skysight-inc/HackerNews huggingface dataset:
> Ehr, yes? Shouldn’t we decide to avoid bad companies?

What I clearly meant was if that should be the only defense we have against such companies. Or should we also have things like food and work safety regulations, and anti-child-labor laws.

> What’s more democratic than a vast majority of people making such choices without coercion?

Consumerism is the ultimate democracy, voting for laws and representatives is tyranny...
I might read the authors book. But is there a difference between what common folk see as anxiety and what the author/medical/science community see as anxiety? It feels as though a lot of the article talks about what’s commonly called anxiousness, rather than what’s commonly called anxiety.

Anxiousness = I’m nervous and don’t feel good?
Anxiety = Tunnel vision, nausea, shaking, etc?
The halcyon days of the web, when the only people online were future gov.uk web developers.
> People don’t choose iPhone because they want those things, they choose iPhone because they want to be protected from them.

Hey, it’s me. A person that choose iPhone for a different set of things and absolutely don’t want to be “protected” from sideloading an open source YouTube alternative, or an open source emulator to play games from my childhood (I know, the horror).
This sounds extremely impressive! One question: Most of my nodejs code relies heavily on a custom wrapper I built around node-mysql ... for some rather complicated historical reasons, not node-mysql2. In general, what database modules are supported out of the box (besides sqlite3)?
Personally I find it subconsciously mirrors how we interact with classic HTML.

A button posts, a link gets.

As a step in the device setup, the button infers some form of enablement or configuration while a link is perfect for skipping.
Is it naive to think we could prevent the impending ecological collapse and international conflict with mass fusion power? Unlimited energy to remove carbon from the atmosphere, oceans, etc. You also don't need to sell the rich on a life of austerity, as that kind of electricity would allow us to continue and even increase our current Western way of life.
Here's a series of articles about client-server game architecture which I found tremendously interesting, and it's a bit more involved than what's explained in this article on cursor positions though I agree the basics are similar. It starts out explaining a naive approach, identifying the issues with that, and moving to more advanced solutions which involve prediction. The article also has a good explanation that goes a bit more in-depth to how the latency causes issues with the gameplay.

https://www.gabrielgambetta.com/client-server-game-architect...
That’s a strawman though.

Pansychism says that everything manifests qualia, not that you can’t change what kind of qualia with drugs — obviously you can, as anyone who has taken recreational ones knows. You can also change it with a bullet, though that doesn’t revert after.
To be fair, crypto currencies _are_ more useful than some pretty flowers. You can actually use it to e.g. buy stuff (though most of that is drugs) and to transfer money (though most of that is evading taxes). The use cases discovered so far might not be the most socially beneficial, but crypto currencies and blockchains in general do have some inherent value that's above $0. Where that value actually lies will only become apparent once the people trying to get rich hodling will have become disillusioned, though.
How Sea anemones launch their venomous stingers
Ask HN: How do you manage to work for hours on end without a break?
It will not be a benefit to consumers. If I have a choice of an Android phone or an Android-like phone with an Apple logo on it, I don’t have a real choice.
OpenSSH appears to have disregarded NIST, and made their own determination on a pq-kex.

Should NIST be disregarded?

NTRU-prime is not a finalist, but OpenSSH has decided that the NIST designation is irrelevant.

https://www.openssh.com/releasenotes.html

ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key
exchange method by default ("sntrup761x25519-sha512@openssh.com").
The NTRU algorithm is believed to resist attacks enabled by future
quantum computers and is paired with the X25519 ECDH key exchange
(the previous default) as a backstop against any weaknesses in
NTRU Prime that may be discovered in the future. The combination ensures that the hybrid exchange offers at least as good security
as the status quo.

