skysight-inc/HackerNews huggingface dataset:
FYI there is a push to standardize this stuff under the name of SCITT in IETF [1]. In this case (blog post) this is different as NPM is using in-toto attestation [5] (a description of a thing) and logs it in Google's provided append only log (transparency service). They are trying to make this thing being adopted through a freemium model at the moment.

One issue here is that NIST are trying to push SBOMs [2] but NPM is not providing them as part of the provenance I think.

Another thing is a push to use new types of signature envelopes like DSSE [3] instead of something like COSE [4]

[1] https://datatracker.ietf.org/group/scitt/about/

[2] https://www.nist.gov/itl/executive-order-14028-improving-nat...

[3] https://github.com/secure-systems-lab/dsse

[4] https://www.rfc-editor.org/rfc/rfc8152

[5] https://github.com/in-toto/attestation
Maybe there’s value to classes outside of what employers want Especially for survey-level classes that aren’t specific to a specialization or major.

I think alternatively we need employers to stop asking for degree’s altogether so the enrollees are people who are there to learn for themselves not for employers. It’d reduce the crazy demand and cost around education.
I’ve usually translated it to “cozy” with a bit of “at ease” and “comfortable”. But, I’m an American that speaks some Dutch (all my family are from the Netherlands, but I’m born in USA), so I’m not completely fluent.
Glad that I never used that site, not even once.
It's incredible how much of the software development space is owned by Microsoft now. I wonder if they will also buy JetBrains in the foreseeable future?
The problem for me is that subreddits have taken over from traditional forums. I have a handful of topics/interests I browse a subreddit for because it's the biggest community for that topic.

I hate it and I hate reddit- it's a fucking cringy place full of arrogant twerps that post know it all comments that leave no room for any conversation, or just people trying to be witty. (normally the top 5 comments are these)

I'd love a return to phpbb forums for everything.
Russia _has_ to use the yuan but that’s a far cry from “everyone”.

China just paid for their first boat of yuan settled LG on the open market 20 days ago. After 6 years of offering it on their exchange. Their meeting with the Saudi’s last month came with non-committal statements, again, 6 years after they first started.

I think the yuan becoming more involved in the energy trade is inevitable, they are the largest energy importer in the world and a major economy. It may have even been accelerated by the sanctions on Iran and Russia. But to say that “no one is paying for oil in dollars anymore” is a ludicrous statement (probably one that comes from the posters hopes not the facts).

And adding the petroyuan to the mix is more dangerous to the Chinese currency than to the dollar. It immediately becomes imminently arbitrage-able in ways it can’t be currently due to currency controls. The Chinese government has been de-liberalizing their currency because they are worried what the markets will do to it.

That’s not to mention their treasury exposure, trade surpluses and the Middle Eastern states currency pegs.

A de-dollarization of the energy market will make it less efficient and may cause some rebalancing of currency reserves, but it will drive all settlement currencies to free market parity which is good for western currencies and bad for Chinese and Russian ones.
If the house has a quality criteria for entry, won't the writer have to focus on the content of their work in order to meet the criteria?
Smartphones only cheapened photography in an additional manner. Which is why you get Instagram filled with pictures of food. It's the internet combined with the nearly free cost of digital.

But digital cameras for the everyday person existed long before the smartphone. And before that, point and shoot film cameras and Polaroid.
The "pay your dues then run the business" approach has a couple problems. One you're gambling that you won't get injured in ways that will end or set back your career before you've done the time that will allow you to move past that risk. The odds are in your favor if you're sober, careful, and attentive but low level work in those fields doesn't particularly teach or reward that mindset either so a great deal of personal discipline is helpful. Even then it just takes one mistake and it doesn't even have to be your mistake either.

The second is that running a business is a different skillset from being a plumber or whatever, one that you won't have learned organically on the way up. And there's still the risk that you launch your business into some 2008 recession shit or whatever just through bad luck and now you're as broke as you were starting at 22 years old but without a body that can do physical work for 15 h/day anymore.

