skysight-inc/HackerNews huggingface dataset:
> To be crack -- as in "a crack shot" or "a crack team of commandos"

To explore the quirks of English grammar a bit further... While "the general expected this to be a crack team of commandos" flows fine, I've never seen "the general expected this team to be crack".

Perhaps it's similar to the rules for the adjective "top"? One can have a "top team of athletes", but "this team of athletes is top" doesn't work, it needs to be "topmost" or something.

IANAGrammarian, but it's almost as if "crack" isn't being used as adjective that modifies "team", but instead they've merged to become a single noun of "crack-team"... kind of like how "first-responder" is a category of emergency-related jobs rather than literally any person who happens to be the first to arrive.
It's not unless you've got the space, I have a shed I put stuff in and let anything on it starve to death. You have to plan on for it
CVEs have been questionable for awhile as I have seen quite a few over the years that amount to "the attacker already has root on the machine".

The problem now, is we are entering a phase of the general IT market due to government mandates and insurers for all kinds of cybersecurity junkware. Following a CVE database and pushing scary CVEs are basically the end result and the overreaction will still be the same as many of the cybersecurity positions are no different than checklist readers since companies don't want to pay for actual engineers or skilled sysadmins.
Link directly to the Nature article for those curious (or, like me, if you just want to see the pictures):
https://www.nature.com/articles/s41467-023-40593-3
- Isolate security updates from feature updates and allow those to be ignored without imperiling future security updates

- Require that products that are no longer supported with security updates have their firmware and build tool chains open sourced, even better would be a required escrow of the full build toolset + source for every version released to the public, with automatic release once certain conditions are met

- Require that manufacturers maintain documentation and build tool chains for up to a decade after the last item has left the factory

- Standardize update protocols; create guidelines and mandatory review procedures

- Require up front disclosure of what is in a release

- Create a set of requirements to ensure that the conditions under which upgrades/updates take place are safe. For instance (it seems obvious, but alas not obvious enough to certain manufacturers) OTA updates of firmware in vehicles should only happen if the vehicle is not in motion and in a mode where the user indicates that an update may take place.
So I was going to write a quick paragraph reply but I bothered to do a bit of research... :/

From Google:
"Diane Arbus is known for her unrelenting direct photographs of people who are considered social deviates. She also portrayed “normal” people in a manner that exposed the cracks in their public masks. Diane Arbus is best known for her stark, documentary style of photography."

And from the article:
“Arbus captures a boy on the cusp of adolescence yet still playing with toys—but the object is a plastic grenade, an object of war,” said Hughes. “There’s something troubling about him playing solider—the ongoing war efforts were not lost on a little kid in Central Park.”

From PetaPixel:
“I want to photograph what is evil,” Arbus told Model, who noted that “[Arbus] was determined to reveal what others had been taught to turn their backs on.”
The scheme typical for her photography is a frontal portrait in square format. She was one of the pioneers of daylight flash use, which she used to isolate her subjects. What she first liked about it was how it alters light and reveals things you don’t normally see. She wanted to have stillness in her photograph, and that is why she always posed her subjects either on the street or in their homes.
Arbus made the subjects look directly to the camera to “freeze” the picture. However, as we can see in many of her picture the effect was quite the opposite. Many of her pictures look spontaneous.

So, I guess to sum it all up in this photo... the context, the expression, the rigid pose, the fallen shoulder strap, the grenade... the questions you might have about who the child is, what's with the expression, where are his parents, is the grenade real?

90% of that is from the photographer and their interaction with the subject, and only a little of it is from the camera, the tool to capture that moment. It reminds me of the saying "a bad workman blames his/her tools", which is also kind of the inverse of "do your best with what you've got".

If you more like the above, have a search for "Roger Ballen", he takes it to another extreme...
Any arbitrary test that is used to gate access to enfranchisement will be used by politicians to try to chose their voters. This was all fought over during the civil rights period and is simply a means to screw over the other side.

https://allthatsinteresting.com/voting-literacy-test this shows the kind of bullshit tests that would be created if Ramaswamy gets his way
I've found `git commit --fixup` and `git rebase --autosquash` to be very useful when accumulating fixes of previous commits.
You have one crucial fact wrong: The CDDL is actually a weak per-file copyleft.

The CDDL is totally ok with the rest of the linux kernel staying GPLv2. The GPL is allergic to any non-GPL (eg. ZFS) code being distributed with the kernel source.
1. You can always disable window controls. I'll try to add other types soon
2. You can send issue/pr with language you need. Here's current list https://github.com/Idered/chalk.ist/blob/c9b9d8662ab7fcc0b04... or you let me know here which one you need

Thanks!
> Banks have no clue about 2FA/ MFA

Of course they do. But they need to balance security with end user experience.

