skysight-inc/HackerNews huggingface dataset:
It made me so sad to see how Glass was neglected/spurned by the public. Especially because it had a camera.

I don't think people understand yet that this stuff is inevitable; whether it takes 20 years or 50 years eventually we (or the next generation) will _all_ be wearing these. So why not do it now?

For all the bad it could do, it could do so much more good/be useful. & if people are worried about the cameras on them; they should be worried about the camera that they _can't_ see, like the OmniVision OV6948.
It was worth time enough to write that comment. You could have moved on.
Because you're getting older and and you have - through repeated exposure - learned that having the newest and bestestest and shiniest new toy does not actually change anything in your life and that there are better things to get hung up. Maybe even something where you personally can effect change towards a betterment or life for you and those around you.

Just a thought.
> She called her bank minutes after it happened, but they told her that they are not able to reverse the transaction

Which bank is this?

Why wouldn’t they be able to reverse the transaction?

What do the police say?

Obviously she has contacted the police? as (unlike crypto) the police can get involved.
> I turn the lid down on my laptop and it goes to sleep. It pull it up and the system comes back up. Reliably. Every single time.

Linux does that on my laptop. In fact, I just close the lid, put it in his bag, and forget about it.

The battery does last about 6 hours of coding and browsing. It's not 12 hours like the Apples, but it has been enough for my writing sessions.

I do agree about the junk webcam :/
I only meant IoT devices. Most embedded systems that don't have WiFi/BLE requirements are probably using ARM32, MSP430 or AVR.
Resolution proof does a lot of backtracking, and ends up with "unintuitive" proofs as a result. One thing that's clear enough about this project is that it's trying to avoid general search as much as practically possible.
Which is sad, considering how bad is ESP32 documentation compared to other microcontrollers.
They also wire money to Nigerian fraudsters, get duped into bad house loans and crash their cars. Should we condemn everything as well?

The solution for all these and crypto, is education.
Notebook by the bed helps. If I have an idea while drifting off, there's sometimes a concern that it'll disappear by the morning and that stops me falling asleep. So I write it down.
Yes, although I think it'll be, not because the media apparatus is going to be less lenient, but because they no longer feel the need to restrain their evil.

In this case we also presumably have these companies that replace 'master' with 'main' etc. in technical literature and comments, but which are cooperating with things which may well be actual slavery.
> German was a whisker easier in that I was in german-speaking Austria when I was learning it so I was exposed to the nouns' usage on a daily basis. For me, the real gotchas in German were its damn declensions!

But that's what makes gender more complex in German than Latin languages. It really breaks any level of competency you can have in German. You can write correctly subject verb agreement but put wrong declension and people will think you have no competency in the language.

I have spent way less time learning Spanish (~2.5 years) and it's still much better than my German (on and off for last 7 years). Every time I open my mouth to speak German my head spins around "oh what declension I might be missing". I speak Spanish without having any such thought. The only tricky part of Spanish is subjunctive which I ignore completely.
Money sans "managers" at the top is a system taking the long way to suicide. Money with incompetent managers is a ponzi scheme. Money with excellent management is a cult.
Austin Central Library https://library.austintexas.gov/central-library
Have you tried quitting cold turkey?

Like going to delete your Twitter account right now?
Still happening 10h later. Are there any examples posted or linked to view?
What's funny is that the opposite is true. People will cry about the big obvious camera on the glass, but won't cry about a pair of thick framed but normal looking glasses because they have no idea that it has a camera on it.

As mentioned in another post chuck a OmniVision OV6948 or similar in the glasses and nobody will bat an eye because they simply won't know.
Sounds a bit like the current banking system.
I would expect it to be some kind of OR solver
I sincerely hope HTML snapshot testing is not being sold as a useful testing technique in the front-end world anymore. Edited snapshots are often glanced over in PR reviews especially when they are large and/or there are many of them. Visual Regression Testing (VRT) is more powerful in my opinion because it will flag any changes that will affect the UI.
I don’t know what the analog of VRT is in the infra world but I certainly see folks glancing over giant yaml snapshot diffs much like React component snapshots.
An article about vending machines has no right to be this exciting!
What documentation? (RTOS source code doesn't count!)
I've been using a little 100wh mini 12v UPS from talentcell. I own three and am happy with them.

