skysight-inc/HackerNews huggingface dataset:
Sadly the protections you mention are only true if we ignore the last decade of security research and dragnet surveillance activity. Metadata protection in Signal has major asterisks they do not like to talk about which could be activated covertly by warrant, threats, or money.

1. Google, Apple, or Signal could, compile a malicious Signal binary that generates weak keys and deliver it to specific users, or all users, via app stores.

2. Signal sysadmins or third party datacenter techs could use any of a pile of SGX exploits to dump all their centralized metadata in plain text.

3. Signal aggregates all IP metadata to one place making it easy for their cloud providers and ISPs to work out who is talking to who.

4. Carriers see SMS activations and know who uses Signal. They also know all of the cellular data IPs. An entity that buys this along with data from other ISPs would quickly learn the identities of most conversation participants and their current locations. Enrich that with data widely sold from drivers license office and you also get race, home address, etc, etc.

Centralized PII requiring services that claim to be promoting security and privacy should be met with extreme scrutiny.
(dupe of https://news.ycombinator.com/item?id=32468864)
> Wish it was a standalone app rather than buried in the settings menu.

I could say the same about Passwords. I'm happy that they * finally * got passwords out of that relic called Keychain Access and into the System Preferences, but they could do even more.

I hope to see an actual "online security" center on iOS and macOS within 2 years, with passwords, temporary emails, even learning material.
Most people dieting are fat. Where is the paradox?
Many db applications tack on a spreadsheet gui and a form input mode. See baserow, budibase, airtables, memento, etc. Some include fancier features like webhooks and ACLs.

My main rant is the lack of import/export standardization in this space.
One of my old friends had a fun idea for time locked encryption using a satellite, by broadcasts public keys and then the matching private keys after a fixed amount of time.

Probably requires too much trust in the satellite's builders, but it's a fun idea...
I assume they mean National Insurance, which gives the impression that it’s a NHS-specific tax, but isn’t.
Ask HN: Applying to jobs. How to negotiate a salary for less pay, to min wage?
This probably sounds stupid; let me explain.

I live in NJ near NYC. A quick google search tells me that the average SWE salary in NYC is around $132k. Looking at the current "Who is hiring" thread, at a glance, it seems that most salaries range from $75k to $250k+ from just the few that list them.

I want to work these same jobs at minimum wage, meaning around $27k.

Why? Because I want things to be "calmer."

I want to know that I'll have an easier time applying and getting hired faster than other applicants at my same skill level because I'm willing to work for much less than expected.

I want to know that I'll be less likely to be let go during downsizing because I work at less pay than others at the same level. I want to know that I'm more valued at a company because the cost to keep me around is so low that if they have a bad quarter, they think of me last to get rid of.

I want management to know that I will not jump ship as soon as someone else offers me higher pay; I love stability and consistency. By asking for lesser pay, I don't want to communicate that I'm going to slack off but that I want to work at a lower salary in exchange for work to be "calmer," like being able to afford to work my own pace just a little bit. And by working at my own pace, I'm not trying to phrase getting distracted playing games on the job as working at my pace but that I'm taking some more time to read, take notes, and planning things out more to make the process "calmer."

I know a lot of people who work at a high salary (for example, say $90k, to me already a lot of money, but I know it's not enough to some), who spend most of the day doing "nothing." Like getting a mouse jiggler to simulate that they're at meetings. Or they spend most of the time watching shows or playing games while doing the occasional ticket (but are the most likely to be let go when the company has a bad quarter or during a recession).

If I'm willing to work the same way and things are "calm" enough, why not just go for the extra money? Because I want the guarantees of everything to be "calmer," and I'm more than happy to forgo any extra pay for more "calmness."

At the onset of applying, I never had the opportunity to phrase this as a competitive advantage, so I'm competing as if I want that higher pay, but I don't.

