skysight-inc/HackerNews huggingface dataset:
I'm trying to save money with this commute, so getting a motorcycle license + buying up a motorcycle... I'd just rent something. But that's some creative thinking for sure!
I'm not saying that sharing passwords is right, I'm just pointing out that it's not going to stop.
Keyless SSL: The Nitty Gritty Technical Details
I’m sure you could manually remove/bypass the lock.

I’m not quite sure what’s safe about opening a 550 degree oven but is dangerous with a 890 degree one.
This has some desirable security properties, but I would like to see more analysis on the security side (not just: is secure or is not secure).

Passwords:

- Easy to memorize. Pro: Does not rely on a device, can be recovered if devices stolen.

- Easy to phish. Con: Attacker can use a look-a-like page, click-jacking, and pixel extraction (frame stealing) attacks to get password & secret.

- Easy to brute force. Con: Relies on human adherence to password best practices to maintain sufficient entropy. Learning from industry that this does not work in widespread adoption. This will work for certain power users.

Cryptography:

- Uses current state of art algos. Pro: Resistant to access by known methods.

- Will become obsolete. Con: Eventually the secrets will become exposed due to advances in crypt-analysis. Mitigation: Don't store anything to remain secure for decades, shorter lived is okay.

- Secrets are encrypted once. Con: Any issue (there have been many) in WebCrypto implementation at time of encryption can not be fixed by browser upgrade (because of secret caching).

- Secrets can be extracted from page and cracked elsewhere offline. Note: Security features such as timers, throttling, guess limits can not be enforced. They must be implemented e.g. in PBKDF.

Client Side Security:

- Cached objects. Note: For example a web page with browser vulnerability can walk JS objects and get existing secrets. Browser may also cache secrets, passwords, inputs, images to disk where they are not protected.

- Web Browser WebCrypto and Same Origin Bypasses. Pro: Browsers have updates and are constantly being improved to enforce security model. Con: The direction the W3C goes in future (tens of years) is not certain and security model may change. Implementation issues in browser web APIs and Same Origin (common) can put secrets at risk.

- Secret hosting. Con: Hosting content on other servers (e.g. github) may not allow management of access control. For example hosting on one subdomain could now or in future allow JS on sister pages to interact with page and the resources loaded, enabling side-loading attacks in JS. This may not be in control of victim if they uploaded their secret to be hosted by another party.

- Trusted hosting. Con: Any untrusted source of HTML can steal the secrets, e.g. by serving malicious javascript along with the secret. This means the security of the hosting party and trust in the hosting party is required. (Note: this con was added in an edit)
Ask HN: Have you ever intervened over safety when you weren't in charge?
Years ago I was visiting a local robotics team for a meet and greet. There was an adult there acting as the supervision, and the kids were working on getting their robot up and running for a demo. One group was busy on the laptop/joysticks. Another hand their hands on the robot, adjusting pieces of plexiglass that guided balls. From a small demo moments earlier, I learned that the joysticks were VERY sensitive and drove multiple 300 watt motors that drove a chain drive for the wheels. The chain was exposed and there were fingers everywhere. I had a moment of pause and then I just yelled "STOP", startling everyone including the supervisor who was mid-sentence in conversation with me. I slowly unwound the whole situation, turning it into a chat about "culture of safety."

I think about this a lot, specifically because there was about 2 seconds where my brain thought, "I'm not in charge here. I just met everyone. Do I really speak up? Maybe I'm missing something about all of this." After many replays of this scenario over the years, I decided that I would rather embarrass myself horribly than hesitate next time.

Has anything like this happened to you? How did you feel? What did you learn?
The influence of fake news on face-trait learning
Ah. I thought the OP was saying "Americans pronounce it 'me' and that is wrong".

They were saying "Americans pronounce it 'my' and that is wrong".

