skysight-inc/HackerNews huggingface dataset:
You're way offtopic just because you wanted to be all dumb and tribal. Nobody claimed APFS was better than your favorite filesystem, simmer down.

But also, I wanted to let you know that even in your tribalism you're being stupid. AFPS is not a clone of ZFS. Not even close! It has a fraction of ZFS's features. Why? Because it doesn't need them. Why? Because Apple is tightly focused on client devices, and those do not need the huge list of server-oriented ZFS features, or the overhead that comes with them. And that overhead is considerable! People are often advised that 8GB RAM is the bare minimum for a server running ZFS filesystems, and much much more RAM is desirable for performance. Apple deployed APFS to iPhones with as little as 1GB RAM. ZFS was simply not an option.

APFS is its own thing. Deal with it.

Also, your whole schtick here sucks. Only one FS gets to be "FIRST!" at anything. Other filesystems which implement that feature are not necessarily "clones". To actually make the judgement that cloning occurred, you'd have to get real technical and look at both the algorithms and the on-disk layout, and if you actually did this there is no way in a million years you could come away thinking APFS is anything other than original work.

Ideas? Well duh, people build on other people's ideas all the time. If idea stealing was completely forbidden, once Gutenberg invented the printing press, nobody else could have built them, and where would humanity be now?
How is knowingly doing sim swapping not already a dick move?

Honestly what the OP suggested is simply a sting operation.

Your reaction to it is ... more scary.
Bronze Age Stone Anchors as Material Metaphors
I lived by one growing up and have a friend who works at the same plant now.

We got a subsidy for living within 10 miles. I don't know the details, but basically a "hey sorry if things go wrong" check.

The one thing with nuclear that many people seem to either not be aware of under play is the thermal pollution. The heat generated and pumped into the rivers does some gnarly stuff, including affecting the o2 and ph of the water, drastically changing the ecosystem in the area.
In this case, the Wikipedia page gives better information and examples than the canonical page.
If we could build nuclear plants as quickly or cheaply as renewables, that'd be a sane solution. Right now nobody can do that, which makes nuclear less of an option. Even China is now building vastly more renewables than nuclear, and they're the world's leaders in building nuclear plants.
Many such scams must work, otherwise they wouldn't keep happening.

I suspect CC companies refund the ones who complain, but enough victims of smaller scams never complain and thus it pays off.

What would help is shared liability, and mandatory full refunds for all victims, not just those that come forward. For example, a consumer protection agency or association could prove that a certain company was scamming, and get a court order forcing the payment companies to reverse all transactions associated with that company.

Suddenly, all those "FREE SUBSCRIPTION *turns into a $49/month, 6 month minimum subscription if not cancelled within 7 days" (with the "free" repeated in huge letters and the subscription terms hidden in the finest fine print) scams would become risky enough that the payment providers would no longer be happy to enable them for a small percentage of the loot.
You might enjoy his next book: Reality Switch.
Literate programming is rather distinct from notebook style, though? I can see surface comparisons, but they are very different.

I can see not finding the markup appealing, but that is why you would export for viewing? And, outside of moving some of that to a binary format, I don't know how you could get this level of stuff in band? I suppose you could strictly hide it in view? Would probably still want the markup in data.

None of which is answering what makes it non ergonomic? Basic text with an actual table format is about what I'd hope for it to be. What is off?

Links are different. Everyone seems to redo that idea. Rst files, I still always get wrong on first tries.
>but even if you pay me a lot you're still expected to be nice to me.

If I pay you 'a lot', get back to work and stop fucking moaning.
That doesn't mean an employee can't activate your line on a pSIM and hand it over to a threat actor.
I have no problem with the edits. Artists are allowed to bowdlerize their own works. Consumers should have the choice to edit their own copies to make the same edits - I fully supported "Cleanflicks"[1] attempts to sell edited "Family Friendly" versions of movies - Clearly labeled.

