skysight-inc/HackerNews huggingface dataset:
Back in the early years of Snowplow, we adopted a similar approach for our support of 3rd party webhooks[1] as an event stream source supported natively by Snowplow (https://github.com/snowplow/snowplow). (The important background here is that all events and entities flowing through Snowplow are described using versioned JSON Schema).

We built a kind of Maven Central for 3rd party webhooks' schemas[2], and got to work adding schemas for various popular webhooks, e.g. Sendgrid and Pingdom. But, we never met a single SaaS vendor who was interested in 'adopting' the JSON Schemas for their webhook, let alone publishing versioned JSON Schemas for their whole API. This meant that at Snowplow we have stayed on the hook for keeping these vendors' webhook schema definitions up to date in our registry.

It's a real tragedy of the commons - oceans of developer time wasted on tedious low-leverage work (updating API client code) so that each SaaS vendor can 'move fast and break things'. The ultimate irony is that if these vendors were to adopt, publish and respect versioned schema definitions internally, using something like OpenAPI, they would see huge productivity gains (think enhanced CI/CD testing, auto-gen of client code etc).

1. https://docs.snowplowanalytics.com/docs/getting-started-on-s...
2. https://github.com/snowplow/iglu-central/tree/master/schemas
And getting rich is as simple as earning more and spending less, why are you not rich already?
I would like to know your answer to the question in the second paragraph, as well as your response to the final paragraph.
Optimizing JavaScript Performance When Sorting
Apple does not scan iCloud for csam because they feel that blanket scanning of iCloud violates end user privacy.

That’s the whole reason for their research into differential privacy.
I agree, I thought learning spoken phrases would be the way to go when I first visited, and it certainly helped with the basic stuff like restaurants and saying please/thankyou.

But knowing how to read the alphabets would have helped a lot more, because there are so many very understandable things sitting right infront of you if only you knew how to read the characters. コンビニエンス seems impenetrable if you don't know the alphabet, but it's just the adapted word for "Convenience": Konbiniensu.

Duolingo copped a lot of flack here in a recent thread, but it was great for initially learning the alphabets, it took nearly no time to memorize Katakana and Hiragana. If you don't know the alphabet you can't even begin to try and learn the language in situ, so that's step one and a huge help when travelling.
It’s like how you can write perfect software by “just” not writing any bugs into it
There were plans to launch a VASIMIR Ion drive for testing - The ISS was the only thing in space with enough electrical power to test it.

Apparently NASA lost interest around 2015.

I think I read something about assembling a manned mars ship out of re-used ISS or new ISS-like parts, but I can't recall where, or if the proposal was serious.
Pretty amazing that someone can rave so much about konbinis and not mention that next to their fridge of cold drinks they will inevitably have an equally large or larger fridge of cheap booze, sold at all hours.
Funny how it's obvious you're not a woman. 20 years ago if I groped a woman's ass or called or called my coworker Jose a wetback people would have clapped compared to today. And you're right, greedy predators like Gates and Ellison are a totally recent phenomenon. The past is better more noble and cleaner than the present. Honestly what a basic sentiment.
How many businesses are they having to "shut down without explanation" that it doesn't scale? I understand if this was something like not responding to a wrong charge/refund etc for one customer. But here we are talking about shutting down someone's business without explanation. I do not think "scaling" is the problem here.

Also as someone else mentioned, as much as I love hating on Amazon, customer support is one place where they are absolutely outstanding. I have been able to reach out to their chat support and get issues resolved multiple times (refunds/item returns etc). If Amazon can scale it, then so can these payment processors.
I like this one I heard in the movie Close-Knit: "raburetā" (ラブレター) from English "love letter".
Currently the app tries to check for updates upon launch but in principle PWAs can run completely local. If you import ROMs in PWA-NES they are also saved on local storage.
It can be hard to find PWAs but if you're building a mobile app and want to target both iOS and Android users PWAs can get you pretty far with little effort.
I was looking for something like this for a long time. my work and personal account usage will be more comfortable now.
Add Nvidia AI Essentials Series to Your Summer Playlist
https://www.youtube.com/watch?v=C3dqvxlnmJw maybe this helps. I've been watching this channel for a while and it has a lot of good info and they are angle investor.
The macOS Sandbox File Limit
I can't believe this is actually a big issue if that's the best example they can come up with.

Most of the problems could be traced to simplified models they claim, yet the two they actually mention in detail clearly did not. And they make no attempt to quantify the contribution (in terms of cost Vs energy waste) of the ones that do.

It seems highly unlikely that they'll rival having your heat on too high and the windows open to vent the heat.

In particular, a school in a valley in the UK having its lights on doesn't on really seem like a big deal as long as they're using LED lights. Attempting to harness natural light in this type of building sounds like a feel-good notion that can't possibly compete with decent led lighting run from a renewable grid.
so essentially the Captcha is the AI's sneaky way of getting humans to understand them, once we understand them the process of assimilation is at least 30% of the way done. Next - the hardware fittings.

