skysight-inc/HackerNews huggingface dataset:
Maxi checking in. I have racks of labelled drawers full of bearings, screws, glues, specialty tapes, oodles of hand tools, power tools, ad infinitum. I'm honestly not super competent or anything (I barely know what I'm doing, in any domain) but I do learn new things all the time and it brings me joy.

I miss the clarity of minimalism, but I can also have a different view on wallets - they're just leather and some stitching and such, and I can change them to be what I need.

Of course it's a very particular type of programmer disease to fixate on having equipment that can compile any possible wallet to solve the problem of having a wallet.

I get a kick out of dumb stuff like fixing the dishwasher latch by bending a new spring rather than getting the $70 replacement part (... probably spending $100 of my labour, good thing my free time is worthless!).

I spend a lot on storage systems and need a lot of discipline around stuff like deciding a place for things before acquiring them. It's a tradeoff I'm OK with.
It wouldn't be at all surprising to discover that only 10% of classified documents are legitimately worth keeping secret, and the other 90% are classified to hide various forms of waste, fraud, corruption etc. in military-industrial and intelligence-agency contracting deals from public scrutiny.
In practice I would argue that AppArmor is worth nothing, because everyone uses it to allow every file access by default.

Heck, glibc by default still allows LD_PRELOAD pretty much everywhere, and most distros have available SUID binaries you can hijack, so it's useless sandboxing anyways.

Setting aside the absurd amount of self invented config file formats for it (which have so many pitfalls for endusers) I think that firejail is the only viable alternative as a seccomp sandbox.

Flatpak's sandbox approach is as useless as AppArmor's approach, nobody can use it because the people that design it seemingly never use it in production apart from their www user test cases. If you try to sandbox a complicated program like Firefox with its hundreds of rendering processes, well, good luck...we'll talk two days later on how much progress you made just creating the config files.

I got so pissed by all of it that I started to learn eBPF to build a better sandbox, which I am trying to combine with a smart firewalling approach. But honestly, it's a ton of work, and the lack of profiles for everything makes it really hard to get to production.

You literally need to implement something like a "learning mode" that test runs a program, just to figure out what you want to allow or deny. This approach kinda worked for me, but I am now literally writing a DNS filter because resolv.conf as a concept is pretty much useless as well.

Once you start building something like this you see yourself 2 years later implementing all kinds of network services which in themselves are attack surfaces already...so you start to question whether it is really all worth it. Even hooking something as "simple" as DNS resolver API calls becomes a task that is a shitload of work until completed.
> I'm not sure that schools teach the PhD track to be writers.

In my experience many PhD candidates are required to write in turgid and stilted prose b/c it sounds more professional.
Everyone isn’t guilty to the same degree. Seeing guilt at different degrees doesn’t necessitate innocence. Casting blame evenly or vaguely isn’t good.

There are many instances of guilty vs less guilty throughout history. The current world is built off of the colonizing of the Americas and the lessons and reactions from that. There’s no both sides to that. The west was and has always been wrong with imperialism. Kissinger doesn’t need to be white washed.
Was this before or after Kissinger killed millions of people?
Why would you proactively sue a provider over a billing issue? You mean a lawsuit from the provider, trying to substantiate the debt they claim you owe?

I've no doubt that there is some assortment of corrupt laws bought by the medical industry that have enabled these blatantly abusive billing practices. But until shakedown victims actually force the issue and publicize it, then those corrupt laws continue to avoid scrutiny.
Android is another example of OS that gets sandboxing right, I think (though not a Desktop OS).

Anyway, that's also something I've been thinking lately after distro hoping for about 6 years... My average Linux install isn't particularly more secure than Windows. I'm mindlessly sudoing my way through stuff all the time. Clearly there is a Linux malware market to be explored.
Because Europe, when it comes to wind and solar, is under-equipped.

Dunkelflaute are not european-wide (as noted in the article you referenced it: north of Europe), therefore production units outside of this geographical zone (along with storage, backup and curtailment) are efficient ways to cope. We have to build them.

