skysight-inc/HackerNews huggingface dataset:
IMO the “car with keys inside” analogy is not great for poorly implemented infosec. The latter is both more benign (no physical property directly stolen) and at the same time worse (the scale means multitudes of people will become vulnerable to further attacks, identity theft, doxxing and so on, rather than just one person losing the means of movement). It’s just different qualitatively.

What should have impact on how we view the actions of a hacker is the context of said actions, not just the “hacking” part.

If the hacker exploited company’s infosec negligence to profit in some way (say, by selling the data), or irresponsibly disclosed the data or the vulnerability possibly causing harm to affected users, it is one thing.

Otherwise, the same sequence of hacker’s actions that exploits the vulnerability does not compare to stealing a car with keys inside—it is (another faulty analogy warning) more like looking at a car through some magical looking glass that highlights the keys left inside by the owner.
Do you consider places like Texas and Florida to be "tax havens" because they are increasingly attracting more and more people to move there from places like California and New York for personal tax advantages?
Quoting an article by Ioannidis on this subject is indeed proof that science doesn't matter, after the cherrypicking job he did in Santa Clara.
Having to reverse a binary tree or some other associated nonsense for a frontend UI role meant I turned the interview process at Google down. That and about 6 prospective hours of interviews for my application to then be sent to a "hiring committee" who ultimately decided if I was worthy enough of a job at Google, it just wasn't worth the hoop-jumping.
Bernanke used it in a speech for the first time in 2002, but it was coined back in 1969 by Milton Friedman.

https://en.m.wikipedia.org/wiki/Helicopter_money
the standards for noise proofing apply to all construction (condos, townhomes, apartments) https://www.astm.org/DIGITAL_LIBRARY/STP/PAGES/STP35976S.htm
I love the gitlens extension personally - I find it to be a big productivity boost when navigating a complex/legacy codebase.
A Deep Dive into Raycast
Those living in the rich nations can hardly blame the people in emerging economies for trying to achieve a similar standard of living (well, not without being huge hypocrites). And yes, large countries like China will have a large impact. But that is going to happen regardless of whether the rich nations make a change or not. So why wouldn't we try to reduce our own impact? What alternative do you suggest? Do nothing and make the problem even worse?
Because so many large American corporations; are heavily involved with Farming chickens.
Per Wikipedia, phthalates are a class of chemicals used to improve plastic properties such as durability or flexibility.

https://en.wikipedia.org/wiki/Phthalate
PartyJS: Celebrations in JavaScript
Developing nuclear weapons for one...
If you live in a multi floor apartment building without fire sprinklers, that’s a bigger problem. Fire sprinkler systems not only put out fires, they have a flow alarm that goes through an alarm panel and signals a qualified monitoring station...sometimes private, sometimes the local fire service.

Also at the alarm panel additional alarms are triggered in the building. Importantly it’s not a roll your own system. It’s tested and inspected and designed to fail safe.
You can deploy the browser version with a Docker container in a remote server. With that, instead of running the client in your computer and connecting to the remote database, you can have the client running as a service in your servers. Then you can use all the DBeaver functionality (whatever they are providing in the browser version) by just navigating to it (the desktop application is quite heavy).

Apart from that, I guess that from a team's point of view, you have better control of the database access than if you had to whitelist IPs. Now you can have the same access control policies in your database client than for any other service you are running. Yes, you could do the same by using the native database permissions systems, but it's just a use case I think of.
Show HN: Flock – Create gift registries for any occasion
Hi all, I built Flock as a way to learn web development over the past few weeks. I've always struggled to figure out what I should gift my friends, and at the same time, there's also way too many things that I like as I browse through social media/the internet on any given day.

I attempted to solve these problems in one go by building Flock, where you can create wishlists from any items on the internet (i.e. you don't have to create a separate wishlist for Amazon, Best Buy items, etc.) for any (or no) occasion. Once you create a wishlist, you can then share it with family and friends, and they can contribute towards your wishlist GoFundMe style!

