skysight-inc/HackerNews huggingface dataset:
The point of the banners are to annoy the shit out of everyone in hopes that we'll pressure elected officials to pass some legislation they write up that undoes the privacy protections.

So it's a calculated response, not a tantrum.

Now, what about our beloved leaders? They enact legislation that can't be enforced. I was able to refuse cookies or auto-delete all the cookies when closing a session, so I didn't give a fuck. Now I'm forced to deal with this nonsense. So this law is worse than useless for me, it's actively damaging.

You're not judged on your intentions, but on your results. And the worst thing is they're not going to relent.
Thanks! It's built in Vue 3, UI is all built from scratch.

The sounds are FLAC files, which is the only compressed format which loops seamlessly across all browsers. Sound files are hosted in an S3 bucket, which is behind Cloudflare (free) to minimise S3 egress costs, so thankfully it doesn't cost much to run at all.

The sounds are all permissively licensed and mainly sourced from freesound.org and freemusicarchive.org - I'm hugely grateful to everyone who shared such high-quality sounds and music for free. There's a list of credits at https://ambiph.one/acknowledgements
Sorry to hear that—job loss is traumatic. I hope your situation improved since then.
apparently!

... or have a computer "type in" a book i.e. file copy i.e. OCR scan
(or microphone for audio)
(or video-record for video)
...
Seriously, the point of occupying one's time with most any activity is to avoid ruminating on this stuff.

As expressed in the Internet-famous comic:

https://imgur.com/gallery/d9KdAvH

(It's the "Don't let the existential dread set in" one, to save those familiar a click)

(YMMV, I suppose)
An e-paper calendar and smart screen
Substantially different.

Talos is a Linux operating system distribution tailored for running Kubernetes and container workloads. It runs runc, containerd, and other binaries, which spawn containers which themselves run at the same level of virtualization as the kernel. It's hardened for security. Containers that run in privileged mode can make syscalls that affect the host kernel.

gVisor is an OCI runtime - a tool for running containers, typically on Linux - implementation that presents a virtualized Linux kernel surface area to the applications and containers it runs. The applications have any syscalls they make intercepted by gVisor. It's not quite the same as hardware virtualization, but it reduces attack surface area by disallowing containers to make syscalls to the OS kernel.

---

Addenda:

gVisor is closer in spirit to Firecracker when used with Kata containers. Although the way the two work is very different, both effectively prevent containers from manipulating the Linux OS they run on.

Talos is closer, I think, to Bottlerocket OS, which is a Linux distribution created by Amazon for their container workloads. Bottlerocket is also a hardened, minimal operating system designed for running containers. Both of these are very similar to CoreOS aka Container Linux.
In case someone is interested, there is an independent review and implementation at https://github.com/scalalang2/golang-fifo
> you are sane and have a clear picture of the attack vectors

Security 102: Nobody has a clear picture of the attack vectors.
There was a work around until very recently for that, the Netflix DVD service was still available and working. Giant library and barely any blackouts for shows.
React is actively harmful if your website is static
> We don't have a biological framework for addiction

yeah, we do. and it involves neurotransmitters.

"addiction" may not be the right word in this (workout) context, but it's a well established concept in other contexts.
"Emerging technologies such as genealogical databases (i.e. 23andme and Ancestry) as well as wearable devices and mHealth apps have created a new risk for data privacy that is not covered by HIPAA. These digital health tools are not covered entities therefore they are not required to protect the data they collect under HIPAA. The Department of Health and Human Services nor the Office of Civil Rights have purview over this data or any breach of the consumer's information. Any complaint regarding a breach of consumer's health data is rejected, as there is no controlling law currently for this type of data. Complaints of this type go to the Federal Trade Commission; however, many consumers are never aware that their information is breached, shared or sold to a third party because there is no breach notification requirement in place."

- https://www.ncbi.nlm.nih.gov/pmc/articles/PMC7883355/

So while 23&me is not under HIPAA compliance rules, they are still under the purview of the FTC according to this. Which would mean that the FTC can examine their security posture and determine if it's adequate or what have you. Odds are they will just be slapped with a fine and back to business as usual. Which kind of makes me upset because we are dealing with DNA and ePHI whether they are HIPAA or not.
Because things are very expensive. Absolute wealth means nothing if rent costs 70%+ of your income.
Could you please be more specific about "publish for sale" and "run a couple of promotions"? What does that mean - where do you publish for sale, where do you run the promotions, what's the approximate cost?

I have a lot of trouble marketing my product. I'd appreciate your insight.
Sundar got his MBA from the same place that gave an MBA to the guy that managed to run a successful casino into bankruptcy…
18 minutes seems like a hell of a long time to get out of a damn burning plane

I've never been to Japan but in the US people are standing and ready to exit as soon as the plane docks to the airport so I can imagine people running for their lives in this scenario.

