skysight-inc/HackerNews huggingface dataset:
> ~57% of teachers have Master's degree or higher.

This points to an important issue. I think most college-educated people are aware that at a typical university in the USA, the College of Education is separate from the College of Arts & Sciences. What they are probably not aware of without direct experience is the tremendous difference in academic rigor between Education and the Social Sciences. I've been nosing around Education programs for years and a good deal of what goes on in classrooms reminds me of my own experiences in junior high school. We like to joke about classes in Underwater Basket Weaving, but I once actually saw a 10-week, upper-division course in how to make use of a photocopier.

Now to the point. Among the Social Sciences, the field that has developed the most rigor in experimental standards and application of mathematics is probably Psychology. On the other hand, over in the College of Education, there is a field of Educational Psychology, which may be held up as an example of cargo cult science.

Published results on the psychology of learning attract a fair amount of attention on HN, but often the most dramatic reports are coming out of Educational Psychology, not Psychology. Readers need to be aware of the distinction between those fields to better adjust the credence they give to their output.
Just throwing in that the dollar value isn't the only cost. I've been using an automated release workflow tomanage signing, eg

https://github.com/technion/rustypwneddownloader/blob/main/....

This worfklow isn't usable with these new rules, and I'm having a hard time with the assertion that moving builds to my desktop to use a hardware signing key and uploading them in a non automated, non transparent fashion is an improvement on security.
That wasn't your original argument, however.

And here, the suburban hospitals are better.
> Makes me feel like I would like to learn more about open source. What drives it's development and what the business models are.

Simple: there is no business model. Open Source is not a business. It is a philosophy and hobby, where people help each other and give away their labor with no expectation of a return.

(Some youngsters that have grown up in the social media age have developed a kind of entitlement complex where they focus more on the popularity of their contribution than its utility; they may be developing it just to see a lot of stars on a GitHub page. But largely it's a community driven by people who just needed some code to exist and then released it for free when it worked)

(Some businesses do release code with an open source license and even accept some contributions from the public, but largely they are doing so for various business reasons and the project is more a reflection of the business than the needs of a community. Since those projects are financed and organized by the business, they tend to end when the business abandons them; whereas a grassroots community project is often just maintained by a new stranger on the internet if the old maintainer gives it up)
Unlike retool, you almost never need to touch backend because the system already provides 90% of your needs just by introspecting the database, you only implement super custom endpoints where you need custom complicated queries or you need to call 3rd party systems
By that logic, reading a classic novel such as Anna Karenina would set you back $720. [1]

[1] https://www.readinglength.com/book/isbn-0143035002
Colonoscopies are pretty common in some european countries, so I don't think most of the world means Europe.
That’s a lot to parse, so I’m kinda hand waving, but the memory bandwidth emphasis seems like a great fit for most LLMs at least if not also some ViTs and other attention-style architectures on both training and inference? Certainly sounds like the price is right.

Am I missing something key either conceptually or by failing to read all the stats closely?
It’s time to share something personal again.

When I was 20, I vividly remember being in the bathroom at my workplace when a large amount of blood started coming out. I did what any smart, effective 20yo would do: ignored it because I was embarrassed.

Fast forward 10 years, and I’d been ignoring it for a decade. It had continued to happen every few months. Sometimes the blood was so bad I’d have to wait up to 20 minutes for it to stop. Other times I would see blood, but no bleeding.

These are bad signs. If you see this, don’t do what I did. I was gambling with my life. Remember that popular video game commenter that died from this? Totalbiscuit? He concealed his, and he lost.

The most unexpected thing is that when I actually wanted one, the process took over two years. And that was after a year or so of periodically mentioning it to the doctors, who would give me a sheet of numbers to call and I never bothered. Those three years could have been the difference.

Turns out, there’s nothing wrong with me. It was hemorrhoids. You might think you’re smart enough to tell the difference. I thought so. I was a cocky idiot who could’ve died from cancer before seeing my daughter get married.

Just get one if you see something. The final paragraph of the article pleads you to. The peace of mind alone was worth the small unpleasantness and major logistical annoyance.
Some PDF-related apps used to bundle ghostscript's installer as a silent install and it would just appear in your programs list. Then those users would see a mysterous entity named ghostscript in their start menu and complain online about it being malware or whatever. The ghostscript people decided to disable their silent installer because of it.

The fallout has been that corpos can build it from their source and ship it themselves if they need it so bad, and users are always informed up front about what is coming to their computers.

