skysight-inc/HackerNews huggingface dataset:
I'm actually doing this kind of thing at work right now. A client has a piece of software written by a vendor that went belly-up in 2007. The software is a central part of their business (don't ask me why they didn't try harder earlier to replace this piece of software in the past 15 years), but only talks SSL 3.0 and talks to internet resources to function.

We had set up a shim for them to give them time to fix this mess, by setting up mitmproxy[0] explicitly enabling SSL 3.0 and upgrading the protocol for external requests. Since then, the shim has been killed by a careless upgrade, and it turns out that most SSL software (including OpenSSL) can't even be forced to talk SSL 3.0 anymore. If you want to get OpenSSL to talk SSL 3.0, you need an old version. The modern versions maintain the enable-ssl3 option, but it is always forced to no-ssl3 at configure time. I don't know if there's an easy way around this, so I've set up a docker image that pulls and builds and old version, and installs an old version of mitmproxy (along with python's cryptography and other dependencies).

It's not elegant, but it does technically work, for now. At some point, it's likely that the ciphers supported by it won't be supported by the modern internet, in which case I suppose you could daisy-chain mitmproxy instances, each upgrading the protocols for the last.

If somebody has a better idea for this kind of situation, I'd love to hear it. I hate this setup and would love to have a more elegant solution.

edit: I actually discovered that OpenSSL 1.1.1p doesn't force no-ssl if you do enable-ssl3 as well as enable-ssl3-method. That's a much more workable solution, and passes tests. I mentioned OpenSSL 3.0.4 in a previous edit of this comment, but it turns out that compiles, says it enables ssl3, but fails to complete an SSL 3.0 handshake.

edit 2: If anybody is curious, here's a working Dockerfile example for this, with configuration, volumes, and path stuff left as an exercise for the reader: https://paste.ofcode.org/uCyMuF6NtLKGyesT8FKYTB

[0]: https://mitmproxy.org/
The Internet Google Left Behind
No, I definitely wasn't saying that. My point is that people are generally pretty oblivious of the vast majority of facts and features of their electronics devices.
whilst technically correct, perl hackers on the other hand...
Ngrok is a must have if you work with webhooks. Free tier is good but paid lets you have a fixed irl rather than having to update it daily.
How has this not been a problem for the ~70 years leading up to the dates in the story? Many of the power lines here in CA have been around since the 40s, yet birds are only now catching fire?
I've spent years telling people that cryptocurrencies are a bubble that rely on Greater Fools, and some day you run out of fools.

Sadly, some friends of the family became massive believers, and have lost a lot of money, I'm not celebrating that at all.
Probably unrelated, but I've realized from dealing with certain people in the criminal justice system, that almost nobody believes they are evil or doing bad things. They just want to do what they think is right, believe that what they are doing is common and acceptable, think often justice takes strange forms, or otherwise can justify what they do till the day they die. The worse someone is, the more strongly they can justify what they do.
Yea, this is cool. I use watch every once in a while. Good find.
My very first thought. hah
Defense in depth - after you're done gluing USB and ethernet ports closed, this might be something to consider. I agree it's unlikely but if it's a low cost mitigation then why not? And if you're at a shop that doesn't do anything about open physical ports in the office then yes, this is way down on your risk assessment checklist.

It's good education though. Much like there's danger in plugging your phone into random USB chargers, there's danger in plugging your PC into random HDMI cables. I didn't know that.

It would be nice if there was a way it could preserve the EDID information without needed to manually clone it. It looks like this device is good for protecting the display, but I'd be more interested in a device that can protect my laptop when I travel.
I'd pay for the service if the model was: I'll pay you when it's right and you refund me some amount every time copilot is wrong and I have to delete the entire block. It's good for small boilerplate stuff but that seems to be the limit. The attempts it makes are more complex code are really bad and I have to manually check it very closely to ensure it's right. I like the boilerplate boost but it's not worth $10/month to me.
Really they probably should have put the whole economy down when it all collapsed in 2008 and 2020.

