skysight-inc/HackerNews huggingface dataset:
Is Base64 encoding for API AUTH that insecure?
I’m an integration lead responsible to design the flow of data between multiple new systems. Infosec must approve the protocols and auth used between systems. Yet all these systems are in company owned VPCs. The limitation is that one of the applications ONLY auths with base64 encode for their API. Halting implementation.

I understand concerns as:
1. Can easily be decoded, so if caught in translation it’s essentially plain text.
2. Can easily be spoofed from anywhere if creds were compromised

But all of this assumes whomever is already in the VPN to even find the targeted endpoint.

What’s so bad with base 64 encoding? Even base 64 encoding to generate a token for X hours is a show stopper. Yet from previous consulting experience many large companies are fine with it.
Does that also mean that remote employees can move from rural India to Manhattan or SF and get their pay adjusted for cost of living?
There is a popular myth that people prefer “better” (hip) tech. You know, all those studies about milliseconds of lag and amount of finished deals. Even it is true, it's true for e-commerce. Commerce is not everything, and market is not a model for everything. People can be OK with pretty old tools if they are the means, not the ends. I'm also a bit triggered by author's mention of “necessary” e-mails and pushes. People who have something to say, and need to say it, go to any length to do it. I guess it's a property of commercial “communities” as something companies want to have.

The root of the problem is that people need to be taught in advance that they can do more than chirping and gasping. It's not the forum engine that is different, it's the approach to posting, organizing the thoughts (even simple ones). The business won't educate people: the perfect consumer knows as little as possible, and relies on others' decisions. The social networks are based on an endless stream of impressions that get forgotten the moment they leave the scrolling buffer; it's like watching the sewer line. The chat-based communication tools are the same: everything just goes by the drain. That's the trade-off for the ease of expressing yourself. Finding relevant discussions in mailing lists or forum posts can be a pain, but it's way more hopeless with chats.

Who does educate people how to use the World Wide Web, and the Internet?
I think the real value is that it can combine items. I can easily find a stock image of a cake. I can probably find a stock image of a circular saw. But a decent stock image of a cake in the shape of a circular saw maybe doesn't exist anywhere. But this could generate several for me to choose from.

And then there's the "in the style of Salvador Dali" aspect.
Woah, that second link is mindblowing. I had no idea that whole populations of people could see colors in a way others don't, and vice versa. Thanks.
That's not the only reason to get an iPhone though, and why should you get this at the expense of the rest of iPhone buyers? The iPhone is hardware, not software
> Adding lots of nuclear would vastly reduce greenhouse gas emissions, which are the single biggest threat to humanity and life on earth.

Does it though, or does it just distract from real solutions and prop up coal and gas for another decade?

Let's say there's a trillion dollars to spend today.

What is the net reduction in emissions between now and 2040 achieved by spending it on nuclear (hint: if the project takes as long as most in the west do it's negative)?

What is the net reduction achieved in the same timespan by spending it on renewables?

Even if there weren't a bunch of other problems (and there are) it's like claiming you need to stop and build a new engine so your car can go faster on the last lap of a race.
Don't see what trust you are talking about. There's no need to have "one thing". The important thing is that the research is public. If it lives in multiple repositories is irrelevant. Just have an aggregator query the 10 biggest of those and we're done. SciHub already achieves this without any support from institutions or universities, that ought to convince anyone that it's possible.
You know, if you've ever done anything creative, the brain's ability to take inspiration from something and remix it (without realizing it's not original and actually just a memory) is shocking. So are our brains really just search engines to find relevant content and remix it a bit? What really is creation?
remember DALL-E is not allowed to generate faces
Why not have the government do that? That's the role of government regulations
This is a bit misleading as management literally told us to take time off during that time and we have unlimited PTO. I miss being able to save up PTO and get paid out but it is what it is. Also are we just not gonna mention that we get wellness days every month which is another 2 free weeks of PTO? I’m not happy with things but I’d much rather see a pay bump than this.
Oh man... ANOTHER "Cadillac Desert" reference. I just finished re-reading it, a month ago, and this is like the 20th time I've overheard some random comment about something related to the book. Might not just be the Frequency Illusion, I think maybe I got inspired to re-read it because of all the news about water politics, lately.

Anyhow, NAWPA is some fascinating stuff... It's completely insane and a terrible idea, but it's hard not to be impressed by the sheer size of it.

Kinda got me wondering now... Would the biggest version of NAWPA exceed the size of the Atlantropa idea, in terms of how much land area they each would flood/drain? I mean, the Mediterranean Sea is pretty big, but...
Counterpoint...

I don't get all the hate for Teams. I work fully-remote on a medium sized team. We use Teams for one-one calls, team calls, presentations, screen-sharing, calls to external numbers and I've never had any problems. I run it on a Windows desktop and an Android phone. I've never had performance problems or crashes on either.

