skysight-inc/HackerNews huggingface dataset:
This utility can only perform MitMs if the client doesn't correctly verify the server's identity - e.g. if the user doesn't verify the fingerprint during the first connection, or they override the scary MitM warning. If the client correctly verifies the server's identity, then MitM is not possible.

exabrial is referring to a mitigation that works even if the client doesn't correctly verify the server's identity. SSH actually does have this mitigation, but it doesn't fully prevent nastiness, as I explain here: https://news.ycombinator.com/item?id=29259981
Github has been improving on this. I felt like they were rolling out the features I wanted right as I was enumerating them!

They have

- Auto-assign reviewers

- Pings for people (unsure how sophisticated)

- Auto-merge

The review conversation itself is the big issue.
Perfect analogy.

Interesting to me because Parker’s style is so distinct from Baker.
I've been thinking about this a bit lately. In a discussion about the precept on buddhists not to be intoxicated I wrote this:

Hmm, my take on this is maybe a little different -- I don't really think alcohol (or other intoxicants) are really 'THE' problem, when we consider them in the context of a problem. These kinds of things are (at least as far as I see it) a kind of self medication; some people drink a lot as their form of escapism, others read 200 books a year or watch endless mindless TV shows, it's all kind of the same thing in different clothes, it's a retreat from having to deal with something. Years of 'AA' and the American 'War on Drugs' seem to have got into our collective mindset that these symptoms are actually the cause, which I disagree with.

So anyway; I always took this precept as guidance against doing any of those kinds of things which only serve to distract you from whatever it is that's making you unhappy, or to numb yourself to avoid having to think about things. Such evasive behaviour is the truly harmful part and should be avoided.

I think if you do any of those things just for pure recreation, then it is ok.

I mean, I don't think having a small glass of Whisky while reading a good book in-front of the fire with the rain battering on the windows could be too much of a problem, and if it is then I guess it's a problem I'll choose to keep :}

Of course, we are all different.

Gassho. Night night :)
Unfortunately since nothing appears in the ride history without the plate number or the person's name or anything there is nothing to have the police report about. That's the real problem there is this big circle between Uber saying law enforcement needs to make a request and law enforcement saying I need to know what to make the request about.

Having an actual human on the other side of uber that understands the seriousness of this driver exploit would be the easiest way to get it corrected.

Or Uber needs to publish complete ride history including driver cancellations.
centrepoint [jvs] /home/jvs > ls binscripts | wc
500 500 6555

Wow! A nice round 500. I couldn't have foreseen that. I knew I had a lot, I would have guessed somewhere about 200.

Definitely time I went through them all and started to discard the obsolete ones.
> Ruby and Perl have awk modes

Yes, but not Python. azalemeth was wondering if Python could be more terse than sed for this type of work. I think Python tends to be the most verbose among all languages discussed for text handling.

> There's basically no advantage that awk has over Ruby

There are a few. The main advantage of awk over ruby for me is that it's more terse for some simple jobs. That's because of features like

- how unused variables can be used as numbers, strings, or associative arrays without previous declaration. For example, in the common snippet `awk '!a[$0]++'`, `a` is referenced as an array without having to declare it as such first, and the returned value is used as a number (i.e. by `++`) without having to declare that as such.

- how number strings can be implicitly used as numbers

- how records are split by default in a very useful way, with each field made available in a very terse manner with the `$` unary operator.

- how plain regexes can be used as booleans that match over the line.

- how simply passing a boolean expression means to print records that match. It also helps that records can be multi-line or be defined by regexes.

- how ranges can be specified with a couple of boolean expressions

- how files and co-processes can be implicitly opened on first use

It also has advantage in that

- It launches much quicker in comparison to most languages. I recently did a small shell DSL using many piped calls to awk to write some extensions for i3, and performance was decent, surprisingly. jq calls were a far bigger bottleneck.

- It's available on even really old systems. It can be refreshing at times when your only other options are sh, C, or 4GL.

