skysight-inc/HackerNews huggingface dataset:
i don't know what the best solution is, for one i think the same is true for adoption, although i hear that in the US (and maybe in most western countries) there are not so many kids needing adoption for that to be a problem.

How many good-enough homes are out there, even if they are not perfect?

that's actually not what i am concerned about but foster parents that are outright abusive. so basically, i think that even foster kids should only be taken away if they are neglected or abused in such a way that you would even charge native parents with that.

the goal should not be to find perfect parents, but to find parents where the kids actually can stay as long as they need to. the barrier to take them away again is to low because it doesn't consider the hurt caused by being "taken away" itself.
> Do people confuse motor oil, olive oil and jojoba oil? I think not. No more than they confuse vegan steak from beef steak.

No they don't confuse them because there's nothing to confuse, they _are_ all oil, just different types.

Plant meat however, is not meat. I can absolutely imagine someone confusing vegan steak as real steak, because I see people do far stupider things on a weekly basis.
Not just rclone, but it seems that so many things are moving away from using the ssh_config; I have things setup to "just work" for so many hosts with OpenSSH, and having to individually configure a half-dozen programs that build on top of SSH is a pain. Sometimes it's because they use paramiko, other times it's because they want to pass their own configuration options to ssh that mess things up.

Sometimes you can manage to get things to use the ssh_config again (e.g. with xpra you can do "--ssh=ssh" but other times I've not yet figured a workaround.
I spent a lot of time on B&W through school but dropped it once I didn't have access to a "real" darkroom any longer. (I had the equipment but I quickly decided setting it up in an apartment darkroom was for the birds and, even after I bought a house, didn't really have an appropriate space.

After that it was just color slides but it pretty much became just a trips and special events thing. I go in and out of using my interchangeable lens digital cameras but it's low friction enough if I want to pull them out.
I also have a micro 4/3 camera with an adapter and a bunch of vintage (70s) Pentax lenses from the Super Takumar range (M42 screw mount).

You can get them off eBay for under 100$ each in almost-new condition, and they're super fun to play with..
As someone with a libertarian bent, meaningful labels appeal to me as a decent way to address problems without overriding the judgement of the market. An informed market avoids lemons. So this proposal sounds OK in principle but here are some questions. Please be aware that I'm not a US citizen so my views don't really matter here, I'm just looking over the garden fence and asking questions.

1. Your argument for why it's under the FCC's jurisdiction doesn't seem all that strong. In your linked speech, you argue it's important because the FCC has the ability to regulate signals interference, and insecure devices could be turned into jammers. Has this ever actually happened? If not, is this not rather a large stretch of the FCC's mandate? Perhaps this sort of effort belongs in a different part of the government, or in an international standards agreement (possibly non-governmental).

2. What's the definition of security you're using? Security problems always exist in the context of a threat model, so having a label would imply standardizing a threat model. For example, smartphone security systems were originally designed to block malware, but over time have been stretched to try and solve often vaguely specified privacy goals towards non-malicious software too. If someone commits to supporting security updates for five or ten years at risk of government censure, then the definition of security is going to become a battlefield because whoever wins gets to control all the software that's got this label.

3. Modern security is layered via defense-in-depth strategies. If there's a bug in an inner layer but it's not exploitable due to mitigations or sandboxes (software firewalls) in outer layers, is that a mandatory security update or not? It could be argued either way because the device is not technically hackable still, simply the armor became weaker. Today this is left to the best judgement of engineers, who must balance efforts to patch theoretical vulns in old devices with work to e.g. build new defenses for newer devices. If it becomes mandatory, then paradoxically, new devices may become less secure than they otherwise could have been because all the effort is going into patching old devices.

