skysight-inc/HackerNews huggingface dataset:
There is no reusable rocket available with 8.8 million pounds of thrust. And there certainly wasn't anything available when SLS was started. Falcon Heavy is about half the thrust of SLS. I agree that reusable would be much better, but reusability is a relatively recent innovation by SpaceX. SLS will get there. SpaceX is forcing everyone to up their game. In the meantime, no need to condemn them for not getting there yet during these transition years.
> You do believe the bible literally, right? Because if you were trying to avoid hell with your beliefs, and don’t believe in biblical literalism, a large faction of Christians are certain that you will also be going to hell.

A rather large fraction of Christians don’t believe in literalism, and think it is not only a doctrinal error in itself, but also the source of numerous doctrinal errors.
...and Drive Music is a form of art (even if it makes your local data safety person cringe):

https://www.youtube.com/watch?v=ZR454sxi27o
Why do humans tend to enjoy fictional environments that differ from real world?
I'm fond of any scene that minimizes code:

https://js13kgames.com/

https://js10k.com/

(gone)
https://the5k.org/

http://www.message.sk/web4096/

https://js1024.fun/

https://js1k.com/2019-x/

websites: https://1kb.club/

https://aem1k.com/world/

https://jeremiepat.github.io/svg1k

(256b)
http://wildmag.de/compo/

(140 characters)
https://www.dwitter.net/

https://www.reddit.com/r/tinycode/
This kind of a comment where middle and senior management will be rendered useless (and therefore feel threatened) by communication-competent engineers is both prevalent on HN and absurdly wrong from a business organization perspective. Joel Spolsky’s writing on this subject should be mandatory reading before people spout nonsense.

If this is a website supposedly for startups, the audience missed that mark by a wide margin.
Same here.

Searching for Briar shows Signal. I can't find Briar on the iOS app store at all.
This is a cool idea, but I didn't find any examples of max length constraints or other normalization rules in the source code I reviewed. Maybe there's something in there.

Here's some source code for an early, work-in-progress Wiki CRDT: https://github.com/hyperhyperspace/wiki-collab/blob/master/s...

Page in the Wiki. Note that data types have a validate method that returns true or false; maybe if false, they're just dropped from the UI? Not sure how the method is used. https://github.com/hyperhyperspace/wiki-collab/blob/master/s...

I haven't found the underlying text or rich text CRDT implementation yet.
There's no oil on the moon (yet).

===

Actual serious answer: It takes a lot of energy to get to the moon. Even more to land safely. Even more to take off again. Even more get back to Earth.

That energy costs a lot of money. It costs a lot more money to test all the things that use that energy. We are at the bottom of an energy and money hole, the moon is at the top.
There’s No Algorithms
Because: this specific App (not "something like" it, but this one written in a few days by a newbie), could potentially scale to 1B users -- and nobody could stop it. Some static assets would need to be tuned in a real App, to be hosted by a CDN like Cloudflare (or, possibly provided by the App's hosting nodes themselves if no CDN is desired), but the App itself would scale.

If a certain fraction of those users decided to install it (instead of use it via the Web interface), this scaling would be "free" -- paid for by the eg. 10% who installed it.

I've been doing this professionally for 40 years, 30 of which I've spend searching for solutions to specific problems in this domain. I was there in '09 and downloaded Satoshi's reference implementation, and again in '15 for Ethereum; that's "blockchain"; what you call "being on chain". They didn't solve the problems I was trying to find solutions for (scalable consistency in occasionally connected systems).

This is new.
That "forever" for the .mkv comes at a pretty high cost in time and money, if you really want a decent chance of it actually lasting a lifetime. You can reduce one by making the other go up, but there's gonna be some cost in both.

