skysight-inc/HackerNews huggingface dataset:
Polkit is a very badly-designed, poorly-executed imitation of UAC.

UAC is an operating-system-level system that heuristically detects when an executable is acting as an installer, and prompts the user with a Yes/No prompt (you can see screenshots online). This even works if you're running a terminal command. Terminal command needs administrator access? You get a blocking, modal dialog from the system that forces you to click Yes or No. That's very powerful.

Polkit is a component for controlling system-wide privileges in Unix-like operating systems, the manpage is less than 2 pages.
I mean, it's about your threat model isn't it? The way I think of it, there's basically three ways for someone to break into my computer: remote code execution with no external preparation (as might be caused by ssh exposed to the internet with a common username and password), installing malicious programs, or opening malicious files that exploit buffer overflows or whatever. The first way might be protected by a sandbox or might not: if it is ssh that's pwned, presumably in a sandboxed environment you'd have given ssh all the permissions anyway, right? The second way is far less common a vulnerability on a desktop Linux system than on other OSes, including Android, because 99% of packages people are going to want to use on their desktop are going through the distro maintainers, which isn't a perfect process but seems to be pretty good. Contrast that to Android where malware gets through the Play Store all the time. iPhone seems to be about as good as Linux in this regard though. I'm not totally sure that sandboxing would help in this regard either. If someone exploited my PDF reader it'd probably have access to all my other PDFs wouldn't they? However if someone exploited my video player they wouldn't, and in either case they probably wouldn't have access to my browser, so yeah sandboxing would help there.

But also included in the threat model is what you want to protect. Obviously bank passwords, tax information, etc, but I also want to protect my privacy in general, and right now there's no OS that's as privacy preserving as Linux. Furthermore, I don't trust sandboxing implementations in proprietary OSes from protecting my privacy either: they might say they protect my data against malicious apps trying to steal my stuff, but then if the OS itself tracks my location, search history, files, etc, sandboxing doesn't do much good, does it?
Do you see any negative aspects in day to day life since the data is published?
The fascinating thing with Kissinger is that he's still alive, still wields political influence, and has been active for eighty years and was wielding his influence in essentially all major conflicts during that time. He just published another book and just celebrated his 100th birthday.

He started out as a German Jewish refugee. Fought in WW II and became an American, ended up being part of the post WW II effort to administer Germany, and then started his career in political science and international politics.

The nineteen sixties and seventies were a complicated era. The war in Vietnam was an ugly affair, and Kissinger's involvement with negotiating the peace deal is what earned him a controversial Nobel peace price. It was also the peak of the cold war and Kissinger was basically coordinating policy in a number of proxy wars across the world. Iran/Iraq, Chile, Vietnam, etc. and projecting US power everywhere he could.

Calling him a war criminal is a bit rich. But undeniably some of the decision making at the time backfired in a big way and Kissinger was at the core of a lot of that. Both during the Nixon era and long after when he advised administrations all the way until now.

Particularly the decision to prop up a lot of corrupt despots in order to prevent the Russians from gaining influence has caused a lot of long lasting conflicts that continue to play out today. You could make the point that the US ultimately won the cold war. Albeit at the cost of triggering a lot of other ugly conflicts.

The Iranian revolution is probably one of his bigger failings. Triggered directly by him backing the wrong horse in Iran, which ultimately lead to the Iranian revolution, the US providing military aid to Iraq, the Iran/Iraq war, the Iran contra affair (where the US provided weapons to Iran) the Russian/Afhanistan conflict where they US also provided lots of military aid, both Gulf wars, more recently the Afghanistan and Syrian conflicts. And there's of course the decades long support for the brutal regime in Saudi Arabia, the US involvement in various revolutions across Africa and South America. There's a pattern there of the US backing the worst regimes in order to divide and conquer and gain/expand its influence and power. That's what big countries do.

