skysight-inc/HackerNews huggingface dataset:
>>I propose something like this

You don't need to propose it. If its your code you can just do it.

I would recommend that you clearly document (for yourself, if not publically) what your goals are. Is it money? Fame? Github stars? Users? Contributers? Something else? In order to determine if the license is a success you need to set goals, and then measure the results.

Frankly, while this topic comes up frequently on HN, it's getting somewhat boring. I'm starting to come around to the viewpoint that you can either give your work away for free, or make a living, [1], but fundamentally those two goals are against each other.

Sure you can make a living tangential to the work (docs, support et al), but of course that's taking time away from the code (so kinda just like a day job.)

[1] as with lots of fields, like authors and music, there is a tiny sliver of people who manage it, and are held up as examples that it can be done.

But I do applaud your creativity here, and i encourage you to experiment. My first thought is why bother to go Open at all? Presumably to meet some goal and it will be interesting to see if it meets that goal.

I suspect you are looking for contributers (but I'm putting words in your mouth here) and I would suggest that the vast majority of projects get no contributers, regardless of license.
> While io_uring brings performance benefits, and promptly reacts to security
> issues with comprehensive security fixes (like backporting the 5.15 version
> to the 5.10 stable tree), it is a fairly new part of the kernel. As such,
> io_uring continues to be actively developed, but it is still affected by
> severe vulnerabilities and also provides strong exploitation primitives. For
> these reasons, we currently consider it safe only for use by trusted
> components.

As often in the kernel (and probably everywhere): there are people caring for performance and there are people caring for security, and a lot of the time there's not that much overlap.

Ensuring that io_uring is covered by the Linux Security Modules (LSM) framework, that provides hooks for things like AppArmor or SELinux (and a variety of others, some even can even get stacked), was only done after it was already quite popular.

So FWICT, even if io_uring is existing since a while, 1) the security experts vetting it are looking only closer since relatively recently and 2) it's architecture is quite different from other kernel user space interfaces, which certainly needs some adaptions on applying the established security mechanisms of the kernel, especially as the project still wants to stay high performance.

IMO, this doesn't mean io_uring is inherently unsafe, or has no use, but that one certainly needs to evaluate if great async submission model is worth the potential security implications. E.g., in an isolate environment, where no untrusted third-party apps or people have access, it can be fine, while especially in environments that Google runs it isn't worth the trouble for now.

But, I think that the features which io_uring brings are too nice to have for quite some (I/O or syscall heavy) workloads even in those environments, so there will be an incentive it to the integration into the existing Linux security stack and mechanisms, and evolve the latter to be also a good fit for this rather different interface.
> Incredibly useful feature

For something so "incredibly useful," I've literally never felt the need for something like this in any other language in 20+ years of coding

Elixir's deep pattern-matching, on the other hand, I miss in LITERALLY EVERY OTHER language I have to work in
PoE isn't too hard to play in the beginning, as long as you learn the skill gem system (takes 5 min?)

But yeah it gets immensely complicated in the endgame. I've been playing for about a year now and am barely just starting to understand it.

That said, it's still a lot of fun. It took me a while to get over the frustration but once I did, it became one of my all time favorite ARPGs... and games, period.

It's totally free too. You only pay for cosmetics and optional extra bank (stash) space. A really fair monetization model that doesn't sacrifice the player experience, so on that front I totally support what they're hilding. (They are, however, owned by Tencent now sadly.)
"Coal mine operators want to stop unions from negotiating wages."
A lot of moderators hide the moderator list because they get far too much abuse for decisions they make. It's dead simple: make a moderation decision based on the rules of the subreddit -> person affected by decision whines to the moderator and clogs up their inbox. Need to make more decisions per day -> inbox filled with more and more whining.
That's a good point. But that means they do already sell people the electricity for their ev if they charge at home, which is probably most of the ev charging. So the question is would they bother invest in building charging stations to get the whole market.
> One somewhat-related bit on the topic of moderators: does it bother anyone else that the stewards of some of these communities are effectively 100% anonymous?

It doesn't bother me one bit.
If the community is that big a company should fork over cash and pay employees to moderate it instead, or keep an eye on the volunteer moderators for any suspicious actions.

Instead of exposing identification I rather have moderators be subject to yearly votes. That way squatting is less of an issue.
I definitely agree, but I would also suggest that the need for social media companies to monetize on engagement incentivises them to exacerbate the issues you mention. Removing those incentives might improve political discussion.
It's not too bad. I usually filter by US only, used but not for parts, then it has pretty decent search syntax like "Intel NUC (i5,i7) -parts" and you can keep adding "-unwanted_terms" to get the query down to something more selective.
Their app and site sucks. 3rd party apps exist because of that. They can't accept that its their fault.
I have a feeling Reddit is mostly nerds though, after this I doubt there is going to be anyone left.