If you're american suggesting people join the military is socially normative but frankly obscene. Look what they've been into the last couple decades. "Assassinate civilians for twenty years and you can retire" is a harsh but realistic rephrasing of that recommendation. That's even aside from the very real risk you'll be sent off to get a life changing TBI, or be gang-raped by your colleagues and then blamed for it by the institution.

If someone is in the situation of needing to figure out their career from the beginning without any sort of support, money, or connections to get it started, I'm not sure what I would suggest either. The trades are maybe a good gamble but be realistic: the opioid epidemic is ground from the souls of the unlucky ones on that path.
Being global is a big part of it. Imagine trying to follow regulations for thousands of products that reside within the apps in every country in the world. You need to have engineers who can localize, work with legal teams who understand global and regional requirements. You need folks to work with the local version of the FTC if you are under consent agreements. Your HR team has to be experts in local employment law in every jurisdiction, especially during layoffs.

Folks who haven't worked on products that cross jurisdiction (and for a company that has a LOT of attention on it, due to being so much in the press) - it's just a completely different scale. Heuristics for headcount in a single country just don't really work.
Clearly Reddit is going the way of many previous platforms. What will be the next platform I wonder?
If you keep your phone's browser on private mode, this becomes a lot easier! (Long as you don't have any old bookmarks for that site.)

Combined with DuckDuckGo's !bang notation—since you no longer have autocomplete for visited sites—you can still get to useful places like wikipedia quickly.

Unfortunate side-effect is that by staying logged out everywhere, with no cookies, means you'll see every single "log in with gmail!", "use the app for a better experience" dark pattern popup, unless your adblocker covers annoyances.
That's not perfectionism, it's failure to prioritize and manage/prevent scope creep.

Unless you already have a playable game loop that's so fun it's hard to put down, you shouldn't be going anywhere near menu systems.

You should have what's basically a rickety CLI-invoked developer mode test harness, where the binary immediately enters a playable thing. Only once that is proven as something worth putting a menu system in front of should you even think about that.

Most game ideas suck when implemented so they're a total loss, or require a lot of iterating into something entirely different from what you imagined. So the top priority should be implement the game loop of your idea, learn if it sucks ASAP, then maybe try mutate it into something a person can't easily walk away from if you sit them down in front of it, or just cut your losses and do something else entirely.
> I mean, why would you possibly promote cryptocurrency if it may be an unregistered security?

I have no idea what that means one way or another. But if someone with backers like FTX at their height of their game came and asked me to promote them for a lot of money, I probably would assume they were legit.
Hey! Full disclosure I work at PropelAuth, and unfortunately it doesn't look like we would meet all these needs, which is a bummer since it looks like we could help with most of it (multi tenancy, UIs for your customers to set up SAML, etc). We have the same problem as Auth0 though, and don't currently have sub-groups within organizations out of the box.

I am really curious to hear more about what a good solution there looks like to you?
Personally I like having courage to try. I don't tend to see things as requiring maintenance. This looks like an afternoon of messing around and should just work. I don't expect troubleshooting to be hard.

I really love people who can show courage & interest. I feel like computing has decayed into vapid consumerism. Products no longer even try to be semi-technical. There's a whole culture built around telling & selling ourselves the idea that computers are hard & difficult.

All it takes is one person with a good blog post to demystify & make accessible. You are smart enough. You can be that person. You can Augment Human Intellect by talking through it.
Agree. I think reddit will eventually die like Digg in a few years. I've been on reddit for 15 years now. It's been getting steadily worse.
Except Rust is a language much larger than the foundation. They don't control who uses the Rust language and their attempts to control who can talk about Rust are just their attempts to do something they shouldn't.
ETH might not be a security, but staking ETH is almost definitely one.

Dollars and orange trees aren't securities, but as soon as I start 'staking' dollars and orange trees into financial instruments which earn rewards, it becomes a security.

