skysight-inc/HackerNews huggingface dataset:
Do people usually store key material without encryption at rest?

You're not writing the naked bytes of the key directly in a file.

Anyway, authentication refers to communication between systems. That's not what this is. Decryption is not authentication (except perhaps of the decrypted plaintext, which is not what we are discussing).
> Decades ago I declared myself too stupid to use shared memory with threading; I have learned to avoid this whenever possible, or abstract away the memory access under a safe layer as soon as possible. One of the greatest decisions of my career.

This probably qualifies you to do shared memory threading, when it is needed. Such as debugging those abstraction layers. Knowing you don't understand it puts you in the right frame of mind to carefully do the work.
Since i hardly ever use a Thinkpad off from the electric grid, being rarely on the road or similar circumstances, there is nothing to contribute about this from my side.

But judging by the general hearsay in this matter, nothing beats those ARM Macs in regard to performance per Watt and battery live. If this angle is considered the most important view point, than there probably is no suitable Thinkpad replacement for such a Mac.

But if anything else is more important than this particular perspective, than Thinkpads are the better option regarding Linux & Windows support, upgradability & repairability, keyboard (Trackpoint!) and I/O options. And they are way cheaper, too.

Try one and compare yourself.
The best and first one would be to not require any framework.
Thank you. This would only work for those companies where they know exactly who their ICP is and not attract time wasters
This idea was used to great effect in Matt Might’s “Parsing with Derivatives” paper [0]! And it featured prominently in the Compilers class he taught at the University of Utah.

[0] https://matt.might.net/papers/might2011derivatives.pdf
I will always prefer "trust the developers" Linux model to "trust the manufacturers" that you have on mobile.

Sandboxing just puts the problem one level higher and doesn't remove it.

Then on the subject of the xz backdoor, nothing is safe from that kind of attack.
You could consider doing a mini hackathon with the kids whereby the aim is to create a board game of some kind. Have the kids design the game on paper or card,then at the end use your cnc mill to create the boards, tiles, player pieces etc. You could then use the world cafe (https://toolbox.hyperisland.com/world-cafe) facilitation method for all the teams to explain their games to each other and recommend improvements. You could even show them how to use chatgpt to take their game ideas and flesh them out at a later stage (tutorial, rules etc.)

This idea would allow them to create something fun which is their own, that they can keep in the classroom and play with. It may also make them think of what other games they can create in the future.
Don't Electron keyboard shortcuts[0] do what you want?

[0] https://pbelay.github.io/electron/tutorial/keyboard-shortcut...
Claro. Thank you for the threads as libraries link; very interesting.
What I remember hearing when I took it was that it is the first introduction to proofs for a lot of people. It's not on the level of some higher-division undergraduate math courses that weed out people who are good at arithmetic vs good at math, but it's the first course that starts to lean in that direction.
Then maybe it should not be accessible in the repository then if there's any doubt about the software.
The best signal to remove TSLA from your portfolio was that it was propped by up low interest rates, meme traders, Musk's over-promises, lack of competition, and US govt subsidies.

If I'd ever bought it, I would've sold it as soon as Musk fully revealed himself to be a con and lunatic (sometime before the purchase of Twitter).

Still holding TSLA until today is either gambling or stupidity.
Track HN: Score and Rank History
You controlled for the volume / depth of water, which for the same mass would be greater when warmer, and the resulting changed interaction with objects ...?
Surprised at the small size of the dataset here. Surely it’s possible to record thousands if not millions of results… has someone been able to do this? Seems like the simplest thing to do here would just be to develop some sort of plus/minus system and not try to overthink things. I work in sports analytics, and mostly in low scoring sports so we don’t get to do that very often.
I always thought rent was utility, and a piece of knowledge or an opinion that didn't pay rent was one that provided little or no practical benefit to you.

The term in its original use described an obsession with a particular group or thing and called it out as pointless. I don't think it would make sense for rent to mean effort in this original sense, nor in the broader way it's used here.
You do understand that even with a fully normal ozone layer, exposure to the sun can indeed cause burns during certain times of the year and especially in hot, tropical places? Are you expecting magic as a definition of fixed, or something that actually applies to reality?

Much of the climate change discourse on this site strays into the absurdly hysterical, but some of it veers even further into deep childish fantasy.
> Look how small and insignificant we are ..... It seems almost nihilistic.

It isn't nihilistic. It is a simple fact.

As an aside, if you have not yet listened to the Hitch Hikers Guide to the Galaxy radio plays (and you should!) you will know this is a major plot device.
> I've on and off looked for a wireguard client which can do something like the captive portal detection on wifi. Ideally it would be an extra line in the config file (like persistentkeepalive), which does a URL pull. Could be checked periodically (like with the keepalive). If it returns "OK", then fine, if it doesn't return then there's a network problem, but if it returns a "Location" header, the client would pop up a browser at that location, allowing for session reauthentication or whatever.

