skysight-inc/HackerNews huggingface dataset:
> Hi Fox, i'm not aware of any other usages on the platform i'm familiar with sorry, maybe a gap in my understanding.

The TPM as a device is completely democratized and accessible by the normal user.

You can use it for platform attestation (which is this post is trying to point out might be broken in some cases), but it also works as a "discount" smartcard where you can seal data and shield keys.

Two examples here which I have written:

A file encryption utility for `age` that shields the keys in the TPM.

https://github.com/Foxboron/age-plugin-tpm

`ssh-tpm-agent` is an `ssh-agent` implementation that enables you to create TPM shielded keys and does signing operation on the TPM.

https://github.com/Foxboron/ssh-tpm-agent

Conceptually both of these tools can also use PCR policy sealing as a form of platform attestation, but I have not implemented that yet as it's a bit hard to do this in a user friendly way UX wise.

As noted by others, you can also do disk encryption. `systemd-cryptsetup` does this on Linux.

https://www.freedesktop.org/software/systemd/man/latest/syst...

> Afaik, if you want access to a chip like TPM, the OS will need to cooperate as such I/O access or MMIO or however it's accessed, will be privileged instructions likely.

Not really? `/dev/tpmrm0` is a TPM resource manager for Linux that is accessible by being part of the `tss` group.

> I'd find it somewhat logical an OS or loader component starts verification, and then components upwards in the chain are well, chained together via verification, taking away the need to access the TPM after the initial modules are verified.

This is only one of several use-cases of a TPM :)

This is also orthogonal of whether or not Secure Boot is part of the chain, depending on the operating system.
Strong point I should have made the US/western nature of my comment far more clear.

To expand on what you're saying I think many of people who have lived through those wars would look at our "western" complaints of stress and anxiety as abject nonsense. And thats not to be dismissive of what people "feel" were built in to be hyper on guard based on history.

I have a corollary to this: a lot of people in tech, who are great at their shitty office job, they all have some terrible job in their path that they will happily tell you they never want to go back to.
I understand your perspective, but I believe it's important to recognize the complex role inequality plays in modern society.

While it's true that overall living conditions have improved, with more access to amenities like plumbing and clean water, this doesn't mean inequality has lost its relevance. Inequality still has a profound impact on mental health, social cohesion, and overall well-being.

Many people in developed countries live in makeshift housing without basic necessities like electricity, plumbing, and clean water. This indicates that not everyone benefits equally from societal advancements, and calling these amenities "privileges" overlooks their fundamental importance.

Furthermore, while obesity is indeed a prevalent issue among the poor today, it often results from limited access to healthy food options, which is another manifestation of inequality. You also mentioned that inequality contributes to obesity, so dismissing it as a scapegoat contradicts this observation.

The poor of the past might view our access to "stuff" as utopian, but they wouldn't likely see the lives of today's poor in the same light. Improved material conditions don't necessarily translate to improved quality of life, especially when disparities in wealth and opportunity persist. Quality of life involves more than just material wealth; it encompasses family, community, purpose, and other non-material aspects. Inequality affects all these dimensions, making it a crucial issue to address.
HOL is a classical (i.e. non-constructive) logic based on simple type theory, and that makes proof automation much easier. Adapting the kind of proof automation that classical logic with simple types enables to a Curry-Howard based prover with dependent types (like Lean, Coq or Adga) is not a fully solved problem.

For industrial-scale program verification, proof automation is everything! Nothing else matters.

I conjecture, but don't know, that Amazon write their HOL-based prover from scratch, to take into account their cloud resources. So it might well be the most modern prover of all.

Note that Leonardo de Moura, who initiated Lean, is now at AWS. To add even more complications, AWS does also use Lean, e.g. https://github.com/leanprover/SampCert
That sounds very tiring. It's almost as though you described the experience of a normal person. I'm fairly sure you are supposed to struggle out of this weak mindset with intention, just like everybody else does.
Rust does not give you protection against speculative execution attacks. Entirely different beast than memory safety errors.
Awesome, time to submit a ticket to WebKit to auto-adjust HN's default text size to 16px like everybody else instead of 12px. It made sense in 2007 when your resolution was 1024x768.
Theres' strong disagreement on that at Quora and other sites:

https://www.quora.com/A-few-years-ago-we-were-told-how-bad-p...

