skysight-inc/HackerNews huggingface dataset:
You’re right, I just meant that they assisted in identifying them for arrest.
There is a difference between having a large impact on the company's product and it's overall success versus getting properly compensated for your efforts.

It's always possible to try to do great work and to push the company in a great direction. That's great, and yes people like this are great to work with. However, stock options are nearly always structured to keep money away from employees rather than rewarding them. Some of the structure is due to the tax laws, but plenty of it is due to the terms companies set for their stock options.

You seem to be confusing these two things.
It's going to be downvoted, but if Ukraine would have nuclear weapons, there would be no Ukraine by now. It was very right decision to strip Ukraine off nuclear weapons made back in the days.

Knowing thing there too well one can sadly acknowledge there is no proper governance or management in armed forces. Over the course of 20 years they managed to down a civilian plane and destroy a building in densely populated area. Hard to imagine what would have happened if nuclear weapons would have been at their disposal.
People complain about firefox doing shady stuff and then use Brave lmao.
Just leaving these here:
https://github.com/brave/brave-browser/issues/19125#issuecom...

https://github.com/brave/brave-browser/issues/16611#issuecom...
> Small set of people?

The entirety of the US government most likely, any hacker that manages to get onto Mozillas servers, every spy agency worth its money, if its choice of research partners has something to say everyone at Meta. So in total maybe a bit bellow a million people. So really just a handful of trusted people.
Well, for people interesting to you, hang out at places you want or need to go, and simply attempt extending polite greetings a bit with a question or compliment. If you want to talk to objectively interesting people, well, they tend to be quite disagreeable.
Not to disparage the open sourcing of this tech, it clearly contributes some knowledge to humaninity. But…

Has Google Moonshot produced _anything_ that’s commercially a big success? Seems to me that giving Astro Teller and a bunch of smart people blank cheques helps them have tones of fun without the pressure of actually succeeding?
Wonder why they didn't try the Planck from ZSA. I use it as my daily driver. It did take about a month to get used to, but now I am just as fast at typing as previously - and my fingers are moving much, much less.

I still get wrist strain because the angle of my hands which the Moonlander would have fixed... however I heard a big issue with the Moonlander is you need to always look at your hands before you begin to type - because you cant take your hand away to use the mouse and find that keyboard half again
Utah to Become the Fourth State to Pass Privacy Legislation
Very poorly written article.
> Right now I’m considering actually getting rid of tenkeyless keyboard for my gaming pc because lack of keys and all those combos to get to F-s just annoys me when I want to script something.

Tenkeyless are supposed to have function keys - they only lack the numpad cluster. Sounds like you went down to a 65% or so?
You are right but I couldn't say I applaud the countries you mention. what worries me is the more countries that have nukes, the more likely someone crazy gets a chance to use them. If we think that some people commit suicide with violence against others, then surely someone with that mindset will gain power eventually?

Hitler as an example, if he had the opportunity to push the button during his demise. I'm sure he would have.
It would also mean that sufficiently rich people pay only 5% taxes on their income.
That 432-page textbook was a PhD Dissertation? Wow... I'm assuming this is not typical for most PhD theses?
Given that a dehumidifier is prime bacteria habitat, I'd recommend probably also putting it through UV sterilisation (or ozone or chlorine) before a decent filter cartridge before drinking. But yeah, the energy required is so high that it's usually one of the least useful ways of getting water in most places.
Because librefox is unmaintained. Use librewolf instead.
You don't have to do it alone. Checkout librewolf.
Things like Unity Hub were affected, and required a “hot fix” release as one high-profile example:

https://unity3d.com/hub/whats-new
I never understood the trend of keyboards without numpad, F-keys or even arrows. Sure, it's nice if you carry your keyboard in your backpack, but on a desk I think it's more useful to have those keys.
I used django-summernote to handle those https://github.com/summernote/django-summernote
little snitch pops up more here for updates checks and others i assume for brave (idle, not browsing) than chrome does.
First time seeing something criticized?
Possible mitigation measure:

1. If identity providers start offering a dynamic, trusted element within the critical pages (login, password prompt, 2FA/OTP verification etc)

2. if such dynamic element is from a known range/set of customer/trusted-party supplied identity elements.

