skysight-inc/HackerNews huggingface dataset:
When you put it that way, _why definitely would have had oil on him since this was written. HE IS THE MESSIAH! (referring to Monty Python skit)
Dangers of Flow
Lots of things I like about the site. For one, I value that privacy has been highlighted.

On a slight negative... they feature Firefox but it requires so much work to tweak. I feel this is a reflex recommendation though I do, very much, like that FF allows itself to be tweaked.

On the Desktop... I much prefer LibreWolf - which I didn't see listed. It is what Firefox should be.

On mobile, I prefer DuckDuckGo's Android browser (also not listed). Firefox mobile comes bundled with 3 tracking companies - each collecting a mountain of information! Why must you always shoot yourself in the foot, Mozilla? It's never ending.

DDG is not only open source (https://github.com/duckduckgo/Android) but it also does <strike>not have a single tracker</strike> (thanks for this, byyll). If that wasn't enough, it comes with a module called App Tracking Protection. It's brilliant. It blocks trackers from other apps. I cannot recommend this enough. The sheer amount of information collected from apps on your phone...

I have had apps at 30 attempts in the first few seconds and reach 1,000 tracking attempts within 1/2 an hour. Every single item - from contacts to specific location - is constantly being polled, collected and transmitted by multiple companies.

Every app seems to be running spyware from various multiple companies - even my banking app. DDG's Android Browser helps stop this.

Wall of text, time to stop. Nice site, love that it's not afraid to be technical because, unfortunately, it's necessary at times.
The reality is that you cannot trust that your machines are not compromised.

The only option we are left with is to operate under the assumption that, indeed, our machines are permanently compromised.
Not really, what limits credit is the price of money i.e. interest. Reserve ratios have gone out of usage for some time now.
Just some generic things that should help avoid or clean up after a compromise.

- clean reinstall every month, just pick a new flavor of Linux to try out. (also helps ensure I have proper backups and scripts for setting up environment)

- Dev work I usually do in docker containers, easy to set up/nuke environments.

- Open source router with open source bios (apu2), firewall on it, usually reinstall once in a while.

- Spin up VMs via scripts for anything else. (games - windows VM with passthrough GPU for example)

- automatic updates everywhere.
> that you're writing swathes of people off

I have no interest in socializing with religious people, Javascript programmers, gym people, vegans, gamers, modern artists, car enthusiasts, cowboys, cryptocurrency enthusiasts, etc. That doesn't mean that what these people do is wrong, it simply means we have no shared interests or values, and my time is better spent with other people. I pass no judgement on what they are doing, I chose to live my life differently and with other people.

> your own misconceptions about what they do want to do. [...] And this is where you're making incorrect assumptions based on your own biases.

My experiences with drug enthusiasts were a total waste of my time, again and again. It's fascinating that drug enthusiasts are trying to convince me otherwise. This is exactly one of the reasons why I am have no interest in their company.
The triangle demo doesn't seem completely stable, there are occasional flickering glitches, occasionally it also stays in a "wrong" state like this: https://ibb.co/4gD5NcB
I've seen estimates that the mongols killed 10% of all living humans at one point in time. If true it makes them the single worst collective in human history

>That, and that the Mongols directly threatened Europe from the outside

The Huns? The Caliphate?
I'm not sure what's going on here. Does it only apply to `apt upgrade` or also to `apt update`? Is it possible that my local dev environment uses different packages to our CI build system?
PyPI packages don’t always have the same name as what you import. PIL comes to mind, as well as others I don’t remember right now.
How long until I won't be able to run my CPU at max power unless I pay an extra carbon tax?
5.5 years payback time? Yeah, I don’t expect current volatility in European markets last that long. It might, but I don’t expect it.
IMO, CI as the product companies are done for, to some extent they built a business on GitHub not having CI built in, and now it does. (GitLab already did, and when have you seen a GitLab-hosted project using CircleCI or similar?)

