skysight-inc/HackerNews huggingface dataset:
When I built my own packages, back in the old days, I would never adhere to this standard. I found spreading different pieces and parts of the same app all over the filesystem to be a bit bizarre. If I built Apache, it was built with a prefix of /usr/local/apache_VERSION, with a link from /usr/local/apache. This made it easy to upgrade: I'd build a new version (with a new prefix), migrate the configs (if needed), change the symlink (which was really just for each of tracking the current version), then blow away the old version. This was back in the "servers as pets" days.
This is really well done basic instruction. (I had to wait for college to get.)
such a system by its very nature must be opaque to untrusted parties

No, you can attest to a completely open source system. Nobody's actually doing that, but it's possible. The private keys have to be secret and non-extractable, but that's it.
I’m out of my league so this may be dumb, but does any language or VM or whatnot have a combined system where each thread has its own heap, and you can talk by passing messages, but they also have a common heap for larger data that’s too expensive to pass around, but at the cost that you have to be much more careful with lifetimes or have to manage it manually or something?
I don't like knowing that my image is recorded by surveillance cameras when I go out in public.

A few decades ago someone might have said, "Well, you can choose to just not go to those places which have surveillance cameras," and that would have been a perfectly valid suggestion to solve my immediate problem at the time.

A few decades later, in 2022, the city that I live in has cameras and facial recognition everywhere. Avoiding them means never going to the supermarket, visiting the CBD, driving practically anywhere.

I don't think the hypothetical person was a shill for "Big Camera". It seems much more likely that they don't believe or haven't considered the possibility that proliferation of surveillance could lead to a future where stepping out your front door will result in your image being sent to Amazon by your neighbours doorbell. Or that they're fine with that future, but have no sympathy for people who aren't I guess.
Reddit and YouTube don't require logging in.

When I say "not require logging in" means that there is a home feed with interesting content for non-logged in users
I downloaded all 26,500 and uploaded to archive.org

https://archive.org/details/emoji-kitchen

They add new ones fairly regularly though!

https://gist.github.com/chapmanjacobd/b45da73a4aa147f0f7bba2...
To a degree, sorta?

I mean, we have examples in history like Porsche making the worlds worst tank for the Nazis (transmission fell out).

Lamborghini “hiring”
People to avoid going to war.

Manhattan project.

There is precedence for morality in engineering.

There are counter examples, as well.
I am the maintainer of a very high-performance JIT compiler for a Haskell like rules programming language used by large enterprises around the world. It uses reference counting + a global optimisation step to reduce the reference count updates to an absolute minimum. The result is compiled code that runs faster than C++ code carefully hand optimised by C++ experts over a 10 year period. There are zero GC pauses. Unless you claim that a C++ alloc/feee call is “garbage collection”. Which is not common terminology. It also (BTW) scales linearly the more cores you throw at it.
Not saying that the overall idea is wrong but that figure is way too low currently for most large metro areas in the US. And below poverty level in others.

With $75k and a family of two kids you are not going to be saving much for retirement, if anything. Medical bills can completely bankrupt you in an instant. You can’t just pick any restaurant you want without doing some research on price first. You can’t afford much of a vacation anywhere either, except perhaps taking the kids to Disneyland once a year.
See, it's them being worried about it. Users are totally fine with there being different forms of social media. That is what users want. No one ever asked other social media companies to add TikTok-like functionality — they already have actual TikTok for that.
A ton. Cities like Atlanta too. Lost of educate black people earning good salaries. Welcome to the 21st Century.
“How did ‘X’ work before computers?”

Recently I saw someone ask how vinyl records were ‘decoded’.

It’s good that young people are asking these questions, but it does feel odd to be part of the last generation to have grown up in the pre-digital age.
Best security practices as defined by Microsoft, but if I want, I can still create my own arbitrary security requirements and enforce them via software/audits.
I backed them up

https://archive.org/details/emoji-kitchen
The fastest service was Wuhan–Guangzhou, which averaged 313 km/h on non-stops, but is not run any more.

