skysight-inc/HackerNews huggingface dataset:
The discourse regarding this incident is deranged. Despite all the resources put into teaching intellectuals and academians to exercise critical thinking, they still believe the most absurd claims without any evidence.

The claims I've seen circulating are all insane, such as that Russia did it to avoid being found guilty of contract violations or that they did it to attack the Norway-Baltic pipeline. Note that the Nord Stream pipelines' total capacity is 150+ BCM, whereas the Norway-Baltic pipeline is only 10BCM NG - less than 1/10th.

Russia has gained zero, whereas EU countries have removed an internal pressure point, and the USA has gained a larger energy share. I don't know who sabotaged the pipelines, but the superficial blaming of Russia without any evidence should be criticized.

Lastly, I detest all attacks and invasions of sovereign entities.
Yeah it is too bad Incanter stalled, it could have been an great alternative to Python's data science stack (pandas/numpy/matplotlib) if it had gotten traction at the right time.

It lacks some polish and has some wierd conventions relative to modern Clojure, but I still use it occasionally.
You are right. It is related to privacy, but its not the whole story. Thats what I am trying to say. Running FHE will not magically solve the "data leakage" problem of your AI models, and I believe that the people/companies who don't make that distinction are misleading.
> It's a minefield, but I think it's worth it to at least consider as well as I can, how I may be able to provide these folks with the services and products they want.

“Worth it” in monetary terms? Or in social justice points? The risk/reward is totally out of whack here for providing generic Saas offerings.
Europe braces for mobile network blackouts
I suspect that the issue that the GP is discussing is not that they are hard to unit test, but that they are hard to mock: If you don't want to call the static method, either some relatively unfortunate thing has to be done to your mocking classes, or you have to inject it, which is uncommon in this kind of situation in your typical Spring application.

Now, what I'd say to that kind of argument is that a good static method, which could really live on its own as a function out there in the world, is something simple enough you'd never want to mock, or is something that is so specific that you'd always want to inject. This is easier to understand if you are used to functional programming styles, and therefore also realize that automated dependency injection was a misstep. It's also easier to get if, like in Scala, there is no such thing as a static method, just classes that have only static methods, and classes that have none.

But until one has 'seen the light' of FP, static methods that are complicated and are not injected will be annoying when someone is trying to not call them in a unit test. Therefore, in some places, static methods are always avoided.
Maybe Slint could be an option? From former Qt developers.

https://slint-ui.com/
Deno 1.26 Release Notes
kinoko teikoku long goodbye

Is a top choice and rare enough - you can find it on spotify now though !
I'm rooting for this tech. Hopefully this will get modern movies out of their low risk reboot loop since it will be cheaper to make a movie that have new story lines that are commercially untested. I'd be happy to watch a movie that doesn't look AAA, but has compelling writing and makes me think. Or maybe I'll just stick to books.
This feels a lot more like a simple, shared WP password than any sort of sophisticated cyber security
"If we used the money we spend on, say, entertainment or high-end mobile phone industry on R&D regarding farms and food yield and distribution we might see lots more advancements in this area."

There are massive sums invested in agricultural R&D. Some of this does include a focus on poorer markets. We also heavily subsidize many crops to be competitive on the global market, thus exporting to poorer nations (overall that might be a bad thing, stunting their economic growth).
Hi ! I am ever so grateful for all the work you've put in over all these years, to get the Clojure ecosystem where it is today.

What I am kinda saying is that Clojure would be in a better place if it was paying people like you a lot more!
You're right. I assumed it was brown because it comes from a form of Brownian motion, but apparently it's white.
It's also possible your email address is guessable
Patching common vulnerabilities at scale: project promises bulk pull requests
I don't think "the group being notified" that an unauthorized member can decrypt all their messages is quite the mitigation that Matrix advocates think it is.

