skysight-inc/HackerNews huggingface dataset:
I remember a (now removed?) passage in Wikipedia stated that self-signed certificates where considered as default for HTTPS back in the 90ies. But the idea of signing Certificate-Authorities prevailed. Users get instantly a “lock” creating a feeling of security - and it made some people rich.

Self-Signed actually is the only trustworthy approach to use certificates. And with QR-Codes or ASCII-Art it is user friendly. Your partner (e.g. bank) would print a hash/fingerprint on the contract and the user MUST check it on first connection.

To complicated?
SSH does that always. PGP is built upon the idea of users itself trusting. No end users?

Signal and WhatsApp!
Actually you need to check the hash/fingerprint in the profile of your chat or you’ve only an encrypted connection but no security who receives the messages.

I think we should drop the entire approach of Certificates and issuing through “Authorities”. SecureBoot was flawed from the very first moment due its use of Certificates signed by an Authority named Microsoft. And a top-down security enforced from companies isn’t one.

PS: Lenovo turns off SecureBoot when you order a Laptop with Linux. A wise decision. I just miss a note that the password for hardware-disk-encryption and UEFI.
I seem to remember a talk I heard a very long time ago, maybe by Joel Splosky? He was saying that he'd observed the "population change" effect in USENET; where argumentative jerks tended to stay and helpful people tended to be driven away; and in his mind the "reply in-line" mechanic specifically contributed to this. So the first-order goal he had when he built Stack Overflow was to build a system with mechanics which encouraged helpful people tended to stay and argumentative jerks to be frustrated and go elsewhere.
> Why expect some random celebrity

The "random" celebrities were paid tens of millions of dollars, that's why.

It's a separate question about the failure of regulators and law enforcement. It turns out that more than one party can do something wrong.
In my experience, large estimates are only ever Rough Orders Of Magnitude. Our teams do not pull any work in to be done unless they've broken it down to the smallest estimated components. Anything with a large estimate is inherently inaccurate and not ready to plan around.

The situation you described seems quite broken
Utilities for using Python's PEP 554 subinterpreters
The Chrome webstore listing is dead
I’ve been to fediverse. Many mastodongs are just the same entitled first world outrage vents as twitters, even more toxic at times because there are no moderators to shut them up.
You can always find deficiencies. But some code is objectively worse than other code, sometimes massively so.
Unfortunately the new text isn't public yet; I'm basing my conclusion on this source: https://epicenter.works/en/content/eu-digital-identity-refor... (which was linked on HN earlier today) and claims that the TLS/HTTPS stuff has been adjusted.

At risk of poorly resummarizing the article:

The real purpose seems to be that the EU wants to regulate customer data collection for online transactions. It's an e-Identity law at its core; the EU wants member states to set up a centralized "Wallet" service that can be used to safely exchange a limited amount of PI for things such as digital transactions.

There's little direct reason for example for say, Hetzner, to have the address data of any of their customers on file - they don't send you any physical mail or anything like that. They have that info mostly because of anti-fraud laws that mandate they store a lot of information with each transaction. With the new Wallet setup, they only have to request what they need and the government can still keep those KYC laws working without you having to store a ton of personal data at a third party.

The QWAC stuff is a part of the law because the way this practically ends up working is that a EU citizen that wants to use the wallet (the process is strictly opt-in; if you don't want to use it, you don't have to) needs to give their approval kinda like how it works with OAuth. QWACs were a harebrained attempt at making it clear to the user that the site they're giving their approval on was actually a real government site.

The original law text forced QWACs to not only be displayed but prevented browser makers from doing the usual security processes to deem if the certificates are safe. The new text seems to address this issue according to the source; QWACs for government sites must still be displayed if approved by the browser (so for government sites you'd still get the green text after the security lock like how it was back in the day when EVs were a thing - this is what the EU really wants out of this law from what I can tell, normal certificates don't give them this assurance - they basically want to tell their citizens "yeah, if you see this text after the padlock, only then you can be sure this is the German government"), but browsers aren't required to forcibly bypass all their security processes to do so, giving them back the control they need against bad actors. Firefox can still choose to block a bad QWAC or restrict the list of QWACs they approve to only a small list of government domains, should they decide the certificate authority is behaving inappropriately.
Nice to see you mark! and that you are using CAKE. Cake has a feature that helps on regulating multiple flows to a single destination: per host/per flow FQ. In the middle of a network this only works well with IPv6, along the edge it has a nat mode that helps there. We put it in to manage things like bittorrent really well.

Example:

https://www.reddit.com/r/eero/comments/u7xm83/gen_2_sqm_vs_g...

