skysight-inc/HackerNews huggingface dataset:
Following up on:

> Nobody arguing for non-phone-number short identifiers has proposed a solution for how you verify them and manage them that doesn't change Signal's fundamental threat model and information architecture, which, at the end of the day, is what many users are bought into.

So it turns out Signal is building support for usernames and their solution is indeed rather involved. In order to achieve usernames they've:

1. added a contacts book and profile

2. added a passpin by introducing Intel as a trusted actor. the pin you enter when using signal is actually your Signal account password

3. presumably adding support for usernames and <TBD> username-based verification

They've been working on this for years. They're not just sitting on their hands. So my point seems to stand: it's not just "add a username field and let people type shit in we have input fields amirite". It's a massive overhaul of their fundamental architecture. And sadly it's not happening very publicly because the stuff they're doing to make it happen is also not okay according to the other half of the security community. Carriers? Not okay? Well how about usernames? Oh, you're using 4 digit pins as passwords and SGX to throttle login attempts? Well that's not okay either SGX has been pwned a billion times. Lose/lose for Signal. I pity them, honestly. It sucks.

I'm not personally enraged or anything. I think the SGX stuff is actually a pretty cool compromise. But, alas, it's still a compromise in order to make usernames equally feasible as phone numbers. Either way you're compromising. And that's what this thread is about: to make security accessible you can't live in an ivory tower and demand perfection. You have to get down in the field and make compromises in order to build a successful product that people will actually use.
ESG and social credit seem like two looming dystopias that the first world is going to run headlong into.
I switched off Ubuntu to arch because I got sick of inconsistencies between Ubuntus hacks and developer defaults talked about in archwiki.
And intersectional praxis is, overwhelmingly, an ideology of white people. Most people in the individual groups (Muslims, Hispanics, etc.) are advocating for their own interests. It’s white people that subscribe to a theory that ties these completely different groups together.
It looks awesome :)

Unfortunately we have a full Javascript stack at my company, but I'll keep an eye on this in case anybody adds more dev environments!
Leroy Jethro Gibbs, is that you?
While the context is wildly different, this type of incremental band-aid fixes of <insert thing> always reminds me of the 2004 movie The Butterfly Effect. The cycle of trying to fix something, making it worse (or other unintended/bad side effects appearing), try to fix the fix, repeat ad nauseum until everything breaks. I know there's a million (probably better) depictions of this pattern, but something about the bathtub scene in that movie will forever haunt me.
What I mean to say is that WeWork does have positive unit economics, but that the net present value of the cash flows from their investments in buildings would never be anywhere near the amount of the initial investment (on a risk adjusted basis) used to generate those cash flows.

That doesn't mean WeWork has a bad product (they have a great product due to the capital available to spend) or bad unit economics (most of those investments are probably decently cash flow positive), it just means it's a bad business.

This is a case where "unit economics" doesn't tell the full story.
Isn’t this the opposite of the Rosling hypothesis? By the way, just my opinion, but I think you’re both disastrously wrong, and that the problems you describe are caused by central action rather than central action being the solution to it.
Hello everyone! Mahdi here. I'm a co-founder of SolidInbox.

We started SolidInbox when we were trying to find customers on Twitter. Finding your target niche, reaching out to them and managing the conversations was a very difficult task. That's why we started SolidInbox to automate the process.

Our tech stack is React/Typescript + Java + Mysql. The boring tech stack :-D

We are keen to get feedback. Please let me know if you have any questions or feedback.
I'm a citizen and resident of the USA. But I have travelled often in Germany, roaming on Deutshce Telekom cell towers using a cellphone with a T-Mobile USA SIM and a US phone number. DT has collected data about my roaming in Germany, and has transferred that data to T-Mobile USA for billing and other purposes. So some of the data about me held by T-Mobile USA, which T-Mobile USA has refused to allow me to see, was collected in Germany by Deutsche Telekom.
I really enjoyed reading this and I hate reading.

