skysight-inc/HackerNews huggingface dataset:
Random examples of attacks through a non-https site with kitten articles (assuming an attacker on a shared wifi doing MITM).

1. inject javascript on the kitten site that, in case if you move on to a different tab for five minutes, redirect the page to a spoofed version of the login page of your payment provider or email account usable to recover other credentials, so that if you go back to that tab you might think that your session there just expired and "re-login".

2. inject javascript on the kitten site that replaces any legitimate links to social media platforms with links to spoofed login pages for these platforms.

3. inject javascript on the kitten site that adds an overlay over the kitten videos where clicking on it prompts you to download video_player_plugin_totally_legit.exe in order to watch the kitten videos.

4. inject javascript that replaces any ads (or just adds them) with attacker-controlled ones; possibly for some targeted scams.

5. inject javascript that runs cryptomining in the background. The attacker earns some pennies, but your computer temperature and battery life starts to suck.

6. perhaps they get to inject a javascript sandbox escape - those are rare and not actively exploited at the moment but if your browser isn't up to date for some reason, then sooner or later another exploitable vulnerability will appear again in the wild.

In short, any http-only site is effectively potentially fully attacker-controlled for malware delivery, as much as websites can be used for malware delivery.
iOS 15 is now live
Yes the apis eg cocoa are the openstep apis and the terminal tools under openstep were BSD
> proof must be made for every cent seized having been made through illicit means.

The counter-argument is that if that money was used to generate more funds legally, is that other money not tainted?

Say you make $10 million selling drugs, and use that to invest in housing in an area, and the money doubled over a few years. If you sell all those houses and now have $20 million in the bank, how much of that is funds available because of illicit behavior? $0, $10 million, or $20 million?

I agree the current system is stupid, and often abusive, but I don't think it's necessarily a simple problem.
Let's Encrypt's old root certificate is expiring
Because I'm not exporting but saving, and it doesn't work the same way as Ctrl+S should. If I have opened a file and changed it, I expect Ctrl+S(/E) to override it. What I do not want it to select a file or answer dialogs, asking me if I really want that. And when I close the app I don't want to confirm that I really don't care about xcf and yes, I want my changes "lost". And I especially don't want to lose my changes because I thought that I have pressed (Shift?)+Ctrl+E and that this warning can be disregarded.

I might be wrong in some details because it's been a long time since I last used Gimp without this plugin, but the whole process is so brain-dead that it is incomprehensible how anyone could defend it. I am guessing that if one of the core developers had to manually edit 100 PNGs they would revert their position in a blink of an eye. /rant
That's pretty good considering Koka is a high-level language like Python and JavaScript.
While yes there are a lot of videos that are taken down, you can still find tons of videos from like 8-10 years ago easily. I noticed though that a lot of the older videos usually get taken down for copyright music, like old amvs, song re-uploads, etc. Don't get me wrong I'm not trying to say, "Oh Google and YouTube are so great". I am only pointing out why many people including me will not fully switch over to other video platforms. Most other video platforms lack any content, and finding what you want is incredibly difficult. Where as YouTube you can find a plethora of things. Do I trust YouTube with my content? Yes, I don't really watch too many things which YouTube would want to censor like news or anything like that, and I usually watch stuff from certain channels (not recommended videos). Seriously, I dislike YouTube as much as the next person, but I am not going to switch over to an inferior platform (inferior in terms of content). Those people that are focused on open source, nonprofit, and privacy when it comes to platforms should continue to support and use this stuff, but understand most regular people don't care. Not saying it is not a problem, I just simply don't feel the need to fight YouTube that much and try to be a digital warrior about it.
Enough vaccinated individuals are being infected for the CDC to conclude in the Provincetown study that "the vaccinated may spread the Delta variant as easily as the unvaccinated." Any time a breakthrough case is reported now you can consistently find statements from public health officials saying "the vaccines don't necessarily keep you from getting sick but they are still effective against hospitalization and death." Given that they don't do routine testing of trial subjects, we can't really even conclude anything from "18 cases in the control group and none in the experimental" except that the vaccines are suppressing symptoms of illness.