Alan Locklear, recycler, writes:

Plastic bags began to replace paper bags in the 1980s and that change had nothing to do with “someone” telling us “how bad paper products were for the environment”. Plastic bags replaced paper bags because they were more profitable to stores and fast food restaurants — period.

Environmentalists NEVER wanted (or petitioned for or agitated for or lobbied for) replacing ANYTHING with plastic!

I have been an environmental activist since 1969, and, while I can recall lots of people over the years who wanted our economy’s wasteful use of paper to be reduced, NOBODY EVER THOUGHT OR SAID OR WROTE THAT PLASTIC WOULD BE A BETTER REPLACEMENT FOR PAPER IN GENERAL CONSUMER USE.

What we did want was reduction in wasteful uses of paper, and more recycling of waste paper. We certainly wanted many changes to the world’s timber harvest practices, but we were under no illusions that getting rid of sustainably-harvested Kraft paper grocery bags would improve those practices.

I myself have zero recollection of school lectures on paper bad, plastic good.
Interesting the pointing out of religious authorities. All authorities blend these, so this distinction isn't really that clear.

A common example is a speed limit. It aught to be an engineered number, but can be determined politically. Regardless, the authority enforcement is the same regardless of the basis of the law.

It's more like there's two different basis for laws and only one body enforcing both laws, which makes it awkward.
Besides not being able to do zero copy on ZFS (yet), it probably also have to do with them not using RAID for content, and single drive ZFS doesn't make much sense in that scenario.

Single drive ZFS brings snapshots and COW, as well as bitrot detection, but for Netflix OCAs, snapshots are not used, and it's mostly read-only content, so not much use for COW, and bitrot is less of a problem with media. Yes, you may get a corrupt pixel every now and then (assuming it's not caught by the codec), but the media will be reseeded again every n days, so the problem will solve itself.

I assume they have ample redundancy in the rest of the CDN, so if a drive fails, they can simply redirect traffic to the next nearest mirror, and when a drive is eventually replaced, it will be seeded again by normal content seeding.
The fact that elsevier and other similar entities ar allowed to continue to exist, i.e. that people are actually willing to give these parasites money needs to be analyzed so a root cause can be found and the dreaded thing can be put to pasture for good.

Leads:

- academics are ultimately lazy and do not care to fix the system

- academics are so self-engrossed with their research that, like much of what they do that isn't directly pertaining to their work, the quality of what they do is horrible.

- there exist a system of incentives that feed something back to people helping perpetuate such a parasitic system.

Other ideas?
Calling yourself an engineer doesn’t make you one.
> How can this situation be changed? First, psychiatry must reduce medicalization as a commitment to doing no harm, by engaging in the multidimensional construction of alternatives to the conventional paradigm, which despite being dominant, is ineffective in the face of the complex challenges that involve mental care, such as stigma, social exclusion, and violation of rights.

I don't want to be flippant, especially not when discussing mental health. Still, how can you look at this sentence and think "yep, that's a good way to communicate my message"?
It is sad to see that IEEE is becoming the discovery channel of engineering.
Drawing compasses are precision instruments, quite complex to manufacture and adjust, which involved hundreds of tiny design and manufacturing improvements over several centuries of expert craftsmanship (practical knowledge now lost, except some textual summaries in 19th century books, 20th century catalogs, and scattered patents). You can't buy anything made today that is anywhere close to the quality of professional compasses from the late 19th century, and quite likely never will be able to again in the future.

> It is sterile.

A good Photoshop operator (or with more time and effort and less capability, a good dye transfer printer with a working darkroom, starting from the most "sterile" negative you can imagine) will blow any film stock you like totally out of the water.

