skysight-inc/HackerNews huggingface dataset:
Apple's ARM switch worked because they have tight control over the whole software stack, and actually worked really hard to provide transparent support for older x86-64 software. Windows for ARM has none of this support and has basically zilch market share as a result.

If Microsoft releases an equivalent of Rosetta at the same level of quality it will be a different story. But I can't see what influence Nvidia has over this?
> Can someone explain why people still choose Okta? I personally feel way more comfortable using GSuite as an IDP.

GSuite as an IDP is very very limited. Sure, it checks that box as "Yes, is IDP"

However if you want to do much beyond "can connect", it's either difficult or impossible.

Take for example you're an organisation that has all employees in GSuite.

You also have an AWS organisation, and need to provide access - well, AWS SSO[1] is the recommended way to do this. I set up the connection, and people can now connect.

However there's some gaps:

There's no automatic user [de]provisioning into AWS SSO, based on GSuite user groups. (You could write some code to do this via the SCIM support in SSO, but you have to maintain it)

There's no way on either the GSuite or AWS SSO side to enforce an MFA check when the SSO session is being set up.

GSuite doesn't let you require an MFA check before authenticating to SAML applications.

AWS SSO doesn't allow forcing MFA check when using an IDP, even though it does if you use it's internal Directory.

Okta, and similar products (can) do those things for you, and allow some of those MFA checks to be based on what endpoint is being used. At least according to their marketing materials and sales people. I've never actually done it myself.

I guess the tl;dr is that Okta provides a lot more options for automation and security glue between the identity provider and consuming application(s).

[1] When I say AWS SSO, I mean specifically the AWS product: "AWS IAM Identity Center (Successor to AWS Single Sign-On)"
Well, the government has to take action against you, the site operator, if you aren't enforcing the rules correctly. That means they have to think of every possible way to monitor the traffic, both in-band and out-of-band. They then have to do this for every site on the Internet. (Or sure, just selectively enforce it against whoever X says is a threat to their ad revenue today.)

When you make something, you only have to figure out one way to make it work. When you try to secure something, you have to figure out every possible way the defenses could fail, or you've done nothing.
I'm not the GP, but it makes sense to me. I can't even see a difference between 24 and 60 FPS. It has to get down into the teens before I can tell. I haven't capped my graphics like that, but that's more because it never occurred to me than because it would bother me.
Someone called "chaoscode" asks therein:

"So we are opening CVE's for cancel culture now?"
> something else

Isn't AV1 the "preferred" option as a replacement, at least by those who are looking for something high quality and without patents encumbrance?
If AMD makes the Linux versions of the various software surrounding their ARM CPU open source, it'll likely win by default. Even if Nvidia's and Qualcomm's offerings perform a bit better, nobody wants to put up with those two's nonsense if they don't have to.
"In an essay that declares that "we believe in ... testing ideas empirically", not one empirical study is cited."
Experimental is a very broad category. On one hand we have $250k Rv-10s that are immaculate and built well from kits that thousands have used to shitty canard garage designed birds.

I will say, the crackpots are largely getting pushed out of experimental and the folks who love flying and want to see it succeed on a budget are stepping in. I'm not an experimental bro, but I am tempted with the crazy costs of mundane parts for 60 year old planes.
https://github.com/GrapheneOS/PdfViewer
This worked for me too but I do it as a calf raise instead of a stretch.
> prominent ex-president Hu Jintao
> Covid
> Taiwan

My point was only about business (relationship between companies and the gov).

> unofficial disappearances

Apart from Jack Ma (I proposed an explanation), this list isn't about business: artist, actor, Interpol chief, and "A Hong Kong-based publisher who specialised in sometimes gossipy books about China’s political elite".

> foreign companies have been threatened

Indeed, my point was only about Chinese entrepreneurs and bosses, sorry for having neglected to state it.

