skysight-inc/HackerNews huggingface dataset:
Funnily enough I've recently implemented [0] a little proof-of-work generator (or more specifically a time-lock puzzle [1] generator), which is the base building block on top which something like this can be built.

It's a very cool idea imo, you generate a cryptographic puzzle that's cheap for you to make, cheap for you to verify if its solved, and potentially cheap-enough for legitimate users to solve, but expensive-enough that users making too many requests would find solving them prohibitively expensive.

I wish something like this was bolted onto email protocols, it would just cost more to be a spammer than it'd be worth it.

Interesting how mCaptcha seems based on sha256, I don't know enough but it would be worth checking how much the algorithm can be sped up with (already existing) dedicated ASICs, if the attacker can solve the puzzle like 10000x faster than normal users you just can't crank the difficulty of the puzzle high enough and for motivated attackers this becomes basically useless. Basing this of on repeated squarings, like the RSW paper on time-lock puzzles did, seems potentially better.

[0]: https://github.com/fabiospampinato/crypto-puzzle

[1]: https://people.csail.mit.edu/rivest/pubs/RSW96.pdf
> by Radically Open Security

HN title stripping strikes again, OP can you please fix the title to correct the company name?
You’re getting downvoted by people who never bothered to read “Manufacturing Consent”.
I think the "mask to protect others" message was a mistake. If you mask to protect yourself you can use a mask with an exhalation value, which is more comfortable. I suspect a lot of opposition to masks is from people who only tried valveless masks. And protecting yourself still indirectly protects others, because you can't infect others unless you are infected.
Is that an option? I've been paying 5 euros a month for a number of years and probably use it for 10 minutes a month, on average. I would love to just plunk down 20 euros and be good for the foreseeable future, if it was a couple cents per minute.
People are not the same as the things that they make.

People didn't like Germans during WW1, so they threw away Beethoven's music. How dumb is that?

The Nazis invented missiles during WW2, so we should perhaps throw away all of our Space technology? How dumb is that?

Some guy that's not very nice writes a good browser, so perhaps we should throw that browser away? How dumb is that?
There are a number of claims of unique Chinese hominids and they’re typically related to the “multiregional origin theory”

https://en.m.wikipedia.org/wiki/Multiregional_origin_of_mode...

This theory holds that humans in different parts of the world are primarily descended from local hominids vs the commonly accepted theory that humans are all primarily and recently descended from a population somewhere in East or South Africa with a small amount of admixture with local hominids.

Most people consider the multiregional origin theory highly motivated reasoning and also completely garbage science.
The first example given in the post involves consent banners and I’m surprised they don’t even mention the option to not track users in the first place.

Unless your website absolutely needs to fingerprint/track users, it’s better to simply opt for a solution that doesn’t require a consent prompt at all.
I think the point of the J-CIA is to replace a failing CIA in an actual C64. However, that's not what the title of this HN post is about, so I'm not sure what is going on. Regardless, I think making a replacement CIA is very cool, noble even, and I would be happy to buy one if a CIA in my Commodore failed, if it meant having a useable C64 instead of an unrepairable one. But I do agree with you, that building a completely new C64 out of FPGA replacement parts would feel very weird to me. I wouldn't feel like it's the real thing, even if it behaves exactly like one. The big advantage though, if it's a 100% faithful reproduction, would be that it physically behaves like the real deal, meaning you can plug in actual cartridges, build things that connect to the user port, etc, which are things you can't do on an emulator. For now though, I'm just happy mine still works (even though I kinda want to get a C64C instead of my bread bin).
No price information upfront, only shown after a lengthy quiz to ensure proper sunken cost while making the decision wether to buy or not. IMO disgusting.

Also, that fake loading bar while "building your personalized program" is cringe.

You had an opportunity to make your part in making the web a nice place again, yet you failed.
They are not but that's good memory management, isn't it? :) Most are cached on disk and freed from RAM.

