skysight-inc/HackerNews huggingface dataset:
> A few vendors got upset that I had their name in the address

Kinda annoying of then, maybe I would go for an opaque (or maybe just a simplified) canary. Like the initials or abbreviation
>>> just the difficulty in retrieving resources about understanding how the Linux kernel is patched to run on that ARM board, the necessary drivers and how all the various sensors and interfaces communicate really lets me down

maybe you could give it a try and document your trip ? As someone who'd love to help the cause, but who doesn't have much time, a good documentation would help.
FWIW, I agree with everything you've written. My point is that it's very clear to see that Tavis Ormandy understands at a very deep level the tradeoffs and threat vectors of browser-implemented password managers vs. password-manager plugins. You may not come to the same conclusion he does, but Ormandy's position is not due to a lack of understanding

That is in contrast with this blog post author who fundamentally doesn't understand what he's talking about.
Add to the list

- Hidden Markov Models

- Kalman filters

Things which have tutorials that continually fail to explain the tao of the thing.
Afaik 1password together with Fastmail, see https://1password.com/fastmail/ or https://www.fastmail.com/1password/, respectively.
This was partly why I recommended Amplifi to my parents. I like that Ubiquiti finally has a consumer brand this is mostly "off the shelf" configured.

I don't think Amplifi is getting enough love in the consumer market today. I know anecdotally when walking my parents through the Amplifi purchases I had to ask a Best Buy employee to leave and stop confusing my parents because he didn't understand why anyone would want the "weird new" Amplifi brand and not "the better brands" Google Home or Netgear Orbi. I didn't feel like explaining Ubiquiti's decades in Enterprise to the kid.

It doesn't help that Ubiquiti has had some recent troubles, and I'm still not sure even Ubiquiti knows what the long term horizon looks like for Amplifi products. But I appreciate that they are trying to make headway in the consumer space, and that from what I can tell the consumer products do show the experience from Enterprise products.
Now the WSJ wants the Whitehouse to act right. After the latitude the media allowed Trump I'm really cynical about media crying wolf.
Absolutely. When people try to silence and sensor you, it's a sign they're threatened by what you have to say. And we've got nothing to fear as long as we speak the truth.

These are common scare tactics by large investor backed organizations, to try and make all possible competition disappear. They especially target small, bootstrapped businesses like ourselves that are more favored by entrepreneurs for their low-budget hiring requirements. And Toptal knows that we'll never be able to battle them out in courts. So they try to enforce fear to silence us.

It's not going to work this time. I won't be silenced.
Hasn't been updated since 2020, but Tim Dettmer's guide [0] is pretty much the gold standard for optimizing what to buy for which area of DL/ML you're interested in. The pricing has changed thanks to GPU prices coming back down to earth a bit, but what to look out/how much ram you need for which task hasn't. Check out the "TL;DR advice" section then scroll back up for detail info on why and common misconceptions. For the tips on a RAID/NAS setup alongside it, just head to the datahoarders subreddit and their FAQ.

[0] https://timdettmers.com/2020/09/07/which-gpu-for-deep-learni...
The title was not good I think GPT-3 or Dalle are the keyword put them in any form a lot of people will sneak in :)
Proprietary devs should use static linking (with musl) or chroots/containers. What makes the author think they are the target audience of glibc?
> Async: "When you get a chance can you update XYZ, not urgent" - doesn't require a response

For common tasks this should be in a system then. Otherwise this is essentially the major pitfall of chat. IMHO anyone using Slack for async is doing it wrong.
Stable Diffusion is mind-blowingly good at some things. If you are looking for modern artistic illustrations (like the stuff that you would find on the front page of Artstation) - it's state of the art, better in my opinion then Dalle-2 and Midjourney.

