skysight-inc/HackerNews huggingface dataset:
"To publish provenance for a package, you must publish the package from a GitHub Actions workflow."

Read as: "We wish to uphold NPM tradition of not allowing the authors of code to sign their own code, but as an alternative we will increase your package trust score if you build your package with a heavily censored, centralized, and proprietary build system owned by Microsoft"

How is it that STILL the only source for signed javascript packages are Debian apt-get repos. NPM and JSR still have dramatically worse JS supply chain security than a -terrible- 30yo package manager which still requires a lot of custom tooling overhead in every project for reproducible builds (docker, apt package hash pinning, apt-archive, etc).

Oh right, because the NPM team was worried even having -optional- support for package signing would scare off people from publishing javascript packages.

https://github.com/npm/npm/pull/4016
Can the Cyber Resilience Act make it illegal to retire?
> I wish there were a "speed/size limit" on the internet so that companies beyond a certain size

I assume you are aware that this is a natural tendency towards economies of scale? It’s not tenable to impose arbitrary limits with no grounded reason.
> will simply point out that there is no genocide, in fact or in law

The ICJ deemed the genocide accusation plausible. It's a well documented case. The report by Francesca Albanese does a great job of explaining it: https://www.ohchr.org/sites/default/files/documents/hrbodies...

It was just reported the discovery of mass graves where IDF hid Palestinian bodies: https://www.theguardian.com/world/2024/apr/23/un-rights-chie...
He certainly ramped up from W Bush, but I think it was more due to timing in technological advancements and reduced overall cost of life (American primarily, others distant second), compared to deployments. This[0] passed just a week after 9/11 (7 years before Obama).

[0] https://en.wikipedia.org/wiki/Authorization_for_Use_of_Milit...
He's working on the Blue Brain Project, apparently. https://en.wikipedia.org/wiki/Blue_Brain_Project
> "relatively sure"
Sorry, but you're flat-out incorrect. See e.g.
https://pnpm.io/motivation

See also my response to your earlier comment; in the npm ecosystem you can choose your package registry, and your package manager/client, not to mention your target runtime. Coupling any of these distinct concepts is not the norm.
I'm not entirely sure why this is being downvoted. The idea of a speed/size limit for the Internet is just absurd.
I think this question could be framed in another, more relevant way: "Is a failed startup responsible to ship security updates for the next 5 years (Article 13, point 8) and provide binaries for every single minor update for the next 10 years (Article 13, point 9) after it failed"?

Hopefully not, but it looks like now you will have to set up an LLC just to try the tiniest business idea. Hopefully closing the LLC (even if it's just one person) would count as cessation of operations described in Article 13, point 23.

Or imagine a startup wants to experiment with another, adjacent product. Doing that introduces enormous risk of having to maintain a sunsetted product for years.

AFAIK none of this applies to SaaS. This act is the nail to the coffin for on-premises software. Everything being a subscription is already bad as it is, they have just completely destroyed the incentive to ship anything the consumer can run on their own machine.
getting paid for blogging is a slippery slope and I doubt that the compensation covers the damage. However - that being said, ghost is of course the perfect medium for this.
Unclear what your conspiracy is, it is a fact you can get around a government ban with a VPN. It just doesn't solve the problem at hand.
Not that I know of! It's just a way to help myself keep the distinction straight mentally. If at the back of my head I always think of attributes as DOM nodes in their own right, I'm much less tempted to infer from a DOM element having a particular attribute to it possessing a particular property, and vice versa.
Umm... this product was acquired into the company via Blue Force. It was pretty much fully designed prior to Anduril getting its hands on it. It sounds like you don't know what you're talking about despite having "worked at the company," which could mean anything.
That’s a great point, but not the point that GP was making. I’d like to learn more about the inherent domain sharing security problem they ranted about.

Edit: This public issue seems to imply they have a way to mark system/admin emails: https://github.com/tutao/tutanota/issues/6708
What are some of the changes to substack that are annoying? The only thing I don't like is that banner to sign up but that's always been there.

I think a lot of people are overthinking it. Substack wants to continue to be a dominant platform for publishing. Sure they want revenue but if you were to ask leadership whether they would trade 50% of traffic for some marginal increase in revenue they would prob say no. Companies aren't naive profit maximizing.

If you never heard of fast food chains and believed all the worse things about free markets you would certainly assume McDonald's charges for ketchup. Its insane of them not to! Leaving money on the table, plus allowing abuse. But they don't because customers would just think it's dick, at least in the US. And you see other trends over the years like giving free cups of water which def loses them revenue. That's all to say companies have economic incentives but not this naive short term view that critics accuse them of
The companies are in various ways run by people.

Unfortunately, it has become accepted that raw greed
is a great ideology for running a business.
Which in turn attracts people who are driven by greed.

