skysight-inc/HackerNews huggingface dataset:
Mrh why does Redis include the package library? IMO packages should be loaded at boot via configuration. This is Lua hardening 101...

Good writeup. Thank you.
Great idea. I'm your target customer. My feedback: you've got a stellar opportunity for your home page, to add a big "Try It Now" button. And you already have the functionality in your "Log In" link-- just make it much more obvious.
Maybe. The non-Retina Apple Cinema Display which I believe is over a decade old still sells for $200-300+ used. The Thunderbolt Display even more.

The 5k iMac came out in about 2015 and still no other company sells an equivalent 5k monitor other than the LG/Apple monitor.
Your comment underestimates the task of remediation. Sure, we can very easily get a list of DDoS source IP addresses. Any decent network operator can get a list of flows matching some DDoS criteria and generate a report of IP addresses.

In the case of this TP240 attack, you're talking about ~2600 independent businesses across the world. Assuming you are able to determine the actual source of the traffic and work with a vendor to patch it, you're still tasked with somehow getting 2600 businesses to patch their systems or modify firewall rules.

In the case of the memcached amplification attack, Cloudflare saw upwards of 5800 source IPs in the attacks, and Shodan reported nearly 88000 IPs responding on port 11211 [1]. Tracking down the owners of 88k installations across public clouds, businesses, probably some residential networks, is a monumental task. There's nothing easy about it.

[1] https://blog.cloudflare.com/memcrashed-major-amplification-a...
I doesn't have to do with public or private support. I think people were scammed to a significant degree. To offer solidarity means to let yourself be exploited too.

I don't see how my position leads to conservatism. If I prefer not making race a relevant attribute in an outreach program, I guess I am. But the label doesn't mean much to me.

There perhaps aren't many black women in programming yet, but opposing a new racialized world is not sticking my head in the sand. I am pretty actively opposed to it.
>It means you get to decide not to care.

Everyone gets to decide not to care. I'm in a marginalized group and temporarily suspending caring is the primary coping mechanism for the stress political fights in, around, and about the group can cause.

It's not like I'm in a warzone where every moment is a struggle at the precipice of failure. While our progress will take continued dedication that I do feel obligated to lend my time to, I can let my guard down the vast majority of the time.
i have been using eizo for past couple of months and i have found them to be just fabulous.

perhaps you can try it out and see if it works for you too ?
Patient in Groundbreaking Pig Heart Transplant Dies
Unbundling dependencies is a security feature.
The issue for that is that it’s not cheap, commodity hardware. It’s a risk to build a server farm with Apple given their historical penchant to arbitrarily cancel entire product lines that were doing ok. Apple is best as a workstation or personal machine.
Does make me think about adding some level of redundancy to my site, failover at the DNS level perhaps.

Does anyone have an approach they'd recommend? Cloundflare perhaps?

All my media is served by cloudinary, so it should be easy to have the site served in more than one place and have the only single point of failure be the DNS server.
The document linked above is from 2017. Was there a COVID-17 I never heard of?
What I'm saying is that the parties understand the makeup of independents insofar as they know there are so few true independents, that it doesn't really matter what they think. In today's era, you get much more bang for your buck by convincing your own partisans to make it to the polls.

My broader point is that contrary to what the article implies, "Unaffiliated Voter != A voter who is open to voting for either party"
> I'm not sure why this perspective doesn't attract more attention these days.

Because this perspective dampens the prevailing narratives, that Russia is spinning pure propaganda in regards to NATO?
Show HN: Phoenix PVM-Based Virtual Machine Monitors
The subjectivity is be important to make the uncertainties clear. Papers and research results aren't always clear and objective. We did a thing, however it might not have been the best approach. We got some results which might be relevant, however there are these confounding factors that might mean they aren't. At the end of the project we realised that we probably should have started with doing X, however we didn't and I don't know if it would have made a difference or not.

