skysight-inc/HackerNews huggingface dataset:
Sooo let's stop telling companies that security is critical?

Someone could have sent out 200k emails to steal money from 200k people.

I also store all leaked data just for fun. Guess what someone can do when they are out for you?

Writing an API which doesn't leak is very easy. I think it's reasonable to keep security.
Do you by any chance use noise-canceling headphones?
One suitable option is to memorize an algorithm as a password:

Say, given a site, create a password as:

HardcodedChars+siteName+len(siteName)+symbolInKeyboardOf(lenSiteName)+len(TLD)*N+hardcodedChars

So gmail.com would be something like

Chad1Gmail5%9Foo@

And then use that algorithm for generating all passwords.
> Yes Bitcoin might use energy which might not could be used otherwise

Even using the electricity to literally just pump water uphill would be a better use than to pump it into the blorkchain:

https://en.wikipedia.org/wiki/Pumped-storage_hydroelectricit...

And if the world is looking for something to do with surplus electricity:

https://en.wikipedia.org/wiki/Desalination#Energy_consumptio...

Considering the fact that 1/10th of the worlds population have no access to safe drinking water, this would be a far better use ;-)
> For the entire world, it would be absolutely trivial for the government to fund

Which government? Is that some hypothesised World Government?

The UK Government runs a lot of the forestry in this country. It is run as a commercial timber operation. The Brazilian and Indonesian governments appear to be committed to commercial exploitation of enormous amounts of old-growth rainforest timber. The Polish and Hungarian governments are also committed to logging old-growth.

There's no time left for this kind of dreaming.
> The tenantConfig however can be accessed without any restrictions. And the information delivered there is quite interesting: API keys and URLs for various services that are apparently used by the Gorillas/eddress infrastructure. Among them we found API keys for Sendgrid and Slack webhook URLs.

Unreal.
Hitler's goal was a large prosperous German empire across eastern Europe.
I am confused, as the link appears to say the opposite.

> Conclusion:

>The majority of 4K movies (75%) I tested have bitrates over 100 Mbps and many seconds where bitrates spiked over 100 Mbps. Some have 100s of seconds where bitrate spikes over 100 Mbps, and will most certainly cause problems if played with bandwidths less than 100 Mbps on devices that don't buffer well such as the LG TV or Roku TV. To make sure you get the best experience without any buffering or transcoding on such devices, you need to make sure you have a bandwidth that exceeds at least 150 Mbps to play most 4K movies properly. Ideally, it should be higher than 200 Mbps.
> recruiters can never see your filter values

I'd like to allow recruiters to see some or all of my filter values. For example, my requirement for remote work isn't a secret. I am quite happy for a recruiter to know that rather than having to guess, especially if they have a list of roles to fill, some of which might meet my criteria.
Linux would naturally lean to the pass ecosystem e.g. pass, browserpass gopass, PasswordSafe app, etc. See https://www.passwordstore.org/
> Note that servers are 100 Gbps as standard now

In what world?
You are overestimating how much ad revenue comes in from non Tier 1 countries and from that specific niche. I'd be surprised if they get more than $1-2 per 1000 visitors. Could be lower than that
What happened to a little tough love now and then? If we just give excuses or write off known methods that work as “compassion” or “self love”, what even drives someone to make a significant change in their lives?

When I was bigger, it wasn’t being kind to myself that helped me lose weight. It wasn’t holding those bad habits either.

When I was lazier, it wasn’t being mindless and disorganized that helped me do more.

When I was determined, it wasn’t telling myself “it’ll be okay” if I didn’t follow through with a goal.

I accepted the fact that I was overweight, lazy, and not motivated. Instead of saying “that’s okay, you’re human”, I made drastic change to the ideal version I wanted to be. This isn’t productivity porn, this is just reality.

I’m either getting old and out of touch or this article just doesn’t make sense to me at all.
IIR, the Mt. St. Helens 1980 eruption mechanism was the slow build-up of a steep slope of very weak rock, while various earthquakes (associated with deep magma movements) jiggled the whole mountain. The little glaciers on top were, at best, along for the ride when the "final" 'quake turned the unstable slope into a big landslide. Which landslide also "uncorked the champagne bottle" for the main eruption.
> Complaining about the porcelain is like complaining about vim's complexity: It takes some time to master but ultimately it is rewarding.