All we have now is people prodding and poking a box hoping for a particular desired outcome. The zombie corpse of inflation rips the wealth from the bones.
Have you considered that this might actually be a diagnosable disorder? I’ve previously had a colleague with delayed sleep phase disorder[1] and we were able to do things like shifting team standup to first thing after lunch, which allowed them to arrive at work at 12:30, then work through to 20:30. Really wasn’t any different to working with people in different time zones, just requires some thought about how you approach it.

[1] https://en.wikipedia.org/wiki/Delayed_sleep_phase_disorder
They raised 21 million how are they millionaires lol
It’s hardly different from reading those projects yourself and learning from them.
You are correct, the researchers just did not realize this.
I wonder how long until state actors realize that copilot would be a perfect vector for getting developers to introduce subtle vulnerabilities into their own projects?

By its very structure it's output always looks credible, and it's not always right-- it wouldn't be a sign of foul play if copilot suggested some code that looked just right but happened to backdoor your cryptosystem or protocol.

Maybe it would be a little tricky to get it to produce NOBUS vulnerabilities that were credible mistakes, but if the target isn't OSS then nobus isn't really that important.
Right on the money.

What I want is a copilot that finds errors ala spellcheck-esque. Did I miss an early return? For example in the code below

def some_worker
if disabled_via_feature_flag
logger.info("skipping some_worker")
some_potentially_hazardous_method_call()

Right after the logger call I missed a return. A copilot could easily catch this. Invert the relationship. I don't need some boilerplate generator, I need a nitpicker that's smarter than a linter. I'm the smart thinker with a biological brain that is inattentive at times. Why is the computer trying to code and leaving mistake catching to me? It's backwards.
Here's a comment I posted a year ago about the sacrificial plastic gear in a Baratza coffee grinder:

https://news.ycombinator.com/item?id=27018629

One of the replies is a truly frightening story about people who broke the sacrificial gear in the tailgate window mechanism of their Toyota Landcruiser and machined a new one out of brass!
I am totally not into this kind of thing, but I can appreciate and admire passion when I see it. Well done on working on what you love, OP.
It appears the attack is based on a failed login leaking information, and that 512 failed logins would be enough for Mega itself to crack the key.

But, to be a practical attack, the client software would first have to be modified to conceal the suspiciously big number of bogus failed logins from the end user (if I understood clearly)
I always figured it was about salting roads and sidewalks for better traction and to keep them from icing up. Can't say I've seen table salt used that way, though.
While she's certainly a highly accomplished writer of her own accord, a weird bit of trivia is that she dated Steve Jobs for a bit: https://en.wikipedia.org/wiki/Jennifer_Egan

While I'm here dropping off-topic trivia, another interesting one is that accomplished writer Mona Simpson is Steve Jobs's sister, though they didn't know each other until later in life: https://en.wikipedia.org/wiki/Mona_Simpson

Anyway, I haven't had a chance to read the article yet, but will do this evening. Thanks for posting it!
I turned it off a week ago because I found it was wasting time when everything it generated required going back to fix issues.
Recommendations for Reducing Infant Deaths in the Sleep Environment
So whats the plan? Keep doing what we are doing? I am not the hippie type, but we simply cant continue this way. I strongly disagree with people that say we need less creature comforts in order to improve our ways of managing the environment. I think we should aim for even more mobility, even more living space, even more food, but with much more care about our environment. Whats the worse that can happen? We get to breathe cleaner air for “nothing”?

I sometimes pause and think about how we are able to harness the power of our star, or control atoms, to fuel our cars and power our homes instead of burning crap and inhaling smoke. I think we are getting somewhere.
Show HN: Hacker Blues
I made Hacker Blues to simply change the color theme of HN for those times when I’m feeling blue. While I love the orange, I really love blue. I know users can customize the nav color on their profiles but I thought it’d be great to see the entire theme swapped.

