skysight-inc/HackerNews huggingface dataset:
You should read the link, even though it is http. It would correct your understanding: z-library started with all the books from libgen, set up access controls and limits to incentivize uploading new books, garnered millions of new books, and didn't contribute them back.

Also, consider your risks more holistically:

* Honeypots can and do have valid https certificates, what matters is who controls the site (for example, when the FBI took over a kiddie porn site, it changed the site to deliver over https a zero-day exploit for Tor Browser that broke out of the browser sandbox and deanonymised the visitor)
* Eavesdroppers can tell you visited a specific HTTPS site by looking at your TLS1.2 SNI in cleartext. Even if you're using TLS1.3 (which fixes that leak, but is currently up to the browser/site to negotiate), eavesdroppers can still correlate site access with your DNS requests. Even if you use DNS-over-HTTPS/TLS, you don't know if your DNS provider is in cahoots with the eavesdropper. You have to trust someone

Where your actual risks lie in visiting an HTTP-only site:

* If the site has forms/cookies, an eavesdropper can see them. In this case, https buys you nothing; your concern is that someone can tell if you visited this site once, not that they can tell you're a repeat visitor
* Eavesdroppers can see any headers that your browser hands out (mainly user-agent) that could more granuarly identify you vs just your IP address
* Active attackers with the ability to control your traffic can place anything they want on the website by spoofing its responses. With https they could only deny you access to the site

The benefits of HTTPS over HTTP are enormous, but you have to understand what its limits are. If you're concerned about web surveillance, you should be something like Tor Browser to visit websites, and understand that even it has limitations.
As far as I'm concerned, Flexbox Froggy is mandatory reading for anyone completely baffled by flexbox. It's really brilliant.

CSS grid is heaps more complex than the flexbox spec, so I think the Grid Garden one is not quite as useful. But seriously – if anyone is just squinting when staring at flexbox stuff, go check out that game.
Very much reflects my personal experience with woodworking and pottery/ceramics. The lack of a proper undo/rollback is both frustrating and wonderful.
this is on point. From my personal experience it seems like most of the tools are designed with an "organise-first capture-later" interface which is annoying because they require a lot of mental energy to keep things organised. At some point I just had to build my own thing :) https://acreom.com. Would love to get feedback.
You could have bothered to read the article before posting the most obvious, dismissive thing.
I recommend putting this point up at the top and quite clearly explain that.
If they could benefit from the 'information leakage' of knowing a username exists, they would do.

If they don't - then maybe this 'information leakage' worry is obsolete security advice. There's loads of obsolete security advice around.

(of course there might be other, non-account-security-related reasons to make it impossible to know if an account exists. It's one thing if HN's login form reveals that user
duxup exists, it's another if find-an-affair-partner.com reveals the same thing)
> Take a minute to internalize this; you might misunderstand it as something trivial. This is not about swapping two variables - it is literally about one object becoming another. I am not aware of any other language that has this feature. It is a feature of enormous power - and danger.

I do think implementing or understanding this is trivial. 'Become' can be implemented by 1. swapping all references to 'a' and 'b', or 2. swapping the data at memory locations of 'a' and 'b'. I can certainly see its interesting uses but don't see any value in describing it as a miracle or something that's hard to comprehend. Using the word 'become' to explain the language feature 'become' also isn't great.

I used ObjectStore at one company that does 'pointer swizzling' to lazy load deserialized objects, where segfault takes the place of `doesNotUnderstand`.
Two arrested in $575M cryptocurrency 'Ponzi scheme'
It's also pretty much Express.js
But the same thing happens in sports.

In basketball, Dell Curry led to Seth Curry and Steph Curry, and the latter just broke the 3-point record. That's merit.
That's not the whole story, though. If government employees with security clearance are reminded by their government that reading leaked documents constitutes a crime, as happened with documents stored by Wikileaks, you have good indication that the leaks are genuine.

