skysight-inc/HackerNews huggingface dataset:
> My main point here is that it's OK to admit at one point that the tech you used for a while has outgrown its usefulness. I understand and recognize some of the downsides but to me they are overblown.

My entire complaint is just that you want to say it's outgrown it's usefulness. That is such an absolutist view. And the fact you are even bringing rust into this is crazy. I know C, C++, ASM, GO, and a few other low level languages. Rust is harder to learn than all of them, even ASM. And Rust in some ways can be a dumpster fire when you have to unwrap everything. A very intelligent person can take months to be comfortable in Rust or be similarly comfortable in GO in a couple days.

It's such a dogmatic view to say Ruby has outgrown it's usefulness, that's fine though you are entitled to it. Ruby isn't going away, it'll still be there and I'm sure people will continue to make money with it.
I would assume this is possible. If the gov wants to bad enough, I'd guess most OSes have a way to remotely control and observe. A state has resources to research 0days, bank them, and use them as needed. But probably not worth using unless it's for a high value target.
Flickr Foundation is building a new bridge between Flickr and Wikimedia Commons
A healthy percentage of the open source projects companies I’ve worked for have used and opened PRs against I would call pretty good looking. Ruby on Rails was always nice to read through and well documented. I also find a lot of datasheets and RFCs to be highly elegant and beautiful, if not a bit dense and verbose. It just depends sometimes, what makes something like art beautiful.

I disagree strongly that “the actual way software is written …”, though it does feel like trying to write clean code is an uphill battle sometimes.

Back to the shop analogy. Cleaning up oil spots and maintaining well polished tools requires time and care.
You know, I always thought a lot of the abstractions we add were just pure resume-driven nonsense too, but I guess it is better than having engineering minded people think up better ways to liquify other humans.
> And many of those costs have a nasty tendency to remain hidden until they suddenly don't, and at that point, people often already expended inordinate amounts of resources on them.

Any business that employs software developers knows exactly how much it costs to employ them. If that math doesn’t work then the software developers loose their jobs. This basically establishes a baseline for “value” that must be delivered, at minimum.

Above the baseline, software devs are left to their own devices: There will be no hard accounting of weather development effort is “worth it”, rather it’ll mostly be about whether people feel like it was. (This is sort of the origin of “too much money spoils things”.) As long as the effort doesn’t destroy everything, it can be argued that it was a success!

So, the “hidden” costs are actually “bearable costs” because the business is just fine. The costs are “revealed” only when they’re no longer bearable. Ironically, well designed software “hides” the costs much longer than poorly designed, so what is missing is that we don’t have a great way of assigning value to in-house developed software that “just works”. Developers don’t even really think about it much because they get paid for writing code.

I think that’s why the advice…

> Use what already exists

… becomes very hard, in practice, for devs to follow, even though it’s excellent advice. It’s a problem for management to solve.
Ignore the sour grapes. Yes, Docker is constantly evolving. But the title does say "in 2023."

I, for one, need tutorials like this, and I am grateful for it. Devs who have been using Docker for a while have forgotten how intimidating it is for those of us who have our entire dev tooling built around VMs (orchestrated with vagrant in my case). You need just enough hand holding to get you up and running efficiently, and this tutorial does exactly that. It gets you over the hump a lot faster than trying to follow years-old and incomplete advice from Googling.

Yes, a thing or two may be deprecated. So what? We are used to that. But 99% of it still applies.
If you are in Europe then the Eurosport sub is only €25 for a year. No ads and you also get Wimbledon (and the other majors), Women's Football World Cup, Olympics (not this year of course) etc.
They have no plans for now...
Yep, same here.

Immediately saw a sanctimonious GaryVee thread and was instantly turned off.

