skysight-inc/HackerNews huggingface dataset:
this is a very common chip that’s sold everywhere for as low as 4$ for that entire dongle at retail. If you touch the controller, at full speed it gets crazy hot on this one. The part I struggled with was that I was trying to install openwrt when raspberry pi 4b was new and use this as the wan port as my isp was limited to 40mbps. But the chip got so hot that eventually I gave up after putting on a tiny heatsink because the plastic casing simply offers no heat output. Mine didn’t have this SPI chip on it so both Linux and openwrt (with drivers) worked fine and it showed up as an additional Ethernet port in ip link. The usb cables are so thin I couldn’t leave it just like that cause at any point it would break and it eventually did break I think I don’t know where it is now. I ended up getting a tp link usb adapter eventually but in general usb Ethernet for anything other than just quick management of some console is not recommended if you want to do serious routing in my experience. The tplink one comes with Realtek which is just ‘okay’. Pcie Ethernet intel cards offer cpu offloading. I’m not sure if that can be achieved over usb. Heat is another problem as the casing is the limitation on it which is not a problem on pci cards or motherboards.
I'm in exactly the same boat; doing the same thing to store my OV .pfx certificate in a GitHub Actions secret. My certificate expires in November 2024 and I'm undecided what I'll do. It was hard enough to get a certificate as a solo developer and not a corporation.

Still, though, it should just be a matter of money. The $629/year cloud-hosted HSM mentioned in the OP will do it. If you pay that, you can use this procedure to make it work with GitHub Actions with the same sort of signtool or Set-AuthenticodeSignature command that you use now: https://docs.digicert.com/en/software-trust-manager/ci-cd-in...
Yes, “solved” can mean multiple things.

1. We have a describable or demonstrable solution Y for problem X.

2. We have a language that uses Y to solve X.

3. We have several languages that use Y to solve X.

4. Most languages use Y to solve X, and popular languages that don’t are anticipated to do so soon so they can.

5. Any sensible language uses Y to solve X.

> I really hoped that 22 years in my career I would've seen certain problems disappear forever (as in, be solved, formalized, nailed, and never ever discussed again). But alas, nope.

I interpret this comment as referring to “solved number 5”.

And I also find it disheartening that that level of solution, for well known problems, seems so rare.
Thanks everyone for the super insightful discussion! I have learnt a lot from the comments, and I have also updated my blog post accordingly. You can find the updated version at the same link.
My students are know nothings
The Digit extraction methods (https://en.wikipedia.org/wiki/Approximations_of_%CF%80#Digit...) section still amazes me, that we can calculate the Nth digit without needing to calculate the digits before it.
This is about people between 55 and 64 years old at the start of the study.

After 10 years:

The risk of getting colorectal cancer is about 1%.

The risk of dying because of colorectal cancer is about 0.3%.

Getting an invitation the study does not change much. Actually getting a colonoscopy helps more (37% reduction in getting the cancer, no data for dying).
Why is this article the one that makes you say that? Nothing about this is particularly political to me... but it's definitely a good thing to report, cause this is otherwise fucked up.
I heard of this a while ago too - https://github.com/documenso/documenso
You mean, imperial?
Yes, one needs some or another political persecution to get asylum. In UK, lawyers coach applicants to get asylum [1]

“Some pro-Khalistan political parties in India charged one to two lakh rupees--$2500 USD--for giving ‘letter’ to youth, who use it for seeking political asylum in Canada after falsely claiming that they were party cadres and being persecuted in India on religious grounds" [2]

[1] https://www.dailymail.co.uk/news/article-12333013/Immigratio...

[2] https://www.livemint.com/news/world/prokhalistan-elements-in...
I feel their pain. I built an open source video player for esports coaches[1] that it given away for free and one the constant complaints about it is that users have to bypass warnings when installing it for the first time.

I can afford to pay for certificates (I believe I have to have one for Windows and OSX) but I refuse to for a project that I already give away my time for.

