skysight-inc/HackerNews huggingface dataset:
>If you don't have time to read The Rihla itself...

That's sad on multiple levels. Does anyone know of a complete translation to English?

From ~30 years ago, by a member of the SCA: "There seems to be no complete and unabridged translation of his account of his travels. H. A. R. Gibb produced the first three volumes of one (The Travels of Ibn Battuta, by H.A.R. Gibb, Cambridge, 1958, 1962, 1971) before his death. He also produced an earlier abridged translation (The Travels of Ibn Battuta, London, 1929). There are partial translations by several others."

And about medieval Islam:

"Not all, not even most, Muslims were Arabs. Islam may have been the first world civilization; in period it stretched from Spain to Malaya. Muslims might be Arabs, Berbers, East or West African Blacks, Indians, Kurds, Mongols, Persians, Turks, ... . They were all united by a common religion and a common religious language, but divided by numerous religious factions, languages, and cultures"

http://www.pbm.com/~lindahl/cariadoc/some_sources.html
The relevant question isn't what Samsung has promised, but what they will actually deliver. I think we should be pretty skeptical of that promise based on Android's track record.
I don't think they make mistake. Their preferences are just mediocre. .. Thank you for trying to help fix my toxic mindset. It is hard!
One pro-security, pro-freedom alternative is local attestation

What's the point? That's about as useful as running your own CA. The fact is, those pushing remote attestation want remote centralised control and they're going to care that you have your own attestation infrastructure as much as they'll care that you have your own CA, i.e. they're not going to be satisfied because they're trusting their own, and not yours.

the Pluton team also uses Linux daily, builds TWO Microsoft Linux distros, and upstreams Linux kernel features.

That's even scarier. If the only form of "supported" Linux becomes Microsoft Linux (with its own unique brand of spyware and other crap forced on you due to RA), don't say we never saw it coming: Embrace, Extend, Extinguish... or perhaps that last E should now be Enslave.

If it succeeds on OCP servers (where datacenter owners have power to negotiate with OEM/ODMs), perhaps more transparency and owner control/veto can be brought to client devices,

We already had "owner control" until they started trying to take that away from us. We don't need nor want attestation at all. No means NO!
> Tangential, but... has anyone successfully prosecuted against age bias in tech? I've never heard of a single person that was able to prove it, and/or do anything about it.

Google settled a couple years ago.

https://www.shrm.org/resourcesandtools/hr-topics/behavioral-...

IBM ended up settling too.

https://www.forbes.com/sites/jackkelly/2018/09/18/the-ibm-ag...

And again...

https://www.nytimes.com/2022/02/12/business/economy/ibm-age-...

https://www.theregister.com/2022/10/04/ibm_settles_more_disc...

> IBM is preparing to settle yet more age discrimination and wage theft complaints against the IT giant, though in one instance where it has already done so, Big Blue is accused of failing to comply with the terms of its settlement agreement.

> Back in 2018, IBM was in the headlines, accused of deliberately trying to get rid of older workers and replace them with younger Millennials. Two years later, the US Equal Employment Opportunity Commission (EEOC) concluded [PDF] that IBM's defense of its decisions – that was just a coincidence if its layoffs seemingly primarily targeted the over-40s – "does not withstand scrutiny" and that "there is reasonable cause to believe that [IBM] has discriminated against [employees] on the basis of age."
The EU has repeatedly proposed to cripple E2E encryption with opaque client-side scanning technology. [1]

This comment seems to be incredibly misguided, all of Europe wants to destroy privacy.

[1] https://arstechnica.com/tech-policy/2022/05/war-upon-end-to-...
> is using pure software rendering (on top of SDL) in a rather naïve fashion

https://github.com/rxi/lite/blob/master/src/rencache.c#L4

I think you'll find that they found the naive approach was sufficiently poor, performance wise, that additional optimizations had to be applied on-top.

> But for quick hacking / porting old demos / writing emulators and also text based UI it can be fast enough.

