skysight-inc/HackerNews huggingface dataset:
But this is the problem, right? You can't really do that because governments are supposed to spend tax revenue on things that benefit those in their jurisdiction. The extent of tax dollars not used for this is a measure of government inefficiency and in a perfectly efficient government it would be zero, i.e. the average taxpayer would receive benefits equal to what they pay in taxes.

What they're kind of implying is that they want multinational corporations to pay more than they receive so some other people can receive more than they pay, but they haven't actually specified who or by how much. It would be pretty silly and inefficient to deny large companies the use of government-operated transit systems or police protection, but to make it at all practical you end up creating enough exceptions that anyone can find a loophole.

I feel like the elephant in the room is this. A lot of these huge companies are monopolies or nearly so, and a large proportion of their profit is a monopoly rent. But a monopoly rent isn't attributable to a particular factory or the location of your software developers. It can't be attributed to something happening in any particular jurisdiction because it's actually attributable to something that shouldn't be happening at all, and which doesn't have any corporeal existence or physical location. So those profits naturally get declared in whichever jurisdiction has the lowest taxes.

But the problem is not that the monopoly rent is being taxed in the wrong jurisdiction or at the wrong tax rate, the problem is that the monopoly rent exists. Stop trying to pin it to a particular place and find a way to eliminate it.
As we take the limit as N → ∞, the list continually grows larger. Thus, the number of instances of 37 continually increases, so that they occupy an asymptotically constant proportion (about 0.963%) of the values in the list; only ~49.061% of the values are less than 37, and only ~49.975% of the values are greater than 37. After a certain point, for even N, there will always be two instances of 37 surrounding the 50% mark in the list, so the median will still be exactly 37, and not some other value. I wrote up a longer explanation in another comment [0].

[0] https://news.ycombinator.com/item?id=38245162
A kernel developer made my styluses work again on newer kernels
> we as humanity managed to prevent this

No we actually did not manage to prevent it. We almost caused it but sheer luck in several cases derailed Armageddon. It could have just as easily happened, and probably more than just as easily (figure about 60:40 with us living in the '40' branch of the multiverse). Pretty good odds though. But over the longer term: not such good odds.
It's really not.

"AppArmor fails if home directories not in /home/" is a legit bug (as someone just claimed over on LWN). You haven't specified what your issue is but if it's something clear like that, it's perfectly reasonable.

Trying to blame a product you don't like from a company you apparently don't like for a problem in a 3rd party tool... that's a dick move, IMHO.
Two things I have the most problems with in Rust, as a noob:

- I have a hard time figuring out which features I need to add from a crate and which ones exist in a crate.

- I have a hard time figuring out if something doesn't work because a trait is missing and it's not just unclear that it is missing but also where it can be found.
I stand corrected! I was wrong. Goes in effect this year [0].

[0] https://www.pwc.com/us/en/services/tax/library/corporate-boo...
Usability depends on the knowledge of your users how to correctly use the widget though - and that knowledge is greatly helped by consistency.
> which is funny, as who is going to watch all of this older content? younger generations do not watch older content.

That's pretty obviously false. People watch old episodes of, to name two easy examples, Johnny Carson or the Letterman Show. Whether that's to see a comedian (eg Rodney Dangerfield) or a band perform on Letterman, and so on. People love to watch old episodes of SNL, and we know that by the enormous view counts. They love to watch old music videos from before their time.

People were funny in the past, too. Bands were great in the past, too.
> Slightly OT, but Porsche has recently sold itself to me as a great carmaker when they released a new infotainment system for their 20 years old Cayenne.

They take their older cars very seriously.

AFAICT Porsche is the only manufacturer in the world to offer an extended manufacturer warranty extensible until 15 years or 125 000 miles (200 000 km). And it's the mileage at which you last subscribed that counts: so if you renew the warranty at 124 000 miles / 199 000 km, you're still good to go a full year (I know: I asked at two different dealerships).