4. Imagine a company commits to security updates for all devices for 10 years, but after 5 gets into financial difficulties. Maybe due to competitors who didn't make that expensive commitment. One quick way to dig themselves out of this hole is to push a 'security update' that drastically restricts the device's functionality e.g. prevents it from installing new apps released after a certain date. This can be indeed argued to make the device more secure, and you can argue that there's no expectation that the device will always be able to install new apps anyway, so no end-user expectations or promises have been violated. How would you stop this kind of perverse incentive?
Hmm, yeah. Just as fraud telemarketers set up a new shell run by the same principals when the legal bills come due for their old one, so we're likely to see new labels for a new shell company slapped on the same old insecure IoT box.

So I'm not sure "escalating penalties" is going to cut it. It's still whack-a-mole. You need a way to kill the mole, not just drive it to pop up a new hole.

You need a way to get to the principals. They're the mole.

You need to either make them personally liable financially, or you need to jail them. Nothing else is going to stop serial fraud-behind-a-shell-company.

I'm not sure I have an answer. But whatever answer there is needs to be applied not only to fraud telemarketers (please), but also to fraud IoT manufacturers/resellers.
Floating Point Operations Per
Also called Ocimum sanctum. There are a few different varieties of holy basil, too. Some are mostly used for their medicinal value and some for cooking. I'm not 100% sure which type is used in Thai cuisine, though.
Simple. Give the manufacturers the choice: either they must provide full (FLOSS) source code and documentation (full schematics) to the user to enable them to maintain, patch and thus secure their devices (see also: right to repair), OR they are liable for all damages (direct, indirect) for a 30 year expected lifetime that arise from security issues with the device AND must have insurance to cover those damages (so that they cannot get out of that liability by bankruptcy). Most will opt for FLOSS, and none will have the excuse that it would be more secure to make it proprietary. And then users will at least be able to fix issues -- and the security community will be way more effective at finding issues as it wouldn't have to do the slow reverse engineering.
Planned or unplanned obsolescence is good for business. You are proposing regulations counter to that, so should expect counter-pressure, even for IoT makers that want to do the right thing.

By volume and impact, what devices have IoT vulnerabilities? If from large mfrs, you might expect some measure of support as that would be somewhat in their best interest, if only to preserve their brand image. My concern would be low quality, usually cheaper, whack-a-mole mfrs that come and go on Amazon, eBay, etc. Even if they release a product that would fall under these guidelines, how are you going to go after a ghost?

Also, what happens when an IoT mfr is acquired, does the acquirer assume all the IoT risks as well?
New-in-box Pebbles can still be found on eBay, and a clone of Pebble's web services is actively maintained and supported by the Rebble community: https://rebble.io/
Largest by area, but only about half the size of Lake Baikal by volume.

https://en.wikipedia.org/wiki/Lake_Baikal
Kate renders nicely, performs fluidly, opens fast, and never lets you down. I use Notepad++ on Windows as it's work-approved, but Kate where I can.
IIRC the main objection was that it could be used to do something with the radio (boost power?) that caused the device to exceed FCC limits for a consumer radio? Something along those lines?
The federal government has been trying to sell it off for almost 30 years. https://en.wikipedia.org/wiki/National_Helium_Reserve
Yeah. They want me to work for twice hours at half the pay. Lol.
> Humanity didn't develop emails, or have meetings, or communications because it some sort of ritual to a strange god (barring the meetings produced by the priests of agile to appease the Agile God). We communicate in order to share information from one person to another for a reason. So if we have a workflow where someone uses AI to generate an email, that results in a meeting that is then summarized by AI, that is then sent to an inbox that is then scanned and the contents of which is summarized by AI. What was the point of any of it?

Because we didn't have a machine that can do this whole collective decision-making process. What if we make an AI that's powerful enough to replace a whole organization? A whole company? A whole industry?
While the IoT security situation is out of control I doubt that regulating security updates will have any other result than radically reducing competition and innovation in the space by making it impossible to operate as a small company. It will simply push more hardware innovation out to China.