What really scares me is the inability to tell when an edit has been made. We're being gaslight by the media companies, erasing history.

[1]https://en.m.wikipedia.org/wiki/CleanFlicks
It shouldn’t just be termination, it should be jail time. It’s no better than selling a gun to a person you know intends to use it to commit a crime.
And desalination.
Oh no! Who could have known that designating utility companies as the guardians of authentication and identification/KYC would have any downsides?
Hard to do if the FBI were to work with several major banks and getting numbers from their ranges. And obviously the numbers would be single/limited use.
> Except for that one giant issue, passkeys are gonna be great.

Unlike passwords, you can have multiple passkeys associated with an account. Accessing from an iPhone? Use your Apple passkey. From Android? Use your Google passkey. Want cross-platform? Use your 1Password passkey. Etc.
You’re talking about the humane ai pin. That’s different.
You're mixing up the unintended consequences with the intended consequences. Persecuting jews (and others) was an intended consequence and started a lot earlier than WW2. Hitler wanted war, but just to the east - not a world war with the west. He was convinced the French, British and Americans wouldn't care enough to resist him. WW2 was an unintended consequence.
Yeah I never bought into the EC thing much either.

It's supposed to be safer against quantum but it's also a lot less proven.
I feel like the honest solution is to just get over living in NYC and live somewhere else. As someone who lived there in their early 20s... and left. I have zero regrets.
How is this interpreted any other way than power generation is inadequate and temperamental sources are being used to accommodate the inadequacy and this won't work when conditions aren't right... like on a cloudy day?
Software self-organizes as much as cities do.
Edit: beat to it, whoops! Never underestimate the Internet’s drive to post easy corrections >.>

——

Unfortunately, about that:

“(The problem is not with how the key was originally generated; it doesn't matter whether it came from PuTTYgen or somewhere else. What matters is whether it was ever used with PuTTY or Pageant.)”
Let he who is unbiased cast the first stone.
lol relay services have reputation issues, I was talking to someone today about trying to whitelist some vendor this company uses because they use a relay service and it looks sketch as hell when emails show up seeming to pretend to be someone else
>Anyone who has browsed through one of these personal VPN services - or even a DIY VPN from a datacentre IP - for more than about 10 minutes will have experienced the increase in captcha's.

So has anyone behind random CGNAT.
> I think ideally there would be some kind of verification that the customer was indeed present and that their ID had been verified, but I don’t see how you can do that in the US as there aren’t ID cards or similar forms of universally available ID.

Requiring government issued photo ID for identity verification is not at all an uncommon policy for various purposes in the US, and AFAIK all states have universally available ID cards (they are generally not free of charge, but they are universally available.)
Thanks! Have you noticed types of communications that typically can't be solved by improving messaging and require a realtime sync up? If so what are they?
Ask HN: What book have you given as a gift?
Which book have you found so compelling that you've gifted it to others? This could be a technical book, business-related, a self-help guide, or any other genre. I first posed this question eight years ago and received some fantastic responses.

[1] https://news.ycombinator.com/item?id=12243611
Yes – that's why I said "radically different", not "radically innovative".

> I mean jobs himself was open about how shameless they are about copying good ideas.

Why should there be shame in adopting features that have proven themselves useful in other file systems?

I'm glad that there are (to my knowledge) no enforceable software patents on all of these concepts and we can now enjoy them on many systems.
Is it? It'd be a good way to catch people doing something that's seriously damaging to others for personal gain.

I don't think I have much sympathy if you lose your job for doing something this damaging and probably illegal.
Ask HN: Does it cost more to build an iOS app than a web app?
Billionaires have literally committed financial crimes for more money. Pay has very little to do with it.
Hehe, we are also using fancy-pointer in some places :)

We started with mapping to the shm to the same address but soon noticed that it was not a good idea. It works until some application already mapped something to the same address. It's good that you did not went that route.

