skysight-inc/HackerNews huggingface dataset:
> The problem is that windows was developed before security was important.

But wasn't that Windows rebuilt from the ground up as Windows NT, which had more advanced security features out of the box than basic Unix/Linux (allow/deny ACLs vs octal permissions, SAM database vs /etc/passwd flatfile, SIDs vs manually assigned/reusable UIDs)?

(And some other cool design features that never got used, like POSIX/OS2 subsystems being on equal footing as the "regular" Windows32 subsystem.)
This is only banning disposable vapes. The goal doesn't seem to be to cut down on smoking but on waste from disposable vapes.
It's preposterous for an Indian court to block access to a Wikipedia page from outside of India. While alarming, I could understand an IP geoblock for Indian traffic but not all traffic outside of India. This is an overreach and impacts the sovereignty of non-Indian citizens and non-Indian residents.
This is anything but simple.
Drivers can be whatever but their effect is usually global not for a specific user or app. So when you update, say, a graphics driver you are updating a shared resource used by everything in the system.

You can run that display driver in whatever security context you want be it “root” or its own constrained context but that doesn’t change the fact that other things in the system, running under their own security contexts, are feeding that driver stuff. And given there is generally only one display output, or sound output, or whatever, all things in the system have to use it for output, making it more privileged than the rest.

Whatever security context a display driver runs in, that context by requirement has to be more privileged than whatever context your browser or a calculator app runs in. To make changes to that shared display driver, you need to cross some kind of security boundary and it would be nice to make sure the user is who they say they are, they are allowed to do the requested action and they are made aware of the change. Thus methods like UAC and sudo.

I’m not sure how you can escape that. Removing sudo and UAC doesn’t change the fact that something wants to mess with a shared resource running with some kind of elevated privilege.
3 assumptions that from my read are baked into your comment.

- Any empty domain starts with the same reputation

- Registering a new domain is a 0 cost action

- The eng effort to reset domain reputation is 0

Certain domains are used by abusers more often, usually due to them being cheaper. Forcing them to move domains is extra friction to the abusers which "haunted" domains force more than the proposed new system.

For the last point, I think it's simplifying a complex system change. Even if the new system was marginally better, it could be a large eng effort and not worth pursuing.

edit: styling
The idea that the rich in America, as a class, want the destruction of democracy, is laughable. Few people want to overturn a system that's making them millions.
And why should we be using cancel brigades' definitions? If freedom of speech is not freedom from consequences for your speech, then freedom of speech automatically exists everywhere and the concept is meaningless.

Obvious there is judgement for when consequences rise to the level of being coercive - someone giving you a dirty look is not, the de jure government sanctioning you is. But trying to define rights binary-axiomatically is really just creating lemmas for cryptofascism when the preconditions have been met but yet the rights are still missing (which is exactly what the cancel brigades are pushing).
I disagree that the paper is self-censoring. Editors wrote and intended to publish endorsements of Kamala Harris. They didn't choose to censor themselves, nor willingly give up anything. The decision was made by management.

That may be less of a problem than government goon-squads raiding the Washington Post but I still think it's a problem.
It's not a transparent overlay, it's a completely separate desktop with a screenshot of the user desktop as its background. Really clever.
> There’s never been a less fit major political candidate in the US.

And the polls and prediction markets both suggest he has a better shot at winning than the boring business-as-usual candidate. Prepare for four more years of chaos, and another test of our democratic institutions' ability to protect the republic. Guaranteed to be a wild ride.

Don't forget to vote! It matters!
https://apps.apple.com/app/id463565130

No bullshit solitaire.
From TFA:

> At the very least, the video demonstrates that Apple could provide expandable SSDs if they wanted to, and I’m sure Apple could make a pretty penny selling their own proprietary SSDs.

While true, there is significantly more profit in selling a whole new laptop to someone who wants more storage than in selling them a replacement storage module for their exiting one.
the issue is that this is a little myopic when thinking about identity. Your instance server in ActivityPub holds your identity, so when you change servers by mirroring or whatever method, you're giving up your old identity and taking on a copy. That identity part is crucial because if you want to, for example, do OAuth with ActivityPub, your old server technically owns an identity of yours that's just as valid as your new one. It's better on atproto because your identity is always your own (with the caveat that it's currently managed by Bluesky's https://plc.directory, but like they've said, they're working to move this outside the company). ActivityPub will never give you true account portability unless they do something like atproto and allow identity portability. Atproto allows this already. You can move your PDS (where your data is hosted, and the thing that controls access to OAuth) to a new one whenever you want.
It would encourage usage of reusable vapes, but still give people the option of a disposable vape of they for example forgot their reusable vape when traveling.

