jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Ah, you're right about only needing a single handshake. I don't make a habit of "security testing" wifi networks, but with WEP I seem to remember something about increasing the odds of your cracked key being correct based on the number of packets at your disposal. Anyway, I looked a little deeper and that's certainly not the case with WPA.

I didn't mean to imply that MitM is trivial, just that it's quicker than brute-force in many cases. And, I assumed the rogue AP was not doing true WPA encryption like the real AP, just enough to make it appear correct to get clients to connect so you can serve the fake control panel. If you need the passphrase to stand up the rogue AP, what is the point of this attack? You're not phishing for anything but the WPA key.

EDIT: just read your comment about how this actually works (that is, the "rogue" AP is just another unencrypted network.) That's actually really lame, and I withdraw my previous praise for this crack. ;)
Brian I'd love to but I don't frequent Miami.
> "President Putin assured me of his readiness to engage in this sense and his desire to maintain stability and the territorial integrity of Ukraine,"

I think Macron and Putin have very different ideas about what the "Territorial Integrity" of Ukraine would entail.
Upon solving, I got a popup saying the next puzzle would be available exactly six hours from then. I suspected that meant that puzzles would be released to me on my schedule, and may or may not be unique.
Hilarious! My man Valentius just wanted to amuse and started off a culture war.
"Everyone has the right to life, liberty and security of person."

http://www.un.org/en/documents/udhr/
Thanks for the informative post!

> The targeting helmet has been operational for a couple of years now and has gone through 3 revisions. The 3rd revision eliminated issues of jutter, etc and is now more or less ready for combat.

With the updates to reduce the visual issues, has the updated helmet now been put through it's paces by test pilots?

> The turning & acceleration performance is only poor when compared to air dominance fighters like the Eurofighter Typhoon or Su-35, or legacy fighters like the F-16 when they're stripped of external weapons, fuel tanks, pods, etc that are otherwise required for combat.

So the F-35 performance envelope is comparable to those Gen 4/4.5 fighters when both aircraft are flying clean?

> - It's original 'budget' / targeted price was $50 million. While the jet's far more expensive than that, so is every other modern fighter. Even a modern Block 60 F-16V goes for more than $70 million flyaway, while more relevant fighters like the Typhoon, Rafale, etc are over $100 million. As of LRIP 8 / F135 Lot 8, an F-35A with engine is approximately $108 million, with the total cost decreasing approximately 3.5% each year through to 2018 when full-rate production begins and the price drops to ~$85 million, being cheaper than pretty much all of the competition.

Forgive me for saying so but how is a significantly more complex aircraft like the F-35 going to cost signficantly less than current Gen 4 aircraft> All of the flyaway costs I've seen for F-35's have been well over $150 million/unit, even without R&D costs factored in. Admittedly unit cost is a number that is juggled and obfuscated endlessly when talking about defense aircraft but it doesn't seem believable that on an apples to apples comparison the F-35 will cost less than planes like the Typhoon.

> The only nation that's backed out is Canada, and even then it's almost certain they'll end up going with the F-35 anyway based on what the RCAF has been asking for.

The saving grace for the F-35 is that US has many political and economic tools it can use to convince partner nations to continue with the program. But it's still looking like many partner nations will reduce the number they had planned to buy.

> Other than the STOVL and stealth, that's exactly what the F/A-18 is, and even then the E/F/G models have tried to utilise stealth to a degree in their forward hemispheres.

Yeah looking back on that sentence, "strike" pretty much means interdiction/air support. Still, I think if the JSF program chosen either STOVL or stealth and not both we'd be looking at a very different story right now. And of the two stealth is WAY more valuable than STOVL.
There's a ton of sessions... can anyone recommend which are not to be missed?
Performance -- Javascript VMs are not optimised for numeric code.

Lack of libraries.

I don't particularly like JS for involved projects (e.g. no module system, so you have to write your own).
Check out my project, http://pghtechevents.com/ ;)
I always make a “work” google account if the company isn’t already using GSuite.