Some of the file-sharing/explorer stuff is a bit janky in terms of UI but I don't really use that. TBH it's all fairly seamless IMO.
Especially because the period between Christmas and new years is the absolute lowest point of productivity. Giving everyone the holiday probably saves the company money, since then employees have the benefit of returning after the 1st refreshed. Every job I've had to work that period, the 25th through the 31st is absolutely dead and unproductive, since lots of coworkers burned their pto to take it off anyway and any external vendor is extremely unresponsive.

Similar thing to anyone who deals with China, you just expect that nothing will get done over their new year celebrations and you build schedules appropriately. Salesforce could absolutely afford to do this, they already have a good example in house. Instead of doing something that would generate positive press, they've generated negative headlines and really pissed off the employees as slack twice (once now, and once again later this year around the holidays). What a classic short-sighted MBA brain move.
Who do you think is left realistically? They're probably in their third or fourth generation of new hires since the heady days of when these applications were originally built. Some may have stayed as manager and a really small group may still Bere there as ICs but I'd be boggled if there's many left. That said, since most of these products are largely in maintenance, it's not like they need a ton of key people to drive innovation.
This is not always true. I live in a Resource Conservation zoning area that was established to protect wildlife and vegetation in our region and preserve a large watershed area that is one of the primary sources of potable drinking water for folks that live down in the valley in the suburban and metropolitan areas. I consider my family and I extremely lucky to live in the area that we do, but we are a far cry from NIMBYs.
Eh? I did my best to understand what you wrote. I honestly found your language difficult to parse.

This is obviously a complex topic with a lot of strongly held views. For me personally it's a rare case where I haven't yet developed firm views of my own.

FWIW, I'm not particularly happy with the way this sub-thread has gone, but I found it stimulating at least. YMMV.
Cross-platform has always been a pretty important element of StereoKit! Right now there's not really a Mac headset, so there's no rush to dive in just yet. When something does come out, we'll evaluate it and fit it somewhere on the priority list :)
Base64 is not encryption, there are no credentials or secrets required for this encoding. It is equivalent to plain text

we are in a new era of encrypting internal comms. Security no longer stops at the edge (firewall). You cannot assume if they are in the VPN, then they are authorized or not malicious
https://archive.ph/9VrF4
So nobody downloads the app? Or are you afraid that other app users don't care about your needs, and are trying to force them into agreeing with you?

The government offers a democratic way to determine these requirements
> Not sure from your comment if you understood that policide is like homicide or infanticide, not suicide. It’s a wonk term about destroying a political party or system.

“Policide” (and, confusingly for the distinction you are drawing, with near-equal frequency “politicide”) is used to refer to the analogy of “genocide” as understood in internation law where the target, rather than a people as a people is a political entity (almost exclusively in the examples I can find a polity, whether a sovereign state or some less polity, not a political faction or party.)

> Politicide is like genocide, except you target only members of a specific party

This is confusing (even leaving aside the problem that “politicide” is also a synonym for “policide” and is also used as a portmanteau of “political suicide”, giving it three distinct definitions in the same general domain) because you are using “genocide” in the sense of the frequently encountered mistakenly-narrow definition, and not the sense in which it is used in international law, to wit, to mean extermination of the members of a people rather than attempts to destroy the people as a people. But, yes, politicide has this sense with regard to extermination of members of a political faction, but it is not particular analogous to genocide.

> I haven’t read this anywhere, but I assume that one usually follows the other.

“Policide” doesn’t seem to generally be used when the target is a political faction, but if it were, politicide (in the relevant sense) would be an extreme method of policide, not something that follows it (a successful policide would make politicide superfluous, as there would be no one to target, the group no longer existing as a group and thus not having members to exterminate.)

One would imagine that the usual course would be escalation to politicide when other means of policide failed, though there are certainly instances where its pretty much zero to politicide.

(As far as the GOP goes, I think policide/politicide of a particular opposing faction isn’t necessarily wrong as a description of part of what they are headed toward, but misses the point. What I think they are headed for, unless saner heads within the party or defeat and replacement of it as a major party change the course, is an Christian Right American quasi-capitalist corporatist version of the Cultural Revolution, suppressing, violently where necessary, anything seen as ideological dissent from a particular authoritarian ideological vision.)
I came here to say this. They contacted me several years ago for a kubernetes role. The pay was half my current position which was also remote... They didn't feel like a leader.
As evidenced by functioning public transport virtually everywhere else in the world: the things you're describing are civic problems, not problems with public transit. It's no particular coincidence that the US, with its car-dominated culture, has more civic problems on public transit than just about any other nation.

