skysight-inc/HackerNews huggingface dataset:
While not exactly what you've described, you may want to take a look at https://webauthn.guide/ if you're not already familiar.
Still salty about their decision to remove the headphone jack and the industrywide adoption forcing me onto that ngl.
Great summary, but worth mentioning the Line was not a single fortress but many many over hundreds of kilometers.
This is great. Out of curiosity, why not just wrap this as a standalone addon? Not questioning your decision btw, just thinking that the current approach may increase your hosting cost, no?
>"the properties of the object can no longer be changed" yes, unless someone else just unfreezes the object.

There doesn't appear to be any unfreeze method.

>This is still a problem, and the "harden" function that is described doesn't actually help because the things that it relies on could be poisoned.

I think the threat model here is untrusted code which runs after the "harden" function completes.

(I think this article would've been better if it had discussed threat models at the beginning.)
It's more like your company already uses it, so people just copy the binaries from one server to another and start it up. Oracle DB has massively more features than postgres or mysql so there are good reasons to use it.
Ok but I see that as something totally different. Of course I'm ok with being "on-call" (and do that for 1 week out of around every 8 right now), as a 3rd+ level support. But the impression I got from the article was something totally different.

I'm more than happy to receive a request like "something weird happened with this user's account, can you look into the data/logs?", but not, "Hi, I can't log into my account, what should I do?". That is the customer support I got the impression of from the article
This is very nice. It does, however, assume you only use one browser, or one device. I use a static page (https://github.com/rcarmo/sui) that I’ve since hacked to have zero off-LAN dependencies other than the weather, and which I set as home in everything.

But I like the idea of having a few widgets, so this is good inspiration - I just need to add an express server to store a bit of JSON.
How many tourists are going to drive that far? It's a 13 hour drive from Adelaide, 12 hours from Perth. I've only ever heard of people driving to Perth, stopping at a roadhouse, and getting weirded out by the clock not matching the time they thought it was. And if it was attracting any significant amount of tourism, you'd think they'd be able to support a population of somewhat more than 200 people scattered over hundreds of square kilometres.

Surely the reason it exists is just because it does. Legally valid things done in this area are done on standard time - e.g. the polls close at 6:45 local time because they close at 6pm standard time. But it doesn't really matter what time two people meet when they say "lets meet at 2pm" and trying to change that would require an unwarranted intrusion and an unnecessary expense.

I'm told the area around Broken Hill is equivalently odd - although there's official boundaries for the timezone there (Yancowinna County, or somesuch) but there's also the actual boundaries that people use (depending on whether they agree that they're in Broken Hill or not). The expense and intrusion of trying to enforce strict timezone boundaries on boundary-area dwellers just isn't justified to the people who live near them and it isn't justified to the people in the capital cities. It's different in the capital city, or on the more heavily populated border areas (e.g. Tweed Heads/Coolangatta area) where you're more likely to have to do business with a stranger.
Europe is actually 750 million. EU != Europe (EU had ~500 million before brexit)
I have nothing but respect for ESR, however in this piece he skims the existence of an immense economic demand for

- building software that's highly unappealing for anyone with even a trace of artistry in them. In particular, this includes SW that requires hundreds of different people to form consensus on hundreds of topics in which many have stakes, but few understand holistically.

- building SW that has a bus factor > 1, preferably >3, and have it for a much longer time than is humanely possible to expect from a contributor on any given project

Accordingly, there's an ecosystem of craftspeople who can reliably deliver on said demand. This ecosystem replaces enthusiasm with formal management. It is remarkably wasteful and uninspiring, yet also undoubtedly economically viable.
If you and everyone you talk to are hosted on servers you trust, down to the physical provider, yes.

EDIT: if the person you're talking to is hosted on Google, Google has all the metadata. Even if one person is hosted on Google and is part of a room you're in, Google has all the metadata in that room.

