skysight-inc/HackerNews huggingface dataset:
If I sell shovels, it's not a self-imposed techical limitation that I don't have a way to detect and prevent anyone from doing something illegal with a shovel. Even after the technological means exist to include an intetnet connected spy device in every shovel.

Secure message passing is no different. The "shovel", the thing one might sell, is just the application of some math which does something and not any of the infinite other things.
Lemmy is an even worse leftist echo chamber that suffers from the same problems as reddit.
When I long press on any date in the grainy image listing the dates, iOS OCRs the text, interprets it as a date and because I long-pressed, it offers a popup context menu to create an appointment or a reminder, while showing a day view of my calendar for that date.
Diehard

Speed

Jurrassic Park

To kill a mocking bird

Hear

Terminator - Judgement day

Independance day
The "online site"/"web thingy" linked in another comment is

1. like 300 lines of code <https://github.com/innocenat/kindle-epub-fix/blob/master/scr...>

2. runs entirely in the browser and isn't using Calibre scripts or anything else

3. could pretty easily be modified into a downloadable program that runs from both the command-line or something that you can open in your browser
Yes indeed - Jansen's machines are applications of Jansen's linkage :)
Is it also impractical for treating potable water supplies, or for treating wastewater? (You mentioned only _bottled_ water companies.)
A friend was just dragged of the plane and arrested in Paris recently for “money laundering”. It was completely baseless using falsified evidence. They wanted information but didn’t want to obtain a warrant or subpoena to get it. Eventually they let them go. Sad because this person was a total Francophile. Not any more. Sad state of affairs over there really.
Emulating the Early Macintosh Floppy Drive
An in-depth dive into the Macintosh floppy drive system, including the fascinating IWM (Integrated Woz Machine) custom floppy controller. The level of fidelity to properly emulate the Macintosh disk drive is impressive, and this should be an essential resource to any aspiring Macintosh emulator developers.
Is there anything technical preventing Go from being like this? Besides the fact that nobody has put in the hard work to make it happen?

Not a leading question, I’m curious if there are any technical complications with fast-reload Go.
From my understanding the arrest warrant only was created while he was en route; sneaky sneaky..
By knowingly facilitating criminal activities, you become complicit.
See my comment above about the unencrypted backup.

It's basically a UX tradeoff:
You can not promote default E2E + no autobackups -- people in mass are not ready to lose their data when losing the device. Nor they are ready to store the key separately in a confidential manner. Nor they are ready to manually transfer the key among different devices.

All this UX situation is defined by Moxie (the author of Signal and Whatsapp encryption) in his blog post about PGP/WoT concept meeting the reality https://moxie.org/2015/02/24/gpg-and-me.html

So in fact as the average user you have either:
1) E2E + unenctypted autobackup (Whatsapp)
or
2) no e2e by default and separate e2e secret chats (Telegram) that are available only on a specific device.

In the first scenario all your chats inclusing the most sensitive are available by the law enforcement by issuing a warrant to your file storage provider.
In the second scenario you potentially can spill some sensitive information in default non-encrypted chats.

What is worse? I don't know. But I use both Telegram and Whatsapp with backups turned off. So I'm losing all the Whatsapp chat history when using a new device while losing only secret chats In Telegram (not a problem for me since I delete them often manually or set a self-destruct timer anyway)
That's only one possible meaning of the word "trust," i.e. a firm belief.

Trust can also mean leaving something in the care of another, and it can also mean relying on something in the future, neither of these precludes a need to verify.

Edit: jgalt212 says in another reply that it's also the English translation of a Russian idiom. Assuming that's true, that would make a lot of sense in this context, since the phrase was popularized by Reagan talking about nuclear arms agreements with the USSR. It would be just like him to turn a Russian phrase around on them. It's somewhat humorous, but also conveys "I know how you think, don't try to fool me."
> So even Telegram employees can't decrypt the chats

I very much doubt that. If Durov wanted to, they could decrypt all of those messages.

That fancy encryption system is worthless when someone can hijack the session of any of the users in a chosen group. This is a risk in many crypto messengers, but those usually come with optional key verification whereas Telegram doesn't have that outside of encrypted one-on-one chats.
I agree with you, but also sympathize with the technical issues of moderating encrypted information. Thinking a bit about it, there would need to be a global man in the middle or a requirement for all applications to decrypt/re-encrypt centrally for moderation.
Making a note to try this when it's not slashdotted (hackernewsed?).

This sort of thing is _very_ interesting to me, and I rather desperately want something like to this tied to listings of books.

I would like to read more diversely --- at one time I was trying to read one book from each LoC division, starting at the top/broadest (so A--Z), then iterating down, but this got to be exhausting because it was difficult to determine which book to read.

