skysight-inc/HackerNews huggingface dataset:
She was a diver/swimmer and is also a mathematician, yes. I wish I had half her energy, lol.
Yeah, I use Stylus. My stylesheet is here: https://gist.github.com/PerpetualCreativity/68ea74ad2fb761d1...
The problem is not someone knowing something. The problem is that since 99% of people use their devices in stock configuration, "no attestation available" would be interpreted as "attestation not passed". We're already seeing that with banking apps on Android. It doesn't matter whether you've rooted your stock ROM or running something without Google services, the app will refuse to work either way.
I loved The Expanse, but the setting is very different, and I'd feel cheated if I was promised a B5 reboot and got The Expanse. So much of B5 comes down to the very alien conflicts and unfolding of the time loop.

In terms of continuation I might prefer a continuation of The Expanse over a continuation of B5 - because of the time loop, the B5 story is very closed and complete in a way that means I feel if you were to do anything else in that universe without it getting tedious you need to do something entirely different that'd pretty much need to be its own thing. But where The Expanse TV series ended they had pretty much just started a new story.
How to become a boat builder in 40 weeks
For people who are overweight, it looks like. It makes one wonder if it would only work for them, or if long COVID affects them more.
I feel like a lot of these features would bode well on the operating system level, rather than the browser level. If I’m someone who uses the same device for both work and personal use, I’m going to want more changes than just which bookmarks I use or which sites are logged in. That’s why both Windows & Macs have their Focus modes, or, for even more advanced use, different Users altogether, to separate all of my programs (or “apps”) depending on what I’m doing.

Changing the color of my browser isn’t really something I find worthwhile. Nor is moving the URL bar to the left; my monitor is more wide than tall, so it’s easier on my eyes and for moving my mouse to just look up as opposed to the left for navigation.

Competing against Chrome is interesting, although it’s still powered by Chromium, so nothing changes there. They are still at the mercy of features Google decides are worth pursuing, rather than W3C.

Otherwise… Good luck.
> The shirt isn't white anymore but turning beige. Precisely because people let a lot of Mozilla's shit slide just because "there aren't any better alternatives".

There's some nuance there, too.

It's "turned beige", in part, because people refused to use it while it was still "white". Mozilla has had to make the tough calculation of whether to be pure with zero users and therefore zero good impact, or to be beige to try to get some of these fickle users back and maybe have SOME good impact.

So, basically, people aren't satisfied when Mozilla is pure/idealist, and they aren't satisfied when it's compromising/pragmatic ("If they do that, I might as well keep using Chrome!").

I'm not letting Mozilla off the hook, or giving my blessing for every single decision that's been made. But, there's probably some utility to us taking the view of "just shut up and use Firefox" for the next N years.
Reminds me of a (Chinese, iirc) saying:

Person saying it cannot be done, should not interrupt person doing it.

In other words: believe what you will, as long as you don't get in the way of someone who's busy doing what you think is impossible.
For real? Seems to me like the brain damage and stuff from the infection is pretty simple to understand so that'd be pretty real. From a sorta minimum idea thing that seems like the most solid and easy to understand long-term damage right? Easy to test too, I reckon. Why would people think that isn't real?
I would government employees to not talk about sex, their partners, their bedrooms, and all manner of topics to 5-9 year old kids.
I've become disillusioned at the prospect, will try again when there's significant breakthroughs.
So the gripe is TLS then, because that cert is less about attestation and more not wanting Verizon et al. to inject ads or snoop your data between customer and server.

Attestation is at best a transient side effect of proving your ownership/control of a domain name...

There's perhaps better ways for you to articulate this point I think you are trying to make of "closed club" of Certificate Authorities.

That said a basic google search demolishes that point with there being alternatives to LE.

Also bemoaning the 90 day period seems really weird.
Both of those formats suck, but people moved there because the reach is strong with mobile access.
> Does far-right just mean non-progressive and conservative?

