skysight-inc/HackerNews huggingface dataset:
Is this a cultural problem where some areas of the world tend to defer to authority even in the face of obvious error on the part of the authority? In this case the flight computer?

I thought this was solved by training none-western pilots, in particular co-pilots, to be empowered to challenge decisions by another pilot instead of just doing nothing.
Can we at least get a distribution of scores over the general population?
What seemed odder to me is GP's talking about speed as if it's the same as distance:

> a knot is "exactly equal to 1/60th of a degree of latitude. ...Therefore, a knot is equal to one minute of distance."

I'm not sure what that quote is from, but it's is akin to saying "A metre per second is equal to one metre." Um, no. The units don't match.
Agree with everything beside the third point.

The argument of passing plain password over the wire doesn't make sense: every login form when you submit it passes username and password over the wire! Nobody encrypts the passwords client side.
Fing! An app, as suggested on Michael Bazell's podcast.

Basic version is free and will tell you what's connected to your network. Haven't been in a rental property in years but I constantly use it just out of curiosity, in bars, coworking spaces etc.

The app will tell you the IPs of all connected devices and you can do port scans as well (nmap is better but less convenient). One time I managed to access the router of a coffee shop while waiting for my drink using default credentials, and from there got the video feeds of their security cameras.
Ask HN: Have you ever been a part of creating a new TLD (i.e. .nyc, .museum)?
What was the experience like? How long did it take? What do you wish you knew sooner?
Frost and melt will force stones up. So every year you get a nice fresh crop of stones...
I have an autopilot in my small single-engine GA aircraft and don’t even think about touching it until long after takeoff when I’m comfortably at pattern altitude. The reason being I’ve read way too many NTSB reports when the pilot engages the thing 50ft after takeoff, it has a mind of its own and the plane goes careening into the ground. There are “failsafes” built in, for example you can easily overpower it with control forces or disengage it, but that’s one more problem you don’t want to deal with during a critical phase of flight.
Upside Down 3D Printer
> You end up having engineers wasting time on technical interviews that are clearly a pass in the first 10m (but you keep going for 45 to stay professional)

If someone is a pass in the first 10 minutes, the next 35 minutes are me trying to sell the company to the candidate. This is not, even slightly, a waste of time.

I have Allied Mastercomputer levels of HATE for whichever HR drone decided that "interviewing candidates" needed to be a bullet point in the "corporate evaluation process" and thus made the interviewing process even shittier than it needed to be.
You just described almost all major API endpoints. Using PTRs is practically useless for this purpose.
The attacker I describe has MITM access. The attacker can read and modify page contents, but nothing on the server side. This can only be achieved by malware on the client side or tomfoolery with certificates, so it's not a common attack for sure. But, breaking basic passwords sent over a secure channel aren't a common attack in general.

If you presume the attacker can only read the data transmitted but cannot alter it, your system might work, but I'm not sure in what scenario a hacker can break HTTPS secrecy without also being able to modify the contents of traffic over the wire.

A CSRF vulnerability won't let you send the password to a random host, unless you have full arbitrary code execution (in which case your protections don't make sense either) or if your auth code is unrealistically buggy (letting the attacker embed secrets in a resource somehow).

The database already contains hashes for normal password auth, so I'm not sure why your system would be any better. The password database isn't stored client side, after all, and I hope nobody is still storing passwords in plaintext.

I'm not sure why an attacker would be able to guess the hash from a timing attack, if they can do that then the hashing implementation is very flawed, to the point you just shouldn't be hashing passwords with it.

Your custom salt/hashing system solves password reuse I suppose, but it doesn't add any protections to your website while adding complexity at your cost. For your website, you just changed the way the password looks (which is the hash, not the direct input) at the cost of needing Javascript execution.

