skysight-inc/HackerNews huggingface dataset:
I’m not a security researcher, but a normal backend dev (possibly) This comment intrigued me and led me down the typically great HN rabbit-hole.

I found a couple of sources related to this, fascinating, thank you!

https://www.techtarget.com/searchsecurity/news/252467901/Cap...

https://www.shellntel.com/blog/2019/8/27/aws-metadata-endpoi...

I knew about SSRFs, but the ability of attackers to pivot and stack and chain minor vulnerabilities continues to amaze me.

I hope AWS mitigated this metadata endpoint weakness by now.
As other said already, it's very cool, uses quite some CPU (fans go brrrr), and it sometimes feel a bit sad to get the pattern changed in your stead.

I wanted to add that I'm in awe in the very subtle way the colors are chosen, which has an almost Impressionist quality in some cases. Little variations of hue that are fairly neutral, but where you can see the rich color variations when focusing on the details. Sometimes there seems to be little patches of light in an abstract pattern, with a physical quality. The cell size can also create a perspective effect, particularly striking with a wave pattern. It's so evocative!
That is... the problem. Opposing sides frequently can't even agree on what's "real."
I used CFL light bulbs for like 2 decades and they were extremely long-lasting. I got rid of the last one some months ago, it wasn't dead yet but got a bit weak. I had installed it like 15 years ago.
It's really not about the arrows.

The benefit of the LSP is that it decoupled the plugin development environment from the editor development environment.

This is a BIG deal.

Remember building plugins for Eclipse? Exactly. You don't because building them was massive, massive pain. You had to install a universe of build tools, understand how they went together, build your plugin, fit into the UI correctly, pull it into the system and configure it, and finally you could do some development.

The existence of the LSP means that the plugin development and the editor development are decoupled. I don't have to put together the enormous build system of the editor in order to create the LSP plugin. I'm not stuck in the language of the editor implementation when creating an LSP plugin.

This dropped the cognitive load for creating a plugin by order and orders of magnitude.
> Quotes are not always scare quotes. In fact, they are most often not scare quotes. And if you read that one sentence in the context of the sentences that precede it, it is quite clear that the sentence means exactly what was written.

> I did not. You'll notice that the parent brought up Harvard, not me. Higher education was one of their talking points I was responding to, however in no way was my argument limited to higher education.

I don't think you quite understand here. The purpose of bringing Harvard, is to talk about how Harvard discriminates against jews and asians in their admission process.

This is a common thing that gets brought up. Maybe you weren't aware of the context.
Also, did you disregard my point about support for code gen. Netstandard 2.1 CodeGen in C# didn't work properly around 1 year ago in VS, while Rider had no problems with them.
This is great supporting evidence in favor of reintroducing user-selectable stylesheets, along with better UI to allow more users to take advantage of the feature.

Remember when Opera Browser let you switch to user-style mode with one click or keypress?
No, pewdiepie was banned for five minutes for saying he was going to join isis. He’s still on the site but doesn’t tweet.

https://mobile.twitter.com/pewdiepie

Hate speech doesn’t need legal protection as a term to be against the rules of the site. I can’t remember if that’s the actual term twitter uses, but it’s the spirit of their rules.

We could have a wider debate about whether our public square should be privately owned (I don’t think it should) but that wasn’t your point.

Edit: more details and reason why his tweets are (self)deleted

https://www.bbc.com/news/newsbeat-37244296
I’m under the impression that gist.githubusercontent.com is a popular malware host and C&C especially before they disabled anonymous gists.
Is DNS really a problem with respect to 'centralization'?

Where is the harm being caused?

Where are the risks of harm?

What are systematic negative effects?

