skysight-inc/HackerNews huggingface dataset:
Note that under no circumstances can it "compel" you to hand over the signing keys. It can compel you to _stop infringing_, though. Which you may do by either stop redistributing GRUB , or by allowing your customers to install their own signatures, or if you are really stupid, by giving out your private keys. But you cannot be forced to do the later.

As usual it's just FUD.
What. They were so good! What did you not like about them?
The CDC doesn't recommend it. By that age, you've probably been exposed already.

https://www.cdc.gov/hpv/parents/vaccine-for-hpv.html

> HPV vaccination is not recommended for everyone older than age 26 years. Some adults ages 27 through 45 years who were not already vaccinated might choose to get HPV vaccine after speaking with their doctor about their risk for new HPV infections and possible benefits of vaccination for them. HPV vaccination of adults provides less benefit, because more people in this age range have been exposed to HPV already.
You suspect that the median HN reader has no interest in science fiction? I routinely peruse Hugo to see what new material exists in the world.
Funny story, but I was at home in late 2019 and needed to interact with a device gui that didin't have any remote desktop software at work. It did have a screenshot tool and a command-line tool that would inject clicks though.

a few dozen lines of lisp later and I had a web server that served up an image map of the screen, and would respond to image-map requests by inserting a click. A nice little one-off to save me the round trip to work.

Then COVID happened and this tool got used by way too many people. For all I know someone is still using it.
For reference, 2015 was the year the "Sad Puppies"/"Rabid Puppies" slates tried hard to skew the vote for the alt-right, and managed to distort the set of nominated works. "No Award" won many categories that year as a protest vote by WorldCon attendees.

(Many jokes were made that year about "Noah Ward", multi-Hugo-winning author extraordinaire...)

https://en.wikipedia.org/wiki/Sad_Puppies
Perhaps check, but I don't think it's checkmate until you can explain the hard problem of consciousness via physical reactions.
The problem isn't making games for money, it's doing it in a stupid and shortsighted way that sabotages the goal of making money.
How is the EU blocking non-profits from operating there?
Is there a functional reason for why toilet lids do not close in an air-tight fashion? If there were no openings for the particles to escape through, it seems like it would make closing the lid more effective.
As I've said before, the sanctions are fundamentally unenforceable for commodity chips, and the Russians know this.

While FPGAs can replace ASICs for some tasks, that's not true for all of them, and for many it will be worse in the end. But sure, anyways Russia can't go lower than 65nm so it can't make great FPGAs no matter what.
Is the "Core Technology Fee" applied to free Apps?

Example: I make a free App that gets very popular but has a rather seasonal character. Then there is a possibility, that many users will reinstall the App each year for a short time. Then I would have to pay the 50ct per install each year?
I'm a strong advocate of open source who also happens to agree with microsoft's lawyers on this. Whether you believe this consequence of GPLv3 is intentional or unintentional, it is a consequence. The idea of somehow putting blame back on Microsoft for this is similarly twisted.

Vendors shipping absolute shit implementation of SecureBoot that don't give the users authority over their own systems are the problem.

Let's revisit this topic in the future to see how many systems actually get patched to revoke these signatures. My guess is that nearly 100% of shipping systems 1 year from now will still have these keys and still boot these vulnerable signed binaries right out of the box.

One might hope that this issue thrusts the theater of Secure Boot into the public discourse, but like most other forms of irrelevant DRM, it will simply remain a hurdle that everyone has to keep jumping over until the end of time.
> this will go to a round two

And there is only one possible outcome: Apple will bend to the EU's will, because in the end the European market is too profitable to ignore.
You are correct, I did opt in. I'm not particularly concerned about the security of this data or this breach. But in the context of all this finger-pointing, I thought it was important to point out that 23andme saying "it's your fault for misusing passwords" is a little disingenuous. I was taking some poetic license with "mistake": I don't consider it a mistake, I willingly chose to share that information. My point was that the only way they can blame me for having my information leaked is to blame me for using their product as advertised.
It's not. Once you get a toto you never go back.
> I think it's much better to take control away from Apple and place it in the hands of regulators that represent the people directly.

