skysight-inc/HackerNews huggingface dataset:
They really didn't. They changed it to prevent companies from building commercial products around terraform, which is what you've suggested as a cloud protection license.

Companies that use terraform to manage their infrastructure are not practically impacted in any way, except by this OpenTF effort (which I don't personally oppose either!) which will create a schism and leave us with competing tools that are not quite interoperable over time (thinking about ZFS/OpenZFS, MySQL/MariaDB, etc.).

https://www.hashicorp.com/license-faq#usage-limitations

It isn't the AGPL, but I am just sort of stunned at the uproar around this. Is Hashicorp supposed to just shrug and clap while a competitor takes (primarily) their work and competes with them using it? That's what the MPL allows, and they don't want to do that anymore, so they... changed the license to protect their interests. What do you expect them to do?
Happy to see this on HN! I'm one of the co-founders @ Phylum.

We actively monitor and report on malware and software supply chain attacks across multiple ecosystems. Most notably, we were the first to identify and report on attacks carried out by North Korean state actors in NPM [1]. With our fairly recent addition of Crates.io support, we've begun monitoring and reporting on campaigns in the Rust ecosystem. In doing so, we identified what appeared to be staging of a malware campaign and were able to report it to Crates.io before it got too far along.

We're also in the process of releasing a beta `cargo` extension that will transparently query our API for information about a package, before it is permitted to install. This is available in our open-source CLI [2]. Prefixing `cargo` with `phylum` will perform this check before the build occurs:

phylum cargo build

In addition to this, we've also developed and released an open-source sandbox [3] that provides facilities for limiting access to disk, network, and environment variables. This is baked into our `npm`, `yarn`, and `pip` CLI extensions; we're working on adding it to more.

Would greatly appreciate any feedback on our Cargo extension and suggestions for improving our sandbox!

Happy to answer any questions about software supply chain attacks or security in general!

Stay tuned, we're tracking another fairly complicated supply chain attack.

1. https://blog.phylum.io/junes-sophisticated-npm-attack-attrib...

2. https://github.com/phylum-dev/cli

3. https://github.com/phylum-dev/birdcage
This is probably one of the least informative texts I have ever read.
Next time BBC should sent a less emotional and more competent reporter.
> Regardless of the language

Haskell has Safe Haskell, where there is no way (at compile-time or at runtime) to "sneakily" violate user expectations. In particular, any compile-time IO is disabled and any runtime IO must be clearly marked.
The most stable solution to Nvidia drivers on Linux has always been "download the deb when you set it up, hope it was a "good" release, and forget about it for a year until something requires a newer driver.

It always felt like going through the distro's included stuff was a waste of time.
This has already happened unfortunately

https://www.euronews.com/next/2023/03/31/man-ends-his-life-a...
Have you read how vague the laws are. It's all designed to extract fines from US companies.
https://repo.or.cz/luajit-2.0.git/shortlog

That's some good news I needed but didn't deserve!
Show HN: Ridella a Daily Riddle Game
Solve original, high-quality riddles revealed one line at a time. Like Wordle, but for riddles.
British claims that India used Foreign Aid to fund Moon Mission are outlandish
It will be really interesting to see the impact Dobbs has on these kinds of relocations going forward, as well as things like some of these states' new laws regarding transgender medical care.

WRT Dobbs, while people think it is ostensibly about abortion, in many cases it is simply about access to healthcare, regardless of your views on abortion. There are many women, especially professional women, who will flat out refuse to move to Texas. I've lived in Texas for over 2 decades, and personally know more than one couple (all of whom desperately wanted children) that had to leave Texas to terminate pregnancies after doctors determined the fetus had conditions "incompatible with life". And this was before Dobbs. These are not rare cases.

With regard to transgender rights, I know a highly educated professional in Texas that moved to Washington State because his child is transgender.

Regardless of one's views on abortion or LGBTQ rights specifically, when it comes to individual, personal cases, I have yet to find anyone who wants their medical options limited by a bunch of politicians in the state legislature. Companies that need a highly educated workforce are going to find they will have difficulty getting people to certain states based on state reduction in personal rights. I actually think the states that will be most poised to benefits are those with a lot lower taxes/regulations than CA/NY, but who haven't passed as restrictive laws as places like TX and TN.
> I don't give the most minuscule damn about how Apple having to deal with "broad hardware quality and compatibility". Let the trillion dollar company figure that out.

You say this but then when your knockoff part uses a driver from a different older phone that gets pulled from an iOS release, you’ll be filing a lawsuit about how apple “deliberately” broke your property.

https://9to5mac.com/2016/02/18/ios-9-2-1-error-53-update/

Like are you just demanding that apple support third party components with ongoing software development or you’ll sue? Because that’s literally what already happened.

