skysight-inc/HackerNews huggingface dataset:
I'm late to the show, and also not a buyer, but I did work for System76 in a different department while they built this relationship. I can definitely say that the devone isn't just an Elitebook with a Linux sticker on it. System76 easily spent hundreds of hours testing Pop!_OS on the dev one and writing documentation for HP's support folks. From the start they knew it was their reputation going into this hardware and almost everybody in the company was part of making it as solid as they could.

I know S76's reputation in the Linux laptop realm isn't pristine on Hacker News ("it's just a rebranded Clevo, yadda yadda"), but a lot more goes on behind the scenes than most people know or acknowledge, and they pulled out all the stops for the dev one.

It's a great little AMD laptop and I think the big concern is if you like the screen. Everything else is pretty amazing.
Ask HN: Would you consider a password like this safe?
The question is in the title. What password I mean in the following. Think of the required security as for your crypto wallet or personal notes/ diary.

I imagine an algorythm that gives out a password. The algorythm consists of a few rules that involve only information that I can access in almost every other houshold.

- calculator (basic arithmetic operations, cos, tan, sin, pi, e, ln, log)
- bibel (most names/chapters will be written exactly same in different translations)
- calendar (names and amount of days of months)
- clock/ watch
- periodic system
- personal data (birthdate, name of family members)
- alphabet
- chess board
- data I remember word by word (for example: dates/ events from history)

An algorythm could be something like:

- The password has 16 figures.
- I multiply my birth year with pi.
- If a number is 1-5, I make a pair with its subsequent number.
- The first number of a pair specifys the book of Moses.
- Second number specifys the letter within the books name.
- If the second number is uneven, the letter is capitalized.

-> If I am born in 1990, password would be 6US69u06M688tEt0
Wouldn't Botswana be as good if not better? It has significantly lower corruption issues, and higher GDP per capita and HDI when compared to SA. It also is an incredibly fast growing economy and it has lower crime. Does Botswana just currently not have the talent or infrastructure?
Show HN: Random Halloween Dog Costume Ideas (Web App)
Ask HN: How can I get photos/videos off my iPhone 12? (Ubuntu)
It looks like these were made with https://excalidraw.com/

Highly recommended!
I agree. My two cents[0].

And another thing about these inflammatory headlines is the Boomers VS. Millennials or something about Gen Z; and yet it seems everyone forgets about Gen X for some reason. It really makes one think. ;-)

[0] - https://news.ycombinator.com/item?id=30177963
This is great advice! I can vouch for it---I am no longer a young man and if I don't write it down it's gone. Just for the stuff I've done so far, it has saved my bacon countless times.

Looking at you, ~/.emacs.d/init.el. :-)
Try launching the instance of Chrome with `--disable-web-security` and `--disable-features=IsolateOrigins,site-per-process` options. I use these when launching Chrome via Playwright, and CAPTCHAs seemed to work fine several months ago.
I meant Musk's behavior generally. Trying to pawn off an employee in a suit as a robot, the DOGE pump and dumping, joking about taking tesla private at $420 a share, calling that guy a pedo to his massive twitter following, creating the fake hyperloop project just to attempt to knee cap high speed rail, etc

As for the fake user saga, my take is that it is a transparently weak reason to try to walk back from the deal. I think the real story was that after he lost some financial leverage with the crypto downturn he is no longer able to finance the deal without making significant tradeoffs and decided to walk it back. Everyone who knows the internet well (and Elon lives online 24/7) knows that all social media networks have lots of bots so it's impossible for me to think that this is some surprise to him.
Zero Trust pricniples may implie having a flat underlay but explicitly access to applications and services should be microsegmented, least privilege, and authenticate/authorised on strong identity before any connectivity can be established - i.e., the overlay is closed by default and does not trust the underlay. Ideally you put ZT inside an application so you do not need to have any inbound ports, public DNS, etc etc.
The FCC regulations don't take "might as well" into consideration, they only prohibit "messages encoded for the purpose of obscuring their meaning". So, ACTUAL encryption, not EFFECTIVE encryption, however you want to define that.

