skysight-inc/HackerNews huggingface dataset:
Show HN: Open-source testing tool for SAML SSO integrations (mocksaml.com)
Hi HN, we are Deepak and Sama, co-founders of BoxyHQ (https://boxyhq.com/). BoxyHQ provides an open-source platform for developers to quickly integrate enterprise features into their software solutions. These include SAML Single Sign-On (SSO), Audit logs, with more to come :)

We know how tedious SAML SSO integrations can be, so we built a free tool to help you with testing the feature as you go about building it. Mock SAML emulates a SAML Identity Provider and lets you test both Service Provider and Identity Provider flows without having to create accounts or users. Head over to https://mocksaml.com to try it out, there’s no registration required.

We have also open-sourced the code (Apache 2.0 license), so feel free to head over to https://github.com/boxyhq/mock-saml and self-host the service or even better make it part of your CI/CD pipeline to add SAML tests.

Our team would love to hear your feedback, you can also reach out to me at deepak@boxyhq.com
Any reactor. This modulating is done with the cooling system, not the reactor itself. To clarify, the thermal output of the reactor remains unchanged, while aggressive cooling reduces the electrical output. It's deliberately reducing the efficiency of the heat engine to reduce electrical power output with the same thermal power output. That's why it's wasteful of fuel. Modulating the thermal output of the reactor is more efficient, but not all reactor designs can do this quickly.

The blast at Chernobyl was due to a positive void coefficient that meant over-heating led to a positive feedback loop (plus some other process failures that led to that initial overheating). Also those figures for the Chernobyl reactor were for thermal output, not electrical output. The figures are an order of magnitude off, the reactor would normally put out 3GW, not 3 MW and was idled down to 700MW for the test. 700 kW is, like, a beefy muscle car.
> Trusting PayPal or Stripe to not arbitrarily freeze your account because they think you’re making too much money too quickly is not ideal. Having to show ID to send or receive a money order is not ideal.

These are all benefits from lack of authority.
I'm not well read up on how sidechains work, but they're effectively as public and transparent as the main blockchains themselves, right? So anyone, particularly Axie themselves, could/should have a live dashboard reporting out their holdings. And the fact that it took 6 days for this to be noticed (and even then, only by accident) means they didn't bother having this metric be readily visible?

(nevermind not having triggers to go off when a lot of funds are suddenly withdrawn for any reason)
Here's a solution which is vectorizable: http://gallium.inria.fr/blog/fast-vectorizable-math-approx/

I've also read that Chebyshev polynomials are far better for approximating functions than Taylor series (eg https://en.wikipedia.org/wiki/Approximation_theory)
Mission Impossible: The Compuserve Chapter
> You are thoroughly mistaken if you think Ukraine is any better than Russia

One is a democracy improving itself, the other is a goddamn dictatorship. Don’t be stupid.
The story of palm oil (2014)
Simple url shortener with no tracking, no input, and no buttons
Took me a while to figure out why my browsers always seem to randomly pause for about 30 seconds. It's that piece of crap McCaffee. I can watch it's process go to 100% when the browser (firefox and vivaldi) freeze. It's garbage and I wish I could turn it off and just use MS AV but the IT staff swear by McAffee so I live with it.
You're conflating pointing out how the world works, with defending the way that the world works.

I can think that in an ideal world he wouldn't get fired, but I also agree 100% with "duh he got fired".

I'm also not sure that even in a reasonable ideal world that this wouldn't be consequence-free. He's inherently burning the political capital of anyone managing the relationship between those two companies and stressing their relationship. Even if the law doesn't allow the company to terminate him, there will probably still be social consequences. People don't behave like robots and they get annoyed at other people.