A later effort was to read biographies of famous people to my children in chronological order as they were growing up --- dry run was the very simple set of U.S. Presidents --- but again researching and ordering was a big problem.

So, my hopes for this are that it includes footnotes/references/links to supporting material (perhaps affiliate links on Amazon would be one way to fund things?) and that it is possible to click through to find information on specific technical topics as well as general explanations.
evidently I'm getting downvoted because people have some opinions about these statements but they're also not able to enunciate what those opinions are even though they must be at odds with my opinions. The classiest type of HN downvoter there is!
I'd like to see the study first, how can we know that this year's flu variant wasn't just less infectious ? What was the sample size ? What's the p-value ?
have we learned nothing from the covid pandemic?
Really? That’s a really disappointing example of censorship. The state has no business judging the truth.
This is one of the three educational interventions with solid evidence of it working. The other two are air conditioning and free school lunches. People don't get excited over them though, because they have nothing to do with teachers or curriculum or educational theory.
You started with:

> Please enlighten us about where countries which have gone all-in on solar get their base power when the sun is not shining enough and there is no wind.

I.e. demanding real world done and dusted examples or it is impossible.

Then trying to find technicalities as to why the report is wrong or does not fit your made up example.
This has no relevance to the question
> Compared to other apps like WhatsApp with claims of E2EE and no body of verification and validation.

We do have at least some empirical evidence that WhatsApp is properly encrypted. WhatsApp's cryptography has made judges in my country foam at the mouth with rage so hard they ordered retaliatory nation wide blocks of the service at least twice.

People are right to distrust Meta but I for one am glad that everyone I know is using WhatsApp. I also have Signal and Matrix but a grand total of zero people message me through those.
Skip trust. Just verify.
This is how censorship works in developed democracies. Telegram was the last platform where point of views different from sanctioned by the powers that be could be expressed (to a limit--it is still in app store after all). You've done nothing for dissidents until you are charged with CP.
> stored along with the keys

It's not. They use a split-key encryption system so it's not exactly the same as storing the keys where the data is.

> It all comes down to your threat model. Encryption does not protect information from entities who hold the keys to decrypt that information.

I agree, which is why I'll say that the bottom line is:

Are auditable E2EE algorithms stronger in security than cloud encryption? Yes.
Is MTProto 2.0 Cloud Encryption plaintext? No.
Police state on the inside, anarchy on the outside. This makes it even more similar to governments - sovereign nations are the highest organizational level; beyond them, there's no one to defer to. International affairs is anarchy - everyone's pogo dancing (to the tune set by nuclear powers).
'They took away her rights': Minnesota re-examines guardianships
Usefulness usually means real world use. It took the theory of general relativity 70 years before we saw a real world application make use of it. The theory that led to modern hard drives (GMR) went from new fundamental physics in the late 80s to full commercial use within a decade. Things like the blue LED (1990s) or frequency combs (early 2000s) were even faster and can be found truly everywhere now (unlike GR). There are far more useful models out there than the high level overview stuff you might get from an intro to fundamental physics class. And even if you're into explaining the universe rather than improving day to day life, as I said, there's tons of stuff going on right now if you're in the right field.
Maybe they can relapse a map pack like id did for Quake and Quake II, that would be a way to get in the news again.
I'd gladly donate to his legal campaign, as long as he makes his statements public.
He appears to be a French citizen, so who else should be doing the arresting?
> just look at the products they're releasing, especially in the EV segment.

Since when have EVs required high-density silicon? China's EVs are impressive, but it's 100% more of an endorsement of their lithium supply chain than their silicon one.

> They're at the top of telecom tech as well

That's a funny rendering of events. Didn't Huawei get forcibly removed from the market after they refused to let governments audit their security? I don't think that's an industry-leading attitude compared to Cisco. The only thing Huawei can win on is low prices, which really isn't a priority of telecoms when you're trying to sell backdoored hardware.

Additionally - telecom tech doesn't require advanced silicon either. Most WiFi routers and Ethernet switches are made with the same silicon the US already manufactures in GlobalFoundries and Intel fabs. The fact that China has 24nm DUV is not at all impressive when half the world was already exporting similar density silicon for cars and routers.

So... yeah, I do need to look at better examples if I want to trust their word. From both the examples you've given me it seems like China is focusing on cheap low-density hardware that anyone can make, but China can make cheaper thanks to their political prisoners and labor camps. Not only is it unimpressive, it's not even a slight example of how China can put modern silicon nodes into mass-production.

