skysight-inc/HackerNews huggingface dataset:
Of course, we are on what, 30 years of trying and failing to certify protection against attackers with moderate attack potential [1][2].

Page 53: “The evaluator will conduct penetration testing, based on the identified potential vulnerabilities, to determine that the OS is resistant to attacks performed by an attacker possessing Basic attack potential.”

Maybe at some point we will start believing what they achieve in their certifications rather than what their marketing spews.

[1] https://learn.microsoft.com/en-us/windows/security/security-...

[2] https://www.commoncriteriaportal.org/files/ppfiles/PP_OS_V4....
All you need is one single [cc]?.gov as your client and you are in business forever.
Remove the top and bottom stairs.
What's really annoying me today is the security holes Microsoft is adding – by design – into Windows.

I mean of course Microsoft Recall. This delightful AI addition to the next generation of Windows PCs would have taken regular snapshots of everything you do on your computer.

Security and privacy are not the same thing. I get the frustration about Microsoft's security practices, but equating those two is a mistake.
We tamed Node.js event loop lag: a deepdive
I’ve met many, many Jews. To me visually, many (especially the stein, berg, etc) looked exactly like Germans.
Sadly, it seems like the moral of this account is that engineering quality is orthogonal to business success.
In the age of information, what are you specifically talking about? Someone saying something without evidence is not 'a correction'.
The best argument for this is the "separation of powers" one.

In the system of Thursday, regulatory agencies can be "both judge, jury and executioner", ordering people to do whatever they want, since that's how they choose to interpret their mandate.

Power like this can and will be abused, even if it's true that the agency has the best expertise in the area.

It also makes it very dangerous for those who are abused to complain publicly, since they can arbitrarily be found in violation of the law as retribution.

This is no way to live, and the system of Monday should be better, even if it may be confused and cumbersome for a few years.
"Some C-level jobs maybe will go away, but maybe they shouldn't have been there in the first place." --ChatGPT-5.0
> So agencies will not have any power to actually regulate.

And that is a bad thing? If it is, I'll take it. The agencies have been ineffective at their stated missions. They have been revolving door power grabs since the end of WW2. You know, that time when we let all those "former" Nazis into prominent roles of government agencies?

It's not like the EPA stopped PFAS from contaminating water all over Earth. Or microplastics being embedded in the penile tissue of most men...Among the other "miracles of modern science". The EPA is too busy going after small landowners doing water management.

And if agencies are so wonderful. Why don't we have a Department of Peace & a Department of Prosperity for All? So the agencies cannot make up their own laws anymore? Cry me a PFAS laden river.
Mentioning loneliness and then complaining about them socializing is kind of a self own
Are accounts free in the US? My impression was that you pay all kinds of fees for everything with most banks.

That 3 euros includes free ATM usage in nearly all of Europe and no fees on transactions within Europe. It's a lot less than what I paid in banking costs when I was living outside the EU.
> Combined with yesterday’s ruling on administrative courts, this amounts to a massive increase in the role of the federal judiciary in the execution of government action.

Sounds great. How we got to the point where executive-branch agencies were making rules with the force of law, binding upon the public with no judicial oversight, is a mystery to me, but it's good to see that the courts are taking their responsibilities seriously again, and restoring some measure of checks and balances.
Definitely works for me, so n >= 2.
Disagree. There are proteins that if you're allergic to them your body will turn on itself. You'll be dead and no longer care what you're allergic to.
Oh yeah. I guess that's why we always invoke function components directly. Because it's a library.

/s
If they believe Chevron is unconstitutional, sure. And there's certainly an argument for it on separation-of-powers grounds.
I never understood the point of rollback. Suppose you run some upgrade and hit a bug that prevents boot. Okey, you revert, so you can keep running your outdated system. Now what?

It's not like whichever broke your upgrade is going to disappear if you simply try again.
No, I don't think you can get meaningful inside from random celebrity news. As I write this, the front page of people.com features "Jessica Alba's Daughters Look All Grown Up as They Rewear Mom's Decade-Old Dresses: 'Throwing It Back'". I don't think there's anything whatsoever self-improving to take from that.

If Taylor Swift has something interesting to say about the economics of music production, I'm all ears. That's something I don't have a view into, and she has a reputation for being smart. I bet she could teach us some things about that. I can't talk myself into having an opinion on her relationship with Travis Kelce beyond "good for them, hope they're happy together".

Also, no one else is talking about video games. But yes, I'd find someone passionately talking about gaming -- something they participate in -- more interesting than another person talking about what they'd read about some mundane thing that another person had done.

Henry Buckle said[0]

> “Men and women range themselves into three classes or orders of intelligence; you can tell the lowest class by their habit of always talking about persons; the next by the fact that their habit is always to converse about things; the highest by their preference for the discussion of ideas.”

