skysight-inc/HackerNews huggingface dataset:
Hi, I wrote this post. Let me use your comment as a chance to talk about what I was going for with the use of Noise here.

You're correct that part of the assumption inherent in end-to-end encryption is that you've got the other end right; otherwise, MitM attacks become possible. To prevent this, Social apps like Signal (also WhatsApp and many others) give you, roughly speaking, a way of confirming that both endpoints have negotiated the same secure channel. Less-social web apps use PKI. In both these cases, the design makes sense because you care who the other endpoint is. Their identity is meaningful to you outside of the context of the protocol.

In the peer-to-peer context, though, this identity information is mostly meaningless. I think, as long as there are no "network admins" or similarly privileged identities worth claiming, it's less important to certify identities up-front (what would even be a reasonable standard for accepting them?) and it's more important to be able to persist them. You want to make sure you're still talking to the same person you were talking to last time, whoever they are. This is what the PSKs are meant to accomplish (though they are not the only possible solution here).

This is technically still MitM'able, but only if you catch two parties on their very first connection; after that, they have a shared secret, and you should be locked out. Technically this falls slightly short of the ultimate goal of end-to-end encryption, but I still think it's a good fit for this context.

I went into this in (much) more detail in this old blog post: https://eli.sohl.com/2017/06/09/message-encryption-in-theseu...
This.

It's hard to understand as a software person.
Which other post? There is so much churn on HN that it’s hard to know which post you are referring to
Nit: SFO to Devner is far more likely. The TSA has turned a blind eye to cannabis going from legal state to legal state for like a decade now.
American Express Virtual Card Number [Tied to Chrome Desktop/Android]
Lou Pai
If they're spending money into a local economy, that means the money is flowing into the local economy.

> merchants

hire a whole panoply of people as their business increases.
This approach can be a little problematic.

I'm particular, communications between the airline and tsa aren't all that reliable.

See for example:

https://youtu.be/l0IwVrC56tc
As a researcher what would the number one sin be that we commit? Is it something I could make the effort to improve upon?
True, but my point is that merit only takes you so far. If you really want to “make it”, you need merit AND an underlying freedom to take risks.

If what you have is the only means of survival, your appetite for risk is strongly diminished. So when someone claims that “you would have made it if you took risks” is a little two-faced.
I am grinning. What a great connection.

Look up "Shango" on YT as an entry into a community of people able to fix vintage electronics.

https://news.ycombinator.com/edit?id=36398778
So far, I am finding my second foray into macOS more pleasant. I think a large part of that comes down to having different (more informed and more pessimistic) expectations, and another large part being that I'm coming from a relatively much more annoying Windows setup that I just spent a year suffering with.

I tend to find myself at odds with macOS' design goals. Some of this is that some of Apple's values are directly opposed to mine, and some of it has to do with my poor vision. But macOS has never felt welcoming or inviting to me, so I've never really managed to maintain the kind of curiosity about it necessary for seeking to meet it 'on its own terms'.
Could they increase supply in anticipation of dying people wanting to use them? Might be harder to estimate than a normally released product though
I hear ya ;)
Uh?? Yes, your goodwill went up, but your cash went down? Assets are constant?

And then in one year you'll need to take an impairment charge?
The early hardcore adopters & admins definitely tend towards a militant dogmatic ardency. There's an ever expanding list of absolutely unacceptable things which folks will ban instances for, like having search. Or being Meta, I guess.
"Epistemological taste" refers to what you consider to be "good knowledge".
It looks like sync/errgroup is a proposal, but not in the standard library (not yet, at any rate): https://github.com/golang/go/issues/57534
clowns. the pressure hull of a deep-sea submersible is not the place to go looking for cost savings, especially when the target clientele is cost-insensitive billionaires.
I know the reason, and it’s a doozy. Send me $5 and I’ll let you in on the secret.
>I can’t understand why I would choose any particular server over another

Who runs the server? On what kind of funding, and how long can it last? Are you served intrusive ads? Are your a customer or a product for the people running this instance? How hard is it to run an instance yourself, and what happens if you suddenly post a video that attracts 10M views?

