skysight-inc/HackerNews huggingface dataset:
"The Submerged World of the Arabian Gulf" (2019) 50 mins, Richard Cuttler

>The seabed around the world has proven to be an archaeological treasure trove, consistently yielding items that are rewriting history books and filling museums. The Arabian Gulf has one of the longest and richest seafaring traditions anywhere in the world. Prior to 8,000 years ago sea levels were considerably lower and the land to the north of the Emirates was an open and potentially fertile landscape. This landscape is an untapped resource, offering the prospect of not only ancient wrecks, but discoveries from the distant prehistoric submerged landscape of Abu Dhabi. This talk delves into the intricacies surrounding the Arabian Gulf as it relates its' position as an archaeological treasure.

https://www.youtube.com/watch?v=5eq-Jyb4bPw
Not to mention that we know excessive sun exposure to be associated with a variety of cancers.
Nowadays, I tell developers and product owners around me that cybersecurity is basically about 'doing IT well.' There tends to be this attitude at my $BIGCORP that its a box you tick or its something you do to get done - when in actuality its a way of living.

The majority of exploits take advantage of basic mistakes in configuration or code. Most of those issues are well understood, which is why you've seen this rise of detection tools and automation. Big hacks nowadays are necessarily a daisy-chain of exploits, because we're better at security at certain layers.

But overall, we're far from perfection. Solid configuration and code takes thought and planning - two luxuries rarely afforded to product teams when the business is screaming for release.
Indeed, it's not propaganda. I hear from my Indian friends that The Wire is a great outlet and trustworthy source.
> the pile of #include directives at the top of a C file is not copyrightable

That used to be the thought, but Google v. Oracle ended with de mininimis defenses struck down, and imports still copyrightable, just Google was afforded a fair use defense to copying.
You are replying to a thread that already contains 2 direct quotes from the author specifically discussing the benefits that the study did support.
The average US town has 6k people, so this is like relocating the population of 25 US towns to new, temporary housing.

Then you have to set up logistics to provide continual daily food and fuel to the new location for all those people. Then you have to relocate tanks which get about a mile per gallon of fuel, as well as people carriers, weapons, aircraft, missiles, ammo, field hospitals, blood and medical supplies, etc.

Armies rarely do "large scale exercises and maneuvers" precisely because they are so expensive.
When was that XKCD published (https://xkcd.com/1425/) ? Yeah, I remember seeing for the first time, I don't remember my reaction then. But now when I see it, I am stumped!
If you don't admit to vulnerabilities they don't exist, right?
But why not also serve the market that doesn't use their phone for anything useful.

My phone is way to huge to confirm banking logins, what essentially is it's only real job
I see a lot of opinions here that seem to want to a) blame the current administration, b) blame NATO for the current threat of war. That's like blaming the victim in an abusive relationship as nobody in the west wants war. What these opinions miss are the following relevant facts: 1. NATO has consistently pushed back on Ukraine's interest in joining NATO for fear of the geopolitical impacts, specifically Russia. 2. Ukraine has become steadily more European and less Russian in the last decade, and has slowly been falling away from Russia, both culturally and economically. This is Putin's last-ditch attempt to keep Ukraine in the Russian sphere of influence. It is destined to fail, because the Ukrainian people have started to move on, although there is a very large, aging contingent of former Soviet, pro-Russia people who don't like what has been happening from a cultural standpoint. However the best way to tell where a country is going is to ask the youth. They often speak English and would prefer to be a modern democracy. We in the US at least should continue to do what we've done for 70 years and work for democracy with all the tools at our reasonable disposal. The world largely moving to democracy did not happen by accident.
I did stop drinking for a month several times and definitely sleep better

I can always sleep anyway, but I feel like going to bed sooner, sleep well, and wake up earlier with less difficulty

Although like many said can't do without the hot bitter drink to start the day. So I still drink coffee similar alternatives without caffeine:

https://www.amazon.co.uk/s?k=barley+chicory+ground
The problem I have with this is it seems like you're arguing for might makes right. B is basically a bully and is making a choice for both parties then (B's way or war). Meanwhile I just don't want to be bullied or feel vulnerable to my bully neighbor.
“Everything” that is easy used to be hard, depending on your time scale.

