skysight-inc/HackerNews huggingface dataset:
> this a fairly standard authentication/handshaking problem

I don't think so. The question is precise, and has more to do with physics, IMHO. Consider the problem from first principles - what is possible? The standard path is to start with sharing a secret that is checked again in the future. The threat model is well-known, too.

What can we get thinking outside the box? Consider that A could physically examine B, as with a photographic sensor taking photographs or video, and document the physical appearance of the device to arbitrary accuracy. At a future date, the same examination takes place, and modulo some additional wear or other deformations, we recognize the device. What is the threat model here? It's whether you can reproduce the appearance of the device. But can you? You'd both need to scan the device and recreate it's physical appearance--down to arbitrary detail. That's a tough, expensive problem. Another important threat is unavoidable deformation, like a new phone, case, etc. This case is similar to simply losing a shared private key, which is catastrophic.

Next, lets talk about MITM. This threat model requires overhearing the conversation between A and B. How do we normally do device-to-device communication? Over the public internet. Over wifi. The other is optically, often via QR code. (I think exchange by optical signal is actually rather secure, BTW, such that only those who can see the QR code can eavesdrop which is a pretty low number. I suspect optical transfer may be more practically secure than a message sent over even the best we have today, which is properly configured TLS client and server, or an app like Signal because you avoid a huge surface area related to any network comms). But we can go even further, and think about how to foil even theoretical optical eavesdropping, by making the secret exchange an interesting kind of shared program that is executed simultaneously by both devices, by sharing state with each other: The camera of A pointing at the screen of B and the camera of B pointing at the screen of A in a kind of electronic position 69. An observer would see incomprehensible flashing, too fast to follow and which would have to be captured in full, of both screens, in order to be useable.
By that argument, nobody better live in dense urban cities, because there, almost 100% of the waste has to be trucked long distances to find somewhere it can actually be buried.

Trash service -- whether paid directly (as in the suburbs) or rolled into taxes (as in the city) -- frequently isn't cheap. It's usually somewhere around $50/month, for basic, once-a-week pickup of a large rolling can that holds 2-3 'contractor'/32 gallon bags of trash.' Trash collection employees also make pretty decent money, for manual labor (as they should.)
That's an interesting point about the mandates regarding industry. I never knew about that.

Thanks for taking the type to write this. Good info
This is an interesting question, because it can be unpleasant to know that the attempt had even happened.

I suspect given the option, most people would turn on an option for "block dick pics silently" and leave it on.

Similar to how I never actually check my spam folder anymore.
Spies arrested for tech export, investigation interference attempts
Have you been diagnosed by a licensed board certified doctor? Maybe Move to green bank?
I think I need to finish the one I've got, first, before taking on another :-)
Have you never found yourself in need of a backup or wishing you had one?
FTC Security Order against CEO follows him to next company
After looking at it some more 'first-class' is overselling it. I'm still working my way through the code but I believe pretty much all interaction with bluesky/atproto by a user would be via federated instances like mastodon that can moderate as they see fit. The instances have final say in what you are allowed to do. The difference being you have a public key identity that is decoupled from a single instance. @moojd.blsky.app and @moojd.example.com can both be aliases to the same pubkey identity and if blsky.app is down my content will still sync with example.com.
More detailed link / dup
https://news.ycombinator.com/item?id=33324948
Framework can pay a company like Canonical for testing and integration, run a fork of a common distro that they maintain, or make their own.
I always use the Msys2 shell.
But did you find the space invaders game?
Once bitten, twice shy?

MS released Windows on ARM with Windows 8. It them abandoned it and the users.
If I recall Gitea can run its owns libssh instance on a different port, and requires manually importing keys for each user. If you are using the https interface by default, than one may need to explicitly use the ssh:// uri.

