skysight-inc/HackerNews huggingface dataset:
I know strong opinions tend to be popular online, but I hope comments like this don't discourage people from learning and going out there. The books and internet are more than enough to stay safe.
What a garbage response. The author starts by discrediting both the authors. Next, the smoking gun which it cites repeatedly (The study on Laos bats) is not even peer-reviewed! This is from the articled linked from this article:

“The results, which are not peer reviewed, have been posted on the preprint server Research Square.”

Sounds like very lazy “journalism” to me.
If a full 1.0g is required, that also makes it a much more difficult challenge on the moon. Spinning a module of a space station in zero g is one thing... trying to get a portion of a moon lab at 0.16g to 1.0g is a different challenge.
It isn't designed around motorbikes either. They didn't really exist in numbers 30-40 years ago which is when much of the infrastructure was put in place. Go watch some videos of Saigon in the 1980s, it is mostly bicycles with a tiny smattering of motorcycles and cars.
Good thing there’s no Strontium-90 in this water. The only thing it contains is trace amounts of titrium. Which could be safely dumped in the ocean.
Stop eating sugar.
Yup. josh@1859.vc
The gold rush of the moon is helium-3. It's supposed to be a clean and efficient form of energy. I expect it will be critical for expansion.
As a former SRE with over 25 years experience at companies small and large, I’ve never understood why an SRE would need to implement quicksort, or how the skills needed by a competent SRE - specifically, to guide developers in making their applications adhere to well-known reliability and scalability tenets, and capture and evaluate the data to show where problems may lie — are evidenced by such rituals. And those rituals tell you nothing about your ability to influence developers through your social skills to adapt the business and its processes to have successful outcomes.

Obviously Google has had some success in this space as their opinions are highly influential, but sometimes I can’t help but wonder if they were successful in spite of their interview practices—especially in the early days—because jobs at Google were much-coveted: talent from all over the world sought out a job there because the money and the prestige was just so damned good.
> Truncating the DB between every test is indeed horrifically slow

Using a database at all in unit tests is horrifically slow - one of the (many) reasons you shouldn’t.
Maybe. Checking it out. Thanks.
An artificial cave built at the south pole would be a better solution.
In the 1990s there was a short period of excitement about "client-server" architectures that were supposed to replace the old mainframe apps.

Ironically these were rapidly eclipsed by the first-generation web applications that worked exactly like the old 'green screen' mainframe apps.

The SPA brought back the 'client-server' application but embedded in the web browser. There were many reason it was more successful in this new environment, one of them the asynchronous communication model that is required to make a web browser responsive.

It's a difficult programming model which makes web browsers the domain of the biggest corporations and that so many alternative browsers such as HotJava have been doomed, but it makes it possible for browsers to show you partially downloaded pages and rarely lock up the UI.

It seems like a hassle to deal with async comms in a Javascript SPA but if you were programming with a synchronous comm model you would find it very easy to get to 'hello world' but past that you'd be dealing with the window locking up, coordinating threads, etc. All stuff you get little experience with because the industry has given up on it.
Sure, in vague terms, there is a giant cultural problem in the Middle East where locals don't have the education or training or (more importantly) drive to actually do work, so most good employees are expats, but almost all leadership is locals because of hiring rules and nepotism.

Companies are actively trying to change it, but they aren't there yet and it's an uphill battle that has to start basically at the kindergarten level.

That culture also drives a major "image" focus, where how things look is more important that how things actually operate. I'm not from the Middle East, but this is what was communicated to us by our client / locals we interviewed.
https://archive.org/details/oncertainty00witt
The sooner we can permanently keep even a couple eggs outside our single basket, the better.

We're currently 1 real plague or 1 big asteroid away from ending our species. Up to now we've been very lucky.

I'd like to see in my lifetime our species able to live outside Earth in a self-sustaining way, with enough resources, infrastructure and know-how to make microchips, edit DNA, etc without calling upon Earth to do it.

