skysight-inc/HackerNews huggingface dataset:
So (as a corporation) don't lock them down as much. That's what we do as a small company who has to pass ISO 27001 (and NEN 7510) because our product is used for healthcare. From a security audit standpoint, not allowing personal devices saves a lot of time and trouble. (This of course means that anyone who is on-call just gets a phone from the company.)

As a developer; if you need to work around locked down environments the security policy doesn't really matter to you, as you are already violating it. Whether your employer cares about that or not is another thing of course. Some managers will consider you a liability, some will accept that this is the only way you can do your job.

Ideally employees embrace the security policy, and whoever tweaks it makes sure everybody can still do their job. In reality, that will vary a lot.
I think that color passthrough is confirmed on the Quest Pro. Your linked comment from Reddit seems to be raising the issue that the cameras will be fixed focus and will still be a second rate AR experience. I don’t know what is planned for the Quest 3 as that is still at least a year out.
But it's precisely not that, it's a polyglot.

And how is headerless raw assembly that expects the bios interrupts to be usable "trivially portable"? If it was, it would run on modern amd64 OSs without emulation, but it doesn't.
Hmm, sleep deprivation so far has conspired into me and my wife being in the worst shape of our lives... Both of us gained 10 pounds since my son was born :(
> A closed, private space that admits no outsiders, marketers, or clout chasers, but strongly discourages developing relationships with new people or expanding one's horizons.

Sounds wonderful. This is how the vast majority of humans have experienced socialising for the vast majority of human history. And they were happier for it.
First report of Sea star wasting disease raises concerns for Europe's starfish
Well, if someone was to pull it off at this point in time it would be Zuck, but we're a couple of years early me thinks. Or maybe we won't go meta/vr at all.
Take a look at trid.

https://www.mark0.net/soft-trid-e.html
You’re doing yourself, and all other devs at your company a disservice - at least in my opinion.

If the devices are locked down to a degree that you cannot do your dev (aka your job), that should be brought up with management. Of course, it’s easier said than done xD

I’m personally a fan of locked down corporate devices and then either dedicated laptops or cloud vms for development.

It’s not necessarily an easy problem to solve though
> you're looking at you're bound to miss 99 percent of what you want to find.

Or those 1% are real professional that know their stuff while the other are publishing because they are doing some internship, or publishing low quality articles on an obscure domain is a way to evade criticism (how many ALS experts in academia?) or other short commitment to a topic.

I read a lot of literature on ALS (Lou Gehrig's disease) and clearly 99% of publications have no value at all, even when their university claims of "a breakthrough".

As far I know there were breakthroughs only every ~5 years (TDP-43 in 2006, C9orf72 in 2011, FUS 2010) and no similar breakthrough since. Big companies like Biogen, which bet much on various genetic (ASO) therapies, are now removing drugs from their pipeline. We clearly do not understand the field, despite publishing 15,000 articles per year!
Don’t trust the server side of any service. Open source or not, federated or not, it’s impossible to verify that a server you talk to runs the code it says it does.

Which leads to one of the selling points of Signal: that the client is designed to expose as little metadata as possible to the server. Sure, the Signal servers could be slurping up IP addresses and timings despite advertising that they don’t. But I can’t think of a single alternative service that can guarantee otherwise, and that problem is compounded by clients that leak much more metadata than Signal.
This is exactly right. Commenters here seem to think that the prosecution needs an airtight sequence of steps to prove guilt. Doesn't work like that. They will say things like "we detected that Mullvad VPN was used to cover the perpetrator's tracks. Two days before the incident, the defendant bought a Mullvad VPN subscription over Amazon". They will then move on to the next piece of evidence.

Legal cases are not code, they are often fuzzy and loose, and rely on human interpretation, with all its biases and emotions, to draw a conclusion.
Its even easier to criticise it and completely ignore "...but make sure when you do you compare it to the success of literally ever other attempt to bring e2e to the masses."

Signal is a stunning success. If you or anyone does better I will cheer and yell about your success often.

>We now know there were zero-click iMessage exploits being used by oppressive governments to target politicians, journalists and activists.

Firstly citation needed please. Secondly, great, should they have been using email and pgp? Or google chat? Or are you saying the NSA should have just had all comms on their servers without going to any further and targeted effort.

Any software project can be criticised. And _should_ be. Just when you do it don't overlook its success which for signal was the first one that actually worked after decades of efforts. Now go do better.
FB stock returned near IPO price (2017, 150$).

Investors believed for 5 years to the "growth first, profit later" theory. But now, another competitor (TikTok) is stealing their market share and profits for FB will never arrive.