It’s all so cringe, as the kids say.
That seems to be the logical conclusion of commodifying literally everything. Now that everything is commodity every interaction is a sales pitch.
Police is currently unable to handle personal automobile use, given how lax enforcement of blatant traffic violations is.
>This is a feature requested app developers due to the legal requirements when licensing content such as movies. Movie studios don't want people streaming or recording their movies so app platforms need a way to surely show this content.

Of course, but if our industry had any chutzpah, we would have simply said "no, that's impossible" and continued to distribute operating systems where the user has ultimate control over the hardware and recordings. If movie studios want people to watch their content, they'll have to accept the risk of piracy. It's not like clipping and recording from your phone is how the pirate rips appear anyway. Even imagining that a movie was released only for one model of super-secure phone, someone somewhere will either break the security or simply stick their phone in a dark box and record it with a camera. Once they've done so, they can share the un-DRMed version online on pirate sites and everyone else can download it.

As long as the analog hole exists, DRM is anti-consumer without reducing the likelihood that copyrighted content will be reshared freely online.
That's what the year helps signify, "good right now".
This sounds really cool. I predict it will consume a good chunk of my free time in the next week or so.
> performs the same/better under Linux

...yeah, I was wondering that too. This seems like a job for a Gentoo system, compiled from the ground up with "-march=native". Would love to know how that would turn out performance-wise, in comparison to Windows.
Also rustup. If you send me a repo with a cargo.toml which references a specific version of rust it'll download it on the fly.

Its insane that nor Node nor Python have a first class version selector.
Horses?
Exactly, and we're talking about governments, not competing companies. "You wanna sell phones or build infrastructure here? Fine, here's a truckload of appliances to put in the middle of each pipe; no questions please". There are many ways a government can ruin businesses even without swatting their offices or raise public anger, they just need to apply different bureaucratic pressure where it is needed so that for example a permit, tax installment or reduction, whatever that otherwise would take 6 months will require say 5 years or more.
That is the whole point of GPL — to incentivize contributors for the common good.

Goodwill might work for individual contributors, but it’s not enough of an incentive for organizations.
I'm actually interested in practical examples of alternatives to Name+SemVer for

(1) data analysis oriented code
(2) code to run experiments (e.g. psych paradigms)

I often find that in such code, forking is rather more common. That is, the code bases become wider rather than deeper. For example, we might run several experiments that have a strong resemblance to each other, but have any number of (experimentally relevant) tweaks. Within each fork, I rename, and restart the semantic versioning.
I've only read the first chapter, which is the general presentation of Docker, and it's awful. First of all, it's very long, with many words and a very low ratio of signal to noise.

Many texts look like they were copied from a Docker commercial. For instance the mention of Docker Swarm won't mean anything to someone that doesn't already know Swarm. And there's no distinction of main components against optional components like Swarm.

The final comparison to other container systems is pure junk. It should at least mention when the containers are compatible (like Podman) or not (like LXC).

I'm sorry for the harsh words. I wondered if I should keep silent or prevent other people from wasting their time with this. The low quality had me annoyed enough to opt for the latter.
Death of a radio host: corruption, lies and revenge behind the killing of Zogo
That instinct seems to go away for ~5% of them when you put them behind the wheel of a automobile.
According to their (tst-reflect's) README, tsc doesn't support plugins. The plugin support comes from a fork called ttsc.
Nowhere near as pricy as they were - I've heard tale you can get a new zoe for £16k if you look in the right places. Certainly secondhand values have dropped a lot in the last 18 months.
There are plenty of more affordable options but why would the average household be buying new anyway? The average car on the road is over 8 years old.
Maybe you should him on try Rab C Nesbitt next :)
>By this I mean directly donating to developers without trying to take over the projects.

FAANG are not charities. If they are sold a license for the software for $0, then they don't have much of reason to pay for it.
What's the path of least resistance to find RCE on baseband?
The ML community has horrendous engineering practices. Everyone knows this. This isn’t the fault of Python, nor should Python cater to people who build shoddy scaffolding around their black boxes.
Is this a gripe with the verbiage used or is this a knock to the library itself?