And since security for a bank is about risk management they can offset this risk in other areas to compensate e.g. additional processes for activities involving larger amounts of money.
Too similar to the original.

On the other hand, Terror Fort...
Looks like some cool opportunities available, thanks for posting!
I'm not saying that hardware shouldn't be open in some form or another (at least in a way that doesn't stifle innovation, maybe also taking another look at how the patent system works and such).

I guess I'm just having trouble visualizing how this problem gets solved for the average joe consumer in a world where hypothetically the hardware is open. Who pushes the security patches out to the devices? All of that has a cost in terms of bandwidth, maintenance, etc. If it's a community effort, what happens when the device gets old enough where no one is really working on it anymore, no more community updates, people have moved on, etc. How does liability work in a world with community-driven updates? What happens if a buggy community update is pushed and the smart fridge malfunctions and causes a flood / damages? What about supply-chain attacks and such?

I guess for the code-literate subset of consumers, they can just go to the github repo and see exactly what is changing and where, but for the non-code-literate consumers, how do they know what kind of updates they are getting from the community?

What about a middle-ground option? Where towards the end-of-life for the product, you are asked a question if you want to switch to a different update channel than the manufacturer default, and if there is no response recorded after X amount of days or whatever, the device just bricks itself?
We're doing the same thing. We don't even own a TV. Toddler loves books so much we get sick of reading to him (but do it anyway).
For an open source alternative, try Bucklyspring: it runs on linux, mac and windows. All Klack's marketing lingo even applies as well: High fidelity sound, Immersive spatial audio, Instant type feedback, Up/down keystrokes.

Debian/ubuntu users: sudo apt install bucklespring
all others: https://github.com/zevv/bucklespring
This attitude will just lead to pretty much every product being closed and proprietary. Which sucks for me, because I like to be able to read the source and run modified versions of tools I use, and have no interest in creating competitive derivations of them. So I think it's a shame that people who try to make software like that get pilloried for being neither proprietary enough (which is apparently fine...) nor open enough.
Nathan's post and the proposed rulemaking are both quite explicit that the proposal under comment is a voluntary labeling scheme. Perhaps the intro could be better written to be clearer, but I don't really understand your complaint. There's no bamboozle.

From above:

"I’ve advocated for the FCC to require device manufacturers to support their devices with security updates for a reasonable amount of time [1]. I can't bring such a proposal to a vote since I’m not the chairman of the agency. But I was able to convince my colleagues to tentatively support something a little more moderate addressing this problem.

The FCC recently issued a Notice of Proposed Rulemaking [2] for a cybersecurity labeling program for connected devices. If they meet certain criteria for the security of their product, manufacturers can put an FCC cybersecurity label on it. I fought hard for one of these criteria to be the disclosure of how long the product will receive security updates. I hope that, besides arming consumers with better information, the commitments on this label (including the support period) will be legally enforceable in contract and tort lawsuits and under other laws. You can see my full statement here [3]."
This makes sense but I've never been taken to task for hours and many of my clients charge me out to their end clients for hours I submit.

The other advantage is that hourly tracking gives me data to predict better what new features of similar complexity will cost. Certainly not an amateur capability.
Thousands queue for hours to leave Burning Man festival
It's one of those things where you have to take a look in person before you buy it. 600 miles round trip is relatively easy to drive in a day without staying overnight.
I really appreciate you directly going to the community for feedback.

As someone who writes software for IoT devices and has worked in the past on security in the IoT space this is sorely needed. By far the biggest issue in my view is that manufacturers are not motivated to take device security seriously since they are largely isolated from any fallout. Device manufacturers already have to pass certification for RF emissions and safety among other things and should have to pass certification for at least a basic security audit on the device and the services the device connects to. Even self-certification would improve the current situation.

For many device types there exists some form of open source OTA update software or a commercial offering. In the last few years there has been significant maturing of the tooling in this space but the security aspect is often left as optional even though the tooling often makes it fairly easy to add. At this point I think the industry just needs a little push to make secure OTA updates the standard.
Another way of looking at it: We have Jobs' iPhone because of Jobs' arch nemesis pet project - Sculley's Newton saved ARM.
Cynical take: People in congress have wealthy contacts that want to buy and profit from this, and likely include the congress member as part of the profit sharing in some concealed manner

Generous take: congress recognizes government entities are inefficient and do a poor job at things like properly pricing and providing goods and services, which is explicitly outlined as a reason congress gave: selling it at market-driven prices

They give other reasons but there's basically zero reason to trust them. The truth is likely somewhere between the two takes above.
Testing the Coral TPU Accelerator (M.2 or PCIe) in Docker
doubling down on the bitter lesson takes infinite forms

> We believe that Kahneman’s System 2 is what will best serve as a blueprint for the next generation of architectures for AI. We further believe that in order to create this blueprint, we must revisit the major conclusions obtained over decades of research by Tversky and Kahneman, and that there are lessons therein which can guide and assist the engineering of tomorrow's systems.