Was Kissinger involved with and personally responsible for all of that? Probably not but he was definitely advising a lot of politicians and this soft power via military aid, diplomacy, meddling, propping up despots, etc. definitely is his style. But he was only in office for a few years and during that time his big focus was ending an ugly war in Vietnam that he did not start. There were hard line politicians before and after that. He certainly has been on the sideline advising many of them for decades. Especially the hard line policies under the Reagan and both Bush presidencies have his finger prints all over them and he also consulted Democratic presidents like Carter, Clinton, Obama, and Biden. But does that make him a criminal? If so, there are a lot of other war criminals. And they are enabled by voters who keep voting for this sort of thing.
ChatGPT: Indirect Prompt Injection to WarGames
> over and over and over and over if we can't build lasting, searchable, repositories of knowledge

The lesson here is that it is fundamentally impossible to build lasting repositories of knowledge on a proprietary platform owned by some entity.

The only solutions that can stand the test of time for the long haul are decentralized systems built on open standardized protocols which are not owned by anyone.
Right out of high school I started as an intern at PTC in Research Park shortly after they acquired CDRS from E&S.

CDRS was originally started by some of the researchers from the University of Utah that created the Alpha_1 NURBS modeler.

After PTCs org wide rebranding, it was called Pro/Concept.

I worked on the other product in the group called Pro/3D Paint. It was the first product to use projective texture mapping to allow industrial designers to draw directly on 3D models instead of in texture space.

So many more memories I wouldn’t know where to begin…
I hope you are not referring to my comment, as I'm not advocating a fully nuclear grid. Instead, I'm advocating nuclear as the replacement for the energy needs that are beyond the reach of renewables in many places - for instance, nighttime consumption in areas without hydro potential.

For those against nuclear, feel free to give an example of a working large scale (supporting 5M+ people 24/7, all seasons) solar/wind deployment in continental Europe with zero dependence on fossil or nuclear.
I've read "The Biography of the Pixel" book. It's an amazing and educational book about the history of computer graphics and the definition of a pixel by Smith.
1994 already feels a tad late in my memory, everyone at my high school already had email in 1993, and we knew several families with internet in their house by 1992.
The data is absolutely valuable for that, but I don't see that being enough to sustain continuous income & a valuation
The Reddit community has a reputation for bullying leadership. He’s a founder & willing to stand up to them.

If all this negative press ends up driving attention in the broader stock market, it will probably work out come IPO.

So far, so good for preferred stockholders.
Being careful sort of works, until the New York Times serves malvertising from an ad network: https://news.ycombinator.com/item?id=11296252
Does anyone know the purpose served by those reverse phone number search sites that list hundreds of thousands of fake names and fake addresses?
I use my own product SnipCSS all the time: https://www.snipcss.com

I also pay for BrowserStack, Browserless and ChatGPT
JS is messy but its also general purpose and covers the frontend (by definition) and backend use cases for most applications. There are certainly cleaner languages (go for example, people seems fond of rust too).

JS has huge inertia and I think it will take some time to displace it, even with better options available.
Higher kinded types always remind me of regex. People think “I know, I’ll use HKT to solve this problem”. Now they have two problems.

These techniques can be way overkill for someone until they are dealing with an overwhelming amount of types to unify. It’ll seem like a terrible idea until that obstacle is encountered.
I think he's referring to poor judgement by the CEO in immature PR handling. Even if raising the API prices is the right business decision according to the data, publicly slandering the Apollo developer seems like an unambiguously childish move
Methinks the developer doth protest too much.
Oops; wrong guess then. Still, that's extremely high and I'm glad it wasn't a destination on my list. I'm thinking of moving from CA to the southeast to escape the cost of living. Probably KY, TN, GA, SC, or NC.
If you own a screwdriver and a soldering iron, some solder braid and some solder, the battery becomes replaceable!