Moreover it "lasts up to 24 hours" (source: https://en.wikipedia.org/wiki/Dunkelflaute ).
the Apollo guy has said he's not interested in that, he's a software developer not a community manager.
It's not antithetical to Agile or indeed agile... when the team self organises around the "handed out" they simply allow for the fact they have 80% capacity when considering what they'll get done during planning.
This I agree with completely! I’m a big believer of “when in Rome”. As in, try to be idiomatic in whatever language you need to use. I once saw a Python codebase where someone had tried very hard to write Java in Python.. That was equally horrible!
Well, in the next war the first casualties will most likey be Moscow and Washington, probably at least a 20-mile radius from initial ground zero, so there'll be plenty of room for promotion.

After that, it'll be back to leading charges of soldiers equipped with sticks and stones. I imagine any idiot will be able to figure that out.
Flatpak: but it does stop someone installing a keylogger from a ffx exploit

Systemd:

$ # I use silverblue btw
$ THINGS='Protect|Restrict|Capability|Lock|SystemCallFilter|Private|MemoryDeny|ReadWritePaths'
$ AT='/usr/lib/systemd/system'
$ grep -ilE "^($THINGS)" "$AT"/*.service | wc -l
64
$ grep -ilE '^Exec' "$AT"/*.service | wc -l
292

its a bit more than "No Linux distribution actually seriously uses them very much" and it provides a standard solution to "Meanwhile, developers don’t know the contexts in which their software is being run, and need to release portable programs. Developers therefore can’t assume what permissions their program will need with the rest of the system."

"and it certainly isn’t as comprehensive as ChromeOS’s minijail." Kinda disagree.

- - -

Lot of words, no citations for those words.

- - -

Worth noting that, even among secure options there are points where there is slack: Android uses a uid/gid per app [auid], but chromeos doesn't [cuid]

[auid]: https://android.googlesource.com/platform/frameworks/base/+/...

[cuid]: https://chromium.googlesource.com/chromiumos/overlays/eclass...
Microsoft is really doing amazing with FOSS lately. The only things I see missing are some kind of filesystem. It doesn't seem quite ready to replace CircuitPython but probably will in time.

The big potential I see here is App-capable devices. That's really the missing factor with the IoT right now, the apps are separate from the device. We have to adapt everything around it to be able to talk to it, and usually you can't because it's all proprietary.

But if we had an OS and an App store, any device would work with anything.

We could actually get some good use out of Matter being IP based, if we could run apps on our smart plug.

It would be especially great for things that have a display.

I'm not sure why nobody has made an IoT OS with an app store yet, but it would/will be awesome.
The goal was to reduce energy and water usage. It is the difference between "takes a whole stream's worth of water a day" and "doesn't use any water". But PFAS are of course too problematic.
To paraphrase Winston Churchill

"AWS has the worst UI known to man, except for Azure and GCP".

It still amazes me that when you add members to AAD groups the interface pops up and tells you 'change may not be displayed yet'. It's like, YOU HAVE ONE JOB.
Cute/cool, yes. Fun, yes. A powerhouse, hardly. The same money will buy much better hardware.
It is not that bad.

A browser sandbox escape would be red-alert news and fixed within hours.
And Scaleway.
Which brings us back to what I'm trying to say: have you fully taken in the number of giant arseholes in the world sticking spanners in the works?
I’ll just leave this here

http://news.bbc.co.uk/1/hi/world/south_asia/4640773.stm
LD_PRELOAD is not an keylogger. Its an LD_PRELOAD is an Equivalent of an DLL hijack.
To be save from this /home and /tmp are mounted as noexec to prevent all of these attacks. Libraries that contain executable code (i haven't found one that doesn't have at least a byte) require the executable bit, which is disabled with noexec.
Just stop with this nonsense. This is such a foolish opinion that is bandied about from a "I know exactly what apps I run, sandboxing is for those noobs" mindset. Did you compile them yourselves? Did you compile the compiler?

