skysight-inc/HackerNews huggingface dataset:
We had some of the dumbest H1 "findings" at some companies that I worked:

- Service that is explicitly out of scope of program is "leaking" default CloudFront headers.

- Android application can be decompiled (that's it, not secret is there, just the fact that it's possible)

- "I can do something bad IF I had a way to load malicious JavaScript" (no, CSRF protection was one and correctly implemented) (there is also no way to upload your own JavaScript)

- "I can do things if I open a console in a browser" (can't do anything because CORS policy only allowed for read-only endpoints)

- "You can make requests with CURL and not official client"

Every week, there was at least one variation of one of those reports. "Hackers" also got very defensive about their "findings" and acted like we don't want to pay them for some "mega hack of the year 0day total domination of user device" vulnerabilities.

Not once has anyone found even a minor vulnerability, just wannabes trying to get quick cash. Until we had H1 we had zero reports, with H1 we had moronic reports every other day.
You're going to take issue with that instead of Druid part?
Ideally, yes, but the pepper still winds up fully cooked, it's just that it's not mush.

You want to blister the skin so it peels off easily. That's the main goal, but a lot of flavor comes out of caramelizing / charring things during the process, as well.

If you cook things too much, the entire pepper just turns to mush.

Heating things up enough to blister the skin means that the inside is steamed in the process. You want to get it so that it's cooked, but will still hold up enough to be peeled and sliced.
Google Cloud Stops Monster DDoS Attack
sudo tcpdump -i en0 -n -l dst host 8.8.8.8 $(for a in $(curl -s https://raw.githubusercontent.com/berthubert/googerteller/main/goog-prefixes.txt); do echo or dst net $a; done) | while read; do tput bel; done

Link to read the list (remember to read what you curl | bash): https://raw.githubusercontent.com/berthubert/googerteller/ma...
True. But people also say "percentage" when they mean "percentage points". Once they notice the difference they tend to stay right.
The rituals of great teams [video]
Lets not pretend that there is only a single guilty party here. No doubt pakistan tried to control mujahideen to fight their proxy wars. Just like Indian intelligence has funded the Balochistan insurgency inside Pakistan. This of course all started with US asking Pakistan to setup these mujahideen to counter Russia in 1980.
Lol, "cheap way". Blur is simply the out of focus plane. Typically, the larger the area out of focus and the more smooth this "blur" is, the more expensive the lens being used. Meaning, it has a very large aperture.

Doesn't mean you have to like the result, but it doesn't really correlate to cheap, quite the opposite. That said, I don't think a lens will make much of a different on a total production budget.
It's not too complex IF you align the parenthesis.

The only reason I can see to put multiple closing parenthesis on the same line is to save vertical space. But if you pack too much code in a few lines, readability suffers.

To get the semantics of your statements right you do need to know where syntactic units start and end.
Sure, but if you have more holy books than guns or money, you get a theocracy.
It wouldn't surprise me if that were the case.

Imagine someone who sewed things by hand, given (or even loaned) the money to purchase a sewing machine, making them many times more productive. Now the community can have things sewn faster and more easily with less effort, with tons of downstream effects (more sails, better clothing, stronger soft goods, etc) and it's easy to see how the net improvement to that community can far exceed the price of the machine.

Another way to ask that question is "does there exist tools whose price is less than the total amount of increased economic activity they enable", which when phrased that way, it seems clear that the answer is "yes".
It really depends what the 'threat model' is.

If you are creating, for instance, an idle game where the user can pay to skip time; that's a problem.

If you are doing cryptographic checks dependent on time, that's a big deal (eg: how do we handle when the client or service goes "wtf, no. That's the wrong time")
Bigcorp has their hands in many cookie jars and don't care if they take a loss on selling the panel in the smart tv if it means they gain in licensing deals from having "Netflix" printed on the remote. You can come in, your offering will just be costlier than the subsidized smart tv and you will be driven out of business before long. Or, no suppliers even want to work for you because they are busy fulfilling orders from bigcorps who will gladly buy up all their capacity to keep people like you from having an easy time starting a small business.
Taskwarrior uses a pain text format and is excellent. It's my daily driver todo list. https://taskwarrior.org
It wasn't exactly a controversial take either. What was Biden thinking by green-lighting NS2?
I think it’s safe to assume that of anything written in something which doesn’t bundle an entire browser.