This is my objection to minimalism (not that you're advocating, but ObOnTopic): Tools and materials are capability, which seems senseless to minimize!
First of all, probably. These cars have far more sensors and far more monitoring than standard cars so they know when things go wrong quickly and can react quickly (by like pulling over). At the current scale of self driving cars actually being tested right now it's basically guaranteed that a tire has blown by now. Given we haven't heard about it killing someone it probably means that the software knows how to handle it.

Second, human error accounted for >90% of accidents [1]. Focusing on that fraction first makes sense.

1] https://www.cbmclaw.com/what-percentage-of-car-accidents-are...
Parent is being downvoted, but the points are actually true.
People need to learn that material possessions are way less important than emotional environment. For most of us, being better parents is about how we parent. Not what we can afford.
This is basically “every company” these days. The disease has spread to the offline world as well where dystopian stuff like billboards that track you walking by exist.

We collectively need to fix it.
They store frequently-requested items in a place that permits faster retrieval.

https://en.wikipedia.org/wiki/Cache_(computing)
Why can't an email list be moderated? I've seen several that very much were.

OTOH your own moderation by just ignoring certain senders may be relatively efficient even if nobody actually controls the list server, and the whole thing is just a bunch of peer-to-peer messages with CC large headers.
-10x for love then.
People are literally better off with dice and some paper than using LastPass
>There's a saying that rings true, "The military is always fighting the last war"

It's a saying that people in the military are well aware of (OEF Veteran here). We were well aware of what happened in Vietnam with counterinsurgency. The problem is that counterinsurgency just doesn't work unless you treat the country like an imperial colony. We didn't do that, in Iraq or in Afghanistan. It wasn't worth the resources to "do Imperialism" in those places, and so we got a half-assed "strategy" that wasn't really related to any seriously considered national objective.

>The problem with that doctrine in Afghanistan is that hiding even two men is difficult in arid environments.

The Taliban were able to do this with ease.
I keep finding myself reading Forth literature and playing with gforth in the evenings, thinking fondly of hardware to escape the atrocities of editing yaml and waiting 10-30 minutes to see results. Maybe I should run in the same direction...
Woah, this is pretty cool. The page is also the only occurrence I've seen of the term 'Web 3.0' on something this old (abeit meaning something slightly different).
zsh, nvim, fzf -- These things drive my daily everything. I'd pay if that wasn't all FOSS.
Man you're asking a lot here. I've had at least three concussions and the tail end of my drug use between when this was a thing and now. I cannot recall the exact specifics but what I do remember was that to get a post accepted to the group you had to include a custom x-header (name escapes me). The contents of that header could be anything, it didn't matter, the presence of the non-standard extra header was what was checked. The best part of it all was nobody, literally no one, would tell aspiring new members how to post to the group. There was the vaguest of hints dropped in the group FAQ and that was it. You could post if you could figure out how to post.
also get a vertical mouse, best $30 buck you'll ever spend
Very, very little of YouTube infringes copyright. The content that you think is infringing copyright has in fact been licensed and monetized by the copyright holders. YouTube will often permit uploaders to keep their copyrighted content; the automated fingerprinting systems recognize it and notify the copyright holders, and ask, "what do you wanna do?" and often, the answer is to keep it, and give us the proceeds.

Likewise, there is plenty of fair use content. I've watched tons of "film and TV critic" type channels, where your gracious hostess will sit through, say, an entire half-hour episode of "Murder, She Wrote" and she adds her commentary and snarky jokes to the soundtrack. But the copyrighted episode itself is reproduced nearly in its entirety. There is an entire industry built on this fair use content. They need to carefully observe the guidelines or they'll get strikes, but it's definitely a doable thing, and they can indeed monetize those videos for themselves.
Ask HN: What are some good tech publications?
The quality of content on publishing platforms like Medium or even Hacker Noon etc has slipped pretty bad. And nobody really reads journals. One option is to write personal blog, some of which are really great to read as well, but a respected publication can serve some other ends too. So what are some good tech publications one can send a 2K word article to? Area: Cyber Security + Strategy/Policy
Users do want it at the point things go wrong. They want it in hindsight I guess. I don’t mind the Mac OS X way (I am not sure how good it is, but it feels good). I don’t see why not every app, in Linux or elsewhere, is not ran in a container and directories are mounted, network access is permitted etc by asking you. When I was forced to used windows (a long time ago), I installed something that alerted me of network access and default blocked it; just switching on the laptop and logging in would give me 10 ‘allow this?’ and that was not only to Microsoft owned domains. This was a while ago, so I cannot even imagine what happens when opening up windows 11.