We are making this change now (i.e. ahead of cryptographically-
relevant quantum computers) to prevent "capture now, decrypt
later" attacks where an adversary who can record and store SSH
session ciphertext would be able to decrypt it once a sufficiently
advanced quantum computer is available.
Fame is more diffuse now, there are far more famous people now but (almost?) no global stars

Actors (and politicians) who became famous in the olden days are the last of their kind

It will be interesting to see what comes next
Chrome doesn't have extension support on android. While there are many popular chrome forks on android, none of the ones I'm familiar with add support for ublock, rather they have some inferior adblocking experience instead. Firefox on android does have extension support, which while limited, does support ublock0.
Thank you for schooling me on this. I wasn't considering n^(100^100) problems.
Cider: Cross Platform Apple Music Client
Something that worries me, if someone cracks our current encryption using quantum computers couldn't they be logging everything we say right now and everything we say right now is actually unsecure to someone 10 years in the future?
No kidding. DeSantis is fucking grim.
Unheralded Mathematician Bridges the Prime Gap (2013)
You can get PiP and background playback with a simple JS snippet in Shortcuts

let v = document.querySelector('video');

v.addEventListener('webkitpresentationmodechanged', (e)=>e.stopPropagation(), true);

setTimeout(()=>v.webkitSetPresentationMode('picture-in-picture'), 3000);

completion()
Firefox's inspector says that the repeated ruler box (the div#whws element) is 10733900 pixels tall. At 100 dpi, that's around 5 miles or 8 km.
> don’t use unattended upgrades

> Build your images in CI job

I know container images should generally be immutable, but I would expect unattended upgrades to be mostly used on the host, not in a container, in which that management system doesn't really work (unless you're doing VMs where you can deploy immutable root images to the VMs as well, or some fun bare metal + PXE combination).
The Future of Mud
This is horrifying information. I was only aware of the C code that is 99% macros
I've been working on a _sort of_ competing product for about a year, Radar Chat. We just announced the API a few days ago:
https://docs.radar.chat

There's some overlap in features but certainly Radar Chat doesn't have any of the drawing functionality.
>> "The only way for this to work is if individuals maintain their own historical record."

Why's that? We have long had effective institutional preservation of knowledge and historical records by public and university libraries. Why shift to the inefficiency of individual, amateur preservation rather than support skilled professionals to do it right?

Right now, I am having a hard time tracking down a 2002 or 2003 CD-ROM (New_LocClim) that may have contained the weather station data underlying the FAO/GPCC rainfall product. It seems far more likely that a library or other institution, rather than some random person, would have preserved that information in a way I can discover and access.
> People already find water brought in from _Phoenix_ which is _13_ miles away to be too expensive.

Too expensive for what? Too expensive is a continuum.
Panpsychism doesn't claim that everything has complex sensory perception, higher reasoning, memory, etc. The hard problem isn't about any of those things, which indeed have clear neuronal correlates and can easily be turned off.

The idea is that there's always "something that it's like to be X", where X can equally be a conscious human, an anesthetized human, a dead human, or an electron.
You can use the hg-git extension for that:

https://hg-git.github.io/
Sure, there were about as many as there were dollars in the federal government's scientific budget at the time.
But not through the mountains. See also the Pennsylvania turnpike.
I personally think NIST should be disregarded, but you can disregard NIST and still end up with CRYSTALS-KYBER as your default PQC KEM, on its own merits, which can include the fact that NIST's standardization spurs so much implementation of CRYSTALS-KYBER that it becomes a de facto standard in addition to a de jure standard. (Same for signatures, and so on).

People with qualms about NIST might also reasonably have qualms about AES. And there is a common cipher that people use outside of AES --- Chapoly. But it would be downright weird to use, like, Serpent or Twofish; it would be the cryptography equivalent of a "code smell". Chapoly and AES are the de facto standards, and OpenSSH supports both.

Again though: my question is just, what does this (frankly weird) Bernstein complaint have to do with any of it? Bernstein himself is a NISTPQC participant; he's on one of the (large) winning signature teams.

(I think all the technical details here are super interesting, but not especially motivating; I'm not a cryptographer and you should disregard me as well, but my basic take on QC crypto attacks is "Rodents of unusual size? I don't think they exist.")
Convinced my friend that he has Syphillis,made him paranoid for a day
Why is this your goal? It's actually pretty hard on your body over time. I recommend taking a brief stretch-get-up-and-walk break at least once an hour or so.