And if those people managing that relationship were so perfect that they could always understand the larger picture, and if the whole world was composed of people who were that perfect, we would never be in this situation because Okta would never have mismanaged the breach that badly.
He was Jewish on his biological mother's side.
Integrated electronics: Milman & Halkias

Electronic devices & circuit theory: Boylestad & Nashelsky
Since the article contains few visuals, here's a gorgeous music video shot on a fairground to compensate: https://www.youtube.com/watch?v=KKUfXDlTfBQ
I meant to thank you for this comment earlier - it’s led to a whole bunch of interesting stuff I did not know.
Flask will take you pretty far. I'm not sure I would build a build a business around it, but it's the easiest thing I've found for just getting some code up on the web.

This tutorial is a pretty in-depth guide that incrementally adds more features to a flask app: https://blog.miguelgrinberg.com/post/the-flask-mega-tutorial...

By no means do you need to use everything in here, but I reference it from time to time.
This is plenty:

from flask import Flask, render_template

app = Flask(__name__)

@app.route("/")
def index():
return "<h1>hello world<h1>"

@app.route("/foo")
def foo():
return render_template("foo.html", vars={"foo": "bar"})

if __name__ == "__main__":
app.run()
I've always wondered how many fake national security letters have been sent to companies, and what the success rate on them is.

Cant LEO get things in front of judges in hours? Is bypassing courts ever actually necessary?
Then maybe just ignore those people and let the people running businesses just do what they need to do, like issue empty PR damage control statements like any hacked organization will do

Lets make fun of them just like we were making fun of Okta’s response over Lapsus

No need to project your own cognitive dissonance
How do these "remote disabling devices" work? Hopefully they aren't remotely disabling a car that is in the middle of switching lanes on a busy freeway.
Personally I long for a syntactic merge-tool. Every time Syncthing hiccups for some reason, I'm up for a merge session with my Org-mode files, in the vein of: ‘These properties look just like those ones, only with a different timestamp... Oh lookie, and the heading is totally changed. Let me merge this new heading all over the old one, and then pop in the old one after it.’ Dammit, it's just a whole new heading added with properties. This happens with every language heavy on markup.

However, I'm not sure if Org markup lends itself to structuring that would allow proper diffing—even with just the headings.
They sometimes do reverse these transactions, but the amount of money involved here (1 bicycle worth) is probably easy for the scammer to put out-of-reach of the bank very quickly -- withdrawing cash, buying gift cards etc.
I repeat: Banning “Z” is banning support for a mafioso political system that is not only anti-democracy, but also actively murdering an internationally-recognized democratic nation… again.

Don’t support the mafia, you goof.
Around these parts, these new housing units are insanely expensive. They are building a lot of them, but there's no altruism involved. Not even one tiny bit. They are building these gigantic highrises, that are destined to be packed with yuppies. There are cranes everywhere in NYC.

Brooklyn and Queens; formerly "affordable" places to live in New York, are now getting $4,000 (or more)/mo for 1-bedroom cribs. I've seen it with my own eyes, in Manhattan. Areas like Alphabet City, that used to be considered "dangerous," are now primo real estate, and well-dressed young couples walk their toy poodles around these neighborhoods.

It's only a matter of time, before NYC becomes an East Coast San Francisco. Manhattan is pretty much there.

I am not personally familiar with the way France is structured, but I have been told that the cities are where the wealthy live, and the suburbs are where the not-wealthy live.

From what I have seen, Seattle is becoming that way. I was pretty surprised, when I visited some friends, down in the suburbs south of Seattle, and saw that it was actually a rather scruffy area. I had gotten used to Bellevue and Redmond.
Big Tech Wiki
It seems ridiculous, but it’s not.

Grades are an invalidated assessment framework:

1. They don’t do what they say they do (assess retained learning, track progress)
2. They create perverse incentives that diminish students desire to learn
3. They emphasize evaluation over iteration. Iteration is by far the more important skill - both pragmatically, for building knowledge, and for emotional development (grit).

I’ll zero in on “track progress” since you mention that. Start with a simple question:

What is progress in learning?

You’ll quickly uncover two things:

* progress is non-linear & child specific
* learning isn’t about task completion

Here’s another teacher’s view: https://www.jessestommel.com/why-i-dont-grade/

Grade do serve one specific kind of student persona - those who optimize getting tasks done & getting good grades for it.