So many questions, I know, that's too hard, gimme something easy.
Thanks, I was considering something like this as I used ITTT to send me weekly top threads from certain subreddits, but now with Reddit going south…
Can you migrate to another instance if yours becomes defederated?
To your point,Humans are augmented by checklists and custom processes in critical situations. And very certainly applications include which mimic such safety checklists. We don't NEED to start from LLM perspective of our goal is different and doesn't benefit from LLM. Not all UI or architecture is fit for all purposes.
Free markets are always good for prosperity. Trade barriers, not so good.
This WSJ piece makes me irrationally angry, because of these things.

Corporations can only increase profits/sales if they resort to such shady tactics. Does that make these shady tactics acceptable? My wholehearted answer is a big fat NOPE.
Result is better because it actually encodes the correct situation. You either get a file or an error. Not neither, not both.

Go's encodes instead "you may or may not have a file" and "you may or may not have an error". Not the same thing, and extremely rarely what you want, IME.

Other languages also do a better job of helping you verify that you actually handled both cases too.

By the way I wouldn't say we need Monad here, I'd be happy if Go could at least encode Sum types.
>10nm

aka 10nm Enhanced SuperFin aka Intel 7 (12000 and 13000 series)

Which funnily enough don't support AVX512, unlike the previous 10000 (14nm++) and 11000 (14nm+++) series.
Why would you post on many instances? Shouldn't you be posting on _your_ instance, that people you authorized can view?
So what, if people want to call in “Memcache”, right?
The metal wires in the tether is heavier than water. This is balanced by twining air/gas hoses into the tether. Gas compresses by 50% for each 10 metres of depth in water, so that's a whole different scale.
I also use Debian 12 for my home router (switched away from OPNsense). It's an old PC that became redundant when I built a new one, now stripped down to just the motherboard in a benchtable. The LAN NIC is an Intel I350 card and wifi is from an AR9280-based PCIe card, so no problems with firmware etc.

Unlike TFA I did not try to replace my ISP-provided ONT, and I use nftables (via firewalld) instead of iptables, unbound instead of dnsmasq, and systemd-networkd instead of dhclient and radvd. I also run haproxy to terminate TLS for some exposed LAN servers, and a local OpenSUSE package repository since many of my LAN machines are OpenSUSE.

For the internet facing services (chrony, haproxy, unbound) I wrote systemd override files to harden them (run as non-root, temporary mounts instead of direct filesystem access, etc). I also run them in individual network namespaces.

I highly recommend a Linux-based router if you have the hardware to spare and want a completely customizable and secure router, never having to worry about ISP malware or lack of updates again. Of course if what you have is more embedded than a full x86 motherboard then something like OpenWRT would be better than Debian.
No, please for the love of god stop writing services. Having random grab-bags of methods makes it infinitely harder to find what code lives where, instead of putting it into models where we have 20+ years of OO design principles (single responsibility, open to extension, liskov substitution, interface segregation, etc) to guide us. "Fat models, skinny controllers" is a Rails guiding principle for a reason
The biggest difference is in rust you have to handle the error case, but in go you can accidentally ignore it.
I don’t think it works for legally changed names. Though I can see why you’d do it, Cumguzzler is rather crude in the modern age
I suspect when you're saying "apps" you mean "companies". There has to be a better way.
Hi, I wrote this post, and this is something I was wondering about the whole time. It seemed like TCP was a necessary compromise, but I wasn't sure how painful the overhead would be. If there are any notable examples you know of where this went wrong (or right) I'd be interested.
You make posts on a particular community (through your home instance), and federation means all the other instances will mirror your post
Mask with zeroing would solve that. The EVEX prefix supports both merge and zero masking.
> The answer is "both of them". Pick a client that makes it the easiest to connect to separate instances on separate accounts, then choose the same-ish username.