I always (arrogantly) disregarded this advice as a young'n because I felt fine at the time. Twenty years later I now have a seriously arthritic neck / back. Very painful everyday.

Caveat emptor.
“You can learn more about someone through an hour of play…”
Cheating for in a game suggests a poor character. Imagine how one might behave if the stakes were material.
I'm constantly surprised by the number of local restaurants (including some who have been around for many many years) who have no website at all, and very little online presence at all. Sites like Google Maps, Uber, etc just auto-add them themselves, or get them to sign up directly, and at most they'll have a Facebook page their kids set up for them or something. There's also dodgy people out there who absolutely do set up fake websites for restaurants to middle-man the orders and take a cut from inflated prices, and the restaurant doesn't even know it's happening (we personally know it happened to a local restaurant when we asked them about it their site and they had no idea what we were talking about, and said they don't do delivery). So basically... I wouldn't be surprised if someone set up a fake restaurant for a bunch of companies, and Google/Uber/etc auto-add that site assuming it's their official site.

Or not. Unless you ask the restaurant personally you probably won't know, but I'd see it as "possible".
AstraLocker ransomware shuts down and releases decryptors
My reservation just popped, I was in the August -> September group until it popped. I bought maybe 6pm on the day it went on sale due to heir massive issues with card processing and so being locked out for 4 hours due to "fraud checks".
Radiation oncologist*, this is far outside my (radiologist) scope!
One of the developers, yeah. Bit of a complicated and messy history: https://distrowatch.com/weekly-mobile.php?issue=20090323&mod...

In short: John Andrews created DSL. Robert Shingledecker started contributing patches and got brought in as a developer; he created (among other things) the MyDSL extension system and a bunch of other goodies. DSL started falling apart organizationally, and Andrews "exiled" Shingledecker (in the latter's words) - so Shingledecker carried on with developing Tiny Core Linux instead.
You probably don't make them much money anyway.
I installed this recently after hitting an especially egregious sponsor segment. It's good, while it lasts.
The M2 Air seems to have a considerably more comfortable design, which would be my main goal if I’m not buying a 14 or 16-inch Pro. Besides that, the Touch Bar has given me so much pain over the years. My 2018 Pro had parts of the Touch Bar OLED unit black out permanently even on a replacement model.
A billion here, a billion there: A new book tells the story of J. Paul Getty
I don’t know why this was downvoted - it has the ring of truth. If you could wave a magic wand and do away with fossil fuels tomorrow it would bring untold suffering on the world.

We have to wind the engine down while shifting the work over to a parallel electric motor that we’re in the process of building.
The glue is providing much of the structural strength. The fibers are providing tension to hold it together.

A similar approach has been used to make gears out of cloth. Stack cloth, cross-stitch, impregnate with resin, compress, cure, and then cut a gear out of the resulting block of material. It's one of those things people did before plastics.
I have some old Teletypes with a few cloth gears, and you can see the woven pattern on the sides.
Vishy is as high-class as it's possible to get. Beyond reproach, no matter the situation.
> I still remember when all we cared about were the technical contributions that people made.

Well yeah, but then Hans Reiser killed his wife and ruined it for everyone.
Yes. That's, for instance, why people say the KEM problem has more urgency than the signature problem; a PQC KEM is what you need today if you're worried that someone's archiving your TLS sessions so they can break them with the quantum computer their government promised them for Christmas in 2034. Even if your KEX involves a signature, your adversary can't time-travel back to 2022 to break it with their 2034 scooty-puff quantum edition. But if all you've got is classical ECC and RSA, you're in trouble.

If you assume the PQC KEM doesn't interact with classical ECDH, you might want to get some kind of PQC KEM rolled out as quickly as you can, in a dual construction with ECDH; the worst that happens is, your new KEM isn't quantum-safe (or anything-safe), but your ECDH holds up. But that's (if you believe in quantum attacks on crypto) still better than no PQC KEM at all.
Wild.. Would love to see a documentary about this.
> anonymous blacklist of devs to avoid and code samples of their shit work.