Asking 'Is Eth a security?' is asking the wrong question. Asking 'Is <some particular use of Eth> a security?' is the right question. Gensler was in the process of giving such an answer, and was interrupted ~40 times in that four-minute clip. It's really quite embarrassing.
And the shorter the words, the bigger a F2K Y1U it is to the reader.
That was probably said about the automobile, when it replaced horses, or about electrical lamps, when replaced oil-based lamps, no?

I mean, every city had an army of people to light up and down oil lamps in the streets, and these jobs went away. But people were freed up to do better stuff.
I'm just asking if technology lets content be created faster, then maybe technology similarly allows content to be reviewed faster.
When will mobile be supported?
Ha, no worries. I ask because I've also contemplated that kind of thing and realized that I was chasing my own tail perhaps.
Of course you can - plenty of HN commenters make such critiques. But you need to do it without swipes, snark, name-calling, or flamebait, as the site guidelines ask: https://news.ycombinator.com/newsguidelines.html.

Every sentence in your GP comment was flamebait—exactly the kind of thing we're trying to avoid here. And yes, if you start a flamewar comment a la "It's so damn $country", that's nationalistic flamewar in the sense that we use the term, regardless of which nation you have a problem with.

This kind of thing ends up producing internet discussion that is equal parts inflamed, predictable, and dumb. We want curious conversation here.
I actually have a chrome extension that will point me to HN discussions on a particular webpage - find it useful to get community context of pages I'm browsing!
It will be a little poetic if Reddit ends up new Digging itself considering new Digg was one of the first big influxes of users to Reddit.
So is this just a paper or can we use this?
There's kind of a tension between new Microsoft and old Microsoft.

Old Microsoft put lots of thought into extensibility of APIs and makes it so that the old interfaces still work when they introduce new functionality.

New Microsoft rewrites components from scratch and deprecates the old one every few years, and doesn't bother to shim over the old interface.

The former group has it such that if your app was well written circa 1997-2001, it works well on the current release.

The latter group has it so that you have several different copies of .NET on your hard drive and the "recommended" UI libraries for new applications has changed a lot, and the new hotness from a few years ago is deprecated.
> Well I also think that people underrate how much staff someone at Swift's level employs. We really should think of them as CEOs of their name.

The Business Insider link can give hints to that. As a trader, her father is required to do certain disclosures.

4)BUSINESS OR ACTIVITY NAME: 13 MANAGEMENT LLC
FOR PROFIT OR NOT FOR PROFIT: FOR PROFIT
INVESTMENT RELATED: NO
ADDRESS OF BUSINESS: NASHVILLE, TN 37203
NATURE OF BUSINESS: COMPANY OWNS 18 TOURING BUSES
YOUR POSITION. TITLE. ASSOCIATION: MANAGES AND PAYS EMPLOYEES

Just being aware of Brandon Sanderson's company and "all" he does is write books and has a company of 50 people supporting that... a pop star can certainly have quite a bit larger company with a team of lawyers and support people and accountants and marketing dealing with the product that is the person who's name they're attached to. The more they do, the larger that supporting cast needs to be... and that's not even getting into the supporting entertainment cast.
WSL2 is no longer using the NT kernel. It’s a full blown VM now that uses Plan 9 9p for file system interop.

The new Docker for Windows uses an additional WSL2 distro instance, so it’s not very different from Docker for Mac.

Windows Docker -> Mac Docker

WSL2/Hyper-V -> Hypervisor.framework/Virtualization.framework

9p -> gRPC-fuse/virtiofs

They’re the same setup really.

If you want something like WSL2, I would recommend Lima (https://github.com/lima-vm/lima).

