skysight-inc/HackerNews huggingface dataset:
I lived in a fancy apartment complex in the east of Moscow for about a year recently. We had physical keys (except for an NFC-card to open the outside doors/gates, which was tolerable), but there was no doorbell of any kind.

The idea was that you'd have a fancy app that would let you "register" guests and the doormen would receive notifications about this with information about the guests (privacy concerns anyone?!).

In practice all of the following happened:

- Nobody used the app. I believe that nobody in that building even knows _how_ to use the app, including staff. My landlord had no idea, the doormen had no idea, etc. What ended up happening is that the concierge desk got a "blessed" landline phone and anyone who knew that phone number was implicitly "authorised" to allow them to let anyone in. Some doormen didn't even bother and just let anyone in who looked like they wanted to enter.

- Unannounced visitors had absolutely no way to make themselves known to you if they didn't have another way to contact you (e.g. technicians showing up). This actually happened to me once with a delivery driver who somehow didn't get my phone number, and got stuck in "doorman limbo" until I realised that something was off and went downstairs to ask the doorman if he'd seen anyone, and found the poor guy hanging out in the lobby.

- On the off chance that somebody would have figured out how to use the app, it's likely it wouldn't have worked because I don't think any of the workflows of anyone there involved looking at whatever/wherever the app was supposed to do its thing.

This is just the most recent example of this kind of crap for me. Sometime earlier I had an experience with a similar building in Oslo, where I ended up being the only person who could get into the building during a power outage because I absolutely insisted on having a physical key for the front door.

Internet connected "things" just suck.
> on a whim

it wasn't on a whim.

> ... is less egregious than doing so long term?

obviously it is, yes. For example, plenty of people just avoided travel during that time and managed to not have to use an app. If it was ongoing that wouldn't be the case.

The precedent that has been set is: if there is ever another crisis of that scale, using a smartphone app to try to mitigate it is one of the options on the table. That doesn't seem like a bad thing to me.
Ask HN: Do you know the accelerator/VC firm Antler?
What was your experience there?

Particularly if you didn’t get funded how did it impact your career? Was it a good use of your time and (lack of) money?

I would be joining as a founder without a startup, which makes the whole thing less “driven”. I mean startups pivot all the time so it’s not these relevant but it worries me slightly to be joining without any clear purpose other than “finding a match”. I guess I should look at it like a free “Master in Startups”.

I’m particularly curious about the network and the opportunity for people who “failed” the first stage and didn’t get founded. Or got funded but burned through the 80k and didn’t manage to raise any more money.

What was life after that? Did you get hired by a fellow cofounder from your cohort? Did you get hired by Antler past companies? Did you wonder the land without a penny to your name?
But self driving cars are on the roads, and they are expensive hardware that can kill lots of people. Mistakes need to be exceptionally low so it's a lot of order of magnitude improvements but minor visible changes before it hits major thresholds.

I'd also argue that LLMs and image ai has grown far beyond linearly over a fairly short time horizon.
Sematic (YC S22) Seed Stories – Open-Source Continuous Machine Learning Platform
That makes a lot of sense..

I use a q-tip at least weekly, I've always produced a lot of wax, and keeping it in check is very important for my well-being (and ability to hear well).

I also own an endoscope camera that I use to check my ear canals, very clean ears, no sign of irritation, no visible wax deposits. Tympanic membranes always clean (of course I don't clean them! I guess they stay clean from the fact there's nothing in the canal to get onto them).

The "pushing the wax in" idea always seemed ridiculous to me, like, you'd only ever have that much wax if you never cleaned your ears in the first place, and your hearing would surely worsen a lot from it?

But yeah, I wouldn't trust my 2 year old with a q-tip and ears either..
Hopefully you can turn this off. I've seen cases where attackers enter an email address and just keep spamming the login form until the owner accepts the notification. Obviously 2fa would help here but not everyone uses that.
I'm similar: I find large groups easy, small ones more difficult. I always think it is because the people in large groups are anonymous.

