skysight-inc/HackerNews huggingface dataset:
In my experience, security policies often start short, readable, digestible, and actionable. Over time this changes as more and more people / groups add to them or edit them for specific purposes - engineering, privacy, HR.... New hires come in and make changes. Policies just evolve.

To me, the worst culprit is audits. During an audit, there's this tendency to continually add to policies to bring them in line with the framework you're being audited against, or to bring them in line with what your auditor interprets as required by the framework. We used to host our policies on Github and you could clearly track our audit season by the revision frequency. In a week with an auditor, we'd have 10 or 50 or 100 revisions to policies.

Over time, what you end up with is a Frankenstein set of documents that are not short, readable, digestible, or actionable. But they helped you pass your audits.

This is not how it should be done but this is the reality I've seen.

At my last company, we wrote and open sourced policies that many people used to pass audits - https://github.com/globerhofer/HIPAA-policies. I don't know if much of the policies were relevant to sec ops for those companies but the purpose a lot of the time was the audit.
The @ is sometimes used like "apples, 50¢ @" in which it is read as "each" rather than "at". This may have faded out once email addresses popularized it as "at", but it always made more sense to me since @ looks like an "ea" ligature.
Saudi Arabia plans 100-mile-long mirrored skyscraper megacity
Interestingly, the OED's etymology suggests that "ampersand" is a corruption of "a per se and" instead of "and per se and."

1777 H. L. Thrale Diary Aug.–Sept. in Thraliana (1942) I. 145 The Letter commonly called Ipse and and ampuse and viz &. is a corruption of a per se and [sic]: spoken very quick.
What worries me about "Delta-8 THC" is verification: I've seen two "CBD Hemp" farmers start buying cases of "Delta 8 dispensers" from overseas and drop their actual farming business. They have no idea whats really in those shitty cartridges (tasted like a JWH series artificial THC to me).

Cannabis extracts are trivially easy to make at home with flower and alcohol; the flower is hard to fake and the less pure extract is (IMO) better than isolated fractions + whatever degradation products have occurred since it was packaged.
> End user control over safety critical software is not only dangerous, but a potential source of significant legal liability.

Sure is - and that's absolutely no reason to lock a person out of a car that they own. They OWN it - they are responsible for modifications (and the liability that comes with them). Exactly the same as every car built without a computer - which was roughly ALL of them until the late 70s/early 80s.
Some companies are better citizens than others.

However, ascribing a human value such as "caring" to a company is dangerous and ignores hidden motives of an unfeeling machine:

1. you don't know the internal politics and if you did you can't keep up with its changes. That's even difficult to do as an insider.

2. companies are by far and large focused entirely on maximizing something that is frequently adversarial to others (profits, shareholder value) in a time range unknown to us (see point 1).

They might in the short run appear to care, to gain good will in the short term and reap profits later. However as good will becomes less useful to their primary objective, it ceases. Find me a truly "caring" top-2 phone company.

Tldr: companies in the long run are either milking dollars or dead.
<article> vs. <section>: How To Choose The Right One
I stand corrected. (I just read the ddg summary blurb not the whole thing) That just makes solar on a garage more feasible though.
The mandatory : could be followed by required whitespace, making :: a syntax error.

Or the whitespace could be strongly recommended, with implementations encouraged to diagnose if it is missing, at least in ambiguous-looking situations like ::hover. (Is that a forgotten space? Or a forgotten colon?)

You have a space in:

border: 3000px groove purple;
color: transparent;

So just for consistency, you want it here:

/*empty prop name*/: ::placeholder {
color: revert;
}
I'm reminded of OCaml's `let rec` which I'm somewhat surprised to not see any mention of, neither here nor the w3c's GitHub issues (https://github.com/w3c/csswg-drafts/issues). I was originally thinking of only treating nesting from a parent to child but the child to parent relationship does complicate things (especially since it seems much more likely with CSS to need to modify a parent - assigned from a library or framework, presumably - than typical imperative or functional programming). I originally thought a decorator-type syntax where "this definition includes nested elements" would be reasonable, since any user agent or linter or whatever could be in its rights (depending on spec) to look ahead a certain distance. Obviously this wouldn't actually be too reasonable with arbitrarily distant children.

