skysight-inc/HackerNews huggingface dataset:
Assuming donations would still be legal they have the funding structure to get around that through their foundation.
Windows definitely has its problems, but hundreds of millions of people use it daily without these kinds of issues. You’re doing something very, very wrong if that’s truthfully your daily experience.
Which is to say: in the worst-case plausible failure model for Signal, they get the same metadata access as all the other messengers do. OK!
Is that still true in 2024? Now that fees are up, settlement time is longer, governments can trace coins, and KYC controls are popping up at exchanges?
If I just needed to run a suite of microservices in Docker containers on a Chromebook, I would have gotten one for $170 instead of $70.

I'm not the person who posted about privacy - I consider chasing it a dead and fruitless end. Something will always be watching you. It's mere luck that preferring Linux happens to give me an environment that's mostly private by default except for anything involving the web browser.
I mean, I agree, but also it doesn't matter than I agree, because wanting everyone to be altruistic --- no, to share the same notions of "altruism" that we do, since quite a few hypercapable exploit developers don't agree that their home states shouldn't have access to whatever signals intelligence they want --- won't make it so.
What kind of vagrants? There used to be tons of roma people panhandling but they aren't homeless, and since the pandemic they're much less numerous (I'd guess I see less than a 1/5 of what I used to).

I really don't think you saw "plenty" of homeless on the streets here, not now and not a decade ago. Panhandlers, beggars, etc. do exist but they aren't homeless.

I do not trust your anecdotal experience, not saying the issue doesn't exist but it's not even close to a problem and orders of magnitude less than anything I've experienced traveling in the USA, around the Bay Area, Texas (Austin/Dallas), New York, Portland, Chicago, Detroit, Boston, and a few other places had a very acute and visible issue with homelessness that's incomparable with Stockholm.

So yes, public services being properly funded help a lot.
Yes, it’s a good thing overall. The cynic in me says if they waited another 15 years they could have announced a profit for all investors!
illumos is the living and thriving fork of OpenSolaris. I run some customers' private clouds on illumos. There are some contributions we may be able to upstream before 2025Q3.

Looking back on how things panned out, going all in on illumos a bit over ten years ago is something I wish I had done.

addendum: by "all in" I mean as an operating systems developer.
We built an entire app for our golf league- all using Glide and Google Sheets.

It was honestly a great experience- all the players had a great mobile experience with obvious forms and leaderboards, while the storage and compute was hidden inside the Google Sheet. The pricing was pretty reasonable- considering we could split the bill among us all, and we only needed it for about 4 months.

There’s still hope for good, quality SaaS! However, I hope Glide (or another) can figure out the pricing for the hobbyist tier.
Each new _unrelated_ SHA1 attack will need an update in SHA1DC. But it has to be truly unrelated, as the collision detection method is fairly robust. I recommend reading the original "Counter-cryptanalysis" paper [0] for details on how attacks work and how they can be mitigated (there is certain internal state in SHA1 that is used in all known attacks). BTW, this paper has an interesting anecdote: apparently Flame malware had exploited MD5 collisions using novel unpublished attack method... and yet it was detected by collision detector (section 3.2). Another example is that SHA-mbles attack, published 3 years after "Counter-cryptanalysis", was detected as well, with no required code changes.

No, there is nothing "fundamentally incompatible" in the new SHA1DC method. After all, git came out in 2005, 11 years before SHA1 attacks were known, so it used regular SHA1. The collision detector was added in 2017 and nothing broke, because false positive chance is 2^-90 [1].

I have not heard of any new SHA1 collision results, but if they are based on no-difference differential paths, git has nothing to worry about. And if they are not, it may be possible to extend DC detector to seamlessly detect and prevent those attacks, and then only upgrade git clients, keeping backward and forward compatibility for data.

Of course there is always a chance that someone will come out with all-new SHA1 preimage attack that cannot be detected without high rate of false positive, so it's prudent to switch git to sha256. There is a lot of work being done: git's sha256 mode went out of beta in 2.42 (2023), but neither github nor gitlab support it.

But since the current state of git's sha is that there is nothing broken, and git git commit hash _is_ "enough to know you are distributing/executing the legitimate code, as opposed to a malicious doppelganger", there is no real pressure.

[0] https://marc-stevens.nl/research/papers/C13-S.pdf

[1] https://github.com/cr-marcstevens/sha1collisiondetection
> Allowing Backspace to go back a page.