Gitea should not be exposed to the web, and a port knock sequence is highly recommended to keep private projects private. ;)
Sorry - dup although better link
Razer keyboard. Never ever Razer again....
Building the Goose Palace
I'm almost certain your comment is tongue-in-cheek, but it did pique my curiosity - what do you think the actual ratio of unwanted explicit photos from each sex is? I have a hard time imagining it being less than 99:1.
Ask HN
How would you setup an emergency data locker for a (mostly) trusted partner to access if you were indisposed in some kind of emergency?

If I got hit in the head and couldn't remember my main passwords or was unconscious, I would want my partner to be able to access all my accounts and such if needed. I do trust her but do not want to just give her a URL and credentials she could access at any time. I think maybe a timed access with notification to me if she accessed it would give me time to intercept if needed.
It doesn't seem to have caused them much trouble.
That would make a lot more sense, and is a really interesting idea. One massive content feed from all of humanity. There's definitely going to be all sorts of issues to solve (like the fact that The Blockchain Does Not Forget).
I personally don't count powershell as a shell, it's more like an interpreted/jit compiled .net interactive CLI 'shell', hence why it is slow to start and to run

A shell is a program that takes your commands and send them to the OS, it doesn't compile anything
You upgrade the software and it no longer works right. No one else reports the same issue. Turns out the version you tun for the very first time wrote a config in a location you never looked, and that config is incompatible with latest version.
I don't really get it either. It's kind of missing which interfaces are actually provided to the WASM script, and how the magic webserver that is described in the docs is working.

Most WASI implementation so far seem to just make a stdin and stdout available for a WASM program - which wouldn't really be enough to run a webserver in it.

Is this example running a non-wasm webserver that then proxies to WASM modules? Is that wasmedge? Or does wasmedge really make syscalls like accept() available to the module?

If it's the latter, how could it actually do something meaningful without threading - given any accept() would block the whole module? Run in non-blocking mode and expect the whole WASM module to be written in async style?

I know these are lots of questions - but they seem rather fundamental to what you could actually use the system for.
Re #3 I just read they had some success growing hair in the lab
Taxes are basically a shortcut to adjusting market forces to result in a more desirable behavior. Fraud is possible only if the incentive is poorly aligned with the result, allowing people to take advantage of an alternate, but easier, action to benefit from the program. Lawmakers who give in to the demands of special interests will inevitably create these loopholes, it does not happen in a vacuum.
AWS has a compatibility mode that allows your cluster to report its version as 7.10.
Texas does indeed intentionally sell this data to a number of companies.
We have gotten to the ugliest place in tech marketing where even things that have nothing to do with blockchain feel the urge to market themselves that way, or at least for the press to report on them as if they do...
Was the documentation a failure? Or did the US save untold amounts of money because of the mothballing->documentation? The failure of the 20M attempt doesn't mean the overall strategy was bad nor that the documentation was net negative.
When those become a problem, I'm sure bumble will take a look at it.
Note that each row is not necessarily a new employer; raises, promotions, and contract-to-permanent conversions are also represented as new rows.

From external appearances, I'm not too concerned about Xe. They'll be able to find an interesting role if Tailscale fails to pan out.
Though chimpanzees are apes, this was my first thought as well.
Have any academic references for this, ? Im genuinely curious, and would like to be able to read more about it.
I always really wanted to get a trident of the red rooster and even with a guide was never able to do it. Maybe I'll give it another shot! Thanks for bringing back some lovely (frustrating) memories.
DE's at my company actually spend all their time making easy to use interfaces ontop of these tools (Github workflows, IaC/CI-CD solutions, Dev/SecOps features, etc.) so that DW/BI/DS Developers, or even analysts in some cases, can create new pipelines quite easily.
Single-bond ETFs may be the key to revolutionize trading Treasurys
I've been a patron following development for some time, the game's really good and the devlogs even better. It lacks the variety of DCSS but is so much better.. put together. Modern, convenient. Has a twist. And sci-fi theme!