If you want information presented in a clear, unambiguous and logical order, it's best to wait for the textbook.
I just realized that more time has passed since the Columbia Shuttle disaster (19 years), then passed between the Columbia and Challenger disasters (17 years). That seems impossible to me.

I remember reading each of the astronaut's bios after the Columbia disaster, and the same thought kept echoing in my head: what a tragedy, what a waste. Seven remarkably talented people. I had no idea until I read this article how easily their deaths could have been avoided.
Yep, that's why the test speed estimates 200 fps. There's no mention of if the incident velocity is similar to the test velocity though.
Great feedback! We'll definitely work on improving that.
The answer is simply the first paragraph of [1]:

> The U.S. Department of Defense’s Biological Threat Reduction Program collaborates with partner countries to counter the threat of outbreaks (deliberate, accidental, or natural) of the world’s most dangerous infectious diseases. The program accomplishes its bio-threat reduction mission through development of a bio-risk management culture; international research partnerships; and partner capacity for enhanced bio-security, bio-safety, and bio-surveillance measures. The Biological Threat Reduction Program’s priorities in Ukraine are to consolidate and secure pathogens and toxins of security concern and to continue to ensure Ukraine can detect and report outbreaks caused by dangerous pathogens before they pose security or stability threats
Bhphoto has a program refunding the tax if you used their credit card. For Apple and photography products that’s a significant amount.
Burkina Faso: Another Coup Led by U.S.-Trained Soldier
> Thunderbolt Displays, the previous equivalent had extremely little depreciation over their life span

I recently bought one used. These things got manufactured from 2011 at a MSRP of 999$ IIRC and today still are worth 600€, excluding shipping, on ebay.
How are they helping maintain global geopolitical harmony? Their actions seem to be doing the opposite
As a manager - I would love it if someone tells me that! This makes my life so much easier!

It means, that I will not have to worry about figuring out a good place for you to grow into. It also means that I will not have to worry about finding a replacement for you after you get promoted.

Hell, if you tell me that I'll do everything I can to give you a raise asap.

Tip: Your manager really, really wants to hear what you really honestly think. Even if it's not a positive thing (and just wanting to continue doing what you're doing is very positive!). It's super hard to guess what people are trying to say because most people don't just tell you straight. Of course there are exceptions - that's probably a sign of a crappy manager. If that's the case, sorry, you can probably find a better job.
> It doesn't matter what they might be worth in 10 years if their current value is ~zero and a founder wants to divest them now.

But the current value of shares is intimately tied to what their expected future value is. Indeed in the absence of an acquisition or IPO this is the only way to determine the current value of shares. And if different people disagree on their expected future value, they will disagree on their current value.
Distros should really be setting niceness levels on more processes by default, especially background software updates. And anything audio-related really needs to be at a realtime priority.
What's stopping users from downloading the music on their desktop and then cancelling their subscription?
The original surgery was also discussed here two months ago: https://news.ycombinator.com/item?id=29882912. The cause of death is unknown as of yet.
Man given genetically modified pig heart dies
I can't work out why you wouldn't develop a native app anyway - all this scaffolding in a Web UI to imitate native controls (like menus) seems completely backwards to me. Seems just lazy, but in an odd way because writing native apps isn't rocket science or difficult.

It's not like they're implementing thousands of native controls or user interface components - a listview with an edit box at the bottom...
therefore we present this novel solution which is really great...however we didn't take any of these things into consideration, so it might not be.
Are there back-end engineers who still write actual algorithms, or is it all just 1 million QPS microservice architecture design at this point.
I think this works effectively in many situations (particularly keynotes), but I frequently give presentations that are (1) meant to inform more than persuade or entertain, (2) are often given to an audience with a substantial fraction of non native English speakers, and (3) the slides are regularly distributed after the fact. This pretty much necessitates having texty slides that I have to read more or less verbatim, even if that makes the experience more dull.
Ask HN: What is the auth solution I can use if I want SIWA and GSI in my app?
Hi HN

I am making an app in either C# or golang which needs authentication. However, when I strated reading up on authn/z, i realized that there are way too many strategies and options and I am ill equipped to choose \from among them.

