skysight-inc/HackerNews huggingface dataset:
For those of you unfamiliar with the specific challenges IoT patching brings, here is a blog post from just last week on one aspect of the topic: http://tomalrichblog.blogspot.com/2023/08/british-cuisine-de...

FTA:

> I assumed that device manufacturers update the software in their device about every month...he said they do it annually.

Those devices are at least _getting_ updates - there is a long tail of devices whose operational lifecycle [far] exceeds the vendor's support timeframe - in other words, they don't get patches at all N months after release.

The solution to these problems is straightforward - we've been managing it in software for a long time. EOL OSes, Long Term Support (LTS) OS releases, etc - but the device manufacturers are not as mature, and have not been making natural progress to do so.

And since this is HN - there is a startup hidden in the midst of all of this: an enterprise-grade IoT OS that "does security right." Sell to the device manufacturers, allow them to market it as "enterprise-ready" or some such. If the FCC guidelines here are approved, there will be a suddenly increased demand!
I'm not the worlds biggest fan of Verilog, but Verilog's semantics are relatively fixed. The interpretation of verilog has remained fairly stable for a decade at least. Chisel is in some ways still a work in progress. So if you want to use it, you have to keep track not only of Chisel productions specific to your design, but also the version of the boom or rocket generator you're using with it. Chisel was never at the center of our design flow, and none of the people I currently work with went to UCB. When we used the Rocket generator we were often "nervous" about whether the version we were using would interpret Chisel productions in the way in which it had previously.

But yes... this led us to a working style where we tried very hard to avoid having to use rocket or boom generators. I didn't want to be in the business of maintaining RISC-V Verilog tools. At around the same time we realized RISC-V was overkill and built a very poorly designed Lisp DSL which output Verilog for a dog-simple 6-bit controller. Not an ideal solution to be sure, but it worked better for us than spending a couple years learning Rocket/Scala/Chisel.

Nick Tredennick (who I believe was the main designer of the 68k) has a quote in his book "Logic Design: The Flowchart Method":

The problem with many texts is that we lie about
details. We are sloppy in areas that are not our primary
concern. Academics are method fanatics. Practitioners
are solution fanatics. In school, we glorify the methods
and lie about the sophisticated problems we solved. In
industry, we glorify the problems and lie about the
sophisticated methods we used. Each side loses
credibility the minute one side reads the other's
literature. The academic knows that the practitioner's
"method" is (ugh!) arbitrary, just as the practitioner
knows the academic's "solution is (ugh!) not applicable.
Because we oversell method and solution, it takes too
long to figure out what really works.

I don't want to say Rocket / Chisel / Firrtl is bad, but it always seemed to be more in support of a "process focused" methodology than the "solution oriented" focus I'm used to. If it works for you, I'm absolutely not going to tell you it's a bad idea to use it. It's just too much overhead for the small projects I work on.

That being said... SiFive was working on CoC (theorum prover) extensions to validate designs using formal methods. THAT sounds fascinating, but I'm not sure how they would monetize it.

[Edit: To recap, I don't have a problem with Rocket / Chisel / Firrtl per se, but they operate at a level I'm uncomfortable with and seem to be less stable than I would prefer. I completely understand this is not the case for many other people.]
As a very broad starting point, we should be sure to address the fundamentals of security:

CIA: Confidentiality, Integrity, Availability.
It's similar to how people are now fatter and sicker despite access to more information and options vs prior generations. The limited choices before "happened to" line up to what is for many a healthier diet and exercise pattern.

Similar with kids - there's less pressure to have kids now and easier excuses not to - but that road takes you to not a good place in the long run.
I have been a fan of Erik for 6 years now.

If you are happy about where you are in life and are making close to half a million dollars a year, like some on this thread, feel free to ignore his advice.

If you are stuck in the race to the bottom and wonder why, for example, the company's management doesn't pay attention to anything you say, then read his blog.
I blame downward price pressure and globalization.

When it comes to furniture, I only buy solid wood now. Ideally used. The best place to get antiques is from rust belt towns because the prices are actually affordable. The majority of my stuff too were either street finds (California was great for good free stuff) or hand me downs.

I might check out some consignment stores back east. Anything solid wood is held onto. I will never buy awful Ikea junk again.
Hangover-8.15
I don’t use my iPhone for much more than for scrolling hn during breakfast, portable audio player, looking random things up if I’m on the go, and making calls. It’s fine for that. But the user is so restricted (u can look into jailbreaking), I try to use my phone the bare min and use my desktop for everything.

