skysight-inc/HackerNews huggingface dataset:
>If you use a VPN or just like browsing in privacy mode, it will make your life as difficult as possible by having you fill out multiple captchas. And even then, it will sometimes not let you through.

I use VPN and private browsing and the worst I've been subjected to is getting IP/ASN blocked, which to be fair can be implemented without cloudflare. I've had to fill out captchas but that's something that happens a few times a month at most, and it's never a captcha loop that you mentioned.
Something is a disorder if it is disruptive to what is widely perceived as a constructive life. Anxiety driving one to become more successful can hardly be construed as such.

Only if you take individual happiness and contentment as the ideal baseline, and deviations from it as dysfunction, would all forms of anxiety be considered disorders. But such an ideal is incongruent with reality, which is an adversarial landscape where survival and reproduction mediate existence, not individual happiness or contentment.
>Hardware-based attestation of the running software is an important security feature, especially in a world where data leaks and identity theft are rampant. Let's say I'm a healthcare provider, and I'm about to send sensitive medical data to a third party vendor. Wouldn't you prefer that this data only be able to be decrypted by a computer that can prove to the world it booted a clean OS image with all the latest security patches installed?

I'd prefer it to not be run a computer which has already been compromised with a UEFI rootkit which is what trusted computing has gotten us so far.
My UX designers are building backend operational tooling that I use every day. Batch processing workloads that need babysitting and manual intervention. I often have several windows of these open to maintain multiple pipelines in parallel. Information density is critical in such an application.
All cryptography is important. Hardware attestation is no exception. The problem is who's using it, who owns the keys, who's exploiting who.

It's totally fine if it's used to empower and protect us, normal people. If we can use this with our own keys to cryptographically prove that our own systems haven't been tampered with, it's not evil, it's amazing technology that empowers us.

What we really don't need is billion dollar corporations using cryptography to enforce their rule over their little extra-legal digital fiefdoms where they own users and sell access to them to other corporations or create artificial scarcity out of infinite bits. Such things should be straight up illegal. I don't care how much money it costs them, they shouldn't be able to do it.

The problem is we have chip makers like Intel and AMD catering to the billion dollar corporation's use case instead of ours. They come up with technology like IME and SGX. They sell us chips that are essentially factory-pwned by mega-corps. My own computer will not obey me if it's not in some copyright owner's interest to do so and I can't override their control due to their own cryptographic roadblocks. Putting up these roadblocks to user freedom should be illegal.
My parents got a 486 from Gateway 2000, but the first PC I bought and owned personally was a Micron. Full tower case, Pentium 2-233, 6.4GB hard drive, S3 Virge DX video, USB (that being kind of a new thing at the time), 24x CD-ROM, I think either 16MB or 32MB of RAM, 17 inch CRT monitor. I think it had a mix of ISA and PCI slots. I don't remember if AGP was a thing yet. Zip drive and 3.5" floppy. Actual serial and parallel ports. PS2 ports for keyboard and mouse I think. It probably had one of those MIDI/joystick ports, but maybe things had moved to USB by then. I don't remember if it came with a 56k modem, but if not I think I added that later. Also a 10-baseT ethernet card. Probably an NE-2000. It came with Windows95, but I also dual-booted to Redhat 5.0 and for awhile also ran BeOS.

It was quite a machine at the time, and cost me about $3,000. I think the next time I upgraded it was to an AMD system with a clock speed around 1400 MHZ, but I also kept using the Micron case for quite a long time after I had replaced almost all of the original hardware.

I don't think I ever had to call Micron support.

What a weird time that was. Computers were really terrible, but the amount of rapid progress and competition between big companies and the rise of open source software and the Internet were all really exciting and inspiring. Like there was always something amazing right around the corner. These days I can't really immediately distinguish a computer manufactured yesterday from one that's 10 or 15 years old.
But you are not actually retired. Seems more in line with what the article is saying.
Yep. I am sure many a war was started because someone had a toothache.
This sounds like wishful thinking. FIPS cryptography is involved, often by legal requirement, in major parts of American data processing and in important parts of society.

Banks and government data processors alike are often forced to use things with FIPS’ lesser security. FIPS is where NSA is known to have sabotaged cryptography. NIST is still disgraced by the tip of the backdoor/sabotage iceberg. Yet we are still stuck with NIST, and indeed with various lesser standards which we can generally just call FIPS.

It is lame and sure, we should build better things. We should ignore FIPS where possible. We probably agree there, but it seems unreasonable to ignore all the systems which cannot be made better by intentional limitation.