If leaks are not genuine, then governments simply say so and move on. They're not overly concerned with false stories, these are everywhere. It's not as if they persecute people who make up stories about UFOs in Area 51. They are persecuting Assange, however, and with an unusually malignant ferocity.
How did this become the narrative? Wikileaks was started by the Russian secret service, so of course they wouldn't leak their own stuff. Assange was a useful idiot to them.
From what I've heard, about 5% of it isn't on Libgen. Assuming that's accurate, that's still several hundred thousand books and several million articles.
Yes, but the point of the article is that research does not seem to have been able to point out what exactly were the "learnt lessons", the winning components in those «propping» and «direct[ing]».
I don't know, but you can build the image yourself: https://github.com/Atlas-OS/Atlas/tree/main/src
World Cup phishing emails spike in Middle Eastern countries
I'm not quite sure about it, but I also think that the whole "if you cannot say anything nice, don't say anything" thing is very much an anglo thing.

Around here, Germany, art critics are celebrated for their often acerbic criticism. E.g. look for Marcel Reich-Ranicki on youtube, though I don't know if translations really convey everything properly :) Also, talking about the quality of anything isn't considered "intelligent" or "honest" around here if you don't talk about negative aspects. If you just say nice things, you are quickly considered dishonest, a salesman or dimwitted. Of course you need to state some valid-sounding reasons for anything negative, same as for the positive aspects, otherwise you'll be considered shallow or dimwitted as well.
I wonder if there is a comparison between APS and ACS, the authors don’t mention APS in the article.
Shows how much I know about woodworking.

Until I read your comment, I hadn’t realized the parent comment was satire. Instead, I was amazed at some new technique I hadn’t heard of before of heating wood that would make woodworking easier.
There is nothing special about the main branch! This is the recipe to collaborate in git:

- Pick a shared branch to work on.

- Work.

- If you complete within a day, push to shared branch.

- If you need to hold onto it longer, make a new branch, switch to it.

- (Possibly recurse.)

- Complete work, rebase new branch on shared branch, push.

And of course feel free to replace branch with remote/branch. It is distributed, after all, nothing special about any particular server.

A worked example, to make it more concrete:

- Pick the shared branch main.

- Work on a feature for more than a day, so:

- Create a feature branch feature/e2ee, switch to it.

- Recurse, since you'll be doing database updates and I'm adding the UI.

- Pick the shared branch feature/e2ee.

- I create a branch git.sr.ht/~couch/new-twitter/feature/e2ee

- You work and push to feature/e2ee.

- I complete my work, rebase the branch, and push to feature/e2ee.

- We are satisfied that we've completed the feature, rebase and push to main.
ExoPages – host and manage blog, job portal and FAQ pages of your org
If you drink enough wine, and that means frequency, not quantity, you will eventually develop your own taste for what you enjoy. At the same time, you will also learn to judge good from bad. Will you be able to judge the individual grape or region? Probably not, but good from bad, yes. To the point that you will occasionally dump a bottle down the drain after taking the second or third sip. Not the first, because sometimes your first sip will be a lie, but by the second or third, you will decide, this bottle is not working, and you'll just dump it down the drain. Make sure to note the grape/vintner/vintage so you don't buy it again.

It is important to buy different bottles of the same grape to see how it varies across vintners and regions. It is also important to buy different grapes, because you may be surprised over time what vintages you settle on as your tastes develop.
Are you sure about that?

I've seen discussions from a specific professor going back years (long before the actual invasion) talking about the dangers of exactly that. After it happened this specific person (forget his name) then started talking about how it was a consequence of the things he had been talking about for years.

