skysight-inc/HackerNews huggingface dataset:
They don't rely on sudo. The sudo tag merely indicates that if sudo is configured to allow "your" (the pwned) user account to run them, they can also be used for privileged operations that might not have been intended by whoever configured sudo that way.

"Never allow root SSH" together with the strong implication that it should be used in conjunction with sudo, has always had a very weak rationale behind it, since as soon as you actually ever make use of sudo to elevate your privileges, for an attacker there is almost no meaningful distinction between your user account and plain root.

Looking at the historic reality, the weak rationale more than evaporates completely. Due to various CVEs, sudo has, in retrospect, been a trojan horse for most of its existence that allowed privilege escalation from any user account regardless of its configuration. The period for which sudo has had these vulnerabilities overlaps rather well with the period for which it has been championed as "best practice" along with the tenuous justifications based on security by obscurity and to avoid "user mistakes."

In that light, your setup seems perfectly sane to me, however I don't believe sudo is relevant as a backdoor anymore in 2023 and the focus has most likely shifted to something else.
I think most of your beefs are, "what are the types of things", but Python wasn't very type savvy until pretty recently, so stuff was generally very implied. If you wanted type info you had to explicitly notate it in docs, which was kind of laborious and not easy to make perfectly accurate, so most people didn't do it (also it works against duck typing, like must this be an `int` or just something that supports `__add__`?). It's maybe also worth saying that if you click in the `time.time()` link in the 1st sentence of your 2nd example you'll pretty quickly see many indications that the return type is a float.

I'm (maybe this goes without saying) a big fan of the Python docs. They make simple things easy by covering the 80% use cases really well, and for the rest they link source code up at the top. Django does this too which I really appreciate. I think you generally learn to use the affordances of the internet and browsers (cafile site:docs.python.org, ctrl+f) with all websites like, I mostly don't want websites reimplementing that stuff--usually worse--for me.

I would contrast it with the Python gRPC docs [0] which are a lot more type-savvy but don't really very much context about what the methods and such do. Like I've read [1] about 4 times and I don't understand it any better than after the 1st read.

IDK all I'm saying is there's more to it than just type information. Communicating technical information to people is really involved.
Perhaps try to articulate what you find funny about the idea rather than outright mock the person.
I do not agree with these practices.

However, I do think there is room for protocols that verify phone numbers in a way. The spam and fraudulent calls that people receive and are hard to distinguish from “good” calls is a problem that deserves more attention.
Im someone who doesn’t have a Facebook account for years, and because I still have the same phone number I had back when I deleted my account I can’t even create a new one. But I still want to check it out when it comes out in the EU.

Just to see what it is like. I will probably not use it, because the lack of proper chronological feed irks me, but as an iOS developer I want to check out new apps all the time to see if they do anything different.
I made a variant that is (on my Apple m1 machine) 20x faster than the naive C version in the blog by branchlessly processing the string word-by-word:

int run_switches(const char* input) {
int res = 0;

// Align to word boundary.
while ((uintptr_t) input % sizeof(size_t)) {
char c = *input++;
res += c == 's';
res -= c == 'p';
if (c == 0) return res;
}

// Process word-by-word.
const size_t ONES = ((size_t) -1) / 255; // 0x...01010101
const size_t HIGH_BITS = ONES << 7; // 0x...80808080
const size_t SMASK = ONES * (size_t) 's'; // 0x...73737373
const size_t PMASK = ONES * (size_t) 'p'; // 0x...70707070
size_t s_accum = 0;
size_t p_accum = 0;
int iters = 0;
while (1) {
// Load word and check for zero byte.
// (w - ONES) & ~w has the top bit set in each byte where that byte is zero.
size_t w;
memcpy(&w, input, sizeof(size_t));
if ((w - ONES) & ~w & HIGH_BITS) break;
input += sizeof(size_t);

// We reuse the same trick as before, but XORing with SMASK/PMASK first to get
// exactly the high bits set where a byte is 's' or 'p'.
size_t s_high_bits = ((w ^ SMASK) - ONES) & ~(w ^ SMASK) & HIGH_BITS;
size_t p_high_bits = ((w ^ PMASK) - ONES) & ~(w ^ PMASK) & HIGH_BITS;