Simply, we should charge for negative externalities (not only for vapes) and let people decide what's valuable to them.
Force = mass * acceleration

So no, gravity is not a force. But if you multiply the acceleration by the mass of the object in question, it is a force. Why not say that, unless you're trying to be cryptic?
> Ideally a secure computing platform would have reproducible builds built on public inspectable infrastructure like fdroid. It would also virtualize all untrusted applications in a sandbox and implement the least privilege model.

Also, be careful what you ask for. Such a system would likely require Secure Boot to be enabled a-la Android, complete with userspace detection of a system which does not have Secure Boot enabled, for DRM implementations similar to a game console. We're already close, but UEFI bugs, virtualization, hundreds of TPM variants, and bus attacks have left holes.
A "simple text blog" shouldn't need to use anything of the sort.
Jackpot for the investors, jack sh*t for the employees.
Panic, no. Take seriously, yes! There are at least a dozen common health problems that we still can't explain.
I'd add that a lot of the described advantages come from culture. For web applications manual memory management is 100% a friction instead of a relief. But the culture in Rust community in general, at least for the past ten years or so, is to encourage a coding style with inherently fewer bugs and more reusable, maintainable code, to the point of consistently want something to not happen if they weren't sure they got it right (one may argue that this is counter-production short-term).

It is this culture thing makes adopting Rust for web apps worthwhile - it counters the drawback of manual memory management.

If you hire an engineer already familiar with Rust you are sure you get someone who is sane. If you onboard someone with no Rust background you can be pretty sure that they are going to learn the right way (tm) to do everything, or fail to make any meaningful contribution, instead of becoming a -10x engineer.

If you work in a place with a healthy engineering culture, trains people well, with good infra, it doesn't really matter, you may as well use C++. But for us not so lucky, Rust helps a lot, and it is not about memory safety, at all.
And last I tested, this was more performant and space efficient than JSON Patch...
Nothing game-changing? How about:

• Long-form content

• Video streaming

• Grok

• Ability to edit posts

• Bookmarks

• Communities

• Better verification system

• Encrypted direct messages

• Cashtag feature

• Bold and italic text formatting

• Open-sourced algorithm

• Premium features

• Improved search

• Improved analytics for content creators

• And most importantly, less First-Amendment violations in secret partnership with the federal government
FYI, the redirect to /login breaks the back button on Firefox for Android and probably other browsers. Had to hold back and go to a history entry to escape.
Now you added hackernews :)
Please do more research since it seems you are interested in this. The reason we haven't terraformed Nevada isn't lack of will, or coordination. It's physics and economics. If the technologies listed by the author existed they would be being exploited extensively today. Lack of water is too much of an issue. Billions if not trillions of dollars would flow to it, and any small regulatory issues would be knocked down instantly. This entire article is fantasy.
Does uBlock leave some kind of explanation in the place of the ad telling you what overall quality of ad it was? Like, the message you are responding to isn't complaining about having to see the link: they are noting that this kind of cross-promotion might lead one to discredit the content we are reading, as it is kind of an important signal, not merely noise.
Can you explain why streaming joins are necessary. All examples I've seen are bad. For example joining books and author as a stream seems ridiculous, why couldn't the author come up with a better example that is realistic.
I don't know if invoking the Salton Sea, which is probably the canonical example of the risks of creating endorheic lakes by introducing water into an endorheic basin is really a good argument.

The Great Basin is North America's largest endorheic basin, and the one large natural endorheic lake, the Great Salt Lake is currently drying up.

Those of us who live down wind of it are already suffering the effects of it drying, and if it continues to dry. Millions will be displaced due to the health effects of Arsenic in the dust etc..

This also ignores other parts or hand waves away difficult problems. Brine from continental scale desalination as hazardous waist can be understood by the challenging problems with data center scale problems as an example.

Also water from Lake Meed and Powell would require serious treatment to move anywhere due to Quagga muscles etc.

Also large amounts of currently productive farmland are already at risk due to the Colorado being oversubscribed and declining aquifers.

Heck, just stopping at the dry lake bed at Xyyzyy would show the issue with trying to use the Mojave river.

While I am glad the author had fun with this thought experiment, the idea is simply not realistic in its current form.
Doing nothing is working fine in the USA so far. Not all problems need to be solved, and sometimes the solution is worse than the problem.
https://lucid.substack.com/p/the-real-reason-donald-trump-in...

"""
-The Real Reason Donald Trump Insults the U.S. Military -

I am pleased to announce that I will be giving the Bancroft Lecture at the U.S. Naval Academy on Oct. 10.
"""
Tadpole and a few other vendors made "laptop" Unix workstations with SPARCs, PowerPC, plus an Alpha one running OpenVMS.

And there were also a few "laptops" with PA-RISC running HP-UX.
> There are more computers running Linux on this earth by orders of magnitude.

