skysight-inc/HackerNews huggingface dataset:
a compromised root ca allows an attacker who already has dns or ip control (via bgp, arp spoofing, a captive portal, etc.) to leverage it into a working mitm attack on a tls site, but it can't revoke certs it didn't sign, and the attack is over as soon as the attacker loses dns or ip control

by contrast, the ca you chose to sign your cert can revoke it, or refuse to renew it, taking your website permanently offline with zero effort on their part, unless you can find another ca to sign a new cert for you

but if you could, let's encrypt wouldn't have had to exist in the first place

the dozens of companies you mentioned make that less of a threat, not more of one, though they do of course increase of mitm attacks as i described in the first paragraph of this comment
FWIW - my previous iPhone, bottom-end when brand new, kinda seemed to get slower over the >5 years I used it (and always updated to the latest iOS).

Your suspicion seems like it'd be easy to prove, with access to some benchmark programs, developers' tools, & such.
Letting an adult figure go with the kids to Dunkin Donuts for their safety misses the point. The deeper issue is that using “safety” as the only metric for enforcement is leading to a society where the next generation of adults is ill equipped to live as confident, responsible, independently-thinking adults.

These parents are rewarding their kids to go to Dunkin Donut on their own. In their judgement, it was safe enough to do so. If they wanted to be sure, they could have snuck behind them (but they would have to make sure they are not caught doing so, otherwise it would shatter the emerging confidence of the kids).
> PS. Do not ever approach a radar, it can boil you alive!

"Fun" related story. For a year or so in grad school I was in charge of the microwave and radar lab. The safety folks came for an annual inspection, and I toured them around the lab. Lots of "this can cook you from across the room", "this makes 50kV", "this seemingly normal 220V 50Hz outlet is actually 115V 400Hz". That kind of thing.

A week later we got the inspection report. It recommended we upgrade our requirement for closed shoes to include steel toe caps. No other safety measures or signage needed.
> It would be more helpful for the compiler to assume that it does not know what will happen. This is how C actually worked for many years.

If we don't know what will happen that is Undefined Behaviour.

The contradiction you have within yourself is that you know what you want to happen, but that's not what the specification says. If you want specific behaviour you need to specify what it is - not mumble and make a vague wave of the hand about "behavior you know that the target machine will give you" when you've no promise of any such thing. That would come at a cost, and of course you don't want to pay that cost, but that means you can't have what it buys.
The influence of the psychology of programming on a language design
Regarding number 3. I've developed some GI issues the last year and was diagnosed with celiac disease. My stress and anxiety are higher than ever. I've often reflected on whether the GI issues are causing my stress or just making me more aware of the stress that has always been there.
Valid points but a lot of frustrations and injustices you hear about in the USA are told by our own press because freedom of press. We are a very transparent people. This is not the case for other places.

My brother lived and worked in China for many years as a professional photographer and basically made the same points as you when we would ask him about what life is like over there. That was until he fell under suspicion at some point because he was in the wrong place at the wrong time taking pictures. He was under house arrest for over a year. They confiscated his passport but eventually let him leave because of Covid. He had zero due process. It was decided by the local police that he should be under house arrest. My family hired a lawyer but he had to present the lawyer to the police as a "concerned family friend who lives in China".

That anecdote is relatively tame compared to what some people go through in authoritarian countries. If the government targets you in one of those countries, your life is over with near zero chance of getting out of trouble.
Tutanota was forced to install a backdoor by a German court (see https://www.heise.de/news/Gericht-zwingt-Mailprovider-Tutano...)
I don't think a US court can force a US company to do so.
A small note: the Green New Deal is not much about ecology. It's a, needed, industrial revolution. Why? For the same reasons why we switch from mechanical cash registers to electronic ones: because making electronics is expensive in factories terms, but it's needed and can spit out gazillion of very cheap ICs needing not much raw material, while the previous mechanical version demand much more raw material, energy and labor per single unit. Similarly moving electricity is not that simple nor cheap, but still needed and far cheaper than moving gas, gasoline, diesel etc.