Those are the same regulators who keep trying to ban encryption, right? Just making sure.
Ask and ye shall receive: https://www.avclub.com/consider-if-you-will-the-aerodynamics...
Most SSO runs on SAML, which uses XML Signature, which uses PKI certificate chains without TLS.

Even if you think all SSO will migrate to OIDC, the EU has enacted laws around electronic signatures that basically enshrine the use of XML Signature (with all its problems) for the foreseeable future. A lot of countries beyond the EU (many LatAm countries, for example) have followed suit.

There are other signature protocols that use certificate chains as well, and devices and networks that should not be making network calls when validating such signatures.

And as I mentioned, TLS uses are not limited to those where revocation information is readily accessible.
Tech optimism of the late 90s was a thing
https://en.wikipedia.org/wiki/Technological_utopianism

We were going to solve all the world's problems with file sharing via the internet. (Oh, to be young again...) Tech naiveté is perhaps a better description but it did exist, especially in San Francisco.

"During the late 1990s dot-com boom, when the speculative bubble gave rise to claims that an era of "permanent prosperity" had arrived, techno-utopianism flourished, typically among the small percentage of the population who were employees of Internet startups and/or owned large quantities of high-tech stocks. With the subsequent crash, many of these dot-com techno-utopians had to rein in some of their beliefs in the face of the clear return of traditional economic reality."
My concern mostly lies with "what will qualify as malware". When we think of malware we think of things the user would consider malware, i.e. the traditional use case of notarization. Is Apple thinking the same or is malware just apps that do things they don't like and haven't been otherwise forced to approve (e.g. like JIT is now allowed for browser engines)? Overall though I'm optimistic on it, just also cautious.
Or, consumers grow more and more resistant to the BS. Ultimately, we insist on authentic experiences, not virtual fakery.
Meh, anyone who hasn’t been able to multiply their productivity with chatgpt is either is too stubborn to try it or, well, i’m not sure how you can mess this up.

From writing sql boilerplate to copy-pasting my entire pico8 game and going “add repulsion force to enemies so they don’t clump up on one tile” to using it to provide examples instead of synthesizing them from a manpage, it’s insanely good.
(I'm one of the authors).

I looked at NIST's PKITS while building the test suite. We ultimately decided to punt on it for the first round of tests, primarily because it fell slightly out of scope of our MVP on Python Cryptography (being strictly a RFC 3280 suite). We instead chose to integrate the BetterTLS suite[1] (warning: very large page) for the MVP.

With that being said: x509-limbo is open source, and I would be overjoyed if someone added a new `nist::pkits` or similar namespace for these :-). I can't promise that it's an immediate priority for us to add ourselves, however.

> are any of the test cases taken from Chrome's codebase?

Nope. That would also be a valuable thing to have here.

[1]: https://x509-limbo.com/testcases/bettertls/
In the typewriter days I believe it was brother who made many different models that each had their own case but all had the same hardware inside. The cheaper models simply didn't have the keys.

One could do a "smart" phone that has a predefined set of apps. I could see the advantage of having practical apps but not have the stuff that (depending on who you are) sucks the life out of you. Having [say] porn or gambling wherever you go might not be a good idea for some people.

I only got a smartphone in 2017 when it became impossible to do my job without the latest drama announcements on whatsapp. A few years before I had to get a dumb phone because it was getting to weird for people to not be able to contact me.

I've been doomscrolling nonsense ever since. People (as they should) make fun of me for not starting a conversation the way I use to.

I recently found myself unable to order food without a payment app.