Anyway, I also initially thought I preferred the brackets since it's explicit and some of the best wording is odd to me, but I think after considering my own `let rec` idea I prefer the optional `@nest` syntax because the only odd case which is relevant - and often enough that succinct but obvious syntax is warranted - is the child->parent->* case. That's the only time I'd want a heads up while visibly parsing css.
I'm glad to see someone push back a bit on Moxie's reasoning in that essay. For those who have not seen it:

https://signal.org/blog/the-ecosystem-is-moving/

I've thought he's wrong for a while. The problem is not that you can't innovate within the context of a (well designed) federated system. If that were true the Internet would still be using telnet, rlogin, finger, Gopher, and vanilla ftp.

The problem with decentralized and federated systems, as I've repeated ad nauseum, is lack of an economic model. It's the same as the problem with any kind of consumer-oriented open source. IMHO every other explanation is mental contortions to avoid looking at the economic factor.

The innovation isn't happening because producing high quality software with support for multiple platforms, diverse network environments, etc. is fabulously expensive yet we pretend it's something hobbyists (who don't have trust funds) can do in their spare time.

Centralized systems can have their choice of viable economic models: commercial software rental (SaaS), non-profit fund raising, free core with paid upgrades, advertising, and of course less savory ones like surveillance and pay-to-play addictionware.

You can try to raise money for clients/nodes to run in decentralized and federated systems, but since there's always more than one and very few people pay for anything unless compelled there's always going to be too little funding to make any of them great.

For a little while I was optimistic that cryptocurrency and tokenization might provide a mechanism, but then scammers and gamblers destroyed that ecosystem.
And none of the mainstream used it. Which only makes my point for me.
You can't do that on iPhone sadly.
The scientific method is a powerful tool for constructing what might be called "consensus reality".

Given its total inability to prove positive statements (no scientific "law" is ever proven correct, only "not observed to be wrong so far"), and thus its general irrelevance to mathematics, I would recommend some caution about declaring it the ultimate epistemological authority.
Could you elaborate what makes it very flawed? To save the rest of us some time?
Another one that I found more informative: https://www.youtube.com/watch?v=euO-LIkew8o
It's not just about family; it's about friends too, and perhaps the periphery of extended family. Losing contact is a price. Is it worth paying?

That'll vary from person to person, but my personal experience with this was that this was a mistake I now regret. I incidentally also avoided whatsapp and other facebook-owned apps, which certainly didn't help. And some people are probably naturally great at collecting other contact details and keeping in touch via phone and email; I'm not.

I stand behind the principle, mind you; I just think I should have placed day-to-day human beings I needlessly lost contact with above that principle. I still encourage contacts to avoid facebook, but that's it. But to each their own, for sure.

I'm simply saying this because in a forum such as this one that likes to focus on the abstract and principled it's easy to overlook the plain and quotidian daily existence we all have too; we shouldn't.
The same argument can be made for XMPP and it's already standardized by the IETF.
Cheap, managed Server-side SQLite per-second backups with Litestream
Embedding an EXE inside a .REG file with automatic execution
There are a bunch of VS Code extensions for Mermaid support[0].

[0]: https://marketplace.visualstudio.com/search?term=mermaid&tar...
as an accountant, i feel that cringe feeling whenever someone says their email john at the rate of gmail.com lol.....
You don't understand how the packaging of python applications works if you think the efforts of PyInstaller, py2exe, Nuitka, etc. can be this trivially overcome.

This makes what is already a pain in the ass (packing a python app into a single native distribution) harder to do, for the 'cute' ability to have a single cross platform binary.

...and it is cute. Sure, I get it. ...but yeah, you just zip up all the python dependencies and it's fine? So good. Compile all the native parts or whatever, I'm sure it's easy.

Look, I tell you what, you go and prove that all the smart people who've been trying to solve this for the last 10 years that there's a new good way of doing it, and they (and I) will all be very happy.