I'm not dismissing the tests in the article but it's just not relevant to my real world usage.
What’s wrong? It’s a demo.
Title is missing the word "Radically". I didn't know "Open Security" but "Radically Open Security" is the place I've written a thesis at

Edit: u/progbits is 1 minute faster than me https://news.ycombinator.com/item?id=37060828
Exactly mt point, no point in buying a bunch of Xilinx FPGA's and calling it Commodore 64.
Okay this is cool as hell! I love the amount of practical engineering that went into this. You have earned yourself a new subscriber.
I'm a developer and I require automated testing even on my personal projects. Every change I make, I _know_ it will not fundamentally break for my users. I never manually run through to check things before release, tests cover it. (Yes bugs happen; that is different than releasing code that can't talk to the database because you can't be bothered to check that the app works at all)

If you are not pushing for automated tests from the start on a project that will be released to users, I think you have some professional maturing to do. It can be small and simple but it must exist.
Nice theory, but it is overfitted to a broad category of all software and a product that is thriving shouldn't be conflated with a product that is improving.

Some products with software continue to "live on" successfully and thrive, without updates. Think of a digital alarm clock who's goal was to help typical users to wake up on time most of the time. If you ship a product that does that and it isn't being updated, is the product really dying or doomed to failure?

No alarm clock will ever wake everyone up on time, but we can always strive to get closer to that goal if we chose to set that goal. An unreasonable goal could cause unnecessary bike shedding, etc.

But a simple pacemaker for the heart, the goal is closer to the idea of helping as many people as possible, rather than most. Hopefully we write good software and we go 15 years without needing an update. I think that is better than bad software that has to receive more updates. Which software is more "alive" and "thriving". Is the good software with no updates for 15 years really "dying" since it isn't "improving"? Again, thriving and improving shouldn't be conflated.

So, a product setting appropriate goals helps determine how much maintenance is actually necessary and some goals can be met without requiring any future maintenance. Other goals may benefit from frequent maintenance. Some products can thrive without improving. A product's goals determine's the importance of improvements.
I fond it works to have a division of labour between builders and maintainers. Just like in property management, the different phases need a different approach.
Hot damn this canonical dude is more full of shit than I ever possibly could have imagined lmao. I love Linux, I really do. I enjoy writing software for ig as a career choice. This has nothing to do with my love for Linux lol. But wow.
If you're buying it as a historical artefact and not to use it, then surely it doesn't matter if it's non-functional either? In that case this isn't for you, and that's fine, but arguing it's not a Commodore 64 any more is sophistry. It's not an "100% original unchanged" Commodore 64, sure. Very few people care about that.
It is the real thing. It does the same thing, just using different technology. It's a fully digital chip, so it doesn't matter if logic is fixed on the die or "fused" on FPGA. It does the same function.

The logic could as well be implemented in software - the reason it isn't and it wasn't in the original C64 is because it was not possible then. Programming this logic on a CPU would have required a very fast microcontroller, that would probably be more expensive than the whole computer. Even today, not many MCUs would be capable of emulating the CIA and keep up with all the timings. Mind you there is a difference in creating a software emulator that runs within the host computer versus emulating a chip that responds in real time to the electric signals.
Also similar wehatecaptchas.com
The main reason he's targeting this site is because its users archived evidence of his sex crimes.

He's not doing this for any grand moral reason, it's driven primarily by self-interest.
Doesn't need to be a billionaire in USD, if he grinded he could have a penthouse in the Congo. Wealth is relative to your surroundings.
That’s not what I wrote, I wrote there were some similarities and listed them, and you presented different differences and discredited those differences as an attempt to discredit me and the entire concept

That is called a strawman argument, do better.
it helps a lot to read everything because it gives you an idea of what scenario creates what type of problems, those tend to be fairly stable across different environments (like too much crunch time => burn out) and there are general guidelines that make sense (celebrating success etc).
Otherwise we may end up repeating the errors and having to "reinvent the wheel" which isn't the best strategy with humans.
But yeah if people are looking for a todo list called "being a great manager" it's going to be a hard one to find.

ps i also forgot local culture (i have worked in different countries and it has a HUGE factor in the equation)
yes, I have heard it back in the day and it came to mind, Dave is very very good.
It appears in this audit. They only reviewed test production servers.

