skysight-inc/HackerNews huggingface dataset:
Doesn't that use a different deletion mechanism? Afaik you can still see "normally" deleted edits and articles if you have the revision link, but those who have been deleted for legal reasons are wiped from history and their revision or edit link are blanked out
We really ought to just nullify DMCA 1201 entirely, but at an absolute minimum it must not apply to otherwise lawful pruposes.

This can be packaged with right-to-repair alongside explicit allowance for interop.
Turns out the US does not think an international investigation (i.e. not done by us or Israel) would be “appropriate” at this time.

https://x.com/dimitrilascaris/status/1715137246431449451?s=2...
Smartphones give us every option, from screaming alarm to literally turned off. There's no scenario it already can't handle.
Why is your laptop in your car without you?
Why the housing market is going from tough to terrible
I would upvote this 100 times if I could.

I've thought this way ever since MacOS added the Grand Central Dispatch [1]. Of course, I thought industry would follow quickly and that tooling would coalesce around this concept pretty quickly. Seems the industry wants to take its sweet time.

[1] - https://en.wikipedia.org/wiki/Grand_Central_Dispatch
Geany is snappy as hell. Brand-new astroturf account?
Sorry, I don't respect people who murder innocent civilians without cause or due process. Or people that can arbitrarily seize any amount of your property, forever, with no possible recourse.

Or really tacticool guys in general. They're pretty much always absolute assholes.
Okay — and?

Do we have anything to suggest CloudFlare is factually wrong? — or was that just random conversational chaff from a brand new account distracting from the stunning incompetence of Okta in ignoring a breach for two weeks?

CloudFlare has more than enough reputation to make such an allegation — and Okta should be cut from any production usage.

Two weeks of failing to address auth compromise is unprofessional conduct by both Okta leadership and engineers.
The Dawn of LLM-Powered personal assistants: pioneering a new platform economy
I don’t think it’s wordplay or for that matter anything rising to a “claim” to say that the chess engine doesn’t in any sense care if it wins or loses, any more than it would care if you were stupid enough to tie your life to beating it.
Run your own CA and choose your roots carefully didn't make the cut.
They get a high eating these
How could Letsencrypt even verify a server setup if not via DNS/HTTP? Also, verify against what? The servers are basically random strangers without identity when they first talk to LE.
You said you felt it could have gone better. I just now noticed that you qualified that as a gut feeling.

I'd assumed there was something specific that you felt wasn't done well.

For my money's worth, I would have preferred that government officials were more honest- especially fauci.

The whole escalation of what percentage was needed for herd immunity (they knew the initial numbers they talked about were too low), the threats that Grandma would die at Thanksgiving if you didn't get it (despite it not actually preventing spread) and the assertion that it was totally safe (despite causing myocarditis in young men, about 50% or more with permanent heart damage according to a new study).

Yes, COVID was terrible, and people needed to take steps to avoid getting it. The dishonesty surrounding what those steps were (and what we did vs did not know) made making informed decisions impossible.

https://www.ahajournals.org/doi/10.1161/CIRCULATIONAHA.123.0...
To achieve no-GIL, libraries and extensions along with the underlying language implementation will need to add in the proper locking.

For users, it'll be mixed. Users writing single-threaded code shouldn't have to change a single line of code, but they'll see (sans the concurrent efforts to speed up the underlying implementation) slower performance due to everything done to achieve no-GIL (the actual net effect will be a performance boost due to that concurrent effort over time). If they're writing multi-threaded code, then they should be writing it to be threadsafe now, not assuming that the GIL will protect them (because it doesn't guarantee it now anyways). So nothing should actually change for most users of Python if they're writing correct code today.
> I prefer "endemic", because it is baked into the operators of the system...

There was a pandemic of racism that we fought a war over, now we have to pretend it doesn't exist anymore to keep the economy going and 'live our lives'?
Any system where there is a strict separation between data and control information is not considered a form of in-band signalling but rather out-of-band signalling based on an analogy of separation of a carrier into independent communication bands (using time or frequency division multiplexing for example). Many modern transport protocols can carry fully independent communications channels that way using frame division multiplexing.
I did say 'typically'! Yes, agreed, but it should rarely need help. Also hints are oh so often jammed in by newbies. I strongly get the impression use of hints is inversely correlated with experience/knowledge.
It's really bad. The problem is that the swapping of pages is constantly stalling the main Redis thread, which is not built for parallelism. Redis is built around a single highly efficient thread, so stalling it for 250us to pull a page from disk instantly reduces the throughput by an order of magnitude.
> It started off as a way for me to learn ... and somehow turned into something useful

This is the way.
Ask HN: Our stock market news alerts startup just passed 10k users! Advice?
Uptrends.ai just passed 10,000 users! Next step, figure out paid conversion -- anyone have recommendations for converting free users to paid more reliably as a D2C SaaS?
What fallacy?

