skysight-inc/HackerNews huggingface dataset:
I've been playing with Linux desktops since the 90s. Every few years I load up a few distros in a VM to see what's going on, and I just did that again over the holidays with some free time and a recent urge just to tinker with stuff. Some random, recent thoughts:

- Knowing how Linux works (and having the skill to use it) is hugely advantageous for most software developers and IT professionals--I personally wouldn't hire an IT or DevOps admin who didn't have some level of familiarity and comfort around Linux. Reckoning with the modularity and composability of Linux helps to build a deeper understanding of how computers work, and many of the most important IT topics of today (containers, cloud management) are built off Linux/Unix fundamentals such as chroot and cgroups.

- I tried Arch for the first time and enjoyed it as a nostalgia trip. It reminded me of installing Redhat or Suse or Mandrake back in the 90s. I appreciate it for what it is--a tinkerer's distro. I don't understand the meme around it though, and found nothing esoteric about setting it up... Is manually partitioning a disk drive supposed to be a feat of strength today?

- On the other side of the distro spectrum, I'm mightily impressed by Zorin. Less so these days with Ubuntu. I get folks' distaste for Snaps over Flatpacks.

- I don't get folks aversion to bloat. For me, finding the ideal setup was about installing everything a distro had to offer and then chiseling down. The exploration was always the fun in using Linux. I remember installing Suse back in the 90s with 10 different window managers and I loved fiddling with them all.

- Hyprland is really neat.
Interesting. I'd assumed it was something to do with the Office for Budget Responsibility and "transparency" of Government spending. I guess not.

It's still absurd that the Government would announce how much they're prepared to pay in advance, and act surprised when bids come in at or above that amount.
>Don't connect them

Good luck with that on laptops.

>PS2

Most touchpads and laptop keyboards are already PS2 bound.
Interesting. Musk "switched sides" and suddenly twitter becomes the worst social media imaginable. To be honest, my feed didn't change much after Musk took over.

Instagram is just business ads at this point, TikTok is adding ads and their feed is getting worse, I don't even know what's happening on fb. Reddit is somewhat bearable only if you follow enough subs.

I don't want to be on an echo chamber when discussing general topics, politics, etc... That doesn't get anywhere.
> The source offer is sufficient and the most common way of meeting the license obligation.

Yes, you're right. And you play e-mail ping-pong while trying to find the correct person in most cases. IIRC Linksys got into "warmer than usual" water because of not honoring the offer.
There's at least 1 service [1] that allows checking previous data breaches for compromised emails/passwords. I imagine there's others, too.

https://haveibeenpwned.com/API/v3
Break? What fantasy is that? I'm running five machines of different ages for years now, every day. Nothing is breaking; certainly not because of the OS. What does that even mean?
Imagine you already know the passwords for many emails, or likely password patterns, from other sources. That's the kind of the attack we're talking about here. Also, those attacks are normally performed very slowly, and probably through botnets.

(And yes, 2FA is the only real answer here, preferably YubiKeys to also defeat phishing)
Show HN: Live UK train departure boards on Wear OS
Just change the message to "what the fuck are you doing here on a sunday, go play with your kids/visit some mountains/pet your dog"
AI powered CEO? I love it already.
Fully agreed on all counts!

> ...but even zoomers are not tech savvy these days.

Though I would actually challenge this. The idea I'm (slowly) building out deals with owners of a small blue collar type business.

These people aren't "tech savvy" in that they're not tech nerds. They don't know about coding languages or SPA vs server rendered. They don't give a shit TypeScript vs Python vs Go vs Kotlin.

But they absolutely know how to use their phones. They know how to use apps and websites. That's as tech savvy as is needed to build a small business.

They're also working daily with these TERRIBLY outdated systems that were made decades ago and only work on 1 single Windows machine they have sitting somewhere in their shop, covered in grease.

Just show them a responsive web app that addresses their frustrations and they'll be shocked at how much of an insane genius you are. And they won't even ask about the tech, because they don't give a shit. They just want it to work.

IMO this approach is where the next wave of small business SaaS ideas are. YMMV
> York is a good example of how building high-ish speed railways that actually take people somewhere they want to go, leads to people using those railways.

