skysight-inc/HackerNews huggingface dataset:
Mainly forms -- login forms, comment forms, signup forms. Bots use Tor pretty heavily because it's anonymous and hard to block them without blocking the entire network. Login form abuse is mildly irritating but not a huge deal if you have other measures in place. Comment spam is annoying but there are some options that deal with it pretty well.

But the signup spam was a headache. I didn't want to just blackhole Tor traffic, and tried to reduce the abuse with other tools, including some custom stuff. The final straw was a customer's small business site that had a MailChimp or Constant Contact signup form. Those vendors want you to embed their code by default to render the form, so you have less control over the form itself. There were workarounds, but they all sucked.

Tor bots would sign up email addresses through this newsletter form, and then I'd have to go through and manually scrub them before newsletters went out, or the service would penalize my client for too many bounces/unsubscribes/complaints. Very nearly 100% of the abuse on that particular form came from Tor IPs.

I do not want to spend my limited time on this Earth manually sorting out bots from humans because of one particular network. Blackholing Tor made that problem disappear immediately.

VPNs are dime-a-dozen now, cheap VPSs are available from lots of vendors, there's Wireguard, there's ssh, a clever person could even set up Apache or nginx as a forward proxy with ssl from LetsEncrypt. Tor is well over 90% abusive traffic (https://blog.cloudflare.com/the-trouble-with-tor/). This is a Tor problem, not a me problem. There are better alternatives available.
Yes, which is what right to repair is all about.
Reminds me of this story:
http://blog.krisk.org/2013/02/packets-of-death.html

tldr: Specific packet content triggers a bug in the firmware of an Intel network card and bricks it until powered off.
About 10 years ago I e-mailed OxfordDictionary asking if they could change the webpage so you could start typing your search right away, and not have to click the search area first.

It made my day when they some days later had implemented it, and emailed me back with a message that they now had implemented it.
What exactly is the language supposed to do then. Let's say that you caused an integer overflow, or tried to perform an out of bounds access in a dynamic array. What's the program supposed to do if not crash.

If your point is that some software shouldn't crash, then yes, for sure. But that's on you to not make programming errors in your code.

In fact Zig does help you create software that doesn't crash like not many other programming languages do, for example by not having language features that rely on implicit memory allocations. This gives you the opportunity to always have a fallback strategy if a memory allocation fails.
The MCAT is for admission into med school. How did they complete it without passing?
Thankfully no, they’re still good
35-40 minutes, perfect distance. Not too far to meet up for a meal, but too far for drop-ins.
FTR, Firefox is working on supporting this natively: https://bugzilla.mozilla.org/show_bug.cgi?id=1783015

According to this german article: https://www.soeren-hentzschel.at/firefox/firefox-sagt-cookie... , you can already set various values for the cookiebanners.service.mode about:config setting on Firefox nightly. 1 denies all cookies, 2 also accepts if there is no option to deny or if denying didn't work.
Ask HN: How do you maintain JavaScript web apps?
Lets say I have a large code base built using React and other needed libraries. I have different repositories based on the functional breakdown. Each repo has its own package.json. With the way dependent packages release newer versions, its really hard to maintain dependent packages in turn resulting in audit issues and adding newer functionalities. Also, updating newer versions of React becomes a pain. So how do you all maintain javascript webapps? Any best practices or pointers to follow.
a> We used Spinach since early beta days and it was pretty helpful with running concise & effective morning standups.
I remember reading a while back about how some intelligence agency uses the browsing history of individual users to correlate their interests and build a profile on them. Either way, it's best to not centralise this data (or make yourself hard to fingerprint).
Instead of treating everyone like a drunk driver they should just better enforce the current laws. Make a single DUI a ten-year loss of license and a DUI leading to a fatality an automatic life without parole and you will see a lot fewer people doing it.
I get this question sometimes from a developer new to my team asking if it’s ok to add OOP code since most of the existing code is just functions.

