skysight-inc/HackerNews huggingface dataset:
Anybody that peddles you an absolute safety in IT security is an idiot who should be swiftly ignored. If they work for you, fired and all their work thoroughly reviewed.

The flip side of that argument is just as true: Anybody that denigrates a security measure because they can come up with a single convoluted compromise is an idiot. I'm hoping that's not you, it sounds like you're saying that some hypothetical strawman developer would say such a thing (Sounds like a particularly plausible strawman to me... a sad state of affairs!) – but that's the defense if you meet such dangerous idiots.

With this proposal, there's a key involved, which is some extremely limited defense against evil maids. If it's truly a key as in 'keys in doors', you can pick it, trivially (see Lockpicking Lawyer's video stream for how trivial it is to pick or otherwise circumvent locks).

A well thought through system can fix many of these warts - in this case all you need is an unresettable flag that shows: Compromised! Designing a lock that can detect but not defend against picking is a lot easier than making an unpickable lock. But I'm sure LPL or somebody else with skills, experience, lots of time, and a budget to buy a bunch and open em up to look at how they work can come up with a scheme to pick em open without triggering the flag.

You could also make it a digital key (or a combination even).

Point is, pre-supposing a well-tested design with input from experts is mostly just begging the question: If I had that, we might as well posit 'Let us assume no bugs in any firmware implementations of stuff'. And for an encore, let's posit "world peace", about as useful.

It's all swiss cheese: _EVERYTHING_ has holes. Nothing is perfect. But, layer enough slices of swiss cheese on a slice of bread and pretty soon no bread is visible. A physical key rather obviously covers precisely those holes that schemes involving entirely digital and remote-accessible setups have. Thus it is a great idea, and the fact that an evil maid can attack it indicates someone either doesn't understand the fundamentals of security (they don't get that it's all imperfect, and combining to cover the gaps is almost always the winning move), or is intentionally coming up with pithy oversimplified toss to cheerlead their product or pet preference.
I don't drink but I honestly would much rather start drinking than have kids.

I think it was Schopenhauer that said love is nature's way of tricking people into taking on the responsibility of having children.
Red Hat's answer to (now SuSe's) k3s?
It gets weird as an expat. I can’t get a realID because I don’t have an address in my “resident” state (the one I file a tax return in every year). When I visit and use my old drivers license people tell me it’s fake. So I go and come back with my passport. They’ve never seen one of those before, so they start to get cagey. I ask if my sharing my old military id that is expired might help them believe I am who I say I am and that I was born on X date. Sure, they say. But it’s expired so they don’t care. We return 20 minutes later with a friend who can buy the alcohol.

Voting is looking like it’s getting even more convoluted for the next election. In all, I feel less and less like my home country even wants me to come back eventually.
We're not building enough housing.

Every other reason for why housing prices are climbing so much is at best a `yes-and`.

Housing starts per capital have been trending slightly downward since the 60's. Recessions have cut house construction harder, deeper, and for longer than in the past. The net result is an increase in prices, except after 2008. Housing construction was tanked to the lowest amount on record and has taken 10+ years to get back to historic levels. We're missing 10 years of housing construction at a national scale.

The is exacerbated in major cities which have severely restriction new housing construction both by imposing direct housing caps and onerous new construction taxes, and indirectly by changing the building code. California requires housing to have solar panels, that is a $15000 cost that new buyers must pay that older owners don't have to pay. LA wants to ban wood construction, the most accessible, carbon neutral housing construction option out there.

If you want housing to be affordable, you need to increase housing production by 50% and keep it there for years.
> Why is `Html.Attributes.style` and `HTML.text` repeated so many times

Because it is constructor.

Html.text "STRING"

constructs a HTML text element from "STRING".

But because of

import Html exposing (br, button, div, p, text, h3, a)
import Html.Attributes exposing (style, href)

the `HTML` and `Html.Attributes` prefixes are actually not needed and not used in the lower part (in the `view` function).

> what else could it be

For example an attribute like the `id`, or a class name or ...
Yes, Ok, it actually can't be in the second array, the first array is for the attributes and the second one for the child elements.