Ecology? Ah, ok, there is SOME at the end, meaning much less need of raw materials ONCE the transition would be made.

That's the point almost nobody want to state because in that case instead of getting a polarized cohort of fanatics on both side we would get a significant cohort of people stating "ok, let's do it BUT if we pay for product factories sustain the costs OR we participate to the costs and to the earning".
“A constrained DSL” is precisely what is wrong with so many React alternatives. Anyone who had to deal with writing Angular 1 directives and fight with the digest loop understands how very real the pain is.

Also, there are two types of performance: how fast code runs and how fast a team can maintain and extend code. Does one optimize for running code or for building code? React won because it optimized for the latter. And thank god, because who wants to mess with digest loops and magical DSLs?
It could. But that's not how you make a 10 billion valuation worth it. Much like facebook could have been a way to make us more connected to one another and less divided, but we all know how that went
Python:

def done(x):
return (type(x) != type(lambda: None))

def allof(f, *xs):
return all(map(f, xs))

def isnt(f):
return lambda x: not f(x)

def myprint(xs):
print("\t-> ", "\t".join([str(x) if done(x) else "_" for x in xs]))

def lazy(f, *deps):
"Evaluate f(xs), only if dependencies (listed by index in xs) are resolved."
def lazy_f(xs):
if allof(done, *[xs[d] for d in deps]):
return f(xs)
else:
return lazy(f, *deps)
return lazy_f

def loeb_unsafe(fs):
"Loeb for lists, but doesn't detect dependency cycles."
xs = fs[:]

# THE IMPORTANT PART!
while not allof(done, *xs):
# 'if done(x) is special for Python: convert function to value, since
# Python doesn't know how to evaluate/call a value like Haskell does.
xs = [x if done(x) else x(xs) for x in xs]
return xs

def loeb_safe(fs):
"Loeb for lists, stops when it detects a dependency cycle."
xs = fs[:]

# THE IMPORTANT PART!
while not allof(done, *xs):
myprint(xs)
# 'if done(x) is special for Python: convert function to value, since
# Python doesn't know how to evaluate/call a value like Haskell does.
new_xs = [x if done(x) else x(xs) for x in xs]
if list(filter(done, new_xs)) == list(filter(done, xs)):
print("CYCLE DETECTED!")
break
xs = new_xs
return xs

fs = [
lazy(lambda xs: xs[1] + xs[2], 1, 2),
lazy(lambda xs: xs[3] + 1, 3),
lazy(lambda xs: xs[1] + 1, 1),
1,
lazy(lambda xs: xs[5] + 1, 5),
# unsafe!
# lazy(lambda xs: xs[4] + 1, 4),
lambda xs: 100,
200
]

print("safe:")
myprint(loeb_safe(fs))
print("\nunsafe:")
myprint(loeb_unsafe(fs))

Output:

safe:
-> _ _ _ 1 _ _ 200
-> _ 2 _ 1 _ 100 200
-> _ 2 3 1 101 100 200
-> 5 2 3 1 101 100 200

unsafe:
-> 5 2 3 1 101 100 200
Then I suppose you think that the article under question is in fact vegan and the "controversy" about it is overblown.
Stop guys, stop.

Be young in your mind. Be young.

How are young people interpreting this?

"Oh wow, I can get it to write or help edit essays"

"I can use it as something to bounce ideas off of"

"I can use it to take ideas from my head into the digital realm."

Stop being old people.
> We certainly need decentralized systems that cannot be controlled by EU, US, or any government/entity.

No. If such a system could work in any meaningful way, it would be already in place.

Trying to fight legal frameworks with technology, failed in the past with some notable but hardly repeatable exceptions. In the 90s a few geeks tech awareness could match the resources of a small state, non tech-savvy state. Nowadays it is impossible because the discrepancy in resources is huge.