Got it.
For about 18 months, I commuted from Southern NJ to Wall St, NY. My reason was that I was not going to get another job and start my own business anyway so I just stuck with it till then. On a good day, it was 2.5 hours one way door to door and bad day, 3 hours (drive->bus->walk). You cannot do it for too long for sure. It WILL burn you out no matter how good your commute may be.

Your best bet: If you think you can get into Tech and get a fully remote job, start working on that plan on weekends (week days will be tough due to the nature of your job). Then once u are able to find something, quit. One bright side of your commute is that it is 3 days not all 5 days.
"A Formal Model of Checked C" - https://news.ycombinator.com/item?id=30321535 - 37 comments - 10 months ago

"Checked C" - https://news.ycombinator.com/item?id=26190403 - 133 comments - 2021

"Refactoring the FreeBSD Kernel with Checked C" - https://news.ycombinator.com/item?id=25989115 - 41 comments - 2021

"Achieving Safety Incrementally with Checked C" - https://news.ycombinator.com/item?id=19424106 - 21 comments - 2019

"Checked C: Making C Safer by Extension" - https://news.ycombinator.com/item?id=17939537 - 55 comments - 2018

"Checked C: extension to C that adds static and dynamic checking" - https://news.ycombinator.com/item?id=16588483 - 92 comments - 2018

"Checked C" - https://news.ycombinator.com/item?id=11899925 - 156 comments - 2016
Checked C:

int a[5] = { 0, 1, 2, 3, 4};
_Array_ptr<int> p : count(5) = a; // p points to 5 elements.

My proposal for C:

int a[5] = { 0, 1, 2, 3, 4};
int p[..] = a; // p points to 5 elements.

https://www.digitalmars.com/articles/C-biggest-mistake.html

https://github.com/Microsoft/checkedc/wiki/New-pointer-and-a...
As with anything, just dive in. There are loads of free patterns available online and an equal number of tutorials on YouTube. You can get cheap yarn / hooks from Joanns or Michaels or you can order online.

You're going to make mistakes, get frustrated, have to start over again, etc, etc, but that just means you're learning and are ahead of everyone who still hasn't started.
nice collection, and I feel the search a bit slow when typing, apparently this is caused by a late render update after searching
GitHub's Audit logging is quite lacking, it doesn't include API requests.
> And I very much stand by this and my related points.

You say - "If the country gets its act together...". I think crypto will get its act together and get around the adoption blockers before despot regimes of the world get their act together. Just a gut feeling based on our history so far. I also agree that there will be multiple crypto scams along the way. Such is the allure of the new tech.
Getting diluted for fundraising rounds makes sense. Where it gets shady is getting diluted from additional equity grants to existing founders that are majority shareholders, disguised as e.g. CEO compensation.

Or stuff like the founder's kid gets a large new equity grant for joining to create the company esports team (in a company with nothing to do with esports).
AMS has a good summary: https://blogs.ams.org/mathgradblog/2014/06/29/color-theorem
My Boring yet Modern Data Stack
> Making sure they're aren't a bunch of alloc's or GC spent in the hot path of a high performance library is hardly a premature optimization.

You often don't know the what the hot paths are.
I can't be the only one who thinks this wallet will be emptied before 2023.

Security by obscurity is real, there's nothing secret about defining the problem space in which your attackers can search.
The Early December timeline matches.
On Android. It is a known issue which Mozilla don't seem to intend to fix: https://github.com/mozilla-mobile/fenix/issues/7546
Orthogonal to the Python-specific issues, the problem of "All of my past commits in version control are now broken" is an interesting one.