But, the interesting thing is that while it is so good in producing detailed artworks and matching the styles of popular artists, it's surprisingly weak at other things, like interpreting complex original prompts. We've all seen the meme pictures made in Craiyon (previously Dalle-mini) of photoshop-collage-like visual jokes. Stable Diffusion with all its sophistication is much worse at those and is struggling to interpret a lot of prompts that the free and public Craiyon is great with. The compositions are worse, it misses a lot of requested objects or even misses the idea entirely.

Also as good as it is at complex artistic illustrations, it is as bad at minimalistic and simple ones, like logos and icons. I am a logo designer and I am already using AI a lot to produce sketches and ideas for commercial logos, and right now the free and publicly available Craiyon is head and shoulders better at that then Stable Diffusion.

Maybe in the future we will have a universal winner AI that is the best at any style of pictures that you can imagine. But right now we have an interesting competition when different AI have surprising strengths and weaknesses and there's a lot of reason in trying them all.
It would be nice to get email of random paragraphs from the ebooks you own. This can be a good reminder of what we don't know or were interested at one point.
Is there any way to avoid this?
I have no experience with solar installs but I wouldn't be surprised if crappy rooftop installs lead to leaks roofs. Happens all the time with satellite dishes.
I dunno

it's quite possible it'll work out as well as IBM's OS/2 running Windows apps did
GitLab team member here, thanks for sharing!

You can also set Git push options understood by the GitLab server to create merge requests [0] on the CLI.

Sid's dotfiles provide an example in [1]. The workflow is 1) push 2) create merge request 3) set target (master/main) 4) merge when the pipeline succeeds.

alias mwps='git push -u origin -o merge_request.create -o merge_request.target=main -o merge_request.merge_when_pipeline_succeeds' # mwps NAME_OF_BRANCH

There are more push options, such as setting the MR as draft, add labels, milestones, assignees, etc. My personal favorite: Remove the source branch when the MR is merged. That's a project setting too, but sometimes not set. Using the push options, you can force this behavior and avoid stale Git branches.

glab as CLI tool provides a similar functionality to create an MR. Its development has been moved to this project [2]

[0] https://docs.gitlab.com/ee/user/project/push_options.html#pu...

[1] https://gitlab.com/sytses/dotfiles/-/blob/master/git/aliases...

[2] https://gitlab.com/gitlab-org/cli
Layoffs in Tech?
Agree. Unless a post-mortem analysis of previous reliability "issues" determines that the benefit justifies the cost, it's not worth it. 99.99% uptime for zero incremental cost vs 99.9999% uptime and 100k USD.
Professional Growth (2012)
"Modern C" by Jens Gustedt is an excellent book on a more modern approach to C.
I think you'd be interested in this https://news.ycombinator.com/item?id=32335165
> In my apartment we have ~2,500 books

unfortunately books are one of the most annoying things when you move.

I used to own a quite large stash of them, in the hundreds, not thousands, but started moving a lot, like every 6 months and I began hating them. Now they all live inside boxes in the basement of my house. I don't think I'm going to take them out anytime soon.
I will admit that this requirement always confused me. What is there to benefit from by requiring it?
This info gives us an interesting opportunity to estimate the rate at which Signal is adding new users. They've been very tight-lipped (understandably) about their usage stats but anecdotally they seem to be an increasingly common presence on my friends' phones, even the non-techies.

As far as I can tell, Signal uses Twilio only to send SMS for phone number verification. Verification happens when a user registers a new number or changes the number on their existing account.

The rate at which Signal is adding new users could be calculated by:

1900 * (proportion of new registrants among SMS recipients) / (length of Twilio incident)

You could probably make some common-sense assumptions about the first variable. But I can't find any publicly available info on when Twilio was first compromised. Their press release only mentions that they discovered the intrusion on August 4, which is presumably close to the end date of the incident. Does anyone know what the estimated start of the incident might be?
Are you basing your argument on assumptions that:

A) Most contacts have phone numbers
B) Most contacts don't have email addresses?

I think you're assuming this (and as it happens, I agree, although the number of email-only contacts is still nonzero for a lot of people).

Are you also assuming that it just adds a lot of complexity to be willing to search by both phone numbers and emails?