There are countries that force you to download their own "secure" SSL certificate, so they can sniff all traffic. China is the worst and most prominent example.

This battle need to be fought on the street, with votes, by raising awareness, etc. If we want to be "free" we need to take-over the political battle, not the tech battle because if we win on that front, most likely won't matter. I don't want to risk jail for using an open source encryption tool.
> Upgrade nginx live and without dropping any connections.

You can do that, but you won't get the new behavior on the existing connections, only for new connections. Some http servers will also curtail keep-alive requests while draining the old server processes, so you still get to pay the cost of reestablishing long lived connections, if your use case includes those.
Interesting. I've been out of this field for 20 years, and the hundredths of a degree came from my fuzzy memory. Happy to defer to your more recent knowledge.
I wish there was some context for declaration of outrage. Are there tens of fans or ten thousands of fans upset about this? What percentages of the viewing market? It’s a bit difficult to raise empathy for three stoned Tweeters on a couch in Reseda vs thousands of unemployed artists.
You don’t need a blockchain for a digital TCG, but it feels like you “own” the digital product more when it’s tied to a protocol like ERC-721 instead of some random developers implementation.
Unfortunately, societal amnesia means we will never learn this lesson. We will continue to ban things too much, and be too oppressive, until it becomes too overwhelming and a revolution happens. Rinse and repeat.
3/11 – The Tsunami: The First 3 Days – NHK World
Is traffic an issue at that age?
Node.js – v19.6.0
This is maybe more about time then about the place. Before, growing up in Slovakia, I walked streets of a city as kid alone. Now when I mentioned it to some parents (even in village) they think that I was so brave (even if they did the same).

Only children that you can see in parks or on the streets of Bratislava alone are refugees from Ukraine.
If you're going to attribute deaths that happen in a communist country to communism itself, then don't you need to also attribute deaths that happen in democratic/capitalist countries to democracy and capitalism? Should we add them up and compare?
Cool stuff. Here's what I got:

Q. What advice will you give to a new software engineer?
A. Take on the hardest problem you can find, use the most powerful language you can get.
Will be interesting to see what the post-AI movement will look like. I imagine some subscription service by a company that provides "authentic human generated consumable media" which has everything you listed from songs/tv/movies/news etc created by humans. I can see the early adopters of AI will be the early adopters of this type of service as well having gotten tired of the AI golden age. Truly human made content will become a status symbol and beyond the reaches of the average joe as AI generated content screws the supply v demand equation. I can see arts and adjacent fields becoming as in-demand as STEM in around 50-60 years.
So how would someone categorize those expenses differently?
Time to develop thinking caps!

https://youtu.be/SR5BfQ4rEqQ?t=18
We could say the same thing about the armed forces or teachers. I would agree if we were to call them factions within a larger entity, they certainly are distinct enough from one another, there is some degree of infighting, but I feel that in general a member of the governmental caste feels greater affinity for other caste members than they do the public at large, and that is why it makes sense to look at them as a single unit. At the end of the day, individual police officers aren't elected, the only form of redress we really have in our system is the remove the leadership that allows these things to happen, we haven't done that and nothing has changed, that shouldn't be surprising.
It's great, as long as you are in the majority. But if you're in the 49% (or less) category, then it is tyrannical and untenable. I don't know if you have a family, but if you do, do you put all of your decisions as a parent to a vote?
scraper!
Breathing is key. It's one of the easiest ways to facing your current situation and also distracting yourself every moment or so while you breathe. Exhaling along with mental visualization of purging the mind has the effect of releasing stress. Ofcourse, this needs practice, but that's not too hard with the amount of stressful situations we face everyday.
Great idea! I did the same thing with ycombinator1.com
That's why I said "basic". It can tell me about the major philosophical schools and the corresponding philosophers if I am a newbie on the subject, but I wouldn't trust it for any deep "existential" or "metaphysical" reasoning.
This is police statesque, authoritarian and bureaucratic nightmare overreach, a direct assault on your well-being and safety.
Wow, I missed this, thanks for sharing. I didn't even hear anything from my accountant
I think the announcement stated that they'll slowly roll it out via a wait-list.
Web 3.0 = Semantic Net