For context this is also someone in the midst of dumping macOS for Linux as well
Very true. A few times I forgot wet wipes after cleaning and next day it was like wtf happened to this table.
Firefox OS.
No, the thesis is that coming to Europe in defense of soverign nations does not in any way excuse american domestic policy choices that result in people being worse off.

Just like sending aid to Ukraine does not in any way excuse the US of invading a sovereign country in the middle east for fake reasons and then attempting colonialism for 20 years under the guise of "bringing democracy"

But you already knew that.
I wish Inferno/Plan 9 had caught on more, but sadly I think it's not quite the abstraction(s) we need in the modern day.
Rolling Stones will release their first studio album in 18 years
Sorry, but this is a terrible idea that is going to stifle innovation and make it much harder for startups and small companies to compete. The government simply doesn't need to get involved in this. There is already an incredibly robust ecosystem already in place which shames manufacturers who drop the ball when it comes to security.

More government is rarely the answer and especially so in this case.
It depends on what you're using the screen for - but in general they're used for changing settings, reviewing framing and exposure, etc. I think they can also be useful for previewing long exposure settings. Even on very expensive cameras you're going to struggle to use them to do detailed assessment of photos.

That said you can absolutely buy hoods for them - though they are generally aimed at people using them for video.
Nov 5, 2022

8 months pregnant, 9 month old baby, 10 month old post
Indeed, I paid less for my Wista VX than my Hasselblad 503. Even the lenses were cheaper (all second-hand, of course). 4x5 film is not cheap these days, fortunately I have a good supply in the freezer. DIY processing is a must with 4x5, it's way too expensive to send out.
> There are also often practical issues related to security patching embedded devices: for example, a downstream supplier's driver can make it impossible to upgrade a kernel unless/until the supplier provides a fix. Of course, strong regulation here could help to drive bad practices like that out of the industry, but I'm not going to hold my breath on that one. The effect of regulation like this would make it harder for manufacturers who don't have the market power to lean on their suppliers to provide security patches.

This. We were building an IoT product that was effectively stuck on a derivative of Ubuntu 18.04; we couldn't upgrade because vendor wouldn't rebase on a new LTS for a very long time. As our project was being developed in Python, we were stuck on 3.6, and as it reached EOL, many third-party libraries dropped support and wouldn't even release security fixes; we needed to stay on that particular OS because of hardware support; and moving off the distribution-provided Python packages would increase maintenance burden beyond what we were able to handle.

Even if the vendor would continue to provide security updates to the base OS and its packages, any real-world software solution will rely on third party packages, which may choose to drop support.

I would love it if the lawmakers considered this scenario.
Taggy – Discover the magic of words behind your pictures
What can you do with Taggy?

Find the right phrases and keywords for your posts. Increase the visibility of your content on social media.

- Generate custom captions and quotes based on the content of your pictures. You can add or remove hashtags and keywords to generate new texts.

- Easily copy the text with the hashtags and use them in your publication.

How does it work?

We use AI to detect and classify the keywords of your photo. Then, we translate them into trending texts, topics and hashtags.
I wish I had this when I was still using OpenWindows on x86 Solaris 10... all the way up to 2012/2013. I would fake a tiled UI by setting up xterm to load four instances at specific pixel positions.
> The only value a registry like crates.io provides is to have shorter human readable names instead of git repo urls. Possibly together with the ability to run some analytics on what some people write in rust. This is purely cosmetic and is a WWW anti-pattern (urls have this job).

This is not quite true. There are some assurances around availability that crates.io provides that self-hosting wouldn't. It won't publish two crates with the same version, it won't completely delete a crate version (a yanked crate-version is still available if you have a Cargo.lock file), it won't retroactively change versions, and it won't completely go away if a domain expires. URLs in their ideal are great. In practice they are brittle.
Premise is incorrect. Furniture is great. You can pay whatever you want and get appropriate quality.

Low end ikea stuff works great if you put it together right and use some glue.

Mid tier furniture is still available — it’s just going to look very traditional.

High end is available to those with $$$ like it’s always been
> Freedom of the press never protected the unauthorized release of classified military secrets.

Yes, it did and does. If you agree not to divulge a military secret as a condition of gaining access to it (for example, as part of the terms of your employment with the government), then you can be prosecuted for reneging on your promise. But if you are a journalist who learns the info secondhand, you never agreed to anything and freedom of expression sanctions your actions.
I once solved worst-case write performance in an open source MVCC data store (Apache Lucy, a “loose C” port of Lucene) like so:

1) Limit the maximum size of an update. This causes gradual degradation of the index, which is ordinarily dealt with through periodic consolidation — but now this this consolidation will be disabled in the main write mechanism.