That's the part of your argument I'm not grasping. Signal has to be willing to intersect known-account-identifiers with this-device's-local-contact-handles, what's the problem with preferring phone numbers but allowing emails?
Breaking the site guidelines like this will get you banned here, regardless of how wrong someone is or you feel they are.

We've had to warn you about this kind of thing more than once in the past.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here, we'd appreciate it.
> - return-anxiety: what if there's no scooters? ==> rarely happens, but if so, then take an uber!

> - range-anxiety: what if it runs out of juice? ==> I've ridden a lot and never come close...

Perhaps you have not ridden one very far then. I have encountered both of these problems at once riding across a downtown thinking there will be more live scooters on the other side and ended up with quite a walking journey back, uphill.
Just checked the price : 1299$ ouch, that's really expensive...
> Write a stern email?

exactly what happened. so not even the slightest reason for an immediate reaction

> recommend not hosting APIs

yes! we learned the hard way :)
Everyone wants this -- well, everyone except the online-advertising industrial complex, whose profits depend on being able to collect and sell people's data without having to worry too much about the societal costs.

The online-advertising industrial complex won't want to give up its sweetheart deal: private gains with public costs. Going forward, I'd expect to see a big PR/lobbying fight about this, possibly including astroturfing and even personal attacks on Lina Khan.

If you care about this, advocate now.
I’ve been watching Google for a long time. And with all of the smart people they have working there, they sure are stupid.

Who the hell is steering the ship?
Which is less scary than it sounds because a signal "account" is a phone number. Oh no your privacy!

If you view Signal as "a service that allows you to send E2E messages to phone numbers" then this is fine. Your friends will even get a message that says the chat has been rekeyed once the new person sets up Signal.

And if you're worried about government's compelling your cell carrier to turn over your phone number then rest assured that usernames wouldn't help you since they could just compel Signal to turn over your username. So much safer.

As long as the source of identity is something other than a private key that is owned and controlled by the user and devices must have their keys signed by that key to be considered valid it will be the same issue.
Ha Perfect!

Yes, wine is an Windows binary executor with library translation.

https://wiki.winehq.org/FAQ#Is_Wine_an_emulator.3F_There_see...
There's no reason launching a container _must_ be slow. Under the hood, launching a containerized process is just making a few kernel syscalls that have very little overhead. You might be thinking of docker, which is slow because it's intended for certain use cases and brings a lot of baggage with it in the name of backward compatibility from a time when the Linux container ecosystem was much less mature.

There are several projects working on fast, slim containers (and even VMs) with completely negligible startup times.

I don't know what is holding back container/VM access to graphics hardware, but it can't be insurmountable if the cloud providers are doing it.
People should start with http://geocalc.clas.asu.edu/pdf/OerstedMedalLecture.pdf
California to consider keeping last nuclear plant open
Just try changing your hosts or nameservers across different versions of Ubuntu Server.

The fragmentation is such a mess even between 1.x major versions. Their own documentation is broken or non existant.
You can trivially create as many emails as you want, anonymously and for free.

In many countries, registering phone numbers anonymously is illegal and/or impossible.
At least on Android, any application that I give permission to access my contact list can see email addresses for the client-side contacts that are synced with my Gmail account. Maybe iOS behaves differently?
Leveraging massive libraries is not "from scratch".

Another thought: You are on HN, so you probably prefer Unix to Windows. Why do you think that is?
Merchants will sometimes make a small charge transaction, which they then reverse, to verify that a card is active/valid.
'On a cosmic scale, "soon" could be measured in millennia.'
> As the article points out, modern x86 CPUs boot up in 16 bit mode, then get transferred into 32 bit mode, then 64 bit mode. So right out the gate such a CPU is not compatible with existing operating systems, so now you have a non-compatible architecture

Except that a modern OS is booted in UEFI mode meaning that the steps of going fro 16 -> 32 -> 64-bit mode are all handled by the firmware, not the kernel or the bootloader. The OS kernel will only (at most) switch to 32-bit compatibility mode (a submode of long-mode not protected mode) when it needs to run 32-bit apps, otherwise staying in 64-bit mode 100% of the time.
Have a look at some merchant facing (sales) documentation about account updaters [1]. I'm not affiliated (or even in the payments business, thank goodness), but this seems like a pretty decent overview of programs.