I’m also thinking of creating more Hacker News mods for the community that are fun/useful (ideally both). I know people have made a bunch already, but let me know if you have any requests!
Can you blame them? Imagine wanting a pony for your birthday and having your dad tell you no but then find out he's offering them to Space X flight attendants.
They meant monthly, though it's not quite that low. According to Reuters[0], the national minimum wage as of this month is 45,540 (around 368 USD), and it will be increased again in August.

[0]: https://www.reuters.com/world/americas/argentina-accelerates...
Great advice on parent and this one.

If ever founder followed this advice, there would be a revolution in the funding landscape.
I'm not bristling like you're attacking me, that again is you assuming my reaction. You've done it multiple times. That isn't how you have a productive conversation.

You said distinctly that if I said it wasn't an impact, that I just wouldn't admit that it was. That is calling me a liar.

I do not consider things that are "correlated" with a previous salary. I consider only if you can do the role. You can make less or more, and it doesn't change the reality that you need to fit into a very high performing logical team.

I don't have a college degree, and would never consider it in a hiring process. I don't know if I've ever hired someone with a previous position at a Best Buy retail location, however I have certainly hired people with relevant experience of that.

Again, you continue to assume my actions. That's all you're doing, creating a model in your head of who I am based on your past experiences, and then questioning me to confirm I am who you've made up in your head.

The current process is certainly broken, but it isn't due to interviewing. If you'd have asked that question, I could have explained it. Instead you've done nothing but tell me who I am, which is incorrect.

Have a nice day.
Back when I was a briefly a network engineer at the start of my career, on cisco equipment we'd do 'reload in 5' before big changes - so it'd auto restart after 5 minutes unless cancelled.

I'm sure there were and are better ways of doing it, but it was simple enough and worked for us.
"CADR" is a word I included for a reason.
I currently live in a suburb of a large German city, in a neighborhood packed with row houses and low-rise apartments. My father lives in west Texas in a neighborhood with maybe 50 households, each on their own 1-10 acres, 30 miles from the nearest town.

What is the per-household cost to my utility to maintain the buried lines for my neighborhood, versus what would the per-household cost be to my father’s utility to bury the lines to his little neighborhood?
Go on any migraine forum and look at the first treatment doctors give. Topomax.

Some people do well on it.
A huge number of people become very stupid on it. (I managed to run myself over with my own car)

Tons of drugs cause cognitive issues.

I actually started taking a simple test daily to map my cognitive ability on various treatments.
Deno overstates the problem it is intended to solve because its founders needed to justify achieving funding by being developer-famous.

Let's say a company were to adopt this tech over Node, well, it seems like it would be slightly better, but probably not much of a game-changer.

I'll leave it to y'all to talk about what tech is truly interesting as I don't want to seem ideological/biased, I just don't see how Deno is particularly notable.
That's not what I meant by "building your own networks" - was referring to the traditional ways of building networks before the internet was even a thing.
Arguing that Twitter has some sort of magical status as the ultimate channel for broadcasting your opinions to the world strikes me as absurd. I barely use it, and when I do it's not to read opinions (I only subscribe to institutions/organisations that use it to broadcast important information). Pretty sure most people I know would say the same.
If we look at Japan as an example, the observation I would make is how much people interacts with computer that simulates or replaces physical social interactions with a computer facilitated one. Be that a social networks, traditional media, movies, tvs, but also practical every day activities like work, shopping and entertainment. This interferes on a psychological level how people form emotional bonds, which changes behavior in both men and women.

If we observe that women are choosing from a smaller pool of men, one way to describe that would be that women turning into more tournament-like in their strategy for reproduction and away from pair bonding. Tournament and pair bonding strategies have both benefits and drawbacks, and both are related and possible influenced by perceived social status of potential mates.
I love the concept, it’s very appealing. However, I can’t stop thinking that this is mostly aimed to a post apocalyptic scenario, and if that is the case, computers would be the least thing to worry about :(
A smartphone is merely a dumbphone with better UI. Look how transformative that was.