My view on that is that it’s ok to use OOP and define classes if you are really defining an OOP style object. Back in the 90s is was taught that an object has identify, state and behaviour. So you you don’t have all three, it’s not really an object in the OOP style.

Looking at it through this lens helps make it clearer when you should add classes or just stick to function and closures.
Probably something to do with the variational auto encoder, which is lossy.
> How does your company handle late running projects?

The "founder" tells employees they suck, and that the company will go bankrupt if they don't move their ass to meet the deadline.
Very cool! I searched for it here, and found some comments that imply it's possible to detect these attacks in MD5, but nothing too detailed. Much more advanced than I was thinking, but still hacky enough that it satisfies me!
parent is saying mathematics is the abstract base class. they're in the source, but you never see instances of them at runtime.
>> Surprising so many folks struggle w ui/ux changes.

Start menu came out in Windows 95.

Imagine after 28 years of driving cars, the auto manufacturer suddenly swaps the gas / throttle pedal and brake pedal positions on the new model and then acts surprised why people don't like it.
Eh strong opinions are usually morally based, and have little to do with intelligence.
Do you work in tech, WFH and make upwards of 200K/year :-)
I’m glad someone did this. I immediately uninstalled the extension when I saw that it had been acquired by Avast.
The original version of this add-on is available on Firefox and getting this fork on Firefox is on the to do list[0]

[0] https://github.com/OhMyGuus/I-Dont-Care-About-Cookies/issues...
Because you can add arbitrary instances so the extension needs access to anything.
This article says it's only alcohol impairment:

https://www.ntsb.gov/news/press-releases/Pages/NR20220920.as...
"The weather forecast was correct as broadcast, sir, it's just your smart TV thought it was more likely that the weather in your region would be warm on that day, so it adjusted the symbol and temperature accordingly"
> an ever-more-militant LGBT agenda have sidelined practically all concern for the speech rights of those seen as on the wrong side politically.

Complaining about the LGBT agenda being militant, while praising the free speech rights of literal Nazis seems very tone deaf.

This seems to be a general pattern. Does the author not realise he's on the right, and comparing genuinely authoritarian moves with stuff that's not even slightly authoritarian.
Devil's advocate - would it not then be pretty easy to engineer malicious bots to avoid detection?
> Does Joel Spolsky know? I don’t think he’d be impressed.

It doesn’t matter if he would be impressed. He sold the business, cash in hand, emotions have no place here.

I’m thinking about something else: if this company was the best buyer, what was the state of that business?
Where decentralization in autonomous organizations matters
Deeply envious of everyone who gets to work on this. What a dream project.
Who is the one who punishes the abusers? How can you scale the solution to deal with billions of pages?
Litigation over Tony Hsieh's Estate
Sad to read details of one of my fav founder.
You are right. I just happen to use a very safe range. If I didn't care about anyone using jumbo frames I could set the range to 1220:1536 and nearly all legit traffic would pass just fine. 1220 (to 13xx) for the people using VPN's and ip6-ip4 gateways. I just try to give really conservative examples so that it is less likely I break someones unusual setup. Anything just over 9k is fine for most jumbo-frame setups.

All of this said, I could set the range to 1:65536 and it would still drop most bots as they don't even bother to set MSS at all in their scans. I'm not sure which tool they are using.
I used to visit the data centers of some very large financial institutions.

The SoP at those places was that hard drives from the data center NEVER left the building except through a device that destroyed them…. Their security guards were really into checking for them and etc.

It was a pretty common rule across those banks and etc at that time, and that was quite a while ago.
I absolutely love it!
What Is Hindu Nationalism?
The most amusing (for me) behaviour is what OR I need to press Csncel everytime ( my preffered bahaviour, honestly, I don't save passwords) OR never see the dialog again (I'm totally okay with saving the pass for some LAN devices which would be never acessible from the net ever - but I can't)
Couldn't they just not upgrade the Akka dep?
Literally anything. Unstyled HTML tags are better
suggesting the concurrency features can simply be broken off is evidence that you may not understand them as well as you imply.
I've been using fde since like 2005 or so and I'm not even a bank. Seems like they don't have much excuse?
That boundary is why I have a hard time taking TypeScript seriously. A type system that doesn't participate in code generation is what.. just for linting and documentation basically? Is that what we are become? Is that all people think a type system is good for?