Let's just accept the fact that Linux comes from a place of "if you run a program you are responsible for what it does". This is contrary to modern users expectations of "just because I run a program it shouldnt be able to siphon all my data", largely driven by mobile apps and their ecosystem.

If I autocomplete an ls command on my Mac's terminal it will warn me that iTerm is trying to access the specified folder. There is nothing like that on popular distros. The whole security landscape needs to be re-thought.

Maybe someone who knows more than me can talk about bring features from more restricted Linux variants to a more broad audience.
A maximised ASI could also do the math and decide keeping humans around as pets in a human theme park is less effort than trying to exterminate them.
Meditation Improves Intelligence
That's interesting, who needs massive high voltage lines when your demand is fungible.
Where is that market?
This is important context.

There's a big difference between "we bought solar elsewhere but still burn fossil fuels for our datacenters" and "we never use fossil fuels to power our data centers".
Unless there is an exploit that lets a webpage escape the sandbox, they will have access to none of those things listed without permission
It's very interesting how Mao claimed he preferred "rightists" in power in the West, because leftists were usually pro-Soviet.

> Mao: That is to say, I voted for you [Nixon] during your election. [...] I like rightists. People say you are rightists, that the Republican Party is to the right, that Prime Minister Heath is also to the right. [...] They also say the Christian Democratic Party of West Germany is also to the right. I am comparatively happy when these people on the right come into power.

> Kissinger: [...] those on the left are pro-Soviet and would not encourage a move toward the People’s Republic, and in fact criticize you on those grounds.

> Mao: Exactly that. Some are opposing you [Nixon]. In our country also there is a reactionary group which is opposed to our contact with you. The result was that they got on an airplane and fled abroad.

(I know this is just small talk and people don't always say what they mean, but...)
What a stupid request. An alternate front-end is essentially a custom browser.
Ask HN: Why doesn't HN open news to a new window?
Is this a design choice? Why? This one seemed to discuss this already but even they ended up using a plugin: https://news.ycombinator.com/item?id=3399167
How low can you go?
I don't think that's the case. My cats knead my head, my chest, my abdomen and my legs, but it doesn't rest on me.
To be clear, I understand. I’m not sure why that’s unreasonable. It’s not their job to prop up his business model and promises
A simple HTTP example is content compression.

A header communicates whether the incoming payload is compressed and the algorithm used.

Backward compatible!

Better bandwidth utilization.
The overarching assumption of this article is that OS sandboxing is a 'must requirement'.

I would challenge the author to explain why is the extra layer of sandboxing a must requirement. Do we know the size of the problem? As in... how many known websites run malicious scripts with real intent to do harm, and how many sites achieve that goal?. Do we know how many users got hacked because the lack of sandboxing in linux when doing typical web browsing?

My view is that the article blows the problem out of proportion. Security relies to a great extent on user behaviour.

User A visits known domains only, and opens emails from known senders only. They only share card and personal details with known and trusted parties. They only install the strictly necessary apps and from known devs only.

User B visits any site regardless of domain. He shares email, phone number and card data at the earliest chance (ie when trying to buy illegal drugs from a clearnet shady store). He installs dozens of apps, often from unknown parties.

Regardless of OS, browser and other context, user A is going to be safe most of the time and it's very rare that they in serious trouble. User B is an accident waiting to happen...

If the above is true, maybe we don't need a technical solution like OS sandboxing. It would be more effective to create a standard for all browsers where the first screen you see is a big message saying: "Welcome to your 3 second online tutorial: Visit known websites where possible. Don't share your real personal details unless strictly necessary. Share details with known and trusted parties only. In case of doubt, don't trust the other party."
On Wikis: even with search, most people simply won't look at them. Search is most useful for a very small set of power users ... and for mods who are looking for the appropriate cluestick to whack an offender with. Even with a relatively small wiki, I'm often struggling to find content I know (or am pretty sure) exists. The whole thing reads like an intern's summer project, and I strongly suspect it was.