/shrug

If you want to use it, use it. It's 'good enough'...

> if you vastly lower your expectations
> I wonder if the optics will kill it?

There's been a clear shift in nuclear power through the last decade. I've seen people that previously protested for the closure of plants turn their tune. Really all this is because we've learned that the fact that it produces zero carbon during operation and has a lot of other environmental advantages (like a low footprint), that many are considering the benefits vs the costs. Previously people only cared about the costs but now we see the picture is more complicated. So not only do I have hope for this project, but I also have hope for nuclear power in general. (remember, the argument isn't "nuclear vs renewables" it is "nuclear + renewables vs fossil fuels" vs "renewables vs fossil fuels". Anyone making another argument is not coming from the scientific community).

Also, an interesting aspect of nuclear engines is that astronauts will likely receive lower dosages of radiation as opposed to using traditional engine designs. This is because even with increased radiation from the engine (which can be shielded, but that's more weight) the reduced travel time means that the astronauts are exposed to lower amounts of solar (directional) and cosmic (omnidirectional) radiation. The NASA article mentions reduced weight of supplies but shielding also matters and is quite heavy.
I'm easy to contact, if there's anything else you want to tell us.
> Pressurization is relative

I mean, that's literally what I wrote.
As a security engineer, I can't agree more.

If you dont understand your enemy, you can not hope to defend against them.
Ah, got it. Yeah that makes sense, thanks -- I missed how old this was.
In practice, it would be not advisable to use any software with such a license simply because is non-standard.

Let's say someone wants to use your "wildcat" license. They'd realistically need to hire a lawyer just to understand what the legal implications of your license are. If you're planning to write this license so that you can just easily understand the implications by reading it, that is not wise because unless you are a lawyer you don't even know what you're doing or what the license really means. This is an important part of the problem that free software licenses are supposed to solve.
Except when they don't, then you get the Boeing 747 MAX literally avoiding mandatory safety evaluations and ignoring engineers
Strangely, if you follow steps 1 and 2 then you miss step 3, which is to back up or transfer your files. Why would the owner of an Apple Silicon machine not want to do this?
> you realize you’re basically saying “the trick to prioritizing is you have to prioritize” right?

I'm very aware of it. The next sentence I wrote:

> That's maybe the most naive method possible and essentially shouldn't count as advice for "how to prioritize".
Some of the most secure fingerprint sensors check for the temperature of the finger and/or detect the pulse.
Ask HN: How do you QA GPT-3 apps?
If your GPT-3 powered app relies on custom crafted prompts, how do you conduct QA on your app to ensure reliability? It seems like you can get different results for the same prompt, so I'm curious if this is a challenge or not.
I think neither? Or rather, it's a function of 1) the accuracy of managers knowing who is a sitter and 2) the percentage of your company is sitters. If the percentage is, say, 20% and the manager hit rate is, say, 20%..I'd say both moves end up firing more useful people than sitters.

Even if you take it to say managers cannot figure it out and always get it wrong (0% hit rate). Random layoffs are still a net negative even if they outperform managers picking the firings.

It's pretty funny how even without unions, companies have no recourse to me barely working and collecting a quarter mil a year.
I think there is an important deciding factor around whether you should make your resume in LaTeX, which is: do you expect the hiring team to be academics or previously academics?

If yes, then this is fine. But if not, you can actually hurt your chances of being hired by making your CV with LaTeX (source: this is feedback I received when I was rejected from jobs, long ago - switching to Word/LibreOffice made a noticeable difference in my callbacks).

That said, it ultimately matters more what's on the CV, so take comments like mine with a pinch of salt.
To my understanding, they demanded ransom a couple of days after the initial breach and not leaked anything yet.