You have to pay for it, but it's a bumper to bumper warranty covering just about everything that could go wrong.

I buy used Porsche that I first made sure qualify for that extended warranty and then I renew that warranty.

I've got a MY2013 Panamera since five years, it's now 10 years old and has 100 000 miles (160 000 km), and I just renewed the extended manufacturer warranty for another two years.

I pay a bit less than 100 EUR / month for that warranty and in exchange any warning lights (besides the car being low on fuel) that'd show up is not my problem anymore but the nearest official Porsche dealership's problem.

I got super unlucky and had the gearbox fail: this happens extremely rarely but my Panamera was from a bad batch. I had the extended manufacturer warranty so I dropped the car at a dealership, got another Porsche from them for 5 days, then got my Panamera back with a new gearbox.

Besides that a faulty sensor here or there, wipers motor failing and a few other stupid things like that over the course of 5 years / 100 000 km: all taken into account by the extended manufacturer warranty. I'd say the car went about six times under warranty over the course of six years (for tiny stuff besides the gearbox). I'll go soon for the button to open the trunk on one of my two remote key fob ain't working anymore: I'll get a new key.

Recently --and I honestly don't know if I should laugh or cry-- a friend of mine had a Peugeot 208 he bought new badly fail after 27 months and the dealership told him the warranty was two years only and that there was nothing they could do to fix the car. I verified online and it's true: in Belgium on a brand new Peugeot you get only two years of warranty.

I mean: I bring my, what, 120 months old Porsche, bought used, under warranty and any issue is fixed for free (well I pay the warranty) while my friend brought its 27 months old Peugeot and they gave him the finger! 120 months vs 27 months. It's both sad and funny.

A 15 years extended manufacturer warranty is just insane.

Next car is another used Porsche, also with that extended Porsche warranty.

P.S: a simple "mod" on mine, which runs the QNX OS for its infotainment system, is to replace the HDD (!) by a SSD and then the system "boots" faster (like quicker access to nav and songs when starting the car) but... Although I could do it, I don't for... That'd void my extended manufacturer warranty!
There are university professors addicted to gambling, so can't be at least about formal education. US average credit card debt is $6k, most probably spent on useless crap. Probably majority of people are in that "risky category" because making people doing bad decisions is a great business model, and most business use that.
Beats the hell out of using the mouse, which is what my colleagues do.

I'm not much one for home row. I'm an evolved hunt-n-peck, as typing programmes made my fingers hurt. Works for me, and in an office of secretaries, I'm one of the fastest typists.
I've used their design system several years. It wasn't always on npm and it used to be on a private npm registry (I am assuming that it was for the reasons you mentioned).

Essentially, there are contractors and thrid parties that develop stuff for them and they want it to look the same as the rest of their stuff. Putting it out in the open made things much easier. The private registry was hard to integrate in our CI/CD pipeline. You couldn't just open an issue on GitHub (it existed, but I think noone was looking at this), but had to write some slack messages - to which you needed access to.

It's just more cost-effective this way.
To me this reads like a polite version of motherfuckingwebsite.com. Don't get me wrong, I love the idea and forked the pug/jade templating language just to build my site in pure HTML but without endless closing tags noise.
Fair point. But this isn't a get out of jail free payment, you're not "offsetting" your cup, just getting charged for it. The social stigma of walking around with a single use coffee cup remains, and may even be amplified. Not to mention that "cafe coffee", at $4-5 / cup (in Australia at least), is already very much a luxury item.

The cup is a product that is currently perceived as gratis / of zero value. Charging for it is intended as a disincentive. In the case of plastic bags (here) it largely worked as such (with prices as low as 10c per bag!) and paved the way for a ban. Though the parallel effect of more resource-intensive bags / cups entering the market / being treated as single use is always a consideration.

But to your broader point, for sure .. bring on a ban.
For what it's worth, the election-stealing accusations started at least as early as 2000 when Gore lost to GWB.