Even made some CSS graphs for it (slightly outdated): https://hypertele.fi/8b7ac4d1cbecbf8b
I found docker to be pleasant to work with for support services (if your app needs postgres, redis, mail service, pdf converter, object storage, etc) in development and you need an easy command (docker-compose down; docker-compose up) to tell designers and product people to easily reset their environment to a sane state.

It is NOT great for having a live-reloading dev webservice running. People seem to swing for an all in one solution, but consideration is needed about what services you want in docker or not. Docker is great to have preconfigured database environments that are easy to tear down and start from scratch and works across multiple platforms. Docker is bad for local dev server.
> Websites are bloated and they are dozens of megabytes on a lot of crap that doesn't really offer any tangible benefit to the end user.

How many companies care about creating a tangible benefit for the end user? Tangible benefits for the end user are only valuable in opening a new market or defending existing market share. Once you’ve got enough market share and a sizeable moat, there’s no reason not to start shoving in features that are bad to neutral for your user, but provide value to the company. Hence every new service starting ad free and then adding an ad tier or increasing the number of ads once they are established
I think you’re overestimating the degree to which these decisions are made logically based in a desire to avoid problems, and overly quick to dismiss different opinions on acceptable levels of risk as arbitrary or outrage-driven. There’s a long history of companies claiming to be doing the smart thing but cutting corners ruthlessly - for example, here’s a story I read last week contrasting how they told regulators they worked versus the actual plant conditions:

https://www.propublica.org/article/asbestos-poisoning-chemic...
> My data is on my SSD managed by an operating system whose source code I can read whenever I want.

These days what we normally call an OS is really just another guest OS to the embedded OSes that are really running the machine. Yes, smuggling things out unnoticed would be hard.

As you say, the problem is largely data on you held by others.
The most common need for this kind of thing is when you write software that targets a very specific version of a given binary (e.g. a ruby/python/node interpreter) and that version differs from what you have installed globally.

This is often the case when the software you are writing is a web application that has one intended production deployment target, rather than a library or even a shrink-wrapped product that might need to work in diverse installations.

If you just have one of these projects, you can just install the dependency in user-space and update your user's startup files to point to it and be happy. But if you have two or more, or the version changes often (hopefully it does, so you can scoop up security and other updates), then a version manager helps with the toil of swapping back and forth.

Like many of its predecessors, asdf not only gives you a set of commands to swap these versions on demand, but it also creates "shims" to automate this swapping behavior when you enter and exit directories with an appropriate configuration file.

The "killer feature" of asdf (versus rbenv, pyenv, phpenv etc.) is that it is an extendable toolkit that gives you the same tools for dozens, maybe hundreds of different plugins contributed by the community. It is a polyglot web programmer's friend.
This doesn't sound so bad, I'm not really clear on what their major complaint about PAM is. Sounds about the same amount of hassle as developing anything deeply embedded in the operating system. I've seen worse.
Hugo has an active ecosystem and good documentation: https://gohugo.io/
Also what they’re fed on makes a huge difference, for any breed.
> For America to do it is harder to believe (even though there is a video of Biden alluding that they will "shut it down")

It would be one of the few actions the US could take in 2022 that would have pretty much bi-partisan political support. That to me lends a level of credibility to the possibility along with Biden’s inability to handle off the cuff questions, even though I suspect that the likely culprit is not the US.

However there is zero doubt in my mind that there are a group of folks within the Biden administration who cringe every time he runs off script. It’s said that President Obama once said “Never underestimate Joe Biden’s ability to fuck something up”.
There own soldiers dug defences in one of the most radioactive places in the world earlier on in the war.

So I’d say it’s probably worth being skeptical of their claims.
It's hard to answer without more context, eg although you didn't say so, it looks like your goal is a desktop app and you want to write it in Rust - or at least so I assume after spending 5 minutes learning about Tauri.