These days we have a lot of people leading companies making
bullshit flowery descriptions of their company and how to
run things. but sadly for the most part this is stripped
away when reality sets in.

Especially if the company is beholdent to investors
or shareholders or similar hands behind the scenes who
have their own agendas.

A lot of horrible and inhuman things companies do are explicitly
legal. More so in some countries than in others.

As long as we worship greed, things cannot improve.

The Oxford definition of greed:

"intense and selfish desire for something, especially wealth, power, or food"

Greed by its nature is depriving others of something.
If there is an endless supply of food lets say.
Post scarcity, anyone can eat as much as they want,
a person eating a lot of not displaying selfishness. .
It may be gluttony, but the person is only harming itself.

If there is scarcity of food, and a person is hoarding it
for itself is greed and it means others go hungry.

That is not a hypothetical.

It is the way our society works right now.
Some people, cities, states, nations, have far more than they
could ever eat, while others in different places are starving to death.
Even within the US, a place with a supreme abundance of food,
peole are going hungry
geek-sci-fi-horror book
It isn't hard to correctly convert from camel case, you just tree any sequence of one letter words as a single word. However, without a standard for camel case acronym calculation, when you convert back you won't necessarily get an exact match.

I presume, the ability to get the exact camelCase capitalization you want is why the html spec does the conversion this way: https://html.spec.whatwg.org/multipage/dom.html#dom-dataset-...
Your history knowledge isn't great if his statement seems outrageous to you. Having babies at 16 was far, far more common just 50 years ago in all of the western world.

The answer to "where" this shift happened is "in the entire 'developed' world", and the answer to "when" is of course not a single point of time, but you can observe the graphs to find the derivatives.
Cost of developing new drugs may be lower than industry claims: trial
How about as a motivational aid and means of verifying that your code has compiled: https://squint-cljs.github.io/squint/
>overly permissive towards their own, but also overly critical of those outside of it

aka: tribalism.
yes!
Spam is real and every stranger could be a spammer.
Decentralised trust is the cornerstone of our work. Big topic 25 years ago around the Pagerank patent time. Now we are one of the last remaining academic teams on this topic.

We deployed a decentralised trust algorithm based on the interaction graph to 94k people, see [1]. Theoretical foundations are based on proving that the Harvard impossibility result against Sybil attacks made too strict assumptions, [2]. Leading to trust scores with resilience against fake identities: MeritRank [3]. This is being released in first version in this Tribler version. So hopefully this trust framework will help stop spammers a bit.

[1] https://research.tudelft.nl/files/89353583/1_s2.0_S138912862...
[2] https://pure.tudelft.nl/ws/files/96914542/p1263.pdf
[3] https://arxiv.org/pdf/2207.09950
That, and Poorly Targeted Revenge for 9/11 was not the most inspiring mission. Great Power Competition, however? I can get my blood pumping red, white, and blue for Great Power Competition.
The beauty of engineering cannot be found in a "corporate world". It's in the open source ecosystem, where the innovation happens
Is civil disobedience a moral obligation in a time of climate crisis? Essays
"Whataboutism" isn't a proper counter-argument. Shutting down a few plants in the west is maybe just rearranging deck chairs on the Titanic, and asking about the iceberg and the cold water isn't "whataboutism" in that it doesn't distract from the issue at hand. It rather points to the really important part of the issue. More like a kind of "reverse whataboutism".

Relative emissions and various kinds of cost factors matter a lot. The climate isn't going to improve by stupidly and blindly spending billions, goodwill and precious time on low-yield measures, when less resources could be spent on high-yield measures elsewhere. That is why stuff like banning plastic straws or kitchen gas stoves is actively harmful. Because the "what about those foreign big emitters" argument is very valid.
China is reducing their CO2/kWh at a much faster rate than the US, mostly due to massive solar deployment. They're installing solar at a rate almost 10x the rate that the US is.
If you just want the decentralized torrent search there's also Magnetico [1] and Bitmagnet [2].

Tribler tries to be a whole lot more, including its own tor-like network for anonymity and this latest AI powered search to make it easier to find content you might not know by name

1: https://github.com/boramalper/magnetico

2: https://bitmagnet.io/
I don't know if this makes any difference, but I'm also 43 and experienced some pretty bad shit in my mid to late 30s. Read my other comment: https://news.ycombinator.com/item?id=40156553

At one point, I needed three spine surgeries and two other nerve transplacement surgeries in my left arm, all in the span of 16 months. I was walking with a cane for a few years, a walker at times, and sometimes I couldn't walk at all. My spine surgeon thought I was insane wanting to lift again after all of it, though he said I was only the second stupidest patient he'd had, with the stupidest being a guy who started skydiving again only a month after getting a disc replacement.