Ignoring FIPS doesn’t change that many important systems do use FIPS’ cryptographic constructions. It would be nice if the U.S. government wasn’t actively sabotaging the security of standards with backdoors. It would also be nice if the U.S. government didn’t require anyone at all to use FIPS. Too bad we can’t have nice things in many important sectors.

Acceleration won’t fix the systemic issues here. Ignoring the systematic failure of (intentionally) weak FIPS standards will only further create division. Non-compliance will sideline reasonably secure modern systems in important contexts.

We shouldn’t need to fix FIPS, but what other alternative will help users whose data is protected by FIPS cryptography in the FIPS legally mandated contexts? Ignoring it isn’t going to change the law, ignoring it won’t secure those systems. OPM leadership probably really wished they had ignored FIPS. That wishful thinking won’t repair the damage to national security done by just one NSA/NIST FIPS backdoor being exploited in that single prominent example case.
Unfortunately, larger tech companies in the US have become increasingly (in the last 5-10 years) political inside and a desire to ship things fast has ultimately meant building extremely high performance scalable infra that's foundational enough to be OSS-able is just not a priority since compute is cheap enough and it's not worth the cost of generalizing it to make it OSS. It's just very hard to pitch these kinds of investments. Documentation follows this pattern-- engineers just don't get promoted or rewarded for writing documentation and with IC's constantly being pushed to deliver faster and faster it just won't take priority. And that's a big problem.

In short, it's my impression it's an engineering culture problem in large part caused by bad leadership at the types of companies where these projects could be possible.
We can port your existing number or give you a new. Give our customer service a call, they will step you through it.
Continuous happiness is impossible, since happiness comes from accomplishing things.

So the only way to optimize for it is to plan to accomplish the things one likes to do.

Our society is too fixated on being happy. Which is why for example the divorce rate is so high.

Sure there is a baseline of “contentment” when huh become rich.

But if one has money in the bank and nothing to accomplish you’re left with the same unhappiness and lack of purpose - just in a different way.
You'd only be verifying the machine you sent the data to was up to date, but that is likely to be a file server or router of some sort. You'd need to validate the entire network that will touch the data.

While it might be theoretically possible to assert the whole network is up to date, the hospitals will definitely fail that check. There's all sorts of equipment the hospitals can't update for various reasons, such as aging radiology machines.
By that logic, I guess we shouldn't be using human written software, considering the atrocities humanity is guilty of throughout their history…
If I want to buy a device that can generate a proof I can share with others to increase their trust in me, you shouldn't be able to stop me. Implemented properly, these machines can still boot whatever custom software you want; you don't have to share the proof of what booted with anyone.
You'll need to turn off the cellular modem to prevent network level location triangulation. At which point it's not really a cellphone any more.
You might be more interested in this video:

https://www.youtube.com/watch?v=3HxVMGaiZbc

"ClojureScript in the Age of TypeScript — David Nolen"

Skip to 30:00 for the live coding demo: https://youtu.be/3HxVMGaiZbc?t=1800
I remember doing it to one of our legacy projects and the list was so long I just created new solutions and projects from scratch and copy the files over one at a time and ran them independently so I could slowly ensure everything worked
I’m fine with my phone number being published in a public directory.
Most technology seems to chase weird benchmark numbers as it seems the market decides as such. It was mhz to ghz through 2010, then it was cores, then these SSD numbers, or the refresh rates.

Most of it seems absurd to the majority of users, even if you could subtract the placebo effect.
this is the correct answer.
It depends who that common customer is. If you're building a tool for industry and your users are electrical engineers, you would design it differently to a consumer mobile app is all I am saying.
If anything, parent comment's usage of orthogonal might've been a typo/mistake. People usually use orthogonal as a metaphorical term to imply "no correlation" [1]. My read of the OP is that anxiety powers others' ambition, that they are portraying the relationship between the two as correlated/causal rather than orthogonal.

edit: to clarify a bit further, I believe the term comes from how vectors that diverge along some dimension form a right angle, rather than a correlation (i.e., if one vector is (0, 5) and the other is (4, 0), they form a right angle )and are orthogonal, meaning "wherever you are on the (4,0) line doesn't correlate with where you are on the (0, 5) line". This might be a bad explanation but it's how I've understood it from working somewhere where coworkers use the term a lot.