That actually reveals even more complexity: having to understand what federation is, researching and experimenting with clients, how to find different communities across the fediverse. Each added complexity cuts how many people would be willing to make the switch
I saw the title and immediately thought "please be related to the sky and not digital infrastructure". Good outcome!
That's a whole other mess, the 12th and 13th gen P-core design does technically support AVX512 but the smaller E-cores don't, and rather than try to reconcile that mismatch in software they just disabled AVX512 altogether to make the cores all behave the same. If they hadn't decided to implement E-cores then 12th/13th gen would have had AVX512 support.

Some motherboards allowed you to enable AVX512 on those chips if you disabled the E-cores, but then Intel started permanently fusing off AVX512 in hardware on later batches.
> It’s something 100% of go users have to deal with in almost every single function call. There is something clearly special about it.

I can't help but feel there is an even greater generalization here. The error problem you speak of actually applies to every type. To zoom in on errors alone may be missing the forest for the trees. It seems what is special is the need to handle values returned by a function, which includes, but is not limited to, error values. It is something 100% of Go users will have to do almost every time they call a function. Even those which do not return errors.

> Swift and Rust have a perfect error handling mechanism.

Within their respective languages they may be a good fit, but those languages are producer centric. Go is consumer centric. That leaves an impedance mismatch. I do think there is something better out there for Go, but I'm not sure that is where we are going to find it.
What's misinformation? Things you don't think are true? Things the instance admin doesn't think are true? Things officially deemed untrue by the State? Or by the UN/WHO? Is is considered Misinformation if it was deemed Untrue in the past by State Officials but is now Official State Policy? We have always been at war with Eastasia. We have always recommended the wearing of masks. We have always seriously considered the possibility of a lab leak. Border closures are a bad, racist, problematic idea. No wait, now New Zealand is the hero of the pandemic because it closed its borders. We have always recommended border closures!

Servers defederating because of viagra/nigerian prince/etc. spam is one thing. A "lefty politics" server defederating with a "righty politics" server or vice-versa because they just want an echo chamber? Sure, you do you. General-purpose defederating other general-purpose servers because of "misinformation" and "trolling", when those terms basically mean "disagreeing with the current mainstream narrative on any controversial issue"? That's absurd. The generally-accepted issue with social media was for years that it created echo chambers. Now people are trying to use mastodon to create even more powerful echo chambers.
This text would benefit from a high-level summary what all the steps achieve together.
Surprised that the "always wrap your errors" rule isn't in there. It's been the rule in the last few Go teams I've been in.
Thanks, appreciate the thorough reply. This is very helpful. I need to think through this some more, but your example in the follow-up (where some dependency gets nuked) help concretize this. If I can get even greater reproducibility than Docker and it's faster, that's hugely appealing to me.
Around 2011 I set up full disk encryption for the first time. The systems I did this on were some second hand computers that I had bought and installed FreeBSD on. The systems were very stable. Too stable! They were running for several weeks until one day when there was a power outage. When power came back I booted the machines up again and I promptly realised that I was not entirely sure about what the convoluted password I had chosen for full disk encryption was exactly.

I lost quite a bit of data that day.

It taught me to stop with silly 5|_|1357:7|_|7:0|\|5 and to use long passphrases instead. This ensures high entropy without the possibility of forgetting symbols chosen, because there are no symbols to remember.

It also taught me to frequently reboot my computers, so that I remember the passphrases to decrypt the disks.

I have a tool that I wrote and which I actively use myself for generating passphrases, it’s called Pgen and it’s open source at https://github.com/ctsrc/Pgen
Not me, but the company I worked before, recently lost their primary data. They used ancient hardware, ancient software and some proprietary backup solution nobody understands. Their hardware failed, their backups turned out useless so they lost their primary database.