Ex. During my account creation, say I am prompted to select some "secret identity themes", and I choose { batman, bike, carrots }

At the login/password/OTP prompt, I am shown a 3x3 grid of pics / words / hints, which have at least 3 (or whatever configurable number, in my account preferences) that are somehow connected to my "secret identity theme". This way, I know I can trust this page. The grid also has many unrelated ones acting as decoys elements, so that any malicious spoofing party cannot really figure them out.

I believe you get the general idea.

Do y'all feel this can possibly help, in mitigating this very serious & very harmful threat?

I intend to write a short post on this soon.
depends on the review and PR policies.
most are very strict, so I tune my branch to the expected commits.

with magit of course. GNU even expects proper Changelog entries per commit.

and I always keep on track with rebase, pull --rebase and rerere. everybody hates nonlinear merge trees
Lol; this isn't something you should boast about.
I tried with downsample and up sample image with opencv using INTER_AREA then compare them with SSMI. After that I pick the threshold to determine which is bad and which is good, but it still not work well.

I struggle when determine the threshold, some blur image have higher score than high quality image, but other blur image has lower score than high quality image.

So I wonder where i'm wrong or have some better approaches to resolve this.
Awesome! vlang has it too: https://github.com/vlang/v/blob/master/doc/docs.md#hot-code-...
I've considered virtualizing my current hardware Opnsense router, mostly to save on electricity. But I fear the situation of needing to do maintenance or troubleshooting on the Proxmox host without internet. What fallback do you have?
Don't a large proportion of them think that would be immoral? They protest when their workplaces get government contracts for relatively benign things let alone weapons development
Putin makes Nuclear threats at every step of the way to make sure he can nibble on Ukraine unpunished, and its working against naive "we cant escalate no matter what" politicians. Genius moves like https://www.cnbc.com/2022/02/12/pentagon-orders-departure-of... leave Putin to do whatever he wants while US can use new conflict for its internal politics.
Just sharing my personal experience there.

During isolation I bought my first mechanical keyboard (a cheap Qisan Magicforce 68, that I wholeheartly recommend). I quickly learned to use it and still love it at home.

A few months ago I bought a kinesis advantage for my office. I'm fully used to it (although it took me a while to stop hitting wrong keys).

When I bought both keyboards, I already knew how to touch type and went back to typeracer, keybr and monkeytype. My speed did not increase that much and I still get my fastest speeds on my macbook pro integrated keyboard.

The main reason why I use an external keyboard is to solve my back problems, by using a stand or an external screen.

In particular, I get my slowest typing speeds on my kinesis advantage. It is NOT built for speed, it is built for comfort. It allowed me to improve my posture considerably so it's still worth it.

PS: in my experience, using a laptop stand / external monitor helps with the lower back problems (weirdly). I solved my upper back problems by doing more exercise, and it's as easy as having some elastic bands near my desk and trying to stretch them horizontally behind my neck a few minutes a day (when I'm reading a long email or pdf or thinking or need a break).

PS2: a must-have on macOS is karabiner. I use it to have nicer keybindings for french accents (modifier keys like `) but also to configure function keys on my kinesis advantage and put navigation shortcuts on my mouse (logitech G502).
At least Zotero will not pull off its apps from App Store for no reason.
> I'd tell you how process engineers in the most critical areas used to work, but you'd never believe me.

Please share! I've worked in the games industry, I'll believe anything :-)
Great! And what about all those non-Apple users? Or all those Apple users not on a paid iCloud plan?
Latency might be a tell. Shipping chrome as WASM can't be cheap
Maybe most of your interactions with strangers are commercial interactions. So, invert that: become the 'host' for something related to your interests, that is free.
Ive made the opposite switch, many sites were broken in brave (eg google docs, google sheets) and aren’t in firefox
In terms of math, you will want to have at least a decent understanding of derivatives and integrals, as well as "basics" like logarithms/exponentiation, trigonometry and sums.

