skysight-inc/HackerNews huggingface dataset:
> Legend goes that security oriented people will visually customize their machines with stickers (and their associated aging patina) and all kinds of digital cues on the different screens just to recognize if anything was changed.

Maybe I am mistaken, but I feel that the people going to such lengths to ward off an attacker and the people who’d want to rely on fTPM with Bitlocker over FOSS full disk encryption with a dedicated passphrase are two entirely separate circles.

> The TPM is not there to protect against NSA, or proverbial $5 wrench attacks but as a thick layer of convenience over the thinner layer of security.

I agree with you there, it is convenience, not security, but as such, should it be any more mandatory than any other convenience feature such as Windows Hello via fingerprint or IR? I’d argue only for newly released hardware, but don’t make that mandatory for existing systems.

Especially since I had one case where fTPM was not recognized, no matter what I did, despite it being enabled in the UEFI and showing up in Windows 10 and on Linux, I could not install 11.
Which cards strip modern HDCP?
> ... you only need to translate requirements of individual APIs to Rust's safety requirements...

> That Linux drama was due to "nontechnical nonsense" of maintainers refusing to document their APIs requirements.

> If those specifications were written down clearly enough then this dev wouldn't have needed to spend 5 days debugging...
>Most people besides techy libertarians with empathy trouble generally think that workers should be getting paid enough to get by on

I think everyone will agree that workers, or anyone else for that matter should live comfortable lives. The question is how and who? Should those poor souls slaving away under an authoritarian regime be given a chance to escape to greener pastures?

The question of wages is well outlined, but more concerning is the purchasing power of those wages. This relates directly to productivity, specialization and the cost of goods.

As for the concept of nativist birth right entitlement, for myself, I must start somewhere with first principles. Perhaps you have an alternative method of reasoning that you might outline for us.

Many here take libertarianism to be some kind of Gordon Gecko caricature, or perhaps the Monopoly Man comes to mind. Yet if they propose that the state take matters (authoritarian regime?) into its own hands with central planning, they assume it to be a purely altruistic endeavor. Regulatory capture and a host of other malign incentives are lying in wait.

Please don't assume a lack of empathy. It is simply a different approach to solving the problem of how workers or anyone else can prosper in an economy.
>the fucking-for-virginity approach to endpoint security

???
Oh dang. One neat side-effect of increasingly-powerful storm energy from climate change.

I only surfed one time at Cowell Beach through Club Ed. It was fun and stood up the first time out because their instruction was really good. A chick from my San Jose high school class would often ditch to go surfing Mavs and recount how awesome it was.
The Vita-Meata-Vega-Min patent medicine act:
https://duckduckgo.com/?q=VitaMeataVegaMin&iar=videos&iax=vi...
> but they don't consider that socializing.

Which is exactly why this will make Facebooks problem even worse. Honestly I don't think Facebook understand what their main issue is, it's lack of real human interaction. The stupid part is that they killed their main product themselves, in order to push ever more ads.

LinkedIn is becoming a shit show as more and more people are posting stuff that previously belonged on Facebook, though they are tacking on some work related angle, you know to keep it professional. It is my opinion that the reason why LinkedIn is seeing more and more of these Facebook posts is because it is the last place online where you'll get real human interaction and socializing (however f-ed up it might be).
Inside Zildjian, a 400-year-old cymbal-making company in Massachusetts
BTW, New Update Alert: fixed this with 4 lines of Python code
uniquetwid=[]
finalresponse=[]
for i in response:

if not uniquetwid.__contains__(i['tweet_id']):
finalresponse.append(i)
print(i)

Let's Enjoy, reading unrepeated threads now !
Indie gamedev. It will feel like early day startups again. And gamedev is so special that every one in a while you switch to a new project, and that again feels fresh. But gamedev is demanding.
Building a Decentralized Ecosystem of Agents
Depends on the team you're working with. I'm not going to call out names. But some teams are nightmare 60hr weeks and other teams are 30hr weeks.
You could but the user might notice. Most business laptops don't exactly look like new.