> We believe that today’s ML has laid a strong foundation for System 1, but to get to System 2, we must embrace and integrate additional computational approaches, including the use of symbols.

We must go back, to the future?
Where are the diffs of Android 13 against 14. Isn't this an "open source" project.

If Google actively prevents "rollback" to a previous version, then how does a computer owner try out the new version. Once installed, there is no going back. Even if the owner discovers the new version is unsuitable. It's Amazon with no returns. A new car without a test drive.

Reading source changes might be an easier way to review the new version than running it in an emulator and trying to figure out what changed. Is it not possible.
>The alt-right deplatforming started after Trump was elected

Your use of "deplatforming" seems refer to people/communities/organizations getting kicked off sites or commercial service providers, but the comment I replied to was arguing "To debate a Nazi is to give them a platform" which is a broader set of actions. Maybe "deplatforming" is the wrong word to use here, but "refusing to engage alt-right people in debate or giving them recognition" far predates trump's election.

>Most of the research into the matter has said that deplatforming has worked pretty well, actually.

Source? By what metric?
The idea would be to build a platform off of it so that the library could be loaded from cache for multiple games or applications.
One of the issues is that the upstream vendor goes out of business. What you really need is to have the source code for the firmware, ideally in the public mainline kernel tree so that new kernel versions continue to work on the hardware.
Black holes keep 'burping up' stars they destroyed years earlier
Same. It's a shame that Steam is purely coded for x86/amd64 and doesn't try to use either of these tools on ARM.
I experimentally verified that years in the past, when I was shacked up with some dolphins and a flexible assistant.

I’m able to continually confirm the existence of a near infinite number of a-holes, though.
In the US, you pay state tax and federal tax separately, so those are only the state taxes. If you're paying the maximum marginal rate in CA, you're also paying 37% federal rate and a 3.8% surcharge on investment income on top of that.
Fundamentally, IoT security will increase in proportion to repairability and our. ability to modify/reflash IoT devices.
No other change will have as great of an effect.
If we (the people) cannot audit a thing, its obscurity will harbor vast troves of insecurities.
> GDP is generally a pretty decent stat because people tend to pay things to do things that provide them with some sort of value.

Only if the net value is positive-sum.

Setting a city on fire, or giving cancer to a million people, or just going down the street, smashing every parked car's window with a tire iron will likely increase national GDP.

Liekwise, people pay a lot of money for net negative-sum industries - the health insurance industry in the US immediately springs to mind. We'd all be better off without that parasite.
Oracle is *a* copyright holder, but they have no control over the direction of the OpenZFS fork.
https://www.fda.gov/news-events/press-announcements/fda-appr....
"""
The administration of fecal microbiota is thought to facilitate restoration of the gut flora to prevent further episodes of CDI.

The dosing regimen of Vowst is four capsules taken once a day, orally, for three consecutive days.
"""
I was not read to as a child, but I was pretty good at reading from an early age and grew to love it. Adult life is busy and many other activities compete for my attention now, but I still manage to finish around 10-20 books a year. This lower bound is not impressive to any serious, habitual reader, but I'm happy I manage to keep it up.

I think what the trick for me:

- My parents read regularly, so it just was a normal part of life in my eyes.

- My parents' siblings would gift me volumes of children's book series for birthdays and holidays. I'd look forward to getting the next book in a series for months, and it was a big exciting event for me.

- Adults were willing to discuss the books I read with me (and sometimes humor me by reading one), so I got recognition from them for what I was doing, and learned to connect over books. If a book was important to me, other people were willing to take my feelings seriously. Being rooted in a book made them legitimate.

- My dad was not a spend-y sort of person, but once a year for Christmas, he'd rifle through a book club catalog with me and let me order more or less any book I wanted. This was exciting, and we got tons of random books at home filling the shelves.

- Access to books, i.e. those full shelves. Bored to tears on a rainy day? My father would tell me to pick a book.
My bank wants me to type a code received in the app into a number field a little bit lower on the screen in the same app. They consider this a second factor. Of course it's nothing but busywork and security theater.
I poked around with this a few months ago to figure out how it works locally. The answer is SQLite: https://til.simonwillison.net/deno/deno-kv

I'm finding the business model aspect of Deno KV absolutely fascinating.

const kv = await Deno.openKv();

That's a Deno core API. It works fine in the open source version of Deno using a local SQLite database file.

But as soon as you deploy your application to their proprietary hosted service, that core API feature gets massively more powerful. It's no longer a SQLite database, it's now a globally distributed key/value store backed by FoundationDB, replicated around the world.