Edit: Well, they’re not completely the same. WSL2 is using virtualization, but the WSL instances are actually using a shared kernel packaged with WSL (https://github.com/MicrosoftDocs/WSL/blob/mattw-wsl2-explain...). So it’s a bit more optimized than standard MacOS Virtualization due to some optimizations.
Similar to how building a new Wal-mart kills off many small local businesses (pharmacies, markets, shoes stores...) in the area, I lament how reddit has nearly monopolized the topic-based conversation and discovery platform space.

I'm old, so my route there is roughly: Dial-up BBS's -> usenet -> various web forums -> slashdot -> fark -> digg -> reddit. So I've experience the best and the worst of it all, and I'm not sure that reddit represents the best. I do not believe that they wield their [immense] power in a responsible or trustworthy manner.

I'm very curious to see what comes after reddit.
Trust and anti-corruption are just two of many properties you need for data locality, arguably less important. Conflict resolution or consensus is still very, very difficult. P2P routing and transfer is a bit of a red herring. You still need consensus between your local store and the remote store. Fireproof does it using IPFS underneath which in my experience tends to be quite slow, but is a working solution.
This could not be more untrue.

The world is littered with businesses that operate as commercial wrappers around open source technology. Ever heard of GitHub? What about MacOS? AWS?
That's fair. I'm viewing it from the perspective of how to protect one's self from sudden & possibly long-term job loss, where I think there's a lot of value in having one less thing hanging over your head during a stressful time. But building an even bigger buffer to further weather that period is a fine strategy, too.
What about women who don't have female reproductive organs, like those with Androgen Insensitivity or are post-hysterectomy? What about men who are post-orchidectomy? Are they not men? And if Androgen Insensitive women are not women, does that mean they're men? That will probably come as a great surprise to them.
I believe Taylor Swift could have asked the question. She's an incredibly intelligent, person, the daughter of a finance professional, and she's demonstrated her business acumen repeatedly over the course of her career.

When someone offers you $100 million out of the blue to endorse them, that should trigger red flag alerts, especially for someone like Swift who zealously protects her image. It's likely that someone on her legal team pointed out the securities issue to her during a briefing, and she brought it up during negotiations with FTX (Rolling Stone notes that multiple members of the FTX C-Suite personally attempted to recruit her, and lawyers don't generally get involved in contract negotiations until an agreement in principle has been worked out.)
I mean, most researchers I know are just very excitable about their research and love to share it. I think that's a lot more likely than this being some PR masterplay - if MS wanted to really push this, they wouldn't release like this.
Well, sure, but that completely defeats the purpose of a security token. The whole point is that you can’t extract the crypto secret, even if you ask nicely.

In fact, the sales literature brags about how the secret never leaves the device!
Started to use this for some of my organization needs. Absolutely love the seamlessness and how much more user-friendly it is.
> A Raspberry Pi that itself would work just as fine as the Time Machine server the author seems to need on demand?

A Raspberry Pi has one big problem: no SATA ports.
That's a really cool fact, thanks for sharing.

It's also worth noting that whether an LLM is deterministic or not is a matter of what token is selected. If it turns out to be valuable for results to be deterministic it is a tractable problem. You just need a token selection algorithm with deterministic results, which doesn't need to be something as simple as "always pick the top result". Seeds are a thing, and are used in diffusion models for exactly that reason.
Tangentially, I remember MythTV had support for the self-scheduled variant of this. I used to have a PC with multiple HDDs hooked to the TV and antenna which would look at its own TV recording schedule and power off when it was idle and wouldn't be recording in the next hour or less. Before powering off, it would set an RTC alarm to wake 10 minutes before the next scheduled recording. Meanwhile, if I walked into the room and wanted to watch recordings while it was off, I would just press the power button let it boot up to use the onscreen UI with IR remote control. I never bothered to figure out if I could make the IR receiver behave in some standby mode to wake the PC.