Don't know what they mean, but to me, "far right" doesn't mean that. It means the most radical extreme of the right. Just like "far left" means the most radical extreme of the left. I'd even argue that the far right is not actually conservative, and the far left is not actually liberal.
It's specifically a Safari technology. Chrome does not implement this.
this has been a point of contention with numerous hr departments that needs to hire fast "cuz investors!!11". this is the reality of life sadly
They're definitely very ... spirited. The browser is good, though, and I know some people who say it's their favorite. It's got some neat power features, and I'm happy to see innovation in the browser space. Their spaces feature is very slick and the main thing I miss when using Orion. I wish them success.
In a discussion about whether or not Trump built a wall at US's southern border one does not need to bring up Jan 6th at all.

These are in fact different tangential topics similar to how whether or not AOC likes Musk is tangential to whether or not Solar City was a dud of a company.

You need not like Bill Cosby to objectively state he had a long successful career.

This is hackernews not cable TV. You do not need to regurgitate "talking points".
Throwing away a brand almost everyone has heard of and verbs that have become common in spoken language because you own x.com is just incredibly stupid stuff.
The guy is surrounded by yes men.
> Attestation blocks users' control of their own devices, by design. A key goal is that users using modified software should not be attested as legitimate. I would like to be able to browse the web on my rooted Android phone please. There's no way any fully user-modifiable OS or hardware can ever be attested in the way these proposals intend.

Oh so that shit is why I regularly run into Cloudflare issues on my rooted Android tablet. Not enough that I have to fight cat and mouse with Play Store, Netflix, Google Pay and my banking apps, but now half the Internet. Seems like they ramped up the bullshit silently at the same time for everyone on mobile but not on an expensive iOS device.

I used to respect Cloudflare. Not a single second longer. Fuck you all for being complicit.
Maybe it's just my experience. Every phpbb community I was part of moved years away to Facebook, Reddit or (now) Discord. Some of the forums linger on, almost completely deserted by their former users :/
Is there any CVE ?
This is a weird comment.

Musk is showing himself to be, well, kind of stupid. We've seen him make moves that are obviously bad and didn't pay off. If you look a little bit deeper, you can see that he has a pattern of making bad decisions. He may also make some good ones, but isn't it more likely that "his" other companies (which he did not create) are succeeding despite him, not because of him? After all, many other smart and ambitious people work with him.
>And yet we know perfectly well that there were many people who were vaccinated who did get breakthrough infections and some of those have gone on to get long Covid, but we know that in those breakthrough cases in the vaccinated people, your chance of long Covid is further reduced perhaps by another 50 percent.

As far as I see, they aren't referencing a specific study. But they are clearly making a connection between your long covid chances and vaccination. Does anyone have a link off hand to this data?
If you really, really want to ruin an X11 session, I got you covered:

https://git.datenwolf.net/codesamples/tree/samples/X11/x11at...
The problem isn't people not using it right, the problem is that the tool can never work and just by being out in the world it would cause harm.

If I have a tool that returns a random number between 0 and 1, indicating confidence that text is AI generated, is that tool good? Is it ethical to release it? I'd say no, it isn't. Removing the option is far better because the tool itself is harmful.
Have you ever migrated a decades old application off of a mainframe?

Most of these kinds of systems have decades of codified knowledge that applies the legal requirements of many disparate jurisdictions in these systems. Laws vary from city to city, county to county and state to state, and that's only for the US. Some of these systems implement code that applies legal requirements for dozens of nations.

In general, you're going to have to spend at least a year just to document the existing system. Another six months to a year generating test cases and scripts for validation. And that's before even starting to build the new system. And that is ALL optimistic, assuming everything goes right.

I had to once write a relatively simple application for "vacation bidding" where in employees will get a position to request certain weeks off during the year. This was a legal requirement and happened to involve the company, two other companies that had been merged in and three unions. Each with different rules regarding how seniority is calculated. The contractual specifics were over two thousand pages long. That's just one very small piece of software in one of these very large companies. It took the better part of a year to implement. Now imagine taking that a couple decades later after it's evolved and migrating to an entirely new platform and paradigm. Now imagine the cost to do that.
This article does a pretty good job of explaining what's going on.

