skysight-inc/HackerNews huggingface dataset:
As someone who lived for a few years as an expat in Brazil, you got really lucky. I spent a lot of time on the streets, with nothing but a short, a t-shirt, and havaianas, and I speak Spanish and Portuguese, and even so I would try to avoid crossing a Rio favela as much as possible.

We are talking of a city where mobs close a highway tunnel with automatic guns, stop traffic, and rob every car stuck in the tunnel. On broad daylight. Life is not worth much, neither theirs nor yours.

Maybe before heading out, memorise a few no-go zones next time?
Can you run this headlessly from the command line? It would be powerful to generate videos at scale.
Looks like you can't:

"Note: The official installation image does not support Secure Boot (FS#53864). To successfully boot the installation medium you will need to disable Secure Boot."

https://wiki.archlinux.org/title/Unified_Extensible_Firmware...
https://bugs.archlinux.org/task/53864
Then he did it wrong, because the point of the article is that systems signed with exactly this key are not trusted anymore. Only different key is trusted, and that key is used to sign Windows only and nothing else.
Link is broken.

https://www.bloomberg.com/news/live-blog/2022-07-08/former-j...
I bought a Pinebook which was bricked almost instantly by a child gently tripping over a lead. The build quality was terrible, it wouldn't have happened with any other laptop I've owned in the last 15 years.
Yeah they make a loss on it, but probably not a huge one. Call it half a year to a year of fees.

Can you tl;dw? I'm not watching 40 minutes of a video that has DEBUNKED in the title.
Yes, dumb mistake, fixed. Still looks good but no longer quite so implausibly good.
This is about using Secure Boot, not disabling it. The author wants to boot third party software, signed by Microsoft, but Lenovo disabled this unless you go in the firmware settings: they only allow software from Microsoft, not signed by them for third parties. As said elsewhere in the thread, it has no real use, except maybe delaying an attacker by a few seconds (and then again, that attacker won't access any data, so…).
> But what’s also important is decoupling the mechanism of distributing or syncing the data (for access from different locations/clients) from actually working with the data. Basically, this is the separation between file system and application.

Is there any good FOSS middleware to handle this? CoreData (based on sqlite) can sync data to an iCloud CloudKit container[1]. Firebase can do this[2]. And Couchbase-lite-C can do it with JSON documents[3].

Couchbase is the only system I know of that does this transparently and is open source across the board. But for some reason no one seems to be using it.

[1] https://developer.apple.com/documentation/coredata

[2] https://en.wikipedia.org/wiki/Firebase

[3] https://github.com/couchbase/couchbase-lite-C
Comments like these seriously haunt me. How many people there are who really think that?
Yowch! I stepped on a fox minifig (not sure it’s technically Lego) with pointy ears and it drew quite a lot of blood. The thing was basically a caltrop. >.<
Linux drivers for Apple M1 GPUs are in progress:

https://rosenzweig.io/blog/asahi-gpu-part-5.html
You're right in the sense that the supply can't actually increase, but I have to say that Central + Southern Europe (but Italy in particular) has so many of these kinds of cute, walkable, quiet-but-fun towns that if you want a lovely trip where you're not arse-to-elbow with other tourists you're spoiled for choice.
Gun Buybacks were incredibly successful in Australia after the Port Arthur Massacre and now we have f*ck all gun violence. Funny that.
But I want to use Secure Boot and TPM2 features. Just not with Windows.
Commodore 64 basic doesn’t have min or max functions.

DEF (https://www.c64-wiki.com/wiki/DEF) would be the way to do this, but I don’t see how to write a performant version in a single expression (you can’t use IF as an expression. You could cast to float, compute some specially chosen sigmoid function, and round to int, but that’s slow)

A USR function (https://www.c64-wiki.com/wiki/USR) would work, but that’s cheating.
I wish the people who are apparently extremely easily offended by this would tell me what’s so bad about my opinion.
Thank you for the explanation. It is clear for me. https://www.panoramacharter.me/
> No "ordinary" user was ever compromised by accidentally installing Linux making his computing less safe. This is complete fantasy.