You can disagree with the guy, but he's an academic who apparently has an expertise in that area, and I question whether or not you're dismissing it due to your own political bubble rather than because there may be some truth to it.
Or with any modern password manager - including the one built into Apple devices - you could just click on “choose strong password” and have one generated for you and stored.
Cortana on Windows Phone had a "notebook" of everything it had learned and you could modify it to your liking. For example it detected my home and work locations and transit hours and displayed every weekday at 17h15 bus information before I left, and I could modify that info if it was wrong.
How about the arts are mostly funded by public money and they facilitate the most tax dodging of any public sector
Come on. You work for the company Cohesive, the company that build that product. Recently you wanted to hire a technical writer https://news.ycombinator.com/item?id=32897271 Now you claim "I came across this product".
> The axum::debug_handler macro is invaluable to debug type errors (there's some with axum too), like for example, accidentally having a non-Send type slip in.

Heh, yeah. For my recent project where I explored implementing the same little app in a few different languages[0], I chose Axum for the rust version.

The whole "extractor" system was pretty magical, and when I had this exact issue (non-Send argument), the compiler error was totally useless. I did see the docs about adding this extra macro crate for error messages but it seemed like a bit of a red flag that the framework was going against the grain of the language. Still, on the whole, I did enjoy working with Axum.

[0] https://github.com/losvedir/transit-lang-cmp
In the past many people were distributing binaries from Windows without Microsoft being very touchy.

You can check:

https://en.wikipedia.org/wiki/BartPE

https://en.wikipedia.org/wiki/NLite_and_vLite

https://en.wikipedia.org/wiki/WinBuilder

You can also find customized failed build of Windows like Neptune, Chicago, Whistler, Longhorn etc. ISOs.

One example:

https://www.betaarchive.com/forum/viewtopic.php?t=44187

I guess Microsoft thinks that ultimately, it gets people acquainted with Windows and even loving it.
I wonder wether a democracy should make intervention wills. As in, if i ever go below this or that treshold, i want democratic neighbours to restore the nation.

Or have a backUp Voting system, that if people do not show up to a vote in full majority autorestores a constitution.
No need for a beating if I can just tell them... they can take the password with them.

Or they can take the fingers with them.
Agreed. OWASP now advises developers on how to avoid account enumeration, so this take no longer makes sense.
> The article is based on the idea of HTML as an interchange format, something that's only the case in dysfunctional situations (scraping data illegally, or a horrific breakdown in communication/collaboration between two business entities).

Think again:

https://schema.org/docs/gs.html
One thing that’s nice about C++ is that you reimplement stuff that doesn’t have a decade of battle testing behind it.

That way, such ‘bleeding edge’ features evolve and improve a lot before being set in stone.
nice, that was what I was hoping to achieve
Violent protests break out at Foxconn’s ‘iPhone city’
The article is using "biometric authentication" to refer to WebAuthn-based authentication (which on lots of modern OSes can use biometrics to authenticate access to the keys used for WebAuthn).

It is indeed hard to steal WebAuthn keys out of modern secure mobile devices. It's not talking about stealing biometric data.
Yeah I think it's mostly a choice between Tokio and async-std. FWIW I chose Axum in a recent migration from Node. It's not perfect, but I found it to be pretty simple, even with controller/service/data abstractions.
Yeah, balancing both budget and trade imbalance (better yet, a trade surplus) should take a country out of poverty over time. South Korea turned from agrarian to massive tech exporter over the time talked about. I'm writing this comment on a Samsung phone BTW. Not every country can have a trade surplus though, that part is a zero sum game. Having your own currency is probably important with a trade deficit, so exchange rate can be used to prevent outflow of currency used locally. That and tarrifs.
Just trying to learn here, not being combative, couldn't the same compiler support have just enforced the non nullness? At first you think, how do you enforce

someEnum = getAnEnumSomewhere(), but at some point there's got to be an original reference being hard-set to null that the compiler could see, right?

also i don't understand your point about universal defaults?

enum Foo { bar default, baz };

why can't you guard against the default? how is checking a foo enum against bar different then checking against null?
I was working for somebody once who seemed to think LeCun was an uninspired grind and I'm like no, LeCun won a contest to make a handwritten digit recognizer for the post office. LeCun wrote a review paper on text classification that got me started building successful text classifiers and still influences my practice. LeCun is one of the few academics who I feel almost personally taught me how to do something challenging.

