Kunix

I found a few things surprising about this bug too, but this might be due to my own ignorance about how these processes work:

- I was expecting the package to either be revoked, or to have a new `6.1.64-2` version being published with the previously good known state.

Maybe it wasn't done because it was not possible (mirrors being write-only, and maybe other complications in publishing a 6.1.64-2).

- I was expecting some guidelines to be published for affected machines. I've seen questions being asked [1], but no answers to them yet (so users are not sure if it would be safe to rollback to the previous kernel version (6.1.55-1) or not).

Maybe it's because the problem is not well understood yet, or maybe there are not enough people available to answer such questions on a weekend?

If someone can provide some context about "how these things work", it would be interesting to learn more about this.

[^1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057843#33

I saw the message yesterday late in the evening, I still had 8 hours before my automated updates ran and I thought the package would be revoked by then. Mistake :/

Have any guidelines been posted somewhere for systems already updated to linux-image-amd64 6.1.64-1?

I am using a variant of SnowflakeId [^1] in order to have 64 bit keys too.

It's similar to UUIDv7 (it leaks the creation time), but it's not an issue for me.

So I am able to have a single 64 bit key, which can easily be formatted into a small string for user-facing urls.

[^1]: https://instagram-engineering.com/sharding-ids-at-instagram-...

Very nice! Happy to see this evolution coming from Obsidian, it seems like a more natural way to organize concepts and ideas.

One question: It seems it could be troublesome to have to move / resize everything when adding a new card once a canvas is already quite busy. Is there something like auto-layout in the work, to handle these situations? (like to automatically re-layout cards and groups once adding a new item in between)

Done the same for over 10 years with a local "@Worklog.md" file on a light text editor (to get syntax highlighting). Can be synced with Dropbox or Obsidian too.

Recently switched to do the same on Notion, moving items in a "Worklogs" database at the end of each month (with one entry per month) to keep the Worklog size manageable. If a task gets too long I can just create a sub-page for it (or a toggle), put all the context information there, and just add a link to the TODO item.

Don't be "pro-active" be "re-active" - is my way of putting it.

As much as I recognize this can be good advice, this comment makes me sad.

It's like "start underperforming" is the answer given to bad management problems.

Which I agree actually makes sense in a lot of companies (if pro-active efforts are not already being recognized, then it's hard to change the culture).

I also think that a lot of comments here are directed toward financial success, but many people are actually looking for meaningful ways to contribute. People for which the "re-active" approach might not be a solution.

What would be the solution for those people? How unlikely is it to actually switch to a company which recognizes employees willing to be more involved?

Tracks is what made me discover the demoscene 20 years ago when I was in secondary school. Such a great show.

I loved StumbleUpon, and I find myself missing a discovery tool like that one. Reddit and other websites give me the impression of running in loop. If anyone has good discovery tools to recommend!

Same, long-time developer, I've followed the course and learned a lot (as long as you invest the effort ^^). Great content!

One made with Word and still updated: http://villemin.gerard.free.fr/

About libraries of models, it would be useful to have open source pre-trained models which can be augmented through github-like push requests of training data together with label sets.

It would allow to maintain versioned versions of always improving models everyone can update with a `npm update`, `git pull` or equivalent.

I am surprised by the number of naysayers here.

Question: Do you have something better to suggest? (something that could realistically get implemented)

Conventions like the one suggested here are the baseline on agreeing on common rules. It allows accountability, boundaries, and once accepted open the way to discuss possible sanctions.

I would much rather see positive steps like this one than no progress at all.

Blackbox is one good way to store secrets: https://github.com/StackExchange/blackbox

Good software rarely makes money by itself - you'll need to have a focus on validating your market, acquiring new users and finding features people would be willing to pay for.

levelsio is a great example of this. The guy is actually graduated with a Master degree in "Business Administration, Entrepreneurship & New Business Venturing" [1]. His main focus is on business development [2][3][4]. Software development is just something he needs to do in order to grow his business ideas.

Nomad List is great not only because levelsio created a nice product, but also because he successfully built a community and did great marketing to promote the "digital nomad" way of life.

So question to yourself: Why do you want to do this for? Creating a business or creating a software?

If your main motivation is to create a business, then design your software development cycle to spend plenty of time focusing on the business needs.

[1] https://www.linkedin.com/in/levelsio

[2] Greatly handles communication - https://twitter.com/levelsio

[3] His blog posts are designed around visibility, product placement and referral links - https://levels.io/how-i-build-my-minimum-viable-products/

[4] He uses whatever technology is the quickest / most convenient for his business ideas (nomadlist started as a Google spreadsheet, then as a PHP website).

