skysight-inc/HackerNews huggingface dataset:
I'd like to share a perspective that I can't reconcile. I'll start with a quick list of personal childhood(6-16 year old?) trauma: sexual abuse at 12 by a sadistic man 3 times my size that I feared, getting hit with a baseball bat in two separate incidents the second time fracturing a vertebrae, at 12 having an adult hit me so hard it fractured my sternum (to this day my chest has a bony ridge), losing 3 close childhood friends starting at age 10, watching a woman's head get run over by a city bus at age 6. Getting beaten so badly by a gang that my eyelid has a permanent droop (the girls mocked my new asymmetry) Watching a neighbor who I liked get stabbed in the neck and then beg for mercy (he had gambling debts) when I was 10. I could go on.

Oddly, at the time none of the above "traumatized" me because the media, movies about NYC and the mob, Catholic school (lots of torture pictures in our study book), other friends experiences, etc. set my expectations that violence and sadism against boys/men is normal and that I am lucky to not have gotten worse.

I didn't start to feel anger or trauma until I went away to college in the early 90's and no one seemed to have similar stories. Not even close. Oddly living somewhere safe with decent people made me bitter and resentful.

What I can't reconcile is that my new friends genuinely felt bad for me in a way that my NYC buddies didn't. And that somehow created the trauma. Is that typical ? And does that imply that an avoidance strategy, or a wise-cracking support group, might have better mental health outcomes than time with an empathetic therapist ?

"Overall, education seems the most important mediator." according the article.

Good thing I got that Masters degree.
The greater mistake isn't being perpetrated by the big browser companies scaremongering bad certs. The fault lies with every sysadmin or web dev that choses to 301 redirect from HTTP to HTTPS and not have HTTP+HTTPS. You can do your part to make this a non-problem by always serving HTTP and HTTPS both.
Thing is it’s not just the certificate that’s down, the website behind the expired certificate is also down. The two are almost certainly connected, though cause and effect is uncertain.
SEEKING WORK
Boulder, CO
Remote Work: Yes

Techne Solutions, LLC is a small embedded software/hardware engineering design firm. I have an aerospace and RF electronics background with experience in FPGAs and microonctrollers. Currently pursing a master's degree in telecommunications and cybersecurity.

Email: james@technesolutionsllc.com
Website: www.technesolutionsllc.com
Thanks, first time posting. Added now :)
When factoring in the alcohol-attributable fractions, it looks like German males have slightly higher rates of liver failure because of alcohol than American males, while German females have slightly less than American females. An this is with the U.S. population demographically being much more susceptible to alcohol liver disease than Germany[1].

Looking at the numbers, I think there's a real possibility that Germans and other Europeans have a problem with alcohol that's just as bad if not worse, but are possibly less willing to admit it. Just like how 70 years ago few in America would be willing to admit America's problems with alcohol and tobacco.

[1] https://www.sciencedaily.com/releases/2015/02/150220190741.h...
Yeah if i had to guess the backend is using the same cert
Sites can opt into "do not let somebody continue if the cert is bad" via HSTS.
India's Urban Company raises $255m, enters unicorn club
Now that you've added that, you (and other site users) can see it in

https://news.ycombinator.com/shownew

which might be useful even if it doesn't get upvoted onto the front page or anything.
They're both arrogant unfortunately. I thought the views of Neil on UFOs, like the views of Joe on psychics were really low value. They're both engaging in "let's selectively ignore evidence and witnesses to preserve existing biases and our existing preferred beliefs" but neither of them see it. They're a mirror of each other: Neil wants to gaslight on UFOs, and Joe wants to gaslight on psychics. And their big platform and audience everyone laps it up. Really, truly sad. But hey, it's OK. People step towards truth but slowly.
I love this. Quaternions were my nemesis while learning 3D math. I think it was the way I was taught it but quaternions always confused me as I mixed them up with euler angles. Having resources like this that explain them in detail really helps grok what quaternions are, can do, and how to incorporate them in your project. Great job! I’m over the hump now. I use dual quaternions for skinning and single q’s for rotation storage (why store 3x3m when a 4f quaternion will do?).
Reminds me of https://www.kickstarter.com/projects/nimble/nimble-salon-qua..., seen a lotta YouTube ads for this lately.
What's HTTP+HTTPS?
Show HN: Proposal for a podcast-first feed syndication protocol
My statement isn't that Americans are still drowning in cheaper than milk corn-booze.

