skysight-inc/HackerNews huggingface dataset:
> Suppose I'm a typical desktop user, how is important information going to be stolen if I have mitigations turned off and JavaScript enabled?

https://github.com/google/security-research-pocs/tree/master...

I don't imagine I'm going to explain it better than the many others who have already done so.

> What state does my browser have to be in, and what actions do I have to take (or not take) for the attack to succeed?

Your browser would have to be pretty old/ outdated since they've been updated to mitigate these attacks. Otherwise it's just necessary that you visit the attacker controlled website.

> What likelihood is it that someone has deployed an attack that meets those requirements?

That's not a simple question. Threat landscapes change based on a lot of factors. As I said earlier, we won't see these attacks because people have already patched and attackers have other methods.

> So we agree it's OK to leave mitigations off and browse the web?

You can do whatever you want, idk what you're trying to ask here. What is "OK" ? You will be vulnerable but unlikely to be attacked for the reasons mentioned. If you are "OK" with that that's up to you.
You can also create a single "catch all" alias and be done with it :) (create an alias *@yourdomain)
Deliberate.

RISC-V architects weighted pros and cons of having a flags register, and pros and cons of having overflow exceptions.

They concluded it is best to not have flags at all (conditional branches do their own testing, and no flag dependencies need to be tracked which simplify superscalar implementations) nor overflow checks (flow breaking and costly; if you need the check, the cost of a software check is minimal, by design).
> Microsoft edge non chromium was fine, but no one used it. So they went chromium based.

Are people now using Edge because of this change?
>I'll eat a roll of toilet paper covered in hot sauce if someday nuclear fission is financially viable enough to produce power for civilians at a decent scale.

So all the world’s nuclear power plants operate at a loss? That’s a pretty strong proposition…
I don't think this holds much weight given the regular users of this product are likely referred to https://1.1.1.1 and are unlikely to read through all of this 3000 word blog post with tech jargon. However, indeed, many people might've heard about it from other blog posts saying it's a VPN or word-of-mouth from more technical users also calling it a VPN - but it's obvious Cloudflare made a concerted effort not to use that term.
Why do you not want justice served for those that commit crimes?
Toronto’s core urban density is lower than Montreal’s. Am referring to the densest neighbourhoods like Plateau. Often I go to Toronto and find I am the only one walking down many streets, which does not happen often in Montreal or NYC
I am generally allergic to video, but that was fascinating to watch. Thanks for sharing it.
This is also a case for online play on xbox and playstation. You have kids trying to shittalk.. and trying to be edgy. (They have very little life experience to understand why their words are wrong or hurtful). However, some of these bans completely wipe out their entire console.

It's pretty shitty to do a life time ban on their accounts for minor things like that.
Is it just me. Or did I just read some HN post of the oposite. Like use it to deanonymize people?
Nope, NeoVim has native LSP support https://neovim.io/doc/lsp/
>Where do you get this?

By visiting sites I visit often/everyday in both Brave and Firefox and comparing DomContentLoaded/Load/Finish timings in Developer Tools. Brave (but also Chromium in the past when I used it) is consistently faster.

Not much, but I noticed even before I measured, I did it to check if my feeling is wrong, and it isn't.
In the leaked Elon texts, there were mentions of a suspected cabal that would keep these kind of decisions from the board. So I'm not so sure that leaders trust their own censorship orgs to do the right thing.
6k hours is about 8 years at 2h/day. I spent at least twice, if not three times more coding for fun at home, as a hobby.

I could have been reading, or running.

6k hours devoted to a hobby is not that much for an adult.
Google doesn't really care about bad PR from account deletions. Most people don't hear about them, they rarely hit the news.

What annoys me is, just this week Meta tried to claim that they were basically a social infrastructure that is essential everyone uses and relies on and that they shouldn't be held to blame for what people see on there when it's legal to post. While at the same time, these companies don't want to act like any of the other infrastructure. Ban people for no reason, no recourse, and no come back. While at the same time claiming they're there for the people and are providing a public service.
I was a Vim user for a decade+ and recently switched to VSCode 100% because the Typescript integration is unmatchable, no matter how hard you try in NeoVim (and I tried hard).

If you're a front-end dev there's really nothing better. Also the https://www.tabnine.com/ integration feels like magic, it predicts the next block you're going to type with scary accuracy. I'm excited to see where AI IDE integration goes.

But I still hate how VSCode is like a browser that will grind to a halt if you install (or misconfigure) too many extensions.
Tesla AI Day stream (starting in 4 hours)
Remember, kids, it's only racist if you're the majority /s
- I have used vim for many years (15 maybe?), and once you have passed the initial learning curve (not so terrible, after you keep learning cool stuff even after years of use), it's useful for everything with the same shortcuts. I would actually spend more time learning something else like an new IDE. At the end, I have probably saved a lot of time by sticking to (neo)vim instead of following the latest trend.