Second the other child comment's request for a source on "18 cases," the only thing I can find in the Pfizer press release and major media sources on this is statements about antibody levels.
The trick was to make sure to only rob poor people with asset forfeiture so nobody could be bothered to care.
Have you tried AirTable & their API?
As a datapoint, I don't know javascript but I do know clojurescript.
The city of Tall el-Hammam was destroyed by an airburst 3600 years ago
OPML could be part of a solution for authoring blogs that then can publish using RSS. It is an interchange format for outline with attributed text.
The Dangers of Half-Remote
https://archive.vn/pPk6l
apologies for the poor formulation. Another login system you are required to support. People can create personas and if you try to de-anonymize them across service you're in gross violation of EU law. So more like privacy friendly must-have, right?
Thanks for the context

Doubling down on my point, its not like Dogecoin was traded on Robinhood way back then. The self-reporting wouldn't necessarily say which specific asset. Are you suggesting if the Feds looked at their tax returns and saw a gain at some point in this person's history they would have left them alone and not said "their income is too low and therefore probable cause."

Also, I factored in the tax reporting aspect when I was deciding whether to write $30 or $50 as the initial capital, if there was a sale for cash it would be reportable when they file taxes in 2022.
> I will never say it's right to simply murder your opponents. But..

Nice turn of phrase!
What percentage of living costs is gas normally during winter there? A 40% increase in 3% of your expenses isn't a big deal, but if it's 30% that would really hurt...
Because, as difficult to believe as it may be to some people, some people are not all about money since the beginning. Some remain idealistic well into their thirties and earn a medical degree.

Once you've got it though... that's when it starts to be difficult to stay idealistic and optimistic.
Isn’t it? Vaguely I hear of Vimeo being used for art videos but I kind of got the sense that the network effect and technology at Youtube was very strong. Where else do people go to watch videos? Where else can you host a live stream?
Do I Need University?
Fair point! Makes absolute sense for me.
With a good IDE, the first one can be configured to look like the 2nd one.

But the 2nd one will always be more verbose, no matter if you need it or not.

So I'd choose the first one.
What ideas are listed as terrorist organizations in the US?
Great work but do note that the list basically looks slightly better than an amazon list (atlas shrugged lol). I think some effort into more useful ranking (looking for metrics of controversiality or maybe page rank) might make it more useful!
I just the other day started working on an idea for a ruby based shell: https://github.com/seiferteric/rbshell . The idea is to try to write a ruby DSL that looks as similar as possible to regular CLI commands, but return ruby objects so you can more easily process the results. I would be interested in some help if others are interested. I haven't yet decided on the exact syntax yet but it is already looking kind of interesting I think.
Ad blockers are already dead on Android Chrome. I wish more people would use ad-blocking browsers, perhaps Firefox, but Fenix is somewhat slower than Chrome, and is a software train wreck of bugs.
150ug/kg is the typical dose for deworming effect.

The antiviral effects were found in vitro at, if I remember correctly, around 8x the concentration that would be found in typical treatment.
The confusion is made worse by the fact that the bird supposedly called a raven (though whether it’s Corvus coronoides or Corvus mellori or something else I can’t certainly say right now) is, at least in Melbourne and the part of western Victoria where I now live, exclusively called a crow. If you called it a raven, many, perhaps most, people wouldn’t know what you were talking about, because we simply don’t have any bird called a raven, though we might have some vague sneaking notion that they’re a northern hemisphere version of our crows or something like that.

I can’t confidently speak further than that, but I’m under the impression the same is true in Sydney.