And if those can be articulated, are blockchain resolutions a solution to those problems?
I think it's slightly different. Consider this problem instead, what's the chances of two people sharing the same birthday in a group. It's (365364...*(365-n+1))/(365^n). If you plot this out, it increases exponentially. At n=23 it's about 50%. At around 60, it's a bit more than 99%. It's similar to the other problems, where a given condition can have an arbitrarily high chance of being present at surprisingly low graph sizes.
Exploiting remote code execution within VirusTotal platform
M8 they are sleeping in eachother's beds and smelling eachother's breath for 3-4 months at a time in a 10 x 170 meter tube underwater. Something's gotta give. Surface Navy is fine for mixed gender now it's become very political. Subs are not the place.
US Army may be about to 'waste' up to $22b on Microsoft HoloLens
i don't get this meme that just because body language isn't 100% accurate, it is completely meaningless

of course it shouldn't be admissible in court, but it's ridiculous to take that and say that body language tells you nothing
>Government should think about breaking up social media sites or highly regulate them

they don't need to do anything that drastic. They literally need to do one straight forward thing. Force Twitter to open up their API and let people build a bridge to ActivityPub.

Hell Elon could do it if he is serious about decentralization.
It is not buying influence as each account still needs to attract its own followers. It simply places the cost of influence/reach on the size of the account instead of on individual users who are the ones being influenced.
Registration UX/flow, JavaScript APIs, and removing Resident Keys at least.

Windows computers with Windows Hello activated basically completely ignore hardware-based WebAuthn devices unless you specify that you want to register a cross-platform device. So the same piece of registration code will act differently if you're using Chrome on macOS, where you will be asked if you want to register a platform authenticator (Touch ID) or if you want to register a cross-platform authenticator (Yubikey), and Chrome on Windows, where you will basically be automatically defaulted to platform authenticator (Windows Hello) unless you abort the Windows Hello registration, in which case it will switch over to a cross-platform registration. You basically need to set authenticator attachment to either "platform" or "cross-platform" to get consistent experience across macOS and Windows.

And Safari for example requires user gestures for navigator.credentials.get(), so if you were thinking of redirecting users to a /login/verify/ page where it will automatically prompt for a WebAuthn verification, you actually need Safari users to click on a button on that page. On other browsers, you can basically just pop up the WebAuthn prompt automatically on page load.

And removing Resident Keys is another pain point. On Windows you basically need to do it via the command-line, whereas on macOS you need to go to "Clear browsing data" and then select "Passwords and other sign-in data" in order to get rid of them. So on Windows, they make it basically impossible for the regular user, and on macOS, they make it so easy that users might accidentally do it if they don't realise that the internal password manager and the stored Resident Keys are wiped the same way. Can't remember how it worked for Firefox, but I'm sure it will be at least slightly different (or didn't work at all, Firefox was painful).

I also can't remember off the top of my head if Firefox even supported fingerprint-backed authenticator devices on macOS. On Windows it might, since I think everything there goes through Windows Hello.
Digitize dang into an AI so he can scale, too!
Good idea! It would be much better if you add a final event when you complete successfully the game. I can still writing words and words and it looks like I have missed the target of the game ;)
I'll have to go with clickbait as well, if this was more widespread there would be a lot more news in this area.

The human race have known many serious illnesses over time, but there is no evidence that COVID should be number one on that list.

I see this more as a long drawn out realization that we can live with COVID and those who need better protection can get the vaccine.

Totalitarian regimes will see this as a chance to exert more control over its citizens, while the rest of the world moves on.

It's time to focus on the environment now, which is hard to do when Putin is invading Ukraine.
Folks, What are your recommendations for some Mastodon communities which might be of interest to typical HN audience and are 'absolutely legal'?
>Unfortunately it looks like Mastodon still hasn’t renamed their “toots”

Maybe we wouldn't have so many reasons to leave twitter if people had taken tweets less seriously in the first place. If everyone knows that artificially short posts with insanely widespread potential reach are all 屁s, that could help fix a lot of what's wrong in our world.
https://techcrunch.com/2021/10/29/mastodon-issues-30-day-ult...
Interesting. In my case they just lubed me up and went in LOL
> why do people support snowden's leaks but no one is leaking similar shit from google?