That'll require tens of thousands of major innovations, not least of which will be the ability to survive lots more radiation than humans normally get exposed to, plus concerns like how space squishes eyeballs and ruins a person's vision.

If humans end up living on luna or somewhere between here and luna, they'll either be augmented with tech we haven't thought of yet or with DNA we haven't invented yet.

I'm excited to see us try, and I don't care which 21st century nation-state makes it happen.
My hunch is that if you compare education levels and health/mortality causes you'll also get a correlation, and there's also one between education and voting preferences. Sadly a lot of pro/anti-vaccination is political-tribalism.

In my view if you're skeptical of government (a problem not unique to USA), you're more likely to distrust the vaccination push, grasping at any conspiracy theory about why there's more to it than the government acting in your interest. So cause and effect are really flipped, for most people - they think cause: govt pushing the evil vaccine, effect: they distrust the govt, but in (my perceived) reality, cause: they distrust govt, effect: they think the vaccine push is evil and has ulterior motives.

And sure if you're vax-skeptical you can cite all the bad side effects and deaths, but I think the numbers speak for themselves, hundreds of millions vaccinated and there hasn't been tens of thousands of deaths; the vaccines are safe!

Of course those who distrust governments can claim the numbers are being fudged...
These projects seem really cool! A few links and historical references that might be of interest:

> On the hardware side I want to use small and simple systems

If you'd like to build a fully understandable computer, you might be interested in concatenative languages like Forth, Factor, and colorForth. These use a much simpler and more understandable, typically stack-based computational model that run on microcontrollers like STM32. You can create more complex words by composing together simple assembly-language-like atoms and building higher and higher layers of abstraction.

- https://factorcode.org/

- https://concatenative.org/wiki/view/Factor/FAQ/Why%3F

- Motivation section from: https://bernd-paysan.de/why-forth.html

> On the software side I have a simple GUI and macro language that is easy to learn and much much simpler and more elegant than current conventional UIs.

A good starting point or source of inspiration might be the Smalltalk and Lisp Machines from the past.

- Introduction to the Smalltalk Programming Language: https://www.codeproject.com/Articles/1241904/Introduction-to...

- How Do I Master The Art of Smalltalk? https://www.quora.com/How-do-I-master-the-art-of-Smalltalk?s...

- Live Objects in Smalltalk Pharo: https://www.quora.com/What-is-this-live-objects-in-Smalltalk...

- Smalltalk Principles: https://www.cs.virginia.edu/~evans/cs655/readings/smalltalk....

You might also be interested in this blog from a guy who is trying to build his own OS from scratch and run it on an FPGA: http://www.loper-os.org/?p=55
Some of his earlier writings about Symbolics Open Genera and Lisp machines are also quite interesting and might be a good source of ideas and principles: http://www.loper-os.org/?cat=8&paged=5

https://github.com/ynniv/vagrant-opengenera
Crypto is carefully designed to model Parkinson's Law. (Proof of) Work always grows to fill the compute available.
Zero people died from the plant.

Carbon is killing almost a million and a half people a year, plus screwing the atmosphere.

We've put ten times the money it would take to solve this on nuclear into solar, and unless you incorrectly use nameplate capacity, it hasn't even broken the 2% mark yet, but it's already throwing the grid into chaos.

Worldwide, in all of history, nuclear power has killed fewer than 200 people. Yes, I know HBO told you it was more. HBO is lying for profits. The UN says it's 156.

There is no safer technology in history, of any kind, than nuclear power.

Nuclear has already fixed 1/4 of the problem. It can fix the rest in time. Nothing else can.

You have six years left to wake up before it's too late to vote for the fix we already have.
Most PAKE implementations actually make a security trade-off here - they protect the password transmitted over the wire, but you end up with a weaker password hash stored in the server's database.

Modern PAKE implementations, like SRP, don't store the plaintext password on the server side, but rather store a "verifier", which is essentially a hashed and salted version of the password. This way the server never sees the actual password, even at the registration phase.