There are many cases where awk is more convenient than ruby.
It still doesn't follow. It's wrong to kill because of the harm killing causes. Whether the killing is done my an immoral or amoral agent doesn't change the effect. If you really believe dead rabbits is a bad result, you ought be spending your time preventing the amoral agents from causing that bad result.

Consider an infant - an infant is basically an amoral agent - it doesn't understand killing. If a infant kills somebody with a gun, we don't say "oh well, he doesn't understand killing" - we say "why the heck did that baby have a gun? Where are his parents?" We expect moral agents to prevent amoral agents from causing harm. So why aren't you trying to prevent the foxes from killing the rabbits?
It's not that complicated though.

There's nothing stopping the builders to get the bad column out and try it again. And again. Yes it's expensive as fuck, but this is still the foundation we're talking about. This (and the load bearing core) is where cost must come after safety.

Yes, naturally safety needs to be quantified and that just gets us back to cost again in a sense, but that's why there's a minimal safety codified (in the building code).

It's all about cost. There are many ways to get those nice columns in the ground, it's possible to drill them and put annular rings on top of each other (just like with regular wells) then fill it with concrete. More expensive than the bentonite slurry method? Sure, but it's still simple.
It's usually easier to get promoted to manager internally, then move to a new org. You can do it, but you may have to justify some form of management experience (tech lead duties, etc.). Alternatively some companies are fine with hiring a temporary senior that states that they want to grow into a management role. This gives a sort of trial period to the new company, and you can set expectations (give it 6mos, one year and then you'd like a management role).

Switching to a smaller company, or a company with smaller teams can help. When I started as an EM I didn't want to have more than 4 engineers on my team because I had a lot of things to figure out and processes to hash out. Now I'd be more comfortable managing a mid size team, although I'd miss being less hands-on.
It might actually be beneficial: https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3270338/
He was, as famous people often are, falsely accused of a range of misdeeds and crimes. Including a sexual assault allegation by a man. For some reason, the internet immediately recognized that allegation to be a fantasy, but gave credence to the equally fantastic allegations by women.
I'm trying to support your comment, and my comment was meant to describe GP not you. I can see how its a bit misleading.
The specific issue with reading Forth is that unlike other languages, you, the reader, need to be intimately familiar with the call semantics of every word that you're trying to read. In most other languages, this is not a problem as (most) are explicit in what's being passed and returned. And Forth is unlike BASIC where most most everything is implicitly global.

This issue with Forth is because you have the "invisible" stack as a first class parameter passing system. So, given a string of Forth words, while the stack may be apparent at the start (perhaps as a comment at the entry of a high level word), what happens to that stack during processing is opaque to the reader. Then you have have issue within individual words of stack gymnastics to get everything lined up for the interior processing, or readying to call something else. Now, if the reader knows each word and its behavior, then they can follow along but under the cognitive load of effectively "executing" each word they see to visualize its stack impact. You can learn to skip a bunch of the gymnastics because, assuming it works, you "don't care", it's just the noise of processing "knowing" it's converting from X to Y, and just knowing the Word W needs Y, how it gets Y is, often, less important. But it can impact the logic standing out buried in the manipulations to invoke everything properly. In Lisp, for example, I do a lot of "converting" in the (let ...) section, then the code works on the results of that. If you "ignore" the (let ...) section, the code is usually reasonably clear. That tends to be difficult in classic Forth as that gets all intermixed.

It's one thing when you've built up your code base over time, and are familiar and intimate with it incrementally. But it's quite another approaching a foreign code base.

Over time, familiarity reigns and lowers the impact, but on an initial read it can be quite challenging.

It's also fair that at some point, at the higher levels of abstraction, all of that goes away, and the code just "reads", but, inevitably there's a bunch of sausage makings supporting it that you need to make sense of.
Ah, so people've been making this mistake for over two hundred years but thanks to people like you, this misuse of language has been all but eradicated?

Radicated?