It would be hilarious to purchase a phone providing a list of url's and a list of apps and having to pay for each. Changing the list should be expensive and take at least a month.
Software should be free(dom) er properly paid and professional. But please no freeware or ad crazy software
Which, frankly, would scare me. Unless you know how it is implemented under the hood, you have combined factors.
> variations in SQL mostly reflect the variations in the supported feature set

I mean, the notion of modifying the language itself to enable various features is a kind of psychosis not seen in decades in the application-language universe -- functions becoming keywords, and flags becoming keywords, and keywords injected randomly for english-ness [TRIM(LEADING "c" FROM col)] is generally absurd. For the most part, these should be modules/libraries/etc but SQL defines an aesthetic, and that aesthetic is a smattering of new keywords for every feature/function.

> Developers have also found themselves burned for decades by trying to interact with databases in languages that aren't SQL, including and especially various DSLs and ORM frameworks.

I think the fundamental issue here for DSLs is that at the end of the day, they're all compile-to-SQL languages, because the database does not offer any other API than SQL. And the general confusion is that SQL pretends to be standardized, so DSLs try to support all the databases, and end up implementing only some minimal shared subset... no matter how nice the DSL might be, you end up having to leave it anyways.

ORMs are a different story; they're not just trying to hide the SQL language, they're trying to hide the relational model itself, and the vast majority of issues you have revolve around that object-relational mismatch. If one gets turned off by the mismatch, fixes it by writing raw SQL directly, and avows to never not-write SQL again (including the avoidance of query builders), then I don't know. They've conflated the two unnecessarily.

But if you admit to query-builders being useful (and I demand you must; who could look at C# LINQ and think "nah, I LIKE smashing strings together and carefully administering the correct number of commas and precise ordering of clauses"?), then you admit to the possibility a better API exists.

> Maybe PRQL is the one that finally succeeds, but the lack of success until this point is not for lack of trying or imagination.

The fundamental confusion I have is that looking at other systems with fancy underlying engines, you would typically see a division between the API/language interface and the engine itself -- the frontend, and backend. And the frontend may be swapped out cleanly. Erlang/Elixer both sit on BEAM. Java/Scala/Clojure sit on the JVM. But an RDBMS vendor will only ever implement and support the singular dialect of SQL; there is nothing else. They'll probably implement support for app-language support for procedural logic (mssql has language extensions, postgres has PL/*, etc), but to execute actual database commands you end up submitting... SQL. There is nothing else.

It's intimately (and afaik unnecessarily) tied to database engine, and I don't really understand why. And anyone who tries to do anything different must do so as a compile-to-SQL, and inherit all of the issues of transpilation and the underlying language itself. I could understand it as market forces, except even our one hope for good in the database world, postgres, makes the same choice
Thank you for sharing, it's sooooo rare to get signal amongst noise here re: LLMs.

I'm really, really surprised to hear this:

- I only committed in a big way to local a week ago. TL;DR: Stable LM 3B doing RAG meant my every-platform app needed to integrate local finally.

- Frankly didn't hear of Ollama till I told someone about Nitro a couple weeks back and they celebrated they didn't have to Ollama anymore.

- I can't even imagine what the case for another container would be.

- I'm very appreciative of anyone doing work. No shade on Ollama.

- But I don't understand the seemingly strong uptake to it if it's the case you need to go get special formatted models for it. There's other GUIs, so it can't be because it's a GUI. Maybe it's the blend of GUI + OpenAI API server? Any idea?? There's clearly some product-market fit here* but I'm at as complete a loss as you.

* maybe not? HN has weird voting behavior lately and this got to like #3 with 0 comments last night, then it sorta stays there once it has momentum.

