skysight-inc/HackerNews huggingface dataset:
> In the US we take the utilitarian perspective that the thief who took my bike has gained more happiness than I have lost without it, so maybe bike theft is a good thing

Haha not a snowflake's chance in hell. In much of the USA you can use deadly force to defend against property crime on private property. Conditions do apply, but that's beside the point (and are rarely enforced in self defense cases unless you went full retard on the crim).
You can disable individual system certificates in the "Trusted credentials" settings panel.
Your position is that Kickstarter was 'an obligation-free playground for tinkerers' remains in contradiction of their stated terms of use (now clarified). Kickstarter differentiated itself from gofundme by introducing backer rewards and pretty quickly it looked exactly like the thing you say it wasn't: a place to preorder products.

> I'm not blaming the project initiators as much as I do Kickstarter

You entered this thread blaming _backers_, caveat emptor style. All the stuff you mentioned upthread was added / changed post 'day #1'. You can even read the discussion on HN from the time https://news.ycombinator.com/item?id=4551245. In 2023 "don't kickstart with money you can't afford to lose" is reasonable but in 2012 the terrain was much foggier.
Is this different from and old-school hosting provider that has SSH and SFTP access?
How are you going to be able to make money off this?

Edit: I love what I see.
I actually love this approach: floating by default, tiling when you say so.

I'm yet to see a tiling WM that handles very large (>27") screens sensibly, without wasting screen real estate. Having two terminals, each 200+ columns wide, side by side, is about as useful as having a 10m long mouse cable. Hybrid floating/tiling should get more love.
High ISO is one of the most under-appreciated benefits of digital. B&W film topped out at 400 (Tri-X and HP5) which could be pushed to about 1600 though it started to show both significant grain and loss of shadow detail at that point. Color slide films were really suboptimal once you got above 100.

Even my somewhat older digital cameras can easily handle around 3200 or so without much noise.
Rolex is a for-profit company. It happens to be owned by a charitable trust.

Now the charitable trust owns a for-profit company with (another) for-profit subsidiary.
// is there really a "desire to have kids"?

Yes, people recognize that you get to have a lot of fun times with your kids and that even the "hard" parts make sense when you are in it. Your daily life has structure and purpose which is beneficial. People have an obvious instinct for this and are able to recognize this in others. If you met many parents who weren't happy they had kids, you'd know.

Also, for those of us who value hard work and long-term impact, kids provide an amazing opportunity for that. I get to influence how these people turn out, and in turn that prolongs my impact on the world beyond my lifetime. I want that.
It serves as a better example of why it’s important to learn what FOSS means and implies before using those licenses.

It doesn’t mean “everyone does our work for free and then we keep the profit”.
https://archive.ph/f17PP
- 6:30-6:45ish: My son wakes up (a Toddler) which means we wake up

- 6:45-8:30 : Play with my son, help with his breakfast while my wife works with my other 2 older kids who also wake up around 7 for school

- 8:30-9: Get ready for work

Then it depends on the work!!
Sounds similar to https://tgvaughan.github.io/sicm/toc.html Should be fun if you're physics inclined.
Why should it be rehabilitation? Keeping people off the street to so they can't re-offend is a pretty good goal.
When first reading the title, I thought this was an article about consulting and legal firms

About 90%+ of the work you get from these companies is done by their junior employees, even if the senior partner that sold you swears otherwise

Especially if you are not one of their top clients

For most companies, it’s better to get a small firm or an individual. You’ll get better communication, better work and sometimes even better price
There use to be this great forum virtualtourist.com that had all the great tips and things to avoid. But then it was sold and became a glorified hotel ad site.

These days, I have had good luck with ChatGPT giving me a top level view. Then I supplement with travel books from my local library.
I find github to be a much nicer experience than codecommit. Not surprised that people would want to switch.
The whole point of permissive licenses is to permit this kind of thing. It sounds like you think every company out there choosing permissive licenses doesn’t actually want to be permissive. Has it not occurred to you that people choosing permissive licenses usually want to be permissive?
I was trying to give feedback on how you might make your product "more attractive"/increase value proposition to the type of person you are aiming to help this with: people who want to make a React UI through a GUI instead of in a text editor.

I know how to pull data in via React/JavaScript "code". If I can do that, I'm technical enough to not need a GUI to help me make a UI... do I?
I see the strong encouragement to post to the FCC's public comments, and you say it is highly influential - more influential than what you can do as a Commissioner.

I'm a well-informed, active citizen, and I didn't realize that. It might help to explain how that works - how do public comments influence things? My concern would have been that it depends on the FCC, and that comments could be included or ignored as desired, and probably the latter. (I want to emphasize: That would have been my concern had I not read this thread - I trust they are influential).