I have been playing with langchain and llamaindex a bit.

I like the data loading abstraction and am very curious why you say it doesn't work? It uses ChatGPT for the reranking.
First, i always admit when i'm wrong, you can find plenty of examples on HN :)
I don't go through life pretending i will always be right, and I try to learn from the times i get it wrong :)
As for what will happen -

Honestly - it's hard to say.
I think it will be that some people in the government asked for things they shouldn't have (let's ignore if they are illegal things or not or whatever for a second). The government is big. My experience with any large company discovery is that somebody somewhere says or does something stupid. It's hard to believe that won't be the case for the government here[1] :)

I think some people take the view that's okay (despite imbalance of power), and others think they should only be allowed to ask for things that are affirmatively okay.

Historically, the court result has been the former, though usually it's closer to "state/feds pass law saying x, ask you to do x, law gets overturned as not okay".

I think it may be decided to be closer to the middle now if it makes it to SCOTUS - but i'm not sure what that looks like. It's hard to come up with bright line standards, but bad facts make bad law - if the there are senior officials ordering censorship, ....

I don't think folks will go all the way to saying the government may not ask for things that later may be decided to be illegal to ask for.

[1] I would personally be much more concerned if it was senior officials vs random worker bees. Unlike some corporations, the government is actually pretty darn good at retaining evidence,etc. So if senior officials ordered it, the likelihood of a record existing is much much higher than "CEO who verbally tells a junior software engineer to do something bad" or whatever.
One of the interesting quirks of living in America is how expensive everything is while seemingly paying little to the workers who provide it.
Read the post that started this, "The issue is not so much the sign being held by a young activist, but from all the other 100's of k's of scientists and experts behind it."

Those "100's of k's of scientists and experts" are completely happy to abide sensationalism, and that's the problem. It leaves me with 0 confidence in anything of what's said, and climate papers are written, in my opinion, in an intentionally obfuscating fashion. I can comfortably read the latest papers in astrophysics or quantum mechanics, yet I find climate papers completely, and needlessly, obtuse.

So I clearly cannot trust what anybody says, I cannot comfortably read the papers. That leaves me left to look at what I've seen happen over the past ~20 years (and what apparently happened in the 20 before it, though that was before my time) and assume that will be the ongoing trend. In that case, climate change is really just not a particular concern for me anymore.
Any broadband chip since 3G ships with proprietary drivers which have backdoors. I tried to build an open phone, worked for one of the major telcos, and could never get around the driver issue in trying to make an open phone.

BUT sophisticated attackers like US or Israeli governments (and I assume Russian or Chinese but I don’t have direct experience with these) don’t need these backdoors, getting anywhere near your phone is enough to root it to allow installation of spyware, according to my CSO who worked in naval intelligence. There are simply too many vulnerabilities for there to be a hardened device in the consumer space. Some are better than others (Apple) but as Bruce Schneier says, if you are worried about this sort of thing you really have to be totally disconnected from the internet and exchange encrypted physical media.
Because something annoys you, it's destined to fail? I'm not following the logic.
You make a good point, but everything seems very busy at restaurants and shopping centers to me. Many times, I have wanted to go out to some restaurant and found that it was booked out for weeks. So I’m finding the “low volume” idea hard to believe. It may be that there are fewer restaurants now than before, but demand is certainly there in my area. Some people are stretching their credit cards[1], but also people saved up while the pandemic was in high gear and that savings is not yet exhausted for everyone.

[1] https://www.investopedia.com/consumers-record-credit-card-de...
Lots of steganography techniques are mandated by the government agencies, such as microdots printed by inkjet and laser printers that can uniquely identify the printer, ADC and codec chips that can add modulation signatures to voice calls and video streams and so on.
In this case, he probably used TOR - which is notoriously infiltrated by government server nodes- and a SIP relay that might be hosted on Russian servers but might send hidden telemetry that the operator might not even know is going out.
Great, so we just gotta "ship your bare OS" to prod.