The 8 way set associative hash is also much better than the direct map hash other things use, and I agree 256 flows is too small, 1024 set associative is great, 16k direct map comparable.
TNG is the most comprehensive analysis of ethics I've ever witnessed. No media or publication even comes close to delivering such a sense of understanding the timeless difficulties of the human experience.
Is this really worth fighting over? Blue bubble vs green bubble?
Why is this a governance issue?
Unless you have fixed field lengths, you're still doing twice the work either scanning or resizing the buffer (or over-allocating memory I guess).

That said, JSON is designed for human readability above performance, so it's a design concession that makes sense. What doesn't make sense is using JSON anywhere performance matters.
The problem is the word “employ” in that sentence. They are going to do what their boss tells them to.
Microsoft offers politicians protection against deepfakes
>
I'd be more invested in something which improves the human condition but that's a 1 in 100,000 job.

I think the ratio is much larger.

But consider that market forces do work:

Since a lot of people want to do such a job, the salary will be quite low (i.e. so low that there won't be a long queue of people who want to do the job for such a low salary; the salary will just be high enough that the positions can be filled), thus these jobs will typically only be attractive to people really who want to put their money where their mouth is (i.e. their willingness to improve the human condition is so huge that they are willing to accept such low salaries).

On the other hand, the salaries of "bullshit jobs" or jobs where you do evil things will be much larger, because otherwise the company will have difficulties filling the positions.
>wire-tapping has always been accepted

The wiretapping of yesterday is not the mass surveillance of today. John from the police taskforce snooping on your landline and taking notes is not even in the same ballpark as mass data collection and categorization of everything, everywhere all the time.

I also accept the former as a necessary evil, but it's a completely different beast from my latter example.

That being said, you raise good points. I don't know what would be the ideal solution to these relatively new worries of governments. I feel like this bump in internet privacy is counteracted by the surveillance network that has been built in the real world, so we could call it even in some ways.
That's where the brand comes in: they're supposed to have something to lose.

And yes, flames are hot gas, but not all hot gas is flames.
We could probably do with more.
Wiretapping was also used by all police states to preserve dictators, by eliminating competition and punishing citizens for wrongthink. As citizens of a country behind the Iron Curtain, my parents were always afraid to talk on the phone, because the secret police was always listening, either directly or via informants.

You're going to say that in democracy, the state uses warrants issued by a judge for wiretapping and there's due process. How's that working out in the US, given Snowden's revelations and the Patriot Act?

Leftists wrongly think that the state represents the will of the people. It doesn't. Democracy is preserved primarily by (1) a culture of liberalism and (2) the state having limited powers. But as could be seen in WW2, democracy is fleeting, actually.

Being from Eastern Europe I've got to say that seeing privileged Westerners willingly give up freedoms, that other people died for, has been such a huge disappointment.

---

As for crime prevention and investigation, you can still follow individuals around, install bugs in their home, compromise their personal devices. But it's never enough, is it?
Classic case of marketing being separate from operations and having latitude to do whatever the fuck they want. Company suffers but marketing makes their goals.
You mean a blog post like this - https://blog.cloudflare.com/turnstile-ga/ ?
I think that is not how we can rebuild the internet. The majority don't even know what is wrong with the internet in the place, not everyone reads hnews(That is nichest of the communities), and most users aren't even using twitter for alternatives to have an impact.

(I have zero idea about the actual numbers)
So you're saying you didn't get the job and the people who did are getting paid a lot more than they originally bid? :)
Pushing CAKE to 10Gbit/xeon core in libreqos currently (the bottleneck is on the read path actually). Or, 10k ISP subscribers per $2k xeon box.
Yes but A) I wanted to be sure we were looking at the same research and B) everything I found looked at bad as this one.

Firstly the relationship between the strength of the men and the women's abilities to determine their strength is weakly correlated (r=0.33).

Secondly, the sample of women here are all around 21 years old and all study at the same university. I don't think we can extrapolate what "most women" find attractive from this.

Thirdly, the women are presented only with photographs of male upper bodies without faces. The study itself mentions that other research suggests many women prefer men with "weaker or more effeminate faces." I think it's also clear that styling, manner, expression, personality etc all play a party in attraction and move of that is accounted for in this study.

I also believe you or the reporter have misinterpreted something here. You said that none of the women preferred stronger men, but the study actually shows a correlation of 0.8. None of the women preferred more weak men more often than strong men but some of them did prefer some weak men over some strong men.

The study also points out that asking a woman how strong a man looked was a better indicator of how strong he was than asking her how attractive he was.

Note also the quality of the questions here. First the woman is asked to rate the strength of the man and then asked to rate his attractiveness. I'm not a psychologist but it feels like the study itself primes the person being tested to consider the correlation ahead of giving their answers, which strikes me as poor research design.