// Shift down and accumulate.
s_accum += s_high_bits >> 7;
p_accum += p_high_bits >> 7;
if (++iters >= 255 / sizeof(size_t)) {
// To prevent overflow in our byte-wise accumulators we must flush
// them every so often. We use a trick by noting that 2^8 = 1 (mod 255)
// and thus a + 2^8 b + 2^16 c + ... = a + b + c (mod 255).
res += s_accum % 255;
res -= p_accum % 255;
iters = s_accum = p_accum = 0;
}
}
res += s_accum % 255;
res -= p_accum % 255;

// Process tail.
while (1) {
char c = *input++;
res += c == 's';
res -= c == 'p';
if (c == 0) break;
}

return res;
}

Fun fact: the above is still 1.6x slower (on my machine) than the naive two-pass algorithm that gets autovectorized by clang:

int run_switches(const char* input) {
size_t len = strlen(input);
int res = 0;
for (size_t i = 0; i < len; ++i) {
char c = input[i];
res += c == 's';
res -= c == 'p';
}
return res;
}
The assumption about a kid for pocket money is relevant because a) lots of people doing the job of delivery papers are kids already and b) even if they're not, they're some doing the same job for minimum or less than minimum wage so presumably have similar desire or need for earning money for simple work.

And as mentioned, the person who suggested it being possible was talking about using an existing physical subscription not paying for that within the $2.5k
> Compare that to Docker's "one-container-one-process" philosophy, reinventing the wheel by awkwardly composing multiple containers.

It depends on your mental model, I see containers as chroots on steroids so the one process per container feels very natural.
...Cleverly anticipating iPhone's "you're holding it wrong" moment ;-)
It’s not clear that is still supported (or indeed legally licensed) or that it will be in the future.
A: "Of course, I understand, yet I'm not allowed to make contract changes. I'm sorry I can't help you further. Would you like a lollipop instead?"

or

A: "Of course, I understand, yet we have to follow our [most sacred] process. [...]"

or

A: "Of course, I understand, yet I don't see that button on the screen. [so it doesn't exist in this universe]"

A makes his living playing dumb 8-10 hours a day, it's their job. If B has a life, they'll probably give up at some point.
That's likely the fastest way to do that without vectorization. But you'd need to upcast 's' to an uint64 (or at least an uint32).
That means that vectorization would operate on 32/64 bit lanes.

With vectorization, I think the way to go is to have two nested loops, an outer advances by 32 * 255 elements at a time, and an inner one that loads 32 bytes, compares each character to 's', and accumulates on 8 bit lanes.

Then in the outer loop you do an horizontal sum of the 8 bit accumulators.
How do you manage to hit 5k+ plus views a day without some sort of a script running?
Indiana Jones and the Dial of Destiny De-Aged Harrison Ford
Seems very plausible, but: [citation needed]
They've launched the 'sandbox' which is the federated/decentralised dev/staging environment. So yes, you can run your own PDS (server) and have it federate with others, but it's still very much in development and 'here be dragons'

https://github.com/bluesky-social/pds/blob/main/SANDBOX.md
> I wish I could create such durationless events (i.e a single datetime), but for these to show up properly I have to set a certain duration so that the label is readable at every sensible zoom level.

Yes! The importance of an event and its duration are not connected.
Sounds like it needs an OpenNicotine patch.
> It tells the same story, eerily so in fact.

NVIDIA had $11bln in 2022 revenues from graphics vs. AMD's $6bln.
https://andreicioara.com/

I've been writing for fun a few years ago, then one of my articles got really popular because it ranked high on search engines and it still receives a fair amount of traffic.

Since then, even though I wrote more articles, I discarded them because of this new "pressure": nothing really feels as good as the articles that I already published. I have not published anything in 4.5 years, but I keep promising myself that I'd start again some day.

Any feedback or criticism on the current articles is welcome.
If I convert the unrolled-64-bit SWAR function to use 32-bit chunks instead, average runtime almost doubles, approx. 0.1s now.