Thank you!
A flat rate to hit a revenue target? That seems incredibly unrealistic.
Btw, unless you mean to say '... But I'm commenting here in a personal capacity, not necessarily representative of the views/policy of the organisation', that's a claim, not something you're disclaiming.

It's sort of a disclosure (which is almost an antonym) but you're not acknowledging a potential bias, you're saying this is why you should listen to me/care to reply, so even that doesn't really fit IMO.
Isn't Tensorflow logo "TF"?
Folks subvert _security measures_ due to perceived or real inconvenience also.

In this example one is getting paid to do a task, security controls make the task longer, less convenient, the human will find ways to subvert the inconvenience of the security controls.
I'm not sure it should be overcome.

Updating software is not a panacea and not always the best thing to do. In industrial hardware it's often better to have a known quantity.

Especially with equipment that can cause damage or even kill people.

Even if it isn't quite that high stakes, dealing with constant random updates is a cost factor with no clear commercial gain.

This doesn't mean there can't be updates, but they need to be done on the factory's schedule, not on the schedule of some random supplier.
"The fact that companies are not already doing this is evidence it's not important to consumers. People may express frustration, but their purchasing behavior speaks louder than their words."

I would like to see evidence before anyone accepts this premise as true. That's like saying smokers don't care about lung cancer, or parents don't care about lead in baby toys, as shown by their purchase behavior.

Security updates are affected by asymmetric information, widespread consumer ignorance and negative externalities. We need solid regulation.
They are not the only game in town. Lambdalabs will rent you a H100 for $1.99/h. Well, they won't give you 500 at those conditions, they have their own reserved cluster pricing. But between the big cloud providers and specialized GPU providers there's a lot of middle ground available for people who want smaller training runs (though availability is an issue)
> it's all just an engineering problem

It's not at all, which is why your solution ideas miss the mark completely.

It is fundamentally a "humans can be corrupted" problem.

Everything you describe is a backdoor of various forms. Backdoors have nothing that prevent abuse other than triple pinky promise to only spy the bad guys (by whoever gets to define who is the bad guy, which changes over time).

Whenever you have a system where people have access to bypass it, you'll soon enough have some of those people be corrupted to abuse it, or ordered by higher ups to abuse it or threatened by various way to abuse. Since people are involved, there is a 100% chance this will happen.

As long as corruptible humans are in the loop (i.e. as long as humanity exists) the one and only way to avoid corrupted abuse of backdoors is to not have any backdoors.
The improvements are not quite enough to make me jealous, the only thing that would tempt me is a serious CPU/GPU upgrade. 1600p is sort of useless when you can't even run ps4-era games at that resolution.
> some potential VC questionnaire asked if the company was using github

Were the repositories even public?
SSHFS provides enormous value precisely because it doesn't rely on configuring a file server or elevated privileges. It's convenient, secure and performs well. The ability to create ad hoc mounts for any remote location I can access via SSH is awesome (though I prefer rsync or scp for file transfers).

But relying on SSHFS in production... Yeah, that's insane.
>This turns out to be dangerous in practice because people can think the pistol is on safe when it isn't

One of the golden rules of gun safety is to not point a gun at something you do not intend to kill (the rule usually uses "destroy" because gun culture loves playing down the danger of guns) so if this is actually an issue then responsible gun owners are not as common as they should be.
These could be great suggestions for the criteria a product must meet to quality for a label. I encourage you to file an official comment with your thoughts.
Your article's talking about helium from Algeria, though?

- "The helium shutdown in Arzew [Algeria] is a result of high natural gas demand in Europe, due in large part to Russia’s invasion of Ukraine. Helium is found alongside natural gas in conventional wells. Algeria normally compresses natural gas into liquid form at Arzew for global transport by ship. During that process, it’s economical to extract helium because it liquefies at much higher pressures and lower temperatures than natural gas, explains industrial gas consultant Jon Raquet."

- "But now, much of Algeria’s natural gas is being sent to Spain via pipeline, making separation impractical."
Does anybody have a diff of what this code base looks like compared to the latest "good acceptable ok to keep using" Terraform license commit?

I guess I don't really understand what had to be changed given the new license debacle/changes.
I realize. Which is why I am puzzled by the acquisition of a retailer. What I mean by that is that a retailer that has such financial backing can destroy the watch luxury retail market.
I don't think customers not caring is a valid reason to not do this. Compromised IoT devices don't only cause harm to their owners, but also external networks and the internet as a whole.

A compromised doorbell, or lightbulb etc can be used as part of a botnet to perform DDoS attacks or other nasty activities.

An analogy is like saying we shouldn't work on reducing the pollution emmitted by motor vehicles because the users of these vehicles don't care about how much pollution they cause and would buy them regardless. It's the negative externalities that we need to consider.
That definition is insufficient to capture a secure system. It's not enough for a system to do this. You have to actually know / be able to prove it's doing this.