As a man surely you're aware that your tastes differ to other men's tastes. Consider how much the cultural standard for an ideal woman has changed within our lifetimes. A woman praised for being thicc in 2015 would be ridiculed during the years of heroin chic in 2005 and vice versa. It's clear that these things are very much affected by cultural norms, by age, etc. A test which doesn't attempt to account for this can't be used to extrapolate in the way you're doing.

Finally, you made the claim that women prefer a certain type of man because they want to feel protected. You said tonnes of studies supported this but the one you gave me has absolutely nothing in it that makes any reference to this supposition. What am I missing?
You seem to be arguing that the law is secretly a tactic to kill RISC-V, but I think you're giving the lawmakers too much credit.
#2 and #3 are a bit at odds with each other. I certainly get tired of coming back to the same problematic code that's difficult to read and maintain. I appreciate others (and myself) for writing clean code.
The issue everyone is skirting here about estimates is the unknowns. Letting management know what the unknowns are and how confident you are you can resolve them is just as helpful as providing an accurate hour estimate.
Agreed. I'm "only" 20 years into my career and, while it has ebbed and flowed, it's also something I love and am thankful I get to do for a living.
They might just have a different perspective than you. I complain about my job a lot. People say to me, “Wow, you must absolutely despise it.” The truth is that if I absolutely despised it I would have left a long time ago. I just have no reason to talk about the good parts. I focus on problems because I want to improve on them.
> have already complained to my installer about his recommendation of this line (and he is moving to another brand).

What brand is he moving to? Does it work with Home Assistant?

I can't recall the last time I saw a garage door that wasn't Chamberlain or one of the brands they own. At least in my area they seem to have a near-monopoly.
Exactly! I am about to upgrade from M1 Air to the new M3 pro, and although the gains will not be as huge as from Intel - ARM, I still expect a significant upgrade for a ~3 year old laptop.
Interesting, thanks!

One question - did you shrink partition from the front, or from the back of the disk?

Usually Windows has to be in front of the Linux, so if it's from the back, I'd really have to try that!
It would be good if Wikipedia could stay neutral and not biased. It's not as good as it was.
Didn't that backfire anyway?

Jerks found other ways to be jerks?
Point 9 - Eventually you do become able to disconnect from your job. One day the fucks just run out. Embrace that early on and save yourself a lot of stress.

This is the most important life lesson anyone can learn, but I think it can only be learned by going through a flaming dumpster fire that burns all those fucks away.

You can't get that confidence and no fucks given attitude on your own, at least not for most people. You have to go through the shit and earn it.
Came here to say the same thing, but a lot more angrily and a lot less eloquently. Thanks!
Maybe... But isn't your view also very dismissive of their experience and the constraints and context of their experience?

By far, most companies above a certain size do not operate in a way where these principles do not apply.
Does this work if an HTML page is on a Cloudflare network? My experiment returns the message: An unknown error occurred while rendering the page.
> What valuable data can they collect, if nobody is using it?

What permissions does the app have? If it has location data so it can open/close the garage door based on proximity, it can probably collect your location whenever the phone is on and that can be sold to data brokers. That's just an example. There is potentially a trove of information the app could collect and sell and not just when the user has the app open.

Of course if the app is never installed it collects nothing. I wonder if the vendor requires the app to be installed for initial configuration.

And IAC, it would be preferable (to me) to have a device that works entirely locally.
I agree with you and would like to know if you have any suggestions for a replacement for the cloudflare services.
I think you’re answering your own question. Sure, we know it’s bad for “us” (the general public), but the author is also casting doubt on its effectiveness against “them” (criminal networks) and setting us up for an easy own goal.
> I deleted my facebook account over a decade ago

Obviously implicit in GP comment is that _people who use these services_ derive great value from them.

Nobody expects someone who deleted their account to think $12 is a reasonable price.
Wish more would look harder there at the actual delays being observed and how bad congestion collapse gets at +250ms of it.

https://blog.cerowrt.org/post/juniper/
> It’s never too late to consider a career change.

Absolutely, but the huge difficulty is finding a place where the grass is greener. Nearly the whole world is quite equally shitty, it is just the kind of shit that you will see at the various careers ("septic tanks") differs.
It’s weird to see so many UX articles on the front page of HN that are just wrong.