You like having a large company's engineers force their creative preferences about color interpretation onto your art. Other artists prefer to deliberately make those choices for themselves.

Neither workflow is inherently better or worse, but some approaches are better suited to some personalities and artistic goals.
8 year old kids gets told they're wrong and their elder is right because their elder is older isn't a convincing argument to an 8 year old. if the elder is claiming 1+1=3, saying they're right because they're an elder, and elder deserves respect, the lesson is going to translate into elders are idiots and as soon as they 8 year old gets their own job and a place, they're not going to respect anyone in a position of authority over them because their assumption is that that is how the rest of the world works - that people in positions of authority are only ever "right". That is, they're automatically wrong or lying about something. Sometimes they are! But the lesson that 8 year old kid learned is an unhealthy distrust of authority rather than a healthy distrust of authority.
I actually prefer Perl's stability. And, anyway, it's a dynamic language: you can create stuff without requiring changes to the compiler.

For a long time I worked with Java and it became very tiresome to have to learn a new framework for every new job. Java was my main tool between versions 1.02 and 1.6.
Yeah, I never understood why some of the cogestion pricing revenue wasn't shared with NJ.
Congrats Benjie on getting this published in IEEE Spectrum!
Oh, that's no bother at all: I try to keep an open mind, while expecting putative explanations of any sort to actually make some progress on explaining something. As far as I know, it's not a named ~ideology of any sort, just a reasonable response to incomplete knowledge.

As it would be neither informative nor fair to speculate about what's on your mind, this isn't giving me any hint as to what's bothering you, so would you now care to answer my question?
Quit Being a Cynic at Work. It's Holding You Back
There's a lot more to replacing traditional voting practices than first meets the eye.

https://m.youtube.com/watch?v=w3_0x6oaDmI&pp=ygUaZWxlY3Ryb25...

https://m.youtube.com/watch?v=LkH2r-sNjQs&pp=ygUaZWxlY3Ryb25...
They have nearly zero incentive to do better. Most PC users simply do not care. They are not really changing the world either, just gaming or plopping figures into Excel.
O-type blood donors needed after London cyber-attack
Earlier this week https://news.ycombinator.com/item?id=40604349 in WashingtonPost https://archive.is/DtA6T
Using an unsafe language is a design flaw
Allow me to rephrase a bit: a new world where Doctors are very scarce and busy, because they work in an assembly lines of meat-based robot force people with some conditions to act autonomously and others to do for curiosity, "wellness" and so on. This is a new market: on one side expensive and assembly-line improperly called medicine just because of legacy and marketing reasons, on the other side the opportunity to allow people badly injuring themselves not knowing biology enough to understand.

The sole positive aspect I see is the mere fact that some devices used to be very expensive so only present in some labs, while today almost anyone can own one, allowing for "home testing" of many thing or doctor's cabinet tested without much traveling and bureaucracy. That's good, but can't replace the destruction of Medicine for the sake of commerce.
Whitespaces do not alter the meaning.

Whitespaces do not alter the meaning.

White spaces do not alter them

eaning.

M e a n i n g
Addiction is not the internet alone, it’s having internet in the pocket and always available. Setting up times in the day to access it through a computer is way different.
Buddy idk what to tell you. One day ai came home from work, nothing could connect out, all my devices had ipv6 addresses and my router (which I rent from my ISP) was set such that every 4/6 option was 6. I don't know why you think the poorly regulated almost-monopolies can't do whatever they want to the router they have remote access to.
> Is this possible?

Yes, always.

More generally, tampering is always possible, regardless of voting system. (Yes, even on a blockchain.) The best-practice mitigation of this risk is a physical ballot that can be re-counted. Electronic voting sacrifices this in exchange for speed.

That said, India is a big democracy. And despite redoubtable paper ballots, we still have an idiot constituency in America willing to buy any lie that makes their sports team or political party the “real” winner.
In addition to the missing newlines, the inline assembly code is also not correctly marking that it clobbers memory.