People have this “buy the cheapest sushi, get worms”
mindset when they’re being toughguy internet libertarians but when it’s their own personal loss they absolutely start looking to make it someone else’s problem. Bioshock was so right.

That’s a massive brand image problem on top of the financial risk posed, a rational actor certainly might choose to opt out of that broad support model and it’s their market right to choose to choose to opt out of that. But that’s where we get into the “socialism/regulatory protections for me, markets for thee” thing.

Just like with the sideloading and the protections that provides against "third-party stores" using that as a dodge for app review/violating user privacies - for a lot of android users it's not enough that they just win in the marketplace of ideas, they have to actually outlaw and ban any competing business models that they don't like. Again, bioshock nailed it so perfectly - the market is awesome until it picks a solution you don't like/that doesn't make you a profit.
The residency system is insane, iirc was founded by a guy who was constantly on coke and then took heroin to sleep. Then that became the standard.
It requires a significantly more sophisticated attacker, for one, as opposed to just opening wireshark on a public network. Either way, it's at least not as scary as unencrypted http.
Oddly enough I only received it on a 2015 moto x4 running Android 9 with the Device Help app on version 11.5.9 at 4:40 pm UTC on 8/25/2023. No permissions granted.
> Also, what's with the ever-shrinking renewal periods? Why can't a certificate be valid for 10 years?

Also, why can't a certificate be valid longer than the certificate(s) above it in the verification chain?

For code signing certificates that is how it works. When checking a given link in the chain for validity the time check is whether or not the upstream certificate was valid at the time the downstream certificate was signed.

It is analogous to how notarization works with physical documents. A notarized document does not cease to be notarized just because years later the Notary Public who notarized it retires lets their notary license expire.

For HTTPS certificates the check is that each certificate in the chain is valid now. In physical document terms it is like if when a Notary Public retires it invalidates all their past notarizations.
I have settled on a strategy of bidding that seems to work when I am actively bidding (this goes only for little stuff not land and such). When I hope the other person bids, then I know I don't want the item at the stated price. I can feel intuitively that I will not want the item if I get it.

Does anyone have a help for the opposite scenario? In this scenario I have not yet bid but the price is quite low and I don't want to bid in case I missed something. The price stays very low and the item is sold. I am left kicking myself for not sticking my neck out there and making a good deal. Maybe I should bid once and see if I like it. The problem is that one bid might get it...
Two other factory builders that have slipped under the radar:

Dyson Sphere Program - I love it because it has the cleaner look of Satisfactory, but in a 3rd person view. I could never get used to Satisfactory's first person view. It just doesn't work well for making a factory. DSP also has you go between multiple solar systems to fetch materials.

Captain of Industry - The only factory builder that feels like it takes place in today's time. Has the unique mechanic that mining for materials actually deforms the terrain, and that excess dirt/stone can be used to expand your island. When I last played, the tutorial was lacking, but this may have been fixed by now. Also, anyone experienced with factory builders probably won't need much tutorial anyways.

One thing I like about both of those that Factorio doesn't have (and I think desperately needs!) is the ability for belts to have more than 2 layers. At the very least, I often found myself wishing I could have longer underground belts in Factorio.
My source is the comments in this very thread.
> the destruction of the entire eu online advertising industry

Sounds like a good start to me.
"The BRAVO3 team recreated Ann’s voice using language learning AI, and footage of Ann’s laugh-inducing wedding speech from 2005."

Gonna admit that this idea brought tears to my eyes, it's just the icing on the cake, really. And such a heartfelt decision.

Unfortunately in practice the voice still sounds quite robotic. Perhaps they could ask elevenlabs for help?
Dementia risk study finds 11 key factors behind condition
Ditto for me, except, it was only around 1.5 years on (K)Ubuntu before I got fed up and left. Tumbleweed is such an amazing distro; I don't think I'll be distro hopping for a very long time, if ever.
Back in the hacking days for apple ii you would reprogram the eprom on the Apple II Firmware Card and could pretty much stop the CPU and at any address and hack away. With no internet people hosted BBS sites with slow ass modems to share all these hacks, quite the community over time. Long distance was expensive but that didn't everyone from hacking the phone cards and pretty much dialing for free. What's funny is all this continued on even when the first Mac was introduced, so more cracking to do. I had people buying and sending me program to crack, then share with the community. Cool to see someone document their efforts.
A bad therapist could be substantially worse than no treatment for mental health issues, particularly if people see it as more authoritative than it is.
>the seriously-prepared people will be fine,

If they have an island they happen to be at.

The problem is now you're dealing with the law of large numbers. As an individual your plans are mostly meaningless when the catastrophe happens and you're caught on the 405 unable to escape.

Having a bunker as an individual means nothing if 20 people happen to get together and rise up against you.