Sounds like Github Copilot.
wonder if bun also has a different approach to security when it comes to installing packages and running their scripts and/or using file system at runtime, e.g. not giving access to the whole machine's file system like Node?
It's the continuation of the same line of work that long ago gave us nuclear power, nuclear bombs, nuclear medicine (MRI and PET scans, cancer treatments). We don't know if this line of work has / will have practical value anymore. But we have been at this for such a long time, there is momentum and it's maybe difficult to stop and reorient.

There are opinions, that we should stop and reorient: https://bigthink.com/hard-science/large-hadron-collider-econ...
Wow, another buggy Ubuntu patch breaks something. Why don’t they just stick to what’s upstream?
C does not make any guarantees about timing. It's not considered "observable behavior" by the standard.

The usual way to create constant-time code for C is to inspect the output assembly for a number of (compiler, options, host system, target system) tuples and verify that it will take constant time on all of them. Even that isn't enough in general, since there are other side-channels. The "Hertzbleed" attack exploits variable execution time in "constant time" code due to CPU dynamic frequency scaling being dependent on the input (secret) data. That effectively means that power side-channels are remotely observable.
> Debuggers and profilers already exist for the developers of applications to know these things.

One big difference between an intermediate and an expert programmer is that an expert develops their intuition for how the program they write will compile and run. Can you guess correctly how fast, or how slow each function will be? Or what the optimizer will do a good or a bad job at optimizing? Can you tell before you've written your code when avoiding allocations is going to speed things up, and when it won't matter?

Debuggers and profilers honestly aren't very good at giving you a "zoomed out" view of whats going on in your program. Each tool shows you a specific aspect of your program, and hides everything else. For profilers, thats usually what the CPU spends its time on. For debuggers, the execution path of a single function. Godbolt shows how the optimizer works. And so on.

But from my perspective, having more tools which show different aspects of my code is almost always a win. I never know ahead of time which perspective will let me double my program's performance, or halve memory usage. Writing code is easy. Understanding code is much more complex.

So yeah, from a software development point of view I think this is neat! I want to give it a try on some of my programs because I expect to see my mental model animated back at me, and I anticipate being surprised. This looks cool!
An opinion I've been afraid to share: DTC has failed, overall
I find I have the opposite problem. I zone out coding and 3 hours go by and I haven’t taken a break, walked around, or even had a drink of water. I think remaining focused is a mixture of a couple things: low/no BS work culture, low meetings/distractions, and ownership over code. I think having ownership leads to wanting to make improvements more often, which makes me more motivated to work more. Really, I should be more strict about taking breaks. It’s better for your health in the long term.
Maynard is absolutely incredible. He's up there with Terence Tao[0].

[0] https://www.quantamagazine.org/james-maynard-solves-the-hard...
These “pimps” serve as surrogates for the cammer, (consensually) impersonating them so that the cammer’s account can engage with more subscribers.

I wonder how convincing something like GPT-3 would be at this. I give it 5 years tops for 100% AI OnlyFans accounts to be commonplace, complete with artificial personalized livestreams.
Can't take it with you. People that have these kinds of things for decades, it's usually not about the money
if we talk about biology, absolutely not, but most of high school students won't finish basic physics, so this make sense in some region
Do you have a commercial option? Does anyone know good alternatives?

What forecast models do you use for Australia?
> About half of the plaintiffs were either fired or quit, while the rest still work at Tesla.

I guess it should be at least halfway convincing to you then.
What do you think of crates like subtle[1] which bills itself as "Pure-Rust traits and utilities for constant-time cryptographic implementations."

[1] https://crates.io/crates/subtle/
You can define it that way, but I do not. I go with a more widely recognized definition; e.g. via M-W or Wikipedia.

I can appreciate a similarity, of course. But a person can hold a belief / value a worldview (e.g. representative democracy) without believing in a supernatural power.