The current state of affairs is just a escalation beyond the status quo. Who knows, the next election might be another step above what has already happened.
There's a context mismatch context here. EA is offering a philosophy of altruism. Where as most charities are organizations that put donations into direct action of some kind. These are different aims. It's a bit disingenuous to suggest that charities that aren't as efficient as others are pushing "ineffective altruism" unless they are literally scams.
What’s the best way to encrypt data for archival, so that it can be decrypted decades later?

The encryption software can be discontinued, or change over time and be backwards incompatible.
FACTA would only apply to Americans and permanent residents right? It isn’t hard to imagine that America is a good place for non-Americans to stash money, but that trick really wouldn’t work for Americans themselves. For example, the Canadian and American housing markets have been a good place to launder dirty or gray Chinese money into real estate.
From the limited conversation on this topic I’ve had with my Chinese acquaintances, my understanding is that the reach and scope of power of the CCP isn’t exactly what we make it out to be. There still is an ideological basis for all of it. And a complex system running it all.

As someone raised in a former communist country/dictatorship, I think I can also add that the worst part about life under such systems is that they are just fucking dumb. Like VPN can be good enough when what you’re up against is stupid lazy bureaucrat cop types.
Given that a spaceship isn't all that different from a fixed-wing aircraft, and the stick + pedals arrangement has become a standard for controlling the latter for over a century, I think it'd be hard to improve on.
The great thing about Oberon now under Linux/Windows/Mac is that you can easily create CLI and related filter programs, like something that can be piped into perl or awk, or can receive output from a shell pipeline. This makes for a very gentle slope into using it more.
RemindMe! 100 years :)
More info: https://newsroom.porsche.com/en_AU/2023/products/porsche-cla...

> A corresponding product range is now available, with immediate effect, for the sixth-generation 911 generation 997 for model years 2005 to 2008, the early Boxster and Cayman generation 987 for model years 2005 to 2008 and the first-generation Cayenne for model years 2003 to 2008.
As for engineering a body, it's the limitations that are the most important, like foveated vision, where you can't see everything all at once, and you start out not even being able to direct your gaze or focus, or lift your head... I'm convinced all of those first steps are crucial, even if its "body" is teathered to a big pile of gear like power supplies and compute clusters.

As for computer architecture, I've got an idea for that, the bitgrid[1]... It might work (or not)

[1] https://esolangs.org/wiki/Bitgrid
I don't remember it, though I think it's a stretch to say that Lewis of all people was lazy or incurious about atheism.
Tree style tabs are good. Great, even. But their UX implementation as a sidebar add-on isn't ideal IMO. Where edge gets it right is the side-tab bar can be automatically collapsed and extended on hover. I don't recall if you can do this with TST - its been a while since I've used it. But the fact that edge's implementation is native and not an add-on, makes it feel far more integrated and less clunky.
Halfasstrians?
There's an inherent order to adjectives in English[0], so the sentence is objectively formed as "critical Danish infrastructure".

I do understand why someone would (knowing those rules) write "Danish critical infrastructure", possibly for emphasis, but it's not - and take this word very loosely - correct.

[0] https://www.gingersoftware.com/content/grammar-rules/adjecti...
This contains the wrong URL. It points to an article titled "Could a Neuroscientist Understand a Microprocessor?" and not the one about Amazon ditching Android.
> They have no way to verify that the server isn't associating their name with the response.

That's where laws and overwatch come in.

> The government is the thing that enforces the law. It has a tendency of not enforcing the law against itself.

That's where separation of powers and checks and balances come in.

> Criminals who compromise government servers are already breaking the law. A foreign intelligence service or drug cartel is not going to adhere to your country's laws.

That's where taking security seriously comes in.

> You have to give your name to someone in order to access the site.