How did you go from 12 months of no revenue to actually generating revenue? Did you provide your service for free w/o any payment options? I imagine job seekers were free to use the board but companies were required to pay to post on your board. Did it basically take 12 months to gain enough traction with job seekers to entice employers to post on your board instead of manually adding them for free yourself?
Because it is awesome!
Don’t forget about server side rendering. If you only need to serve static, you don’t really need any Jack, anyway.
The Arch Linux install on my ThinkPad X230 is about twelve years old now. For most of the time it was my primary laptop, until a couple of years ago when I turned it into a sort of home server with built-in KVM and battery backup.

In contrast to my experience running Gentoo or Fedora, I never experienced significant breakage when doing a system update. Having said that, I've always run a fairly minimal desktop environment and I've been conservative with wifi and audio software. So maybe I wasn't pushing it very hard, but still full credit to Arch for having a rock solid foundation.
Log out.

Reddit/HN are less appealing when you can't interact with someone, especially if you feel they're wrong and correct info needs to be supplied.

If you really want to stop doing something, don't place yourself in a situation where it's easy to do so.
Have a BMW X5 with this auto-steer nonsense and have had several incidents where it's abruptly turned the wheel, where if I weren't grabbing it it would have caused an accident. Ended up disabling the assistant system.
For me, Manjaro has been a fantastic base on top of Arch to start with- installer, desktop configured for the flavor you pick, and things Just Work out of the box, including the usual suspects like wifi, media keys (speakers, backlight, etc).

My only real complaint was that I wanted to do a fairly extensive change to the sway configs, and tracking down where they put all the config files took a bit of time.
There shouldn't be any .d files in a from-scratch clean build. They get generated during compilation and are not needed initially because every object file is out of date due to its nonexistence.

However, they do add a lot of bulk once made and increase with the size of the project.

A lot of the information is redundant. Among the files you may find many pairs which only differ in the principal file, the headers being the same:

foo.o: foo.c $SOME_HEADERS

bar.o: bar.c $SOME_HEADERS

In theory, if we have GNU Make, we should be able to compress these into static pattern rules. Concretely, in the above case, the pair condenses to the static pattern rule:

foo.o bar.o: %.o: %.c $SOME_HEADERS

When, we check whether, say, bar.o is out of date, we find that it as a target in the left side of the rule. Then in the middle, the name matches the %.o target pattern, identifying the stem as "bar", and from there the full dependency rule is instantiated with all the prerequisites.

To generalize that, we partition the $(OBJECTS) into subsets based on which patterns they belong to. Hopefully there are a lot fewer subsets than files.

Then for each subset we do

# The a.h b.h subset
$(OBJS_0): %.o: %.c a.h b.h

# The a.h d.h subset
$(OBJS_1): %.o: %.c a.h d.h

and so on. The only problem is managing these subsets (in particular, incrementally) in such a way that more time isn't spent doing that than time saved loading the rules.

Stale dependencies can be troublesome when header files are renamed or deleted; this sort of scheme could make it worse.