It really really is not. All it is is a hurdle you get used to in your way towards getting work done.

Git’s porcelain is at best a beating whose reward is more beatings. I could count the numbers of times git’s porcelain has delighted me on two hands even if both had been cut off and burned to ashes.
Stalin in the Metaverse
"Really, the best thing for almost everyone is to hand all their belongings to an unaccountable American corporation (which effectively provides no support), so that they can datamine it for advertising and identification purposes."

The fact that "specialists like us on HN" can say this sort of thing with a straight face and no hint of doubt, is one of the many reasons we are sleepwalking into dystopia.
Scientific American!
On Gnome, DejaDup recently rolled out restic support, and I must say, it's looking really good!

If you use Gnome, I would encourage you to use it and give feedback here [1]

[1] https://gitlab.gnome.org/World/deja-dup/-/issues/192
He's got a direct line to Calvin Ayre's money.
it's already illegal to cause a plane to crash, regardless of the mechanism used, and the legality of the mechanism generally has no bearing on its effectiveness...!

but, gps (or other gndss) spoofing or jamming is effective, and i think that commercially available jammers simply broadcast reasonably broad spectrum noise around that frequency, which can overwhelm nearby recievers; although the article describes how noise rejection is performed, it has its limits. spoofing is more difficult, but still possible, including simple re-broadcast attacks using data received at another location, however i believe these things are non-trivial for military receivers due to countermeasures like beam steering?
s: with, together

vid: videt' = to see, vid as in video

anie: just a suffix like "ing" in english

"till together-seeing"
> Wikipedia is hopelessly unreliable on anything to do with the Middle East. -> Didn't read.

That's what the far right in Israel also says! Horseshoe theory at its finest.
1Password once "forgot" an autogenerated password for a government webservice, where I had to used a snailmailed one time password. I needed to get another OTP for registration. It never happened to me again, but having a wrong password stored was really annoying.
I've switched to Bitwarden recently and, for the most part, am happier than before.
Having tried almost every other solution available over the past 25 years I also self host vaultwarden in a docker container and I'm pretty happy with it.

https://github.com/dani-garcia/vaultwarden
He's a household name in the crypto world. Sure, not in a good way, but any publicity is good publicity right?

He could offer his services to various blockchain-focused startups in which he'll fit right in considering said startups' objective is often to get money off clueless VCs by throwing the "blockchain" buzzword around (there are very little legitimate use-cases for a blockchain that can't be served by a traditional database, and a truly decentralized blockchain can't easily be monetized to the level a VC would want).
Uhhh, wut?

Terry built templeOS and spent years working on the project. No one questioned the authenticity of that project and anyone familiar with him or his illness would likely not compare him to Craig Wright. This analogy really falls flat and makes no sense.
Uhhh China has centuries of history of peasant movements rising up in improvised make-shift revolts. I don't think you understand how real revolution was for people in China. It was absolutely not a LARP.

Just looking from 1850 to Mao, there was: The Taiping Rebellion (30m dead), 2nd Sino-Japanese War (20m dead), Dungan rebellion (15m dead), Miao rebellion (5m dead), Red Turban rebellion (1m dead), Panthay rebellion (1m dead), Punti–Hakka wars (1m dead), Nationalist purges (1.5m dead), various Warlord Era conflicts (500k dead), 1911 revolution (200k dead), Boxer Rebellion (100k dead), and 1st Sino-Japanese war (50k dead). Not to mention residual deaths from the two World Wars not directly attributable to the conflicts above, but which would still number more than the losses the USA suffered in both wars.

The American Civil War was about ~750k dead. There is absolutely no comparison between the traumatic social conditions of 1940s China with even 21st century China let alone the United States. They were definitely not "role playing".
Not really. I'm picturing short term, furnished apartments that you swap every week or two (like an AirBnb). This lifestyle is already popular among the younger generation; low stress, no ties, freedom to travel and explore. It's great until you want to settle down and have security but at the point where big companies own everything that won't be possible.