Chicago-NYC with stops would probably be 5 hours, which is barely competitive with flying. The intermediate stops would potentially make it viable though.
When she took the helm in 2014 Intel’s market cap was 86 times higher than AMD’s. Her execution has been amazing at a time when Intel has made mistake after mistake.
There is some kind of balance since both of those are free. I'm sure they prioritize user engagement and any loss of users is inadvertent.
Yeah, that was always the dream, but I don't know how they botched the execution so hard. All the technology for that was already there, especially with their controllers and Google TV, but they just never finished connecting the dots. Why? It beats me. They got 80% of the way there and then just... stopped caring?

It's like they had a team of awesome engineers who built the thing but... no gamers? Like it just seemed that nobody at Google, on or off the Stadia team, actually wanted it to grow beyond tech demo status. Their library is still laughably small, years later, and only very very few games offer crossplay.
All of those things are ancillary except for privacy (even though privacy capability is closely tied to the browser engine these days). It's like saying it must be a Cadillac... "but I can choose the seat colours and stereo so that counts for something!" - i mean sure if you value the stereo that much but you have no choice over the things that makes it what it is, the engine.
GP did not say that. I suggest you read before commenting.
> Let's say I'm a healthcare provider, and I'm about to send sensitive medical data to a third party vendor. Wouldn't you prefer that this data only be able to be decrypted by a computer that can prove to the world it booted a clean OS image with all the latest security patches installed?

No, because this still doesn't mean my data is secure. A human can still go into the third party vendor's system and see my data, and if that human wants to steal it, they can. No amount of remote attestation will prevent that.

> Remote attestation gives more control to the owners of data to dictate how that data is processed on third-party machines

Oh, really? So every time my health care provider wants to send my data to a third party, a remote attestation confirmation box will pop up on my phone so I can say yes or no, or ask more questions about the third party vendor's computers?

Ultimately the problem here is trust, and trust is a social problem, and as the saying goes, you can't use technology to solve a social problem. But you sure can pretend to be using technology to "solve" a problem in order to get people to give up more and more control over their devices.
The fundamental security mechanism upon which the entire system hinges is opaque.
MATLAB is such a peculiar language. Using it often reminds me of using Prolog, although MATLAB does a good job of hiding its esoteric nature.

Some of my early post-grad work was done in MATLAB and I remember having to find ways to collapse loops into matrix operations so that MATLAB could finish executing the programs in a reasonable amount of time.

I actually think somewhere in the MATLAB documentation it explains that all loop constructs in MATLAB are compiled into matrix operations by the interpreter before MATLAB executed anything.

Which is why MATLAB is so often orders of magnitude slower than Python even though they're supposed to be able to solve similar problems. The idiomatic MATLAB way of writing programs just requires a very matrix-y view of the world.
Just put "elericsapp" in a subdirectory under /opt or /usr/local and keep it simple. Why spread it all over the place?
Practical ZK is coming from cryptography, like this decentralized gun registry by the Brown University.

https://eprint.iacr.org/2021/107.pdf

People in the crypto space are coming from a different angle, they are franctically trying to find a legitimate use for cryptocurrencies, so far unsuccessfully, by constantly rebranding blockchain technologies without being able to address the challenges. It's not that we desire to trust Apple, it's that they get things done. They have actual solutions that work, not just empty promises aimed at greater fools. People in the crypto space never deliver.
GameTank – open-source 8-bit homebrew console and tools
But not into "births".
Drug overdoses are real.

Optimization in the abstract is meaningless.
Bddiasm: The x86 Instruction Decoder
And you're engaging in some kind of ad-hominem fallacy -- refute the claims with facts, don't attack the messengers
>I delight in isochrone maps

I almost orgasmed reading "isochrone maps". I wasn't aware of the "concept" but it's one of those things you go "of course it is".
Has anyone used it? Have you noticed any differences anywhere?
I've been using PHP for our latest venture after 8+ years of node.js and it's become the de facto language to use at our company.