The notion of having both an ongoing transactional dialogue and an accumulating finished work, somewhat analogous to a financial journal (transactions) and statements (finished works) is something that I've long wanted to bring to online discussion. Again, Wikipedia (and similar projects) most closely resembles this, though even back in Usenet days there were newsgroups and the periodically disseminated FAQs of accumulated knowledge and behavioural norms.

Determining what each should do is key. There's a long history of discussions being bundled up as books (lectures, meeting notes, bull sessions, etc.), of serialised publication, of collected letters or other epistolary exchanges.

There's the case of Stack Exchange which as I see it somewhat has the opposite problem: it tries to treat the transactional discussion as the finished work, with a great deal of feather-ruffling. I'd think that SE would benefit from a different approach in which the live / current Q&A discussions are allowed to happen, but examples of especially good answers being canonicalised and surfaced in search, perhaps refactored into articles.

Another problem with knowledge corpora is that they both get out of date and/or are subject to malicious (or simply uninformed or misguided) edits with time. These are problems which long predate online versions and variants (one joy of mine was discovering a 19th-century encyclopaedic edit war: <https://old.reddit.com/r/dredmorbius/comments/4xe2k1/chamber...>).

Ultimately, this requires real work, with procedures and time devoted to review, screening, and updating articles. It's not what every group will want to take on, but some most definitely would see benefits.

General agreement otherwise.
Still remember the times when T1 was only a legend I heard of, while running on my expensive (for my family) 56K.
It was OK until they deprecated the API keys. Don't worry though I'm planning on making a FOSS Goodreads in the near future!
I mean, it's a computer with a monitor and a keyboard built in. What doesn't it do is a more interesting question.
Matrix and Discorse are funded by venture capital. Also just because a component of a platform is open source, it doesn't mean the entire thing is and being a proprietary platform isn't harmful itself. It is rather the power that instance owners have and that is a problem even if the instance runs 100% open source software.
lemmy is the next big thing^tm

Hope the devs will help community in polishing the rough edges and the community itself will step up.

In the end, it is about long term support that people are asking for
When did you order yours? It’s been almost a month since I ordered mine and it has had no sign of shipping.

Did I miss a notice that they’re behind or something?
> In 2009, A123 was awarded hundreds of millions of dollars by the Barack Obama administration with the great hope that it would help kick-start production of electric cars in the US. But it was too early. There wasn’t demand for EVs, and car companies making vehicles that use less gas didn’t want to risk relying on an unproven startup.

Sounds like chronic lack of vision by the "established companies".

Meanwhile in China you don't have people blocking EV charging ports in spite
some of the explanations given sound quite fantastical, like those suntanned asses. Couldn't it just be that peopel were often naked because the greek summer is hot? People did not have swimming suits and one can easily suntan in a few days.

nudity is not just a greek thing, it s natural in many tribes around the world. Some african tribes still perform their dances and fighting naked.

There s a certain undertone in the article that men and women should be dressed for modesty reasons. While modesty and confinement at home was enforced on women, they all had probably seen various men naked
I wonder if they will extradite the author, who lives in France, to answer for these crimes in the US.
I didn't find this particularly surprising but I'm happy nevertheless that people are researching the important topic.
The BN-600 had many problems (leaks) and is an obsolete version.

The most successful was its successor, the BN-800, but "problems ((...)) indicated a redesign was needed", and construction of it's successor (the BN-1200) was postponed many times (now 2035). Problems related to cost and process/security seem quite difficult to solve...
Source: https://en.wikipedia.org/wiki/BN-1200_reactor

Instead of deploying BNs Russians pause them and are back to the drawing board. The sole officially actively pursued (since 2021) pertinent design, BREST-OD-300 ( https://en.wikipedia.org/wiki/BREST_(reactor) ), is a very different architecture (lead, not sodium, is the coolant) and will only (when completed, if ever) be a demonstrator (low power: 300MWe).

Hence: the is no satisfying industrial breeder reactor.

