fairly sure hezbollah has more than 2800 members

bonus points if you're using a statically typed language but the library uses extensive metaprogramming seemingly for the sole purpose of hiding what types you actually need

I think the problems there are exacerbated a lot by over-eager type coercion and other crappy design decisions inherited from almost 30 years ago

if you can't connect to a vpn using only open source software, that's a crappy vpn

importantly it's (hopefully) an ISP that operates from a less copyright-happy country and isn't tied down to tons of expensive infrastructure and long-term contracts

well "arrested" doesn't actually mean it's illegal, it just means the cops thought they likely did something illegal

libertarians: "the increase in global quality of life is all because of capitalism!"

communists: "the increase in global quality of life is all because of communism!"

to be even more pedantic, if we follow the relevant official RFCs for http (formerly 2616, but now 7230-7235 which have relevant changes), a 403 can substitute for a 401, but a 401 has specific requirements:

The server generating a 401 response MUST send a WWW-Authenticate header field (Section 4.1) containing at least one challenge applicable to the target resource.

(the old 2616 said 403 must not respond with a request for authentication but the new versions don't seem to mention that)

but sometimes "👍🏽".reverse() == "🏽👍"

the thing where it actually helps is if you're "one word speed reading" (eg. http://onewordreader.com/). Then it's easier to rapidly focus your eyes on each word, without having to follow a rigid timer. But if you're reading normally it probably doesn't help

A key part of visual design is knowing that the users don't know what's best for themselves. They usually stop complaining after 3 months which is proof that you are correct and they are wrong!

(sarcasm rate: 1 - ε)

I'd opine that the MIT license has no requirements about avoiding ambiguity. That's kind of its thing, it's as unobtrusive as possible and minimizes the amount of having to think about license compliance minefields.

And incidentally they have done quite a bit to avoid ambiguity, in readme.md:

License

Forgejo is distributed under the terms of the GPL version 3.0 or any later version.

The agreement for this license was documented in June 2023 and implemented during the development of Forgejo v9.0. All Forgejo versions before v9.0 are distributed under the MIT license.

though they also distribute binary-only copies.. the main website even recommends downloading the binary. not even a tarball, just the plain binary. which even in old versions don't contain an MIT license at all. Even a hexdump of the binary does not contain any representation of the MIT text. I think that's actually an MIT license violation?

the MIT copyright notice is still present with all copies of MIT licensed code, I don't see the problem?

with another OS nix is not going to be "in control" so it's probably more limited. I'm not sure how common using nix is outside of nixos.

also I'll point out that many other linux distros I think recommend doing a full system backup even immediately after installation, the "grep history" thing is not very stable as eg. apt installing a package today will default to the newest version, which didn't exist 1 year ago when you last executed that same command.

with nixos, the states of all the config files are collected into the nix configuration which you can modify manually. And if there's something that can't be handled through that, I think the common solution is to isolate the "dirty" environment into a vm or some other sort of container that I think comes with nixos

(and there's always going to be "data" which isn't part of the "configuration" .. which can just be used as a configuration for individual applications)

assuming you have never used anything except apt commands to change the state of your system. (and are fine with doings superfluous changes eg. apt install foo && apt remove foo)

it's replicable and "atomic", which for a well-designed modern package manager shouldn't be that noticable of a difference, but when it's applied to an operating system a la nixos, you can (at least in theory) copy your centralized exact configuration to another computer and get an OS that behaves exactly the same and has all the same packages. And backup the system state with only a few dozen kilobytes of config files instead of having to backup the entire hard drive (well, assuming the online infrastructure needed to build it in the first place continues to work as expected), and probably rollback a bad change much easier

many words should run into the same issue, since LLMs generally use less tokens per word than there are letters in the word. So they don't have direct access to the letters composing the word, and have to go off indirect associations between "strawberry" and the letter "R"

duckassist seems to get most right but it claimed "ouroboros" contains 3 o's and "phrasebook" contains one c.

are you sure there isn't small print somewhere saying you forfeit your eternal soul to larry ellison?