I’m certain that COBOL programmers were raving about the ease with which you could program the computer back in the day.

The items on this list sort of happen within a career so an individual had to experience how hard it was before. It probably reads different to someone coding for 5 years vs 30 years.
Perhaps they are making amends after their missile test and it’s debris generating aftermath? https://www.nytimes.com/2021/11/10/science/china-debris-spac...
A Social Credit System Arrives in Canada
Literally everything the west said is happening before our eyes. Russia is mounting a false flag operation trying to find an "excuse" for war.

They were supposed to finish the "exercise" and instead they're adding troops. Will you "accept this as facts" when they march through the entire country or will that just be "an extended exercise". I understand it's hard to admit your own country is run by a power hungry dictator. Mine is too. It sucks.
PSA: Ponniyin Selvan originally serialized in the Kalki magazine had some nice artwork by "Maniam" to go with it. The only current edition that contains the text and the artwork as it was in the original magazine is the 5-volume set from "Vikatan Prasuram". This is the "collector's edition" to have and well worth the money - https://books.vikatan.com/book-details?bid=2175
”The gallium was easily recovered for reuse after the reaction, which yields 90% of the hydrogen that could theoretically be produced from reaction of all the aluminum in the composite.”

”Although gallium is not abundant and is relatively expensive, it can be recovered and reused multiple times without losing effectiveness, Singaram said.”
Do share
Why does Facebook own the project if "SimenB", a non-employee, is the sole approver of PRs?
>Wow. In the beginning I found the article interesting before (in my subjective eyes) it turned into a thinly veiled Anti-China propaganda piece.

Domain is .in, you didn't have to open it.
> Nonsmokers who avoided sun exposure had a life expectancy similar to smokers in the highest sun exposure group, indicating that avoidance of sun exposure is a risk factor for death of a similar magnitude as smoking.

And yes, while correlation isn't causality, it's very difficult to separate sunlight exposure from a healthy lifestyle. Since we don't know exact causality, the takeaway should be this: Get regular exercise and sun exposure if you want to live a longer, healthier life. The benefits far outweigh the risk of skin cancer.
Sort of. Works mechanically derived from copyrightable works are still copyrightable.
Since it's a common misconception: Value =/= cost.

Instead of asking your developers "how long would this take to do?", ask the business people, "how long can we spend on this without losing money on it?"

This changes discussions to become much more productive and informative for all parties. Often easier too!
IE support for JS/CSS has been massively simplified by not supporting IE any more.
The Court, the Executive, and anyone sufficiently close to tweak their or, or with a big enough pocket book to have a lobbyist's ear beg to differ. Hence, the concern whenever it appears Governments are flexing it a bit brazenly.
Yeah, I had never heard of XXE until now. Just looked into if PHP's DOMDocument does this by default and it seems like it's based on a configuration setting for the system (very PHP like...), though it looks like you can always run something like libxml_disable_entity_loader or pass in a flag to the load function to not have it do it.

This begs the questions: why is this the default? If you know you need it, you can be required to pass a flag to explicitly allow instead of having to disallow. I'm going to hope modern XML libraries handle this the opposite way and chalk this up to PHP being on the older side.
> It’s not required legally

That may or may not be correct in the USA, but the world has many jurisdictions with varying laws on copyright infringement, and cloud storage providers may be liable for copyright infringement claims.

Even limiting this to the USA, we had

- Metallica vs Napster (https://en.wikipedia.org/wiki/Metallica_v._Napster,_Inc.)

- A&M Records vs Napster (https://en.wikipedia.org/wiki/A%26M_Records,_Inc._v._Napster....)

Napster lost both cases.

So, if you run a cloud provider who permits file sharing, it seems there’s a decent change you’re liable for copyright infringement by your customers.