I would love to see a LetsEncrypt style service for OSS but I assume it's against the core interests of Microsoft / Apple to allow something like this as it would start to drive people away from the walled gardens of the app stores.

I've been writing software for close to 25 years and it's quite sad to watch the decline of ownership over our own machines in the same of "security".

[1] https://www.vodon.gg/
No you can still use a metric system, just use the foot (or similar) as a base and then kilofoot, megafoot, microfoot etc. rather than inches, yards, miles, links, chains, rods and perches etc.
I think there’s some confusion here - the Kelvin is the SI unit of temperature, not Celsius.
Seems like security is slowly eating the software world. At some point security will be so onerous that it will take more effort than the actual software being secured. Software was more fun in the good old days before there was a huge criminal industry exploiting it. Alas, it was bound to happen eventually.

That said, seems like you could bring down that price by hosting the key yourself with a yubikey or cloud hsm instead of buying the turn key solution from digicert.
The article theorized that some of the acceptors in the study likely looked at their family history when making the decision. They might not be especially helpful on average, but because of your father, they're much more helpful for you.
There is definitely an argument to be made that open source should be viewed and treated as a business model, particularly if there are financial costs involved which must be paid one way or another.

Dogma and fervor don't pay the bills.
Interesting. I tried to remove imagemagick from Ubuntu 22.04 but it is depended upon by inkscape, calibre and pdfsandwich. I wonder if it's possible for these projects to use GM instead?
To explain it succinctly, I shall refer you to XKCD #2347
https://xkcd.com/2347/
> The 55-year-old social worker now spends her weekends on the dancefloors of illegal....
“Recently, I met a younger man with an amazing body. It was probably the best sex of my life.”

In dating app you can filter out old people. So this old person would not have a chance there!

Her only chance is in night club, where she can rape drunken guys! People who drink alcohol can not give a consent! And that guy wery likely regrets it, when he wakes up in the morning!
Jesus Christ, next time start with the fact that you’re not one thoracic tumor .

I’m a dude that had GERD but got both ends checked and they found polyps, so I randomly got incredibly lucky.

I was 26, and had less of a fight because of history, but it’s way worth it.

Also, ask about the Miralax option!
> worth the small unpleasantness and major logistical annoyance.

I’ve gone through it twice now. Both times, the most annoying part was the 2 or so hours they make you sit there in a hospital gown with no phone or electronics and nothing to do, while you are starving and uncomfortable and waiting to have the procedure.

I don’t know if it’s like that everywhere. But would it really be that bad to let people hang on to their phones? Why make this more difficult than it needs to be?
Windows Defender assumes files of unknown provenance are malicious and will block or quarantine them -- even (especially!) if they came from a zip file rather than an installer. Anyone who wishes to distribute binaries for Windows needs to have them signed.
How does this work? Does Digicert "host" the HSM in the cloud for you and make it possible to automate things again?

The goal of us developers is of course to fully automatically sign an executable, while the CAB forum seems to want one to always enter a pin code in a hw device anytime you make a build.

Are there any good solutions or hacks to automate it? Does Digicert really make it possible again to just invoke signing of anything from the command line or CI task WITHOUT entering any pin or 2factor stuff? That would be great, and of course ultimately circumvent the CAB forum's demands as anyone who stole the digicert credentials can now sign anything.
Not AI but the wildfire spreads throughout the world:

"Such articles have been published by Chinese state news agency Xinhua, leading media across Asia, and quoted by the South Asia Brief of the Washington-based Foreign Policy magazine."

"While it was not possible to prove if the 35 names investigated by AFP are real, no online presence apart from their articles could be found, none has a visible social media profile, and none has published research papers in academic journals."

"Headshot photographs of eight of the reported columnists belong to other people, including a popular fashion influencer on Indian social media."

"I should have been a little more conscious in this age of disinformation and propaganda about checking the identities of the writers," he said."