My first instinct would be to rebase the entire project tree onto a new commit that follows the original addition of the dependency. This isn't a great solution, mostly because git doesn't make such an operation easy, but also because there's something a little spooky about a mass history rewrite like that.
This is still the deadliest airplane accident of all time

https://en.wikipedia.org/wiki/Tenerife_airport_disaster

and is thoroughly attributed to people "not in charge" being deferential to those who were. See also

https://en.wikipedia.org/wiki/Crew_resource_management
I used to rent, and I could take up renting again, but right now I'm saving up 90% of my income. Renting would make me drop that percent to the low 30%. And I don't work in IT + lower incom country salary wise, so I don't expect my salary to substantially go up any time soon. Why do I want to save money? To buy a house. Eventually. In 20 years. Done the math :(
I was actually thinking about 100k squats challenge next year (you read my mind).. as for running and bannana already doing it, that is the way :)
>> The real combined value of all the crypto in the universe is zero. The market just hasn't corrected itself yet.

It’s comments like these that make me happy that Reddit has “RemindMe!”
It also depends what projects you choose. Colorwork generally requires counting and keeping careful track, but there are plenty of projects where you can get away with just stitch markers and occasionally glancing at the pattern.
How did the errors arise, some bug in the theorem prover?
We did that long ago - don’t feed the ones you don’t want.
your interpretation of SPACs seem very cynic

In the end it's just a "shortcut" for a private company to go public by acquiring an already listed company

Retail investors tend to loose, but just the same as they would with a proper IPO or any crypto ICO
I doubt that would work. You can’t decrypt things encrypted 20 years ago on modern API’s because those algorithms are known to be insecure. You’d have to probably rewrite it from scratch or install an old version of the browser. So it’s probably best to keep a windows version of the browser since that’s currently the only OS that can run software from 20 years ago, so hopefully they’ll still be able to do that 20 years from now.
> I don't disagree with anything you've said, and I don't think therapy is useless.

That's really not how you framed your comment.

> There are friends, elders, books, and a number of other ways to climb out of a mental rut.

> I continue to pin the blame on the remote-first nature of society, which seems to make in person interaction secondary.

Which doesn't concern the majority.

> It perpetuates loneliness which perpetuates mental health issues.

You seem to think mental health issues originates in loneliness. I can see how convenient that outlook is but it's nowhere that simple.
Funny enough, the Bible's well enough indexed, and in small enough chunks, that you could just send someone:

Psalms23:2

and have a 14 word passphrase.
Yes because the paraphrase already exists in plain text somewhere public
This is of course true.

But there is a big difference between that which concretely harms you in the moment, and that which makes your home more or less attractive to home buyers.
Maybe in 50 years I'll sound as cringey as Song of the South or something, but I still maintain that gender identity is a created social phenomenon and that encouraging alternative identities is destructive.
You're basically telling them to be sceptical about literally everything. The only people who can reallh know anything happened are the ones who were physically present at the scene and saw it with their own two eyes, at that point. Everyone else just has to blindly pick a side to trust.
Excel warns you and allows you to save it as a CSV. Still annoying but not as bad as it apparently works in Numbers.
I'd call going from nobody ever having been to space to a handful people living in space seasonally for work progress. Define progress?
I agree that the attitude that doing real work is "low class" is disgusting.

I also think the attitude that paying someone to fix your car "is disgraceful" is disgusting.
Mirrors the way that Thiel decided to invest in Palantir in the first place… just ignored the fund direction and didn’t consult LPs before moving the entire thing into a single company:

https://www.twitter.com/HarveySawikin/status/158783411778537...
A direct message is implied to have a certain level of privacy. By definition they are not public.

Mastodon should at least have some way of indicating that the server owners can read their messages.
Best description I've heard for this is "institutional knowledge". It is not uncommon for a workflow/process to be "well documented", but over the course of time, the people that actually do the process have found small little tweaks that are not part of the original documentation nor do they ever get added to the documentation. Due to this, following the directions will never result in what the current workflow does.

You see this a lot in recipes, and I've heard tales of military being susceptible to this, large manufacturing processes, etc where the tweaks are susceptible to being lost if large cutbacks/layoffs were to affect the people with that tribal knowledge.
more (uniquely catalan?) traditions: https://en.wikipedia.org/wiki/Caganer#Controversy_surroundin...
I did this when I was in IT with a kids on its way - just because I was desperate. It was 2.5h one way and I did it 4x a week.