Worse there is one value that is both a user-definable TypeScript type and a JS value.
> > What would it take to build a multitenant web service where customer code is isolated using wasmtime, like the one like described in the post?

> See suborbital linked above.

For a real world example of someone using Suborbital's platform for exactly that, see https://avenue.so/blog/avenue-launches-custom-filters-transf...

It is indeed early days, but we're pretty confident that the opportunity is real. Take webhooks. With webhooks, your customers have to bring and manage their own infrastructure. That's a pain in the ass. Everywhere that supports webhooks should also support Just Running My Damn Code. Like with GitHub Actions.

How does GitHub do it? Simple: They're owned by Microsoft. GitHub can bury the problem in an ungodly deluge of cheap virtual machines from their sister company, Azure.

You aren't owned by Microsoft, so how will you Just Run Some Code? You're going to use WebAssembly. Specifically, in a year or two, you're going to integrate some sort of off-the-shelf commodity product that's powered by WebAssembly.

Suborbital is one shot at what that future might look like. We'll be talking more about this in the next few weeks. And it's not just us: a lot of the serverside WebAssembly folks will be at Cloud Native WASM Day at KubeCon next month... say hello if you're there!
This sounds pretty paranoid. If this is truly a realistic threat, you might consider a restraining order or finding a less hostile work environment.

Knowing there's an AirTag nearby won't prevent a determined individual from smashing your skull in. At all.

Also, people with poorly functioning brains probably aren't the ones using AirTags to stalk or threaten others.

What an odd proposed solution and submission overall. What the heck is she supposed to do if it flashes red? Yikes.
It's based on Chromium, so no.
>the atrocities of the CIA are sadly well known.

Not well-known enough. In my opinion, literally every mention of the CIA in writing or elsewhere in the media should come with the disclaimer (paraphrased from the article):

"...the CIA, mostly known for directing the coverage of American news organizations, overthrowing democratically elected governments, establishing propaganda outfits to manipulate public sentiment, launching a long-running series of mind-control experiments on unwitting human subjects, interfering with foreign elections, wiretapping journalists and compiling files on Americans who opposed its wars...has the following to say about <--insert latest propaganda-->"
Dual classing a pc as a tv and desk PC can be pretty nice once you get it set up. Something like Nvidia Shield, Moonlight Gamestream software (if you have an Nvidia card), and Playnight launcher can work great if you can hook it all together with ethernet or MOCA over COAX.
The answer depends on the type of service you host. I don't know what you need to do, but I do know that filtering IP space is merely security-by-obscurity, it is a cheap and broken solution to the hard problems of sybil resistance. If you need IP filtering to operate on a day-to-day basis, then the security of your service is fundamentally broken.

Tor users do not have any special properties over clear-net users besides low accountability for their IP space. There are other ways to acquire this type of setup that don't involve broadcasting a public list of known exit nodes as an act of good faith. Any sophisticated attacker will be able to easily get ahold of the IP space and bandwidth they need to do their work, whether it's through a botnet or simply because they operate out of some less-accountable country like China or Russia.

IP filtering: now you have two problems!
At every single org I've been where Datadog has been considered, the conclusion has been "Yes, it would be cool, but we really can't justify the price."