The more Actions matures, the harder it is for them to continue - their market will be legacy projects already on the platform, and perhaps the new projects from companies already using it for older projects (the one reason I can think of to prefer Circle over Actions for a new GH-hosted project).
Same here, Ubuntu 22.10
Your first one is one of the versions of the standard Fisher–Yates shuffle, so it does work :)
Linux also has virtual file systems.
More like a canary I think.
I’ve heard of people using a Raspberry PI as a “BMC” by using VNC viewer connect. Here’s one example I found[1].

[1]https://forums.unraid.net/topic/97460-selfmade-ipmibmc-with-...
Plants don't use the whole light spectrum, at most they use 45% of the natural light. Solar panels can take advantage of the whole spectrum. Then, the indoor lighting will just shine the light that the plants can actually use (all growing lamps advertise that, see [1] for example).

Plants also don't use the light while they are just sprouting. Plants don't use light after you harvest them. And most importantly, plants don't use light where they are not.

If you have vast areas of desert, you can mount lots of solar panels. Lots of places are somewhat between pure Dunes-type desert and Ukrainian-type super fertile chernozem. In a semi-desert place, you might be better off just installing solar panels and building indoor farms. Think of places like Arizona, or Nevada, or, why not, Sudan.

[1] https://bioslighting.com/grow-light-spectrum-led-plants/grow...
> That doesn't mean that what these people do is wrong, it simply means we have no shared interests or value

Only if you assume people are one dimensional caricatures that only make sense if you waste too much time on the internet.
Are you saying gold standard works better than IOU money? It's like saying bicycles are better than cars because they never run of gas.
Thank you for a very clear explanation.

> In reality though, FRN is miniscule compared to FRC because the vast majority of transactions are settled digitally.

I thought so. I'm just curious what is the usual FRN/(FRN+FRC) ratio.
Diarrhea of the brain, pumped straight from the head through the keyboard.
More Than 150 Organizations Call to Close Guantánamo on 21st Anniversary
> treating women "like first class members of society then" does the opposite

I wouldn't go that far. Just that you can't blame low fertility on poor treatment of women, and that "I will protest society by having fewer children" is a convenient fantasy, not a stance held by a significant number of women.

I would wager the true cause of low fertility is something merely correlated to women's rights, because e.g. the UAE have a fertility rate of 1.3, while in Israel it's at 3.0.

Source for all the numbers: https://en.wikipedia.org/wiki/List_of_sovereign_states_and_d...
I live in Europe and don't come from America, so don't kid yourself that this is some alien way of thinking. Europe is full of people with the exact same views. The destruction of trust is global.

I notice you never answered how you know the 60% figure is accurate, given others haven't been.

"I don't think the academic/medical arm of public health has a political agenda."

You're surrounded by it so you can't see it, but to the rest of us it's obvious and extreme. In the UK one prominent epidemiologist turned out to be dating someone in Extinction Rebellion and another is a member of the Communist Party. Both were advising the government, nobody within public health thought there was anything strange about that, let alone a problem. The WHO blindly trusted everything from China, and when the BLM protests/riots happened where was the uproar from public health? Nowhere - lockdowns had been essential but suddenly protests mattered more, unless you were protesting against public health policies in which case, those protests were somehow still too dangerous to allow.

Public health is nothing but politics and ideology. We all got taught that in the harshest way possible.

"got backlash about everything they guessed wrong"

They got backlash for lying, like having no clue what they were doing yet claiming their understanding was perfect and their predictions were guaranteed to happen, even that millions would die if their instructions weren't followed exactly. If they had admitted up front they didn't know how to predict epidemics and then shut up, they'd face far less hostility today. If they'd done these things in the private sector they'd be in prison. Just look at Elizabeth Holmes to see.
Keep it air gapped, only way to be sure!