Actually - if I was the AI trying to assimilate the humans I would start selling a google glasses type thing that allows you to skip captchas by automatically informing the captcha that a human is watching - watching through the AI's eyes.
There is nothing fundamental about Rust that prevents command injection vulnerabilities. (What Rust has going for it in this specific case is that the standard library AFAIK doesn't have an easy way of doing it accidentally laying around - if you want to call the shell, you need to do it explicitly)
Seconding Wendover’s Extremities season about Pitcairn. It’s a YouTube channel nowadays, it seems like the podcast didn’t take off much.
>>>I have absolutely nothing against Japan but it is disappointing how it's the only East Asian country whose culture Americans care to look at.

I think it's a secondary effect of anime & manga creating a bunch of weebs that then proceed to wanna geek out about all things Japanese, all the time. The rest of Asia hasn't managed to produce the same sort of pop-culture inertia.
If I hire MasterCard to process payments for me, I don't become MasterCard's employee.
Maybe you can do it if you're black yourself and have a lot of familiarity with the person you called that name. But even if it was the case, justice is blind
Hooray!! I totally love the way 'Brassica' vegetables provide such a vivid illustration of the amazing variety that some selection-pressure can yield on the development of essentially a single type of input organism. Makes you wonder what might happen when these types of selection-pressures start affecting humankind more!
Pokemon is "pocket monster".
Honestly I am doing quite well by following those simple practices. But creating wealth out of nothing is surely more difficult than eating less of what you already have access to.

Anyway, the point was that being ok with being obese because you are happiest eating a lot doesn’t make eating less any more complicated. It’s just choosing to do something different, which everyone is free to do.
> Just one anti-vaccine paper from almost 30 years ago (that wasn't even accepted into any publications) and fueled an entire generation of luddites.

Ok, so you admit that the journals aren’t even able to accomplish what they purport to. So if this is already a problem, yet good research is inaccessible, what again is the point of the paywalled journals?
Subplot: A DSL for specifying and implementing automated tests
Why would you do that when you can do that at home
>I also wonder why people keep complaining on the rising house prices while no one ever complains on the rising stocks.

I complain. It's symptomatic of the same thing - earned income is an ever smaller share of the economy.

People who work for a living make less / GDP every year and the difference gets channeled upwards either through rent or dividends. It wont end well.
and reload your IC card!
How will voluntary bitcoin adoption affect this? In other words, once economic actors have a currency that can't be manipulated by government, want changes?
What’s wrong with their hosting?

I’m happy that I don’t have to manage a hardened up-to-date server just for this.
If you really want to stick to that analogy, it's more like a makerspace that lets rent their facilities and webshop to make and sell your own phones, and takes a cut from your profits.
Ask HN: Excessive Number of Ebay Re:Captchas?
I just wanted to buy an Arduino programming book on Ebay and should pass a Re:Captcha at the end. After 11 Re:Captchas I canceled the purchase and ordered the book from Amazon. Has this also happened to you, that you had to fill out so many Re:Captchas?
In Hong Kong we call it Club 7/11
OBS can present its output as a virtual webcam, so can Logitech's webcam software, so can driver-level code, so can lots of other things (https://duckduckgo.com/?q=%22virtual+webcam%22, or just search for your own phrase [fake webcam device]). Virtual microphones are similar, and there are lots of options, e.g. Equalizer APO does audio processing in the Windows kernel before applications get it, and supports VST plugins that can generate audio. Browsers see these things exactly how they see hardware webcams and microphones (since those go through drivers in the same way).
Chromium or Firefox could easily be modified to have virtual mic and webcam support built-in, without needing driver-level shenanigans. Bots can be run in virtual machines where the "hardware" is just software that can be fed any input you like. Hardware-wise, a Teensy or Arduino can plug into a USB port, pretend to be any USB device, and feed in anything you like. You could even use a computer's real microphone and webcam, just pointing at the speakers and screen of another (but there's not much point, since doing it in software is simpler).

Metadata is trivial to modify, e.g. FFMpeg can do it, and it usually doesn't say anything about genuine-ness anyway. Besides, if you're generating your fake input in software, you'd just generate metadata to go with it.