Then again you have to store physical disks. And pay for them, of course. Pick your poison I guess.
Another now-classic example of solving this chicken and egg problem, I think: Facebook starting with just Harvard, then ivy league colleges, then colleges, then colleges and high schools, and only finally the general public. At each stage the arena was small enough it was realistic to take the whole segment over, and then that became the seed for the next phase.
VLC can play them just fine and anything that supports H.264/H.265 mkvs.
Looks neat! Reading the docs only a few things stand out as odd to me:

- The common types are written as fully lowercase, shortened words (str, num, fib) but then function types are written as Function(). That seems like a weird exception.

- The use of a comma to delimit object fields, but a semicolon to delimit static fields, seems arbitrary.

- If brackets around control flow blocks are required, which they seem to be, then parentheses around the conditions seem unnecessary.
Paper Bitcoin
Setting Up for Success in Your Next Role: Where to Start?
Upvote for log4shell. That's pretty funny.

Yes, a safer language is not enough, but it is a huge leap forward, so I'll take it.
From what I've seen in the modern game engines, the current state of the art seems to be executing a compute shader which does frustum and occlusion culling on GPU and dynamically generates an indirect argument buffer which gets drawn in several or a single indirect draw.

This article contains a basic implementation of such idea in Vulkan - https://vkguide.dev/docs/gpudriven/gpu_driven_engines/
Just because something is in memory doesn’t mean that it is realistically executable. That’s why you can download a virus to look at the code without it installing itself.

You aren’t wrong that even downloading untrusted data is less secure than not downloading it. But to actually exploit a machine that is actively sanitizing unsafe data, you need either (A) an attack vector for executing code at an arbitrary location in memory, or (B) a known OOB bug in the code that you can exploit to read your malicious data, by ensuring your data is right after the data affected by the OOB bug.
On Joining Mastodon
OOF!
amazing stuff, I can't wait to use this in video. I've been having so much fun training custom stable diffusion models of people and testing people doing various things . the problem with these is that finding the right text in latent space, so im still not sure text is the right medium to generate everything, but instead as a tool to start prototyping.
If you eat meat and can’t watch these videos, are you a hypocrite since you suspect/know how much suffering this causes but don’t want to face the consequences of your choices and ignore it altogether?
I am so happy to see official support for this, particularly the work they are putting into the persistence options. There is a new browser API called the "Origin-Private FileSystem" that provides a sandboxed, domain specific, block level filesystem. It is exactly this type of use case, a client side database, that it is designed for, and in fact it is essential to make most use cases of client side WASM SQLite useful.

Essentially, the OPFS enables true ACID compliance, without it you have to "stop the world" and serialise the SQLite db to a string for saving in IndexedDB.

The trifactor of the Origin-Private FileSystem, WASM and SQLite is the missing link to make so many progressive web apps possible.

WASM SQLite persistance options: https://sqlite.org/wasm/doc/trunk/persistence.md
According to Wikipedia (and the article itself), cooling the aerospike is main problem with this type of engine

https://en.m.wikipedia.org/wiki/Aerospike_engine

Does anyone know how this design solves the problem?
"We just built the world’s largest 3D-printed aerospike rocket engine."

Where's the built engine? All I see in TFA is an individual complex 3d-printed component, seemingly just cutaway versions at that. Not a built engine.
It is really strange how this is a niche now (the frameworks); a couple lines of JS to handle button clicks is fine with me (again assuming you're not downloading jQuery for it)
Where is the demoscene community active these days?
>To insist otherwise suggests you might either be uninformed, willfully ignorant, falling victim to Apple's sham marketing around privacy, experiencing stockholm syndrome, or an apple employee.

No, it means I'm optimizing for the average user who will not go out of their way to LARP a paranoid opsec level.
This kind of graph is also known as an attack tree. Agreed, it's good visualization of this.

https://en.wikipedia.org/wiki/Attack_tree
Guy Steele has a talk [1] in which he recounts making some sort of utility program for the contemporary of the PDP-8, the IBM 1130. He describes all the gymnastics he went through to try to pack it into a single punch card, and also describes the benefits of having such a program on a single punch card rather than a series of them.