It's sort of in line with this "Great Reset" conspiracy: "You will own nothing and you will be happy".
Having just seen MLK day go by, I think the situation in the US is considerably better than it was back then, when despite campus cultural policing being enforced by actual shootings and both dissidents and presidents were being murdered, the country did not have a full civil war.

You can't really have a civil war without an economic crisis, and the one thing all the helicopter COVID money guaranteed was not having a massive economic crisis. See Kazakhstan; it's been somewhat unfree for years, but the thing that triggered fighting in the streets was a spike in energy prices.

However I do think there's a risk of more political violence around elections. Eventually some group is going to bring guns to a government building and refuse to leave.
Not sure why you'd expect crashes to remain rare if journalist stop reporting on situations where things almost went wrong.
This is an I interesting idea I haven’t heard before - do you have any sources on this?
It's pleasant to hear that lots of FOSS software benefited from this effort.
I have worked like this on the Quest 2. What I found:

- lower screen resolution to make HN readable

- your IRL GF will react differently to you because she can’t see your facial expressions

Note: n += 1
>> Never played a VR game that wasn’t better without it, somewhat like 3D movies.

Many people say that VR adult movies are fantastic, and one could find that non-VR ones are not even close.
1M is so 2011 (2012)
He's a temporarily embarrassed billionaire, he just needs some funds to access his rightful fortune.

You don't even have to believe him - you'd just have to believe (or see viable risk/reward) that he has a shot at a successful legal attack.
FAA-specific source: https://www.theatlantic.com/technology/archive/2016/12/aviat...
That's like saying I lose money on lunch everyday. It's true - lunch never pays me, I don't make it up in volume and I won't even break even.

My life is bigger then lunch though. Lunch enables me to do other things that do make money - so I take a loss on lunch with a view towards the other stuff.
If a web site wants your email address or phone number, it will require them, asymmetric cryptography won't help you. On the other hand, this very site uses password authentication, but doesn't require an email address.
The boarding schools sere considered positive when implemented. Not so much.
Support for boards (once the SoC is supported) is normally a low-hanging fruit, this only depends on getting the proper device trees merged.

Various projects keep status pages of their mainlining efforts. Example for Allwinner hardware from the linux-sunxi project:

https://linux-sunxi.org/Linux_mainlining_effort

Generally, SoCs that have lots of things marked "WIP" have community attention and are probably going to work at some point without kernel patches.
I've had this issue before. If you're on Firefox, open up the history sidebar with ctrl + h,then in the top left corner click on the word History to open the dropdown and select Bitwarden. You'll be able to have it "open" without clicking the extension popup.
There would be 6 people in Waukesha that would still be alive if bail hadn't been set so low for the perpetrator.
Dude Where's My Coldstart?
You can now waste your time and money in Windows, Office, Azure and xbox games all with single Live account! Waiting for microsoft to buy junkfood chain and pfizer to complete the experience.
Have to disagree here. Cloud apps (in a form of web apps) demand more CPU performance, not less! Apart from specialized apps that really do a lot of computing (rendering, modelling, model-training) that can easily be done in cloud, most apps are slower (or functionally constrained) if they're moved to cloud and used as web app. Think Office 365 suite - every app of the suite is either slower as web app, or functionally constrained.

For me personally, web apps only got fast when I got a computer with M1 processor.
This was my strategy for some time, but I switched to using a proper password manager (Bitwarden). If your algorithm is discovered you're in as much trouble as if you used the same password across multiple sites.
Would we call that thin value betting on the river?
Using GitHub as a CMS
A data breach at your bank, insurance company, etc. allows for much more targeted phishing attacks.

I get calls from “Visa and Mastercard customer service” because they don’t know which one I have and are playing the numbers game. “Hi Mr. ceejayoz, I’m calling from Chase about account x2093” with Chase’s 1-800 spoofed on caller ID will catch a lot more people.
> One suitable option is to memorize an algorithm as a password:

You lost 99% of people here.
Yes, I was working for a company making standalone car navigation devices (remember those?), amongst other GPS-related things - I also worked on a lot of OEM GPS receivers. There was even a guy (not me!) who had written the firmware for a GPS receiver basically from scratch, so I got a look at everything from the very low level up to the navigation UI.