Granted that their motivations are purely financial, they would try to sell first. And if it's not worth anything, they'd release it then.
New Digital Stethoscope sounds makes heart beats punch like techni music
Hello, Did you know that prolonged use of traditional stethoscopes can hurt your ears and cause hearing loss due to the piercing of earbuds? A large number of doctors in their 50s have this issue. MUSE Diagnostics brings to you the World's Best Stethoscope TAAL PRO with superior sound and soft earbuds that do not cause ear fatigue. Upgrade your diagnostic capabilities with our digital stethoscopes!
I would estimate vaping to be about 1% as harmful as a pack a day smoking habit.
> In the old cluster, we used Java 8 to run Elasticsearch which was the latest Java version supported at the time. In the new cluster, we use the bundled Java 18 version which allows us to utilize a more modern garbage collector that works better with larger heaps. We used CMS in the old cluster and use G1 in the new one.

/me cries in legacy Java 8 application.
There's a Google Experiment from 2018 using Hilbert Scopes:

https://experiments.withgoogle.com/seeing-music

Does anyone know of any chanting apps to give visual feedback on your voice as a tool for meditation?
I’ve seen this before and was shocked as well. Really gave me some perspective on how much trust we put in pilots and airlines to keep us safe while hurtling through the air at hundreds of miles per hour.
> Even people in AI don’t seem to agree on whether it’s going to change everything or it’s overhyped and not a major advancement. Which is it?

My feeling is that it (well, LLMs in general, ChatGPT is just the particular one getting public attention) is an overhyped major advancement that is going to change almost everything, but not as much as it is being hyped as changing everything.
Google itself benefited from that image. Many people chose an offer from Google with total comp X instead of another company with total comp Y when X is lesser than Y by a significant amount. In the future, seldom any one will make any such decision. Google has to pay more for the same caliber of people.

Of course, I am assuming that the market will turn around some time in the future. If the market remains this bleak forever, tech candidates no longer have any choices so Google doesn't have to care.
I don't get why they were so happy with avatar generator for example. I actually understand it's sort of fun. But $30 for that is a nope to me. This is why my mindset limits my idea space. I need to get out of that.
Given the still strong performance this might be it. The cuts were across teams, but some teams, such as HoloLens and 343i seemed to be hit harder. They also need to clear way for bringing on board over 10k new employees from Activision.
The author addresses this. Such a scenario requires explaining why comms systems were turned off one by one as if by a person rather than an instantaneous event like an asteroid strike. Also, it would be a very big coincidence for not only an asteroid to strike an aircraft and cause it to drift aimlessly (rather than just rapidly disassembling), but also for that aimless drift to randomly line up with a course plotted by one of the pilots of that plane with no apparent purpose.
It seems like it's not really faster by default, if you watch how the video continues after they announce the first results.

They're going out of their way to imitate the lazy-loading Qwik does by default for the parts that require heavy-lifting, once they disable that the magic's gone.

They weren't, as expert frontend programmers, even 100% sure about what was causing the high scores at first and they had to go and check if it was the lazy-loading for themselves. I'd give an average dev something with the Qwik approach, where they don't have to choose and automated analytics-based PGOs can be performed.

With that said they stated that the server-side rendering part of Qwik is not very optimized. I'd love to see if Qwik.js can get their SSR to perform better or if someone else (hopefully in a better language and runtime) is able to knock that one out of the park.
What did they do that was worse?
Nick Bloom gave a couple interviews on this. This website collects research summaries on WFH:

https://wfhresearch.com/research-and-policy/

Many benefits. But one downside he mentioned was that he doesn’t generate research ideas through planned 30-minute one-on-one interactions but through more unstructured conversations. Those are eliminated with virtual seminars and virtual conferences. Early-career folks might struggle too but I am not sure if that was articulated by his research.
> my iPhone is more secure than linux for the same reason

The phrase "more secure" doesn't mean anything, I wish it wasn't used.

One needs to talk about the threat model(s) you care about and how a particular solution addresses them (or not). Any given solution can be both more secure and less secure than an alternative, depending on what threat models you care about. Which may well be different than the threat models someone else cares about.