Users do get annoyed, but on the other hand: I am willing to bet, if you check statistics, that 99% of browser (and most other apps) users access folders Pictures and Downloads (and maybe Documents) only, ever. As for urls, every tab must be another sandbox-in-sandbox and by far most of them never need the access to Pictures or Downloads or anything else. So you can surely ask without annoyance. Now a site using assets from another domain are mostly ads, so just block it all and allow manual unblock per domain.
There is a balance there too though. e.g. I was looking at multimeters. Much googling later I determined that the Fluke brand ones are the best and "last for life" type buy.

Nearly spent 200+ on one 2nd hand via ebay auction. After a while sanity prevailed and I got an amazon brand one for a 1/4. Does the job too and I use it so seldomly (soldering DIY sht) that I'm glad I didn't spend more.
If you work with Postgres a lot I'd recommend Postico. It's not a necessity but I've found it to make me much more productive and worth the cost.
First sentence he claims he invented sth a long time back, but it definitely has prior art.

I stopped reading right there. If everybody did that then perhaps he'd learn to be able to express things without immediately being full of himself.
I don't see why this needs to involve crypto
Admiral Richard E. Byrd: Admiral of the Ends of the Earth
Good to know, thanks! I was interested in the comms side and not the cable side since I was considering building a widget that didn't use USB-C as the physical layer but did use PD for power negotiation.
Ah, security theatre.
I think you are aiming for accountability but making a government step down for data breach is unrealistic and has many unintentional consequences.

In security you can account for many factors except the human factor.

If there's sufficient incentive like automatically bringing down the government, you are painting a huge target on the hardware & software infrastructure for both internal(political rivals) and foreign entities(think governments with significantly more resources).

There will always be at least one weak human link that can be exploited and that's far less price compared to what was done historically to topple governments.
I would add,

Obsidian https://obsidian.md/

to that list.
There was a derivation for tlauncher but it was removed.
You can look into the nixpkgs repo and copy it in your system.

Writing your own derivation is incredibly straightforward and there are tons of useful helpers
I don’t hate anyone and the sub has nothing to do with autogynephilia.
Capitalism bad?
HN traffic doesn't convert unless you have a very broad B2c product or developer related one.
Please share this massive list of lowlifes with us.

At the rates of burnout I see, candidates who can train and learn are worth far more than your meager estimation.

Theres enough and more work that needs to be done.
* https://tableplus.com/ for database access

* https://bear.app/ for notes

* Skitch for screenshots and markup

* Dash for easy docs

* Easy CSV Editor (https://vdt-labs.com/easy-csv-editor/) for just editing a CSV file without loading a whole spreadsheet app.

* VSCode, Sublime, zsh, iTerm, Proxmox
I pay for computer, internet, electricity and paper books.
You're right - language use is not related to citizenship.

Refugees deserve human rights. Since Sweden extended humanitarian support for a lot of refugees from the Middle East, that surely makes sense that Arabic languages are common.

My birth town of Miami accepted a lot of refugees from Castro's Cuba. My friends and classmates grew up in Spanish-speaking households, and I remember getting new classmates who didn't speak any English when they started. They learned.

While native Spanish speakers, my classmates generally preferred speaking English. As usual with immigrants, their kids - the second generation - are being raised in primarily English-speaking homes.

Just like how my g'grandparents spoke Norwegian, my grandmother was force to learn it as a kid, and my father learned a few phrases, passing down only one to me.

