skysight-inc/HackerNews huggingface dataset:
I'm a bit confused what point your are trying to make. You don't ever define open drug scenes and the you link to an abstract for a paywalled article is similarly lacking. Based on some searching I found a paper that provides the following definition: "Open drug scenes are gatherings of drug users who publicly consume and deal drugs." But also acknowledges it is generally a fairly loosely defined term.

You repeatedly say "don't support open drug scenes" but never explain what you mean beyond a vague assertion that advocates for the unhoused support open drug scenes. You make absolutely no concrete comments on specific policy approaches, you just dismiss an entire group in a very general fashion.

Homelessness and open drug scenes are entwined, but different issues. Not all people at an open drug scene are unhoused. Many unhoused people are not drug addicts, though they tend to be less noticeable than the ones who are.

All of this seems to be a red herring since the article we are discussing brings up specific laws. Those are not laws focused in any way on addressing open drug scenes, but rather laws that target vagrancy in general. These laws are being pushed forward by groups funded by private prison owners.

Thus your assertion that this is somehow not true with a deflection onto "open drug scenes" is not convincing.
This is mindblowing. Like this could be real, and I'm learning stuff from it: There's an Indian epic that's 10 times as long as ...

There's some audio distortion (sounds like clips cut together, little "notches" in the soundscape) but apart from that, and some weirdness in sensing "the spatial location" where this audio was recorded...the concepts and the dialog are amazing.

Some parts are weird...but people can be weird. It you tidied this up, and added the right sounds affects and audio processing to this, without the cue that this is AI generated...holy fuck, I think people would believe it. Particularly if you cut it together as a "highlights reel". Jobs does sound a bit off tho, a bit thin...there should be enough data on him to do a sparse reconstruction of his voice to a level of accuracy beyond human discernment tho.

The thing this got wrong about Job's voice cadence, tho is: Jobs speaks a lot more slowly and deliberately, and with a lot more pauses, than here. I suspect the cadence / timing is not so emphatically modelled by this AI.

I think also they're missing some emotional trajectory coherence in both their voices. Like the emotional register of the voice does not sound or transition as naturally, and is less diverse.

Incredible PoC. AI folks are the new dark wizards. WTF can they not do? That list is shorter
> the belief that the world is divided up in good guys and bad guys and you just need to lock up all the bad guys.

Reminded me of this quote:

If only there were evil people somewhere insidiously committing evil deeds and it were necessary only to separate them from the rest of us and destroy them. But the line dividing good and evil cuts through the heart of every human being. And who is willing to destroy a piece of his own heart?

-- Alexander Solzhenitsyn
I feel like you just want to avoid the foggy head feeling and not necessarily drinking. I'd recommend drinking a 6-pack (or less) over a weekend and not a 12-pack or decrease the ABV of w/e pack you're getting.

w.r.t. going cold turkey, if you're only drinking outside of a bar you can try just buying packs of soda. If you're drinking inside a bar, a lot more of them can make mock-tails which don't have alcohol.
Will flights be cancelled in cases of moderate/heavy wrong-direction winds?
>It's a really unique feature that makes a lot of sense for desktop us

Sounds like it could serve as a basis for a Linux implementation of something like Apple Time Machine.
State of Ethereum in Q3 2022
Tori (Bird) Shogi
"It gets easier, but it never gets easy." :-(

https://www.youtube.com/watch?v=2CagbTwPxXw
I see this happening more and more in my LinkedIn feed recently from every big to medium international company I can think of. Mostly people who need visas seems to be affected.
Andrew Huberman has a great podcast episode on the effects of alcohol on the body and brain[1]. Huberman is a professor of neurobiology at Stanford and he does a great job of explaining things in layman’s terms.

I recently cut back on my drinking significantly after listening to this podcast. Give it a listen and maybe you’ll find something that resonates with you as well.

