skysight-inc/HackerNews huggingface dataset:
Anyone along the route between LE and chase.com can possibly get a certificate from LE. For example, if you have access to a chase.com firewall or load balancer and can redirect traffic for a minute you could get a DV certificate.

The thing is, TLS certificates are a "weakest link" system. Even if chase.com is buying EV certificates, a bad actor can still get a DV certificate. You can mitigate that a bit by using a CAA record in DNS, but AFAIK there's no way to specify anything like a policy identifier (which indicates the type of certificate) in a CAA record. The best you get is the ability to limit issuance to a specific issuer.

There could be _some_ value to using a CA like DigiCert if you use a CAA record that limits certificate issuance to them only. Since they don't offer DV certificates you reduce the risk of a MITM using HTTP to get a DV certificate for your domain. You'd also want to reconcile every certificate issued to make sure they're legitimate requests.
In case anyone is still reading this:

I just received an email from the sender name of "L0an C0nfirmati0n" with a subject of "**_ C0nfirm Y0ur Request: $9,525 L0an °®° ..."

There are images which by default are not displayed, Gmail thinks it's in French and is offering to translate the message.

The visible message says ".time is running out - get your $10k"

How the F is that not recognized as spam? Beats me…
This is available in iOS - but for whatever reason, on devices outside of China, you are only allowed to disable use of cellular data (not WiFi).

This is also available in some Android skins (OxygenOS is one, for example) - but it is not in AOSP.
That's some good news (though it looks like you linked to another github issue), but my real-world experience unfortunately stands in stark contrast to your claims. I don't know who to trust, my senses or your words. Previous version is noticeably snappier still.

Will you add support for increased contrast again? (it was removed in v8, and was one of the many regressions that made me effectively give up on 1Password)
I see a lot of comments here reduce the argument to “Ads are bad” . . . Well, Remember that ad-supported business models have underwritten the vast majority of technology R&D and improvements over the past two decades. Yes, including Apple. Hardware devices would never have the utility they do at present without large scale, low margin, high throughput ad models that benefit developers building insanely complex systems around said hardware.

The whole advancement in AI we’re seeing today would never have been accelerated the way it has been this past decade without the monetization models of the present internet.

It is a fine balance to strike where we don’t want to kill off the model that works so well, for fear of parts of it.

The alternative monetization models are things that many people here would despise much more:
- More closed-source , paid services , apps, devices that are more expensive without the scale of ad supported models
- Smaller (and arguably harder to oversee) spin offs of major ad supported services.
- etc
At least on the Mac, it seems to use the secure clipboard so it’s not in view of other apps, but I may be wrong.
strategies I've used, with emphasis on derisking primary fear:

* decompose risk into small incremental steps, e.g., code the smallest dumbest thing possible in some new language, write a post about a problem instead of launching right into startup, etc.

* add bigger fear that forces you past other fear -- e.g., added juggling to some public talks for a while after feeling nervous about prep -- even if dropped a ball on-stage, talk was easy

* practice, practice, practice -- e.g., practice pitch every day and iterate it

* plan the next step -- ok, next i will, so response becomes automatic

* make it harder -- building a rocket to moon -- nah, building a rocket to fix James Webb if it breaks -- usually opens up fresh ideas

* sleep & other self-care

* breathe
This is generally correct, but your final analysis is slightly wrong and this is a perfect example of why Perl can be difficult to parse.

If you add a 1 to the end of the "f/1;#/+" line, so that it becomes "f/1;#/+1", the code will become correct.

What's actually happening is that on Fridays, the "f/1;#/+" line means "call f, divide the result by 1, and throw away the result", followed by a comment. On any other day, it means "call f with the regex parameter /1;#/ and add an unspecified parameter to it". Since the right hand side of the + operator isn't specified, it is syntactically incorrect.
Only if you go in for a hidden-variable theory, which is absolutely cool but means you have to give up a lot of properties you'd really expect the universe to have
Britain went from head to tail :)

The US in spite of its tall claim of being a melting pot is essentially a white christian Anglo-Saxon country.