To each their own, but I'm on Hank's side on this.

[0]https://quoteinvestigator.com/2014/11/18/great-minds/
The gulf between what the average person knows and what they would need to know in today's world to live an autonomous self-directed life with full agency, free from covert coercion by large corporate entities, is truly staggering. Every now and then I contemplate writing a book or a series of blog posts with all the things that I wish someone would tell me if I were a young person today, but then I read articles like this which remind me of the magnitude of the task and it takes all the self-control I can muster just to avoid curling up in a fetal position and sinking into the pit of despair, let alone actually start writing.
Also from the Wikipedia, I learned that people died of the heat and not suffocation. Which means that episode of Stargate lied to me where they claimed the opposite.

A multidisciplinary volcanological and bio-anthropological study[53] of the eruption products and victims, merged with numerical simulations and experiments, indicates that at Pompeii and surrounding towns heat was the main cause of death of people, previously believed to have died by ash suffocation.
Is Theia supposed to replace Eclipse IDE?

What's the point here?
Personally, I don't see fusion as relevant on a time scale that will impact the climate crisis in any significant way, but it could be a major asset in taking us from net zero emissions to preindustrial carbon levels. It could also simply just be a way to achieve cheap and abundant energy in general, irrespective of climate issues.

But as you said, of course it's an open question whether fusion will actually be more economical at scale. It could conceivably turn out to be a day late and a dollar short on Earth, and more relevant elsewhere.

I'm keeping my eye on Helion (the one Sam Altman invested in). Seems they're making some pretty big claims, and have already entered into contracts to deliver to customers by 2030 or face financial penalties. Could still be vaporware, but they seem to think they have something.
I think I have heard similar things from other googlers and I think there might be two factors on why I think this:

- I worked on Google Assistant which was responsible for integrating many services. This meant I had to work with other peoples code way more regularly that many at google.

- I moved from FB to google - I'm not really sure how many people have had this experience. I think many of my colleagues at google found it surprising how many of the things they thought were unique to google actually also existed at FB.

At the end of the day, any of these processes have pros/cons but I think the cruft of having APIs that are a couple steps harder to evolve due to finding Readability/Owners for everything you touch just makes things slightly less cohesive and a trickier place to have a "good" codebase.

When I worked at FB, I would frequently rebase my code on Monday and find that, for example, the React framework authors or another smaller infra team had improved the API and had changed *every* callsite in the codebase to be improved. This type of iteration was possible in certain situations but was just much less common at google than at fb.
If the Executive is not allowed to decide how laws are executed, what exactly has he been elected to oversee?

The agencies of the executive branch have been making decisions on how to enforce the law based on the president's discretion since Washington. That's how the constitution was set up to work. That's how congress has assumed every law they've passed would be handled. They have always been free to put more details into their laws to take the discretion out of the hands of the executive, and they have chosen not to, as is their prerogative.
That’s great if you have the time for it but a bit impractical to write, architect, then refactor.
> Unfortunately, the Apple II doesn’t give the programmer any ability to know where in its cycle the video scanner is at any given time.

So there is no way to race the beam on an Apple II like an Atari 2600/VCS can?
Based on your completely unnecessary snark, I would say you are not happy on your prescription meds.
> Congress can actually legislate the right of agencies to interpret the gaps in the laws back into effect - by passing a law that explicitly gives agencies this power.

Congress has already done that. Conservatives don't like that, calling the result the "administrative state". A very strict interpretation of the constitution could suggest that Congress cannot actually delegate legislative powers to executive branch agencies, and the conservative members of SCOTUS are (unfortunately) free to take up that interpretation.
All the google root security team's due diligence email are just a list of links to firefox's bugzilla who documented and followed up on all the issues.

https://groups.google.com/a/ccadb.org/g/public/c/29CRLOPM6OM...
Rp2040-psram: A header-only C library for access to SPI PSRAM via PIO on RP2040
From my understanding, the Jewish European languages, including Yiddish and Ladino (judeo-spanish) have a short of frozen in time quality.

I know more about Ladino because I know Spanish and am always interested in romance languages. Many (though by no means all) of the differences between that and modern Castilian are that Ladino has not kept current with Spanish phonetic changes from the 1500s onwards. I believe I've also read Yiddish has a similar quality of seeming, from a distance, like it has some characteristics that might have been seen among German speaking gentiles in prior times.