[1] See "software engineering" definition here: https://en.wiktionary.org/wiki/orthogonal
I'm pretty sure a segment of conservatives think they're larping.
The majority view in the 2000s and 2010s was not that the F-35 was overpriced, it was that the F-35 was worse at most tasks than existing aircraft. The fact that it is crazy expensive just made that worse. Something must have changed, because I don't think Boeing has developed mind control rays.
Honestly, I think you were on to something re: contentment.

I’ve never really optimized for happiness. I tend to frame it all in terms of being content. I think that is more sustainable - or at least it is for me.

I don’t have any fancy studies to back this up - just my own life experience.
There is no such thing as "American" code. Code is universal, America and code are orthogonal concepts.
> Almost everyone got off.

Rumour is that the acting Captain was getting his rocks off instead of doing his job of not crashing into rocks at full speed.

https://nationalpost.com/entertainment/books/captain-of-b-c-...

In the end there was no hard proof. Two people died, bodies never found. The officer was convicted with a four-year jail term (I’ve no idea how long he actually served.)
Nicod
I think this is doing something more sophisticated since it seems to understand C syntax. I don’t think it’s hygienic though which is a shame.
Why should HN care?
Then you'd love degoogled android!

I'm shocked how many apps rely on the google maps widget. It's expensive and mediocre, and ridiculously flaky on my phone.

The web touch UI is laughable, but at least the average third party occluding widget size keeps growing on mobile web pages -- I wouldn't want more than 10% of my phablet screen to be wasted displaying the map I just pulled up, after all!
India, Indonesia, Vietnam and other have also seen massive reduction in extreme poverty after adapting a capitalistic market system. All of them are different socially and politically but the free market impact is real.
The permission and security systems will be circumvented by malware authors and unscrupulous developers, just like they are on macOS. Given the enormous amount of personal information on our mobile devices, this represents a particularly concerning potential regression in end user privacy and security.

Like on Windows, macOS and Android it’ll be crucial for users to avoid installing executables from the web. and like Android, users also have to be trained to only install apps from ethical software repositories that respect user privacy and security. This is the best case scenario for privacy/security, and essentially the status quo for Android.

For better or for worse, the days of iOS users installing any and all available applications without worrying about malware is over. Users will get more freedom, but they’ll have to take more responsibility when vetting and running third party apps. I don’t know how a notoriously novice user base will react to that, but we shall see.
You can tell Asian history isn't that well documented in English. The Western stuff is much more balanced
On any SSD I have used, Ubuntu starts in like 5 seconds or so.
In an emergency you could boot from external media instead, no?
I think our industry will have a wake up call during the recession. At least I hope so. Companies need so many people because developers have become parasites sucking up all company resources writing a two text field form.
I get the disdain for gentrification when it displaces existing communities.

I have a harder time seeing the harm in finding a productive use for a city that currently doesn’t have a productive use. It’s cool that this place exists, and is a bit of a time capsule. But it’s not that noteworthy or valuable beyond being a mild curiosity, and certainly not worth preserving if it can be used for actual benefit instead.

I always thought part of the appeal of urban exploration and abandoned sites was the knowledge that abandoned places get redeveloped, and the fun is in exploring it before it gets turned into something new and shiny. Artificially preserving a place that could have another use takes it from “urban exploration” to visiting a museum, which is much less cool
I'm not saying that secure boot is inherently a bad idea. It's a good idea but only if all signing keys are treated equally. Right now, they aren't. AFAIK modern motherboards, those of them that use UEFI, come with Microsoft keys preloaded — and that preferential treatment is the part that's not okay. In an ideal world, all devices that support secure boot should come with a completely empty keystore so that you could either trust Microsoft keys or generate your own key pair and trust that. Possibly re-sign the Windows bootloader with it even.

It's much, much worse with mobile devices. You can re-lock the bootloader on a Pixel with your custom key, but you still can't touch TrustZone and you'll still get a warning on boot that it's not running an "official" OS build.
If you only write how you speak, your readers will suffer.
Very unlikely. I think that one you've become accustomed to using 2π everywhere there isn't a big technical reason to change. I love tau though and I use and promote it at work.
My experience with Spotify is similar to yours, but sometimes I want to go on a discovery binge... For that I use Every Noise at Once, built by a Spotify engineer (glenn mcdonald) and one of the coolest sites I've ever used:

https://everynoise.com/
I think it's an x-ray room. The wall with the window for the radiologist to look through and the arm above the table.
Everything takes me way longer now due to a combination of brain fog, tiredness, and depression reducing my effective working time to about 2 hours a day. Unfortunately, US American society is already treating this like agent orange or gulf war syndrome: they think it’s fake or won’t admit it’s real so that millions will have to get by on our bootstraps. Lucky for me I can grind out some code everyday that’s minimally viable do I don’t get fired, but my small company isn’t doing so well, so hopefully I recover in time to job search.
> users want

I hear that so much, except they don't. Most sites aren't Figma.