That's incorrect. There is malware out there that can only work if you don't have Secure Boot enabled. The setting OP didn't disable, Device Guard, prevents the abuse of 3rd party signed bootloaders, another attack vector basically.

This is a step up for most people that ever stay on Windows and doesn't affect the slightest someone who wants to install Linux, they still have to boot from an external device or wish to change a few UEFI settings.

> Of course this is a mechanism to further advertise locking down general computing and nothing else. It is not new and security is a bad excuse.

Framing Secure Boot as some kind of Secure Boogeyman is not conducive, brings the discussion into tinfoil scenarios without any potential practical outcome (nobody is going to remove SB or DG).

As long as Linux vendors or people can get or enroll their own keys and disable any potential presets, it's a step up in security for everyone.
Unnecessary to your lifestyle. You probably live in a city with no family and want to dictate everyone elses life which is typical.
No I just don’t want my private messages scanned.
A bit off-topic, but Windows changes boot order for Windows first every time you boot for Windows. This is so annoying when you are regularly booting to different OS.
Former PM Abe Shinzo dies after being shot
You can drop Pipewire, and use alsa + dmix for system-wide sound mixer.

However, if you are also using ungoogled Chromium from Arch, you are doomed to use Pipewire.
Out of curiosity, which Mac-only games are you interested in?
Oh yeah absolutely. Any docs advising people to set a password for security should also advise people to set the "Trust the Microsoft 3rd Party UEFI CA" parameter appropriately.
For accusing others of being highly emotional, this post is incredibly biased and doesn't hold a fact check.

- the Greens are the party most opposed to brown coal out of all German parties.

- Gas is far less emissions intense than most other forms of fossil fuels, so it is a good transitional source of energy.

- Germanies nuclear plants were built around 40 years ago, with a lifetime in mind of 40 years. The idea of arguing they can run longer because nothing happened in the last 40 years is preposterous, and betrays a complete lack of understanding of how industry works. Not only are the designs lacking essential security features, every single part was produced with 40 year lifetime in mind.

- the three plants that where built in 87 are going to continue to run for now.
I’m curious as to what time zone you’re in. Or if there’s multiple people behind your account. It’s pretty impressive how omnipresent you are :).
>>The stupid one was the car theft.

I know someone who had their car stolen in Manchester, basically the police said they don't even have the time nor the resources to come out, they gave him a case number and said to let his insurer handle it.

And the thing is, two days later he actually found his car sitting in a parking lot of a supermarket somewhere, rang the police, and they said "....ok? what do you want us to do?". He said that he would expect them to come out and look for prints or whatever - they said they don't have anyone available to do this, if he still has the keys he should take the car and be happy it was found.

I honestly think in UK unless it's an actual murder your chances of getting a successful intervention from Police are close to zero. They are just way too underfunded and understaffed, I do remember reading that some places like Manchester have like one policeman for 100k people. It's impossible to do effective policing with that kind of force.
Argh. And if you run it in Docker like I do, I have to relearn the lesson that taking down the container, losing internet, then trying to do a ‘docker pull’ is a a bad idea.

Sometimes I feel the attraction of some spyware mesh system for home networking.
Sometimes it's nice to shout into the void a bit when something irritates you - I can't say I haven't ever done the same :)
Yes.

Others are doing the same, probably to take some control for themselves, but have a look on the recent conversation about GTK5 being Wayland-only.

It is the same playbook they used to force Systemd adoption all over again.

So, yes, they are still using the same playbook.
I doubt anyone can "guarantee" how things will be developed in few decades. Noone knows for sure how the policy will transform societal relationships.

Presence or absence of weapons doesn't affect if someone will use it or not. Getting or making a weapon is relatively easy task even in Japan.