I mostly agree, but whoever came up with this shortcut should get choked.
It is also possible for a state-level adversary to simply hijack your phone, whatever it is, and moot everything Signal does to protect your communications. Cryptographically speaking, though, Signal is more or less the most trustworthy thing we have.
The IBM Z10 came out a year later. It was co-designed with POWER6 as part of IBM's eClipz project, and shared a number of features / design choices, including in-order execution.
Minimum is not “bare minimum”. The alternative to minimum requirements is no requirements.
MOR should be wiping everything, especially since after a cold boot the firmware has no idea what the previous memory map was. But I can imagine a universe where it doesn't wipe the boot services heap space (because some of that is obviously in use) and maybe a copy is hanging out there in a predictable way?
If anyone is curious, the following seems to work:

0. Install the Tree Style Tab extension (or whatever vertical tabs extension you prefer).

1. Enable userChrome.css: set toolkit.legacyUserProfileCustomizations.stylesheets=true in about:config.

2. Set browser.tabs.inTitlebar=0 in about:config so the title bar buttons (and, on some OS's, the title bar itself) remain visible.

3. Create =chrome/userChrome.css= in your Firefox profile folder and write the following to it:

@namespace url("http://www.mozilla.org/keymaster/gatekeeper/there.is.only.xul");

/* hides the native tabs */
#TabsToolbar {
visibility: collapse;
}
Delighfuly subtle <3
> and it probably won’t work in 5 years

Containers have been around for over a decade now. This "no backwards compatibility" meme is utter horse shit.
What do those two issues have to do with each other?
I use Google Forms to send data to a Google Sheet. You just put whatever lifts you have in the Form with spaces to add weights. I use this Google Form --> Google Sheets thing for a dozen different things.
Nice. If you havent seen it, I use 531 calculator religiously and it has a ton of programs on it, and very customizable https://blackironbeast.com/5/3/1/calculator?

Might inspire you as you continue to develop your app
My condolences to you and your family.
I'm encouraged that they're actively exploring this and not shying away from experiments. It seems clear to me that there are areas of Mozilla[0],[1] pushing closer and closer to great local AI integrations doing the kinds of things that I, a browser user, find useful. I went to some of the articles on the hn frontpage and had questions (and followups!) that begat reasonable starting points for further learning.

Hopefully they continue to iterate on this with better integration (for instance, moving to a toolbar icon instead of persistent badge on every page) and then make it ~truly privacy respecting by moving locally.

[0] https://github.com/Mozilla-Ocho/llamafile
[1] https://github.com/mozilla/translations
Instead of hiring american automotive engineers, elon just imports h1bs from mexico to work in his Texas factories. Personal knowledge.
It's something that's only triggered in the event of an unclean reboot so under normal circumstances it should be irrelevant and trying to be more elegant potentially increases risk?
I'm looking for a no code platform that I can use for my customers and charge a subscription for access.

Most of these no-code solutions target internal company Intranets.

But, I want to use them for apps I can sell to customers.

Does anyone have recommendations?
What might a programming language that was designed to be more easily or correctly generated by LLMs look like? Probably something Lispy. Without an organic corpus of existing code, it would need to be trained entirely on synthetic examples.
I don't know, a lot? They could with the same amount of effort just get Google to ship a backdoored operating system. Or the chipset manufacturer to embed a hardware vulnerability.
I'll just leave this here, please argue with it:

https://ludocode.com/blog/flatpak-is-not-the-future
At one time I was a big advocate for Unix/Linux on the desktop, but I think that ship has mostly sailed.

But, it seems that FUD about what it is capable of is still actively here, which is good to know. With frameworks and libraries, there is a 0% chance you don't have SOME update for your Windows app in a couple years, forget 5.

Now, there are lots of headwinds against Linux -- Windows is a known quantity, everyone knows the MS Office suite, people hate change and don't want to learn new stuff.

But to pretend that Linux is a house of cards because there are sometimes issues that cause troubles is not being honest. Even Windows can have big issues, or have we forgotten the CrowdStrike outage earlier this year?

All OSes have always had issues; that's why all of them have patches and updates.
very optimistic to assume commenter actually read the post :)
Is that how 'nonsense' is defined? Drawing connections the author did not intend?
Law-Abiding Immigrants: Incarceration Gap B/W Immigrants and US-Born 1870–2020
> I might as well point out that billions of people think otherwise of Linux.

These same billions, sans a very small fraction, don't even have "operating system" in their vocabulary. And as far as they are concerned, Chrome browser on one operating system is just as good as Chrome/Chromium on another operating system.

> Try installing a Linux program from 2005 with a UI made in any toolkit of your choice.

Personally I would not have difficulty doing this with containers. But there is no reason to do this at all. No sane and sober person wants this.
In a separate comment, I mentioned how Mozilla should have been more like Proton with their cloud storage, VPN, password manager, and cloud office suite.

In fact, they should have done that a decade a ago.

Mozilla has been around since the late '90s and should have evolved beyond just being a browser company. They launched a VPN service when VPNs were already everywhere, and they did the same with a bookmark manager when others were already offering similar solutions. Mozilla is always catching up, never leading, and that's a common issue with many big open-source and free software companies. They often pretend to be a business that isn't heavily propped up by big tech donations.