[1] "How to Think about Parallel Programming: Not!" - Guy L. Steele Jr. (Strange Loop 2010) https://www.youtube.com/watch?v=dPK6t7echuA
Reuse isnt always cheaper. If you arent flying a bunch of missions, it can actually be more expensive.

SLS could absolutely be cheaper, but reuse isnt really part of that equation.
>Live a more modest life and

in other words, don't be a billionaire. However Bob has evidently decided to keep being a billionaire which means he has to maintain and review stolen property etc.
Where do you go to chat with offline / air-gapped systems enthusiasts?

Nowhere. Should we start something? :)
Standard nozzles are quite heavy as well.

It's entirely possible that this aerospike engine is actually lighter because they don't need large nozzles and nozzle extensions and are more efficient
No, the list is diagnostic, in the same way that lists of behaviors and experiences that may indicate depression, bpd, or any psychological state/disorder is. The list is "you may be in a cult if", not "lol it's totally a cult nerd, look at this definitive list"

I agree that people use "cult" too quickly. But that doesn't mean that a list like that isn't helpful.

Plus if your kids soccer team "delegitimizes former members", "is paranoid about the outside world" and "relies on shame cycles" then … big oof! These are not typical behaviors.

(Part of your argument I think is that these ideas are subjective. If you're in a jewish group that has a meeting about rising anti-semitism are you "paranoid". Hell no. But could someone call you "paranoid"? Sure. Working through that subjectiveness is actually where the meat of this issue is.)
This isn't all that new. IBM mainframe contracts were handled this way decades ago. When you eventually need/want more compute, an IBM field rep shows up and enables a thing on the hardware already on your premises for what you pay for. The IBM P and Z series (midrange and mainframe hardware) still uses a similar scheme.
https://www.pouet.net/ also for those unfamiliar
Nix was the only thing holding my sanity together when I was using Mac last. Maybe it was just the Apple Silicon transition, but Homebrew did not have parity with it's x86 version which led to wildly complicated scripts just to get dev environments arranged similarly. Not the sort of thing you want to deal with regularly.

I recommend giving it a whirl if you're at your wit's end with Mac packaging: https://nixos.org/download.html#nix-install-macos
For the moment, upper protocols are determined just by looking at the port numbers, so it is likely that the protocols you mentioned would be shown as "Other".
I know this is not the best method to determine app protocols, but otherwise it would have been too complex to detect specific layer 7 protocols.
It’s there, just hard to find.

Open White Noise and Co, then tap “custom noise” and select Color. Brown is on the list.
Great idea for a book. I'll get it.
For a project like OpenSSL, it's not just having "enough" developers (whatever that is) it's having qualified developers. Writing good crypto code requires deep expertise. There aren't a lot of people with such expertise whose time is not already fully committed.
This is just my thought but I think you are overestimating the intersection of people who truly care about culture war stuff and the "deeply experienced" engineering community that values gaining the skill and experience to be able to build something like Twitter. When that engineer explained the RPC calls to Musk the other day the replies were very telling in the sense that people who spend their time talking about how "freedom is back at Twitter" or how the employees are getting their comeuppance don't seem to really internalize how much effort is required to build and maintain these services.

Maybe there is a cadre of conservative freedom loving experienced techies hiding in the shadows but I haven't seen them. I guess I shouldn't be surprised, I watched the whole Parler collapse saga caused by a lack of mastery and experience in their chosen technologies and it really instilled in me the idea of appreciating the drive of learning and open mindedness. The conservative movement seems to have a disdain for deep learning of a specific field. They are setting themselves up to be left behind in the tech revolution.
So it's like placing bets?

This is branded as if it's some new type of stock exchange when in practice it's just another betting platform, no? Other than fancy UI, how is this any different in practice than oddschecker.com or betway.com (I'm not familiar with those sites, just a quick search)?