Here's my wishlist: https://myflock.app/@mohnish

This is the first time I've actually built and shipped something from scratch by myself. I'd love feedback on the design/technicality, and even take feature requests if you have any!

I built this using Node and React, and it is hosted on Firebase for now.
Being able to force other people to do things is a way of multiplying your efforts. And we still HIRE people and delegate tasks to them.

And, as Melting_Harps pointed out, weapons are a technology. And so is communication and methods of organizing a larger society.

Storing grain is a technology too. Even agriculture is a technology.

But now we have many more ways to do this. If I write an app and millions install and use it, I am multiplying the amount of work I can get done for people and what they are willing to pay for it.

Much better for them than threatening them with my army.
Especially since I have been unable to find it. :-)
I don’t entirely understand your comment (actively looking for solutions for these issues so all info is good).

My initial attempt at getting a running system was to install an x86 VM via qemu / utm. It worked but was about 1 /4 speed of my old MacBook.

Round 2 was to an arm64 VM via qemu / utm (utm is using qemu here, but I guess it’s almost running purely on the M1?). That’s blazing fast but I don’t have everything I need compiled for it. So I’m recompiling what I can and whatever I can’t I’m then using qemu user mode within the arm VM to run the x86 binaries. The VM itself is really fast, the x86 code, obviously isn’t, but I’ve at least minimised the times I need the emulation.

Not sure of a better approach, but as I say, definitely open to hearing what else I can do.
And yet it is very very more expensive (and unreliable) than plane.
Sorry, yes, we were talking about different things. Calling String.substring() used to not copy the original char array, and would instead just store an offset and length in the new String, but still point to the char array of the original String. This could cause memory leaks, and the commit you referenced fixes that.

I was referring to String interning, where literals defined in code are only created once even if they are duplicated, and the API provides String.intern() to get the "canonical" instance of a String.
And the Manhattan Project only managed to enrich enough uranium for one bomb.
This is true, although when I was studying international relations "nation-state" was an accepted catch-all for a "top-level" polity in international politics.
> Technically, yes. They do well enough that we can and do accept it.

You shouldn't, and a great many in the US don't.
It's not really that the US lacks rails, we have the largest rail network in the world. The problem for passenger rail here is population density. France is three and a half times denser, and Japan is nearly 10x. I think they would also struggle a bit more to justify rail costs if they were as spread out as the US.
> This is a fault of the Signal developer, not of the Pinephone.

Whoever’s fault it is, is immaterial. The PinePhone is still lacking as a phone for at least those who use Signal.

> It's the beta release. It's gonna be faster with GPU acceleration AFAIK.

Can you cite that? The problem is that Mobian's stack is based on a lot of GNOME libs that have not been optimized very much and run slow even on desktop, so GPU acceleration won’t help much. Before you mention the other available OSes on the PinePhone, UBports is obsolete, bitrotting tech.

> how much time passed after the release until it became a reasonable smartphone?

The N900 was a reasonable smartphone immediately upon its release, at least in terms of being responsive and having core apps and functionality that people expected at the time. Nokia had a larger team of developers working on Maemo than there are working on PinePhone OSes.
Unfortunately, this hits the nail on the head for a lot of folks, these days.

It's easy for me to say that I will only work with those I want. I'm set, and don't actually need the work (the money would be nice, but it's not a need).

I refrain from being an "OK Boomer," but I would gently suggest that folks starting out, devote significant portions of their income to savings, and conservative (not politically "Conservative," real "conservative") investments. I'd further suggest against looking to your peers for guidance in spending habits or lifestyle choices.

The ageism in tech is really quite puzzling. We're all gonna become old. White people won't become black, men won't become women (well, they can, but it requires some really significant dedication and resources. I have friends that have made that transition. It is not something for the faint of heart); but we will all become old. The alternative is not something we like to think about.

A lot of young people that treated their elders like crap, are now, suddenly, on the receiving end of the behavior. I don't find it satisfying, in any way at all. It's heartbreaking.
In the UK at least this isn’t actually true. The studies done use tax records to estimate effective tax rates, not just published tax rates.
No, but it's very easy to grasp. https://blog.cloudflare.com/tls-session-resumption-full-spee... did it perfectly.