One way to handle these subsets incrementally would be to keep them in some separate database outside of the Makefile. Whenever a file is compiled and the raw .d is generated, we run a script which looks up the header signature and matches it to a subset. Then it assigns that file to the correct subset (perhaps deleting it from an existing one). A step at the start of the build would regenerate the dependency file seen by make if the database indicates that it's out of date.
There're some Arch-derived distros that are basically just Arch + some choices made for you + an installer, like https://endeavouros.com/
I think you misunderstood the point of the distribution. There's no installer because Arch developers have no need of one. They're creating the distribution for themselves, and if you find it useful (I do), that's great. There's no expectation that an "average technically literate joe" is going to use it because he's not in its target group.
Regarding the Kaggle competitions, I also agree with that you need access to powerful hardware. Some competitions have very big datasets that require you to have TBs available to download and uncompress the files. Also, having your own GPU will allow you to iterate faster. I tried a competition with just a Colab instance and I felt kinda handicapped, unfortunately.
Like you said "improves bodily faculties" seems great. Well-designed, efficient, repairable, sustainable "robots" like dishwashers, vacuums, etc from a few years ago could have lasted us a long time. Efficient, safe, maintainable transport is great. We had massive improvements in quality of healthcare without fears of dystopia until recently.
The plugin Distract-Me-Not on Firefox really helped me define rules that helped discipline. I admit I sometimes defeat its rules, such as now, but that is cumbersome to do and time-limited. Excellent plugin.
That's why I bought an Amazon Fire 8 tablet. It's cheap, not a top device (less apps, less distraction), but still useful for reading pdfs, books and what not. I just love it for studying and reading books.
Is there a "proper" way to have per host configs? I have a setup where I need to set "hostname: <HOSTNAME>" depending on the system I'm on and right now I'm having to resort to using "docker compose -f compose.<hostname>.yml up -d" where compose.<hostname>.yml extends compose.yml
Imagine you have two kids, and you only give one of them a cookie.

Should you make up for it, by giving the next cookie to the kid who didn't get one? Of course!

Should you do this even if the other kids kick and scream and say it's "bullshit"? Of course!
I find myself in a similar situation: a constant cycle of information seeking as a form of procrastination itself.
Airbnb switched away from React Native at a time when a lot of other high-profile companies did as well and wrote technical blog articles about it. Discord was one of the few dissenters:

https://news.ycombinator.com/item?id=17619609

Looks like they're doubling-down further still:

https://news.ycombinator.com/item?id=32310392

Looks like Shopify also picked up RN:

https://news.ycombinator.com/item?id=22181873
Can anyone with industrial knowledge explain what the use of plastic gears means for the life span of a product such as this? It's shown at timestamp 2:21 in the video in the article.

I've personally experienced and also read about plastic gears in blenders (it was mentioned here a few days ago), and they wear down quickly. But that's a much more demanding application, I would think, that this flap door.
> Man interferes with Natural Course of River via engineering. Decides this was a bad idea. Solution? More engineering.

Wow, an ad hominem attack on engineering? That's a very special take to have on a site calles HACKER news!

Would you prefer we'd suffer nature and never attempt anything? That's not very hackish :)

Whether we like it or not, the Mississippi is sending a lot of clearwater down the gulf of Mexico, water that is needed elsewhere. The plan makes sense- and not just for the most visible parts like the Hoover dam.

Nothing is without risk: the risk of doing nothing may be more to your liking, but there will also be consequences, and some people will suffer. Of course, by doing nothing you may try to avoid personal blame - but it's akin to a trolley problem, and inaction can be morally guilty if you believe in utilitarianism.

IMHO the most important thing to do is to honestly study all the alternatives (including inaction) then choosing the one that makes the more sense - yes, even if it's action, and even if there may be some prejudice against engineering, or a bad precedent (that can and should be taken into account in the honest study)
1 less death/accident than cars with only human drivers per capita. And level 1+ automation must be in separate buckets.

For example:

9 accidents out of 100 cars on the road in some level of driver automation (bucketed per-level) is acceptable if there were 10 accidents of 100 cars on the road with only a human driver over the same timespan (probably some kind of rolling average).

We should absolutely investigate the causes of driverless car (at any level) crashes and penalize companies if they are at fault and the issue was foreseeable but a lot people seem to think the only acceptable answer is “0 accidents” which is just absurd. Don’t let good be the enemy of great.
> Can you explain how correcting a past mistake is racism?

Because its not correcting a past mistake. But rather make new ones that inevittably are going to lead to even more resentment. And also hurting the ones you are supposedly helping by making them question whether they got in through their abilities or through diversity points. Which can lead to quite a large reduction in their self confidence.

I would call the cookie example irrelevant to this.