In 2022 e2ee is the standard for messages but not metadata, and unfortunately Matrix doesn't tackle it, so no, you can't expect 100% privacy.
Causality also doesn't need to be unidirectional. Perhaps cognitive performance has an impact on video gaming, but video gaming likely also has some impact on cognitive performance.
Generally I'd hesitate to buy people sugar, alcohol, tobacco, drugs, video games, dvd collections, etc. It might upset the balance of their relationship with those things. A lot of people struggle with that stuff.

So if you give me a box of chocolates, a case of beer, a carton of cigarettes, a bag of weed, the latest Call of Duty, or a Game of Thrones boxed set, I'll thank you politely and then dump it. I don't enjoy doing that one bit but it beats eating/drinking/smoking/playing/watching stuff that I'd otherwise deliberately refrain from.
> created an impenetrable fortress along the border

Absolutely not. No-one ever expected the Maginot line to hold more than a few weeks.

It's goal was two-fold:

- Delay the invasion by a few weeks to give time for mobilization.
- Force Germany to go through Belgium again to ensure the involvement of the United Kingdom which was guaranteeing Belguim.

And both goals were achieved.

> Another failure was that the massive gun turrets periodically embedded in the fortification were designed so that they couldn’t be rotated to point back toward France

That's absolutely not a failure, it's a lesson learned from WWI: https://en.wikipedia.org/wiki/Fort_Douaumont
Why Am I Seeing That Political Ad?
>“A big part of our model is telling people not to take our word for it.”

That's rich, coming from a company that wasn't (and probably still isn't) running the code they made public.

>So if I want to fork Signal and make my own, I can just take the code and do it today?

>People do it. There are many of those. We don’t endorse them because we can’t guarantee or validate them — we don’t have the time or the resources for that. But yes, there are many out there.

Sure, but you can't use them with the same server cluster everyone else in the world is using, making it about as useful as a chocolate teapot.
Oh thanks a lot. Seems there's no edit button. Need to make sure it is clickable next time
Whenever India and its authoritarian stances are mentioned, a number of folks (I presume Indians, both on HN and elsewhere) come out of the woodwork to sing praises of "national security" while saying nothing about how such power can be abused.

It is truly sad to see that an entire populace can't see the perils of a government with broad-reaching powers, when government institutions jailing the opposition, censoring the press, and supressing minorities is rather commonplace there[1][2].

[1] https://en.wikipedia.org/wiki/The_Emergency_(India)

[2] https://en.wikipedia.org/wiki/Violence_against_Muslims_in_In...
Because otherwise a business would be violating a law if they serve European customers?
The entire structure of the US government is meant to guard against rule by a “national majority” amongst other things.
This is a big difference I think. Humans will get distracted but that's not such a problem if you have a reasonable amount of time to get back into control of the situation, but that's not possible in a car.
> like right now there is a load-bearing print statement which shows the address of the SDL Window object, because otherwise the compiler seems to optimise the Window out of existence

that sounds like you have undefined behavior in your program
Definitely object oriented design, in a negative way. It taught me how I do not want to think about a computer system. All its ideas sound so neat and if you have a well designed system, which never needs to change, it might even work. But someday, somewhere you might realize that some functionality means none of your abstractions made any sense.
The idea of combining functionality with state (classes) was definitely a useful one, but you shouldn't use a hammer as a screwdriver.

I have a lot of positive things to say about procedural programming. It is perhaps the easiest and most straightforward way to think about computation. The more abstract the problem gets the more I start to think about it in functional terms, it allows you to construct the flow of data in a very managable and efficient way.
creating 3d data from a portrait photo is not that hard... nor is setting up a camera anywhere necessary, to get your face's 3d data. My point is, the "secrets" (your face, your thumb) are out there in the open, and there are a lot of creative ways to steal and store them, unbeknownst of the user. That's not good, if you ask me.
> People can just use whatever language they want in the browser now.

Except, you know, WASM has zero access to browser APIs, and all interactions have to go through JavaScript.