>inb4 all stock exchanges are betting platforms
No, the output is guaranteed to be correct. Correct, as in what you specified in the contract, which may not be what you had intended, but that’s besides the point. Can you explain how the output would differ from the contract specification?
Show HN: Basic org website search for URLs on DMOZ
Here is a little project attempting a search engine for DMOZ
Ask HN: What are security exploits to try on personal wbsite?
I'm interested in getting hands-on-experience on applying security exploits to my personal website. I'm a developer, but know an embarrassingly little amount of applied security exploits. I'm curious about this.

From a previous post, it seems to me the suggestions for DDOS'ing (as a low-bar way to exploit) converge on hitting a expensive query/operation many times and this can be aided by various tools, such as botnets and load testing tools.

What about other "common" security exploits? ie, exploits that are commonly unprotected against and can cause damage to a website?
I haven't been part of the scene since about 2011, but I've always been extremely proud and fond of my contributions to the iPod and Mac Customization communities. I was a designer back in those days so my coding contributions were minimal, but those communities were the best around.

I was involved in the iPodWizard project and was one of the people soft-bricking their iPods to discover what substrings of the Hex firmware did what so we could modify them and then build custom themes, change strings, and in a few cases even add new functionality. I also contributed my fair share of custom themes, particularly the themes that would turn the grayscale iPod 4G into something more similar to the iPod Video theme (we had 4 colors to make gradients out of; was more fun than it sounds)

I also contributed design and testing to the iPod Linux and iPod Wiki projects, and testing on the Rockbox project.

On the Mac side of things, I was a mod of MacThemes for a long time, contributed my fair share of themes and icons, and was a beta tester for Candybar for a long time. My biggest contribution was probably tearing apart and documenting how to customize iTunes on Mac. I got it to a point where I was able to restore 90% of the old iTunes after a much-loathed redesign. My documentation also resulted in a spike in interest and new themes being created for the first time in a few years. It was really exciting seeing the frankly stupid amount of work I put into that pay off within the community.
Super Smash Bros Melee modding. People have fixed bugs in subtle parts of the logic (e.g. input polling occasionally drops frames). They've also made entirely new training modes and added visualizations for various mechanics.

Oh, and they've added in-game rollback netplay using a Dolphin fork :)
Even 4-6GB h.265 1080p pirated rips are usually better-looking than streaming "4K", let alone how much better an actual 1080p blu ray looks. Especially netflix, god their streams look like dogshit.
Nix does need root by default, but I use this https://github.com/nix-community/nix-user-chroot on all the Linux boxes I use.
At least for C++ there is something called defect reports. When agreed, those defect reports to retroactively applied to previously published C++ standards.

As a random example for something as fundamental as classes in C++, the page https://en.cppreference.com/w/cpp/language/classes shows ten defect reports.
You don't even have to close. You can just refuse to merge code which does not include 100% test coverage. If someone wants the feature badly enough, they will figure out a way to fill the gap. Alternatively, someone can always fork the code and release "OpenSSL-but-with-lots-of-untested-code" variant.
Then to compete we’d have to move more often and pay more for less space to live even closer to the office.
Definitely need to watch a bit more! It gets a lot better post episode 3, but your complaint still holds true in general with the series about the slow-burn. It's written well enough that you are engaged with each episode, excited about where the show is going. But then each episode ends, and for most of them, you do a recap of what happened during the hour you watched and the actual plot and character development is thin. It feels like it was written in 3 episode arcs, where small stuff happens for the first two episodes and then in the third episode the plot really advances.
For a little more context, there were Apollo flights planned out to 20, Nixon cut those. The Apollo Applications Program aimed at building a lunar base and observatories up through '76 but the Johnson administration declined to fund it partially to fund of Great Society programs but also partially because no one could adequately explain what a lunar base would be worth. We did get Skylab and the Apollo-Soyuz project, so it's not like project ground entirely down to a halt but what we did eventually get was a far cry from the heady dreams of the mid-60s, that's for sure. And, as cool a vehicle as the Shuttle was the STS did not at all deliver on its promises, further sapping resources.

Why haven't we gone back to the moon? Funding dried up real quick once it was clear the Space Race could be won with the existing amount of money spent, new projects had to answer "why" in a concrete way to compete for limited resources and it was not at all clear what we'd go to the moon for compared to, say, building the ISS.