Sorry, but there are so many holes in your idea that it seems completely unworkable. Even if new developments made it more feasible (new webcams and microphones that cryptographically sign their recordings? Still fakeable by the speakers and screen setup above. Depth-sensing cameras might be trickier.) people would rebel against allowing any and every site to access their webcam and microphone (and hence possibly spy on them).
What does Electron in name only mean? Either electron is included or it isn't. Whether you are using Rust through native bindings or through WebAssembly does not really matter does it?
Public services are not calculated in GDP. If a city in a nutshell pays a gardener 2500$/month as their only expense, it will count as 2500 in GDP. But if they choose to instead pay a company 3000$ a month, and that company employ the same garderner 2500$ a month, the GDP will raise to 5500. If this city was in the EU and followed silly rules like "only borrow up to X% of your GDP", effectively firing all public servants and paying companies to do their job could increase significantly the GDP and allow this city to borrow more. But is the generated value greater?

GDP is a silly metric anyway. GDP(PPP) is ightly better, and IDHI is imo the best way to chose a country you want to immigrate to for your children.
> humans hit send on each of the above emails

Some human might have hit the send button but those emails definitely don't look like they were authored for this specific case as it looks like a generic template email.

Good to see the OP got their issue resolved but I hope someone at stripe implements at least a call back and email reach out before shutting down someone's business in the future. This is a very similar issue with Google where they shut down entire developer accounts without explanation and developers have to create enough shit storm from social media and tech blog posts to get a human to reach out. Droidscript being the most recent well known case:

https://news.ycombinator.com/item?id=26956077
Yes it’s different. People call it QT.
> It's a common vulnerability that can happen in all languages.

While that's true, some language's standard libraries don't expose this vulnerability so the developer has to explicitly write bad code. And that's what really matters.

Take node.js for example: it's not going to be obvious that `exec(command)` is actually equivalent to `sh -c "$command"` and thus a lot of people will get caught short if they have unescaped shell script tokens (eg $, <, >, ;, etc) in their command string. And that's very easy to happen.

Personally I think it was a boneheaded decision when most of the languages adopted that approach of forking to sh. If developers wanted to fork to a shell then they could still explicitly write the code to do so (like the `spawn("/bin/sh", "-c", cmd)` example in the article). But by having exec fork sh by default you're creating a risk for all sorts of unexpected behaviour from developers who don't know their language's standard library inside out (which, lets be honest, is going to be most developers given the point of standard libraries is to abstract away that complexity so developers don't need to think about it).

This isn't just a web scale problem either. In fact the example given in that article is a perfect one because its a CI/CD pipeline running trusted input that still failed unexpectedly.
No, it would take a company that realizes that they already are flying close to the envelope and that they are in deep anti-trust shit already. That is, a company with some common sense among the leadership who can see where the wind is blowing. As it is, Google and Apple have no political or business allies and lots of regulatory actions incoming. They might have done well financially so far, but they aren't in a good position.
I don't think he was speaking to an international audience when he said that, even though it may appear to be like that. Russia is internally quite fragile and to admit that they lost their edge is something that comes with a pretty high price so - just like it always was - they engage in weak PR.
Therefore, to eliminate death , have more sex
I don't really understand what you mean when you say it is an "implementation detail". It is definitely a detail of the implementation, but it is an extremely important detail that makes all of the difference.

Given that it is just an implementation detail, I guess they can simply change it and then the rest of us will be at peace?

I think it would do you well to see this quote:

> ”Any proposal must be viewed as follows. Do not pay overly much attention to the benefits that might be delivered were the law in question to be properly enforced, rather one needs to consider the harm done by the improper enforcement of this particular piece of legislation, whatever it might be.”

> -Lyndon B. Johnson
Doesn't Peruvian economist Hernando de Soto argue that property rights or the lack thereof are one of the main contributes to keeping people poor?
How to Use Promise.allSettled()
The payment agreement is made in advance; it doesn't come as a surprise once the judgment is announced.
Show HN: Generating Collisions on NeuralHash
Tesseract.js – A Javascript port of the Tesseract OCR engine
It's not a crazy suggestion to have ability for an emergency stop or docking success signal sent from the station to the module.
When looking into KeePassXC, did you specifically look into the KeeShare[1] feature? As long as you have some common place to read/write a file, you can share a subset of your credentials. I agree this is not as easy as hosted solution like Bitwarden, but KeePass was always designed to be a non-hosted solution, so I think this is about as good as they can do.

1 - https://keepassxc.org/docs/KeePassXC_UserGuide.html#_databas...
How to Use Test.todo() in Jest
No it's mostly porn, and many (partnered) people enjoy porn and want to support the creators. There are other platforms for sugar babies
With the current food prices, there are no countries where $136/month is a fairly decent living. Countries where $150/month is the average salary are a hellish place to live in.
This is a proof of concept on generating collisions on a perceptual hash
similar to the one Apple recently decided to use to scan your devices for CSAM.
(https://www.apple.com/child-safety/pdf/CSAM_Detection_Techni...)

Perceptual hashes are not cryptographically secure, so no matter how much crypto you add on top of them, they are one weak point of attack of the whole system.

To create a collision you search for an input image which minimize the distance between the hash and the target hash.
Because neural network are continuous you can use a gradient method.