Not just directly from York: there are many trains stopping both here and Leeds, giving us, for example, indirect-but-easy access to some of the north further west (smaller lines to/through Shipley/Keighley/Skipton, Ilkley/Settle/Carlisle) which I find handy when I want to go run around the Dales, and that people from those areas presumably find handy for access to the east coast main line North & South.

York's rail connectivity is one of the (many) advantages of living here (despite the key disadvantage of housing costs & such) for me, as I don't drive.
> Also, how far does the sharing go? How far removed from a family member does a user have to be to see their info? Going from 14k to 6.9M seems like it must have been more than just immediate family, given the small family size common today.

Looking at mine, it shows me 4th cousins and closer. So way more than immediate family.

The user value isn't nebulous. If you are curious about your ancestry, you might also be curious to see what people you discover or see if your family tree is your real family.
They prioritized earning new business and lowering customer friction over enforcing MFA. They also had no idea 14k accounts were brute forced and cred stuffed, so that's 100% on them. They have enough money to do the security work.
Writing in Rust when appropriate is improved modern coding practice.
Ditching cars feels like giving up regular alcohol use did, where the scales fell from my eyes and I see how much better my life is without it, but I can't quite communicate it to others without seeming like a huge judgmental prick :)
This is awful. Paragraphs exist for a reason.
they compensate for their lack of tech skills with determination =)
>Hell, I still find SMBv1 in a lot of places.

It cost me thousands of dollars last year to get our MSP to disable SMBv1 and force correct policies. They "Needed to audit for a week" to make sure this "didn't break older software". It was annoying I even had to ask that they didn't come to me saying "We won't support you if you have SMBv1 enabled".
Why hasn't Microsoft at least sandboxed these protocols if they are so bad in regards to security?
That's very cynical. What's the point of "fuck you" money if you still have to be a talking money and sell your reputation?
To sell to whom?

Afaik, their domestic middle class market isn't nearby big enough to singlehandedly fuel their economy.

And they'll economically-politically run up against the "middle class wants things like political power and freedom" if they try to balloon that class too quickly.
Sure! Feel free to reach out at me at liza dot io.
> But where FP tries to avoid monads and stay pure

Does not compute, monads are a construction you see pretty much only in functional programming. Monads are the tool Haskell uses to model effects and generate them from pure computations. They're not magic, they're nothing more than a pairing of a "map" and a "join" function (or "pure" and "bind" if you prefer that angle). Bottom line, monads are as pure as anything else, it's just the behind-the-scenes interpreter for the IO actions produced by the "main" function that isn't (edit: I suppose ST also counts as hidden magic)

Other effect systems not based on monads have recently been catching on, such as Effect for TS, or language features like Abilities in Unison. Right now I get "observable-everything" by using computeds in Vue as much as possible and keeping raw refs private (i.e. not exported). But ultimately, something has to set the refs, and there's still no easy way to account for that mutation behavior in the type system.
Hand-me-down or used Windows laptops that were $300 to begin with [EDIT: when purchased new, I mean] don't tend to last a super long time. Maybe, if you're lucky.

[EDIT] What I've seen break on mine and my wife's, back when I used Windows/"PC" hardware on mobile computers, and these were all lot more than $300, even 15+ years ago:

- Display controller board just... dies, barely outside the very-short warranty period. (I repaired this one)

- Display cable frays at hinge.

- Thermal paste on insufficient-to-begin-with cooling for discrete video chip goes bad after a couple years (discrete video cards in laptops: just a bad idea, they're historically the source of a solid half of the problems on MacBooks, even)

- Something shakes loose inside. Several times. I've self-repaired (open, screw with anything that has a socket or port until it's good) but it's not worth taking it in to a shop on a very, very cheap machine, if you're not comfortable doing this yourself.