Growing a cohesive society where people use other means to cooperate instead of assaulting everyone who disagrees with their opinion is most important
Yes, I do monitor the asahi progress. Great progress there. Optimistic, but will take a while.
Ugh, why did I have to read that? >.< I had a similar experience walking through mud and finding an old rustic tin can with its lid sticking out. Sliced up a wide shallow flap of skin, I think I still have the scar…
Genuine question: is consulting for compliance exclusively the possibility for big four type firms,or can't we do this at (traditional not scale up) start-up style? I'd buy your pre money common stock off your comment alone and the similar applies to numerous others I keep reading here.
I feel like this is exactly correct. Police are so underfunded that outside of London they won't even come out to speak with you unless the crime is very serious. But break ins, car/bike theft, petty issues - forget it, no time or resources to do that.
They’re against it.

> the entire realm of software encoding schemes has been poisoned by patent royalty schemes for far too long

That’s a statement against - not for. They’re saying the companies are doing a good thing and the EU trying to stop them is a bad thing.

> I cannot think of anything worse for the state of media encoding on the web than regulator intervention to maintain that status quo

Also a statement against - ‘can’t think of anything worse.’

(And they’re right.)
Rusty Arbor Press – Restoration (2019)
Yes, we all already understand the context.

One could argue that distrusting platforms signed with MS's 3rd party certificate offers marginal additional security but that doesn't contradict the original point made about defence in depth.
Webauthn tokens such as yubikeys? Seems like what half the tech industry is doing.
SSH Cheat Sheet
> hey only allow software from Microsoft, not signed by them for third parties.

Not the entire picture here, that option is a part of a more holistic set of measures Microsoft calls Device Guard (part of Secured Core)

> it has no real use, except maybe delaying an attacker by a few seconds (and then again, that attacker won't access any data, so…).

It does prevent potential abuse of the signed shim that's not very difficult to get signed by. E.g. nobody can install the signed shim to rootkit a Windows installation.
Time was I would use sun.com to check if the network was up. These days, like you, I use HN.
Although in this case, the suspect had worked for the Japan Maritime Self-Defense Force, so it wasn't just your average person off the street. At least I imagine that being in the navy would entail much more domain knowledge about firearms than your lay perosn.
This argument could and was used endless times here when it became clear that companies like google and especially facebook are not OK in any meaningful way, and never will be. Few left, but most enjoyed that sweet 300k+ paycheck even if the know very well they can't buy morals for any amount of money. You don't hear about these companies struggling to find talent, so unfortunately its not that effective.

There is only one way to live if you want to be long term happy with who you see in the mirror, and countless ways otherwise...
If this results is Sisvel's favor, I hope all Youtube stops serving VP9, AV1 or any newer codecs in Europe instead of paying up a single penny to rent seekers.

"Hi Europe, enjoy your low-res bitrate starved H264 stream, for eternity."

or for 30 years or so, after all HEVC patents expire and all of its rent seekers gave up on it.
Reliable Linux laptops in spite of Lenovo.
The thing I find most interesting about the Venice Biennale is that it is an event that really embraces the whole city. While the main exhibitions are hosted in the Arsenale and the Giardini venue, there are so many events scattered in gardens and palaces that are otherwise closed to the public. It's a unique chance to experience some hidden gems a tourist would never be able to see.

If anybody is interested in exploring the Biennale Arte, I have built a non-official app that helps you navigate all those events, [0]. It's a hobby project, so please be kind! If you go and want some tips, feel free to get in touch.

[0] https://apps.apple.com/gb/app/biennale-arte/id1620771374
I've been happy with my X13 Gen 2 AMD 32GB. Even has a nice screen at 2560x1600@400 nits. Keyboard isn't as good as my ancient Thinkpads, but still better than anything else on the market. I agree though that Thinkpad offerings can be all over the place, and quality varies.

Although, to be honest, I probably would have given up on Thinkpad/x86 entirely if they didn't offer AMD, because in my experience Intel mobile processors are terrible for pro work. I got so fed up with my T480s i7 thermal throttling at pretty much any task that I gave it away.
They could start by not making Linux more difficult to use. Then we would not have articles like this.
If you're using Arch you're probably willing to set up SB with your own keys.

(Heck, I use my own keys on OpenSUSE even though my distro signs the kernel, because I want to use systemd-boot instead of mokutil since the latter is broken on my motherboard.)
Could you please describe the attack vector that permitting third party boot loaders allows?
There should be a rule that all background check companies for SOC2 audits must be certified SOC2 themselves.
I don't think longer tenures are as positive of a signal as you're making them out to be.

