skysight-inc/HackerNews huggingface dataset:
TLS solves two problems, but was originally designed to solve three. The author seems to be annoyed that it does not solve the third problem.

TLS (or SSL, really) was designed to solve trusted authentication - that you could be sure the website that responded to your request was your bank. The idea was that a manual review from an authority would verify that the owner of certificate x was the "real" y, for some definition of x, y, real and authority.

It does not solve that problem, I agree.

It does, however, solve two other problems: The problem of message integrity - noone intercepted and changed this message between server and client; and the problem of eavesdropping - noone can read the message by observing the network traffic alone.

Now, of course, this all depends on the fact that the connection was setup correctly, and a man-in-the-middle attack that can redirect all the traffic for some domain to their own servers would possibly succeed. But that is quite a high bar! Modifying DNS or shaping network traffic in that way requires deep access, and is much, much harder than attacks with no SSL/TLS.
The covid despotism was a trial period of the most absurd dystopia. Now they know much better how far they can go, and unfortunately it's quite far.
Wait, No Man's Sky? That game? Was it bought or something? Do they still have that liar who went on interviews and lied through his teeth about the game? It's pretty rare to see a project based entirely on lies from a smarmy psycho liar ever actually go anywhere, right? Did they ever go back and actually implement any of the things he lied were already in the base game?
I'll only tackle the two points in your comment nobody's seemed to bother with yet:

> There aren’t too many people capable of jumping through all the hoops

The people who would be willing to put effort into trying Eppie out, are the same that will put effort into setting up (what is nowadays the trivial task of) setting up a mail server. Guess which one they'll pick? Hint: It's the one which works with all the other mail servers on the planet.

> but yes, if you go as far as self-hosting your email, your data is under your control, not Google’s. The address though is still not yours.

If you mean in so much as the domain you've registered could be taken away from you, then, I guess? How likely is that? The bloody _piratebay.org_ is still up and running.
I wonder what the world would look like if the Pereos tape drive had caught on and then been steadily improved. It was doing 1GB/tape (500MB/side) in 1994, on a tape that perches cozily on a fingertip, and theoretically should've been easy enough to build into all sorts of consumer electronics.

Sony made digital cameras that recorded to floppy disk (the Digital Magnetic Video Camera, or MaViCa), and Agfa made one that recorded to PocketZip, the 40MB shrink of Zip disks. Both random-access media, but that isn't crucial for a digital camera. Could easily record to linear media, and in fact a later Digital Mavica did just that, onto CD-R discs. So recording to tape wouldn't be a stretch at all.

Instead of deleting photos on the camera, you could perhaps mark them for deletion but then have that take effect at offload time. Then blank the tape and use it again. At a time when 64MB flash cards were barely affordable, a 500MB tape would've been a gamechanger.

I use cameras as an example because they're probably the use-case that benefits most from a capacious writable medium in a portable format.
>Under the DSA, platforms will have to stop harmful content from spreading

Who defines "harmful content"? Is it the government?

Am I mistaken in taking this to mean that a government can now say "questioning the efficacy of this medication is harmful" or "saying something mean about this politician is harmful" and force companies to stop discussion about said topics?

If so, is that not an obvious step toward authoritarianism?
Disclaimer: Own observation, sample size of one opinion.

In this day and age, you don’t innovate, you mostly sell crap online and build an empire by living in some low cost country. Innovation only happens at work these days behind heavy IP protection laws and NDAs.
So you want the state, the same state who's incompetence got 1000 people burnt alive, to operate the power company? More government is never the answer, especially while the trend of rewarding political affiliation with high-impact jobs that essentially decides who lives or who dies in a natural disaster. Herman Andaya is a perfect example of the incompetence of government. The man had zero background in disaster response, yet somehow beat out dozens of applicants who did. His decision to not sound sirens and warn residents of impending doom was a fatal one. Such gross negligence is deserving of prison time. Sirens would have got people out of their homes, and unlike a tsunami, you can see a fire coming from quite a distance.
i like some of the message and writing style but hate the changing title.
I came here to make a similar comment. I've made the same Teams/mIRC comment before myself.
Right? Jump straight to one of the modern, fast, non-cryptographic hashes.
This kind of trolling can easily be prevented by saying "Sure, we will remove your contributions. Name the exact line numbers affected"
Motorola phones receiving random notification: “Test for Ricardo”
It’s a traumatic birth for sure- but I think in the long run Hashicorp took the right approach. There’s already more FTE commitments from the community than Hashicorp actually had working on it.
>This proof of work doesn't mean crypto currency

Well, yes, I should've said 30 years, not 10.

You can start educating yourself on cryptocurrencies with the monero case: monero payments were used instead of captcha on an internet forum about 10 years ago.
I'm thrilled to see that OpenTF appears to be aiming to win on positives, not negatives. They could be focusing on the licence and their perception of Hashicorp, but instead there's a lot of emphasis on the positive: getting up and running quickly, upcoming releases, public roadmap, and pledges of engineering work.

