skysight-inc/HackerNews huggingface dataset:
Who would you rather have building businesses? Those good at creating, innovating and leading? Or those good at studying and following rules?

“Here's to the crazy ones. The misfits. The rebels. The troublemakers. The round pegs in the square holes. The ones who see things differently. They're not fond of rules. And they have no respect for the status quo. You can quote them, disagree with them, glorify or vilify them. About the only thing you can't do is ignore them. Because they change things. They push the human race forward. And while some may see them as the crazy ones, we see genius. Because the people who are crazy enough to think they can change the world, are the ones who do.”

― Steve Jobs
What China's slow-motion real estate crisis means for the global economy
> moving builds to my desktop to use a hardware signing key and uploading them in a non automated, non transparent fashion is an improvement on security

For most projects it is an improvement, for better or worse.

First issue: private keys stored in files can be stolen silently, and then the only recourse is revocation. That's the main reason for the HSM requirement: malware authors have been doing this for some time now and revocation is difficult/expensive for various reasons. An HSM can also be stolen but only in the old fashioned way of breaking into your office or home and grabbing it, which you're going to notice.

You may object that the credentials for using the HSM can be stolen, and that's true, but they can also be changed easily and quickly. So if you notice that your PIN has been keylogged, you can recover from the compromise then change the PIN and you're done, no need to revoke the certificate.

Second issue: automated signing in CI can actually be risky. It means anyone who can push code to your CI system can get code signed as yourself, possibly without you even being aware of it. The key is held online at all times, so obviously if the CI system gets hacked then it's game over, but even without that it boils down to anyone who can push code into the system becoming a weak point, especially because CI systems are running lots of arbitrary code without being closely monitored. CI signing is at best 1-factor security.

If you sign locally then the key can be (literally) offline until the moment you do a release, and access to it can be constrained via 2-factor auth: the key is something you have, the credential is something you know. So this is quite secure.

For signing nightly dev builds, internal tools and other transient binaries that shouldn't get out into the wild anyway, you can self-sign which is free.
> The sense you're thinking of is that you can easily rebuild a binary package and it will use the same dependency versions, build options, etc. There should be no chance of a compiler error that didn't happen the first time (the old "but it worked on my laptop" syndrome).

And that's just for Nixpkgs, the packages themselves that also work outside NixOS. NixOS has reproducibility of the entire system complete with configuration.
If they are unimportant why bother with any of them in the first place? And if we decided to watch one, why bother trying to be up to speed with the other?

But I'm a weirdo and I don't even have the TV set so that's that ;-)
Y2K Bug Was Real and Could Have Killed
> Middle of North America was largely unsettled by Europeans for 350 years.

Easy. Why would you settle there when a much better Eastern coast is available? The US non-Native population in 1800 was less than 6 million.

For comparison, the UK was 10 million according to the 1801 census.
Thank you for giving me an alternative! I've been searching for one.

I hate it when the best version of a phrase has a swear word; I don't blame you for using it.
Also I have body image issues and do not enjoy working out around other people.

That sounds rough. I'm sorry to hear it. I still strongly encourage you to get exercise on your own. It will do wonders for your self-esteem and mental health. If one, you get fit enough, then you can go to the gym. Don't worry, the gym is much less social than you imagine it is. Most people are wearing headphones these days.
NHS England introduce a Federated data platform (FDP)
>Can you think of one movie or TV show which models a realistically happy working adult marriage which isn't either sentimental and idealised, or doesn't end in drama, tragedy, and betrayal?

Sentimental and idealized are very vague, but there are a ton of US sitcoms that have this premise. But also, watching a couple just go about their day to day life that 90% of people go through seems boring as hell, who would watch that?
That is not true at all, with respect to the aims or the reality of nixpkgs. The original post here is talking about reproducing the (binary) minimal iso, which contains a bunch of binary packages.
Obvious doesn't exist. Everything is learned.

Obvious just means "given our context, we don't expect to require much complex thinking to get to that conclusion".

It's just another convention.

Given our context of most of us having eyes and color receptors calibrated in a similar fashion, I expect most people will see the sky blue. Of course if you dig deeper, it opens the discussions to nuances.

It's the same here.

Nothing wrong with that.
lol great question to ask on HN, notoriously dearth of any sense of humor. Maybe Betteridge’s Law applies in this fora, the answer is simply “nothing is funny, here’s your downvote now go away”
At least for me, 'giving a shit' (GaS) is not a static feature. I have great respect for people who GaS and they inspire me to want to GaS too. Most days I take pride in my work and so try very hard to GaS. However there are days when my workload has exceeded my capacity and the priority is simply to get things 'out the door', in which case the degree to which I can GaS begins to vary.
unrealted to this thread, I know, but yes, thank you. I despise when the top results and the casual links to support something turn out to be videos. I don't want to stop everything I'm doing to dedicate 100% of my attention to something on a fixed take-up time schedule. Give me a text I can scan while my other audio keeps playing, thank you!
“Giving a shit”
I love the American language because of things like this.

