skysight-inc/HackerNews huggingface dataset:
Sure, but people generally have a problem watching extreme senseless violence perpetrated against innocent people, which is more analogous to what happens to the animals that carnists eat.
I think the idea is that you can choose a very long and complex password, because you won't have to enter it so often once you enable TouchID. Without TouchID, most people are tempted to choose passwords that are easy and quick to type.
Is this still worth it on a 2022 CPU?
Zuckerberg also welcomes “fair regulation” where he gets to define “fair” as good for him and not others
Last I checked, the CEO has not been seen since end of 2020.
So true, when I say in engineering school we had a subject called project management and we were taught that you have to write the documentation and everything first and it should be done in such a detail (including variable names and such) that you can give the project documentation to three different programmers and receive the exact same product from all three.

I always hated this approach because of the reasons you stated.

I love the quote from that German hacker Fefe: "Coding is an explorative process"
The war on cash boils the frog slowly.

Soon you won't able to have savings in cash at all.

No wonder people are excited about crypto.
I haven't tried it, but "do you have English notes? I'm going south tomorrow" ought to work anywhere in Scotland.

(But on the rare occasions I've had a Scottish note, I've not had trouble spending it in England.)
It's adding rather than switching. I doubt Apple has services present on most website, but Google definitely does even without ReCaptcha, such as Analytics, Adsence, etc.
Approximately nobody hates promises in Javascript.
The full article is a good read too. Such a great writing style.
The cheap VCPUs Hetzner offers aren't dedicated. So what's the performance like? Does anyone know how this compares to AWS Lightsail?
Do SUVs count? They're one of the top selling vehicle classes in most countries, and aside from BEVs, the only one seeing significant growth. China has seen higher adoption of SUVs over the last decade than the US.
Does anyone know what are the main new features of Ocaml 5.0?
I have a document covering all the basics of our tech stuff in the house in case I’ve died or are otherwise incapacitated. Everything from what our router is and how to use it to where our bitcoin is.

I put it together after my wife wrote a brief “if I’m dead here is what’s important to me” and I was reminded of a friend who passed several years ago and left his family in an awkward tech state because of his nerdy idiosyncrasies.
There are numerous stories (maybe urban legends) about people suffering from aforementioned psychiatric issues after waking up amidst surgery but being not able to remember it afterwards. Curious if it is true or not, cause that casts a shadow on “no memories no problem” idea.
I think the advantage for a restaurant is the contracts with large scale suppliers. You could do the same with hardware and software perhaps, but the advantages and disadvantages would look different.
If you like, you can stop making assumptions and only do statements but that doesn't change anything.

>"this action was authorised by the fingerprint scanner matching the admin account"

Okay, so? It's the same thing as "this action was authorised by a keyboard entry sequence matching the admin account prerecorded sequence".

How is this any more useful? If anything, you better know and understand your assumptions and introduce other measures if you suspect that some of those assumptions are no longer true.
This would also work with 2 fingerprints
It's 100% anecdotal, but I know a huge number of guys who have been divorced and have had perfectly healthy children in their 40s.

I'm sure there are studies to back it all up that it's super bad to have kids in 30s/40s but damn, a lot of people I know had parent in their 30s and they seem ok?

Edit: Actually I'd almost say that I'm envious by how well these older fathers children turn out. They just seem to be more chill, the kids sleep better, the parents generally have more money to deal with problems, they have more time for the children.
Why was my comment removed? This happens too often. Is there a mod that keeps deleting my comments?
US Military/Intel TEMPEST program covers protection against some of these. The Wikipedia article's references includes links to relevant research.

https://en.wikipedia.org/wiki/Tempest_(codename)
Speak for yourself, I haven't had a thought in years. I'm allll banana.
Bitcoin losses are piling up for companies that added crypto to balance sheet
It sounds like an interesting (the horrifying kind of interesting) story looms behind this post...

But besides this, yeah, this may also be a valid case for some simple recovery strategy.
> I’m looking at different java to js compilers (teavm, j2cl) because I don’t want to write a frontend apps business logic part in js/ts

I've seen people do this (rewrite a Java app in JS) and then go completely off the rails, instead of, you know, writing it just like they would have (read: already did the first time) in Java. Bonus points when it's followed by the conclusion that JS sucks. It hints towards irrationality on their part. It's as if the structure and order imposed by Java is the _only_ thing keeping them on the straight and narrow, because they themselves can't be trusted to act responsibly and simply follow the same principles on their own when no one is around forcing them to.
> Constant time" in cryptography means that there is no information flow from secrets to timings

If "constant time" cryptography were achievable don't you think we'd have it and there'd be no more timing attacks breaking encryption schemes?

"Constant time" cryptography is a mathematical abstraction, a goal, like "unbreakable cipher" and "unbreakable hash" and "frictionless surface." They don't occur in practice. This article breaks itself breaks a "constant time" cryptography with a timing attack.