To be honest, the differences between Clojurescript with Reagent, Elm or PureScript with Halogon / React are minimal for me.
Fear and Panic as Bitcoin Crashes 50% from All Time High
(1) All of these practices depend on cultivating virtues that are contradictory to industrialization/capitalization: just as lyric poetry is.

(2) It is intriguing to consider commercial music as an industrial utilization of lyric poetry, but the point is that the individual activity of lyric poetry is not amenable to industrialization IN ITSELF, but it still exists. But perhaps this example doesn't work -- the really important argument is above, namely, that the cultivation of these practices -- astrology, dousing, etc, is individuated, and oriented around virtues directly opposed to their mass utilization.

(3) As other commentators have noticed, we also don't know that these sciences aren't used on a mass technological/industrial fashion --- it seems likely, for instance, that there are corporate entities that use i ching divination, and likely, too, that there are financial firms that utilize astrological methods -- but wouldn't reveal this because of the likely opprobrium from a still dominant (if clearly declining) orthodox materialism...
I was hoping that the ants were somehow milling food, perhaps using small rocks and sand (or a mutualistic relationship) over time to break it down. If a valuable food source was locked up and could only be accessed this way, I can certainly imagine an ant colony evolving to mill it somehow. They already farm fungus and aphids. I predict a new kind of ant mill will be discovered!
What do you drink in the evening in order to stay hydrated instead (i.e. plain water, iced tea, soda)? I tried kombucha for a short period but started experiencing joint pain (which miraculously vanished when I stopped drinking that.)
> Wouldn't you agree that if enough people choose to stay in Bitcoin instead of simply buying for cheap and selling at higher price, the structure will stop resembling a ponzi scheme?

Wouldn't you agree that if enough people keep their flower bulbs instead of simply buying for cheap and selling at a higher price, the structure will stop resembling a ponzi scheme?

Your statement boils down to: Yes, but.. what if... we don't TREAT it as a ponzi scheme? See! Now it isn't a ponzi scheme!

Yes. And IF only the moon was made of cheese, then the moon would be made of cheese.
Disappointed the 500 error I got wasn't a blue screen of death.
I had to convert. That equals an inch and a half. I’m pretty sure I’ve seen ants scurrying around that fast. May depend on which type of ants.

Alternatively - could an ant run a meter in 25 seconds? Seems reasonable.

A quick Google search shows some can go upwards of 800mm/sec but they’re outliers. https://www.sciencealert.com/world-s-fastest-ants-clock-855-...

Btw - I appreciate that you took the time to check the numbers yourself. Very few people do the math on their own first.
A thin one with gaping holes and a pile of corpses beneath it.
Yeah, 486's with 16MB RAM were our default X terminals at the time, and it worked quite well.
Oh I’m not suggesting to avoid gov funding research. I’d just rather see that money go to academics, gov labs, and startups rather than a multinational who has raped the Earth for decades, and helped (helps?) fund climate denial. For those companies, I’d suggest forcing them to subsidize the research rather than the public subsidize them.

No to privatizing profits while socializing loses.
Not necessarily: maybe the faster you go, the sooner AIs will replace developers or low-code tools will get rid of juniors. Or maybe the market will physiologically contract because we though it would expand more than it will in reality. In all these three cases, and probably more that I can't imagine at the moment, the zero sum game would be real and would hit us hard.
This reads more like something fairly specific to the product side of Silicon Valley, than it does to the general needs out in the world, or the operational security community.

The last thing I would ever want is someone fresh out of college doing cryptographic work.
We should respect people questioning science as long as they are doing it in good faith and are showing willingness to learn. We should even respect flat earthers and climate change deniers. They improve rigour and identify blindspots.
This stuff is scary when you think it could be used in Putin-style assassinations.
> GROUP BY 1, 2, 3

It is not ANSI SQL.