In the long run few will care about this licencing change (as much as they should!) – business users will accept it, individuals won't take any notice, and competitors would get mired in issues as expected. Basically a win for Hashicorp.

But winning on positive changes beats licencing issues. Business users will go where the centre of gravity in the ecosystem is, individuals will too, and will prefer free (in both senses) solutions, and competitors will push this hard to all their customers. It'll be interesting to see Hashicorp needing to build OpenTF support into their products to remain compatible.

> So far, four companies pledged the equivalent of 14 full-time engineers (FTEs) to the OpenTF initiative. We expect this number to at least double in the following few weeks. To give you some perspective, Terraform was effectively maintained by about 5 FTEs from HashiCorp in the last 2 years. If you don’t believe us, look at their repository.

Wow. Even if most of this doesn't actually play out in the long run, that's some good support.
Thanks! I actually plan on writing a brief blog about how I did it and some future possibilities so check back in a couple of days/weeks ;)
Some groups care, and I certainly don't want the mice treated cruelly. But I also am willing to let some mice get experimented on to save human lives. I feel most people are.

I've seen protests against and heard about attempts to free lab monkeys. To the best of my knowledge, there are no similar issues around mice in any significant numbers.
If they know "prime number" is some technical term to look up. They might confuse it with amazon prime or anything else depending on context. You waste time explaining, they get indignant they are supposed to coding not do maths, complete mess.
> The official way to renew Let's Encrypt certificates is automatically, with a tool called certbot. It downloads a bunch of untrusted data from the web, and then feeds that data into your web server, all as root. If that sounds dumb, then good for you, because it is.

I'm a bit confused by this. I use Caddy, and Caddy doesn't run in root – and Caddy is able to handle automatic Let's Encrypt certificate renewal.

Why does certbot need root?
I've been looking into the field of reinforcement learning lately, and that gives an interesting framework to think about topics like these.

It seems that flow is a state of being in which you are almost constantly rewarded for your actions. Discipline might be a way to get there.

I suppose that some people accidentally stumble into a state of flow, and others don't, but feel an urge to get there. In order to get there, they try things that give an instant reward (drugs, social media), or they try things that they think will give a big reward in the future (things you read in books or hear from wise people).

Now, the question is, how are these rewards set? Is this something you can fiddle with? Will discipline actually change what you like? I guess some people enjoy discipline by itself, which makes all this highly complicated stuff to investigate properly.
Well done all! I'm really excited to see the community taking ownership of this tool and moving it to a foundation.

I'll definitely be using OpenTF for any future projects and if I find myself a part of or leading a DevOps team again, will work to migrate that team over.
Stapling works, but is a lot more useful if it is mandatory (which it is not). OCSP as intended in the early 2000s where the client query the CA is a non starter, the hosting cost would be such that not only free certificates would end but the paying one would be much more expensive.

I think most people will find short lived certificates more convenient than mandatory OCSP stapling.
I'm quite sympathetic to the overall trend. But nearly half those listed things are effectively optional things to protect himself or make his life easier - eg you do not need an LLC, but you surely do want one. Another near half are to protect others from himself as he is putting himself out there as a business, as he is employing workers or subjecting customers to his work. There could certainly be more small-business-friendly ways to handle these things [0], but earlier periods weren't solving them and at least now there is an attempt. So this particular critique doesn't ring true for me.

The proper comparison is looking at what it takes to do it for yourself or a friend. Of that list, that's probably just permit/inspection, which is hard to talk about generally because it's going to vary per locale. Although you really do want the backhoe.

[0] just spitballing an example, worker injury insurance could be provided more by the state from the general fund.
It's certainly very convenient that, sans Canada and Australia, all significant uranium mining countries are developing or virtually lawless (i.e. the government can do whatever the f..k it wants without needing to take care of nature) countries - and to be honest given how past Australian governments outright sharted on nature protection or Aboriginal activists in favor of mining conglomerates, I'd classify the country as lawless as well.

Nuclear fission based on uranium is a lot of things, but definitely not "clean" or "green" even on the raw material sourcing side like the pro-nuclear crowd keeps blathering.

[1] https://en.wikipedia.org/wiki/List_of_countries_by_uranium_p...
There's testimony about you, and there's your testimony.

One is self-incriminating, the other isn't.
Not over just accepted
Arguably longevity may not be very meaningfully beneficial if you have a slim chance of getting old in the first place. You also must consider human reproductive design where eggs aren't produced on demand.
Ok so you discover your SSL management process is broken much sooner with LesEncrypt vs the competitors. That sounds like an added-value.
Government got 1000 people burned alive.

How can we stop this from happening?

More government!