Though I do think it’s unrealistic that the legions of JavaScript devs are going to learn rust to make simple desktop apps because it doesn’t really have a reputation of being an easy language to learn.
> A convincing-looking yet not actual person generated by This Person Does Not Exist.

Yeah, except the weird eye-mouth monster lurking on the left, eh? :D
I assume that there is reasonable PC laptops out there which also have problems with “power management, screen sharing […] and certain Bluetooth headsets” …on Windows. If you were to encounter such a laptop, would you also consider Windows to “not work” with these three things?

If not, then why do you do that for Linux?
Honestly, they should open NordStream 2 now and at the same time focus on getting the alternatives online ASAP.
Or trickling from the people who do nothing to the people who have to produce something nice for the lucky ones to buy. From the non-workers to the workers.
previous: https://news.ycombinator.com/item?id=16995811
She Had an AirTag in Her Lost Luggage. It Led Police to a Baggage Handler’s Home
I doubt this will happen - at some point the generated content should be indistinguishable from human written text - and AI can produce it in droves and learn to exploit existing algorithms.
The 2% was and is not a treaty obligation.
We could easily have slammed together off the shelf components and potentially grown at a similar rate. Also potentially not, sales is hard!

Seeing founders with less care for detail and more for the sheer growth of their user base was impressive and deflating.

It felt like everyone I compared myself to, they were devoting 90% of their time to selling and 10% to building.

I share the feeling. There's success stories of companies doing the same (e.g. Notion, Replit), so I know it's not completely off-book, but I constantly wonder whether there is downside to that approach of focusing on sales in the beginning. I can guess things like less likely to be innovative, but is that true? Maybe since they average being alive longer than the ones that focused on product in the beginning, any potential downsides are negated in the long term (e.g. just innovate later with the infinite runway they now have). Would love to see some study/survey on this.
Yea thats possible. ALthough if you are actually incorrectly mapping HDR to SDR it REALLY looks like crap.
Biden has done a lot of bad things just to do the opposite of what ever trump was doing.
It is legitimately repairable now since they and third parties are doing it en masse.
On the other hand, there's also a deep suspicion towards foreigners and some of the most right-wing sentiments you will find anywhere in Germany. I literally witnessed some Indian-American colleagues of mine being physically assaulted because they had non-white skin color and were walking down the street. This in combination with the already existing labor shortages severely limit the region's potential.

Source: I lived and worked in Dresden for a decade.
It's pretty cool that they designed their plants with a heat reservoir and oversized turbine generators. This allows them to turn the turbines on and off at will, complementing wind and solar. The nuclear plant "charges" the heat reservoir during the day when the turbines are idle.
You can sugar coat this any way you want but the fact of the matter is, they cut energy production in lieu of renewables without actually having enough renewables up and running to offset the difference. And now they are in the predicament of not having enough energy because the gas taps have been turned down. The path to hell is paved with good (but not well formulated) intentions. Just wait until you see the environmental devastation of a continent that turns to cutting down all the trees and burning anything they can find to stay warm.
And that terrible time a plow was discovered. So many people with shovels lost their job.
I knew a Firestone / Ford Explorer widow. She had a flock of kids.

https://en.wikipedia.org/wiki/Firestone_and_Ford_tire_contro...
> But I was under the impression that the main stumbling block for molten salt reactors was that high-energy corrosion resistant materials for containing / moving molten salt simply don't exist (yet).

Is this also an issue for molten salt / liquid metal batteries[1][2] that have been proposed as a grid scale energy storage solution for renewables?

The way I understand it, molten salt is used as the membrane separating the electrode and electrolyte layers. But I was under the impression that there are actual molten salt batteries prototypes with industrial scale facilities currently under construction.