- I like terminals because there is nearly nothing disturbing you, and it's usually quick to have something

- there are many little features that looks like nothing but are really really useful when you use them. I'm a big fan of C-a / C-x to increment / decrement a number, coupled with https://github.com/nishigori/increment-activator it's super useful (to change a boolean, a date, a number, etc). The "." to repeat last command, the "*" to search what is under the cursor are other great features. An occasional macro made with "q" may save a lot of time when you need to do a repetitive task, for refactoring for instance, and you can even repeat them according to some patterns with ":g". I'm not sure if those features have handy equivalents on other IDEs.

- I didn't spent that much time doing my config, just adding little changes here and there when necessary, over the years I've got a environment really adapted to my taste.

- I'm currently doing mostly Python, and vanilla (neo)vim is normally good enough, but I'm using Coc (https://github.com/neoclide/coc.nvim) for a little while, and it add a lot of helping stuff easily. Pyright + snippets are useful.

- when something cool happens somewhere else, you often have somebody adapting it to vim. I can use snippets and emmet which are occasionally very useful.

At the end, I don't feel the need to change, it works well, and over the time I could add some neat features to improve it (snippets, emmet, CoC, tagbar, etc). I'm not sure if changing to something like VScodium would worth the time to learn something new (and I like working with terminals).
Its the only form of hate that's still acceptable. Ascribing the worst possible motives to the people you disagree with.
The only reason I have interacted with a bank teller for the past 2 decades is to get quarters.

If I could get quarters form an ATM, there would be no reason ever for me to.

What are people using tellers for?
You will just have a bunch of random false positives that get blocked and never come back. Even before VPN a lot of ISPs gave you dynamic IP that changed anywhere from every few weeks to daily, to each reconnect. Same with any public access point

Same with carrier grade NAT, IP stopped being good way to block things long time ago. About the only use is "this IP is DoSing me now, block it for few hours".

There are few other methods, all of them intrusive on privacy. Generating fingerprint of browser and blocking based on that might work for the clueless users but dedicated ones will go around it. Making using one of the popular SSO logins is one option (at least banning-wise) but that's a lot of work
In my era they didn't even have much of a requirement to buy that many, it was like signup and get 10 or 20 CDs if you buy two, and then they'd keep sending you CDs that you had to say "return" on for a year or so.
That's not like Florida. If you said

1906 San Francisco

1911 San Francisco

1913 San Francisco

1922 San Francisco

1928 San Francisco

... then you 're in the neighborhood of what parts of Florida have been getting.

It's not that the whole state keeps getting hit by hurricanes. It's that individual locations have been hit multiple times in a decade. So no, California is not comparable.
Can we better define what “financially viable” means?

I don’t know that I need a nuclear power plant to “turn a profit”. That would be great, I suppose, but my view on electricity is a little more nuanced than a dogmatic adherence to market forces.
So 77-year-olds can look forward to finally paying off their houses at the end of the payments schedule.
IMO its so they can keep the data-usage metric in their hose and not leak it to other companies which are competing for ad attention...?
Having lived in Montreal it's probably in the top end of the most inclusive place I have been.

The only thing i feel like parent could be referring to is the language laws, but the reasoning here is that they are necessary when surrounded by english (and has nothing to do with race). Plus language laws are barely respected already.
Who needs face recognition when we're all carrying around fingerprintable electronic devices anyway. Well, I suppose Congress has no shortage of red herrings to energize their base and cause public debate.
You mention that men under 70 lack a certain something. Are you sure it isn't that men have gained something they didn't have in the past? I have thought a lot about how the human condition has changed over the years. I feel the most important change is modern human's ability to think in the abstract.

If you were to ask a pre-modern human to group a chicken, a crow, a stick, and a tree. They might group the chicken and the stick together because they would use the stick to kill the chicken and make a meal. Whereas a modern human would most likely group the chicken and crow, and the stick and tree together.

The tendency to think abstractly has exploded over the last hundred years or so, and it has fundamentally changed how we see and react to the world. A great explanation of this comes from the Ted-talk of James Flynn.

https://www.youtube.com/watch?v=9vpqilhW9uI
You're right in many points, but not quite right in general. You should take into account not only theoretical aspects, but also the specifics of the moment, for example, the values of those in power in Russia today.

The risks are there, but they are not certainties. Neither can the West totally eliminate them - technically Russia was able to wreak havoc for many years. Yet that doesn't mean the resistance is futile, does it?
At the time it happened, I noted that a lot of goodwill tech companies managed to accumulate over the years will be squandered on an election drama. I agree that the post-fact discussion was better, but real-time panic was palpable. Just doing all that stuff in tandem with Twitter moved the story from conspiracy theory to a simple 'they are colluding so it must be true'.