This is also a confirmation that not always focusing on growth will give you confidence on market share.
Yeah well, the pesky thing about management is that it's secondary function is to entrench itself.
I feel like working at Meta in 2022 is such a professional and personal stain that is going to follow people around for a long time.
it builds single binaries even for other processors like arm, arm64.
Introducing even more security enhancements to NPM
Right but this is just using the Quest as a peripheral for PC VR, and therefore has the same issues that parent was complaining about with PC VR in terms of hardware requirements, because it is just PC VR
Now they just need a robot that can grab the required parts out of a box full of Legos and execute the plan. But I guess that's left for the next paper...
> this doesn't explain why updating from Windows 7 to 10 was free.

Actually it does, because Windows 10 looks like crap compared to 7.
There are definitely real uses for this is this got traction and wide adoption and developed into a robust product - for example, games would just work on Linux or windows without the need for specialized drivers for either, since Nvidia would just write the drivers and compile them with this which would make them effectively multi OS, followed by all game engines targeting these drivers, and so on.

However to wish for that to happen on the same level as wishing that Linux was the dominant OS for personal computers, which would render APE mostly moot except for a few specialized cases.
In light of this, the whole thing about "Pumpernickel" meaning "pain pour Nicol" (where Nicol is a horse) (1) makes a bit more sense. I don't mean that it's necessarily true, just that it's a less of an absurd, nonsensical claim.

https://www.snopes.com/fact-check/pumpernickel/

https://www.wordorigins.org/big-list-entries/pumpernickel
^^^ this. AR/VR is do or die for FB.
Not programming related but life related

wishful thinking helps no one.

If I could turn back the clock to when I was a teenager I would change my parents, my socio-economic status, my education, my friends.

The only thing I would not change is me.

Being flexible is the key. life is full of unexpected challenges and you have to be ready to change, aspire to knew levels of knowledge and grasp new beginnings.

Although without any formal qualifications, I had always been highly intelligent. I had always read extensively and gorged on reading psychology books from the age of about 16.

A classic introvert (infj) born into a world of extroverts

I left school at 14 years old with no formal qualifications.
I worked as:
A window cleaner
I did a 2 year training course as a bread baker
Worked as an oily rag and gofer at the local garage where the manager offered me a 4 year apprenticeship.
I became a qualified motor mechanic
At 28 years old I had to earn more money to support my partner and new born child.
I set up my own business as a ceramic tiler.
At 36 years old, with the money I had made from my business I went back to college to gain an access to higher education certificate.
I then spent 6 years training at university to become a psychotherapist and a further 3 years post-grad.
I have since retired in 2015

It wasn't easy but I got where I wanted to in the end
a phone number is a very private thing so your explanation is unwarranted. you can be concerned about giving away your phone number without having concerns for anon
> Or XMPP, once again, 5million extensions to the spec (the XSF recommends reading through 23 seperate RFCs to get an idea of how to implement a client).

Fact check:

The XMPP core protocol is split into three RFCs, one describing the fundamental building blocks of the protocol (RFC 6120, "XMPP core") and the second describing how to compose these for instant messaging (RFC 6121, "XMPP IM"). Finally, there is an additional short RFC which describes the address syntax and rules (RFC 6122).

These documents are stable, and need to be updated rarely. Other things such as audio/video calls, file transfers, push notifications and such, are defined by the XMPP Standards Foundation (XSF), as I imagine you know, in documents known as "XEPs". These have enabled the evolution of the protocol over the years, and are why XMPP didn't get stuck frozen in time in the early 2000s.

People like to point at the "5 million" XEPs (actually, 468). However the truth is that these are not required reading. They are not all applicable to IM clients (e.g. XMPP is used in IoT and other places), and many are simply proposals/experiments that didn't take off (XEPs have a lifecycle, including states such as "proposed" and "stable"). The XSF is a place of sharing and collaboration, and these proposals are a natural side-effect of that process.

The actual required reading is published annually in the "compliance suites" which describes what implementations are expected to be supporting in any given year. This promotes interoperability, encourages regular reviews of the ecosystem, and helps developers to discuss and plan their roadmaps. The 2022 document is here: https://xmpp.org/extensions/xep-0459.html

An alternative resource is the protocol overview on modernxmpp.org: https://docs.modernxmpp.org/client/protocol/

Why is all this relevant? Because, although I don't claim XMPP to be perfect (what software/protocol is?), I think this has been a pretty successful model that has stood the test of time and continues to deliver sensible community-driven evolution. The Matrix model is extremely similar (they have "MSCs" instead of "XEPs", and they regularly release versioned documents, though not strictly on an annual basis), IRC folk are trying something with IRCv3. Open protocols and ecosystems are hard work, but they are worth it.
Yeah, I'm always surprised how country with slavery literally enshrined in its constitution is always so critical of the issue. It is like they are all hypocrites and don't focus first fixing their own crimes.
>> Will I actually use the internet for what it's good for, or just keep browsing Hacker News?

