skysight-inc/HackerNews huggingface dataset:
TL;DR: secure boot is hard, TPM security is a challenge.

FDE works fine with encrypted boot, it's just not the default for Ubuntu. I just ticked the "encrypt my install" box as far as I know, I only found out that my /boot wasn't encrypted after the fact.

For evil maid attacks, encrypting /boot or not shouldn't really matter unless there's a known exploit for your bootloader. IMO it doesn't matter much because before you can decrypt the main drive, you'll have to deal with either a rewriteable boot sector, a rewriteable EFI:/boot/grub, or a rewriteable /boot. Each step should verify the hashes of the next loader and of any of the loaded modules, so an attacker would need to inject themselves into your boot process before the verification chain can start. You need to keep secure boot on, though.

Setting this up right involves enrolling keys into your UEFI (every time the bootloader updates), securing your UEFI with a good password, and assuring nobody can reflash your motherboard firmware somehow. All of that isn't necessary if you trust that Microsoft's keys don't leak and if you use the pre-signed shims, but that approach tends to break kernel modules (i.e. when you use Nvidia's driver).

Microsoft can get around this problem because their root keys are preloaded into almost every secure boot capable device you can find. They can pre-sign a bootloader and distribute it to hundreds of millions of computers, whereas every Linux distro has to jump through hoops and use the Microsoft-signed loader as an inbetween stage or have the user set up their own keys and signature system.

Then there's the challenge of TPMs. Windows uses the TPM to verify nothing has changed or demand a recovery key, and can use TPM+PIN to unlock a Bitlocker partition. On Linux, there is a wide variety of tools, but as far as I can tell, you can only choose between "unlock the disk from the TPM" or "unlock the disk with your passphrase". I suppose it's possible to set up a multi stage boot process in which initramfs is loaded from a TPM-based key and the main system is decrypted using a password, but I'm not aware of any easy to use installers for that purpose. I find proper GUI support for TPM configuration sorely lacking compared to other operating systems.

The iteration count LUKS defaults to depends on your CPU's performance. By default, LUKS takes 1000ms (or 2000ms in modern versions) of hashing to determine the amount of iterations. I can definitely see why, because at some point I put my iterations up to 10 seconds and the preboot environment, lacking the necessary acceleration instructions, took forever to unlock the disk. Anyone trying out encryption on their new install would probably wipe and retry without encryption with those parameters, which is obviously worse.

Getting secure boot set up right is the biggest challenge in my experience. The tools are all there, but there's no real GUI for configuring any of this and with how many Linux enthusiasts will decree that secure boot is Microsoft conspiracy and TPMs are instruments of the devil, I'm not sure that'll change any time soon.
It's not different, because the left-right flip by the lens is part of a rotationally symmetric image translation (that also flips up for down, e.g.), not a bilaterally symmetric reflection. With the rotation, there is no change in the relationship of parts of the image one to another, relative to our personal orientation, the way there is in the reflection, so it's trivial for the brain to account for it - up on the retina is always down in the real world, left on the retina is always right in the real world, etc.
East vs West Germany seems to offer something akin to a natural experiment that suggests this view is largely incorrect.
Because that's about the time it takes for the generation of Russians that are born (or not born) right now to enter the labor force.
If you’re traveling and want to buy a cheap esim, good luck.
"An activist imprisoned in France" makes this sound like some sort of locked up protestor, rather than someone that set fire to a load of vehicles and a warehouse.

It should really read "An arsonist imprisoned in France".
> Hopefully it will be finished one day.

It won't. Decay, updated power plant designs, and changing component availability would make completing it more expensive than starting afresh.
Sorry, but I think you are turning small hurdles into roadblocks in your mind.

