skysight-inc/HackerNews huggingface dataset:
>Training is inadequate, with most security and IT orgs making excuses for their users

Training? Everytime a user has been phished their manager says "nono it cant be that they clicked something and logged in, they are very careful :)" Its never the users fault.

IT is not making excuses, the business is. No business wants to say "yea we have shit security and we hire numbnuts"

MFA + AAD risk users block + impossible travel block + turn off basic auth w conditional access helps a lot.
What baffles me is the text selection/cursor placement is either absolutely garbage or cryptic to use. Also, why are the android based solutions so much vastly superior? Often a simple one letter misspelling completely flummoxes the iPhone keyboard. I never encountered that on my android keyboard.

This is the number one item that pushes me back towards android. I type a lot on my phone.
How about working from a common office with others that enjoy the company?
I don't think forcing everyone else to hang out with you in the office is the way to go.
If I know the time and see the sun or shadows, I approximate the direction by estimating the course of the sun.

It always works significantly well, meaning I never need it on critical situations and the margin of error is bearable.

But I'm mostly surprised not to see someone else comment the technique before. Is it not a known technique?
He did design quite a bit of mass produced furniture too.
No, it would block 1.4 billion people from that one specific URL.
I use delay-start to do the exact opposite - only run things in the middle of the day when the solar panels are generating the most power.
Though it's less ideal for the washing machine as you need somewhere to hang the clothes overnight so you can dry them the next day (unless it's peak summer where there's enough daylight/warmth to dry clothes even if you don't hang them out until 4pm or so).
Isn't it also, for much the same reason, the limiting factor on "linear city" length? https://www.neom.com/en-us
A dog is never going to understand Fourier Transforms. I expect there are concepts that our brains will never understand as well.
I created a browser extension for exactly this called Demodal:

https://github.com/AliasIO/demodal
Southern Hemisphere version: Instead of pointing the hour hand at the sun, point the twelve o'clock at the sun. North is approximately half way between the hour hand and the 12.
The impulse to colorize monochrome photos goes back almost as long as photography itself.

https://en.wikipedia.org/wiki/Hand-colouring_of_photographs#...

https://en.wikipedia.org/wiki/Hand-colouring_of_photographs#...

It depends on the photo, obviously, but colorization can also give a new dimension of contrast to a photo, even if the colors aren't strictly accurate, by separating out the foreground from the background better.
Last I knew (as I lived right by areas that were constantly burning) Cal Fire had the contacts to maintain the majority of the federal land in northern California.
The link between August birthdays and ADHD (2018)
The question came to my mind while reading the book - Start Small & Stay Small - Stay Sustainable. The aggressiveness to achieve sky rocketing growth in Go-Big-Go-Home strategy has burned tonnes of VC money and today, VC's are more inclined in banking a profitable & sustainable biz, instead of falling for momentary growth shown by startups.

https://github.com/elliotlarson/dev-notes/blob/master/books/...
IIRC it is radiation bouncing off its clumps of hydrogen from nearby stars.
> The grid does and will increasingly curtail renewables. If they had a demand queue of customer cars to send that power to, they do that instead of curtailing it.

And you're going to have those renewables available at night, when this charging is expected to take place and be straining the grid?

> This is not a penalty situation, it is an enticement. Smart charge rates of 4 cents instead of 20 cents a kw/h. People will voluntarily do this to save themselves money.

So where does that 16c/kWh come from? Subsidies? From taxes? So again, everyone has to pay to benefit a small group of consumers who can afford the product in the first place?
I’d have loved to read your take on that video, and read if you still think reputable medias are immune to trash articles pushed by malevolent actors.

But a downvote is fine too, I guess.
The supply shock is still in progress. Unless a miracle occurs Russian oil which is still flowing overland to Europe will be cut soon by someone, there's a lot of people with motives.
I sold cars for a decade, at very busy dealerships, and I have no idea what a term sheet ruse means. The only 'ruse' in car sales is the game played to stop people that want to pressure a dealership into selling something below it's typical sale price.