;)
I feel the hard part is putting automation around this.

I loved it when I worked on a small, high trust team where we were comfortable with each person making the decision on whether it was safe to do a post-merge review or that it needed attention first with a pre-merge review.

EDIT: Something I have liked at a couple of my company's was a "cowboy commit audit" where we allowed people to directly push but doing so would ping the code owners and they would have to review to clear the state. People understood they shouldn't but also understood when it happened.
What are you talking about? It’s a cell phone. And besides the world does not need to hand hold every singe scenario in case someone not smart enough comes along. Ya working with electrical mains should put out a strong warning but this is nothing. If people can not evaluate the skill level required before they do something that is on them. If someone needs to tell you taking the exposed electronics of your phone and taking a several hundred degree hot soldering iron to those electronics and then also removing parts that there is a risk you could damage something then you have a lot more to worry about then ruining a phone.
Good thing I'm not American then eh. ;)

https://www.medsafe.govt.nz/profs/datasheet/s/Stromectoltab....
i've heard it said that pair-programming can alleviate the need for doing code review... or at least the typical in-depth reviews that usually become bottlenecks...

any experience with that?
Great write up. Took the words out of my mouth.
HTTP would be fine as well, you could GET an XML with the form to fill and POST the XML with form data.

But:
- HTTP forms might be less flexible when it is about structured data.
- HTML needs a complex renderer software

Remember that this stuff might need to work on low resource devices and over low bandwidth connections.
Could you elucidate on the "White Fragility"? I do think that's an issue but we may have differing interpretations of it.

And thank you for your thoughtful reply. I'm not here to argue or score points -- I genuinely want to understand the thinking that happens outside my box.
Teams, Slack and Discord don't want to talk to each other. They want their own silo with their own users. XMPP, Matrix, or anything, for that matter, can't fix that.
> This is how every single Apple charging cords with the green/amber light in them has behaved. There's a bit of communication between device and cable before juice flows.

Yes and no. MagSafe is safe because of the sense current and the handshake; but it's able to do that because it's just not driving very much wattage through the cable; it's low enough that it can direct the power with a simple transistor.

To make mains-voltage AC cords do that, you need a lot more than a transistor. A 1500W current (from e.g. a microwave, or a kettle) can arc a gap much wider than most transistors are printed at. Which is why, in even the most modern smart-home remote light-switch doodads, mains-voltage gets toggled using relays, rather than anything solid-state.

It's lovely to say "just do what MagSafe does", but with electricity, "quantity has a quality all its own" — i.e. very different engineering challenges to overcome.

> Did the end of the cable not have recessed "pins" specifically to avoid accidental shorting?

It has recessed pins (pads, actually), but only barely (by about 5mm); basically to the point that a round metal table leg could make contact with the live pad within the recess.

And, as far as I can tell, there's no sense logic in the cable, either. No click of a relay coming from the cable when it gets connected; and no place for a transformer to live (not that it needs one—it's a hotplate, i.e. a big thick piece of iron you run mains-voltage AC current through.)

There is a relay inside the hotplate itself, which roughly acts as a thermostat (rather than a rheostat) to toggle the coil on and off to keep the cheese at temperature. You can hear it ticking on and off, and an indicator light goes on and off along with it.

But for that logic to work, the cable has to be drawing power to power it. So, AFIACT, the cable itself is always live.
I was in jail for eight years. I would say a large majority of people are in jail due to various mental health issues.
> ad-hoc implementation of Matrix, which hardly even deserves to be called a protocol.

Please explain why you believe this.

This is the spec:
https://spec.matrix.org/latest/

These are the spec change proposals:
https://spec.matrix.org/unstable/proposals/
Terra Luna – The Blockchain Protocol trying to change the payments industry
It did not in my testing with a 22mb file, it directly showed up "processing" or "compressing".