The customer either has responsibility or he hasn't.

And if somebody feels ashamed because they realize they can't ignore how a product or service they use is made, proves my point.

If they say they deny responsibility, then I can give severe examples to ask: Are you sure?
Right. But technically "every sector of the disk" isn't necessarily what bossware needs to wipe if an unencrypted laptop is taken. Only eelements which allow access to crown jevels, relevant credentials, etc.

I'm an advocate for FDE across the board (literally all of my devices are on Windows 11 Pro, primarily so I at least have access to Bitlocker across the board), but it's disingenuous to claim that the only alternative to FDE when a device is taken would be to initiate a sector-by-sector wipe. He was responding to ilyt's comment about how only certain data is worth encrypting on pretty much every personal device (and we are talking about Win 11 Pro, not Enterprise).
> you're banned from all government contracts

Just rename the company. Or shuffle the teams.
They really should have switched the latter with Verti[k]al Tab.
Malloy and Jupyter Notebooks: Advanced Data Science Needs Trustworthy Metrics
We're not talking about what's simpler. The conversation was clearly focused on efficiency.
The new NEM 3.0 deal makes having a battery pretty much a necessity.
Looking for first business hire and advice on how to build high performing teams
Hi everyone, I've been running all the non-engineering sides of Kaedim solo for the past 2 years as the CEO and I am looking for our first business hire (30th overall hire) to join me in growing the business 10x over the next 12 months. We have more traction than I can single-handedly take care of and need someone entrepreneurial and ideally with a tech background to work closely with me. We are SF-based, 100% in-office and a really hardworking team. Shoot me a message here or at konstantina[at]kaedim3d.com if this sounds interesting and would love to chat. Would also really appreciate suggestions if there is someone on your network that I should reach out to.

On a related note, would love to hear your thoughts on building a high-performing team and what are the best hiring processes you've come across to optimise for that.
> NEMA’s debt-service coverage ratio, which measures the ability of a property’s cash flow to pay its debt, has been below 1 since 2020, a troubling sign for the ability of the developer to control the building.

The cap calculation on the property has also been fixed by cutting the price in half, but more importantly a new commercial owner would at least be able to service a loan based on the new value.. While the cap rate could be such that expectations are insufficient for debt service, I think that means there are no realistic buyers.
> Do you also feel confident nobody will pick your drive up at the landfill where it's going to end up?

I do, because it's not going to end up there. I still have possession of literally every hard drive I've ever owned.
That depends on how obvious it is. They can’t be clearly doing it on purpose, or they could be indicted too. If they look like they’re doing their best and following the law, but it doesn’t work? That’s perfectly fine.
In this case there has been a valid certificate for the site; this alone should raise suspicion.

Also, if they cannot do secure validation then maybe they should stop issuing certificates for sites that already have a proper certificate.
Reading about RMS's work with MIT AI and lisp machines, it dawned on me that emacs -- not HURD, not Linux -- is the GNU OS.
Even with nogil, libraries can explicitly hold a global lock before any call. They just don't have to. I imagine some libraries will do that, and others will target performance. Users will vote with their tomls
What's with the coffee mug stains on the last page?
Support for LSP servers is problematic as it relies on async requests/responses as a source of syntax highlighting and other IDE UI updates, which Geany does not support as of yet. It might be a bit easier to add support for tree-sitter plugins.
So this is now the second time Okta was compromised, dragged their feet for weeks, and then almost got a third-party/client compromised?

The tone of this is fine. What isn't fine is that Cloudflare isn't dropping Okta. I might consider dropping Okta.
Does this only work in the hive? Or is the heat concentrated enough even out in the open?
Telegram? Not Signal or Matrix?
This happens all the time when a server is rebuilt from scratch - same cert using a different keypair.
This is, effectively, the plan for the next few Python releases. The plan is for a no-GIL and a GIL execution mode with GIL being the default. At some point, IIRC, the plan is to swap the default and then to eliminate the GIL option.
> IOS developers though tend to be pretty resistant to such “modern” paradigms. If you read the rest of the discussion on this post, you fill find that even using Swift, let alone SwiftUI is still a very debated issue.

Resistance to SwiftUI has more to do with the incompleteness and bugginess of the framework than a refusal to embrace modern paradigms.

A common impression of SwiftUI is that it makes hard things easy and easy things hard.
Government bonds, so no need for obsession with stock market.
That title reads as very passive aggressive. I assume that was intentional.
But that is independent from the way you install an extension.

You gain no security from an unpacked extension.
Why use our imaginations to “think about it”, when we can look at the data and see what actually happens in reality?

The minimum wage has jumped up several times in the past due to government updates, and it has gradually shrunk over time due to inflation, and neither of those things has been particularly correlated with employment rates
I think there's an argument that section 1201 is unconstitutional.
In a similar story, USCIS spent $3.1 billion on trying to build a web app to submit forms: https://www.forbes.com/sites/realspin/2017/02/15/billion-dol...