- Battery goes bad.
I think some just like making themselves available, but then you see a lot of the ones listed on Cameo that looks "cheap" at ~$100 or so are videos of an average length <2m. If you can make $100 whenever you're bored and have 2 minutes or can sit down and churn out 20 in less than an hour for $2k, you might be tempted even if you have decent amounts of money.
So far we’ve been exceeding the predictions for switching to carbon neutral economy, so I wouldn’t be too sure of that.
1g/lb is also higher than really needed. IIRC the current evidence supports 1.4-1.7g/kg is enough for most people, and eating more will just displace other useful things from your diet. Since the number should be based on lean body mass, the heuristics are less applicable to individuals with obesity or competitive physique athletes. I think the average american already consumes >1g/kg of protein, so most people won't need much more to max out muscle protein synthesis from diet.
They said unethical, not illegal.
Remembering startups we lost in 2023
I know a lot of companies that could really tighten up their operations and balance sheet by adopting this strategy.
Ok I think I just misunderstood the comment I replied too. I assumed it was about some music in the video, probably because someone else made a comment about a soundtrack of another game. Also I really can't stand hearing those sound effects, even though they are well made.
If you mean just DNA analysis I suppose that's possible, but unlikely. Genealogy involves your links to specific other people and thus is impossible without storing data.
Starlink launches "cellphone towers in space" for use with LTE phones
Most of your comment it's bullshit. Containers are not for security, but for convencience and task separation/isolation to avoid the overhead of a vm. eBPF will expose you further more, not less. Also, how can flatpak secure you against a ~/.profile script run at login or an ~/.xprofile one?
SKI Combinator Calculus
2FA is so, so, so very tiring.. all day long, 2FAing. We need to move past it. And no, I don't have an answer for it.
Wonder if some of it is due to blue still being perceived as high tech. For people over a certain age, red was the default LED color for decades as may have become associated in the average person's mind with outdated technology.
The problem with replacing "googling" for me is that, as far as I can tell, no one has come up with any better term. I, like yourself, tend to use DDG mostly and would prefer not to say "googling", but saying "web searching" is more wordy and clumsy.

We really need to come up with another term that is more generic but just as snappy and easy to say as "googling".
On one hand, I have to somewhat agree with 23andMe here. If someone uses the password "password1" for some service, they should not be able to turn around and blame that service when their account is compromised.

On the other hand, 23andMe should have definitely done much more to reduce the blast radius of this attack. Mandatory 2FA, disallowing known-compromised passwords, geolocation of login IPs, etc.

I guess the question shakes out to: where do we draw the line on personal responsibility vs. service responsibility? Services can't be responsible for 100% of user security. But they also can't be negligent in their own security and mitigations.
> (And yes, 2FA is the only real answer here)

It's not the only answer. You can also use tools that detect and reject insecure passwords, integrate with HaveIBeenPwned to force-roll passwords that have been previously compromised, etc.

2FA would solve a lot of the problem, but it's not the only option that could have mitigated this.
> They missed the part where Google proposed to DRM the whole Internet for your health and protection.

An unfortunate mistake, since EFF did publish a thorough explainer article [1] on Web Environment Integrity (called WEI; other key term is remote attestation). The title "Your Computer Should Say What You Tell It To Say" is a good takeaway too.

[1] https://www.eff.org/deeplinks/2023/08/your-computer-should-s...
I am literally asking whether this can run on DOS. It’s become clear that it can’t, and words mean things. Given the article is about running web servers literally on DOS, I think we can safely say it’s been brought.

Modern Windows command line is not DOS.
As much as I adore him, his hands are already dirty from participating in various BitCoin scams before.

https://www.coindesk.com/tag/steve-wozniak/

Video:
Apple Co-Founder Loses Bitcoin Scam Ads Lawsuit Against YouTube.
Steve Wozniak, co-founder of Apple, recently lost his case against YouTube involving ads for a crypto scam that used his name and image without permission. Similar scam ads us...
By CoinDesk Staff
Jun 3, 2021

Markets:
Apple Co-Founder Steve Wozniak Loses Case Against YouTube Involving Bitcoin Scam.
A California superior court judge ruled the social media giant was not responsible for its users' content.
By Sebastian Sinclair
Jun 3, 2021