- You can essentially have 1 year experience repeated n times.

- People with very long tenures can have a narrower view of what software development is. By switching more often you get to be exposed to different domains, teams, managers, ways of working and in a way you can mentally abstract over them instead of learning the process of 1 specific company. At some point you get "better at the company" instead of better at software development.

- Staying at a place for a long time doesn't mean that you get to make important long term decisions. Getting to make important decisions doesn't mean that you're good at it.

- In a competitive dynamic market some of the people who don't switch are people who can't switch because they just aren't that good. Obviously not true for everyone but that's the group you're sampling from. If you think of it as having a bucket of balls to pull from at random, the bucket with the people with short tenures will contain some people that are flaky, unreliable, get bored too easily, are difficult to work with and can't keep a job etc. And the bucket of people with long tenures will contain some people that aren't good enough to land a new job, or who are essentially institutionalized.

And I'm not even arguiing that shorter tenures are better - you could make some arguments either way - I just don't think that making hiring decisions based on tenure is a good idea either way.
I know next to nothing about dark matter (and, come to that, gravity), but reading about the topic still fascinates me. In this article, I was particularly struck by one paragraph:

> Mond’s main postulate is that when gravity becomes very weak, as occurs at the edge of galaxies, it starts behaving differently from Newtonian physics. In this way, it is possible to explain why stars, planets and gas in the outskirts of over 150 galaxies rotate faster than expected based on just their visible mass. But Mond doesn’t merely explain such rotation curves, in many cases, it predicts them.

Reliable prediction by a theory is pretty persuasive, surely?

AFAIK, a lot of effort/resource has been put in to finding dark matter. (Most recent article I read was, er, today [1].) But so far, no smoking gun. Exploring alternative theories can't hurt.

I hope that this item gets re-upped by HN's powers that be. I am keen to see this discussed by commenters with the chops to wade in with informed, authoritative views.

[1] https://www.theguardian.com/science/2022/jul/07/dark-matter-...
To me as a developer:

Linux people: convert to Linux - it's better.

Microsoft: I got you, let me bring Linux to you.
Reading a book will keep you awake for the night, but staring at a screen won't?
computers should never boot by default from USB sticks or external storage in general.

it's a very dangerous attack vector.

EDIT: writing from a Lenovo laptop where Linux it's the sole OS installed.

Allowing Linux to boot was a hundred times simpler than allowing DOOM to run on my 486 with 4MB of RAM.
If we (foolishly) ignore the one true source and read the wiki:

Stephen Hawking incorporates the saying into the beginning of his 1988 book A Brief History of Time:[20]

A well-known scientist (some say it was Bertrand Russell) once gave a public lecture on astronomy. He described how the earth orbits around the sun and how the sun, in turn, orbits around the centre of a vast collection of stars called our galaxy. At the end of the lecture, a little old lady at the back of the room got up and said: "What you have told us is rubbish. The world is really a flat plate supported on the back of a giant tortoise." The scientist gave a superior smile before replying, "What is the tortoise standing on?" "You're very clever, young man, very clever," said the old lady. "But it's turtles all the way down!"

https://en.m.wikipedia.org/wiki/Turtles_all_the_way_down
I've used (and had a recommendation of someone who really struggled with sleeping) https://www.ptsd.va.gov/appvid/mobile/insomnia_coach.asp and it was really good. My sleep wasn't so bad, but this did make a big difference and helped reset a few things around sleep. Worth a look for anyone interested
That does not magically rewrite all previous commit messages, although apparently the improvement is present https://github.com/nim-lang/Nim/commits?author=Araq - most of the total ~25 comments made in the last seven months since December 9, 2021 have more or less legible titles.
This is not about the presence of Secure Boot, but about distrusting 3rd party CA's. For example, my Dell XPS, with default Secure Boot settings, will boot official Fedora builds. This will not.
Compilers that did this would break a lot of the constant time code.
I'm imagining it's a similar situation with Intel too, which explains why 90% of their models have Intel mobile processors, despite being outperformed by AMD.
> That's not possible for nuclear which provides base load - in fact they need to be shut down during heat waves

Google "load following nuclear" and also read the article in Wikipedia [0]. That will help stop false information. Summary: Nuclear power plants in France and in Germany operate in load-following mode and can go from full baseload to nearly "running on idle" in 15 minutes if needed.

