interesting in itself, and IMO worth teaching to young children today as a complement to pen and paper (and mental) arithmetic. I think it is a better intellectual tool than the sliding-bead soroban. My kids use some nice metal buttons as counters:

https://ethw.org/Ancient_Computers
Some cameras can be physically shut with a lid. It’s a feature especially found at German providers like Bosh.
Yeah that's true, I think the async world is probably one that works for many.

For me, "working to live" doesn't resonate. I miss is the camaraderie and feeling of going to battle with people I like. For me, building something, and competing to win is what gives me the most meaning in life. I love my family, but there's something in me that wants to give more to the world. It's not for everyone and of course it's not the only way to live. But that's what feels right for me, and I miss it.
Why would you even what that? I get the opposite (phone without internet), but this has all the downsides for the development of a child without the advantage of a child being able to contact their parents or vice versa?
Here is the testimony of the ACLU for this trial, if you're curious about it. I watched it live and was beside myself. There are a lot more shenanigans than listed in the article. It's important to listen to the actual words spoken and changes in voice, see the facial expressions, watch the dancing around the questions, hear the contradictions.

https://www.youtube.com/watch?v=QRkLmKJCKbw
Microsoft exec on the iPod: “Apple is just so far ahead” (2003)
It was Louis CK.

Edit: https://www.youtube.com/watch?v=73Fy8zVp63w
> -- This is not accurate. Elsevier journals also charge huge amount of fees (around or over $1000 depends on the journals) from academics for submitting and/or publishing their manuscripts.

This is not an accurate description. Non-open journals journals have started to offer the option that you can pay that, maybe $1000 (varies a lot), publication fee if you want the journal to publish your article as open access. But this is optional.
> When Heard failed to pay up, Doughtery said, the ACLU collected $100,000 from Depp himself, and another $500,000 from a fund connected to Elon Musk, whom Heard dated after the divorce.

It doesn't really specify what the ACLU said or did to get that money. I'm curious what those methods were and if Depp (or Musk) were aware of the ACLU's involvement or the pay to play relationship between Heard and the ACLU.
Don't you fucking dare. I'll find the other 8 nerds across the world that play that game and never emerge again as I watch 5-second increments tick by.
> Or is it literally just the actual elected officials getting power hungry?

Pretty much. While no one supports it, few people see it as something that directly affects them so they don't fight it.