Basically, you need to get the session ticket from the webserver being available at the backend, and set its lifetime to something reasonable.

At least NGINX can then handle all of the session resume/renew logic by itself.
Looking at timetables, it's actually 7h30 or 6h30 by train (I'm seeing two different itineraries, and I'm not sure where the hour difference comes from). Even then, the Bordeaux-Toulouse link is not full HSR speed, and adds an extra ~2h of travel time because of it. When LGV Bordeaux-Toulouse is built, that should cut off another 2h to a 4h30 trip.

You might theoretically cut off another 1h if there were a more direct Rennes-Bordeaux line, but most of the delay over the plane isn't caused by the detour to Paris but by the quality of the current rail line to Toulouse.
I have wondered this too. I think it is still relevant, but very niche. Many companies are using Elixir and striving against their competitors, see Mux. IMO the reason libraries aren’t updated often is because Elixir is a completed language with no breaking updates planned [0], so libraries can be created and not need constant breaking updates. Also, you can do many things without using libraries because of Elixir’s and Erlang’s standard libraries and features. As an Elixir developer, I never go to Awesome Elixir to search for libraries. Its recommended to first look at Elixir docs, Erlang docs, Hex package manager or if still no solution found or have questions go to the Elixir Forum or Stackoverflow.

[0]: https://youtu.be/oUZC1s1N42Q

PS: Elixir is f’n awesome!
FYI CloudFlare uses it massively, and has, CDN-wide as I believe, session cookie resume.
That’s not quite what happened, Canada banned foreign fishing well before the collapse. Unfortunately, they simply set the allowed catch vastly to large, ignoring internal recommendations to half it, and caused a near total collapse almost a decade later.
Bloom filters explained in a single image
Influencers can easily raise hundreds of thousands to fight legal cases if they have an audience that cares about their cause.

Edit: s/YouTubers/Influencers
Or you could expand your information bubble to see memes that aren't image macros
> it continues to arm terrorist groups

That's all the US does, day and night. And they even say this publicly (although always implying that it is a good thing).
I had a similar experience from severe burnout - I was overly ambitios and worked for 12 hours + poor sleep.
Its like you feel dumb and that you will never regain the clarity of mind.
It took me a couple of years to get back to normal (around four I think). That included a year of therapy and a half of year of just doing the stuff that I like with no job commitment.
Some downtime is needed.
I’m neither ignorant or lying. I don’t see why storing hashes of a number makes it a profile. The argument in the links shared is that Facebook is storing ad targeting information from people who are not connected, which is not true.

Your argument is that if you create a profile, you have a profile, therefore you had a profile before. I’m sure you are not lying about thinking that, so I have to assume that it’s the other option.
> "Man is it really that slow to compile a hello-world Python GTK app?"

GNOME Builder uses Flatpak - when you press "run" button it does full flatpak packaging and runs the resulting package inside a sandbox. Of course you could still run such app natively, directly from the terminal, in which case it would be pretty much instantaneous :)
I suspect a some of those folks were on-shift or on-call and just doing their job. Since anything over 12 hours spans shifts I'm guessing nurses had a shift change during the case for example.

My wife worked as an Operating Room Nurse at a medium sized hospital for over 10 years.
Ads also make sure that I add those businesses to my mental blacklist and never want to interact with them again. This affects peoples wages. It aids wealth destruction. Nothing good about that.
So you're saying they went to all that effort and then just picked a random number for what to spin the centrifuges up to? All they'd have to do is get a Nuclear Physicist from the weapons program in
I live in Rome, so I can give a bit of feedback on it.
The road has been turned to pedestrian-only since August 2013 by the mayor Marino. It has been like that ever since. There is currently no plan for deconstruction, and the future of the road is still up to debate. I think it makes for a very nice walk in the heart of Rome, with plenty of space for tourists to wonder around without being cramped.
In my mind, most countries can't figure out how to plan or coordinate a cyber-attack. With a limited pool of nations to pick from, even being able to coordinate an attack makes you relatively "very competent" (among your peers), however, that would also be a matter of perspective. It's equally valid to determine a criteria of competency and rank/describe countries based on those thresholds.
As the artificial abstract borders are usually drawn, no, thet are in South Asia not Southwest Asia or MENA; and this isn’t purely abstract, India really is not in any meaningful sense part of the region, and Pakistan, which borders rhe conventionally-defined region, is only tangentially, being more focussed on India, China, and Central Asia than the Middle East (except Iran because borders.)
It’s interesting that even on HN anything that approaches an anti-Israeli statement is immediately downvoted. Israel is an apartheid state, and that statement requires no qualifications.