“Fucking shit”
Sex with poop.

Bukowski and the Cohen brothers made those words art
Very impressive milestone, congrats to those who made this possible!

> [...] actually rebuilding the ISO still introduced differences. This was due to some remaining problems in the hydra cache and the way the ISO was created.

Can anyone shed some light on the fix for "how the ISO was created"? I attempted making a reproducible ISO a while back but could not make the file system create extents in a deterministic fashion.
I think you have some confusion about RSA cryptography - it relies on numbers that are deliberately generated using very large (known) primes, so these numbers are definitely not "randomly generated".

It takes a short time to generate such a number but a very long time to decompose it, but this is a different problem than telling whether a number is prime.
As they say on other forums, DYEL bro? [do you even lift :)]

Squats, deadlifts, and cleans will help your explosive power a lot; for this, your probably want low reps, high weight, and long recoveries. If you can periodically go to a track and run 6-10x100m ‘all out’ w/ 4-5 mins rest, that would be good too.

For an example lifting plan: https://www.stack.com/a/sprinter-workout-program/
Yet, I have had English speakers mix them up several times.
Where do you get the need quote from? I missed it on the linked page.

Empty and "hospitable to/available to bison" are two different things.
The "six feet" women are a small and ever thinning slice of society, if this is a problem you might want to adjust either your targets or your social circle.

But otherwise, even if I'd found your analysis to be correct, I think a few decades of society adjusting to this freedom is well deserved after a millenia of patriarchy.
Meta comment:

We have come to very narrow definition of a 'system' when using terms like system design, system architect, etc., which here seems to mean a distributed computer system. That, as compared to a more open-ended definition found on, say, Wikipedia [1]. What about biological systems like a cell or a human body, a road system, a sound system, ...

[1] https://en.m.wikipedia.org/wiki/System
The interesting fact is that most most men are "below average" "bad" partners according to how women perceive men (I don't remember the exact numbers but it is something ridiculous like only 5% of men are worth considerations).
It turns out greater choice and rising expectations are an increasing burden on one's psyche. Many of our lives are much better on many objective measures, yet we're more and more unhappy. We're optimizing for the wrong things.
> How does one "move the art forward" without understanding the landscape first?

Practice data structures, make complex algorithms described in books (most of which are free, and the rest are maximum $35), code a small program for an embedded controller for once to see how the sausage is made first-hand, participate in different kinds of open-source. There are plenty of ways outside of "the world needs one more LISP interpreter".

> Just because something "is known" to humanity doesn't mean it's known by every individual presently.

Sadly. I wish I belonged to another species where this assertion was not true. Sigh.

> Viewed this way, how many people in the world, presently, have sufficient knowledge to "move the art forward"? How many have the means? I'd put it at a few hundred. Maybe you're one of them?

Me? Absolutely not, I am 43 and at this point I am severely burned out. I had so many ideas and ambitions but working for the man for 22 years has crushed me. Maybe if I get a bag of money in the upper 7 digits I'll be able to reignite my tinkering spirit but we don't live in fairly land and this is not happening so nope. You're looking at one more person who was crushed by the free market forces.

That being said, you have people working on e.g. the Rust compiler or OCaml in general. Likely a bunch of geniuses and I love it that they are actually funded and are keeping up the good fight. Gives me some hope.

> maybe you could assist them by sharing your experience?

Yes, that's the best idea really: education. But as we all know (1) younger people never listen to advice, and (2) I probably never found the right audience (though thinking of it I am starting to see some lectures popping up lately in my city again, maybe I should try to go). I've been told I am excellent mentor (as recently as 3 months ago) but my health and time constraints prevent me from doing it more.

But how do you educate people to be unhappy with the status quo? I seriously don't know. The human brain is kind of like this: "Hey I am not hungry, I have where to sleep and most of my basic needs are covered, I guess the world is perfect and I don't need to change anything at all anywhere". Observed it thousands of times in my life and I am bitter about it to this day, likely to my grave.

> But maybe we need to play more efficiently?

Yep, I would not be against some central "authority" website / app that distributes "play" tasks to whoever is willing to do them (obviously with plenty of repetition and redundancy, you can't have 10 people agree to tackle on 10 different tasks and then they never show up again). And this does not remove choice, you can still present people with like 50 choices and they surely will identify with at least one of them.