I love the structure and feel of these jobs (I don't want to freelance or anything similar). How can I convey these feelings without causing people to think I'm being silly? Or to even suggest this without causing hiring to think I'm unqualified/have imposter syndrome or whatever?

I'm writing this at 3 am and trying to brainstorm better ways to express myself than a weird-sounding email that will probably get ignored saying, "hey, that job you posted, I'll do it for min wage."
> I’ve been seeing numerous headlines suggesting that you don’t actually feel that way - in fact no one does, and everyone really wants to go back to the office.

A Full Return to the Office? Does ‘Never’ Work for You? https://www.nytimes.com/2022/06/09/business/return-to-work-o...

Why the return to the office isn’t working https://www.vox.com/recode/23161501/return-to-office-remote-...

The idea of working in the office, all day, every day? No thanks, say workers https://www.npr.org/2022/06/05/1102744672/remote-work-from-h...

Full return to office is 'dead,' experts say — and remote is only growing https://www.nbcnews.com/business/economy/full-return-work-de...

Why no one wants to go back to the office https://www.ajc.com/life/opinion-why-no-one-wants-to-go-back...

Nobody Wants to go Back to the Office https://medium.com/@coloradogirl750/nobody-wants-to-go-back-...
I'm glad you are doing well and worked so hard to get there and succeed in your life. We all need to be humble and pay back all the people who helped us. I think about 3/4 of programmers are good people who want to help someone, glad you met them. There are some toxic people in this world too. We all need to use our influence to stop those kind of people.
Honestly, I have no idea.

If I recall correctly, I think there were some situations where --fix-broken did nothing for me, but the script did. I don't remember it nearly well enough to guarantee, though.

One difference I'm sure about is that the script marks all recursively installed dependencies as manually installed, which may not be favorable (e.g. if you wanted to remove the top-level package, all the dependencies would not be removed automatically).
Supposed to be. Email these days is also instant and I have indeed people calling right after sending emailing to ask if I got it. I never did or will use outlook , but I know many people in business settings who use the slowness of it (‘stuck in outbox’ etc) to force it to be more async. With gmail or others you don’t have any excuses; it’s as fast as chat.

If people who send a chat message are all asking me ‘if I have time to talk’, life is over if I say yes; it is always no aka async. And for most people I work with and definitely friends, that works well, just strangers usually have to be educated a bit and some never learn (and are just ignored generally).
"Mass murder is good if it's for muh environment"
App Engine Flexible [0] (i.e. the new version) is a lot more permissive - it's basically a managed container service.

Also - Google is perfectly good enough at turning down services on their own, we don't need to give them any ideas!

[0] https://cloud.google.com/appengine/docs/flexible
Forbes Cloud 100 List for 2022
Home many y2k patches did u install in 1999?
I'd be more interested to know where this isn't true.

- exercise

- study

- practice

All work better in steady increments.

Are there any human endeavors where all-out wins the race?
A think a lot of the reigning wisdom in the fitness world is created by serious strength trainers, for serious strength trainers. They aren't wrong, and their advice will become useful to you if you also get seriously into strength training. But for people starting from neutral, the advice in this article is better than anything your most enthusiastic gym friends will tell you about protein intake or leg day or training to failure. Just workout specific muscles several times a week and you will get stronger and bigger muscles over a few months, regardless of diet.
If you use a desktop browser the extension "social fixer" can do that (no affiliate)
> Really this whole article is "we are going to keep using google cloud despite their storage options being unfit for our purpose and here's how".

And that's called hacking. Welcome to Hacker News. Discord's engineers are gods among mortals for squeezing this kind of latency and reliability out of something Google intended for consumers. Yes I know the way you're supposed to do something like this is to use something like Cloud BigTable where you probably have to call a salesperson and pay $20,000 before you're even allowed to try the thing. But Discord just ignored the enterprisey solution and took what they needed from the consumer tools instead. It reminds me of how early Google used to build data centers out of cheap personal computers.
This reminded me of a submission from last week: “Working Out Only on Weekends Is Equal as Daily Exercise” – https://news.ycombinator.com/item?id=32390947
Gallium is not an abundant element. The cost of large amounts of GaAs in unlikely to come down much.
1. "Companies can do whatever they want" isn't a universal human right. We can and often should both limit them from doing things that harm people and force them to do things that benefit people.