Treating someone differently because of their race, no matter if positive or negative, is racism.
Adding to this, Peter Reinhardt's post on replacing middle management with APIs. Hollowing out the middle of the career ladder may have a different impact than the historical automation of entry-level jobs.

https://rein.pk/replacing-middle-management-with-apis
I’m in the same boat. Never saw a need to reinstall, there’s been hiccups where after an untimely upgrade the system won’t boot. But it’s a 30min fix every 3-4years.
It's a general story that companies like Espressif couldn't care less about developer experience. Part of why Arduino is a success story is that their dev tools, limited as they are, are easy to get going. Microchip publishes free tools to work with Atmel parts and they have a better feature set but are a hassle to get up and running.

I think there's an expectation that top management decides which board gets used and developers just cope with whatever tools come with the board.
> You cannot tell someone "this car can drive itself but you must be ready to take control at all times because if it fails it's your fault" while knowing that a failure can happen in less than a second.

You can; you only need to be powerful enough to dilute responsibly for failures enough to get away with it. It is self evident that the margin for error is too small to rely on human intervention. It is absurd to expect humans to maintain the equivalent of manual driving situational awareness at all times. But when you're hell bent on selling automated driving you lose the capability of grasping these things.
I saw cops on Segways in two major American cities as recently as this month.

They failed for the average consumer, but they served a purpose for other sectors.

Fortunately, the economic downturn seem to have killed them off for group tours.
100% agreed. To add what you mentioned about increasing time on the things you care about, personally found it helpful to link a purpose to those specific actions in my head and mentally state it.

For example -- "I've been anxious lately, I should sit down and journal in my physical notebook for 5 minutes" or "I haven't taken a lot of play time to myself lately, let's go read something offline for 30 minutes."

Re-framing it slightly so it feels like a practical suggestion to immediately do something from somebody else to myself helps break down a lot of the procrastinationation loops, imo. Triggers that "I want to be useful" feeling.
On the other hand, I've also heard that threshold workouts are better because people don't even get near to maximal exertion (certainly not "110%"). We consistently overestimate how much effort we put in.

So, a 60% workout every day is better than the "high intensity" workout a few times per week that actually just clocks in at 75% effort.

Just another reason to stick to daily consistency, and not the only reason.
> cat owner sick of being woken by his “ruthless serial killer” kitty delivering gifts in the middle of the night

Cats should stay inside for this very reason. They're quite destructive for the local wildlife.
Your mileage may vary, but I've found it helpful to remove my browser's default search engine, so I can't search directly from the address bar. I also clear my cookies regularly so that logging into Reddit or Twitter becomes more deliberate.

For Instagram, Tiktok, and Facebook specifically, my only recommendation is to delete your accounts and exercise abstinence. Worked for me anyway.
I tried to do a reinstall a while back. Gave up around 4 hours in. Installing arch was easy, getting it how I liked it on the other hand. That was gonna take another couple weekends of figuring out what I did 5 years ago to make X work just right.
As one point of data, I've been trending towards remote-or-bust as I've aged. My tolerance for time wasters (like commuting) is low and my desire for flexibility is much higher.

I’m sure some prefer in-office more with age, but it’s definitely not the case for all!
Sure once a week vs once a day. but what about twice a week? 3 times a week? Youre telling me every bodybuilder ever is wrong?
Best way for me is to move the browser app icon to a different position (on mobile) so that I don't find it immediately. That way I hesitate a moment and sometimes don't start wasting time.
Not OP, but my favorite stack is Rails/Postgres/Linux. It doesn't get more open and less corporate-controlled than that these days. To enjoin OP, however, I get worried when I think about the GitHub acquisition. To me, GitHub was everything open and non-corporate, like my stack. Then Microsoft bought it, and now I fear that they will bring their MSDN "dev portal" schtick over to it.

They've already started integrating LinkedIn into Outlook. They will probably be doing the same thing with GitHub in Visual Studio, and downplaying others (like GitLab). Will it affect my use? I don't know. I doubt it, but I wish I didn't feel like I need to be watching them like a hawk now, and be ready to move my code to another provider at short notice.