No, you don't. You click that you want to access, site redirects you to a government portal, you authenticate, government portal sends back a token and no personal information. This has been a solved problem for some time.
I stopped reading after "This is good from an individual perspective because it allows a greater number of people to become web programmers, to build great web software, and increase their income.".
In my first comment I literally mentioned BitLocker, which, as I pointed out correctly, stores its keys either in RAM or on the TPM chip.

If you gonna rip apart my comment into parts without context, at least do it with all parts.

Note that I didn't start the discussion about where the key is stored, someone replied to my initial comment - in the context of BitLocker - saying that the CPU stores the key, which is incorrect.

My initial point was not about how secure enclaves work in practice. Though I argued that most implemented follow-up technologies don't work reliably due to how the OS always interfaces with unpatchable firmware bugs.

While I agree this is the only way to fix the coldboot attack problem I don't see the technology as reliable as of today, and I don't understand why you think I am wrong with that statement?

If you don't agree: show papers with counter measures, and how to prevent the exploits and bypasses.
What comment section online doesn't suck? It's just a scale of how much a section sucks, and PH seems to fall on the more side of that scale.
I did my best to answer all the questions, and this one was terribly unclear.

However I think the other questions were useful and a handful sparked great insights. My answers for our startup: https://news.ycombinator.com/item?id=38245108
Major browsers today only accept CAs that use certificate transparency. This law will force them to accept CAs that don't use certificate transparency.

If a CA misbehaves, browsers will distrust it. That happened to Symantec, which was the largest CA. This law will prevent browsers from distrusting CAs that misbehave.

https://news.ycombinator.com/item?id=38112520
Surprise eBPF post! Writing eBPF code to munge the kernel's input driver's state machine. Neat!
Here's an example of testing speakersafetyd: https://social.treehouse.systems/@marcan/111305404286878529

How it works with the kernel side of things: https://social.treehouse.systems/@marcan/111398084943456556
My first driver license from Mississippi in 1990 used my SSN as my driver license number…so anyone who saw my ID knew my SSN.
0XReasons to Write and Publish
But it's not an integer before rounding. 37 is simply the nearest number to get approximately 50%.
I used to work in manufacturing test for an SSD supplier. This would normally be covered by an “ongoing reliability test” in quality. But I also witnessed that quality can be a highly politicized arm of manufacturing companies, and finding issues with products is not always well received, while approving products is always well received.

In many consumer products, tests like that are often not implemented or curtailed compared to OEM products. When you buy from a company like Dell or Apple, you get the benefit of having a large organization providing accountability. In other words, when a company like Dell represents their interests in receiving quality products to uphold their reputation, they also have a shared interest with the end consumer — but carry a lot more weight since they represent large contracts with the supplier. Suppliers tend to put more effort into testing their OEM products so as not to damage their business relationships.

Anyway, this kind of thing happens all the time in consumer storage. Likely nobody was doing reliability testing on these drives in the first place since that costs money and can only expose problems they didn’t really want to know about.
Yes? Society is actually completely fine with that arrangement. Every single year tons of people get drunk, get into accidents, get people actually killed and are held accountable for it. Yet nobody dares to infringe on their freedom to drink. They tried once and it just didn't work out.

This "give up freedom because kids" nonsense is seriously tiresome. I'm not engaging with these arguments anymore.
Then we should all go back to security-by-obscurity and trust in the man behind the curtain for computer security as well. And we all know that that doesn't work, so why is there this conviction that the embedded programmers at car companies are made from magic?

It's precisely because cars are so dangerous that the code should be open to scrutiny. And of course - at least in the past - the argument has been made that more eyes do not make the bugs more shallow, but in practice if there is an incentive (such as personal safety) people will expend a lot of effort to figure out why stuff goes wrong.