You are describing 2010-era fab technology, when talking about EV and telecom chips. I just hope you know that's what you're bragging about here.
European authoritarianism is an embarrassment and a betrayal of their claimed values of freedom and democracy.
Of course, typing this on my phone, I didn't get the syntax exactly right. Sorry! The actual strace argument should be

-e fault=clone:error=ENOMEM:when=1+2

First, modern glibc doesn't use the `fork` syscall directly; it uses clone() instead, so you have to fault clone to see anything happen on a glibc-based system. Second, I botched the syntax, oops!

For practical use, you probably want something like this:

strace -e fault=clone:error=ENOMEM:when=2+2 -e fault=write:error=EFAULT:when=3+3 -c -o /dev/null bash

This faults both clone and write at different rates (try it, the results are sort of funny), sets strace to only count events (reducing its overhead), and then suppresses the count printout at the end. Might be fun to use as a prank login shell if you want someone to think their machine is broken :)
Radon mitigation systems work. And they’re cheap.
When Apple had a smaller user base of devoted Mac fans it could allow itself to experiment, but it cannot do it at the current scale. They have two potential options: focus of research of various groups of their existing products, e.g. find out who uses iPads for what and see if there is a potential for a hardware product for that group of users. For example, pilots load flight plans and other information on iPads, maybe there is a potential for a product for the aviation industry? Second option is an experimental product spin-off that they would finance, a bit like Bell Labs, but for Apple.

BTW. Apple Vision is not taking off anytime soon. At that price point it's going nowhere.
I think it depends on what is being audited. My issue with the Mars claim is that it really doesn’t pass the smell test for me. Practically any use case for Mars ignores a better mitigation on Earth. So it comes across to me as one of those exciting, but impractical options. And “exciting hype” is what I would characterize Musks MO in SpaceX, Tesla etc. So based on his previous overly hyped promises, my priors are now more suspect.

But when it comes to taxpayer money, the public absolutely has a right to audit. You can see how this played out with both Boeing and SpaceX. They were given huge leeway early, and they were audited more when they showed evidence that maybe some of that extreme trust was misplaced.
Same!

There's still apps at my company that use the server's local time for everything, built in a pre-cloud world. Now we "cloud host" many of these, by running sets of VMs with their clocks set to different timezones and setting up each tenant on one matching their zone. Unfortunately, it's a product that makes a fair bit of money but isn't our focus (not much growth or new sales), so it's never been worth it to actually do something better.

It's not just the timezone/DST issues, either. Another product I've worked on did the "reports at midnight" thing, but as it grew it became impossible, as it took hours to complete all reports for all customers. So some "scheduled at midnight reports" would happen at 1:28am. This alone isn't a huge deal, but many reports were time-dependent (eg: you get different results running at 1:28 vs 0:00), and for a subset of those it was actually a big problem. So some got fixed by removing the time dependency (basically making the queries in the report have end times vs using now()). Another workaround was to staggering times manually on other reports - run at 2:30am - but still many customers would still pick 1:00 or 2:00 (which is of course someone elses' midnight), and there were still big I/O bursts on :00, :30, :15 and :45, especially overnight.

My personal takeaway was to avoid building report systems like that, and try to do things like let the user pick "Daily" without picking the time-of-day. For time-sensitive "reports" it's been my experience that if you actually dig into the user needs, they're really looking for an "operational view", not a report. It requires specific dev work to build of course, but the end result is better both technically and for the customer, and is less overall work than all the fixes/workarounds needed when you try to shoehorn it in with all the other reports, especially as the usage grows.
That sounds plausible, but do you think it's better to be more sick than less?

Or do you just think that having a few sick days per year is better than marching into work no matter what state you're in? A very different proposition.
The great thing is that coal plants are not the alternative in 2024. It is renewables.

Thus no need to compare with coal, compare against your neighbor’s rooftop solar.
IANAL and not that familiar with the legal situation, but if we assume that running a platform of this type requires you, by law, to moderate such a platform and he fails to do that, idk what we are talking about. Yes, he would clearly be breaking the law. Why would that not get prosecuted in the completely normal, boring way that I would hope all law breaking will eventually be prosecuted?

If you are alleging that there's comparable, specific and actual legal infringements on the part of meta/google, that somehow go uninvestigated and unpunished, free free to point to that.
You don't get thw full 24 bytes inline, but the string_cache crate does this.
They occasionally remove copyright violating files, so they do something.
This shows the strength of the five eyes "CARTEL"

They grounded a Presidents plane because they thought SNOWDEN was onboard.

https://en.wikipedia.org/wiki/Evo_Morales_grounding_incident
> We do have at least some empirical evidence that WhatsApp is properly encrypted

so do we. Telegram's MTProto 2.0 has been audited multiple times by independent researchers, compared to WhatsApp's closed-source claims of E2EE.

I'd rather trust a company with a proven track record of no security incidents and fight for user privacy than a corporation which lies through its teeth time and again.
So this is what the best engineers in the world are working on then.