None of these things are achievable in the same way with a 2D screen because by definition a 2D screen lacks the ability to literally display along the Z axis. Our minds perceive in 3D, not 2D. A 2D screen literally provides less information about distance and location to the senses. Moreover, a 2D screen has a complete inability to create the feeling of presence, something that is new to AR/VR.

Actually, to act as if the feeling of presence is not new, despite you apparently having used a headset, seems bizarre to the point of incomprehensibility. Use VR porn and tell me that’s not a completely new, compelling experience. I’m addicted to it — it’s like I’m literally having sex. Honestly, your rejection of presence as revolutionary means I don’t actually think it’s possible to get anywhere with this discussion.

Lastly, your difficulties developing something compelling with AR is not a sufficient argument that nothing compelling can ever be achieved with it.
I picked a random location and got "daringly kleenex sloppily very". Are there any issues with the fact that "kleenex" is a registered trademark?
A field so monopolized that every publisher of moderate size is attempting to replicate it? The assumptions for monopolies of the past was that there was a size of investment which meant nobody would throw money at trying to compete at a loss. For better or worse we are beyond that with venture capital, demonstrated by the plagues of foo-sharing and atreaming services. Frankly it seems that people think that tantruming over not being able to have it both ways and throwing the "M" word meaninglessly is how you get what you want, with sense and fact not parties to the conversation.
I would bet money that alzheimers will eventually be found to be primarily caused by either a 50+year incubation period transmissible disease or by pollution.

As soon as we get good data as to the cause, I think we'll be able to eliminate it pretty quickly. For example if we find that it is spread by contaminated milk, we will make tests for the disease on milk and soon get rid of it.
I'm trying to think of a use case for such a service. Any ideas?
Kids don't generally get to pick where they go to school. At best, their parents may have some ability to either enroll them in a private school or move. Alternately, their parents may have no money to move or put them in a private school, or worse, they might not care.
Ah, yes of course. I loooove the band, btw. I once went to their concert. L'Enfant Sauvage is one of my favorite songs.
Been writing web stuff since before the dot-com bust. Preact + TypeScript is probably my favorite front-end programming combo yet. I liked VB6 and C# WinForms, though, so maybe I’m an invalid sample.
Greenwashed: Electric Pickup Trucks Are Dirtier Than You Think
The readme says there is also an additional device that can be used for copying the ERPROM, instead of doing it via the computer. It would be possible to integrate the copier in the firewall dongle but that would mean having a microcontroller in each device that is just used once, driving the unit cost and the size up.

The firewall dongle as it is is just holds an EEPROM, ancillary components, and the video passthrough traces.
That's just not true
Sqlx is the way.
I agree that those communities exist, but a person who has been digitally domesticated faces not only a greater challenge finding them, but also of in integrating with them. Digital domestication represents not only cultural gap, but a social gap in skills, perception, norms, and values that makes social integration a multifaceted issue. I think we both agree the benefits associated with doing so while being aware of the unique challenges. Live and drink, friend.
I read it as a example of late stage journalism and it's continuing decline.
Shameless plug: www.svix.com/play/

Also gives you a fixed URL and is free, and there are quite a few other free tools out there.
My experience is that many prominent professors behave in a monopolistic way. That is, they try to sabotage theses, grant applications and publications in review that go against their own research.

Lots of different areas, particularly in medicine, have slowed down or stagnated as a consequence of this. For example, the connection between immunity and cancer was obvious in the 1990s but it took many uphill battles to get funding for immunotherapies. Proponents of somatic mutations as a cause of cancer have typically taken most of the research funds and blocked alternative ideas.

Parkinson's, Alzheimer's, T1D, etc. have pretty similar stories.

Luckily less politically driven funding agencies and, ultimately, VCs are introducing some efficiency back into the system.
It has a second seat. No reason you need two people to go shopping.