Playing devils advocate, what would be stopping Mullvad from providing the Open Security team with a version of Mullvad stripped of logging features? I hate to be this skeptical, but shouldn’t an actual audit review customer facing servers (within bounds to prevent the auditors from logging info).

Maybe I’m wrong someone pls lmk. But I’m not convinced a test of this calibre demonstrates Mullvads claims of no logging.
> Soon, we’re also planning to open-source the whole product, WordPress-style. Anyone will be able to deploy their own version of Gumroad, make the changes they want, and sell the content they want, without us being the middleman.

Did he eventually opened up Gumroad? I'm seeing https://github.com/gumroad but I'm not sure if it contains the code required to run a clone of Gumroad, or some ancillary projects that can't replace the product on their own
It's prety easy to do this on Organic Maps. Open app, search for destination, select "Route To" and then select bike option.

Searching isn't as accurate as Google and I would guess the routing doesn't consider the same real-time data as Google does, but in terms of UI at least it's easy to get there.
Insane. I don't change jobs often (last time was 15 years ago), but the last two both worked pretty much the same: application, weeding interview, serious interview, decision. I've also sat on the other side, and we ran it the same way.

I can imagine a huge company throwing a third interview in there, because HR has to justify its existence, but more than that is abusive and - more importantly - useless. Actually counterproductive, because talented people are not going to put up with it.
It's not on the pricing page (I was surprised too) - I think maybe GP means that it's rolling monthly, and that they no longer do card subscriptions (on a pro-privacy stance, not wanting to store them, Know their Customer, etc.) so you can pay (say, Amazon) for the time (1 month, 94 months, however many months) you need.
You could try Organic Maps, then. It's way simpler than OsmAnd, but it lacks some features for bike routing (and routing in general).

https://play.google.com/store/apps/details?id=app.organicmap...
"transcription on Patreon"

I'm afraid I'd rather skip the video completely.
Amazon has a reuse program for old hardware[1]. Disks will be shredded on-site and then recycled. [1] https://www.aboutamazon.com/news/aws/how-aws-data-centers-re...
They took time to add the incident to their status page, appears to be fine now after 10:13 UTC.
No need to simplify so much that only false dichotomies remain. My brain might be wired up differently but its capacity for nuance and reason is fully intact :)

No one is forcing the website owners to sign up with Cloudflare to enable this service with these aggressive configurations, and yet I understand why they would even just pre-emptively. It's cheap and effective, there's no denying that.

It is Cloudflare Inc. (66,59USD, +23.57USD/54.79% YTD), however, that architected the solution, markets it as a service, and controls it as a core part of their (i.e. everyone's) internet architecture.

As a serviceprovider they could be better at informing their customers of these unintentional side-effects and how they impact otherwise innocent visitors, but whose mental disorders/impairments cause them to be flagged for and having to undergo additional verification steps disproportionately more than others, likely due to some atypical behavioural patterns they show and their often adjusted hardsoftware setups producing an unconventional signature.

Some modifications to the system could probably be made on the architectural level too. We can get people in wheelchairs to the top of the empire state building, surely we can also find a solution that allows us to enjoy the benefits of these protective measures without wrecking the web's inclusivity and accessibility this much every time the measures need to be stepped up.