Yes, in theory, in the middle scale, you should outsource things, but in practice, it only works if the managed service is at the right price.
Indeed it is not a country. But democratic process is a very wrong word here, even with the adjective "representative". The EU process for updating its own rules is a bureaucracy directed by prime ministers, and those influenced/controlled by powerful groups. E.g. Scholz and Macron pushing for federalization and weakening the power of states - this is great for EU apparatus and those wanting to make it stronger, but state citizens do not want this.
People vaccinated against Covid share common symptom after testing positive
Same. When I used to work at a hedge the standard procedure was to zero them out first. Then retain the hard drives in a closet. Then someone could come periodically to physically destroy them.
There are also training masks that make it difficult to breathe. I think it's supposed to mimic elevation training. https://www.trainingmask.com/
I'd say the 99/4A was unique among the 8-bit computers. All the rest had basically the same architecture, but the TI had that strange system where most of the RAM had to be accessed through in's and out's.
I think the past 100 years are:

“Algebra and geometry are the same?… Oh, our whole field is blind people describing elephants.”

https://en.wikipedia.org/wiki/Blind_men_and_an_elephant
> If you're not using every possible construct in unsafe rust blocks, then you're not using rust - just a safer language that just-so-happens to be a subset of rust.

You seem to have misunderstood my point. Whether or not you (or I) happen to be using this or feature of a language is irrelevant; the question is whether it's valid input to the toolchain.

For comparison, the existence of an SQL injection vulnerability in example.com has nothing to do with whether you or I happen to exploit that vulnerability or not.

W.r.t. Rust: the mere existence of "safe" and "unsafe" subsets, which (a) can be explicitly permitted or forbidden, and (b) are well-defined and don't differ from person to person, org to org, etc. makes it much more practical to forbid "unsafe" from as much of our code as possible, and to pin-down precisely those locations where it has been used. The same cannot be said for e.g. "modern C++"
Unfinished Ford Trucks Keep Piling Up in Lots Visible from Space
The tax is literally the problem with quoting the price in Euros.

As far as the price, the equivalent card from the 3 series was the 3090 RTX, which released at $1499 msrp 2 years ago. Given the inflation over past few years, $100 increase is not an increase in constant dollars. This new top of the line card has twice the performance for effectively the same price.

Yes these top of the line cards are crazy expensive, but it doesn’t seem like this is actually worse than the 3 series pricing. You are talking about more than 6 Xbox’s worth of compute here for an ultra enthusiast market.
If you look at the floor plans you can see where they're modular.

https://youtu.be/a984YzmJB4M has a video of them setting up the home and 1:41 in, you can see the two sides - one being put on the foundation, one awaiting the crane. At 4:00, you can see one with a very high peak with the roof being propped up while being assembled (I assume that it was shipped in a folded position).

When you've got that degree of modularity, then two, three or even four modules becomes feasible. The key is that the modules are assembled ahead of time.

---

As to the 644 sqft - 46 x 14 = 644. The porch doesn't appear to be part of that and would add another 84 square feet if it was.
Phones are worse than alcohol according to an article I mentioned earlier on the same subject:

https://news.ycombinator.com/item?id=32902090
A few years ago I tweeted them to say that they had a word definition wrong. They changed it!
You are correct, Rails and Ruby are one of the few places I haven't felt like there's been constant and unedning churn, I attribute it to the incredible flexibility and power of the Ruby programming language, which incidentally is my favorite language to work in.
Interesting. I submitted by original comment with the misconception that it second preimage attacks against MD5 were feasible and were being used by the article. So I see how in the case where you want to defend against collisions (e.g. a malicious certificate signing request), length awareness might not help. I'm not sure if that would apply to a second preimage attack, though.
> Larger amounts of money, the bank will pay you interest.

Adjusted for inflation, I doubt there is a single depositor in the western world that receives a postive interest rate this year.

> Depositing money in a bank is literally loaning it to the bank, and the depositor expects a return for that. Loaning money for interest goes back to the very beginning of money.

Again, adjusted for inflation, even banks receive a negative (real) interest rate these days. The only way for them to create real profits this way, is to make sure the depositors loose more real purchaing power through their deposits and they do through their lending.

> What inflation actually is is a tax on money, and that tax revenue is collected by the party that is inflating the money (i.e. the government).