But go figure who is behind all this:

https://www.daily-sun.com/post/713067
Well the assumption is that the root CA stores them more safely than "on my laptop in my unlocked bedroom in an unassuming neighborhood of brighton" that most developers lean on for their secret storage, but, well, you never know.
But... cost dynamics are about future movements. And SpaceX is an infrastructure company.

It's perfectly fair to say that constructing a road to a remote community will mean better ... everything ... for that community, but you're blaming them for not also building a hospital and a school at the same time as the road.

I mean, yeah, technically it's possible that we lose current capacity and we never get enough space capacity to make up for it but if you argue for this particular outcome, I think it's rather improbable. The parent made a very good point: cheaper and better lift to orbit means better ... everything. It would mean you have cost and capacity improvements for the whole chain, and yet nobody bothers to use this for JWST successors. That's a very thin line of probability you'd be arguing for.
Try ‘convert’ in your CLI of choice — you might have it installed already.
A more specific example: nuget allows pinning the certs. https://learn.microsoft.com/en-us/nuget/reference/nuget-conf...
I feel signing a nuget package with a self-signed cert is not worse than any PGP signing method in term of trust level. They both are identified by a crypto fingerprint and you have to manually get the fingerprint from somewhere and just trust it. I do not see a big difference there.
IT is a fashion industry.
I call bullshit on "if you're authentic nobody will care". I've been blogging for over 20 years (not on Twitter, Heavens forbid) and never did any promotional stuff and I am fine with amount of engagement I get. If literally nobody would ever engage again, I'd probably still do it. I also read dozens of other blogs, which don't do promotions - somehow I found them. There are probably hundreds of more interesting ones I haven't found and never will - but such is life, you can't earn all the money, eat all the food or read all thd content. I suspect those who complain about it either are in a wrong business or let their ego get ahead of them.

Also, can we get people to stop to confuse whatever weird things happen on Twitter with all the internet and all the economy?
You will be prompted 'do you want to run this executable' if an installer of something would try to run IM installer. Similar to WireShark and WinPcap. If some retards pushed ghostscript people to remove the silent installer then this can lead to anything, up to alien invasion.

> I'm surprised they even make an installer for Windows at-all instead of only shipping portable zips.

You really appreciate that when you are managing a fleet. Though you can always slap a script or NSIS installer yourself, it's way easier if it's already done.
In Japan, everyone over 40 gets yearly colonoscopies as part of a general health check up.

That should be a really good source of data, someone should take a look at that.

But what I was getting at is that it can scale.
It just connects to my iphone, ipad, and macbook whether I want it to or not.

I frequently have a lot of trouble getting my airpod pros, or maxes to pair with anything when I'm right next to it.
Okcupid used to be really good, then they got bought out and turned into Tinder. Now it's just a wasteland out there, especially for guys.
It doesn't help that all the dating apps get bought up by the same company. Almost feels like a space that needs a non profit to run it, so it can be focused on making good relationships rather than hawking subscriptions to desperate people.
> "people are more magic in real life"

I CTO'd a fairly successful dating site for 4 years. I think a lot of the critiques of dating sites/apps miss the mark. The "they only stay in business by keep you single" sort of comments.

Instead, i think dating sites' issues are more fundamental. Thought experiment: write a dating profile for yourself in the 3rd person. Then have you 5 closest friends and family members each write one on your behalf. Now have everyone vote on which of the 11 profiles is the most "you". Do you believe yours comes in first? How about top 5?

When we fill out profiles, we naturally try to highlight some parts of ourselves and hide others. Your friends and family see you as you present. Only you see yourself as you intent.

The result of this all is that our dating profiles are a limited, and often misleading, approximation of ourselves. Any matchmaking app is thus matching my "Online Dating Approximation" with your "Online Dating Approximation". The hope is that if our approximations match, we can extrapolate us matching? Weak connection in my experience.