It is a Britains own lebensraum, perhaps not including the old aristocrats.
Afaik synthetic diamonds are nowhere nearly as expensive as natural ones. Diamonds are just carbon after all.
> India should just add us style property taxes instead

How's giving the government more money going to solve anything?
Astronauts in Europe ask for their own independent crew spacecraft
Dress Woven from Plastic Bags
Thanks! Let us know if you have any questions / want to discuss anything while you're testing it out.
CISA: Russian state-sponsored cyber actors target defense contractor networks
> While the reliability and 24-hour availability of power from a reactor is part of their appeal, the fact that the plants cannot easily be shut down and restarted means that they sometimes operate at a loss when there is ample supply on the market. That, he said, makes the DOE support program one of the only ways to keep some nuclear plants online as a carbon-free resource.

This is an interesting economic quirk I hadn’t thought about.

Solar energy is inherently variable as the sun rises and sets but also with weather changes. Nuclear is the opposite of variable, as it can’t be turned up or down quickly. Energy storage continues to be one of the big gaps in our clean energy strategy.
Solar is safe, cheap fusion at a distance. Nuclear is expensive, continually mismanaged local fission. Batteries are short duration fusion buffers. Batteries will be needed for EVs as well, so cost will continue to decline as manufacturing learning and capacity scales up. Enough sunlight hits the Earth every 30 minutes to power humanity’s energy needs for a year.

Keep existing nuclear plants running for as long as safely possible, for sure, but stop throwing good money after bad with new generators. Build batteries (including pumped hydro where able), renewables, and transmission. Throw in some demand response or load shifting for loads that can tolerate being scheduled around renewables production (Google does this for compute using ElectricityMap.org, and Nest does demand response in aggregate as a revenue source, when utilities send a signal to shed AC load temporarily on peak consumption days versus firing up gas peakers).

https://www.lazard.com/perspective/levelized-cost-of-energy-...

Edit: (HN throttling, can’t reply)

@mrits: Telling people what they want doesn’t work. If they want cars (they do), you sell them EVs. You use your margin to build out a global EV charging network and battery factories. I don’t live in traffic, that’s a choice for others to make. The world is full of space batteries can be installed out of the way to meet net zero goals. There is no such thing as an ideal world, just nudges of consumers towards more positive macro outcomes.
I'm a big supporter of solar power, but in 60 years most installs will be garbage. Not only will the cells themselves be much lower efficiency, but the conversion electronics is also failure prone over the 20-30 year timespan. I'm waiting for the breathless reporting of the "Solar Garbage Disaster", and other non-News.
Looked at the Android part of it. Seems Google is trying it make it such that third party will lose access to these data but Google will still have it and now Google can say this is now privacy.

This sounds like a corporate/PR joke.
It seems to be a constant truism, and yes it's not consistently applied, (e.g war on drugs), but what are you suggesting here? Fairly sure by any reasonable measure of QUALY, COVID has been a bigger problem than any other public health crisis since AIDS.
P.J. O’Rourke Wrote with High, Cranky Style in a Shrinking Tradition
The problem is the permissions for bluetooth are lumped in with fine GPS location permissions.
Temporal Series B
All that stuff is poison. It comes from a good place but corporate uses it to promote people who should never ever be in a leadership position. Suddenly they get a platform for promoting gender issues instead of focusing on the product.
Hey! Thanks for submitting this whit537 !

A couple of days ago[0] I discovered WebSub and thought it was a very neat technology. After hearing some complaints about the existing providers (one incumbent and one legacy) I decided to make one with Elixir[1]! It's a pretty invisible service, but now many Wordpress users are using it to publish out updates to their blog, which is very neat. Let me know if you have any questions!