Until then, this is a proof of concept for a trivial use case that makes packaging a trivial pure python application somewhat harder to do than it was already.

> It is?

It is not.

Bundling python applications into a native binary is already a badly-solved problem with a bunch of irritating problems and caveats; this doesn't add anything meaningful to those existing efforts or fix any of the issues they have.

Seriously; go and look at the efforts those projects go to, to make what they do, work.
The best way to hire is to hire based on strengths, not weaknesses. I don't tell you your weaknesses because I they are not important to me. If you didn't pass an interview, it's because you didn't demonstrate enough strengths. This is hard to write up, and certainly not worth doing at scale.
I remember it being a broken cluster fuck. Hell, even early TextSecure was a usability mess.
These programs will not help you organize your thoughts; they work if you have already organized them. Some seem to think the causation goes otherwise.
Sure, but AZ is about the best possible case for solar. Most of us don't live there and so need more conservative numbers.
We purchased a 2022 Toyota Sienna from our local dealer and paid MSRP for it after a 3+ month wait for it to arrive. Don't know if that's bc the sienna isn't as popular or if it's the dealers policy to not over charge...
Modern version, via Dremel or similar rotary tool, https://makezine.com/2015/04/30/turn-dremel-tool-plastic-wel... & https://makezine.com/projects/skill-builder-finishing-and-po...
I really doubt Occitan Language has anything to do with that.
you might like this video (has English subtitle)

https://www.youtube.com/watch?v=xa20iG8yplM

A pencil sharpener maker provides free (most of the time) warranty service to their products, including ones purchased over 40 years ago.

Apparently many Koreans have sentimental values attached to these devices and can't bare to throw them away.
“Detached suburban SFH/SUV/pickup trucks/flights to tropical destination” might be too long of a name.
The PS3 got an update in may.
I really like reading about linguistic origins like that one. Makes me reflect on my irrational hatred towards reading "could of", "would of" and the likes. I mean, I still get a seizure reading it, but I can only imagine some old dude yelling at the youngsters in the late 1800's like "it's called 'and per se, and'! Not ampersand! Jeez you all are the reason the english language is degrading!"
Sounds like a good idea. Are you able to suggest it to them?
I've followed a similar path to the author. Tried Notion, loved until it went down for 8 hours without offline support, and then moved to Obsidian with github sync without any plug in.

But time and time again I keep asking myself why. In the end, Sublime (or vim) actually is just enough for how I use Obsidian.

The only thing missing is a good reference management system; linking my own notes seems like trying to solve the wrong problem; all I really need is to keep track of what sparked those ideas/notes, and then I don't necessarily need to keep track of my thoughts;if they were meaningful I will deduce it from those references anyway.

So I just went back to Zotero for reference management. Quick notes can just go in to a big text file and then refactored later. (bonus for spaced repetition)

Obsidian is a nice app but it feels like it's a product solving the symptoms (wrong priorities in note taking) rather than a tool to support healthy habit
I just yesterday skimmed the documentation for statsmodels weighted generalized linear models and they use data from an affair study there: https://www.statsmodels.org/devel/examples/notebooks/generat...

I have not looked at the original study, but from what I gather from the results basically nobody is having an affair (the median for time spend in an affair is still 0, the 3/4 quantile is still only 0.48 (time units) and the maximum is 57.60 (time units)).

I am not sure what "time units" is ... it is probably in the original paper, but I did not bother to look that up. Even if it is years, that would mean that 75% of the people spend less than half a year in an affair over their lifetime. Once married this drops significantly and reduces further over the years of marriage.
Don’t believe them! ß is not sharp! Do you see any sharp edges there? Me neither! It’s as blunt it can get!
They do just that, though.
Did the English eat horse meat historically? In the north of France where I grew up, it was still on the menu in the early 90s at my grandparents’ and I honestly didn’t mind it. I’m not sure if it’s still popular, but beyond the work done by horses, if you could turn your bad tasting food into meat, then it makes even more sense.
/r/privacy is good if you want to learn about privacy or help people with their privacy journey.