This is why off the grid doesn't work. When the grid collapses everyone that you're not really good friends with is now your enemy. To survive you need to have/make new social grids of shared defense.
Contextual targeting hasn't been a thing because it's not very easy to accurately extract structured targeting signals from unstructured documents. At best for now, we may extract a set of word embedding per page which likely misses precise contexts as well as subtle nuances. Now we have LLM which has objectively better capabilities to do that job and everyone is now forced to invest more into contextual targeting, I guess there will be significant developments on targeting systems. The question would be how to make super cheap models which can handle both pre-processed offline web page context as well as online usage contexts.
May I ask how are you feeling about your trackpad on Mint? On my HP the scrolling acceleration is way too fast, one scroll and I'm at the end of the page I'm trying to scroll on. Mint does not provide any options to change trackpad scroll speed only trackpad movement speed.
Because he probably works for a tech company who's main revenue is advertising.
(Founder of B2B SaaS startup here) my perspective is GDPR, CCPA, and similar laws haven’t really done much to benefit consumers.

They provide an illusion of protection, but I haven’t really seen concrete cases where the regulation has benefited broad swaths of people.

GDPR definitely makes it harder for new companies and startups to sell to larger companies (GDPR creates a lot of paperwork required to sell to large companies, which results in lawyer fees and efforts to comply that are largely superficial)

Meanwhile, Google/Facebook/etc are finding loopholes and ways to work around the regulation to “comply” (more of less) without meaningfully improving user privacy, IMO.

I’m 100% supportive of privacy advocates, but I have a sinking feeling regulation in place today is more of a charade that makes people feel good, rather than something that is actually improving online privacy in any meaningful way.

I personally don’t mind more regulation because our company can afford to comply with anything thrown at us (and we already treat and protect user data with extreme care), but I don’t think more regulation is guaranteed to have meaningful impact in practice.

Many people already know this, but things like SOC 2, ISO 27001, CCPA, GDPR, and lots of other security + privacy compliance frameworks are largely just a matter of getting your paperwork and internal procedures in order. I’ve run into a lot of people who think SOC 2 (for example) means we’ll have to secure our servers better, but the reality is auditors aren’t looking at your servers, they look at your paperwork. Paperwork typically does very little to actually make data more secure.
I participated in several standards organizations that used Robert's Rules. They were FAR more effective at getting stuff done than the other organizations I've been involved with.

The key contribution of Robert's Rules is right in the name: order. Everyone has a chance to speak, but in an orderly fashion. No shouting down. And when enough has been said, you vote on it and move on. One party who refuses to cooperate cannot hold the proceedings hostage forever.
It was invented by MariaDB and later adopted by CockroachDB, etc. It basically says "you can't compete with us"

https://mariadb.com/bsl-faq-adopting/
Download Google Earth and use the measuring tool.
Keyword search won for commodity bc semantic search was weaker and more complicated. More sophisticated orgs like Google switched to semantic/hybrid for years as both problems got addressed.

Now that opensearch/elasticsearch have vector indexes, and high quality text embedding is a lot easier...
Badly dug, uncapped wells can also exacerbate groundwater contamination, making the problem worse for everyone else.
Perhaps I misinterpreted what you said as "Even when performance is important, C# and Java are top performers". I read it as "they are the top performers", and there are faster rust frameworks in that benchmark, but perhaps you meant "Among the top performers there are non-rust language which are good options without having to use rust"
Apple’s repairs and parts are literally so cheap that repairmen like Rossman complain they can’t compete if they’re forced to use genuine parts.

Which means they’re really making the money on sales of non-genuine parts.
Indonesian Influencer Factory [video]
I was just a kid when Sun died, reading about all the drama of the buyout and the series of forks on Slashdot whenever I had already finished my work in my high school computer science class every morning.

I didn't really know what or how to think about the mismanagement aspect of it, but I was already a F/OSS enthusiast by that time. I ran Linux at home and used free software everywhere I could. I even eschewed Times New Roman in favor of Linux Libertine (then the font of the W in the Wikipedia logo!) for my school essays because I didn't want to support the hegemony of a proprietary typeface.

What I did understand about Sun was that they had been the caretakers (and sometimes creators) of some of the most important and beloved technology I'd ever used. I didn't know anything about Solaris, Hudson, ZFS or SPARC, but I knew Sun for VirtualBox, OpenOffice, the MySQL database system that seemed to be everywhere in the open-source world, and the Java programming language I was writing in for school.

I remember a sense that something precious had died with that buyout, even though I didn't understand what led up to it. I worried a lot about OpenOffice, which I relied on and advocated to friends, and I practically cheered when I read about the formation of The Document Foundation and LibreOffice.
Not all tech jobs depend on user targeted advertising. Only some big-tech ones.
Surely a representative sample!
What makes you say we "probably" won't be here on Earth in 100,000 years? We were here for the past 2,000,000 years. This also ignores the possibility that someone other than "us" will discover what we leave behind.