Disabling buttons that are functionally no-ops is the semantically correct thing to do.
Does google have certificates in there, does china have certificates in there, does russia have certificates in there ALREADY TODAY ???? So if you worry about that, then you should OBVIOUSLY understand that it is either non issue OR it is exploited TODAY EVEN WITHOUT THIS LAW... So this law being in place changes NOTHING in either case.
New = 2011 to 2015

Old enough to have been the first episode in last year's Netflix documentary “Ancient Apocalypse”, aka “the most dangerous show on Netflix”:

https://www.theguardian.com/tv-and-radio/2022/nov/23/ancient...
That's why all of my installed IoT devices are either custom-firmwared or can be as well as configured to be not "dialing home" to some nosey data collection and aggregation center.
Could there be a suit against them over this? I bought one explicitly for home automation, and it seems them disabling it turns that into some sort of false advertising
There is a growing minority of people who think this is the way the world is going. Trends in legislation in this area within Western democracies seems to indicate that privacy is being consistently attacked in the name of protecting the wider public.
Yes, there are still bugs, but Cyberpunk is actually great now, and the new expansion Phantom Liberty is chef's kiss.
In the article:

> Don't get me wrong, people will expect you to write good and clean code.

I can agree with this. Clean code is not "celebrated" because it is expected as normal. You won't get a raise for it. You could get problems for not writing clean. But when the business gets into a tight spot, they will accept shitty code that fulfills their desired goal over a nice clean and elegant solution delivered few days later. In this case, the shitty code could get you a raise.
Probably ignoring hacker news and neocities.
Uhm… I suppose you’re misinformed or undetectably trying to be funny.
Huh, nice. I went with a dry contact kit from Athom but status feedback is tempting (mine just uses a reed switch to detect state):

https://www.athom.tech/blank-1/garage-door-opener-for-esphom...
Doesn't look like anything I've ever called radical transparency.
I'm not that guy, but I don't have to like it. I'm not skilled at anything else and I couldn't make this much money in any other career.

Most people will never enjoy their work, but I can dislike my work while being far better off than most people ever will be.
> RISC-V is an attempt to make a pretty boring but cross-industry standard architecture that doesn't need licensing

Exactly. Why would the US government want that when they have significant influence over the companies(y) that you currently have to license this tech from?

> Unix and prevent US developers from working on Linux or BSD. How would that have gone do you think?

Just to clarify I'm not saying I support this, it just seems to me that what are they doing makes sense from a certain perspective. Having said that I don't believe opensource HW can really work that well (compared to software at least). Linux et al. succeeded the most (or maybe only) in areas where software is a cost center and not the actual end product. If they adopt OSS software most companies don't have much to loss and usually have something to gain by contributing to it.

I just don't see that working in the mid/high-end chip market (we seem to agree somewhat on that, though). If you're in the business of designing (not manufacturing) chips what possible incentives can you have to open your designs? Even licensing doesn't seem like a good option (look at the peanuts ARM is making). You'd only turn your product into a commodity and nobody wants that because it means lower margins.

Instead you'd try to corner the market and then add proprietary extensions & other stuff to lock your users in (and having a third party like ARM which at least levels the field somewhat seems like a preferable options). Of course you might end up with entire business model disappearing, just like proprietary UNIX etc., due to similar reasons and being replaced by fab/cloud/consumer tect/etc. companies funding OS designs instead.
The best argument I have is « we’re giving tools to the fascists that will come into power in the future ». It’s more likely than not that every country will have a « wrong side of history » gov coming to power, sooner rather than later
I remember reading an article (linked from here, I believe), written by a former PornHub developer.

He talked about how the whole thing relies on "boring" tech, like PHP.

Probably second only to Google, for hits per second. Uptime, robustness, and ease of maintenance were a really big deal. Very mercenary, and very practical.
in SO cases they became moderators and/or worked their way into the company in paid positions of authority
I don't think there ever was a time this metric was good.
I did. And held few and to the point meetings. I could see how non technical managers were struggling, and that’s how i know that some are simply clueless and serve no purpose within orgs. I managed a somewhat small number of devs - roughly 40, some distributed.
> Over time, Wikipedians who supported fringe content departed or were ousted. Thus, population loss led to highly consequential institutional change.

Is this a good thing? It seems like homogenous hive mind effects. Works in some instances but we should aim a little higher

A big problem is homogeniety in media. For instance, everyone from every major newspaper more or less went to the same schools, has a similar world view, lives in the same metro and fraternizes with the same crowds. So you have every newspaper say something like X is a [y]ist, and Wikipedia states it as fact with a lot of sources [1][2][3]. But it's all the same people
Thank you for expressing your opinion, I appreciate it.

Actually, I don't have a strong opinion because I recognize the issue to be very complex.
>who, while waiting to get into or out of garage, sitting in the car or soon to be sitting in the car clicks on ads to buy something? Wouldn't conversion rates be ridiculous?

This reddit thread says it uses a UI dark pattern of moving the "open/close button" from a familiar screen position formed by habitual use such that you accidentally click on an ad for a $3000 pet door:

https://old.reddit.com/r/myq/comments/xoxrlv/shady_af_advert...
To be clear, most senior developers are much better than juniors. However there is a tiny minority that is not.