The iOS mail app did the same for my test video 22mb > 458K, no questions asked. (unlike images where app lets you select resize options)
Fly.io has a decent chunk of documentation. The creator of the Phoenix framework also works there.
Neither of them seem to work for me - what am I missing? https://tio.run/##lcxBDoIwFIThvaeYNCYUI0VwydpTiJpKCzSB16bthq...
Ah okay, thank you. So this is a lot less scary than I initially thought.
Show HN: Is this the shortest possible version of Life?
Uber's new tactic now is that simply continually close my case with no response. Does anyone actually work at Uber and understand the seriousness of this exploit? Surely someone who watches hacker News also works at Uber
+1 to this. It makes a lot of sense with a component-based library or framework like React, Svelte, etc. I've never been more productive, and its a bit of a bummer to work on projects that aren't using this kind of thing. I enjoy this general approach whether powered by Tailwind or some style-props based ui library (chakra ui for instance).
Not at all. You can read it that way if you want.

Scientific American is a very expensive magazine. I'm not going to spend my money on a magazine that isn't 'fit for purpose'. I want articles on science, not on politics.
Publisher fraud is an ongoing problem in the cheap end of the market.
I use a Pocketbook InkPad Color for USGS topo maps. They look pretty nice. Zooming is slow, because they are extremely complex vector PDFs on a low power device. I should probably try converting them to images to work around that problem. The screen is actually surprisingly tolerable for photos, too.
This is precisely what they do. Fun fact: whilst Lifeline in Australia says that they will treat all calls as anonymous, they in fact do not. If you speak about killing yourself to a counsellor, then they will call the police and trace your number, despite whether or not you turned off caller ID.

Don't trust phone counselling services. Ever.
I'd really like a GOG for console games. Give me a website where I can buy ROMs DRM free for old consoles legitimately. Maybe bundle in an emulator and a scan of the manual but let me do what I want with the ROM, whether that's create my own repro, run it on a flashcart, play it on my phone etc.
Get a driver willing to help you simulate the situation. Record it, put it on YouTube/TikTok.
> but at that point you might almost as well be running a multihead messenger that speaks both Matrix & XMPP.

Yes please! There's sooo much work people put in the clients, and there are multitude of them for each network. I understand they are different and a specialized client may be better suited for unique protocol features, but I also think there should be more general clients with protocol plugins, as it was with Pidgin, Miranda and such.
I don't see how the USA's first amendment is at all applicable to the EU.
My primary experience with pairing was not ideal. It was being used in a mentoring capacity rather than when people are more equal. I also found that the person doing the mentoring usually drove which meant that the mentee just saw things whizzing by on the screen and had no idea what happened and when they did they didn't have the first hand experience to commit it to memory.

I do remember a situation of hot seat programming where we had a critical problem right before release that crossed domains and three of us worked at one desk consulting the others or swapping out as needed. Again, it was worth it because of the urgency and priority but not something worth doing generally.
I think there is a little more too it. This is more a technological detective story. Was it someone purpose? Was handbrake used? Why were the filenames different? Why wasn't dropbox used, etc, etc, etc.

Not saying there is any there there, but certainly HackerNews could illuminate what happened and if it's intentional or not a hell of a lot better than the news media.
> uniodised table salt

Well that ends the experiment for me before it even began. AFAIK by law, all salt sold in my country is iodised.
Well, if you want nesting on your map then you need something slightly more complicated than your second version, but I will grant that you could do something like:

A.B value
C value
D.E.F value
D.E.G value
Small rural communities and the upper echelons of society seem to be closely knit.

My guess is that the relative anonymity of the urban masses affords more opportunities to avoid social opprobrium.
This. In fact, even having a pet can provide the same incentives not to harm yourself. The sense of being responsible for another life.
There are many variations of what a Turing machine is. I agree the author is using some definitions that are quite out of the ordinary and in doing so it makes it hard to follow. At any rate what they describe is certainly equivalent in terms of computability to the other Turing machine variations.