It's that there's a shared history regarding alcohol consumption which is uniquely American in nature.

Prohibition is part of that unique experience, and very much a part of the explanation for the compression of the consumption distribution.
The one thing you can be certain about is that the US is absolutely not cutting its cyber offensive spending or reducing its offensive capabilities. That's all increasing, by a lot.

Under no scenario will cuts to offensive capabilities happen, it doesn't matter which party or person is in the White House.

Real US cyber offensive spending is buried inside of the three letter agencies and buried in classified spending segments within the budget (the $50b to $100b black budget), not out in the open in the supposedly transparent defense budget. It's very silly anybody would believe the US would cut its spending on cyber offense, while it's deep into a never-to-end cyber conflict with Russia and China; a conflict which none of the parties are much attempting to keep hidden at this point.
> I would really like to see a move toward purpose built systems and actually software engineering.

We've tried bespoke systems for all sorts of components. That's how we end up with multi-billion, multi-year sole source contracts where $beltwaybandit prints money and it takes multiple years to support now-common functionality/capabilities because it wasn't in the initial meticulously-specified, waterfall-driven design plan enshrined in the contract 5 years ago. And that contract itself was an extension to an extension to an extension from a contract a decade before that.

Excuse me, I'm having flashbacks now.
> Vectors do not have endpoints. Vectors are not anchored. Vectors are elements of vector spaces. Vector spaces are completely clearly defined.

Ehh.... compare this text from the wikipedia article on affine spaces:

> In an affine space, there is no distinguished point that serves as an origin. Hence, no vector has a fixed origin and no vector can be uniquely associated to a point. In an affine space, there are instead displacement vectors, also called translation vectors or simply translations, between two points of the space.

If you're working with vectors, you're generally working with them as points, not as values that happen to obey the axioms defining a vector space. Those vectors are anchored, and the anchoring is so deeply embedded in the concept that there's a separate concept, affine spaces, specifically devoted to the question of "what if we had things that were like vectors, except without being anchored to a particular point in space?"
It all depends on context and browsers have to have defaults that work for every context.

Sure a recently expired cert is pronably the least severe issue a tls cert can have, but still - expired certs that are compromised usually aren't revoked. If i'm visiting my bank, i definitely want things to err on the side of not working.
The point is taking the option away from users to proceed if there is a cert issue? Really it's not.
I'm not arguing that at all. I'm arguing that the cloth that you found in the junk drawer, and the surgical masks that you bought as a pack of 50 on Amazon, do not filter microscopic viral particles. They say so right on the label in many cases. The research I've read and linked also suggests that this is the case. Maybe in a few years you'll agree that it's common sense.

If you want to actually filter the air that you inhale and exhale I recommend an N95.
1. They have betrayed user trust in the past and continue to do so.

2. They have been sued by the FTC, paid millions in settlements, and failed to prove that they did not break the law.

3. They are currently being sued by the DOJ and many states attorney general.

4. They have made numerous settlements in private privacy-related litigation as opposed to proving they were not liable, despite having enormous cash reserves available for legal costs.

If someone were to suspect Google was "probably" breaking the law, this does not seem like an unreasonable suspicion.
Your last line is a vast subject I'm not touching here. But as to whether a welder ought to learn certain things goes back to the priority that we teach all our students shared values along with the importance of critical thinking, and we prioritize this for students becoming welders or judges or programmers or anything else in our society. And one of my favorites for understanding history, societal values and reading between the lines is Huckleberry Finn, and I'm all for every student reading books like this and if many don't get it, that's unfortunate, but it's well worth trying. Art is often less boring than just telling someone an idea straight. I personally find good literature to be more likely to be remembered and truly internalized by the person. I'm a big believer in the lasting power of show, don't tell.
Almost every laptop in the world connects a block of fins to the CPU with a heat pipe.