/r/netsec is my daily habit too. Always bound to find detailed explanations of vulns
Here's the latest update on TLS https://github.com/jart/cosmopolitan/blob/master/libc/runtim... We need to rewrite the x86 binary code at runtime in order to support it on Mac/Windows. I managed to speed it up from 30ms down to 1ms of startup latency for python.com!
So I assume then that you prefer to refer to it as the severe weather system that hit 29.8915381, -90.052772 in 2005?
I actually need to be able to communicate with a range of people that just aren't that open to switching apps just to chat with me. A jabber client is the one thing I don't need actually. I literally don't know anyone currently that is using that. I've used it in the distant past of course. But it's a long time ago that I encountered anyone using that or suggesting that as a way to contact them.
Since this touches more regular note taking apps such as Evernote and OneNote I would like to give a shout out to Joplin. After using Evernote for 10 years or so I figured out that this would be the year I switched.
First impression of Joplin is very good! Both desktop client and app seems fast, much much faster than Evernote. Setup of "self-hosting" against a S3 bucket was easy enough (had an issue with S3 URL needing region, something that was not mentioned in the docs).

It does not have all the fancy functions of Evernote (and rest of the apps mentioned in this thread), but for just keeping a collection of notes it seems to cover the basics I need (notebooks, good search, markdown support, easy synch across clients etc).
A couple of things:

* “Like NYC” is doing a lot of work here. NYC has organized crime, but not a lot of violent organized crime anymore. There’s a reason the handwringing over MS-13 focused on the suburbs of Long Island and not NYC.

* There’s a lot of “it just doesn’t feel right to me” floating around whenever someone points out, statistically, that NYC is both far safer than its recent history and far safer than the rest of the country. And it’s perfectly reasonable that people would feel that way, because it is unintuitive! But unintuitive feelings don’t trump numbers, and there’s no real evidence (including from sources that have a strong incentive to make crime seem as bad as possible) that massive amounts of violent and property crime are going unreported.
> We report 528 infections diagnosed between April 27 and June 24, 2022, at 43 sites in 16 countries. Overall, 98% of the persons with infection were gay or bisexual men, 75% were White, and 41% had human immunodeficiency virus infection; the median age was 38 years. Transmission was suspected to have occurred through sexual activity in 95% of the persons with infection. In this case series, 95% of the persons presented with a rash (with 64% having <10 lesions), 73% had anogenital lesions, and 41% had mucosal lesions (with 54 having a single genital lesion). Common systemic features preceding the rash included fever (62%), lethargy (41%), myalgia (31%), and headache (27%); lymphadenopathy was also common (reported in 56%). Concomitant sexually transmitted infections were reported in 109 of 377 persons (29%) who were tested. Among the 23 persons with a clear exposure history, the median incubation period was 7 days (range, 3 to 20). Monkeypox virus DNA was detected in 29 of the 32 persons in whom seminal fluid was analyzed. Antiviral treatment was given to 5% of the persons overall, and 70 (13%) were hospitalized; the reasons for hospitalization were pain management, mostly for severe anorectal pain (21 persons); soft-tissue superinfection (18); pharyngitis limiting oral intake (5); eye lesions (2); acute kidney injury (2); myocarditis (2); and infection-control purposes (13). No deaths were reported.

https://www.nejm.org/doi/pdf/10.1056/NEJMoa2207323
We tried but the WHO didn’t like calling it the Xi variant for some reason.
Gay/bi men are almost certainly underrepresented on primarily-hetero dating sites, or at the very least are not overrepresented. I'm pretty sure the vast majority of the 84% were heterosexual.
Auditability in general is a staple and pillar of security. If you don't check, you don't know. If you don't know, you can't trust.
There is something about McDonald's fries that gives them the sharpest drop off in quality over time compared to literally any other fast food restaurant. I swear, it's like they are 100% within a couple minutes of being pulled out of the oil, merely okay for the next three, and then literally inedible by six minutes.
The demand for 6 core over 8 core is simply because the 6 core costs less than the 8 core. If the 8 core cost the same as the 6 core, you'd buy the 8.
SEO has become such a tainted word that clearly it cannot be used anymore to shorten "Making something useful easy to find in search engines by anyone who might be interested" - people think anything mentioning SEO is from narcissists or scam artists, and downvote.