I’ll accept the inevitable downvotes as validation of both things said above.

edit: aaaand flagged. The super-downvote.
> Jon Corbett

Not to be confused with Jonathan Corbet of LWN.
Alice doesn't want Eve to read her messages to Bob. Bob, however, is careless after he reads it, and lets Eve read it as well. Now Alice wants Bob (and Eve) to stop showing her message to everyone. Alice is screwed.
So long as the alarm is a normal dumb smoke alarm and any additional features is on top of that, it’s fine.

If you can screw it up, or the smart features adds any risk - it’s a bad product.

I’m not arguing that no connected alarms are bad. I’m arguing that It’s possible, and easy, to make a connected alarm that is no worse than a dumb one
.

That’s a completely different argument. It’s trivial to make a lousy product. Even easier with a product that tries to be smart. That doesn’t make it a fundamental law that it has to be that way.

I don’t doubt that Nest products are useless, their smart features require an internet connection which is a clear sign of trash in any home product.

Taking a dumb alarm and putting a radio or other connection on it doesn’t (shouldn’t) affect the functionality. These alarms also existed since forever for larger buildings. No one would argue that they were less reliable than dumb alarms.
> Compared to 90% of the other nation-states out there Iran is a _very_ competent cyber-actor.

.

> Given your exposure in this geography can you name any of it's neighbors

Saudi Arabia targetted at least Bezos' phone
Iran has been both victim and predator of several cyberwarfare operations. They clearly have the experience and they are spending a lot of resources for a long time.

A quick search about their operations:

- Shamoon malware was categorized as cyberwarfare and it was used against Saudi Aramco, allegedly by Iran.

https://en.wikipedia.org/wiki/Shamoon

- A blackout in Turkey was also linked to Iran

https://observer.com/2015/04/iran-flexes-its-power-by-transp...

- Iran is also (allegedly) active in Information Warfare, which is much more complicated than technical cyber attacks.

https://www.cnbc.com/2021/03/16/russia-and-iran-tried-to-int...

- Israel and Iran are actively attacking each others infrastructure for a while.

https://foreignpolicy.com/2020/06/05/israel-and-iran-just-sh...

- Operation Newscaster. Cyber espionage and social engineering targeted senior U.S. military and diplomatic personnel, congresspeople, journalists, lobbyists, think tankers and defense contractors.

https://en.wikipedia.org/wiki/Operation_Newscaster

- Operation Cleaver. targeted the military, oil and gas, energy and utilities, transportation, airlines, airports, hospitals and aerospace industries organizations worldwide.

https://en.wikipedia.org/wiki/Operation_Cleaver
How doesn't it? Programming doesn't matter, even in a program that is classically sophisticated like a big compiler that's still only an implementation of an algorithm from a book rather than some divine poem that only exists in that compiler
Lexus' NX 4.6 Makes Drivers Crash to Prove a Safety Point
"State-level actor" is, I guess, the accurate schmancy way to say "country".
All I did was read a translation[0] of his speech. But one thing that stood out was the singular goal - of making that reality happen.

[0]: https://palladiummag.com/2019/05/31/xi-jinping-in-translatio...
Thanks.

I like your site (> I wear many hats, but graphic designer is not one of them).