Also, https://www.jdsupra.com/legalnews/cloud-computing-a-brief-ov... says:

Therefore, Canadian copyright law is currently unclear on whether cloud storage providers may be shielded from liability for copyright infringement

⇒ If I were to run a cloud provider who permits file sharing, I think my legal team would strongly advise to scan files _shared_with_others_ for copyright infringement.

(In the ‘.DS_Store’ case, Google’s system seems to have some embarrassing false positives, but that’s a different issue)
> There is good evidence

Is there? How were the controls selected in that study? Were they from people who were called on the phone, meaning the controls were from a group of people willing to talk to strangers about something as as deeply personal as having a child die of SIDS?

In this study:
https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2351639/

The controls were visited by the same home-visiting nurse, and it found no correlation.
This is just a microwave but built with MOSFETs rather than a vintage 1940's era valve.

They avoid using the word microwave anywhere in the marketing material, which really is telling they're mostly trying to get rid of the 'low quality food' reputation that microwaves have.
Nonsesnse. That's a false equivalency.

Elites have power everywhere. True. But Russia is right now a dictatorship where the elite who kiss the ring of Putin are protected. The others get jailed or worse.

There's an inner circle that decides to go to war and can make that decision without congressional approval. They can mount false flag operations (as they are doing right now) and literally attack unprovoked against the interests of the Russian people.
It depends on where you live. In Seattle, for example, this is expressly legal just about everywhere in the city and is evidently exercised in practice.

Interestingly, this instance stems from a court ruling several decades ago that a government requirement to wear any particular article of clothing in public spaces was a violation of First Amendment rights. While the original case was about the right to be topless in public spaces, the generalized implication was that the government couldn't require you to wear anything at all.
This is true but depending on personal preference/perception and usecase it might not matter. If you really care about latency for twitchy old-school games, a MiSTer (or a real Amiga!) and CRT monitor would be ideal.
As a full stack engineer, I too am surprised at how hard it is for people to straddle both. I think that only came about for me, from building my own projects end to end.
How about things that used to be easy and now are hard?
Or things that used to be hard, and now are intractable?
Depending on what X and Y are, we condemn different actors. Agitating not really a word I would use for any pairing.

"Keep me from taking your purse" and "shoot you" we condemn B as a mugger.

"Leave me and meet someone new" and "shoot both of you" and we condemn B as a domestic abuser and potential murderer.

"Return a library book late" and "charge you $0.10 a day as a fine" and we condemn A lightly.

I would contend Russia's current actions fall squarely in the first two examples.
I very much doubt this will occur. cities have many lifestyle benefits. whats going to happen is a whole class of employment is going to die out sure. but it'll be replaced with more interesting things like entertainment focused markets.

and some people will definitely move. but cities will only be getting better moving forward.
That's false. You can still install Windows without a Microsoft account. Granted, it's harder now to see "Use local account", but it's still there.
Surely if you wanted to take down an enemy satellite there would be easier ways than sending a robot arm satellite out after it.
This is at the JavaScript level but I would love to see someone release a browser with a side-by-side JS VM and Lua VM, just as an experiment to what the web could be like with a better language.
It's not even close to feasible IMO. These pieces of debris are traveling many times faster than bullets and they have significant mass. They would rip aerogel to shreds. You would need square kilometers of bulletproof armor. Imagine a project to catch all the fish in the ocean except the ocean is a million times bigger, the fish are going as fast as bullets, and every fishing trawler costs a billion dollars. And you can't sell the fish to fund it.

Retrieving whole defunct satellites is possible but only one or two at a time because of the huge amount of fuel needed to match orbits with each one. And once you've grabbed one it takes even more fuel to de-orbit it (which you'll notice didn't happen here). Don't forget that every maneuver you make as a spacecraft has to use extra fuel just to haul all the fuel for every future maneuver you'll ever do, and that compounds for every lifetime maneuver.