It looks like they've extended that idea further with the latest version - you can now do this:

export DENO_KV_ACCESS_TOKEN="personal access token"

const kv = await Deno.openKv(
"https://api.deno.com/databases/your-database/connect",
);

And your local code is now able to manipulate that remote FoundationDB database as well.

I'm having trouble thinking of a precedent for this - an open source project that has a core API which is effectively a lead generator for their proprietary cloud service.

I'm not entirely sure how I feel about it. I think I like it: open source projects need a business model, and the openKv() method is still a supported, useful part of the open source offering.

Kind of fascinating pattern though.

UPDATE: I just found this page of docs https://github.com/denoland/deno/blob/be1fc754a14683bf640b7b... - which describes the "KV Connect" protocol they are using. It looks like this evens the playing field, in that anyone could implement their own alternative backend to Deno Deploy if they wanted to.

This firmly establishes me on the "I think this is cool" side of the fence.
It seems that a Timelinize and Photostructure combo would greatly benefit those trying to escape Google Photos claws. Where can I sign-up for the Beta?
That’s not quite the same thing.

Having dealt with similar situations on both sides, equating the two is not something that should be done.

Neither should be trivialized, but they should not be equated.
If this is true, it is truly horrible: know someone at google and just sink the competition in one fell swoop. Although one has to say that serving via http certainly is not helping.
The fact that you can continue to use an older version and fork it supports your parent's statement that the license is tied to a specific version. The new license only affects newer versions and can't be retroactively applied.
Let me remind you Windows RT for ARM. Same restrictions of TPM, some screws tightened somewhat more.
The can sue them for anti-circumvention statutes in the DMCA. But not for infringement, since the developers did not do the infringement, they only enabled it.
I tried therapy a few times, at the insistence of several friends. After 3 platforms, and 7 therapists, I've decided its a complete waste of time. I'm not 11 and require someone telling me things I can find in a dollar bin self-help book at $100 per 30m.

I'm mildly convinced that therapy is another big-pharma conspiracy to pay for services that are worthless.
I don't remember the original articles ascribing intent.

I grant that if their intent was to defame her, than I can see this being a somewhat expected use of defamation laws. That said, without questioning the truth of their claims, this seems to be an abuse of the system. As you are suing in when you know they have a valid and acceptable defense to the claims. As the article says, this is using the process as punishment.
It feels the same thing happens with humans.
At Sudbury schools, reading naturally occurs for students, but the age ranges from 4-12, with typical being 7-9. There seems to be little correlation to early reading and a love of reading, anecdotally from these schools. In fact, often the ones who learn to read later seem to love reading more than the ones who read earlier.

The first books, of any kind, my daughter read were Harry Potter books. She went from not reading at age 8, to reading chats with her friends at age 9 (pandemic time), to having read the entire 7 book series by the end of age 10. No one taught her how to read. Writing, using devices, arithmetic, she largely acquired them all on her own as she matured.

While I am biased, she seems well-adjusted and quite bright. I have no doubt that she is capable of mastering whatever she would like to master.

Note that the article was looking at a cohort study. It was not based on randomly assigning "pleasure reading in early childhood" which means cause and effect cannot be ascertained. My guess is that if they were to measure lifelong Sudbury students they would find well-developed cortical areas regardless of early childhood reading or not. The development probably relates to constructing complex understanding of the world (or fictional worlds) which independent play as well as reading can do, but conventional teaching cannot.
I don't want this to come off wrong, but lowendbox.com, nginx, and sftp exist.
Exactly this and even a step further, who grades the test to determine which ballots to throw out? If the test is in anyway free-form then the hanging chads debate gets to happen at every polling station, forever
HP's RPN calcs were ubiquitous in the 1980's .. especially the HP 41c. If you didn't have one for your physics exam you were at a clear disadvantage. I never know why folks quit using them. I still have mine and can kick anyone's tail with a infix calculator. In fact, when I was a professor, I would challenge all the students in the class to see if anyone could be beat in evaluating a large expression. I would write a gnarly expression on the board as a challenge. No one was even close to me. Parentheses are for the weak and slow.
This is essentially where I have landed. I think these companies should have just used a license like BSL from the get-go, and I hope that the next generation of product companies will learn that lesson.

But unfortunately I think the lesson they will take from this instead is "we should just build a SaaS with no source availability because that's way easier and source-available just makes people mad anyway".

I think that's a shame.
Warner Bros. Discovery: Ongoing Strikes Means $300M-$500M Hit to 2023 Earnings
Lots of people commenting here who worked on JavaScript projects years ago and still think that Typescript is optional and that Babel/webpack needed.

This stuff has been fixed with ts and, ESM in the browser.