This is partially true, but oversimplified. Only if ALL the inflation is due to money printing can this be considered a tax, in that it is a transfer of purchasing power from the populace to the government. And even then, negative money (debt) get a negative "tax".

For the part of inflation that is caused by changes in supply or demand, but unrelated to money printing, the government is not benefitting from the inflation, and may even end up losing. And this is the kind of situation where inflation is needed to even out real changes in the economy.

Also, nobody is forced to store their wealth in a currency. And I actually think it is a good thing that people have an incentive to do long term storage of wealth in real assets, whether those are real estate, stocks or even commodities such as gold and silver, if you're longing for the gold standard.

The true fallacy is when people expect more from a currency than is possible. Currency is not real wealth, only some kind of representation of a debt that some anonymous other must pay in the future. A gold bar, house or a company, THAT is real wealth.
Rendering watches with Craiyon (formally DALL-E mini)
OpenBSD Server Rack (2009)
Except you can get modulars this size or larger from other places for cheaper, with more design options. So if they're targeting the top .5% and they have a lot of competition, then it seems they have a poor business model.
What's worse, they have interesting "rules" that one really needs to use a linter so their IDE/Text editor gives them friendly reminders. One cannot conditionally call useEffect. One needs to add all dependencies to useEffect's dependency array - BUT that has potential to cause infinite re-renders (especially when using a getter/setter pattern with useState). They encourage DEFINING functions inside of other functions. Years of CS education and practice go right out the window because some popular JS person on Twitter says, "it's fine".

When pressed about it, be ready to be hit with, "You don't understand hooks".
Lots of people simply enjoy helping others when they can.
That's at least two years before even the most forward thinking offices started using FDE on PCs. Bitlocker came out in 07.
> "Today’s action sends a clear message to financial institutions that they must take seriously their obligation to safeguard such data.”

$35 million fine for 15 million customer's PII. The 'clear message' is that a customer's PII is worth about $2. Meanwhile the customers are on the hook for fraud monitoring in perpetuity.
It's more than a couple of days but I have done exactly this and it works fine.

In general Vue holds high conceptual similarity to React so React devs just "get it" straight away. However nearly everything is simpler / easier than it would be in React, so they learn it extremely fast.
how we present has changed a lot, though. And we reap the rewards of not teaching.

As a general example, part of why accessibility on the web is so poor is because we don't teach anything about it. It's become this mythical scary thing, when in reality a lot of the pain is avoidable with a little bit of thinking. We just don't teach any of it.
I agree. If you're the only user of your instance, they can easily track you server-side by your IP address. You could mitigate this by routing your egress traffic (either from the individual device or network-wide, from your router) through a VPN.
> Growing consumer awareness over their over-consumption, to change their behaviour, is one of the most powerful and direct solutions we have.

Actually, that has been shown time and time again to be false. Asking consumers to change their behavior to lower energy consumption is about as effective as telling people to diet and exercise to lose weight: it may work on an individual level, but it is a complete failure at a societal level, and when it comes to decarbonizing the economy, the societal level is all that matters.

If we want to lower people's energy consumption, we need to make policy and economic changes, e.g. raising the cost of certain types of energy use so that it causes people to reconsider their use of it, or redesigning spaces so that less energy use is needed (e.g. making public transportation, or human-powered transportation, a more viable alternative to driving).
> Let’s remember that it took Google 53 qubits to create an application that could accomplish a supercomputer function. If we want to explore new applications that go beyond today’s supercomputers, we’ll need to see system sizes that are orders of magnitude larger.

Although the current order of magnitude (10s of qubits) are sufficient (on paper) for doing certain tasks faster than supercomputers of today, we need to go to 100-1000 qubits order for error-corrected results. Maintaining coherence for long enough to be able to do useful calculations in 10s of qubits has still been a challenge, let alone the designs for 100s of qubits.
But then... what would our elected officials drive?