skysight-inc/HackerNews huggingface dataset:
Ask HN: Will online voting require to trust crypto experts?
I voted online for the first time this morning, mostly by curiousity.

I got a receipt with 2 huge hex numbers and one large base64 blob. The receipt also had a link to an online website to verify that my vote has been registered, and that it will be counted. The website is relatively easy to use, I copy paste my use base64 blob and I get a green success message. It's source code is also available online, in OCaml.

Now, I have no good understanding about all of this work. The information page is helpful to get a vague idea of the concepts: https://verifiabilite-legislatives2022.fr/informations.html However you actually need to be a crypto expert to understand it fully, and I'm not one. "More experienced readers may be confronted with a more technical description in English." https://hal.inria.fr/hal-01576379/file/ZK-securityproof.pdf The paper contains crypto math proofs, it looks fancy and has nice concepts such as homomorphic encryption, zero knowledge proofs and so on. At my level I can only say that my base64 blob contains a JSON document consisting of a few numbers, one huge hex number with homomorphic properties, a schnorr signature, and a public key of something.

Moreover, the system has strong limitations because as thex explain, you cannot know that the candidate you selected is the candidate actually registered in your electronic vote, and they cannot ensure that all the registered votes are legitimate.

The traditional voting system for French citizen is a transparent box with paper voting ballots in an envelop. You can count the votes later in a group of random citizens, I did it twice personnally, and it's very easy to understand. Most people in my country side village could trust the process with no prior knowledge.

I find the online voting part convenient, but I'm afraid people will not trust it because they cannot understand it.
Good point, I guess I would code, just in a lesser amount, and focus more on the big picture.
One under-appreciated aspect of async is that it gives you a nice API for composing operations.

Yes, async can be harder to introspect, especially with a debugger, and it introduces function colouring.

But in return it gives you a clear type-system level indication that computations are not pure and don't resolve immediately.

You also get simple tools to combine, map/modify, join and potentially cancel individual asynchronous tasks. You can in theory get a similar API with threads and/or channels, but I've never seen anything that was anywhere as convenient as async.
Very much so. For the past 10 years, facebook has more or less dominated the market for everything related to rural places and smaller towns.

This could very well be a geographical thing - but where I'm from, Norway, FB is the de facto platform for anything social in communities. I've heard that in other places of the world, people used WhatsApp, Discord, etc. - but where I'm from, it's FB.

Local classifieds, local hobby groups, local community information, local sports, culture events, etc.

Luckily there seems to be a push in moving people elsewhere - but with all the older folks primarily using FB, it's going to be hard. I think it's just fine for things like hobbies, classifieds, and such - but real infrastructure shouldn't use FB as their main platform for sharing information.
possibly CWE-306?

CWE-306: Missing Authentication for Critical Function <https://cwe.mitre.org/data/definitions/306.html>

Looking at the CWE-306 wording, this does not look like the right CWE, but OWASP ASVP 3.7.1 points to this CWE.

OWASP ASVP 3.7.1 <https://github.com/OWASP/ASVS/blob/v4.0.3_release/4.0/en/0x1...>

3.7.1
Verify the application ensures a full, valid login session or requires re-authentication or secondary verification before allowing any sensitive transactions or account modifications.
CWE-306
There's a link somewhere here in the comments to the full version.
It won't be like a global holocaust but it will cause massive economic and social disruption mostly in places that didn't cause it.
https://archive.org/download/AppleNewtonROMs
Lenovo laptops are designed to be taken apart and every part can be purchased.
I think of it this way: keywords are like symbols, but they survive serialization/deserialization and macroexpansion intact, so you don't need to be extra careful with quoting to prevent automatic evaluation of the symbol to some other value. And since keywords are used in code very often as keys and enums, it reduces cognitive load immensely.
But you have to specifically go looking for this. GitHub doesn't notify you when you open a new session from an unknown browser.
tluyben2 thanks for your tip. Setting boundaries is very important, and not allowing bigger companies to squeeze you is also important.
No, solid.js is building reactive graph at runtime and in theory should be able to also detect static inputs at runtime (not sure how much effort he put into reactive graph optimization techniques). Personally, nowadays I prefer S.js/solid.js approach, but it has different tradeoffs, like it is essential to understand the difference between solid.js and React/Svelte/lit/etc :)
Open codes / The world as a field of data
Indeed :)
The moment i learned about io_uring I got hooked up immediately.
People like Jens, Pavel are the type of innovators that make sure Linux stays on top of its game for the next generations.
10x is possible, but maybe 3-5x is more realistic (even for non-FAANG).
> I don't have a phone

Get a yubikey[0], that way you don't need a phone.

0. https://www.yubico.com/products/
brudgers thank you for your ideas and hints!
For Emacs users there is a nice csv-mode on ELPA. It has aligned display, field based navigation and some basic sorting and manipulation options. And you have access to all the usual Emacs goodies of course.