Let that stick in your brain for next time you wonder why Windows still hasn't gotten a competent package manager that can wrangle dependencies. The userbase has been made terminally paranoid by decades of trojans and adware installers.
Wait, their certificates aren't trusted by the os? What's the point of their service, then? A self-signed certificate accomplishes the same result!
Why don’t you submit a pull request to add it?
I guess they are rolling it out gradually because mine hasn't changed. At least not on mobile web. Haven't looked at desktop.
Years ago, I went through ~3 wireless mice in as many months because the left click button would keep failing. Not completely failing, it would just develop a bounce, where a single click would register as a dozen or so. When the 3rd failed, I got tired of constantly buying new ones, and decided to try and solve it is software; how hard can a bit of debounce logic really be? Several days of digging through the Linux input stack later, I gave up, opened up the mouse, and soldered a spare capacitor I had lying around to the input button. Mouse has been working flawlessly to this day.
These days, it probably has to do with pinball being a second-tier curiosity that exists in many places mostly as a change of pace from purely electronic arcade machines.
It is probably impossible to compare education majors to say computer science majors just on their collegiate GPA, or comparing masters program admissions between those (mostly education graduates will go on to enter a masters in education program). There must be something else they are comparing, or maybe the fact is just made up (likely it is impossible to make this claim).
It’s great if you’re in the 40%.
It's a racket.
I just made one up:

When riding in a Trabant, the passengers carry most of the kinetic energy. To reduce damage to the Trabant in a collision, secure it to as many passengers as possible via seat belts.¹

--

1. Offered as an add-on option, featured in the deluxe package.
Yes, that. Yay to ovens and electric appliances where you just set the power and the time and go do something else until the food cooks itself. I stopped boiling most vegetables, I steam process them over a pot with a strainer on top.
most of those games linux will cover happily.

adobe products is just bad decision making /s
> Let that stick in your brain for next time you wonder why Windows still hasn't gotten a competent package manager that can wrangle dependencies.

winget?
The classic thing is that "nobody uses Windows". The real thing of course is that many people contributing to various projects end up using some *nix setup. So despite Windows being a big part of many userbases, ultimately maintainers often don't even have a Windows machine, let alone the knowledge to deal with some Windows-specific issues or bugs.

Though here it seems to be mostly a money thing ($629/year is a real amount of "pocket change").
It isn’t weird that someone teaching K-12 math would learn to teach math to kids rather than focus on advanced math that they would never need or use for their job. Considering that even the most advanced math class in high school usually is a first or second semester class in university.
Compare to codesign, vulnerability management is more concerning. Ubuntu users should know that security patches for ImageMagick are not free! If you do not believe that, read this https://ubuntu.com/security/notices/USN-6393-1. The security patch is only provided through Ubuntu's Expanded Security Maintenance (ESM) plan, which means you must pay for it. So, seriously, consider having you own build. Then there is no need to worry about codesign too.
The N100 is a really interesting CPU: Atom has sort of caught up. Basically you are looking at Skylake performance at a fraction of the power. https://www.cpubenchmark.net/compare/5157vs3542/Intel-N100-v... Of course this has as much to do with the long reign of Skylake as with Atom improvements, nonetheless you are looking at the performance of a three year old notebook. Even more interesting perhaps is the power performance ratio matching the Apple M1 https://www.cpubenchmark.net/power_performance.html
In my area of expertise? I'd build it.
I would think that's where the jokes came from.
Lawyer here as well, but from Europe. Here the same is true, unless the government is involved.

Documents from/to any agency, including anything that has any tax relevance, - generally speaking (there are many caveats) - shall be signed with services compliant with the e-signature standards provided by Regulation 2014/910/EU (in short: PADES, CADES, XADES).

Out of curiosity: is there a similar requirement in terms of e-signature in the US when documents need to be sent to some agency, such as the IRS?
Oh man, we’ve needed a rock-solid arena model in C++ forever. There’s stuff but it really needs compiler support to be clean.

Jai just seems to be going from strength to strength with arena-by-default.

The key insight is that a modern malloc isn’t terribly different from a modern GC: people seem to vastly overstate the difference IMHO.

Arenas are like a bumping nursery but better. I hope we keep seeing more of this.
"Unfortunately, all Nvidia GPUs since recent years have VBIOS digital signature checks, making VBIOS modification impossible"

This is not necessarily true. As seen with android devices you can force digital signature checking mechanisms by varying voltage levels in order to get the device to completely skip the checks as if they were never there.

https://research.nccgroup.com/2020/10/15/theres-a-hole-in-yo...

I'm sure a similar strategy could be developed here.
Well, in the US, they're following normal protocol. It would probably be irresponsible for them to try to dissuade you from a colonoscopy. But, yes, it's a day involving a gastroenterologist, typically an anesthesiologist, nurses presumably, and someone to take to back and forth from the procedure. It's definitely not standard lab work.
There are lots of systems (and ecosystems) where host trust doesn’t matter, like containers or language-specific package management. Sigstore is currently well-suited for those contexts.