This is the fundamental task of any secure group messenger. It has really one job: don't let unauthorized people read messages for the group. Here, Matrix has apparently accepted the risk that their group messenger can't do that job if the server is compromised. If you know where to look and your group is small enough, you can constantly watch to see if your homeserver has decided to stop protecting your group, but either way: your homeserver can spontaneously decide to stop protecting your group. Matrix, you had one job!

At the point where you accept this risk, you might as well just use Slack.
Is it possible that the mail address is guess-able? E.g. I'm sure that someone owns john.doe@gmail.com
So long Hollywood. You had a good run, now all videos will be auto generated from scripts in the Metaverse.
Oh, that is wonderful, and I can just imagine the sound. :-D
Not saying you should use JWT, but you can invalidate tokens by adding a timestamp to the payload. This way you could invalidate those issued before a certain time and logout users.
Delighted this is in Facebook’s hands. No doubt responsible and careful thought of implications have been baked in from the start.
> in case you needed confirmation, here it is

I appreciate the post, as of course it is an act of community goodwill; but this isn't really confirmation. I could simply write this same text with any company I wished to label as unsavory. Also, just like spam calls are more coming from lax caller protections rather than data sales, it could be that your email address was simply guessed by some spammer and upon not bouncing marked as email-able
Thank you! I appreciate your summary!
It's my former company now, but the answer is: For the initial workload that we migrated from the datacenter to AWS EC2 instances, we still had the existing DevOps people, and while they said things were a little easier, they were still pretty busy.

For all new dev, which eventually including migrated some functionality from that initial workload, we used AWS-specific managed services like Lambda, Dynamo, and SNS/SQS, which required MUCH less effort from DevOps. Two of the existing DevOps people were able to handle everything the so-called serverless development required in addition to their previous normal work.

I mean, the point of managed services is that the vendor takes care of managing them, so you don't need to deal with upgrades, security patches, etc, so if you're still doing just as much DevOps work, it's likely you're not taking good advantage of managed services!

So we had some initial effort to automate and standardize CloudFormation configuration, and then developers were able to launch new code bringing in millions in revenue with very minimal oversight from DevOps.

The advantage there, though, was mostly from "serverless" and managed services, not just EC2 vs datacenter. We still had a DBA for the Postgres stuff, we just didn't need one for the new Dynamo stuff.
I did a calculation a while back [0] that showed that there's 30x more js than html on the web today.

[0]: https://misc.l3m.in/txt/js_ratio.txt
Almost all webservers have support for server side includes. SSI are very limited and basically all you do is include one html file in another html file like <!--# include file="/footer.html" -->. It is the perfect combination of templating power and static html. It allows you to avoid all of the complexities of "static site generators" and "deploying" and all that cargo cult jazz.
> “It’s well known that when you put a ton of carbon dioxide in the atmosphere, it doesn’t stay up there forever. A massive amount of it falls into the oceans, while the rest of it is taken up by trees and wetlands and those kinds of areas,” Dr Sohngen explained.

In the pre-modern era the oceans emitted enough CO2 to keep land plants alive. Now the flow has reversed. I don’t think climate activists are taking this into account.
Is it something guessable? Some spam bots just make up email addresses and send blind, hoping there's an existing address at the end. It's also possible to test some email providers to validate an address.

Not saying Comcast didn't sell your info (probably likely), but there are other possibilities.
As I say, it's likely to be at least partially psychological but that doesn't really matter. The real test is whether I can get to sleep to it.
But then you introduce a database-like dependency that potentially every micro service will need access to.
"The "voluntary" part is just highlighting how willing people are to trade in unnecessary misery for the entertainment of the comfortable."

Aye comrade, aye.

You say Mr Beast, I say Capitalism.
Broadly, I think so many of these issues get tough because of the wildly different roles "sports" can play for people and we end up conflating them. As in, are they:

- Elite competitions to see who is the best at a thing?

- Child and teen activities for health and cameraderie?