I hoped you had an epiphany and found a nice solution for the raw-pointer problem without the need to change them and we could borrow that idea :) Replacing the raw-pointer with fancy-pointer is indeed much simpler than replacing the whole logic.

Since the raw-pointer need to be replaced by fancy-pointer, how do you handle STL container? Is there a way to replace the pointer type or some other magic?

Hehe, we have something called 'relative_ptr' which also tracks the segment ID + offset. It is a struct of two uint64_t though. Later on, we needed to condense it to 64 bit to prevent torn writes in our lock-free queue exchange. We went the same route and encoded the segment ID in the upper 16 bits since only 48 bits are used for addressing. It's kind of funny that other devs also converge to similar solutions. We also have something called 'relocatable_ptr'. This one tracks only the offset to itself and is nice to build relocatable structures which can be memcopied as long as the offset points to a place withing the copied memory. It's essentially the 'boost::offset_ptr'.

Btw, when you use jemalloc, do you free the memory from a different process than from which you allocate? We did the same for iceory1 but moved to a submission-queue/completion-queue architecture to reduce complexity in the allocator and free the memory in the same process that did the allocation. With iceoryx2 we also plan to be more dynamic and have ideas to implement multiple allocators with different characteristics. Funnily, jmalloc is also on the table for use-cases where fragmentation is not a big problem. Maybe we can create a common library for shm allocating strategies which can be used for both projects.
More bollards, trees. Drive like a maniac, crash into a bollard.
Oh I see! Was this the main benefit, not the use of fixed point algorithms?
They're out of lives to spend and frankly, they should accept a diplomatic solution. Also, ethically it's insane to just think it's okay to print dollars to shred ukrainians when "winning" just means they still lose land and erase multiple generations.
One Man's Quest to Transform the West Texas Desert
For the attack all 60 signatures need a nonce that is special in this way. If for example only one out of the 60 is short, the attack fails in the lattice reduction step.
The reason is that in the attack, all 60 short nonces "collude" to make up a very special short vector in the lattice, which is much shorter than usual because it is short in all 60 dimensions, not just one out of 500 dimensions. The approximate shortest vector is then obtainable in polynomial time, and this happens to contain the secret key by construction.
As an analogy: Imagine you had a treasure map with 60 steps "go left, go right, go up, go down, go down again" etc. If only one out of 60 instructions where correct, you wouldn't know where the treasure is. All of the instructions need to be correct to get there.
The M.2 NVMe only has 2 lanes of Gen 3 on this board, the other 2 are given to the SATA controller
We are software engineers, and we proudly believe that every problem is a nail to our hammer, all meaningful knowledge is but a slight variation of the computer science concepts we've already mastered.
What recent news are you referring to? Does it put your concerns to rest: https://www.snopes.com/fact-check/california-electric-cars-c...?
Sure, it happens by chance, but the attacker doesn't know when it happens.
I think the evolution happened when Snoop and Martha Stewart started doing shows together.
My bank recently added the feature of removing SMS as an 2FA option - requiring TOTP. Now if they'd only add webauthn, but TOTP is pretty secure against phishing with a browser-integrated password manager (no autofill results in suspicion).
"This is like Juicero" is an excellent takedown.
Funny you say that because I have an appointment with my orthodontist this week to discuss whether or not I can have a permanent retainer so I can stop wearing the plastic one they gave me. If the answer is no, I’ll just forgo the retainer and deal with crooked teeth. I don’t want to sleep with plastic in my mouth every night.
RK3588 has pretty good mainline kernel support
If you are a SaaS provider or bank, and you let password resets happen by SMS, you are a threat to your customers.

Stop doing this.

First, and a no brainer: offer "continue with ____" sign ins (OpenID Connect / OIDC) for users of Google, O365, Apple, to get out of the account creds business for most users.* (See also: passkeys.)

Second, prefer TOTP as the MFA, not SMS.