It is certainly possible to store data structures directly inside files (I think MS Word did this to save documents), but indeed you have to think carefully about type safety but also data alignment, offsetting and such, and perhaps cryptographic signatures to make it secure when needed, which is what library/language designers need to think about to make it easier for programmers to use this stuff. Sure, it won't be adequate in all situations, but that's not what I'm asking for.
agreed, I help make Chemistry World with a chemist that had a cool 3d .mol viewer with frames back in the day when 3d was pretty fancy :)
It's not meaningful to talk about a large company's opinions. It's entirely possible that some Cloudflare products respect users while others don't.

Better to evaluate the merits of each product than to make a blanket judgment about the company and force your opinions of each product to confirm.
Run Linux Programs on DOS
I think you're mostly right, but I will drop an asterisk: Temporal is self-hostable and is incredibly good. Like, I am pretty convinced that for the classes of problems it addresses around offline/the-customer-isn't-waiting workflow management, it is the Correct Way To Do Things. I'd never have them white-label AWS to host my stuff, but it's great.
Game Engineering Podcast explaining what 3D game engines do under the hood
Heaviest Schrödinger cat achieved: crystal superposition of 2 oscillation states
GPT-3 Home Control with Homebridge and Node-Red
Indeed, and when I was looking to buy my SUV i was gravitating towards the minivan version of my SUV. But it didnt come with AWD, and my wife insisted on it despite my protests.

In fact the minivan would have been more practical, but environmentally indistinguishable. The minivan has the same engine my SUV has and, to my eye anyway, has a larger frontal area.
What does it mean for a perpetual licence to be revocable?

To my layman's ear the two terms sound almost contradictory.
Show HN: CodeAmigo – AI Assisted Coding Tutorials (Demo)
That's a good point, I think he wrote lex?
This is a 4:3 video. Why stretch it into 16:9 ? That's a throwback to the early 2000s when everyone was buying 16:9 TVs to watch stretched 4:3 sources. Drives me crazy, really.
That is similar in Hungary, for example the pawn is either a walker or a peasant, and the queen is either a visir or a queen (but it's a ruling queen, királynő, rather than queen consort, királyné, which I find nice :) )
> I think what you're missing here is that some people do not have the discipline to stick to a daily exercise regimen except when it's gamified like this.

It sounds like you're the one missing the whole point.

The goal of learning a language is not grinding on an app, but to have progress. Duolingo's gamification pushes grinding behavior, and not actual progress. Duolingo does not reinforce pushing forward, but does prompt you repeatedly on how to say "I drink milk" regardless whether you're on the app for two weeks or two years. You can be on Duolingo for two years grinding stuff daily and still have nothing to show for. You are prompted to keep your streak up of answering things like "I eat bread" over and over again regardless of language, and if you fail to keep your steak up you're prompted to pay for something to artificially keep it up.

This is not educational. It's a waste of time.
You do not even have the skills to read anything even the basic wiki pages leave alone understanding anything at all.
It’s still an issue for the “readable by humans” use case as it dramatically reduces readability?
I feel like the Ford quote is about new products, whereas the current situation is about preventing the user from having more power.

The pros and cons are already quantifiable on Android.
The use of a memory hard KDF like Argon2 is hardly a panacea for something like disk encryption. If your passphrase is compute time hard already, the advantage of using something memory hard is unlikely to be more than a factor of a thousand or so. Adding even a single diceware generated word to a passphrase increases the difficulty by a factor of 7776. So passphrase length is by far the dominant factor.

There is a faction out there that claims that Argon2 is not as good as cache hard functions for the case where the user is only going to be willing to wait second or less. That's a reasonable assumption so it would probably be a good idea to evaluate more than just Argon2 for any particular application. Yes I know that Argon2 won a contest, but such contests are followed by a much longer evaluation period.
Is this weird American propaganda to cover up the fact that third world countries are 20 years ahead of them in technology
Reading comments here, it seems to me that Duolingo is based on a small set of common misunderstandings, or potentially a set of predication, similar to the following:

1. Universal Grammar gotta be a thing.

2. Perfect parallel texts must always exist.

3. From 1. and 2., "learning a language" must be about projecting an existing UG-to-language matrix into the new one. It's just the matter of how to do that cheap and accurate.