[0] - https://news.ycombinator.com/item?id=29868055
[1] - https://github.com/clone1018/WebSubHub
Why 60000? Do you mean both the CPU + the RAM and peripherals chips?
Yes, because i'm not pushing the political partisan talking points of a campaign that ended in 2016. You however are pushing political partisan talking points of a campaign that ended in 2020 (but will never go away because of a single man's ego).
In terms of not following patterns, the selected text turning transparent is another confusing choice
'We're committed to an open web - that's why we're teaming up with Disney, the company that locks all their content behind DRM.'
Wholly agree that the App Store itself can become better when sideloading comes to iPhone.

But here’s where I don’t quite agree with the author:

Sideloading doesn’t necessarily mean the platform would be any less secure than it is today. It could, if Apple were to do it exactly as macOS does it today, but that’s not the only –or even the most obvious– option.

Apple could still require the iOS sandbox to be in-place at all times, with no option to ever disable it (unlike on macOS where entering an admin password can let all hell break loose).

And notarization –which could also be enforced at all times– can include the exact same malware-scanning steps that App Store apps have to go through. In fact, that’s what it already does for macOS apps today:

> Notarization is a malware scanning service provided by Apple. Developers who want to distribute apps for macOS outside the App Store submit their apps for scanning as part of the distribution process. Apple scans this software for known malware and, if none is found, issues a Notarization ticket.

https://support.apple.com/guide/security/protecting-against-...
The House of Graphs
> Today, we’re announcing a multi-year initiative to build the Privacy Sandbox on Android, with the goal of introducing new, more private advertising solutions.

Translation from corporate-speak:

"Today, we’re announcing a multi-year initiative to build a sandbox on Android that makes complete unrestricted access to your data available only to Google, with the goal of introducing new advertising solutions that keep all those pesky third parties, like Facebook and TikTok, outside of Google's garden."

Calling it the "Privacy Sandbox" is... unintentionally Orwellian.
>but I think Mozilla should prioritize working on actual browser features to catch up with Chrome.

But how would that promote Mozilla's brand awareness while generating corporate synergy?
Weird, I thought it was a great article. One that actually gets better as it progresses. I don't see how it's fluffy at all.

In the first half, he is mainly referring to the current state of fine-arts, which is still in the grip of the "originality disease". It's a different way of describing a particularly outgrowth of modernism, the rejection of bourgeois values, which included conformity, propriety, and the existence of objective truth and beauty. The horrors of World War 1 were the turning point, how could something so grotesque arise in the pinnacle of civilization after all. The author mentions the influence of Freud's work, which absolutely demolished the collective psychic order, turning everybody into a neurotic.

Interesting too, is that he really highlights the self-absorption which underlies modern/contemporary "high" fine arts. That criticism is not new. The first real critical assault on modernism was in the seventies. However, it didn't stick, instead it turned ideals of bourgeois respectability into a form of pageantry. Think a critic like Tom Wolfe as an anachronistic dandy, or the weird Lego-classicism of postmodern skyscrapers. But the core of that criticism stands though: a half-century later, and we have still not overcome the absolute degeneration of artistic production.

I hope to see by the end of my lifetime that we have dug out of this hole, and art is unabashedly the pursuit of truth and beauty again. That will require artists and their patrons to stop navel-gazing though.
> Britain at its peak had colonised about 80% of the world

With the other 20% being Russia. And China apart from a few ports. And South America apart from Guiana. And Central America apart from Belize. And Mexico. And Greenland. And the entire rest of Europe.

I think your math is a bit off...
you just won the internet :D
Better to switch now than to have to redo this in 5 to 10 years when you get tired of wondering “what if I had changed”.

Seems like EE is more your thing.
All that pesky red tape preventing so called ‘disasters’ from ending so called ‘habitability of the planet’
n=33? main outcome measures just at, or not even meeting statistical significance. Meh.

It’s an interesting, but still open, question though.
Most of these problems are solved in Rails, too. If you want consistency, there are options for it. This is an article about two non-enterprise (aka, non-paid) options.
What I dislike now is that previously I could assume that anyone with the same interest had some form of passion for the craft, but now they’re swallowed up in a sea of people that are there -like you said- just for the money.