2. I see this all the time on HN, but it's never substantiated. Besides being laggy on older devices, which can be said for at least half of all modern software, what specifically makes it anything but an excellent communication platform?
I guess you don't have any meetings during the workday. Most coffee shops are just to noisy to have anything close to a meeting. That's at least my experience.
Risk is one reason, another is that banks are businesses and charge a fee, another is that people prefer to keep their money immediately available for themsels rather than giving up liquidity. Money gives us the power to decide at the drop of a hat, lent out money requires cooperation or patience.
There’s so much FUD in this article it’s hard to know where to start. I wonder if the author has ever seen what coal mining does to a region.
> Pine Bluff, Arkansas

You know this now, but most crime databases have Pine Bluff as one of the most crime-riddles metros in the country. It rates a "1" on a scale of 100, with 100 being best (safest). Bummer.

https://www.neighborhoodscout.com/ar/pine-bluff/crime
While I agree with the general premise underlying some of the dystopic overtones, I don't fully believe that just a handful of mortals will be able to point their optimized machines comprised of private software at a novel problem and chug away - the amount of humans that need to be in the loop for any of these large companies to function is staggering, especially when you consider 2nd, 3rd, and nth order effects...

However, I do believe that in general the giant and well-oiled tech behemoths will continue to contribute towards global inequality for a while longer before they are stopped.
For me, reddit and wikipedia are mostly for seeing that something happened/getting me the right keywords to dig in further myself.
Networking, you never know who you might meet and how useful they might be in the future. PG said in an YC talk "put yourself in the position to get lucky". Networking is one of those ways.
As with all these high-efficiency things, different layers are tuned to take up different wavelengths. Shortest on top, longer underneath.
While Woz certainly made some good decisions todays PCs are incomparibly more upgradeable and have longer shelf life due to also changing the CPU to a better model or use 5 years from the future graphic cards.
As someone who goes to gym at least 3 times a week (I find that the bare minimum to feel good), I think going only once a week must be actually damaging to the body... even when I miss one day and go only twice in a week, I can feel that the body has had enough time to "lose" much of the power it gained from the previous visit several days before, so it just kind of tries to regain that power back... it's like your energy levels going up and down from basically sedentary to just barely active, then back down... I imagine going only once a week would be like that, but with larger swings up and down, which surely can't be good for you. About 3 times a week, to me, is the sweet spot where I don't feel constantly tired, but also feel like my energy levels remain more or less stable.
I use something similar along with fzf, so I can search the branch and switch to it.

git alias:

recent = "!f() { script -q /dev/null git for-each-ref --sort=-committerdate refs/heads/ --format='%(HEAD)%(color:yellow)%(refname:short)%(color:reset)|%(authordate:short)|%(color:red)%(objectname:short)%(color:reset)|%(subject) (%(color:green)%(committerdate:relative)%(color:reset))'|column -ts'|'; }; f"

zsh function:

grecent() {
local branch=$(git recent | fzf --ansi --no-multi --bind "q:abort")

if [[ "$branch" = "" ]]; then
echo "No branch selected."
return
fi

local branch_name=$(echo "$branch" | awk '{print $1}')
echo "git checkout $branch_name"
git checkout "$branch_name"
}

But sometimes it screws up the terminal and I have to run `reset` to fix. Will be great if someone helps with that.
Because insurance companies want to be middle men that do nothing and just collect a monthly premium. It's best if the thing you're insuring against never happens.
If there is an ideological slant in the reporting, itll reach the wikipedia page, as long as the source is deemed trustworthy.
Wordpress.org Has a New Homepage
A couple of KubeCons ago there was a talk about a "Kubernetes without Containers". The idea was to utilize Kubernetes' API and extensibility, without the necessity to run a container runtime.