5 minutes at most would seem more understandable
Fantastic! The design is just great; so simple and no-nonsense.

Honestly, I don't really use white-noise generators so I didn't plan on using it, myself, but after realizing it allows layering the sounds, I've built a really nice little soundscape and find myself missing a function that would allow me to transfer that design (selected sounds and volumes) to another instance of the app.

Totally not necessary, of course! Easy enough to re-configure. Just something I thought I might use, in case you were interested.
I think there is a big cultural and generational divide on if these types of associations are even reputation negative.
We need to feed people. Globally 8 billion now and probably a peak at 10 billion.

Ultimately there is no magic recipe to ease our pressures on the environment: more people means more resources needed.
I used to run arch on my desktop for a while because it was the closest to thing to FreeBSD. Didn't use Linux on the desktop before (well, went through a few distros within a month).

Never had any issues with updating or using it, but it's because I have set up everything myself and never touched AUR. Still nuked it favor on FreeBSD and then NixOS eventually tho.
Congratulations? Apple released a security update for the iPhone 5s released in 2013 early last year.

What about all of the other devices it sold in the last decade.

And Google only sells a tiny fraction of Android devices. What about the other literally 97%

Microsoft hasn’t had a problem keeping PCs updated that it doesn’t sell for a decade. Heck I got Windows updates for my pre-Bootcamp x86 2006 Mac Mini for years after Apple abandoned it
Tomato is a fruit…
> fyi, "hot reload" is a native part of every operating system (consider, even trivially, forking & reforking).

Can you expand on this?
Hahaha, life hack, if my youngster wants more screentime he can spend it playtesting :evil laughter:
> I mean, that is basically JSX is it not?

Yes, exactly.

I get that many devs have learned and internalized how JSX (and the rest of react) renders to HTML and CSS, and have come to understand the mechanism well enough to debug when mistakes are made and things go wrong. But time and effort dealing with the framework takes away from time and effort spent on the thing you're actually trying to build. It just pays to minimize that where you can. JSX isn't as bad as this "rawjs" but it certainly has its issues.

Beyond requiring extra dev attention, JSX is also part of and implies the whole virtual DOM diffing/rendering mechanism, which just limits the rendering optimizations the framework is capable of doing on its own. That leads to poor performance (and/or incorrect rendering), or, again, the dev spending time on something the framework could have taken care of if it had been designed differently.

Fundamentally, a framework needs to be able to figure out what needs to be rerednered and what doesn't when state changes because it can't reredner everything on any change. That's just harder and more limited when everything is rendered dynamically.

I'm not trying to bash react and JSX... obviously it was workable and did a ton to popularize the reactive approach. But I don't think anyone thinks it was perfect from the start and obviously we've learned a lot about what works and what doesn't. To me this "rawjs" is a step backwards from even where react started out.
There are some pretty nifty modern replacements for the pipette for automated well plate work specifically. HP has one such product, which I work on.

It is a "digital dispenser" that leverages inkjet technology to dispense complex, multi-fluid protocols with picoliter to microliter accuracy over about any type of well plate quite quickly and effectively.

The basis of the product is a one-time-use cassette that incorporates dispense heads and fluid reservoirs which the user fills with their own fluids. Depending on the model, the cassette can work with 1, 4, or 8 fluids at a time.

The latest new cassette type can sense and dispense single cells into wells with a high level of occupancy and viability.

I know this comes off as a bit of a sales pitch, but it's a product I'm genuinely excited to work on and our customers seem quite pleased with it as well. If you search for "hp digital dispenser" you'll find more info on it.
Already making it as safe as Modula-2 (1978) would be a great improvement.

- strong typed enumerations

- proper arrays with bounds checking (or fat pointers)

- proper strings with bounds checking (could be a library like SDS)

- memory allocation via types instead of sizeof based math

This alone would already fix quite a few problems.

Apple has such Safe C dialect they use for iBoot firmware.
The word 'system' is ambiguous and has multiple meanings. In general, and as per HN guidelines, you should assume good faith, and when someone guesses incorrectly about your assumed meaning clarify your definition.

That said, I'm shadow banned so you should probably ignore my advice on HN guidelines.
For example:

https://benchmarksgame-team.pages.debian.net/benchmarksgame/...