What we're seeing is the proliferation of apps that have been traditionally just desktop apps, but being made for the web. We have to distinguish the web as an app delivery tool (Google Docs, Figma) vs what most developers are writing. CRUD apps. And for those you can ask the server for state often.
We have enough people, money, and resources to do all these things all at once.
So basically most of the post equality world in America. Laws are used to bully people all the time.

The whole war on drugs was to bully hippies and minorities.
> how would they have convinced third party developers to accept it?

Present it as a feature?

“In the event of the dissolution of Steam/Valve, we will endeavour to do everything reasonable to ensure that previously purchased licenses to your content keep working for subscribers in the absence of the Steam platform.”

Just because they try to keep it working doesn’t mean they have to make it DRM free (e.g. copyable between all computers without any checks).
Please update title to read Las Vegas, New Mexico.
Excellent job, I love Yandex products, and this framework seems to be very useful.
> I feel like this man is as close to being a monk for computer science as one could ever be.

He has a wife, two grown kids, and some grandkids too. He’s a believing, practising Lutheran [0] (some have even said a “devout” one) and published a book on the Bible [1]. He plays piano and organ - he sometimes plays the organ at his church, and he and his wife even have a pipe organ in their house [2], and he has composed an original work for it [3].

Calling him a “monk for computer science” makes him sound very one-dimensional, when he isn’t.

[0] https://www.livinglutheran.org/2018/12/im-a-lutheran-don-knu...

[1] https://www-cs-faculty.stanford.edu/~knuth/316.html

[2] https://www-cs-faculty.stanford.edu/~knuth/organ.html

[3] https://www-cs-faculty.stanford.edu/~knuth/fant.html
Post a link to the original rather than copying blocks of text without context
I'm not sure if this is exactly what you're asking about, but submitting an app to the App Store currently performs pretty stringent checks on things the app does — including automated scanning for usage of private system APIs and ensuring that apps include appropriate reasons for asking for access to private data (contacts, photos, location data, etc.).

Without certain forms of review, it's much easier for apps to exploit weaknesses (whether in the OS, frameworks, the user, etc.), and I can't imagine that Meta would self-regulate any more than they are forced to now. Their apps and SDKs already hoover up as much data as the system will silently allow, but I'd rather not be forced to expand my device to them, if possible.
Probably not talking about the supreme court.
I don’t get it. We certainly wouldn’t let someone younger do so.
Ethereum Merge Date: When Is the Ethereum Merge Date?
Even if you shut off GPS, your cell provider can trivially triangulate your position with acceptable precision based on your signal strength and ping response times.

(Also, many Cell Service Providers have a backchannel API that websites can use to geolocate the source of a connection given an IP + Port)
My concern isnt about Windows or Linux specifically but that something is lost when the garden only grows two plants. In, say, 1980 there were several unique OS streams, each with their own quirks: UNIX, Pick, VMS, etc.

It seems strange that we are essentially trading on isotopes of OS thinking from about 2000 when Linux took the mantle of UNIX and Windows converged on the XP code.

Is this it? Is producing an OS now so incredibly expensive and hard that we are never going to try again, and just keep bolting things on to what we have? I feel a little sad at that, even if the reasoning is impeccable.
I wonder if anybody was born there in the 80s…
You don't have to read them linearly. Volume 2 (Seminumerical Algorithms) starts with an awesome discussion of random number sequences. I think all programmers who use random number generators could benefit from reading it. You can just pick and choose other topics throughout the series.

Also, used copies can be really cheap. Some of the volumes in my back up set were just $20 each, and in excellent condition. Apparently lots of people buy the books and never read them :)
> You cannot own data except what resides on your own property. Once you give someone a copy, it is theirs to do with as they wish.

Completely agree. These outdated notions of information ownership are destroying free computing as we know it. Everything "hacker" stands for is completely antithetical to such notions.
That idea has a long history: https://en.m.wikipedia.org/wiki/Manifest_destiny
I would like to propose a litmus test of the Manhattan project.

What does it take for a person to defect and actively work to destroy their homelands political power?

I am not supporting or refuting your statement, for the record.