While it goes through vectors and such from the bottom up, it does so quite quickly so will probably be a bit steep if you haven't had any linear algebra from before.

Partial derivatives show up a lot, probably good if one has some experience from before.

Overall though the book doesn't assume a lot as I recall, and goes through the constructions from a fairly basic level and up.
Purely anecdotal, yet have worked for me:

-Hobby clubs. (We all have the hobby in common)

-Work conferences. (I work in tech so tech is always interesting.)

-Friend groups/activities.
Is Apple really a competitor so? Both AMD and Intel are selling to third parties and have access to the huge market of Windows powered machines. Apple is using the M1 exclusively in-house.
> If my family could control Bob's Muffler Shop for ten generations aren't we sort of the Earls of Bob's Muffler Shop?

I dunno, are you the Earl of your great grandfather's pocket watch, or the Duke of the Heirloom Dresser?
> Steps to Reproduce

> 1. Open Brave

This is way too funny for me.
You'd be amazed at how stable the 1.3 builds are.
I just wanted to chime in with a tip for people who are struggling to get every last drop of tasty condiments out of containers. There are tiny rubber condiment spatulas designed to aid you in your quest for total condiment use. They are also useful for skin care products, but I wouldn't suggest using the same ones for both applications.
There is a way to add random data to signed executables without invalidating the sig. Data, not code.

Smartscreen is bypassed by using EV sig, which gives the exe an instant reputation boost.
Non technical people don’t need most of those keys, kind of how non car mechanics generally don’t need pneumatic tools.

I’d never buy a keyboard without them but the trend is logical.
I didn't say anything about "identifying a particular user". When I said "the cause identified, bug or user" I didn't mean the particular user, but the series of user actions that lead to the outage. Outages caused by user action shouldn't be able to happen, so I think they are really what you call an unknown bug. Any person running a website that tries to blame a user for non-malicious actions that cause an outage is just trying to shift blame from where it rightly belongs.
Just read the blog post from Netgate, sounds to me like they have decent values. Also them asking to keep safe disclosure procedures doesn't sound insane to me either. Beyond that it's a he said she said thing IMHO, and I don't have the time to get involved in any of that. Stuff happens between people, and them not managing to work it out doesn't per se mean they are evil or "insane".

I'm an Open Source user of pfSense (so they don't get money from me) but I still had an extremely helpful experience recently, when I had a feature request. Once I filed it, it was implemented quickly, MUCH better support than I could ever expect from a paid commercial firewall. Also the product runs reliably and is very stable since years. So I won't look for alternatives any time soon.
I remember some big service many years ago (maybe yahoo?) had a “memorable image” or something that was associated with your username as some kind of anti phish metric. Of course nowadays that would be trivial to bypass with something like Modliskha or a different reverse proxy passing through the website content.

https://github.com/drk1wi/Modlishka
Same as Chrome
so for "data processing pipelines" they mean serializing json? Pretty strange way to refer to that process. Additionally this article is extremely light on details of the problem and solution. Overall pretty bad article.
Looking at https://github.com/WardPearce/paaster/blob/Development/paast... the link is just concatenated with # - navigate(`/${pasteId}#${paste.clientSecret}`)}

So you could just copy the link as everything before the # and send the rest as the password separately
I'm pretty sure this is illegal under GDPR (it violates the principle of using the least personal information possible).
The „OAuth 2.0 Security Best Current Practice“ document has a number of attack vectors and how to defend against them: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-secur...
There's a few big upsides to going down this rabbit hole imo-

1. Realizing how much dead space there is on a normal keyboard (capslock, the space bar doesn't need to be so big, many keys you might want to use frequently are in awkward spots, like the numbers).

2. Being able to fully customize the layout to your liking. I don't think anyone agrees 100% on what the ideal layout is, but once you get more comfortable with layers and testing various layouts it gets pretty easy to adjust.