Maybe evcxr would give you a head start, it's a Rust-based Jupyter Kernel. Jupyter has a fairly mature ecosystem with widgets and it's easy to come up with renderers for different MIME types, so you might be able to lift some ideas or connect with other people working on similar tasks.

https://github.com/google/evcxr
Your evidence-free comment doesn't contribute to the discussion. If you have links, feel free to provide them.
Love this. Can never remember the syntax for installing plugins vs. specific versions without double-checking though.
It should clearly be surgery to give you laser eyes, rather than eye surgery done with lasers.
This was a really good comment, thanks.
i mean given that you just need ~500 to get #1 slot, emailing a few thousand customers and giving them some discount might do it
Yeah I sympathize with you - my goal is for the Linux community to use a system - that is, a well-defined one, not one born arbitrarily out of the (`if (name[0] == ".") file_hidden = true;` code that has since metastasized into an ungodly manifestation of chaos itself. And that good system is the XDG Base Directory Specification. I'm sure as you know, Unix systems in general have a bad history of ad-hoc protocols and conventions, and in the process of correcting for those, somethings going to be disrupted. I've done my part to ensure that a config location that exists will continue to be looked at, but as you mention, it's confusing and increases complexity. I'm sorry, but that is what I'm willing to risk to fix this particular underlying issue.
There's the elevated risk of re-offending, or being less trustworthy. For example, if they did a stretch for embezzling, they'd be placed in a position where trust is less of an issue, which would likely pay less. I wouldn't want to hire someone to operate heavy machinery if he did a stretch for drunk driving. Would you?
Ignoring your tone, here’s a concrete example: I was debugging a HTML-to-PDF service that was crashing for some payloads, but I couldn’t reproduce the problem locally.

I used Docker to run the application using the exact same image that was deployed to production, and was able to replicate the issue.

Why? Because the PDF renderer depended on loads of finicky dependencies (e.g. linked libraries), and it turns out that the default fonts in our base image didn’t support the Unicode code points in the example payload. I couldn’t replicate this outside of Docker because I have a completely different set of linked libraries and don’t stack.

Happy to answer any questions you have.
Marketing and hype. Especially data mesh. I gave up listening to talks/reading papers about it – could never wrap my head around the "mess"

Warehouse and Lake also feel mostly like distinctions without difference, though if you really want, I think this is the technical difference:
- warehouse: structured data for analytics, outputted from ETL jobs
- lake: a dump for unstructured data, to be cleaned up later: EL, then possibly T

Moreover, people want to push this even further, with "data river" - streaming(-like) data that is "continuously" transformed (isn't that just an ETL data pipeline?)
Why is this considered a red flag? Honest question. Ignoring exchange rates, this person is making about double the median income of Massachusetts, which already is one of the higher paying states. Is it really a red flag if someone is still going to pay you $150,000/year?

I wonder what effect this would have if non-tech workers did the same. Going back to Massachusetts (guess where I live), a recent law prohibits employers from asking about your previous salary, presumably so they can't then low ball you based off that.
I've had to deal with very bizarre behavior like this a few times in my career. It's been shocking to me to learn how vindictive, petty, or simply mentally unstable some people are.

I once had a coworker concoct a story about me and report it to management because I interrupted him during a yoga session in the office gym...

Anyway, the less people like that know about the details of my employment, the better.
I wish Apple's proprietary computing platform keep niche but continue building good products. However iPhone become top share on some market and perhaps is it much higher share on enterprise?
They're a startup and don't have many SKUs. That will improve.

In the meantime it was a great 10 minute learning op for a young person and I.
Not everyone will care about environmental affects so it's important to mention the health crisis.
Plastics, and associated chemicals like pthlates and PFOAs, that are also terrible for our health; reproductive health in particular. Scientists like Shanna Swan are blaming plastics for declining sperm counts and boys having less masculine features than in older generations. It goes way beyond BPA as the replacement chemicals for "BPA free" products are innocent until proven to be unsafe. Even tea bags are fully of plastic.
It's a minefield trying to avoid it. I'd really like plastics to be banned at least for single use packaging initially.
One tip that I didn't know about and didn't seem to be documented at the time I was looking: if you want to add a plugin for some new project but just defer to what you were already using for everything else, you can set your `global` option to `system`. e.g.:

asdf global python system
There is a lot of DM spam on Twitter, TikTok, and Facebook/Instagram/Whatsapp involving explicit photos of female genitalia that would meet the criteria of obscene material under California's law[1] around sending unsolicited images by electronic means (SB 53).