( 4. Also, from 1., any pieces of text must be complete and free-standing, that translation should always be possible and accurate for texts of arbitrary lengths. It's just sometimes complicated. )

But languages don't work that way; sure you can take a C++ program and port it into bare C to JavaScript or Rust, but try between C-like and functional languages and it falls apart. And that's just for artificial language. Language, in reality, is more like a programming language, or like an image codec, heck, like a codec. That's where/how things like these apps as well as machine translations do not work; because UG is not real, because there aren't parallel texts for everything, and there's no such conversion matrix, and you won't even be thinking the same way looking at a same thing in two languages.

Personally I think Duolingo is a great introductory tool and a help, but only to go from nowhere to an overlap region where an illusion of 1. and 2. exists. That region sure exists but definitely a subset of either languages, and that above predication just cannot be pushed outwards to make it a thing. It's just a convenient illusion.
it's based on an expectation of long-term economic concentration that has held for centuries so it's not expected to reverse anytime soon

the concentration is two-fold: of capital toward assets as the monetary mass keeps growing outpacing human labour/capital, and geographical as location near economic activity continues to matter a lot for most people

i don't think there are any instances of these trends reversing without the money simply moving elsewhere
The Wagner Group is all over Sudan's gold:

https://unherd.com/2023/04/how-wagner-plundered-sudans-gold/

They are also active in the rest of Africa:

https://en.wikipedia.org/wiki/A%C3%AFgbado_massacre
True story: The best job offer in my life I found in gmail spam folder.
Many folks here asking about ads, AdSense, etc…

The issue with this and all consent mangers is always ads.

It is impossible to know all the potential ad vendors, ad tech, and what other devices ads will load in advance.

Googled consent framework, the IAB framework, etc, all fail to address this.
John Gilmore
Does Libreboot (.org) still have the binary blob drama going on?
> So what can possibly cause warming is only the effect of the difference in temperatures between the CO2 gas and the surface

This is wrong. If you do the math, you actually find that you get warming from CO2 if the atmosphere is colder, the same temp, or hotter than the surface.

When the ground emits a photon there are two possibilities. it either gets absorbed by an atom in the atmosphere or it goes to space. about half of the photons absorbed by the atmosphere get radiated back to the earth (compared to roughly zero percent of the ones that go to space).

Since CO2 is better than air at absorbing infrared radiation, it traps some energy that would otherwise be lost. The situation isn't really any different than wearing a coat. a jacket will warm you even if the jacket is colder than you are because it prevents some heat from leaving the system. this doesn't violate thermodynamics because the jacket itself isn't causing warming, it's just preventing heat loss to a colder source.
Thanks Musk for demonstrating once again that those who complain the loudest about "media bias" are some of the biggest purveyors of it.

"Fair and balanced" is really the last thing on their minds and can't be achieved with simple minded binary labels and judgments.
We've lost the Druids, time to make an alliance with the Warlocks.
Ask HN: Lessons integrating ChatGPT/OpenAI with your application?
What were some of the lessons you learned that may help the community? Thank you.
Couple that with a rudimentary "show me more of what I liked" and you could get versed on a lot of interesting topics quickly
I'm not interested in talking with Brands, Companies, or Celebrities. How utterly disgusting. This is just a means of exploiting parasocial relationships.

Every time I see a Brand on Twitter acting like a real human I'm sickened to my core. You are not a human, you are a disembodied entity pretending to be human to make people buy something.

It should be illegal for companies to act like humans and issue communications. If you need someone to issue communications find a human willing to take on that job and send all messages through them as a representative. Let's stop pretending corporations are people.
Most games make so much use of OS-level features (especially Windows APIs and their analogues under Wine/Proton) that a minimal system for running a game wouldn't be that much slimmer than an OS.