I think that when you see separations of populations, you sometimes see the preservation of "archaic" language features.
Pinned it (https://news.ycombinator.com/item?id=40823295). Thanks!
Has anyone done LLM training with template metaprogramming? That seems like another excellent way to keep Google’s build servers warm.
What's clickbait about it? It's the title of the article as written by the author. How would one even go about automatically flagging "clickbait" titles? Obviously the term means different things to different people.
The Go standard library. The level of detail, the politeness of the reviews, the fact that the features of the language allowed me to put more attention into correct code than "at least it's working" code, the pragmatism and personalism of the core team.
AI was also 30years away forever then it was not. its a function of dollar spent researching not fairy dust powered by hopes and dreams. problem is the problem seems so unsurmountable that private sector (until now) was never interested in exploring this and govt funding is really mostly about making things blow up. so there you are. all that said the fusion triple product neutron-fluxtimeenergy has been steadily getting better over decades & hence a flurry of recent funding. That is until AI started sucking up all oxygen.
You can't have privacy without security. Adding automation to violate privacy (even locally), is a new security risk, imo.
Why do you think that's better? Whose priorities and interests do we expect these 'technocratic executive bureaucracies' to pursue if allowed to be the arbiters of their own authority, and what mechanism would ensure they remain accountable to the public and operate within the applicable constraints of prevailing law and the constiution?
The reality is any web analytics will make you non-compliant.
My experience with google3 was a bit different. I was shocked at how big things had gotten without collapsing, which is down to thousands of Googlers working to build world-class internal tooling. But you could see where the priorities were. Code Search was excellent - I'd rate it 10/10 if they asked.

The build system always felt more like a necessary evil than anything else. In some parts of google3 you needed three separate declarations of all module dependencies. You could have Angular's runtime dependency injection graph, the Javascript ESM graph, and the Blaze graph which all need to be in sync. Now, the beautiful part was that this still worked. And The final Blaze level means you can have a Typescript codebase that depends on a Java module written in a completely unrelated part of google3, which itself depends on vendored C++ code somewhere else. Updating the vendored C++ code would cause all downstream code to rebuild and retest. But this is a multi billion dollar solution to problems that 99.99% of companies do not have. They are throwing thousands of smart people at a problem that almost everyone else has "solved" by default simply by being a smaller company.

The one tooling I think every company could make use of but doesn't seem to have were all of the little hacks in the build system (maybe not technically part of Blaze?). You could require a developer who updates the file at /path/to/department/a/src/foo.java to simultaneously include a patch to /path/to/department/b/src/bar.java. Many files would have implicit dependency on each other outside of the build graph and a human is needed to review if extra changes are needed. And that's just one of a hundred little tricks project maintainers can employ.

The quality of the code was uniformly at least "workable" (co-workers updating parts of the Android system would probably not agree with that - many critical system components were written by one person poorly who soon after quit).
I really recommend reading any of David Foster Wallace's essays about tennis. The book "String Theory" collects all his writing on the subject. He was a lifelong fan of the sport, but also a nationally ranked junior player and he's able to provide exceptional insight in the insane dedication (as well as talent) needed to reach even the lowest rungs of the competitive tennis world, and what a grind the tour can be for lower ranked professionals.
Higher Education and the Law of Diminishing Returns
Even as a well known "windows hater", this is hyperbole. It's not insecure by design really. In fact in principle it's a lot better than anything Unix side due to the ACL and security model. It did however exist before anyone gave a crap about security, was implemented in a vastly insecure language and runtime and grew to a huge size and surface area and that is hard to fix retrospectively.

I'll give Linux a stab here: half the stuff I can run can write to my ~/.profile if it wants to. Anything which can read ~ is a problem because there's where all my important shit is...
Are you aware of how polluted cities and towns were in the 70s? Why the EPA came into existence? Why Chevron became codified into law?
Qube OS is nice, but when people are paid to get things done security is not forgotten but cut by a thousand paper cuts. It might all seem to be based on a secure design somewhere but even in small teams of 50 people you will always find people who have made short cuts.
Challenge in terms of having a stupid name? If yes, then they are succeeding.
I live in a rural area and I talk to trump voters plenty. Country folk who aren't old or rich don't give a whit if you call them rednecks, in fact for many the term is a mark of pride.
On the flip side changing diet and it's effects on what folks might have seen as something they can never fix/change without _____ drug, might be transformational.

With that said, my better half can't bend her arm past a certain part on her body, however, b.c of a really small/stupid collision/fall coming down a Tahoe MTN ski run. It always depends on the problem.
Yup, on reading the second part I immediately went "this guy is an introvert". Nothing wrong with that, of course, and I'm exactly like that on work trips and conferences, bolting to my hotel room immediately after the day's work is done. But I don't really buy the "no professional tennis player has any friends" message he's trying to push.
The accounts are typically free, but they love to nail you on things like going overdraft by 1 cent or "inactivity fees" or other BS.

US Credit cards will only have fees if you get some super premium ones (and even then, there are often promos for that to zero out the fee temporarily or long-term).
Since this seems otherwise unrelated to the desktop Eclipse IDE, does anyone have positive feelings about the Eclipse brand? Granted I last used it about 20 years ago, but it was a less than positive experience.
If the average person was living an "autonomous, self-directed life", I don't think Windows security holes would rate compared with stockpiling enough food to last through winter.
Which is how it should be. But the FDA isn't allowing that anymore.
What SCOTUS just did to broadband, right to repair, the environment, and more
> And they do not come up with a working idea how they possibly could have done it in an economic way.