Nevertheless, it is already available in ClickHouse as well under `enable_positional_arguments` setting and we are considering making it enabled by default.
No issues, but my needs are not demanding at all. 98% of the touch interaction is just turning pages, it spends very little time without a book open.
Correction: I thought this was script to solve Wordle puzzles, so I provided a cheat helper below. At first blush, I thought the idea was for the human to feed this script information back from Wordle so it could improve its guesses. Sigh

Also, you really need better names for your methods and variables, starting with this bit here: https://github.com/KevinXuxuxu/wordle_machine/blob/64a8534ad...

As you think about a better way to name those, you will realize it is possible to do this in a much less convoluted way.

Hmmm, I have been using this Perl script:

#!/usr/bin/env perl

use strict;
use warnings;

use feature 'say';

my @words = grep # Add conditions below
!/^[A-Z]/,
grep length == 5,
map split, do { local $/; <> };

say for @words

Invoke it from the command line with your word list. I've been lazy, so I use `./wg /usr/share/dict/words` which means way more options than a more tailored word list would give which means I am only cheating a little. So, for example, I type "amber" as my first move and I am told "e" is in the wrong spot and none of the other letters match, I update the selection using that information:

my @words = grep # Add conditions below
!/^...e/ &&
/e/ &&
!/[ambr]/ &&
!/^[A-Z]/,
grep length == 5,
map split, do { local $/; <> };
Agreed. I don't even want Kubernetes at work.
If they're not amoral, they are morally evil, since they have repeatedly tried to cover up global warming, oil spills, and have many many other sins to their name.
Notes re: distributed temporal Data Locality, package mirroring, and CAS such as IPFS:
"Draft PEP: PyPI cost solutions: CI, mirrors, containers, and caching to scale" (2020)
https://groups.google.com/g/pypa-dev/c/Pdnoi8UeFZ8
https://discuss.python.org/t/draft-pep-pypi-cost-solutions-c...

apt-transport-ipfs:
https://github.com/JaquerEspeis/apt-transport-ipfs

Gx:
https://github.com/whyrusleeping/gx

IPFS: https://wiki.archlinux.org/title/InterPlanetary_File_System
What do you mean by “banned” (as opposed to just taken down from their video channel)?

BTW, YouTube title says “TED TALK”; note that it’s TEDx.
OP here. Sure I suck at buying laptops (the Acer Nitro isn't bad though). In the bad old days, you used to simply look at the frequency and it would pretty much tell you the performance, and at the time I bought the A10-9600p laptop I did exactly that. I have learned since then that the simple approach to buying anything with a multi-core CPU doesn't work like it did a decade ago. Some of us are slow learners!
Then why is Shell Canada's operating profit margin hitting 29%?

[0] https://reports.shell.com/tax-contribution-report/2018/our-t...
£99 for a 800x600 monitor is exactly what I mean when I say eink is price prohibitive and not worth it.
I'm aware of that but my examples are not in the US.
So a judge preventing a free market outcome (employers competing for talent and inducing medical staff to join a competitor presumably due to higher comp) is somehow a result of capitalism/free market?

I don't think you'll win too many people over to the collectivist side with incoherent points like the above.
Anyone who owns copyright on part of the infringed code should be able to. International seems like a pain, they're a Chinese company, I think? Should be able to at least block import if you try hard enough.

I'm not a lawyer though.
The machines are all on separate vlans. Only a few of them can talk to each other at a time. There isn't a huge amount of benefit there.
A 486 can handle X just fine. 486's were our main X11 desktop machines at the office in the mid 90's (it has been the year of Linux on the desktop for me since 1995). The challenge is more that most modern X clients won't play well with a slow, memory constrained machine.
> wtf is openshift-dns

I think one thing I'm definitely missing from the OpenShift docs [1] is reasoning. What does it add? Why do I want to learn to use an operator instead? Otherwise, it's pretty clear that it's just an operator on top of CoreDNS.

I do think that the docs are utterly devoid of Kubernetes content. I think historically, RH tried to differentiate themselves from K8s. Now, it can definitely hurt the knowledge migration and transfer.