Most microplastics come from car tires and washing of clothing with plastic in them. (both abrade the plastic causing uncountable tiny pieces of microplastics to enter the water or the air)

Then there are a lot of places that dump plastic into rivers or the ocean instead of into landfills.

The same comment touches on several topics, replying to 2 different people. These two statements being in the same comment is not evidence of them being about the same thing, and if the author expected readers to get that from it, it is absolutely the author's fault if their words got misinterpreted.

And in the next paragraph:

We importantly chose not to call anyone out by name in the there because our expectations aren’t about one person. All of us need to be aware of what is and isn’t okay and a lot of people were involved in the problematic threads, even if Tim, as self-identified here, was one big part

Again referring to multiple people.

It's clearly referring to people in the plural. If the person on the council most vocally defending the council's decision to suspend can't say it in a reasonably straightforward manner, the simpler explanation is that that is not what they are talking about.

If you read it carefully, Smith doesn't make any claim that anyone complained about Peter's conduct. It's speaking in general terms about the behavior of unnamed persons.

"Troglodyte reprobates" was a term that Tim seemed to bring up himself from what seems to be pretty much out of the blue, so it's a bit questionable

half of them just from the description are very obvious "we couldn't get enough examples of bad behavior on him so we had a brainstorming session of imaginary slights"

Rules of thumb can be very useful for a relatively inexperienced programmer, and once you understand why they exist you can choose to ignore them when they would get in the way. Clean Code is totally unhinged though

Actually I think he has already had an adequate amount of recognition:

• "In 1999, Red Hat and VA Linux, both leading developers of Linux-based software, presented Torvalds with stock options in gratitude for his creation.[29] That year both companies went public and Torvalds's share value briefly shot up to about US$20 million"

• his autobiography is in several hundred library collections worldwide

Awards he's received:

• 2 honorary doctorates

• 2 celestial objects named after him

• Lovelace Medal

• IEEE Computer Pioneer Award

• EFF Pioneer Award

• Vollum Award

• Hall of Fellows of the Computer History Museum

• C&C prize

• Millenium Technology Prize

• Internet Hall of Fame

• IEEE Masaru Ibuka Consumer Electronics Award

• Great Immigrants Award

is-number is a one-line function. (though it's debatable if a function that complex should be compressed to one line)

You may have heard of a similar if more extreme "microdependency" called is-even. When you use an NPM package, you also need all the dependencies of that package, and the dependencies of those dependencies recursively. Each package has some overhead, eventually leading to this moment in time.

I tried to edit the 'highlights' into a single image, the top is the description of the PR, the middle is a comment replying to another comment

https://github.com/micromatch/to-regex-range/pull/17

the direct chain I can see is

"can you string words to form a valid RSA key"

"I would hope so, [xkcd about password strength]"

"words are the least secure way to generate random bytes"

"Good luck remembering random bytes. That infographic is about memorable passwords."

"You memorize your RSA keys?"

so between comments 2 and 3 and 4 I'd say it soundly went past the handcrafted RSA key stuff.

I think this specific chain of replies is talking about that actually.. though it is a pretty big tangent from the original post

if you know there are exactly two additional characters

this is pretty much irrelevant, as the amount of passwords with n+1 random characters is going to be exponentially higher than ones with n random characters. Any decent password cracker is going to try the 30x smaller set before doing the bigger set

and you know they are at the end of the string

that knowledge is worth like 2 bits at most, unless the characters are in the middle of a word which is probably even harder to remember

if you know there are exactly two additional characters and you know they are at the end of the string, the first number is really slightly bigger (like 11 times)

even if you assume the random characters are chosen from a large set, say 256 characters, you'd still get the 4-word one as over 50 times more. Far more likely is that it's a regular human following one of those "you must have x numbers and y special characters" rules which would reduce it to something like 1234567890!?<^>@$%&+-() which is going to be less than 30 characters

and even if they end up roughly equal in quessing difficulty, it is still far easier to remember the 4 random words

you memorize the password required to decrypt whatever container your RSA key is in. Hopefully.