The problem is, as this paper demonstrates (along with many others) coding up a constant time crypto and especially making it portable over time and architectures, is nearly impossible. Caches, chip nuances, power draw mixed with power scaling, and other chip architecture complexity, contribute to attacks. Compiler changes, architecture changes (some even unpublished), architecture variety, user settings, even flaws in any part of the chain, all contribute to making holes in crypto in the real world.

This paper [1], for example, is one of many that shows the "constant time" goal is likely not possible, and is certainly not possible in portable code.

Here's [2] a paper tying to make simple AES "timing-attack resistant" - and you note they did not claim they could make it "constant time" because they realize that is not possible. "Timing-attack resistant" is at least professionally defensible.

Here's [3] a paper referencing [2], trying to make systems more resistant to cross process leaks using Intel SGX to hide things that leaking.

And here [4] is the attack on Intel SGX that shows there are still exploitable leaks.

This type of chain is not unique.

If you want to read literally thousands of papers on such things use google scholar or surf the cryptology eprint archive. Both make searching on such topics pretty easy.

We could go on and on. The literature of crypto is littered with such threads - "constant time" crypto is the goal, but so is "unbreakable encryption" - both are mathematical fantasies that do not play out in practice.

[1] https://arxiv.org/pdf/1711.08002.pdf

[2] https://link.springer.com/chapter/10.1007/978-3-642-04138-9_...

[3] https://arxiv.org/pdf/1702.08719.pdf

[4] https://arstechnica.com/information-technology/2020/03/hacke...
there won't be anyone willing to finance it and there won't be any customers willing to pay money for anything...
> Touch ID specifically requires a live finger.

I remember reading about one school which implemented "live finger" readers.

How did kids hack it?

Polymer clay and a gummy bear.

Put your finger on clay and wait for it to dry. You will have your permanent mirrored fingerprint.

When required fingerprint press gummy bear against clay and then against the reader. As gummy bear holds charge, can even be cut thin etc. there is little chance to detect that it is not a real skin.
I think that’s fair criticism of the situation but i would also point out that if i was in business X and some others were acting in a way that risked the public not wanting to participate in my product due to the behaviour of others, i too would welcome some oversight to manage these bad actors from damaging my reputation.
Am I the only one that opened this hoping it was a dang post?
I was about to update the pointing and got "502 Bad Gateway" on cloudflare.com
Oh, I remember this, but I didn't know it was Ursula von der Leyen, now president of the european commission.
I would assume that an agile process will rely on Markdown, but then it some point does it get (irreversibly) committed to a more conventional document format.
Sure, but what is the practical risk of someone trying to target my Intel Nuc home server sitting behind my firewall with Spectre or Meltdown attacks?
The pitch for consumers:

> Matter is the seal of approval that says smart devices work reliably together—taking the guesswork out of the purchasing process. That trust allows you to choose from a wider range of the brands you love, and brings you the comfort of a secure and seamless connected home.

Which is indeed a major pain point with IoT so far: purchasing things that work together (instead of only cooperating in their own ecosystem and with Alexa). Of course that's more or less what HomeAssistant was already trying to do, but Matter might make this more appealing for "casual" users.
Genital mutilation is abhorrent. End of story.
Being old isn't a bad thing it just means you've seen these things before and can critique them. Obviously if you missed the boat the first time round this all feels fresh and new. This is also why the past is mined because it's full of successful ideas that haven't been recently repeated and as a commercial strategy for producing commodity titles mining the past avoids a lot of the hard work.
It's also flat over 10 years, and lost in the last couple of month, meanwhile inflation is raging at 8%.

I'm far from condoning the crypto trainwreck, but gold does not act as a safe haven in these conditions, it usually tanks along with everything else, just less maybe.

And mining gold is probably not much better than mining crypto, and is often produced under similar 'less than open and enlightened' regimes.
HN upvoting garbage anti-crypto takes, what's new?
Super cool, it took me 2 minutes top to submit my app! What's next for the project?
SaaS Pegasus – The Django-Powered SaaS Boilerplate
The effect system is here, and it can already be used. However, the integration within the (surface) language and its type system is still a work in progress.
Thus to explore the use of effects, you need to use the experimental Effect (https://github.com/ocaml/ocaml/blob/trunk/stdlib/effect.mli) module which gives you access to low-level primitives for defining effects, installing an effect handler and resuming a continuation. The module will be considered as experimental in OCaml 5.0 and subsequent version of OCaml 5 will refine the integration within the language. The objective here was to decouple the multicore runtime work from the higher-level language design questions.
These devices are something like one tenth the price of a regular passive RFID tag.
downvoted (i.e. dead) comments are not always visible, I believe you can set them as visible in settings, but I am not sure if it is gated behind a karma threshold.
As far as I understand, the problem is caused by massive networks of malware ridden computers and bots.
Yeah, that's because Vitalik writes his content in good faith.
Make Linux fast again.

also known as

forgot how fundamental broken the security model of many cpus is

also know as

who cares if it's my gaming PC and I'm not a hight profile target

or

omg, don't do online banking on that system
That mindset could be used to justify all sorts of barbarism. The beginning of humanity's downfall was when we invented "society"
Yes yes yes a million times yes.