I just want a "Sign in with Apple" and "Google Sign in" buttons in my app. I would also want the solution to handle sessions and cookies.

Essentially, I want my auth solution to handle everything related to user identity and just return a userid/email identifier that I can use in my db queries.

What is a simple and OSS solution that you would recommend for this?
Whom do you trust your identity with more? Twitter or the regime you're under?

As much as I despise Twitter, I'd much rather that they exclusively know my identity than both they and the regime. This isn't to say that I agree with Twitter requiring phone numbers.
That's... relative. Let's say politely I am not moved by such design and had seen and used monitors which appeal to me more for fraction of that price.
You are linking some links that don't imply what you imply. Yes, there are biolabs, and yes, some of them are Army-affiliated because COVID happened in the army, and yes, UA Army works with DoD. But there is no connection whatsoever there with the "US-made bioweapons" or even "bioweapons" in general so basically you are just promoting conspiracy.
> no relevant degree

Why not get the degree then? If you'd started four years ago, you'd be done by now. If you start now, you'll be done in four years (maybe a little longer since you're working full time).
The LG 4/5K monitors from the 2015/16 era were this expensive
and people wonder why so many VC backed startups fail when they spend money on stupid shit like this
Yeah, usually says it's for me and I can talk about whatever.
I can’t tell if you’re trying to make a joke, but that’s an outrageous expense for something that can be easily gotten for free.
PowerPoint decks for the upper tiers of an organization can take on a whole different character. I shit you not that it's common to pass them around in email as if they were a document format, even for information that is never intended or expected to be presented. As if they were PDFs or something. It's crazy.

[EDIT] There's also a kind of horrendous, illegible house style some places, that's expected to be how these documents look. The US military and any big businesses that work heavily with them are infamous for this. They routinely produce some comically terrible decks and graphics. I wouldn't be surprised if that weird, seemingly-intentionally-hard-to-read style is also present in at least some parts of NASA, especially up at the administration level.
As a manager I would be fine with this explanation. If you are valuable in the area you are and you don't want to move on that's fine with me. We need someone in that role and you fill it nicely so by all means stay in that role. There should still be plenty of growth opportunity for you if you want it... it doesn't have to come with a title change. Having 100 people that all want promotions that cycle and only 20 slots to promote into is stressful to handle so you not being part of that but still contributing is kind of great.
Hey, that's great feedback @jph! We do want to highlight the usefulness in an obvious way.
I agree, that's a really great example. It would be even more natural for tags in org-mode, which already supports drawing tags away from the text itself to a far-right column, but they really could be moved in the other direction to the left of a hairline next to the bullets, and they'd be more readable.

BTW, Nicolas has a lot of interesting packages exploring use of graphical design elements in Emacs apart from the Nano Emacs stuff; for example, there's https://github.com/rougier/svg-tag-mode. I love how he chooses to represent dates and dates with times attached, and to distinguish active vs. inactive dates with shading rather than "[" and "<". That actually makes it easier to spot a common org-mode mistake without having to call up the agenda.
> I look forward to Apple deciding to play ball with gaming someday.

I wish.

But playing ball is more than hardware. It is spending billions to buy Activision or Bungie. And I can't honestly imagine Apple having the cultural DNA or leader aspiration to make a game like The Last of Us where the player is brutally beating zombies to bloody clumps.

In video games the business side demands having exclusives, or timed exclusives, to sponsor twitch streamers playing your game and cutting special deals with studios. This is very different to the App store where Apple emphasizes their role as a neutral arbiter and a dev having the same deal as any other dev. Can you imagine the complains here on hn if Epic Games would get a a special deal just because they are a bigger fish and Fortnite is popular?
> That's what causes these kinds of rambling forks in threads.