Yes, but most of them aren't running GNU and have signed boot with no ability to disable it. Very shallow victory. Could turn into FreeBSD tomorrow, and very little ground would be lost.
The best thing you can say about Donald Trump is that he has the attention span of a gnat and a sense of vanity so large that manipulating him is trivially easy. He had fewer accomplishments in his term than any president in memory. What he brings is chaos, not policy, and that is the only thing that gives me much hope at all should he win another term. We'd be much worse off if he had the skill to turn the rhetoric into action. Probably we will just get more useless wall.
Probably related to the fundamental problem of joining distributed data within CAP constraints. Virtually all distributed databases offering full SQL are CP (that is, they assume no nodes will be down otherwise the data won't return).

If you have distributed data, the join will get calculated by SOME node in the network, and the data will have to be streamed in and joined by the central processor. Even with modern meganodes, for BigData marketing you have to handle arbitrarily sized datasets, and that means streaming data into the processing nodes working memory.

Of course there are ways to distribute join calculation (sometimes) as well, but you're still talking merging streams of data coming into processing nodes.

Now, if you have to handle AP/eventually consistent models, then it REALLY gets complicated, and ultimately your huge massive join (I'm assuming a join of tables of data, not just a denormalization join of a single row/primary key and child foreign keys) is a big eventually consistent approximation view, even without the issue of incoming updates/transactions mutating the underlying datasets as you stream and merge/filter them.
On the Linux side, SELinux which sets guardrails on the root user at the kernel level is mandatory for protecting classified information. Thus, there is most certainly a security boundary between root, let alone regular users with "admin" groups/perms, and the kernel.

How can Windows, which is used all over the government, have a policy that admin users can do whatever they want with the kernel without it being a security vulnerability?
TIL I have no empathy if I oppose people shutting down intersections to destroy stolen cars and the streets.
My point is the more corporate the organization, the more they’ll only care about profit rather than what the public needs to know. Nonprofits, and orgs owned by individuals, are more likely to sacrifice revenue for such considerations.
What made them think that installing corporate antivirus software on their critical computer infrastructure was a good idea? They need to gather their sysadmins and go back to the drawing board and redesign their business computer infrastructure.
Deflation is good for people that have most of their net worth in cash and bad for people that ... don't

Think a little about it: if the money gains in value it would mean their property loses value, because it's price would go down (as the money will be worth more).

Rent seekers mostly have their net worth in assets such as properties and shares, and for those people, inflation is good - because these effectively become more valuable - because they're suddenly worth it's purchasing price + inflation. (That's the definition of inflation, you need more cash to purchase the same product vs deflation where you can buy the same product for less cash).

If every wage etc increased at the same rate as inflation, the difference would probably be academic... But it's not, most employees didn't get a total 30% wage increase within the last 4 years after all, which means that the total purchasing power of (for example) the American people has decreased.

This will ultimately reduce their ability to spend money on products, which means less trades that happen... And more accumulation of wealth, because the people that actually captured that value invested it in things that will effectively become rent seeking, ultimately furthering the spiral
> if you’re a fantasist thinking we should be living in a Bronze Age utopia.

Bronze Age people were smart enough to live in places with easy access to fresh water, so they're demonstrably wiser than whoever came up with this proposal.
> windows was developed before security was important

I disagree - At best you could say DOS was developed before users knew security was important... Microsoft has explicitly ignored security since DOS - because functionality sells better than security. Anyone who has worked with Unix systems has always understood just how much of a sieve Microsoft OSes are. Anyone with wisdom has said that about Windows from the very very beginning. Windows anti-virus has been a thing for a very long time.

If your prior is the number of extreme security vulnerabilities in one year - the implication is that there are lot of undiscovered extreme security vulnerabilities.

And competent WaaS (Weaponisation as a Service) now exists to quickly deploy exploits for obscure weaknesses or recently discovered weaknesses. Users and companies no longer have a few weeks grace before mass exploitation occurs.

Use Windows, get pwned. The counterfactual is difficult: it is hard to prove you haven't been pwned... Anti-virus defence is often too late (plenty of examples eh!).

I've seen very careful users/developers get caught out again and again.

Not to say Windows is alone. Routers and other end devices are just as bad. And Android doesn't appear great to me either.
Internals of Marten native partial JSON updates using Postgres PL/pgSQL
Looks like you have to supply a search query for the link to work. I just search for the letter "a":

https://www.facebook.com/ads/library/?active_status=active&a...

They also have an aggregate report page. It doesn't seem possible to break it down by ad category, but looks like the most recent big spenders are all political ads:

https://www.facebook.com/ads/library/report/
Social media is lambasted for presenting people with the most engaging information rather than what experts think they need to know, and social media companies are largely just maximizing revenue. I think it squares nicely.
char* is just raw bytes.