If I were leading a browser company, my focus would have been aggressively directed towards small business software. I’d create an internet and privacy-focused affordable minimal business software suite that lives within the browser — a combination of Proton and Zoho. And I’d strongly avoid building things that should be browser extensions.
It could use taking a real good look at the "user journey". How would one even get to having linux on their desktop? It seems like it still overlooks some basic stuff. Like, having a website that's straightforward and doesn't bury how to get a distro. Instructions that'd be written with clarity and wouldn't just drag on for dozens of steps (and even if they do, that's just the stuff that should be written smarter, not in a way that'll just overwhelm someone and just make them check out). Granted, even just putting install media together in the first place might be enough to make some people check out already, but still.

There are things like fedora's media writer, which is good, but even that is kinda needlessly buried under several clicks, because their website just isn't regular user oriented, I guess (which is a real common thread) - there's server and enterprise stuff, which is just a distraction and would be irrelevant to such user, so why is it even there, or why isn't there a "consumer" fedora website...and it's just stuff like this. Take a look at ubuntu's website, and you'll see a similar (but also worse) situation. Just literally, where would a regular person even start there? They'll see all this enterprise stuff and just leave. Debian, there's a huge download button - great! that just downloads an image and uhhh...what one is supposed to do with it? there's bizarrely not even an 'installation instructions' link next to it on that page. there's a "help" link, but it doesn't lead to installation instructions, which are actually under 'other downloads' link, and buried under several overcomplicated pages, with the manual itself being so overly long it'll make anyone give up on using it, simply because it has a poorly usable interface.

It falls apart before someone would even get on, cause there kind of isn't a solid path for them. Like, back to basics. How about making stuff easier to get, really basic stuff like unburying download links and making stuff easier to understand...well, that is, if those distros and companies are even interested in 'consumer linux' anymore, which barely seems that way sometimes. Maybe a user friendly way isn't to just throw an iso file at someone (if they'll even find it) and have them go figure. Maybe that's exactly why linux user base is not growing substantially.

Also, just try to not even tell people to use terminal. Like, don't even start with 'you can apt get anything'. They won't. Just say 'get apps from an app store'. That's actually user friendly, and it already just exists in distros. As a further challenge, one might wanna consider any time a user has to use terminal and/or blindly copy some commands they don't actually understand in order to do or fix something, a usability failure. (cause it is.)
*uMatrix is unmaintained, and uBlock Origin can do fine-grained control – it just requires the “advanced user” setting for some reason, even if you expand the panels all the way. https://github.com/gorhill/ublock/wiki/quick-guide:-popup-us... (see “I am an advanced user!” expanding section at the bottom)
> How do you roll back a dozen stored procedures quickly?

Liquibase rollback feature. The SQL changesets and rollback strategy is all defined in my .sql liquibase files and goes inside my git repo alongside my scala/python code the associated CICD automated integration tests + deployments.

Blue Green deployment can handled via bidirectional active-active database replication across your two disaster recovery databases; you deploy the newer stored procedures on one but not the other. Or you have sharded databases for some but not all customers and deploy blue/green with appropriate blue/green sharding. Or you could have separate version numbers for the stored procedure names (perhaps with a wrapper stored procedure that works differently on different shards/databasenames to isolate the impact from your non-SQL codebase.) Or just put a form of feature flags in your stored procedures; it's not 100% blue green but with minor integration test coverage it can be quite safe and allow you to run two code bases at once even in a single database.

Agree with you on triggers (and I agree to a point that stored procedures are often not the right approach despite my above rebuttal... but it is quite straightforward with the right tooling/mindset. For high-volume analytics with aggregations you might be better off leaving the data in columnar database SQL and doing some stored procedures if the code was complex enough; but for CRUD apps I would strongly discourage stored procedures.)
> OP is wrong, SQLite does match the requirements outlined in the OSI's definition:

That is true for most of us, but there are jurisdictions that do not recognise the public domain in the same way. SQLite's license page mentions this and offers licensing for people who need to deal with this. https://www.sqlite.org/copyright.html
Nested transactions handle commits. At the beginning of a test, a new transaction is begun, and it is rolled back at the end of the test. As others have pointed out in this discussion, it's pretty standard with Ruby on Rails apps, especially those which use rspec for testing.
The garbage is a result of me using Linux for almost 30 years and also being an active Linux maintainer.

I can vouch for every word in the article except maybe the last section but this discussion alone speaks for itself, so even that part is not totally wrong.

Here in this discussion we've got all the falsehoods that I've heard a billion times already:
* It works for me it must work for everyone else (never mind other people have different hardware and use different software)
* I've not had any issues it's all made up (the same)
* I can show this, that and that exception (yeah, exceptions normally prove the rule).