This is, as you say, social anxiety. And you might be able to get better with some practice. Local theater, choir, or other hobbies might prove to help or simply doing things that get you out of your comfort zone more often. Basically, this is just training yourself to act differently and gets you more used to small anxiety. Of course, a lot of the practice won't have the added stress of your career so it might or might not pay off.

The other side of this might be some help through professionals. A therapist might be able to give you some spectacular tips that me, an untrained random internet human, won't know. A GP might be able to prescribe something to help with the anxiety.
Nike+RTFKT announces Cryptokicks IRL featuring smart sneaker technology
You can improve your body language by improving your body.
This will be yet another drop in the ocean of anti TikTok sentiment but, what is the value proposition of TikTok?

I ask because I am told it is meant to have a good algorithm, and yet I can't find ANYTHING on the platform that I like. The easy answer is that I'm not the target audience, but I want to know why.
IIRC applepay, transit and carkey work with dead battery (there’s always like a little reserve there). Best fallback is a pin code.
This happens to me routinely.
> is a return to the creativity of years ago

What year was that exactly?

I hear a lot of remixes of the same songs, and a lot of the same intro meme music (shanties or otherwise). I don't hear much from any artist's deeper discrography. Your average clearchannel FM radio station has 10x the variety as you'll hear in any given tiktok stream, easy, and those are already playlists that are outrighted determined by record companies.
Why is that cities in the northern hemisphere are always the ones destroyed in fiction? There's cities in the southern hemisphere too: destroy some of them!

Actually, I want to call out "The Expanse" for this (warning: spoilers): in the episode where one of Mars' interplanetary nuclear missiles gets through Earth's defenses, it strikes South America. But this is the only time I can think of this happening in disaster fiction; usually the entire existence of the southern hemisphere is ignored.
> Certificates signed by TrustCor that were issued before December 1st will still be trusted (for now); certificates issued on December 1st or later will not be.

How does this work? If TrustCor is no longer trusted, what keeps them from creating certificates which claim to be issued before December 1st, even after that date?
> It's just too good at telling us what we want to hear.

This got me. Imagine segmenting the LLM into a zeitgeist, various demographics, geolocation, etc. and then these all bubbling up to knobs on bots you could turn unleashing content to skew public discord in so many different ways than already are. Make up “facts”, publish articles, generate images, calls to action, etc. for each topic, demographic, etc.

The only image I could conjure up was “Q” from QAnon fame and it’s scary.
> There's already multiple parsers for every language for markdown. Here there is a single Lua implementation.

Markdown started with a single implementation AFAIK. Or was there a galaxy-wide coordinated software release for Markdown parsers and I missed it?

> GitHub is the king. f it cannot render in GitHub it's not real.

This can't be more farther than truth for me. I don't care if it's rendering in GitHub or not. If I can use it in my docs, write it fast, put on a webpage in a nice manner, I'm done.

Markdown is not popular because it's embraced by GitHub. It's the exact opposite. If it can capture some mind share, tools and websites rendering this will proliferate.
I think that might be a part of it, but also it is also kind of the equivalent of the guy in the 1980s and 1990s with a boombox making you listen to music on the metro, or in the 2000's/2010s making you listen to his music from his cellphone/bluetooth speaker.. but now its like every single person is cabable of doing this..

My roommates 35 year old brother from russia stayed on our couch for a few months(escaping the draft) and didn't have a laptop, just his iphone.. He would just spend hours watching tiktok with that annoying bro-step/ableton core tik tok crap on his iphone speakers.. completely unphased by it... eventually I got used to hearing it in the background as well. The guy has headphones but this is something that seems to be normalizing. I see this on the bus and train as well
IMO you will get the best effect if your underlying SW architecture is CQRS/ES, as it maps nicely to it.