I'm just glad someone, somewhere is considering a sane vehicle rather than this ridiculous size/speed arms race. The many, many costs of doing 80-120km/h are nowhere near worth halving the travel time (at best).
At least if they are taking the drone down to steal the package it will not show as "delivered" and the end customer gets the shaft!
That calculation works if it doesn't also cost you any time - which by all accounts it does, e.g. in review.
I did some work at a utility company a few years back where I had access to a database of every historical outage across the system along with such info as the diagnosed cause.

Thousands of outages were caused by “Wildlife (Squirrel)”—more than once it crossed my mind that this file was the last record of those squirrels’ lives on Earth!
neither this nor w3w are as useful as googles already open source https://maps.google.com/pluscodes/ in my opinion.

With plus codes you can both have a short, memorable address and gauge relative distance with other nearby addresses. I'm not sure I can think of a reason to ever use fixphrase or w3w as an alternative to this already existing open standard.
They still have to pay for servers and maintain the model itself. A neural network isn't just the data -- training and commercializing it (testing, QA, etc) is a lot of work.

You wouldn't have an issue with someone making money by using open source software (like a website that is hosted on a server running linux).
There's an old saying that I can't quite remember. Possibly something about leopards and spots.
The latest opentrack neural net tracker is great too we're using it in dcs with mouse for clickables and it's a super pleasant experience
You can already get equivalent vehicles for around the same price: they're street legal golf carts. For example, this company sells a bunch of models: https://bintellielectricvehicles.com/category/street-legal-g...
Explanations and Examples of Jekyll Plugins
It's really hard to find causes and later cures for things that come slowly over lives that take many years to hit you.
Leading Standards Orgs and Companies Unite for Open Metaverse Interoperability
I better appreciate the importance of the authenticated encryption with this attack!

The data of 0.25 billion users could quite easily be decrypted by whoever had access to MEGA’s systems (including governments and MEGA).

It also shows the importance of open source code. I suspect there are far more vulnerabilities and backdoors in closed source proprietary software.
I've known professional athletes in skating that have had problems as well. Hip replacement in their 20s, joint pain, that sort of thing. Training for hours a day can definitely be problematic later in life, at least with that duration and degree.
heh, I knew for sure Deno would be successful from the first moment it appeared on HN and people here were critical of it.

My rule of: The more HN criticizes it, the more likely it succeeded, still rings true.
The Aptera is substantially more upmarket in both price range and functionality.
>Crypto trading is zero-sum: Every dollar a winner makes, a loser lost.

No, much worse than that. Most of the money retail traders put in is immediately burned to pay for electricity for miners and to develop ASICs that are worthless for any other purpose. Regulators will never be able to recover that money because 90 cents on the dollar is just gone.
> Pray tell then, should retail workers buy bars of gold, or mansions?

Sadly, retail workers are super hosed by inflation as they don’t have much to invest. But if they did, they could just buy a commodity ETF.

It’s been really funny to talk with friends who are “discovering” financial instruments through crypto like they don’t exist in the real world.

Pretty much everything is available to the retail investor and is much easier to buy than crypto. So a wage worker is better off buying $50 of a vanguard fund than $50 in some shitcoin or etf.

No one is 100% certain and I expect one crypto will make it because we need digital cash. But it shouldn’t increase in value and isn’t a good investment. Just like investing in dollars and putting them in your mattress is stupid, the winning currency will be stupid to hodl.

Just like people do win the lottery, people will make money off crypto in the long run. But most people will not as there’s nothing of fundamental value. That commodity etf at its heart is concentrated orange juice, or something real that can be sold and people demand. There’s nothing at the heart of crypto.
The Arcimoto is technically a motorcycle (most states classify anything <4 wheels as a motorcycle) but there are exceptions in the majority of states that do not require a motorcycle endorsement nor a helmet for these types of vehicles.

https://www.arcimoto.com/