I think this is why Tinder and Bumble have had so much success with their frankly superficial model. At least the online vs reality is closer than more in-depth matching schemes. But we still hear tales of cat/hat-fishing, so maybe they suffer the same issues.

None of the dating apps ive seen have really keyed into the "monkey brain" side of love. The subtle things that make us truly love a person. To be seen if any get there, but there is just no substitute for getting to know someone in person vs flipping through people online.
Now that GitHub has CI and MSFT money, it would make so much sense for GitHub to become a code signing CA!

With npm, you can opt in to have your npm package releases signed, and it took less than five minutes for me to integrate. As long as the package is published with GitHub Actions (or other supported CIs I guess), you can sign the package and npmjs shows it as well.

Git also has release and commit signing with gpg/ssh keys, so the authentication is already solved.

https://github.blog/2023-04-19-introducing-npm-package-prove...
> The most unexpected thing is that when I actually wanted one, the process took over two years.

The doctors probably thought it sounded more like hemorrhoids, but weren't going to stop you from getting the colonoscopy. Hopefully they at least did a digital exam and gave you recommendations.

When the symptoms first happen, absolutely go to the doctor. Where it gets tricky is when it's probably nothing, but it might be something, and there's a disagreement on if more tests are worth it.
I like Agile, but I think the industry needs lot more Waterfall. Imagine building a house with Agile, you would start from the roof (rain is the most pressing customer's problem), and the foundation would be built last (after, 5 years into the future, a crack appeared in the house wall).

I also think what's problematic is this debate goes too much around project management, rather than actual methodology of building software (software engineering). I have an idea how we can reframe the debate to this effect.

When software engineers plan and write software, they actually build two things - the product itself and the infrastructure/tooling for it. From the project and product management perspective, the focus is on the first and the latter is often neglected as unimportant (and waste of time). This sort of jives with the human intuition, we want to build a house, while foundation and scaffolding are only incidental to it.

However, I can't help but notice that the software products that are actually most "agile", and easy to change, are written in a way where there is a huge amount of generic infrastructure and tooling with a tiny veneer of product ("business logic") on top of them (and in fact this goes all the way down). For a canonical example, Emacs, to the point where people even joke about it.

But also, this is completely different to how the commercial industry builds software. The focus is on very specific features, pieces of business logic, instead of generic infrastructure, that makes delivering changing features easy. That is a very short-term view, which actually becomes more expensive as the time goes on.

I think the way we should build (commercial) software products is the first one, lots of infrastructure and tooling which only incidentally happens to create a product. See also functional core / imperative shell, or Unix philosophy.

That's why I think Agile failed in the industry, because the project management people who pushed for it, didn't understand the above distinction. This distinction is also related to Eric Raymond's the Cathedral and the Bazaar distinction, although his is more about social organization around building software than the actual software architecture. (The relation manifests in Conway's law.)

To conclude, I think we need more Waterfall in the sense that we need to think (plan) more deeply about the infrastructure and tooling that we need to build our products. Jumping directly into building a product that solves customer problem will have detrimental effects on long-term productivity.

I would also add I see role of open source only as a relatively small part of all the infrastructure and tooling. As you get closer to the actual product, more and more infrastructure is specific to your business domain. The open source will not save you, because it's too generic. Emacs is not just a generic OS or a Lisp interpreter. It has huge amount of infrastructure around text editing specifically.
Let's normalise using WSL for all such command-line utilities. Everyone's life will be easier, from developrs to users.
A Pactor 4 modem (which at 1800 baud will become legal after this) can do 5512.5 bps in 2.4 kHz with 32QAM.

https://www.p4dragon.com/pactor-4.html
A certificate that says "this installer really did come from the owner of exampleapp.com" is better than users just trusting whatever random file came up in a Google search.