I find HN to be one of the best aspect of the internet. And I really do not know what actually internet is for - care to explain?
Ah not good. Now you got me thinking of eating the horses rather than jettisoning them.
The "interests of the users" is not a single, homogonous thing that you can point at and define. Some users' interests conflict with other users! Also, interests can have a whole range of motivations, and I'm not sure any single class of motivation (commercial, spiritual, whatever) objectively outranks any other. People are going to disagree on that, because everyone ranks values differently. I don't get to tell Signal what to do though, they should be free to balance interests however they like. i may not fully agree with their approach, but may also choose to compromise on that because there's nothing out there that fits any better.

This idea that "someone built a thing, has strong ideas about what that thing should look like, and some people don't like that because they don't share the same values" being somehow "not ok" is peculiar to me because it's at the very heart of fundamental freedoms around speech / association etc. If you don't share Signal's values, or disagree with how they balance competing interests, go use something else!
Works fine for e.g. Facebook Messenger, Element app etc.

You just put in their email adress, username or phone number and you connect. What’s the problem?
Genuinely curious: so why is XMPP not so popular outside of the hacker community?
Necrobotics: Biotic Materials as Ready-to-Use Actuators
> just done with the half motivated people

Other motivations are likely to attract people attracted to those other motivations. You obviously think there is a high correlation between free-flight-to-Nepal, and desire-to-learn-TypeScript. Seems unlikely.

Nepal is poor: why not find some local students? Instead of wasting money giving free flights to rich 1st world people, why not supply a few computers and training to poor 3rd world people.

Make your entry requirements highly correlated with geeky keenness for programming?
I wonder why XMPP is not more popular. It’s like people forgot that it has e2ee, and that the protocol is flexible enough for people to iterate quickly with, or how there’s a well laid out path to get extensions into the standard, and there are already robust, battle-tested, and scalable implementations of both clients and servers in multiple languages. Instead we end up trying to reinvent an ecosystem with Matrix?
The technical hurdle is too high. A text box and submit button is the maximum if you want to make it accessible to billions of people.
What was their involvement in the Iraq war? https://en.wikipedia.org/wiki/Niger_uranium_forgeries Estimates are anywhere up to about a million people dead there before even accounting for the rise of ISIS it enabled. And the Gulf War, and Iran-Iraq wars before that. How about the destruction of Syria and Libya? The CIA's fingerprints were all over those. The Yemen war deaths are approaching a half million, surprise surprise the CIA have been "involved" there too.

Now probably the poor CIA is an unfortunate victim of everybody else with personal agency, and the fact war follows them around like a horseman of the apocalypse is simply because they've been hard at work making the world a better place. But I don't know, call me a conspiracy nutter but now and again I get the faint inkling of doubt.
There's no one size fits all answer, and scrapping existing infrastructure is not a high priority but...

The basic shape of the future is electric powered and with batteries. Even for areas with existing overhead line systems, adding batteries is a no brainer, as it simplifies complicated junctions and a thousand other annoying edge cases. And extending the system with electric busses for less busy areas is also a no brainer (which they probably already do with some other kind of bus).

As batteries plummet in price the distance between recharges can be stretched, current models have like 10km to 30km autonomous range, which means they're basically battery busses with in-motion charging.

Battery busses are a global oppprtunity, with massive cost savings over existing alternatives today and the benefits of scale will quickly make them better than the trams and trollybusses that only work in specific locations, even in those specific locations that they are great for. They'll improve, just as an offshoot of the wider EV revolution but long term they're an obvious dead-end.

In motion charging will be something you do to get even cheaper electricity costs by managing demand, not something you do because batteries are too expensive or heavy. And induction charging at stops may well prove a better investment if it can be shared with other EVs on the road.

In short, in a world with cheap plentiful batteries and electricity, full of a thousand other types of battery EVs they don't make sense. Anyone advocating for them is basically arguing against cheap, plentiful batteries existing, which if it was true, would be the real problem to solve. But it's not.
The Hypercard Legacy
Excess labour supply doesn't necessarily mean excess people...

Just that there might not be enough resources to meet the needs of population. Such as food and water. Thus purchasers of labour will get away by providing minimum. If there weren't such big excess supply they would need to provide more or provide better conditions.
I mean, the big bucks in advertising are coing from established companies anyway right?
Tamam Shud Solved
I've set Signal as my SMS app. When I message somebody, sometimes they happen to have Signal installed, and so it's a Signal message. Otherwise, it is a plain SMS.
There is me before my first psychedelic trip, and there me after, and those two are probably not the same person.