And on top of that you need to load your language's entire runtime to make it work.
Each thread or worker is a V8 Isolate, each with their own GC. I don't think WeakMaps could cross the isolate boundary.

The project lists a set of "transportable" types, which can be passed in as an argument when calling a worker function - https://github.com/microsoft/napajs/blob/master/docs/api/tra...
I think we're in agreement, see my other comment in reply to gopalv.

Basically, rotating 3rd level support along with an alert/on-call duty I'm totally fine with. First-level, I'm not.
OP here. That’s what they do, we’re a team of 4 engineers and we all work on the product end to end.

We have a full time product designer though as doing user interviews is time consuming and hard to do with the routine of an engineer.
Flow-based Programming, and Message Passing. Separation of implementation and composition.
> Well for one a website can make you secretly upload copyrighted content with plain old javascript

Only to a webserver and thanks to CORS not to any webserver. There is
no benefit for a website doing that - unlike with sharing a torrent to
other internet users.

The problem with torrents is that they are actively watched by
"Abmahnanwälte" (lawyers who make a living by suing copyright offenders).

> And it's going to be hard to hold you liable for data uploads that someone else initiated and you didn't know about

yeah good luck with that. All they see is your IP and then you can try
to explain how this happened and how you are totally innocent.
Personally I try to stick with POSIX sh (testing with dash), if I need anything fancier, I reach for Perl or Python.
State machines, I love how you can describe a problem with a nice diagram. They are used extensively where I work (embedded software).
Wait, are "confused looks" bad? I'd love to get a confusing gift.
Questions international employees should ask about their company’s ESOP
I thought the USSR went through famines because of the natural conditions, (drought and unusual coldness).
> Unfortunately, people often believe unsourced comments on hackernews to be literally true rather than sentimentally true

Hi fellow watcher of the impending societal collapse. Glad to know I'm not alone. I have no answers for you but agree that this has gotten significantly worse since 2015 (although such imprecise discourse was inevitable with the creation of social media).

In particular this site discourages commenting about "did you read the article?" which is a great rule but does slowly ensure that no one in the comments has any reason to be actually informed, just plausibly informed.
Lexical scope and first class functions in JavaScript as a descendant from Lisp.
As an Italian teenager in the 90s, Ultima Online was the reason why my English vocabulary was so rich compared to my peers. I strongly believed it has contributed to me traveling and experiencing living abroad, which has since defined my life.
WASM does not interact with the DOM AFAIK. Of course one might (and probably somebody did) create a JavaScript programs interfacing a WASM web worker that sends user input in the JS -> WASM direction and executes DOM manipulation commands in the other one. All masked as a DOM library of the language that was compiled to WASM. Efficient? Probably no. Fast enough? Probably yes.
It does highlight the ambiguity around how people define the word 'cloud'. I think the first para of Wikipedia does it well:

> Cloud computing is the on-demand availability of computer system resources, especially data storage (cloud storage) and computing power, without direct active management by the user
[0]

i.e. "someone else's computer". I want the core advertised reMarkable features to be on my computer(s). Not half mine, half theirs.

[0] https://en.wikipedia.org/wiki/Cloud_computing
> I’m interested to hear your take!

Don’t really have one, I’m more interested in a study of which protocol is more secure, higher integrity. Gut instinct is that voting machines have a longer/stronger audit chain, are automated & don’t get tired. But of course, auditors get tired and aren’t automated, then again, is voting software “really that hard?”. But then again that audit chain could be stupid and expensive and outweigh the benefit.