"How source code size is measured"

https://benchmarksgame-team.pages.debian.net/benchmarksgame/...
Hard to predict the future, but my guess is that most apps will have a natural language input component going forward. Why navigate a million menus or compose complex rulesets by hand when you can describe in natural language what you want the app to do. I'm working on making such use-cases become reality in a tech company, for all our products and apps, and it would be strange if other companies aren't thinking the exact same thing right now.
> you should never use a div as a button, it is an accessibility nightmare

Eh, that's easily fixable with role="button" and tabindex="0". Oh, and adding a keyup handler so space and enter both click it. After that though, you have a perfectly good button. Well, minus any visual feedback that it's being clicked, but presumably you're doing some custom effect to go with the custom element...

So never say "never", but yeah, use a damn <button> whenever you have the choice. The roles are there to give you an escape hatch when you don't. And sometimes buttons are actually just button-shaped links, in which case you _really_ want to use an <a> tag, because those are heinous to imitate properly.
Yes, I saw that and still consider the methodology questionable. A fairer approach might be: time from the cli, including compilation, for compiled languages. (Or warmup the jit compiled code.)
Qdrant | Rust Engineers, DevOps, Cloud Backend, SRE, ML Engineers, Sales, Marketing | Remote/Berlin/US | full-time | https://qdrant.tech

Qdrant is an open-source massive-scale Vector Database. https://github.com/qdrant/qdrant

All Positions: https://qdrant.join.com
Location: Baltimore, MD

Remote: yes

Willing to relocate: for the right opportunity, but prefer remote

Technologies: DevSecOps, AWS, serverless, k8s, Python, Flask (have worked with much more but this is my bread and butter)

Email: david.gidwani@atomweight.io

Résumé/CV: https://github.com/darvid - for my full CV, please reach out!

10+ years experience building and scaling products end-to-end for organizations of all sizes. Run a software/DevOps consultancy.
What is Computational RAM (CRAM)?

> CRAM performs logic operations directly using the memory cells themselves, without having the data ever leave the memory.

Sounds like an interesting new approach to computation if we can make this work at scale.
Friedman's assumption was that regulations work towards social/general good so a company can just focus on maximizing shareholder value within existing law and that combination would keep everything OK. However, in practice regulation was often faulty so the maximization of shareholder value often led to many negative internal and external effects. It's like applying machine learning trained at times of plenty to times of crisis.
Whether that is "how it should work" and whether your proposed fix is better or worse for a given workflow depends on a lot of factors.

You're right that putting the insert in a fixed location will mean the time a new element has before it must either be visited or get evicted will vary quite a bit, but it's not obvious that it will always be better to "fix" that.

E.g. consider the typical "generation gap" where the set of objects are bimodal and either likely to be frequently used or be garbage right away. Depending on the odds that a new object falls in either category, it might be better for the insert to be closer to the hand than further away (or it might be opposite). That is, you might want the chance for a new entry to survive to be fairly low.

If the best bet is to have the new entry on average an inconvenient distance from the hand, it might well be the variability is better than either moving the insert to the hand or a more convoluted scheme to keep them at a fixed distance.

I agree it'd be more predictable and/or easier to reason about if it's a fixed distance, and if the fill size of the cache is the right distance then certainly inserting it at the hand works great.

But really, I think you should measure for your specific workflow. It'd be interesting to see this option and some other ways of separating them tested, though.

Another thing I think would be interesting to test is whether (it wasn't an accident that I hinted at generational garbage collection above) it'd be worth keeping a second pointer that you move past objects that have survived "long enough" in the cache, and most of the time move the hand back to that pointer instead of "all the way" so you don't spend as much time iterating over objects that won't get evicted anyway. If the number of cache entries is small, probably not worth it, but for a large cache with a decently large proportion of persistently hot objects, maybe (but then you could just also outright move objects to a second cache, and that might well be simpler; again something to measure on actual workloads).

I'm assuming this isn't anything new to people who follow the field more closely in any case.
> where the users chose not to enable MFA?

Require MFA to be enabled when it's an issue of indirect access to personal data of potentially millions of other users on the site. Any retort like "okay well that might just hurt the platform's ability to attract users with that sort of security prescription," gets cement shoes in the bay. There's absolutely no reason to allow known dated forms of authentication to access user data of other 23andMe subscribers. Of course people are lazy and won't enable it if nobody is telling them they have to, most people are completely ignorant to how rampant these kinds of stories are because they don't subscribe to tech news. Somebody needs to be the adult and force people into the correct lane.
And this company pretty much invented GUIs. To the extent that it dazzled Steve Jobs and you don't easily dazzle a Steve Jobs.
I'm not really sure how to proceed with a conversation in which you invent, from scratch, your own definitions of the words I am using.
> Despite targeted outreach, we've noticed that community members are not returning to use the tool after their initial interaction. There has been minimal engagement apart from a spike during a mid-November focus group. This indicates that Sawt is not helpful enough yet for people to want to come back.