> there's little need for breeders today

The whole nuclear industry knows since the 1950's that breeding is the only way for nuclear to really gain momentum and this is sound from a strategic viewpoint (dependency towards uranium exporters). However after huge R&D efforts in many nations ( https://en.wikipedia.org/wiki/Breeder_reactor#Development_an... )... there is no adequate reactor.
Chamber's Encyclopaedia, Editorial Statement (1874)
Encyclopaedia edit wars somewhat predate Wikipedia, it would seem.
Hm, I find aspects of myself in this description that seem like they should be troubling.

Nail Clipper: Green Bell G-1008

The frustration of needing to build expertise in things you want to not do shabbily is particularly familiar. Especially with home repair tasks that contractors end up doing but not doing well ... I've learned far more about roofing, flashing techniques, the guidelines for handling, installing, and storing prefinished siding that were nowhere near followed by contractors ... than I would have expected or even truly wanted. It really emphasizes the "ignorance is bliss" mindset which is a hard pill for me to swallow.
It is the new age phrenology!!
Children Lost in Amazon Jungle Plane Crash Found Alive After 6 Weeks
Fireside Chat with OpenAI
OMG. Newborn is the easy part. Especially if you’re the bloke.
It's actually not hard to carve out a subset of HTML you want, define a protocol you want to use over the existing implementation [0], then go back and implement that without the web at some later date if it's popular. If it isn't popular, well, it runs on the web. But doing things this way would indicate that you know what you want to get out of the redesign, which in a lot of cases, I don't think programmers do. They just know that the way it is isn't how they want it, or the thing they want to address is that the browser isn't quite the entire OS yet and it would be nice if it were just a little bit bigger.

[0] https://prog21.dadgum.com/66.html
Can anyone read any more? That is not what the text in the image says. It says your data on Microsoft's servers ("the cloud") will be deleted, but that the data on your devices themselves will not be deleted.
Looks like a great quick text input device for Apple Vision Pro.

Imagine looking at an input field and grabbing this off your utility belt and typing out some text
Agreed, we need to get back to independent forums.

And there are better techniques to sustain them now, compared to back then. They don't need to be plastered with banner ads.

- Annual donations with Stripe checkout, etc

- Job boards

- If you have a product/service, host a community that caters to your general industry! For instance, if you sell film editing software, host a forum for hobbyist and professional editors, and don't make it specific to your software. You'll make conversions over time, and it's win-win for everyone. HN is essentially a form of this.
I don't think that there's any secret sauce or moat, it's just kind of a weird niche.

Multi-engine synths / grooveboxes are getting more common. You see stuff like the Roland SH-4d, or the various options from Elektron. You can combine these things with an ever-increasing selection of pedels. And if you have an iPad, there's all sorts of quirky stuff you can do there.

I honestly don't see why someone would want to create an exact clone of the OP-1. If I made synths, I would want to make something new.
I have skills(Only technical and creative, nothing business related), and ideas!

But none of my experience/interest overlaps with any particularly interesting technical stuff or cool algorithms or anything, I mostly just work on integrating well known tech for niche solutions and then adding some polish.

What areas specifically are you interested in?
Thanks for those tips, great to know! I hadn't thought of maybe upgrading the pre-amp only (one with a room processor built in, for simplicity?), that's actually something that would make sense especially for connectivity also.

I haven't really been following hi-fi products over the last couple of decades, due to wanting to "settle", but it wouldn't surprise me if things have improved since January 2010 (checked the date they were repaired) - or maybe the technician just had a particular affinity for the Kappa 6.2is (4x same plus their centre speaker).
How did I make that mistake, I'm so ashamed.
Looking forward to the next Jordan Peterson lecture on how "the practice of regular nude exercise together in the gym enhanced group coherence among these men, extending bonds cemented in youth initiatory contexts forward throughout the lives of adult citizens." Clearly this is the origin story of idealistic Judeo-Christian manhood concepts, born from the crucible of Greco-Roman culture...

People of the messianic bent always want to hold up the mythical perfect past, but when you dig into the details, it's always problematic... See also:

https://en.wikipedia.org/wiki/Slavery_in_ancient_Greece