Web 3.1 = Virtual Assets backed by cryptography encoding/decoding

Web 3.11 = Search for Workgroups built by $2 an hour Kenyan workers

> https://metro.co.uk/2023/01/19/openai-paid-kenyan-workers-le...
Jews on college campuses [1] and jews in the black lives matter movement [2] come to mind.

[1] https://www.frc.org/antisemitism
[2] https://blogs.timesofisrael.com/black-lives-matters-jewish-p...
To this day, I still have exact intuition for the time span between "Fire in the hole!" and "Boom".
I was being sarcastic. I was referring to the fact that the on the EU dialog it said "we care about your privacy", but in the dialog I got in the US it didn't. And was thus implying that despite their claim, they do not care about anyone's privacy.
I heard a podcast, (the town with Matt belloni) and he had an CGI guy on from a company called MARS. And the most interesting thing he said is 80 percent of the visual effects in films are cosmetic. Meaning artists are basically photoshopping lines off the faces of older actors to make them look better etc. That's 80 percent of the work!
You can trust your friends to not straight up make up facts when they don't know something, like Chat-GPT does, for example.
Unpopular opinion: If you don't like democracy and use your democratic rights to actively work to dismantle it, you probably shouldn't actually be allowed to participate in democracy since you are operating in bad faith.
1. The book of law should have a fixed number of words, written in stone in the constitution. Side effects:

a) you want to pass a new law? Pick one in the book to get rid of.

b) magically, the enforcement budget and the size of the fat leech that feeds off of it (the government) remains constant. See "The Advantage of a Dragon" by Stanislaw Lem [1]

2. A law should always (with the possible exception of those in the constitution) have an expiration date, voted with the law, with a maximum of 10 years, at which time the law should get re-voted on if it turns out it was actually useful to society.

[1] http://www.loper-os.org/?p=3725
Not OP and not choosing a side in this thread on the RIIR topic, but I would like to address why I like Rust over those other language - in addition to memory safety, I really like the stronger types (specifically sum types), the move semantics, and the data-race safety.
To point 1, this almost feels like catch-22. While sleep may be a way to recover from stress, stress is probably the single thing that impacts my sleep the most (aside from alcohol consumption, which is much easier to control).

Does anyone have any help or tips here?
The simplest way to self-host is with Render: https://render.com/docs/deploy-temporal

Scaling takes a lot of expertise, and I'd say almost everyone saves time & money and gains in reliability by using Temporal Cloud over self-hosting.
>A company isn't compelled to keep selling every product they ever made in perpetuity.

Of course a company is free to stop selling a digital product if it wants to.

Just as I'm free to point out the shittiness of that choice.
> but still just used headphones

I haven't thought of Ventrilo/Teamspeak in years...
Understanding the GraphQL Type System
Is there a list of these deductions somewhere for those who can’t afford a cpa or tax lawyer
Yes, but less of an obnoxious accent

(I live in Boston. The accent is crazy.)
>Yes, as a Californian you can vote, but your vote is near guaranteed to have no effect, and as a result, neither of the sides cares to address your interests, solicit your opinion, advertise for your vote.

Isn't that partly their fault? If you're always going to vote for one party regardless of what they or the other party does, of course neither party is going to bother catering to you. It's kind of like declaring that you will always buy apple products, then complaining that apple doesn't address your grievances.
good for you, i can't imagine myself being under the gun to come up with a new funded project every year (or however often), would rather just work on some real product with revenue even if it's not very original
https://www.purepwnage.com/
Yes, I agree this is the most likely explanation. Just the inclusion of "fat" or "poor" (and slurs or any mention of race, obviously), or any word which is often used to insult someone will make text more likely to be flagged as hateful by a moderator in a training set.