[1] https://podcasts.apple.com/us/podcast/what-alcohol-does-to-y...
Tell HN: Stytch Login SaaS Unicorn has common auth vulnerabilities
_TL;DR_: Stytch, a Login SaaS Unicorn, has no CRSF-protection in their authentication API and other questionable security practices, coupled with a nonexistent security policy.

First of all: Why am I posting this on Hacker News instead of disclosing directly?

From experience, a lack of security policies and of communication on existing vulnerabilities implies retaliatory practices when submitting vulnerabilities responsibly. Since MITRE CVE does not accept vulnerabilities for SaaS services, I figured that Hacker News would be the way to get Stytch aware of their issues without getting me in the crosshairs.

The setting:

A few weeks ago (in June 2022 to be exact) I was looking at different authentication services and Stytch was one of the services that got my attention. Stytch.com was founded in 2020 with over $125M [1] raised at a $1bn+ valuation [2].

Checking out what the fuzz was about I decided to look into their security practices. The lack of a bug bounty program (e.g. HackerOne), ethical disclosure policy, and security policy already left a bad feeling. But I was keeping an open mind and wanted to see what their API has to offer.

The scoop:

The most critical issue I came across was a complete lack of Cross-Site Request Forgery defenses. All of the provided authentication APIs (e.g. [4]) except for Social Sign-In are vulnerable to the most basic of login attack vectors: Login CSRF [3]. This can be used to steal credit card information, for example. CSRF is completely missing in all of the Stytchs API concepts, a major oversight in the API design.

Further I found that the OTP tokens sent via their "passwordless" email authentication were valid for up to 7 days and did not invalidate on use. Attackers may find old magic link tokens in the browser, chat, or email histories and use them to get a valid session. While this issue has been fixed since June 2022, the vulnerability was not disclosed to customers.

Recently, Stytch has introduced a concept from OAuth2 called PKCE - a spec that is difficult to master for everyday developers - into their non-standardized Magic Link API which does not use a three-legged delegation authorization mechanism. This is not a direct vulnerability per se, but at least a questionable choice in terms of security.

A full report can be found here for anyone interested: https://www.klgrth.io/paste/kmxof

[1] https://www.crunchbase.com/organization/stytch-auth
[2] https://stytch.com/blog/announcing-series-b/
[3] https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#login-csrf
[4] https://stytch.com/docs/passcodes#sms_auth
I haven't seen a PIN pad lock in years in secure facilities, everyone uses contactless cards.
I think all you would need to add is a daemon that automatically deletes the oldest file(s) whenever free space drops below a certain threshold, so that the filesystem GC can reclaim that space for new files.
When discussing price, supply and demand is a natural way to reach the most efficient answer. Alternatively, price fixing, results in market failure.
>Humans are well known for compensatory eating

True, but this applies to fasting as well as exercising (if not more so)!

At the end of the day, what matters most for fat loss is changing your habits. I don't think that "calories in / calories out" has been invalidated, so you have two sets of habits you can adjust. If it is easier for you to reduce calories in with fasting vs. portion control, then go for it.

IME it is incredibly painful to miss a meal, but not so painful to eat less calories when I do eat - particularly if I substitute high density carbs (bread, pasta, sugar) for lower density (veg, etc).

I do think that just focusing on calories out is problematic for the obese and/or long term sedentary - mainly because they are way more likely to injure themselves by not ramping up to activity very carefully...
That sounds compelling, but what percentage of the prison population currently does unpaid labor? Don't most states have a minimum wage for prisoners?

>https://www.prisonpolicy.org/reports/pie2022.html
People over self-diagnose insomnia instead of addressing lifestyle choices:

https://hubermanlab.com/toolkit-for-sleep/
The problem is when legitimate challengers DO arise, the "scientific consensus" is very quick to gate keep their little subfield. I know how "the scientific consensus" is used to suppress new scientific research. So when I hear it used in popular science conversation, often used to push a political narrative, I just cringe.
What do ATMs elsewhere do? This is the only way I know.
Fair enough, as far as opposite experience goes.

