skysight-inc/HackerNews huggingface dataset:
I hear you, I initially didn't want to reimplement a whole server for that. And there are arguments for scrapping the API I slapped in front of it and make everything go through LDAP.

Eventually, what drove me to create this is that it's targeted at small self-hosted servers that just need <20 users and _don't want to learn LDAP_. People who either don't have the background necessary to learn LDAP or don't have the time to dig into it. That's why an important part of the repository is the list of example configs for many services that provide good defaults for easily setting up the connection with LLDAP. The server admins don't actually need to know LDAP to use LLDAP.

An additional benefit is that the resulting image is small and the software is fast, because it does way less than OpenLDAP. And the API/SQL DB makes it more easy to integrate with scripts or applications that manipulate users directly.
HP should open OS/8 and RT-11, the two big influences on CP/M. OS/8 is kind of remarkable, running on a system arguably less powerful than the first 8-bit home computers (I would say they are closer to PIC microcontrollers, but with more RAM):

https://www.pdp8online.com/os/os8/index.shtml

PDP-8 memory is heavily paged. There are 128 word pages- direct addresses can only reach within the current page, and literals (immediate data including addresses to other pages) have to be allocated out of this current page along with the instructions. Second, there are 4K-word fields. So you need to use far jumps and returns to access outside the current field. This is just like PIC microcontroller pages.

OS/8 reserved only two pages for itself. Things like the command interpreter were swapped out to disk or DECTape.

https://en.wikipedia.org/wiki/DECtape

If the application needed device drivers, it got to choose which pages the drivers would occupy- meaning the device drivers had to be written as position independent code. Also I think each driver was limited to two pages..
> if someone told me 25 years ago that this would be a thing I would have just laughed.

Wikipedia says

In the modern era, the pseudoscientific belief in a flat Earth originated with the English writer Samuel Rowbotham with the 1849 pamphlet Zetetic Astronomy.
In 1956, Samuel Shenton set up the International Flat Earth Research Society (IFERS), better known as the "Flat Earth Society" from Dover, England, as a direct descendant of the Universal Zetetic Society.

so flat earth has been around for 170 years. And people did laugh at them:

The term flat-earth-man, used in a derogatory sense to mean anyone who holds ridiculously antiquated or impossible views, predates the more compact flat-earther. It was recorded in 1908: "Fewer votes than one would have thought possible for any human candidate, were he even a flat-earth-man."

A "modern" conspiracy might be the Sandy Hook, Pizza-gate, etc. but those originate with Alex Jones so not a general example. Maybe "the moon landings were faked" is a good example?
One of my healthcare providers uses this and I abhor it. With their website I can see appointments, billing, etc., but instead of simply going to the website and logging in with 1Password, I have to go to the website, enter my email and click log in, switch to my email and wait for the email, open the email and click the link which takes me back to my browser.

It drives me nuts.
> It's a bit like saying a piano player will only use 10% of the keys at a time.

In a pedantic way, it is close to the truth as most pianists use up to 10 keys at a time (a few more if you count pedals). There are many keys available to the pianist but the pianist remains constrained by their input capacity.
Europe had a ton of time to convert. The push was not strong enough, especially during the rather long economic boom (circa 2012 - 2019).
Microsoft Authenticator - syncs your codes to the Cloud so you can pull them elsewhere (which your phone is out of action.)
From a security perspective, most passwords can be reset by email, so sending a magic link or code to the email has approximately the same security properties.

The only real difference is if the password reset forces you to change the password and logs you out everywhere, then you can at least detect the break-in more quickly with the password approach.
> If you look more at social media if you are at someone's house and take a selfie, you aren't going to ask your friend if having their room as your background is okay.

Prepare to get kicked out if you post my private space on the internet without asking.
Funny how you don’t attack the ideas/content of the links , just the posters themselves.
Couldn't find the pricing page. Is this free? What's your business model?
>I have seen data from a big retailer that shows any user that doesn't immediately purchase an item, is actually not that interested in the product on the screen.