I would very likely notice.
I'll echo what the others say - if you think the path is clear (but you should think twice about that, of course), then don't be intimidated. A long time ago I participated in a negotiation/scoping on a big project, and while most of the people on the other side were a VP of some sort, in the end all but one turned out to be basically senior devs and their managers.
There are several of these already.

Example: https://apps.apple.com/us/app/socialai-ai-social-network/id6...

Surprisingly, it has broadly positive reviews. Maybe Meta is onto something.
Observability Prediction 2025
You could even create targeted brands: "Narcissistic Social" -where everyone sees you the way you think you are-
It's a valid desire, but you have to be really dedicated to the effort to block it, in practice.

You might intend your API to be consumed only by your own clients. E.g. your published mobile apps.

A well-designed API won't allow a third-party client to do anything that your own client wouldn't allow of course. Permissions are always enforced on the back end.

But there are many cases where a user might want a custom/different client:

If your mobile apps are not awesome, or if they deprioritize a specific use case, or if they serve ads ... or even if your users want to automate some action in your service...

If your service is popular enough (or you attract a certain kind of user), you will have some people building their own clients.
The application specifically lists the NAICS code so it's not just the location.
That is more of a theory than reality. In practice you need to emulate the Linux kernel in order to run Android. Keep in mind that Android is more than just the apps you run.
I see people here having trouble with this, be thankful this isn't Plutonia on Ultra-Violence.
I've seen plenty of startups who's single-page includes the pitch, and the founders section which has big logos of their alma mater (almost always Ivy leaguers + Stanford) and whatever FAANG or consulting job gig they had previously.

Easier to land investors and customers if you have the "correct" pedigree.
> 1) Raise the minimum salary to 200k+. Anything else is indentured servitude/downwards wage pressure.

The average American salary is less than 70k per year. Don’t you think 200k is a bit high?
Personally, I wasn't a fan of The Reasoned Schemer's format, https://io.livecode.ch/learn/webyrd/webmk worked better as my introduction.

See also: µKanren (http://webyrd.net/scheme-2013/papers/HemannMuKanren2013.pdf) and various ports like CL (https://github.com/rgc69/si-kanren) or Clojure (https://github.com/clojure/core.logic)
I work mostly in web / server side development, it's not really a problem I've had for a number of years now. Some of my colleagues use various linux distros, others macos. No one is using Windows that I know of.

Each project we have requires a specific tool chain version (python, elixir, ...) and specific versions of things like postgres. All dependencies are listed with some kind dependency definition file (pyproject.toml, package.json, mix.exs). If you bump a package it's done in the definition file as part of your changes and goes through CI for packaging and releasing. The rest of the team will get the new package version as soon as they pull your changes and run `just deps` or whatever. CI is the ultimate determining factor of whether your code actually "works".

We also package and deploy with containers, but this isn't the real determining factor for any of the above.
Actors immediately made me think of Pony. https://www.ponylang.io
Have you ever had to actually hire?
The phones are using their TPM equivalent to do it securely, though -- there's not nearly enough entropy in a lock screen to provide robust security, but the boot-time unlock depends on both the screen lock and the hardware, and the hardware will rate limit attempts to use it to turn lock screen inputs into usable encryption keys.
Sounds about right, and we just elected GPT-2 president, so 1.5b parameters is an upper bound on what you need to impress most people.
Examples of Fediverse bots that run as independent Fediverse servers
i know it's easier to just drop the internet tarball on the transformer, but at some point we need to just be giving these models grade school math homework and times tables.
Thank you, my dreams have finally come true.
It often protects me from things I miss. E.g. when I'm TDD'in a feature and I'm implementing the 5th-6th test I often find myself inadvertently breaking one of the earlier tests.

I do think there is such a thing as overtesting - i.e. regretted tests. TDD actually protects you from this to an extent by tying each test / modification of a test to a change in code.