It is nothing that an average information analyst would not predict. I can only assume reasonable voices were ignored.
IoT does not make sense for residential applications, except as a kind of gimmick.

As for other domains like, industrial, manufacturing, agriculture... that ship has already sailed. HN would do well to remember there's more to IoT than WiFi lightbulbs.
Really? Most people? I cannot think of anyone from my family who would even think about it for a second - they would just get annoyed they can't get to their bank website or whatever and just click continue. Also what tech support? Me?
Searching for excuses to let the company's product spy on you sounds like a huge waste of time.
No, you're a totally sane person. People often mistake "smart" with "automated". I'm all for automaiton, but not for devices that think, decide and do things without me. And also the main question is "who's in control". So, you're not alone.
I haven't and don't believe this is systemic. You may have been brute forced?
> it's not just dumb devs

I may have come too rough in my comments and lost the original intent. I was hoping to defend that devs _already have_ access to good compression tools and that they already use them, and 70gb games are that big after compression is applied. That's where my assumption started.

I understand well that there are custom formats for different platforms, and that the whole reason these tools exist is not to squeeze an extra 10% smaller files, but to get fast load times while maintaining small file sizes.

> My previous project was 500gb

That wouldn't surprise me to be honest. It makes perfect sense.
You would think hopefully that having title insurance. That the title company would need to
do everything for hopefully no out of pocket cost.
> There's a growing demand for mid-density mixed-use land because younger generations cannot afford SFHs, more incline to take public transportation, more things to do, pub/bars/live music than SFH with backyards that caters more to families with kids.

These are only unmet demands limited to a few cities that young wealthy educated surburbanites flocked to as a group, thereby making them very expensive. Instead of detailing my unremarkable life, apartment, and neighborhood in Chicago. I'll just say that not everybody has to live in SF, Seattle, Austin, or whatever the next desirable place is. If you can't afford it, there are other places available. It isn't like there aren't tech jobs in Chicago, or remote.
Maybe it's just a little cliche and maybe the phrase "XXX is Dying" is too easily thrown around for click-bait and hyperbole. It can probably be applied to any language that isn't garnering recent fandom. You could probably just as easily say, "Is C# dead?" or "Is Ruby on Rails dead?" or "Is Python dead?" or "Is Rust dead?" (kidding on those last ones).

And yes, I'm with you. I'm super excited about the changes to the Java language, and the JVM continues to be superior for many workloads. Hotspot is arguably one of the best virtual machines that exists today.

But there are plenty of "Java is dead" blog posts and comments here on HN to substantiate my original viewpoint. Maybe because I make a living with Java, I have a bias towards those articles but filter out others, so I don't have a clean picture of this sentiment and it's more in my head.
There is a shortcut to do it
This is closest what I was trying to say - it started with Apple App Store's no-sideload and zero-porn policy, from which it snowballed.
I honestly don't think this will work
The electric utility still has to pay for grid upkeep. Most of their costs in fact are grid upkeep. Until you go off grid you need to contribute to that. The status quo in california is that solar owners get to use the grid as a free limitless lossless battery, and that was just never going to work. It means the rich are being subsidized by the poor.

And tbh if enough people go off grid I expect the state to enact a "grid tax" that every homeowner has to pay, regardless of if they're connected, because otherwise electricity costs for on grid users would skyrocket as fixed costs are spread between fewer users.
It is not a recent trend, it is simply a consequence of sufficient voters not able or willing to do sufficient due diligence and voting in the election.

100% of the cops and their family and friends will be voting for the politician that favors them. Will sufficient local voters not associated with cops also vote? Probably not.

Few people want to go to work their jobs, raise their kid, and then also dig into the city budget to find out which politician is proposing increasing retirement benefits for cops that will cause massive increases in spending 30 years down the road.

In many ways, our “democracy” relies on a certain amount of people doing the “right thing”, even though they could get away with worse. Too many people try to get away with stuff, and it will start to unravel.
Pretty cool to see Wireguard, a protocol that is only a few years old, making it so fast into the linux kernel and now into Edge. Literally shipping into billions of devices in such a small amount of time.
> insensitive, hateful, or discriminatory

That's how you characterized it. You're clearly offended, that's why you're throwing around DEI buzzwords.
I use VS Code for my day job because I can't be bothered to sink that much time into configuring my editor these days. But I recently setup NeoVim to play with Clojure since the most popular VS Code Clojure plugin (Calva) interacts poorly with vim keybindings. It was surprisingly easy to get setup (used the Conjure plugin) - NeoVim has come a long way in the years since I had last played with it.
My AMD GPU driver bugs out pretty regularly. Hardware companies are not known for their bulletproof driver code.
Burning of Washington was done in retaliation of the Americans burning and looting York, the capital of Upper Canada. French Canadians, the Canadiens, lived in Lower Canada, whose capital was Quebec City. Probably not the same people.
It's sort of a weird hybrid monster really, some times it's the worst of both worlds.