- p.s. hear hear on the examples folder. 4 days, that's it, from 0 to on Mac / iOS / Windows / Android / Linux. I'm shocked how many other Dart projects kinda just threw something together quick for one or two platforms and just...ran with it. At half-speed of what they could have. All you have to do is pattern after the examples to get the speed. Wrestling with Flutter FFI...I understand avoiding lol. Last 4 days were hell. https://github.com/Telosnex/fllama
It's not possible to stop them. These chips are literally commodities - some of them are actually technically counterfeit and you might never notice. The Russians will buy them from second hand markets, just like everyone else. They're just too cheap and too common for sanctions to be enforceable.
I wish the moderation API was available for use outside of sending text to one of the GPTs. It's surprisingly accurate.
I don't even think it's a good strategy for creating elite athletes. Can we really determine someone's "elite potential" by how good they are as a young kid? If one kid has parents who took them skating a couple of times and the other didn't, the first one is going to absolutely destroy the second in a competition, but does that really tell us anything about how they will perform, 10 years down the line at the olympics? Yet we filter out anyone who doesn't conform to this standard.
Thanks for replying, that's a perspective I didn't consider. The capability to "talk to your data" just seems so enticing as a solution that I was tunnel-visioned into that UX. If I'm understanding correctly, what you're suggesting is more of a SQL assistant to help people write the correct SQL queries instead of writing the entire SQL query from scratch to answer a generic natural-language question?
Who makes money off people not getting vaccinated?
On one hand Chrome on the iPhone is a win for choice.

On the other hand Chrome gaining further marketshare and having a browser monopoly seems bad.

I guess we’ll see what happens.
Expect that to be challenged by the regulator/courts

Obvious malicious compliance
My vague recollection of that show matches yours.
Once competition is minimized and they have monopolistic power, raise prices.
They won't sign your store app and it won't install on anyone's phone. And they'll probably add any previously signed versions to a revocation list so existing installs of your store will be deleted immediately along with all the apps you distributed. That's the power of remaining a gatekeeper...
From yesterday’s WSJ article [0]:

“Officials from the European Commission, the EU’s executive body, have been holding meetings in recent months with Apple and other tech companies to discuss the new rules. Apple hasn’t provided a final package describing its solution to the commission or tested its plans with market participants.

Once it does, the commission will review the full package to look at whether it will make the market more open and contestable, and whether the company’s plans meet all the individual provisions of the law, according to a person familiar with its plans.”

We’ll see how that goes.

[0] https://archive.is/Hk39s
Microsoft Lays Off 1,900 Staff from Its Video Game Workforce
What issue? I'm referring to a person being fired for reporting too many issues. I'm not talking about the issue in subject.
Ah, I see.

Cambridge, MN to Ely, MN is a bit longer, 203 miles, to be precise. Hence my surprise. https://maps.app.goo.gl/2U99gUwjmxhNjuNF7
Peregrine moon lander limps to lunar distance
how would you open it without struggling to pry it from the suction?
do you construct an index over the superbit signatures to perform approximate search or do you perform exact search?
Big Disease, obviously.
> I don't doubt that running eBay is more complex than it appears, but it's just a web site to buy and sell goods. That's an army of people!

It's interesting that I had the opposite reaction. eBay is a _worldwide_, multi-billion dollar institution. They've been around for about 28 years (~1995) - since the start of it all...

I really thought the number of employees would be higher.

I turned to Wikipedia for some numbers (apple to oranges comparison, I know... but I was curious).

Walmart : 2,300,000 : Jan 2022
Amazon : 1,684,853 : Nov 2023
Target : 440,000 : ??? 2023
Microsoft : 238,000 : ??? 2023
Alphabet : 181,798 : Jun 2023
Best Buy : 90,000 : Jan 2023
B&N : 24,000 : ??? 2019
eBay : 11,600 : Dec 2022

(People really have the audacity to compare eBay to Amazon)

I didn't realize that eBay was so small. Now they lost 1k. I haven't visited eBay in eons but a 9% reduction in their workforce from such an already low number is devastating (to me).

Are we looking at the end of eBay? They may have become staid... old in their thinking.