If a car is in demand, it sells near MSRP. If it's a high volume commodity that's hard to sell in the required numbers, you can discount it heavily. If everyone wanted to buy a car at "the best possible deal you've done in the last 90 days" dealerships would basically be out of business by definition. So someone has to hold the line or the entire system doesn't even work.

Im a very frugal person and don't even buy new cars, but why some people think they deserve to pay less than their neighbor did blows my mind still to this day.
Regarding the 100TB of Access Denied pages: just drop the connection instead.

To make the system more scalable: instead of directly serving the file, serve a bunch of URLs to mirrors plus a checksum. The client must pick one of them. You can randomize the URLs and maybe add some geo logic to it. Let people provide mirrors. An additional indiraction step like this can prove incredibly powerful for systems that need to scale massively.
The Albertsons that closed near where I grew up was replaced with a Goodwill (thrift store). Goodwill is fine, however I can't help but feel that it's a downgrade for the neighborhood. Not on the order of a cash advance, pawn shop, or self-storage opening in its place but still not great.
Most developers don't know how to price their product well, using Stigg made it easy and fast to price the product
Stability and not-expanding are not necessarily the same thing. ("Stable" is easier to write.) They could be extremely dynamic, but if their population isn't exceeding their resources, why do they need more room? Expansion is what brings cultures into contact and conflict.

Puny humans are confined to one solar system, and even just the one planet, but are pretty dynamic. Population in wealthy countries is in decline.

Remember we are not just talking about humans with bumpy heads, here. Social universals on Earth do not apply. Expansion might be limited just by a physical inability to reproduce beyond their home planet, without giving up any dynamism.
Didn't know that, in fact clicking around in the UI I don't see a way to change that so good on them for being friendly in this area.

PFBlocker seems to default to once a day.
Comments moved to https://news.ycombinator.com/item?id=33265949.
"First, even with third-party code, WireGuard is going to be significantly smaller than OpenVPN (and significantly easier to audit)."

Do you have some evidence for that or is it just speculation?

"But more importantly, you can't just count lines of code as if they're all equivalent."

You're right but the Wireguard white paper conclusion claims an advantage for Wireguard based solely upon the lines of code needed to implement.

OpenVPN, Wireguard and IPsec all have their advantages and disadvantages. I have and will use all 3 where appropriate based upon them.
Did anyone else learn to code on a TI-83+?

Although I doubt I'd use this in a professional setting, making coding accessible to more people sounds great to me.
This quote form a textbook in my graduate studies helped me a lot: “Error messages should be how to fix it messages.”
True, and if they play online video games, they probably know as well.
https://archive.ph/OYgjc
You can buy any car in America using the Tesla model. Just call them, tell them you'll pay asking price (just like Tesla requires) and tell them you want it delivered to your house with the paperwork. I have done this countless times, even for people negotiating a discount.
when someone tries to sell you a donkey as a purebred stallion, they're either a thief or an idiot. You could say 'well I don't have reliable context' and buy that donkey but I wouldn't.
BEVs are currently more expensive than ICE but BEVs will be less expensive in less than 10 years as the technology continue to improve. ICE technology doesn't have much room left to improve after 100 years so it's impressive that BEVs will surpass ICE so quickly.
I enjoyed watching it, but plenty of this talk is completely misguided. Had some ideas from there were so much better, surely by now people sharing them would show people not sharing them how much better they can do and overtake the industry.

Not to waste my time - most of the ideas expressed there lack in composability, and composability trumps almost everything else in the long run. Something that enthusiast of VMs, dynamic typing and runtimes don't want to understand. That's why stuff like live coding and interactive programming is always ever employed for small scope, throw-away things.

Visual programming is harder to automate, operate on, reproduce and compose and so on.
Ioannidis paper really impressed me back then. I was surprised when Ioannidis supported shady Covid research. Ideology can catch everyone. Beware.

https://sciencebasedmedicine.org/what-the-heck-happened-to-j...
https://archive.ph/z8GdX
Bypass paywall
IIRC, the Russian icebreakers are suspected to be unable to operate in the antarctic. Not because they don't work there, but because they can't “cross the equator due to limitations on the maximum inlet temperature of their cooling water”.

https://www.navalgazing.net/Merchant-Ships-Icebreakers#fn1_3
It's developer hostile
I'm amazed at how much obvious spam I block from Google. A huge chunk of it is 419 stuff that's trivially caught by SpamAssassin rules that took 5-10 min to write[0].