At this point the iPhone hadn’t come out yet, but building data was just starting to show up the maps we used for navigation.
Does he have millions though?

I'd assume someone who has millions could live a comfortable life away from the spotlight instead of trying to perpetuate an easily-debunked fraud.
After suffering for years with Apache in the late 90s and early 2000s NginX was nothing less than a revelation. Thank you so much Igor.
They are trying to do some improvements to make it partially work in private tabs. If I understood correctly, there will still be some issues until they refactor the whole extension for Manifest V3 (deadline is Jan/2023).

https://github.com/bitwarden/browser/pull/2121#issuecomment-...
I’m surprised to hear this — living in Sydney, I don’t recall ever seeing any. Where do you find them?

(There’s a smallish bunya-bunya near my house, but I don’t think I’ll try gathering nuts from there myself…)
I have setup firefox to drop all cookies when closing and whitelisted a few websites I still need to bear cookies.

Upon using the above link, I ended up on a paywall. I hit F12 and check the creation date of all the cookies and confirm they had all been created the 19th (today, and incidentally had just woken up and turned on the computer). I refresh the website, still paywall.

I delete all cookies manually for that page, hit refresh and can read the whole article. I don't understand how this is possible.
> No currency in the history of the world has survived in the long run.

The pound sterling has been running since 1489. https://corporatefinanceinstitute.com/resources/knowledge/fi...
I use Czkawka recently for dupes (it has GUI and well-maintained): https://github.com/qarmin/czkawka
Practically every guardian piece depresses me, every subject they write about has to be twisted somehow to infer systemic this or that, even when not actually relevant. It's a shame really because like others commented here I think their investigative pieces would be good otherwise, they just ruin everything.
I can't think of any legitimate purpose for an endpoint to expose its secrets, even if behind authentication.
Since Chiang Kai-shek the U.S. and Taiwan have, at various times, considered Taiwan’s Government the true government of China, the civil war as still ongoing, and have had a one China policy. It seems that the CCP will be no more willing to give up claim to Taiwan than the U.S. would be willing to give up claim to Hawaii. Reclaiming Taiwan would overcome the last remaining visible humiliation China suffered during the age of colonialism. It seems war is inevitable though what form that war takes remains to be seen.
AMD hides 2020 blogpost claiming 4GB VRAM is ‘not enough for today’s games
Nobody will care until there are real monetary penalties for data breaches. The GDPR technically mandates those but it has a major enforcement problem.
It's not just the start-up and shut-down costs. A CGI process might need to attain connections to databases or other resources that could be pooled and re-used if the process didn't completely terminate.

You might want to look at using FastCGI:

https://en.wikipedia.org/wiki/FastCGI

Basically, the CGI processes stay alive and the servers supporting FastCGI ( like Apache and nginx ) communicate with an existing FastCGI process that's waiting for more work, if available.
> Which government? Is that some hypothesised World Government?

I meant the US government. But you can insert lots of other governments in there, including the UK like you mentioned.

> There's no time left for this kind of dreaming.

Nobody's dreaming. I'm just talking about the feasibility, not claiming anything about the likelihood.
One of the pleasures of using Lisp for a game is not necessarily needing to add such UIs, or anything else special, to achieve interactive changes; you just change the code and recompile while it's running and see the differences. Unhandled bad bug throws you into the debugger? Debugger doesn't unwind the stack, just pauses the thread. You can inspect stuff, there might be relevant pre-made resolutions you can choose from (restarts) and continue, or you can fix things up however and recompile, and resume at any point in the call stack.