This database is a collection of other data sources, so they spent few months rebuilding it and doing nothing in the meantime. Kind of worked for them.

Basically they did every imaginable mistake: they didn't keep things up to date, they used contractors who were hardly professionals, they never tested recovery.

This worked for them for around 20 years, AFAIK. They had old, but solid hardware and software (HP Itanium servers, HPUX, Oracle 9i, raids), so this thing worked well. That's a lesson as well: good hardware might make you too relaxed.
I think many servers/instances post what they're all about and how they're different, and that should help. We're seeing all kinds of sites springing up to help navigate this, and I think in time it'll be sorted out.
Funnily enough, the 1990s VisualWorks UI moved on from the original MVC implementation into a pile of complexity involving adaptor classes and automated event processing, so even the Smalltalk guys knew the original implementation wasn't enough for most GUI problems.
I understand that there are legal regulations which generally specify these matters. However, to think that these are immutable is just wrong. Banking regulations change over time and jurisdiction.

To be clear, I'm not advocating abolition of the FDIC. Normal people wouldn't lose everything. The rich still would pay for FDIC payments, just like they now.

You would just see some individuals have less damage, specifically when bank assets in their name are commensurate with bank debt in their name. FDIC payouts would be slightly larger, but again, these are recouped by banking fees, largely paid by the rich
What Can We Do About Pandemic-Related Learning Loss?
It's always safety vs. money. A risk-free submersible or spacecraft does not exist.

It's always possible to spend more money to further reduce the risks, but naturally with diminishing returns. At some point, you have to decide to accept (very small) risks in order to avoid (very large) additional costs.
When I search "Shango" all I get is African mythology and ritual magic.
The moral really comes down to this: Those who keep on challenging despite failures have a chance at finding success; those who fear failure and don't challenge will never find success.
If AI gets too powerful, it could start making decisions in military battles
The handful of things mentioned in that article are definitely frictional, but I think people are willing and open to learning if they start to see value.

Smaller Lemmy instances feel more personal to me than subreddits did, and I think that is something people will find valuable.
That's what I meant by "no catch-all choices yet". There is no reason Google or Apple couldn't get in the game if they choose to. Supposedly Facebook is making a go at it for whatever that's worth.

I offered the email analogy because that helped me to wrap my head around it when I was starting out.
By bespoke you mean using standard interfaces to create shared memory pools?

They do roll some of their own locking primitives, but that's not particularly unusual in a large portable program (and quite likely what they wanted is/was not available in glibc or other standard libraries, at least when first written).
Maybe you could use a plastic (toy) gun. Is there some kind of penalty for declaring a firearm, and then it not being real?

Of course, if this becomes a big trend, it could cause real problems if 50% of the flying public carries a toy gun in their luggage just to prevent thefts by airport employees.
I can't verify this is true, but I've seen stuff pop up on Lemmy that Reddit accounts are getting banned for promoting Lemmy/Kbin/etc. Being resistant to unseen administrators destroying your social graph is literally a selling point of federation.
The article sums up my current frustrations with federated platforms. Maybe it just needs some time for reliable communities to be known. But until then, I'll be happy to use centralized platforms. Alternatively, people can adapt the culture of self-hosting their own instances. Then you don't have to worry about reliability and content moderation.
I think the problem they're trying to address is that "levelling the playing field" to achieve equitable health outcomes for Maori and Pacific Islanders is a "wicked problem" in the sense that there are many fundamental socioeconomic issues to untangle that can and probably will take generations to address.

By tipping a thumb on the scales at later stages of the "health outcome pipeline" they hope to pull the levers they actually have access to, to improve outcomes for those groups now instead of in 20 years.