Since PACTOR is not "encryption" in the sense that the algorithm may be generally known but the secret key is not, it doesn't run afoul of the regulations. There's nothing in the regulations saying that the modulation or encoding used must be open or publicly available somehow. At best, it might be a gray area if the person/company providing it selectively decided who to sell it to.

And according to wikipedia: "Pactor modes other than level 1 (P1) are not open source,[14][15] but are publicly documented[16] and can be monitored and decoded easily over the air by third parties using free Raspberry Pi software ("PMON for Raspberry Pi")[17] or PMON utility on the modem itself.[18]"

All of THAT being said, I would certainly be in favor of a rule change that only allowed fully-published non-patented codecs on the amateur bands. That would of course wipe out all of the existing VHF/UHF digital modes since (nearly?) all of them use AMBE which must be licensed.
Intel driver support for their onboard video for games has been historically very bad
Fireball from Solar System’s edge isn’t what astronomers expected
Canonical launches free personal Ubuntu Pro subscriptions for up to 5 machines
I see downvotes, so I guess people missed the absent /s. Knee jerks much?

But yeah, the question is honest, and would appreciate an answer.
For me Instagram ads are nonrelevant and sort of deranged. Probably some of the worst that I regularly see.

For example, I just checked Instagram and got an ad for Amazon. In that ad they were trying to sell me a log splitter, a peanut butter squirrel feeder cage, 25lb sack of peanuts, and a aluminum garbage can you would find in a park. These things aren’t even remotely relevant to me.
So, voyeurism for curated updates. Personally I don't get it, and if old friends matter to me at all I'd message them to ask anyway.
your body is in survival mode, so that is to be expected.
That could be. I came at Proxmox after other hypervisors as well, so I might be discounting the learning curve aspect; I did experience it as pretty close to zero, but that could be a measurement/framing error.
Exploring the properties of magnetic nano mosaics
I recommend setting up a web server on the smallest server offering of DigitalOcean -- $6 USD/month

Here are a couple links to get that started:
- Ubuntu + nginx for https traffic: https://www.digitalocean.com/community/tutorials/how-to-secu...

- Getting a small nodejs project up and running: https://www.digitalocean.com/community/tutorials/how-to-set-...
I believe you hit the nail on the head with the whole problem of intent thing. I can enjoy reading antiquated works written in antiquated style, like Shakespeare, because I know that they were made in an effective way for the time. I get over it, I get used to it, I move on. Kind of similar to watching a black & white movie, for example Dr. Strangelove is one of my favorite movies of all time and it doesn't need to be colorized or remade. Even a movie made in B&W after color became standard, like Schindler's List, I can understand the effect the creators are going for. But if somebody came out with a movie where they did something wacky like invert all the colors for no apparent reason, I would find it annoying and distracting.

It does lead to a fun hypothetical. If Cormac McCarthy was a dead author from the nth century, and his writing style was the way everybody wrote in the nth century, I wouldn't hold it against him. I would probably be able to get used to it, and quit muttering "this son of a bitch" aloud every two pages. Although I still doubt I would be a huge fan, I likely would be more appreciative of his work than I am now. But it would be exactly the same work, the same letters on the page. Why should the context change make any difference at all?

So maybe that just makes me petty. But even if so, I can't argue myself into enjoying something I don't enjoy.
ray tracing is a game changer for me
Forget Stadia, Google is getting back into VR in a way we didn't expect
On the face of it, making an add-poisoned product have more ads is likely to make it more toxic.

What am I missing?
The car won't shut off because that would be a dangerous thing to do in traffic.

The car will alert the driver than something is wrong and should stop as soon as it is safe.

Because stopping engine abruptly in middle of highway could be very dangerous.