- Million dollar entertainment that exists mostly for the fans?

etc. etc. All of these are different enough such that it almost makes no sense to try to use the same "gender analysis" stuff for all of them. They serve different goals.
It seems you live in a place a survivalist would be preparing for, it would be interesting to know where this is from?
They forgot ‘trending on onlyfans’

But actually, this technology is super exciting. Imagine a future where movies and games are choose your own adventure.
Let's not forget his big brother Jacques-Joseph, who was one of his first educators, have worked with him, and who have edited his manuscripts after his death (his egyptian dictionary & grammar). Without Jacques-Joseph, Jean-François may not have been the same man.

https://en.wikipedia.org/wiki/Jacques_Joseph_Champollion-Fig...
In case anyone else had problems finding it - it's at the bottom of the page:

https://makeavideo.studio/assets/a_golden_retriever_eating_i... (webp)

That grasp though.

These things still feel a bit like e.g. Google/GCP services to me: Super appealing at first glance, quite close to what you want, but somehow never quite there. Maybe they'll asymptotically get there, eventually? Perhaps that statistical model can't really make it to the level we want it to?
This is unnecessary - expiry time is a first-class capability of a JWT and records the time of expiry, not when it was created.
Now that the message of Dalewyn is clearer:

what once was denounced as "undoing" was "newspeak" (as per Orwell), which is in a way the opposite...

I can confirm that the original post was the opposite of "«salad»": the structures were intended and all (reasonably) terms were chosen.
I'm not sure I get any more value from the public service than anyone else. Do I get faster service from the police? More officers assigned to protect me?

Any perks from the NHS for the wealthy? Or the same service as everyone else?

One thing I know for sure - less public money is allocated to my children (I live in the countryside) than children in urban areas, due to the funding formula.
There have been nuclear power plants going offline in my state in recent years, due to age and cheap fossil fuels. Which is better, retrofitting old nuke plants, or converting old coal plants? I would imagine the former.
Looks a bit better than DALLE1 IMHO. They've demonstrated greater range.
This is a shame. They lied, they sold an unfinished product, they promised to implement all the missing features and they did not.

And people still accepts to buy it. That's why companies poop on consumers
As explained in the article, if that's the case then you can't really trust the JWT anymore only for it's cryptographic signature and you rely on an internal store entry that makes the token valid / invalid.

This makes no benefits as to bearer token or any random string that the server "knows" is a valid authenticated request via internal store, like a DB.
Yes, that comes with its own caveats
Maybe, people should stop preaching what should others do and build their own sport events however they like.
Yes, but if you want to invalidate say currently logged in users, before the tokens expire.
why not just use a session token at that point?
Men's experiences of sexual racism differ in two online dating communities
It is not necessary to engage in personal or small talk with brokers and counterparties at other banks in order to carry out a business conversation. In my case it was to a counterparty at another bank.

Champagne was a banned word as well. "I'll get the Champagne" in particular would see you sent to the Break Room for re-education. Shampoo and eventually derivatives of liquid with bubbles was also added to the list as creative traders mocked the system.

One phrase the Goldman software searched for: “How could this happen again?” https://www.cnbc.com/2016/06/15/you-wont-believe-what-gets-a... The general lists are pretty tame - mid 2010's were pretty wild as all this stuff was coming in.

Savvy Goldman types have long favoured the nifty acronym LDL – let’s discuss live – as a way of avoiding writing the wrong things down. https://archive.nytimes.com/opinionator.blogs.nytimes.com/20...
Aren't regular, peaceful protests a good thing and a sign of healthy freedom of speech?

I understand your misgivings about tighter border controls, but if you're already inside the EU, I'm not sure why that would motivate you to move.
Yes but if each microservice needs to check a cache on each request, then why use jwt at all, you could just save a classic session (with random token) in that cache as well
This is interesting because one thing people ask me when a system is using JWT is in case they reset their password, how can they invalidate all existing sessions? They basically can’t.

Using A cookie-based/token-based session strategy, you can do that quite easily.
oh, I didn't think about it!

