skysight-inc/HackerNews huggingface dataset:
The merits or demerits of the individual should be irrelevant. Belarus seized a European civilian plane. I believe this is unprecedented. (Blowing them out of the sky aside.)

If this were an American plane, I would fully consider it an act of war and make a lot of noise to that extent. If it were an American citizen, it would be worth—even if solely to draw a line—a tactical incursion to attempt exfiltration. But it’s not. We don’t have Nordstream or Orban or all the other capitulations Brussels (and Berlin) have made that create a geopolitical vulnerability with an actor willing to exploit them. The situation is thus properly complicated.

The only mitigating factor to Minks’s credit is Protasevich having never secured EU citizenship.
A waymo self-driving car is not made of flesh and bones but I have yet to see a waymo self-driving car that performs better than a dog at: rescuing humans, detecting cancers and disease, shepherding and playing with other animals, protecting family from threats...
Huh, from the headline I was thinking it was intentional! Nothing but marketing fluff in the newsfeed yet, still waiting on an article that's not walled in Swedish(?).
It will be an interesting post mortem if they make it public.
> The daily struggle of a Christian is to strive to rid one's self of their sinful desires (selfish / evil) and live as Christ commands. This a continual process, and one that cannot be stopped. If one just "gets tired" of being a Christian, and lives differently, then they are in danger of losing their salvation.

How is this not a vehicle of control? It steers you in the direction of behaving the way Christianity prescribes for fear of the ultimate bad consequence which is losing your salvation.
Oh but we don't have to worry the collateral is all backed by a 1-1 reserve of USD..err I mean Tether, right?
"Attests the software version is the version that is valid and shipped by the Oxide Computer Company"

this makes "Oxide Computer Company" the primary target and point of vulnerability in multiple ways.

1) rogue employees (state-sponsored, corporate espionage) could replace the software. customers could do nothing about it, and might not even be told.

2) sale of the company by the VCs or a Corporate take-over gives no guarantee that what is safe now will be safe in future, no matter what the VCs or the company says right now.

3) whatever expertise "Oxide Computer Company" thinks they have, they're the single-point-of-failure. the larger the number of customers, the less likely that a given vulnerability will be immediately fixed and distributed out.

this is just some of the possibilities. sorry to say that there's so many things wrong with this idea it's really hard to hold back and not say anything.

now, if the full source code right to the bedrock is available, and the CUSTOMER is given FULL CONTROL, THEN we do not have a problem.

by "full control", that includes:

* all DRM keys including TPM signing private keys
* all peripheral initialisation source code
(including DDR4 firmware, PCIe firmware and USB3 firmware)
* BMC (Boot Management Console) source code
* BIOS source code
* Operating system source code
* full source code for all tools and toolchains for the above
to avoid vendor lock-in and the possibility of the toolchain
itself introducing rogue code.

this is one hell of a list and it's almost impossible to fulfil with today's "NDA'd proprietary firmware 3rd party licensing" mindset. the only company in this secure server space to my knowledge that's achieved this is Raptor Engineering with the TALOS-II, when running with the Kestrel BMC replacement, on the Lattice ECP5 FPGA.
I don't know if the grandparent commenter is correct, but they quite clearly meant Belarussian flights over EU airspace, not the other way round (EU flights over Belarus, which is what you seem to be referring to).
> If you don't like an article, move on.

You just explained why you think this should be on HN, something that wouldn't have happened without the question.
A dog's environment isn't roads. And no car has been design for a dog to drive.

Were such a car to exist, it is clear the dog would win in very very many environments (almost all). As would a mouse, let alone a dog.

That it may be possible to rig a human environment to be replete with so many symbols (road signs, etc.) that an incredibly dumb automated system can follow them is hardly here-nor-there.

Personally, I dont even think that will be possible. Self-driving cars may work on highways and motorways; I don't see there being any in cities. Not for centuries.