But fully fleshed out debug UIs are cool and useful in the large. There's a guy who's been integrating a bunch of C++ stuff including Dear ImGui into a Lisp engine, see: https://twitter.com/borodust/status/1443647135765962763 and https://twitter.com/borodust/status/1446569651236921346
Because the real Satoshi might be dead and took the keys with him to grave. I, to this day don't understand why it's not obvious why Satoshi has not done anything public for over 10 years.

https://en.wikipedia.org/wiki/Dave_Kleiman

Craig knew Dave, knows the coins are so close to his reach but he will never get to them.
How fo you turn gallium oxide back into gallium?

Hiw do you separate it from carbon or from indium?
> In this article, I’ll cover the reason why containers are slow to start - particularly on Kubernetes, then take you through our research and development that ultimately led to not needing cold-starts, or not needing to see them in OpenFaaS. There’ll be plenty of links and resources if you want to go deeper, and a FAQ towards the end.

Disclosure: I'm the maintainer of OpenFaaS, but also cover other frameworks and cloud functions (which I think are great for convenience btw).
Here’s a video of Craig Wright being called out by an actual expert and it’s hilarious https://youtu.be/0thnCDgRJfM. He clearly has no clue how ECDSA signatures work.
I appreciate the caveat of "morphologically", otherwise chicken would of made that list, as would of the entire avian population.

https://www.edenproject.com/learn/eden-at-home/a-guide-to-pr... has a nice list of plants of the era and "Black peppers" seems to be one that ticks the box's and not upon the list.
> HAProxy is able to keep a connection queue and feed a maximum of (for example) 4 concurrent requests to the backend(s), thus providing back-pressure to incoming requests.

NGINX can do this as well, either with the "max_conns" parameter for upstreams, or (trickier, but perhaps more effective when the upstream is async) in combination with rate limiting:

limit_req_zone $server_name zone=root:10m rate=100r/s;
limit_req_status 429;

location / {
limit_req zone=root burst=100 delay=4;
}
Yes, all other "cryptos" are just products developed by companies who place themselves at the top of the pyramid.

This is one of the key properties that makes Bitcoin so important. There is no company that administrates over it. There is no CEO.

It's just a protocol.

Roughly 12k computers run this protocol around the world, helping to enforce the consensus rules which have been incredibly resilient to change over the last 13 years, despite numerous attempts.

It's this immutability of consensus on a decentralised network that makes Bitcoin (the token) so valuable.
My own preferred theory as a layman is that Wright is Satoshi and has lost the keys.
Thanks, i will look it up! Thank you! :)
I'm going to argue against you. The airline industry does have a culture that encourages even the slightest incidents to be reported, analysed, and protected against in the future. There are multiple youtube channels (Mentour, VAS aviation for example) that collect large numbers of these and present/explain them very well. That this particular incident was swept under the carpet until someone else noticed it would be shocking to a western pilot or controller. In fact, it seems from the article that it was shocking to the person who did discover it.
Well, is it to defend against small, irrelevant third-world countries with a handful of nukes with barely functioning delivery systems, or is it to defend against large, serious places with serious arsenals? Because these are two very different goals.

If North Korea is a bad example for a thought experiment, then you should pick a better example.

As for China - surely the U.S. and China could come to a mutual agreement to reduce their nuclear arsenals?

It might be worth noting here that China's "rapidly expanding" arsenal clocks in at 350 warheads, while the U.S. has only a meagre 6,185 (barely 17x the size). If America is concerned about large nuclear arsenals, surely they could take the first step or three?

> A "no first use" policy is worth less than the paper it would be printed on.

In that case, its decision seems even stranger.
I don't understand the objective for these scammers. Surely someone who buys a hardware wallet knows at least a little bit about security and would thus be a very bad mark for a scam?
This is completely one sided. You also have to look at the future damage on the other side. The 2nd and 3rd and more order societal cost of jailing someone, etc.
Hurricane Katrina was quite recent, it devastated a major American city and had all sorts of bad effects in lots of places, people have an intuitive understanding of how big Hurricane Katrina was - be aware of course that intuitive understandings are not precise.
Of course it is, it's called "plea bargain" - defendants choose between pleading guilty for a pre-arranged punishment or the DA putting up a boatload of charges with the expected punishment excessively above the plea deal [1].

[1]: https://innocenceproject.org/guilty-pleas-on-the-rise-crimin...