Anyone writing comments about "scaling" or "performance" has never had to deal with a half-baked application written by some junior node.js developer who thought their microservice had to be Internet Scale(tm)

PHP is a great choice in 2022. Hell, it'll be a great choice in 2032 I'm sure. The tooling and debugging that PHP provides is incredibly powerful. Developers are easy to find, it's easy to pick up (which sure makes it easy to get wrong), but those who get it right will do it incredibly well.

Arguments against PHP are lead by developers who think they're smarter than they really are.
Graham, it has the phrase about how you can, "hydrate dynamic components".

Likened most to the phrase; Simpsons like, "Der".
> … "this is the border that Russia has crossed."

… this is the border that Putin and his terrorist thug army have crossed. ~ FTFY

The majority of the Russian people either don't want any part of the entire situation (just wanna be left alone to try and live a life as best they're able), are fooled by propaganda and fake news (not unique to Americans after all; I guess folks from anywhere in the world can be fooled. Surprising…), or totally against the whole thing but mostly afraid to say anything, lest they be branded "traitors" and treated like an enemy by their own government.
No, GP said Russians have crossed the line where some humans stop behaving like humans.

There is a difference between being not human and being a human that acts like they are not human.
agreed, your wants take precedence. If there are enough buyers like you who care about hardware freedom they'll drop this feature.
Not to take the easy way out, but everything on "Hits" is good.
Yeah some of us enjoy work. People pay me to do what I started doing for fun at 9 years old? Hells yeah! More!!

If I win the lottery tomorrow (IPO or otherwise), I’d probably continue to have a job of some sort. Maybe I would prioritize a different reward than cashflow, but my day to day wouldn’t change much.
Confucian Hylemorphism
> Like—say your startup goes public and you become a billionaire. What now? What will you buy, where will you live, what will you eat for lunch?

I'd buy and eat roughly what I do now, in roughly the same area, but I'd own a small house or townhouse near the park with a nice garden and no mortgage.

> When you wake up, what will your bedroom look like? Who (if anyone) will be in it with you? What clothes will you put on? What will you eat for breakfast? What will the breakfast room look like? What will you do all day? Who will you spend time with? What will you talk about?

My bedroom will look basically the same, but I'll be allowed to fix all the peeling paint and weird broken plaster because I won't be renting. I'll put on clothes that are identical to my current clothes, walk down to the cafe for a coffee and take it into the park, and jump on a zoom/slack call with a friend around 10 or 11am to talk about our project. I know this is what will happen because I work a normal job four days a week and the fifth day already looks like this.

Reading this, I don't understand what the author's talking about. My life's fine, I just want to own a home and work a bit less. Most of the people I know are like this. The grand plans are "get married," "get enough money to support my parents in their retirement," "get enough for a house deposit," or "bring my family over from the old country." Is this a Bay Area rationalist thing where everyone the author knows is trying to cure cancer/study X-risks/align skynet/defeat malaria?
I don't expect to google "kittens" to be able to learn how "American clone of" is generally used. Do you?
If you’re going to have a loss, or have to pull out all the stops to scrape by, just make it as bad as possible (jam everything bad you can into it).

Then you take all the pain at once, and from that point on everything will look better. People will say “look how far they’ve come since that $500MM loss!”

At least, that’s the theory. Especially handy right now when congress was debating (now passed) a handout to the industry.
Indium gallium arsenide and gallium arsenide are compound semiconductors that are far too expensive for use in mass market panels. They are used as cells or components of multi-junction cells for satellites and a few other high value applications. Commercial silicon cells are doped with phosphorus and boron or gallium.