For non-technical folks, think of it as "Papers, please!" for the internet.
It is an open standard: https://datatracker.ietf.org/doc/html/draft-ietf-privacypass...

"Privacy Pass tokens are unlinkable, one-time-use authenticators that can be used to anonymously authorize a client"

People from Apple, Google and Cloudflare are all editors of the spec and eg Fastly has also blogged about it: https://www.fastly.com/blog/private-access-tokens-stepping-i...

Excerpt from Fastly's article above:

> When you put this together, no one entity can link client identity to website activity. And yet, this authorizes access to a website – all while eliminating human interactions.
Are you sure you don't just want client certs?

I can also imagine an IPv7 with ephemeral addresses based on private keys (like on yggdrasil), and a way for the browser to remember keys if wanted by the user. Authenticate sessions with the "IP address".
The Fear of Setting the Planet on Fire with a Nuclear Weapon
> You could also just emulate an entire windows OS + TPM and have the emulator do it it sounds like

Yes, but your emulated TPM is not on the approved list. To impersonate an approved TPM you would need to pull the keys from a real TPM which requires (probably very expensive) semiconductor lab tools and trashing the chip.
it isn't mentioned anywhere but it's chromium based — which is of course is practical, but I wonder how dependent on Google that makes them and other browsers using it
Each database has its own characteristics. I highly doubt that one operator can manage many different types of databases well. How are the differences between the databases handled?
I've been working remotely for nearly seven years now. I've been able to enjoy all of the typical "firsts" for my youngest two, saved immense amounts of time with no commute, and have been able to pitch in more regarding domestic tasks.

I understand and empathize with those that value face-to-face conversations in the office, but for those that don't, remote work is an incredible boon.
Once you've got that going feed the stream and control functionality to an AI. Then it can browse the web as a "verified human".
Runs on Chromium. Sorry, that's a deal breaker for me. Using Chromium gives more power to Google's quest for web sanitization for advertising.
add rustler and you can even do some systems stuff! (We use it at work)
It would essentially be the same thing that we have right now.
or a new 3D system to get a single triangle to display

The first hardware-accelerated 3D API I used was the first version of Direct 3D in 1996. It took days to get get single triangle.

Carmack described it well:

https://www.bluesnews.com/archives/carmack122396.html

Direct-3D IM is a horribly broken API. It inflicts great pain and suffering on the programmers using it, without returning any significant advantages. I don't think there is ANY market segment that D3D is apropriate for, OpenGL seems to work just fine for everything from quake to softimage. There is no good technical reason for the existance of D3D.

...

Many things that are a single line of GL code require half a page of D3D code to allocate a structure, set a size, fill something in, call a COM routine, then extract the result.
I have HN showing up in it's own tab in Feedly. Just click on the stuff that's interesting. It gives a /decent/ pulse on what's going on. There are sometimes nuggets of gold in the comments.

For actual technical content Lobste.rs is a superior source though IMO.
> Musk is showing the world that he got lucky with his previous ventures.

Or maybe he's finally stretched himself too thin, isn't getting enough sleep, etc.
lol, I like how their homepage says "Join Windows Waitlist" when I'm on Linux
Yeah, I'm not reading all that. ChatGPT, please summarize this bombastic article
DiRT Rally 1 / 2.

I started with controller and moved to a projector & wheel for my setup, but after years of practice the sim was good enough that I eventually bought a rally car, assembled a rally team, and placed runner up to the eventual class national champion in a full stage rally my rookie year.