Am I asking for too much, what do you think?
Anyone up for a Heathkit-style "learn as you build your own C64" kit?
I wonder how many Apple are using for ML and related server stuff.
I wouldn't equal the possibility of taking a C64 with one or two broken chips and replacing them with a cheaper, more reliable modern equivalent to tossing the whole machine away and going 100% emulation.
You still need VM to run Linux ELF on macOS, but you don't need to use full-blown emulation like QEMU if the Linux ELF is for AARCH64, unlike when you try to run x86 ELF. It's much faster this way.
Oh, yes I agree. It is a necessary compromise, much like removing Rifa and electrolyte caps. I would still preserve the original broken IC in the C64's empty internal space, secured somehow, to keep the history intact.
WeWork Warns of Possible Bankruptcy
It's not impossible. We still make many analog chips. Opamps, power amps, signal processing.

What's difficult is replicating it with generic programmable platforms like FPGAs because those are mostly digital gates.

But if we'd just want to cook a bunch of SID chips that's no problem. It'll just be hard to get enough interest to warrant all the design and setup work. You'd need to do a large batch to make it worth the investment.
I've tried the basics of building a package manager before for fun, and found it a much harder problem than I anticipated (as most things! that's why I experiment by trying to build them, to learn! And sometimes actually build them successfully [1]). So I do agree with the sentiment of finding someone qualified to actually build it and not just a generic dev.

Depending on your needs I'd first try to not need the expertise in the first place (a generic public package manager is much more complex than say, a tightly controlled plugin system), or try to leverage existing package managers/tooks.

If that fails/not possible, and you cannot find a proper fulltime dev, many open source devs working on these topics might be up for consulting, so I'd reach out to them to try to set the general guideliness/direction and then use in-house talent to fill in the gaps.

[1] https://umbrellajs.com/ as a clone/alternative to jQuery
I transgressed and take full responsibility. Couldn’t resist.
> how their data is stored and retained

Didn’t the EU recently cut a deal where the data from EU can be transferred to US without any legal ramifications [1]? So then this just goes to show it’s just about adding another layer of bureaucracy instead of caring about protecting user data.

[1] https://www.politico.eu/article/eu-signs-off-on-data-transfe...
This is not impossible. 2^600 is approximately 1e19. Considering there are 92 strands of DNA in a single cell, and around 37 trillion cells in a human body, a quick calculation means you need to dig up around 3000 bodies. Of course, this isn't exact (I haven't taken soft tissue decay into account, for instance), but the job is made somewhat easier by being able to piece together broken strands of DNA
So far the story is eerily similar to early Apple history:

Create a reasonably successful company
Oust the CEO, because that was the style at the time
Ousted CEO meanwhile running a new business
Get almost bankrupt <-- this is where we are now
Bring back Adam Neumann as CEO, make WeWork buy his current gig
Make WeWork as $5T company
Very cool project! I hope you do the keyboard too, because (in my opinion) that's the worst part of the C64. I see you're building the C64C form factor. I don't know if that has a different keyboard than the bread bin I have, so maybe yours already has a better typing experience than mine. And even if it's the same keyboard, the lower profile of the case must already make a huge difference. But building a nice keyboard for it with good switches will still make a big difference.
That depends, or depended. According to something I read years ago, the Army does not want you to run in Arlington Cemetery. The Archdiocese of Washington had no objection to runners in the cemeteries that it owns.
As a sysadmin I used to do package management for different OSes but this is not necessarily the most rewarding job. Atmo, most engineers doing that are juniors or started doing that as junior and never cared exploring anything else / moving company.
Maybe Organic Maps? https://f-droid.org/en/packages/app.organicmaps/
Take care - I hope you get to improve. My wife got covid back in March 2020 and was pretty ill, then fell into full long covid (back before anyone knew what it was). She was totally wiped out (I have posts on my account detailing it if you are interested), but is finally back working and living again - so please know the recovery is possible for some. She's still not where she'd like to be, but is vastly improved from her worst.

Best of luck to you.
> So while you can pay to have CAPTCHAs solved, you actually DO have to pay and can't just steal your way in, so it means your target has to be more valuable.