[1] https://docs.openshift.com/container-platform/4.8/networking...
Pydantic
Java Development Kit 18: The New Features
I went through elimination diets that included periods of no meat. About 2 weeks into it I’ll start seeing lower reaction speeds, the games are very sensitive to changes so it shows up there first, much later I’d see lower T3 and Free Test. I immediately feel much more vital after I break the no meat periods with a big stake.
Just like how most people think we always worked 40 hours per week throughout human history.
Obvious question then: what are the arguments/forces opposing this? Just inertia in the publishing norms?
That I can relate to. For us, there's only one dev team which uses HTTP2 (financial industry, so HTTP2 is still seen as "new = beta") and encountered that problem. I have no idea how they solved it though.
this is similar to a kind of subject and object confusion:

subject: most reasonable people

object: psi phenomena

verbs: to believe, to exist

The full statement can be stated in at least two ways:

"[ these people ] don't believe that [ these phenomena ] exist."

"[ these people ] believe that [ these phenomena ] don't exist."

Either one is valid, as are the contracted versions, but the first one describes the absence of belief in existence, and the second describes the presence of a belief in non-existence.

These are closely related things, but not identical, and I imagine the author likely chose carefully.
Considering how sheepish parent is being and how carefully they are saying it, seems likely that they're hiring people outside the US where market rates are significantly lower and trying to feel proud of themselves for paying some few peanuts extra.
Do they really go down without a recession though? Feels like just the rate of appreciation will decrease or go to zero, but not negative...
They reported the 160mb as uncompressed (and probably unstripped?) size. If you compress that it will be aroudn 50mb, still more than your 3mb xz example but at least you're now comparing apples to apples
I'm finding 4" displays for $36 and 7" for under $70.

https://www.amazon.com/Ingcool-4-2inch-Display-Module-Resolu...

https://www.amazon.com/waveshare-7-5inch-HAT-Raspberry-Consu...

For a 4x16 LCD, the 2" displays are probably most comparable, and are in the same price-range as the equivalent LCD (about $8--$12).

https://www.amazon.com/HiLetgo-Backlight-Display-Arduino-MEG...

2" e-ink multi-colour displays with far higher resolution ... are about $20.

https://www.amazon.com/2-13inch-HAT-Raspberry-Three-Color-In...

I'm no fan of E-ink's patent monopoly, but you're being ever so slightly disingenous / unreasonable here.
Whilst it becomes political now, lab accidents and lab protection even for known risk is still happened. If you study something intensively and it will leak out with more probabilities.
I agree that LaTeX is much more pleasant to work with, and I’d rather use it than Word.

However I still have “Proficient with Microsoft Office" on my CV (along with LaTeX) because companies expect it, and I’ll be forced to use it. I often write reports in Word, not because I prefer it over LaTeX, but because it’s mandated by the company.
Living super frugally and saving most of the paycheck (I save 81% of my pre-tax salary, 96% post-tax) will allow me to retire very quickly. Otherwise, I don't think I'd be able to do it, I'd rather do something radical like becoming a pirate, than spend 30+ years in the software engineering industry. I'm on my 9th company and I haven't yet had a job that I didn't want to quit after 6 months (and usually, much sooner).
Cached from Google:

https://webcache.googleusercontent.com/search?q=cache:bU7J5R...
I would agree but I doubt the intended audience is "most people in the [infosec] industry" because the skillset of those folks, particularly experienced ones, is quite lumpy but has an area under the curve that is substantially greater than what is included here.

I think his target audience is new folks that are conceptually interested in moving into the domain. They don't know where where to start, largely because there is little regularity in how the incumbents got there. You've got folks with a degree and 15 years of systems engineering experience trying to figure out how to parlay an advanced skillset into the domain and teenagers speaking at security conferences.

That said, it's definitely not necessary to have all of the skills mentioned in the article. There are a lot of efforts, including articles like this, to help pave a yellow brick road to the industry. Until then, for better but mostly worse, it selects for those that have faith they can get there and the tenacity to try until they succeed.
It also implies the other spouse (usually father), shouldn't be an equal active co-parent and have autonomy over where the money for the child goes, and it goes only to the other parent.