> they also insert CCP members at board level in companies to control their direction

"The party doesn’t habitually micromanage their day-to-day operations. The firms are largely still in charge of their basic business decisions"

Also: "But pressure from party committees to have a seat at the table when executives are making big calls on investment" may be in line with my hypothesis: the gov enforces respect of a strategy defined by all (AFAIK the Japanese MITI also acted this way).

My point isn't about the Party's ways to enforce the strategy of a sector but about the method used to define this strategy: it seems to me that it mainly is defined by companies' bosses.

There also is a real will to strictly control the political side of things, which may explain some actions, which aren't the usual way.
Safetyism Was Never Real
Dave explicitly said in the video that the Xbox hypervisor is based on Red Dog, which is not HyperV based, which was also the hypervisor used in early iterations of Azure, but that currently Azure runs on a variant of HyperV.
BeyondTrust reported the issue. Cloudflare is the first known Okta customer targeted, and 1Password is the second known. I think that’s what Ars is saying?
Any writeup about these two? Seems like an interesting story.
New feature: Octogen can now be used in VS Code, Gitpod, and GitHub Codespaces terminals. Chat with Octogen to solve coding problems!
It's not too late for that; the author just doesn't want to be bothered. If he really wanted to, he could move the code to that other country, and put it up under a pseudonym. If anyone asks, he can just claim he doesn't know who that person is, and he has nothing to do with it: how can they disprove him without literally spying on him? The code is open-source: literally anyone could have made a fork of the repo while it was still up, and then posted it somewhere else.
Giving Stable Diffusion constraints forces it to get creative.

It’s the best argument against “AI generated images are just collages”.
SaaS is pretty good though: anyone running a corporation can do so more efficiently, using automated payroll, hiring, accounting, etc. and collaborating with powerful coding, writing and design tools. Marketing and advertising is way easier to do at scale. Getting a message out to the world is incredibly easier.

All of these things have costs, but I can't deny that if you want to get things done in the world, subject to certain parameters, the wheels are greased compared to the past.
So why don't you do this then? The author doesn't have to be the one to take the risk: YOU can do it yourself! Just get a copy of the code and post it up on your own account, under your own name.
Honestly I kind of feel bad for the guy. He didn’t put up much of a fight and he sounded very shocked and sad at what he did. Now his career is over and as he’s a plane hijacker as far as the law is concerned.

If he really wanted to crash the plane I imagine he would have succeeded.
This is how I think of it as well, the person who isn’t selling is probably one less buyer.

What if we change the life necessity to another one — cars. During the pandemic I was thinking about upgrading my car, but I didn’t after prices went up. I’ve just chilled with the same car since 2010 now.

So.. did I contribute to the auto shortage that’s on going? Feels kind of weird to look at it that way
> The better answer would be Asus (Taiwan based.) I'd buy the zenfone because of camera and size

Oh? Did they turn the bootloader unlock servers back on recently?
Time-Series IoT Data in PostgreSQL
I wrote an article on an approach to small scale IOT data management. Would love to hear opinions on the approach.
I don't understand how you can think the government is the more unethical party here. Should they do better? Yes. But in the scorpion and the frog story, the scorpion is the bad guy. You don't get to go "sorry it's just how I am bro" after you take advantage of someone.
Seems like half of this is complaining about the low quality content that many people in our population genuinely enjoy, and the other half is complaining about the algorithm over fitting on small amounts of interaction. The latter of which primarily impacts brand new accounts.
I remember reading a blog post from the author of sioyek boasting about search performance.

Haven't personally compared the options but for me sumatra zathura and sioyek all feel fast enough to not notice any problems.

https://ahrm.github.io/jekyll/update/2022/09/11/pdf-viewer-t...

"Now I must admit, the reason sioyek is so fast is because it creates a search index when you open the document."
I think they should also target enterprise users as well as hobbyists. I've evaluated it for my company (I'm the CTO of a small Fintech of 100 people) and I was kinda lost on how to share data between a team and not just individuals. Felt like a big gap to me, even if I invested on contributing what I needed.