> If you work in tech you know that 99% of the stuff you build wouldn't (or shouldn't) last another 5 years.

We have technologies that have survived for thousands of years (agriculture, writing, etc.) This statement is completely myopic and absurd.
Heh, you haven't looked around for a note-taking app recently. Note-taking is like the nerdy version of weight loss. There's a cottage industry around note-taking apps and techniques, complete with dozens (at least) of people producing influencer content on how they make their life amazing using <notetaking-method-A> with <notetaking-app-B>.
Sure, but that doesn't help me when I want to go into that code and add extras debugging code so I can figure out where things are going wrong.
Beat me to it. Rusty's rules are very pragmatic advice for running a meeting of people who don't love meetings.

I like the link at https://www.iww.org/resources/rustys-rules.pdf
There are many things I care about but I don’t dare tell people what they are. Society is rapidly changing and I don’t want to be caught on the wrong side of it - I still
have to survive. I can’t afford to be boycotted or have my accounts frozen. Since society is changing, even if I go along with what is ok today there is no guarantee that such views will be ok tomorrow. So I’ve decided to live life as a non-combatant, I stay out of politics and simply do what I can to mitigate the damage to myself and those that I care about. We simply don’t live
in an era that tolerates political dissent and throwing myself against the gears isn’t going to change anything.
> Interesting how this is forcing these companies to objectively improve their products

Is it though? Facebook only used to show me content from friends and pages I followed. Now it's a nonstop hose of garbage content that only exists to stuff the space between poorly targeted ads.
I have an enjoyable and well-paying job in the sector of scientific instruments.
What’s the moratorium for posting a comment here?

20 minutes from now?
Most high voltage breakers already are SF6.

They rely on the 0-point crossing to quench the arc.
Unfortunately, many CLAs give the company that controls the code the power to take the project proprietary (and they will call this the bare minimum of what they need). It's repeatedly happened, so contributors need to be careful with what they sign. Perhaps for a small bug fix they won't care, but for anything larger, beware.
The questions are the opposite of what you describe:

DKQ1 As of April 2023, which of the following companies did Elon Musk run?
- Tesla and Twitter {correct}
- Uber and Snapchat
- Twitter and Uber
- Snapchat and Tesla
- Not sure

DKQ10 Does the United States have a national privacy law that sets common standards for what companies can do with all data their products and services collect?
- Yes, it does
- No, it does not {correct} \
- Not sure
I have seen ads on other websites which link to working versions.
If you can handle Python, you will have no issue with Go, which is overall a simpler language.
Pretty much all cities are “blue” cities. But also, state laws have an outsize impact on quality of life, for things such as paid leave laws, minimum wages, other minimum labor standards, legal cannabis, education funding, women’s healthcare (abortion access), gun laws, assisted suicide, etc.

So a city being “red” or “blue” does not seem like it would make much of a difference.
OpenTF should poach apparentlymart from HC, that will drive a lot of adoption :)
The green party was a small german party with lots of access to powerful eu people

I very much doubt this was anywhere near "grassroots" to the italians

That is not even how eu politics work
Maybe see if one of those roasters mentions the Swiss water process. IME it makes for quite good decaf (and I too have a hipster’s taste in coffee).
..so?

The point is that no-one was asking for a .zip TLD. It's common sense to not make one. "We should break backwards compatibility on the web so that Google can sell a TLD" is not a defensive viewpoint.
Sure, and rightly so, but still there needs to be some limit to how much the advertising industry is permitted to do.
Some of the sweat molecules are larger than the holes in some membranes!

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7277079/#:~:tex....
What is the backstory for this leak? Where was it found, etc.
Not at all.

It can be as simple as understanding that, at the point that a single person or small group amasses more than a certain amount of wealth, that as a matter of course they have exploited the system under which they operate, and that it is better for the common good that they be taxed at a higher rate.

Or to quote a random Twit: "Once you reach a billion dollars, you get `I won Capitalism` trophy and your tax rate goes to 100%".
Actual title: "Water repellent clothing and PFAS - are they a danger to us?"
You don’t need to track people to pay for things with ads. You can advertise based on the surrounding content pretty effectively. It’s what TV channels have done for years.

Behavior ads or paywall is a false dichotomy.
Bodhi Linux 7 brings Enlightenment to Ubuntu
New Ugrep 4.0
If faced with the one-off problem shown in the video, I would have reached for a python solution like joblib etc. But knowing efficient better way to do would be additional tool. As shown in the video, it took him jumping through multiple hoops and expert help to get to his solution and without knowing beforehand if all the required pieces can be put together in Elixir ecosystem. No such hurdle in python solution.
NPR is still pretty fun to listen to occasionally.