Runtime assertions definitely give you more bang for the buck (they are ridiculously cheap) but they are complementary to tests, not a replacement. It attacks the same problem from the bottom up instead of top down.

I also find that when you combine the two, the tests become more useful - previously passing tests will fail when they trigger those assertions.
Dynamic documents as personal software [video]
You can use it, but you're swimming upstream if you do. Fewer buyers, fewer sellers of things you might want to buy.
I don’t think there should be a law requiring companies to keep a forum up. But perhaps it would be nice if we could have a customer protection based requirement to have some sort of customer support, along with acknowledgement that a customer support forum that could go away at any moment doesn’t satisfy that requirement (so either include better customer service or take steps to preserve the community).

I mean we wouldn’t want companies to fall afoul of some law because they had to take their forums down due to some privacy ruining bug in the software. Or because the old forum server sitting in the basement died. Or because the third party software they used for the server went out of business.
The post author doesn't understand the difference between industry and occupation.
We were sold on H1-B's being extraordinary people working extraordinary jobs that Americans cannot fulfill, not a wage suppression indentured servitude program.
I'm not sure of the history of April 15 specifically, but April or so is probably about the earliest you can easily get all your reconciled financial statements if your finances are at all complex and put together your tax filings. I don't even get a W-2 until late January and I have at least one statement that tends to trail into early March.
I am at Google (and have been for quite somewhat over a decade now), and am over 40 too.

Despite a lot of internal criticism about "the old Google" and how things have changed, they are still a very good company to work for in my opinion. Lots of well-known benefits, decent comp, and critically a very good work-life balance (no mandatory work-from-office so far, I probably average about 0.5 to 1 days a week in the office) and laid-back pace. I have been basically doing 8:15am to 3pm for my hours (no discussion with management about it - it's just what I do), essentially logging off at 3pm to go collect my kids and not logging back on after that (although I keep a rough eye on chat and email and jump back on if something urgent/critical comes up) and no one has batted an eye lid at all - so long as the work gets done, people are happy and are not closely monitoring where you are or how you are working. Some of the work is interesting and engaging, other part are more "meh" but I think that is true of many jobs really.

Yes I might be able to get slightly more money elsewhere (especially fintech) and might get to work on more sphincter-clenchingly-exciting work elsewhere (especially startups) but the quality of life from what is quite an easy ride of things is very valuable to me. Google is quite grown up in many ways and the culture is calm and predictable (on the whole - the recent (year or two ago) redundancies were not predicted!)

I'd recommend it.
Testing is not really an economically viable option in all cases. Ecosystems are simply to diverse and products are so complex that covering every case is not really possible. There is likely no software you use today short of projects like sqlite which don't leverage user reported bugs or telemetry to improve the software.
maybe add a source
As the article points out, the TPM is not in a good place, architecturally, to use for DRM: there's no path from the TPM to the screen that's not under OS (and thereby user) control.
> The richest man in the world, who just fired 90% of his employees

This isn't true. Best I can guess you are referencing the company formerly-known-as-twitter. The 90% number refers to software engineers, not employees and only applies to one of several companies that Musk runs.
Did you actually scroll past the header? There's a ASCII gif of a blowjob
Ah the Erable HP48G/X. It helped me through AP Calculus BC, SAT-I (math section), and college physics and math for an EE/CS undergrad degree.

I remember using the HP 48's overpowered IR LED and ability to share apps to get the universal remote app to turn on and off TVs in the lecture hall from quite a distance. :@)
Also, on mobile the video ads plus Fandom navigation bar now take up a sticky combined 50% or more of the viewport until you find the close button.