All this free energy, wasted all the time. [sighs deeply] I wish we had more structure and direction is what I am saying all along.
Currently trying to get my 10km time down running 40 mpw and here's my perspective:

general performance: I love the idea that if I pick up a random sport to play with friends or am in some emergency situation I know I can move faster

personal achievement: it feels great to break a new personal best

time constraints: I can hit my distance goals with less time spent during training if I'm moving faster, I only have about an hour to run on week days and getting more miles into that time is helpful
I thought they were joking.
What a logo. At least better than USB 3 Gen 2x2 XYZ Speed.
The fact that apps are "algorithmic doom barrels" comes from unaligned incentives in many of them. "The Apps" reward continued engagement, not finding the best partner. That subscription money disappears if a longer term partner is found, so that's obviously not the goal; regardless of what their marketing/ad department says. "Hook up" Apps, somewhat align but are being be pushed on individuals looking for something else, leading to frustration, dissatisfaction and disillusionment.
Google's Sundar Pichai testifies in landmark monopoly trial
> but there is something to the 'she'll have her fun with bad boys then settle down with you in her 30s

No, there isn't. The reality here is there's a bunch of men who have "here's my list of positive traits" and are leaving something out, because everyone is the angel of their own story.
> Czechia and Chechenya

I couldn't find it but last week I read a twitter thread about a software company in Czechia that had gotten some crazy request for documentation because they had been flagged as being in Chechnya
While I can understand the psychology of putting the 20% first, I will never leave a tip for any service unless it is in the United States and I know the waitstaff is making 2$ an hour and their wages actually come from tips. But any sort of touch-screen tipping is simply companies begging for more money from you. And if tipping is considered as revenue, then I think it is a deceptive practice. Why not just raise prices instead of have some random process (will a person tip or not?) dictate your revenue? it all seems like convolutions to increase the entropy of the consumer decision making to trick them out of their money.
Even reading that sentence I started to doubt which was which.
It's kind of irresponsible to publish this, given the way it's developed and deployed. It's not even a very good implementation of what it's supposed to do. (Using regular expression search-and-replace as a substitute for parsing? <http://langsec.org/>)

This tool is not good.
The "she'll settle down in her 30s" is the wrong part of this plan. Women on her 30s fastly become lower on the totem pole than even men were in their early 20s. Girls should be taught that, but nowadays its a faux pax to tell the biological truth to people. The same should be explained to boys: it will get better when your life starts to come together in your late 20s. It would make the lives of a huge percent of the population, both male and female, a lot happier.
*BSD, Tk, Sh, IRC, FTP, plain text, musl.
No, absolutely not!

bc is my gift to the world. It will remain that way.

I'm writing other software, upon which my business will be based.

You could say bc is how I advertise my services. :)
I’ve noticed companies tend to sacrifice giving a shit for an increase in perceived growth that often is not sustainable over the long term.

There’s honestly probably a lengthy blog post in this.

Especially in the sector of managed/professional services or SaaS - companies try to scale up fast to have more customer acquisition (focus on net new), and tend to sacrifice the level of bespoke service that retains customers, leading to increased churn over time.

This approach usually means that ARR will increase over the short term (3-5y), which is totally fine, but unless your service is really sticky or you gain market dominance, the growth curve will eventually plateau and enter a decline.

You also see this outside of tech - in the service industry in general. Company expands rapidly, service deteriorates over time, eventually enters a decline phase.

Maintaining quality of service is hard over the long term to balance with growth, you really gotta put the work in.
Haha german here.
I was confused for a second too. I just woke up and wasn’t that awake.
https://en.wikipedia.org/wiki/Freetown_Christiania
The phrase exists in English too, "to shit on something". It means to talk bad about something, to criticize, to make it (or someone) look bad.

I think "shit" in English is one of the most linguistically flexible words, used in various ways, from very positive ("It's the shit!") to negative ("It's shit") meanings.

As another commenter said, the positive meaning of "shit" often seems to be the result of reversing a common phrase. "I don't give a shit" means I don't care at all, not even a shit; and later the opposite phrase started to be used, "I give a shit" to mean I do care about it.

It's one of many confusing and illogical things about English.
Lack of control and content constantly jumping to different services and/or disappearing due to licensing shenanigans certainly play a role, but the vast majority of people only watch the latest, most popular shows. The main factor at play here is simply that many people do not feel like they are getting their money's worth out of increasingly more expensive subscriptions to services from which they are only going to watch a handful of shows at best.

During the pandemic, spending a few bucks on Netflix or Disney+ made sense if you had heaps of free time every day and could binge anything you wanted from their massive back catalogs. But the value proposition of $20 for a month of access to such catalogs changes when you only have an hour a day or less to dedicate to content consumption (and this is without taking into account price hikes, password sharing crackdowns and whatnot).
> Chats are no substitution for IRL human interactions.