With the support from a business case, things could get easier for the hobbyists. This is just constructive criticism. I sincerely think this is the coolest open source project around.
Rethinking Certification for Trustworthy Machine Learning-Based Applications
Basically they only reiterate two well-known attacks (data poisoning and adversarial training). I also remain skeptical about their conclusion that certification will foster trust (unless certification comes with e.g. liability).
> a hard reboot, at least this used to be true, will also exit the mode.

Reboot "exit" to the passcode entry screen is less bad than the unlocked phone in this escape.
They do on Android.
That's for sure - I think we have seen other kind of edge detector or filter work better for differing use cases, especially around foreground images where you want to retain more information (i.e. images with small nitty-gritty details)

In this post, we just seek to showcase the fastest way to do it - and how augmentation may potentially help vary the position!
> Huh, the author feels the pain with endless crappy and slow software.

If that was all, it would've been fine... if he was only listing bugs and saying he's tired of crappy software. But he has framed the article in a way as if he's describing the "why" and how the problem can be solved. In fact I've been following the author and he has a place where he lists all bugs he finds in software, and that in my opinion is a great initiative, but this article just opens too many threads and tangents and only appears to explain the root cause.

I could come up with a few examples like:

- trying to compare cars, buildings, and planes with software and not diving deeper into how much different they are and why.
- or saying everybody seems to be ok with inefficient software without diving deeper into why everyone's ok with it.
- or mentioning a tweet about a guy who spent more time trying to make something faster than he will ever gain back without going further into if it's a good/bad thing and why.

> If you feel all his points either superficial or wrong you could easily come up with counter arguments better than author.

I never said his points were superficial or wrong, just that he does not deeply engage with the threads he opens up. For that reason, I have no counter arguments to come up with, since he is just complaining about his issues and also does not come up with a good solution as such. Of course everyone would like nicer software, that's not new. Why is software different than other industries in the first place? Is it worth improving it? What are the trade-offs? What is the effort required at scale? What would we lose if we made software more like manufacturing? What would we gain? If he knows a path forward, does he have a better way to express it than the last "manifesto" paragraph? Etc.
That's a good question. There are other techniques to get large crowd reception, so they'll probably invest in those, if they do?

Very interesting for USVI and Guam. I agree 600 mhz seems like a band you want to have... May as well after all the pain to over the air tv broadcasting it caused to get that spectrum. Unfortunately spectrum allocation seems to be in small chunks here and there with little coordination between regulators and then you end up with what we've got: any given handset can't reasonably work on all the bands, so a maker has to pick the bands based on the probable place of use (and sometimes the network, too)
Very interesting - thank you for sharing this. Would love to explore this as a team and perhaps put out a blog on helping others get started with control-lora
According to Wikipedia it seems Safari is only now starting to support it, so there's still a large segment of the Apple market lacking support.
The problem is that H.265's patent owners didn't form a single patent pool, so the licensing is a nightmare, with three separate pools, patent holders that never joined a pool, and lots of double-billing all over the place. H.266 isn't much better. So a lot of people just stuck with H.264 as the "good enough" codec as a result. The only people not using it were organizations who couldn't or wouldn't pay for any patented invention (e.g. most of the web standards people, Wikimedia, etc), who stuck with Theora and later VP8.

AV1 (itself derived from the On2 VP8 and VP9 formats) is supposed to be the answer to H.265's patent shenanigans, but support is very slow to manifest. Like, Apple only added it to the iPhone 15 - as in, the one that just came out a month ago. Implementations of AV1 in discrete GPUs similarly only landed last year with Nvidia 40 series, Intel Arc, and Radeon 7000 series cards.
Bah, come on with this nonsense. You obviously know the problem there. Not only is that data noisy as, that paper you're linked isn't even reporting said data but trying to challenge it. As the paper leads with, "Did the United States experience a surge of homicide early in the century? Various scholars answer "yes", but..." Well, then what are we going to do? Have me cite the various scholars while you cite the ones challenging them, and we see who has the most twinkies at the end?