Finance:
Apple Co-Founder Wozniak’s New Venture Lists Token to Help Fund Energy Efficiency Projects.
Apple co-founder Steve Wozniak has launched Efforce, a company that facilitates investments in energy efficiency projects via cryptocurrency and blockchain technology.
By David Pan
Dec 5, 2020

Markets:
Apple Co-Founder Steve Wozniak Sues YouTube Over Bitcoin Giveaway Scams.
Wozniak is among 18 plaintiffs suing the video-sharing giant for allowing crypto giveaway scams using his likeness to flourish on the platform.
By Sandali Handagama
Jul 23, 2020

Markets:
Steve Wozniak Has Joined an Energy-Focused Blockchain Startup in Malta.
The Apple co-founder has joined his second blockchain enterprise, one targeting more efficient use of energy.
By Daniel Palmer
Jul 19, 2019

Markets:
Apple Co-Founder Steve Wozniak Joins Crypto Startup Equi: Report.
Apple co-founder Steve Wozniak said Tuesday that he's now working with investment-focused crypto startup Equi, though his role is as yet unclear.
By Nikhilesh De
Aug 21, 2018

Markets:
Tech Legend Steve Wozniak Scammed Out of $70K in Bitcoin.
Apple co-founder Steve Wozniak says he once lost seven bitcoin, worth more than $71,000 today, to a ruse involving a stolen credit card number.
By Annaliese Milano
Feb 27, 2018
Why would the Chrome engine being dominant be all that problematic? And as a user, I'd like to make that choice for myself.

Also, Safari wouldn't vanish just because you'd be able to use a different browser engine. I strongly disagree with your "scary" (not scary) scenario: Only a small percentage of users is ever going to change defaults.
Just a reminder that you can (...and should?) request to delete your account and associated data [0][1].

[0] https://www.washingtonpost.com/technology/2023/10/12/23andme...

[1] https://customercare.23andme.com/hc/en-us/articles/212170688...
What neighborhoods, exactly? Parking minimums have been the de facto law for cities, it's only in the past decade that trend has been starting to be reversed in the US.
This has to arrive in the next ten years or so, off the cloud - test at home.
eBPF is used for substantially more than observability.
I don't think it's a good thing, but I do think it unfortunately is a real political issue.
Do you not see the problem? "I paid for an electric car but i still have to add gas sometimes". "I paid for a combo but they didn't give me my fries".

You paid extra for something they haven't provided
Solid feedback! I've made changes for all that wording. Create Image -> Tweak #1 -> Tweak #2 and a few other things. Thanks
I am in a similar situation. Worked at Microsoft, left, stuck with Windows through 10, now am a mix of MacOS and Linux.

I hated MacOS, and still do mainly because of the Window management, but after using it for work and the hardware being so much better for me than anything I could find PC I finally switched. My desktop is still Linux. Most of the people I know switched to Mac which is how I know I am in a bubble.
Matt Mullenweg (the person originally behind WordPress) has always been pushing for the open web. I hope this birthday request from him inspires more people to post to their own sites. It would be great if 2024 can bring more momentum to the indie web. My RSS feeds are more vibrant than they've been in a decade, but I'm excited to find even more great stuff to follow!
Ah yeah.

1. Off workstation decrypt using the AD DPAPI Backup keys.
2. Local DPAPI List and Dump for the windows hello biometric key
As long as there is no dissuasive penalties this will keep happening
I promise if you are using Windows AD and haven't had a pen test and remediation in the last few years - you would lose to a decent pentesting group.
That sentiment is a normal side effect of having exposure to the research process (because stuff is being published) instead of just the outcome.