At the language level C historically hasn't offered much support for working with specific character sets and their encodings. With C17 and C23 we get u"...", U"...", u8"...", type char8_t, and similar, but there's still little/no built-in tooling for text processing.

For text processing work with char* whose bytes are some encoding/s of Unicode, e.g. UTF-8, then you an use a C library such as libunistring or ICU.

However the bytes of a char* could instead be an encoding of a non-Unicode character set, e.g. GB2312 encoded as EUC-CN.

So char* is character set and encoding agnostic. And C-the-language doesn't even try to offer you tools for working with different sets and encodings. Instead, you can use a library or write your own code for that purpose.

A number of languages make the same decision, keeping the string type set/encoding agnostic, with libraries taking up the slack.

In Nim, for example, the string type is essentially raw bytes (string literals in .nim sources are UTF-8). If you're doing Unicode text processing then you'd use facilities from the std/unicode module

https://nim-lang.org/docs/unicode.html

Same story with Zig

https://ziglang.org/documentation/0.8.0/std/#std;unicode

Lua too, and you'll probably use a 3rd party library such as luaut8 for working with Unicode/UTF-8

https://github.com/starwing/luautf8

Returning to the matter of pretty.c, since it's just sugar for C, it makes sense (to me) that the string type is just an alias for the set/encoding agnostic char*. It's up to the programmer to know and decide what the bytes represent and choose a library accordingly.
IMO the point of charging for negative externalities isn't necessarily to fund remediation of the negative externality but to internalize the cost and force the actor to make a decision about value to them and cost based on the real cost.

If batteries are a waste issue they should be more expensive till we as society feel we are adequately compensated for the externality created. We shouldn't pick and choose what use cases are valid for others. Everyone has different circumstances and preferences.
I created a public work log in a shared doc. I added to it every day and summarized by week. Anytime a boss or colleague or project manager asked what I’m doing or what progress I’d made I linked them my active work log.

Boom, daily weekly quarterly contributions in great detail with minimal overhead.
Just look at the lint filter of a dryer after just one load.
Thanks again!

You may want to check out this tutorial for a hands-on introduction to DBSP:
https://docs.rs/dbsp/0.28.0/dbsp/tutorial/index.html
Hi there.
Meet the service PBNMonster (pbnmonster.com).
Our service for SEO PBN networks consists of several services:
1. Proxying of sites (if you already have satellites and need each to have its own IP).
2. Creating small sites in 1 click: landing pages, business cards, company sites. Proxying is already enabled for them (i.e. each will have an IP address different from the others).
3. Renting or registering domains to order (so that the owners of your satellites are different and with different registrars).
4. Creating content for sites using AI in a few clicks and maximally corresponding to your topic.
Open source never had any of the ethics or philosophy that free software has.

Free software > open source.
> But wasn't that Windows rebuilt from the ground up as Windows NT

That was the 1990s. Windows security was transformed in the 2000s and then with Windows 10. I'm not sure it can be said to be more vulnerable than other OSes.
I had that one happen as well, after launching a project. I could even post in a messages to friends.
For Donald Trump, this is not enough!

He wants a national sales tax (he disguises it as a tariff) to make the American tax system even more regressive than it already is.
I'm not sure what distinction you're making besides allowing duplicate rows (which don't affect composition and you can remove with `distinct `).

I'm also not sure how to answer your question. Obviously a query builder is just spitting out queries that you can just write yourself. In the best case, they're a thin wrapper to give different names to SQL (e.g. where vs filter, select vs map, join vs flatMap). Perhaps an example would be how frequently, ORMs encourage you to do a load-modify-save pattern that turns into multiple statements to execute. This is usually more code, more error-prone, and worse performing than just doing an UPDATE WHERE. If you need complex reporting with a dozen joins and several window functions, you'll also see how difficult it is to write similar code in an application.

I'm not sure what you mean with composition of the language. The language consists of operators which you can chain together, and you can substitute expressions into each other to form larger expressions. E.g. you can join to a (select from where group by) expression in place of a table, and you can factor such things out into CTEs. What's not composable?
I don't have the energy to put all of the advantages and argue for them here, but take a look at https://atproto.com and maybe look around at other blog posts and articles that contrast atproto and ActivityPub. Might just have to do some research, since it's been talked about ad nauseam already in other spaces.
I just read this again and all is fine.

https://www.subgenius.com/bigfist/answers/rants/X0001_ACT_NO...

If you must change don't change into that what they want you to become. Wear the downvotes with pride. Become so arrogant as to not care what anyone else thinks of you. What you think of yourself is enough.
Can you help me understand the question (and context)?

Life the "machine" is a calculator, and I want to ask 5+5, but I put in the "wrong figures" e.g. (4+4), is the "right answer" 8 or 10? Is the right answer the answer you want to the question you want to ask, or the answer to the question you actually asked?