If you unconditionally trust Apple and all government agencies which have power over Apple (e.g. NSLs) then one could say iOS has a more secure file access model than Linux. But that's a big if. Personally I could never trust a closed source proprietary solution.
Steep price for something that is not really any better than the official Mastodon app. I expected more functionality with how many TestFlight people were claiming that this fixes Mastodon's UX. It feels like just a skin on top of what you already had available for free.
Yep, that's a standard part of background checks. If things don't match up - especially if its something big, then that tends to be a fairly good reason to not proceed with the candidate.
I self host redmine. I offered plan.io $300/yr on my corporate card but they insisted on $600. Too bad for them.
No, you still owe the stock, but if trading is halted or the stock's registration is revoked, you cannot close the position. That means that (a) you still owe (daily!) stock borrow fees, and (b) you are still required to keep collateral posted against the shares with your broker (because the stock is not trading, the last posted price can be considerably above zero, so this can tie up a non-trivial amount of money).

In recent memory, this has happened to Longfin Corp. [0], Cynk Technologies [1], China Biotics [2], and surely others. If it does happen before you can close out a short position, that's bad. You can be stuck that way for years [3].

[0] https://www.sec.gov/enforce/information-longfin-investors

[1] https://www.sec.gov/litigation/suspensions/2014/34-72594.pdf

[2] https://www.sec.gov/litigation/opinions/2013/34-70800.pdf

[3] https://www.barrons.com/articles/getting-caught-short-152306...
This is so handy use case. I can feed product/domain training videos (Transcribed) to it
> he doesn’t generate research ideas

N=1, my favourite kind of proof.

Luckily, I am not Nick Bloom - I generate plenty of better ideas from home
On systems supporting HDR10 color spaces, HDR can now be enabled by setting the environment variable DXVK_HDR=1, or by setting the option dxgi.enableHDR = True in the configuration file. When using vkd3d-proton 2.8 or newer, this will allow D3D12 games to detect and use the HDR10 color space if they support it.
Show HN: Visitor Management that integrates with any of your existing services
If you can manipulate the model into presenting you with an amount of copyrighted text that would count as infringement, it's clearly not the intention of the OP. In my attempts it shows, at most, a couple paragraphs. A quick Google search shows countless results that show a lot more. There is no way to meaningful infringe on the copyright with this tool.

Not sure why you're being rude and unproductive with this comment.
>if "Penetrate and Patch" was effective, we would have run out of security bugs in Internet Explorer by now. What has it been? 2 or 3 a month for 10 years?

It also assumes software is static and never changes so it's possible to run out of vulnerabilities to find.
The worst case is you actually get hired.

https://www.investopedia.com/financial-edge/0912/how-lying-o...

https://www.lawdepot.com/blog/the-legal-reasons-you-shouldnt...
Hmm.. same/similar. Maybe I should go outside the western playbook a little further. Thanks.

An episode of extreme stress during the pandemic has left me with IBS-C.

Apologize for TMI.

Before: I ate anything, whenever, in whatever quantity body requested and was consistent 2-3x/day.

Now: my body just does not pass stool on its own anymore and I require a prescription for Linzess (highest dosage). Without it, I will bloat to the point of a visibly distended stomach and pass rock hard stool once every 3ish days. Being so bloated causes me to eat less and I shed 15lbs (145lb@6ft).
Tried no fodmap diet, heavy on fermented foods for a while, xifaxan (in case of SIBO), prebiotics previously mentioned on HN. I've settled on Linzess daily + a heavy meat diet, with oats for breakfast. Too many vegetables and I get bloated. Most breads as well. Carbonated beverages make me into a balloon.
"Find additional resources about this prioritization method" should definitely go at the the very top of the second list.
Former graduate student here. The most important thing to remember is that every paper has a main point, and everything in it is reinforcing that main point. Figure out what the point is. The whole story is in the figures.

Start with the title. Then look at each of the figures carefully. Figure out the limits of the paper from the methods. Certain methods can only give certain types of results. Again, look at the figures. The figures tell the whole story and are worth way more than the text. What is the story the figures tell?