The problem is with the hashing function though. For instance, all the SRP implementations I've seen use fast hash functions like SHA-1, SHA-256 or Blake2b by default. But contrary to folk wisdom (which is unfortunately often repeated here as well), hashing and salting a password is not enough. This is not 2003 anymore, and rainbow tables are not your main threat - your main threat is a cluster of fast GPUs demolishing your hashed passwords at rates that often just start at 1 GH/s.

The best practice nowadays is to use a function which is both computationally expensive and memory-hard such as scrypt or the newer Argon2 (and not PBKDF2!). You could very well do that with a PAKE, but now you run across a nasty UX trade-off: the computationally expensive function would have to be executed on the client side every time the client authenticates. There are WASM implementations of Argon2 out there, so this is probably not a big issue on a beefy PC, but you'll have to aim for the lowest common denominator here, and tune your function for a low-end smartphone.

tl;dr: In practice, with a carefully implemented PAKE, you'll give the attacker a 10-100 times faster hashrate than you would with a plain-text password authentication approach implemented with the same amount of care. In real practice, you'll probably use whatever defaults your library gives you and give often end up with a ridiculously weak hash.

Now, I said this is a trade-off. If you implement PAKE well, you will reduce the resiliency of your stored password hashes against brute force attacks, but this is what you get in return:

* Protection against password sniffing at TLS-terminating proxies

* Protection against hackers taking over your server and stealing user passwords as they login (Online password leak)

* Protection against MITM with a stolen CA key[1]

All of these things are still an issue with clear-text passwords even if you're using TLS. If any of these issues are a concern for you, this means you consider your users' passwords to be significantly more sensitive than the data that flows between your clients and servers, but that could be a valid threat model. In this case PAKE looks like a nice solution.

For everything else, I don't recommend PAKE. It is harder to implement correctly (with library defaults being insecure as I mentioned above), and this is more important than whatever theoretical strengths it has. Cryptographic systems are generally broken because of incorrect implementation rather than theoretical weaknesses in the algorithm.

[1] Not very common, but that did happen in the past: https://en.wikipedia.org/wiki/DigiNotar
I’m not an expert in any of the following, but a couple reasons might be:
1) Living on multiple bodies would do wonders for the imagination and further space exploration.
2) reduced gravity launches for spacecraft to places other than earth
3) a test environment for developing technologies in a completely different space. The ISS serves this somewhat, but it seems like the scalability is very limited, especially manufacturing.
Your wish is my command.

- This is one I'm building for mobile (work in progress) [1]
- This is one for desktop [2]

[1] https://files.littlebird.com.au/mobile-how-to-wip-BDikJ9.m4v

[2] https://usdz.app/screencasts/getting-started
Apple's OpenGL implementation has always been mediocre even when it was technically supported.
Emirates may have a good score on some passenger metrics but they don't have a good rep with most pilots.

There has been another incident where an Emirates crew lacked any kind of basic aircraft handling: https://en.wikipedia.org/wiki/Emirates_Flight_521

Their main problem is a very bad rep for working conditions. Crews being overly fatigued, arcane labour laws in UAE, that makes it harder for them to hire pilots and to retain experienced pilots. Combined with a local market that doesn't have a big aviation history so less people to build on.
I’m a flaming liberal but I still thought we should at least pursue the lab leak hypothesis for one simple reason. I was a scientist and I’ve seen the lax way people treat biohazardous samples and just how fallible humans are.

After going down a long rabbit hole I lean towards non lab leak, but if we can’t ask questions because of politicization of ideas we are done.
Perhaps it would be even more useful if so-called "modern" browsers implemented SRP support. Some would agree SRP is better than HTTP Basic Authentication.

https://web.archive.org/web/20210422025330if_/http://srp.sta...

SRP allows for TLS without server (or client) certificates. The presence of the verifier on the server provides authentication. No passwords are sent over the wire.