That would be really cool. I hope the author of this will consider it.
Also depends on the trajectory of the late stage startup - especially with a number of the startups that raised during COVID.

A lot of FOMO investors in that time period made some not-so-great bets which lead to unrealistic valuations and then firesales.

Wiz's $80M ARR but $9B valuation def takes the icing on the cake. (Edit: Lacework, not Wiz - was a brainfart)
You seem very confused about how Google Gemini, or any ML-based system for that matter, is trained.

It is a natural consequence of these systems that they output the same biases that go into the input; e.g., the classic translation of "they are a doctor/nurse" in a language with gender-neutral pro/nouns to "he/she is a doctor/nurse" in English. Therefore, if one were to train any such system on the Founding Fathers or Nazi soldiers, it is only natural to expect that the system would output white/German/Eastern European men in each case. Yet Gemini doesn't; instead, Gemini introduces its own bias to erase the one in the input and instead always produce an "equal" cocktail of white/black/asian men/women (which, ironically, is still biased and racist because that only captures the races that woke employees at Google feel are important, but it takes actual intellectual honesty to see one's own biases), regardless of whether that results in historical inaccuracies or downright falsehoods. This is a very intentional bias and dishonesty, not something that can just be shrugged off as "it's hard and takes millions of dollars to train".
For me, it doesn't make sense to have my application's functionality overlap with my window manager. Having two separate methodologies and sets of keysbindings to move and switch between areas of the screen depending on what happens to be in those areas is arbitrary and inconsistent. The way I switch between Firefox and LibreOffice should be the same as the way I switch between two text editing windows/frames. I therefore prefer to use frames rather than windows in Emacs, and let my WM handle them. For the same reason I've never seen the appeal of tmux pane management. If I used a WM, Emacs windows management, and tmux panes, I'd need three different ways to manage what are essentially all the same concept.
> You can do okay, but on average it's not better than getting Meta RSUs or equivalent

Most people aren't getting hired by Meta, and compensation packages at late stage companies will try to be competitive with peers.

That said, late stage options might not always be a good bet. You as an employee need to do due diligence and ensure their meeting their metrics.
Meagher's octree system notably used only integer arithmetic with no integer multiplication/division:

> Efficient (linear time) algorithms have been developed for the Boolean operations (union, intersection and difference), geometric operations (translation, scaling and rotation), N-dimensional interference detection, and display from any point in space with hidden surfaces removed. The algorithms require neither floating-point operations, integer multiplications, nor integer divisions.

https://doi.org/10.1016/0146-664X(82)90104-6

This facilitated creation of fast, custom VLSI graphics acceleration hardware for octree representation.
You some controls: for example, the same mass/second of water - your water pressure might differ between hot and cold sources.
Corporate America Never Quit Forced Labor
Any gains made by exposing VW were immediately cancelled out by Cummins rolling coal.
Is it AI
Siberia is infamous for them too.
Wow, never knew about it! Can you please give a few examples?
This is too one size fits all. It's either "every package is untrusted" so the repo is useless, or it's "there's too many people to keep track of the trust level of" which is insecure.

It's much harder to make a trust bet like that than, in principle, to make a local decision like "Hmm, why is the xz tool requesting access to the ssh port? That doesn't seem right"
That assumes a company that has dedicated QA staff. Most these days don't, and the above comment discusses engineers doing their own QA.
It’s actually comforting to non-believers in a way that religion is to believers. Except it has the benefit of being obviously true.

https://www.oliverburkeman.com/nobigdeal
Someone should make that. A 2v2 chess variant.
Note the punch line at the end:

> Was it worth it?

> The marketplace seems to have answered this question: not at current prices. See [Lipner15].

Note that, unlike our discussion below, this is about the cost of implementing B2 security in an OS, not about the sale price of the OS (though the two are related).

Or perhaps I should say, the sale price of the OS is forced so high by the cost of B2 that the market isn't interested in the OS, but this would be true whether Unix was free or not.
Even your idea of living on red dwarf suffers from the same problem that Dyson spheres and really the whole kardishev scale suffers from: They’re bad 1950s sci-fi. Just because you can do the math, doesn’t mean they exist.

Not only do you have to have the technology to do any of these these things (which is not a given), but somehow you have to have a civilization dedicated to doing it over the course of thousands of years.

No. Just no. It’s just fantasy.