You state what you want, yes - but you are forced to articulate it as a specific set of table navigations / logistics through the relational model, as if you were writing the implementation. Then, however, the database then may choose ignore those and do something else to resolve the data you asked for if it wants, if it can prove the outcome is equivalent.

For example I want all the ice creams bought by John. Even though the schema knows the foreign key relationship between "user" and "purchase" I have to tell it back to the database engine in my query. But even after doing that there's no requirement the database will actually implement the steps I was forced so ungraciously to specify. It may "optimise" them away and do something else.
Krugman didn't debate recession semantics.

My point is, if you are going to claim we are in a recession now, to be intellectually consistent, you also have to claim that 2020 wasn't one of the shortest and sharpest recessions ever in history...
Public wifi and bluetooth detectors all over is whats scary, as most public wifi is used by phones, not machines and who the hell is running edge on their phone?

but this just reminded me of the failed FB phone and the failed microsoft phone...
Sure it can. Give me some way to build a virtual location on my desktop machine - virtual server vs. web server - and then design a protocol that lets people visit it, plus a discovery service that let's people find it. The discovery service could warn people if my site was harmful, like Google does now with web sites.
bitcoin fixes this.
From an academic research scientist that works on energy system analysis:

In addition to outputting telemetry data about a solar array's production - whether that is meant to be used for the homeowner to monitor their system's performance or a third party to use for SRECs verification - the IoT modules on modern PV inverters are increasingly being designed/included for the purpose of receiving external input signals. These would either come from the local utility, distribution system operator, or regional balancing authority - and would communicate the need to change the inverter module's mode of operation to ensure the stability of the distribution circuit that it was interconnected to.

Small scale utility customers are typically only billed for the "real power" that they consume (real power is metered in kilowatt hours, kWh). This billing can come in different incarnations - i.e. volumetric tariffs, time-of-use tariffs, net-metering tariffs (as with bi-directional solar metering). However, in order to operate a reliable AC power distribution system you need to also be concerned with the supply of "reactive power" (metered in kilovolts-amps reactive, kVA). Reactive power is consumed by inductive loads (like electric motors) in large volumes particularly when starting up. Moreover, reactive power cannot easily be transmitted over long distances in the same way that real power can. The consumption of reactive power can cause the voltage and current curves of an AC power flow to shift out of phase with respect to one another. This effectively reduces the apparent power delivered by the system. This can also cause other problems with maintaining the system's nominal frequency and voltage.

Large AC generator units, that are essentially comprised of a large spinning mass ( such as a natural gas turbine for example) naturally output a more even balance of real and reactive power components. However, when you try to replace these units with lots of small DC generators, like solar panels, whose AC power characteristics are determined by the design of the inverter modules, what you end up finding is that there is a deficit of reactive power supply. Inverter modules can technically be setup to produce reactive power - but they generally are not tuned to do so. This is because it detracts from the amount of real power that they produce. And remember, that real power is the only thing that you get paid for under a net-metering tariff. There are currently no markets which would compensate you as a homeowner for the production of reactive power.

So, with the knowledge that many of these inverter systems will have 10-15 year lifespans once installed - and that grid operators will likely need to call upon them in the future to dynamically control the supply of reactive power at certain locations (particularly as more renewables come online) regulators are increasingly requiring that all new inverters have networked communications capability so that they will be ready once such a command-and-control protocol is eventually developed and implemented.
We have work in progress to support go-getter [1] allowing use of files from many different sources. There is a WIP branch [2] building that into the Steampipe Plugin SDK, so it can be immediately enabled for all our file based plugins (CSV, Terraform, etc) [3]. Watch this space and hopefully you can help us test!

1 - https://github.com/hashicorp/go-getter
2 - https://github.com/turbot/steampipe-plugin-sdk/compare/main....
3 - https://github.com/turbot/steampipe-plugin-terraform/tree/ad...
I'd argue the invalid certificate would only get the middle segment of semi-tech literate but security illiterate people. So maybe a lot of people on this site . The average user, based on my observations, tends to take these warnings very seriously.
It has a weird limp in its left leg.

It also doesn't seem to have a very reliable expectation of how much ground force it is imparting vs its height above the ground. I assume as the software matures that it could probably get 50% faster on the same hardware.

Everything is software bound.

*edit, I think it just runs like a grad student.