In either case, machine or human, I hope that there is some kind of consensus algorithm at play.
You're not kidding. They've outright blocked Firefox.
This is inspiring work - thank you for sharing. That timer bot is a game changer.
He truly is an American treasure
I'm aware of that and those computers do not need to use any of these features. But if you're a FOSS project, why should you be advocating for security features to not exist if they provide value for a significant part of their user-base?
In the context of privacy, you can pretty much assume every black box is compromised. With Telegram this black box is the server (the client is open source); with WhatsApp, it's the client. I suppose there's threat models where WA still wins, but knowing it's owned by Meta, I have a hard time imagining what such a threat model would look like.
> very long 2.5 hour commute

imagine doing nothing else besides working and commenting. I can't. It sounds like a recipe for a lonely life.
I’m extremely grateful to this person. The number of high profile organisations with blatantly and boldly anti-user cookie popups was disgraceful, but at this point I almost believe it’s my fault for expecting better.
Clean Architecture. I’ve only tried to implement it once, then I realized I was over engineering. But I still use it as a template to design softwares, but I implement something more crude.

Laravel’s use of conventions and facade. It was quite nice to see how a carefully designed developer experience can improve productivity. For most app, the code basically write itself.

The versatility of common lisp.
> But checking lengths doesn't really help you: it only tells you when strings are not equal, and you would still have to walk the string to see which one is larger/smaller.

Only for a three-way comparison. If all you care about is equality different lengths gives a fast path for inequality.
Money is also nice
Tangential to the post, but I think it goes from being cool to being off-putting when there's a performance element to being a ___ guy or ___ friend. Someone who puts "caffeine addict" in their Twitter bio is making a carefully honed statement that (1) they're really into coffee, they're a geek and obsess over things (2) but also they're relatable, everyone loves coffee, right? and (3) they're vulnerable, they're willing to admit that they have vices too. It has a kind of weird humblebragging vibe to it.
If they had the skills to work with the packages and knowledge I would have them work on OpenWrt. My fave SW at the moment. I would have them fix any outstanding bugs. All so have them get it to run on as mutch HW as they could get it to run on to stop old routers and APs from going to land fill.
Kinda funny that you have to buy/support hardware from a company but then need to use a opensoure nonprofit OS to protect yourself against said hardware producer.
Just remove cookie banners unless you’re using an ad network (this includes keeping them if you’re using google products). Users want to use your website rather than look it through a porthole, understand that websites remember you, and cookie banners are killing the web in favour of closed app stores.
The ePrivacy Directive originally included this, but was watered down after lobbying from ad vendors based on my understanding.
They must, because dupes are less obvious than those other things. You need to either have seen the story on HN before and remember it; or do a search.
I'm curious who is providing the subsidy here, and roughly to what percentage of the retail price?
I for one think that it would be good for human psychology and evolution if there was a very different apex predator on par with humans.
The post you’re replying to mentions many reasons why that law is ill considered.
I have, mostly they don't understand the tech and the concpts invloved but it doesn't matter because they are mostly concerned with what to do with tech. This type of FUD is not understanding the tech and the concepts involved while claiming superiority, really obnoxious.
Functional programming combined with the process dependency tree of Erlang.

Up until a point functional programming with PHP or Python were always littered with small state time bombs which could change at any point in time. Only after thinking about state explicitly in Erlang based programming, was it clear how the state enclosed in OOPS is a total digression from reasoning about state and behavior separately.

Python, Erlang and then Clojure
Cookie Autodelete is the plugin for that :)
> Onyx Box Nova Air C

Call me old fashioned, but I just cannot take a product with a name like this seriously.

Is it a knockoff sold by OODREEFT on Amazon? Does it come pre-installed with Chinese spyware?

That’s the signal a name like that gives me. Same for the fact that it runs an android variant.

Even if the remarkable software is sometimes suboptimal at least they took the time to build their own.
To add, Kris de Decker is Belgian and speaks Flemish natively so is also likely to fall for the same mistake
I was with you until you said bra and ket didn't do it for you. Its right there in the name bra(c)ket. <bra|, |ket>. Logically equiv to any other notation, but impossible to fudge up. When they are multiplied in a way that lines up like <bra|ket>, you got an inner product (scalar measure of overlap). When they are multiplied wrong way around, you got a ketbra |i><j| (which is basically a neat way to represent a matrix element at indices i and j). Is the bra the row and the ket the column or vice versa? Don't matter. Just keep things facing whichever way they were originally facing and nothing will go wrong. In fact, you don't even need to think in terms of columns at all if you don't want. That's it. That's the whole system.