In retrospect I should not have accepted to be treated like that. In short: I stayed 6months and applied every day for jobs in my area and after 1 year I was out with 40% salary jump, 10min bike ride.

My suggestion: Take a notebook: 15min everyday for applications, 45min some work (ask to leave early as you worked in the train). Do the less concentration-heavy stuff on the shorter commute (subway) like mindfulnessapp,prayers,music … whatgets tou grounded and thankful.

Keep going and know it’s temporary - there are plenty of places once you have your 1-2years experience. Maybe think of completing your CS degree or at least some certifications.
Is it 4 GB compressed or uncompressed?

Would it be possible to generate this file (or a file with the same properties) with a short script?
Blasted bugger, I must have saved over $9,000 repairing my 3 old cars with my drive-up ramps.

Nothing like cherry-picking engines, dropping transmissions, and bleeding the lines.

Such a shame, Sacramento.

So glad I moved out sometime ago.
There is no workaround: https://github.com/mozilla-mobile/fenix/issues/7546
30% fuel savings on short haul trips less than whatever 60% of the standard range would be.
>Some secrets don’t belong in your password manager. Things like backup private keys, 2FS recovery keys, wallet keys, safe combinations, treasure maps, etc.

Uh, I put everything in my Keepass safe, then write the password down in an envelope in a secure location in my house.
So what happened after you yelled "stop" and had the safety convo? Did they fix the issue? Did they praise you for your smartness?
I never mentioned the dashboards, I'm on mobile so they weren't loading for me. Also yes, I think I can give a pretty good judgement on the quality of a piece based on simple heuristics like the quality of the hosting site, or the background credentials of the authors.
ChatGPT Can't Write Basic Working Code
Tutte's are the central results in this work
News article here: https://phys.org/news/2022-12-exploring-perceptions-paired-f...
Source that the FBI/Dems/etc only sent dick-pic links to be censored, or proof that the laptop leak contained more than dick pics?

Earlier in this thread you made a claim that the leak was only dick pics, have you read a source which claimed that, or is it only that you haven't seen a source talk about anything else?

There're these, many of which are verified: https://bidenlaptopemails.com/

I don't know the entire contents but it is certainly more than just dick pics. I've heard someone discuss using the dates in those to corroborate other stories which means they aren't just salacious either.
Pretty impressive! + It's open source + we can try this out on our own supported car or a simulator. CommaAI has come a long way
Indeed, it's functionally similar to password-protected PDF or ZIP for some use cases.

You should probably not treat password-protected zips as secure:
https://security.stackexchange.com/questions/35818/are-passw...
My oven actually have some "pizza baking mode" but sadly it half broke, and by that I mean only upper heater works and any mode that enables the bottom one pops fuses.

I'd definitely be looking for something like that in my next one
It can write working code some of the time, just not all of the time.
I've been thinking about something similar, it really should be much easier to send encrypted messages.

I'm not sure if this is a problem, but one thing that is unclear to me is how/if this protects against an adversary that can modify the html file.

If the adversary can modify the HTML file in transit they can just add some code that sends the password to the adversary's server when the real recipient opens the file. (Of course, the recipient can run it in some air gapped browser etc, but that limits the practical use case quite a lot.)

And if you want to use this to send messages over e.g. email this seems like a somewhat important thing to protect against. I guess you could send the portable secret html file separately, and then the user copy-pastes the message in some text-box, but again this makes it more clunky.
They didn’t roll their own crypto? They used the web crypto API provided by the web browser.
I had a friend who was very intelligent, but their family chose to send them to Catholic school for education.

One day, we somehow got on the topic of dinosaurs, and they turned to me with an incredulous look on their face and said, "Wait, dinosaurs are actually real? I thought they were fake, like the Earth isn't actually that old."

Turns out that's what their parents and teachers told them since childhood.
Quiet carriages are sadly not a thing where I live.