I need this engraved into the skull of every tech lead that claims the code is the documentation.

The engraving will be appropriately referenced.

It will also link to another engraving that documentation is good actually.
As long as the vulnerability protections are on by default then this sort of thing will only affect people looking to tinker. I like the minimalism of course but the blogpost breaking down the parameters is obviously way more useful.
This feels ignorant of the fact that all the interesting information on your computer will be accessible without sudo.

touchid is actually better than a password here, as it prevents malware from using sudo without physical confirmation from you.
Dentists ? Lawyers?
It snitches regarding what kind of device and operating system you're using. It currently seems to be limited to Apple devices, but this is the sort of thing I could see Microsoft and Google going for. Put another way, if everyone running unmodified corporate operating systems proves it as a matter of course, it effectively snitches on anyone who isn't.

Running Linux? Rooted Android? Anything else weird? If this gets popular, you might not be able to access most of the web with it, at least not without constantly filling in CAPTCHAs.
Twenty years ago was 2002. What exactly happened during the Bush administration to make people worship poverty in the USA? Is the aftermath of the Iraq war so large?
Most people are not aware that the sea level rose with more than 120 meters in the past 20k years: https://en.wikipedia.org/wiki/File:Post-Glacial_Sea_Level.pn...
Essentially, OCaml 5.0 is OCaml 4.14 with a fully rewritten runtime which introduces support for parallelism (no more global runtime lock) and an experimental version of algebraic effects.
Which is exactly why Home Assistant and Matter exist... If you're not going to read the post why even bother commenting.

My Home Assistant instance has only a few devices that are in anyway linked to a third party but even then they have locally accessible API's. Zigbee, Z-Wave, Thread and Matter are all great solutions for this.
I am really enjoying Crucible of War by Fred Anderson, it's about the 7 year war (1756-1763?) and essentially how it lay the pretext for the American War of Independence but is often overlooked by modern teaching. For me it strikes the right balance for something that has citations for almost everything, but at the same time is fluid to read and you can get into a groove with his battle and scene descriptions. He also manages to deal with bias rather well, which is a tricky thing to do and is what many books that you cite have struggled with (that and rigor of writing), especially when dealing with the assymetry of information available about the time (much more writings from the British/french side than the Indian). He includes this fact in his writing so that you don't get the impression that this is the whole picture. One more thing I see as another potential folly for many pophistory books is breadth. Many tend to take much to big a bite of history and attempt to get it all in ~800 pages, that's not going to happen unless you do some major glossing over at some parts. A book that's considered "good history" I've noticed will be shorter in focus length (not to be confused with book length), if the author wants to write about a whole century or two, they'll split it up into several books. Overall I think it's a great book for someone that wants to get into more rigorous historical text. And I think it's important to remember that not everything has to be fun, in the end what we're doing is reading past events, some events are going to be interesting to you, others not so much. Find your interests and read history books about that, it'll do some of the "fun to read" legwork.
Completely agree with your requirements.

Check the video on the article.

Latency and refresh are pretty good.
I find it so interesting that there is such a huge chasm between "what we know can be done" and "what we do in practice in industry".

How can it be that in so many programming languages, adhering to a contract means nothing but "these methods have similar calling signatures" and "I pinky swear I implement the semantics of std::io::Write " ?

Haven't the Ocaml people entered the next metaphysical level of understanding? When they speak of "types" they don't mean "uint32_t" or a class.
OP is mad into scalping.
No, it is fundamentally different, because firstly, it requires the client device to be locked down enough - and to monitor your activity enough - that it can provide attestation that the user is human, and secondly, it ties that attestation to an Apple ID so Apple knows exactly which Apple ID accessed which website at what time.

ReCaptcha requires neither of these privacy-invading or gatekeeping things.

If this becomes standard, this is the end of the open web as we know it, because you will only be able to access many websites if you are using an approved, locked-down browser in a locked-down computing environment, backed by a tech giant who can provide the attestation and ID service.

If you care at all about the open web, this must be resisted at all costs.
Yep, exactly. That's what the grandparent post [1] meant with "Because a lot of men like to swipe right on nearly everyone and buy passes which get them unlimited swipes".

This is where the majority of Tinder's money is coming from, so I doubt this will be ever be curbed.