For the engineers who never seen this, |i> |j> |k> work exactly like unit vectors i,j,k, but you aren't limited to the usual 3 dimensions and 3 letters. Writing |x> in a ket like this just means "I am using x as a label for a degree of freedom in some vector space, not as the literal value x". This lets you do cool shit, like if you got n dimensions you can write a vector as sum v_i |i> ranging from 0 to n. You can also do super useful stuff like merging two vector spaces together to represent a larger system (aka a tensor product). Eg if I have a vector v = sum v_i |i> representing one subsystem and another vector w = sum w_j |j> representing some other subsystem, I can construct the vector u = sum v_i w_j |i, j> representing the whole system (sum is over both i and j).

(I know you already learned all this, I wrote it for everyone else's benefit).

Unrelated, given the webs origin at cern, HTML should have used bras as start tags and kets as end tags. <HTML| <head|head> <body| ... |body> |HTML>.
It makes me cheer more for Remarkable. I hate that big tech can use their muscles/money to just bleed competition dry, and then end up with the majority of the market share and us customers are worse off.
MDM

We want to be able to restrict what gets synced to where. (eg, not dropbox or box or google etc)

We want to enforce passwords and screen time outs.
We'd prefer to use intune to do this but are open to other possibilities
etc etc

None of this is possible and remarkable don't seem interested in this.
Keeping true to your username?

In case you are earnestly somehow unaware, Sarah is among the most popular feminine given names of all time, with Hebrew origin but also popular with Christians, Muslims, nonreligious people in areas influenced by those religions, and in just about every country and culture influenced by any of those. It's hard to even think of a culture which doesn't use the name Sarah in some form; I'm drawing a complete blank; where are you from? Alpha Centauri?
This whole thread started, when an employer found someone working two other full time jobs.

There is zero defense for this. None.

There is no way to work 22.5 hrs per day, 5 days a week, and not be a thief, a crook, scum.

This is who you have aligned yourself with. This is the behaviour you have defended.

Into this conversation walked the spoiled, the entitled, the scam artist. People advocated working multiple full time jobs, and equated doing normal work as "slavery".

Above, you do so again. You liken working diligently, to slavery. Good grief.
Systemd isn't safe to run anywhere (2021)
How the Internet may be changing our cognition (2019)
Ruby's pry.

Just dropping `binding.pry` anywhere in the code, run it and then get a full REPL with all the variables and instrospect everything with `ls`.
This is why I am still coming back to Ruby and writing everything like it. In most other languages you spend a lot of time actually trying to find a way to debug properly.
Happy to hear recommendations how other languages are doing it. (I know that there are debuggers :P )
I'm a developer myself, and I think that this is the wrong approach.

I'd talk with all of them and help them build multiple teams, by identifying leaders and we'd try a couple of business models. You don't need that many developers to work only on one thing.

Only down the road, when you have something that resembles more like a product and a proper team that increasing headcount will yield more work done. You need to build and grow the team based on the scope you've got.

It goes without mentioning that you need people from other areas, like sales, to do anything useful.
Do you mean because they're poor? There's plenty of poor people in Japan, but they don't resort to stealing people's phones or wallets. Again, it's cultural. And it's not just America; over in Europe where there's a far better social safety net than America, petty theft is commonplace, especially pickpocketing (which, to America's credit, is almost unheard of there, which again shows this stuff is cultural).
Yet we invent physics that wasn’t comprehended before it was discovered… not sure what your hangup is. We wouldnt stop trying to improve the AGI when it’s at the level of an ant.
Making operations idempotent.