Similarly on the car stuff, I do agree with you. You can't strip cars for profit unless there's a minimally large number of people using cars, but we were obviously well beyond that point by 1960! 80% of households had cars! It's not like there was a shortage of people needing/wanting parts. That's far more than enough to create all the sort of venues necessary to be able to comfortably resell parts (or even entire cars, as occasionally happens).
Not only can there be the obvious kinds of performance benefits (no Python/extra process overhead, more focused optimized libraries, etc) to implementing something yourself, you can also implement nice features like rolling window regressions that aren’t compatible with the mostly offline/batch APIs used in OSS and which can be baked directly into the production system.

This is probably non-obvious to most newer practitioners unfamiliar with the broader systems their model operates in, because their mental models of what’s possible are constrained by the tools they’re familiar with.
Interesting, thank you! I'll note is that GSuite does allow for you to enforce Context Aware Access checks on every SSO, though that does not include a separate 2FA in the traditional sense.

Lack of auto-provisioning seems like the biggest issue to me.

> There's no way on either the GSuite or AWS SSO side to enforce an MFA check when the SSO session is being set up.

I don't know what you mean here but I'm curious if you wouldn't mind?

Much of what you're talking about seems to be when a 2FA is forced. With GSuite it's forced on login, and CAA is forced on SSO, and that's it. If you want other 2FA prompts (such as with AWS) those are configured through that service. I think you're saying that Okta would allow you to force the 2FA on login to and also then when you want to access some other system via SSO it would ask you to 2FA again?
It’s extremely unlikely that every Okta Support employee has this level of access, much less on a persistent ongoing basis.

It would be nearly impossible to achieve this level of compliance certification if it were this simple and this broken.

https://www.okta.com/trust-page/compliance/
mpeg1 seems possible https://github.com/rossumur/espflix
I gave up waiting for the author to finally explain why this car was so great, and just stopped reading. For all of the hyperbole, I can only imagine that the author hasn't driven a neutral-steer car.
Google Chrome to soon get a new 'IP protection' feature: Here's what it does
Oh cool, looking forward to reading this!
I think your point is still confusing. No one is suggesting replacing Okta with a Yubikey, so whether one chooses Okta to offload support requests or not has no bearing on Yubikeys.
I appreciate your comment, because even though I came to the opposite conclusion, I like seeing how our own experiences color our interpretations.

First off, the thing I really connected to with Karpf's piece was how this techno-optimist manifesto might have made sense in the mid 90s, but it seems baffling to write this with 30 years of hindsight. And as someone who was a techno-optimist in the mid 90s, I don't just see how you couldn't be at least moderately disillusioned with the promise of tech.

But to your point specifically, "Hollowing out of the American middle class isn’t Google’s fault" - yeah, it kinda is, at least partially. Tech isn't the only reason for the decline of the middle class, but the Internet specifically has made markets huge and is directly responsible for "winner take all" dynamics in these larger markets. There used to be "regional winners" in lots of different retail categories, for example, and thus there were many smaller and midsized cities with vibrant main streets where the money went back to local proprietors. Now most of that goes to Amazon (or Walmart before that, but Walmart is still tech).
DMCA didn't so much "remove" any consumer rights as it placed the burden of proof on the consumer. So the "right" is still there you just need a lawyer to enjoy it.
Do you mean sampling at application level before sending traces to otel collector/Kafka?
> We try to mitigate it with #ifdef guards, #pragma once etc. but in my experience those band-aids don’t solve the problem.

Huh, I wonder why he thinks so? "#pragma once" works pretty well and completely eliminates "double-parsing includes" problem within single file.