My guess is that the Gmail team doesn't have any OKRs about spam prevention any more, or else they'd be able to pretty quickly put a stop to the top ~90% of the spam that's currently getting through.

I wish the anti-trust regulators were competent and paying attention. If so, they might be able to do something about the fact that Google—unlike pretty much every other large mail sender in existence—fights really, really hard to avoid taking abuse reports. Gmail is "too big to fail" so we can't just block them outright, like Google would do to us if we were the ones sending a bunch of spam and ignoring abuse reports.

[0] (edited to add) For those who are curious or wish to share the fruits of my labor:

body __DWP_BIZ_PROPOSAL /\b(business|confidential|discrete|mutual|beneficial|profitable|investment|favou?rable)\s+(proposals?|opportunit(y|ies)|friendships?|director(y|ies)|intentions?|introductions?|relationships?|business(es)?|investments?|transactions?)\b/i
body __DWP_DECEASED /\b((deceased|deposed|exiled|late)\s+(former\s+|ex[ -])?(ceo|husband|client|(vice[ -])?president|senator|[mb]illionaire|brother|sister|(great[ -])?((grand-?)?((fa|mo)ther|parent)|uncle|aunt)s?)|widow(er)?|beneficiar(y|ies)|inherit[ea]nce|last will and testament)\b/i
meta DWP_419 __DWP_DECEASED && __DWP_BIZ_PROPOSAL && (FREEMAIL_FROM || FREEMAIL_REPLY)

There are some other rules this works in conjunction with, but stopping the obvious spam is really not rocket science.
I'm not that old and know of the AT command protocol, it is used a lot in modems for embedded systems
Exactly. I can imagine the response to having such a statement pointed out - "Well, it's true, though!" Which of course is a welcomed retort; we're talking about the social construction of reality[1] after all. Indeed, it is this very process of weaving truths by way of social interactions that is being examined.

1. Berger, P. L., & Luckmann, T. (1991). The social construction of reality. Penguin Books.
Many of those checks are gates. They will stop the production line when they find a defect, because they know it's a defect that can reoccur, and won't let a car go out with defects. They fix issues on the spot, and immediately incorporate the fixes into the production process.

Of course besides gates (Andon cord, kanban) they have other processes: autonomation, poka-yoke, production leveling, kaizen, 6S, etc. But gates keep production in check, and must be efficient, and part of a continuous improvement cycle.
The Disconnect: Power, Politics and the Texas Blackout [audio]
It’s not really the serving that’s the issue - it’s the amount of bandwidth used… in the case of serving simple content (like txt) bandwidth is always going to be the expensive element
Recent and related:

Alaska snow crab season canceled after disappearance of an estimated 1B crabs - https://news.ycombinator.com/item?id=33207372 - Oct 2022 (394 comments)

Alaska officials investigate disappearance of an estimated 1B snow crabs - https://news.ycombinator.com/item?id=33203707 - Oct 2022 (13 comments)
I remember my first joint.
Product market fit is being lucky
Zenoti's founder says that we got lucky. Is PMF accidental or there is real science behind it?
> no collusion

I hear this a lot from certain quarters
Technical issues didn't doom Stadia. Being part of Google doomed Stadia.

Stadia was only going to last as long as the Google promotion cycle.
Is it? Seems superior to arbitrary magic numbers or headers, and God forbid full naive parsing, in most ways.
It’s cost. The flat keyboards use less plastic. The membrane mechanism doesn’t require much precision either. Flat keyboards with scissor switches are more expensive and feel a little better (and last longer). Full-size keyboards are superior and are still sold, but usually as a ‘premium’ option.
That's kind of the point. More exciting statements are more often "proven" because they're more often attempted to be proven.
Why not only provide the list as a repo? You can't hotlink a repo. And someone abusing raw links is GitHub's bandwidth problem.