(Absent pretty big engineering projects to make cities so overly sign'd that a non-intelligent automated system could navigate them. Consider, eg., existing automated trains & train networks.)
The EU already implemented Emissions Trading Scheme. EU is putting a cap on the emissions and the allowed emissions are auctioned, so that companies must compete for smaller and smaller pool of allowances. If companies do not reduce emissions there is no limit to how high taxation can go, as the tax rate is market driven with limited supply of allowances.

China is planning to implement similar system. Only USA is doing nothing in this regard.

https://en.wikipedia.org/wiki/Chinese_national_carbon_tradin...

https://en.wikipedia.org/wiki/European_Union_Emission_Tradin...
Biden Administration to Require Pipeline Companies to Report Cyberattacks
How to Avoid Product Autopsies
I thought the same at the time. Also the way they tried to murder Skripal, same like they did earlier with Alexander Litvinenko: by poisoning with Polonium.

They could have chosen many other ways which would look less spectacular and wouldn't put the suspicion so obviously on Russia. But obviously it was there intention that it was clear that they were behind it: both to scare any remaining dissidents and to impress some part of the Russian population with their power.
Double-blind usually means something else in reviewing: the reviewer does not know who the author of the paper is, and the author does not learn who the reviewer is. Single-blind reviewing is when the reviewer knows who the author of the paper is, but the author still does not learn who the reviewer is.

As you mention, the problem with having two sets of reviewers is that it's hard enough for conferences like NeurIPS to find one set of qualified reviewers. Usually at least 1/3 of reviewers on any given paper produce a poor review, either because they don't care or because they really lack expertise. Complaining about this is so widespread that it even doubles as a sort of icebreaker for researchers, but nobody has a good solution.
That is a great idea. Let’s throw even more fuel into the fire of a new Cold War. By naming a street in a EU capital after the guy who’s proud of serving in the white supremacist militia.

As if Bucharest has no other problems to solve. I mean, I’ve been there, the place is literally falling apart.
Yep, same boat here. Deleted FB/Insta and avoiding altogether as it made me incredibly anxious.

Still lurk on Reddit but no account there so I can't wade in to the comments.

HN is the only forum I actively participate in.
It's still really early stages, but I am actively working on a regexp engine[0] in Zig which aims to blur the line between regex engines and advanced parsing algorithms used to parse programming languages.

I am quite optimistic that due to Zig's portability and cross compilation, it shouldn't be too hard to expose it as a nice C library and use it from other languages (and WebAssembly) soon.

[0] https://github.com/hexops/zorex
MS Exchange outlook web interface sometimes showed me completely unrelated mailbox content upon login: folders, list of messages, read status, subjects, etc. Trying to open email never worked though and the whole problem goes away after page refresh.
Even if you say the truth, you still need to pay for a lawyer's swimming pool.
The Klarna effect?
https://www.svt.se/nyheter/inrikes/storningar-i-klarna-appen...
As pointless and stupid as taking down the flag of a sovereign state and replacing it with something else. What you get is more enemies and hate.
Magnitsky says hello. Or rather he doesn't.
Science Is Based in Metaphor
Their German counterpart, Sofortüberweisung, didn't properly blacklist test credentials given out by banks e.g. to developers in the beginning, so people could simply use those and pay for goods and services with fake accounts.

For me there are so many red flags with all these services, as they basically "steal" your credentials to log into your online banking. And while they claim that they only use the credentials to make transfers they could as well look at all my other account data. I really wonder how such a scheme can be legal and how banks can allow this, as they normally tell people to never give their credentials to anyone. The situation of course recently improved with the mandated 2FA for logins and transfers, but still there are so many attack vectors in this model that it boggles my mind how it can still exist.
Does this play nice with a Content Security Policy which forbids inline-scripts / styles?
It’s the first book I remember reading: both in English as a small child, and later in German.

How many other HN readers have a similar relationship with that book?
So apparently SpaceX intends to use synthesised fuel for the Earth to Earth transportation [1]. Which could make it potentially carbon neutral. But it feels like it could be wishful thinking that it would hold as a long term solution? Synthesising such fuel would be vastly more expensive than just buying it from the fossil fuel supply chain right?