I do still think that the men/women bias and the Democrat/Republican bias both make more sense as originating in moderators favoring one group over the other, since none of these are typically used as an insult by themselves.
While you are correct that solving this problem in the general case is impossible, the story isn't "silly" because we aren't talking about the general case but a specific and prominent one:

- We are currently engaged in a culture war whose two most prominent camps are democrats and conservatives (or more generally "left/right")

- The author has shown pretty definitively that ChatGPT is strongly biased towards the left in its content moderation policy

- OpenAI's mission statement is "to ensure that artificial general intelligence benefits all of humanity".
I definitely (and many others, particularly here on HN) feel you, I sometimes end up in feedback loops where I start gaming, feel unproductive so I start working on some side-project but feel like I should be relaxing after some minutes so I start doing something else, and the cycle begins again.

Sometimes that's OK :)
I wouldn't be surprised if GPT4 can write better scripts than some of the Netflix originals. But that just raises the bar for what we accept from human writers, which is fine by me.
Facebook being shady?? Color me shocked!
It's hard to know what "tuned it" means, but they're using an AI model to detect harmful content. So it's very possible that the AI model was always trained on this biased data, but as they made that model more aggressive, it exposed more of it's biases
Your adjectives don't really refute any arguments, though. Personally I'm ambivalent regarding whether police should have unions, but being derisive about someone's reasoning isn't really a platform.
This strikes me as very likely the Wrong Move here. Having a free tier that easily be used by, eg, open source client apps, etc. is - IMO - essential for Twitter. OTOH, what I always thought they should do is radically democratize access - PAID access - to the API at higher usage levels, including the "firehose" level (everything). For years Twitter had this thing going on where it was more or less impossible to get firehose access, even if you were willing to pay. That always struck me as self-defeating.
> if you tried to cross illegally in front of a law enforcement official and ignored their orders to stop, odds are very good you'd be shot.

How is shooting at someone crossing a border illegally reasonable use of force? It's a nonviolent offense that doesn't harm anyone directly.
That's not what a walled garden is.

You can't take the background from The Starry Night into the Mona Lisa either.
That's not what this is about. It's to do with a situation where companies were trying to make the IRS believe that money they spent on S/W dev was a valid R&D expense (so they could claim some R&D credit and hence pay less tax), and the IRS said "nope, that seems to be not valid because we don't see S/W as really R&D". So...some campaign contributions later and voila there is a law saying definitively that S/W does count. Those companies asked for this change.
Now, possibly the whole thing got lost in translation and became a terrible bad thing, but most likely not. Often these things need to be read in the context they apply, which is not "globally".
Thy could be. Try carnivore for three months. See I that resets your gut a bit.
Aren't those just different vision of what the third iteration of the web platform will / should / can be?

Should I call mine 3.0.0 to differenciate it and introduce some proper semver whilst I'm at it?
Imagine a world where the only content you see is from publishers that you trust, and that your friends trust, and their friends, to maybe 4 or 5 hops or so, and the feed was weighted by how much they are trusted by your particular social graph.

If you start seeing spammy content, you downvote it, and your trust level from that part of your social graph drops, and they are less likely to be able to publish things that you see. If you discover some high quality content, and you promote it, then your trust level will improve in your part of the social graph.

I'd say that the actual web3 (they crypto kind) is largely about reclaiming identity from centralized identity providers. Any time you publish anything, you're signing that publication with a key that only you hold. Once all content on the internet is signed, these trust graphs for delivering quality content and filtering out spam become trivial to build.

In this world, it doesn't matter if content is generated with ChatGPT, or content farms, or spammers. If the content is good, you'll see it, and if it's not, then you won't.