https://www.cell.com/current-biology/fulltext/S0960-9822(17)31114-4?xid=PS_smithsonian
I know I’ve read a handful of things roughly a long these line, that basically it’s probably not universal that humans simplify language for infants, but that we likely do shift how we vocalize to them.
Seems like a reasonably plausible hypothesis to me.
I thought the universal part was the tone and cadence people use when talking to small children, and not the actual words or grammar changes.
It’s why you can listen to a recording of a language you don’t know and tell if they’re talking to a baby, but there are also cultures that essentially don’t talk to them at all until they have language.
Most modern plans for eradication involve creating a virus that handles it, rather than a pesticide.
Have the virus introduce a gene that takes a few generations of breeding in the impacted population before it starts to debilitate or sterilize the mosquitoes. That way your virus can start to kill the population even as it spreads to areas that were missed.
All of our best data on the impact says that it really wouldn’t matter. Sometimes a species is a linchpin for the ecosystem, and sometimes it isn’t.
Sucks for mosquitoes, but there’s a very real chance that we’ll smallpox them, and the biggest concern will be our confidence that the virus we use doesn’t impact other species unintentionally.
I get that. DRM free is great and better. I just don’t like the advertisement that casts it as “you own the game”, or entire articles built around posts by their marketing department.
It feels very ambulance-chaser-y.
These articles are basically just advertising for GoG.
They have the same issues as steam does regarding only selling licenses, or not having inheritable or transferable accounts.
DRM free is great, but as a service they aren’t fundamentally different from steam. They just like to market themselves like they are.
The RSV vaccine is even being used in the wild! Certain high risk demographics can get it during RSV season. And not rare high risk either, women beyond a certain point in pregnancy and older people.
Depends on the vendor for the specifics. In general, they don’t protect against an attacker who has gained persistent privileged access to the machine, only against theft.
Since the key either can’t leave the tpm or is useless without it (some tpms have one key that it can never return, and will generate a new key and return it encrypted with it’s internal key. This means you get protection but don’t need to worry about storage on the chip), the attacker needs to remain undetected on the server as long as they want to use it, which is difficult for anyone less sophisticated than an advanced persistent threat.
The Apple system, to its credit, does a degree of user and application validation to use the keys. Generally good for security, but it makes it so if you want to share a key between users you probably won’t be using the secure enclave.
Most of the trust checks end up being the tpm proving itself to the remote service that’s checking the service. For example, when you use your phones biometrics to log into a website, part of that handshake is the tpm on the phone proving that it’s made by a company to a spec validated by the standards to be secure in the way it’s claiming.
Package signing is used to make sure you only get packages from sources you trust.
Every Linux distro does it and it’s why if you add a new source for packages you get asked to accept a key signature.
For a long time, the keys used for signing were just files on disk, and you protected them by protecting the server they were on, but they were technically able to be stolen and used to sign malicious packages.
Some advanced in chip design and cost reductions later, we now have what is often called a “secure enclave”, “trusted platform module”, or a general provider for a non-exportable key.
It’s a little chip that holds or manages a cryptographic key such that it can’t (or is exceptionally difficult) to get the signing key off the chip or extract it, making it nearly impossible to steal the key without actually physically stealing the server, which is much easier to prevent by putting it in a room with doors, and impossible to do without detection, making a forged package vastly less likely.
There are services that exist that provide the infrastructure needed to do this, but they cost money and it takes time and money to build it into your system in a way that’s reliable and doesn’t lock you to a vendor if you ever need to switch for whatever reason.
So I believe this is valve picking up the bill to move archs package infrastructure security up to the top tier.
It was fine before, but that upgrade is expensive for a volunteer and donation based project and cheap for a high profile company that might legitimately be worried about their use of arch on physical hardware increasing the threat interest.
So, at the time (1930) ball jar actually would have qualified as big business in the sense that you mean.
Home canning was very popular and they consistently bought out smaller companies.
Since they were privately owned, it’s tricky to find specifics about value, but they were “found a university”, “own a company town or two”, “chairman of the federal reserve” levels of rich.
So actually a pretty good use of government.
Aluminum cylinders only.
Not aluminum? Not interested. Not a cylinder? Not a chance.
Squared off glass cylinder? Legally prohibited.
The weird thing is, they don’t actually sell the jars anymore. “Ball jars” are not made by the ball jar corporation after their antitrust lawsuits for being a fucking jar monopoly. So they sold the “ball jar” rights and now only do aluminum cans for food packaging and high end satellites and satellite launch systems.