I went to ifixit and clicked the very first laptop teardown I saw, it has one. https://guide-images.cdn.ifixit.com/igi/gnBU5dVYrIhInIXV.med...

Or, let's see, razer blade stealth, that's a 3 pound laptop. https://guide-images.cdn.ifixit.com/igi/nHPaankElOWQndsv.ful...

What's a light 15 inch laptop, XPS 15 7590? https://i0.wp.com/laptopmedia.com/wp-content/uploads/2020/01...

Acer swift 5 SF515, "lightest 15 inch laptop on the market" https://i1.wp.com/laptopmedia.com/wp-content/uploads/2019/01...

LG Gram https://guide-images.cdn.ifixit.com/igi/fFlFJB3PKThJs3TA.hug...
My guess is that you have to think of the dynamics to see that the "jet stream is increasing in speed". Also... you really have to watch how that phrase is even defined.

If the atmosphere were cleanly cut along latitude into "arctic", "mid-latitude" and "tropical" cells then the relative change in temperature would dictate the change in the (static in time) jet stream. So if the arctic warmed faster than mid-latitudes then the temperature gradient and jet activity would decrease.

But it's not.

Instead, cold air blobs off the poles and we call the wobbles fronts which are associated with jets. Imagine if the number of polar vortex events per year increased from once every four years to 4 per year. Then the overall temperature gradient (and therefore jet activity) could increase even if the poles heated more quickly in the 4 events per year situation.

Here, more polar vortex events is a stand in for more overall dynamic activity in the atmosphere.
And i guess you think TLS-stripping attacks are unimportant?
me too. I'm not getting any younger and obviously my movements became slower on the keyboard as I ag
Oh, the days of 30-yr old PDP-8s running CNC milling machine s in the physics dept. machine shop....
Serve the same content over HTTP and HTTPS. Many web admins today don’t serve content over http, instead they HTTP/301 redirect all http requests to https.
Depending on your body weight, you should be able to metabolize it in about twelve hours, so you would have twelve hours of (hungover) sobriety a day.
Thank heaven for RS232 and documented ASCII command sets.

Having to replace working equipment because the software that you paid for can't be transferred to a new computer is a nightmare Often, the old equipment works just fine because the laws of physics haven't changed.

But equally often, by the time it's that old, it's being used for a tiny subset of its original, perhaps for exactly one repetitive procedure. In those cases, it's often easy to whip up a little Python program that talks to the RS232 port via a USB-RS232 converter.

Will the Python program last any longer? Maybe not, but at least its source code is in text format.
And some are crazy intelligent
I just took my mother-in-law off of life support last night, after her medical team confirmed she was brain dead.

This was after about 10 days of trying to save her after a sudden cardiac arrest 3 hours after her second vaccine dose.

The team ran numerous tests. Early 60s, healthy, no heart problems. Eventually, they decided that absent any other explanation, they think the vaccine had something to do with it. It's been submitted to VAERS.

The legitimate fear of creating vaccine hesitancy in the population is suppressing reporting on these events. I'm sure they are rare, but I suspect not as rare as we think.
Please note that "Rejection Sensitive Dysphoria" is not a medically standardized term. It was coined by an ADHD specialist and it appears he was the only real person promoting its usage.

https://psychology.stackexchange.com/questions/12583/what-is...

After I discovered this I usually labeled the qualities in myself as general social anxiety, or just "being bad at making friends or social situations." I wanted to believe that labelling every negative aspect of myself would help me understand my problems better, but it seems like it just made the appearance of those traits feel justified to me.