Recently I've been moving to Facebook Groups. Compared to Reddit the groups are much more niche, which is a good thing.

On Reddit there is a general sub about a hobby I'm interested in with 198k subscribers, on Facebook I've found groups with the specific niches of that I'm interested in with 16k - 30k subscribers. The questions are much more specific, and the people there are a lot more knowledgeable. The people on there seem friendlier too.
Rent a storefront

Get people to run and supply it for free

Sell the supplies and profit
Are there Rudi Čajavec CPUs as well? :) I only know Iskra as a (literal) spark plug brand.
Turned out to be okay. I enjoyed reading the back and forth. :)
Open source is a technical, well defined term. If your software is ultimately not open for certain fields of endeavor, I’m willing to accept that, but labeling as if it is, and then coming up with derogatory terms such as “zealot” for people pointing out this difference is dishonest.
I can't tell you are serious or satire. If you are serious that kind of estimate is as good as useless because the projects most likely won't be profitable. Can you imagine what will a property developer think if he is informed that his project is going to take at least twice as long to complete?
Goes the other way. Reddit isn't paying the mods who run these communities. Without all this unpaid labor, the site can not function.
> When you sell this to another party, are you going to report it on your taxes? If you do report it, is your buyer going to like that?

You don't need to declare who gave you the money on the income tax filing.
Can you link me to where I can submit bounties to a spy agency, and any material or personal anecdote about them paying more than Google for Linux kernel exploits? Because so far this all sounds like speculation on your part.
Obligatory comic (surprisingly not xkcd): https://old.reddit.com/r/comics/comments/d1sm26/behold_the_u...
No, this doesn't enable evil maid attacks. If your evil maid has the means to unlock your phone in order to enable sideloading, then it's already game over, because with that same access they can get your passwords and your 2FA second factor. Please stop trying to suggest that evil maid attacks are a concern here.
reads like a linkedin ad :D
I moderated a few decently popular subreddits for a while (a couple hundred posts a day, nothing crazy).

I will say that most moderation work on Reddit can be done independently of a particular sub and scales okay across subreddits. Like the additional effort of moderating 100 subreddits vs 1 would be nowhere near 100x. It would probably be closer to like 5x the amount of work.

And there are benefits to moderating many subreddits.

Most moderation is keeping your automod filters up to date to stop the never-ending onslaught of porn bots, crypto scammers, and obvious fake accounts looking to farm karma. Everyday I'd scan through both the stuff the filters caught and the stuff they didn't and tweak the automod settings to be better, then most of the time I'd copy paste those settings across subs.

The other hard part of being a mod is communicating with the other mods. Like I would only be online moderating one hour out of the day and so all communication with async with anonymous strangers. This again benefits from having mods span many subreddits because you can quickly get to know the other moderators in similar spaces and you all pass information around to each other.

For subs that require user verification this again is a better user experience if you moderate several similar subs because users can verify with you once and be approved across many subs.

The communities actually tend to do a pretty good job of moderating themselves via reporting and downvoting so even if there's only one mod on a subreddit they act way more like an appeals process than an initial judge of fate, most content moderation is actually outsourced to the community as a whole with the mods only responsible for curating a space free of obvious spam and acting as an appeals process for people who have content on the borderline.
Yup! Thanks for pointing that out.

And that was my thought in general... I want to write projects that others want to contribute to, without painting myself into a corner.
Power mods are a real problem on Reddit.

It's the same group of people who strong-armed a lot of smaller subreddits into participating in this 'protest'.

The end result of this protest looks like it's going to be that Reddit is going to remove a lot of the mods that the community has despised for years.

It would seem this mod pity party is backfiring in the most spectacular way possible.
> force communities back open

Force communities back open, how? I've read countless comments over the past few days about how Reddit can just reopen all the privated subreddits with new moderators, without explaining where those new moderators were going to come from.

Curating and maintaining a community takes a LOT of effort, and I'm not convinced it's that easy to find people willing to do it for free. Just think about open source projects and how many have died when the sole maintainer called it quits.
It’s been a long time since I payed attention to Reddit drama, but isnt Reddit dominated by maybe a dozen or so power mods that have an enormous amount of influence in what goes on on that site?
Damn this is sick! Grats on your effort so far!
If you're a completionist you'd have to do multiple play throughs.

But honestly, its a bit of a catch-22. No one wants to "roll a bad playthrough" and devs don't want to work on content that only a subset of players will be able to experience.
> Then there's the total non-advertisement at the top of Settings encouraging you to try iCloud.