My God.
Massdriver co-founder here.

We are super excited to be supporting this initiative. The community around Terraform has been pushed aside for too long.

Terraform is the most widely adopted tool for managing cloud infrastructure. Putting it in the hands of a foundation that can ensure it remains open-source, community-driven, and impartial is crucial to so many infrastructure and operations teams around the globe.
I mainly use them when I get an iced coffee. Makes it easier to drink with the ice and minimizes spillage risk (those sippy cup lids that stores use now always leak for me).

If I’m at a restaurant or home I rarely use one. Some cocktails at a bar also benefit similarly but others just a stirrer suffices for when it comes improperly mixed.

When bartending, they’re used to taste a drink if the bartender wants to ensure it tastes right before serving.
What is Microsoft doing at the firmware level for azure?
I think the true problem here is associating the word secure with https. It provides a false sense of security when the site served over https is a scam or phishing site, but very few non-technical users understand the difference.
smoker → +20y visual age
Thanks for validating that this is indeed a combo that works for people suffering from this. Weed was the only way I got through my doctorate, I would have never been able to write my dissertation sober.

I’ve quit weed more or less (became a daily thing, now just occasionally). Today what I’m doing is exercising (a lot) and this is really helping me. But I do go back to the weed pen every now and then, and there’s nothing that makes me feel more focused and capable than that first hit (is that how normal people feel all the time?).

But the problem I have with it is it plugs me up and I also am driven to eat like shit. So I’ve gotta figure out the right balance still.
I think you're conflating two things.

Protecting against modification of data in-transit can be done without encryption. Signing the clear-text content allows the receiver to verify if the data is original. Encrypting hides the content from middle parties.
You are rewarded for spending resources by unlocking technologies, and being able to use the new tech to refactor and grow your base.

Still, I agree with you that there's some missing depth in the game that no mod has yet been able to fill for me. I say this after sinking (pardon the pun) thousands of hours in to the game and having a tremendous amount of fun.

Still, it could be deeper in some way.. not sure how.. maybe by adding some LLM/AI of some sort?
Yes, and this point is kinda nonsense since communication to letsencrypt‘s api is via https, and you trust the LE root since their cert is included in every new mainstream OS which got released after, i don’t know, 2019?
The registry protocol is documented and pretty straightforward to implement (source: I implemented a private TF provider registry as static files in S3 at a past gig), and Terraform has config settings to easily point to alternative sources for plugins, so mirroring the plugin distribution should be pretty simple.
Marcin here, co-founder of Spacelift, one of the members of the OpenTF initiative

As a long-term HashiCorp fanboy, and a true fan of the work of Mitchell this would be my dream come true, on a very personal level. It would also be a great day for the entire community.
> What did it mean when Zelensky said in February 2022 that items such as disarmament in 1994 agreement are in doubt? The 1994 agreement was meant to remove Soviet nukes from Ukraine and to ensure buffer space. Since then NATO has pushed further east.

No part of the agreement was to provide a buffer state it was merely signed by the Russians because they where a major nuclear power at the time, it was in fact signed by _all_ major nuclear powers at the time.

> "... Ukraine will have every right to believe that the Budapest Memorandum is not working and all the package decisions of 1994 are in doubt."

Of course it's in doubt, because the Russians are not abiding by any of the points that they are bound to in it. That doesn't mean Ukraine wants nuclear weapons.

> Ukraine still refuses to apologize to Poland for massacres in WW 2.

Russia has refused to apologise for using the Geneva convention as a "todo list" too whats your point?.
The LLM has access to user prompt, 5 first rows of DataFrame and template prompt (for example with sentence 'Output only Python code in response').

I was very surprised with Australia example! The LLM has access to only first 5 rows of the DataFrame and Australia is not there. The LLM was able to produce the correct code, that genralizes well on full DataFrame.
The world is going crazy and we are doomed to suffer. I pray some of these trends will reverse.

Some youngins today complain that regular apps/programs look old and "not modern". I want to slap them hard.
I've seen some on Instagram ads that are essentially human trafficking schemes pretending to be modeling and talent agencies. It's kind of dark and depressing.
I'm like you. I always disabled cliffs in the worldgen.
Geneticists like insular populations to reduce signal to noise ratio. Another favorite population is a utah population of mormons for similar reasons. African genetics for example are trickier to parse out cause and effect as there is a lot more genetic diversity (and therefore noise that makes it difficult to identify true signal), but they too are studies sometimes for this reason specifically. The Yoruba are pretty well sequenced. Among europeans, a good resource is the icelandic genome project, not only due to the sample size but the nature of the bottlenecked population.
depends, if you've a good skin, they actually won't grow so much
There's a philosophical question here, which is that as science and technology get better and our ability to measure things improve, the hidden externalities become less and less hidden. Nobody told Grok the caveman not to burn sticks in his cave for warmth, out of concern for releasing CO2 and particulate matter; but nowadays it's frowned upon to use a wood pellet furnace instead of electric heat, for example.