That's exactly what a container is for.

Container is just a logical isolation tool that works at the distribution/deployment level.
So I agree with part of that and disagree with part of that.

The part I agree with is that giving a thumbs up too the specific request to “Please confirm terms of durum contract” is acceptance.

The part that doesn't sit well with me is the argument that past performance of delivery alone validates a contract.

I think I agree with the decision, but it is because the farmer affirmed agreement to the terms each time, not because making a delivery implies that existence of a contract.
I find it to be more nuanced. Your code has to work correctly in a bunch of scenarios. Some are very simple to see, others are nuanced corner scenarios.

A good developer will write code that passes many of these scenarios, but even the best will miss some. And an inexperienced developer might write code which passes some basic scenarios.

So, “this code works” is really a range, not a binary condition.
Are basebands not sandboxed at all? There's no conceivable reason that my baseband should be able to access my camera, microphone, or the contents of my display in normal production use, as that's all filtered through the CPU typically. Why not have an MMU that limits the baseband to DMA in a specific chunk of memory and reduce the attack surface dramatically? It's not just effective against nation states. With such a protection, 0-click OTA attacks targeting the baseband would have a much smaller blast radius.
> People ask him "Option A or Option B?" questions and he replies "yes"

He's probably just dragging his feet.
TC39 has a famous "don't break the internet" mantra. Even the leeway that Python has with deprecations/features JavaScript doesn't. It's versionless, code automatically gets updated to whatever the browser is using.

JavaScript evolves quickly but so does Python!

(Note that your approach is exactly what they said in the 2 to 3 transiton btw with a special tool that didn't work too well)
Asdf makes all of this pretty easy. For consulting I often need multiple versions of everything to match client projects -
Just install them with asdf and put a .toolversions file in the project folder with the desired tooling builds.
Sure, now imagine the backup system was discontinued twenty years ago and not tested since then.
It reminds me of the glass vs plastic phone backside arguments. Glass is more fragile than plastic and will not absorb shocks. It is also heavier and harder to replace (most plastic backsides can be removed with a guitar pick).

But glass is considered premium.
While not technically eInk, Pebble has an app for this, it's one of the reasons I keep using my Pebble (with rebble.io) and have a stack of backups.

One thing to keep in mind, unlike a recent Apple (or Android?) watch, they do not lock after removal from your wrist, so your secrets are all button press away while you're in the shower/sauna/swimming.

I store mine named using a simple/stupid braincipher instead of straight up naming them "BANK 2FA CODE".
Good etiquette (social obligations & kindness) and license requirements (legal obligations) are different.
I'm going to assume that, not being an Intel processor, it won't have Intel Management Engine. So where does this device land privacy-wise? Can this device safely be recommended for highly privacy-focused people who might otherwise choose "respects your freedom certified" [1] legacy hardware? Or does it have something similar to IME with similarly negative privacy implications?

[1] https://ryf.fsf.org/
Soros trutherism is a very loud dogwhistle. Maybe you blew out your eardrums blowing it in your echo chambers all these years?
The way Apple have implemented region localisation on the App Store is very bad. You basically have to nuke your whole account to change regions, and that includes losing all your subscriptions (if you have any annual subscriptions that’s just too bad for you). So if you spend time between two counties, and need a region locked app in each one, there’s actually no workable solution.

Your explanation for the anti-screen shot DRM doesn’t hold up very well either. I don’t know of any streaming app that doesn’t also have a website that I can take screenshots (as well as full screen captures) on, so it’s clearly not a content licensing requirement.
> we deprecate it as legacy and replace it with something new. Rolling green fields forever!

That's a good way to put it. The nuance is that, most of the time, "deprecated" means "not going anywhere anytime soon, so now we have 2+ subsystems for the same thing."