Naive question - Does anybody know how the Amazon reviews datasets available online have been generated? Is it web scraping? (on millions of reviews?!) Or partnership with academics? Or something else?

Looking at https://snap.stanford.edu/data/web-Amazon.html and http://jmcauley.ucsd.edu/data/amazon/, I can't find any mention on what process they used to generated these datasets.

If they had to recall all vulnerable devices I am sure they would take security a lot more seriously.

So glad I'm evaluating other email providers and use Privoxy for ad-blocking.

I find it to be not that easy to find good alternatives.

In the long run good products require money, and money is massively flowing at advertisement currently.

That's why the big players are Google (ads), Facebook (ads), and I suspect that's why Microsoft is starting to massively collect user data (from Windows 10).

Building good competition requires money flowing at them, and people don't seem willing to pay for such products.

The only alternatives I see currently are:

- A change of rules (laws) regulating advertisement and personal data.

- A change of the funding system to give more opportunities to people to unite and bootstrap their own initiatives (basic income?).

- A subscription-based subset of Internet were you pay $10-$30 each month and can access to a high-quality service providers (news, email providers, etc).

- A major actor benevolently sponsoring such efforts (states or other wealthy entities with funding capabilities).

Agreeing 100% with you.

The goal of the test is just to give an approximation. The test is not accurate (and is not claiming to be).

The core of the theory is to highlight natural preferences in the way we use cognitive functions. It's a pretty good and useful model. It's not a definite one though, like all the models we have it's meant to be improved and replaced over the years (like in physics).

99% of the critics about MBTI are focusing on the tests (which I agree are not accurate) and the authors don't understand the theory behind it - which is the really useful part. (Carl Jung's work, cognitive functions preferences, etc)

For all of us who frequently have to attend conf calls... https://www.youtube.com/watch?v=z_tiqlBFjbk

Indeed, I think it's very what is lacking (online empathy) and I am glad that VR is intended to address some of the challenges we currently have with online communication.

Details:

I wanted to have a nice way to compare the different coworking spaces in Berlin, so I've created this.

The purpose was to be able to see them on a map and to have a quick access to their pricing information.

If people like it I'll add a more natural way to make edits (as well as to add new coworking spaces / open new cities).

Technical details:

No backend, purely static hosting (with client-side rendering through React), no hosting cost so far.

Stack: TypeScript, React, static pages generation through ReactDOMServer for SEO purposes, hosted on github pages, SSL through CloudFlare.

Map tiles:

- Currently using Leaflet / Mapbox (50,000 map views a month for free).

- Considering eventually switching to Google Maps if reaching the threshold (25,000 map views a day for free).

- In the future, looking forward to see the work of the Wikimedia Discovery team as it looks very promising: https://www.mediawiki.org/wiki/Maps / https://maps.wikimedia.org

First website I am making since 2006, feedback is welcome :)

I would strongly recommend against using Seafile.

Seafile stores a lot of metadata in clear text (including filenames): https://github.com/haiwen/seafile/issues/350

The developers know about it, the issue is 3 years old, this huge limitation is still not reflected on their documentation.

  An attacker who obtains a copy of the encrypted library without the key can:
 
  - read the complete list of directory and file names.
  - know the size of every file
  - know which files share some of the same information
  - see the history of who changed each file, when, and what byte ranges were altered

For some less positive feedback on Atom, which reinforces some of creshal's points, see the Atom section of this text editor rundown:

http://eev.ee/blog/2015/05/31/text-editor-rundown/

This review (6 months ago) is based on an early version of Atom Editor (0.204.0), the latest stable (1.2.4) is way more mature and provides very nice packages [1].

[1] https://atom.io/packages

As a user, my experience with HTML/CSS/JS apps is great. Look at the excellent feedback the Atom Editor is getting.

As a developer, I feel that it's easier for me to create good user experience (nice UI, easy non-blocking I/Os by default, etc).

I don't say it's flawless, I say it's now becoming a very good alternative.

I am 29, started coding at 14, I've built UIs based on mIRC Scripting, VB/Winforms, C++/Qt, C#/WPF, Java/Android layouts. Using IDEs such as Visual Studio, Eclipse, Qt Creator and Android Studio.

I must say: Atom Editor is great. Using HTML/CSS/JS to build desktop/mobile apps really makes sense to me, especially given that:

- You only have to support one rendering engine. - You have access to the latest Web Components/ES6/CSS3 features. - You can rely on native Node.js modules when needed.

It's good for portability, HTML/CSS became better at UI, JS becomes a better language, current IDEs are great, live debugging tools are great.

The funny state of Facebook: the research side pushing for more privacy by promoting Tor/PGP, and the official side requiring you to upload your government ID if you want to keep your account. (see #MyNameIs)