All you would really drop would be the window manager - and you can start X directly with a single application on Linux anyway.
Are you seriously arguing that ToS somehow override laws?

Since you're not a lawyer (your words) and seem to care about US laws (I don't), I am not sure what's the point of this response to a topic about digital purchases in the EU.
Pbkdf2 is designed to protect the users from their own bad choices more than anything else.

In fact if you think about it, pbkdf2 with a high number of iterations could become quite costly at scale. How much are you willing to pay to protect a given user from themselves?

If someone uses a proper password, one iteration is all you need.
I disagree. It depends on how you ask the question. “Do you want want to be able to install apps that will have more features/allow you to purchase directly (kindle app), or provide cheaper prices (twitter blue), or cover more usecases (crypto wallets), or offer different browsing experiences (real chrome/firefox), etc.”
Thank you for your response. Thank god there is a lot of smart people here who want to argue objectively.
On Mistaking the Watch for Its Gears
The Cult of Warren Buffett
GraphQL flexibility is fine but you need some discipline.

We have been using GraphQL for 4 years and limit ourselves to queries with simple or medium complexity (no load the world, no problems).
Security and usability are not the only dimensions that matter.

There are people who would like to use devices they own in alternative ways ie. to develop, experiment or simply not to throw perfectly functioning, un-updatable, just few years old hardware to the trash bin.

Apple doesn't want their platform to be polluted with privileged, unsigned code. They don't want next security breach news headline to include their name in it if it originated from code they haven't verified/signed/created - because they put a lot of effort into securing their platform and profit out of it.

Allowing running alternative OSes would make both sides happy, no?
Is it that he doesn’t have enough ways to impact the company or is it that he’s incompetent though?
That’s the point of the whole convo no? I’m in the camp that CEO’s salaries make zero sense.
It always has been, the internet is full of garbage, there are ways of finding the data that is useful to humans, like upvotes
PG advisory locks in Go with built-in hashes
Git-SIM 3 Month Dev Update: Community Response, New Features, & the Future
This didn’t get proper attention but wanted to say it was a great write up. Thank you for this.
Google sheet also does live currency conversions, which update with exchange rates.
Definitely second that in my case. The students had troubles connecting to the school-provided Teams course and I had to deal with the justified complaints. Even though it was fully out of my controls
Well, and the model at the time was that computer salespeople, even in places like Sears, were compensated on commission.
Let me repeat: some people cannot learn faster than this, they need gamification. Hence my statement: Duolingo is better than nothing for these.
At 3pm, there will be a test of the UK Emergency Alerts service
Exactly, put bots into the world with cameras and you have infinite training. Humans also need a ton of data to train on and have way more parameters than the biggest ML model today
Just think that you did the best you could with the information you had, the time you had. End of story.
And raccoons?

I think we need to resurrect the sabertooth Tiger for the big adult hogs
But an unrelated one, the roc of eastern mythology was a giant bird of prey told to be able to carry away elephants.

https://en.m.wikipedia.org/wiki/Roc_(mythology)

I can't be sure the rooks in your area don't do that, but I guess they don't.
> I’m pretty sure Russia will try very hard to attract foreign labor and immigration in the next years to fill some of the gaps that the country has to fill now.

Good luck...
> Better to evaluate the merits of each product than to make a blanket judgment about the company and force your opinions of each product to confirm.

I think that the point is that Cloudflare's business model lies largely on its ability to monitor individual end users. So when Cloudflare announces they are providing a service whose primary selling point is that it affects their ability to monitor users then this sounds like a blatant contradiction.