It's worth repeating this because tech firms have made the definition so confused, but encryption was developed to let you use a trusted device to communicate over an untrusted medium (radio). If your trust in the communications medium is the same as your level of trust in the device, which for so-called "E2E" messengers it is, then the whole system doesn't make any sense.

What Meta/Signal sell is kind of a smokescreen because they control both the clients and the medium and the key directory too, so nothing is really limited. They can update the logic at any moment to disable the encryption for you, the person you're talking to, or everyone, and nobody would ever know. They can also update the client to upload your private key if you're being specifically targeted, or use a weak RNG or suppress a key rotation notification or any one of a million other things. In fact, they might have already done that without anyone noticing. I pointed out in other posts that they already undermined one of the most basic properties of a modern cryptographic system (that the adversary can't tell if you're sending the same message twice) and they did so for typical government-type reasons of controlling rumors and misinformation, as they see it.

For E2E messengers to work conceptually they'd need to allow arbitrary third party clients, so you could choose to trust that client and then use the WhatsApp/Signal networks even though you don't trust them. Or at the very least, they'd need a very sophisticated and transparent auditing programme. They won't do either of those things.
> Also, what happens when an IoT mfr is acquired, does the acquirer assume all the IoT risks as well?

Most other liabilities are inherited during an acquisition. I don't see a good reason for this to be an exception.

It would encourage acquirer's to do much more strict due diligence in this regard, which will have a natural pressure to clean up the behavior of manufacturer's that plan to seek a future exit.

Any exception to liability here seems like a get out of jail free card, for all new manufacturers seeking an exit to behave extremely badly. It also opens the door to corporate shell games, where as soon as a liability is discovered it gets acquired by a thin parent entity to dissolve that liability. I'll leave a comment to that effect as well, but it absolutely seems like this liability should survive an acquisition.
> Has anyone ever mistaken vegan meat alternatives for the real deal?

Yes, I was in Portugal this summer for vacations. I don't know the language and was shopping for groceries. In the meat aisle I saw a package and recognized the word for "sausage" in big so just bought some. Later at home I discovered that it was a vegan product.

I did not really mind, but the packaging felt quite deceptive. Obviously it's not an every day occurrence to shop in a foreign country, and it would have been solved if I carefully analyzed the products I pick; but I just wanted to get some groceries quickly. There were no illustrations that would hint to a vegetarian composition.
A new modern look for the Android brand
I was violently beaten by a homeless(?) man under a bridge a few years back. I still remember the feeling of losing consciousness with each blow to the head.

Going out was painful, but each time I "rebooted", I had a fierce joy for being alive.

When his friend pulled him off me, I thanked him. For not killing me, sure, but also for showing me the boundary of life.
Good luck ever getting that share of revenue
Also a laser that emits enough light to blind a sensor may not be classified as a munition, whereas something that emits projectiles is almost always classified as a munition.
Buy this and you'll also be dripped out and permed
If I understand correctly, system certificates can be modified without jailbreak or any root access on iPhones.
It is as relevant as people's experience and certifications.

Societies laws are not particularly difficult to follow even if you disagree with them, if someone I work has chosen not to follow those laws to a degree that they have been imprisoned by a jury of their peer's I think it is as relevant as their previous roles + educational attainment.
> If I'm making already poor decisions to eat fast food I might as well bike, walk, or drive to go get it and save myself another $10.

Okay, the context that you established in your prior comment is you've already decided to eat take out food. We're not talking about home cooking, which obviously is the main solution for parents. There's no point to getting sanctimonious about situations that people find themselves in for practical reasons.

Hauling kids to the shop to get take out is not always easy or desirable. Obviously, this is all very contextual. If you have teenagers, you can send them down to the shop and have them bring it back to you. If you live in a suburb, you can strap everyone into their car seats and go to the drive through. But for the context which is the point of the discussion -- a person who lives in an apartment with a small child and wants to get take out that night -- it's not crazy to want it to come to your door instead of having to go to the front desk. It might not be possible to haul N boxes of food and M children in the elevator as a single parent. Obviously, this is tricky because the delivery person also has the problem of not wanting their bike stolen. It seems like a good compromise solution is the deliveries mostly go to the front desk, but you can pay an extra fee to get them to come to your door, but again, this is all practical stuff, not a matter of getting snotty that how dare someone be too lazy to walk to the farm and pull up the carrots themselves, blah blah…
:-O do you have some demo of it running or a blog post about it. I'd love to learn more.
> If consumers actually cared about their IoT devices receiving security updates, companies would be doing it.

I don't think this is true. Security issues don't matter until they do, and consumers -- by which I mean "people" -- are notoriously bad at estimating risk for sufficiently rare outcomes.