On further reading I find that you are correct about RoHS exemptions for lead in solar modules:

https://www.pv-magazine.com/2019/12/07/the-weekend-read-taki...

I appreciate the correction.
really glad to see this released, because it will help popularize the new lch/oklch color spaces, which are an improvement over rgb/hsl.

with that said, i did some experimentation with these new color spaces recently and found that even these are not foolproof for those of us who don't want to be steeped in the depths of color spaces and human perception. for instance, mentioned in the article is automatic gamut mapping for when you try to display a color that's outside the gamut. seems like that's a good thing since it would take care of some rare edge cases, right?

no, the edge cases are all over the place. the gamut "depth" is dependent on the component values (like lightness and chroma), so if you want to go from a light red hue to a light yellow hue, you can't just change the hue component, because the lightness and chroma values might put the target color out of bounds. that's where the automatic gamut mapping kicks in. but guess what? the various browser engines currently have their own algorithms, and they that don't pick the same nearby colors.

the evil martians oklch color picker[0] shows this visually. if you look at the hue vs. lightness graph, notice how jagged the (planar projection of the) gamut is there. for any given horizontal line (constant lightness), you might end up out of bounds on the chroma component for a chosen hue. this can happen in any of the 3 dimensions.

also, while oklch is more perceptually even generally, there are gradient examples where it's not much better (i think orange/brown gradients is one of those cases, but i'm not certain, offhand). color is apparently quite hard, so i'm not knocking the effort or the improvements, but there are still some gotchas remaining for designers/developers.

[0]: https://lch.evilmartians.io/
Not my experience at all. I am maintaining a very high performance JIT compiler for a Haskell like programming language used in production at large enterprises around the world. So I am used to very carefully analyse performance. And reference counting is never the bottleneck. You might be right in theory but not in practice.
I've seen this model work, primarily on digital tabletop games and their DLCs. Like you might have to buy the base game on each platform (which is usually pretty cheap) but then all the expansion packs are tied to your game account and work anywhere.

I think Uplay works similarly, and you can cross play and cross save with your sub on any device.

Microsoft GamePass is moving towards a similar direction, where your sub lets you cross play and save between PC, Xbox, cloud, and Android (via the cloud).

I dunno why Google never bothered doing that. Stadia tech wise is actually really impressive and comparable to nvidia's offering, with much better UX, but they just gave up almost immediately after launch. What a missed opportunity :(
The error in logic there is that chip usage is stronger proof, but not infallible. How was the account started? Cards can be stolen from mailboxes and purses. Some smartcard manufacturers have poor key handling security; Gemalto emailed keys before writing them to SIMs. Some EMV chips were vulnerable to replay attacks due to shoddy implementation.

This is why consumer protection laws are more important than any technical means of financial security. Having a super duper hardware wallet to store your cryptocurrency doesn't negate the irreversible nature of transactions.

Raw data is even harder to secure than money. Money in a banking system can be clawed back or frozen. Data can't be un-leaked.
There is a slightly different frame on "Increasing happiness is impossible" that the article misses (despite being quite thorough).

Optimising for happiness is a terrible goal. Particularly for people of a strong materialist bent, because the obvious answer is drugs, but even spiritually it is quite clear that personal happiness isn't something valuable. Major religions tend to optimise for community. The two I know well - Christianity favours forgiveness and a relation between sinner and God, Buddhism optimises for reducing suffering but in the context of a communal setting.

From the extreme materialist position note that happiness has no evolutionary advantages. Power and wealth do, being gregarious does, having lots of partners does. So humans are not going to optimise for happiness. Those that do get bred out of the gene pool. So in practice happiness is only a signpost pointing towards more pressing goals.
https://hackingutopia.canny.io/hunger/
Plenty of people do it. I use tpm2-totp for it. There is a key sealed in my TPM, that will only unseal for known boot stacks (firmware/bootloader/kernel). I have the same key stored in my Yubikey's TOTP application. After boot I can verify my stack by comparing a TOTP code generated by my Yubikey with one generated by the TPM.