It seems that it contradicts the principle of Nash equilibrium, since in Nash equilibrium you don't have any reason to change your strategy. However, if you change a "smart" strategy to a "dumb" strategy you're not increasing/decreasing your winning changes, so it still fulfills the Nash equilibrium principle.
If you're going to counter someone's point y claiming to be an expert, you really need to link to some credentials. If you're not going to do that then linking to some research disproving the parent comment would also be useful. Without any of that it's just an untrustworthy claim and doesn't add to the discussion in anyway.
the project started in 2015 and he took over in 2021, not sure how much a new CEO can be blamed for this project being a disaster
Meanwhile:

Ginkgo Tree: “Hey plants, how come no one told us this idea?”

Kentucky Coffee Tree: “Wait, what’s an animal?”
Well, the standard Lojban reference book "The Complete Lojban Language" which defines the official language has a single author (John Cowan) at any rate. That's whom I'm talking about.
What does your email server reply with to `RCPT TO:`? Always 250 OK, or does it leak existing inboxes to brute force scrapers?
Yes, and there is even a JWT field to hold the unique identifier for that token - https://www.rfc-editor.org/rfc/rfc7519#section-4.1.7 .

Makes it easy to track issued tokens and revoke them too.
Yes, it's so heartbreaking when it starts happening in first-world countries.
> People hacking on their own TVs is quite literally a victimless crime (besides yourself, if you brick your one TV), because you knowingly void the warranty.

Nitpick: it's not a victimless crime, on account of not being a crime at all.
"It’s a challenging time in human history because we’re now capable of producing enough food, clothing, shelter, and other necessities for every human on Earth."

But that's only true with incentive to work.

Their point wasn't anything to do with wilderness. It was if you had your needs met without the requirement of work, that a significant portion of people would not work. Without those workers, we would no long have enough production.
There's a spectrum of embarrassment/torture between "100 days in a circle" and "sitting in boring Zoom meetings," wouldn't you agree?

A person that has no problem with paid labor but does have an issue with 100 days in a circle could have a consistent view if they believe that the former doesn't rise to the level of "torture" or "embarrassment."
"The greatest shortcoming of the human race is our inability to understand the exponential function”. -Allen Bartlett

What she is complaining about is that a exponential trend (Moore's law leading to more compute) is stuttering. In this case it was just for one company and the world was lucky and had backup options. But undoubtedly there will be more stutters in the future, and there will not always be backups.

Science relying on an exponential trend like this it will have more challenges in the future.

Same for all the the other trends built around brute force compute like "big AI" deep learning or a lot of the wasteful programming practices that fill the front pages of HN regularly.
Amen. I've been doing embedded since forever and am continually stunned how engineers shun simple, open source tools for complicated expensive ones with no value add.
Five are AMD, one is ARM (Fugaku), two are Power, and one is Sunway.
> An old joke is that there are only two hard things in computer science: cache validation, and naming things.

Way to ruin the joke! The joke is that that are only two hard things in computer science: cache invalidation, naming things, and off-by-one errors.

See, now it's a joke.
I couldn’t find how long the video generation took
That's discussed in the article in the second paragraph under "Problems with JWT". If you're keeping a cache at each server node then you might as well just use bearer tokens.
I think they are talking about our proclivity to get addicted to something similar to high fructose corn syrup in any shape or form.
Show HN: Liqe – lightweight Lucene-like parser and serializer for JavaScript
> unknown non-optimal strategy

The hard part is to establish a prior for this "unknown". Otherwise you can't say anything.
What I'm pissed about is that everyone hopped on the JWT train too fast a couple of years ago.

Now it's really hard to argue with architects / developers why cookie authentication / bearer token makes more sense than JWTs.
Creating content that millions will enjoy in exchange for six figures of cash is something that has a point.

The internet wasn't laughing at that dude.