(And if you want to eliminate multiple parsing of includes _across_ the files, you need something like modules, no amount if include discipline will help)

Pretty sure that whatever beneficial effect author gets (if any), it's not from double include elimination. A much more likely explanation is that by making includes painful, author self-encourages to include less stuff and to keep simpler hierarchy.
I like this a LOT.

Not only don't I have to get used to another language, I can lean on Python's rich ecosystem.
> it was to basically enable small US carriers to sell flagship phones that were meant for different regions...

Sounds like you did god's work.
I suppose technobabble is what this thread is all about because I literally do not understand what the hell you're getting at.

Can you expand on any part of your comment? You have 4 distinct things, supposedly everyone else in the world is supposed to get what you mean when you introduce these things, one after the other, and then engage your comment. You're asking for the impossible.
I don't think OP was unkind at all; maybe a bit blunt, but telling someone you think they've been lied to and duped and that they're a victim is not unkind in my opinion. Powerful entities have been lying and duping common people for... well, probably for all of human history. The OP may or may not be correct, but from my reading of their post, I don't think they intended that as an attack of any kind, but rather a commiseration.
So much easier said than done. Have you met those kernel/SW people? They are hard to poach and hard to manage well.
Growing up, people used to respond to challenges to what they said with "it's a free country". I haven't heard that phrase in decades.
People who are fallible remain interest in manufacturer assistance in this area.
Clicked link.
- Bold claim in attention seeking post.
- No additional content/comments/retweets are visible.
- Press the X to close.
- Whoops, that's the logo, now I'm on the home page.

*I hate the new internet
Legitimate devices could voluntarily check the serial numbers of parts against a stolen parts database so the seller would be caught, and likewise carriers when they activate a device.

To make the parts checks mandatory would require controlling every device the part could be installed in, even when that device isn't stolen and the check is being performed against the will of the legitimate owner of that device. If you wanted to implement that scheme, having the government keep the root keys for every device for this purpose would reduce the number of parties with access to them and prevent their use for this kind of region locking.

Whereas with the system you propose, both the manufacturer and the government (every government where the manufacturer operates) can remotely control the device. Because a government can coerce the manufacturer, including to do what they want without telling anyone, or just send their intelligence service into the corporation to compromise their systems without the company even knowing.

So the scheme you prefer is actually inferior to the sort of remote government backdoors that are occasionally proposed and then condemned because of the catastrophic systemic risk they imply. For a small incremental benefit over honest carriers and buyers consenting to the automatic checks of their own volition.

Some things aren't worth the trade off.
From whom? Chromium is bsd-3 license.
You can have a dual mode vehicle, cruise on WIG effect at 10% throttle or crank it up and go to 3000.
Not even remotely the same thing. Leasing means you only pay depreciation plus interest; it is an economic alternative to up front purchase or installment payments.
Seems it would require to fork the whole home assistant repo https://github.com/home-assistant/core/pull/101849#issuecomm...
> If Microsoft releases an equivalent of Rosetta at the same level of quality it will be a different story.

Microsoft has had their own Rosetta equivalent for a few years now. In theory application compatibility is more comprehensive than Rosetta as it supports much older applications, including 32-bit applications. In practice (likely as a result of trying to support so much more stuff) application compatibility isn't as rock solid as Rosetta for every application.

https://learn.microsoft.com/en-us/windows/arm/apps-on-arm-x8...
> The size of the codec is so unimportant as to be essentially irrelevant within reason outside of a few extremely niche cases.

Codec size matters if you're going to include the codec in a phone app, which is a huge niche.

You can try to rely on system codecs, but then you're at the mercy of system codec availability and system codec security.
Published in 2019
sorry, this impossible, in most of condition they just need a table that they can record data in it. I don't know any better replacement:(
Meta's Next-Generation Realtime Monitoring and Analytics Platform [pdf]
A chap I know worked for comms at a government-adjacent state-funded org - he mentioned the same thing there. They just have an internal performance metric of around 80% of FOI requests they should answer, and they use the remaining 20% for awkward or expensive queries.