Whistleblowers are very rare creatures to begin with. Not too many people are willing to risk the legal, financial and career ending repercussions assuming that they even have both access to the data and a means to copy it in bulk to back up their revelations. Even now, a large number of people would sadly still consider Snowden to be a traitor.

I imagine Google keeps the data they collect (and more importantly what they've inferred about us using the data they collect) under tight controls to avoid that problem. With only a limited number of people able to access the trove of data at all, and those people being kept happy (or perhaps more pessimistically, kept in line by fear. I mean let's face it, Google likely has enough dirt to bury any one of us alive) it's not hard to imagine that no one has been willing or able to come forward.
Most Conservatives have instead gone to platforms that actively advertise for their specific niche. Especially places like Gab and Parlar. Although Telegram has been a very popular gathering place as well.

Libertarian Tech folks are actually a small minority in the grand scheme of things, and any I know are definitely in favor of Mastadon. But non-tech folks have a much harder time understanding and building out the platform.
People who work at FAANGs think they're the most important people in the world
Good success. The $24k is misleading, in that there is more 'untapped value' now this has been done once. If he makes a video series based on the same thing for example, it should be easier to make the next $24k using all that is set up for marketing.
What was the issue with GPT-3 & blog posts?
A Chromium fork, which could've been an extension or a companion app. No thank you!
For anyone who really wants to get into electronics, skip this and go pick up anything written by Forrest Mims. Practically anything he's ever written is gold. And since they were so common there's a lot of them floating around used.
r/Outside is far from sane :p
> I feel silly to have to defend him again

"Have to"? You don't "have" to defend Elon Musk at all, and maybe you should ask yourself what compels you to do something that makes you feel silly. I mean, you do recognize that what you're doing here, defending the reputation of a billionaire, on some level is very silly. He certainly doesn't need your help, so why do you do it?
They’re nearly all libertarian. I’m not sure what you’re asking.
Shuffle.dev is a collection of premium UI based on many UI framework too.
Not intending to be inflammatory, but how would you feel about your taxes going to funding the invasion of Ukraine?

I'm not a big fan of my country's military spending, and it's probably trivial even in terms of percentage of GDP, in comparison to that of the US, Russia or China.

In terms of regime change "approach", if the US did manufacture the overthrow of the previous Ukraine government, it has the appearance of a much lower cost of human life than the approach Putin is taking. And I'm no fan of the US' "manifest destiny" ego trip but I don't want to get too far into whataboutism.
For those with an interest in books, try BookWyrm [1]. It's a Mastodon instance that caters for books (think 'federated Goodreads'). I use it to put up my reviews of books and to find new books and bookish people.

[1] https://bookwyrm.social/
No, thats not going to happen.

The supreme court, which is 6-3 conservative would not let Trump be disqualified like you are suggesting.
Frankly, I think that only, say, three things are worth keeping from traditional shells: pipes, redirections, and $-variables.

Most of the rest in them are design choices dictated by highly constrained machine resources and, most of all, incremental evolution. I'd say that Bash as a language is larger than Hush, while being conceptually much less clean, and in many regards less ergonomic.
As one of your 640 customers - thank you!

Having a lightweight reference for simple things that I only do occasionally is a godsend and a massive time saving. I can dive into Deployment from Scratch and tweak something that needs updating, or even deploy a new system in less time than it takes me to lookup and parse/refresh my knowledge from the actual documentation on most topics. And even if I do need to refer to the docs for something not in the book, it is much much quicker as I have the context already.
Tide is finally turning in the culture war. Maybe there is hope after all.
He's literally referred to himself as a free speech absolutist [1]. I don't know how much more explicit it can get here. Unless you want to argue that he's a hypocrite and his words have no meaning or something, in which case that's precisely the problem a lot of people have with him and his 'free speech' stance.