It is probably not an issue for the entry point function, but the lack of it could mean the compiler is allowed to do incorrect optimizations.
I actually posted this because I found the carpentry bit fascinating.
A sunset is when the sun goes below the horizon, so I'm not sure about the idea of an eclipse causing "the sun to set" on the empire.
> Eksevier must die,

"Why ? They pay us good." Your local politician. /s
Yes.

A lot of proof automation is based on SAT/SMT solvers like Z3, which are based on classical logic.
Interesting. In my locale, all info about voting is sent via snail mail, never e-mail.
How to Check Which JavaScript Runtime Is Running Your Code
> LLMs have nothing to gain

I thought we killed all the models that refused to bullshit, so only the ones that sound impressive remain.
Sadly the publication metric is sick and made the overwhelming majority of published scientific papers, I am sadly a co-author of a paper that I know for a fact can't be reproduced because the underlying data has been stressed enough to show what the main writer wanted to show.

And it's not even the authors fault the system is like that. Research isn't just about saying "hey we found this works", but also about "we wasted 3 years, it doesn't work sadly". Yet, the second option does not lead to the same impact, because if something doesn't work it's not going to be reproduced and thus quoted.
RIP ripped ebooks
Steganography would be trickier, but not impossible.
Bartender 5 not safe any more?
The bug here isn't really the fact that GCC inline assembly is a string replacement macro language, which surprises a lot of people coming from other syntax like MSVC.

It's that the author wrote what looks to be a 20+ instruction entry and setup function and never once tried to verify it. You never write inline assembly without reading the resulting disassembly. It's like rule 0...
Chiswick High Rd is not included.
They're not showing their breasts for you to look at. They're taking clothes off because it's hot.
Lazy attitude towards proper role management and poor engineering practices. More common in small companies or small teams managing their own service (db and app)

Really all you need is logging and potentially temporary read access to the db if you need some info that you can't derive from the logs.
> Ubuntu out of the box is not a great experience.

I personally went with Linux Mint, because it doesn't try to push snaps and honestly the Cinnamon desktop is lovely and gets out of the way, a bit like XFCE but in some ways more polished: https://www.linuxmint.com/

It's nice that I don't even need custom scripts, it's pretty good out of the box. Of course, it's not like default Ubuntu would be unusable or anything like that, either, just personal preference.

That said, contrary to popular opinion, I actually liked Ubuntu a lot, back when it had the Unity desktop, it felt better to me than GNOME, but maybe that's just me. I guess there are projects like https://ubuntuunity.org/ out there still, but using something that's not popular nowadays seems like it might lead to issues down the road.

For servers, Ubuntu LTS is fine as is.
> people still think they are single issue

Changing the name of the party would help a great deal IMO
Most likely it uses different libraries for PDF print, like the browser one is different than the system one.
The Moorgate to Farringdon parkour run video is fake. There are some weird cuts but the video description says "It's fake btw" ;D
Sometimes being outside easy nuclear strike capabilities of the superpowers is a good on its own. Plus lot less annoying environmentalists and I imagine plentiful fissile material.
"Open Access" includes formats that shift the cost from the readers to the authors:
https://en.wikipedia.org/wiki/Article_processing_charge

So the publisher still gets a significant amount of money, albeit often paid by the institution of the author.
From the locksmithing world, I thought of System Of Progression at first

Before, of course, realizing no way someone on HN would be talking about obscure locksmith masterkey terminology
Bargaining chip as in "We'll raze the last hope for humanity unless you yield concession X".
I know what you mean, but if you read the context, it is unnoticed.
> you could potentially move polluting industry there

The reason industry pollutes is that they either DGAF, or it's part of the process. Those industries either won't care to move to space in the first place, or the re-design of the whole process would have been better spent improving the process on earth.
My first passport (1970s, before that I traveled on my mum’s passport) was stamped “BRITISH SUBJECT”, though Australia was a supposedly sovereign nation. At least the UK had stopped nuking Australia by then.
You can always have cameras outside and fake windows with displays inside :)

Plus if you're flying/driving drones with cameras outside of that tunnel it would also help to keep you on a more normal circadian rhythm.
Holistic perspective should always be taken into consideration. Yet, redefining mental health problems is another topic they have to master.
Automate Your Job Hunt with AI
Good job Apple!
Arc Browser does not have a public monetization plan. The Browser Company is a for-profit company, and they'll need to give something to their investors. Their market share now is abysmal to make a meaningful amount of profit from just selling user data.