Also, remember that this just needs to work once for our world to completely change!
See, the difference here is that SCO was scum, and in this case the people who re-implement GPL tools on permissive licenses are scum.
Also, GCC was largely ignored until Sun broke the UNIX delivery model, splitting Solaris into user, and developer tooling paid separately, quickly followed by other UNIX vendors.
I am roughly equally delayed whether I'm the leading or trailing car in a rear-end collision. It is the fact that contact occurred (and the subsequent checking on other occupants and exchange of information) which has delayed me, not whether I was an active cause or passive victim of the occurrence. The person who was waiting on me was inconvenienced by my lateness and I'm explaining the proximate cause of my lateness. Whether I was at fault or not is, in the vast, vast majority of cases, not relevant or of interest to them.
People always say that they're ok with protests as long as they don't cause them any inconvenience, and I think they're mostly being honest with what they feel, but I also think that protests are about generating mindshare, and if they're freely ignorable, they don't work. It sucks, but the average person isn't going to care about something that doesn't affect them, and sometimes the best way to make them care (enough to actually look into the issue) is to make it affect them. And even if they go into it with a perspective of "Wow these protesters are annoying assholes", if they look into the cause and see a bunch of people online saying "We don't think our allies should have blocked the freeway, but also look how fucked up this is" enough people might be converted to make the disruption worth it.

It's super easy to say "this was bad tactics because I personally was not converted" (and I'm very prone to feeling that way with irritating or intrusive advertisements), but I don't think it's actually a very useful way of thinking about things.
If we're going to blame the victims, at least do it right - the mistake was submitting sensitive information to a gross, sketchy outfit like 23andMe.

Much like Uber, self-enshitification was obviously the "???" part of the underpants gnomes' plans.
It seems pretty plausible to me, because finding relatives -- especially unknown ones -- is one of the 3 main use cases of the product (the other 2 being understanding your ethnic background and health/disease markers).

They have ~14M users total, so this is 50% of them opting in. That seems entirely reasonable.
I doubt that. This is a press release about a business. If press releases were illegally "giving information on how the business is operated to some investors" then, for example, Apple could never hold press events and would have to announce things on their investor page.
For context, here's what comedian Steve Martin had to say about The Smothers Brothers, as someone who got his start writing for the show:

"The Smothers Brothers show continued to rankle the brass at both CBS and the federal halls of power. Sketches dealing with race, war, and politics mixed with anomalies such as Kate Smith singing "God Bless America," made it a hit in the ratings and at the watercooler. It thrived on controversy, but we writers didn't know the level of rancor the Brothers were facing. One morning in 1969, I was driving to work when I heard on the radio that the Smothers Brothers show had been ignominiously axed. Ostensibly, CBS canceled the show because of late delivery of an episode, but I knew what really had canceled it: a trickle down from President Nixon. The Brothers had surely made Nixon's enemies list, and probably all of us writers had, too, and the political pressure must have been too much for lumbering CBS, which didn't need static from the FCC. After the show's demise, our team of eight writers won Emmys, the academy's defiant response to the CBS brass."

From "Born Standing Up", by Steve Martin.
States will probably bend over backwards when you are 1 of their 2 Fortune 500s

"To secure the latest corporate retention project, the State of Louisiana offered CenturyLink a competitive incentive package that includes an annual performance-based grant, subject to company payroll performance. In addition, the agreement creates funding for information technology faculty, curricula and education at Louisiana Tech University, where the state has supported the Clarke M. Williams Professorship in Telecommunications in honor of the company’s founder."

https://news.lumen.com/2019-04-02-Gov-Edwards-And-Centurylin...
> 23andMe then claims that poor password practices are responsible for this data leak.

My account (now removed) relied on a long, unique, generated password + Apple SSO. I don't see how I could've made my 23andMe account more secure (I'm in the 6mm pool of users, not the original 14k).
I haven't watched the talk here, but anything about medicine from Huberman should be considered with extreme skepticism, given his often reductionist/mechanistic or outright unsupported claims.

> Sugar is poison.

So no fruits and vegetables then?
What kind of genealogy service could you provide if you did not store users' data?
Thanks for the feedback. For whatever you want to do with supabase, I don't know. The application I made doesn't use instances, everything is local, even the parsing.
If you have VLC installed on your iPhone, it can play it from this link:

https://migeel.sk/blog/2024/01/02/building-a-self-contained-...
The way around this is to have a layered approach in the backend. A business logic layer which generates some data, presumably structured in whatever way is canonical for the language you use.

Then add a layer on top of that that 'renders' the same structure into multiple formats: JSON or HTML as needed.

Expose each of these view layers as a different endpoint in your service.