... are you sure about that? I haven't pulled the paper, but the abstract suggests that doing exactly that was central to the research.

https://www.ajaonline.org/article/3863
I dont know what the solution is here short of some kind of vulnerability liability legislation...
Nothings is getting through congress... so we're fuked.
After over 30 years using Windows, I finally gave up on it last year. It was a difficult choice, but clearly, it's just going to keep getting worse.

These days most people should be using Chromebooks and iPads, which are far and away more secure.
I have no idea to which group you're referring.
> Gerrymandering isn't all it's cracked up to be. It cannot make any party impervious to wave elections.

I think the last 15 years of elections would seem to contradict you.

My guess is that if gerrymandering were completely outlawed, Democrats would easily maintain control of the House, with a healthy margin, more or less permanently.

Wave elections are a thing, but as we've seen, they don't give a the waved party a massive margin.

> We have had lots of wave elections in the past 100 years: 1920, 1932, 1994, 2006, 2008, 2010

2010 is a bit of a magic number, because that was the point when Republicans started their concerted, coordinated, country-wide gerrymandering campaign. So I don't think elections prior to then can support or refute any points about gerrymandering.
> What's the point here?

Hard to say.
Startups.Gallery: Directory of Startups with a Funding Tracker
Paramount Wipes South Park, Daily Show Clips, and More from Websites
> Devastating that expertise will no longer influence the application of law and policy.

You've got it exactly backwards. The relevant expertise in interpreting law and policy resides with the judiciary. Allowing administrative officials with no background in constitutional law or statutory interpretation to decide for themselves what the law they operate under means has lead to devastating power imbalances and opened the door to wide-ranging corruption and overstepping of authority.
The Largest Model Airport
in the USA you are more likely to pay for not using your card.
Doesn't dust usually cling to surfaces due to static electricity and, in some settings, presence of grease in the dust?
We might, but until average person does not consider it an issue ( and Equifax breach[2] proved it is merely cost of doing business[1] -- ~400 million out of $3,362 million profit in 2017 ), it will not be an issue. I am annoyed, but I have been annoyed for a long time. I am just waiting for the rest of the non-technical people to catch up, because it eventually should. But then... I am an optimist.

[1]https://www.ftc.gov/enforcement/refunds/equifax-data-breach-...
[2]https://en.wikipedia.org/wiki/2017_Equifax_data_breach
So given that there are multiple things that it has meant over time, the first statement that it can refer to "any of various various forms of ground stone" seems like a good summary.

To claim it can only mean silicates, when two paragraphs later it says "Silex is now most commonly used to describe finely ground silicates", seems somewhat disingenuous. It's not "only used" but "most commonly used".
> Except Chevron was just codification of the status quo that had existed since the founding of the country.

The concept of administrative law did not even exist at the founding of the country -- executive-branch agencies making rules directly applicable to the public wasn't really a thing until about the turn of the 20th century.
Potentially affected. No problem for now, per the linked blog post.
It must be nice to never travel anywhere.
Yeah, I really don't like or particularly respect Windows much, and I'm a huge proponent of Linux, but I really didn't think this article was fair to Windows either to be honest. It mostly just perpetuates the myth that Linux is inherently more secure than Windows in some way, which it just absolutely isn't. Hasn't been in quite a long time.

Maybe Linux gets some fundamentals better than Windows, but I'm not even really sure it does that honestly, since Windows has come a long way since these talking points started out, and there's a lot more to operating system security then just how your Access Control works, and operating systems like Mac OS and windows are doing a lot more fundamental security work in their kernel and user space then Linux is to ensure security[0]. Plus, for security in the modern day, even the fundamentals of a unix-like operating system just aren't good enough, so it feels almost moot. Not to mention, proving Windows is worse than Linux by citing CVEs is just silly. Every piece of software will have flaws that need to be fixed, even security ones, because completely planning software out from the beginning and then verifying it from the firmware up is impractical. Linux has had its own share of CVEs in all sorts of places — like the recent xz thing, (or all the various automatic code execution vulns emacs has been closing lately), too, so it's nor like it's really on any better ground.

[0]: as much as I think their perspective is unnecessarily negative and unfair to Linux — for instance counting the sandboxing that Windows UWP apps as progress toward sandboxing, but then not counting Flatpaks, and citing the absolutely spurious fud around them to boot — this is still a good summary: https://madaidans-insecurities.github.io/linux.html
I'm reminded of this response to the question "Is materialism essential to scientific progress?" <https://philosophy.stackexchange.com/a/110019>.