3. Finding out how quickly you can adapt to multiple layouts by just sticking with it. You won't be perfect the first time, and you might struggle to briefly when you switch back to a normal board, but people vastly underestimate how good humans are at adaptation.

There's also a bonus level of just having nice keys/switches. While this is the part that can get pricey, as someone who's typing all the time it really does feel like a worthy expense.

The major downsides being that it can get expensive fast (at least if you're picky), you might need some level of soldering skill, and there are times where you DON'T want to be the person with the fancy keyboard that no one else can use (I always have a normal one plugged in at work just in case).

Still i'm super glad I got into it. I'm a huge fan of 40% boards just because of the portability and the space they save. I'm typing all this, on a mercutio and my work daily driver is a low profile crkbd (I do analytics and some low end/intermediate coding).

The only issue i've ever run into is that I'm a fan of roguelikes, and while most games don't need too many keys, those in particular seem to have this habit of the designer trying to use EVERY key on a full sized keyboard, so i'm working on a layer for that.
I did have a phase where I was using US layout over German, because I do agree that US layout is just more suitable for programming.

But training my muscle memory that way turned out to be more of a pain than a gain.

As a freelancer, I'm frequently in a situation where I'm forced to use a laptop that a client has provided, with a German layout. Oftentimes I will not have an external keyboard on hand, like I'm in a meeting room and didn't want to bring one, or I'm on a plane or train.

In order to make that work, you'd need to be a pretty disciplined typist who doesn't rely on the labels on the keys at all so as not to be confused by them when they're in a different layout.

Back in those days, there were also many edge cases, like the login screen etc., where you couldn't customize your layout away from some default that the client has configured.

Also: Most of the pain comes from curly braces. So when you're doing Python & Nim you're mostly okay using a European layout. I also think it's probably not a coincidence that the people behind those languages are Europeans, Guido van Rossum and Andreas Rumpf.
> It was bad with the BLM saga, but apparently at the time, it was too politically incorrect to say.

Is the implication that there is/was pro-BLM malware floating around? I've not heard of anything even remotely similar?
Yep but I mean the built in chrome auto password suggestions
I mean, there's drama, but it doesn't seem like particularly interesting drama from HN's point of view: more gossip than "anything that gratifies one's intellectual curiosity".
I automized constant rebasing. it's a couple of cronjobs for the mirrors and projects I'm maintaining over several years, and the cost is marginal. I get about one failed rebase email per month.

a big project of mine is about 2500 commits ahead. rebasing this beast is partially automated, but still I get about 2000 upstream changes through once a month. you need scripts to rebase and to rollback for a wrong choice.

it scales trivially.
Note proposition 24 passed in 2020 to amend CCPA. Not all of the changes were all that great [1] [2]:

> Prop 24 expands current law by exempting loyalty clubs and rewards programs from existing limits and allows businesses to withhold discounts unless they can harvest data about shopping habits.

[1] https://ballotpedia.org/California_Proposition_24,_Consumer_...

[2] https://www.ballot.fyi/prop-24
On account, I have it for couple of years and using it for bookmarks, so your judgement is far from correct.

On sanctions I can agree there is no other way, but lets dont compare economic sanctions with random marketing ones just to share on social media and put badge “i punished russians”

What about having same reaction of activists for Iraq, Serbia, Libya? Nah because, it was a “right thing”, only bad guys are died there. Or because most of nowadays activists are living within invading countries?

Again I am not supporting Russian war or government, I am raising my voice against infant activism, where main reason behind is building up own ego or marketing purposes and nothing what is affecting the real problem.
The problem with numpad is, that it is usually on between your keyboard and mouse so it is more comfortable for me to just remove it entirely. But I think I would like to have it on left side of my keyboard.
Totally missed that
Nice! V does it the same way as Nim though, right? From quickly browsing over the sources, it looks like it is based on dynamic library hot swapping https://github.com/vlang/v/tree/master/vlib/v/live
More worrying is the current zeitgeist amongst the GenX and the upcoming workforce:

1) Hard work is considered fascist

2) Everyone is gung-ho about mental health and yet no one can define what precisely it is

3) Racism, gender identity and climate change dominate discussions

4) Authoritarian views (No free speech, cancel culture, struggle sessions)

And we have CIA ads where the ideal person is only concerned with themselves, never mentions they are American and never look up to something beyond their own self-identity: https://www.youtube.com/watch?v=X55JPbAMc9g

We're doomed. I am an immigrant to America and my folks back home are saying "What happened!?"
The cynicism of 'either nuke or vassal' is completely wrong, equally the moral relativism of support for 'sovereign states' such as North Korea and the Islamic Theocracy of Iran is also wrong.

Iran wants nukes to further destabilising and terrorise the ME. NK wants nukes to keep it's nation sized prison under total control.

South Korea and Japan, both glaring examples that contradict your entire statement - do not have nukes and they are 'Good Places' not 'Vassals' of anyone.
IAPP also have a global comparison chart (PDF):
https://iapp.org/media/pdf/resource_center/global_comprehens...
They're comparable to Chromium's, if not identical: https://github.com/brave/brave-browser
https://en.m.wikipedia.org/wiki/Malaysia_Airlines_Flight_17

According to the Joint investigation force, the Buk missile that was used originated from the 53rd Anti-Aircraft Missile Brigade of the Russian Federation and had been transported from Russia on the day of the crash, fired from a field in a rebel-controlled area and the launch system returned to Russia afterwards.

...so it was Russia/Russia-backed separatists, who shot down that plane.
https://news.ycombinator.com/item?id=30717676
Am the only one seeing a 57 in the Heinz cap scan ?
I'm not sure it's really the same.

The US dropped the two bombs over Japan and that was it for nukes, true.

But Israel continually uses its missile defense systems, and seem to keep creating more layers of it.

Maybe, in this case, despite defense missiles being quite expensive to Israel, they can bankrupt opponents faster, due to a huge wealth gap.

But, anyway, it shows that missile defense systems aren't something you use once and "can't continue to use after you decide to use it".
Change the Unbound settings to only listen on LAN interfaces, or even just one specific LAN interface. Eg I have four LAN interfaces but have Unbound configured to only listen on LAN1, so my router FQDN only resolves to the IPs of LAN1.
Exploitation via Git embedded bare repos and core.fsmonitor, affects IDEs
I currently have a number of Google Docs and Sheets open in Brave. Because of your comment, I started poking around. Try as I might, I couldn't break anything. That probably doesn't mean there's absolutely no way anything could be broken, but just anecdotal—I couldn't find anything.
Fixing Traefik Proxy Issues
Maybe they started with the text printing routines and from there on it's just printf debugging right? :-)

Btw you'll enjoy learning that lots of microchip / embedded programming happens on chips that don't have printf at all (even when connected to a computer) and also no debugging capabilities. People tend to connect a LED to an unused pin for some 1-bit printf debugging and that's all you got.
Really cool (and expensive) rabbit hole.

My first mechanical keyboard was a Razer Blackwidow with Cherry MX Blue switches. Next, I bought a blank-key Das with Cherry MX Brown. Since then I've used an Input Club K-Type, a Tesoro Durandal, and some Logitech keyboard with MX Reds. I actually really liked the MX Reds, way more than I thought I would. So when I ordered the Ultimate Hacking Keyboard it was with Box Reds. I also still have an Input Club Nightfox waiting to be assembled in my closet - it's been there for years. I should probably just sell it at this point.

In regards to layouts, I too prefer US layout for coding. But I live in a European country with special characters and have gotten used to using that layout. The UHK, however, will come with a US layout and I'll map the special characters to alternative keys. I hadn't delved much into special key mappings on my boards yet, so that'll be interesting. I got it with the trackball module in hopes of never needing to use a mouse again.
And? What made you think I was referring to the flight?
Russia can barely maintain the gear they have that costs orders of magnitude less than a hypersonic missile / nuclear torpedo. Whats the chances their hypersonic missiles / nuclear torpedos even work?.