Ignore the rest of the text. If you must read something, read the text of the results and look at the supplement. If you have a lot of spare time, skim the citations and identify the couple of sentences in the discussion that express the author’s methodological regrets. Under no circumstances should you read an introduction.
Yes, I found myself a minimal consumer and I think it affects my producer side because I have less clue why people why things.
You responded to your mental image of my comment about his work rather than to his actual work. His work is not N=1. If you just open the link, you see. Keep an open mind.
Is there any real equivalent process for tech? It seems like the majority of security certifications is a box checking exercise where actually being secure has very little relation to how many boxes you checked.
I'm not saying that 55 is nearly dead. But 55-65 is the range when the death rate starts to really increase https://www.statista.com/statistics/241572/death-rate-by-age...
66 is also the retirement age and while some people want to keep doing what they're doing forever, others may prefer to move into a log cabin away from civilisation. So there's a good chance he'll be around, able, and dealing with the 2038 changes, but also a reasonable change that he won't want to / be able to.
Riot Games, developer of popular games League of Legends and Valorant, faces $10 million ransom demand from hackers who stole source code in security breach. Company refuses to pay, assures no player data compromised
Thank you for your contribution to this discussion.
I would be okay with once a week, or perhaps once a fortnight.

Sprint planning sessions can be hard to get everyone engaged, but it isn't impossible.
Retro can be remote, the biggest issue has been, is, and always will be teams that have no control and are dependent on other teams to do anything, don't write their own tickets and don't have an easily viewable plan that they can work towards.

Location has nothing to do with that.
" he doesn’t generate research ideas through planned 30-minute one-on-one interactions but through more unstructured conversations" - your comment
You asserted that Robinhood is evidence that "labor" in general has access to "rich-get-richer" mechanisms. My assertion is that this assertion is not valid.

The rich-get-richer mechanism in question is investing pre-existing large amounts of money in investments that are more or less zero risk, specifically from the perspective of the investor's personal livelihood and well-being. This is simply not available to most people, even if they do have access to zero-commission fractional-share trading on Robinhood.

Also, "labor" covers a large amount of people, of whom a very small subset are Robinhood users, and of whom an even smaller subset are legitimately successful traders, as opposed to one-off financial market lottery winners (who are themselves a small subset of all users).
Free general-purpose computing will remain on things like Raspberry Pi

Leaving aside the debatable nature of how open and free a RPi is, what's the point of "general-purpose computing" when it can't actually be used? When/if you need a locked-down machine controlled by some central authority to do what you can still do today with a free and open one, i.e. create and consume media, interact with services, communicate with others, etc., how much value does a truly libre computer have? It's almost like the "just build your own platform" argument when it comes to censorship.
You also use an OS and browser which is space age technology compared to what they had in 2005. Back then a kid could write an email to install a rootkit on your computer. Now you'd get paid $100k+ if you could work out how to do that.

It also used to be common knowledge that if someone has physical access to your device, its game over. Which is something that is becoming rapidly untrue. If I hand my macbook to my friend for a day, I can be quite confident they haven't been able to defeat the boot chain security to replace my kernel with a malware version like you trivially could pre secure boot environments.

Another piece of common advice was to not use public wifi because anyone could steal your password or credit card details. Security advice from 2005 really hasn't held up much at all.
Sounds like a GPT to me!
My comment included a link. And I did not say that what you quoted was all of his work. It was paraphrasing one thing he said in a one-hour interview.
Is this really how you want to represent yourself and your business in a public discussion? It's weird that you'd leave such a long trail of comments that are relatively toxic and rude and then have your full name and LinkedIn linked on your company's website.
Definitely. I've done this for a couple people already actually. At the bottom of the books page I have a link for exactly that kind of use case.
In sideprojects that are early stage, I have a todo.txt in my repo with one line, the thing I have to focus on. I keep this thing small in scope. Once it's done I replace it with another thing that's in my head.

It works surprisingly well to keep me focused on the task at hand :)