2) Enable a background consolidation process which runs concurrently. At the end of the consolidation process a short write lock will need to be obtained while you replay all deletions that have occurred since consolidation started, but the time required isn’t problematic.

This fix required major surgery to the Lucy indexer core code, so it’s something that that would only be feasible if the data store itself supported it.
I'd like to believe I have some clue, yes.

It feels like you allude that I don't. Is there something specific you'd like to mention here, or am I supposed to guess?
>Are you really arguing that they didn't believe the position they presented in their declarations of succession?

Depends on how do you define 'believe'. Politicians back then (just like now) certainly often said things they didn't believe in when doing so was politically advantageous.

I certainly believe that they thought that the new administration was probably the biggest threat to slavery in the last 50 years or so and its actions were likely to lead to eventual abolition. Does not change the fact that immediate abolition was politically infeasible (which is something Lincoln himself reiterated during his inaugural address and I have to reiterate that while opposed to slavery Lincoln himself was not an abolitionist and did not run on abolitionist ticket).

> Whoa there. Please do not shift your argument.

Am I? Sorry, my comment might not have been clear, I certainly did not want to imply that abolition was likely at any point during the Lincoln administration (at least before the next election).

> Do you have supporting evidence for your belief? I mean, these people elected the leaders of the state, so why do you think "most" people disagreed?

I'll have to shift my argument in this case and say "most rational people".

Also if we look at all of the quotes you posted:

- slavery is in the course of ultimate extinction.

- that the South shall be excluded from the common territory

- war must be waged against slavery until it shall cease throughout the United States (unless you believe they mean a literal war)

- and their pledges to continue them to the final consummation of these schemes for the ruin of the slave-holding States.

none of these seem to imply that their authors believed that abolition was imminent (in the next 4 years or so):

> Do you have supporting evidence for your belief

Anyone who vaguely understood the political situation in 1860 would have know that (peaceful) abolition during the next 4 years was unfeasible.

> so why do you think "most" people disagreed?

Disagreed with what exactly?
Do you expect that this skew would meaningfully alter the conclusion? That there are many men on their deathbed who wish they had more time for brunch in their life vs the hard work of parenting?
So why then would private business not eliminate those unnecessary jobs in order to control cost? If they are set in their ways, then why don't they get outcompeted by more efficient companies that skip those vestigial roles?
This is an incredibly cool concept and I would have loved to have this book when I was in undergrad (for Physics).
I'd love a Moonlander with a low profile like this. I have zero interest in having less keys.
C# Threading and Multithreading: A Guide with Examples
ChatGPT should be your first cofounder
The reddit you linked to said to force update your filter lists and things will be back to normal.

Have you done this?

Meanwhile, for a less "ad-full" youtube experience, try yt-dlp: https://github.com/yt-dlp/yt-dlp
Neither regulation nor market mechanisms can really address the problem of device security:

There's virtually no overlap between the transactions of (1) purchasing the device for use, and (2) maintaining the device for security.

All the transaction features differ: different parties, different interests, different type of transactions, different risks. That's a recipe for exporting costs that no market mechanism or regulatory scheme can fix.

The best way to handle these is to have official succession plans: the manufacturer needs to delegate to a support organization for every product, and every product in use needs a way to indicate if it is up-to-date with support. The FCC maintains the database of support organizations for every FCC-certified device.

Everything can flow from that, from current to future legal and market contexts.

- Support organizations can take on devices. (Using open-source would be a particularly effective approach.)

- Ordinary negligence can attach to users without support or support organizations who fail to address a risk they know of.

- Support can be separately regulated

- Because support organization (like insurance companies) are taking on the risk, they will discipline manufacturers, raising the cost of producing unsupportable devices.

- Effective manufacturers might elect to internalize support (leveraging confidential information) or focus on manufacturing per design.

- Support organizations may start contracting manufacturers by design, to reduce overall costs considering the entire lifecycle.

Politically, I believe manufacturers seeking to avoid regulation would accept regulation if they have the alternative of offloading it to support organizations. Those organizations would welcome regulation as part of their moat. Large device users would welcome support organizations who can supply the service they need, and support can extend their expertise into consumer markets. Cost/price and the payer would track the value and cover the entire lifecycle.
There are dozens of us!!