'Legitimate' users of the list would clone/pull the repo to their own mirror?
Vassal is not exactly what you are asking for (not web based for example) and it does not generate maps or counters, you have to create your own and import them. But it does allow players to share a screen, move counters, and play a game over internet. This is known by most wargamers, so my apologies if I am pointing out the obvious,.

https://vassalengine.org/
Well, CF is just one service provider. There are bigger issues if they have already such a monopoly that their decisions kill projects worlwide.
> What do you mean? Pollution effect is per habitat, not per capita.

What I mean is that you can still see higher total pollution even if you reduce per capita rates while experiencing population growth. Focusing solely on outputs while ignoring input considerations is bad engineering.

> Population growth is a baseline goal for emissions. If we can't cut pollution generation faster than population growth, we are losing.

Does the article suggest that's happening? Or is it just looking at a year in isolation of all other facts?
Your entire premise is that "free market trumpeters" are wrong because we don't have a free market.

And as absurd as that sounds, you are right. I've heard more times than I can count from Libertarian ideologues that we could totally avoid these problems by just leaving the market alone.

So many people in the US stubbornly believe that a totally unregulated market would be a totally competitive one.

Back over here in reality, we see corporations taking every opportunity they have to be anti-competitive, and no amount of deregulation would change their motives.

The liberation we need is not for the market itself (as a whole), but for any new marketers who wish to compete against the giant incumbents that regulate them out of business. And the only option I'm aware of with enough leverage to intervene is government.
Not necessarily. It only being mentioned in a patent refinement could also be a case of "it's not a bug, it's a feature".
> but "dark patterns" is definitely not one of its things.

I think you're improperly informed; let me present you just one of many instances that prove my point [0].

[0]: https://www.extremetech.com/internet/330907-google-accused-o...
I am 100% with you. I like the office, a LOT. It's important to note that most of the common complaints don't apply to me. My commute is short (on a bus or on foot), the office is open plan but people do their talking in meeting rooms and respect your flow, there's food on site, and I have a young child are home so the office is far less distracting. But more than that I like working with people in the same room - I'm an introvert so it's tiring, yeah, but plenty of things that are inspiring and worthwhile are tiring. Long live the office!
I hear you there. I'm more thinking someone probably hard coded txt file extension somewhere so something is likely to fall apart in simply handling that file.
Fun stuff like embedding data into jpgs or pngs.
I don't know how accurate it is but the lost pirate kingdom on netflix was pretty entertaining, and included quite a bit of information I was not aware of.
A great opportunity right now for CloudFlare to win some goodwill and PR by helping out EasyList for free right now.

But what about simply enable a firewall and show captcha or similar if the origin IP is from India and requesting that URL until the situation is under control? I did that with the free plan recently in CloudFlare in a similar situation and it worked perfectly (of course on a much smaller scale).
I'm looking for a new position and the thing I dread most is the inevitable "how many days will you be in the office?" question. I get more done at home, I actually gasp like my spouse and appreciate the time to have lunch or start dinner while on a meeting, and generally feeling like life matters more than just the company I work for.

I'll admit I miss the camaraderie, but when I look back on places I've worked, how many of those were my actual friends and not just people I've worked with? I look at remote work as a way to acknowledge in my own life what really matters, and it's more the time I have with people I love. Not until the past two years did I really understand the execs who "made it" and then quit to just be a ski bum or open a coffee shop... but being one of the execs who "made it" absolutely makes me just want to quit and be a ski bum or coffee shop.
...or a nice steak.
Interesting, capitán is definitely a word (yo no soy marinero, as they say in La Bamba)
There was a recent study rolling up the previous studies of alcohol and health. It painted a pretty damning picture of the negative health effects of drinking.

Tl:dr the safe number of drinks per day is probably zero. The safe number of drinks per week might be two.

I suspect we’re starting to catch on to the fact that it’s super bad for heath, much the same way we did with smoking.
Here's an XKCD summary of the paper: https://xkcd.com/882/

It really is that simple.
6k-year-old skull found in Taiwan possibly confirms legend of Indigenous tribe
Plug-in hybrids have a benefit over BEVs in that they require fewer batteries. You can build 10 PHEVs with the batteries in one BEV. If Lithium production doesn't ramp up quickly enough, PHEVs should get more focus.