What other term would people suggest then? Surely it's a real concern for projects to be easily accessible by people looking for them.
I really appreciate knowing some devs are out there defending us from the banking app madness. I'd encourage you, given your position, to write a blog post about why device ownership is important and your experiences on how others should consider operating.
> To make this easily readable on small screens and terminals, I used vim’s text-width setting to make sure my lines do not exceed 80 characters:

I never understand comments like these. Now if my terminal is 78 characters it is a mess or if it is 100 characters it is wasting space. If you just don't wrap the lines my terminal does it at the right width.

Hard wrapping doesn't work well. You need to know the target width to wrap and you don't know that until someone actually opens the file. Every viewer I have ever tried is excellent at soft-wrapping. Let it do its thing.
Correct - it's clearly a case of market failure. The incentives for the company do not align with the incentives of the public.

That's when you fucking regulate them! That's literally the foundational case law for the last 100 some years (more really, since anti-trust goes back to the 1890s) on when to god damn regulate a company.
And ventilation (I was told this contributed to Steve Mc Queen's early death).

I had an angle grinder disc shatter on me and one piece took a huge gouge out of a wooden toolbox I had built. I am afraid of angle grinders now.
That just means both of your prices are wrong.
Ye. I wish Zuckerbergs adds them to Whatsapp too, so I can convince people to use e.g. Signal.
The idea that people would be too shamed to sue was also part of the scheme for other grifts, but it didn’t always work:

https://www.nbcnews.com/news/amp/wbna6973990
I grew up during the 70's and was an avid reader of the toy section of the Sear's catalog (until they stopped sending them for free) but somehow I never heard of this kind of toy.
So, oil and coal then. Unless you had a different point.
TFA acknowledged this specifically:

> Criticizing a security-sensitive tool like Signal is tricky, as it might be misconstrued as a call to abandon it, and move to alternatives that might be in fact worse. But here, at a hacker conference and with little risk of causing confusion and diverting users towards less secure platforms, can we please have an honest conversation about Signal's problems? And how 5 years after that blogpost, moxie's centralization has not solved them?..

Apparently the good intent they assume in a hacker conference does not extend to a hacker forum.

Their main complaints are 1) Lack of good clients, driven by a mostly closed ecosystem 2) Lack of good federation which brings down the whole network occasionally.

These are hardly knocking anything related to the security that Signal provides, and definitely does not count as "Bitching", as these are real problems that are absolutely good things to fix on top of a fantastic product.
The wikipedia page has some info, looks like various CRC and parity checks. Maybe the receiver was just ignoring them, and receiving faulty data.

I dunno, it seems to me like that GPS receiver had fairly bad software. If you get packets from a bunch of different satellites but one is way off, it seems like good sense to throw that one away.
macOS: Incorrect “Default Scaling” Value
That is what many people fail to understand as to why us C programmers dislike C++
Well, unless they were awful. Would definitely be possible to run an interview system for interns that solely passed ones you don't want to hire later.
https://thememoryguy.com/dram-prices-hit-historic-low/
Yes, Obsidian functions as a personal Wiki, which makes the above look sorta like "Why would I use Wikipedia instead of a 2.7 Gb directory of text files indexed by Bing?", which makes the value add more obvious, I think.

(In case it isn't: links, rendering, and stuff like the graph that gets constructed as you link are _very_ helpful to my workflow)
> I think the parent meant identical in concept, not in the technical format.

That might be true. But I feel like a lot of email proponents have this idea that email is actually pretty good, when in reality, email is an unmitigated disaster and sorely needs drastic changes on the technical front.
And French "Et commercial". It's sometimes written as a form closer to "et", corresponding to the ligature outlined in the article
What to Do in a Failing Civilization