I can not recall the name of the project. Would love to see whether this idea got any traction. Sounds like it would be a nice fit for a crossplane maintained infrastructure.
The desire here is to avoid rebuilding a node if there is a single error in the disk no?

Because otherwise, it would make sense to just bounce the node entirely and let it build itself from the replicas.

As a database guy, the number of edge cases inherent in this model is pretty scary. I can think of several scenarios where this is really bad for your system:

* persistent data going back in time (lost the SSD, so you reload from network)
* inconsistent view of the data - you wrote two pages in a related transaction. One of them is corrupted, you recover older version from the network.

That is likely to violate a lot of internal assumptions.
It's really not sensationalizing. I'm level 50 on WaniKani at 2 years in, and had a couple 2-3 month lapses (with 2000+ review queues - I'm currently working one of those off). If I wouldn't have had the lapses I'd have finished a few months ago at my normal pace.

WaniKani works because of the spaced repetition. I think it's easier to learn through level 60 in 2 years, rather than 4+ years because it's paced for that, and that helps you actually memorize them.

Note that I also went to a language school full time for a year, which helped with vocabulary, which obviously makes memorizing the vocab kanji easier. I also moved to Japan when I started learning, so I'm forced to read Japanese all the time.

Also worth noting that I do 200-300 reviews per day. If I'm on-top of my reviews, it's possible to do 300 reviews in about an hour and a half. When I stopped for a couple months, it would take me 3+ hours to do 300 reviews, because my correct percentage is 20-30% rather than being 85-95%. That alone shows me that keeping a proper review cycle helps me memorize.
I've been reading up on the state of things. So Signal actually is working to remove the phone number requirement: https://twitter.com/moxie/status/1281353114063257600?s=20&t=...

They've been working on it for years. Their solution is that they have to take client-side ownership of your contacts list, keep it associated with your "account" and sync it across your devices so that when you correspond with someone by username, it becomes available to you everywhere. They have to be your contact book. I can find nothing on how they plan to verify usernames, perhaps in the traditional style with email.

So yeah, absolutely not some trivial change that they just don't want to do because fuck the few people that don't have a phone number (or don't want to use it). They're working toward supporting usernames and at every turn keep getting reamed by HN because, in their effort to solve a problem that only exists on HN, they have to deploy a solution that means you have to trust them in a teeny tiny way you didn't previously IF you set a weak pin on your account. It's mind boggling. It must be so disheartening to see that type of response.

But, that's my point. Signal can't add short names without changing the fundamental trust model which appealed to everybody initially. No amount of hiding a password as a pin, will change that. I really hope they don't kill their product along the way...

(Also man WTF they're running Raft on SGX enclaves just so they can rate limit attempts to brute force users' weak pins. While super cool, technically, what an incredible waste of resources just to try and make weak passwords okay. Probably the most backwards thing I've seen a security company attempt like ever. Just tell your users if they want a username they need a strong password. Or just generate the entropy for them and only allow the username option to people who also want to take custody of their new 32-bytes of entropy and have a signal-managed synced contact book.)
Anne Heche Was Working on Sex Trafficking Film Before Death
We keep rewarding the wrong people, it's no wonder things are as they are.
Note that the study participants were healthy young individuals who were untrained ie. didn't do any regular resistance training prior to the study.

Untrained people, particularly if they are young and healthy, often show large effects with exercise. The big difference between the training schedules cannot be extrapolated to well trained individuals.
This is why command economies like China work today, when they did not in the past. With massive amounts of data and advances in theory, a centrally planned economy (and government) can be dramatically more efficient than a democracy.
Humm this sounds too much like "one weird trick" and I would not be surprised if the researchers fumbled this a bit

For one, doing 30 reps in the same day (with no details about if/how this was split into sets) is different than 6 reps in the same day (in terms of weight/intensity)

This is TFA https://onlinelibrary.wiley.com/doi/abs/10.1111/sms.14220
How does using a satellite broadcasting differ from a server on the internet publishing the keys? Both are single points of truth that you'd have to fully trust.
Solar land use is such a non-issue.