Perhaps they have trouble thinking of additional questions to ask? Their first few interactions probably cover the things they care most about. They get an answer and that’s it. Maybe a “subscribe to updates whenever this topic comes up in a meeting again” feature would be useful?
I definitely had no idea! Thanks for that knowledge.

I mean there's never been any UX indication at all that that would be the case. I like your idea of showing the previous code -- that would make it very clear.

Good to know.
You cannot blame the EU on having many websites making poor product decision and customers being content with crappy websites. Just stop visiting websites that have those banners and write angrily about it too their support. If enough people do the same, the law will work as intended.
Let me make sure I've got this right before I shred you.

14,000 users messed up. As a result, hackers were able to log in to 23andMe's computers as those users. (Is that the fault of those users? Absolutely.)

The hackers were able to use those logins to steal the data of 6.9 million users, approximately all of which did nothing wrong. How is that part not the fault of 23andMe?
I’m using some of these techniques to minimize the size of my executables for use with a AWS Lambda and on embedded Linux projects.
Why did you have devices in 16 different homes scraping web data?

That reads creepy but I'm sure there must have been a good reason
There have been many instances of people deplaning from an engine-on-fire plane in US, with luggage. Spirit, Southwest, and some Caribbean airlines in recent 2-3 years at the very least.
If Iran had been running their SCADA stuff on hardened OpenBSD systems instead of Windows, maybe the story would have been different though. I'm not saying it's realistic (SCADA drivers may not exist for OpenBSD): what I'm saying though is that only a fool would consider Windows as secure as OpenBSD.
You’re getting at just one axis of a larger trade off space. Yes serving scripts move compute cost to the browser, but you can also gain a lot of latency wins (which are sometimes critical) by having more compute on the client.
For those who support this, could you name another instance throughout history where people restricting speech of others ended up being "in the right", no matter the circumstance?
When it comes to property development, anything that you leave to optionality in code enforcement ends up being a thing that never happens ever.

For something to be available it has to be required by building codes.
Sundar is also a McKinsey dipshit.
A lot of the car model launches have been “paper” launches. They advertise a $30-40k car/truck and then anything other than the $70k premium model is “coming 2024”.

I would expect all car sales to be lower now that interest rates are considerable. I got mine at 1% interest and many got 0% not too long ago
The US obviously has much, much, much stronger free speech protections. The extent to which that’s preserved by threat of an armed populace seems pretty tricky to figure out.

I agree I wouldn’t propose arming the UK public as a solution here.
do video games make people shoot up schools? did marilyn manson lead to columbine?
I linked to the paper because it wasn't clear if OP's goal was to increase the security with the cascaded hashes or not, and also because I personally found this result very surprising and interesting when I first learned about it.

If you have a moment can you please elaborate a little more on your second paragraph? Are you describing applying a similar method inside the compression function of the hash function? Any hash function? Where does the parallelism come in? Thank you!
"Back in the day", it was more-or-less socially accepted that if medicine seemed unable to offer even a minimally acceptable quality of life to a patient, then the patient could "turn their face to the wall" and refuse food & drink until they passed on.

Of course, those were also the days when patients - even the extremely ill - were usually at home. With their family / neighbors / friends quite aware of their condition and suffering. And before the days of the modern mega-dollar/mega-ego medical-institutional complex.
Linux Mint 21.3 Edge Moving to Linux 6.2 Due to Hardware Issues
We also published it as a crate https://crates.io/crates/segcache
Afghanistan is an empirical disproof of this claim. I used to believe it too though!
Just start with a framework like Godot. There are plenty of tutorials online.

If you really want to go low level with it, though, my personal sweet spot is C, Lua/LuaJIT and SDL2. Although practically speaking C++ is probably better.
> Tesla’s reasoning for going away with a method universally used for signaling turn for decades is that it enables them to remove a physical part, the stalk, and it believes activating a turn signal will soon be unnecessary with the advent of self-driving.

That is some impressive levels of "we know better than you / everyone else" thinking.
I’ve seen it done poorly in both directions: blogs with SPAs and people trying to build SPAs with MVC frameworks.
I thought that defeated the entire purpose of 2FA?

That if your password store got hacked, they still wouldn't have access to your separate 2FA device?
This is how RunUO/ServeUO was designed as well. I'm pretty sure it's a common design practice that came from muds. The server is only responsible for network and communications - everything is then orchestrated through plugins/scripts/systems that can be compiled and reloaded while the server is running. The more modern way is now to separate your "server" from your "modules" in distributed-systems architecture (just deploy the new module to the farm) but the idea still permeates.

Still, RunUO was C# and like java, recompiling and loading is trivial. Doing it in C/C++ land is heroic.