Existence itself is an externality, since everything any living organism does affects every other living organism, however minutely. There probably exists some amount of externalities that we have to choose to ignore.
I needed multi-line string, because I know that there will be several iterations of prompt creation.
While I don't think that your conclusion is 100% wrong, your argument does not support it. The first two examples are actually the way I would bet.

For the first, MS knew what was happening, and worked to make it easier. The computer manufacturers were the MS customers, not us. MS didn't do the actual loading, but they did point to how easy it was to load up, and say "Gee it would be terrible if you did this, this, and this, to load up the machine with profitable junk the user doesn't want.".

For the second, MS had somewhere between zero and negative interest in non-MS software continuing to work. We have sworn statements in court that they actively worked to make sure that 1-2-3 wouldn't run.

Your third is the statement you're trying to prove using the first two.

Again, I don't _completely_ disagree with your third statement. But the first two do _not_ support it.

Because I have known people to buy repaired cars and blame the manufacturer for issues that might be related to the repair, not the repair place. But usually IME when people buy a car out of warranty, that's been repaired a few times, they realize what they're getting into.

For phones there would, at a minimum, be a few years for most people to adjust from "it's an iPhone, no one else even _can_ repair it" to "it's used, who knows what's inside anymore". But I'm willing to bet we'd get there. But it's just a gut feeling.
Yeah, their article on the logistics of planning a concert tour for one of the most famous performers of the time but keeping it a secret sure does smell like outrage journo to me
because commercial "whole" genome sequences aren't really whole. But, they normally deliver the raw reads to you in a 50+GB file so I suppose you could take the reads in that file that don't map to the previous reference and try to map them to the new one. Unless you are an expert it's unlikely you would get any actionable results.
Shouldn’t you base that judgement on the validity of their argument, and not discard the argument outright because of some semantics around the author not using ‘pure’ enough language for you?
Feet don't lie
We need to raise awareness about this fork so people know about, join in, and support the move. Share it with your friends and co-workers. Upvote or star everything you can. Let's push this forward people!
>Conclusions Despite the ethical mandate and expressed values and mission of academic institutions, there is poor performance and noticeable variation in the dissemination of clinical trial results across leading academic medical centers.

Sheesh.
So the entire Spotify library can be stored on a single tape! What interesting times we live in.
CRLs are incredibly expensive to serve, and OCSP isn’t great either. Having short lived certificates makes it cheaper for let’s encrypt to serve the internet since the CRLs don’t need to be as large (you don’t need to maintain a list of compromised expired certificates in your CRL for example).
That's not what the article is suggesting.
I answered this in a different comment. TL;DR is that short lifetimes bring greater maintenance requirements, and automation is not always helpful.
Just turn the fan on. This problem was solved a hundred years ago.
> Reprocessing is more destructive to the environment.

How so? Any pointers for more info - I'm somewhat ignorant on this topic.
Well it's a test, so I suppose the only logical response is for everyone who received it, to open a Motorola Support ticket to indicate the success?
Those animals (e.g. tortoises, lobsters) with longer lives combined with less cancer have significantly lower metabolisms and a far less ... intense ... lifestyle.

Higher cellular respiration introduces higher chances for mutation / inflammation / cell damage. Likewise, high rates of cellular reproduction do the same. Every incidence of that is a roll of the dice for cancer. Extend the lifetime, and you will for sure get cancer, because you already have a very high chance of it.

Evolution in our species has arrived at a set of trade-offs. We don't understand them all yet.
Not touched in three years, and full of FUD.

We should do better on HN.
Want your government to buy Lenovo instead of Dell?
GPT-Pilot
These people do work in the desert. I have a buddy that drills wells here in Arizona and he WILL NOT put a drill into the ground without a Witcher. I have a really hard time with "witching" from a logical POV, but my buddy and his $130k truck/equipment swear by it. I call that putting your money where your mouth is.
This comment is needlessly negative. What they did had value and they did not hide what they did either, at least that wasn't my impression. The statistical "shenanigans" is better termed as an innovation.
As I said: "even superior to other methods if the service isn't on their game"
"an interactive language - one where code is often run immediately after writing"

I believe you need some kind of server that is listening to the code changes and executing the program really quickly, all that will happen so quick that it will feel it's all in real time, similar to how 'live coding' works on web browser. Does that help?
> They can revoke it anyway if it's been compromised or whatever.

When have you last seen anyone revoke a Letsencrypt certificate? I haven't. Ever. I use Letsencrypt all the time and even I'd need to look up how to do it.
They = US ?
Yeah let's continue weaponizing "misinformation" to broadly apply it to what we don't like. If someone is selling something illegally online, there are already laws for this.