And they failed at that too. Apparently what would have been a weekend project for a high school student was so hard for a federal agency that they burned $3.1 billion trying to do it. (This level of incompetence is truly despicable.)

I wonder if there is something pathologically wrong with government and how government (at least in the U.S.) does spending.
I presume you have made non-open source additions, so only those additions require escrow assurance for the customer. Why not just license those portions? You would still retain all the IP.
congrats on the launch!

just wanted to give you a perspective as someone who worked on a similar API internally at my employer.

for non-startups, where they are much more strict with security reviews, many enterprise company may be too scared to send the data to your API since it's security is not guaranteed. most companies would look for SOC2 compliance for example.

open-sourcing some of the API may help alleviate that concern.
The provider has access to the host, they can just inspect the job from the outside and you won’t be able to tell
How do you handle rolling passwords when there’s a breach?
Let's encrypt (and other CAs) should not allow validation using unsecure schemes like HTTP. Especially for sites that have valid certificate from other CA.
Fixing zoning and prop 13 would go a long way in fixing these things over the next few decades. https://edsource.org/2022/californias-prop-13s-unjust-legacy... has some details there, but there is some progress on the zoning front like https://www.sfexaminer.com/news/housing/new-sf-housing-legis... and https://www.planetizen.com/news/2022/06/117643-san-francisco... .

https://www.latimes.com/california/story/2020-11-10/proposit... was unfortunate in my opinion.
There's thousands more packages than listed on that website.

Also now you are moving the goalposts. Python wheels exist but not all Python packages are distributed as wheels.

If I am going through the effort to build wheels myself, then I don't need a resolver since I can just make sure to pick all the versions I need. Then I don't need rip to install anything.
I'm a greybeard you cheeky scamp ;)

I very rarely used hints in my more database'y days - but every so often, they were needed, and often to tell the database something that seemed screamingly obvious to me.

I'm not sure where you got the notion that hints were something noobs would be working with? At least, that certainly wasn't my experience.
Russia was feudal autocracy, then socialist autocracy, then capitalist autocracy. Israeli kibutz are communist democracy. Scandinavian countries are socialist democracies. The autocracy is an attribute of russia, not of the economical system/s.
LMAX Disruptor has on their wiki that average latency to send a message from one thread to another at 53 nanoseconds. For comparison a mutex is like 25 nanoseconds and more if Contended but a mutex is point to point synchronization.

The great thing about the disruptor it is that multiple threads can receive the same message without much more effort.

https://github.com/LMAX-Exchange/disruptor/wiki/Performance-...

https://gist.github.com/rmacy/2879257

I am dreaming of language that is similar to Smalltalk that stays single threaded until it makes sense to parallise.

I am looking for problems for parallelism that are not big data. Parallelism is like adding more cars to the road rather than increasing the speed of the car. But what does a desktop or mobile user need to do locally that could take advantage of the mathematical power of a computer? I'm still searching.

I am thoughtful of the Itanium and VLIW architecture for parallelism ideas.
The problem is that Let's Encrypt issued a fake certificate without proper validation.

UPD: I was initially wrong. It looks like many CAs will issue a valid certificate to attacker capable of doing MitM.
Raptor Computing Developing New Secure BMC and OpenPOWER ISA 3.1 Based Systems
Sure, whatever. The point is that breaking legacy code doesn't have to be a show-stopper for eliminating the GIL, and backwards-compatibility does not have to be (indeed should not be) an overriding consideration in a GIL-free Python.
The image of wikipedia editors jealously guarding pages (which makes me think of a dragon hoarding treasure) is entirely accurate and widespread. I've seen it happen on all kinds of pages from pages about some religious event/person to pages about highly technical subjects. I honestly don't know what the solution is because there are definitely people who continually try to edit history by changing wikipedia pages, but the scales right now are way tilted toward preserving bad info, which includes fixing errors and also adding expansions.
Self-hosting is difficult for average people, and it requires a GPU if you want decent inference speed.
I've mistyped it many times myself, which finally taught me
I love emacs and I'd agree to categorize it as one of the most well developed and feature rich IDE. However I wonder: is it really "very small"?
There is an appropriate level of suspicion to have from base rates and incentives.

For example, almost literally every war the US has gotten into after WWII has ended in disaster, with no useful goals achieved and lots of money wasted. There is a consistent pattern where they start off optimistic with an obvious bad guy to get, then over 4-8 years the grey reality sets in and the costs become obvious.

There has to be something I would recognise as a conspiracy going on there, hard evidence or no. It doesn't make sense to be that stupid unless there is a group of people making bank from the spending and organising to push the mad agenda. The decision makers have full visibility into the disasters they are pushing.
Ask HN: Why has no one replaced Ticketmaster?
I constantly see people complaining about ticketmaster with scalping, nasty business tactics, broken interfaces, etc. and they get sued left and right after countless big events.