In my opinion, your login page would be a lot more secure with a CSP that disallows all scripting, just in case, and uses a simple system that's easy to spot mistakes in, like HTTPS POST or Basic auth.
I think the problem is you have www.somesite.com which resolves publicly to an A and AAAA record, and you override its A record with a local DNS entry, but not its AAAA entry? Sounds like an Android bug if you NXdomain the AAAA entry and it still insists on using it (or it overrides your DNS server and goes to a google one)
As every other login form does. In this situation basic authentication is no different from every other authentication mechanism that uses passwords...
I had similar questions on 2016, although not quite as wrong/bad as presented here. E.g. "why is quicksort the best" wasn't asked. Instead, something more like "What is the average case time complexity of quicksort?"
> There is currently no good decentralized marketplace for NFTs.

Which itself is ironic.
There are lots of things you can do for "free" making a calculation of ROI potentially tricky.

Drink lots of water and take up power walking. If you have a kid in sports then volunteer to assist with coaching.
Nuclear I can understand. But gas?
A $1 paper notebook. Write down everything you eat, particularly how many calories it has: https://www.verywellfit.com/calorie-counting-dos-and-donts-3...
I thought all takeoffs were manual. Is auto-takeoff out of testing already?
I live in Canada and have worked with a lot of former Blackberry/RIM employees. A lot of them are still very fond of the exciting era in the 2000s. I can see some of them would be emotional over the EOL announcement.

Some people own an extensive collection of Blackberry memorabilia: Anniversary crystals, engraved watches, knick-knacks, hoodies, t-shirts. Not to mention a line of old Blackberrys over the years. I have heard about stories of debugging the enterprise server in ungodly hours. Even after the formerly Blackberry buildings have been housing other companies, a colleague told me vividly where the server racks were located exactly and was sad they're not there anymore.

I am old enough to see the rise and fall of Blackberry devices. The rise and fall reminds me to be cognizant of potential competitors and not to stop improving.
interesting idea. once upon a time, i wrote a social sentiment analyzer for various cryptocoins. it was actually pretty accurate and made me a few bucks. quality was not considered at all, but after recently stumbling across forums shilling ICP (and subsequent research of said cryptocoin) I think your idea is a worthy one.
This is the terrifying thing about a bug in one of these systems or some other kind of attack. The whole network can suddenly drop to zero in the blink of an eye.
What's the point in seeing a specialist if you suspect your color vision is crap? As far as I know, the vast majority is genetics and there's no treatments.
On another note: I think that having Boeing 777 in the title here is a bit misleading, this was an Emirates aircraft and Boeing had nothing to do with this incident.

Suggest replacing 'Boeing 777' in the title with 'Emirates aircraft'
It's actually a repost of the same article from earlier in the year as the editors note points out.
I've heard Royal Air Maroc is pretty good when it comes to African carriers but I'm not sure. I know they have (or at least used to have) experienced crews and good airframes, but I don't know anything about their maintenance standards
It's a good argument to replace coal energy with clean energy, but why we should replace dirty coal with dirty nuclear?
To be fair this is basically just a texture pack, which is already something you can use. The real problem is the highly consistent UI design, differing in things as simple as if you have to use a keyboard or mouse to navigate a list.

Toady is understandably disinterested in putting time into that element of the game, and I think he had a bad experience the last time he 'outsourced' it.
They support 2FA and hardware tokens
The Usual Arithmetic Confusions
The non-toxic but unpalatable bitter bolete is another close lookalike [1]. Personally I have found correctly identifying boletes to be much more difficult than any other mushrooms on the list. The Bolete Filter [2] is a great resource IMO.

Chantrelles are very easy once you understand their characteristics, but I think it's irresponsible for the author to suggest just looking at some pictures of jack o lanterns and calling it a day. During a dry spell of foraging, I once deluded myself into thinking a large patch of Turbinellus floccosus [3] were golden chanterelles, only realizing my mistake a few minutes before cooking dinner.

[1]https://en.wikipedia.org/wiki/Tylopilus_felleus

[2]https://boletes.wpamushroomclub.org/product/boletus-edulis/

[3]https://en.wikipedia.org/wiki/Turbinellus_floccosus
A rush to mine lithium in Nevada is dividing climate and environmental groups
+1 For using a movie quote... with reference no less.