It's worthwhile to dispose of old satellites so they don't collide and produce debris clouds that are basically impossible to clean forever, but it's not funded.
I use fastmail + my own domain (so I'm still the owner of my own email address)
I'm not arguing in favor of might makes right, but global politics isn't simple and many of the players aren't rational or reasonable. I'm arguing for dealing with reality, and acknowledging reality. I don't have a strong position either way, to be honest, and I don't think really any of us know enough to be so confident.
Good point, just pushed an update! (Now it's only two indistinguishable Birminghams haha should probably add states as well)
You're falling for the "perfect is the enemy of good" fallacy.
I don't know if it's still true, but as of about a decade ago the answer was: banks and other financial institutions. For the same reason that COBOL programmers can still find work: legacy systems.
> caffeine constricts bloodflow

It's the opposite: caffeine is a vasodilator so it INCREASES blood flow.
I agree it's a hard comparison, but in my mind it's a difference of degree rather than class. Familial love is an awesome thing. It's lack in a person's life, when desired, can be heart breaking.
The way CreateProcess takes a string as an argument instead of argv is what made me lose patience with Windows overall.

I wasn't a big fan of Windows to start with but I had to support it as a potential platform in a build syste. We wrote a kind of miniature shell that worked on Windows and Linux to capture and keep output from being interleaved (something GNU make does itself now).

It was a great misery to try to quote various bits of a string so that windows cmdline parsing would interpret internationalised filenames with spaces, single or double quotes etc as separate arguments. The command was potentially a call to exec bash or some other shell with its own quoting rules going on in the arguments....

This may seem like a small thing but it made me really reject the idea of wasting time on the platform. It's really the most crucial API in the OS and it's awful and there was a very simple pre-existing example of how to do it right (char *argv[]) - what excuse was there for it?
Grocery delivery “dark stores” in Amsterdam
In The Netherlands there’s a group of a few 100 people using a device like this already: http://inredadiabetic.nl/en_GB/

It’s sort of in a testing phase…
* email delivery
The Photo Behind the Iconic Columbia Pictures 'Torch Lady' Logo
If you otherwise have the rights to use it, duplicating it in order to use it may fall under fair use.
Your comment implies that Georgia might have had better ways out of that situation, that’s probably not true.
Unfortunately, I can imagine worse "bad universe" cases than that.

Pandora's box. Just because we can does not mean we should.
There's nothing in this project the US could not easily do, and the US still has more resources than China. China is just more willing to allocate those resource to this type of project. Undoubtably the military applications had only made the choice to allocate funding even easily. The US has other more pressing issues and allocating billions of dollars to clean up space isn't appealing to the majority of voters.
> IMO religion has done so much damage

Actually the worst wars and killing events in history (WWI and WWII) were secular, technology driven.

And religion has cured far more than it caused. The statistics are pretty damn clear: religious people are happier, live longer, have bigger families, and score better on almost every measure of wellbeing.
Not by definition, but by practice as generating assembly is usually done to optimize performance. Languages restricted to generate a common feature set between isomorphic ISAs and bijectively associated assembly languages are at a performance disadvantage compared to the full ISA specific assembly.
> its own entity (prior to 1945)

Still, nested within the Russian Federation as an administrative entity. (Also, autonomy throughout the USSR was more or less a formality anyway.)
HackTheBox looks like a neat service to learn some fun skills. I used to love CTFs in college, but haven't done any in quite some time. Anyone have recommendations for any services for this kind of problem/game, or is HTB a solid one to use?
3G only, which carriers are shutting down this year.
Voters, omsbudsmen, inspectors general, auditors, other levels/branches of government, etc.
September 24th, 2014.

To know the date of publication of a given xkcd comic, go to https://xkcd.com/archive/, search for the title you're after, then the date of publication is displayed in the mouse-over text.
Correct it’s not even hard to imagine in our lifetimes humanity will have a solid footing to reject the cost/benefit of Dyson Spheres based on existing alternatives.
I had no idea and just searched online. Looks like HBO is no longer working on it: https://www.reddit.com/r/television/comments/qujstr/hbo_max_...