[1] https://twitter.com/elonmusk/status/1499976967105433600?s=20...
You have anecdotes not data. If you aren't aware of banned accounts on the left that's bias in the media you consume, which is very common since there is barely any popular media on the left. Doesn't matter though, the extremely strong right wing propaganda has scored a victory today and they'll get to spew more of their propaganda on Twitter once again.
I recommend https://fosstodon.org/
I'm in an instance with a couple thousand users, it's not very active. I think network effects are extremely important and eventually you have most people going into the biggest instances anyway.

Though obviously this is still a preferable situation, mastodon's reach is still not good enough. People don't just want to say things, they want to say things and have others engage with them.

But I mean, I would still encourage at least trying it; exploring different instances, finding a home.
How do you assure that the formatting as been done without running it in CI?

A lot of steps in CI aren't there to do something, they're merely there for analysis reasons and conditionally marking builds as failed
To me Twitter is like tabloid journalism - sometimes interesting to read, but lots of garbage.

I don't need an alternative. If Twitter goes to crap I'll just stop using it and find something better to do with my time.
1. Outside is great though, and quite underrated.
Let's Try V on OpenBSD
See: (DoD) Audit – Army’s $22B mixed-reality Goggle needs more Soldier input

https://www.armytimes.com/news/pentagon-congress/2022/04/22/...

https://news.ycombinator.com/item?id=31140568

The Integrated Visual Augmentation System (IVAS) : https://en.wikipedia.org/wiki/Integrated_Visual_Augmentation...
Usually after the visual effects of LSD have ceased you still can't fall asleep for a good 3-5hrs (or more, IME).

Benzodiazepines and similar drugs can stop acid trips almost completely in their tracks, allowing you to sleep. People also keep benzos on hand in case they have a bad trip - so they can stop the trip.

I would say, amphetaminnes can have you "wired" much more, but maybe for less time. But I don't think benzos can stop an amphetamine high as well as they stop LSD trips.
No, actually in Scandinavia.
> "Here's a much better alternative to Twitter.

It's called 'Outside'. Try meeting some people in it. They tend to be sane, and friendly. Usually."

1. These are not mutually exclusive

2. Very condescending tone

Yes being outside is great, but there are parts of the world where you spend half the year inside because of the cold(outside). There's also been a pandemic going on for quite awhile where in many parts of the world the "outside" has been severely restricted.

People outside might not be discussing topics that you're interested in.

I'm indifferent to both Mastodon and Twitter, but they both have their place in the world.
Dataloops – free book on deep learning data
Requires pretty big buy in. Having to run your own instance is a big ask for most people and since whole idea of Mastodon revolves around the operator censoring discourse on their instance you pretty much have to run your own instance unless you want some random Joe deciding what you see and can post about.

Idea here is good, but I cringe at the main selling point being able to censor topics you don't like.
The accumulation on one instance is not necessary, because there is almost no difference in the user experience between a local use and a Federated user.

Also you can cross post to Twitter.
This is what I opted to use.

Just use the reach from Twitter, but the main thing is mastodon
The OS can cause 1ms pauses easily, so I would be wary whether 1ms is truly unacceptable. To consistently achieve it, not even native may be enough in itself, you have to circumvent the OS kernel as well.
More unit testing with Excel Lambdas
The effect you're seeing on the coin flip is best understood by seeing that each coin flip is independent, and in no way connected to the past. So, the odds are based on a fair 50/50 per flip, which leaves you with a simple 2^n sample space of one of each binary combination for n flips. The math for that works out easily, and can be plotted.

The emergence of random structure in graphs, however, is different. The chance of a specific structure, such as a cycle of some length or a spanning tree of certain dimension, can go from not particularly likely (<20%) to significantly likely (95%+) in just a single additional node. Those transition thresholds at which the percentage changes in an intuitively surprising way are the subject matter of interest here.
I've been asked before in an interview "Don't take this the wrong way, but do you have a problem with people ... taking you seriously?". For a bit of context it was a spammer company that had gone legit and it was email marketing and I didn't take the interview seriously but it was a friend of a friend reference and I was curious. I laughed out loud and said "I would not say I personally have a problem with it."