Case in point: We know there are no type 3 civilizations anywhere in the observable universe. V
How Far Can a Tesla Cybertruck Tow? We Compare It to a Diesel Truck [video]
Saving web searches: 144 MIPS x 256 processors = 36864 raw MIPS, or about twice as fast as an Xbox 360, or fast as up to mid-90s supercomputer, if we utterly completely ignore obvious node interconnect problem.
> What moonchild meant

To spell it out: I know very well what moonchild meant, and am no stranger to lockless algorithm design or memory ordering semantics. It was a turn of phrase riffing on the point that "memory ordering semantics are APIs" and thus should have been designed with an eye toward clarity and comprehension for the working programmers who need to use them.

Acquire/release was intended to make the job of a compiler author easier, by trying to home in on the differences between hardware that might be reasonably abstracted as a single API. And I'm saying that's a bad trade, because the compiler nerds are doing just fine and what the dumb jocks in the trenches want is read and write barriers.
Flatpack etc sandbox is shoehorned into a system that doesn't expect it.

You can't expect apps to migrate to something that a) promises to support the existing model, and b) also support the existing model.

What these app package formats should be doing is coming up with a new model and then asking people to support their model as if it were a new platform.

Similar to how thunderbird supports Linux Mac and windows.

That might actually result in both an access model that makes sense to end users and actually creates an app package formats that isn't full of trade offs and work arounds.
Mentioning that Yoshitaka Amano worked on it might also be a draw for some people.
"Skill can be bought" means that people buy cheats left and right and that the game is infested with cheats to a point where it's unplayable.

Even pro players complain about the state it's in and a lot of streamers left the game until this is fixed. Pretty similar to the situation in Tarkov.

You want a source? A simple search for cs2 cheating on Youtube should suffice.
Thank you for this. Bookmarking
In many ways, not really.

Since I don't live near US Cellular, it's just a TMobile MVNO now.

Back when TMobile and Sprint were separate, it did it kind of, with weird software. If your phone didn't work with their weird software, it was just TMobile.

I'd like a SIM that will legitimately roam to say TMobile and Verizon, or either of those and ATT, or all three would be great. This is possible, some foreign sims have roaming with multiple US carriers... but I haven't seen it for a US targetted sim.
The cheating is so bad that pros complain and streamers leave the game until it's fixed. Just search for it on youtube and watch the videos.
In principle every notebook is a DAG, since the cells are evaluated in a certain order. You could even infer the DAG from Jupyter notebooks, at least when the execution number is stored (the In[...] part).

There is a lot of value in imposing restrictions on the cells (like no reallocation of global variables) to be able to infer the DAG more directly like they do here (or Pluto.jl does). It is simpler, it can serve a dual purpose by being a normal runnable python/Julia/whatever program. Another advantage that I didn't see mentioned in TFA is parallelism. There is some interesting potential there I think.
"Capitalism is about self-expression" is a garbage statement that made me wish I hadn't read that far into the article.
Isn't the sun's name sol?
If this was the first time they were packaging keepassxc, this would be fine. If they instead chose to remove the keepassxc package and provide two new packages, keepassxc-minimal and keepassxc-full, it would be fine. It's the fact that the main package that people already have installed will no longer have functionality that many users depend on, breaking their configurations after an update.
The doomsayers waiting for the economy to crash
> A third place is difficult to support because people don’t want to go there to socialize with people they don’t know.

People prefer to socialize with those they know, but you have to start somewhere. That's where the third place is an effective tool and the neighbourhood pub is, indeed, especially great for that because, if all else fails, the bartender will talk to you. And the bartender will introduce you to other patrons and get the conversation started. That's their job!

However, it is clear that the neighbourhood pub is also a dying breed. I expect in large part because parents are now hyper focused on the activities of their kids and using that time with other parents as their own social life. Additionally, young adults are now going to college, which brings its own social venues. That leaves a small gap between college and having kids, and maybe a small gap as one enters into retirement (although I would argue that this group is still fairly well served in the third place arena), along with a small segment of the population who remain childless, which doesn't leave all that many people to even support a third place realistically. These days there are an endless number of places to socialize, creating much fragmentation. A third place struggles when you find such fragmentation. It turns out that third places are more appealing when one third place has 20 people in it rather than when 20 third places each have one person inside.

> People talk when they are given the chance to talk in a low stakes environment.

Yes, you captured my point well. Cars don't change this. More often than not they will get you to that low stakes environment.

> It took an extremely rare natural event to get you to stop your car and by golly, look, people talked!

The natural event may have been somewhat rare (although not all that rare around here), but stopping the car wasn't particularly rare. Unless I'm on a determined mission where nobody is getting in my way, ventures out in the car usually lead to meeting other people. And when I'm that determined, I'm not stopping while out walking either, so it's not the car that is significant.
Uh... No.

We are always going to have much greater confidence in the security of the base OS than the security of random apps in the ecosystem.