And if I read your link correctly, seemingly just like how the grandchildren of Finnish immigrants in the 1960s are learning Swedish, not Finnish.

OTOH, their Cuban-born parents often didn't learn much English. They had a family to support, and needed to work.

So Miami ended up a very Spanish speaking town, even though there is an English language requirement for US citizenship.

If you really think, as I do, that it's unrelated, why mention it at all?
Few people seem to need custom-run forums when a plethora of subreddits exists! It's the network effect: everyone interested will head there, because they know that everyone else interested will head there.

It's relatively harder to make your forum even known among potential interested users on the background of the entire Web, while you have a much narrower search space within reddit.com. (Widely popular Facebook groups also exist.)
If someone does not even know how to collaborate or communicate using open source software I cannot take them seriously running an open source project.
I do think I could go for something like reddit that is free to read but posting and commenting requires a paid account. Could really cut down on spam, but hard to get enough people to pay to make it interesting.

I guess the SA model could work. Where you pay to join. Or annual fee is waived if karma is good.
I bought and returned a Pocket Operator. One of the least musical, unfriendly instruments I've ever owned.

And imagine, you can buy an OP-1 or seven Volcas! You can get the 2 Circuits and still have money for 2 Behringers! I never found the sound from the OP-1 particularly interesting, and the instrument is more suitable for looking cool rather than making actual music.
Thanks! That's exactly why I was looking into the comms side but didn't spend more than a couple moments on the cable side. I was considering building something that had board-to-board connected modules and used PD to negotiate the power between boards.
If you are creating a relationship between times in the past, you have to convert from string to something else. And the something else is always subject to some other detail - the calendar of the past is not defined identically throughout history, so you can't just extrapolate year-month-day backwards to get a time.

Nobody's really solved this, it has to be tackled anew for each case of "comparing dates from long ago".
Hard disagree. Being able to go pee when you need to, or a checker having a stool to sit on instead of standing still on concrete all day, or having a boss that offers an encouraging word after an insane customer yells at you because the computer isn't working instead of also treating you like the source of the problem. Things like these bring dignity, and would enable people to work while still having dignity.
I’ve been to the restaurant in San Diego and the plates are indeed massive
The purpose is to serve ads and make money. They can do that because people will search for unknown numbers and names.
Elon dropped out of openai because of differences regarding direction and conflicts with what Tesla is doing. He then secretly started developing sth similar and asked for a.moratorium on research+dev so his secret thing can catch up.
The Soviet Union had much larger environmental disasters than those 'evil' profit optimizers ever managed. See https://slate.com/news-and-politics/2022/06/history-of-sovie... or https://en.wikipedia.org/wiki/Aral_Sea as just two examples.

Orthodox economics tells you that the obvious solution is to privatise the stuff you want people to protect. Instead of leaving it to the tragedy of the commons (or, worse, to the communists).
I hadn't considered such a widget until your post, but now that you mention it I would totally buy one.
The Worst Zig Version Manager: A freestanding polyglot shell script
* Github Copilot

* ChatGPT

The other tools I use (VSCode, ...) are free
Bravo. Let us encourage tech companies to take the lead in eliminating bad forms of 2FA such as SMS. Let them drive adoption of passkeys, U2F, FIDO, hardware keys, and other open standards. Someday, banks will join the 21st century.
Automod should be in all subreddits, its the moderation bot. Without it reddit would collapse.
Most image codecs are made for natural images; those of the real world, not synthetic ones like the one you proposed. Lossy codecs like JPEG use perceptual coding to maximize perceived quality for a given file size.
"being careful" in my view includes blocking ads, reducing unnecessary remote connections to servers and not running unnecessary code. You can't avoid everything, but I think you can get by pretty well being careful. That does mean being more careful about doing things most people don't consider very risky though.
They feed them to live rats. (I am making this up, but such a cycle would be awesome)