Are the requirements to contain the molten salt in a battery different from a nuclear reactors? Or do they have the same challenges and are simply able to overcome economic feasibility whereas nuclear reactors aren’t?

1: https://ambri.com/

2: https://www.youtube.com/watch?v=-PL32ea0MqM
Most of the programs I write do. Well, of people, but not typically the user.
We used to have this cool thing called “sense”. It was neat. When your tire was low you could “sense” it through the steering wheel by holding onto it. Then you got this feeling something was amiss and you “looked” at your tires. Hmm it didn’t look right. So you pulled out this 2 dollar device called a pressure gauge and checked the pressure. It was pretty sweet. Had the extra benefit of tire changes being 25 dollars cheaper per tire as well. It had one major flaw though. You had to not be a idiot. :/
So when is everybody transitioning to QUIC?
Do they mean chillies?
Argentina prosecutor seeks 12-year jail sentence for VP Kirchner
> There is nothing new in this behaviour, it has happened and it will happen on any new platform that gets popular.

The situation with Instagram isn’t due to it getting popular. What’s happening is that tiktok got popular and now Instagram is trying to mirror tiktok by focusing on video content, which is causing real damage to the platforms established creators and causing extreme confusion and annoyances with its users.
The problem with Eastern Germany and Dresden in particular is that there is a solid 20-25% voter block for outright fascists, and the nominal "conservatives" and "free-market liberals" often enough aren't better at all - way over half the population is anything from hardcore Conservative to "would love to see politicians on gallows"-Nazi. On top of that Dresden has the only PEGIDA (bunch of Nazis that started protesting against refugees in 2014/15) group that is still running bi-weekly (the rest of 'em stopped over the years, with Munich's only collapsing due to Covid), which was already seen as a bad economic warn sign in 2016 [0], and the Eastern German states have the lowest vaccination rates by far.

Eastern Germany has a lot of very nice places, but hell no I'd never ever move there, especially not if you're a foreigner. The risk of everyday violence against anything the far-right percieves as "immigrant" is just too high.

[0] https://www.br.de/nachricht/pegida-schadet-dresden-100.html
Here's my tl;dr for "falsehoods programmers believe about [x]" so you never have to read another:

Don't make assumptions. You aren't smart. Keep it simple and don't get clever.
I hereby announce my campaign for the role of Time Druid.
Unfortunately Anything that can go wrong will go wrong

Photoshop is a skill, not very widespread as we assume.

Typing something is literally at everyone's fingertips.
Phillips head are genuinely terrible. Pentalobe and similar are far less likely to have stripped heads.

And maybe check Amazon before saying Apple is preventing third party screwdrivers. There are hundreds there.
2021 Honda Accord.

From the owner's manual:

Instead of directly measuring the pressure in each tire, the TPMS on this vehicle
monitors and compares the rolling radius and rotational characteristics of each
wheel and tire while you are driving to determine if one or more tires are
significantly under-inflated.

There's no other TPMS option available for that generation (10th Generation) car at any trim level, not sure about the new 11th Gen coming out this year.
I've always thought so, too! Cool to see it discussed here because I'm not sure I've ever talked to anyone about it other than my wife.

She finds it strange that I can tell what service or channel a show is on and we've joked that its a Letterman-esque "stupid human trick" that I can do it. I can even tell the difference between football games on NBC, CBS and FOX without seeing the score bug.
I think it's really hard to put a purely monetary value on YC, but I think it definitely does a disservice to say that the program only adds $5-10M worth of value.

If you speak to YC alumni, you'll hear from many of them that YC made them dream bigger. There's a founder in the comments here who said YC was an "ambition multiplier" for him[1]. How do you value that?

[1] https://news.ycombinator.com/item?id=32556060
Okay, this is a new category of product that didn't exist when I first shopped for carseats.

I suppose now the primary issue is that one might have to plan ahead and buy slim carseats from the beginning, since as I recall it, the process was: buy a baby seat, turn it around, then buy a bigger seat passing the baby seat down for the next one, turn that one around, then buy a second bigger seat, and... that's the point of issue unless one planned ahead--or plans to buy all-new seats.
There are a few different kinds of 'secure enclaves' implemented on chips, where you can have some degree of trust that it "cannot" be faked.