Just looked at the settings on my phone, can’t see any ‘ads’ for iCloud at all. Am I doing something wrong? And since I had to open the settings app to check, if there are ads, are they modal and stopping me doing what I wanted to do? Do they force some kind of call to action to get past? A action blocking modal? I’m genuinely asking because I have literally never seen what you are describing.

> …along with the native and beautiful builtins like Apple News and TV+ that totally don't exist to upsell you on more services.

Never knowingly opened them so I can’t comment, but what is wrong with upselling services? Is it any different to YouTube being native on Android devices? I mean, if I use YouTube in my browser, iPhone or otherwise, I literally get a modal on any new tab I open with YouTube pushing me to subscribe to the premium feature - even with an ad blocker. Does this happen on Google’s own devices or platforms? Again, I genuinely don’t know.

The thing that I see everytime this comes up is that “advertising bad m’kay, silly little Apple user”, which was never the argument. User tracking and identification is what is bad. Targeting ads based on this in places like the settings app would be bad. Is there any evidence that this is happening? The same goes for telemetry from apps. I have no problem with Apple, Google or anybody else gathering telemetry about how an app is used, just so long as they don’t identify me based on it and use the data to sell me shit. There is nothing inherently wrong with advertising services, what is wrong is the how, when and where that takes place, and what the advertisers are basing it on. The condescending tone that is employed by the anti-lobby here doesn’t help the discussion either, but that is the whole “I know better” Orange Site phenomenon.
It's a lot more than the $0 or negative reward that most companies offer. There are many examples of security researchers being rewarded with threats and police reports.

Funny how when a person/company does a small good deed, they get criticized for not doing more but when they don't do anything and implicitly offer $0 they don't get criticized.
Yeah, its there in the ranking algorithm. Any post which starts getting more comments than votes gets downranked.
You’re so old that your username has a stand alone FPU >:)
Sounds like one more point for the protesters, nice!
But if I wasn't on the drug, I wouldn't have done that at all, despite playing piano on and off for years prior to $EVENT

So 8 hours of something is still more (magic internal neural network synaptic connection strengthening) than the null hyp which is "yeah, without stimuli, you're not playing piano for 8 hours"
If you are very confident that the buyer is legit and not evil, then you’ll be fine.

Imagine though, that this information you willing sold to a shady party was used in a big hack. Say national security or an oil pipeline or something.

Do you think your defense will hold up in court? How many years will you be in court? Even if you are deemed not guilty, will your life ever be the same?

You’re gonna risk all of that because you thought you could squeeze a $200k out of your bug?
Selling to governments is not trivial, at all. You can't just post these things on eBay and hope for the best. Like all things, you need hard fought relationships to be able to even talk to anyone, let alone actually make a sale.
Massive hack of Oregon DMV driver’s license and ID data
> All of that other stuff makes operating menus and AR aspects better, things that are useful for tasks you can already do on a device 1/4 the price.

As a Quest Pro owner, that is exactly what a headset needs. Passthrough on the quest is a blurry, noisy mess that feels like looking through two original iPhone cameras attached to your eyes. The VR part is great currently, and you get that “for free” if your screens/cameras can do an impressive AR mode. I can work in VR mode on the quest, but the AR mode gets way too distracting when you can’t read a phone notification that popped up on the device in your peripherals.

The screens aren’t the only upgrade though, hand tracking on the quest is mediocre currently, doing simple hand gestures requires me to do them repeatedly often as they don’t get recognized. Eye gaze + small gestures on the Vision Pro are the “pinch to zoom” moment of the VR space.
My criticism doesn't concern Google's ethics, it concerns their practicality.

Common sense says that with bounties like that, they won't attract the most serious exploits, which isn't an ethical problem, but can absolutely be a security problem.
YC is a Reddit investor, and dang hasn't chimed in connecting the threads, and the other thread was removed from the homepage. It's suggestive but it doesn't prove anything. The guidelines say that HN moderates its own properties less, but that may not always be true, especially pre IPO.
this.

Back in the day (before open sourse became so prevalent), lots of software was designed from scratch with the minimal use of outside components and frameworks.

Today OSS frameworks (especially web frameworks) and libraries, PaaS, and Cloud provides you with an already baked-in design patterns. So there is less need in SW Architect and proper design.

Also, most of the Gang of Four patterns are just addressing the deficiences of OOP and older PLs, so if you're using a modern PL with closures/etc. there is no need in them.

EDIT:

Novadays a vast majority of design patterns are dealing with the complexities of microservices architecture, so if your product is a monolith then there is no need in them.

