skysight-inc/HackerNews huggingface dataset:
DEXs(uniswap), Auction Houses(zora), Community Voting Systems(snapshot), Reputation and trust networks(circles), public goods funding(clr.fund), self publishing and fundraising(mirror, and now kickstarter), e2ee messaging and chat rooms(status/whisper), ubi and sybil resistance(proofofhumanity). These are all things I and lots of others are interacting with pretty much daily, it doesnt get so much coverage because its not all speculation and imo what people are actually angry about with crypto is more exposure to abusive capitalism games, money is a painful trauma so more of it in new forms is hard to imagine as positive. But there is plenty of useful stuff being built and I think it is progressing pretty well. 5 years ago the ideas of rights management combined with open distribution (rather than DRM that locks down distribution) was a strange idea we didnt know how to make work, now NFTs are mainstream.

In 2004 i was downloading textures and skins for the sims and xplane, and joining forums to chat and share music. Then there was a while imo where the internet felt dominated by facebook/google/youtube, but the past couple of years ive sunk into smaller communities making things in crypto/web3 and its fun and exciting. I spend most of my online time in that space. It feels more like being in a WoW guild than using twitter. There is profit/loss and speculation that excites/angers the masses, but theres also the best online communities ive ever been a part of, doing things like making games and custom skins and sharing music. Some things change and some things stay the same. Im pretty positive on the idea that making new tools, providing permissionless access, and building it with free open source software, people can do neat and surprising things. Till then people will see what they want to see, because its all there. Sturgeons law etc
The comments on that 2 year old video seem to suggest it doesn't work properly when setting it up?
There definitely is feature parity though not everything is available yet through the new Cloudflare interface. Write us to zaraz@cloudflare.com if you need help with converting a large GTM container
Firefox has Resend and Edit and Resend in the network pane, Chromium can debug NodeJS, has a unified sources tab that let's you edit files and (if you set it up) save them, and becomes unresponsive when prettifying large js files faster than Firefox. Those are the only differences I know of.
> Priority strategy is prioritizing priority. (WTF!!!)

From the article:

"Parfit’s answer is that we might value priority, which is prioritising the well-being of the worst off."
I had the same & scrolled right passed the player.. Seems like a buggy js interaction or something too me.
Thanks. Should be fixed now... I think.
> Wikileaks has released a tonne of sensitive material which has often made the US look bad and revealed war crimes. The US wants to punish Assange as the leader of Wikileaks to deter others from doing the same

they are already making themselves look like fools when they are being so desperate in an attempt to punish a leaker

only makes me wonder more what other skeletons they hide in their closet?
Firefox recently revamped the performance tools, that was the only thing keeping me in Chrome's developer tools. The new tools in Firefox beat out Chrome imo.
The tech is pretty, not sure it works as a demonstration of gameplay though.

For some reason this strongly reminds me of The typing of the Dead. A "Typing of the Matrix" would fit the theme quite nicely!
That was decades ago. Since then Apple went their own way. Anything of significance has been rewritten or mothballed as legacy baggage. Their open-source efforts were left to wither and die. It's been 14 years since Apple got scared of GPL3 and abandoned everything GNU-related.
no, false, brave remains problematic, Firefox is the only one with more more privacy potential. With Firefox the user has much more freedom to modify important settings, while Brave remains spyware.

https://spyware.neocities.org/guides/firefox.html
This was not the judge who ruled on the appeal. I see no reason to put any weight on this point.
Running Linux desktop is slightly sadistic. I've wasted days trying out the hottest distros, the latest wm, configuring drivers, etc. It's just ... not worth it. All claims of increased productivity are noise. It's not the brush you choose - it's the art you make. Just use whatever you already have and get on with it.
This is surely a fairly highly rated idea. At least where I live now and where I come from (at the time I lived there) it was regarded as more important to raise the standard of the poorest students than to raise the standard of the top performers for instance. At least when I was in primary school my teachers spent more time with those who found studying difficult than those of us for whom it came easy. It was made clear to me as a high achiever that help was always available but, as it was clear that I could work on my own, that I was expected to do so.