1. https://leginfo.legislature.ca.gov/faces/billTextClient.xhtm...
This is also like the Julian Day, used in astronomy (AFAIU), which uses floating point to represent the number of days since an epoch. The fractional part presumes 86400 "seconds" per day. Conversion between Unix Time and Julian Day is a simple, fixed function, as is conversion to proleptic Julian or Gregorian date-times. These types of schemes makes calendrical calculations, both past and future, trivial.
>For me, I can't input fast on a tablet. Fighting with the on screen keyboard or using the (IMO, crappy magic keyboard) just doesn't compare speed wize to my MBP or MBA. I can open those and just as quickly be taking a note but I'll be done in a 1/10th the time and with zero frustration.

I don't do anything on it that really requires the onscreen keyboard. If I use a keyboard on it, I do it pretty much only through "link mouse and keyboard" which works brilliantly. Because the keyboard sucks, how did it not come with split keyboard?

>I can open those and just as quickly be taking a note but I'll be done in a 1/10th the time and with zero frustration.

Right but text doesn't work for me at all. I get lost in a sea of indentation and end up 100 commits deep in a tool that will "finally indent everything for me correctly!!!" that of course I never use nor release.

>Cut/Copy/Paste just work. If you saw a video how often that doesn't work for me on tablet you'd probably feel like the UX designers should be in prison for all the suffering they've put people through.

I feel you there, luckily copy/paste between my Mac and iPad works perfectly, as I pretty much use it as a glorified note taking device rather than a computer.

>I see that you use sketching apps, but you said below "I have horrible chicken scratch.", has iPad changed that?

Yes. Not with the default screen. What changed it all was a matte screen protector. I find when I am zoomed in and using the right pencil, my natural writing is quicker than paper and much more legible. Maybe if I found the right gel-pen I'd get the same effect on paper?

>For my notes, I want to be able to search. I don't actually take many notes though. It mostly add to "todo" lists but not a ton (less than 1 time day)

What kind of stuff do you search? My notes mainly look like this [0] and I'm in goodnotes 99% of the time. If I need to more "free form" get ideas down I use concepts for its infinite canvas then bring it into goodnotes, or ProCreate.

It truly is just a glorified note taker for me. Paper, but editable. Sits on my work desk most of the time, rarely used standalone so I agree with everything else that's wrong with it. The keyboard is garbage and it sucks as a computing device and theres roughly 100 other things I wish it did better, but it's so good at notes it's the easiest $1k I've ever spent after using my friends for 5 seconds.

[0] https://i.imgur.com/mLdq6mf.jpg (the writing is still quite terrible, so you can imagine what my paper notes look like)
They have this kind of middleware as well: https://vercel.com/docs/concepts/functions/edge-middleware

Don’t know if it’s as powerful, though — haven’t personally used it.
Lisp is very good at dealing with lists of things and sentences are lists of words in Lisp naturally. Since text processing was an early goal for AI, Lisp lent itself well to that work.

In addition, the Lisp REPL is ideal for exploratory programming where it is not yet known what program needs to be written. Finally, Lisp is ideal for creating DSLs and these are also useful in AI and semantic work.
And that's before accounting for the radioactive waste the US Navy dumped at Hunter's Point. There's a reason why the life expectancy of a black man in San Francisco is 20 years less than that of other men in the city, and actually worse than the life expectancy of black men nationwide.
Tesla's New Battery Isn't What They Said It Would Be
US DOJ reveals charges against two Chinese intelligence officers