A lot of cars also have so-called "limp mode" where some failures cause car to limit engine power and other stuff, basically to get to the next point the car can be stopped and towed to shop
Or an "influencer" with many followers could post the barcode and create a DDoS attack.
Yep, one of the challenges here is that KafkaJS requires Kafka 0.10+, which is true for several other popular clients. For this broker implementation to be somewhat practical, it would need to be extended to 0.10.0 at least. 0.8.0 was a nice, simple starting point for a “proof of concept” project like this.
Someone have a QR code image? Does Get Info on it show the URL?
Safe from others provided they do not learn your deterministic formula, yes. Safe from yourself, maybe that too. If it is too complex you may have to keep something on your person that helps you solve your own passwords and then you have to protect that resource as well. I guess one would have to walk through the use-cases and steps required to see how feasible this is and then challenge some hacker friends to pen-test the process.
The guy wanted to see if it could be done on a 6502. Who said it had to be 'useful'? Why are you so sure your definition of 'useful' and his definition of 'useful' are the same here? Why does virtually every post on HN about someone's personal, possibly quixotic quest to do something for fun attract a pack of tech-Karens who tut-tut it with "well OBVIOUSLY you should have done something different than what you did. I should tell the Manager.".
Python's dynamic nature can be exploited to solve problems caused by Python's dynamic nature.
> Are you sure?

Yep, totally.

Remember the counter resets with every ride: it’s the first of the hundred, with 1% possibility of (any) car accident.
Makes me want to cheer.
> In order for Sketch build some of the features that Figma has, they need to (1) raise a ton of money (2) forget about short term profitability, (3) burn money for many years (4) hope to get a big exit.

No software feature (at least, nothing they'd need to do to improve Sketch) requires you raising a ton of money to build it.
And that kids is how it looks when security team just sits in their ivory tower and shits on everyone else in name of security theathre they're paid to play

> Overnight, all our builds (run on-prem) fail because npm install, pip install etc fail and we spent a long time trying to figure it out. They are still failing to this day and I have to get off the VPN every time I need to run these simple commands. IT absolutely doesn't give a flying ** about developers.

Add their cert to system store ? Won't help inside containers tho... without much fuckery
> After all, there would be no reason for HR to apply said filters if the posting was prescriptive.

HR also doesn't want to spend all day sorting through garbage resumes. Some use resume parsing software (or form fields) to do this sorting for them, in which case, it is effectively prescriptive.

> these days everyone has transitioned to "Bachelors degree or equivalent experience"

Most tech companies hiring rank-and-file software developers, maybe. Definitely not every job. Pick your favorite job posting site and look at mid or upper management positions -- few accept "equivalent experience".
It's TensorFlow not TersorFlow.
Uproot really kept CERN ROOT from falling into obscurity.
Original nutters?

https://www.youtube.com/watch?v=AzbdBk6XQ6Y
I love the Pixelfed.org instance I setup. My family can share our daily photos and updates without any advertising. The fact that most people are trapped elsewhere keeps it intimate.
I quit meta sometime ago. I just spend the time on HN now. ¯\_(ツ)_/¯
My thought on networking is to make sure you only expose SSH and HTTPS; firewall everything else off. SSH seems like a constant source of problems for people new to running servers; within seconds of your server coming online, people will be trying to guess usernames and passwords. Configure it so you can't log in as root, and you can only authenticate with a key. These folks will never guess your key in a billion years (though obviously, don't leak it or something). I wouldn't bother with the complexity of fail2ban. If you have some out-of-band virtual console, you might not even need SSH, but it will be nice to have for git clones if you're self-hosting repositories. Totally reasonable to have SSH exposed to the Internet, in my opinion.

For HTTPS, run everything through a proxy, and maintain detailed access logs. Put your other services behind that proxy, and have them listen on 127.0.0.1 and not 0.0.0.0 (not that it really matters because you firewalled off all connectivity like that). Your HTTPS proxy should handle certificate provisioning for you. There are many options out there; I use Envoy, the self-hosting types should use Caddy or similar.