It also surely accords with the Marx's slogan:

"From each according to his ability, to each according to his needs[1]"

Perhaps this idea isn't so popular as it used to be.

[1] https://en.wikipedia.org/wiki/From_each_according_to_his_abi...
...doing to him he is still alive.
But, a phone is portable, already?
Everything else aside, you’re claiming you know what you talk about when you make a post about midtown and send a link to UES? I don’t think you know the city at all
BTW I find it telling, that the entire thread has been flagged and killed. If you tell someone in Germany unfamiliar with the NoSQL space that you plan on using "MongoDB" they'll look at you like you said you plan to use "R*tardDB".

It's a genuine real-life problem and the general category of problems is especially well-known in the marketing space. It's probably more widely known in Europe than the US (where English-only is historically the norm) but there are a few examples that occasionally get brought up on HN (e.g. the island "Laputa" being named differently in Spanish editions of works featuring it, although the unfortunate implication possibly being intentional in that case).

Outside the database space there's also Wix, who after problems getting traction in Germany tried to "own" the implication of their name by using "Ich wixe" ("I jerk off" but misspelled) or "Ich bin ein Wixer" ("I'm a wanker" but misspelled) in their German ads. I don't see any company being able to pull this off with a name that sounds like an ableist slur though.

I'm not saying Americans are (intentionally) ableist when they say "spaz" but it's definitely a word that can provoke very different reactions when used in an international context. I don't know enough about the etymology to say whether it's like "fanny" (which refers to two very different body parts depending on which country you're from) or "c*nt" (which pretty much means the same thing regardless of where you're from but can either be a friendly taunt or extreme insult because of cultural differences) but it's certainly something to be aware of.

This isn't the kind of problem you'd want to have with the name of your product is all I'm saying. I guess I'm just happy FerretDB didn't go with SpazDB.
Efficiency of gas-fired combined cycle plants has reached 63% (I believe LHV).

https://www.powermag.com/another-world-record-for-combined-c...
Python Remove Newline from String
> include an upstream jar directly in the project, as opposed to the Linux distro model where you use your distributor packages so you have security and bug fixes

good luck getting all your versions to be compatible if you do that. Oh, now your java app can only run on Ubuntu 16.04? But our customers use CentOS 7? Guess they're out of luck.

> EDIT: this may help answering the question "do I use log4j?", because transitive dependencies can be complicated!

Just run `mvn dependency:tree` or the gradle equivalent.
This seems an irresponsible decision.
That example is good to clarify but really all it does is show that the vulnerability is indeed in the library, not user error on the part of the application developer. At the end of the day, format-string bugs are essentially unexpected interpolation of user-supplied input, which is what we have here.

The fact that the specific interpolation causes a server-side request is what makes it a server-side request forgery. This isn’ta url input that’s getting an unexpected scheme, the interpolation is required.

Lastly the fact that the server-side request forgery causes unexpected code to be downloaded and executed creates the RCE.

This may seem like needless pedantry, but the reason it’s important is that there are likely other bugs hidden in here, and the RCE is just getting all the attention. For example, our network diallows egress except through a proxy. The initial JNDI request over LDAP isn’t getting anywhere. So we aren’t exposed per the POCs I’ve seen. BUT if JNDI supported HTTPS or data url schemes we would. Also if the interpolation allows any other deserialization attacks through inline payloads we would.
yeah the world is already looking at it unfavorably as corrupt and unjust, generally when the view starts out like that history doesn't do anything but double down.

But probably the judge doesn't care about the view of history.
If he does end up getting extradited to the US, he should hope he ends up in Kalifornia or NuYork and gets released with no bail like all the thieves and lunatics.
This is an excellent comment. Can you link to the Geronimo biography?
>From my vague point of view, I get that he is sort of a journalist (so should be protected), but also the stuff he leaked did go quite far, like borderline-espionage scale

So? When did exposing espionage become a bad thing?