Never use my own Gmail account for work. Or my own FB account for that matter!

I don’t need FB locking my account as it’s connected to some clients dodgy FB ads :-/
Moving large numbers of files - like the 50k of Google Photos the author mentions - can be done using https://rclone.org. Set up Google Photos as a source and then use the copy command to move it to a different location[1]. There are a lot of different commands which work with many different cloud storage systems e.g. sync everything one way locally to a backup, mount a FUSE filesystem, do two-way sync, etc.

[1] https://rclone.org/commands/rclone_copy/
Yeah, Rails doesn't currently strongly analyze what it needs to do. Based on my experience with it, I remember that it either 1) checks out a connection at the beginning of the request into a thread local / request context and releases it at the end of the request, or 2) checks out when the first active record work is attempted, and releases at the end of the request.

Either way, if you have a request flow of 1) DB read - 50ms 2) Network request - 200ms 3) DB write - 50ms, you can see that the connection is idle for 2/3 of your request handling time. Rails does this so that if you start a transaction in step 1 you can commit it in step 3. All your writes are also automatically wrapped in a transaction, I think.

In Go on the other hand, step 1 will checkout and release the connection immediately, and step 3 will checkout and release. So the connection isn't idle locked for the 200ms in step 2. But if you don't remember this explicitly and try in step 3 to finish something (transaction/advisory lock/prepared statement) that you started in step 1, you're screwed.

So Rails saved you from doom by holding onto a connection for an inefficient extra 200ms, and Go shoots you in the foot in the name of efficiency.
What are the products that do this called?
Donating/tithing 10% of your income seems to have a lot of historical support. Well, if you want to spend it on mosquito nets depends on if you think saving a life from malaria is the best thing anyone could do.
For influenza, immunity due to a previous infection is apparently broader than immunity due to vaccination: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2870374/.
Just like the non-PC vertical integrated platforms were at the time.
"I can just never do anything fun with it"

Writing 'useful and compatible libraries' isn't fun?
It would also be interesting to see who won the DARPA CINDER: http://www.darpa.mil/sto/solicitations/sn10-68/index.html this year.
It happened in the 90's.
Is that what you guys use on Bit.ly
I think the standard model now if for first-time entrepreneurs to focus on revenue to show that they can successfully navigate the start-up environment. And then sell start-up for small $$. This is not f-u money but I can do it money.

Then you start your second company. Now you have credibility w/ vcs. Easier to raise money. Even in tough times. This time you aim much higher. For f-u money. And in that case you can wait till user base matures or technology solidifies before going in for the cash.
acts_as_openacs: https://github.com/jadeforrest/OpenACS-on-Rails
Out of curiosity, for those of you building stuff with Flux: Which library do you use? Or do you just use your own implementation?

We recently went with Reflux[1] for our first big React app after reading about it here[2], and I've been pretty happy with it so far.

[1] https://github.com/spoike/refluxjs

[2] https://reactjsnews.com/the-state-of-flux/
In Japan, a very crowded country, it might have seemed effective to drop bombs at random - killing people at random as a terror campaign. But California is mostly empty space. Making random black spots on remote pastures and empty hillsides has a lesser effect on moral.

I think it likely that the Japanese command were merely profoundly ignorant of the living situation in America including population density.
It's at least a step away from "everything can be predetermined with physics". If I could perfectly predict your actions (with a physics model), most people agree free will is impossible.

It doesn't mean free will exists, of course. It's just less improbable?
I wanted to know more about the practical applications of the syperhydrophilic metals (the counter-technology of the one discussed here), and found this video [1] with Chunlei informative.