Need sleep now.
It's funny how my own perceptions have changed over time. Maybe ten years ago, I would have looked at that and thought "careless user interface design". Nowadays, that very same thing somehow conveys trustworthiness to me.
It’s not different from those goals. The way that creators own their relationship with their audience is by owning an identity not owned by the platform.

If you don’t attach a domain to your Bluesky profile, you get assigned yourname.bsky.social, which is inherently controlled by the platform. I’m glad that they are encouraging portable identities.
The person you're responding to wrote about "a semantic web", not the Semantic Web. Ordinary class names, done properly, add semantics to Web pages, and this is what went on for years without Web developers necessarily trying very hard or even knowing that's what they doing—until people started abusing the medium and writing CSS compilers/automanglers and then, later, stuff like Tailwind.

Did developers adopt the ideas? Mostly no. But were they actually still doing it, despite not having bought in to the philosophy? Yes.
Is that an eBook with custom software and a frame? The price point is indeed very tempting.
enjoying something != life fullfilment

Our biology enjoys those dopamine hits
This seems like a specific application of the "inverted thinking/inversion" mentality. I once came across a post on this but can not find it now. I think it was about this article: https://fs.blog/inversion/

Edit - Or this one: https://jamesclear.com/inversion
I agree with you on the end result except I dont think any president has anything to do with that. It's little known but the president has actually little power and things move forward more or less the same regardless of who he is.

My view is that we let KYC be and once you have KYC, video surveillance is just more or less the same so why not do it.

And by KYC I mean KYC for the people. KYC for big accounts is justified. KYC for the average Joe, it's just surveillance.

Once you have that, video is just around the corner.
I actually take this as a positive, they have uploaded a shell of a 'brain', and have identified the next problem, 'weights'. Why isn't what they have done so far be amazing enough to start tackling the next thing. I am surprised that with Neural Nets being such a hot bed, the amount of money pouring into AI, and NeuralLink type research, that they would have a hard time with funding.

Watching that lego worm really zapped my brain, seemed like we were on the cusp of something. Maybe we still are, and just misjudged the time-scale on progress.
If you want decent support as part of the core offering you can pay a bit more for Andrews and Arnold, their support staff are in the UK, all technically capable rather than KB parrots, and available by IRC. Lower customer contention for their shared bandwidth so it doesn’t slow down at night is another thing worth paying a bit more for. And they have a decently technical control panel web page.

https://www.aa.net.uk/

(Satisfied customer for years).
Omg the number of times I went into a mental meltdown with text adventures over that.

I finally have the thing I need

I am in the right place to use the thing such that it will fix whatever problem so I can move onwards

How hard can it be to figure out how to ask the game to use the thing to fulfil its purpose?

Quite fucking hard, it turns out. Quite fucking hard.
> An A/C is a heat pump. Stop trying to change existing terminology

I am not trying to change existing terminology, I am using existing terminology. Air conditioners (A/C) are devices sold to only cool a house:

* https://www.lennox.com/products/heating-cooling/air-conditio...

* https://www.carrier.com/residential/en/us/products/air-condi...

* https://www.trane.com/residential/en/products/air-conditione...

Heat pumps are devices sold to both cool and heat a house:

* https://www.lennox.com/products/heating-cooling/heat-pumps

* https://www.carrier.com/residential/en/us/products/heat-pump...

* https://www.trane.com/residential/en/products/heat-pumps/

* https://www.ehpa.org/about-heat-pumps/

See also US Department of Energy:

* https://www.energy.gov/energysaver/heat-pump-systems

And most definitively of all, Alec of Technology Connections:

* https://www.youtube.com/watch?v=7J52mDjZzto
Eh, I'm a midlevel with 11 years experience. I haven't been promoted in about 9 years. I don't mind seeing younger people above me as long as they deserve it, even if they might not be at that level of capability yet.

We have a new college grad who has been at the company for about 18 months. They're going to make him our team's tech lead. He's a sharp kid, so I'm happy for him. I'm more baffled by management putting someone so green into that role. There's a lot of design experience and organizational structure/culture they don't know.

At least my current managers aren't malicious. But there are some strategy and political issues above them that I'm not happy about.
If dollars aren't freely exchangeable with crypto there simply won't be a 'large and growing' set of goods and services. Not even illegal ones!
I basically want Rust without the focus on memory safety.