Another option is to import into an org-mode table and then re-export as csv when needed.
Possibly it was not so 6 years ago when the repository was initially made? Of course considering that this is the Gitea fork, their goal might not be the use for Github.
10x more than academia. I’m a PhD in mineral physics turned Big Four MLE via startups and I earn about 10x what I would be on if I had stayed on the academic track.
You don't need a phone to have multi-factor. You presumably have a PC if you're contributing to a package, so you can use a computer-based OTP generator, like Authy.

Sure, if your computer gets owned, it won't help, but it's still much better than nothing and practically free.
This is heartbreaking in so many ways. I'm a trustee of a charity that relies on WhatsApp and Facebook to organise itself and a huge sceptic of Meta and keen for us not to rely on them. However, in local community groups it's hard to advocate for something because "better privacy" when the opposite argument is "everyone uses it".

Meta's tools are somehow simultaneously inclusive and very exclusionary.
oxml thank you for your advice!
Croatian EV supercar maker Rimac raised 500M euros
I'd say it depends a lot on the environment you'd be landing. I was hired to cleanup some clean room software and boy did it need cleanup. Simply by implementing some best practices and pretty much all what today goes as devops (this was 15 years ago in Switzerland) the thing got so speedy that a company got interested in buying it, so my contract was extended to add the final perks to close that sale. I refused the offer to join the buyer company and that was it for me. Ah and my name landed second on a paper, the only non-PhD on the list. All in all it was an exciting stunt while the pay was in line with what others said - 30% under the market average (they were even surprised why I wanted it).
It doesn't make sense because competition is supposed to lower prices regardless of how the money was obtained. If competition is driving prices down then you would expect that people are falling for the veblen goods trap which has nothing to do with loans.
Can these be encoded in the score itself? If no, maybe we should improve the score encoding?
This is thinly veiled racist fear mongering from a right wing blog designed to look like a legitimate news organization. Nowhere in that linked slide deck is there anything about "adjusting grading scales to account for the skin color or ethnicity of its students."

Thanks for sharing this URL - I'll make sure to automatically flag it every time I see it on HN.
There's a lot to unpack here.

First, this is a very clear example of how the manner in which Facebook operates has a very disproportionate effect on women. My wife followed me and gave up social media, and found it incredibly difficult, much more so than I. It was also notable that many people told me that I was doing the right thing, etc etc, but the general response my wife got was "how will anyone keep in touch with you?"

>It's not really an "optional" social network if large swathes of your social circle have started using it for essential life functions

Putting aside the trite observation that, for two years, young families being able to socialise was considered absolutely non-essential, Facebook is as essential as you make it. Ever since it took hold in universities, people have asked (with varying degrees of irony), "how do you exist without Facebook?". The answer is - just fine.

>and no, telling all the mums at the playground about how Facebook's ban policies are bad and we should all use the Fediverse instead is not going to work for the average person.

We generally don't mention it, and get on with having a good time with people (which includes arranging for social continuation - ie, meeting up again).

>it's more like a utility and should be regulated like one.

The idea that an online echo chamber is essential to life, is very depressing. Community exists in the incidental and in the repetitive rhythms of life.

Edit: The response to this is very interesting. I am very glad I returned to my native country instead of trying to build a life in the US, as it seems that something invented as a way to keep up with college girls has become deeply ingrained as a social necessity in a very short space of time.
LAZR

But I guess a lot of patterns hold.
> the only holdout I know of is MySQL due to Oracle being Oracle.

I am (partially) responsible at the MySQL team for Docker images. I however don't use Mac myself. The only thing I am aware of is that for 8.0.28 we were a little late with ARM images due to technical issues, but that should be resolved.

But mind there are different sets of container images: `mysql` is maintained by Docker, Inc. where we only have limited influence and `mysql/mysql-server` which is maintained by us.

I see for instance

https://hub.docker.com/layers/mysql-server/mysql/mysql-serve...

Any specific issue with that? I'd then work with the involved teams to get it resolved. (Preferebly issues via bugs.mysql.com, but I'll check responses here as well)
Not with the uberjar approach.

Many projects choose the easy way out when packing their deliveries, and to certain extent Java is having a Python 3 moment with anything past Java 8.

The cynic in me sees that as the main reason why Docker was adopted, HP-UX was already having containers in 1999 and no one was rushing to package Perl into them.
stef25, thank you for your comment and hints! I think that I always try to "underpromise & overdeliver.", I've learned it the hard way.
I like your advice or hosting their project, for having a steady recurring income.
Right. Op is saying an unsafe program that’s paying the bills and we can fix later is better than being a Rust evangelist on hn because your startup never got off the ground.