If taxonomists call them ravens but everyone else calls them crows, I wish the taxonomists would accept the reality that usage defines language, not encyclopædia, and give up on trying to pretend they’re ravens and not crows.
In the US cash transactions over 10k are highly regulated. And interestingly even making a series of withdrawals for say $9,500 is also illegal, even though it’s under the limit. They call it “structuring” and even politicians in the US Congress have been charged with this.
I mean it’s a bit murkier than that:

1. GPUs used to be much less programmable and had fixed-function graphics pipelines.

2. General purpose GPU computing was demonstrated a decade before the 2012 deep learning craze. OpenCL/CUDA was quite mature in 2012 and used by high performance computing.

3. Transistor scaling (Moore’s law) has been speeding everything up exponentially.

4. There are a lot of non-GPU solutions now.

If GPUs didn’t exist, someone still could have trained a deep model on a cluster of CPU, and then we’d end up with GPUs (or similar hardware) again. So it’s not necessarily true that gaming->GPU->deep learning implies that GPUs couldn’t be used for deep learning without gaming, because you could have had CPU->deep learning->GPU. I think this was much more of a case of the stars magically aligning than some preset goal by Nvidia/AMD.

In fact, there are plenty of cases where you had CPU->research->HW accelerator. One example (on top of gaming/rendering) is compression or parity coding, which was slow initially and then had add-on cards and/or CPU extensions.
Then apparently you need a code review tool which is as clever as the IDE.
Google to Auto-Reset Unused Android App Permissions for Billions of Devices
Convert Picture to Embroidery
Ask HN: Do you use an elevation API?
I've been working on building an alternative to the Google Maps Elevation API, making use of the high-quality open elevation data released over the last few years: the 30m Copernicus global dataset, improved 1m coverage of the US and England, EU countries releasing national datasets under open licenses.

I'd love to know more about how HN uses elevation data and APIs. I have a 9 question survey here: https://forms.gle/1EhX4c2mLHuRTR1C9 and will share the results with the community.

It would also be great for people to share their usecases in this thread!
And nobody cares. :)
It's not enough that the FBI return the money and assets they stole here. There need to be penalities, in the form of compensation to the people they inconvenienced or forced to pay for a lawyer, and in the sense of professional or criminal consequences for the people who decided to conduct this theft.

The article says that asset forfeiture requires only a "more likely than not" standard of evidence, which seems terrible, but there's no indication that standard has been met. Most money isn't the product of drug trafficking. Seeing rubber bands and having your dog bark in the presence of the money may be slight evidence of drug dealing, but not enough to overcome the low prior.
I often see anti-Christian rants here. I suggest you become more supportive of free speech.

By the way I’m just paraphrasing a problematic verse. Go and check yourself. Is it ok to link to hateful content?

Your rules though, noted.
I'm surprised and impressed that you would remember what's on the list.

Thank you for your hard work. Every day it makes my experience of the internet 100x better.
US policy change states healthcare apps must follow data breach notification
Hyperbolic geometry.
I’m wondering if bringing back an ancient technology, Web Rings, would solve this problem of blog discoverability a bit.
> Mao's China was more of a dictatorship that Stalin's USSR

Mao's China probably better described as a "cult of personality", perhaps closer to Lenin than Stalin as a starting place to draw distinctions.
I think Japan does well with schooling small children, they mostly focus on teaching manners, how to clean up after yourselves, how to play well with each other, that kind of thing. It may be worthy of emulation.
The RC had a lot of bugs and was unusable for some users on r/iOSBeta. The actual release is indeed two builds newer (19A346) so hopefully they've fixed these issues.

Edit: looks like it's only available for people seeking it out[0]. Maybe they won't auto-update till 15.0.1?

0: https://i.judge.sh/troubled/Flam/YOWIKKHUYu.png
Jesus, where did you grow up. Where I grew up we would make the first part of the joke but not the second. You are going to jail. Not "you are going to get shot in the head". Dogs biting dicks off?! America is too puritanical for that kind of imagery to fly.
The worst part of that argument is that it's completely irrelevant. Even if the police had video of George Floyd killing people, it would still be completely illegal for them to kill him during the arrest.
Isn't that the only reason access exists? Import from excel and build forms on top.
What's driving the price decrease in wind?
The Github page[0] has some more "why" info. I think this is the crux of it:

> There's a possibility for something with a much lower barrier to entry [...] than something like Z. Part of what makes this possible is that we can jettison a formal semantics entirely. It doesn't need to mean anything. At the end of the day the only semantics will be in the mind of the human reader.