E.g. crypto wallets, hardware signing tokens, etc.

We could imagine an imaging sensor chip made by a big-name company whose reputation matters, where the imaging sensor chip does the signing itself.

So, Sony or Texas Instruments or Canon start manufacturing a CCD chip that crypto signs its output. And this chip "can't" be messed with in the same way that other crypto-signing hardware "can't" be messed with.

That doesn't seem too far-fetched to me.

* edit:
As I think about it, I think more likely what happens is that e.g. Apple starts promising that any "iPhoneReality(tm)" image, which is digitally signed in a certain way, cannot have been faked and was certainly taken by the hardware that it 'promises' to be (e.g. the iPhone 25).

Regardless of how they implement it at the hardware level to maintain this guarantee, it is going to be a major target for security researchers to create fake images that carry the signature.

So, we will have some level of trust that the signature "works", because it is always being attacked by security researchers. Just like our crypto methods work today. There will be a cat-and-mouse game between manufacturers and researchers/hackers, and we'll probably know years in advance when a particular implementation is becoming "shaky".
I wanna punch everyone involved in that, too.

Admittedly as someone who's been subscribing to Creative Cloud for a while I already wanna punch a lot of people at Adobe so the people working on this particular part of Photoshop are gonna have to get in line.
This doesn't make any sense. "Software" isn't produced by a single company with a single set of engineering practices and trade-offs. Safety-critical software has been around for decades and decades, and it's not developed and tested using the same practices as a minuscule D-list feature of a web service.
I love when papers go out of there way to have a really old citation, sorta a secret competition of who can find the oldest relevant document.
Why Financially Engineering to find profitable IPO price is not called a Scam?
Seriously, is it only not scam, because it's more sophisticated and calculated so only very rich and certain equity owners are allowed to dump stocks to public investors?
So in what way is that like email?
Tell HN: Beware Google Flight's 'Book with Google' Option
I recently booked an international flight through google's 'Book With Google' feature. The flight, though listed as 'Economy', was booked as Basic Economy: unable to be changed, unable to reserve seats, limited carry-on, etc (with none of those restrictions listed at the time of booking).

Google has structured this system in such a way that they've absolved themselves of all accountability for accurate info and is refusing to assist or reimburse me (my travel plans have changed and I'm stuck with $3k in tickets I can't use). See the fine print here: https://support.google.com/travel/answer/7515668?hl=en&ref_topic=2475360.

Never book through this service - always through a carrier or real travel agency/service.
No, they mean chile. That is the way it's spelled in Spanish and parts of Southern US.

It also doesn't really matter, does it?
Yep. I have the large iPad, albeit a somewhat older one. Weather permitting, I enjoy using it in the garden.

I can watch almost anything just fine: regular TV, sports, the like. Netflix? Nope, not even on max brightness. And this in the shadow.
Perhaps try Runbox (https://runbox.com/solutions/business/)?
Interdependence does tend to promote peace, but only up to a point. Past that point it becomes a weapon, as anyone who has been anywhere near a messy divorce has seen.

Imperialist Russians clearly knew this, but apparently only saw the offensive angle. (At least, they either didn't see or discounted the risks to their own exposure, or they would have held reserves elsewhere.)
Yes, and they charge $129 to remove some screws, unplug an old battery, and plug in a new battery. So why do they not give people the option to just buy a battery, if they are doing all these self service repair rollouts.
This is even a thing at non-relativistic speeds.

Proper operation of GPS requires a time correction [1] because the system's satellites are moving at significant speed from the perspective of ground observers. Their onboard clocks are therefore moving relatively faster through space, and thus relatively slower through time.

This is measurable at the nanosecond scale, and must be taken into account every time something uses GPS.