It has an important caveat though: both the USB and 12v outputs are unregulated, so the device you're feeding into must be able to handle a wider voltage range, or you can buy a fairly cheap ($15 or so) step up/down converter to put in-line with it.
For full stack web developers out there what stack and software architecture would you build this apps in?
Although possible the more common workflow is instead to run VS Code locally on the MacBook Air and use the VS Code Remote SSH extension to edit and run code located on the Linux system.
I think OP is over-egging their point, especially recommending that repos ban reports of ReDoS. This isn't "security noise" to the same degree as "misconfigured" certs, for example.

For many services there is a genuine concern for DoS, and ReDoS really isn't the same as "traditional DoS", because the latter has a vastly larger footprint and far more likely to be engaging is extra criminal activity to set up and execute, and therefore far easier to attribute and later prosecute.

While for a service a ReDoS can be smuggled in easily, from a single source that's easier to mask, and often passed off as "legitimate" traffic / query making it easier to avoid prosecution.

So I think it's going too far to recommend just ignoring all ReDoS.

Certainly projects on a project by project basis should say how much they care about ReDoS and grade the severity based on their own evaluation. For some projects that'll be almost nothing, for others it may be more serious.
Well if power groups block it or make it harder to use you're going to be left with the people who don't care about said rules. Keep something illegal long enough and you're going to have some people breaking the law. Simple to point the finger at them after the fact and go "see? only criminals are doing that"
Also the fact that they use it means that it's working, if anything.
I also can't see a simple way for people who can control the value of money to just give up that power.
Cozy games went from niche to video game fixture
I skim the G most mornings along with a lot of the other big media company's offerings. I read Dobelli's book after reading his Graun article, it's very good! Gave up all news for a year after that, gradually got sucked back into the doom Wurlitzer..
Some could argue that your life savings is also at risk in a bank in high inflationary countries like Turkey or Lebanon. I think bitcoin's main argument in its favor is that its supply is not controlled by bankers.

All the risks associated with holding onto it is worth it to me. Anonymous transactions are not interesting to me personally but complete sovereignty is.

The chances of someone guessing your key are very low. But if you are worried about that then you put the funds into a multi-signature arrangement.

It certainly takes time to understand these things but it's worth it for the benefits it brings. Nobody can steal or tax your funds against your will. If it takes 6 months for an average person to wrap their head around all the concepts it's not the worst thing in the world. It takes 6 months, at least, to learn how to operate a tank. But it does slow adoption rates.
Yeah, I was tired and confused. Google, annoyingly always tries to localize everything (protip: don't do this, google are completely worthless at localization).

96 trillion in Swedish is confusingly enough "96 biljoner" and me not even noticing it was in Swedish.

Yeah I know the comparison is bad. My main point stands though.
It didn't do anything useful because it was a prototype, nobody really got the time to build great apps for it, and it didn't get rejected for anything except: it was bulky (can be solved) and it has a camera on it so privacy implications (ie naive hoomans/public who don't realise this is inevitable/how much they are already being recorded in public).
Investors convert 'worthless' NFTs into tax write-offs
On my very first admin job all the way back in high school the single server with all the schools data had hung. So I power-cycled it only for it to blow the UPS and the fuse. Probably too much dust had accumulated in the PSU and the current surge of booting shorted it out. The following conversation with the adult in charge was not pleasant. When you press the reset button and the lights above go out with a bang - a stressful day.
Only a minor remark: (most) crypto is pseudonymous rather than anonymous. Your spending is public to all and takes little to effort to effectively stalk the more you use it for every day things.
In my experience, more often than not, Amazon ships books with very poor protection, and they arrive a little bent or creased in places. They never used to do this, but now it’s terrible. For that reason, alone, I like to buy books at actual stores.
This is such a cool project! I have to try this out myself
Sadly been going on for a while, there was a BBC story from 2019: https://www.bbc.co.uk/news/technology-50228549
3% to 5% of the entire world's GDP cannot come from organized crime since by definition organized crime operates outside the economy and is unaccounted for: no respectable mobster keeps their double-entry bookkeeping tidy for the IRS.