So, it can't really be "machine-checkable" like TLA+ or Alloy are, because the symbols don't mean anything. I take it that's it's supposed to be more of an aid to thought, like diagramming on a whiteboard.

[0] https://github.com/subsetpark/pantagruel
Nt is not a evolution of dos.

A similar issue you need a new kernel for protected memory etc.

Apple did make attempts see Taligent
I think New Mexico was actually the state with the reputation. So much so that I think they recently passed a law to help fix it.
> That's actually not quite it.

That might not be the UNIX environment's true strength, but it's the only one that any of its advocates discuss. I've seen hundreds of people defend the paradigm, and you're the first one who's mentioned "packaging for both use and reuse" - everyone else talks about "text as the universal interface" and "simple, composable commands".

Moreover, I don't think that this feature is unique to UNIX. In particular, Emacs Lisp functions can both be called from other elisp code and directly (and ergonomically) executed by the user (with plenty of features to enrich interactive execution) - and these functions can actually pass typed data between them, unlike shell commands.

This appears to be the same "packaging for use and reuse" that you mention - unless I'm misunderstanding what you're saying, which is very possible because I'm reading through the (exceptionally interesting) PDF that you kindly linked, and I don't understand what it's getting at (although it seems profound).
The face that merely "thousands" of people are impacted by France's uranium mining isn't testament to a large ecological impact, but the opposite: Nuclear's ecological impact is far less than renewables. Hydroelectricity - by far the largest renewable energy source, more than wind and solar combined - has displaced hundreds of thousands of people. The Three Gorges Dam alone displaced 140,000 people [1]. Lithium and cobalt extraction will need to increase by orders of magnitude to provide the necessary storage for intermittent renewables.

The immense energy density of nuclear fuel means far less of it needs to be extracted to provide energy.

1. https://en.wikipedia.org/wiki/Three_Gorges_Dam#Environmental...
I've done that partitioning with virtual machines. I don't see how it's a "tradeoff". Yes, every additional service you expose can have its own security flaws, but you have to get data in/out of a VPN'd VM somehow. Even if I allocated more local storage to the VM and only ssh'd in to send/receive files, the ssh client could have a hole in it. nfsd, samba, sshd, and ssh are designed to do singular jobs. The issue in this case is the exposing of a consumer router that was never designed for security from the local network.
Some of the usecases for elevation data I've worked on or have seen

• Raster data for flood modelling

• Point queries comparing elevation to flood models

• Using elevation to improve accuracy of hyper-local weather modelling

• Elevation profiles of activities: like strava but for various different niches

• Flight planning for various aerial activities: drones, general aviation, hang gliding, paragliding, normal gliding

Compared to self hosting, APIs add latency and remove control. But people seem to use them to avoid dealing with multi-TB datasets, abstract away a lot of the geospatial complexity with projections and tiling and geoids, and to avoid dealing with lots of different datasets from different sources.

And with the Google Maps API in particular, people struggle with the high cost of course, but also the lack of providence about the data used, and the accuracy reduction of batch queries.
Then you'd have to learn to read Nix expressions. The original expression that builds all ruby versions is here: https://github.com/NixOS/nixpkgs/blob/6120ac5cd201f6cb593d1b... Here's an example that shows how to build a customized version for NodeJS https://www.breakds.org/post/nix-shell-for-nodejs
Wikipedia is a joke.
That's github based for collaboration I think. The one mentioned in the post VersionXL [1] is based on the cloud version of TerminusDB (co-founder here), which is an open source revision control database. It uses delta encoding for updates, but is a proper DB optimized for the task. You get transaction processing and updates to an immutable database with version control features: branch, merge, rollback, searchable diffs, and time-travel. It also ships with a mature python client to allow you to manipulate the Excel data.