You really do need someone with a grand plan to keep this in check.
any browser plugins do this for fingerprinting mouse movements?
Donald Knuth intentionally chose this versioning scheme to point out how much he trusts his software to never change.
>Europe isn't overflowing with gigantic tech companies nor defense contractors that would have what you're describing going back to the 1980s and 1990s.

That is completely delusional.

>You can likely count them on one hand, given how few there are to begin with.

Giant (or just large) Technology/Defense companies, a random sample:

Siemens,Bosch,Phillips,Renaut,Airbus,VW,Thales,Thyssen Krupp,Rheinmetall,Saab,Dassault,Zeiss,ASML,NXP,BMW,Mercedes,Liebherr,MBDA,...
> They have to guess about negative examples but it’s just a guess.

For those who don't use TikTok, there are three negative signals that you can send.

* (implicit) whenever you scroll to the next clip before the current one has finished

* long pressing and selecting 'not interested'. When you do this to an ad, you have to select a reason.

* reporting (flagging) a clip for a specified transgression.
I use direnv and pyenv. When I cd to a repo/directory, the .envrc selects the correct Python and the directory has its own virtual environment into which I install any dependencies. I don't find that Python grabs packages from all over the OS.
Discussed over the past couple of days¹. And even with the less inflammatory title from LWN, it went… er, well.

¹ https://news.ycombinator.com/item?id=36630032
> imagine the battery life could be better under Linux based on my experience with Windows 11 on my own laptop

God, I have experienced the exact opposite with Linux on laptops. Battery management is so bad I am considering moving to a Macbook.
Sounds just like Twitter. Just more garbage.

The only thing I ever found useful on Twitter was notifications from government agencies. Mostly recently, changes in ferry schedules in NC.

I feel like I need a “Twitter for governments and public services”. Verified accounts and none of the influencer garbage.
> It's just different bluechecks now.

No, the bluechecks now are simply much worse. Previously, status was a selector, which takes into account the preferences of many, many people. Now, the primary selector is being an Elmo stan with $8. I've little interest in hearing from these people.
ACC with LKAS is not the same as "you don't need to keep your hands on the wheel". AFAIK, It's only GM (Super Cruise), Ford (Blue Cruise) and Mercedes Benz (Drive Pilot) who have ACC systems that are designed to be completely handsfree on select motor ways.
Very few in the US (the MachE mentioned in the article is one with BlueCruise, SuperCruise from GM exists as well) and only one in Europe.

From the article: “…become the first to offer hands-free driving capabilities on roads in the UK – a first for the whole of Europe, as well.”
Here is a link to Vault 7 on WikiLeaks:
https://wikileaks.org/vault7/

Here's a link to Wikipedia's article on the leaks:
https://en.wikipedia.org/wiki/Vault_7

The only one that mentions televisions is Weeping Angel (cool name) which attacks Samsung F Series Smart Televisions. Likely they can indeed target other devices but I'm not sure I'd go as far as saying that Vault 7 shows that they can target "virtually all smart devices".

Or am I missing something? Can anyone provide more concrete evidence?
So I'm building a build system with a permission system.

The permissions are checked at runtime and each time the permission is needed. (For example, if a build script tries to phone home twice, the build system will run the permission checker twice.)

In addition, the permission checker will have the option of delivering fake data and making the requester think they got permission when they didn't.

This is why I added that, even though it is much more complexity.
We can argue about whether data-driven ads work for the OP or for buying an extra mattress, but in aggregate they absolutely work. Contra OP's anecdote, if FB ad targeting stopped working, then FB would notice the difference in engagement within a day - probably within the hour.
In other cities it mostly happens in the 'bad' parts of town so it's easier to avoid. In SF, it happens frequently at the most visited tourist spots and most expensive housing areas--Alamo Square, Twin Peaks, Fisherman's Wharf, North Beach, Marina are all now targets because criminals know that's where the highest concentrations of wealth are and there are no consequences.
they target idiots.