3-5% of world GDP equivalent value being tied to organized crime could be possible, but seems like a low value, based on how many entities do you include into "organized crime": do you include all the rogue/terrorist states, do you include Russia, do you include money laundering banks like HSBC or ING, do you include tax evasion/fraud schemes (Double Irish With a Dutch Sandwich, or just a plain McSandwich [1]), do you include wage theft, and so forth.

[1] McDonald's to pay France $1.3 billion in tax fraud case https://www.business-standard.com/article/pti-stories/mcdona...
At current raspberry pi prices I'd just get an Odroid H3.
I got off Instagram and Facebook about 2 years ago and never got on Tik-Tok and I can safely say it was one of the best choices I ever made.
I am still on Twitter which I check about once every few days for about 10 minutes.

I realized how my peers (umivesity students) are affected by social media, most of them are endlessly circling instagram and tik-tok every time there is a spare second. Once I got off I discovered how much time it frees up for thinking and/or doing other activities. I get the feeling that people are losing the joy of being alone with one's thoughts.
The hard part of being off social media is the fact that it is such a central part of our social interactions, sometimes I feel "out of the loop" and I still get A LOT of weird looks when I say to people that I am off social media.

All in all I am still convinced that being off social media is a net positive and I definitely advise people to try and see how it works out for them.
I'm honestly surprised by this statement. Why not just use the gem or the remote theme and never even deal with anything that constitutes the theme, except, maybe, the `_config.yml`. I do that quite often when I need to fire up a site.

I know, I'm kinda from the old-school world and Jekyll was magic when it came out. I think I got comfortable.
One of my first jobs involved a company whose systems were written in custom Realia COBOL (for IBM PC, 64kb limits everywhere!), migrating functions out to dBase 3.

This started in 1986? and by 1990 they still hadn't ditched the old stuff but did a synchronization operation between the two database systems every night. It was sort of like replication but with a serial cable involved. Half the staff wouldn't give up the old interfaces.
"lack of any evidence of exploitability" or not detected yet?

I do understand that a CVE can be non pertinent since it could require a technical context, which reasonably cannot exist, to make any "production" exploits using it that "just work".

I guess this is one of them?

At the time I was meeting computer security ppl (decade ago), they told me they usually do not publish "production" exploits, they keep that for themselves or the vendor (if it is listening), but they have some.
I think what's more interesting is whether or not Apple (and Google, and Samsung) can become carriers themselves in the new decade or two. There was a thread on HN in the last few days about space based service for handsets [1] and it's clear Apple is thinking hard about it. Their recent satellite based SOS feels like "1000 songs in your pocket" in terms of early but important steps.

Regardless, I think Apple is getting better at making money off me regardless. Their Apple One subscription is really nice. I pay it quite happily.

1: https://news.ycombinator.com/item?id=34155783
What do you mean exactly by inductive reasoning?

It can translate code from one language to another. Code that it has never seen before. Or between natural language and programming language.

It's certainly not perfect but it is reasoning all right
Abrash's Black Book is worth a read, even if it's not very modern.
Do not go gentle into that good night,

Old age should burn and rave at close of day;

Rage, rage against the dying of the light.
Fritzboxes have the best non-OpenWRT OS IMHO
Most probably it will solve itself.
Altavista was a useful search engine until it was not, than it was replaced by google.
Google was a useful search engine and its getting primed for a replacement.
Usually things do not pan out as Utopia or Dystopia but some human middle ground of kinda shitty balance :)
> legally-obtained curated collection

In the US and many other Western countries (mostly forced by the US), circumventing or otherwise removing DRM is illegal in and of itself, even for personal use.