Maybe your issuer doesn't participate, but most do. Many merchants that do recurring or card on file billing will use these services because people often inadverdantly forget to update accounts and don't respond to notifications but do contact customer service when the renewal fails or their new order fails.

[1] https://paymentcloudinc.com/blog/account-updater/
This was kind of expected as AppLovin has core financial backing from Chinese sources and Unity is affiliated with the US military-industrial complex.
You cut out a key word:

> Linux is really hurt here by the total lack of any unit testing or UI scripting standards.

> standards

I've been very impressed reading how the Rust developers handle this. They have a tool called crater[1], which runs regression tests for the compiler against all Rust code ever released on crates.io or GitHub. Every front-facing change that is even slightly risky must pass a crater run.

https://github.com/rust-lang/crater

Surely Microsoft has internal tools for Windows that do the same thing: run a battery of tests across popular apps and make sure changes in the OS don't break any user apps.

Where's the similar test harness for Linux you can run that tests hundreds of popular apps across Wayland/X11 and Gnome/KDE/XFCE and makes sure everything still works?
> the eastern part of [Oregon] has sunnier weather

Pendleton has an annual round-up that's been running for 100-odd years. Not a reason to live there necessarily, but just in case anybody's in the area and hadn't heard of it.

Pendleton also has cheap housing, fiber internet, and a decent craft brewery http://prodigalsonbrewery.com/ .
How is that related to "Scaling Kubernetes to Thousands of CRDs"?
Sounds pretty drastic to me to draw the line between "everybody" and "nerds" at the point of the contact book being available or not.
I've been using wine and glibc for almost 20 years now and wine is waaaay more unstable than glibc.

Wine is nice until you try to play with sims3 after updating wine. Every new release of wine breaks it.

Please use wine for more than a few months before commenting on how good it is.

It's normal that every new release some game stops working. Which is why steam offers the option to choose which proton version to use. If they all worked great one could just stick to the last.
The source code is literally 20 lines, very easy to audit. You can put the static download in your Mozilla folder to avoid auto-updates. It is a nice quality of life thing for me. But yeah definitely not necessary as you can always edit the URL yourself, as the extension author helpfully notes.
Sidenote. I remember when Warcraft 3 ran better in Wine+Debian than in Windows.
Athlon II x2 CPU and Nvidia Geforce 6600 GT with a wooping 256MB of VRAM. That was one hot machine. Poor coolers.
The difference is if Wine breaks an application that works on Windows, it's considered a bug that should be fixed, regardless of why.
I don't think Prizren is part of any project name--it just happened to be where DebConf was hosted this year. Unless you're referring to Purism.
That's a great example. Thanks!
Unsubstantive/flamebait/name-calling comments will get you banned here, so can you please not?

https://news.ycombinator.com/newsguidelines.html
If you want to do it, just record one or two. Upload them as unlisted. Then reply to pg on Twitter, telling him, “Look, this is what I made. Is it cool with you if I continue, and may I make them public?”.

He has already given his okay to some GPT-3 based answer generator which was posted here a few months back.
100%. If you can't deploy, you can't deliver.
This is the exact point that I would love to see someone really dig into relative to some of the prevailing theories of biogenesis. Molecular biology is so mind-bogglingly complex that 10^22 planets could disappear into the noise floor very quickly.
I wonder if this person knows that you do not have to respond to a C&D or submit to its demands? If a party makes a frivolous demand like this, yes, they can file a lawsuit against you. But the chances of that happening are quite slim. Even the most unethical lawyers hesitate to bring junk like this in front of a judge.