Anything that you expose to the Internet on a well-known port with an easy-to-guess password will be hacked instantly; SSH, MySQL, Wordpress, you name it, they'll own it. Seriously, your mind will be blown and your head will spin. Reduce the number of network ingress points to the bare minimum (though firewall rules), make sure absolutely everything not hardened is behind auth, and log aggressively so you can see what happened when something goes wrong.

I don't know what the state of the art these days is for auth. I wrote my own thing that uses WebAuthn; most people are probably using something like Keycloak. The Tailscale idea is also good; if you don't need this stuff on the Internet, then only put it on the Tailnet and let them handle auth.
Mostly energy usage. A raspi is going to use a lot less power than most crappy old computers and a hell of a lot less than your beefy desktop.
> Toyota is just stubbornly refusing to take the L on their 30 years of research into this. I don't blame them, but I'm not them, so I'll call it how it is.

no Toyota is just not buying the "all in" bet on EV, and they keep researching on other alternatives such as Mirai with fuel cells; the article is quite clear on that.

this imho makes Toyota more reliable than other manufactures who are running at making only SUVs with shitload of batteries just to please the market, greenwashing and not innovating at all.
I had a lot of professors that seemed to hate students and take pride in making them fail horribly. They took pride that their bell curves were way to the left. I learned the least in those classes because they were designed to not teach anything.

Sometimes classes are too easy because they teach really well. I had an astrophysics professor who spent a lot of time learning how to teach subjects. His classes seemed remarkably easy, yet we covered WAY more material than the 30% mean bell curve ones. He was just REALLY good at presenting the material and cementing knowledge using interactive learning and other really cool teaching methods.
Any historical "invasion of technologically sophisticated aliens" in the time period blood meridian is set in happened centuries before. It's actually near a zenith of native political and military power. Spain is gone, Mexico is struggling to build a government, and the US hasn't yet become a dominant power in the region.

Blood meridian is a book I often recommend as an approachable introduction to what people experiencing the period might have thought, but framing the context is somewhat important.
People are investigating now, because of the drama. But prior to that there wasn't much in the way of open source analysis
I think I have been on a similar path of thought: While there are many speed tricks and parallelized processing to try and to use in modern PC, there are surprisingly little available resources for realtime, as in synchronous-to-wall-clock, processing.

You can set up a timer interrupts in Arduino, There are web-JavaScript tutorials to set up callback function to execute every 3000ms, but you won't be doing RPC over network with timestamps and expiration, without going neck deep in something specialized and chaotic as ROS2.

I'm picturing some sort of distributed, networked, timestamped system that can schedule remote executions and construct time correlated observations, something obvious to designers/architects of original SNMP spec and NIST 4D/RCS project, and I'm predicting we'll have an industry standard framework just casually appearing by the end of this decade. It's weird we don't have one.
Thank you! I listen to Chris and Alex religiously (and all the Jupiter Broadcasting shows), and learned a lot. But never heard mention of a beginner's reference there. Maybe I'll send this question into them.

Joe, Jim, and Allen on 2.5 Admins is also informative, but veers back and forth between English and Greek to my ears. :-)
It could be an AV engine doing it. Some phishing attacks have switched to using QR codes instead of links as an evasion technique in the last couple of years, so the anti-evasion to that is decode it and browse the link to see if it's malicious.
Arrest made in breach of L.A. County election worker data
> The US government isn't that fucked up

Well, as it is worth remembering, we killed 286,000 (mostly innocent) people in 3 days to win a war...

> Cops just sprinkle crack on people.