I also felt much the same way about decline in the US. This all started happening in 2016 when Trump was elected, and I'm ethnically Mexican. My niece's father is a "dreamer," an undocumented immigrant who was brought here as a child, lived in the US nearly his entire life, but never given citizenship. The climate felt pretty damn hostile to me and my family. I walked in a few protests, entirely peaceful affairs, hobbling down the street with a cane, not saying anything, not even holding a sign, and had MAGA counter-protesters throwing beer bottles at me, the police who were supposed to be escorting us ignoring it and doing nothing.

But hey man, here I am. I stopped watching the news, got off of social media, and got back out there anyway. Life is a whole lot of ups and downs. Being in a down doesn't have to mean that's the end. The same is true in the opposite direction. I'm well aware at this point that my future may be far worse than my present. Bad things can and do happen. But I'll take what I can when I can and cherish the good times when they come. As long as you're still alive and continue trying, more good times should come at some point.
> I also had write access to system directories on the VAX that we used at work, which I never abused, but which in retrospect seems distressingly trusting.

I can totally understand that feeling, but my personal experience is honestly that "protecting the company from malicious employees" by technical means is often just window dressing.

A patient malicious internal actor that is both technically and socially competent can cause much more damage than most companies would ever admit to themselves (but those actors are rare enough to keep modern workplaces running just fine).

In short I think that just giving employees root access to some important company-internal system could work out surprisingly well even for decently-sized companies (not that I'm advocating for that :P).
el.dataset['my-CoolData'] and el.dataset.myCoolData respectively
It's not politics to hold business accountable for the damage they do to their neighbors. That's called appropriately pricing previously externalized harms.

Coal plants in the US are economically dead in the water anyways, their utilization rates are plummetting between renewables and natural gas peakers. Many still operating are subsidized by policitical handouts.

If you want to talk about political decisions, perhaps look at Illinois and Ohio politicians being presecuted for bribery from the power industry for making tax payers pay for uneconomic plants. They are indeed being punished.
> ...on Kagi,....

Did you mean https://www.kaggle.com/?
On the one hand the idiocy and incompetence in these interviews is not unusual for corporate hiring of all kinds. So it's reasonable to be infuriated.

But there's more than a hint of narcissism in the writing. Which is incredibly toxic to work with, because every interaction becomes less about solving problems and more about aggressive assertions of dominance and superiority.

On the upside, if he's as smart as he wants to be, he'll be able to solve his problem.
Maybe so, I seem to recall hearing that one point. However, there's a lot of variables to that (i.e., road surface [pot holes/dips], surface temperature, sand/salt on the surface, tire type, etc). What I can tell you is that even on dry road services, she gets squirrely if I lock them up, so I avoid screeching my tires. I owned several boats (i.e., a large sedan) without ABS, and they've all behaved the same.

This conversation also has me wondering, how many people don't understand ABS (not you). What I'm getting at here is how many people drive in a manner that has them constantly activating their ABS system...
Comments were the only annoying thing on my old site. I used disqus but then that was rather invasive and annoying.

A single SQLite3 table and a post, approve and delete end points would be about 100 lines of code and would cater for 90% of hobby/personal sites

Part of the reason the web is so soulless and drab is that people no longer have the skills to create simple functionality. I almost yearn for the days of PHP
You aren't going to win wars by procuring from second and third rate suppliers just to keep the market diverse. You have to ask for proposals from across the market, but it's natural that suppliers will become centralized given how much money, time, and expertise is required.

The mission of keeping the economy healthy lies upon the Commerce and Justice Departments, whose missions are to manage the economy and keep industries within the confines of the law respectively.
Thanks. Aside, that looks a lot more developer-friendly than many other vendor-provided tools/frameworks I've seen in the past. I hope the others follow suit.
Ghost is intentionally built as a nonprofit with set caps on its growth: https://ghost.org/about/

It makes revenue, largely from its hosted service (which is more akin to WordPress than Substack), but it is intentionally built to not follow the VC model.
If you work at the company, how do you know

IAmTotallyCeo@realcompanydomain.com is real or not?

And if you are an service user, how do you know,

ISwearIAmCustomerService@realcompanydomain.com is real or not?

Everyone else does it properly.

google.com/gmail.com are not mixed.

microsoft.com/(outlook.com,hotmail.com,live.com) are not mixed.

apple.com/icloud.com are not mixed
Personal pet peeve but IMO ‘ID’ is a bad example because it is an abbreviation, not an acronym. I generally recommend ‘Id’ but I’ll admit, it’s like a tabs/spaces debate.