1: https://cleantechnica.com/2019/10/30/no-you-dont-have-to-wor...
If the Lab-Leak Theory Is Right, What’s Next?
Lookbehind is not supported in Safari: https://caniuse.com/?search=lookbehind%20regex
> inmates (cough volunteers) couldn't survive a year without importing oxygen, and that was here on Earth with a relatively friendly atmosphere

Different goals. Biosphere 2 aimed to be indefinitely self-sustaining. Starship is fine re-stocking and re-fuelling.

Better comp: nuclear submarines, which can do about 4 months at sea of pushed to the limits if their rations.
Lots of times when I’ve been buying things in e-shops I’ve been offered to pay using Klarna as a payment broker.

But doing so has always been more confusing for me compared to “regular” payments with a credit card anywhere else, and has on overall been a negative experience for me.

I really don’t understand why anyone would prefer to use them at all.

What am I missing? Can anyone help me understand?
I would argue that this title is less editorialized. This title plainly states the main fact and subject of the article. Whereas the NPR title leaves the cost nebulous so that we can all wonder, and then click. I would further argue that that ambiguous “high cost” is meant to imply to that reader that the “cost” is extremely high.

In short, this title is more accurate, less editorialized, and less click-baity.
Probably a push to prod of something of something that worked on the developers machine, Klarna is at the size where any fault like this would be seen by thousands within any reasonable reaction time.
This author makes broad sweeping claims, supprting them with numerous references that (in all instances that I checked) actually counter their argument. I'm not even sure the author knows _what subject they want to talk about_, never mind what argument to present.
1. Passengers can spend time in VR (I want to believe that fairly visually immersive VR tech will be available already in “several years”).

2. We need hypersleep tech. There’s no way around it, as it seems.
If you rely on your application layer to enforce data privacy instead of enforcing it in your storage layer its just a matter of time until you have an issue like this.

It says a lot about the security of their api and development culture that they are even struggling with something like this. This should be caught in the first architecture review session.
I got Usenet via UUCP on my Amiga exchanged with a BBS that in turn exchanged with their upstream over dialup as well, about 4 times a day.

My first "web" access was via CERN's e-mail to www gateway. If I timed it right, and CERNs e-mail gateway was fast enough, I could request a URL, exchange with my upstream, have them send the e-mail to their upstream and download the result in one exchange, and then I'd dial back in 15-20 minutes later and get the page. If I was unlucky I had to wait for the next exchange 6 hours later.

It's my "and we walked uphill both ways, in the snow" story.
https://archive.is/inJf2
The problem with wider roads is a shift away from walking, cycling, public transport to car driving but that isn't what the comment complained about, considering the car (the single family home) is already there and anything you do can only increase efficiency. Building apartments it is the exact opposite and can only help over the long term.
This isn't surprising, and it isn't limited to CS research. I've known people who got papers in different fields because of a similar approach.

It's also noteworthy that it seems that Chinese engage in this quite a bit, either due to their culture that does not forbid cheating (e.g. see how they pass the GRE or other standard tests) or because there are a lot of them.
Yeah, I've done it.
> RT's current approach seems to be to focus on Protasevich's alleged role as a propagandist for the neo nazi azov brigades in donbass and, of course, the whole Snowden/Morales affair.

They're deflecting because Lukashenko's official narrative (the bomb story) is too absurd even for them to peddle. They can't really say that the plane wasn't hijacked so instead they're falling back to "well he had it coming". This is definitely a new low for the Russia-Western relations, they normally bother with at least some plausible deniability.
Happened to Valve too, Christmas 2015: https://arstechnica.com/gaming/2015/12/valve-explains-ddos-i...
It’s not that simple, it’s now well known that social media addiction is a thing.

Not being able to self control is exactly what defines an addiction.
According to the article they shut down all logins in the app. Unsure if this means you can still use it you are already signed in or not
> But don't think for a second that the US won't force a diplomat's plane to land even outside their jurisdiction just because they believe an enemy of the state is on it. It's all about interests.