Having worked in the space I came to the conclusion the only viable secure future is to adopt star topology local networks where local traffic for all devices goes into a single secure regularly updated broker device that then decides what to do with it. Any access out to the Internet or between devices needs to be mediated. The part that will annoy a lot of people is that broker device probably needs to be able to read all of it. Therefore rather than just regulation I would talk to the WiFi alliance in particular about possibly expanding the scope of what it means to be a WiFi router.

The problem is actors like Google really want such a thing to be just in the cloud "for convenience", by which they mean monitoring everything that ever happens.

The only corporate actors I encountered that understood this were the Taiwanese OEMs, who are remarkably on point and blunt behind closed doors, but they are basically powerless to do anything about it.

Edit to add: if there is one thing the FCC could do immediately it would be to ban the covert deployment of cellular modems in other devices and to force giant warning labels for such things and require they be user removable.
Finally. My love of the sweep has proven to be correct, two thumb keys is the way. I am using a ZMK powered Urchin, a sweep variant, as my only daily use keyboard, 34 keys of love.
Cash is a less than optimally efficient part of the current economic systems, not unlike credit cards are The logical conclusion of technological development in this area would be something like a micro hardware security key storing blockchain wallet keys implanted inside your hand, activated by your thoughts or a certain movement or something, at least as far as I guess.
Because they have a point. People justify the actions of the US constantly with the argument that they are a 'force for freedom and democracy in a world of tyranny', or something to that effect. Just last week I had a discussion on HN with people who were rooting for the US to be the first to develop autonomous AI killer drone swarms, because clearly the US of all nations could be trusted to use such technology without devolving into a police state like China or Russia would. I'd love to share their optimism, but such arguments and sentiments are meaningless if the US is just going to behave like Russia and China anyways.

And I think the more valid concern there anyways is the 'race to the bottom' part, not necessarily the 'moral equivalence' part
steep learning curve if you've never used a split\ortho board but once you learn how to type again (couple of weeks for me), other than that my wrist pain is now gone!
only real downside is people asking why I have a pair of glowing oven gloves on my desk
For California, drought/water shortage is primarily and agricultural problem, but has been externalized to urban areas and consumers - urban uses are 10%, while 40% goes to agricultural uses[1].

“Environmental” is 50%, but it’s a bit of an odd measure - per the report [1] it’s for rivers and maintaining habitats. I’d pref to exclude that from the available total. That would make agriculture 80% and urban uses 20%. When you consider many water inefficient agricultural uses, there’s quite a bit of water for consumers that is being sent elsewhere. CA has also consistently failed with other source developments, e.g. desalination, so I’d argue it’s less a fact of life here and more a question of the will to improve.

[1] https://cwc.ca.gov/-/media/CWC-Website/Files/Documents/2019/...
If there’s a private right of action you can bet the class action lawyers will do the enforcing.
How often do SSDs wear out? I've never heard of an example in real life even for the heaviest users. Every time I've looked at SSD lifespan metadata out of idle curiosity it has never been particularly close to end-of-life even after years of use.
It's 8 years and even then you'll still be be able to enable updates for Google chrome
They are substantially worse areas for natural disasters then other regions of the US
https://www.envistaforensics.com/knowledge-center/insights/a...
> Humanity didn't develop emails, or have meetings, or communications because it some sort of ritual to a strange god

We do however have lots and lots of ritual as to how those communications occur in order to confer the proper respect and tone. In most cases its pretty much noise but you can't skip it because skipping it means offense was intended. We can all recognize this but we aren't really free to escape it.

Generating emails with AI lets a person avoid the appearance of intentional offense and summarizing emails with AI lets you cut to the point while acknowledging that you are dispensing with all of the ritual.

Who knows, maybe after long enough the cultural convention can shift to just sending your prompt straight to the other person!

Obviously I'm skipping over a ton of pitfalls but I think that captures the appeal for a lot of people.
> The ability to kill people flows naturally from the fact that the AI has goals or preferences or things it is trying to achieve or optimize and has an accurate understanding of reality.