Yet even with all that, it seems no competitor has been able to reasonably get off the ground and poise a viable alternative. What gives? What's their moat/why do they have a monopoly?
Can you talk about the difference between what you're calling explicit parallelism and said textbooks?
Now you have your recent advocacy, which is common in the Ruby community. Embrace magic, embrace indirection.
We're in a hurry to move our community off of reddit and onto a dedicated Lemmy instance.

The one hold up we're waiting on is a functional automoderator. Doesn't have to be anything fancy, just a regex that can move posts/comments to a modqueue before they're publicly visible.

I spun up an EC2 instance with Lemmy's Ansible script a few months ago, but it's been sitting offline because trying to moderate tens of thousands of users without a bot is just plain foolish ime.

I check the repos every month or so, but there's been almost no movement on the automods, and unfortunately I don't think I have the time to build it myself.
what's the penalty like for backchanneling?
"My answer"? I didn't ask a question! I know what the code does, that doesn't make it less bad design.
I read somwwhere this was credit card cash-back arbitrage; get your 3% back. Although, I'm not sure who you resell it to.
I started at age 6. My brother started at age 5. Lots of us started on Apples and IBM PCs and back in the day Amigas etc.

We didn’t have a lot of entertainment back then.
As I see it, parallelism is in the same vein as memory management. Most of what we program can, and should, use some form of automatic management, and manual management is reserved for the areas where it is needed for performance.

It's an implementation detail, and if we can abstract it away to make it easier to utilize, we should.
Aren't we already?
I think this is an interesting take, and it think people should think about their use of Python in general.

I personally think that pythons support for the massively parallel hardware we have is lacking, and the devs are being too slow and disparate to respond, combine that with what is basically subpar tooling around threads and you have people reaching for multiprocessing out of necessity.

Off the back of this, should Python just maybe give up on threads entirely? Should it relegate itself to simple-scripting and open the floor to something that can do these things?

I’ve personally stopped writing Python for these reasons- apart from “AI stuff” which isn’t something I dabble in anymore, there’s nothing that Python can do anymore that another language can’t do better, just as (if not more) easily, without giving anything up.
I find modern Swift to be increasingly ugly and difficult to read. Reading classic Objective-C code is refreshing.
This is exactly the same as all other CA's do this.... for DV-certificates you basically place a key/special file on the webserver, or receive a verficiation code via (plaintext) email.

For EV certs there might be more validation, but users will never see the difference between EV and DV certificates.
If you use fish, that should never happen. (If it happens, we would consider it a bug.)
As one who's actually had the pleasure of getting to use one of the classified drive destroyers, there aren't armed guards. Not sure if there's a requirement that it be done in a room with no windows, though.

My point was that Kenny's claim is that on-drive encryption allows for easier "erasure", presumably by deleting the keys needed to decrypt the data and leaving the drive in the same state.

If that process is good enough to ensure proper "erasure" of the data (effectively complete prevention of data access), then how is it not equally secure as an encryption schema?
China restricts exports of graphite as it escalates a global tech war
That's just the thing, Scala and its ecosystem had these problems right at the height of its popularity, meaning that the situation was the worst right when the most people were around to experience it, and understandably many never looked back. Even if many individuals can look past it, it's become a very hard sell to teams.

It's the same story with any kind of merit vs trust. When you have a clean slate, you can build trust based on your merit, but once you break trust, merit alone isn't enough to win it back. In this industry in particular, far too many other options are already holding and building trust.

I truly wish Scala had indeed become the mainstream industry language instead of say Go. I hope Rust polishes off its rough edges and succeeds where Scala failed and where Go doesn't go far enough. But I don't see any future where Scala regains industry relevance, not even if both Go and Rust self-destruct as well.
https://github.com/matteocorti/check_ssl_cert
So should we conclude that SSL cert infrastructure is completely compromised and now any country can issue fake certificates?
If you like those sitcoms then you would probably like stuff on Hulu: Animal Control, Abbot Elementary, Superstore, Only Murders, etc. You can also rewatch Always Sunny, ER, and a bunch more. (Oh and "Dave" which is new and brilliant).

HBO's entire catalog is full of bangers, many of which I still haven't seen yet.
See also, https://www.beyondtrust.com/blog/entry/okta-support-unit-bre...

> We raised our concerns of a breach to Okta on October 2nd. Having received no acknowledgement from Okta of a possible breach, we persisted with escalations within Okta until October 19th when Okta security leadership notified us that they had indeed experienced a breach and we were one of their affected customers.
An inverted yield curve is not typical.
Your UI beats the stuffing out of the Wolfram abomination
Why submit this reddit post here?