+10 For including the citations on the various terms.

+100 for taking the time to share this second experience.

FWIW, a friend of mine is a fairly frequent 'traveller' (couple times a year). Every body type is different etc, but his recommendation to me has been:
1. Set and Setting are everything, if you have any doubts it isn't a good time
2. 0.25-0.5g is a micro-dose with no real trip but some potential chill effects. ~1.5-2g is a solid recreational dose. Any more and things can get weird.
3. If things do go sideways, milk can help (no idea of the chemical efficacy of this)

Sounds like it got weird for you, glad there weren't any long term side effects.
Not necessarily, you can set up TLS client auth with signed certificates, generated locally, that the server never receives the private key of. The server can validate and authenticate without knowledge of the secret, and cannot impersonate the user.

The problem with TLS client certs, of course, is the fact you need a method of signing CSR's, and the terrible UX modern browsers have for client auth, especially on mobile.
> QR code requires you to scan it in that moment

Not really, anymore. Android permits you to take a picture of a QR code and use it's URI later by going to the saved picture and clicking "Lens" (which activates Google's ML to identify QR codes).
Luckily DF is getting a ux overhaul for the upcoming Steam release.
As someone who works in the airline industry I find it infuriating when other industries don’t match my expectations. I saw behind the curtain at a couple of medium sized online retailers. The lack of process and procedure was just astounding to me. I know some airline pilots have had success in consulting in hospitals but maybe there exists a broader market for that service.
The parallels are legion (unfortunately).
Not everyone wants a director of engineering that can't communicate with the rest of the company.
For me it was "How to Take Smart Notes" by Sönke Ahrens. This may be a little cliche answer, but to me it was very surprising to discover a person who reached such high productivity in Academic Publishing with the help of a smart system.

I have started to implement the Zettelkasten system in my own life. Hope that will use that system to publish more work on my website.

I published my thoughts, learning and notes on this book -> https://rasulkireev.com/how-to-take-smart-notes/
This is too hard for me. Just moving one color took me 3 minutes.
I've worked with several junior programmers who, when they encountered an error in a program they were working on, would immediately go back to their editor and try changing something to see if it fixed it. I encouraged them to stop, read the error and stack trace, and understand the issue before they changed anything to fix it. I think their skills improved for it.

Trial and error is good, but you have to understand what you are trying, and if it works, why. Writing out a program up front can encourage this.
Metamask basically works this way and is used on thousands of apps.
There's another version of the video here with restored audio:

https://www.youtube.com/watch?v=WITLR_qSPXk

Might be easier to watch for anyone using a device with crappy speakers.
Please bear in mind that 3nm is an "alpha" - a multiplier characterizing the process. If you took your time and find out difference between processes with different "alphas" you will find that transistor density is nowhere near what difference in "alphas" would suggest.

If I remember correctly, the difference in transistor density improves as 1/alpha whereas area of transistors, if everything gets shrunk with alpha decrease, should decrease as square of 1/alpha. I.e., if alpha differs two times, there should be 4 times more shrunk transistors whereas practice shows only 2 (and often less) more shrunk transistors.

This is because you cannot make transistors too small in every dimension, they will leak.

So the difference between 3nm and 16nm will be less than five times. Not 25 times as difference between these parameters would suggest.

The difference in getting masks and first prototype should be quite substantial in terms of upfront payments and time-to-production.

I remember that 25 square millimeters proof of concept in 180nm process needed $50K of money and half an year of delay. The 35nm (5 times less) prototype of the same area would cost about $500K and more than half an year delay. The difference between 16nm and 3nm is about the same, I can expect several millions of dollars of upfront cost of small chip and year long delay before prototype arrives for 3nm process.

These Bitmain guys should be assumed to be not stupid and they most probably have access to latest processes after second prototype. Yet they choose 16nm - we must ask ourselves "why?" and Nvidia should too.