I’m of the opinion that people reading too much into things, like you appear to be doing in your previous (long) paragraph, is what causes those kinds of rambling forks.
I don’t think the situation has stabilized, either for NYC or for Uber. Too many variables. It’s also possible a stable equilibrium doesn’t emerge and it’s just a pendulum that swings between upstarts and incumbents, regulated and deregulated, apps, cabs and dollar vans…
I don’t think the average users ever delete any of their browser data. In this case however, the whole idea would be that there is redundancy and it is ok for you to clear your cache and storage. As for the hoster, they would probably use a nodejs type server to host their files instead of relying on having a browser tab open.

However, I do agree that relying on regular web browsers is not a good idea. A browser update could limit resources of background tabs even more than they normally do and soon your application is down.
It also has some account of the pedophile who wrote this article’s conviction: https://en.m.wikipedia.org/wiki/Patrick_Naughton
Sergey Brin on to Tell the Truth in 2000
Ukraine War Tests the Power of Tech Giants
> Kasper Timm Hansen tweeted, back in August 2021, that DHH was credited for work Kasper did [3].

That tweet and its two self replies say:

>> If someone on your team isn't giving you full context, to the best of their ability and the situation, they're not collaborating; they're negotiating on their behalf using you and your expertise as leverage.

>> The experience feels like being unwittingly made to shoe shop for an elephant. They present you shoe after shoe, keeping you in the dark and thus draining you. Instead of just saying who they're shopping for, so you could say "oh an elephant doesn't need shoes at all"

>> It's about controlling you, so they get to crack the problem by themselves and get the accolades etc., as opposed to solving the problem through collaboration so you both win.

Is there more context needed to understand this? I would never have guessed just from those tweets that it is about a mis-crediting issue.
Chrome Lighthouse on both mobile and desktop said that TFA did not have a sufficient contrast ratio.

It doesn't look too bad on my desktop, but on my Android which is set to 130% it's almost unreadable. I had to use reader mode.

And it doesn't resize on mobile, probably because they're using px in their CSS instead of em or something scalable.
I don't think China could do anything about the attack itself (besides pushing it back into the mud...). This way the Taiwan development isn't anything they could change. It will wear off though and doesn't really change anything about the whole situation.

In return they get to see what the West will do and what they'd do if China would to attack Taiwan. They get the cheap resources OP mentioned above, they get another country which depends on them and posting some Ads on Facebook won't hurt them. It's not like somebody would sanction them because of it.

Realistically seen, they'll be able to get away with much more and I'm sure they'll test that in the weeks to come.

I can't imagine "the West" sanctioning both a huge source for oil and gas AND a source for cheap manufactured goods and they know it too...
Research on infectious disease & co. is a big part of military research because servicemen operate all across the world, including areas where they are exposed to diseases that are uncommon in the US, or that have been eradicated. That is, of course, on top of all the diseases that fall under "chemical warfare" and for which you have to be able to treat your people (both military and civilian), and afflictions associated with crowded areas in general (besieged cities and the like).

I obviously don't know what the labs mentioned by the parent poster were doing but the fact that the US DoD (or any country's department of defense) does medical research should be about as surprising as the fact that they do research on explosives.
Apple is gently telling you you're holding your phone, sorry, Word, wrong, and you shouldn't do that.

I'm not kidding, for some of this stuff that's their actual line of reasoning.

They probably want you to use some other window management feature, regardless if you want to use it or not.
Beauty is in the eye of the beholder as they say. I'm getting a bit tired of the metallic look, personally.

I don't think Eizo monitors look terrible. They have nice displays too, and some useful colour management features.

The higher end Benq's look nice to me.

Apple will keep charging it because people keep paying it....
And if devil can make some good it should help to condemn Russia. 5m is nothing. Not condemn and encouragement … sigh.
there are 8k monitors out there
Seems a bit like telling someone in a burning room not to go into the next room because it's a little humid in there.
Well, clearly there are some promising avenues. For example, developing alternatives to fossil fuels would weaken adventurous petro-dictatorships.