1. https://www.astronomy.ohio-state.edu/pogge.1/Ast162/Unit5/gp...
FWIW, as the person who raised the criticism of the snark, I also am a former math teacher. I have experienced just how much more valued I am as a software engineer. I have experienced how vastly better my work-life balance is. I, too, have observed how folks in the tech startup scene can approach complex social problems with overconfidence in tech solutions. So I have a similar claim as the OP to feeling insulted and entitled to snark back. I just don't think it's the right thing to do, from the standpoints of how I aspire to treat people and from a pragmatic standpoint of seeing the changes I want.
Russia's expansion is definitely a national security thread to Germany. The thing is that Germany didn't believed that Russia would expand. It was a gross miscalculation on Germany's side. Believing promises and neglecting capabilities.

If Russia takes Ukraine their population grows to 180 Million. With the Baltics and Belarus they will be near near 200 million. Expecting Poland (at 40 Mln) to hold the Russians of is ridiculous.
So it stops short of criticizing the actual power? That does seem like it can be better than other countries, but it can only be so much if the actual power is u touchable.
On the other hand I doubt many more people noticed that it went away than ppl on HN who saw the previous thread. So now they've all been re-informed and know they can rely on it again.
> What a nonsense.. there are millions of people drinking alcohol sporadically and are doing fine. I don't think there are that many people sporadically consuming crack and are doing fine.

I don't know any numbers, but I do know there are people who consume crack recreationally and are doing fine. It's hard to compare to alcohol though, since alcohol is much more readily available and easier to get for a large amount of the population.
I think US "mainstream media" does have a left bias, although not necessarily very strong. (Disclosure: I consider myself probably a slightly right of center, but definitely left of Fox) Personally, I consider "mainstream media" to be the following: NYT, WaPo, USA Today, WSJ, ABC, NBC, CBS, CNN, NPR, Fox. (You could argue Time, Newsweek, Reuters, but I haven't heard of anyone reading Time/Newsweek in years, and Reuters is more news for news orgs and not directly accessed by consumers). I think when people say "mainstream media is left" they mean politically. According to [1], all of that list is left except for WSJ (center) and Fox (right), so 80% of "mainstream media" is left.

If you want to argue that people mean that more broadly, [2] gives mainly the same result, except that few become center-left.

I would certainly not call anything on the right side of middle in either of those graphics mainstream besides WSJ and Fox. (And frankly, I think it's arguable whether those two are mainstream) So for the US, anyway, it does seem credible that "mainstream media" leans left.

[1] https://www.allsides.com/media-bias/media-bias-chart

[2] https://adfontesmedia.com/static-mbc/?utm_source=HomePage_St...
Was about to say, I can see how one can try making a claim that alcohol is more harmful than cannabis l or even cocaine.

But crack and especially heroin (fentanyl would go here as well)? That instantly made me lose any belief in credibility of that reply, sadly. Anyone who has seen what those drugs end up doing to literally everyone who starts using them, it's not even close. And that's despite the fact that heavy alcoholism absolutely can churn out some extremely awful scenarios where people turn into monsters.

It's like hearing someone tell you with full-on seriousness that bicycles going at their typical speeds (15-20mph) colliding with pedestrians will cause more physical damage to pedestrians than a pickup truck going at its typical speed (45mph+).
All NATO countries agreed in 2006 to 2%. It's an indicator of a country’s will to actually contribute to NATO
If Fox News had never existed, the Republican Party would have had to invent it.

The Republican Party did invent it. It is owned by an Australian media magnate, but its first CEO was Roger Ailes, a media consultant to the Republican party.
For more on sunsetting or replacing legacy systems, check out Marianne Bellotti’s "Kill It With Fire: Manage Aging Computer Systems (and Future Proof Modern Ones)". Here's a review of the book:

https://www.usenix.org/publications/loginonline/kill-it-fire
I think that is a little bit of a stretch to be honest. My experience is that a lot of bullies kind of "grow out of it". I know, because later became somewhat friendly with some of my former childhood bullies, and some have even apologized on their own initiative, unprompted.

Children, in general, are kind of terrible human beings. Their brains are still developing and they don't quite have the same sense of empathy and compassion that adults do. People's brains continue developing until around the age of 25 or so.