skysight-inc/HackerNews huggingface dataset:
Well... SSL was unsafe then.

The problem came from U.S. cryptography export regulation which makes exportable cryptographic algorithm feasible to crack. Bundled Internet Explorer didn't support good algorithms on SSL.

So, South Korea government wanted to add another security layer. They wanted to state "good to go" algorithm (just like FIPS did), so they built and recommended the encryption algorithm, SEED. And it required ActiveX, because 128 bits cryptography on JavaScript was infeasible then.

The real problem of South Korea is, the slowness of deprecation.

They deprecated ActiveX (and created NPAPI or WebSocket on localhost) in 2014. After Microsoft deprecated Windows XP, they established "Windows XP Task Forse" to respond security issues with Windows XP computers on government agencies. Yeah, this was fairly late, considering MS declared the Windows XP deprecation schedule in 2007.

IE/ActiveX/Java Applet/etc algorithms aren't still completely deprecated in Korea. NEIS, a giantic service used by every K-12 school to record and manage education-related information, still uses the technology based on Internet Explorer by using IE compatibility mode of MS Edge. Repeat, EVERY K-12 school teacher and staff uses this service, with IE compatibility mode.

I want South Korea to adapt new technology and deprecate old one more in due course. I mean, they should accept TLS provides decent end-to-end encrpytion, and they should recognize Triple DES is deemed unsafe algorithm.
We all need subtitles now
I feel it’s important to properly look at the context of the layoffs.

The original article leads with mentioning the recent layoffs at Microsoft, Google, and Amazon. These are people who were making great money, and now have those companies on their resumes. I know they’re currently going through a rough situation, which should not be minimized.

It’s hard to take your argument seriously though, as there’s so much space between FAANG execs with 8 figure savings, FAANG workers making 200k+, and poverty. Being realistic about this helps your argument that those companies could have done better, not the exaggeration.
Debian testing will feel very like an Ubuntu install that doesn't crash on you. One package manager instead of N. Occasionally third party repos only package for Ubuntu, though they're likely to work about as well on Debian as they do on Ubuntu anyway.

For a long time Debian refused to bundle closed source firmware with the installer but they've relented on that now.

The holdout I know of is Ubuntu have zfs in the kernel and Debian as a package. That seems to make no difference in practice.
I don't understand what you're saying:

> people pushing the idea that diet / food restriction alone is sufficient for weight loss

Diet/food restriction alone is strictly sufficient for weight loss: I'm pretty sure this is uncontroversially true, but it sounds like you're saying it isn't. Am I misunderstanding you?
I'd imagine any company trying to contribute to android would nope the fuck out of even trying to contribute to any google-led project.

Also it appears to be in the weird niche between "big" OSes like Linux and "microncontroller/embedded OSes" like FreeRTOS or seL4, with outward-facing features begin "It's from google" and "it's new"
Don't make the company part of your identity! You are a disposable hired gun. People need to get real, no one ever promised these people lifelong job security and they had no business expecting it. 16 years is long enough to have survived 2008/9: if you went through that and still thought the company cared about it's employees, I have no sympathy.
I think this is a little less bad in context: in 2005 Gmail was a year old. Most people used a dedicated email client app such as Outlook or Mail.app so in your flow it would be far more defensible and his view was focused on corporate users. That makes the first point a little more reasonable:

1. Your desktop application shows a list of attachments in the navigation chrome where a message can't display content.

2. When you click on something in that list, Internet Explorer or Firefox seamlessly logs you into the server using Active Directory.

Storing things on a server was also more relevant in the era where space was limited and services like Exchange were famously difficult to scale or customize. If you didn't have good tools to retroactively yank a message out of everyone's inbox when your AV signatures were updated an hour after it arrived, storing it on a server you controlled had a certain practicality.

Your second and third points are spot-on, however, and really hit at a key principle too few security teams appreciate: normalization of deviance. This approach fails badly in the real world where IT security says “don't open attachments from people you don't know” and everyone's manager says “oh, it's totally normal to get passworded ZIP files from the HR services subcontractor. Open it, we have a deadline!”. The real lesson here should be defense in depth so your organization's security isn't jeopardized when one person opens the wrong email.
I like it "better this way" conceptually, in that I like browsing with w3m/lynx/links/eww/etc but the content structure is bad "this way" (ex: scrolling past site nav links too much before I reach actual content; most of the vertical nav should and would be horizontal if this weren't a bug; etc).
But isn't that sort of true? How can I know what self signed certs to accept and which ones to reject as scam attempts?
The problem with ASINs is that they are not unique within amazon marketplaces. So B0000001 could be a toy in USA and a Book in Germany.
> have a really good iPhone pin

iPhone PIN ? Say what now ?

Only fools use PINs.

iPhones have supported keyboard entry for passwords for a very very very very long time now. And more recently, TouchID and FaceID, of course.

You can also configure iOS to erase after n incorrect entries.