[0] https://en.wikipedia.org/wiki/Load-following_power_plant#Nuc...
dang doesn't sleep
Ask HN: Code documentation is all right?
Currently researching the question with very limited industry experience myself and wonder: does everything ok here?

Complete and clear documentation of large legacy codebase is how common exactly in your experience?

Did API-documentation tools in the era of microservices aka Swagger/Postman/etc. eliminated the question completely?

My priors:
- Clear documentation on high-level decisions and architecture is a good guide
- Well docs on particular piece of code / service saves ton of time for other person to work with - to update or debug.
- It's actually more probable in your company/team that code won't be documented on level considered "good"
- The trickiest truth: it's rather boring to create and maintain documentation yourself and rarely rewarded career-wise, even inside one team.

So:
lots of newbees to the industry (see-me) won't have a knowledge of those processes from college; likely won't see them implemented in their team/org; likely won't see any career benefits from implementing the process as it won't seem great at perf review. Cycle ends here.

What am I missing in the view here?
Shinzo Abe: former Japan prime minister confirmed dead after being shot in Nara
A signed rootkit created by abusing either an existing signed bootloader or shim. Of course it will change some TPM measurements, but those only matter after BitLocker has been enabled.
For decades now pings to yahoo.com to check connectivity have been my only direct interaction with them. If they go away or start responding to pings I could use news.ycombinator.com, but the URL is longer.
It wouldn't surprise me if someone managed to implement a 3d voting arrow in less than the 407B transfer size of the existing .gif
Take down this video, Nintendo. I dare you
What percentage of HN readers are doing recreational DNS configuration at any given time?
A proxy for: the Pacific Ocean is really big.
Not that I know of. Maybe on their IOS/Android apps, but this is made for the desktop users.
How cool would it be to create a very small solar powered vessel sailing around the world with a live cam feed on it.
Japan PM Shinzo Abe Assassinated
They missed the boat by not calling it VeoNim
Whether it offers marginal additional security has yet to be demonstrated.

But it certainly does damage the competition.
Why does the site need Capcha before it even displays anything at all?
Thanks @wmf @dahart for the discussion.

You are both right:

- I can't just buy 3080 and stuff it into my servers due to legal.

- I can't just buy 3080 and stuff it into my servers due to availability.

- Often (as the example I given) the price-to-performance of GPU is not worth the cost of porting software.

- Often (as the example I given) the price-to-performance of GPU is not super competitive with CPU.

- Sometimes, you can make the math work. Either by picking a problem which GPU excels at (memory speed, single precision, etc), or by picking consumer grade GPU or by having access to cheap/used datacenter grade GPU's.

- In the example I given, even with cheap 3080, and say 20-30x better perf/dollar ratio of GPU's.... is it still worth it? It's not like my servers are calculating euclidean distance for 100% their CPU. The workload is diverse, nginx, dns, database, javascript. There is a bit of heavy computation, but it's not 100% of workload. In order to get GPGPU to pay for itself it would need to take over a large portion of load, which, in general case is not possible. So, I would take GPU into consideration if it was 200x-1000x better per dollar then CPU, then I could make a strong financial argument.

The point I was trying to make, is that GPU's are a good fit for a small fraction of computer workloads. For them to make sense:

- more problems would need to fit on them

- or the performance/dollar would need to improve further by orders of magnitude
> They're convinced Chernobyl can happen again

Chernobyl has happened each single year since 1986.

Has been swallowing money each single year since 1986. No exceptions. I'm really convinced that the problem will be there still in 2023. And turning much worse is also a possibility because s*t happens in a war-zone.
> convicting comedians for offensive jokes

If that's referring to the case I think it's referring to, I'm very ok with that. There's no such thing as ironic racism.