For the initial discovery/ideation I would use Big Picture EventStorming as it's a much simpler notation understandble to non-technical people (if you know what is a sticky note - you can participate;)

IMO EventModeling is more comparable to Software Design EventStorming but with Project Management, full documentation, SDLC, etc.
Went to a restaurant in Sweden last year and they told me that the "new way" to order was through an app. I used to live there, but not anymore, and my Play Store account is not set to Sweden. Turns out, you could only download the app with a Swedish Play Store account.

They were baffled by this and resorted to giving me a physical menu. I also emailed their corporate division and explained the problem and said that the whole procedure of ordering through an app is uncomfortable and makes me not want to come back.

Came back this year on a visit and lo and behold - no mention of any apps. Just physical menus and waiters taking orders. Seems like I wasn't the only one who gave them this feedback ...
There are definitely limitations in GNU/Linux root stores. E.g. to my knowledge it's impossible to distinguish between the root coming from the distro vs coming from a custom configuration, e.g. for corporate MITM proxies. So you can't e.g. require SCTs to be present for former but not require them for latter, like how Chrome does it for example.

Also, is this additional information even published by Mozilla in a standardized format or if it's just put somewhere into Firefox source code?

Also note that, given how Firefox doesn't implement SCT requirements, TrustCor could also just back-time certificates. So Firefox has similar vulnerability properties as users of distros that haven't removed TrustCor as a CA.

So ideally you would also make it possible to distinguish between OS provided and custom configured certificates, to allow libraries to check for SCTs at all. Otherwise you haven't gained much from the additional information of limiting a CAs ability to issue new certificates.
Is this like "Video killed the radio star" thing? YouTube has also made a great change. This seems to me like the next step.
The comment you are replying to didn't say anything about safety, merely disruption, and I'd wager having a ridiculously large number of people going through extra checks and having to sign forms would be super disruptive ;P.
That seems interesting. What's the license? I couldn't see that in the repo [1]

1. https://github.com/bulwarkid/bulwark-passkey
Certificate Transparency [1]: Public logs of issued certificates.

[1] https://en.wikipedia.org/wiki/Certificate_Transparency
The downside is that you need to carry a separate dongle with you, instead of the phone you already have.
If there were enough cars fitted with sensors that can learn from their driver's actions and reactions I am pretty sure an AI system can learn from this huge pool and be a good driver. A good driver also makes mistakes. And this is still nothing related to intelligence. Our networks are as of now what one calls universal approximates. Actually replying to so many different queries whether it is medicine, computer science, history , it almost seems like a better interface to the net than google
coodebase64.org is a decent place to start.
The one thing I dislike about TikTok's influence, and I'm saying this as a very casual modern music listener, is that pop songs seem to be becoming extremely short sicne only a snippet is needed to blow up. Now I don't mind a short song or a long song, as long as it's good, but I'm still often left feeling like another chorus or bridge would really flesh out some of these hits. Like that 'Unholy' song by Sam Smith and Kim Petras [0], which I think is rather fun but it really feels cut short to me.

[0] had to search this up, heh.
As someone who had gone from severe shyness to comfortably talking in front of a variety of audiences, the simple truth is that the more you do it the better you get.

As far as I know there aren't any clever tricks that don't involve drugs.

There one positive is that practice compounds. 20 talks isn't double the experience of 10 talks it's 10 times more. The change for me was quite sudden. Going from very nervous to reasonably comfortable quickly. I spoke to other performers and they said their experience was similar.
Isn't it totally weird that we long for jobs, instead of the fruits of the jobs? This backwards incentive structure is one of the reasons capitalism works so well - and so badly at the same time.

If I cannot work a job anymore, great! But I demand to be able to take part in society, and I demand my share of societal production. This is one of many many cases where new technology clashes with the boundaries of our societal system. There are only three solutions:

- Ban the new technology to prop up these jobs

- Let the people become "unnecessary" and try to fix it with wellfare, which will cause all kinds of unrest

- Embrace the new technology. Find a way to feed all the people who lost their jobs (the food is still being produced, it is just a question of how to distribute it). And find new meaningful activities for them (Remember: wage labor is not neccessarily == meaningful activity.)
‘Technological giants are becoming political actors’
> Driving a car requires an understanding of a much wider context …

Yeah, it struck me that perhaps a better approach to self-driving would be the road infrastructure and all the vehicles using it cooperating to build a local activity map - that way each individual vehicle doesn’t have to detect, classify and route around every object in real time, most of the work will have been done by previous vehicles and / or stationary traffic cameras.
> There is no API to actually handle trust.