As a matter of fact, Nvidia had its share of problems with tiny processes in past.
Let me know next month, I guess.
I don't think they're stupid just because some anonymous person on the internet says so and especially not if it's a regulation nobody profits from. There will be reasons for that.
Hey! Curious what impact you've seen of the mining sector in the country but especially towards wildlife and economic development? I have heard the country wants to move up the value chain too, any feelings on whether doing something like processing (requires lots of skilled workers and 24/7 power) is actually realistic? Do you have any recommendations/travel guides for someone who would want to come visit and not just stay in the capitol?
How to Delete Your Facebook, Twitter, Instagram, and TikTok
That's his brother. The poster's name is Sanjay Vakil. I think he's saying - look at my brother. He is so successful and intelligent. Unless you have won the putnam (his bro was a 4 time putnam fellow), you have no right to be bolder than him.

As an aside, I think Sanjay has an inferiority complex or can't see outside of his immediate circle who knows his brother.
> engineering/mechanical problems

These problems are often due to human problems or errors.
> I just discovered an accidental O(2^n) code path in my project with fuzzing and fixed it

I've used fuzzing to find crash/panic conditions in Go, but never to find slow paths. How does that work?
This is mostly testing the quality of your monitor.

I got a nearly perfect score, but on an AdobeRGB wide gamut monitor. Similarly, an OLED phone screen makes this easy.
> Every commerical building I've ever seen has fire alarm levers on the walls.

I see these very rarely nowadays.

Apparently they get triggered too often as pranks, and it trains people to ignore the alarms. So, they don't put them in new construction.
just wanted to remind that now even feds accept inflation isn't transitory.
> VR molecule visualization in bevy (a la pymol)

If you'd like to play with shaders, instead of using the common balls and sticks, you might try using electron densities. Something vaguely like this[1], which renders (with pedagogically unfortunate representation) densities from GPAW[2] with the python Mayavi renderer. With GPAW, one can precompute and compress densities for small molecules, allowing interactives with realistic dynamics and electron density. How young might atoms be introduced, and how well, if it were done with ipad pass-through AR, hand-tracked hands-on interaction, with physically realistic sticky fuzzy little balls?

[1] https://www.brown.edu/Departments/Engineering/Labs/Peterson/...
[2] https://wiki.fysik.dtu.dk/gpaw/index.html

> VR instruments

Pity Exa[3] development seems to have stalled.

[3] https://store.steampowered.com/app/606920/EXA_The_Infinite_I...
If you select each state you can see near 100% levels for Alabama, Florida, California, Idaho, Texas, etc.. You can't ship desperately ill patients around the state very easily to fill ICU beds, so smaller cities/regions absolutely hit 100%.

Furthermore, as they approach 100% they start enacting "crisis standards of care" such that people who would have been admitted are not. They're put in hospital conference rooms, hallways, or regular rooms without the normal life saving equipment present.
"This article offers terrible advice to novice foragers. It's irresponsible at best, even with the disclaimer in the opening paragraph."

I agree, despite having almost certain knowledge of at least a few of the safer types, I'd never pick mushrooms from the wild.

The consequences of even one badie getting into the mix can be too horrible to contemplate. Often there's no antidote and you're dead within days.
Interestingly I found that a few airports are below sea level [1], so flying at or below sea level is possible.

[1] https://expertworldtravel.com/lowest-airports-world/
It's not a straw man; I'm articulating one of several thoughts I personally have about the tool after using it for some time. I'd be surprised if I'm the only one it's occurred to and I'll be _extremely_ surprised if we don't hear a whole lot of it once Copilot is more widely available.

At any rate, I was also initially somewhat skeptical but it is hard to overstate how effectively it predicts exactly the code I was about to write, or suggests the code I don't know I want. It is, for me at least, significantly faster in the languages I know well, and monumentally faster in the languages I don't know well.
On that note: I have had a triple go-around and even though everybody was super happy about making their connections on time I personally thought that that was an extremely unsafe landing with the port side wing coming uncomfortably close to the tarmac. Severe windshear, ours was the last flight to land before the airport was closed. The pilot stood at the door to say goodbye to the passengers and was visibly upset.