Additionally, PHEVs have unlimited range like ICE while using less fuel so they are good for people who frequently need more range than a BEV can provide.
Let’s say it together, slowly:

Cloud gaming…
Is not going to take off…
Until latency is unnoticeable by users.

Even turn-based and other game types that don’t require twitch reactions aren’t going to be enjoyable with input latency that is obvious to the user.

I sincerely believe that cloud gaming engines are going to have to be developed, such that the entire video frames aren’t being pulled from the cloud, and peripheral input is a first class citizen on fast networks like PON and 5G.
This limitation apparently doesn't apply to R2 / Workers [0].

May be EasyList could host them there? That's what we do [1] (and the dashboards show 400TB+ per mo [2], likely rigged by the traffic between Workers and Cloudflare Cache).

[0] https://news.ycombinator.com/item?id=20791660

[1] https://news.ycombinator.com/item?id=30034547

[2] https://nitter.net/rethinkdns/status/1546232186554417152
Imagine you're trying to block a DDoS attack. If the client is downloading HTML then they likely also have JS enabled giving you a ton of options for running code on their computer to help you decide if the traffic is legitimate.

If they're downloading text you can still use the headers, and some tricks around redirects, but overall you have far less data on which to decide.
Can you explain to me what is the point of such powerful device to stream things? I don’t get the Apple TV. Every time I use it I can’t easily get to what I want and all the stuff that is offered I have to pay. I’ve been seeing it go discounted many times and I wonder if I should get it to replace my $25 Roku but I don’t know what problems it would fix
For anyone fiction-inclined, The Silver Oar by Howard Breslin is the first thing that the opening part of this article reminded me of. It focuses on an accused pirate on the run in the New England colonies, and his ongoing relationship with various colonial characters. A fun swashbuckling read if one wants to branch away from prestige literature.
Yes that is what I am currently using. Every couple days the stream stops functioning and I have to reboot it. Stream playback with every conceivable FOSS video player I have tried is never 100% smooth and always has some kind of microstutter, regardless of the codec, resolution, framerate, bitrate, stream protocol etc. or number of viewers (and I have tried every combination of them all).
This is the founder who turned into a psycho tyrant (I forget his exact words, but something to the effect of, "we're not the same small company, I have money and lawyers now") on an ex-employee for an innocent side project, threatened to sue him, etc, until it went viral and then backpedaled and offered some non-apology.

I remember stuff like that and will never use this company's tools, which is a shame because I was a fan prior to that.
Nalim: Linking Java methods to native functions using JVM compiler interface
The abstainers weren't being explicit about that in the vote itself. They left an implicit vote so it could be (and was!) interpreted however one liked.

That said, most of my awareness is Wikipedia and second-hand account, but I heard most of the abstainers weren't protesting "against statehood" but against the meaningless nature of the vote itself because it was non-binding to anyone, its results weren't going to be used to do anything (and indeed did not ultimately matter other than a couple of wishy-washy President Obama words but no actions).

I'm probably wrong on that interpretation, too, but the two votes after the 2012 vote seem to align with that: there is a desire for statehood over alternatives, but that there also seems to a feeling of neglect that they can vote all they want and Congress itself has yet to certify the votes or to make the necessary movements towards an actual, binding vote.
But you're replacing low-paid drivers that supply their own cheap cars with very high marginal-cost cars and sensors (and low marginal cost software). Its hard to imagine them turning a profit from owning and operating a fleet of cars - it seems like a business model closer to Hertz than Uber, and neither are terribly profitable.
There was someone on the Freelance Transformation podcast who explained how he was making six figures from Upwork. IIRC, it basically revolved around looking for buyers who had a history of paying reasonable rates and finding out what they needed. The podcast stopped a couple of years ago but last I checked, he still had the episodes up on the site.
I must say the tone of the reply feels ironic and well natured, but perhaps that doesn't save it.