Fuck that.
Unless it's an emergency (in which case I'll go to a shop), anything i purchase online is carefully considered, sometimes over several weeks.
My revolving user-agent, vpn etc may give the illusion I'm not interested....but i am indeed, just browsing...
Sorry I was talking about Paris. London is a much more pleasant experience, despite the tube being so much older, the tunnels narrower and the temperature very hot in the summer. I avoid taking the metro in Paris, I have no problem taking the tube in London. Not the least because the brits have preserved a form of courtesy without which there would be deads every day in the tube (if people were pushing on overcrowded platforms like they do in Paris).
I’m not sure if that’s so, or if it’s selection bias at work - the SF&F writers you’ve heard of, whose stories actual and literary you know, are the ones who plugged away at it to make a living. What TC says is true - and it has been so for a long while. So many of the greats ground their way up through the pulps - I collected the back catalogue of Analog under its various guises as I found it rather fascinating to see authors develop chronologically — you can practically see them honing their formulae in real time.

I write SF&F for shits and giggles, as I don’t like the idea of writing things to be commercially successful, having spent much of my existence focussed on commercial success elsewhere. Rather, I write for the catharsis and the vicarious experience of crafting a world and a narrative. I don’t know that I’m alone in that, but then again, I don’t know that I’m not - but I can’t believe myself to be particularly unusual.
> but it means you also miss out on whatever package manager comes with the language.

I didn't even consider that! Good call out!

> Similar to above, GDScript and a lot of areas of the engine feel more strongly orientated towards fast and easy dev time rather than game performance.

Correct me if I'm wrong or way off, but isn't GDNative (or whatever it might be called now) basically for those moments where you need a little more beef, but don't want to rebuild the entire engine, so you bring in Rust or D or any other language you know and love and bridge it in through GDNative?
It will be harder to dispel because the underlying general assumption actually is true - in most people the brain does split some functions by hemisphere, but rather it's not a general statement that can be simply applied:

> Some popularizations oversimplify the science about lateralization, by presenting the functional differences between hemispheres as being more absolute than is actually the case.[21]: 107 [22]

Sources that wikipedia uses:

[21] Westen D, Burton L, Kowalski K (2006). Psychology : Australian and New Zealand edition. Milton, Qld.: John Wiley & Sons. ISBN 9780470805527.

[22] Toga AW, Thompson PM (January 2003). "Mapping brain asymmetry". Nature Reviews. Neuroscience. 4 (1): 37–48. doi:10.1038/nrn1009. PMID 12511860. S2CID 15867592.
They sell a platform for ads and analytics in games.
Show HN: GitHub Action for repository traffic reporting
Bonjour! I’d like to share a rather small project which I believe may be of use to some of you.

https://github.com/jgehrcke/github-repo-stats is a GitHub Action that I started building about 1.5 years ago, to overcome the 14-day limitation of the visitor/clone plots shown in GitHub's "Insights" tab.

Demo report: https://jgehrcke.github.io/ghrs-test/jgehrcke/covid-19-germa...

The project has some seemingly happy users and I believe we managed to address some of the more embarrassing bugs. That is, I believe this project is ready for a new wave of feedback. Which is where you come in, hopefully :-).

When I researched the solution space back then I found Actions that relied on an external system to push data to (like S3). I thought that it’s simpler to keep the time series data in the repository that the GitHub Action runs in. Also, I have opinions about data analysis and visualization and so I wanted to take full control of that. The goal from the start was to generate a self-contained report artifact on a daily basis (with good characteristics in terms of sharing and archiving), and to also persist that via git.

Quick technical description: this Action runs once per day. During each run, it

- fetches traffic stats (visitor count, etc – for the last 14 days) via GitHub’s HTTP API.
- persists new data points (in the GitHub git repository that this Action runs in!).
- generates a minimal HTML and PDF report, both of which are also persisted in the repo that this Action runs in.