Great.
On Telegram, even private messages are not end-to-end encrypted by default. The so-called secret chats are end-to-end encrypted but are a major pain to use.
Maybe you could set the Z-index
I partially agree. I have been experimenting with creating a lot of small error types (e.g. one per function) because of the benefit of narrowing down the set of possible causes. I also dislike crate-wide errors for the same reason.

However, having an anonymous sum type isn’t a good solution here because there’s nowhere for you to add context to. It’s not useful for your final error to say “permission denied” without the context of a file name, or knowing that you were trying to open configuration file, etc.

Also, depending on your implementation, you either cannot allow multiple errors of the same underlying cause (e.g. two IO errors, one for writing and one for opening) because they are the same type or you have positional error tuples (error index 0 is write, index 1 is open). Neither of those is super ergonomic.
My feeling is that Discord is taking over Slack for a simple reason: it's easier for "community contributions".

In Slack, if you want to keep the history (which most people seem to really, really need for some reason I don't get), the owner of the community needs to pay (a lot).

On Discord, the community members seem to be able to make some kind of contributions as a "donation". Not sure exactly how it works, but I have seen a few open source communities move to Discord for this reason.
It’s a good question. Obviously infinite sick is not desirable. If it were possible to induce antibodies via e.g. broad spectrum vaccinations would we see less sick kids in total?

After all the merits are supposedly eventual conferred immunity, not physically being ill. No reason to think you need to be sick to benefit.
Backups are encrypted now. Looks like they improved it.

I get it. I'm a privacy and free and open source software enthusiast. It's not perfect. It certainly is better than alternatives though. We know for a fact that it pisses off judges and authorities. That's a major sign that its working. You should be concerned when they stop complaining about it, it means they got in.
He holds French citizenship, apparently broke French laws, and got arrested on French soil. How is that a political decision?
+1 affected by this as well . https://imgur.com/a/fiFEiKA
the watch was a leap? the only people I know who have them are Apple stans, and unlike the iPhone they certainly didn't kick off a new category of must have everyday item

heck, after growing tired of having one more thing with a rechargeable battery, I went back to an analog watch
that was still a lame advertisement.

Also, you too should be rotating accounts every few months to prevent doxing. that's just common knowledge and online hygiene.
Thank you for that link, it exactly describes my experience and the rational behind my opinion:

The Deref trait is designed for the implementation of custom pointer types. The intention is that it will take a pointer-to-T to a T, not convert between different types. It is a shame that this isn’t (probably cannot be) enforced by the trait definition.

Rust tries to strike a careful balance between explicit and implicit mechanisms, favouring explicit conversions between types. Automatic dereferencing in the dot operator is a case where the ergonomics strongly favour an implicit mechanism, but the intention is that this is limited to degrees of indirection, not conversion between arbitrary types.
As I said. It is technically possible, but it is relatively elaborated (for the provider of these patches). As far as I know you don't get them without having an online account at the provider of these patches.

But the questions was: Does SerpentOS have the ability to change the kernel without reboot?

Edit:

> This will mean that the /lib/modules tree may not have the current kernel version, but the OS will still be usable while having had a live atomic update. Of course, to use the new kernel you must reboot. Unlike other atomic OS implementations, it will be up to you when you do so: no more deferred updates!

https://serpentos.com/blog/2024/04/30/calm-before-the-storm/...
The aesthetics of Caesar III are some of the best, love this game, didn't know there were sequel projects to check out until this thread!
Immune system won't help against air pollution from traffic and factories and forest fires.
If people were using my backyard to sell drugs or CSAM, I knew it, and did nothing about it, I would absolutely be guilty of facilitating these crimes. I fail to see how the situation is different for Pasha.
Yeah but good luck going through the entirety of khan academy as an adult, it's not impossible but it's also a task as hard as learning a new (or multiple) languages...

If you can dol it though and complete everything up to precalc you can most definitely do well in university.
How many people died from the Black Death?
Huh, I was googling for this exact tool a couple of weeks ago.

Is there anything you can share - about how you're approaching it, and your progress? Need any beta testers? :)
> "Attackers" usually have a single mission in mind ...

No. This is a very common misconception, but in reality a vast majority of attacks is carried out as "lets look around what we can find and will see how we'll use it". The same actually applies to a lot of attacking activities – intelligence, influence operations, propaganda etc.
You're right but it won't help in my case. I created an ad-hoc system that does the same thing but the source is not at ground level. Through some form of convection I suspect around the chimney the gas is being pushed into the attic and then coming down in rooms they did not join the wall to the ceiling correctly. Most of the radioactive dust is being produced in the attic which nobody has touched for 60+ years. If I put the geiger counter in the attic it goes nuts. I'm just going to level this place and build something correctly.