What it would do is to take away any kind of excuse that manufacturers have in those cases where their gear is suspect to claim that their wares are perfect and that it must have been user error. Because I can pretty much guarantee you that if you were to inspect your average automotive code-base that you'd find errors, and not just minor ones. From accidental erroneous emergency braking, untended acceleration to outright malicious ones such as planned obsolescence drivers, emission controls defeat code and so on.
For IDF soldiers: Waterproof cardboard beds
what a randomly baseless statement
I'm sadly bearish on this kind of stuff. The Mac touch-panel showed that even a context-aware, reactive and fully integrated input struggled to break the flow gained by keyboard+mouse.

Even today some people are still on the fence about the new fangled mouse!
No Arch? :(

I use arch btw
Building websites with React also has its pitfalls and using React means introducing a lot of complexity. If you aren't already using NodeJS on the backend, it's probably best to avoid ReactJS unless it's actually necessary.
It could be a 16 year old kid in Iowa. It could be a crimeware group. It could be a lot of people.
I did some work on a toolchain used in automotive (and other industries) to proof^W prove certain software properties related to safety. This is already a massive effort, expensive to build & maintain - but after all a small cog in the whole machine. (Using Rust over subset-of-C would deprecate maybe half of that work; at most I'd guess).
The hypothetical team would take a decade or two to replicate just that cog.

Yes, having the whole machinery available as FOSS would be awesome and I'd like to live & work in a world in which this is the norm (Hello, Star Trek?). But all this requires very talented people, many of whom studied and racked up student debt, want something to eat and a place to stay. We first need another paradigm shift to make this kind niche open work sustainable.

Oh, and if you ever find yourself in a car with critical components not checked with that kind of toolchain: I strongly recommended getting out of there asap ;-)
For all the excellent people building that software, there will always be some who'd be better writing mobile apps instead (or anything else that cannot kill people).

(btw: You asked me about the setpoints of the 12k 3P Deye inverters a while ago: Seems to work nice for me with my basic "just the inverter + PV + battery" setup. Though some people report trouble when using AC coupling with another inverter; in that case the Deye seems to swing more around the setpoint).
> The fact that some of these web site owners are in fact very wealthy and own buildings is not relevant.

You're overgeneralizing too far. This is like saying just because a church has a building doesn't mean they are an organization. The building was purchased with the expressed intent of being used for the group. It appears you trying to suggest there are weak ties where there are actually strong ones. These people all know each other and shared ideas.
Nvidia's Computational Lithography Breakthrough [video]
Just applied! Space has fascinated me since I was very young. Indeed, the first nightmare I had was of falling into a black hole!
I really loved the expanse and I hate the way the last 3 books haven't been filmed (yes I know the time break but there's options)

Though the whole inaros pirate thing and the fascist Laconia empire (in the book only for now) things were a bit dragged out IMO.. I thought the alien tech parts were much more interesting and the last 2 TV seasons were very forgettable in particular.
12 is also the largest one-syllable number (at least in English).
Sure... but a minimal debian at this point takes 100mb ram, no UI, no nothing.

1 electron or chrome session and you're done.
> We use static-tailwind, a version with no build step, in development.

https://github.com/tonyennis145/dumb-tailwind/

Is it this? (A 3.9 MB CSS file?)

My personal gripe with build steps is not the build step itself, rather the unreliability of the JavaScript ecosystem and the often head-scratchingly opaque error messages.

Build steps such as a hypothetical `css-compile` don't address limitations of browsers, but limitations of network connections that may struggle to download (and frankly, at 3.9 MB, devices that struggle to parse) large amounts of CSS and JavaScript.

Even if browsers can download multiple files at once, they can't download files they don't know about, which is why ES modules in the browser haven't taken off as a way to eliminate the build step.
Is there a class action lawsuit yet?
MS-DOS used Int 21h with the function number in in the AH register.
im confused, what has that got to do with this cyberattack?
But you aren't op.

So you can but shouldn't reply.
The BBC does not have any discretion over who is prosecuted for a crime though. They can give their opinion but it's up to the police. So a public promise doesn't actually hold any weight.