What the author is taking liberty with is instead of considering Turing machines that halt, the Turing machine reaches a point where it will never transition to a given state, or set of states. Call this quasi-halting, the Turing machine will continue running, but it will never transition to one of a predetermined set of states. As soon as the Turing Machine reaches such a point, it is said to have quasihalted, even though it has not technically halted in the usual sense.

Then the author comes up with a variation of the busy beaver game where instead of a Turing machine halting, the Turing machine enters a quasihalting state. The author argues that reasoning in terms of a quasihalting state instead of a halting state is more expressive, gives insight into a problem known as the spaghetti code conjecture and furthermore that if BB(n) represents the busy beaver function, and QQ(n) represents the variation of busy beavers but for quasihalting, then BB(n) is an element of O(QQ(b)).

QQ(n) will contain all Turing machines that halt (since anything that halts also quasi-halts), but it will also contain some Turing machines that don't halt and instead strictly quasi-halt, so we should expect that there are more of them.

Perhaps an interesting open question is whether BB(n) is in little-oh(QQ(n)). Given that BB(n) is not even computable, and hence QQ(n) is not computable, I don't even know how one would begin to tackle such a problem.
Leveling the playing field a bit more between Google/FB and other companies one diff at a time (:
I agree.

> Years ago, unhappy but not suicidal, I decided to call a suicide hotline.

They tried to use a tool for a state of mind they were not in, then got surprised that it wasn't helpful.
Leveling the playing field one diff at a time (:
I think now that AC has had its final patch they will probably update the carts if they haven't already. They did something similar for New Leaf on the 3DS.
Something to consider is to support an s3 compatible target [1], so a user could target AWS, Backblaze, their own minio instance, etc.

Of course don’t spend the cycles building until demand presents itself.

[1] https://developers.cloudflare.com/logs/get-started/enable-de...
Using static file formats for configuration is wishful thinking for projects that are perfectly specified on day 1 and whose requirements never, ever change.

I'd rather choose a bad idea than having to reimplement a Turing-complete programming language in YAML a few years down the line.
For those who want to never learn sed addressing modes, here's a slight cheat using only simpler shell logic. The cheat is to realize you can concatenate multiple calls to `cal -1` instead of reshaping the 3x4 grid into 12x1, so just focus on the per-month splicing task...

#!/bin/sh

g() {
read m; read n
[ $1 -eq 1 ] \
&& printf '%20.20s %s\n' "$n" "$m" \
|| printf ' %s %s\n' "$n" "$m"
sed -e 's/ *$/ /'
}

f() {
cal -1 $@ | grep '[0-9]' | g $@ | head -c -1
}

y=${1:-`date +%Y`}

for m in {1..12}; do f $m $y; done
printf "\n"
This is complete speculation, but it could be like TLS.

That would make it much harder as you'd have to MITM the communication, not just sniff it. Maybe impossible to decrypt if both the TPM and the chip it's communicating with use keys signed by the manufacturer.
More or less, yes you can do that. Netlify works well with git-ops and will automatically build and publish to your prod domain or hidden staging domains based on easily configurable rules. Their docs explain it pretty well.
Credit "score" isn't exist here in Japan, but higher age and zero credit history is bad because they can't be distinguished to bankruptcy person.
Microsoft Xbox 20 years later: Looking back at the original 2001 review
Best mitigation against this isn't mentioned, which would be to use a built-in firmware TPM (fTPM). The fTPM may have other issues, but it would be a lot harder to probe the signals!
If you are suicidal, don't call a hotline. See a friend, talk to family, but don't consult a professional. Professionals, in many countries, are bound by law to refer you to a psych ward. Even if your state of mind is temporary, you'll be stuck there for days, weeks and sometimes even months. Often, staff are abusive.

If you are suicidal, do not call a hotline.
Sure you can. It's just a lot of work, which also makes sure nobody gets scammed.

> why haven’t we seen them used to achieve something comparable to this project yet? (or have we?)

This is a kickstarter (or scam) which will fail in one way or another. There is no achievement here.