Only half kidding, unfortunately.
Great question. I don't anymore. Decades ago when I had a 286 and knew what each file did and what all the software was, and threats were limited and crude, I had good confidence of controlling my machine. Today, when my laptop has millions of files and each website - even hacker news - could inject something malicious and my surface is so broad (browsers applications extensions libraries everything) and virtually anything I do involves network connections... I just don't have the confidence.

FWIW, I try to segregate my machines for different categories of behaviour - this laptop is for work, this one is for photos and personal documents, this one is for porn, this one is if I want to try something. But even still my trust in e. G. software vlan on my router and access controls on my NAS etc are limited in this day and age.

I feel today it's not about striving for zero risk (for 99.99 of people) , but picking the ratio of overhead and risk you're ok with. And backups. (bonus question - how to make backups safe in age of encrypting ransom ware).
I couldn't find any information about its license.
>Spin up VMs via scripts for .. games

this is not sustainable. you do this once and then pray nothing breaks!
You'd probably want to first check that /etc/resolv.conf is a real file, first. SystemD has a nasty habit of replacing it with a symlink. That prevents "chattr" trick from working.
Ask HN: Do some people avoid malware by not clicking links on social news sites?
And if so, do you think this is rational behavior?
Saudi Arabian academic on death row for using Twitter and WhatsApp
It is not all about benchmarks. Benchmarks are just statistics. You know what Benjamin D'Israeli said about statistics, right?

"There are three kinds of lies: lies, damned lies, and statistics."

There are more important things than raw performance numbers.

How stable is the OS? That means over years, not hours.

Note: benchmarks tell you nothing about this.

How much maintenance does it take? That means both steps, and patches. How much work must you do? How long will it take? How much intervention? Can you automate it? How many updates must you install? How often? How big are they? How much bandwidth will they take? Can they be 100% trusted not to break anything ever?

Note: benchmarks tell you nothing about this.

How good is the driver support? That means both: How many drivers are there, and how good are the drivers? E.g. FreeBSD has many wifi drivers but they don't support the full speed of modern Wifi chipsets. That is why wifibox exists.

Note: benchmarks tell you nothing about this.

If the OS is rock solid and updates are small, easy, reliable and infrequent, and the drivers are comprehensive, that's all good. But then you must ask if it does what you need it to do?

Does it run one app you must have? If not, does it have a replacement that is just as good in every way?

Note: benchmarks tell you nothing about this.

If it has the app you need, does it have the version you need?

If it doesn't, is there an external source or a compatibility layer you could use?

Note: benchmarks tell you nothing about this.

If there is an external source, is it worth the work? Will it reduce stability? Will it make the updates more complicated?

AGAIN, benchmarks tell you nothing about this.

But benchmarks are easy, which is why people do them and publish them, because they look good and give replicable objective evidence, and we all need that.

But they are only part of the story.

Let us ask a question combining these things I have listed:

BSD will do all I need so long as I run the Linux compiler for $NEWLANG that I need for my project under the Linuxulator.

However, that only works with FreeBSD, so now NetBSD is out of the running.

However, if I run the language under the FreeBSD Linux emulator, $WEBSITE benchmarked it, and it only gives 25% of the native performance, and I need a minimum of 75% performance according to my budget and the benchmarks from $WEBSITE2.

Also, if I run the Linux version, I need to update that separately, and that will make my update régime twice as complicated, and quadruple my testing.

So, I won't use BSD, I will use AlmaLinux after all.

Summary: benchmarks are not enough, but you need them. It is more complicated than just benchmarks.

TL;DR: this is the short version.
So you're saying that the Bank of England was involved in a conspiracy that wouldn't acknowledge something that has been public knowledge for over a century?
Nobody is a prisoner of their IQ
Fix Pinch-to-Zoom Gesture
See https://en.wikipedia.org/wiki/Russian_Railway_Troops

Long before the Bolsheviks the Russians have seen railway logistics a key to defensive or regional war. Inside their boundaries they can move troops and supplies highly efficiently. It may even help in an invasion of a neighbor that has a compatible rail network that can be commandeered. Rail can move a tremendous volume of stuff at low cost, when they tried to invade Kiev they had to go by road and had a terrible time with sustainment.