AI has precisely zero "preferences" and zero "understanding" of reality. Its training data however does. And it's people who control that data. An ai trained on python programming will have no clue about making nuclear bombs, nor would it have any clue about "wanting", let alone killing us.

> but does not have the ability to formulate plans

I mean openai's marketing plan is partly based on the fact that their AI can help create plans for tasks ahead. But I do agree, it has no ability. It stochastically generates output.

> Future AIs that combine these two abilities are dangerous.

AIs don't just happen to combine themselves. It's people that combine ais.

Look all this does is shift the blame from those responsible of using this tool for nefarious outcomes on to the tool itself. The risk here is that in the process we ourselves become tools of the very same people and propagate this nonsense. And that's riskier than computer software going rogue.
On Android 7, Google changed the defaults for certificates. Previously, apps trusted system certificates and user certificates unless they opted out. On Android 7, apps have to opt into trusting then user certificate store.

Browsers opt in, or in the case of Firefox, can be configured through hidden settings to opt in. Many other apps don't, though.

If you're trying to intercept traffic or use apps that should opt in but don't, the system store could be altered with root access so that these apps still trusted the certificates you're trying to inject. However, most apps worth their salt implement certificate pinning, so that's hardly reliable anymore. It's Arnold workaround that works on some apps but not on most.

Furthermore, Google Chrome and derivatives require certificates to be logged publicly so malicious CAs can't mess with random domains. Your private CA isn't logged in the public record, so adding the certificate to the system store actually breaks HTTPS for many browsers. You can add the cert to both stores to make it work, but it's kind of a hack.

On iOS loading certificates is easier, but you'll still need to work around certificate pinning if you want to intercept HTTPS traffic.
> "grill" in France is used as an anglicism, ie. words imported straight from English, with the meaning sometime distorted beyond recognition

That’s not that simple. The English word "grill" comes from the French "gril", a word that has been in used for more than a millenary. Only the orthography "grill" with two "l"s comes from English, but the rest is plain old French. It also makes sense: "gril" comes from "grille", which also gave "griller".
Mounting a wired keyboard never seemed practical to me.
Python is even worse than than js. Worse package management, worst static typing feature. I also work in cpp space and I would rank large python code base one the worst to read with
> Of course you have to insult the victims so we don't show up, but I don't care if people think I'm a moron.

You can +1 me to your lonely list, and I don't care either.
I've shot tons of film over a great many years and I have a sizeable collection of cheap and expensive 35mm and 120mm film cameras covering the period from the late 1800's to the 1980's. I stuck to film well after digital cameras got cheap enough for my tastes and I still love to shoot film - I have about 25 rolls of exposed color film in my office waiting for me to develop, so I still shoot a fair amount on film. I also feel more of a connection to my film cameras since they have a personal history and are works of art.

One regret I have about the film era is that, starting out as a teenager, I scraped to afford film and, recently, it struck me how large the gap is between the memories I have now and the memories I captured on film back then. Once I had a job and could afford to take more photos, I seemed to have decided that photography was for travel and special occasions and I, sadly, took photos of little else.

Now I shoot a full-frame mirrorless digital (mostly so I can use my old lenses and also, I hate cell-phone photography ergonomics). I carry my camera everywhere and shoot quite a few photos on any given day. I am learning so much more about photography now that I can freely experiment and the equipment allows me to capture things that were only rarely possible before.

That being said, I encourage everyone to try film for whatever reasons strikes your fancy. The more people into film, the more options we'll have for film stock, chemicals, and cameras.
Computation as Philology
and lack of F1-F12 is a show stopper for me, I use them in my IDE.
It sounds kinda like you're looking for breadboards. You could build a CPU on one of those, but it's unlikely to do anything interesting and super unlikely to hold the attention of a younger audience.