[1] https://www.youtube.com/watch?v=JtDPsWd6Yqw
What are you going on about? Apple and Netflix offer a service, not a protocol that should be used by everyone. They decide which platform to support — this isn't about any protocol.
The article is quite explicitly calling it a classic it doesn't actually mention any predecessors that it inherits from (I haven't played DwarfFortress, but reading about it suggests to me, games such as Ultima, Moria, Angband).
Given the evidence, I wouldn't be so quick to judge. Sure it wouldn't be fun to work for someone like that, but look at the results.
That would be wonderful. I have several friends who really struggle with CSS right now, and this kind of illustration is super useful. Floats are such a fundamental and confusing CSS concept. Any illustration of it would be useful.
The differences aren't as superficial as you suggest, in my experience. GitHub is just far more polished. Take commit history as an example: bitbucket makes it uncommonly awkward to step through a series of commit diffs for a given file, whilst github makes it a bit easier (although still not perfect - am I the only one who wants this feature?). Nicer looking doesn't always mean more usable, but there's often a correlation and, in this case, it definitely bears out.

Having said all that, I'm currently using bitbucket for a private work repo because I'm cheap :)
The Sims let me have neighbors over to swim in the pool, and then I could delete the ladder leading into it.

Like in most video games, characters don't know how to climb, so the poor saps died in the 4' deep pool.

It was surprisingly easy to be evil in Sims, I don't see why one can't be evil in Sim City. It can be cathartic, and nearly everyone has those "dark thoughts", even if they don't care to admit it.
Honestly, this is the most ridiculous move from a company to try to save their business that I've seen in a long time. It's utterly absurd on Blackberry's part
Beats is alright, but the user experience is absolutely awful. Music is poorly organized. The sentence thing in the app is kind of a gimmick. It's great if you're fine with just turning on some sort of music that's somewhat similar to what you're wanting to listen to, and then forgetting about it. If you want to amass a collection of specific songs you like, spotify is the way to go. Beats' web interface is terrible. I logged in with Twitter, and I had to login every single time I went to the site. I tried it for a month, and I missed having the desktop application that spotify offers.
I love how Google apologists sell Android fragmentation and OEM modifications to AOSP as an improvement over J2ME.

Now excuse me while I will compile some stuff in Java 16 with the SIMD preview API.
There's no "perhaps" here. Of course they knew this would happen. That's the whole point. It's right there in the name: they're terrorists because they create terror. The US is now terrified and burning piles of cash and lashing out at its own citizens, which is exactly what the terrorists wanted to happen.
I remember searching for workflow I used in Java, for Python. In Java I just started the application with some debug flags that opened debug TCP port, then I connected with debugger (IDE), placed a breakpoint locally, and then the execution stopped when it hit the breakpoint.

I see it uses debugpy. Does it work similarly? I remember I stumbled upon some remote debugging library for Python that however required me to place breakpoint() calls in the program, and the program stopped immediately on the call. That's inferior.

EDIT: The library is https://github.com/ionelmc/python-remote-pdb
Does it overheat? Does it have a fan? Overheating and fan noise are a couple of the biggest complaints I heard about the Surface Pro 3.
What a spectacular failure of imagination. Why change anything ever, right? I supposed dial-up modems were good enough for you too.

Everyone is imagining that codecs like this will "change your words" but no-one has provided examples of that actually happening. I don't believe it.
Is there anything like Loom or Shuttle for C/C++?

Or are these only implemented in rust and they'd still work with C/C++?
The demos created by Apple should look like the demos Microsoft is creating for IE9 Previews' capabilities.
At least these much better. See (in any HTML5 capable browser): http://ie.microsoft.com/testdrive/
Maybe not for most people. But there is a large segment of people (primarily younger than the readership of this site) who use iChat AV _all_ the time, and they wouldn't do so if they didn't all have Macs with iSight cameras and iChat AV.

Old people are slow to change and sometimes never do. As we get old, we've got to remember that the failure of a product to change our ways of behaving is not proof that it will not, over the long run, change everything. Our resistance to change will be solved actuarially.
Having said that, the employee interviews always come across as extremely scripted. When they aren't using superlatives and stating facts that aren't necessarily facts (the thinnest notebook, etc.), the videos are great. Oftentimes, the bad elements take up too much time in the videos, but this video balanced it nicely.
No, it doesn't. It's come up in /r/ideasfortheadmins before, but I don't recall hearing any official word from the admins on it.
You overstate the situation with one time pads: they eliminate the decryption issue by shifting it entirely to key distribution.