To take a common example, insecure internet-connected baby monitors can literally give strangers video access to your home (not to mention your child, although we don't need to resort to "think of the children"). I think most consumers make purchases with the reasonable expectation that the product isn't going to violate their personal security without them knowing.

As a concrete example to the contrary, even many laypeople I know consider home assistants like Alexa to be too risky -- they don't like the idea of being overheard and monitored by some unknown "other". And that's almost literally part of the product description! When consumers are aware of these issues, they do care. The idea that they currently purchase as though they don't is confounded by a lack of awareness on the one hand, and a reasonable expectation to the contrary on the other hand.
Show HN: Self hostable multitenant authentication for B2B products
B2B products have organizations (tenants) as customers where each of those organizations have multiple employees. These employees (members) need to share and access the same resources. Multi-tenancy supports this hierarchy of organizations and employees.

We’ve spent considerable time evaluating current solutions. While there are a range of options - we’ve written more about the existing problems here [1]

SuperTokens.com is open core - it enables you to self host or deploy your product on your customer’s infrastructure.

For our B2B offering, we’ve tried to strike the right balance between price and functionality. Unique to SuperTokens is that you can pay for individual features as opposed to needing to pay for a full tier which may include features you do not need

SuperTokens integrates natively into your frontend and backend - giving you significant control over the end user experience (UI native to your domain, without Auth0 like redirects) and the backend developer experience (override any function and make customisations within your own API layer).

Our implementation of the feature also includes all of the following:

1. API to create tenants, 2. Unique or shared user pools, 3. Create multiple development (staging, testing) environments, 4. Unique login experiences per tenant, 5. User management dashboard to manage users on a tenant level

Additionally, SuperTokens also supports B2B2C and B2B2B usecases!

What’s next:
We’re working on several future features - such as SCIM provisioning, TOTP and Pre-built UI for invitation flows

We'd love for you to try it out and let us know what you think. You can get started by visiting supertokens.com

-
[1] Existing self hosted solutions don’t support multi-tenancy / org or multi env setup very well. They either require you to deploy one instance of their service per org (= dev ops nightmare), or have limits on the number of orgs before you start seeing performance issues.

Whilst existing managed solutions have the features, it can be frustrating to customize the auth logic. This usually requires you to create webhooks (which are not type safe + you need to secure them), or to upload code onto their service, which is difficult to review and maintain.
Meta: The title makes it seem like she sued her employer Harvard and that Harvard turned to GoFundMe... Stunts like this is why I do not feel bad about using an adblocker.
Support as in keep charging $500 for $1500 equipment and allowing use that wasn't agreed on at the outset?
The layout is eerily similar to one I designed last year [1]. I may be biased, but I'm not sure if it is worth the $365 price point. That being said, it is a bit more refined and has some nice accessories bundled.

I may pick one up for comparison. But, just noting that there is a comparable open source design available. ;)

[1] https://github.com/eggsworks/egg58
I would recommends the Youtube rabbit hole of Neil Postman lectures from the early 1990's that outlines this very observation. ( I don't expect you to subscribe to all his opinions, but he does attempt to analyze the impact of different media)

I won't go as far as to say reading is the only medium for self-development but I will challenge you, dear reader, to take a photo of a page of a book, then a photo of any modern website and compare the design elements. Books are less distracting, and are not designed to steal your personal agency with the strength super computers.

Books allow for greater introspective focus on complex ideas. In fact, some concepts worth learning require several hundred words to describe. Practicing the ability to singularly focus on long form thought is a great skill to have. It is a form of deep work/thinking.
Maybe we need to approach it differently?

There will always be an "End of Life" date. And there will always be a user using the product beyond it.

So my question is: How do we make it safe?

My first thought is a "deadman's switch". If a device doesn't get or see some form of a signal, it just stops updating and disables IOT features. If the user wishes it to come alive again, there's a button they can press to have it "Check for updates" if there are none, it tells the user it is at "End of Software Updates" and "Certain services will be disabled." etc.

We can't stop the issue. We can decide what to do once a vendor decides to stop updating... and make sure that final revision is as safe as it can be. Preferably non-networked (including bluetooth etc).
A 50-year-old truck driver will become a 60-year-old truck driver.

A 20-year-old truck driver will go to trade school and become a mechanic.

As much as we like to think of ourselves as special, this has all happened before and will all happen again.
My understanding is that Ukraine and Russia both produce a lot of natural gas and hence helium, and that the supply to the west from Russia was cut off due to sanctions and further threatened in Ukraine due to conflict itself.

The shifting mentioned in the article is further knock-on effects of the war and its impact on energy markets - and how those further constrain the global supply chain for He.

This isn't my area of expertise though so please do let me know if I've misunderstood.
Exactly. Some crucial resources need to be managed with a long-term outlook or risk market failures. Helium is one such resource.