The happy medium is probably using both, together. Raspberry Pis and Arduino boards all have documented GPIO you can use to leverage the power/simplicity of a modern CPU with the tactility and practicality of a physical circuit. If you're purely interested in educational value, building a CPU from scratch might not be a good idea for a young audience.
That’s only one aspect of the problem.

Lots of people have been bitten by suddenly unsupported devices.

I think it could do some good.
Don't worry, you don't. Just wait until they lobby and make it illegal do to do so! This will come under one of the following guises:

1. Save The Children

2. Save The Planet

3. Save the Tax revenue

4. Anti-Terrorism
Some additional points for posterity, in case it isn't driven home here:

- All redundancy in ZFS is built in the vdev layer. Zpools are created with one or more vdevs, and no matter what, if you lose any single vdev in a zpool, the zpool is permanently destroyed.

- Historically RAIDZs (parity RAIDs) cannot be expanded by adding disks. The only way to grow a RAIDZ is to replace each disk in the array one at a time with a larger disk (and hope no disks fail during the rebuild). So in my very amateur opinion, I would only consider doing a RAIDZ if it is something like a RAIDZ2 or 3 with a large number of disks. For n<=6 and if the budget can stand it, I would do several mirrored vdevs. (Again as an amateur I am less familiar with RW performance metrics of various RAIDs so do more research for prod).
My Mom never left! She has a cell phone but still uses an old point and click film camera (at least it has autowind and doesn’t use the old lever to advance the film). We keep trying to convince her that paying for film and development isn’t such a good thing, but she is set in her ways. The grandkids at least are amazed when she brings it out. She even has a laptop and a desktop computer where she could store the photos. She has a kindle, a tablet, and a phone. She can email, text, FaceTime, etc. But she simply won’t take pictures with a phone.
This sounds like an enforcement problem.

How much do cities spend on police cars for traffic flow, moving, and even parking violations; but not have similar ratios to enforce more efficient space/energy and safer transportation methods?

In the US, part of our infrastructure underspend is going from full time janitor at a park to a weekly visit by a contractor.
Not an expert on Thai linguistics, but a phonology enthusiast who's skimmed the phonology section of the Wikipedia article for the Thai language, and I thought I'd provide my understanding of why this confusion occurs. (It's similar to a common issue in romanisation of Standard Chinese.)

The consonant group in question is the "velar plosives", so-called because they are produced by the sudden release of air blocked behind the tongue and the velum. In English, this includes the k and g sounds.

There are two relevant modifiers that can be applied to consonant sounds: voice and aspiration. Voice is the vibration of the vocal chords. If you touch your throat, you will feel the difference between s and z. Aspiration is the "h-iness" of some sounds, where a short burst of breath is produced alongside the consonant.

In common English dialects, the k sound is unvoiced and aspirated, whereas the g is voiced and unaspirated. The two properties go hand in hand, so either can be used to distinguish the consonants. (0)

In Thai (as I understand it), there is an unvoiced and aspirated sound, and an unvoiced and unaspirated sound. So whether these two sounds are interpreted as k/g or two varieties of k (kh/k) is ultimately arbitrary.

Pinyin, the most common romanisation scheme for Standard Chinese, went down the "k/g" route. It sounds like RTGS goes down the "kh/k" route instead.

---

(0) In actual speech, this apparently clean distinction is much more blurry for a variety of reasons, but it's a good enough approximation for this purpose. For the interested you can Google "fortis and lenis".
Maybe if the Western governments stopped any activities which could be pointed to during the 'whatabout' game then China and Russia would stop... and many people in the Western world would be very happy too.

News story today about Germany refusing to extradite a criminal (alleged) to the UK because the conditions in UK prisons are so bad due to governmental neglect. Kind of hard for the UK to talk about human rights in other countries when it can't even run a prison.
99% of users don't know their iot devices have firmware nor that it can be updated.