So, you’re correct that active emergencies take priority.
That being said, in essentially every place that has 911, both numbers connect to the same place and the only real difference is pick-up order and default response.
It’s the emergency number not simply because it’s only for emergencies but because it’s the number that’s the same everywhere that you need to know in the event of an emergency.
It should be used in any situation where it should be dealt with by someone now, and that someone isn’t you. Finding a serious crime has occurred is an emergency, even if the perpetrator is gone and the situation is stable.
A dead person, particularly a potential murder, generally needs to be handled quickly.
It’s also usually better to err on the side of 911, just in case it is an emergency that really needs the fancy features 911 often gives, like location lookups.
The time an automod hid a comment and then it was restored will be the first item in the list? Really?
I know that people like to get in a tizzy anytime anyone talks about codes of conduct in a programming environment, but this is such and absolute nothing to get hung up on.
Regardless of your feelings about the direction community organization is heading, save the energy for something actually impactful rather than just trying to stir up drama.
It looks like one comment was temporarily hidden, by an automod I’m guessing. That hardly qualifies as “running someone out”. He even continues to engage in the discussion a few comments later.
https://daniel.haxx.se/blog/2020/12/17/curl-supports-nasa/
https://daniel.haxx.se/blog/2023/02/07/closing-the-nasa-loop/
Their process for validating software doesn’t have a box for “open source”, and basically assumes it’s either purchased, or contracted. So someone in risk assessment just gets a list of software libraries and goes down it checking that they have the required forms.
As the referenced talk mentions, the people using the software understand that all the testing and everything is entirely on them, and that sending these messages is bothersome and unfair, and they’re working on it. Unfortunately, NASA is also a massive government bureaucracy and so process changes are slow, at best.
The TLAs don’t generally help NASA, and getting them involved would unfortunately only result in more messages being sent.
As for contributions, I think that turns into an even worse can of worms, since generally software developed by or for the US government isn’t just open source, but public domain. I think you’d end up with a big mess of licensing horror if you tried to get money or official relationships involved. It’s why sqlite is public domain, since it was developed at the behest of the US.
Mostly just context for what you said. NASA isn’t being arrogant, they’re being gigantic. Doing their due diligence in-house while another branch goes down a checklist, sees they don’t have a form and pops of an email and embarrassing the hell out of the first group.
The time limit thing is weird, but it’s a common practice in bureaucracies, public or private. You stick a timeline on the request to convey your level of urgency and the establish some manner of timeline for the other person to work with. Read the line again, but extremely literally: “we have a time frame of 5 days for a response”. “Our audit timeline guessed that it would take a business week for you to reply, so if you take longer we’re behind schedule”. The threatening version is “your response is required on or before five business days from the date of this message”.
The presumption is that the person on the other end is also working through a task queue that they don’t have much personal investment in, and is generally good natured, so you’re telling them “I don’t expect you to jump on this immediately, but wherever you can find a moment to reply this week would keep anyone from bothering me, and me from needing to send another email or trying to find a phone number”
It has organizational support from ICANN, so it’s not done in total isolation.
Paul Eggart is the primary maintainer for tzdb, and has been for the past 20 years.
Tzdb is the database that maintains all of the information about timezones, timezone changes, leap whatever’s and everything else. It’s present on just about every computer on the planet and plays an important role in making sure all of the things do time correctly.
If he gets hit by a bus, ICANN is responsible for finding someone else to maintain the list.
Sqlite is the most widely used database engine, and is primarily developed by a small handful of people.
ImageMagick is probably the most iconic example. Primarily developed by John Cristy since 1987, it’s used in a hilarious number of places for basic image operations. When a security bug was found in it a bit ago, basically every server needed to be patched because they all do something with images.
That’s called a timeshare, and they’re not a good idea. Very sketchy, almost impossible to get rid of if you don’t want it.
You have to sign up because although you bought the apartment, you’re not the only one who bought the apartment.
You buy it and then get to sign up to use it, and then you pay a fee to use it every year even if you don’t end up using it.
You don’t get to live there.
You can vote from overseas in whatever location was your last permanent US residence.
People in DC get to vote for president because a special law was passed giving them electoral votes.
People in Puerto Rico have a US permeant residence that doesn’t let them vote for president, so they can’t legally vote from a different jurisdiction.
One of the proposals that’s come up occasionally is to make a similar law for Puerto Rico as we did for DC, but there’s never enough consensus on any plan to go forward, up until relatively recently.