Conflating similar words is often an intentional rhetorical strategy. Perhaps you are trying it because you hope to conflate political philosophy with religion? But to do so glosses over key differences between them ... e.g Which are descriptive? Which are normative? What is the nature of truth? How does one seek, find, and assess truth?
This seems like the kind of thing that automated testing should have been able to catch. It’s not like running Docker is a small use-case these days.
Can this be measured? Does panpsychism predict a difference in worlds that have this property versus those that don't? I don't think it does, but maybe I'm missing something. If it's impervious to empirical evidence then I don't think it has sufficient rigor to be considered a viable hypothesis.
Ask HN: Why do you use a VPN?
Almost every YouTuber I see is sponsored by some type of VPN company, so it's obviously a lucrative vertical. I've been on the internet since the late 90's and still can't wrap my mind around any reason to pay for a VPN service aside from nefarious purposes.

Hoping to hear what your particular use case is to shell out that monthly fee.
Pro-freedom technologies that could change the Internet
Why did you choose iPhone? Are you confident that EU bureaucrats can do a better job at keeping those reasons in place than the company that build the platform you chose?

If sideloading was more important to you than the experience afforded by iPhone, why wouldn’t you choose Android?
Almost everyone works in JavaScript.
This is ridiculous, we're using BA.1 clinical data to approve BA.4 and BA.5 shots that treat a different strain.

Why not just use the original clinical trial data and say the shots are 95% effective like before? Everyone knows how well that turned out.

Lets not mince words here: we're going down the path of giving out a completely untested and unverified vaccine.
"openssl security team accuses debian of not performing proper testing"
Sounds like a click-baity way of saying "social media manager."
Kiwi Browser on Android works with uBlock just fine, and I think Brave's built-in adblocker also stopped youtube ads for me, but I'm less sure of that one.
“ That same month, the Ontario Teachers’ Pension Plan (OTPP) announced its investment in FTX Trading Ltd, supplying at least $50 million into a meme-inspired fundraising round — raising $420.69 million from 69 investors. FTX hasn’t crashed like Celsius Network just yet, but the investment is putting teacher pensions in danger.”

They must’ve put the new guy on this one
I felt (maybe without justification) that LOTR shoplifted a lot from the Bakshi LOTR. Which makes what happened with The Hobbit even weirder, because people already managed to adapt it reasonably well for the screen; you wouldn't think "much worse than Rankin-Bass Hobbit" was a likely outcome for the money spent.
Rechargeable batteries more sustainable and safer than lithium at half the cost
Absolutely HHGTTG for me. Not the "best" books I've ever ready but easily the ones I can re-read the most and still get a laugh or discover something new (or something I at least forgot and get to re-enjoy).
Spokane, WA Is Poised to Broadly Allow Missing Middle Housing
This phenomenon is called something like "rockets and feathers" of gas prices. I don't think anyone knows exactly why this happens, but I think it has something to do with the fact that gas stations all want to sell their gasoline at the highest price they can and rising oil prices let them raise their prices. But when oil prices fall, competitive forces act more slowly. If you run a gas station, you won't drop your price by $1 per gallon just because your costs have fallen by a $1 per gallon. You'll watch the station across the street drop his price by 5 cents, then you will drop your price by 7 cents, then he will drop his by another 5 cents and so on. The two competing stations will gradually eat away at each other's profit until the gas is back to being priced basically at cost.
I’d also be curious how much of this is simply the influence of modern sun protective practices. Are actors apparent ages naturally changing more slowly than in the pre sunscreen days?
Npm 7+ can read and write yarn.lock

https://github.com/npm/cli/blob/latest/workspaces/arborist/l...
As an anecdote of one I know who Pitt & Aniston are but not Holland or Zendaya
don't trust they have higher pressure or work hard so everything is ok... they choose it by themselves.
Yes. This is why the work is being done now, and there will be an urgency in moving PQC algorithms from academia to commercial use. Everything that has been stolen in data breaches up until then will be broken once QC are viable.

Good news is that we are likely more than 10 years away from QCs being useful enough to do this.
What does a black hole feel like? Is it happy? Is it sad?