>States have a reasonable need to keep things secret, even against the immediate best interest of the citizens

Says who? The states themselves?
Slightly OT: I get it on a Surface Pro/Go, but just not on a laptop. I even disabled the touchscreen of both my Dell XPS 15 as I never used it in over 6 years and with the recently reduced bezel even touch it by error when reaching for function keys.

Honest question: What do you use a touchscreen on a classic laptop (like MBP, XPS, Surface Laptop) for?
> Pip is not entirely reliable in resolving versions properly

It must be true because people say something like this any time a "python packaging sucks" thread comes along ... but I can't recall ever experiencing that in 10 years of Python-ing

The people having problems always seem to mention Conda though

I guess the parts that have problems are primarily where FFI and compilation or linking of non-Python code is happening?
This seems a really great idea!

How hard would be to make this into a browser extension?
Daily mail has a headline that it's based on the promise that he won't be held at one of the supermax prisons. Does not sound very convincing.

The us still has Guantanamo and black sites around the world.
"Simply shouldn't exist"

Pyramids were wonders of the ancient world long before the Python web framework.

The condescencion of the modern age toward those who came before use never ceases to amuse.
This: https://youtu.be/oG6XPy1t1KA

And/or this: https://youtu.be/cZc4Jn5nK3k
Young people IMHO have no idea what's going on. In one line:

Assange in 2010 revealed and gave clear proof of American war crimes in Iraq https://wikileaks.org/wiki/Collateral_Murder,_5_Apr_2010 -
now the US wants him dead.

That's how imperialism works. Today is a sad day for all freedom and peace lovers.
Wow, I never knew this existed. It's not even listed on the download page as "FireFox Developer", you need to click "Learn more about dev tools". From what I can tell, it's normal Firefox, but with added experimental features turned on.

Is this just a tweaked and tuned Firefox release aimed at developers? I like how they also go out of the way to enable dark theming :-)
jesus christ, this is horrible. the US is going to kill him.
Do you think gambling is fun?
Do you think gambling is fun? Or is it a bad habit?
Human error bugs increasingly making a splash in hacker-powered pen tests
Thank you!!! I have absolutely no idea why i couldn’t find that reference. This is extremely helpful.

DNS could be gnarly if serialized objects can be stored in txt records.
Interesting! I agree with "Kubernetes is the new de-facto infrastructure API."
Yep. Iirc it's based on nightly.
Not being happy with the status quo and not liking cryptocurrencies are not mutually exclusive. You can "hate" both.

My problem with "crypto" is that the industry is so focused on getting rich, is all about money. That's not changing the status quo, that's wanting to be a part of it.

If you TRULY want to change the status quo your focus can't be on how you can get rich quicker. There's been centuries of thought on self-sovereignty, of dictating your own terms, anarchism, freedom, etc. There's been literal wars about this all over the world and I just don't see how some dudes with bitcoins are really adding anything new to the table.
It's always better if they speak a bit too fast, since you can pause at any time to digest what was said.
We had an optics lab at the Faculty of Engineering, Lund University about the idea behind the FlatFrog display system back in 2014 (I think) and I remember thinking it was genius.
IIRC the seaborg reactor design uses a "traditional" flouride based salt for the fuel salt. The NaOH is a separate circuit used as the moderator, instead of a graphite block like other thermal spectrum molten salt reactors. Being a liquid, this sidesteps the problem of radiation damage to the graphite with associated swelling, cracking etc. etc.
>Then why are even small houses in walkable neighbourhoods so expensive

Location

Location

Location

These small houses are pretty much all necessarily in urban areas and the prices reflects what overpaid doctors lawyers and techies are willing to pay for convenience. The not un-walkable suburbs that are roughly the same distance from the city centers suffer pretty much the same price increase for the same reason.
Thanks, this is the first message where I see the full instruction on where and how to apply the workaround. I was not even sure if this is something I should change in the third-party code that I run in a Docker container, and now I know it is just a change of the ENTRYPOINT or CMD line.
A web framework developed in Golang
> But if you can, [...] Scala can be hugely productive and result in very reliable software.