Have fun with a no-os. I mean your specific distro version with a specific set of libraries and applications that you're using today that is not compatible with anything else under the sun.
Good to know, as I still use an S5e as my comic reader. It's not getting security updates anymore, but to be honest it's not like I'm running banking software on it, so I don't care as much about malware risks as, say, my phone. It's still plenty speedy on stock firmware.
>Sadly it's not just one bug tracker, I keep an eye on many of them.

How many Microsoft or Apple bug trackers do you have access to? The fact is that we have to consider that open-source work is largely done by volunteers and commercial developers with their own use cases in mind, and we only know about the drama because it's out in public. The drama inside big tech firms could be worse and on a larger scale and we would likely not know about it. Even if an insider told you something, it would be only a small part of a bigger picture you can't see.
https://github.com/Fchaubard/gradient_agreement_filtering linked in the paper
So I am friends with a bunch of photographers. Some are proponents of open source. Others don’t care. But universally they would rather have a thing that just works and feels right than mess with Wine. You can do almost anything. When your paycheck depends on your software working your patience is likely to be shorter.

I say this as a person who is a huge fan of Linux/Unix on the desktop. I wish I still was able to run it as my daily workhorse like I did for a decade and a half (and that was before the distros actually got good at this). You can make it work. But an average user isn’t interested because there are only downsides and little benefit.
I am sad for for your loss but glad he had such a large impact on my life and so many others.
such a random product. uses an old tiny model, they are paying the gcp bill, and it's to summarize content?

why not use their technical expertise to built an in-browser "https://big-agi.com/" of sorts where users can paste in their API key and use bleeding edge models in combination with the browser's data which they could expose and manipulate as the creators of Firefox!

this product seems really random and quite frankly weird.
What's with the 12-34-21-33 loop shown on Concorde's st70 path as shown on OP's article? You'd expect it to avoid intersecting routes in a final answer to a given problem.
I guess on a more general level, I'm confused why a metal detector with bit some machine learning on top wouldn't make a better widget? You'd think that different shape metal object produce different magnetic flux, and there's probably more dimensions to that than just size?
> They do it to make the platform more pleasant so that people stay on it

Almost everything unpleasant I see on FB is stuff that the FB algorithm shows me - not things posted by FB friends, or pages I follow or groups I am in.
No they do it to support their owners’ and employees’ biases. It doesn’t make the platform more pleasant for the half that gets censored. That’s leaving aside the feed not remembering the choice to view chronologically ordered posts, the inability to easily track actual people in my life, the addictive algorithms, the clickbait that causes mental health issues for teens, etc.
Userland Exec bypassing bypassing SELinux's execmem, mprotect, and W^X
Exactly, there's a layer (integration testing) where I usually do need to have a test against a mock to validate my function doing the external call is passing a request I expect. I can break it down into a parameter supplier function that will generate the proper request params and test that but I don't see any gain in abstracting that away simply to avoid mocks.
Given that web browsers are the heaviest application most users are running, and they are running them on low end 10yr old laptops with 8gb of RAM, I think an ultra modern lightweight web browser would be noticeably better.

Web browser crawl on these low end laptops.

This is how Firefox became popular in the first place, by being better.

The “we need an alternative to the “WebKit/blink/chromium” monopoly is what the majority of people will never care about.
Lambda functions would like to have a word...
I use sideberry. Once you get it set up (not super user friendly) it’s amazing.
The projects I worked on always had a mechanism to dump data into a proper database. For example, I built a daily scraper to collect some of the inventory. I didn’t keep all the data in a single sheet. Instead, all the data was stored in a cloud-based managed SQLite or PostgreSQL database, or sometimes a local SQLite database. Only the day's data was stored in Google Sheets because the client wanted to see the spreadsheet themselves and have the UI be accessible for their users.
A hedge that didn’t pay off despite the Mozilla CEO doing their part at trial and then promptly retiring on a huge pile of GOOG bucks.
I was waiting for something like that to happen! Next step - creating a human-language-free representation. I believe that once a group of llms can communicate only in embeddings tuned without any human text input, we're going to open a completely new chapter in AI.
Courtesy of <https://codeberg.org/loke/array#what-the-language-looks-like>

> The first line of code in the following example assigns a string to the variable A, and the second line splits the string at instances of -, returning an array of arrays (a string in Kap is nothing more than a one-dimensional array of characters):

A ← "this-is-a-demo"
A ⊂⍨ A≠@-

Oh, I see
Oh, they know. They've added 200GW of solar power this year.
> At least 50% of posts that point out a spelling or grammatical error contain one as well.

Quite true. While I do not generally claim to be a grammatical wizard, I do know when I hear from one (hello Zortech-C++, it's been too long!).

If you don't mind pointing out my mistake(s) above, I would appreciate it as my goal was to exemplify the social effect of pedantic critique. Being corrected when doing same could serve as an additional benefit.