Maybe in a few decades we will recognize that you should incentivize both parents to be active in the child's life.
You can't do this here. We've banned the account. Please don't create accounts to break HN's rules with.

https://news.ycombinator.com/newsguidelines.html
This is a simpler and more coherent theory that also has more explanatory power
Ask HN: What is the best piece of advice someone has told you?
Encouraging me to keep asking "why does work the way it does" was a big one for me.
Also how did it impact what you have done?
Next time, use example.com for a placeholder domain.
AdaBoost, etc. were invented precisely to make good use of weak predictors.
> Wouldn't you agree that if enough people keep their flower bulbs instead of simply buying for cheap and selling at a higher price, the structure will stop resembling a ponzi scheme?

I agree, that's how we have gold as a value store. However flower bulbs are not durable like gold and can grow exponentially on supply through farming - no surprise we don't store value in flower bulbs today. Bitcoin doesn't suffer from these issues.
The way the capture guys argue is that if you have a plant that captures 50% of carbon emissions, then you run it on >50% renewable fuel, and it ends up carbon neutral or negative.
I said it was a crazy wild guess :p
Reminds me of the turkey's circling a dead cat video:

https://www.youtube.com/watch?v=Ns5MA69MXuE
> We should even respect flat earthers

You lost me here. Basic literacy is a requirement for any fruitful debate
The torture is inversely proportionnal to the restricted volume of the aquarium, so let's simply forbid any fish pet (and most pets too)
I don't think I agree. Complexity is the enemy of security, but it's rarely the primary focus. Not least because you often can't do anything about it, and you frequently have to add complexity to solve infosec issues.

If it's ultimately anything, it's the management of risk.
The details aren't important. You just need to know the narrative: "Amazon = bad because capitalism = bad."
> I can confidently say at least 90% of the people I worked with in infosec over the years did not know what "algorithmic complexity" is.

This article's definition of algorithmic complexity is basically - indef loops make computer go brrr.

I wouldn't expect an infosec person to neccesarily know how to analyze a complex algorithm. Knowing that different solutions have differing costs and deferring to subject matter experts as to what costs are reasonable is something i expect a good infosec person to know, and seems more to be what this article is talking about.

Edit: i guess infosec is a large category. On reflection there are areas where this would be irrelavent. There are definitely areas where it is really important.
The Stirrup Theory is the kind of nonsense I'd buy when I was 11 and believed in Civilization 2's technology tree.

There's a thousand years of highly effective heavy cavalry predating the purported introduction of stirrups to Europe, for one thing. For another, the supposed military revolution around mounted knights is far messier than the just-so story that is packaged. The chronological correlation between archeological finds of metal stirrups and the development of the feudal knight isn't even very strong.
I mostly agree.

Let’s also consider cost of living here vs the US, and average pay.
For example, I live in north Italy and i currently earn 60k euro yearly, which is 2.5x the average italian paycheck of 27k.

I also have a 10% bonus, which is something most companies outside of IT simply do not offer in Italy.

I think doctors average pay is around 60-70k for comparison with highly paying jobs…
Framework vs. Apple
underrated comment!
I do try to use a few more colours, but black is my default "I can't be bothered to think about clothes today" colour... But absolutely for buying identical sets. I'm never ever again just buying one of something when I find something I really like, because I hate shopping for clothes, so whenever I decide I like something I go back and buy several more.
The amount of popups and overlays on this webpage is out of control to a degrees that I simply left before ever getting to the content.
It seems surprising these can happen in nature... There is an efficient no-communication no-memory-required way out of such a cycle...

If the feet of every ant slightly smell of 'ant was here', then when that smell gets too strong the ants should stop following one another and walk towards that scent being less strong.

Such an 'algorithm' could easily evolve. It uses the same scent and pheromone communication used by ants for lots of other tasks, and there is a strong evolutionary push towards colonies who can escape such spirals.
I'm curious how often this leads to mass death. I suspect that there is some escape from this, or else conditions leading to an ant mill are extremely rare, because it seems evolutionarily expensive. On the other hand nature is profligate with life, and especially bugs. For example perhaps once exhausted to a certain point, the pheromone scent changes to one that signals not to follow.
Indeed. In the choice between punishing a corporation and solving the problem, we should pick solving the problem.
Yes, as of a few days ago.