The HTML/PDF documents can be exposed right away via GitHub pages. The PDF report contains vector graphics so you can zoom in much more than necessary (and if your boss needs a print then this might look good enough). The plots in the report are meant to show a long time frame. For example, here you can see for the last 1.5 years how the daily visitor count (and other metrics) evolved for jgehrcke/github-repo-stats:
https://jgehrcke.github.io/ghrs-test/jgehrcke/github-repo-st...

What I find really cool is that there are users who run this Action in a certain repository dedicated for reporting, for many target repositories. How to do that is described in the main README in the section 'Tracking multiple repositories ...'.

Interesting things I learned about through this project:

- Vega/Altair for plotting
- https://github.com/bats-core/bats-core for CLI testing
- GitHub Actions: how to build them, how to do release management. I also learned that testing a GitHub Action is hard, especially given the heterogeneous set of environments that it might run in.

If you want to try this out then besides the main README a good place to start is this tutorial: https://github.com/jgehrcke/github-repo-stats/wiki/Tutorial

All of this was built rather pragmatically, and I want to keep it that way. There is a plethora of smaller and bigger things across all parts that are generally worth improving (docs, plots, architecture, cleanup), but before deciding what to touch next I'd love to hear your ideas. Thanks!
That's why I said it will be

It's clear that privacy hasn't had enough support by our sheer lack of privacy.

Most people genuinely don't even know tracking is taking place at all times or by what means. Ask someone whether they're aware of cursor dwell time tracking. They will think you are babbling.
At times it seems like I’m reading about Argentina. The problem is that people just sit around complaining until the crisis hits lvl 9000 to go out and throw a brick. It’s like boiling a frog. Argentina is the same way. And by then, it’s too late. In a weird way, sometimes I think these moments of touching bottom are needed for change to happen.
Thanks mate, I appreciate the kind words. I try not to judge myself too harshly for taking the time off, but it does help to hear it from a kind soul such as yourself. Luckily, the PTSD isn't spilling over into my other interests (games, Vale, etc) much any more so life is steadily improving!
Welp, glad I'm working on learning other engines now.

I'll take another look at Godot when it hits 4.0
They're just labelling it a merger for optics - it's absolutely an acquisition with one party buying the other.
My experience with albums (LPs, remember?) was that a handful of songs would attract me fairly quickly, while other's were, meh.

It was good that there were songs that hooked me early because I would wait patiently through the less-appealing songs for those good ones.

Some months or so later, the tracks had flipped — burned out on the hooky songs, loving the once-meh songs.

(I can specifically remember this to be the case with both Murmur and Reckoning when they came out — yes, I am old.)
Surely the choice of OS cannot depend on a single day.

CP/M seemed much nicer.
Simply opening a Magic Link doesn't have to authenticate the initiating login. The user can be asked to interact with the page, being shown the source of the link (time, browser, device, IP/Region, etc.), to authenticate the login. This adds a little bit of friction to legitimate cases, but then again having to open your email and find a link and click it is already plenty of friction that this additional step can be considered a negligible addition to that.
How dare you!

We don't read articles over here!
They actually doubled down when they started building their own Ads mediation platform after having an AdNetwork, but they struggled to grow. Their targeting tool "Pinpointer" failed and showed up on an earnings call.
No discussion of Filecoin is complete without talking about how much miners got paid per gb per hour for the past few years (hint: they covered the cost of their SSD in < 1 hour at one point)

It's a great story filled with 80+% APR loans clamoring for unvested FIL balances, all kinds of middle men taking cuts, and of course putting max risk on retail when the ship eventually sinks

I really hope their $300m or whatever will build something useful, but I would be shocked if this tech ends anywhere because the whole project was/is a simple money grab and the grabbings been done already
MS-DOS did not have directories at first either. It was a feature in version 2.0, when hard drive support was added.