Any kind of pressure on pilots to make connections or to reduce the number of go arounds or even alternates should be pushed back against hard. It can only lead to more accidents.
There are number of innovative ideas in this machine besides the upside-down printing. Recommended if you have an interest in the topic.
OMG it should be illegal.
Look up the Topsolar SolarFairy 100W it’s a Chinese brand you can order on Amazon. I also have a Dokio 220W folding panel that’s my main one for camping, but it’s way bigger. Though it’s really thin and easy to find a place to store without taking up much space, it’s also easier to keep directed at the sun.
Who’s the counterpart to your short?
Not exactly the same, but similar: https://en.wikipedia.org/wiki/The_Wandering_Earth
Write the Blog You Want to Read
turtleSpaces is a 3D Logo interpreter rapidly becoming a game engine (basically Roblox for Logo).

It is written in Go and has cross-platform binaries and a WASM version with a Javascript IDE. Mobile support is in the works.

We need people to help create content, market (user acquisition), test and code!

Check it out at https://turtlespaces.org and if you're interested in helping out e-mail help@turtlespaces.org

We're not certain yet what the forward plan is regarding monetization or exiting , turtleSpaces may stay free and become OSS. In the event that any profit was incurred it would be distributed amongst the contributors based on effort expended.

Thanks for reading my blurb!
> We have plenty of evidence of the Uyghur genocide from 3rd party journalists and satellite imagery.

No, we don't. The vast majority of primary "evidence" comes out of the ETIM lobby (WUC, Adrian Zenz, et al.) and war lobby (ASPI, etc). All of it massively signal-boosted by the mainstream corporate media. Both sources have a very, very clear (conflict of) interest in manufacturing anti-China sentiment.

Grainy satellite imagery of ordinary schools and prisons is only admissible as "concentration camps" if you're a shameless propagandist.

It's quite literally the same playbook as "Saddam's WMDs", with similarly cynical goals. Because it worked. And it's been similarly effective at duping the average media consumer.
But the numbers are not below regulation. They are being surpassed in different regions during different times of the year. They have to reimburse those hunters with 250€ for every board which amounts to millions just for the state of Bavaria.

Also: what do you mean by "constantly"? How many articles are there and how can there be too many if you don't even know that they are not below regulation?
Depends if that is required. For most enterprise software, that nowadays is more and more web based, you don't need all of that. Accounts are created by the system administrator, the password check is fine with the default mechanism of Nginx or Apache with a .htpasswd file, bot detection and all other things are not really that necessary, especially if the page is not exposed to the internet but only in a LAN.

Beside that, if you need a more sophisticated authentication mechanism nowadays your default is to go with something that uses the Oauth protocol: so I guess the next step would be to standardize that protocol and have it integrated as a browser API so that a user doesn't even have to insert a password.
I couldn't find the code that does this in my cursory check of the Android source code, but I think it's a misconfiguration check that's failing. That's the feeling I get from others reporting similar issues on help forums, anyway.

I think Android sees a world routable IP address, notices it has connectivity and then finds out the DNS server doesn't return IPv6 addresses for known IPv6 capable hosts (such as Google.com). That seems like a fair way to detect misconfiguration to me, though I would've put up a notification warning about the switchover so users can get someone to fix their issue.
I have an open mind, and if I find it a useful tool I'll adopt it enthusiastically. However I remain skeptical for the reason I said.

The positive comments I read from people who've tried it give examples of things it's done right, effort saved, things learned, but make no mention of the effort taken to verify what it produces. I don't know if that's because they're uncritically accepting what it produces (which would be bad), because it's only usefully producing trivial bits of code (which would put it in a race against how fast I can type, handicapped by whatever percentage of the time it gets it wrong and the time taken for me to check) or because I am somehow unusual in finding reading code much, much harder than writing it.

I'm getting pretty frustrated with the limited access. I signed up months ago. Just release it already.
Yeah, nuclear is very green. Just look at Chornobyl: it's very green with lots of wild life. But gas?