But the A.I. hype is out of hand. "A.I. Safety" research is the worst of it, as it suggests this technology is so powerful that it's actually dangerous. The other day I was almost to write a comment on HN to a post from lesswrong where they apologized at the beginning of an article critical of the intelligence explosion hypothesis because short of Scientology or the LaRouche Youth Movement it is hard to find a place where independent thought is so unwelcome.

Let's hope "longtermism" and other A.I. hype goes the way of "Web3".
C++ Annotated September–October 2022
Have you ever heard of GiveWell? https://www.givewell.org/charities/top-charities

You are concerned about people thinking that dumping clothes in sub-Saharan Africa is "effective". I strongly doubt that any Effective Altruists think this is a worthy cause to support or promote.

Some of the questions you ask sound like you would enjoy joining in on Effective Altruism discussions -- it's a welcoming community: read some blog posts first and then start sharing your thoughts: https://forum.effectivealtruism.org/

You say 10% is "no different than a tithe". I'm unsure where you're going with it, but I recommend you give 10% of your income to cost-effective charities (ones you pick in good faith after doing diligent research). I've been giving for over 10 years now.
Internal tool for lead-generation on YouTubers
Have you used something similar for searching social media?
I know there are a lot of tools for Linkedin and Instagram, but I'm curious if there are for other social platforms
https://www.lofi.cafe/

Non distracting, no vocals, can select a few different streams.
I know meta-commentary on comments are slightly frowned upon, but yours just made my morning. So sincerely, thank you.
While the above resource is really good, it is more about setup than using Kubernetes.
It seems to be the domain they use for conferences and other things that they host. Like https://opensourcelive.withgoogle.com/
> Yet another victim of US imperialism.

The collapse of the Ottoman Empire and Austro-Hungarian Empire into small nations in the Balkan Peninsula from 1817 to WWI was caused by US imperialism?
> Atlas removes all types of tracking embedded within Windows and enforces hundreds of group policies to minimize data collection. Things outside the scope of Windows we cannot increase privacy for, such as websites you visit.

The great thing about proprietary software that comes with spyware is, you can never be too sure.
It's a reference to silicon, the element with atomic number 14. Makes sense that it would be used by more than one company.
There is not an Emacs topic I'd like to know more about haven't already covered on your website.

Thanks, your articles and your book are the best guides into the world of Emacs.
If "Testing Theories of American Politics:
Elites, Interest Groups, and Average
Citizens" by Gilens et al. convinced you, then, you have reason to assume oligarchy in the US.
Whether you can assume the same in other well off countries is an open question.

Is it not strange that investment bankers get into state institutions?
Is it not strange that those rich countries do not mind your privacy (AMD PSP, Intel, ARM CPUs).
As if intelligence agencies form a hidden legislative role and they fear their own citizens.
Why is there a need to become like China?

Despite all that, people have many more potential conspiracies.

Popular ones are:

- Leader of the WEF
- Soros
- Gates

How valid those potential conspiracies are, is another question.

One example, Epstein supposedly killed himself.
Some people are sceptical about that.
But I would say: beware your confirmation bias.
Potential coincidence should not make you disregard due process.

In my estimation, you do not need conspiracies.
It is very simple, if you are very rich, you can buy yourself free from your duties (e.g. Amazon) and you can influence policy making (i.e., lobbying).
It is also easy to see why the US or rather the intelligence agencies engage in conflict (e.g. Taiwan/TSMC).

To be fair, an article on Vox says that the above finding is false.
It is hard to be certain on "truth" or to be "certain" at all.
You end up with beliefs (which has many forms: assumptions, trust, axioms, ...).
Better stay off politics and news.
If we read the court's reasoning, it was rejected because it would show "democratic expression of the Scottish electorate" and while at it, would "either strengthen or weaken the democratic legitimacy of the union". Damn democracy, how annoying it can become when it does not agree with the status quo anymore - we rather gag its voice to not hear any dissensions.
And precisely what is wrong with gun control and mixing it into partisan politics. It's easier to address the means but not the root cause on why the crime was committed in the first place.
> The article literally tells how the username can already be validated.