Directories seem to have been a foreign concept among early home computer operating systems and I suspect its adoption was driven by the adoption of hard drives. For example, the Apple II did not gain directory support until ProDOS was introduced and the Macintosh only gained folders with the introduction of HFS. I don't recall directories existing for the Commodore 64 either.
If you’re concerned about the security aspect of this, keep in mind that most web applications have this feature, but instead of calling it a magic link and for signing in, it’s called “forgot password.” It generates a short-lived code and emails the user a link that lets them access their account.

There are, of course, challenges with this being the only (or default) way to sign in, but the security concerns with it (e.g. weak email password) probably aren’t new!
They only have unity of purpose on the abuse and stalking. They certainly don't agree he's above criticism, and I would suggest he is far from it: the recusal question relating to his wife demonstrates to me his unsuitability for a position on the court. A man of integrity wouldn't wait to be asked.

I always believed Anita Hill and I believe the women who accused Brett Kavenaugh: women statistically rarely lie about this stuff.

Bader Ginsberg was wrong to hang on. She lacked judgement to the risk side.
Does a password manager and browser extension not fix this? I use 1password on iOS and almost never have to copy and paste or (worse) type a password in. I just FaceID then pick the credentials I want to use to log in and the extension fills in the relevant form fields.
A FREE and open source alternative to handle forms on static sites
Nice Discussion of Best App Build Tools
on quicksync (600 series above igpu, i.e. kabylake/gemini lake) it can do it without an issue. on gemini lake cores, I've done 4 hdr tone mapping (uhd bluray source to avc sdr) without a problem.
I tried this with the Stalin And Nikolai Yezhov picture, but the algorithm gave me a "question mark."
Another account to lose, when google bans you, because your kid liked something on youtube on a family account.
> Is there any new approach in the works? Maybe something ML-based for optimization?

I'm doing a PhD on this.

My goal is to detect known functions from obfuscated binaries.

The biggest challenge by far is building a good dataset. Unlike computer vision (millions of pictures with the label "dog") the number of training examples for a typical function is one. For now I'm focusing on C standard libraries, since there are a handful of real-world implementations plus some FOSS or students samples available for things like strlen and atoi.

If anyone wants to collaborate, feel free to message me.
Merger & Acquisitions and Real Estate are really separate things so trying to use them for analogies is going to break down rather fast.

If Musk was buying a house (Twitter) we're basically at the point where He's made an offer, they accepted, Musk fulfilled all contingencies (including financial), they both signed the papers transferring ownership, and then Musk decided rather than moving in and wiring them the money he'd rather not. (Analogy doesn't work so well).
Sure, if you own a house you can call anybody to come inspect it but you still need to wire the seller the money.
Raise your hand if you broke the SSHD server config and then restarted it!

That: uh-oh! moment.
You can use old versions of IDA, IDA for DOS or i think Sourcerer.
https://archive.ph/3laaq
The Godot 4 alpha builds are surprisingly stable for playing around in, and feature wise pretty good too.

Still not there for working on anything other than small toys or concepts yet, but once it's done it'll be great.
No Code Platforms from a Database Perspective
We use it at a cafe and receive several orders a day with people paying by lightning
“We can make the blockchain actually work for payments if we take payments off the blockchain.” Sounds about right.
ao@fec.gov is the email to make comment on these proposals. Be sure to cite the number and company - AO 2022-14 (Google LLC)

The deadline for this one was 11th july sadly.
"driving players into their games"

I don't know anyone that plays a game because of the ads that are in it. I must be misunderstanding what they are saying?
For example somebody can send a GIF image via iMessage on iOS 14.7 and take over the phone. No click required. https://www.hackread.com/nso-zero-click-imessage-exploit-hac...

https://en.wikipedia.org/wiki/Pegasus_(spyware) used this among other exploits. "Once installed, Pegasus has been reported to be able to run arbitrary code, extract contacts, call logs, messages, photos, web browsing history, settings, as well as gather information from apps including but not limited to communications apps iMessage, Gmail, Viber, Facebook, WhatsApp, Telegram, and Skype."
LN adoption/capacity cannot possibly explain the reduction in Bitcoin congestion.