Up here, doctors are notoriously difficult to get any kind of opiate from now unless you REALLY need it. Which in turn I would say has led to people relying on the grey market more and more, which has in turn led to our fentanyl crisis.

So I don't entirely disagree with you here, but I still don't want government being able to tax these things. We need a better solution.
Dismissal, or promotion, but certainly no consequences.

https://www.dw.com/en/german-spy-chief-passed-info-to-afd-re...

https://www.dw.com/en/german-press-review-maassen-promotion-...
It’s the new “you’re siding with the terrorists”
Probably around the same time they figure out that preventative medicine is cheaper and better for everyone (except health insurance companies).
at least they did it before...

maybe some government issue with visas?

I'm have this paranoid supsicion that some powerful shadow (i.e. unkown) actor within the USA political landspace really wants to take Facebook/Meta down.

I suppose they did not go along somebody's political plans? so little trustworthy information sure makes my imagination take off
> It’s not a vacation, it’s jail.

The punishment is deprivation of liberty. I regard that as already an extreme punishment, entailing as it does the loss of your job, and like as not the loss of your family. You are also deprived of the means to defend yourself, despite being surrounded by violent people who wish you harm. I don't think anyone should ever be incarcerated, unless there is no choice - i.e. for the protection of society.

I findit remarkable that a country that proclaims itself as the beacon of capitalism, skews the labour market by hiring-out compelled, unpaid labourers. That's not how I was taught that well-regulated markets are supposed to work.
Well, then all they'd get from me is 5000 - that's the amount what I punch in after the PIN for my typical cash withdrawal.
lol, everyone calls it training data. Here I was thinking I was in the right practice.
See, that attitude, right there is why Linus has historically needed to be a dick.

Don't break the user and sanctimoniously pretend you're doing everyone else a favor.
Repurpose your (vulnerable) IP camera with OpenIPC
> Yes, they have client-side decorations, but also a single and unified UI toolkit all applications use.

Other than MacOS, kinda sorta, this just isn’t true and hasn’t been so for years.
I was never a big drinker but moving to a city where alcohol is incredibly expensive and taxed heavily definitely helped. A single round of drinks at happy hour for 5 co-workers and I costs over $100? Yeah, fuck that.

Oh, I also have cealiacs disease so beer has always been a no-go for me. Easier to refrain when your only options are liquor and wine, neither of which I particularly like.
Are Community and Wealth at Odds?
Wealth is something rarely talked about amongst community builders. It's taboo. But there's an opportunity to have a more nuanced conversation about the intersection of business and belonging. Are capital and community at their best when they drive each other?
Question is which search engine can handle this properly though? The first part can probably hacked together with something like DEVONthink and some browser extension but the search features aren’t useful when you have tens of thousands of docs that you just randomly browsed
This is a long documentary so I am sure there are better videos that get right to the point but this street is one of the more famous examples in America that you will hear brought up repeatedly in places like reddit.

https://www.youtube.com/watch?v=DXyXYJg9SyY

You get a good sense at 21:00 in the video.
[0] "supports a limited subset of HTML and CSS features" (and it still requires jsx-esque syntax with curly braces)

[1] uses JSX

So, yeah, my comment still stands.
Sorry Genghis, but I don't believe I need to answer these questions about where I lived, as they are personal information. I will however tell you they were all Canadian cities, and they were all between the years 2008 and now. The one that was twice was one of the prairie provinces cities.