Somewhere out there, a startup is writing a browser in pure safe rust, and there won’t be any memory errors in it because they’re never gonna take on any tech debt and it’s never gonna ship.
It seems this is something that you really want repair shops to be informed of even if they have never heard of your brand. Perhaps putting text to the effect of "Full schematics are available to repair shops under a confidentiality agreement. Please contact foo@bar.com" on the first page that the QR codes resolve to would greatly improve communications with repairers.
At $job we're using the DACI framework for this kind of architectural decision making and it works really well!

The framework defines roles (driver, decision maker etc) which helps with the process.

So a document (with a template similar to an RFC) is made by the driver. Contributors read and comment on it, then after all questions have been answered, a final meeting is held to make the decision along with the approver.

When the decision has been made, we go with it!

It's a really smooth process in practice, with very little friction. Way better than endless debates over and over on the same topic!

https://www.atlassian.com/team-playbook/plays/daci
Sure! So when testing you want a deterministic environment - starting from genesis, couple accounts, the ability to build or wipe state, etc… sometimes projects use multiple chains, so maybe Ethereum and Polkadot along with a bridge between them. Building this out in Docker, managing it in CI, and building a test framework to allow devs to easily complete actions like sending a tx or waiting for an event to occur in a block has been my bread and butter for three years (and taken me from a median salary to a top 1% rate). I’ve recently moved to another industry but it was good fun.
I'm finding that hard to believe, and I'm a massive NetBSD fanboy.

In 2006 I was running about two dozen web servers, and only one of those was NetBSD - the rest were all Debian.

The NetBSD one was my personal server, that lived in the water tank cupboard of my flat hooked up to my thumping great 10Mbps cable modem.
Hancock is a fraud, a charlatan, and his insights are worthless.

https://rationalwiki.org/wiki/Graham_Hancock
Small plug for http://WorkOS.com (where I work).

It’s an API for easily adding SAML, SCIM, and more. Currently being used in production by Vercel, Planetscale, Webflow, and +200 other apps.
For my use, lack synchronization with other organizations' or person's calendars is indeed a limitation with calendar.txt. Adding events manually is obviously slower than just clicking accept. Adding that feature would likely mean tradeoff for reliability, security and simplicity.

Synchronizing my own calendar.txt between my own devices has worked very well for me using git and synchthing. I also find it very easy to audit correctness of synch, thanks to plain text and version control.

For recurring events, I have found calendar.txt much easier for my use. Many recurring events have small number of events in any given year. Also, there are often exception or two, and some entries get more specific over time.

I have found adding recurring events much faster with a text editor than any of the calendar programs I've used. As the author of calendar.txt, I'm of course biased here.
Photographic Programming
Light Pattern is a programming language where one communicates with the computer through photographs instead of text.

abstract: https://direct.mit.edu/leon/article-abstract/48/4/375/45993/...
Updated Tips for Working Remotely
You don't often see such clear examples of where industrial design impacts the evolution of human practices.

It seems like the feedback loop works both ways - the available paddles inform paddling style and intended paddling style informs the design and manufacture of verities of paddles.

It would be interesting to explore where else these kinds of observable mutual feedback loops might occur.
First time I hear "Let's Get This Money!" is a thing.
The grim part is that global warming is still too cheap, so people don't take it seriously.

Even the regions that are most affected by it and could do things to better prepare, are carrying on as business as usual. Yes, heatwaves kill a few hundred people, but apparently that's "fine".

Ambitionless short-term local-maximum thinking rules the world.
I looked after dozens of those, both the Raqs and the Qubes, in the earlyish 2000s. I want to say, about 2003-2004ish?

The Raqs got through fans like crazy, for some reason. I think I went through all of the servers twice in two years.
> Several towns/counties didn't seem to have websites, or didn't put the events on the ones they had, instead preferring to announce them on Facebook.

Yeah, no government agency should publish anything (however trivial) exclusively over a private platform. As far as I'm concerned it should be illegal and anything they do post on social media should always be a mirror of the same content posted to a public platform and retained according to the laws that agency should follow for their documents.

People should never have to worry about a private company being a barrier between them and their own government, and no private company should have the ability to pick and choose who can view what the government publishes, or to secretly modify that content (perhaps selectively), or to remove content that should stay part of public record.
tobinharris thank you so much for your great comment and advice! I imagine it is very hard managing such a large agency. I'll take your advice into account when starting.
Author of calendar.txt here. I found the lack of synchronization a downside of calendar.txt. Drop me a line or add a comment to calendar.txt page if you end up experimenting with synch.

A tradeoff with sync to external calendars will be reduced simplicity, reliability and security. Depending on your use case, it might be worth it.
Yes, crescendo looks like a < stretched horizontally based on the length of time that the rise should happen, decrescendo is >.

There are musical symbols for pretty much every common (and uncommon) instruction, and any gaps are typically filled in with textual notes.