I still maintain that everyone of a sound mind should do psychedelics once. There are no real negatives (only meta negatives such as from loss of coordination leading to a fall, all of which are prevented by a trip sitter), and the perspective it gives you, namely being able to experience different emotion towards things including yourself, is invaluable.
Where the median home price is probably $500K
> having a company that is fundamentally a UGC aggregator more deeply embedded in my life sounds awful

I feel like it's not supposed to be aimed at people like you, me, or anyone else here for that matter. I feel like it's aimed towards younger and future generations that will grow up with VR ecosystems like that and get used to them, find uses for them that make it fun. Remember that most people don't care what company is behind a product, people still buy Nestle products after all they did. People don't care.

Kids these days grow up with all those new apps, environments, they practically live in the internet, I can see how this would be appealing to them, having your own 'place' in some virtual world that you can do anything with, especially since reality is much more demanding, depressing and will probably become even worse with all the issues in front of us. Is it going to be owned by corporation X? Sure, 100%. Will people care if it allows them to disconnect from reality? I don't think so.
This is probably an amazing library, yet the documentation gives me no clue

* what the problem is that needs solving,

* how the lib solves it and how that's preferable over dealing with the problem another way,

* how it compares to other libs that solve the same problem.

Therefore my interest in using this for my own projects right now is unfortunately close to zero.
I was expecting this to be about economic bubbles for some reason
...in addition, on my ARM Mac I had to start the program like this, otherwise there's an "exec format error":

arch -x86_64 ./python.com
Ask HN: Has Netlify quietly landed streaming support?
I have a Netlify Functions (not edge) test page for a project. Try:

curl -NL hattip-basic.netlify.app/bin-stream?delay=100

Netlify Functions didn't support streaming until recently. I couldn't find any announcement about this. Am I doing something wrong or did they landed support quietly?
What in your life or your personality changed? What have been the real effects on your life from this? Did you switch career paths, stopped being depressed, made a big move, stopped feeling ugly, etc? Or is it just that you see certain things differently? I'm really interested in this subject.
I think patois may be a better word
Facebook is for old people.
Made for you MFY has been around at Macca's for a long, long time. It's not a recent change.

It was around long before all of the delivery service apps, and before smartphones were a huge thing, even.
In germany some libraries started to have makerspaces attached to them with good tooling (3D printers,cnc etc) and they host repair cafes weekly but without the voluntary help of a lot of CCC folks it wouldn’t happen . Still I am glad the state is sponsoring the environment for it.
This is basically the difference between the proletariat and the bourgeoisie: one needs to work for someone (even if only for its customers, as a business owner) to survive, and the other can do whatever they want while living off of previously accumulated capital.

Not having to worry about how to get bread on the table opens up the door for all sorts of interesting creative labour!
One thing I really don’t understand (and probably should ask in the discord) is: why the JSX like syntax for macros? It doesn’t seem to have any advantage over function calls, and in fact is a bit disorienting as you’re not constructing a tree-like structure using it. Felt very fancy-for-fanciness-sake to me, but maybe I’m missing something.
This paper raises important points, although its not well written and
is patchy.

Security "policy" is a disaster area, and is only getting worse.

Why? Increasingly, policy is being treated as separate and different
from technical matters. Yet these are not legitimate specialisms. A
fake, forced partition that aligns with hierarchical ideals of western
"management culture" leads to parts being written, implemented and
enforced by different groups of people. This crystalises into rigid
divisions, obsessive attempts to document and "nail down" everything,
and a mind-set of "compliance and audits".

Schisms then arise that are worse than the outright failure of any
individual part. The idea that policy relates to implementation as
management does to production/execution is deadly in its stupidity and
grave in its implications because it fails to apprehend security as a
continuous dynamic process of reconnaissance and adaptation.

Although I do not believe military metaphors are always appropriate to
security, consider by analogy the staffing of senior generals and
government advisors on defence. Years of crawling around in the jungle
with a dagger in your teeth is pre-requisite to sitting in a leather
chair in Whitehall deciding whose sons will go risk their lives.
Nobody "comes in at a senior level" from a career in contemporary
dance and a conversion masters degree in Peace Studies.

By comparison the technological society has been caught with its pants
down and we are desperate to fill cybersecurity roles. Anyone of
sufficient seniority with a "policy background" is presently welcome
to stick their oar in and make a sideways leap to CSO. Digital
security however is a complex, nuanced and extremely demanding
area. It can't be bolted-on or fixed with off-the-shelf products. You
can't order people to do it. Almost every decision is an impossible
gut-wrenching compromise. Put simply, you actually need to know what
you're doing. You need to have seen and dealt with the consequences of
shallow decisions and reactionary practice, and to have experienced
real users, who are diverse and sometimes infuriating.

This paper correctly identifies the need for a more mature and
integrated ethos for research and practice, one that moves beyond
"mere" software and hardware. But it fails to apprehend the symmetry
of the problem. Those who claim to have something to teach about
"policy" must be scrutinised to ensure their focus is not on power
rather than polity, on hierarchy rather than effective structure, or
on "grand plans" rather than skillful adaptation.