Careful... are you going to suggest next that Remote work is no substitution for office work?
Has anyone in the portable Wii space looked at powering one with a USB PD power bank? It would be really nice to just hook up a USB power bank, maybe something like this, which could power a disc drive-less Wii for a few hours, rather than dealing with batteries inside the Wii itself.
Sounds like something GitHub themselves could fairly easily offer.
Humata
nitter.net's TLS certificates appear to have expired at Sun, 29 Oct 2023 04:52:28 GMT.
Just as a counterpoint, I'd suggest that the science of pregnancy and parenthood is some of the least solid you're likely to encounter. Pregnant people and children are some of the hardest to study in a rigorous way, both because of the myriad of factors involved and the difficulty in performing research. Doing something like a double-blind test between a treatment and a placebo on a group of children who can't rationally consider the tradeoffs or consent is radically more complicated than doing the same kind of study on adults.
There is so much going on in the world. In almost every idea, I find that someone else is doing something very similar, but with (so-far) limited success. It’s usually hard to tell why the aren’t having more success. So I never come up with confidence that a concept will work better for me than it did for these other people.
It has always been
$600/year buys you how much you can put into securing the distribution chain? 3 hours of dev time?

If you can’t put $600/year into signing your binary, I don’t know how much effort you’re going to put into securing a distribution chain.
Microsoft have lowered it. The store costs $19 iirc, one off fee, not recurring or yearly. So this is only for distributing outside their store.

Certificates are expensive because governments aren't digitized and don't really "do" cryptography, so associating ownership of a private key with ownership of a legal identity requires a lot of manual effort. CAs have to do things like look up your registration details in country-specific websites that don't have APIs, make phone calls, study passport scans and so on. That's all very labor intensive which makes it expensive.

It could be made a lot cheaper if governments ran their own PKIs and issued every company registrant with private keys as part of setup, likewise if passports came with private keys usable for document signing (govs already run PKIs for e-Passports but you have no way to associate a personal private key with that certificate).

Unfortunately there's been no movement on that for a long time, and the few countries that did experiment with national PKIs have mostly given up. America never tried to do large scale government PKI outside of the DoD, and therefore US software firms never felt much need to do a good job of smartcard support. No mainstream operating system has solid support for it, standards are lacking, etc.

Then you have the generally high overheads that the certificate consumers (Microsoft) and CA/Browser forum mandates for CAs. That costs money too. Then the overheads that come with a company existing at all (websites, taxes, salaries etc).

The reason for the annual fee is to amortize the cost over time. It costs the CA more than the 1-year fee to issue the certificate in the first place, but if they assume you'll use it for at least a few years then they can break even then make a small profit.
Dylan Cuthbert probably means assembly not machine code, but ok. Assembly -> machine code manually is possible even with just pen & paper (been there, done that). But it's tedious.

After having this article proofread by a certain machine code madman who goes by the name of Jaymin Kessler, he initially said, "but will kids really understand register spilling, stack frames, register allocation?". He instantly brought in a ton of abstract terminology that was invented primarily for compilers of higher level abstract languages.

So true! Diving right onto the bare metal does away with a lot of 'detours' that just needn't be there. How higher languages work under the hood, can be learned later.

In the article's example of the ZX Spectrum: there's a direct mapping between a specific memory area, and what's on screen. POKE some values, screen changes (same for the equivalent LD (location),A or similar Z80 code).

Sound: a 1-bit output. Toggle it for 'clicks', toggle it faster for low-frequency, toggle faster yet for a high-pitch tone.

As far as assembly on lowly 8-bitter is concerned, doesn't get simpler than that. Hang the machine, and a 1..2s reboot brings you back to the BASIC prompt.

I continue to be annoyed that 100k...1M+ times faster computers lack that capability. Power on -> ready for action should be near-instant. Especially on modern hardware.

(yes I understand the reasons why it's not. Doesn't mean that's how it should be)
Need Feedback: Developer Tool to Simplify Bug Hunting and User Journey Analysis
Hey, Hackers!

I'm embarking on an exciting project and would greatly appreciate your insights and feedback.

The Idea: I'm developing a versatile tool designed to make bug hunting and user journey analysis in applications more efficiently. It can captures a wide range of user event data, offering real-time insights and visualizations to identify issues and optimize user experiences.

Key Features:

Real-time Anomaly Detection
User Behavior Tracking
Data Security
Custom Alerts
User Journey Analysis
Event Triggering
Integration Flexibility
Tech Stack: Python (Django), NextJS, PostgreSql, MongoDB, gRPC, REST API.

Why Your Input Matters:

What are your biggest challenges when debugging web applications?
What features would make your debugging process smoother?
How do you currently analyze user journeys in your applications?
Your expertise could help shape the future of this tool. Let's connect and exchange ideas!

Connect and Contribute: Drop your thoughts or connect with me for a deeper discussion. Your feedback is gold!

Thank you for being part of this exciting journey. Your insights matter!

#DeveloperTool #WebDev #BugHunting #UserJourneyAnalysis #HackerNewsFeedback
This is a really good comment, I have no idea why it’s going grey.

Upvote from me FWIW.