Where do you typically hang online? Maybe we should think about how we could contribute specifically to young rural programmers in similar situations.
Yes! We have a monorepo with a bunch of services, but it's all here: https://github.com/picosh/pico
Assuming that you're able to sell it for something ($400?), it can make more sense to do that rather than deal with loading, unloading and the moving expense.
Wtf is going on at Github? They're having outages almost every other day.

August had 11 incidents it seems. September already has 3.

https://www.githubstatus.com/history
You'd need to plug the other end into something and, unless you know what that device is, you wouldn't know if it's the cable that's lacking or the device you plugged in on the other end.

Better control of USB devices from computers would be swell though.
I don't know. I have pictures of one of NASA's U2's and the cockpit looks completely different. Granted there are different versions of the U2.
I think the regulation should classify products differently. Something that records audio and video should require a high level of security and support. Something that wirelessly controls my sprinklers maybe not as much.
Haven't experienced that once. Always seems fine to me.
If I was the only one who felt that way sure, but I'm not. Most non gun owners are scared of guns in my experience. Open carry is frankly extremely disrespectful. I don't know what you're going to do with that gun, and I think it's a mistake to think of it as anything other than a threat. And threatening literally everyone you see is a dickhead move. Not really sure how you could see flashing your gun at every random person as not a dick move, the only reason to do it is to scare people.
It's likely that OpenTF will need to change their name
> Please do not propose this regulation. If consumers actually cared about their IoT devices receiving security updates, companies would be doing it. The fact that companies are not already doing this is evidence it's not important to consumers. People may express frustration, but their purchasing behavior speaks louder than their words.

Or, maybe, companies are exploiting consumer ignorance and we're not dealing with an efficient market.
Travis Kalanick’s startup CloudKitchens fires staff and shuts sites
They should work, the problem is that to actually virtualize, you need more ram and adequate hard drive space for the vm's, it's not upgradable and the upgrades cost a fortune. A 16gb 1tb Macbook Air 13" is 1,799 so not quite 2,000 but close enough. Anyways, the comment we are replying to wasn't comparing the chromebook to a macbook, it's just saying that you have to pay $2k for a decent mac, which is true, because a 16gb, 1 tb macbook air 13" with applecare is $2k. Otherwise you're just writing word documents and surfing the web, which any machine can do.
What's to prevent companies from saying "our profit is more important" and not putting on the label?
This is off-topic but while you're here, the amateur radio regulations regarding baud / symbol rate really need to be removed and replaced with a 2.8kHz bandwidth limit.

See Section 97.307(f).
You wrote a lot but said nothing.

How does owning a firearm protect you from state violence without an implied threat to shoot police?
Citizen is great. Definitely recommend it. Really easy to get up and running locally for PoC w/ ngrok.
I've noticed that Wayland advocacy (read: bot spam) has dropped off by quite a bit. Used to be you mention X.org or X11 and the bots would pour out of the woodwork to remind you it's "deprecated" or whatever - it's not - but I think the bot herders finally realized they were doing more harm than good. That bot spam left a bad taste in my mouth and I simply will never ever use Wayland because of it. I have no proof but it all seemed to be the same kind of spam that you'd encounter when discussing System D or pulse, so I suspect it was being organized from Red Hat itself. Evil company, that.
I tried this. A very large company reached out and asked for a custom version of diffdiff.net. They asked what my hourly rate was, and (thinking along the lines of this article) I offered to do it for a flat rate instead.

They ghosted me!

In retrospect, a "very large company" didn't reach out, a relatively junior person at the company did. I should have worked within their constraints. (Or just not taken the job, which, I guess, is effectively what I did).
None of that changes the math of how many cousins you have.
10% for "somewhat likely" wouldn't make any sense, "likely" by itself means >50%. I was proposing to simply label 5 or 7 points on the slider, like 10% as "very unlikely", 50% as "neutral", and 66% as "somewhat likely". I am sure there is a decent-sized study that asked people to predict events on a Likert scale as likely/unlikely and then one could calibrate the mapping from Likert scale to probability points using this study. There is a study showing that people intuitively map Likert scales to a slider https://link.springer.com/article/10.3758/s13423-017-1344-2/... so by properly spacing and positioning the Likert labels, people will at least be somewhat more calibrated than in the absence of any cues.
Ugh, it is criminal how short-sighted this is. Helium is not easy to replace nor easy to store long term, it's the perfect application for government ownership of a commodity, just in case we need it.
Apple to Acquire Major Classical Music Label BIS Records
I've always thought that when a product is abandoned it should be left in a usable state. Keys or firmware to open up the device could be stored with the proper authority.