Take that as you will.
Would the fact that Joe's data is more standardized and produced the same way. Job's data is likely a mix of different volumes, echo levels, processing have an effect
Languages that start out without printf or format end up adding it later.
That's not the only difference, of course, given that the prisons get more money. Really, this is a call to privatize the misery. Still, it could be a net gain if it costs less than subsidizing emergency services and reclaims the streets.
I have used alcohol heavily, now I use it irregularly if at all. I just try not to take it too seriously since life is pretty short as is, I don't start hating myself the next day after a drinking session. Regardless what has made my consumption lower is my experience with alcohol, I just think about it's effects and often decide it's not worth it for me. I spend my free time on my PC and drinking just makes it harder for me to think leaving me with very little to do besides watching movies, tv shows, youtube, playing games, etc. I often rather just learn something about linux or computers in general, feels more rewarding doing that.
I was drinking heavily and knew that it would be the quickest and most effective hack towards being a better father and husband. I first stepped into an AA meeting and as the opportunity to speak was going around the room I started seeing many similarities between the people sharing their stories and myself. I thought to myself 'If I were perhaps an alcoholic, what could I share about it and how it may hurt me and those that love me?' When the opportunity for me to share came up, I said 'screw it!' to myself and spilled the beans. "I am an alcoholic..."

The meetings made me feel good at first as I kept telling myself that my stories could potentially help someone else. I did not end up sticking with the AA program but the meetings really launched me into the right direction and finding my own path. I do drink NA beer and as many others in the comments have pointed out, there is a lot offered in that arena as of lately.

I am a very social person and navigating that lifestyle for the first time without alcoholic beverages was the biggest challenge for me. But I learned to like the challenge and found that sparked a lot of conversations with friends that were interested in quitting or dialing it back. It also identified and strengthened a lot of friendships where people normally wouldn't drink while doing whatever it was we are doing, but they did because I was 'the drinker.'

Next week marks my first year of sobriety, so I am certainly no expert, but feel free to reach out if you ever need to hash some things out.
I would love to test it please
NILFS is really, really cool. In concept. Unfortunately the tooling and support just isn't there. I ran it for quite some time on my laptop and the continuous snapshoting is everything I hoped it'd be. At one point however there was a change to the kernel that rendered it unbootable. Despite being a known and recorded bug it took forever to get fixed (about a year if I recall correctly) leaving me stuck on an old kernel the whole time.

This was made more frustrating by the lack of any tooling such as fsck to help me diagnose the issue. The only reason I figured out it was a bug was that I booted a live CD to try to rescue the system and it booted fine.

When I finally replaced that laptop I went back to ZFS and scripted snapshots. As much as I want to, I just can't recommend NILFS for daily use.
I fail to see any downside to changing this semantics. This has honestly always felt like a language design bug more than anything. Having to write foo := foo at the beginning of a loop for it to behave as expected is a strong design smell.

The gradual breaking (of fix depending on your point of view) with explicit opt-in looks great to me.
Forgive me for being brief, Supplementary table 3 breaks down the the baseline food intake, and rice and wheat flour are the top two items.

Regarding your second query, the first line of the abstract of the article is: "Overconsumption of carbohydrate-rich food combined with adverse eating patterns contributes to the increasing incidence of metabolic syndrome (MetS) in China. "
for Quest, BoboVR makes a pretty nifty face adapter with exhaust/circulation fan that works pretty great at mitigating the fogging.

https://www.bobovr.com/product/2022-new-f2/
The institution of Science is not the same as the process of science. Their functions are not the same. Science as an institution is a mechanism of social control with all the features the author describes in the article such as the memorizable facts. Grant writing itself is no longer about science but is entirely political. Only rarely can institutional Scientists thread the needle of researching real scientific interests while also identifying ways to meet political goals set in grant requirements.

The scientific process is decoupled from Scientific institutions.
In what way are open drug scenes simple to solve? The research I've scene on cities that have had large ones is that "simple" draconian and "abstinence based" policies rarely have a positive effect and most places saw the best results from complex, multiprong approaches that are implemented with an understanding that it will take years to see results.