IMO the most useful design patterns are the ones dealing with error handling, reliability, and the essential complexity comming from the real world and human actors, not the self-inflicted accidental complexity comming from the bad design decisions. The good SW Architect should be able to help in avoiding that.
There's nothing just about this world, and if iPhones are your biggest concern in this regard then you're profiting from that injustice.
A large amount of subreddits also have discord servers under the same alias. This would immediately blow up in Reddit’s face and get them mocked by every new publication

> They’ve already demonstrated that they have the power (and will) to modify existing users’ comments.

Huffman was also immediately caught and has been restlessly mocked about doing that.
> Allowing sideloading increases the potential for exploits in IOS to be found

Security by obscurity has been debunked for decades. This is not an acceptable argument for anyone who actually cares about security.
Twitter was the same way. Then they kicked that community to the curb. It’ll happen again.
So disappointing. Google domains is such a clean interface for buying domains, I really thought it was one of the few Google products that would last. They’re really not afraid to burn their customers over there at Google
It’s not a negotiation if the law dictates that you have to sign and that you are forced to accept a significant discount, which seems to be the core of the case:

> once HHS unilaterally selects a drug for inclusion in the program, its manufacturer is compelled to sign an ‘agreement’ promising to sell the drug to Medicare beneficiaries at whatever ‘fair’ price the agency dictates, which must represent at least a 25% to 60% discount,” the complaint says, calling it “tantamount to extortion.”
> does it bother anyone else that the stewards of some of these communities are effectively 100% anonymous?

No. Reddit isn't Facebook. The whole place is anonymous. Do you really think mods of large subreddits wouldn't get swatted, doxxed, harassed, etc?
Well, except the mods, he doesn't pay them.

Or the people who made moderator tooling to hack around his lack of moderator tooling.

Or those who wrote entire third party apps to get around his lack of viable third party apps.

Or those people who had to implement accessibility for the blind or otherwise disabled to get around his lack of tooling for the blind or otherwise disabled.

But besides all those people, yeah he pays the bills.

Well okay he doesn't actually pay anything, it's the investors and advertisers that pay the actual bills.

But other than all that spez contributes by.... Uhh ..... Lowering server costs by causing a mass exodus?
Yes, there are definitely better resources out there. This is just a WIP I had that I thought I’d share.
No issue with this. Subreddits exists for the users, not the moderators - all of which can be replaced.
Google actively patches all its kernels and keeps them pretty up to date. The problem isn't the vulnerabilities Google or the public knows about, its the ones it doesn't know about, and the rate of discovery is too high for io_uring to be used in certain situations.

"As such, io_uring continues to be actively developed, but it is still affected by severe vulnerabilities and also provides strong exploitation primitives."
Glad you enjoyed it - it's two people who are very passionate about the same topic. I didn't mention it beforehand but I've been working on my own solution to this problem - I've been going back and forth between drawing board and prototype for years and it's become an obsession for me. I love this problem.
you're so old that you use discrete transistors in your CPUs. hahaahahaha
How many people do you know that had pre-iPhone smart phones, bought them and used them for a couple months, and then "abandoned" them on the shelf, a common phenomenon with current VR/AR gear as mentioned in the article.

In my experience, practically nobody. I agree that the Vision Pro is a technological marvel, but it's still a solution looking for a problem, and it's striking to me how even Apple had a difficult time presenting actually compelling use cases in their videos.

To be clear, I think there are some viable uses: gaming obviously, and potentially media consumption, but even there this solution is so much worse than a home theater system (as another commenter mentioned, I can get a group of people together in my house to all watch a movie on a big screen TV that costs much less than the headset that each of my friends would also have to own).
I don't think it matters. As long as the members of a community have no problem with X being a mod, X should probably remain a mod for that community. If the community eventually hates X, X should be removable.

Reddit was the best place for self governed forums. I don't think arbitrary limits for how much one can mod would affect the quality of the site in the slightest.
I am wondering this too. I waited years hoping the .ing gTLD would be released, and it never happened.
Don't forget security updates, migrations, correctness and reliability.

It's quick to get an MVP running that "mostly" works in the happy path. It's much more time consuming to get something that thoughtfully and correctly deals with most edge cases, and has some more 9s.
Something I want to ask before:

I've noticed that some people have made a connection between the decision to effectively shut down Reddit's API and the increasing popularity of LLM/ChatGPT, and it does seem plausible.

What's interesting is that Twitter also closed down their API access merely months ago. Are these two occurrences related, or was Twitter's action also a response to ChatGPT/LLM?

(Also to be totally fair to them, Twitter and Reddit used to have the most comprehensive free API accesses which I enjoy. Instagram/facebook etc. are always a nightmare to work with in term of scraping.)