One of my favorite memories was having an "off" that debeaded and blew out a tire. While driving up to 60mph on the rim to finish the stage I thought "wow the sim was really spot on with this experience"

I sold the car after getting my ARA "pro" license though, they don't simulate how you have to light dollar bills on fire to fund your hobby, nor the very real risks of serious injury or death.
> That said, it's not as dangerous as the Google proposal, simply because Safari isn't the dominant browser. Right now, Safari has around 20% market share in browsers (25% on mobile, and 15% on desktop), while Chrome is comfortably above 60% everywhere, with Chromium more generally (Brave, Edge, Opera, Samsung Internet, etc) about 10% above that.

I don't agree, in fact I think it's equally as bad for Apple to do it as Google. Apple has completely let us down. If Google forced it through but Apple refused, it would never be practical to enforce it. The numbers may not be as high, but they're plenty high enough that you couldn't cut all iDevices out. Apple and Google and Microsoft are the only three that really matter.
"Arc is the Chrome replacement I’ve been waiting for."

I can't leave Chrome until I can replace Google's single sign on
> Is Mozilla failing?

Firefox's usage dropping from about 30% down to likely less than 3% today, with almost no mobile usage, should be seen as a severe failure.

This failure isn't just about the product's uptake, too. It's also about the Firefox developers losing meaningful influence over the way the web evolves.
> Arc is built from the ground up to be private and secure. We don’t know what sites you visit or what you search for.

Immediately following this is a form for me to enter my email address so I can receive a download link. Sorry Arc, that’s not a trade I’m willing to make.
I read "preppies" as something very different from what you intended, at first, and was really confused, but also got some really funny mental images out of it.

Popped-collar-lacoste-polo madras-shorts-wearing dudes whose only survival skills are knot-tying, trying to get by in the apocalypse. LOL.
It would be nice if such articles had at least a few paragraphs on the psychology and sociology of people who consume the poison du jour. Maybe because it looked cool, and they're dying for that? Vs. the article's "no, poison, don't, bad, stop, ..." just feels like filler.
> but it hasn't been sustained.

https://fedidb.org disagrees with you. Numbers are still going up, quite strongly.
Eisner Awards Winners
Agreed. I have a friend who has Myalgic Encephalomyelitis aka Chronic Fatigue Syndrome, which has destroyed her life, turning the most energetic person I knew into someone who cannot walk more than a block a day. Her ME was likely triggered by the H1N1 flu in 2009. It's too early to tell whether this is the same as long COVID, but it is certainly suggestive.
Would be nice to have offline full-text search of favorite HN stories and comments.
The TPM gathers various data about the system, including if any user process is running with access permissions that could tamper with memory space. It trusts the OS and drivers to do this because the entire stack is cryptographically verified from boot onwards. If the environment is one where an app could be spoofed, this will be included in the attestation request and the attest will fail.

You might be able to get around it by finding a zero day in the Windows kernel, but as soon as Microsoft discovers and patches it their attest server will stop providing attestations for devices until they install the OS update and reboot to reestablish a trust chain.
It unfortunately requires an account to use the browser at all.

A browser, un no circumstances, should be log-in walled.

Seemed like a great user experience as a browser, but unfortunately I uninstalled it as soon as I launched it to a sign in screen.
When students try to evade plagiarism detectors, they will swap characters like replacing spaces with nonbreaking spaces, replacing letters with lookalikes (I vs extended Cyrillic Ӏ etc), and inserting things like the invisible 'Combining Grapheme Joiner'

IMHO it isn't a feasible way of watermarking text though - as someone would promptly come up with a website that undid such substitutions.
I like how people take this in different ways. For me, it is simply - compile often. Although, sometimes if I'm feeling greedy I won't compile for quite a long time.
Also, millions upon millions of people contracted COVID. Hence a higher number of long-COVID cases. Research into this is a very good thing so.