[1] https://versionxl.com/
[2] https://github.com/terminusdb/terminusdb
Your democratic processes are already crippled. Trump and Bush both lost but were still elected president. Many of your states engage in voter suppression. Your corporations have captured legislative responsibilities like tax law. Your legislature is a rubber stamp or a roadblock. Your courts are full of political appointees, many without term limits or proper vetting.

Democracy, as a tool, has been made blunt by capitalist and military interests. This is precisely why it's so heavily promoted as part of the american national identity - so people can, in 2021, try to claim that /maybe next election/, if we ask nicely, the US government will stop yeeting Afghani children into 100 pieces.
The problem with direct specialty programs is the "you only have a hammer" problem. It moves the onus of diagnosis to the individual seeking care rather than the provider of care. This is likely somewhat the case already, but such approaches would start to formalize it.

There is a middle ground where we address the bottlenecks in the current medical professional pipeline by deregulating the number of licenses issued per year and sponsor the creation of new medical schools to educate more professionals at lower cost.
Some of these comments seem to support that LBRY thing that was on HN again recently if using it for blog docs instead of videos
Software development then and now: steep decline into mediocrity
NeXTSTEP/OpenSTEP were based on 4.3BSD/4.4BSD(not-lite) and required a license from AT&T to distribute. I assume that, to be legally safe, they would have scrapped that code entirely and replaced it with 4.4BSD lite, pulling in code from 4.4BSD lite forks like FreeBSD and NetBSD.
Based on current evidence we do seem to be soulless biological machines though. We don’t feel like it nor do most of us act like it is, most of the time, but that doesn’t mean it’s not true.

Also just because we cannot determine the objective truth due to limitations in our conditions doesn’t mean there isn’t one. It just means it’s pointless for us to try to determine what said truth is - although we can speculate for entertainment.
Thanks! I’m a hobbyist with limited time and I earn my salary without programming, so I don’t need to cater to any market demand, in case you were condescending on my employability prospects.
Determine programatically C from C++ as well as various versions
I agree, I wasn't disputing that there were real people who self-identified with the term, I was contesting your correction that "Aryan" solely refers to these people. You might counter that the overloaded meaning is invalid for whatever reason, but (1) meanings of the propriety of words are boring and subjective and (2) I'm only saying there exists an overloaded meaning, not that everyone will find it valid nor that it excludes the validity of other meanings.

As an aside, I recently discovered (from my new Iranian neighbors) that the term "Aryan" is cognate with "Iran" the country. "Iran" in Persian means something like "Land of the Aryans", and that in 1935 the government of Iran asked its diplomatic partners to refer to it as Iran instead of Persia because of the popularity of Aryan racial ideologies.
> Sorry internet hipster, this little side project requires JavaScript.

Touché.
> Putting all of this back together: Ebook devices are extremely compatible with an idea of bookiness that values holding and carrying a potentially large number of books at once; that prefers direct flow from start to finish over random access; that reads for the meaning and force of the words as text first, if not primarily; and that isn’t concerned with the use of books as stores of reader-added information or as memory palaces.

That's a fair assessment, although I don't really understand why "that reads for the meaning and force of the words as text first, if not primarily", isn't that the most important point of books?

> I guess I have my answer, then: I hate ebooks because I don’t read much genre fiction, but I read a lot of scholarly and trade nonfiction. I also buy a lot of books on art, architecture, and design, whose subjects work best—or feel most bookish—when they are large-format, open-spread, and richly illustrated. As a somewhat haughty book person, I also can’t quite wrap my spleen around every book looking and feeling the same, like they do on an ebook reader. For me, bookiness partly entails the uniqueness of each volume—its cover, shape, typography, and layout.

That's the part I don't understand. Do you really need to hate something because it doesn't fit with your usage/vision of something? Hate is a strong word. I can't imagine feeling hate because someone see and use books differently from me.