None of these things you listed above are available for free. They all require either effort to obtain or paying someone to do the work.
Samples they synthesized. At the end of the paper they recommend the LK team do the same measurements. As far as I know there are still no independent reports on the original sample
If builders don't experience the maintenance costs of their decisions, how will they ever learn? And even if they do learn, where's their incentive to do it better next time?
Interesting - my wife has also found Iron supplements have helped, as has a NAC complex whenever she's had another illness in the last year or so.
I think it's important to be careful with that claim. Firstly, plenty of this is related to increases in NHS waiting times and decreases in quality of care (which could fairly be said to be "due to covid") which mean people are off work for longer than they would otherwise be for conditions that are not directly related to having had a covid infection.

Secondly, there are a many other factors that could affect this - the "cost of living crisis" could mean that people feel more pressure to work despite ill health (although this would pull the numbers in the other direction).

Also, if I use the working age population(ages 16-64) of 42.1 million in 2021 as a denominator, and remove an increase of 40,000 that the article says should be expected from changing demographics, I get 0.422/42.1 = 1.0%
You say that likes writing code doesn’t involve experimentation in general. You can’t trust the code that that Chatgpt gives you, but you also can’t trust the code that even you write until you test it. It is always an iterative process. Why does it matter that some use AI tools as a starting point?
I'm personally pretty happy with the ArmSID, thing is, it does not sound like my 6581R3.. BUT!
My 6581R3 also does not sound like my other 6581R3, there's not really any "one true" sound for the SID, for better or worse.

That said, if I were to do music production, I'd use my real chip, because I prefer the sound of it.. But, on a PC, I'd use one of the libraries, like libsidplay which emulates the sound better than the ArmSID.

The same could be said for the VIC2 chip, I've yet to encounter two that give the same image, they look slightly different.
There, I do prefer the look of the kawari on s-video, it's just.. easier to see ^_^
It does have Librewolf and Mullvad listed, which are hardened Firefox forks. But its still not your exact scenario, my bad :)
That in no way suggests they're the one designing the best new sort of shovel.
Do you think that closing the business and distributing exactly $0 in assets is a preferable outcome?

Because that's what happens for most startups.
Yeah, FPM is great not for official/public packages (or libraries) but for "for some reason our $org installs internal (or patched, or just self-built OSS) stuff via package manager" and most often even all the versions, like /opt/foo-1.0, /opt/foo-1.1 and so on. It solves this problem very well.
> Why don't more people use desktop Linux?

It's because popular PC manufacturers don't bundle Linux (for the masses, so not counting developer machines). Your average Joe isn't going to care, or bother about installing an operating system on their device - they'll look at the brand, the looks of the device, and the price. They may not even know, what an "operating system" is in the first place.

The Steam Deck's popularity shows this, most people who bought the Deck bought it because it's a good handheld gaming device, and they don't care that it's running Linux (at least, prior to making the purchase decision).

Furthermore, the Steam Deck shows that Linux is accepted by the masses when it's marketed as a purpose-built device. Take Chromebooks for instance, which is basically a nerfed Linux - people still buy them in spite of all it's limitations.

Now imagine a big OEM marketing and championing a full-fledged distro, which is just as user friendly and secure as ChromeOS but allows you to do much more - with the right marketing, budget and polish, it could take off.

I really like what System76 is doing with their Pop_OS!, but unfortunately they're still just a niche brand, and without the right marketing and partnership, they will continue to remain a niche player. But imagine if they spent $$$ on marketing (including viral campaigns on new social media) and partnered up with the likes of Best Buy and Amazon etc to sell their PCs, they could really take off.
Kindly define 'better'. News in the early 2000s, the 1990s, the 1980s, ... was all just as commercialized, propagandized, and partisan as it is today. I think the difference that in the early 2000s the breadth of 'news' didn't include all of the micro niches and pointless internet celebrity drama that seems to infect everything everywhere today. Also in the early 2000s there wasn't the hyper addictive social networks demanding your attention on 'news' that is ultimately manufactured for views and clicks that we have today.