The U.S. ability to communicate by air and sea has global reach (why I said ‘one of the best’) but in its range you can’t beat the low cost and high volume of rail.
Well, the paperback edition appears to be sold by Amazon.co.uk and it's also available as a Kindle edition, so I don't think importing it would be an issue
I just have a clone of a clean windows VM.

If something breaks or I get bored, nuke the active one and start clone, update it and make another backup, then reinstall games again.

On the other hand, gpu pass-through breaks once in a while and is annoying to fix.
Or history, or logistics... Regardless so, the comment sectuons are still good enough to learn something new even in fields like supply chain, in which I consider myself to be rather knowledgeable.
The Shutdown of “Luxury Emissions” Should Be at the Center of Climate Revolt
Miti's are the best. I have one as well.

I love old woodworking hand tools. I buy them every chance I get. Slowly building my collection of Stanley hand planes. I have a couple of nice Swedish hand saws. Other assorted tools. USA made sockets and wrenches. Really any USA made old tools.
Right. The subtle difference being that because you only sample from position i to n you only ever exchange each card exactly once. In my algo you sample from 0 to n-1 so a card exchanged in a previous round can be exchanged again. This generalises into cards early in the shuffle being exchanged more than later cards, which changes the distribution of possible outcomes.

Nerd sidenote: Because generating random numbers tends to be expensive, I had an idea once where you generate the full permutation with only a single random sample. Basically you could use something which fully enumerates a space like Gray codes[1] (you want one with a closed form solution which can arbitrarily you the nth code) then you generate one random number, multiply by the number of combinations, look up that code and decode that into the sequence of cards. I never actually got around to implementing it, but I suspect if your code lookup was fast it would be much faster than Fisher-Yates.

The use case was if you wanted to make a Monte Carlo algorithm to evaluate strategies in a card game for instance.

[1] https://en.wikipedia.org/wiki/Gray_code
wow! first PCB of the watch or first PCB you designed for anything? Either way very impressive. I've been curious to get into PCB design but not sure what id make with that skill yet. Ordering custom boards seems to be quite accessible these days. How did you learn to do all this?
If you want to do something like this that is more maintained and a more modern postfix language, there's furnace which comes with factor: https://docs.factorcode.org/content/article-furnace.html
Is it implemented as standard in any series of Android phones? As far as I have seen, it is standard on the entire iPhone line 12 and up(minus the old iphone 8 design used in SE). Thats three generations and it has spawned a whole ecosystem of products that utilize the functionality(my favorite being the magnetic car mount/charger). Its magic because they managed to implement it extremely well + make this ecosystem possible due to their decision of rolling it out nearly complete product wide which helps expand the third party ecosystem. As a user, I measure how magical something is by how much better it makes my life and let me tell you, this implementation has been amazing. It is the third Apple thing I have called "magical" in the last 5 years. The other two being the Airpods Pro(again amazing implementation) + the M series chips(the speed and snappiness has made me impressed with a new computer for the first time in a long time).

I once had a similar solution with the Nexus 5(the last Android phone I bought new before I tried an iPhone and subsequently never looked back). This phone had some sort of magnetic charging system that combined with a third party car mount. Unfortunately the implementation sucked as many times it would fail to begin charging and once in a while some freak accident would happen where it would charge but the phone would get scary burning hot and then overheat. When this happened, the stupid phone starts to throttle and nothing is responsive anymore, not even the damn ability to power down the phone. Real great having to correct this issue when im supposed to be driving the damn car. The Nexus5 was the poster child for all that was wrong with Android.

>Meanwhile AirPower was in announced in 2017 and has still failed to materialize.