> Your public transit dream also cost ME a lot.

Are you operating under the misapprehension that my local, state, and federal taxes don't pay for your roads? We can play that game all day, but I don't think it's going to be a very fruitful one. And that's before we even get to the question of externalities, via which your car costs me a great deal.
Ask HN: What do you consider the gold standard for software documentation?
Postgresql's documentation seems like it would be a good model for a software company, perhaps.
https://www.postgresql.org/files/documentation/pdf/15/postgresql-15-US.pdf
This is great. Is there a separate list of components supported in sunmo? also can i bring my own component say from material-ui?
That status page looks like the dashboard in the X-Com game.
> But all of this assumes whomever is already in the VPN to even find the targeted endpoint.

From a security perspective you have to assume that. Defense in depth requires closing all the little holes, because attackers will break in, and they will exploit your weaknesses. Assuming otherwise is just blind optimism or a vote of no-confidence in your company's prospects.
I guess my first question would be how the creators of such porn put together the training set.
Most of my comments are abductive reasoning but I call it breadth first reasoning or fearless ignorance, where an analogy potentially has a similar superficial "shape," and that shape could be a homomorphism in more formal contexts that gives you a fast path to hypothesis about what must also exist if the analogy were consistent. It's irritating to people with depth in a field because it ignores their concrete tools and experience and presents them with hypothesis' without any direct experience. Cranks usually think abductively as well, and what makes the difference is enough physical domain competence to use it well instead of just baffling other laymen and annoying more knowledgable people. If I'm interpreting correctly.
I never use Amex because they're the only card that has denied me a chargeback. Basically the hotel runs a nice little scam and Amex enables it. They seem to be very shy about accepting chargebacks to hotels.

The scam was that you'd book a cancellable room and the hotel would cancel your booking after they accepted it due to "unavailability of the room" (wtf), then rebook an identical "alternative" room "at the cheapest rate" which happens to be an uncancellable room at $1 less.

Why? Because they are impossible to find. No taxi driver can find them. Maybe don't exist. By the time you find this out you can't cancel the room.
Eh, I'm unconvinced that they aren't making an extremely dumb move here. Nobody is very productive during that period anyway, and this just aggravates one portion of the company without making everyone else much happier. Dev hiring is still tight, so this won't help them with retention & recruitment. I wouldn't be surprised that they could save money by extending this bebefit to everyone, or at bare minimum do it fairly cheaply.
You'd have to solve the prisoner's dilemma though, and that's something Graeber certainly hasn't managed to crack.
Build your own WiFi Pineapple for $7
I usually take these monkey studies with a pinch of salt. It shouldn’t be to hard to conduct a similar study on humans, and the fact that we are only hearing about monkey studies makes me question whether the results can be generalized.

It is not just that we are a different species and exhibit different behavior under same circumstances as monkeys, but also that the monkeys are kept under captivity all their lives which will profoundly alter their behavior (the same applies to humans).
My impression is also that Netflix has a much larger presence abroad than most of their competitors, except perhaps Disney.
While the name "abduction" has been chosen to resemble the traditional terms "deduction" and "induction", the name does not make sense.

The name for this kind of reasoning should suggest a reverse direction when compared to "deduction", but "abduction" has the same direction as "deduction".

The preposition "ab" is related to the English "off" and "of" and it can usually be translated by "from". The preposition "de" means the same thing as "ab" (which is why in most Romance languages, like French, "de" corresponds to English "of"), except that it suggests a vertical movement from up towards down, while "ab" suggests a horizontal movement.

I do not know which might have been a better word, maybe they should just have stuck with "reverse deduction", because "reduction" is widely used with other meanings, or maybe they could have used "adduction", which has an opposite direction to "abduction" ("ad" corresponds to English "at").

The names "deduction" and "abduction" make grammatical sense when their direct objects are the premises (i.e. the action is "lead from premises"), while the name "adduction" makes grammatical sense when the direct objects of this action are the conclusions (i.e. the action is "lead at conclusions").
That sort of thing doesn't require zoning; it requires public ownership and management. Land is unowned by default.
> Why does anyone post anything at all anywhere ever?

I think you'll find the majority of the artwork community still favors, pen and paper, pencil (maybe oils). They do this because, at least in part, they appreciate the challenge, it makes them better as people, in some fashion.

I use tablet, sure, some use 3D modeling, even. People don't create pencil drawing because they are good, or sell, they do it for personal reasons. I think you're assuming this is going to solve some problem, it's really not - the people interested in content creation for content creations' sake are not likely to benefit.

> Nope. TikTok, YouTube, kids making Minecraft mods as a labor of love and hobby.

You're assuming because content platforms like TikTok exist now, that something similar must continue into the future... I see this as a flawed assumption. Regarding monetization, my point hold well here, though. For every "successful" Youtuber raking in millions, there are hundreds, thousands for whom it just didn't work out.