Third, if you absolutely have to do SMS for some dark pattern "harvest my customers' phones" reason, use it exclusively as a second step, never as an only factor.

* For most customer firms using M365 or Google accounts, if you couple accepting OIDC with a domain validation to the customer's email address, you don't have to do SSO/SAML, since OpenID connect + domain accomplishes roughly similar goals on both sides without the per client company configuration overhead or "SSO tax": https://sso.tax/
That’s a separate issue: the point was that there’s demand at normal price points, less so in the higher-end ranges they targeted. Most of the commonly cited reasons for the low 1-2% margins were things like battery plants where startup costs are high but will not be a problem when they resolve yield issues.
It's just far more likely to get you in trouble if you steal from the more powerful, IMO
Most of all they got lost. My family had an entire spindle for lost DVDs, that we'd set the cases down somewhere and couldn't find where. When we did find those cases, we usually just replaced one DVD on the spindle with another that was misfiled in the discovered case.
Yes, it's encrypted at rest both on the NVME drives as well as on S3.

https://neon.tech/docs/introduction/architecture-overview

There is no system of per-project encryption keys though.
Thanks! Have you noticed types of communications that typically can't be solved by well defined workflows/projects that require a realtime sync up? If so what are they?
It's too expensive because of the cost of endless lawsuits and review process. This is fixable.
https://app.electricitymaps.com/zone/US-CAL-CISO?wind=false&... ("Electricity Maps: CAISO")
No. If you pay me a lot it’s because I’m not easy to replace, but you are. You’ll listen and are expected to be more responsive or I’ll happily leave you in the dust for a more respectful competitor.
But my primary point is most of the other things that lead to a high cost of living in a particular area are all downstream from housing. The high cost of childcare and food in some locales are a direct result of the high cost of housing.

Healthcare (in the US at least) is a whole separate horrible mess.
Surely we are close to the point a fully self-service cell account is possible via secure portal? Choose to eliminate human customer service, expose portal to user with appropriate MFA access controls etc.

I guess what I'm asking for is a cellphone plan with no human customer service, similar to how there is basically no one I can call if I have a problem with a gmail account. Remove the source and the temptation of this attack in one go.

I appreciate not every customer would like or want this, but could be offered to more security conscious users as an option. It's not unheard of to get a discount for pre-paying or enabling auto-payments on cell plans around the world, perhaps you could even get a few bucks off a month for choosing to not have option to call a contact center too.
> We have no idea how models will behave in production until production

They almost sound like...Human?
I remember it being "the future of slideshows" back in 2012, and then the hype died.
The minnow security model is bad at protecting one fish, it's good at protecting 10000.

What would you say is an advantage unique to SMS that would be lost if text messages were switched to another model? I'm asking sincerely. There aren't many people arguing in favor of SMS here, so you seem like the right person to ask.
And lithium extraction from the desalination effluent.
The Magicians, Lev Grossman

A Wizard of Earthsea
Other potential arguments against are (not necessarily strong ones, certainly looking at it in partial hindsight):

- “We are not a party in this conflict” (should we aid every country “willing to spend lives, fighting a defensive war, against an aggressor that invaded their internationally-acknowledged territory”?)

- “Why lose face supporting the loser in this conflict? It will only increase suffering and cost us” (If Zelensky had accepted the offer to be evacuated from Kyiv, I think this would have been a rapid Russian victory)

- “we cannot afford or do not want to get in conflict with the aggressor”

- “our rules of engagement do not allow us to do this” (for example, NATO’s goal explicitly is to resist armed attack of NATO members)
Tesla postpones $25k electric car
Indeed evidence points to the west coast of North America being colonized by boats while glaciers were still covering much of the continent.