Also, Fandom got its start by taking advantage of the easy, permissive nature of CC licenses of major early wikis, including much of Fandom started as chunks of even Wikipedia itself that got excised for "relevance" or other "non-encylopedia" factors. Even in some of the cases where communities have decided to leave Fandom, Fandom believes it remains their right to scrape the community's new site and not need to include links back to the "real" home, so Fandom itself becomes an SEO disaster for the community. Even communities that had hoped to protect themselves from such situations by choosing a more restrictive CC license with the NC (Non Commercial) clause have been struggling with revoking Fandom's access to their content against Fandom's legal team saying that Fandom's commercial waver to the content was both retroactive and in perpetuity, and those wikis would have known that at the time.
I'm going to say "when" and not "if" here, because of your assertion above. VC's spending multiple fortunes on shoehorning in shit that nobody wants or needs.
To be fair, it seems like getting Google to interview you is a challenge.
I use it at the moment and don't really find any noticable difference between running directly on my host, and in a dev container. If I were to measure the performance I'm sure there would be something, but it's not noticable in my development cycle.

They also seem to be pushing it beyond vscode and into something which is editor agnostic. It's not quite there yet on that front, but I'm excited for it as I've been dabbling with other editors recently which don't support devcontainers directly and it always pulls me back to vscode.

It's on a journey for sure, but I've had no performance issues when using it straight out of the box over the past year.
My 2024 in Review: AI, Archery, and Goals
In which I discuss the idea of writing yearly reviews in the first place, some professional wins this year, some personal goals I'd like to achieve, and the state of my health.
Yes. These people spend way too much time trying to get things right that they over complicate it and generally don't do a great job of making things usable.
> indentured servants on H1B visas

That a pretty loaded statement on its own too.

I was an H1B, but I most certainly didn't feel indentured. Nor did other recruiters who wanted to talk to me.

I did actually end up moving back to Denmark, but that's another story.

I think my point is that even for Europeans that have competitive job offers elsewhere, H1B is still the easiest visa, if you want to work on the US.

I'll admit I think I mostly did it for the experience -- it was fun, I learned a lot -- but it's not like I couldn't have gotten the same job in Europe or Canada. I probably could, probably even with the same employer. I did even work remotely a few months from Denmark before my H1B kicked in.

I would be sad to see H1B go, I had a lot of fun. And if I wanted to stay I'm confident I would have found a green card sponsor with ease.
Can you please say which device you bought?
90% of Europe doesn't care about America's prudeness. We see you as socially outdated and far from what you are trying to show us from Hollywood.
Frankenstein: Annotated for Scientists, Engineers, and Creators of All Kinds
I've been trying to block all that with some success. Not much - there are more meme groups for every niche subject than you would think and someone into that niche feels like they need to share them all.
Here's another miniKanren-related livecode you might enjoy (both are thanks to Nada Amin's cool livecode.io tech!):

https://io.livecode.ch/learn/gregr/icfp2017-artifact-auas7pp
Be good and you can work anywhere you like.
If we do that the relative cost of software will increase and reliability will overall decrease. This doesn't sound like a great outcome for end users who will end up dealing with both of these things.
I wish I was smart enough to understand this. I printed out the paper and tried real hard to understand but felt hopelessly out of my depth.
I always read how great Ruby/Rails are, but learning language just for one thing (Rails) rubs me up the wrong way. Especially when alternative (Python) is so much more useful (on a surface) and Django can do the job of Rails (while not as good or nice as Rails (from what I gathered), but still). Kinda like learning Dart for Flutter.

Those of you who struggled with the same dilemma, what did you do?
What warrants a "sigh" here? The author is talking about specific situations where the whole text is in context, which I agree is surprising, but you reply with a generic dismissal of LLMs.
> the expansion of the definition of porn to suit political purposes

How would that work? "Hate speech" for example is very easy to define broadly enough to ban basically any opinion those in power deem undesirable. But how would you do that with porn? Is the government going to somehow start classifying news articles criticizing particular political candidates as pornography? That seems like such a ridiculous stretch that it couldn't possibly work.