It's not a short term proposition, but it's something that ought to be taken into account when e.g. considering how governments allocate subsidies or weigh long-term energy strategies (as Germany is doing now). Any initiative that strengthens the global market for oil and gas has a side effect of destabilizing the rules-based world order.
Zirconium starts to make hydrogen from steam at 1000c. Air is not steam and spent fuel will not get to 1000c.

https://www.nuclear-power.com/nuclear-power-plant/nuclear-fu...
Anyone remember that movie "Interstellar," where Matthew McConaughey's character hacked the drone and took over its navigation systems?

Curious as to whether or not this has a basis in reality. Surely advanced militaries are aware of drone warfare and can detect the RF (?) control / communication with the drones, and therefore have an opportunity to hack them.

Or maybe they just try to shoot them down? (Which seems difficult to do...)
Not chips, servers. Apple has sold those before.
The fuel assemblies are radioactive, thus heat the water. Heated water evaporates. That's all the article claims, and it's obviously true. In fact, liquid water at any temperature evaporates. What the article doesn't mention is the timescale. Is the water heated to a significant degree? Does it evaporate notably faster than any other pool exposed to the atmosphere?

The answer seems to be: not really enough to worry about.
Not for reactors that have been shut down for more than 20 years. Decay heat removal from a shut down reactor is an issue for days or perhaps weeks after shutdown, not years.
I'm uncomfortable with how this article talks about how evil the ads are without actually showing them. It's not clear to me who is doing the propaganda here (the ads vs the article about the ads).
Someone made a plot of just the punctuations from Blood Meridian: https://medium.com/@neuroecology/punctuation-in-novels-8f316...
>high quality monitor that doesn’t look terrible.

Eizo may be high quality, but it doesn't do well in aesthetic.
The foam accelerated down and the spacecraft accelerated up.
Being able to get into a car and get whisked off to your destination without having to talk to someone about directions is pretty nice
8 EUR > 3 GBP
Use “App Expose” to show multiple windows (you can configure this to a swipe down gesture).

Use Command+` (backtick) to switch between windows.
My work PC was a Pentium 166Mhz overclocked to 225 Mhz (bus cranked up from 33 to 45Mhz) with 64 MB of RAM, a Matrox Mystique 4MB, two 1.2 GB disks and a SCSI 2x CD burner running Windows 98SE.

However my other work machine was an SGI O2 :) R5000 200Mhz 256 MB and 4GB disk (and the video IO card).

Back then all the PCs in the company had PUBLIC IP V4 ADDRESSES. Imagine that. And no firewall whatsoever.
Kinda pointless to show the slide without the audio of the presenter to go with it. Unless we're thinking the presenter just read the slide verbatim with no extra context, and no questions were asked, which would essentially defeat the purpose of having a presenter and audience present at the same time. I know I've seen presenters actually do that, but the author didn't provide any indication that that's what happened here.
You can pay $25 a year for ITunes Match - once - and get all of your music that you ever bought DRM free.

https://support.apple.com/en-us/HT204146

Movies have DRM. Blame that on the studios But Apple, Amazon, Google, Vudu and a couple of the other digital movie services participate in Movies Anywhere with most of the studios. You buy a movie from one place and it is automatically considered purchased from the other stores.

Movies have always had copy protection - even back in the analog days with Macrovision.
The iPod helped save Apple. IIRC it, even more than the iMac, helped return them to profitability.
That, plus willingness to take you to a destination outside of Manhattan. Yellow cabs would often refuse to go to an outer borough. Refusing a destination within NYC was actually against the law, but the law basically wasn't enforced.
every week, but i think it's too much on both my schedule and on my manager's schedule.

i would say every other week should be perfect.
They keep the bacon flowing, for one. They invest in sustainability initiatives. They conduct anti-terrorism training exercises with their neighbors.

Plenty of other things, I’m sure.