And meanwhile, in Linux land, people will install things by piping curl into bash[0][1], so the bar is just not that high. And the ultimate answer to security will come from better app sandboxing, not from charging every native-app developer in the world $700/year for a code signing certificate.

[0] https://docs.chef.io/chef_install_script/ [1] https://github.com/zyedidia/micro#quick-install-script
That's an education bias. I find meters way more intuitive than feets.
Why does an installer need admin rights though
The issue here is the high financial burden to have a secure/signed release, not the security itself.
Yes. I think Samsung is probably ahead in this as they intend to start trial production run by the end of this year. So they are well passed the prototype or sample to customer stage. With 1st Generation only getting a 50% increase in energy density, rather than all the hyped up 2x or 3x energy improvement.

It will probably take at least 2-3 years to iron out all the production issues before it is even being mass manufactured. So we are talking about at least 2027 or 2028 to have them in any Consumer device.

Realistically, knowing all the engineering and supply chain difficulties involved I think 2030+ is probably when we could see any SS Battery.
> and derive the length of the meter from that.

I would assume they meant meter since they wrote that.
Rewriting != waterfall.

Waterfall is a formal development model (5-10+ phases) that includes strict requirements, specifications, documentation, development, testing, and deployment. If you need to build an elevator control system or a SCADA system for a steelworks plant, then definitely go there.

Rewrite is throwing away code (and downstream) and starting over.

There comes a point in some projects when support costs exceed greenfield development costs, or prevent forward velocity due to tech debt. This is rare, but it happens. The problem of massive rewrites is they are too often not lean and equivalent to big design upfront (BDU) because they cannot deliver an MVP and they throw away features users depended on (but failed to questionnaire, focus group, or look at telemetry for). The other issue is massive rewrites too often are used an excuse to avoid refactoring and selective rewrites with the magical thinking that "new == better". Too often, this is reinventing the wheel that isn't much better for 2x the effort.
I have a strong suspicion that from the fact that managers of most major social networks were openly political and all of them to one (the left) side, many people decided this is how the normal situation is - you can only use a service if the owner shares your politics and constantly reaffirms it. When it turned out Elon's politics does not match theirs in some aspects, it was a shock to them - how can we tolerate being associated with a person who disagrees with us?! I don't think that's how functional adults are supposed to behave, but on social media I guess the norms are different.
But what about rotational invariance? I feel like tilts are about as common as slides.
I am not sure I get the difference between these projects and have trie, also looked at libvips, but for me with a narrow use case of batch overlay text insertion I could not find anything.
> I disagree that the vast majority of code lacks artistic expression

I disagree that I made a claim that you're disagreeing with here. I said the vast majority of code is the product of functional desire. Building an engine is the product of functional desire. Building a birdhouse is the product of functional desire. Building a bridge is the product of a functional desire. Drawing a portrait is the product of artistic expression. All of these require creative thinking. One of them is copyrightable. Software is definitely closer in intellectual domain to what is not copyrightable than to what is.

I don't think copyright should exist at all, but I also 100% think you're kidding yourself if you think most software is an artistic endeavor.
> What are you trying to do

Use Case: Wave field / light field recording

Light field / plenoptic function: https://en.wikipedia.org/wiki/Light_field

Light field camera:
https://en.wikipedia.org/wiki/Light_field_camera#Metalens_ar...
From what I understand, early pinball looked a lot more like pachinko. There weren't flippers and there was much less opportunity to consciously guide gameplay.

This made it a lot more of a game of chance than a game of skill, so it was closer to a gambling device. Some places went all the way-- the operator would award prizes for getting specific outcomes, and a lot of places banned or regulated them for decades.

There were apparently court trials where experienced players demonstrated that they could call specific shots, to prove that it was not a pure-chance endeavour.
That's still a single point of failure, so the signing doesn't provide any extra security
They can clone faster than you can legislate.
Or you could keep using react the way you always were
The Northern European Enclosure Dam for If Climate Change Mitigation Fails