The conventional use for SRP is a replacement for weak passwords (e.g., HTTP Authentication), but what would stop SRP from being used in some cases as a replacement for server certificates even where a website is public (no passwrd required). With SRP, the user becomes the one who is in control of "trust", not a third party certificate issuer or browser vendor. The user decides whether to send a verifier to a website operator.
Obesity is a major risk factor for severe COVID, and hence transmission and hospital occupation. Like the supposed factors that we are segregating the unvaccinated for.
It uses the Object Capture API introduced in the latest version of macOS.

The API allows you to create 3D models from images with just a few lines of code.

https://developer.apple.com/augmented-reality/object-capture
This is one of the times people need to be discouraged. They should know they're risking their lives if they get into foraging, specifically because they can be easily fooled into thinking it's safe.

As a random aside, a crap-ton of flowers are toxic. Flowers. If somebody hadn't told me that, I'd be eating random ones I find on hikes, because I heard of edible flowers and for some dumb reason I thought they all were.
> But the thing is you don't need these conspiracies to hate China.

You're projecting, and it's not a good look
> do you know why there is no article how bad coal is? because everybody knows but unfortunatly most people do not understand how fucking bad fukushima even is

And most people have zero idea how bad coal is.

How many lakes and streams has nuclear destroyed? Nowhere near the number that coal has between both acid rain and mine runoff. The Monongahela river and its tributaries still have enormous sulfate loads.

How many people have died of nuclear radioactivity? Nowhere near the amount that have died of black lung.

And this is before we start talking about just how bad the pollution in Pittsburgh, Cleveland, etc. used to be and how many people died from that.

People don't understand even the tiniest fraction of how bad coal is. Nuclear power, even with accidents, is a saint compared to coal.
I am poorly qualified to evaluate the claims of the paper, so as a proxy I looked into the qualifications of the authors. Dr Pantazatos is an assistant professor in the Psychiatry department at Columbia, with what appears to be a long record of papers in the field of brain imaging, with a shift this year (inferring from his twitter) to a focus on vaccine opposition preprints and petitions opposing vaccine mandates. Hervé Seligmann appears to be a currently unaffiliated geneticist, though he did (apparently falsely) claim to be affiliated with Karlsruhe Institute of Technology in a letter advocating hydroxychloroquine?

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC8671645/

As always, I'll defer to real expert evaluation of the work, but my hunch is that the paper will be poorly received when that happens.
Thanks for the report Mitch. We'll have to look into this.
Your comment is knee jerk funny, but not generally helpful.

I thought the test was fun to do, even on a mobile touch screen.

Vertical drag and drop from mobile did seem to mess with it but I simply dropped and reset the piece.
It probably does because they'll need to go to doctors regularly, and that could be taking away budget that could be used for your health insurance down the road. But who knows, not an expert.

As for your Covid worries, isn't it already established that Omicron is more contagious but with much milder symptoms? Or is that still unconfirmed? Not trying to start a flame war here but it's fairly obvious at this point that barring imprisoning everyone in their homes, Covid contraction still happens quite a lot out there. We can't seem to stop it, only reduce the rate at which it happens.
Sorry, I don't understand. What Next feature?
find without something more won’t look inside archive files. Might be able to do something with find and zgrep.
If they want to go green, why are they even allowing new homes to be heated by burning fossil fuels? Especially France where you have electricity with such a low CO2/kWh.

In Lithuania you can no longer build new homes heated by gas. All new homes have to be classed as a zero energy building, heated by renewal sources, which natural gas from Russia is not. If it works there, it can work everywhere else in Europe too.
I don’t see any indication that Apple recommends this workaround.
The whole concept of race is a fallacy. An Idea from the enlightenment period that should never have taken a foot hold. Race is tribalism not biological. Its also a fantastical identity construct (aka political identity).

The whole $ORIGIN American labeling enforces separation rather than inclusion. Politicians knew this from the get go. Politics needs theatre ... a "us vs them" plot. This is why this nonsensical labeling persists.

So yeah. We should have grown up a long time ago.
Would this even be fraud if it worked, or is it the expected outcome of this sort of market?
The Instructor's Stick is well regarded tradition all over the world.