As for "real-world crypto", they've certainly been used in the 20th century and the continued existence of number stations as mentioned on HN in the last couple of days suggests that such simple systems might still be in use. It's hard to get more simple than a booklet of TRNG data printed on flash paper and a shortwave receiver.
It is the cause of my 1st gen iphone being on the brink. I'm hoping I can get it to hold out until the end of June.
A couple folks have kindly pointed out that it's wide open to to XSS attacks, since it allows full HTML posting.

This is 100% true ... and doesn't matter one bit. The only information to steal via XSS is the password, and anyone who can submit an attack necessarily already knows the password.

You can exploit this to annoy friends you're chatting with. Try, for example, submitting:

<style>body { background: #cc3333; } a { color: #cc3333 }</style>
Archive of twilio contests, looking at these can be useful to generate new or related ideas. http://contests.twilio.com/archives.html
Two or three ago I spun up a quick Windows VM in Azure for about 20 cents worth of testing.

Shortly afterwards I had a missed phone call and then a follow-up email from an Azure salesman inviting me to schedule time to discuss my interest in the platform. I declined and asked to be opted out of anything like that in future, and actually received a pretty unprofessional response to that.

So even if Ubuntu aren't allowed to do this kind of thing, MS certainly have themselves in the past.
> Actually, one wonders why there haven't been more incidents of plastic guns smuggled onto aircraft in recent years

The root cause of this is that very few people want to smuggle guns onto aircraft. I think the biggest group of gun smugglers at this point are TSA penetration testers.
They have tried that several times. They don't hold a candle to even the "second tier" of the US (Barnes and Noble, eBay, etc.) Really the harsh truth is that the source of their problems is not found in the "Big Tech" Boogeyman but in the mirror.
Definitely agree that doing this per month per citizen would be infeasible, though an interesting alternative is doing a negative income tax.

Effectively UBI but declines as the person makes money.

Some rough calculations:

In 2019 there were 34m people in poverty[1], lets assume 2 people per household (lower than nationwide average of ~3) so 17m households.

Topping each of them up to above the poverty line (~13k/y/person) would be 26k / household / year would be 442bn (and that's assuming all people below poverty line make 0 dollars).

Not bad considering the government already spends over twice that (1tr) on welfare each year[3].

Like others have said healthcare, housing issues etc would still be very damaging to some, but it's an interesting concept that could put every person in the country above the poverty line for not that much $$.

I also like that it (theoretically) still encourages working since a) poverty line is still a lower quality of life. and b) when you're below the line and make more money, the government gives you less $$ but less than you are making. i.e. if you make an extra 2 dollars, the government stopped reduces by 1, or something akin to that.

[1] https://en.wikipedia.org/wiki/Negative_income_tax

[2] https://www.census.gov/library/publications/2020/demo/p60-27...

[3] https://www.budget.senate.gov/imo/media/doc/CRS%20Report%20-...
https://marketingland.com/apples-latest-itp-updates-what-mar... suggests that "When a user loads a web page with embedded content from another domain, as in a tracking pixel, the request header referrer for the tracking domain will no longer contain the full web address of the host page, only the domain name." This is the case when "Prevent cross-site tracking" is turned on.

Not the same thing as hiding your IP and the domain name, but we're getting closer to full privacy, slowly. The problem with proxying is that it would only work with a small list of third-party asset hosts, and it would break the ability for CDNs to work unless it was a distributed proxy... that sounds like more headache than its worth except maybe as a new type of browser extension, something similar to a content filter but instead loads cached or proxied copies.

But at that point it's worth considering VPN or compression proxy services for content compression as Chrome and Opera Mini might do, and MITM everything the browser loads so nobody gets your IP except Apple. I imagine folks might pay for an Apple VPN service, I'm just not sure Apple wants any headaches that might go along with it yet. :)
Related: Solid Project

- HN discussion: https://news.ycombinator.com/item?id=25989698

- A great article about the project: https://ruben.verborgh.org/blog/2020/12/07/a-data-ecosystem-...
This is not always the case. One example is checked exceptions which are purely Java thing and do not exist in JVM (outside of metadata). That always amused me, it's like a switch to remove checked exceptions from language, you can turn it any time without backward compatibility issues.