With a self-signed certificate, you are effectively your own PKI. The goal is generally to deduplicate that kind of work while also providing better security properties than “my host trusts self-signed certificates from a root CA that I keep on disk somewhere.”
In this specific case the estimate is likely a vast underestimation of the cost of work.
The heavy usage of arenas for protobuf RPC allocations at Google is also I think the reason why they were experimented with in Go
The landing page linked above gives a pretty detailed write-up about the point of their service
The whole point of digital signing is to verify and have strong trust in the provenance of the code.

This requires identity validation and controls for it to actually work, which is fundamentally incompatible with a Let's Encrypt-style pretend-CA.

This means storage of keys in hardware. Otherwise code signing keys are stolen and used for malware distribution in high profile attacks. This happened one too many times hence the more stringent requirements.

Ironically these guys want their cake and eat it too, there is no reason they couldn't just manually sign release builds which come once in a while. Many small OSS projects do this. No, they want full automation with an organization cert and now are complaining about meeting the requirements for that.
Absolutely! Another good option is to just use Linux.
Does Korea have normal (teaching) universities like China does? If so, I would assume that they aren’t even going to the same schools as say STEM majors, which makes being at the top third of their class even more amazing (and WTF do the other two thirds do if they were going to school to be a teacher?).
> How can a project gather over a million dollars worth of work time, but not $629 for a certification service?

Because the certification 'service' is a protection racket (as in criminal[0] racketeering) by Microsoft.

Millions for defence (or in this case infrastucture), but not a cent for tribute.

0: Since I'm sure some pedant will nitpick this: yes, I'm aware that large corporations have likely purchased legislation misclassifying this as not officially a crime; you know perfectly well what I mean.
The German Spy Museum in Berlin has a very cool modified Trabant door in their collection that has an embedded IR camera used by the Stasi in East Germany.

https://www.berlin.de/en/museums/3977291-3104050-spy-museum-...
The Malthusian Trap Never Existed
Depends where you live and work. I'd totally pick Romania or even Bulgaria over Germany. Healthier and tastier food for one, and I'm not talking restaurants, but farmer's markets. Cities are probably worse, more cars parked eveywhere, more annoying drivers operating them, more pollution, more chaos. I've also met people from Moldova and Ukraine telling me food is way less expensive there. They also eat tastier and more healthy food: borsch, fish, salads but lack EU regulation for big agriculture, so grain, and industrially grown vegetables and meat is probably laced with chemicals banned or regulated in the EU. In Germany the traditional food is quite boring. I won't venture to say awful, because it's still eatable, but doesn't have much variety or taste, like South or East European food. Czech Republic and Poland were also very pleasant food wise: great pickles or cabbage based foods. Hingary? They're eating too much meat. But the goulash and sausages ate usually quite good.
It's the same one for LADAs.
The cost of work is based on the cost of finding someone to do the work. These people did the work for free. This specific work cost $0. The value the work provides may be higher, and I'd wager that ImageMagick has provided far more than $1,000,000 in value.
Only a very small number of people are ordinarily paid to read Russian literature. The typical observation with OSS is that we would otherwise pay large amounts of money for equivalent labor in the software market.
There is a huge variety in teaching experiences across the USA, because each district is really different in terms of students and resources. So a teacher in a rich suburban school district probably has much more in satisfaction than a teacher in a poor urban or rural district.
4D chess where even supposed enemy are doing exactly what Israel wants them to do. Israel plants fake stories in enemy camp which shows Israel in bad light. The enemy camp is caught with pants down and it's Israel that gets blamed.
Doctors used to perform procedures with their bare hands, sometimes immediately after performing necropsies on dead bodies. This guy made the connection that such contamination was causing post-birth complications such as infections. He had his medical students wash their hands in an antiseptic solution, compiled statistics which showed lower mortality rates, was ignored, started publicly denouncing the negligence of the other doctors and ended up interned in some sanatorium and killed for his trouble.

Doctors used to believe they were such gentlemen their hands could not possibly be dirty and contaminated.
That’s why you hire a 10x reader at $200/hour.
I meant what little content they had on their site was Marketing BS, not the actual technology... in retrospect I should have edited my comment to be much clearer.
Wonder why the attitude difference?
It’s tensor cores and floating point math have been either artificially or actually disabled - it would be very very slow. And 8gb of vram is really low as well.
If by backend you mean your db (and not your python/rails code) and you want django admin functionality but with react on the frontend, check out https://subzero.cloud (ts lib), i am building it
Gaining trust is one thing, I wish you the very best of luck with that.

Not losing it is another.

The people to preserve trust with are all potential signatories
(ie. the public), not the initiating counterparties. Because there are
many more of them.

Of course this reputation problem is one you'll share with banks,
PayPal and every other "official" type entity that phishers want to
jump on.