Caveat is that security only extends into the kernel image, so for my use case I embed the initrd in the kernel image and have all the filesystems and swap on a dm-crypt volume.

I also have to unseal and reseal when performing upgrades of the initramfs and above, but I'm fine with that.
Please don't feed this offtopic tangent further, one thread gone sideways with its starting point correctly flagged seems way more than enough.
Admittedly it is a simplified scenario for the sake of argument. You'd need to have a full attestation of everything that controls access to the data (including ACLs) to get much of a guarantee.

But in a future world it's not hard to imagine the vendor software running in some sort of SGX-like environment that is very difficult to manually extract the data from.
> Wouldn't you prefer that this data only be able to be decrypted by a computer that can prove to the world it booted a clean OS image with all the latest security patches installed?

I trust myself more than I trust anyone or anything else. It's as simple as that. I don't even slightly trust Microsoft, Google, or Apple.

Your logic is built on an invalid premise that these companies can, in fact, be trusted.

> Remote attestation gives more control to the owners of data to dictate how that data is processed on third-party machines (or even their own machines that may have been compromised).

This is exactly what I want to avoid. It's my device. It should only ever serve me, not anyone else, including its manufacturer and/or OS developer. It should not execute a single instruction that isn't in service of helping me achieve something.

Also, the concept of ownership can simply not be applied to something that does not obey the physical conservation law, i.e. can be copied perfectly and indefinitely.
And the past 50 years of land grabs is what?
You're entirely right. I'll try and remember that next time I encounter dehumanising rhetoric and will consider all the good it can do.
> The problem is who's using it, who's defining what "security" means?

Ask that question every time you see the word "security"
written. There is no such word as bare security.

- security for who?

- security from who?

- security to what ends?

Much of the time security is a closed system, fixed-sum game. My
security means your loss of it.
So a regular (ie mainland) US citizen has to file taxes (& pay if earnings 108k+) of living anywhere in world. Does this stay true if same citizen lives in these territories you refered?
I suppose we shouldn't be using any American software either after what we've been doing to the middle east for the last 20 years?
You do not support a way to keep my old number and start using a number that isn't associated with me, so I don't see how the doxx report is related to your offering outside of showing others who know those details can find my number which I consider public info.
Arm and the underlying infrastructure of music streaming should be this.
Hypergraph is like a graph but one where vertexes can connect more than two nodes. Right?

Isn't that just like the difference between Object Oriented and Relational, Models? A relational table has multiple columns. A relational table does not represent a relation between two things. It represents a relation between N things, with its N columns.
US IPv6 adoption is at 51%, so the answer is just barely yes.
While Cloudflare is a big player, pretty much every service today has some form of third party MITM machine - things like Fastly, Akamai, Google Cloud Load Balancer and CloudFront all provide reverse proxy capabilities on the same level as Cloudflare.

Even if you run your own proxy and caching, you can’t trust your cloud provider not to DMA your keys unless you’re using trusted computing[0] (which ironically requires remote attestation if a company wants to verify it’s active on their CPU), and then chances are a dedicated three-letter-agency has exploits at the ready if they really need to extract information.

If a company isn’t running their own bare metal, nothing is safe.

0: https://aws.amazon.com/blogs/security/confidential-computing...
As an old dev, I'll tell you that all code is shit code. But some of it is my shit, and other bits are your shit.
I'll extract them for 40k a pop all day long. I've got the hardware in storage from an old contract. Side channel power analysis is fun.
Prime Health
Strongly agree, but even if you are wrong on all those points, I still don't want to be forced to run the same exact monoculture software as everone else.

Good luck getting your x86-64 windows kernel + chrome JavaScript exploit chain to run on my big endian arm 64 running Linux and Firefox.

(Also, the existence of competition like that regularly forces all the alternatives to improve.)