If there's any danger here, I think it's more the potential for collateral damage on human freedoms, like the right to online anonymity. (E.g. Widespread deployment of age verification systems requiring users to provide a government-issued ID.)
We could call such an app "echo".
> They say they do but they really don't,

Probably depends on your usage pattern. I think most would prefer it, but "engagement" measurements will make it seem like they hate it, because they spend less time on the page. If companies like Facebook actually wanted to know, they'd make the setting "sticky" rather than constantly reset to algorithmic, then measure over 3 - 12 months how many switches to either one and stays there. The fact that you can set your feed to permanently be chronological tells me that Facebook REALLY doesn't want you do use this feature.

"Power users" may prefer the algorithm, due to the volume of posts they'd see, while many casual users prefer reverse chronological and then just check in every other week. Seriously the last year I was on Facebook, that was my usage. Block everything not posted directly by a "friend", sort by date, read the five posts from the past two week and logoff. Took me just a few minutes a week to catch up. I just don't think that usage aligns with Facebooks business model.
I do think it would differ significantly if you were trying to garner interest. Flexibility would help vs. a more structured presentation.

I can’t say I like the linked deck too much. Titles with no thesis. Visuals that don’t demonstrate anything on their own. It can work for speaking over. But it doesn’t actually convey information.
Iam at 41, but I learned 100X in my last 2 years than i was at working in sales
for a domestic company for 10 years. Currently pursuing my passion - Startup in workplace collaboration.
Moral: Age is just a Number.
I am turning 43 and trying to figure things out as well. I am at the point in my life where the most important thing to me is not work. I just want a balanced 9 to 5 without toxicity or high demands. Is such a thing possible in this industry? If so where?
Four missing bolts ruined Boeing's 2024 flight plan
Because some of us don't want to live in the US?!

As an Australian, I could easily earn at least twice what I earn here in the US, but no amount of money would entice me to put up with dealing with your healthcare system or to subject my kids to "active shooter drills" at school.

I lived in Europe for close to a decade, and I can assure you many Europeans share this sentiment.

Weirdly enough, I grew up an Americophile, watching Beverly Hills 90210 while reading about Jefferson and Washington as a teenager. To this day I have a picture of Abe Lincoln on my wall.
That's kind of the entire point of being a sovereign nation?
He had major layoffs at tesla too https://electrek.co/2024/12/30/tesla-replaced-laid-off-us-wo...

EDIT: in general, my point is that he practically triggered mass layoffs at large companies by being so vocal about doing it at twitter. A ton of investors were celebrating it after and pushing companies to do the same.

The market for software engineers crashed after https://fred.stlouisfed.org/series/IHLIDXUSTPSOFTDEVE

Also see the layoff charts tab on this site https://layoffs.fyi/
Likely not an issue. Convincing consumers to strap a brick to their face has proven to be a persistent challenge, which even Apple has not been able to overcome. However, there is also a nontrivial percentage of the population who medically cannot use VR/AR. This population is large enough that there is a market for "2D Glasses" for removing 3D effects from movies in cinemas. Releasing a title as a VR exclusive means excluding this population from your sales figures entirely.
In addition to this, Google is phasing out device integrity check to the Play Integrity API, which will completely kill custom ROMs if apps adopt it, which bank apps most likely will, because their entire security is based on box-checking.
While this criticises PowerPoint - I don't think it sufficiently outlines an alternative.

As someone that has tried to write a decision paper before rather than a PowerPoint deck, I found the main challenge was engagement (i.e. encouraging people to read it is a challenge, while a powerpoint can be walked through together).

I could present a spreadsheet, but that only addresses the financials or numbers and won't address the business context.

And if you go into a board meeting empty handed to talk about a large investment - good luck!

I think it's probably a case of horses-for-courses: Sometimes PowerPoint is a great format, other times it might not be, and like any format it can either be used well or poorly. The issue in the Columbia example wasn't PowerPoint per-se, it was that the managers weren't clear in their communication.

And while bullet points are poor in some ways - they are great in others. Distilling ideas down and making sure your list is MECE is part of clear communication and thinking.