Now most "Docusign" communications go straight to my spam folder or
/dev/null if arriving by email and not from (forwarded) a whitelisted
business I already have a relation with. Those that come directly from
Docusign (as sender even if DKIM passes) are ignored unless I think
there's a reason to be contacted.

Docusign is one of the juiciest spoofing targets for phishing attacks
because people act rashly to what they think is something requiring a
signature. They also have no timeout on repeat sends, relentlessly
spamming users to sign something, which makes them look exactly like,
well.... phish-spammers.

Try not to make these same mistakes as Docusign.
Them offering the source code for sale for many years but only getting the transformational UI a decade and a half later is a sign of seeds taking a long time to bear fruit but it happening eventually.
Or google pay, or Samsung pay
The whole point of identity verification is pointless, given LOLbins and LOLdrivers that are never updated nor fixed.

I wish we had a cryptographic verification mechanism based on code and reproducibility of their builds, and local-sensitive hashing mechanisms rather than the current ones.

Technically this might actually be a decentralized ledging use case that makes sense.
Let’s admit it was a heart failure. Couldn’t a smartwatch detect it and send the proper alarms?

[that’s what I would expect in our cyberpunk world. #docWagon]
Thanks I am going to bookmarked this. We have been in somewhat less stress, or at least non existential stress since 2008, rising interest rate is back. And I had a conversion with a young SME CEO who said the current Interest rate is not normal and will get back to "normal" in a few years. A lot of the current risk are new to pretty much anyone younger than 40-45.

Which leads to me witness something similar to CEO or manager being effectively catatonic. And test on whether they are rabbit or tiger. I wish I read this a few years earlier.
I think the terms would apply if you could put in orders through the app. I’m assuming you can (I don’t go to McDonald’s).

So, if you order a gluten free burger using the app, and a software bug messes up you order? You pick it up at the counter, and they give you a regular burger. You end up getting sick and having expenses or missing income, you can’t sue them in court, I guess.
This is a strange argument to me. It’s essentially that the additional complexity of docker compose is acceptable because other things are unnecessarily complex. The problem is complexity. There are many great projects that are just “build the binary, edit config file, and run it,” and why should things be more complex than that? It’s wild to me what people will put up with.
This is where the derivative of the facade pattern comes from:

The smother pattern.

Where you write a facade, then replace calls iteratively with the rewrite until you’ve removed all the calls to the old API. Then you turn it off.

Sometimes rewrites are genuinely a good idea, eg, you’ve lifted-and-shifted a service but would like to better integrate with cloud services.
Though it can have its own quirks (speed, access to exchange between currencies, etc), Bitcoin has been a life saver for situations like this.

If it's an option, it'd be worth exploring using a service that allows you to pay for gift cards (including things like Visa gift cards) to the services you need using Bitcoin.
Task force to combat false reports
"The Criminal Investigation Bureau and the Ministry of Justice Investigation Bureau are using technology such as artificial intelligence software to identify false news, the government said."

I remain skeptical.
But cats eat birds :(
It’s principle. A fundamental of the hacker mentality. A hacker will jump through hoops to do something based on principle. Something others legitimately have a hard time understanding. That being said why the HELL is it 629 dollars!?
and of course people rally them, because people will race anything: https://www.youtube.com/watch?v=WPZ_Vs3gAGw
I'm not sure whether or not there's an issue of entitlement, but there's certainly incentives to develop a popular package (even if superficially). One big one is career development. For people early in their career, it's something they can proactively invest in, as where they can't magically materialize years of experience overnight.
I wish we used a unit more similar to the foot as the base. Its much more useful for human-scale understanding - as seen by many civilisations (from the Japanese, Chinese, indians, ancient egyptians, romans, etc.) adopting something similar (something between about 10 and 18 inches). You can build off that as you need of course.
I've never played on an actual pinball machine, but spent a lot of time playing Space Cadet Pinball when I was a kid.

I think I initially saw it as a random thing with bright shiny lights and funny sounds, but I eventually understood the game. I was never very good at it, but it is most certainly a game of skill.
From the "it might work" department: Wear a hat, or a lanyard, or something else when you're "at work", take it off when you're done. You'll signal to yourself and others the different modes of using the space you're in, and the laptop.

Alternatively, only use that laptop for work, get a different one for non-work, gaming, etc.

You need to get outside for at least 15 minutes twice a day, minimum. No matter how cold, wet, hot, humid, etc.

Set time limits using physical or virtual timers, stop when they tell you to do so.
It wasn’t just doctors, “a gentleman never washes his hands because a gentleman’s hands are never dirty.” Was the common thought.

NB, not all men were considered gentlemen.

See also surgeons cuffs on coats (blazers), so as to avoid getting blood on one’s clothes when operating, which are still called the same thing today.
Are they accepting applications again, or do you also need a time machine?