The various TLS libraries already agree on at least one thing: what certificates look like on disk (e.g. PEM and DER formats). There's no reason why some committee couldn't sit down and standardize a format for ancillary data such as the trust date cutoffs mentioned here. Then the TLS libraries would have to implement it, and return appropriate errors from their validation functions. This could possibly be done in a way without needing applications to also be updated, though that depends on how each TLS library reports validation errors.

But even if a particular TLS library doesn't have a way to express these errors properly, I think it's better to have a user confused as to why they can't connect to a site, than silently connect to a site "protected" by a certificate that shouldn't be trusted.
Here's the reviews of "Laptop from Hell"

https://www.amazon.com/Laptop-Hell-Hunter-Secrets-President/...
Mandated, if you wanted/needed to travel during a pandemic.
> The app often fails when I use it, but I don’t have a key as a backup

Also I'm sure a court would be quite sympathetic if the app fails and you can't access the apartment your paying rent for..
I really think you are on to something. This technique is used widely by performing artists. Your comment shouldn’t be underestimated in my view.
There are also plenty of companies based in the bay area that aren't evil? I'm not suggesting they're necessarily good, but they're not evil.
How does a relational database execute SQL statements and prepared statements
I'm not selling my data for 2$, or 10, or 100. Regardless of that, I still think this is a nice move from amazon.

People complain all the time that companies are stealing their data, then amazon comes in and offers to buy and people complain again... Yeah 2$ is away too low for a lot of people, but it's better than 0 for a start, hoping it will just go up from here.
high end in person public speaking course
Assuming the untrusted and unreliable CA actually follows the rules and publishes things to the CT log.
This was in India so really can't expect much in terms of regulation. The market is flooded with Chinese products that rebadged and sold by local companies.
I believe that any company should provide such an opportunity.
Is it any good? I'll believe it when I hear it.
> what keeps them from creating certificates which claim to be issued before December 1st, even after that date?

See https://groups.google.com/a/mozilla.org/g/dev-security-polic... for the actions proposed depending on how the TrustCor situation plays out:

> If there is reason to believe that the CA has mis-used certificates or the CA backdates certificates to bypass the distrust-after settings, then remove the root certificates from Mozilla’s root store in an expedited timeline, without waiting for the end-entity certificates to expire.

Right now, they're being slowly removed for poor behaviour in general, but there's no direct evidence of abuse of CA powers. If any clear evidence of that appears in future, including backdating certificates, then they'll be completely removed from the trust store immediately.
It isolates USB, PCI devices, hence it does address the hardware insecurity.

Could you give an example where the capability-based security would protect you from some threat, whereas Qubes OS wouldn't?
Why don't PageUp and PageDown work on this website? And why would I consider a tool that breaks a UI tenet in the first second of interaction with its marketing materials?
Maybe I'm born old. But I'm not yet 35 and feel that everything to do with mobile apps was mistake and should have been banned.
Hookers and blow.
Love this explainer.

One thing I noticed that often isn't caught due to platform differences is when "Hide types" is pressed, a scrollbar will appear on most browsers on Windows 10. This draws the eye so harshly that most - if not all - of the magic of the animation is ruined.

I wish that Windows 10 had an option to "hide scrollbars until necessary" like macOS does, but sadly this continues to be a bit of an edge case for FE work.
-- ChatGPT
I think this will only lower traffic to traffic starved local news sites and similar. I don't see this as a win for news organizations. I think google/facebook/etc will just stop aggregating news. They certainly aren't going to be sending billions their way. It's kind of up to those news sites to put in advertising to get value from being on google's news page, google isn't going to pay them and neither is facebook.
It deserves respect
> What I see from TikTok, is a return to the creativity of years ago.