[1] https://news.ycombinator.com/item?id=31749379
This would add noise to the measurements which should cause an exploit to take longer but it wouldn't prevent the exploit.
Okay, but if the cops get to the sudo prompt they already have access to all of your data...
Tabnine ships new code-native AI models, passes 1M developer users
RIP Internet Explorer
Agreed on pay gaps but There is plenty of evidence that women and minorities are interviewed at different rates and differently In Practice. That’s enough for my statement to be true (in the sense that they end up being paid different amounts because they do different jobs because of the discrimination)
Attacking religious belief should not be considered within "bigotry", outside of situations like ethnically Jewish people (and their religious beliefs and practices should not enjoy special protection, but their actual ethnicity should).
Monks, of all people, recognize that building moral character is not done because it brings material rewards, and in fact its quite the opposite.
That's the modern definition of inflation. In crypto circles, when referring to crypto inflation the classic definition is used, which was increased supply of a currency.
Thanks that makes sense, but many of my removed comments will have been upvoted for hours or days prior. So it’s definitely manual removal. Happens 50% of the time.
I kind of feel it is going to end up being used in food packaging, marketed along the lines of smart-packaging. Not sure how well the sensor market is and if some could be built in if not already, but it sure does seem to be that such cheap plastic chips only lean themselves being a cheap disposable item.

What value they will add, may well vary, but a few pennies upon many items they would be targeting, well those items mostly borderline latent-landfill at best and whilst it is cheap upfront. Is it cheap to recycle or more costly? Equally the enviromental risks of the ones not recycled is often overlooked and easy to say something is recyclable when that depends upon every single one being recycled. many recyclable plastic waste in the environment already, so I'm somewhat of mixed feelings about this in the respect of how it may well pan out being utilized.
Actually understanding economics might be very helpful in making money... In a way that is straightforward, accessible to everyone and also eliminates certain investment risks...

> Global macro strategies as a group have historically done well during periods of market crises. In each of the three largest peak-to-trough drawdowns of the S&P 500 since 1998, macro was the best or second best performing sub-strategy of the HFRI Index. [1]

[1] https://thehedgefundjournal.com/macro-investing/

[2] https://en.wikipedia.org/wiki/Global_macro
In this case it is like you are in business X and having personally ruined the reputation of the group you call for welcome oversight to manage bad actors...
The mentioned NY Times article:
https://archive.ph/wTH92
People had 15 months (for £50 notes) and 2½ years (for £20 notes) to spend or deposit these notes, or longer when you consider the time since the new notes were first announced.

As well as the Bank of England, most banks will accept old notes from their customers.

Easiest reference: https://www.thesun.co.uk/money/8662482/old-notes-circulation...
it's nearly never someone targeting you, it's most times dining targeting thousands of arbitrary people at once

if you are especially unlucky the atack comes with you opening a website or similar

and honestly firewalls often only help against atacks against services with open ports running on your system, once they are in your system they have a lot of ways to circumvent your firewall (assuming it's a desktop system or similar, mainly not a single service system)
On the good intentions side, treating others with respect should be a standard. Theoretically you never ever have to worry about violating this rule.

In reality, this will be abused to high heaven to punish political opponents. They were already doing this, but it will now become worse.

I find it quite interesting to see Japan's government cause the multi-decade crisis they are in. Instead of fixing the crisis they continue to make terrible decisions that only serve to harm themselves further. Yet I fully support their actions, it's their choice.
Why does this need iCloud and not just use the client?

I have three issues with that design: 1) privacy, 2) Apple banning your iCloud account for some reason without recourse, 3) and this further gives BigTech more control to wall off part of the web.

And it looks like they went and did this with CloudFlare and Fastly without requests for comments like most web standards?
Massachusetts Court Throws Out Gig Worker Ballot Measure
The threat model of sudo is a little different. You already have authenticated access and sudo is requesting elevated access. Even a static button on the computer would provide benefit since it alerts the user a program is attempting to obtain elevated privileges.

For comparison, Windows default configuration is a yes/no dialog (UAC).

If an attacker had unelevated access they probably stand a pretty good chance of getting elevated access on a workstation (replacing files, putting a shim in front of sudo, stealing SSH keys, access tokens, cookies, etc) anyway (if the regular user has those privileges)
Good idea. Also needed as part of a disaster recovery or continuity plan. Eg every business should have one.

For those who use a domain with a catchall on it for various purposes... do you have a plan for dealing with what happens if you die and all those many many aliases inadvertantly get handed to some new domain owner?
Just woke up with a slight hangover. Life is amazing. I will have some coffee and play with my beautiful child. Then I will go surfing. The good life is free from envy and pity. Full of admiration of those who have qualities that lead them to success. Jeff Bezos company was beautiful in the way it sent me gifts I needed for a relative’s graduation. I am grateful that he had the wisdom and courage to start it.

Admiration of others leads us to the good path. Envy and pity are tools of the darkness.