> The reason you haven’t heard about it is because they passed on it in June. So it’s no longer an HBO Max project. It’s reverted to Paramount. And Kennedy/Marshall.
Like you note, it’s often mundane exploits that tear the house down. Makes security engineering a challenging job as every secret in an inadvertent commit is a possible way in. Whacking gophers over and over.
They have their own copies of the keys.
So once you did your own trusted setup - who is stopping you to create a docker container to your liking and use that onward?

I don't trust anything, hence all my docker containers are created personally and use them moving forward. At first it will seems like it's a never ending job to create another docker, but eventually you'll have all your needs fulfilled. Nowadays it can go a month without needing to create another one since I already did this A+B+C combination in the past.
That's false because it's true? I don't even...
I like this daily "What's in the Putin's head" guessing in the West media. The man himself stated everything 15 years ago in his Munich speech. The core problem - European security is build at the expense and against Russia. NATO expansion after USSR dissolution(which was voluntary act) is seen as proof of its hostility and having military bases of the hostile military alliance right at your borders is existential threat. It is this simple.
Appreciated, though I think I may have been nerd sniped as it's the kind of thread that begs to be pulled.:)

I'm interpreting the HMAC is supposed to be proof you are in posession of the shared secret, and anyone else with that shared secret can verify the signature.

In this message/signnature denial case, you are only one of many people who could be in posession of the HMAC signing key in some post-hoc disclosure of this (symmetric) signing key that obfuscates the identity of the original party.

This means, a) the recipient doesn't know whether the signature is from their counterparty because that HMAC signing secret is only loosely/deniably secret, and b) without a counter (another low entropy shared secret or a ratchet), there is no way of knowing whether the signed message you recieve is the "first," one derived from your shared secret.

This is just HN comments and I haven't done a deep dive on the protocol, but I'd wonder if the anonymity (in isolation) isn't as cryptographically strong as the message encryption. I'm pretty sure OTR got a lot of scrutiny, but even in some commercial protocols with a lot of scrutiny, I've seen some agreement to not emphasize certain trade offs in their final specificaitons.

This is assuming that being able to show a traffic analysis and prove non-deniability of the parties and messages would be a break of OTR. I'm sure it's the best we have, it's just when your threat model is the attention of an adversary with bulk interception capabilities, using a protocol that lights up like a tracer round on the network, and then while message secrecy is sufficient, when you are protecting recipient identities from said adversary, you are effectively depending on the anonymity provided by a kind of stateless, high-traffic dead drop.

Not disagreeing about the use of this HMAC, but the cryptographic integrity of the anonymity guarantee of the protocol is super interesting to think about. It suggests OTR may be a solution to what is effectively direct anonymous attestation, which if it is, amazing, but if it isn't, the conversation about its limits would be a fun beers thing.
Your comment highlights exactly how the GP fits the “things that used to be easy but are now hard list”
Exactly! This is a personal preference thing but I don't think folks realize how often some of us _have to_ make love to maintain sanity. They are often quickies due to the kids but we both strive to make it happen because we like it so much.
Recommending craft chocolate is kind of missing the point. You can buy expensive specialist chocolate anywhere, but that's not the same sector of the market that Cadbury occupies. You should be comparing it to stuff like Hershey's.
Sure, you still need to deal with backups, but at least you won't lose your email address if google decides to block your account. Also, if your email provider blocks your account, you just switch MX record to another one.
Just curious, is there anything wrong or missing from Django's current websockets support? Django has supported websockets via ASGI and Channels since 3.0 (about two years ago)? I'm working on a Django project that will require updating clients async.
As poster above says, Google has no idea if I own the rights / have a license to the articles in question.

I used to work in the music industry and had license to rip music and distribute it online from all the major labels. I don't want my cloud storage disappearing along with my Google account just because Google mistakenly thinks I'm a pirate.