You named some great applications that have seen a lot of scrutiny... But what if someone installs a malicious gimp plugin, or wants to use a closed source app like discord? Your argument falls apart quickly.
Local privilege escalation.
I lead a makerspace at my kids' elementary school. We do no coding or modern making, or whatever it is adult nerds like to play with. Mostly because this age group can't manage it, especially in 40 minute session, and I'm competing with a Lego corner. Mostly we try to get new views on the natural world and get exposed to different tools.

This week, we managed to bang out some bee houses of some scrap lumber I had. We learned about why mason bees are great, and got to use power tools in the library. They had so much fun and we were goal-oriented, so that even the troublemakers among them were helpful.

The most engaging activity (especially for younger grades) was a bunch of light bulbs, batteries and switches, all mounted on wood tiles and connected with alligator clips. So simple but let kids experiment with making huge circuits together, debug unexpected behavior (why did it turn off when the switch closed?), and learn about conductors that could substitute for wire.

About the most complicated thing we've done is paper circuits (with copper tape), lighting up LED skull eyes for a Día de los Muertos card. The debugging was hard, and a lot of kids would've benefitted from doing the light bulb activity first with an eye toward this.

My "worst" activity was digging soil samples (fun) and seeing how the layers separated in water after days to settle in order to classify the soil type (boring, pointless). Luckily I also brought our vermicomposter, and everyone had a great time playing with worms.

Another parent did an ambitious sewing project, which took 2-3 sessions to complete but was great to get kids to get exposed to sewing machines, and they had a gift for a parent.

--

Yes, pick the topics that you're passionate about because your visible enthusiasm is critical to engagement, but don't make it about, say, 3D printing because you want to use your printer (you'll just end up doing a lot of work for indifferent kids). Keep it simple and learn from what the kids respond to.
For some reasons I can't use earplugs much :/.
I’d rather read about why
are russians bad. Or more like why are they are playing the way it is. When you need to eco > they rush B. When you need
to save the round >
they go back 1v3. But that not just in CS, they do the same in Dota too. They just play and see these games
differently.
The fact that GTK3 is considered the new thing still in alpha is a red flag for me.
I regard consciousness as fundamental. I regard matter as derivative from consciousness. We cannot get behind consciousness. Everything that we talk about, everything that we regard as existing, postulates consciousness.

- Max Planck
Why on earth was this flagged? This is most certainly a "hack" and this is "hacker news"
What we need is something orthogonal to package managers, something like Firejail or bwrap.

In other words, sandboxing based on permissions, without loosing the advantages of having fine-grained control over dependencies.

Flatpak is a step forward in terms of sandboxing, but a step back in terms of dependency control.
https://archive.is/EW5JN
How can that be when this is their first release?
I Competed in My First Hackathon as a Non Coder
I should add that there wasn't an interview process on an individual level, but I believe they did some behind the scenes evaluation of who they could keep, and ironically one of the HR people was the first to get cut, before the deal was done
Most of your knowledge is implicit.
The average comprehension is grade school level
> The same argument holds for "AI" too. We don't understand a damn thing about neural networks.

Yes, which is why the current explosion in practical application isn’t very interesting.

> we don't care to understand them as long as it's irrelevant to exploiting them.

For some definition of “we”, I’m sure that’s true. We don’t need to understand things to make practical use of them. Giant Cathedrals were built without science and mathematics. Still, once we do have the science and mathematics, generally exponential advancement results.
Amazing. I can't really wrap my head around the idea of a chain pub.
I've got church, teach a few times a week, schedule regular lunches and dinners.

We thrive when we are doing well in our roles. Learn your role. Execute well.
Those experiences wouldn't have happened if the autistic people were medicated to neurotypical or neurotypical people were more accepting of autistic people. And many autistic people would reject being medicated to neurotypical despite those experiences.
Clearly no-one read Day of the Triffids.

Don't look.
Great visualization, though (ironically, as one of the first Chrome experiments) the music no longer works on Chrome by default (go to site settings > sound and set it to "Allow" to hear it), and it is somewhat outdated now (for example, it states that no exoplanets have been discovered orbiting Proxima Centauri (and that the 'proposed' JWST is required to find these planets)).
Yes, absolutely. There are several StumpWM modules providing integration with Emacs. You can also roll your own functions.
You can look at it the other way. Compared to qubits, were fucking gods.
Mark Zuckerberg's Personal AI – Jarvis (2016) [video]
> the skill level is so high that you basically need tools to tell you your mistakes. Otherwise you're in for a truckload of frustration as a new player.

The onboarding experience is also non-existent. I've played a few hours of CS and stopped because I couldn't figure out what was going on and I wasn't invested enough to find out. When I say I couldn't figure out what was going on I don't mean I couldn't understand the angles I should take or other tactical things like that, but, once I went beyond quick play where I just shoot everyone, what team I was on and what I was actually trying to do.
Started with BCPL on CP/M when I couldn’t get a C compiler.