I'm not advocating for what they're doing but I can see the logic.
I hope they continue to produce new training material, perhaps using some kind of GhidraClassFactory.
Maybe not from the outside. But after a few months of actively using the platform with a curious mindset, I'd wager you'd have a much stronger idea of how instances differ. That's the main service I see the "pseudo-default" mastodon.social providing in the current world—as a "jumping off" point that people can use prior to migrating to more specific instances with more customizations or better communities.
That is delightful. Thanks for explaining it so clearly.
I didn't interpret "traditional" as the rationale, but rather just pointing out that they're always done that way — I assume/hope for good reasons other than tradition.
That video is from James Hamilton. He does cool stuff at Amazon and has a very nice boat. Occasionally blogs.

https://mvdirona.com/jrh/Work/index.html
PC gaming in general is an experience, not knowledge.

However, specific niches of PC gaming are a different thing. There's a myriad of subreddits focused on narrow things like assembling gaming PCs, evaluating GPUs, playing a particular game, modding a particular game, etc. Many of those have a knowledge-generating nature, and among them plenty are maintaining Wiki pages, so that valuable knowledge is not lost (and so that the same questions aren't being asked a hundred times a day).

In general, this is the case with many (most?) subreddits focused on topics that have a knowledge component - be it a hobby like woodworking, a specific diet, a support group for specific mental issue, etc. Where tools for it are present, people maintain knowledge bases, for their own reference as well as to let newbies get up to speed without flooding the group with questions.
Idaho Student Murders: Inside the Hunt for the Killer
There is a relative recent trend by fire fighters to replace old steel/aluminum cylinders with breathing gas to cylinders made out of carbon (300 bar). They are also used under water in diving.

The intend benefit is the reduced weight, but I wonder a bit how the failure mode might be a bit different from steel.
Nuclear submarines can maintain a safe atmosphere internally with electrolytic cells and special candles, working with the wider gas management system.
In Linux, multi process with shared memory regions is basically just threads. The kernel doesn’t know anything about threads, it knows about processes and it lets you share memory regions between those processes if you so desire.
I can second his appreciation, posts on your site helped me keep my sanity as a junior developer who stood to close to a database server.
ELO in most contexts is a sort of "strength" rating so I decided when doing a few dozen that I would choose whichever had more impact on history. Or to put it another way, I was choosing the thing that would cause the most differences if it didn't exist. In my case I got Hitler vs Electricity so the latter is the obvious choice but anyone else using the same criteria as me has perfectly good reason to choose Hitler over some random sport team or most other individuals.

Though yes it's the internet, so it's probably mostly people doing it for the funny.
The second a wifi 6e (6ghz) router is supported I'll be on the openwrt train again. Until then, I'm stuck with my ISP router because it has faster wireless speeds than the openwrt routers available.

DIY is an option but also way more expensive.

See below for why I care so much about 6ghz.
Crypto.com had an internal trading team raising a conflict of interest
> Almost none of the crime [] is driven by people driven to desperation to survive

Yep.
Curious why you're using fmt.Fprintf and not fmt.Errorf? Or is that a typo?

And I think you're going to have problems with this pattern if you join a team using Go in an organisation. The `if err != nil` pattern is the norm, and everyone's used to it (and the regular cadence of Go code; "do the thing, check the error, do the thing, check the error" is very readable).
Worker was paid with 91,500 oily pennies: feds. Now company owes him much more
Marp CLI: make custom transition for slides
Sounds like the voice acting community is going to join the taxi driver community in the near future.
https://www.fdic.gov/consumers/banking/facts/borrowers.html

"In the case of a non-delinquent loan, the depositor might elect to “set off” the loan against his/her deposits in order to receive full value for any uninsured funds (i.e., funds in excess of the $250,000 insurance limit). In either case, no “offset” is possible unless the obligations are “mutual” – meaning that the borrower and the depositor must be the same person or legal entity acting in the same legal capacity."
> He does believe he is saving free speech

He calls himself a “free speech absolutist” and then he turns around and bans a bunch a people for speech he doesn’t like. So much for the “absolutist” stance on free speech my dude.