Why would this matter to me? I'm pleased with the solutions Apple has already provided. If they can't deliver something then I'm not going to call that particular thing magical but the magsafe in the phones is shipping and it is in fact magical.
Some people love the chase.
I make content and give away free books to help others get into the industry and change their lives.
An easy argument why it cannot work: consider an array with 3 elements, [a,b,c]. “Shuffling” it could look as follows.

Step 1. Swap a, c -> [c,b,a]
Step 2. Swap b, c -> [b,c,a]
Step 3. Swap a, a -> [b,c,a]

What is the probability that we do exactly these steps? At each step, we have 3 choices, so (1/3) * (1/3) * (1/3) = 1/27. What is the probability that we end up with [b,c,a] ? You might think 1/27 as well, but that is not quite true – it is possible, that we choose different steps, but end up with the same result. For example, we can do [a,b,c]->[b,a,c]->[b,c,a]->[b,c,a]. But the probability will always be a multiple of 1/27 – it is just 1/27 times the number of possible paths that leads to [b,c,a].

Now, what should the probability be? There are exactly 6 ways to shuffle [a,b,c] (this is the number of permutations, 3! = 3 * 2 * 1 = 6). So we want to get [b,c,a] with a probability of 1/6. But 1/6 is not a multiple of 1/27 ! (You can see that by looking at the equation 1/6 = x/27, which is the same as x = 27 / 6 = 4.5 .)

The same argument works for any length n > 2, as n*n is not divisible by n-1, but n! is.
role doesnt work for me cause i'm only doing remote... but downloaded your product and been using it for a week... love it.

great job :)
Anecdote, but: I've seen a previous employer blackball a hardware vendor because of terrible BMC support.
You can run Vault inside of an enclave to protect it's memory: https://edgebit.io/enclaver/docs/0.x/guide-vault/
What about publicly known backdoors in your hardware?

https://www.techrepublic.com/article/is-the-intel-management...

There is hardware that doesn't contain those at least, but it doesn't break power records.
Renewables are so cheap that you need ridiculously large losses before needing to care very much.

My personal preference is a global HVDC power grid, which would be fine from a technical point of view even with current standard cables. (There are non-technical problems, but 60% resistive losses are genuinely ignorable given how cheap optimal PV is).

I have not looked into pressurised air storage, but I can easily believe it’s also something where the losses, whatever they are, are just not a big deal any more.
It sounds like the issues are avoided if you only apply the security updates.
ZX-shell: write JavaScript/TS+Bash scripts that download their dependencies
Do you lock your computer every time you leave your desk?

And do you always check for keylogger thumbdrives and such?
> double shift

Who the hell decided that it's a good combination for a shortcut? I just press it occasionally.
Interesting. Do you have any pointers to how to do that?

TrueNAS Core is a FreeBSD distro. Docker is a Linux tool. That implies to me I'd need a Linux distro in a VM, then Docker on that, then more config on top.

Which sounds hard.

Which is why people run this stuff on dedicated small cheap computers.

I predicted containers were the next big thing 3 years before Docker was founded, but I do not run containers on production servers. My job is writing about this stuff, not running servers. :-)

I write about it because I used to run servers in production for a living, and I didn't like doing it. I prefer writing.
> The "For You" & "Following" tabs are exactly what I have wanted for ages.

Just so we’re all on the same page, these options always existed behind the sparkle menu. The sparkle menu has been removed in favor of tabs but the content has always been there. FYP was the default unless you hit sparkle -> latest tweets.
This looks very similar to https://privacyguides.org

But FOSS focused instead of privacy focused(PG rarely feature closed source software anyway)
> "Canaan's elite was either Akkadian" -- the writing was done by scribes, who were a kind of elite, but the kings did not write these themselves.

you cut out the rest of the sentence, and then just rephrased it ;)

"or at least they were educated/influenced from there"
The tests should always follow the requirements first and code second, if they fail you should look at the system requirements and deduce whether the tests are bad or the code is actually failing. If the tests are bad, re-write them to fit the requirements, if the code is bad... don't push your new code.

It's very hard to figure out what the author really is unhappy with.