and some people will try to just hold a key down until it reaches the length limit.. which is an even worse way to generate a password of that length

this assumes a dictionary is used. Otherwise the entropy would be 117 bits or more. The only problem is some people may fail to use actually uniformly random words drawn from a large enough set of words (okay, and you should also use a password manager for the most part)

step 1. Try presets that have already been calibrated to some target for those specific headphones. There are hundreds to thousands of headphones included in the bigger preset collections.

step 2. tweak the EQ values by yourself by ear if you want to. There is no objectively best sound, so it comes down to your personal preference anyways, and you can't measure that in any practical way (and I'd say neither can the companies making expensive headphones, which is why there are hundreds of different headphones both cheap and expensive with different frequency responses and more getting made all the time)

realistically, the linux foundation gets all its funding from corporations who have interests in servers, android and embedded. So all the funding goes to those things and not to the linux desktop.

"tonality characteristics" and "soundstage" are subjective words that have no concrete definition. Other similar words are "grain", "speed", "separation", "resolution". They can't be objectively measured, and are most likely just another function of frequency response.

The differences between headphones are most likely your ear having a different shape from the reference ear used to make the eq targets, leading to a different final perceived frequency response. (or limitations in the accuracy of the measurements, most targets I believe are "smoothed")

I'm going to trust the (claimed, who knows, maybe oratory1990 is a liar) consensus of audio engineers over your anecdotes. As I said there are plenty of audiophiles whose "lived experience" is that $2000 golden cables are necessary and that they can tell the difference between any $200 and $1000 DAC (even though a decent DAC in that price range already has a dynamic range and signal-to-noise ratio of 100-120dB which should be totally indistinguishable from perfectly clear audio for all humans

personally the only decent-ish headphones I have are DT 880 600 ohm and a JBL 760NC. The latter kind of fills all the boxes of being a wireless headphone and has poor reviews and a poor default sound profile. But after EQing both, I can't really notice any difference except when very carefully doing side-to-side comparisons (besides the much better comfort of around-ears vs over-ear).

In contrast I believe I can tell, with some songs, the difference between 320kbps mp3 and flac (just 44.1khz), but even there I'm not sure it's not just placebo

Usability is kind of secondary, android should have jamesDSP and the venn diagram of people that know the best headphones to buy (instead of beats by dre) and who can setup an EQ (install an app and follow written instructions) should have a lot of overlap

I will say though that more expensive headphones are probably going to last longer and are probably much more comfortable

more accurately, average person has a higher tolerance for bullshit than for spending many hours learning something new or spending potentially years applying for citizenship in another country

The thing is, distortion (maybe more accurately called nonlinearity) is the only known objective way to measure the difference in sound quality between two headphones EQ'd to the same target. (there are some other measures like signal-to-noise ratio but they are even more useless) And the difference in the value becomes very small for a technically good $50 headphone and the best headphone ever made. (technically good eg. the natural frequency response isn't crazy far from your target and the nonlinearities are competitively low)

Now, two headphones EQ'd to the same target, even if both are measured to result in the exact same sound, won't actually sound the same to your ears because the "head dummy" used for the test doesn't have the same ear shape and characteristics as you do. But unless there is some strong evidence that the headphone manufacturer has a better methodology than what is publicly available, then there's no reason to think they are somehow able to account for your specific ear's needs without custom designing the product just for you. - You're left with having to either EQ yourself, or using dozens of headphones and testing which you like the most. And the EQ route is going to be much faster and cheaper

for sources, these discussion seem the most useful

https://www.reddit.com/r/headphones/comments/144yaiq/why_dont_we_measure_headphone_resolution/jni4z70/?context=5 (whole thread is useful)

https://www.audiosciencereview.com/forum/index.php?threads/is-there-any-way-to-objectively-measure-headphone-resolution.17684/

you can say that most people who spend a lot of time and money trying to achieve "perfect audio" seem to think that EQ is only a supplement to already good headphones, but given that there has been no success at objective measurements of quality and that many people swear the thousands they spent on insulated golden cables improve their audio quality, I err on the side of saving my money.