Another example is inner classes. Inner class can access private fields of outer class in Java. But in JVM there's no inner class concept, so compiler generates synthetic accessors for outer class private fields and inner class uses those methods to access private fields. That was fixed recently, though, but it was the case for many decades.

Also I remember some funny bytecode with try-finally, I think it's implemented with gotos.

Of course Kotlin generates a lot more boilerplate, that's for sure.
> Experts like to retain their expertise, stay unique.

In sports they call that a Ball Hog.

Is software a collaborative effort or an ego trip for three people?

As someone else mentioned, their expert was spread too thin. I’ve had this happen to me, too, and the only solution I know is to give away (delegate) almost everything you can. If some part really makes you happy, hold onto that even if you could give it away. Not for ego, but for burnout. You need some reasons to show up in the morning, just like everybody else.
GDPR, CCPA, etc. ban this, right? And without a permanent user ID (cookies etc. are super volatile), I’m not sure how valuable this data is.
That’s an insane amount to earn from “non-profit” work!
Great satire website!
If your boss is in your house using your shitbowl.
There are already plenty of local news stations no one trusts

Some of that mistrust comes from the centralized ownership and control of a lot of "local" stations.
The opening comments resonate with me quite a bit. I’ve been food-stamp and Medicaid poor. My wife has always been upper-middle class. Her idea of tightening her belt is quite a bit different from mine. I think on some level she really can’t believe there are people who simply forgo things that she perceives to be basic necessities. (This is how you get those NY Times articles about people who make, say, $250k year claiming that it’s not that much money, really, once you account for all the spending on basics (private school, two vacations, violin lessons, two new cars, maxing-out the 401ks, etc, etc)).
I had a manager once who I don't recall ever actually telling me I needed to do something.

Instead, he would let us know what he/we were trying to accomplish (Can we do X?) and we'd figure out a way to do it.
I remember telling him many times: "Learn to live with disappointment Adam." - but then I'd try to make it happen anyway.
Except this particular attack is not coming from Chinese IPs, rather from visitors of Chinese websites from outside China.
I like your 3-spot system, but JohnBooty is actually describing a 3-spot system too. He's just saying he wants to spend the majority of his time in the "quiet focus" spot rather than the "team collaboration" spot.

That's really the issue here: what should your default zone be?

I like your suggestion that the default location for your desk should be in the collaborative spot. Cornell studied this a few years back and made an interesting observation: We engineers tend to prioritize our personal productivity over team productivity. Left to our own devices, we prioritize offices for exactly the reasons JohnBooty states. Personal productivity is how we're most directly measured and rewarded. But if we do that, team collaboration plummets. It's a lot harder to pull ourselves out of our focus zones into collaboration mode than it is the other way.

So, I don't know if FB's new office has quiet spots (they should), but defaulting to collaborative seating acts as a good counterbalance to our innate biases.
But who will go first!
> leverage nearly the entire Chinese internet userbase

Well, not just Chinese users. Anyone who was accessing a site that used Baidu's analytics, regardless of where they came from. Things like this remind me why I like Piwik so much.
D still lacks on the libraries front, but apart from that it is fits the bill. Easy interop with C and even somewhat interop with C++ makes the library deficiencies bearable.

Feature table:
http://dlang.org/comparison.html
In 1999, there were a group of us working on a subset of XML (we called SML at the time) that had a simpler information model and syntax limitations so it'd be easier to work with. It seems that any simple encoding of XML onto JSON might find the deliberations interesting (if quaint and outdated): http://tech.groups.yahoo.com/group/sml-dev/message/0
The "Execution" column show a lack of understanding about languages and their respective implementations.

And the "Other notable failings" looks pretty much a very biased personal opinion.