They still want to know enough to not get fired, but that’s where it ends.

I kind of feel it pulls the average down though, and it makes my work environment less ideal.
Agreed in perfect world, but unfortunately any process that involves humans will involve human error.

We do code review because we expect human error when the code was written by a human, but then we also expect not human error when the code is being read (reviewed) by a human? Any process that expects zero human error will always fail.

That's where linters add value: they allow devs to do what humans are good at (the creative complex and interesting stuff) while the bots do what bots are good at (the boring repetitive stuff)
That's fair. I just found it odd that they specifically called out Rust.
Mozilla died years ago. Sad to see what a zombie org it has become.
>because to have less that that reduces investment in venture capital and reduces the incentive to start buisnesses/do productive things with your money.

Seems like we came up with this solution after creating the problem.
I hid a $5k camera rig in Brooklyn
Many years ago I worked for a company where the CEO or maybe his wife were associated with the local United Way branch. We were asked to contribute our "fair share" to the United Way campaign. We got a day off or something like that but it was also made very clear that this was not actually optional.

And, yeah, to the other point, while I have subscriptions to various things it's not something I really want to do when I have a choice given that such things tend to be out of sight/out of mind.
I have used 1pass for years. I think I bought my lifetime license sometime in 2014? I loved it and even advocated for our 2000+ company to adopt it back in 2018.

I would say in the past 2-3 years it has slowly become an absolute nightmare. I do not recommend it to anyone anymore. They have somehow screwed up the very basic functionality of filling in passwords on any browser I try. They continue to shift features around, break existing workflows, and even the basic tasks I rely on dozens of times a day seems to change with any significant release.

1Password got famous for building a great core product. It managed my logins I stored myself and autofilled them wherever I needed. It was clean and simple. Now they are so focused on growth and Product features like this that they have completely lost their way. As of this week I can no longer right click on a webpage and work with 1pass to find something. If the webpage attached to the original 'save login' prompt is not the one you are on - the auto popup underneath the login field has nothing to show and I cannot manually find and enter it. I have to go to the Desktop app, search, find, and copy. My team regularly wastes minutes on this each day.

Our company reevaluates platforms every couple years, in the next 12-24 months I will strongly advocate we find an alternative.
Google is happy with most anything you do on the internet, as long as you do it in Chrome so they can watch.
Will this ever be safe enough to use as a hazardous waste disposal system? Can we just send the worst of the worst into the sun without too much risk of just spreading it out through the atmosphere in case of an explosion.
Consumer-grade telecoms and ISPs are primarily marketing operations. They care more about “engagement” than actually making money selling their service at a profit.
So.... Would this work to make a qmk usb usb converter device?

I mean something like Solder a type A port to the pi2040, hook up a usb kbd there and then connect rpi2040 to the pc?
usually, pagination like 1/5 are accompanied with arrows, text like next/previous/first/last and clicking on the '5' usually takes you to the page 5, not the next one
> Lorinda Cherry, author of dc, bc, eqn has died (ncwit.org)

https://ncwit.org/profile/lorinda-cherry/
A paywall does always mean luxury. It's spending money on things you don't need. If your friends have recent model iphones, that is also luxury. Apple is a luxury brand.
> The attitude of "there are no rules!" is espoused while artist after artist that produce music that we like are clearly following some type of ruleset, at least to some extent.