Task completion is an important skill, but it is currently being taught at the expense of much more important & valuable skills.

The justification for that is that task completion is hard, difficult for children to learn.

Only it’s not.

It turns out that children generally complete many tasks when they are engaged in an open, iterative learning process. They’ll even generate & complete their own!

Can you name one student who invented homework for themselves after they already knew they are getting an A+?!

“Most likely to succeed” by Harvard professor Tony Wagner is a great introduction to the academic research behind the above.

There really is a better, child-friendly way to learn.
It won't be able to form the basis of a magit plugin because it does not target traditional diff format.
Can anyone here give me an honest review of the doc I send people who reach out to me who I don't know? I definitely want to know if this doc comes off as condescending.

https://vinay.notion.site/If-you-want-to-work-with-me-at-Loo...
I am not a fan of Gov UK framework. For once, the banner takes up 50% of the space on my mobile browser.

All design elements and controls are excessively large and bloated. Negative space is liberally applied everywhere.

USWDS strikes a good balance.
Hitting yourself in the head with a hammer might offer some benefits:

- The cool metal might cool your head on a hot summer day

- Might knock yourself unconscious to avoid boredom (could be real handy during long flights!)

But these nice features are inseparable from the fact that you're hitting yourself in the head with a hammer, which has many serious downsides, too.

The "improved self-custody" crypto offers is one side of the ledger. The other side is: you lose regulatory protection, and can be swindled with virtually zero repercussions. Crypto's entire reason for existing is to circumvent government control—it's pretty "new world order" all the way to the core.
In the schools I've attended it was mostly because they didn't want to weigh final exams too heavily (due to test anxiety), and putting too much weight on a final project doesn't scale well when every class you are taking does so - too much crunch time. Over the past few decades most have moved to allowing you to drop your N lowest homework scores which helps a lot with students entering the course with varying preparedness levels.
kaspersky should have completely left russia decades ago if they wanted to free their reputation from FSB taint.
It might help to know that a study measured how stressful live coding interviews were on candidates and found it to be VERY stressful.

Half of the candidates did a coding exercise while someone was watching them. The others did the same exercise, but without being watched.

People being watched got ~half as far on the exercise, on average.

So you're not alone!

More and more companies are moving to mostly async for the technical portions, because of this. Study: https://www.engr.ncsu.edu/news/2020/11/11/tech-sector-job-in...
The credit card companies make so much money that reimbursing fraudulent transactions is almost a rounding error -- which is why they aren't in a rush to spend the money to implement chip and PIN security. Given this attitude I'm guessing someone already ran the cost/benefit analysis of pivoting engineering teams to fix the opt-out website versus just paying a fine -- and that paying lawyers to contest any fine they might ever get came out on the winning side of the ledger.
I know everyone has their own workflow, but I'm still surprised anyone actually goes to Google's home page anymore what with their search bar being accessible from practically anywhere (browser address bar for example).

I don't remember the last time I actually went to the Google home page. What leads you there these days?
MISRA: Of course the C language provides loads of standard library functions which look ordinary but are actually defined in a way that's hideously dangerous. You can use most of those but please take care to avoid mistakes (MISRA D4.11).

Ada: It would be insane to provide a standard library full of dangerous sharp edges so we didn't do that.

pjmlp: See? Practically twins.
I'd be curious about use cases where this does or does not make sense. On the one hand, you saved a few nanoseconds on the integer-to-string encoder. But on the other hand you're committed to storing and transferring up to 15 leading zeros, and there must be some cost on the decoder to consuming the leading zeros. So this clearly makes sense on a write-once-read-never application but there must also be a point at which the full lifecycle cost crosses over and this approach is worse.
The court's own website usually has contact information that can be independently verified. This isn't that difficult a problem to solve.
> I do get that you don't "get" it, but I'll just say - I happily send and receive both BTC and ETH, and it is a night and day difference from sending using traditional bank accounts. I actually feel like I own the money, I can send it to anyone I want at any time, and the transaction settles in seconds. Last time I sent money via ACH, it took a solid 4 days (since I initiated on a Friday).