As a business programmer, I don't want to think about whether something is stack or heap allocated. I just want explicit clones, immutability by default, the ecoysystem, the toolchain and dang I want sum types.
Fedora considers “privacy-preserving” telemetry
Every bot I've dealt with wasted more of my time to save the bot owners their time. Chat bots are a giant insult to users who are forced to use them.
I think at this point you are solving a wrong problem. Getting root access through X zero days exploits is not so hard. And if you uninstall `sudo` and `su`, and only login as root on dedicated TTY, you have very similar security.

I use Qubes OS for stuff like this. Way better security, no need to juggle tokens, dedicated lans and so on. Only real problem is no graphical acceleration in browser (Google Earth...)
Everything is politics.

Big tobacco employs thousands of people in the US and pays taxes. They have more senators than Binance could ever dream of. And I'm not even talking about the culture war "poisoning my body is a human right damn you liberals".
A new era of high-tech war has begun
"lack of regulatory clarity".

There is regulatory clarity now, just not the kind they want. They are no different from other financial institutions, and have to abide with all the same rules. They can't market unregistered securities to retail investors. That it is difficult to comply with because of the distributed nature is irrelevant.
Forget about the second order effects. The reason the extra instructions in first approximation do not matter is that loops typically are limited by carried loop dependencies.

Think about this: a machine with infinite execution units and memory bandwidth, potentially could execute all iterations of a loop at the same time, in parallel.

Unless each loop iteration depends somehow on the result of the previous iteration. Then only independent instructions of that iteration can execute in parallel and the loop is latency-chain bound (especially when it involves memory accesses). This is often the case. Because branch prediction breaks dependencies, bound checking is never part of a dependency chain, so it is often free or nearly so. For more optimized code, the assumption of infinite resources is of course not warranted and execution bandwidth and possibly even memory bandwidth need to be taken into consideration.
I've gone to DevonThink.

My Evernote contains 22k+ notes collected since late 2011.

Nearly all notes are images/links collected online and tagged.

DevonThink contains all the archiving tools that I wished Evernote had. It also has an import from Evernote tool which seems to be working very well.

What I am hoping is that because it is a paid for software installation and has a stable history it will not be messed with in the same way Evernote has been.

I've also exported all my notes via Evernote Legacy as HTML files and archived them.

My yearly Evernote subscription doesn't expire until start of Sept so I have time to continue migration before I leave for good :-(
The type of trust is very different though: the EU didn't get a bit if data about you out of its regulation.
The screen is off-the shelf, but the rest is all custom, including the PCB that's driving the screen, the wooden frame and the brass back plate.
I love my morning infusion of green tea with stevia leaves. I take the first cup hot and then prepare a 2 litter jug with "cold infusion" and ice for the rest if the day .

Some people loathe the flavour of stevia leaf, but I am completely used to it by now.
Today i learn you need to explain a reason to the NYT before you can cancel a subscription! Incredible!
For `tee`, because thats the most hilarious:

> If the binary is allowed to run as superuser by sudo, it does not drop the elevated privileges and may be used to access the file system, escalate or maintain privileged access.

LFILE=file_to_write
echo DATA | sudo tee -a "$LFILE"

Yes... this is how it works?

What does the author expect? Sudo executing programs with root privileges resulting in not using them or what?

I'm certain the author has bogus expectations here.
Can this screen show ads instead? I feel we're not getting enough of them.
I've been playing around with Node-RED[1] for a while and thought I would recreate this using Node-RED (also being a big fan of Node-RED). The flow[2], i.e. code, is online to have a look at (editable but not deployable) and the feed[3] is cached and updated every hour or so.

It's only a small Heroku server so it might well be down or about to crash, I make no promises!

Thanks to the OP for the inspiration, I did take a lot of ideas from the original codebase :)

[1]=https://nodered.org

[2]=https://demo.openmindmap.org/omm/#flow/a8d90fc15ab6990b

[3]=https://blog.openmindmap.org/example/hacker-news-personal-bl...
Isn't that the point of "This could be a form". The chatbot would have certain rules that it would need to follow and I don't see why those rules couldn't be translated into a form.