I don't have the architecture nor the weights of the actual neural hash they use so this is only a POC in the general case.

What does this mean : An attacker can easily produce natural images that have a specified perceptual Hash.
An attacker can generate a meme image which looks normal but has a hash which is inside the CSAM database.
(he can easily get one of these bad hash values by computing the neural hash of a known offensive image)
Then he send you a mail, then you save the image to your cloud because you find it funny (or because your phone automatically back-up your mail to your cloud)
, and a collision is registered and you get arrested (when the manual review fails, for example if the attacker has steganographically hidden offensive content in those images).
Have you looked into any processing steps between harvest and serving? I am curious if they are soaking/fermenting/acidifying it in some way which would account for the differences described from straight agave.
Making the PCB Motor v4
AWS multi-account data platform monitoring
> What are the downsides of of using a real API (e.g. dev
> environment) for automated testing?

It can be difficult to recreate the situations required to produce particular responses, and if you are using this development environment to deploy backend fixes, downtimes or bugs will sometimes block the engineering work of your UI team.
Sprint Missile [video]
Izakayas?
Ender's Game has a war with Formics/Buggers, who are a hive mind "society". The war starts due to a misunderstanding because of fundamental biological differences. Formics don't perceive individual humans as significant, but as mere drones. The only kind of society they can imagine is one with a queen and myriads of workers.
Who says it is operating in Europe? Just because you can reach it with a browser from Europe does not mean it has a business nexus in the EU.

Yes I know the EU claims that GDPR covers the entire world, but the practical reality is that they do not have overseas strike forces going after small web publishers for cookie banners.
At 27 seconds into that video you already know it won't end well.
You are correct, my thread neighbours and the article are not. The definitions (compatible with Unicode §2.2) are:

1. Plain text: text without mark-up

2. Code and formatted/rich text (e.g. LaTeX, CSV, Markdown, HN comment): text with mark-up or conforming to a grammar with attached semantics.

3. binary (e.g. an ELF executable)
Yes, other fathers did

https://youtu.be/FSdjvEnyRzk
A direct link to the announcement post and the survey / announcement signup: https://1password.community/discussion/comment/604038/#Comme...

After hiding the standalone license this would put a lot of trust back into 1Password.
That's an oft-misunderstood quote.

The Penn family was trying to buy their way out of having their American land-holdings taxed by offering to pay mercenaries to protect the Colony (in a single lump sum). Franklin was arguing the Colony should assert its sovereign right to tax the family.

The "essential liberty" in question was the liberty of a government to levy tax as it saw fit to provide for a common defence.
I have this silly recurring feeling that the extiction of dinosaurs and climate change of today are somehow linked. As if there is an unsolved puzzle which also provides a solution. The gigantic sizes of prehistoric living creatures is the most puzzeling.
How could this be built before 1975 (> 46 years ago) but we "still haven't been back" to Luna and are only now creating reusable chemical fuel rockets...?
Just as no one carries a winch to counter their vehicle sudden backward acceleration. We just have turning wheels for normal day to day control.

It’s much more efficient just having a sane procedure to check which gear you are engaging.
Types of Inventory Management
> Some days I can get a dozen robo calls, each with a different spoofed number.

I live in the EU and have literally never gotten a robo call in my life. It's a political problem, not a technical one.
The CCP only has this power because citizenry world wide keeps electing governments who's stance is "business relations with China at any cost!"

And this is the entirely predictable result.
But with murders they have an objective statistics that murder rate fell to zero, which is pretty cool by itself.
Most of murders are not premeditated. I guess stopping people who in head of the moment would kill would be enough but they weirdly went further than that.
In the beginning of the movie guy was going to kill his wife, if you believe technology of predicting future they have.
Well said. I knew it wouldn’t take long for discourse to switch to the morality, technical implementation etc. That is of course no accident.
Putting it like that makes it easy to distance oneself from responsibility.

Government is just a function of agreed upon values, rules and principles.

It's really a failure of our society. We're all failing.
> Syncs with 1Password and stuffs the passwords in standard Kubernetes Secrets, meaning anyone can understand what's going on versus something like say Vault.

Vault is much more ( and better ) than just password storage, but isn't that hard to use either.

Kubernetes Secrets aren't great or very secret, so just dumping stuff there from 1Password seems like... Of very limited utility. Having static secrets across multiple clusters and visible from a web UI, that's it?
Murder and theft are treated very differently (but yes, theft is under-prosecuted... The police are under-incentivized to pursue it because insurance usually makes the victim financially whole).
It's usually pretty warm, 20-ish celcius. It got cold when I was there when a storm was passing through, dropping to about 12 celcius. It can get stormy but for the month I was there it was mostly sunshine with short showers. I'm not sure how different the rest of the year is though - I was there for April/May.