This is just a criticism of US banking, not 'TradFi' as a whole. Most countries have let you do the exact same thing for free or at a low cost out of your existing bank account, no overhaul required, for years. The EU has SEPA, the UK has FPS, Canada has Interac e-Transfers, Australia has NPP. I suspect you'd have a hard time finding a country other than America which doesn't support this.

... and the US has RTP for about half the population, and is getting FedNow for everyone next year. Not to mention Cash App and Venmo and so on.

This is a solved problem.

If you can even call it a problem. The thing is, if it were actually a meaningful source of friction instead of a talking point, it would have been resolved years ago.

I get it, moving money is boring unless the money is also a scratch-off lotto ticket.

> I can deposit money into my crypto backed debit card in under a minute in the middle of a weekend.

This is also how Cash App and Venmo support instant transfers/deposits to a dollar-denominated bank account 24/7. You can do this via unlinked refund or whatever the new mechanism is. That's not crypto related, it wasn't developed for crypto but rather coopted (not just by crypto, but by Venmo and Cash App). That's just how debit rails work.
Absolutely. I wasn't trying to imply that they had to be used that way. But they do tend to be designed point-and-click-first in many aspects. Which is great for people just getting into programming and text editing in general. But Vim's keybindings are absolutely unparalleled. Even Emacs default keybindings can't compete, and I'm an Emacs fan.
The average police officer doesn't even know the law very well. I'd be shocked if the average police dept had someone technically competent enough to speak to network security concerns: that's not their job.
That depends if they choose a proof-of-work or proof-of-stake blockchain. Proof-of-stake isn't all that energy intensive.

And do you complain about the energy of credit cards vs cash? Technically cash is carbon negative since the cash itself is a carbon sink. So should we be pushing against credit cards because of all the servers it takes to process them and all the oil it takes to make the plastic?

Or do the benefits perhaps outweigh the costs and provide other second order opportunities for energy savings?
People were able to do this for years prior to Google's existence. I'm sure a social media company can determine how to find a court without Google.
Did you read the GGP?

> One could say that the same is true in the US, but I believe the degree matters. Although the US government and intelligence agencies will and do try to overreach, there is a strong legal and cultural tradition of exposing, resisting, and fighting these overreaches in the US. I don't see that in Russia.

> So, I would not be surprised to see the US strong-arming US companies, but they would do this with sham/flimsy legal cover. The result of non-compliance would be at worst asset seizure and/or imprisonment. Both of these can be examined and contested. I imagine that the penalty for non-compliance in the Russian system would max out at having an unfortunate accident. Gangsters all, but the level of gangsterism and possibilities for investigation/redress matter.
Cool. Now I know the name of my personality disorder. This whole time I thought I was normal.
If it behaves enough like an actual particle, it calls into question the degree to which the things we think are actual particles really are.
Nah cos big corps just do what they want with no penalties unless they piss off enough people that the politicans feel like they need to make a point.. ...we're well into gangster capitalism now
I have done and will continue to do this too. It probably seems like a risk to people in other countries but there are generally very few surprises in the marquee races (I would never do this on down ballot candidates).
I’d encourage you to apply the three-step process presented in [0] (there’s also a video [1]), which is actually not specific to Vim:

1. While you are working with software tools, keep an eye out for actions you repeat and/or spend quite a bit of time on.

2. Find out if there is a command (or macro facility etc.) that will do this action quicker. Read the documentation, ask a friend, or look at how others do this.

3. Train using the command. Do this until your fingers type it without thinking.

This means that you can learn new commands only as the need comes up by observing what you do. Which commands you will want to learn thus depend on the operations you are frequently doing and/or that cost you a lot of time.

As I said, that strategy is applicable in general. Tools however differ in how well they support it, e.g. in terms of available commands and facilities.

You could start applying that strategy in VSCode (which I’m not familiar with, by the way). If it works well enough, great. If you find it limiting, switch to Vim, Emacs, or some other IDE that serves your needs better.