They already did that. It's funny that this is considered ok.
> And you know where Snowden chose to live and why.

Nitpick: Snowden chose to live in South America actually (Bolivia or Equador) he was just in transit in Moscow but he was just never given the right to onboard the plane again after the US canceled his passport.
Happened to Steam in 2015. In their case it was a caching issue.

https://old.reddit.com/r/Steam/comments/3y7lxm/when_i_go_to_...

https://www.forbes.com/sites/insertcoin/2015/12/25/steam-is-...
Just to clarify, Sergei Skripal is still alive, the assassination failed but instead did kill an unrelated woman later named Dawn Sturgess.
Is this using IBM Watson for STT? Are you assuming the costs?

Or does it use some windows dictation api?
I suspect this might be request threading/confusion[0] issue similar to the one GitHub experienced a while back. This would explain why seemingly random user data is being returned.

0: https://github.blog/2021-03-18-how-we-found-and-fixed-a-rare...
I might have to try it just to try it

I do remember all the suicide doxing stuff
> It uses appropriate verbs...

This shouldn't even be a thing to think about. HTTP verbs and error codes don't map well to many real use cases.

You might argue that "GET" does map well to a query. However, you can't send a body with a GET, so you need to put that information in the URL, which is limited and causes other issues to consider.

If we just admit that we're really doing RPC anyway, there is no point in using any other verb than "POST", passing in the arguments via the body, and returning any other codes than 200 and 400 with the result (or error) in the response. If we use JSON for this (as we likely already do), you have JSON-RPC.

> You can make up a new acronym for it like "WNI" or Web Negotiation Interface, but it doesn't change anything that people care about.

I actually care about it. The word REST forces us to think about irrelevant things, such as whether something should be a PUT or a POST, which error code maps best to an exception - only to end up with an API that is more annoying to implement, document and use.

We would do well to transition out of of this insanity driven by buzzword compliance. If we managed to transition out of XML, we can do this too.

> Have tires really changed that much in 200 years?

Yes, they have!

https://en.wikipedia.org/wiki/Tire#History
Clearblue now supports pregnancy and fertility tests through Be My Eyes (2019)
When you run a Pi-Hole you see how much telemetry is being sent back with the DNS requests to many different domains.

Insane, simply for scrolling through pictures. I think it tells you a lot.
Probably caching set incorrectly. happened with steam years ago - https://www.bleepingcomputer.com/news/security/steam-caching...
Nothing says “Let’s try to resolve the issues between our states” like naming a street after someone who’s considered a terrorist by your neighbor. Has no practical value, no historical significance for your city. Just to piss someone off. This is a kindergarten-level politics.
Hear hear, I used Klarna (not by choice) and it surprised me they would feign being me in interactions with my bank. Exactly the type of behavior techies are trying to teach the older generations to NOT fall for.

With this, we know that Klarna's software quality is papier-mâché level. I am happy I refused to let Klarna have my account authorization.
Yeah, the ritual of preparing, holding, pausing to drink is a big part of it. It's not just about the caffeine. The same ritual would work with mint tea.
Yes, and it looks like a "space filling" pattern with enough room between to do something like farming. It does not look like an abstract artwork.
Thanks. I'd previously tried and failed a couple of times to get a NeoVim gui installed, mainly because I wanted to try one of those ligature fonts that display -> as → and the like. There seemed to be a few different options, in various states of being abandoned, or unpackaged, or needing libraries not in my OS, or ...

Turns out now all that's needed for Ubuntu is sudo apt install neovim-qt. Thank you for prompting me to look at this again.

However, on running it, the window seemed very wide, so one of the first things I tried was `:set columns=80` — and nothing happened. Checking :h 'co`, it looks like it's supposed to work.

Ah, and it seems the (released version of) QT gui doesn't support ligature fonts yet. The FiraCode website says it works with NeoVim-gtk: https://github.com/tonsky/FiraCode#user-content-editor-compa...