I wouldn't blame cops - I'd blame the FBI. If they planted it, and said you had it because they investigate that kind of thing (and they have tons of examples for material), you're screwed. Very convenient way to silence a dissident and silence the supporters... (not saying they have but in the future...)
Well the scanning is supposed to be local. It's not uploading your photos or anything. You can turn it off in System Preferences -> Spotlight -> Privacy. Or go further and remove Spotlight https://cleanmymac.com/faq/how-to-turn-off-spotlight-search-... Not positive this works on the latest hardware.
New RNA-based tool can illuminate brain circuits, edit specific cells
No there aren't :)
Yes but my question is doesn't poor diet and lifestyle have lasting damage or can it be simply reversed in few months like OP.
The mechanism is called Visionary CEO and good luck with that.
The OG App removed from the Google Play Store, as well
https://news.ycombinator.com/item?id=33015769
I feel like this will be very difficult because mommy blogs and the like can get political around school policies. The line between political and non-political can get quite confusing. Eg. lesbians in $area meetup facebook group, but then they talk about anti-gay policies the local politicians of $area are implementing; maybe even organizing calling politicians/protesting in that group.
this is cool. i suppose it's only a matter of time until we see optimizing compilers that use transformer-rl style searches for subsets of their optimization and codegen.
This whole thing reminds me of waking up after a serious night of drinking and trying to figure out the consequences of your actions, and to see if you can get out of them.
No, government censorship is when the government tells you what you can and can't publish. "Private" censorship isn't prohibited by the first amendment (in the United States), but it's still censorship.

Still, there's more and more evidence that the U.S. government has been behind the latest private organization censorship push.
It is just how devolved our modern eating habits are, we are constantly snacking or eating garbage which makes us hungry soon after. Three solid meals a day, cooked at home with unprocessed food ought to be good enough to live a healthy life but for the people who go on all sorts of diets, food has long become an emotional thing so they need restrictive frameworks in place to help them not eat so much/eat junk food. I bet our ancestor never thought this hard about what to eat and when to eat.
Yes. Stories like this get in the news all the time.

The fact is that most people are so bad at interviewing compared to people who are good at interviewing that people who are good at interviewing are in demand.
> That's partially because MonkeyClub didn't do the math correctly.

Or at all, since it’s just how possibilities work. I wasn’t calculating the annual possibility.
I fail to see what this has to do with the Baltics, which is what you asked about. Ukraine was making plenty of overtures to NATO and NATO's continued encroachment was definitely a threat to Russia. I'm not sure how you can so definitively conclude that Putin was not worried about this encroachment.

Edit: I mean, just look at the recent history of Ukraine's friendly intermingling with NATO just prior to the invasion:

https://en.wikipedia.org/wiki/Ukraine%E2%80%93NATO_relations...

You can certainly argue that this was just an excuse for Putin to invade, but there's little evidence to be so confident in that conclusion, and plenty of countervailing evidence.
Yeah, and then filter out the events in the directory to find out when the correct file changed, etc. That is exactly what I would want the tool to abstract for me.
Only if the followers “save” the image into their photos, no?
>The Iraq war wasn't 4D chess it was much worse: Americans really believed in it. Which is ultimately also why they got their ass kicked: free elections were held and the Iraqis wanted the Americans out. Instead of installing a puppet government what they got was Iraqi politicians with agency.

This is an interesting take - I don't think the goal at the start of the war was to install a puppet government; it was to dismantle the government in power and prevent whatever took its place from having any real ability to project power against vital US interests. Both of these goals were accomplished.
You might be able to remove some of the junk results with the minus sign before the keyword in your search query. Used to work back in the day. Something like

species of worm that never dies -bible -mark -jesus -christianity
Is saying "um" one of these massive pitfalls you're referencing?
A bit like altavista and metacrawler, getting swamped with ads. I sure hope someone somewhere is prepping a stealth mode alternative as google did in its early days. Social media is needed but this time done right.
Why? GDPR only affects if you use the data for 3rd party market research, storing the data for your own debugging purposes is not covered in.
Putin MUST not be allowed to win in Ukraine as that will just embolden him to take over more land.
Review shows megadroughts could become permanent due to climate change
No they aren't. If you have a specific goal, you can improve the way you acted towards that goal, though.
Can you explain your second last star?
Will also generate some fun bugs!
Ah, looks like I misunderstood. I thought that it was just seeing it in the web browser, period. So this is some kind of thumbnail gneration thing.
All of the tech that the op is asking about running is in under this banner on YouTube, aesthetic aside. If they want to get tutorials on how to do this and see other software people are running this is a resource.