Consider tokyo as an example of a space where area is at an absolute premium. There are around 7000 people per km^2

Shrink it down to a single block. Tokyo's blocks are a little smaller, but a common size is 100x200m for ease. At 0.7kWh/day/m^2 there are 14,000kWh/day available in this area shared between 140 people. This is about 100kWh/day each.

This isn't quite enough to be as absurdly wasteful as someone from Australia or the US, but it covers the total per capita energy consumption of people living pretty much anywhere else.

Note that this is just the net solar electricity available in a high density metropolis as an input vs all energy (including thermal) used everywhere.

As soon as you add in medium density towns or industrial areas there is an abundance of space for panels so long as we stop being exponentially more wasteful with the available energy.

Anyone bringing it up is a fossil fuel or nuclear shill.
Building a Modern Analytics Stack
It's just a come back of "Best Viewed With Internet Explorer"
> Of everything wrong with modern society, the inefficiency of having separate home and office buildings ranks pretty low imho.

Another way to look at this inefficiency is to imagine how much cheaper (and, on average, bigger for an individual) housing could be if we had no need for offices. The inability for the young people to buy their own place seems to be universal in (at least most of) developed world (Australia, Canada, USA, UK, Ireland, EU, NZ, Japan, urban China, ...).

The cultural impacts of that change are pretty interesting as well, though that sounds like a thesis topic to me.
I've asked a friendly girl who I've known for a while out on a date.

She politely declined.

After that our friendship was never really the same; there was always something awkward.

I regretted asking her out because that ruined an otherwise good friendship.
In practice EPIC = IA-64 and Itanium is the only implementation, but IA-64 is probably the easier thing to search for. The only book I have is “IA-64 and Elementary Functions: Speed and Precision”.

EPIC’s problem is shared with VLIW of which EPIC can be understood as a refinement. VLIW excels in a deterministic world where the compiler can predict latencies and produce a good schedule, but falls apart in face of loads with highly variable latencies (an in-order implementation has no option but to stall when load data doesn’t arrive on time).

EPIC patches this a bit by allowing software prefetching and SW exposed speculation, but it comes at a significant code bloat and it can cover only a small fraction of what dynamic scheduling can cover. At Transmeta, our VLIW engine did this too (with some obvious advantages over IA-64) and we suffered from similar problems.
Yep, greed always seems to win out. Pretty depressing.
One counter example is MyFitnessPal.

I am doing the same thing as you do, and I am getting spammed on this address.
It seems it can happen in Australia. Only a sample size of 1, but I took a trip to Melbourne earlier in the year. Prior to that, I hadn't received any Melbourne-centric spam. At some point during the trip, I started receiving spam from various Melbourne businesses.
I think the biggest benefit is the curation aspect. After all, how much can you actually learn in two minutes? Once I see something interesting, I go and read through the actual paper. Having said that, you're lucky if you can find a paper with enough details to actually reproduce the work.
Very cool looking project. I love their approach to networking which patches the Linux kernel to intercept operations on sockets and defers that to the host.

I’ve been working in a similar area recently and networking is an unfortunate stumbling block.
It's not just spam, but it being passed around between businesses without your consent (or maybe if you read some massive terms with a lawyer hat on you did).

E.g. I bought insurance after looking at a comparison site, used different email addresses for each, and then found out the comparison site must've passed on 'my email address' to the insurance company when I got a later email, that turned out to be from a third company contracted to do part of their business; to whom they'd given the wrong email from my file, the one I didn't know they had.

It's not a huge problem, but it makes you aware of these things.
The Thirty Million Line Problem (Video, 2018)