I like Kobo's devices for the most part, but I've only ever used KOReader on them. Kobo software seems to contain telemetry. As a side note, you can circumvent the registration requirement after wiping the reader by inserting an entry to a sqlite3 db, thus allowing your reader to be unaccounted for by Kobo or Google Analytics.
That's a really bad attitude. I ran into a bug in NPM that prevented our CI builds running entirely.

That NPM bug still isn't fixed (despite the bug having minor security implications), but there's no way I'm re-writing everything to not use NPM, it would be absurd, nor is it sensible to fork NPM and invest time into fixing the bug.

I ended up putting in effort to work around the bug entirely, but it was only coincidence that we could go without the feature that triggered the bug because we were going to deprecate that module anyway.

Are you really suggesting that developers don't "lock themselves in" to NPM? It's one of the most prolific projects that exists and it would be career limiting to avoid using a package manager or all dependencies entirely.
I'm not aware that Vietnam has anything to do with it. Laos, Cambodia and Thailand are better integrated.
Did the github issue mention "Dude reuses a private key all over the place" or is that information from somewhere else?
It isnt 2005 anymore. Old hardware nowadays is "Lot of 5 LENOVO THINKPAD YOGA 260 i3-6100U 4GB Ram 128GB SSD Cracked Screens" coming down to $40 a pop. 2x TDP (15W vs 7.5 of rpi4) but at the same time >2x CPU power, >10x GPU power. Not to mention you get real SATA SSD storage, real DDR4 sodimm slot, keyboard, and battery backup.
> real people

There's a lot of braindead crypto hate on HN, but these are very real and salient points.

I work in IT. I have to reset people's passwords after a 3day weekend. The other day, an employee typed their password into a phishing email because the real person they were emailing got compromised in the middle of their email exchange.

Crypto banking is simply a nonstarter for these people. There was an article on HN about how scammers cost 10B$ last year. A bank where mistakes are permanent and irreversible will never be mainstream.
It's not that different in Singapore which is supposedly a much more humane nation.
This one - there are a billion knockoffs so anything on amazon that looks similar has a good chance of working

https://smile.amazon.co.uk/gp/product/B0B6CBBP8R

Also got myself a hdmi to DP cable but pure hdmi seems more stable.

The usb power thing was a bit more tricky. I went with this one

https://www.tindie.com/products/8086net/usb-cpwr-splitter/
The timetable is here, the train leaves Brussels at 19:22.

London to Brussels is only 2 hours, so ideally you'd want a train arriving at Brussels at about 19:00. With the current timetable, the train from London arrives at 18:05, which is hardly ideal.

(However, I don't see any promotion of the connection to London on the website.)

https://www.europeansleeper.eu/en/coming-soon
I loved the vending machine game of Japan. It was incredible to be able to get water or other drinks basically anywhere. Even in the most remote places there was a vending machine. They always worked flawlessly as well.
Can it really be called a black market if it's on both official app stores? Seems more like a grey market.
But what would you use crypto for, then? Any transaction you perform with your coins could be a proxy transaction for dollars; buy car with PretendCoin, sell car for USD.

Why would anyone accept a currency that can't be traded for anything else?
Coinbase is losing money hand over fist, even while doing everything right.
Where the bank was based? Not all jurisdictions have the same banking standards.
Would you (or your company) host your own document signing if you could?
Would you (or the company you work for) self-host a document signing solution if that were an option? I find it really weird, that there seems to be no obvious option to do so, in a space that so obviously has reason to.

Disclaimer: I recently started Documenso
I couldn't bother reading to the end because of how much it beats around the bush.

Also, the article doesn't really align with my own understanding and misses a key term: complexity - that's what we abstract.