At its peak, there was only $200 million worth of BTC as collateral in LN channels:

https://www.defipulse.com/address-tag/lightning-network

This is against an ATH market cap of $1.25 trillion. LN collateral isn't even a rounding error relative to outstanding BTC.

The much more likely explanation for reduced congestion is that people stopped using BTC as money, as major merchants like Expedia, Microsoft and Steam stopped accepting it.
> The only scaling solution is MySQL, just like the Bastion of Bitcoin, El Salvador is doing. Always was.

I don't know why the internet thinks they can convince the world to use a new/better currency when they can't even make anyone switch off MySQL.
Energy input is the other. It takes at minimum the combustion energy to reconfigure the molecules but most of the processes happen at high temperature and pressures which takes energy to do.
Thanks for pointing out Inferno OS. I recently started tinkering with embedded devices after a long gap, and this looks like perfect project to work on!
There is actually a solution for that, called Lightning Rod.[0] It should allow asynchronous payment flows when running LN nodes on a mobile device, which are offline most of the time. I'm not sure if it has been implemented yet (probably not).

[0] https://github.com/breez/LightningRod
This is totally backwards. The orgs that craft political emails should be incentivized to create emails that are _less likely_ to be marked as spam. Exempting them all but guarantees the spamminess of these emails will get worse!
From Wikipedia:

ironSource focuses on developing technologies for app
monetization and distribution, with its core products
focused on the app economy.
I saw it suggested elsewhere that for how stupid this all looks, it was a big scheme to give cover of liquidity for the big capital folks (Blackrock, Vanguard, etc) who are also whales in TSLA to get out of TWTR without losing their shirt in the process as the company spirals. The reports of the sale gave them time to get out, and now that they are, Elon is renegging on the deal, and taking the heat for it, but ultimately, due to the benefits to TSLA's share price indirectly, making out fairly okay (or at the very least, gaining a credit for a favor or two from some folks who it's nice to be owed a favor from), even in light of what may be a few billion dollars worth of penalty for the breakup.

I won't say I'm subscribing to this idea, but I do find it intriguing, and it does offer a rationale for what otherwise looks like it could be a fairly stupid set of decisions made by someone who at least sometimes hasn't appeared quite so dumb. By all means, pick it apart and tell me why you think it doesn't hold water...just throwing it out there as it's an interesting theory.
I find that commenting on health policy while hiding your identity definitely compromises your credibility. If you further compound that by self-publishing your material and writing like a literal child, I don't think it's unwarranted to include that as criticism.

Do you like the content itself? Some random drawing of arrows in cherry-picked graphs?
Exactly. Why should I use this if WebAuthn can do any kind of biometrics (or not!) available on the users platform for free?
I don't think there's a correct answer, this is just an opinion I stumbled into this morning.

The objective mostly was to try help form a way of reasoning about HTTP APIs from the consumer's perspective

> error 400 for all semantically-invalid requests

Counter point: Passing `a` to the example endpoint is not semantically-invalid from the perspective of HTTP, it's a perfectly valid URL. Nothing about that request is invalid, it's only invalid to the business layer, which has nothing to do with the HTTP layer. Put another way: The server _is_ processing the request, that's how it send back the "employee not found" record. I guess it depends where you want to draw the boundary of server.

Which is not to say you are wrong if you return a 400, but I suspect you might get a couple queries about it from consumers.

The objective was mostly about clarity. Maybe I'm being over-simplistic, but I like the idea of using protocol errors for protocol problems and domain errors for domain problems. Just keeps client-side logic cleaner in my experience