[0] https://moolenaar.net/habits.html

[1] https://youtu.be/eX9m3g5J-XA
> it would nonetheless be tempting to consider using it were I a landlord.

Of course it would. I still don't like this practice.

> is there any protected status in the US for "people that make use of the court system" that would bar such discrimination?

There are certain laws that protect people who use the court system in some ways, but there is not (to my knowledge) a general protection. But whistleblowers, litigants in harassment claims, etc. have anti-retaliatory protections.
FTC sues Intuit for its deceptive TurboTax “free” filing campaign
Every court has a phone number, you can lookup the court independently and call the main line to get routed to the appropriate party
This a perfectly nice Programming 101 example of a recursive function -- if an angle is too large, calculate its sine using the sine of the half-angle, otherwise return the angle (or, if you're fancy, some simple polynomial approximation of the sine). I'm sure everyone did this in school (we did, in fact).
just to clarify this a little, stephen is/was (the status of adjoint is unclear but from what i can see it is now defunct) the CTO and co-founder of adjoint and he blocks anyone who raises this in public. https://twitter.com/billywhizz1970/status/146927786616050074...

he now seems to be a full-time anti-crypto propagandist. i'm not sure how he makes a living from that, but he seems to spend all day every day talking about it for at least the last 6 months and has gained a large following on twitter due to it. personally, i find it hard to trust anyone on either side of the debate who is this invested in their extreme position and unwilling to engage in any meaningful debate with anyone who critiques their positions.

here are some more links about adjoint for anyone interested in some more background.

http://internetofagreements.com/2017/12/18/stephen-diehl-adj...

https://medium.com/humanizing-the-singularity/adjoint-distri...

https://web.archive.org/web/20190513032812/https://www.adjoi...
"Adjoint empowers enterprises to achieve new levels of efficiency and control by delivering blockchain technology built specifically for the needs of the financial industry"

https://medium.com/b2b-buzz/adjoints-interconnections-dd619e...

http://web.archive.org/web/20210316021048/https://www.forbes...

https://www.finextra.com/pressarticle/79619/tech-mahindra-pa...

https://medium.com/humanizing-the-singularity/adjoint-distri...

https://www.pymnts.com/news/b2b-payments/2019/treasury-manag...

https://www.youtube.com/watch?v=gFlu61wJe2Y
I understand that, but the reason that you get grades on assignments throughout the semester is so that you can get an understanding of where your level is and how you should expect to be evaluated at the end. If you get a bunch of subjective feedback throughout the semester, but no grades, then you seemingly have no idea what to expect when you receive your final grade.
coincidentally, as far as I know, US Court precedent works exactly the same way, in that a single, real world case is the setting for deciding the applicability, reasonableness and effectiveness of laws on the books, not the "spirit and principle in general" .. IANL
Font Awesome uses font icons, and they seem to have accessibility figured out?

https://fontawesome.com/docs/web/dig-deeper/accessibility
Malwarebytes?
> Given there is no requirement to register a copyright, and the US is subject to international treaty commitment that there won't be a requirement to register a copyright, how exactly is this proof provided to a private entity?

I think leaving it vague would be a feature.

Somebody like Bungie it should be sufficient if the request came from somebody@bungie.net. But it seems to me if you want to run a commercial venture whose viability depends on others not infringing on your copyright you should do some legwork first to make it easily known that this is your work (I'd imagine it would make any future lawyer's job easier too).
The downside is that YouTube could decide a signature is sufficient proof.
You say that as if it would be a CapEx-laden technological hurdle for Visa, MasterCard, etc. to implement chip-and-pin.

But these same companies are already issuing 100% chip-and-pin (plus tap) cards in every market other than the US.

If you want to blame anyone, blame the vendors of US ATMs and POS systems. Without their support, and a willingness to push through a deprecation/replacement of older hardware, chip-and-pin cards are pointless, because nothing reads them. (I would know, as a Canadian with a chip—and-pin card who frequently visits the US.)