I've had to discipline myself not to take the easy way out and use the labels as excuses or explanations for my regrettable behavior when I already know of techniques or medicine to treat that behavior that have worked in the past. Learned helplessness has been pervasive throughout my entire life.
That’s exactly right. Really it is - please review https://en.m.wikipedia.org/wiki/HTTP_Strict_Transport_Securi...
I used to work at an institution where we had this fluorescently activated cell sorter machine that was hooked up to a computer running windows XP and the proprietary software you of course cannot upgrade (as outlined in the article). Since it was so old, IT airgapped it. No USB sticks even. Data left that machine via freshly burned CD rom. It was no 80s machine at least.
I agree and I've seen the same.

However as far as actual physical health (rather then mental or social) I believe cannabis to be far less detrimental.

It might demotivate a person but it doesn't flat out kill them.
The landing page is just something I threw together in an hour so it a bit joke-y and doesn't convey everything -- I'd like to implement some form of scripting (either via wasm, gamelisp or lua) down the road, definitely. I was waiting a bit to see if Grain or Assemblyscript would mature a bit more, but I'm also at the stage where I'm still adding core features so there wasn't any time to focus on scripting yet.

I posted this on r/rust to get some feedback, definitely wasn't prepared to expose it to HN yet.
> services that generate malformed X.509 certs (golang's standard library…)

In which way are those certificates malformed? Is it because they don't have the extensions needed to pass certlint?
This is actually really cool
HTTP Strict Transport Security (HSTS) is enabled at the DNS level which tells modern browsers "I'm a modern website and want to only be served on valid certificates, otherwise refuse to allow access to my website because something must be very wrong for this to happen".

The assumption is "must be very wrong" is an attack you don't want people to "continue" past. Occasionally it bites back like this if you don't maintain your certificates.

Offering HTTP transport invites attackers to inject advertisements, malware, or viruses into your packet stream. ISP like comcast and ATT are notorious for doing this.

Allowing falsified or expired certificates invites attackers as well.

HTST This is a good thing.
For the same UI related reasons that makes confirmation dialogs useless.

(For them, undo is a much better replacement. Even gmail's 'fake' undo for unsending email.)
CAA only applies at time of issue. Its totally valid for your CAA records to not match the cert you are using, as long as CAA was ok at issue time.
For many sites, and probably most non-commercial sites, yes. Anyone thinking about this issue can decide if that threat model applies to them: do they even have a log in, or is it just html files and jpegs in directories? etc.
These kinds of discussions need more real examples to accurately depict the tradeoffs of destructive vs non-destructive scanning, so I'll add scans I personally made.

Here are two pages from Cracking the Coding Interview, 6th Edition, that I preferred over the digital versions I found online that were hard on the eyes because I disliked the black-and-white scans. Feel free to ask me about "details" in the process

https://imgur.com/2ZQFZ5p

It's entirely possible to accomplish post-processing without writing code if you have Adobe Photoshop.

I used a free-to-the-public bookscanner built by the Digital Archivists at Noisebridge in San Francisco to take pictures of all pages in my textbooks (it took a while). In Photoshop, you can record a macro to automatically crop to a rectangular region determined by just one or more points that are guaranteed to be on the page in every photo. The selection is made by the quick selection tool (selects similar pixels to the page color in the same region). With this macro recorded, you can run it in bulk through all files.

The textbook size was still large digitally (a gigabyte) because I wanted the highest quality possible for studying, but it beat having to carry heavy textbooks for sure. I also shared these files with friends and we were able to study without any physical textbooks for books that were not available digitally—it was amazing.

Personally I avoided all the deskewing technologies and preferred just pictures, all in color, as close to the real thing as possible, because Noisebridge's scanner used two DSLRs and the pictures were high quality. It was better than converting everything to black-and-white for reading enjoyability. OCR through ABBYY FineReader.