The content on these platforms is already often mundane, you don't see the promised plethora of content creators, because the system for the most part favors the few, not the many. Sure, everyone can upload, that doesn't mean most people do.

> If we went back in time just ten years and showed ourselves this stuff, we'd think it was magic.

I remember ten+ years ago, there was content on the web. Now, it's extremely centralized, most of it is not that good. So yeah I can time travel a bit, and things got worse. The reasons for this aren't all AI, but as trends go creating a program to do photoshop or video automatically isn't going to make things better. You're not solving the right problem here, and the people who stand to benefit are not the people you seem to think will.
Keep in mind that a lot of Slack’s employees —- especially early ones —- are Canadian, and Canadians don’t get unlimited PTO (by law, I think). So they are being told when they should be using some of their PTO days.
Unlimited PTO is not something I consider a positive.
A lot. If you read a lot of nonfiction and are looking to ease into fiction, here are a few suggestions:

- Read historical fiction, or fiction that is extremely well-researched. I like James Michener.

- Read travel and adventure type stories. Personal favorites in this category are The Treasure Island by R L Stevenson, and The Coral Island by R M Ballantyne. Both are not particularly long, and the original is still suprisingly readable in this day and age. Bonus: these are extremely well-regarded classics. I personally find Ballantyne's usage of the English language very pleasant and enjoyable. Stevenson's writing in another classic, Kidnapped, will leave you feeling as if you have lived all your life in Scotland.

- If you want to read something very serious, then perhaps 1984 may be a good choice in our troubled times of persistent surveillance and abuse of language for nefarious ends.

- If you want something light, then go no further than P G Wodehouse: there are many fine books to read by this author, such as the excellent Right Ho, Jeeves, Service With a Smile, or Galahad at Blandings. You couldn't go very wrong with Three Men in a Boat by Jerome K Jerome, or Diary of a Nobody by George and Weedon Grossmith.

- If you want something that is easy to read, but still profound, try Ernest Hemingway. I recommend A Farewell to Arms, or The Old Man and The Sea. This counts as serious literature, so just steer clear of this if you don't want to read "Literature".
Lol it’s not easy as people make it seems.
Nobody is really evaluated all that effectively on an individual level. I can't figure out the difference in my performance reviews between advocating, coming up with new ideas, and taking initiative vs just working on tickets and not saying a word in meetings.
> And for the "people shouldn't be forced out of their home" crowd: my generation gets forced out of our homes every 2-3 years because we can't afford to own and have to rent. So I won't shed any tears for boomers getting forced out of their home once in several decades

Plus, here in the US the vast majority of land ownership entailed forcing native peoples out of their homes.
I did once work that magic week at Apple. You got triple time if you did, but it had to be okayed by nosebleed levels of management.

I was tracking down one of the hardest bugs I've ever found, it took most of that week (the fix was embarrassingly simple, just swapping two lines of assembly).

I really didn't want to work that week, but the pay made it worth it.
Can I cheat IFTA?
Outliers being paid more than their peers is the exact thing that unions fight against. I wouldn't be surprised if this originated as a union demand.

My friends Union recently fought against work from home for desk jobs because the field workers could not enjoy the same benefit.

Corporate leadership negotiated against the Union, but the union prevailes so there is no work from home
The teleconferencing part (the 'hard' part) is actually very decent in my opinion. I've never had issues with calls, sharing video or sharing the screen, it just works. Features such as showing hand, breakout rooms and so on also seem to work well.

I agree on everything else though. The 'chat' part and the main UI are so janky and buggy. Even simple things like copy pasting or formatting code don't work the way you want it most of the time.
https://archive.ph/VS2tV
I'd hire you for this. I don't see an email or contact page on your profile, though.
Benefit based on a life choice has been found discriminatory in other situations.

Your second point makes sense, but many don't offer that. Some do, some don't. Often volunteering is seen as a thing one gets compensated for (donation to charity) for work you do outside work time.
Yep, just wait for the massive bonuses the execs take home despite "the economy".
> Chrome is becoming the new Internet Explorer. They are adding features the marketers want regardless if it is good for privacy or other ecosystems. We are already seeing websites and services that only work correctly in Chrome.

Okay. Granted. So what? IE died.

> Safari is the only viable competition.

Is it? It seems to me that it's not competing with Chrome if you can't run Chrome on your iPhone.
The raise doesn’t even start until sept and people can prepaid to delay it for another year. Companies are laying off and we charge based on active users so at best we will come out flat.
Until it doesnt. Then there is nothing you can do. It leads to ewaste. Thats what happened to my ipod touch and iphone 6 plus after 2 years.