Space theorists in the 30s - 50s assumed that you would have to build up on-orbit Earth infrastructure before the moon could be sustainably reached, meaning you could go back whenever just because. That is, you need stable communication, transit hubs, refueling, space-based construction went the thinking. Both the US and the Soviets took big, expensive shortcuts in the Space Race but I find it hard to believe that the original analysis -- space is only as reachable as its infrastructure allows -- hasn't been showed true in the last 50 years.
surely that's already patented
I'm not sure I've ever seen a detailed technical writeup of a vulnerability before that started with such clear and concise instructions on the exact steps needed to defend against it at the start of the article before. In particular, making clear the priority of what to patch is excellent. If I'm a user of a product where a bug was found, I'm definitely interested in learning about what the bug was, how it was discovered, and whether I should be worried about other bugs in the future, but the absolute first thing I want is to do whatever I can to make sure I'm not affected by it. Listing what to patch and/or change in code might be more "boring" than the narrative of how the bug was found, and it might spoil the surprise, but I think sometimes we focus so much on the fun of the process of finding the bugs or revel in the cleverness of an attack (and those things are fun!) that we forget that the real point to it is to make our stuff safer. There's plenty of time for fun, but make sure you patch things first!
>We're all on micropatched W7's or Windows 10 Enterprise LTSC - otherwise Linux. W11 has sort of become one of the topics we joke about during lunch.

Look, I wasn't tryin to start a Windows 7 vs 10 vs 11 vs MacOS vs Linux holy war, I was just pointing out that contrary to the article, I have yet to see any ads in the Windows 11 start menu, and the start menu search function works flawlessly on Windows 11 for me, contrary to what this shallow blog article which had no substance backed by tests and evidence.

>It took the interns at Microsoft, what, nearly 10 years to fix the whole search function fiasco? Not impressive, and a working search function can not be considered a feature.

As long as it works flawlessly for me in the present day, what difference does the past 10 years make for me? Microsoft devs aren't paid by my wages and I always judge the current version of any tech product, not some relics form the past. Linux also works great now for gaming, so who cares it didn't work 10 years ago?

>Power-users do not care about a cool and stylish UI, new icons or a simple working search function.

Average Joe users who user their PC for entertainment and work, with a life outside of micropatching their OS, do care about things being simple and working out of the box, and that's the target audience for such an OS. Powerusers are a special breed no company targets because they can never be pleased so it's never profitable. They have GNU/Linux for that.
Firefox phone was a great way to make simple JS/HTML/CSS mobile apps, while it lasted. I loved it & made many.
So, what's up with Ye's purchase of Parler? Is this all part of a strategy to take out the alt-right social networks? I can't imagine this is good for parler/gab/gittr. Truth Social can probably hang on until Trump can't resist tweeting.
> Why has no human stepped foot on the moon for 50+ years?

Technically, this is not true. Unfortunately, it will be true in a few weeks.

https://en.wikipedia.org/wiki/Apollo_17
I assume brave shows mostly crypto adds? If so, the targeting is baked in
And their second product was CDs/DVDs, which have a lot of the same properties. Then they opened Amazon Marketplace, allowing other stores to sell through their site, and used the data of what was popular there to expand into other products – they were consistently very deliberate about what to sell next.
Who are the others you are referring to here? Can you be more specific? Because it matters in this case
Is this satire? My progressives-hating family were the only ones shoving down my throat that Qanon exists...
growing up in the 80s with a Commodore 64, my friends and I never bought any games. They were all "cracked by $some_cracker"
The Apollo missions varied in the time they took to reach lunar orbit but it's worth considering they had limited consumables to be concerned with.
Hey, thanks to those who pointed out the back-button override bug. We've just shipped and verified a fix for that!
I... didn't get an email? Very cool to find out by looking at hn
The Midwestern environment doesn’t have high-density housing though. That’s what matters for conservation.