Overall it gets more annoying the thicker the textbook is. If destructive scanning is acceptable, one can just buy the book, go to FedEx and ask them cut the spine off for $4 to convert it to loose-leaf, then run it through a document scanner such as ScanSnap ix500, which is much faster at around 25 pages/min at its slowest

One really cool feature about Noisebridge's scanner (picture below) was that you could view the camera's viewfinder live in real-time, thereby speeding up iteration and catching errors much faster

https://imgur.com/4Pkdp1j
In many cases this isn't the behavior you as the consumer would want. For an example, if your bank's certificate expires it's not ideal for the end user to be unwittingly redirected to http, and inadvertently access their account over an unencrypted connection.
Fortunately, BBQ in particular is one of those cuisines that with close attention to detail and some hours spent researching on the Net, you as an individual can turn out a brisket that, if not as good as say Snow's or Franklin, is more than Good Enough for an extremely satisfying experience when done with some friends and family as a group effort. One of the glories of our current age is this outcome can be reproduced with many if not all other cuisines and dishes.
LOL, it's true.
There is no shift happening what-so-ever. They're hiding the offensive spending for plausible deniability purposes, and to keep some information from US enemies.

It's trivially easy to shift expansion in the cyber offensive spending to the black budget segment, so US enemies can't get a clean idea of what the US is spending or not spending in that area. The US does this as a matter of routine in defense spending, and has across most of the post WW2 era.
Dudette if you're going to spend such time on an answer, at least look at the evidence closely.

Ice???? They were seeing and tracking levitating and maneuvering swarms of ice tic tacs for month visually and on radar. Are you sure? This is nuts.

3 is false. It clearly went nose toward him, then started matching his spiral down with a spiral up.

1 is false. It didn't disintegrate at ocean surface, it vanished after spiraling up toward him and jamming radar.

Then reappeared later at the designated rendezvous point.

Maybe it is made of ice. But that's smart, intelligence, possibly alien ice with advanced propulsion. So you didn't really prove anything with the ridiculous ice claim. Please do better.

I accept that the FLIR locks jumps might contribute to perceived movement. Fair enough. But USS Omaha tracking these things vectoring on radar is not an artefact.

- incapable of using cell phone cameras while on board a ship, even at the highest levels where rules against cell phones could be overridden, and

This is false. There are videos released from Navy aviators recorded using cell phones.

I agree with you that quality of video is pathetic. But it's good enough I suppose to bring us all here today to argue about it which is pretty sad I guess
Which it appears that it was not, at the time that cert was issued!

I have no idea if CAB have made CAA a requirement, but I presume not.
Alternatively, for each cluster, render the edge triangles of the cluster at the neighbouring cluster's resolution with Z-write disabled, then render the cluster (overdrawing the real edge triangles), then render the Z-write of the edge. That'll reasonably fill the cracks with little overhead.
Motivation could be an issue. What if they do not want to communicate with us? What if we are too slow for them? Dolphins produce burst pulses that have interclick interval of just few milliseconds. We cannot even hear these individual clicks and for us the burst pulse sounds like a creaky door. But they, supposedly, can hear individual clicks. We do not understand or use echolocation, they do, so their "dolphin-socrates" probably would have their own allegory of the cave that is not based on what individuals can see.
I personally love choice. But maybe for people like you, a service that curates some of the top choices and offers that as limited pool could be a useful.
I still don't see how that is circular reasoning. Where do you find a conclusion that is supported by itself?

> It doesn't matter whether that "someone else" is "the government" or "the HOA board"

It's not an "or", it's an "and" and that makes all the difference.

The reality is that in all cases, having both a Party A AND a Party B make your decisions for you is objectively worse than simply having Party A or Party B make the decision.

Having an HOA make you decisions for you doesn't make the state's decisions go away. Doing away with the HOA only leaves a single irritation.

> What matters is that the decisions about what you can and can't do with your house (and, for that matter, in every aspect of your life) are either yours to make, or they are someone else's,

There is a large distinction of "having many different parties with authority over you" and "having one party with authority over you".

The HOA isn't a single party that has authority over you, it is composed of multiple people who make take turns invoking the HOA rules against you. The state is a different matter - there are repercussions to individuals and appeals to an impartial third-party when the state invokes a rule against you.

You simply cannot equivocate an HOA with the state. People have recourse against the state.
In this context the NFT is kind of like naming rights, except vaguer and high-tech sounding.

"I can prove I paid someone for a poorly-defined, possibly unique special relationship with this artwork!"