I constantly see Amazon, for example, open up new territories in other areas. They went from eBooks to general ecommerce to servers to hardware to voice AI to home gadgets. There seems to be nothing this company won't consider. They think like a startup.

eBay may be another Xerox (or Mozilla...) unless they can get their management team thinking outside their comfort zone.
I would classify something that doesn't care what century it's booting into as an unimportant device. If the clock is off by a lot, it still should not boot over network.
> the real change is that WebKit usage will more than half over night.

No it won’t.

The majority of “normal” users aren’t even aware their “chrome” app isn’t real chrome, so why would there be a mass install of a different browser? Some will yep but the mainstream aren’t going to change their habits over this. Your average person isn’t going “damn I wish I could have a different rendering engine on my phone”.

Over a longer period of time we’ll see some interesting changes, but nothing is going to move the needle in the first few months or even first year.
> The CDC recommends against it.

The CDC does not recommend against getting vaccinated for people in their 30s. They don't issue a general recommendation for vaccinating people in their 30s.

That's an extremely important distinction.
Check Frankencerts as well if you're interested in that: https://github.com/sumanj/frankencert
I wonder if this will be submitted as a candidate for the Ig Nobel prize?
Many elaborate scams are not relevant to most people, but only to people with money. Most phishing attacks are not relevant to most people, only to people in some important enough positions, or with access to interesting enough networks.

But the damage of such attacks is still large enough to care.
Asked on a slack and someone mentioned push notifications, which is a good option if your company has an application that someone would want to download. Not always possible for consumer apps (no thanks Chipotle, I don't want your app) but for some cases like banks it makes sense.
thanks for using my statistics lol. also, i created a hackernews account just to post this
It grew out of the Sad Puppy movement a few years ago (https://en.wikipedia.org/wiki/Sad_Puppies#2015_campaign, linked to the year that was most organized and has the best description, but the whole article is worth a read) - a right wing anti-diversity voting campaign the Hugos dealt with from 2013-2017.

Slating was a group of voters organizing to all vote for the same group of works (or slates).
Why? Why should every device that is capable be forced to be capable? This is such a wide held assumption in tech circles. Why is it not good enough that there are devices that allow that while other companies pursue a different business model? I do not see the upside of catering to techie’s entitlement to using every device as they see fit. I certainly see the downside of limiting what business models companies can purse. As as been pointed out it isn[t clear that companies like Nintendo would have been able to make what they have in that regime. And there’s no question that the trajectory of the iPhones would have been different as well.

It is so frustrating to constantly hear that a popular device should be forced to work a different way. The typical reasons given are inevitably tied up with piracy, porn, and techbro condescension revolving around how people should adapt their usage to accommodate their technical superiors. Why can’t people that demand that they should be able to do whatever they want on their device simply use the devices that allow that?
Even if not available upstream, I'd love it if SteamDeck included that patch in kernel+proton. Those are some massive gains, even for their narrow scope.
I'm not the person you should be arguing with. I didn't write the license and I'm not the judge that would have to make the decision. I was explaining why the collision between software freedom and end user security requirements (which is a very real thing!) is seen as a risk to the people shipping and supporting actual hardware.
can OpenSSL use this as well? This would be amazing
Talk to your doctor, be honest about your sexual history and current situation. It made sense for me to get the vaccine, but may not make sense for all, or at least not make sense enough to be approved by your insurance.
These reminds me of the PHP hammer:

https://blog.codinghorror.com/the-php-singularity/
Care to elaborate on this (honestly wild) take?
Wouldn't the air above the water tend to hold the water in the bowl, since emptying the bowl would create a partial vacuum? And would that effect, if it exists, be enough to prevent effective flushing?
Financial services, subscriptions, and other service-based commercial relationships pre-date digitalisation by decades. The main differences for digital products are actually items that Apple are rejecting even today: the fact that national borders are disappearing, and that unregulated everything-as-subscription creates neofeudal relationships. Hopefully we'll address that at some point.
Technically speaking no, because regulation is performed by national data protection authorities whereas the people you're speaking of are some members of the European parliament.