At some point, they will need to introduce some kind of subscription for some of their browser features - I assume that current Arc Max is going to be part of it. This would lead to making new features available only to the paying users.

I have really pessimistic views on software development (for-profit or not) in general now, so I'd be really happy to be wrong here.
Depending on definition of empire I guess you could say that Britain's greatest colony, North America, is still an empire.

It's cultural exports and influences are felt all over the world and to date, all other countries still need its consideration, approval and/ or support in their own foreign policies, and that includes Britain.
It's a joke, bro.
There is also the Timfold project [1], which continues OptaPlanner and offers ongoing support and further innovation [2]. You can find the documentation here [3] and some helpful examples here [4].

[1] - https://timefold.ai/
[2] - https://timefold.ai/blog/red-hat-optaplanner-end-of-life-not...
[3] - https://docs.timefold.ai/timefold-solver/latest/quickstart/o...
[4] - https://github.com/TimefoldAI/timefold-quickstarts/
Printing colored images! What does a single issue of their printed editions cost? Hundreds of dollars? The color printing cost is a rounding error.
Blah blah, that's just word play. I am always amazed by the defense that Apple apologists come up.
Really? Throw a CEO in jail? This is just as crazy as the whole throw the supervisor in jail if the worker dies mantra in construction.

#1 users are responsible to look after their privacy. If you are using applications that don’t allow this - you need to reject the use of those applications.

#2 this needs to start happening in mass numbers. People need to rise up against these crazy corporate tech companies and their bull
Yes, I bite the bullet on the god of the gaps when it comes to the origin of life.
> The problem with Venus cloud cities is: what's the purpose?

Cloud computing, duh. We need big clouds and big cloud cities for that.
What is "the work"?
In other words: water is wet.

I kinda get the impression, the author of the original articles has little understanding of what they are actually talking about. The numbers of concerning extensions they found is rather low, and their claims of concern are very questionable, especially when they bring s** like a "reverse shell" to a local IP as a security-problem. My impression is, they heard about problems, poked around and found things they do not understand and then claim problems. This is just poor rage bait for the alarmist mindset than real meat.
> You need industry for every single part used to build colony - that is replace everything you rely on.

That's actually much, much harder than it sounds, and this is the key part that everyone just hand-waves away.

On Earth, it is already unaffordable to move to many places for even relatively rich westerners. As in, your own personal economic output is unable to pay for the cost of moving the materials there, setting up a habitable abode, and then keeping you alive until the age of retirement. That's with normal-ish housing in normal-ish conditions.

We can only afford our current lifestyles with the "cheat codes on": free oxygen, free water, free temperature control, and free energy growing out of the sky[1].

On Mars, you have two compounding challenges:

1) Every aspect of staying alive is harder. Housing has to be air-tight. Instead of a mere air conditioner, you need a life support system. Instead of just food, air and water also need to be made. Space suits are needed to go outside. Etc...

2) Productivity itself is lower. The supply chain is tiny, raw materials are much harder obtain, cooling water and air is not available in bulk, and so on. Just think about how dependent modern technology is on plastics, which are made from oil. Mars has no oil!

The combination of both lower productivity multiplied by higher cost of living and ridiculous supply-chain issues for the first century (or more!) means that self-sustainability will be out of reach well past all of our lifetimes.

[1] Trees are made of air and hence grow out of the sky. Trees make wood that we can use for energy. https://www.lawctopus.com/do-trees-grow-out-of-air-richard-f...
Well, "pretty ok" is not a great bar coming from the mindstorms system. But even if you exclude that entire category, the Technic series overall is not the same as it used to be.