The next time we moved, I couldn't be bothered to set all this up again. Now we just use an old laptop and browser for streaming and a bluetooth keyboard with pointing device for "remote" control. It idles at low enough power to run 24/7 and not care, but we can also just open/close the lid as if it is a sleep switch for the media function.
Betterment Missed Some Tax Trades
Yeah, we're looking at webhook type solutions but that puts the clever stuff "outside the box" which we're paying for. Okta's group rules do exactly what we want but we can't do the multi-tenant stuff and it doesn't do the SAML Federation side of things.

The SAML Federation one is where all the modern SaaS fall short. Its still SAML but it involves:

All the metadata for 100s of IDPs being downloaded and made available to enable

Publishing the SP metadata to the federation(s) which may involve fees.

Specific rules around metadata (attributes) being released and adhered to.

And if your directory insists on having an email addresses for a user, that might be an issue.

There's a reason why Higher Education businesses have cropped up around doing SAML Federation.

I have had a trial of FusionAuth, and it was great, just didn't solve enough of our pain points to justify a migration.
Not trying to be adversarial. But I’m not agreeing.
Obviously gimp will keep working if they don’t upgrade the dependencies. I don’t understand how that is impressive.
The old JVMs will still be available and you so will the Docker containers with them.

That said the writing has been on the wall since Java 9's project Jigsaw. If you have a product that depends on it, I'm surprised you were caught unaware. With more control over what is exported, the amount of compiler optimisations possible greatly increases.
Are you going to carry your desktop into the forest on a hammock and work? How about on a plane to other countries?

Will you carry your desktop in your car while living on the road? In the middle of forests and on top of mountains?

Will you work from a campsite with your desktop while not connected to the internet?

Can you have a meeting via your desktop from a rocky beach and no internet service?

A cellphone can't track what I type on my laptop, and it can't read encrypted comms my laptop makes to remote systems. I can put a cellphone in a distant location and use a portable, open source router with a VPN on the router, with encrypted, private DNS.

Not everyone lives inside a comfortable little box. There are all kinds of ways to do life.
What stock market are you referring to?
Use a rock5b board with 8 cores and 16G of ram still low power 30W
Small subreddits can be very nice. A community forms, norms as established, everyone gets along. But these are very rare and not often long-lived. I browse Reddit out of boredom mostly anymore, all of the subs I used to enjoy and participate in are filled with one or more of the following: meme shitposts, requests for musical instrument appraisals from "pickers" (which can't be done via pictures on the internet anyway), the same questions being asked over and over again every single day which have answers in the sidebar or FAQ, etc.
It paid you to say that, didn't it?
I would rather have a world where we strive to create the best of us, rather than rolling the dice with perpetuating hereditary diseases and leaving our future to blind luck.

To answer your question : If I were born with a horrific disease that has a significant chance to pass that down to the next generation, it would be my responsibility to not pass that down to the next generation. I would understand.

There are always superior people and inferior people depending on a multitude of variables : time, genetics, intelligence, environment, training, etc. Ignoring genetics as an essential pillar of this is irresponsible.
Maybe things are actually pretty okay, and it’s just the information we get makes it seem like everything is falling apart.

Remember Y2K? Everyone thought we would have mass system failure across the world. And while some systems did fail and some people had to work diligently against the clock to make patches, for the most part, it was just okay.

I suspect this rice shortage is probably similar to the Y2K situation
The lumping of these together might help explain the gender imbalance in the mental health effect. It's pretty well documented that boys play more videogames, especially going into the later teen years, and that's more conducive to smaller, tight-knit (today, likely discord) communities.

If the time being spent on a discord call with your friends playing Minecraft are being counted as social media use the same way doomscrolling Instagram or TikTok is, then that's going to obscure the social media influence on mental health outcomes. It doesn't seem too hard to control for this, but I struggle to find any studies that meaningfully disambiguate the two.
This is interesting to hear!

A key caveat in much of what I'm doing, is I'm implementing things I previously did for other projects in the past 15 years... so I'm using old technology, know the terminology, and can troubleshoot 90% correct stuff that chatGPT gives me.

I haven't done as much "I have no idea where to start" stuff.