The really stupid part? Out of other companies who could have bought it, and would be interested in it, Microsoft is probably the best choice. Certainly better than Oracle or Salesforce.
What I love about the AUR is that if it doesn't exist, it is extremely easy to create a package. Debian packaging and Red Hat packaging were just not very intuitive. PKGBUILDs are simple and effective. Alpine also has similar packaging as Arch.
Rise of the Anti-Join
Right, bets on the collapse happening at any particular time will lose. It will probably happen simultaneously with a bunch of other collapses.

We are now in the position of Wile E Coyote having run off the cliff, but not yet looked down.
Maybe some "mobile responsiveness" best practices should be looked into next.
Whatever you do, skip the digital hearing aids.

As a former musical savant, I’ve had to accept analog hearing aid (before digital was in vogue) and it was arguably better in form of being able to distinguish different tones (ajoining piano keys and chords).

Once you go digital aid, you WILL most assuredly go tone-deaf (smashed chord, no pitch. It’s the shits.

And furthermore, cochlear implant is weirdly better/worse. With CI, you hear further (and bionically so) but now you get at most 32 distinctive tones. CI remains more useful in terms of resuming General hearing but analog hearing aid is KING!
I'll match your bluntness, then: suggesting that anything on the order of 2 million packages are actually useful is plainly ridiculous. Debian et al act as quality filters by only actually packaging the stuff anyone cares about or needs. A stronger argument along these lines lists the packages that you actually need which are missing. And once you have such a list -- add them to Debian! It's not particularly difficult.
The ability to speak English is a function of wealth? Sorry, what?
I don't even know where to begin.

First, all of humanity has screwed with waterways for our entire existence. The West, The East, The North, The South. Hell, Beavers do it. But the earliest human civilization was borne on rivers, and grew out of screwing with water ways. For irrigation, for navigation.

Every major river in the world that hosts civilization has been MASSIVELY screwed with for that civilization's survival - consistency and predictability is important for us to not DIE, never mind, thrive. That means managing seasonal flooding. That means maintaining a navigatable depth for shipping. That means (eventually, once we woke up) controlling waste flow and filtration, etc.

The Mississippi supports tens of millions of people and tens of billions of dollars of economic activity. OF COURSE, humanity was going to make it reliable. There were externalities. Now they're going to deal with those EXACTLY the same way as they did before - yes - with more engineering.

"Man decides to cure disease with medicine. The medicine doesn't work. Solution? More medicine! Lunacy!"

Well, yes, but DIFFERENT medicine. Just cuz they're both medicine (engineering) doesn't mean that this medicine (adjusting levee routing) is the same as this other medicine (originally having built the levees in the first place.
Why React Re-Renders
I've considered it, just to angry up the IT security folks who insist on using employee's personal devices as a cheap MFA mechanism.
Debian releases do what you say. But you can also run Debian/unstable, which is the bleeding edge rolling "release". It works quite well, and many people run that on their machines.
On an opposing note, updating my Arch system (pikaur -Syu) recently wanted to install Electron 20 and remove Electron 19, which the element-desktop package was still depending on. I wasn't using it so that's an easy uninstall. But there's nothing inherent about Arch that prevents these issues from popping up every now and then.
The R Programming Language Is Now Fast Enough to Run Games on Linux with Nara
Windows had multiple issues. I recall multiple times having to basically do a reinstall after installing some update.
sometimes I don't get English...
I have the same problem solved for kid with coin dispenser and coin acceptor.

Coin acceptor is connected right to OpenWrt router via USB. Once you put a quarter, it turns on Internet for 30 more minutes.

Dispenser is connected to PC with the app where he has to solve (not very hard) math puzzles. When you reach the score of 10, the coin is getting dispensed.

Internet usage is down 2-3 times now, compared to what it was before.

Even if you have a router in another room with a single physical button attached via USB, you'll be lazy going to another room to turn the Internet on. Have a book by your place and you'll see how much you started reading.

Reach out if you need OpenWrt router hacking help.