It's a craft, not a rigid system that you have to follow. What's called 'Rules' in music is more like patterns that have been found to sound good. For example, the famous 'Rule of the Octave' is a pattern based originally on playing thirds and sixths ("first inversion chords" if you want to phrase it that way) over a "walking" baseline. But the rule is far from fixed, and almost immediately the basic pattern using thirds and sixths was altered to use thirds and fifths ("root position chords") on the tonic and dominant degrees. Then the other chords were altered in turn, giving each bass scale degree a sonic identity of its own, with ascending and descending, major and minor varieties etc. Thus what literally started as a simple and basic rule has become incredibly complex. This just shows how a craft can evolve to become more interesting; rigid, foolproof rules cannot. And the "rule of the octave" is a tiny part of music as a whole (though it's pretty foundational, all things considered); but guess what, other "rules" work the exact same way!
rich people can do this the rest of us nope
iOS is more scary. They don’t give apps the permission, but make no such restrictions on their internal services for analytics/competitor research/private APIs

I’ve dug in much detail through what iOS makes available in the data takeout request on the Apple account level and I find it impossible to believe they include everything they have through iOS at the moment.
Given that this is a not uncommon mistake, despite the name, indicates that people make mistakes. They don't read. They're in a hurry. They see what they want to see.

The fix isn't to blame people for making mistakes. It's to figure out a design that doesn't allow this mistake to happen in the first place.

For example, the method could (today) require the second argument to be a keyword argument. This is also something a good linter should be able to warn on.

edit: rikatee and I wrote essentially the same reply at the same time. :-)
Adblock on mobile is a huge perf gain for me. Firefox is one of the few mobile browsers to support it without root on android.
> who is "us"?

People in the comment section of this forum where we are having an argument about this situation.

> In any case, I'm thankfully not in the situation to decide, nor am I an armchair general, so I'll have to excuse myself from invading or bombing Japan.

Seems like the simple way out.

> is only popular in the US

Its actually popular with everybody who has studied WW2 in detail. I'm European and I watch content by other Europeans who agree with the argument.

In terms of popular opinion, I don't think most nations think about it much at all.

> it exists mostly to enable them to retain their sense of being the good guys

I disagree. You can be the good guy without arguing that it was the better option for Japan.

> Other countries, unburdened by the necessity of always making the US look like the good guys, don't favor this particular narrative.

Its a simple matter of military strategy. Anybody that has studied military history can engaged in those arguments. Ending a war is difficult, and threw-out history we see different how they can end.

Looking at the strategic options at the time and doing the best you can at evaluating the potential casualties will lead you to the conclusion that you don't seem to like.

If you disagree with that assessment, then you have to make an argument for an alternative strategy that would have saved more people.

Argument like that could potentially be made. One might argue for example that going away from unconditional surrender, and trying to make some kind of deal where Japan could keep Korea or something like that could have been made.

But again, you actually have to make that argument if you want to be the a moral critic.
So, what happened was that in 2018 they changed the definition of vaccine from "innoculated bacterium/viral agent" to "any substance" (probably to make space for mRNA vaccines), and then changed the result from "that prevents disease" to "that generates antibodies".

Legally, a prophylactic seems to be the same as a vaccine, at least according to this definition from 2013: https://www.law.cornell.edu/definitions/uscode.php?width=840...
causing her to be memory holed

A single video changed from public to private does not a memory hole make.
> You have this the opposite way round to what's happening (and the description). It only compiles on a Friday, i.e. when the sub takes no arguments.

Isn't that what the parent said, going by your quote? They said "the following line [...] on fridays but on other days causes the interpreter to trigger a syntax error".
> Even without the social contract. First time I held someone in my arms I had visions of life long companionship

I would assume you were brought up in a modern cultural environment. That means your view of the world, your values, your expectations, your fantasies - are shaped by that upbringing.

So, your feelings are not good evidence that this is "programmed deep down inside of us".
Hold on. a C# and a Db are not the same note. They are a comma apart.

https://en.wikipedia.org/wiki/Comma_(music)
You could check syntax of the whole file (even the unreachable parts) with the -n option.

But that's not bulletproof; consider this code (adapted from <https://hal.archives-ouvertes.fr/hal-01513750/document>):

if [ $(date +%u) -eq 5 ]
then
alias maybe=''
else
alias maybe=:
fi
maybe for x in; do :; done

"sh -n" always reports syntax error, even thought the script syntax is correct on Fridays.