While open drug scenes are comorbid with housing crises, they are not the same thing. There is also overlap between the strategies for addressing them, but that overlap is not complete.
I think NILFS is a hidden gem. I’ve been using it exclusively in my Linux laptops, desktops etc. since ca. 2014. Apart from one kernel regression bug related to NILFS2 it’s worked flawlessly (no data corruption even with the bug just no access to the file system; effectively it forced running older kernel while the bug was fixed).

The continuous snapshotting has saved me a couple of times; I’ve just mounted a version of the file system from few hours or weeks ago to access overwritten or deleted data. I use NILFS also on backup disks to provide combined deduplication and snapshots easily (just rsync & NILFS’ mkss, latter to make sure the “checkpoints” aren’t unnoticedly garbage collected in case the backup disk gets full).
What part of "Mine runs NetBSD/cats" was unclear.
Actually, I think it's a problem that can be blamed on the entirety of society. But thanks for your kind comment. And yes, I agree with you about emotions and intelligence. Quite the phenomenon.
> I believe sleep quality is a little more difficult to control than the other points you listed

More difficult than food scarcity or war induced stress? Really?
This should have (2018) in the title
No, and this is such a weird and bad logical jump, and really shows the limitations of strict logical thinking and lack appreciated second-order type stuff.

Rich or middle class addicts still have houses to get high in.
some people say that the popularity of the monalisa is due more to the fact that has been stolen many times as opposed to its actual artistic value. it's more about the story behind the piece than the piece itself
The largest issue is that it looks extremely blurry on 4k- not like the usual “1080p upscaled” more like 720p upscaled and not aligned with the pixels at all.

Works perfectly fine on 1080p, which was the majority of where I spend my time on Linux, until recently.
Nothing here suggests that Xbox has any interest in building a handheld, or that it would be successful.

Series S is still heavily criticized for not being "next gen" while delivering a next-gen experience, and the Steam Deck performs even worse.

The Steam Deck is still niche and has plenty of issues that casual gamers who just want an affordable gaming experience from their couch (often to just play the latest Call of Duty) don't want to deal with.

Xbox benefits from other companies getting into the PC handheld market. You can play Xbox games (for PC) on the Steam Deck, or use it to stream from XCloud. I personally haven't seen a large number of people saying they'd sell their Series S and buy a Steam Deck.

Because of XCloud being available in my phone (Galaxy Fold 4), I spend a lot more time playing Xbox games than I otherwise would. I don't regularly carry a handheld console around with me like I do with my phone.

Streaming to phones also resolves issues for South American countries where gaming hardware is incredibly expensive for most people, while most of those same people do have phones and internet access.

I don't think the market would be that excited for a poorly performing Xbox handheld (less performance than Series S) and higher performance would hurt thermals and battery life to a point that would be unreasonable.
I have two theories

1. Economic uncertainty causes stress. The economic system is complex beyond comprehension so folks reify their anxiety onto the physical manifestation of the economy - money. Thus the money supply, and by extension the Fed, become a synecdoche of a much larger system.

2. The Fed is a scapegoat for fiscal policy. Politicians and special interests peddle Fed conspiracies because it distracts from Congress’ dereliction of duty to make fiscal policy. Taxing and spending are powerful levers that many politicians are loathe to use. This is why the Fed Chair doesn’t even have to be an economist anymore. They are just a whipping boy for the public
If you don't need to detox then it's a one day at a time thing. If you can't do one day then start with one hour.

You can find a therapist who specializes in addiction recovery to help keep you accountable. You can go to an AA meeting. Find a group of friends who don't drink and do things with them.

Actively remember life and having fun before you drank. For me that was high school.

Throw out all of your booze and don't buy any. If you like beer buy non-alcoholic beer. That will short circuit the pleasure response circuit that is responding to the alcohol. So you will find after your first NA beer that the pleasurable feeling doesn't hit so your body learns that the beer isn't the thing anymore.

I am 3 months sober and it really took two weeks to settle in, the first day was the hardest.
YouTube handles rolling out soon