I also think that begging people to blindly trust corporations, specially when it's without any rationale or reason, is to say the least very silly.
My rule of thumb is that for any application that relies on an internet connection for most of its functionality, I'd rather just use a real web browser.
> a clever program that he had written for the Macintosh called Frontier, in which he had a scripting language and an outliner and a word processor and a database, all in one program

Fascinating concept. I found a bit more info in an article about UserLand Software, which Dave Winer founded after leaving Symantec.

https://en.wikipedia.org/wiki/UserLand_Software#Frontier

> In January 1992 UserLand released version 1.0 of Frontier, a scripting environment for the Macintosh which included an object database and a scripting language named UserTalk. At the time of its original release, Frontier was the only system-level scripting environment for the Macintosh, but Apple was working on its own scripting language, AppleScript, and started bundling it with the MacOS 7 system software. As a consequence, most Macintosh scripting work came to be done in the less powerful, but free, scripting language provided by Apple.

> UserLand responded to Applescript by re-positioning Frontier as a Web development environment, distributing the software free of charge with the "Aretha" release of May 1995. In late 1996, Frontier 4.1 had become "an integrated development environment that lends itself to the creation and maintenance of Web sites and management of Web pages sans much busywork," and by the time Frontier 4.2 was released in January 1997, the software was firmly established in the realms of website management and CGI scripting, allowing users to "taste the power of large-scale database publishing with free software."

> Frontier's NewsPage suite came to play a pivotal role in the emergence of blogging through its adoption by Jorn Barger, Chris Gulker, and others in the 1997–98 period.

> UserLand launched a Windows version of Frontier 5.0 in January 1998 and began charging for licenses again with the 5.1 release of June 1998.

> Frontier subsequently became the kernel for two of UserLand's products, Manila and Radio UserLand, as well as Dave Winer's OPML Editor, all of which support the UserTalk scripting language.
> civil war in former Yugoslavia (instigated further by supporting the separatist forces)

I don't think you understand this topic at all (also seeing your other, flagged, comment). Two major things I'd say you get wrong:

1. The break-up of Yugoslavia wasn't so much a result of the civil war, it was rather a process that led to the war. The Yugoslav Federal institutions (except the Army, JNA) were weak, perhaps so weak that the constitutional order was simply not sustainable. As the leaderships of each constituent republic drifted apart from each other, so the country, too, gradually split apart (effectively). The important thing about the Yugoslav constitutional order that is often missed is that the Army (JNA) was something of a constituent republic in its own right: apart from other kinds of power, the Army had representation in the federal government as though it were a constituent republic. So the Army was basically the last thing binding the country together in practice, and it was naturally aligned with preserving the country, which led to the war. Furthermore, by something like 1992, the Serbian side (Milošević) basically usurped the Army (in what some called a coup). This situation, among other things, made it almost inevitable that a war will break out.

2. It doesn't seem like the USA supported any side in the war very much. For example, the US President (Bush) objected when Germany recognized the independence of Slovenia and Croatia.
There’s orders of magnitude more supply than demand. Farmers are rolling with helicopters and truck mounted mini-guns and suppressed sniper rifles with $18k thermal optics and it’s just not keeping up.
Depends on the device I'm guessing. AFAIK, not all Garmin devices log location 24/7, but only when explicit activities have been started.
ProfileGPT: An Example of AI Agents Collaboration Architecture
To be mobile and agile in a three dimensional world, a creature needs to be able to process information about its environment such as adjacency, and direction - that is, the relationship of different parts of space, or things in space, to one another, matters a lot to the organism. You could store store each individual perceivable bit of spacial information randomly, but then to get this structural information you'd need an elaborate mapping layer that allowed the brain to compute distance and direction. It's far simpler to rely on actual spatial relationships in the cortex to model the structural information by mapping it to an analogous spatial structure information. Simpler means less energy in construction and operation of the facility, and that wins out in an evolutionary race.
I think "high quality, well-prepared sources" would include blogs and articles, which are likely to become heavily influenced by AI (blogs and articles are high quality compared to Reddit posts for example, which were included in the past).

In fact, there's no reason to think that academic papers won't start using language models to write better.

Tainting your text with AI can be as simple as pasting a paragraph in and asking if there's anything to improve.
Bring me their young:

https://portuguesecooking.wordpress.com/2013/05/25/130/