This looks cool: http://graceofgodmovie.com

Looks like you're a great conversationalist.
I recommend this blog post as a good primer for TLS.

http://www.moserware.com/2009/06/first-few-milliseconds-of-h...
So people regularly run datacenters at home that need monitoring? That's what the original article is about after all.
The Isrealis have always embraced being a bit of a loose cannon geopolitically. It's smart; it let's them punch oabove their weight if they're careful about it (which they normally are).

My bet is they did this with the US's knowledge, but not involvement or approval. Israel doesn't want Iran going into the JCPOA without their nuclear program being set back as far as possible to square one. The US knows that it's an uphill battle to get the Iranians at the table at all, and would defer dismantling of their nuclear program to the outcome of the negotiations.
> Still uses a traditional controller or at best some Kinect like interface. Which would have the problem of needing a expensive treadmill like device to prevent you from bumping into walls.

> The headsets are still expensive. The hardware it takes to run games capable of taking advantage of the headsets is expensive.

The most popular VR device right now is the Oculus Quest 2, which is $299, needs no additional hardware, and uses fully motion tracked controllers (along with hand tracking). There's a boundary tracking system to prevent running into walls.

Also, it is growing a lot on a year-over-year basis, although of course the base is still tiny compared to cell phones etc.

So some of your info is out of date. I think that some of the challenges being worked on right now are content, device size/weight, and also integrating eye and face tracking into headsets. [1]

[1] https://www.theinformation.com/articles/mark-zuckerberg-on-m...
Is it not the case that a nation can be multiethnic?

I don’t see how Iran’s multiethnic populace disqualifies it’s claim on a national identity (Shia Islam).

On the wiki page for multinational states, I find reasonable examples (Russia, Belgium, UK), and Iran is absent. [1] Does this have to do with the Kurdish nation claiming territory within Iran?

Not trying to say you’re wrong, just trying to understand the terminology better.

[1]: https://en.m.wikipedia.org/wiki/Multinational_state
From what I know, VAC (Valve Anti Cheat) just looks for processes running on the system and detects injections into CSs memory. Then, for CS:GO specifically there's Overwatch, in which players look at other reported players' gameplay to determine whether they were cheating, and VacNET which is a machine learning system trained on the data from Overwatch to detect aimbots that way. There's a really good talk that someone from valve gave about 3 years ago[0].

The bigger problem is that even with input recognition, one of the biggest problems are wallhacks, meaning you can see other players through walls which is an advantage that's almost as large as aimbotting in tactical shooters like CS.

[0]: https://www.youtube.com/watch?v=kTiP0zKF9bc
Privacy is Alice wants to be able to read things from Bob, who has posted them on Eve's site, without Eve keeping a record of them forever and sending it to a very long list of possibly malevolent actors.

Bob wants to post on Eve's site because the list of possibly malevolent actors are paying him.
He says in one of his Reddit comments that he does not (and probably will not) use frameworks. It's pure HTML/CSS/JS.
Sorry! I'll reexamine myself on the comments in this thread. I suppose I was kind of triggered by certain aspects, which may not be a good excuse. And I realize this is only part of it, but I definitely don't want to attack someone for being new.
Israel has been targeting Iranian civil infrastructure and is also believed to be behind numerous assassinations of Iranian scientists. Scientists are usually deemed to be civilians. Since Israel has already attacked civilian targets and killed civilians, it would seem to me that by the laws of tit for that, Iran has the right to retaliate against Israeli civilians. In fact, Iran's allies such as Syria and Hezbollah should also have the same right.

Israel's use of terrorism against what it considers its enemies is afaik unprecedented. As is the fact that the rest of the world lets Israel get away with it without so much as a peep.
Whatever the reason is, it is not working right and Gimp is, for me.
Update: Spelling
>gives you a service (at scale) instead of cash

Yeah, this sort of payback scheme probably needs a few characteristics to make sense which apply in this case.

- Incremental cost of a student is relatively low. So even if, say, 25% of the class doesn't pan out, they didn't cost you a lot that has to be somehow passed on to the other 75%.

- Likelihood that graduates can get at least a workaday job at a decent salary are pretty decent. This probably wouldn't work for film school.