That the media is over selling it, sure they do. Heck, we had almost two straight days of life coverage of lionesse-turned-out-to-be-a-boar in Germany. At the same time there were elections in Spain, a vote on the justice system in Israel, among other things. Those two alone could have deserved some well researched articles and background pieces. But I digress...
The Broken Education System: How FluxyAI Revolutionizes Learning
Education is the foundation of a progressive society, shaping young minds and preparing them for the challenges of the future. However, it's no secret that the current education system is flawed. From prestigious institutions like MIT in the USA to small schools in India, they all are making the same mistakes.
I started a library for this a while ago (using rich):

https://github.com/mahrz24/netext

Recently I tried to adopt it to textual as well: https://twitter.com/mahrz24/status/1679816272509386753?s=46&...
I think most likely it will be something like private/public key challenge I don’t think you can just tweak it from your side, but I could be wrong.
There's also the convenience issue. If you work multiple low skill jobs just to make ends meet, you might not have the time to turn fresh produce into a meal. If you're trying to limit yourself to foods that require limited/no preparation and are cheap, you do end up getting a lot of unhealthy options that fill that niche.

You can get around this. I've personally spent years of my life eating just rice and beans with a bag of frozen vegetables. You can get a really low priced rice cooker ($20-30) that you can spend <1 minute setting up (it'll steam the veggies while it cooks the rice) and then let it run while you're in the shower or doing something else. In the end you get a reasonably health albeit bland meal with less time spent prepping than actually eating. I get why it starts to make sense to just grab a $5 burrito at taco bell as a meal when you're rushing to your second job though.
Just Mandate the Good Ideas™

The comments suggesting people would just decide to have fewer sugary drinks to save money seem to be forgetting how humans act when something they like is made less available. It will be a wake-up call to exactly no one. Cheaper brand-X sodas would fill the void left by more expensive ones, enterprising individuals might even make their own sodas or switch to lemonade, etc. The perceived scarcity might even lead more people who don't normally drink soda to start.

I'd think that incentivizing the proliferation of taste-alike low/no-sugar sodas would have a much better outcome anyways. Tax credits to businesses that adequately serve and promote low-sugar sodas could be a good start.
It's a weird mental block too - learning a language like Elixir, being so well designed and documented, is as comfortable as it gets.

Devs we hire without direct Elixir experience pick it up really quick (within a couple weeks). The energy needed to "get good" with Elixir is really not much considering it provides veritable super powers on the backend and introduces a whole category of concurrency concepts that are not easy to grasp elsewhere.
Flowman: Declarative ETL framework and data build tool
Turns out to my surprise I like going into the office, but definitely not every day.

Also I've only once had a commute longer than 20 minutes and it was such a burden (even though I carpooled) I gave that up after less than a year.
Makes the move by Germany of closing down nuclear plants look even dumber.

A country that had literally dozens of nuclear plants is now one of the biggest producer of CO2 emissions.

Real geniuses.
I was about to post this comment. I can't BELIEVE people are still hung up on the Mr. Robot thing. This is exactly what we're talking about in this thread when we say that HN has a strong anti-Mozilla bias for some reason.
Livewire v3 [video]
Being wildly successful doesn't mean the idea wasn't bad. There's more than money and success that some "smart" people think of when complaining about ideas on here.
This sounds like a technology enabled rare "phishing" scenario rather than major security vulnerability.

It requires tricking the end-user in many different steps.
It is not major by any means.

1. The user must have motivation to download the malicious app.

2. If it is a copy of other app, it must trick the end-user to believe that it is actually original. Chance for copy is low due to App Store policies.

3. There must be a valid reason for the end-user that the login to Apple is necessary.

4. The end-user must believe that the Sign in alert originates from the system

5. The end-user must give permissions to use Face ID or Touch ID.

6. The end-user must not wonder about double-login, since I believe that it must happen before Face ID can actually be used for logging in?

> 2. There is no security measure to confirm that Sign in Apple ID with Face ID is called from within a trusted app.

It is up to the end-user and App store to decide, unfortunately. API must be accessible for Apps to be able to use it.

> 3. There is no security measure when you change 2FA information, even you aready open AppleID's 2FA.

That is the problem for all root level security features.