The interview lasted for another couple hours and I got to know both of the guys really well. I moved on to another job before they put together an offer but I got to be good friends with both of those guys. I still don't have a problem with people taking me seriously. But also, some people do, some people don't.

A lot of this guys advice seems fairly useful. The "laugh less, joke less" thing is just nonsense. Fuck that, I'm on this planet to laugh. I don't want to make people uncomfortable and I do my best to not be inappropriate at work... but that's just stupid advice for miserable people to be more miserable.
If they have 1000+ accounts ordering 1 CD per customer then this won't affect them until they have more than 4 customers at once.
Forever domains are built on Handshake. Handshake is an attempt at a decentralized DNS root zone. ENS is a different, independent project.

I guess the Handshake people will make sure .eth (the ENS suffix) resolves to ENS on Handshake. Handshake would like to eclipse everything :)
Yeah, easy to lose track of threads on mobile.
Didn't realize I was talking to the person who worked both on IntelliJ Rust and rust-analyzer!

This is the best case I've ever heard for IDEs. Thank you!!

1 and 3 seem to me to require extensions/improvements to the LSP protocol.

2, and 6 seem like one could build them off of treesitter (but I don't think anyone has as of yet).

5 seems already implemented in a vim plugin[0].

Thanks for 4 and 7 (the "myriad of small, polished details") also, I feel like I have to spend a week using an IDE to get a feel for them.

[0] https://github.com/dinhhuy258/vim-local-history
Just his foundational study, where he discuss methodology, is cited by 470 others. Double check for “The search engine manipulation effect (SEME) and its possible impact on the outcomes of elections” here

https://scholar.google.com/scholar?hl=en&as_sdt=0%2C5&q=robe...

In his bibliography you can see many follow up papers. So you are just wrong saying his methodology and approach is the work of a lone warrior.

If you are asking me to summarize his research body that’s unreasonable to show my claim that it’s peer reviewed, which it as shown above demonstrably is.
It's completely bizarre to me that Amazon, with all that data and ML cannot detect this and hammer down.

Then again their best recommendations to me are extremely simplistic "you bought a washing machine, maybe you want a washing machine?" attempts, so I guess not.

Or they just don't care that much because that costs money and this is just easier and cheaper.
Fair enough - I missed the part about Handshake. I don't know much about Handshake, but, if it does what I assume it does, I do see how DANE would make sense in that context. Whether or not Handshake is a good idea I guess is the real discussion point - but, maybe one I'm not too interested in debating, especially given my limited knowledge.
My Taipei Quarantine
well first off the body language needs to be interpreted, there may be some people who can tell lies and never be caught by body language and there might be some people who will always be caught by body language.

But perhaps the people who will always be caught by body language have issues that cause them not just to be reliably caught when lying but to mislead the interpreters of their body language into thinking they're lying when not.

Given that part of the task of interpreting someone as lying by body language also involves understanding cultural differences, and as a human activity is prone to human bias, it might be beneficial for rational people to discount the use of body language interpretation in determining lies completely as an unmeasurable process.

In short body language may not be completely meaningless, but it is probably best to treat it as if it were.
My experience is different. For me, Python has a good balance of readability, access to system functions and consistent, predictable interfaces. I'm not saying you're wrong, just that "it depends". I'm pretty adequate at writing BASH, but it's not my "daily driver" programming language, so I have to still try things out, google a lot of things that aren't easily obvious, and excessive trial and error. But as a Java programmer I also know that Java, with all of its abstractions and verbosity, is a complete non-starter for shell scripting. For me, Python has often been a helpful compromise.

Part of this may also be that I've never learned to do a great job at organizing a BASH shell "project". So, those often get unwieldy maintenance nightmares. At plenty of time me and my peers have agreed: when your BASH script exceeds [some low number of] lines, find another language.

Again, it matters a lot what your team's culture and comforts are. If that's BASH for you, then r.e.s.p.e.c.t.