One problem AF447 faced was that the closest thing to instructor who could whack the panicking pilot returned to cabin too late to fix it...
The log4j library is in a jar file. Jars files are like zip files and can contain other jar files. They can be nested arbitrarily deep. Doing a ‘find’ for a specific file name is not enough.
Obesity doesn't increase the likelihood of transmission, just the severity of the outcome for that individual.
I envision that and them some sort of inflatable shell insterted into it to make a quick habitat... maybe some sort of hardener is activated upon inflation or filled in between outer layers...

Yeah, lunar real estate will be one of the first things - Location. Location. Location.
The "green" movement to squash nuclear going back to the 60s was the best investment the fossil fuel industry has ever made.
> but it's not environmentally friendly...

Neither are solar panels or hydro power
Metabolism is still a mystery in a lot of people.
Stop posting paywalled articles
The author appears to be still at it, seemingly unrepentant and followed by a hundred thousand people: https://twitter.com/theSamParr/status/1476732367805067272
>If you are using HTTPS, you are equally as good as any other login form.

Or equally as bad. TLS only protects you from sniffing, not the server seeing your password in cleartext.
it now feels wrong to me to have behavior in HTML markup.

i get it, it's easy and simple. and has worked for many frameworks. but things like that are bound to be abused and i am already seeing traces of such abuse in the examples:

<form hx-encoding='multipart/form-data' hx-post='/upload'
_='on htmx:xhr:progress(loaded, total) set #progress.value to (loaded/total)*100'>
...

maybe we should leave markup for HTML, styling for CSS, and behavior for JavaScript, TypeScript or similar.
Might interest you. This idea is explored to the fullest the way i understand it.
Śūnyatā - https://en.wikipedia.org/wiki/%C5%9A%C5%ABnyat%C4%81
Why would you stick with Ubuntu 13.x? It's not even a LTS version
Ryanair is not exactly recruiting from USNavy
Are those stories written by a character in Dwarf Fortress or a dramatization of the emergent behavior? The first story I saw could’ve happened in Rimworld or even Prison Architect, given literary license to dramatize.
What screen did you take the test on?
The flight computer isn't controlled by physical dials, and that's where you do pre-flight calculations (including the V1 and V2 speeds for given takeoff mass)
> not entirely accurate to say the workflow and tools aren't part of the art.

That workflow/tools is not something they advertise, are proud of, or concentrate on. We know about it from a random interview only, so I don't see a reason to count that as part of the DF-as-art.
"Because Holmes is being tried other diagnostic companies should be tried" is what I am trying to comment on.

Case law is applicable to a case under trial (as I understand it) because it provides you with judgement-based decision logic from prior analogous cases. It's not "because we tried A we should now try B" it's "the last time we tried something like B, the applicable judgement was from analogous trial A" but the decision to try B has to be made on it's own merits, not just because trial A happened.

IANAL btw
Another thing that's missing is multiple credentials stored in by the browser. With HTML login forms browsers can offer multiple choice of autocompletion with stored credentials. With Basic HTTP auth it doesn't work, it only offers the first one and you have to type both the login and the password manually for other accounts even if your browsers knows about them.
Real-Time Tokyo Subway Map
therapist seems like an important one, iirc they showed a similar interface in a steam version demo. Without it, jobs and aptitudes of all different dwarfs are all over the place and woe to you if you forget the key combo because by the time you figure it out you probably forgot the friggn guys name
>As you admitted, passwords get logged "all the time." So the reasonable solution in most cases would be to ensure all applicable logs were clean and not logging passwords, not over-engineer a JavaScript-powered client-side-hashing algorithm. That's like taking a sledgehammer to a nail.

Maybe, but as a client I can't verify that this happens. So never sending the cleartext password is the only solution.
Since you're in the mindset of capabilities, what do you think is a reasonable way to pipe them through the internet, or between cooperating programs on a given machine?
I would guess only port 53 to the DNS server that the DHCP server gives you.
there's also unfork(2)!

Do you unfork then unexec or unexec then unfork?
Why is it a problem to give funding or tax advantages to projects that actively reduce emissions?