However, conductors are tasked at interpreting the piece, which sometimes they might want a different sound, or perhaps the orchestra has trouble adhering to a tricky bit of notation. Any number of reasons will result in extra added notes jotted down in the scores directly.

Given that sheet music is often pre-printed or otherwise very difficult to edit, this is the next best thing.
If you are allowed to comment on this: Is there an official expiry date when the publishing of the schematics will no longer be an issue? If yes, when?

I'm still very happy with my Framework :-)
I didn't know about this controversy and checked Wikipedia[0]. Funny thing is, the first information is what it is called in German ("Prioritätsstreit"), indicating it's somewhat relevant in Germany and yet there is no German Wikipedia article about it.

There is a small segment in the german article about Leibniz[1] and even less in the German article about Newton[2].

[0] https://en.wikipedia.org/wiki/Leibniz%E2%80%93Newton_calculu...

[1] https://de.wikipedia.org/wiki/Gottfried_Wilhelm_Leibniz#Prio...

[2] https://de.wikipedia.org/wiki/Isaac_Newton#Mathematik
It has been five years. Has WebAssembly since been corrupted, e.g. by incompatible implementations or extensions or something?
> I can’t be the only one in this boat

You're not, and the phenomenon has been known for a century.

"Lenin is said to have declared that the best way to destroy the capitalist system was to debauch the currency. By a continuing process of inflation, governments can confiscate, secretly and unobserved, an important part of the wealth of their citizens. By this method they not only confiscate, but they confiscate arbitrarily; and, while the process impoverishes many, it actually enriches some. The sight of this arbitrary rearrangement of riches strikes not only at security but [also] at confidence in the equity of the existing distribution of wealth.

Those to whom the system brings windfalls, beyond their deserts and even beyond their expectations or desires, become "profiteers," who are the object of the hatred of the bourgeoisie, whom the inflationism has impoverished, not less than of the proletariat. As the inflation proceeds and the real value of the currency fluctuates wildly from month to month, all permanent relations between debtors and creditors, which form the ultimate foundation of capitalism, become so utterly disordered as to be almost meaningless; and the process of wealth-getting degenerates into a gamble and a lottery.

Lenin was certainly right. There is no subtler, no surer means of overturning the existing basis of society than to debauch the currency. The process engages all the hidden forces of economic law on the side of destruction, and does it in a manner which not one man in a million is able to diagnose."
From a macroeconomic theory perspective that is completely incorrect. There is zero empirical evidence for this. Interest rates have been zero in Japan for decades and the biggest effect they had was keep inflation near 0%.

Cheap capital lowers the prices of all non-monopoly goods. Monthly payments on your mortgage are lower which reduces the cost of housing, it becomes cheaper to produce food or anything that can be produced in arbitrary quantities. It is only the monopolies that go up in price because they offer rent seeking revenue which is a direct result of their monopoly nature and actually distorts the market. Higher stock prices mean it becomes advantageous to start your own company.
Is he putting it down?

He's arguing about speed and saying why the approach of lit-html will always be faster than virtual dom.

I think it's fair since OP is trying to get a faster vdom to also expect discussions about different approaches and I'm glad the previous user gave his two cents.
Rocket.Chat, Matrix, and the EU Digital Markets Act
> Apple is notoriously secretive about employee OSS contributions

Really? I see a lot of contributions from Apple engineers to the LLVM codebase
"User denied the request for Geolocation."

Would it be easy to make this tool work for people who don't want to mess around with browser settings? Or would it be easier for me to learn how to tell the browser where I am?
Is it in the top 10 most widely used distros?

I don't think so.

That's why it falls under my #0: niche distros.
Have you tried Tridactyl [0] as a replacement?

[0]: https://addons.mozilla.org/en-US/firefox/addon/tridactyl-vim...
Traditional voting also relies on "trust"; in the sense that various parties involved have to follow the laws that guide them for things to work.

You could do online voting without cryptography simply by relying on a legal system that enforced secrecy and fairness by threat of legal consequence.
the printer has been on since... early 2000s, then after 2008 QE started...

how come high inflation did not happen earlier?
https://web.archive.org/web/20021229134102/http://epiphany.m...

"[Galeon fork] Epiphany's main goal is to be integrated with the gnome desktop. We don't aim to make epiphany usable outside Gnome. If someone will like to use it anyway, it's just a plus. Ex: Making people happy that don't have control center installed is not a good reason to have mime configuration in epiphany itself."

https://web.archive.org/web/20051028022736/http://gnomedeskt...

"As such, we've reached the conclusion that we have to change our approach if we're going to avoid Galeon getting stale or bit-rotting"

"Epiphany has a bunch of active maintainers who are handling the things that we struggle to do for Galeon. But you say: Epiphany doesn't fit
my needs or I'd be using it already! True, so our proposal is to bring Galeon to Epiphany."