I assume most people here are too good to watch Mr Beast /this video and are simply inserting into it whatever is most convenient to their argument.

The dude is amazing. It was a fun enough video. His family is beautiful and watching how he "survived" based on the strength of his love of family was great.

Better than 95% of the garbage on youtube.
I used to do the same thing, giving total visibility and access inside a package. I do this in my old “Java AI” book (you can get a free copy at https://leanpub.com/javaai by setting the price to free).

I had not touched Java in a long while until yesterday when I wanted to do a quick benchmark of Lucerne to compare it to a search library in another language. I was surprised how easy and quick it was to do this.

I have considered updating my old book for modern Java. It would probably only take a few days to update the examples, but updating the book text would take longer.
The Hymn to Ninkasi[0] provides a recipe for Sumerian beer. Instead of milling grain and steeping it, they baked bappir bread, crumbled it, and steeped that. The final product still had chunks of bread in it, so they drank it through straws. Instead of the modern practice of using hops, they used honey (or date juice?) and unspecified aromatics to flavor it. Fritz Maytag suggests that Miguel Civil mistranslates the Sumerian word ĝestin here as "wine," when "grapes" makes more sense from a microbiological perspective, the white fuzzy yeast found on the outside of grapes inoculating the brew for fermentation[1]. While it probably was an acquired taste foreign to our modern day paletes, the hymn suggests they enjoyed the taste.

[0] https://oi.uchicago.edu/sites/oi.uchicago.edu/files/uploads/...

[1] https://www.jstor.org/stable/41765984
i live in an older apartment building that has plaster and lath walls. it definitely has better sound isolation, thermal mass, and mold resistance in my experience than drywall. what pains me is that the building manager is a moron (short-term cost minimizer) and replaces the plaster with drywall whenever a significant repair is needed. drywall sounds hollow when you tap it while plaster replies with a satisfying 'thunk'.

in fairness, it's harder to repair correctly, especially for large damage, though i have patched the wall myself with anything from patching compound to joint compound to spackle (which i understand as being similar in its constituent ingredients but not quite the same).
You'd be limited very quickly since Java does not have local methods. This would work for only very simple scripts that fit in a single method.
Show HN: Coupon – self-hostable store for coupons/discounts and loyalty cards
An open source and self-hostable store for coupons/discounts and loyalty cards. Supports multiple barcodes.
JWT is a token, often stored as a cookie. I don't see how it's impossible to invalidate a JWT but easy to invalidate a cookie or token.
That’s very much a reaction to no one paying is it not? I remember journalism having been much better before online advertising came in and hollowed them out.
As someone who's a little behind the times here, can someone explain the distinction between a session ID and a token? I'm referring to this passage:

> Sessions were built on top of cookies. The server kept context about the user's "session" [...] and indexed it with a random session ID. The session ID was sent as a cookie and for each subsequent request, server looked up the session state.

> Then came mobile apps and single-page JavaScript apps, and plain cookies and sessions started being inadequate. Developers started using tokens, where a token was an unguessable random string that behaved like an identity card. Possession of it proved your (client's) identity (bearer token).

Both a session ID and a token are random strings clients send with requests to indicate who they are. Why were sessions inadequate, and how do tokens solve this problem?
> If Small Web actually worked, we would be discussing this on Small Web right now.

Doesn't HN count as Small Web? It seems pretty minimal.
You have energy. Its not obvious BrandoElFillito will. Come April, he might want to swap. Western leaders are already kissing ME tyrants' butts. One cold winter, and Habeck will look to cuddle with your Mullahs for warmth.
> The British Museum is one of the greatest places on earth.

Where treasures looted from other cultures are displayed ?
Wait, has any quantum computers performed a real computation faster than a normal computer one yet ?
SF has air strips, military installations, technology, and is a massive economic center for the US at-large. It is a ripe target for any enemy that thinks about these things.
SoftBank Planning Vision Fund Job Cuts of at Least 30%
They mention Puerto Rico in their post.