Unfortunately, if you talk to a typical lawyer, they will always say that it is in your best (legal) interest to send a strong response back (at a mere $300 hour, or $3000 flat fee).
> It's plenty common for binary distributions of software to come as tgz files. That's usually including a bunch of .so files.

Yes, and compatibility across distros / releases is very hit-and-miss, because they usually ship certain libraries and rely on the OS for others.

I’m not sure whether it’s possible to ship every library without running into ODR issues, but at that point, you’d loose all of the advantages of dynamic linking anyway.
The WSJ is asking courts to act, not the WH:

>Twitter is a private company. But evidence of a direct connection between White House pressure and Twitter censorship bolsters the argument that social-media platforms can be sued as “state actors” for restricting speech in violation of the First Amendment. Courts have been reluctant, and properly so, to allow such lawsuits to proceed without evidence linking specific demands from government officials to censorship.
Something to note is that resistive and (much more commonly) gas heating is prone to warping cookware, which isn't an issue with those types of heat. However, once warped they heat unevenly over induction. So, you may find yourself having to change some of your cookware anyway (I'm in the same boat btw)
Part of it is that, in many cases, we've normed not calling people on the phone out of the blue. And, while some may disagree, we often do need some reasonably real-time communication channel. Someone may not see a message instantly but it is reasonable to have some mechanism in a business setting to generally reach people quickly--if for example, there're supposed to be someplace.
That seems like a problem that could easily be solved by sending fewer notifications. Do I really need to know if somebody has joined Signal until I actually want to talk to them? Isn't it better to have a larger pool of people with whom I can communicate securely using Signal?

I'm mostly just confused because this is being presented as a technical limitation: using email addresses would supposedly "require Signal to keep a database of contacts serverside". I don't understand how or why that's true.
Pre-mobile! Reading the first sections on label placement was strange experience.
https://en.wikipedia.org/wiki/BLUF_(communication)
if that were true it would have already happened in healthcare, so they can extract more from sick people in the States; these existing systems optimize around different problems, goals and bounds
Please don't post flamebait like this on divisive topics.

Would you mind reviewing https://news.ycombinator.com/newsguidelines.html and sticking to the rules? Note these ones:

"Comments should get more thoughtful and substantive, not less, as a topic gets more divisive."

"Eschew flamebait."
This is not my experience, I too have been doing this for 10 years.

In my experience, I got tons of spam, especially after a leak.

By far, the _most_ spam I get to is get to government agencies and medical facilities. I started getting male enhancement messages to my parknyc (NYC parking meters) address in under a week after registering.

Since my addresses are never used for more than one service, I can be reasonable sure they had a leak of some sort, but it is also not suffice evidence to actually report it.
https://www.youtube.com/c/technologyconnections

https://www.youtube.com/c/timeghost
I absolutely do not understand why I have to link my very sensitive Signal account to a very insecure and hard to change ID: my phone number (which can be traced to my identity in too many ways).

Why Signal does not allow fully anonymous IDs (like Threema does) is a mystery to me.

Signal is fine for most users, but it is inherently _unsafe_ for high-value sensitive communications where participants can expect targeted phishing attacks.
Thinking About How to Choose a Life
Super interesting article around how to think about making decisions and asking what we want out of life. I think most youngish people these days feel restless including myself, but we don't necessarily know why.
https://en.wikipedia.org/wiki/BLUF_(communication)

Bottom Line Up Front
Lead with the summary (conclusions/recommendations, decision) OR statement in a single sentence what action are asking the recipient

Then you can follow with supporting details at increasing levels of granularity

It inverts the usual structure because most people feel compelled to give background, discuss options, offer costs-benefits, go into detail, etc .. all before coming to a conclusion/request about 75% down the email.
> ...and the result is that the servers have a plaintext log of who talks to who on their service

Is there a reason why a user's address book can't be encrypted as well?
That sounds horrible.
Would I be SoL even if I had ticked "Registration Lock" prior to that?