The article says how many websites can allow that. This has nothing to do with the theory. This identifies poor implementations. These implementations trade reducing friction in signups, for some user security.

There's nothing wrong with "Invalid Username or Password" (eg ssh, et al), unless the security mechanism is self-sabotaged.
> CLOS itself is great, however the decoupling of data and methods is something at times I find leads to harder to understand code.

I think that might be familiarity rather than anything fundamental. I often find the coupling of data and methods to lead to harder to understand code; if I want to define a new method on an object in Java, I have to either subclass it or modify the class itself. Even if the method is ancillary to the core functionality of the class. That seems strange to me.
You can use the standard Euler method with very small delta T.
Remember PS3 hacker Geohot? Elon Musk just hired him to help fix Twitter
Curiosity forces me to push the limits of your acceptance of the morally abhorrent -- Are you OK with "sufficiently artsy" CSAM?
I’d argue this space was technically successfully but not commercially so. We love our “smart speakers” and have integrated them into home automation. Does anyone make any money when we use them? No.
The bizarre rise and fall of Coursicle
Too many hands in the cookie jars caught and belonging to SBF's.
This conversation tells the story of UNC Grad Joe Puccio and Coursicle earlier in 2022. I had never heard of Coursicle or Joe but a google search landed on Joe's personal site and captured my attention:

https://joepucc.io/

This story has been covered on Hacker News earlier this year, but the Carolina Connection conversation seems more recent.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
My note above, enough relates more to frequency than volume. Exposure to one serving (a serving is not a full glass!) two or three times a week matters more than five or six servings once or twice a month.
I don't know how good he is at making search engines for micro blogs, but he sure is good at self promotion.

Geohot and Musk coming together to save the day, it's like a super hero story. Maybe they can hire Neil deGrasse Tyson as chief scientist too.
I might even click the follow ups where he un-invents the internet and then the printing press
We need people pushing the boundaries of the weird. I don’t even think it’s bad to like weirdness for weirdness’ sake.
If you did implement it like this it would be helpful to receive an email telling you that somebody has tried to re-register the email address you already have an account with.
Elon Musk Hires Legendary iPhone Hacker 'Geohot' to Fix Twitter Search
Free Markets - the biggest wealth creation engine known to man.

The most impressive and amazing reversal of fortune I've personally lived through was the switch from planned economy to free markets which took place in Eastern Europe after the fall of communism. You could even predict the degree of improvement or the trajectory of a country by the percent of the free market reforms vs protectionism left in place.

Of course, free markets require rule of law, so countries with a justice system controlled by an aristocratic class, clergy, dictator or political class will fail to acquire said free markets.

And reversely, the more populist politicians will get socialist policies voted through, policies which control, retard and corrupt the markets - the more their countries will slow down and be left behind. Case to the point - most Western European countries - after becoming incredibly wealthy after starting from scratch at the end of WWII to being left behind by the IT/computer revolution and becoming dependent on the cheap energy provided by a malevolent, war-mongering fading ex-superpower.

But why are free markets such an amazing success? Because they're the only mechanism which aligns and harness the humans' natural individual desire to improve one's station to drive and fuel the improvement of the whole society. A simple concept like "if each individual is allowed to decide and do whatever is best for her (and keep most of the result) then everybody will benefit" became such an subversive idea that dictators everywhere are still trying their best to extinguish it.
Dig the fact that this thing comes with little temperature probes - my current case is probably a little too small for the setup I have right now and I am debugging the temperature zones / airflow. It's a Fractal Define C, i7-12700K, Radeon RX 6750XT OC. Initially my CPU cooler fans (2x) were pointed in opposite directions, lol. Would love a thermal camera, but these probes would probably be just as helpful.