Yes, but, in my experience, the productivity gains are not that big. Strong developpers can and _will_ fare well in any technical environments, therefore choosing Scala over anything else won't give your team any advantage over a "simpler" technology. It's actually riskier to pick Scala, because you will increase your recruitment difficulty by a factor of 100-1000 (less developers available in the pool, even less when you only consider skilled developers, and huge barriers to teach and bring up to speed anyone that haven't worked in Scala before). What do you think will happen when the "good" developers are gone ? A rewrite in Python.

Save yourself, don't use Scala, pick Rust.
> I get why

Apart from purely political/commercial reasons, I don't see why.

Sandbox and App Store are mutually exclusive reasons for this situation.

Option A: you have good security architecture, so running arbitrary code is safe because all the data is well-isolated and programs cannot mess with each other's data. There is no need to have humans reviewing apps, apart from optional parental controls that people may opt into.

Option B: you don't have good security, so you need to micro-manage app publication and have ability to revoke them, in case an exploit is discovered.

Also, for a development machine, when you run arbitrary 3rd party open source dependencies, build scripts etc, you really want iPad-like security model where each project lives in its own sandbox. But the Unix permission system is an unusable mess, so even if you put your project in a container, your build script can still push to git repo and do other fun stuff outside build folder.
All they're saying is that the technology represented in this device has no equivalent in the historical record anywhere near that time and that place. It's not to say that it literally cannot exist, rather, our historical understanding of these peoples is clearly incomplete. These are the sorts of findings that change our understanding of history which makes it pretty exciting to me.

The Clickspring series on this mechanism was mentioned elsewhere and is some of the finest content on YouTube, I'd strongly recommend checking it out.
It's not about him, it's what this case tells us about us.

It's just not possible to believe the story western society tells to itself about itself, and it's a harsh realization. Also, that was a persons life and mostly we can just watch as selected the enemy of the empire gets destroyed.
It is; the reason the original decision was overturned is that specific formal 'assurances' have been received from the US government which mitigate the suicide risk which was the only reason the first instance judge refused admission.

The reason the assurances are trusted is that the US has never been found to break the letter of these assurances in the past. (The appeal judgement does note that where the assurances are loosely worded, the assumed spirit of them have not always been followed).

Bizarrely, these kind of inter-state promises of special treatment are a common part of global extradition practice.
Ok, but this isn’t purely a smart contract anymore. You’re describing a typical escrow (running on a blockchain, because ______) with human judges, conceptually identical to what goes on behind the scenes at EBay. What necessitates a blockchain here?
Ever Heard of the Term – Hyperverse?
German doesn't have a "th" sound (okay, technically it's more correct to say German has neither of the two "th" sounds as this is an important difference when pointing out that English only has one of the two German "ch" sounds and only in some variants of English and almost exclusively in Scottish words but I digress).

But based on my experience it's a coin toss whether German speakers who don't know enough English to be able to make an attempt at pronouncing it will go for "trottel" or "srottel" in that case, with the latter being even more likely if they go by ear rather than reading the word spelled out.
Investing in Lego more lucrative than gold, study suggests
what's the advantage for Bob here?
Yep, in the pipeline view at the top right.

https://docs.gitlab.com/ee/ci/caching/#clearing-the-cache
https://www.cardstacker.com/videos
Yes, and this will stop people from harming each other. Something something private keys.

Bring on the century of techno utopianism.
EDIT: was not clear to me that Lumio has done only the writeup and not the original researchers finding the vulneraility
mea culpa Lunasec, you're doing god's work!

Probably there isn't a broad agreement on ethical standards related to vulnerability disclosure but is it really still a net benefit when people disclose vulnerabilities without even them knowing the implications, that are clearly not patched, let alone giving users of the software time to do anything about it.

I feel we have gotten pretty far away from Tavis Ormandy working with Cloudflare to clean up the issue before anything is published.