I wouldn't underestimate the mental capacity of scammers, it would only be a matter of time before they would know exactly how to prompt the bot to issue a refund.
LinkLab 2.0: Programmable IoT Testbed for Experimentation with Edge-Cloud
Just be mindful of the "Unauthorized Visitor Fee" --

“Whether or not related to Consumertronics business, any visit to our facilities which is not with our clear, written, prior permission, or so permitted by us based on a fraudulent, erroneous or deceptive representation by the visitor, is an unauthorized visit which automatically results in a non-refundable Unauthorized Visitor Fee (UVF) for each visitor and for each visit for which the visitor assumes total personal liability for paying. The amounts of the UVFs are set by us based on our perception of the real and potential injury to us caused by the visitor and visit, as well as the amount of our time and inconvenience for the unauthorized visit. The UVF amounts may vary between $0 and $1,000,000+ per visitor per visit. UVF fees are independent and separate from all other fees, charges and costs the unauthorized visitor may be required to pay.”
Personally, I’ve always felt that schooling is a waste of time, money, and resources. The default model of civilization is that children are absent from life. This means that kids are missing out on seeing adults interact, so they mature more slowly, and it also means that their life experiences are limited to what happens in a building. Importantly, after 18 years, people in the USA leave school in debt and are no better suited to professional life than when they entered school at 4 or 5. If I could wave a wand and changing things, I’d restructure civilization to expect children to be present everywhere with their parents or other family members, learning by being part of civilization as every young adult currently does.
A non-profit service should be expected to have better compliance than a service which has a strong monetary motivation to exploiting users data as much as possible and thus comply with privacy requirements as little as possible.
https://ednevsky.substack.com

Just starting and on my way to 100 subs. I write about the stuff that I live and breathe daily: from startups, fundraising, and AI to bio-hacking, travel, and productivity
Indeed, the blocked vectorization with 8 bits accumulators shown elsethread is going to be faster and there reducing the sum to 1 bit per iteration is worth it.
And sudo does its job, executing only that program as root. If the sysadmin turns out to not want users to be able to use all features of the program as root, that is their responsibility. Sudo is just a command executor, not a sandbox

It's essentially the same as setuid, which has a well-deserved reputation for being a very dangerous tool if used on a program without thorough scrutiny
My SWAR version almost does what your vectorization algorithm description does - just that the SWAR-code looks rather gnarly because the compiler isn't auto-generating the vector code for you, it's hand-coded in C by me and I'm limited to 64 bits at a time.
Meta released a new product that harvests user data without your permission and/or full understanding. Shocker.
What would you consider a "real production-ready environment" for the desktop?

I don't know if I'm just lucky, but my last 4 HP computers (3 laptops and a desktop) have all worked perfectly on Linux since day 1, whereas Windows has been a complete shitshow, having to wait as long as 1 year for some peripherals to be supported. In one case, I didn't care, since it was the webcam, which I never use. In the other, it was a PITA since it was something graphics-driver related, and I couldn't reliably use an external 4k screen without doing a plug-unplug-replug-just-right circus. Sleep is hit-and-miss, with one laptop being almost guaranteed to wake up and crash at night while left asleep. The desktop PC still has unreliable thunderbolt support.

Then there's the UI that lags like no tomorrow, the windows jumping around when switching virtual desktops, new browser windows never showing up where you expect them, windows seemingly in the foreground not getting input, inconsistent input field behavior, etc. Oh, and half the dialogs are still from the windows 95 era, so it's not even "prettier" or more "cohesive" than my i3 / gnome frankendesktop. Also, the start menu search, aside from being slow, has a good probability of not finding the app I'm looking for.
I would love a battery powered 32" E Ink screen that does nothing on its own, but lets me send it images to display.

But for that I guess I would have to give that thing access to my wifi? I wouldn't want that.

Any ideas if such a product exists and how one could use it shielded from the internet?
I think you can enjoy some potato chips and some short videos, but I have my doubts about how many you can consume in a row while maintaining enjoyment.

My experience is that the enjoyment one feels with the first few bites quickly transforms from seeking the pleasure of continuing, into avoiding the pain of stopping.