‘UI’ may be a better example :)
Fair point, though that's largely a distinction of means vs. ends. BRM are employee-owned, regardless of the path traversal.
On that note, to me, the current year has been the best year for music for a long time. Simply because of volume and variety.
"the person who fell asleep on the couch of the house he was robbing (this one is common)." This is common? is it addicts nodding off? I'm picturing myself in this situation and imaging my anxiety how could someone possibly fall asleep? actually baffled
The CCP stuff is well understood. The reason this market didn't work is not because Enron was financially shady - per TFA, respectable exchanges have tried something similar with the same lack of success. The reason that it doesn't work is exactly what TFA says: it was hard to commoditize the product. Imagine trading pork belly futures but the typical pig doubled in size every six months.
I'm hearing that dogfighting is a thing of the past because weapons systems operate at large distances anymore. Drones should do (at least?) three things well: dog fight, since they can make decisions in an instant and tolerate higher g-forces than a human can; prevent a human death if they get shot down; and be smaller/lighter/carry more/have greater range because they're not designed around carrying a pilot.

Any ideas on what the driving factors are for this?
D3 Gallery, observable examples without observable runtime
Did you file a dispute with your payment provider and/or small claims court?
They’ve been de-ranked because their website hits all the “SEO optimized” red flags that Google are now downranking for.

Pages like “Outlook vs Tuta Mail” “Gmail vs Tuta mail”, “Yahoo vs Tuta Mail”. All with the same rephrased taking points about their product. Then each of those talking points has its own dedicated page, just saying the same thing over and over again.

Want a better rank? Remove all this SEO crap, leave up the parts customers actually want.
I have not written much JavaScript in my life, but from a user perspective I absolutely hate all the fancy animations and slow transitions. They are super annoying and tiring for me. Just give me the damn website as fast as possible.

And to achieve these cool animations websites have to load a shitton of javascript which makes them even slower.
With volume-based fees you only have one type of user. Costs and benefits are predictable, and it's clear who you're providing the service to (the writers) so the company's goals are better aligned with those of their clients: attract more people to the platform. It's the writer the one tasked with deciding how to monetize those subscribers.

On the other hand, taking revenue off paid subscriptions means they have two types of users, free and paying. Even inside paying customers they'll have classes, as not all subscriptions cost the same. This means that the company has an incentive to implement dark patterns that convert users from free to paid, or from lower tiers to higher tiers, even when that is not in the best interest of the writer.
I like how it manages to be a hybrid of a skeuomorphic and flat interface, which are supposed to be polar opposites on the design spectrum. Very beautiful
I built and sold Frame.io for $1.3B to Adobe
Good question!

To meet modern requirements and make documents dynamic, we need a flexible API and integration with contemporary frameworks. Simple HTML just isn't up to the task. Although this was the approach during the early implementation (https://github.com/zag/js-pod6), it turned out to be a dead end.

thank you
I think the complaint is that Substack is incentivized to make things worse for readers by constantly prompting them to subscribe, encouraging authors to paywall content and insert subscription ads into their articles, etc. They might be tempted to include dark patterns that make it hard to unsubscribe or something, because every paid subscriber is more money for them.

Since Ghost gets paid regardless of who subscribes, readers only feel this pressure if they author decides they want more subscribers. Free and paid subscribers count the same, so there's no temptation to obfuscate anything or make subscription management less straightforward.

That's my interpretation, I don't necessarily agree that one is more sustainable than the other but I think that's what they're talking about.
For the internet companies, and it's not that absurd. Just have tax rate progressive with company revenue and headcount.
You know, I'm not sure why this is always put up as some kind of unreasonable expectation. But society has various expectations about skills needed to survive and thrive in the modern day - while not entirely universal, driving might be one of those expectations.

Would it be crazy to expect one of those skills to be basic computer & sysadmin knowledge? With that, I would expect most people could host a site on, say, GH pages or similar
You claimed it was an issue specific to internal usage?
Titles are getting so weird this days in HN that sometimes I cant understand the content or the articles anymore
I agree that the vast majority of the blockchain companies were "technology looking for a problem," (or at least, technology looking for another problem besides money ledger) but blockchain really was (is) a pretty damn good technology. The most unfortunate part of it is that the only thing it may really stick for is DRM :-(
If the price of energy is too high, you will suffer economically. This will lead to mental health issues. That will lead to suicide and broken homes. That will lead to cycle of poverty and pain across generations.

We’re seeing this play out in children due to Covid lockdowns. Their development was retarded. They started speaking later. They lost functionally three years. Many are pushed through school compounding the issue. At the same time violence at home rose during that time due to stressor.

We need to avoid such policy shortcomings. Administrations at various levels need to think things out. I’m not saying do nothing. I am saying tread lightly while considering many issues.
John Arnold commented in an interview a couple years ago that Enron Online was a massive success. Even equity holders in ICE preferred trading there due lack of liq.