Abstraction is simply the process of hiding complexity by replacing something complex with something simpler that can better fit in our brains. We abstract complexity all the time, in all aspects of our lives, both consciously and subconsciously. It's not a trait exclusive of software engineering.
Restic works on windows.
After over 3 years of using an iPhone xs I bought a galaxy fold 4 lol. My desire for a weird gadget phone has been quenched for now, but because I am a huge fan of Apple watches, I havent gotten rid of my iPhone yet lol
Genau!
This post reminded me I haven't looked at Facebook for a month or so (the frequency dropped hard after I stopped doing it every day). I saw about 5 ads in 3 min, reported 2 of them for misleading content. Nice. See you in a month or so (for some updates from my brother mostly).
Monero isn't traceable on the ledger, so the most the government can know is that you buy and sell things via exchanges.
AoC is somewhat more difficult, but is it worth a blog post? Especially for a professor?
The stats https://adventofcode.com/2022/stats show that there are ~9000 people who solved all of the problems. Even if a fraction of those wrote a "I solved 25 problems" blog post, there'd be HN front-page material for months.

P.S. I'm somewhat surprised by this community's adoration of AoC and at the same time aversion to Leetcode and/or competitive programming in general. Arguably, many leetcode problems are more interesting (from an algorithmic point of view), are much shorter (although I guess for some, part of the fun of AoC is the elaborate story), and most importantly, have extensive test cases, that require generalized solutions.
Vulnerabilities are bugs a threat actor can abuse to compromise a security state of a program. Vulnerability IDs are not issued unilaterally, the vendor must acknowledge it as one or respond explaining why it is not.

Given all that, the incentives OP talks about are rightfully aligned. People spending time finding security issues deserve recognition. Finding a lot of small vulns is as valuable as finding a few vulns, specifically because they are not just bugs but something a malicious actor can use to harm the user of the product.

Many researchers get the "it's a feature not a bug" or rather it is a bug but not a vulnerability response. A software maintainer can do that with these bugs the author is talking about. Just another git issue to resolve eventually.

Since these are *Dos vulns, the specific security property affected is availability. Does the reported bug allow a hostile actor to reduce the availability of the software, given users of the software have a reasonable expectation of the software being available? If so, then treat it seriously as a security vuln with the right severity, else reply stating you will fix or not fix the bug but it isn't a vulnerability.

This isn't different than people opening git issues for small things.

Also, since having a good reputation is a (correct) incentive, having a reputation for creating frivulous vuln reports is very bad. No one wants to be the researcher who cried wolf.
Is it age? I agree with the idea here (though I never really had an iPhone or queued up for hours for something), and I wonder if it's that I went from teenager to graduate through the 2010s. Somewhere either slightly before or during university (graduated 2017) I too stopped caring about this stuff.

But I wonder if today's young teenagers are just as excited?
The European winter started early in some parts, and electricity hasn't been as available as expected. Lots of people have turned off their electric heaters and heat with fuel oil in order to reduce costs. Several older plants have also been firee up to cover for off-line nuclear reactors and gas turbines.
No-code tools and applications come in a wide variety, and market analysts anticipate further expansion. No-code tools and software developers will coexist in the world of software development.
No, but the author doesn't make that claim either.
Not anywhere in Europe. People tend to sell used stuff for more than the new. Maybe I'm looking in all the wrong places.
This is why I hope Elon does burn Twitter to the ground, whether or not he means to.

On net, I believe it makes the world worse. Even if there are some who benefit from it, I think it's at the expense of far too many other people to be worth the cost.
Well, the fact that google and apple have slave marketplaces in their app stores should be of relevance to the many google/apple employees that frequent this site.
Probably because the raw data is often hidden from the readers so it’s hard to corroborate a stories statistical narrative.

Here is the data which backs up the majority of these low effort cancellation related news articles.

https://public.tableau.com/app/profile/flightaware/viz/Airli...