And since Tiktok is barely moderated, we also see a return of the "creative" bullshit. Tide Pods, filing down one's teeth, dancing on graves, licking random public stuff to catch COVID intentionally, the "Skull breaker" challenge...

Tiktok is cancer, and additionally it's spyware of an enemy government. It should be banned.
If you don't then the certificates usually aren't usable at all. All modern browsers should reject certs from any root CA if the cert isn't correctly included in a CT log.
I say the same of "menu apps" in restaurants. This crap existed before the pandemic but covid made's it a million times worse. Jesus Christ am I sick of scanning a QR code and straining at my tiny phone screen to choose my order from a crappy, unresponsive website where each page takes ten seconds to load. How is this possibly an improvement over a paper menu?
I played Emperor: Battle for Dune when it came out in ~2003 and loved it as a child, especially house Ordos and the cobra cannon, but boy, are those some rose tinted glasses.

The switch to an early 3D engine made the game look and feel janky as hell, and you could tell from the lack of polish Westowood was in pain from the EA take over. Placing buildings, moving units across the map, path-finding, everything felt ... unfinished. The low-poly 3D models made everything look like textured cardboard boxes. Hell, even the UI and HUD elements were real time 3D rendered, but really low-poly and fugly. It seemed unnecessary, as if the game devs and designers had no experience yet how to make a 3D RTS game right, but the marketing guys told them everything must be full 3D because every cool game is 3D now. I much would have preferred they stuck with per-rendered 2.5D isometric graphics from the Red Alert 2 engine.

But the story, cut-scenes and missions had me captivated enough to spend too many hours in the game, that had my parents worried. Good times.
Certainly the Chelyabinsk event should give us all some pause.
I'd love to know what you like about Kanbanize. I've tried everything, keep going back to Redmine again and again. Simple _just works_.
this reminds me of the most excellent robert-heinlein book "the moon is a harsh mistress", "we will throw rocks at them" !

highly recommended.
Elon Musk Has Outfitted Twitter’s Headquarters with Bedrooms for Employees
A dongle? I really see no issue currently having bunch of these pieces of metal and plastic that magically allow me to open doors, even if there is power cut or the contract on the lock has run out...
You are too old.

Don't feel bad, though. Be thankful that you do not have to deal with Tiktok addiction.
That's the cost of hosting, not the cost of operations. A business the size of Wikipedia doesn't run itself, and being a nonprofit doesn't magically make operations disappear.
For my own needs, I still self-host and use OpenProject which appears to be this slightly clunky and slow but overall usable Rails app (used Kanboard for more lightweight organizational tasks before that).

Haven't personally used Taiga, so can anyone comment on their impressions, maybe also compared to something like Redmine or Jira? What's good? What's annoying? What's missing?
- If I'm correct, OrganicMaps (and OsmAnd) calculate the route exclusively on your phone, without calling an external server, that's the reason they are slower than MagicEarth.

- MagicEarth has a 2D view, it's in the Settings. Navigation is always track-up if I'm correct, not north-up.
> TLS libraries are terrible at this. Part of it is C: the "integer is the only error type you'll ever need" cannot convey the necessary context, such as which cert is the problem.

Not really; I mean, sure, the validation function will probably rely on returning an integer error code, but there's no reason that the API couldn't also provide a function to retrieve the certificate chain at hand, where an application could walk the chain backwards to the root and figure out the last one (er, or first one, depending on how you look at it) that isn't trusted.

Whether an application would choose to go to the trouble to make use of these APIs is another matter, of course. At any rate, from perspective of the average user, TLS errors are already not so easy to understand, so giving detailed information in this case might not be all that helpful anyway. Just a simple "we don't trust this website, so you shouldn't either" is about as much as most users would understand, probably.