Yeah... I am not sure if the investment is worth it into the headphones. I'll think it through.

Honestly, that's a really question. I'd probably watch YouTube, think about the state of my life and do some other similar... Stuff. So I guess really not much different, but my mind cannot relax in a train. Plus I have to drive at the end of my commute through very rural roads, and it's absolutely the worst part of it all.
I cannot understand why you would think so, even in a first world nation.

Who would grow your food? Who would make the tools and fertilizer that enable the farmers to grow your food? The robotics and software that enables those tools and fertilizer to be produce? Who would organize, transport, package, preserve and process the produce so that you can access it?

Apply the same questions to healthcare, education, transport, construction, entertainment, etc.

Some jobs are superfluous and arise out of coordination failure, that's true. Lawyers, administrators, salespeople and parts of finance and the government comes to mind. But "most people could stop working" is an unreasonable assertion.
VueJS Downloads Spiked in December
It’s been a few years since I looked at Vue so I was curious if it was still seeing much growth. Turns out it’s seen a lot of “growth” in the last month. Downloads skyrocketed in December.

Does anyone know why?
And the drugs! They can't open packages without a warrant; UPS and Fedex can.

But really, I use USPS whenever I (rarely) ship things. Patriotism!
> And you know what that is? I hope you are a billionaire.

Implying that your opinions are only valid if you're a billionaire, and that all billionaires have valid opinions?
I applaud this in so many ways... however the realist in me knows that, like most pay phones, this thing will be vandalized in a matter of weeks.
Ask HN: Can you please help me support my tvguide project?
Hi I'm [name redacted], creator of [name and link redacted] tvguide project, been around since may/2016. It's a curated and manually updated content. Currently I'm working on version 2 with more features, like Movies/Collages/Boxsets. It takes a lot of work, but I've been doing it mostly as a hobby. This is the first time ever I'm asking for donations publicly on HN. I could really use your help with donations. [name redacted] never used any advertisments and most traffic is word of mouth users with little to no donations. With your help I can make public website more open to everyone to enjoy. If you are interested in this type of content please consider helping [link redacted]. By making a donation you will receive full account with more features :) Comments are welcome but please be kind, this is the first time I ask for help on HN like this ^_^ Private email comments (in my HN profile page) are okay too. Thank you and happy holidays to everyone!
Isn't that why they've segregated the Da Vinci model and the Codex model for now? If you want to use Codex, then you need to select that model in the dropdown.
Is non-acceptance of evolution any different from believing in a flat Earth?
Ask HN: How do you artifically stress yourself?
I have realized lately that I set deadlines which are beyond possibility, set goals which I always miss.

My mindset earlier was if you aim higher you get more done but lately I am realizing that it is not always true and that has been the reason for stress. I am switching to setting more realistic deadlines and giving myself more slack.

Perhaps both the modes are important but useful depending on how stressed/confident you have been lately.

This made me think, how else do I stress myself out and how others artifically stress themselves out?
Its worse than that. Someone posts a good solution on github as a comment -> 50 ppl create a paper about it on medium.com -> 500 copy-paste websites replicate it to their database of shitty ads ridden sites.

Finding something more complex than few cm deep is becoming a hellish task.

I blame Google for lack of moderation and getting their SOE gamed like a little pipsqueek.

Juniors are dying happy coz of how fast they can find trivial answers.

Seniors get shafted. Its so bad that I started to build my own github repo woth various answers I needed over the years.
Dr. Francis Collins, director of Human Genome Project under President Bill Clinton and director of NIH under Presidents Barak Obama and Joe Biden, wrote a book in which he argues that the Theory of Evolution and Religion do not contradict each other [1].

[1] Francis S. Collins "The Language of God: A Scientist Presents Evidence for Belief", 2006
Getting votes by appealing to pocketbooks is par for the course of politics since forever. Republicans might usually pick up taxes as their chosen tool but it is the same.
All I Want's a Platform