Do I misunderstand something or this is clearly the type of issue that will be misused widely?
I believe it might have been “Desktop Toys”
Young people IMHO have no idea what's going on. In one line:

Assange in 2010 revealed and gave clear proof of American war crimes in Iraq https://wikileaks.org/wiki/Collateral_Murder,_5_Apr_2010 - now the US wants him dead.

That's how imperialism works. Today is a sad day for all freedom and peace lovers.

Edit: just to be clear, the perpetrators of those barbarous war crimes, and their superiors, never had to face justice.
Lot's of fun! Thanks for sharing
The whole US population should be doing this in DC.
Thanks! I tried it – there is a lot of spam there, replied to a couple of requests, but no luck. Will keep monitoring then.
>It's largely a waste of time due to the extreme anti corp bias on HN

I like this. Sums up a lot of things about HN.
> the person had to put up collateral until the work was done

So only the people with money can participate?
Sandboxing libraries with webasm is an interesting step forward, but on the whole, Firefox is still way behind chromium in security. There's still a massive amount of memory-unsafe code in Firefox, and the granularity and quality of the sandboxing ranges from significantly worse to comically worthless relative to chrome, depending on platform (e.g. audio, GPU, and network all live in the same process on linux, and escaping from that process is essentially trivial, because it has an X11 socket).
Barnacles for marketing stuff:

https://barnacl.es/
Lots of people in here who don't understand neither Tether nor Bitcoin. The quickest way to get rid of Tether for most people, is to buy Bitcoin. The alternative would be to try to withdraw your Tether. Good luck with that during a crisis situation! Your best bet is thus still to buy Bitcoin, which would necessarily lead to a spike in its price. Then Bitcoin can be transferred to any exchange that deals in actual fiat currency, and sold from there, most likely with a nice profit to boot. Or do like the pros and just don't sell it ever, because that's actually safer than keeping your fiat these days, and especially if you're keeping it in mumbo-jumbo like Tether.
Mercedes-Benz gets world’s first approval for conditionally automated driving
Guaranteed he's dead within a year.
And this is why I find all the posts around China and why people/company should be ostracised for dealing with them hypocritical.
British citizenship of 6M people could be jeopardised by Home Office plans
It'd be a bit hard to keep this exploit a secret once the patch was on Github.
I guess it depends on what you're building.

You can also leverage your Dockerfile to reuse the layers that haven't changed, for example see the order of commands i offered here: https://news.ycombinator.com/item?id=29393532

In some projects, you can just do something like the following (Java centric example, but applies to other stacks as well):

- have Nexus (or another solution) running with a Docker registry next to your GitLab Runner nodes, internal network
- setup Nexus to proxy all of the Maven/NuGet/whatever packages as well, in addition to Docker images in the registry
- setup GitLab CI to build the base container images that you need weekly (e.g. Maven with whatever you need on top of it for builds, another base JDK image as a runner etc.), this includes not just stuff in your Dockerfile, but also those that you'll use for Runners (assuming Docker executor)
- setup GitLab CI to build an intermediate base image for your project with all of the dependencies every morning (assuming that your project has lots of dependencies that don't change often though)
- base your actual builds on that image, which is based on the Maven image, which will essentially cut out the need to pull everything from the Nexus Maven repo
- it will still allow you to add new dependencies during the day (e.g. new library), which will be pulled from the Internet and then cached both in Docker layer cache for your current pom.xml file, as well as your Nexus intermediate repo

You don't even need the intermediate dependency images, as long as you have control over which Runners your project has, with dedicated ones the Docker cache should be sufficient on its own. Right now i no longer have to fear Docker rate limits anymore and most of my builds don't even hit the Internet either at all.

I applied some of those principles at a large enterprise project and the builds went from about 7 minutes to 3, with no drawbacks to speak of. Of course, the next step would be incremental code compilation and not wasting time there, however seeing as even some of the above is overkill for many scenarios, that's probably situational.