And that likely predates this find probably by at least 3-4 thousand years. Still no smoking gun in terms of firm archaeological finds but that's because that coastline is all dozens of feet underwater now.
Or just use a hardware key and enable touch to sign so you have to touch it for every action even when it's unlocked
I think this is one of the major limitations of framing everything in terms of profit. Sometimes a society needs to build services and run them at-cost for it to make sense.
> power generation is inadequate and temperamental sources are being used

> this won't work when conditions aren't right... like on a cloudy day

30 of the last 38 days had 100% renewables covering demand. There was no power outages during the other 8 days.

How is this interpreted in any other way than California renewables provide significant coverage of power demand, and California has the infrastructure for the other moments in time.
The easiest solution would be a two employee requirement with a 3rd remote in corporate office. In smaller stores at least one remote. Using a camera for live video that was installed and inspected by corporate.
Fossil production and consumption is still increasing. Once you get all new capacity coming online to 100% renewables then you have to start replacing existing fossil fuel capacity with renewables. It is a very big hill to climb
IIRC everything they took down was in the Git repo history.
I love how the answer is a defacto yes, and it still says mixed.

They even say so in the first paragraph.
While simultaneously degrading the value of employment to any of these conglomerates.

This is the same reason you want well paid politicians and FBI staff.
Nah, waves of gentrification are just bubble sort in action... j/k
Not having/ wanting access to twatter, did you express anything other than frustration?
Aren't passkeys ready for prime time yet?
For Surgeons, you are conflating and blaming the actions of labor and the actions of capitalists.

I the AMA and AAP driving up is labor driving up costs in its own interest. Same as any other workers association or union working to restrict supply. Capitalists (e.g. hospital owners), have an incentive for lower salaries.

Similarly, its not the owners of salons that pushes things like 1,000 hours of training required for a barber.

Just because it is anti-consumer, doesn't make the person behind it a capitalist. My fundamental point however is independent of the reason for scarcity, but that labor scarcity itself is what drive high salary for those roles, and an oversupply of qualified workers drive down supply in other roles.
This Medium article offers a quick 2-minute exploration of AI's impact on the future and aims to ignite a discussion. How do you see AI shaping the future of work—enhancing jobs or replacing them? What are your thoughts on AI's effects on human cognition: Does it boost your ability to learn and process information, or does it make you less critical and more dependent? What's your overall vision for AI's role in our future?"
it's not a bug; it's a feature!
(2021)

> A voluntary alert advising Californians to conserve energy during a specific time frame was issued in mid-June 2021 to “help balance supply and demand” on the power grid during an extreme heatwave in the region. Unplugging electric vehicles during peak usage times was one recommended measure included in a list of power-saving strategies issued by the California System Operator.
I self host a couple supabase instances.

That said it feels like every other week there's an update that breaks the self hosted compose, looking through the GitHub issue tracker shows a few issues where the suggestion is "oh yeah the latest X image doesn't work, regress the version to get it running"

I really like supabase, but stability on the self hosted images is my biggest gripe with it currently.
I'm a nuclear proponent, but similar arguments can be made for why we cannot solve our woes with nuclear. I'd also suggest scaling battery production is going to be less challenging than scaling nuclear production.
...and uh, make sure they're paid far above minimum wage.
All I can say is: No shit ^

I'm tired of it. SMS as "authentication" needs to be outlawed at this point. I'd vote for whatever candidate wants to sponsor this bill.
It’s fundamentally full of concepts incompatible with capability based security principles, which are provably secure. Access control lists are provably insecure. POSIX resource management is archaic. It’s not possible to define “ownership” clearly on a Unix system.

You could certainly write a Unix abstraction layer on top of seL4, or more commonly treat seL4 as a hypervisor, but you would not be able simply use a Unix interface to interact with seL4 and get all of it’s benefits.

Capability based systems don’t magically carry their desired properties up the abstraction ladder, they have to be maintained and the designer has to be vigilant to avoid introducing ambient authority by using capability based design themselves.

Genode is an example of a layer over seL4 that follows these principles.