Maybe I'll give that another go ...
Sounds like the perfect solution if you want to say "we are releasing features that support a healthy usage of the our app", and at the same time make sure no one uses these features!
I worked in a project over 10 years ago where something very similar happened!

We had built and authentication service that, among other things, was used by a SyncML service that was used back in the day of feature phones to syncs contacts etc. You can imagine that getting someone else's contacts on your phone isn't exactly ideal. This was how we came to know about the problem, from customers getting other customers data!

The error was caused by a CDN switch. Our instructions to the the CDN team responsible for the switch was "Make sure the CDN honors our cache headers, if our HTTP responses say something can be cached do so, if they say that the response should not be cached then don't". We were in at least three meetings where we repeated this mantra.

I believe that the CDN team thought that they had setup the CDN correctly but they had missed an edge case. The CDN was in fact setup to cache even uncacheable responses, and served those, _only_ when it could not reach our servers.

So if there was a traffic spike and the CDN determined that our authentication servers were unreachable it would fall back to serving data that should never have been cached in the first place! Happily returning tokens to random users that had authenticated just before the traffic spike...
It must suck living in the same street as an embassy.
Isn't it too be expected that when you train people's immune response by injecting mimicry spike proteins that people will react very similar to when they receive actual spike proteins?
Outsourcing RoR – How to Choose a Ruby on Rails Development Company?
Sometimes I see my own mails before logging in for a short while in Outlook web app. They have some issues.
Not sure where you are located, but in Sweden, Klarna at the start (if I remember it correctly) only needed your 'personnummer'(social security number) to process payments.

Now I think they manage to track your devices so I only have to enter my postal code, and then I just click purchase, and it's all done.

They used to use really weird/dark patterns, to make you forget to pay and then pay huge fees to Klarna.

Nowadays as I've configured Klarna, it just subtracts the amount from my bank account, hassle free, and I don't have to do a bunch of reserach wether or not the website is credible.

Somewhat like Paypal, but smooother.
Amazing but wrong. Most water goes down into the earth. Fucking waste of time.
I was the opposite. The classical was easiest because it had so much texture that was easier to spot tiny flaws in that texture.
Swedish is easy to translate with GT, here's a quick translation of the state news reporting,

"Users of the payment service Klarna's app testify about disruptions on Thursday. Anyone who logs in with a bank ID has in many cases been able to see other people's information, including payments and invoices.

- It is very serious and violates privacy, says David Bjurhede, one of many who noticed the disturbances.

Many who have logged in with a bank ID on Klarna's app have on Thursday morning been able to get to someone else's account, users tell SVT Nyheter.

David Bjurhede is one of those who noticed that it was possible to see another person's information in the app, including what purchases had been made and parts of the account number.
- It is very serious and violates privacy and risk of fraud if you can find out user information so easily, he says.

Another user says that he discovered the error at 11 o'clock and that it was possible to take part of other people's information for about 20 minutes.
- It was possible to see almost everything, parts of the card details and exactly what they had bought and what their finances look like at Klarna. It's a little scary. I have not been through it before and I think it should not happen, he says."
1991: Trade Wars 2002
We can only speculate, but what baffles me is that it happens for something so private, and for a company that is so rich. Do they not audit their code? Do they not risk assess these things? "Ah, storing user credentials in thread local storage, that sounds sane and bug-proof" said no auditor, ever.
Sir, I find this of great interest and a noble pursuit. I would very much like to invest large sums of my newly created cryptocurrency in this. Have your people contact my people.
I think the main selling point is being able to buy clothes and return the ones that don't fit without having to pay for the lot first, and get a refund later.

The same can be applied to a credit card though so it's not a strong argument
What wouldn’t be idiotic is for countries to sanction Israel for not trying to resolve the conflict. Like, for starting a war whenever the ruling party needs to get a bit more of those nationalistic votes.
Do you have a source for him being in a white supremacist militia?
Scared straight: How prophets of doom might save the world