At this point in time, you get what you deserve if you still use numeric PINs.
Possible, the file is tagged 1991. Could be a scan from a 1991 revision of the 1961 book?
I thought this was solved by introducing seaweed into the feed. Unfortunate, of course, that we contaminated the ocean with microplastic.
> You can't kill the whole project without a plan for those devices.

looks at the graveyard of past Google projects

Which isn't to say you don't have a point, but Google do have form in killing stuff just like that.
I'm assuming you're talking about PS4 and Xbox One. If so, they used a much simpler and lower-power architecture than Bulldozer that was initially intended for netbooks and tablets.

https://en.wikipedia.org/wiki/Jaguar_(microarchitecture)
Very cool looking sff case https://thor-zone.com/mini-itx/
I hate it as well but at this point, I think the cat's out of the bag. I think it's unlikely that legislation will be able to curtail any copyright infringement.
Actually they require less safety features (they don't need to be crash-safe) and can use heavier batteries and components. Which should make them cheaper than EV's batteries in theory.
But that market is in early stages with all associated downsides of early adoption, I agree with that.
this is.... awesome.
> it's still a priority but then you just made execution wayyy slower.

I think in this case, letting go of the most senior decision makers may actually speed things up. Even letting go of senior talent may cause the upcoming engineers to grow faster and better. New nimble team that much rather fail fast than ponder long over what succeeds.

This might be a positive pruning. But yes letting go of staff is a short term loss. Hoping for the best in their future.
> The web is the only credibly neutral platform humanity has. If you get rid of the web then all software that humans interact with will be controlled by one of a small handful of giant corporations

The following things have been pushed and enabled by a single web ad agency with complete disregard to concerns and objections: WebUSB, WebBluetooth, WebSerial, WebMIDI. There are countless others.

The web hasn't been neutral for a very long time. Google believes the web is it's own playground now.
That was added after the developers of Toot! (iOS app) claimed Pleroma was at fault for it not working with their app because they implemented MastoAPI wrong.

Toot! seems to work with Akkoma/Pleroma now, but notifications are still somewhat lossy.
This is not a meme but basic physics. This is how you do your cut and bulk cycles to lose and gain exactly a planned amount of weight. My base energy expenditure is relatively low at around 1800 kcal. If I eat 2000 kcal I will gain around 1 kg in 35 days (1 kg of fat is a 7000 kcal surplus), and similarly I could lose 1 by eating 1600 kcal. For finding sources look up "TDEE".

Weight loss is complicated because of the added dimension of satiety. If I eat proteins, vegetables and fats without counting I'll be around my baseline. But with sugar and carbs it's impossible to not overshoot without being terribly hungry. Also with less insulin sensitivity found in obese/pre-diabetics people, ingested food can not be efficiently used and end up stored, leading to the vicious cycle of being tired and still hungry.
Show HN: Terrahaxs – Terraform CI/CD
I'm working on an alternative to Atlantis that you can setup in under 15 minutes.

Terrahaxs eliminates maintenance costs if you use the fully hosted version but also allows you to run your Terraform workflows on GitHub Actions or a self-hosted runner (much easier to configure and deploy than Atlantis).

Terrahaxs also runs plans/applies in parallel and returned the results of 100 different projects in less than two minutes.

I'm looking for early adopters/beta testers and would love any feedback!
And how it runs the chrome browser better than Linux? That's the question. Saving a meg of memory for OS doesn't matter once you start running hundreds of megs of code, and different, less popular kernel just means less drivers and harder onboarding for any developer
Did you get the HN hug of death? I've tried asking it some questions about Atomic Habits, but I just get an infinite spinner after submitting a message and a HTTP 500 response.
That situation was pretty normal if you used Macs back in the day, for many workflows. Virtual PC on PPC Macs were a godsend in many situations in the late 1990s.
The difference is that a human made the artistic stroke-for-stroke reproduction through human skill and expertise. Even a counterfeit painting is an exercise of perception and interpretation. The value is in the human's hand in the output.
Overall I like the idea of this site, however in order for it to succeed it needs input from users. Right now I found a few tips that are factually incorrect, outdated or lack explanation.

Some examples:

https://bestcodingpractices.dev/catalog/62bc16cf5029ab9ca974...

https://bestcodingpractices.dev/catalog/62bc16cf5029ab9ca974...

https://bestcodingpractices.dev/catalog/62bc16cf5029ab9ca974...

https://bestcodingpractices.dev/catalog/62bc16cf5029ab9ca974...

https://bestcodingpractices.dev/catalog/62bc16cf5029ab9ca974...

https://bestcodingpractices.dev/catalog/62bc16cf5029ab9ca974...
And my stance against "cloud based password managers" -- and really, paid password managers -- is vindicated. Never!

I have evolved a little on using software to track passwords though, and I'm using Unix Pass quite happily now. It's just a short bash script that is very readable, and uses GPG as a backend.

Edit: What's doubly nice is how elegantly it scales from a simple folder of gpg encrypted text files to a multi user synchronized git repository on everyone's phone.

But all that's optional, and only requires you to trust other tools that you already regularly depend on.
It can easily be polished and that _does_ take work. So it's not zero effort. Yes, there will be a lot of generated content and that will probably lead to a recalibration of what's important and what not (in life, work, art, etc).
Of course one issue here is while it's probably acceptable for South Koreans to trust Chrome, Windows, MacOS, Android and iOS (and also Intel and Ryzen CPUs), it's probably not for their biggest companies (including banks ?) and their government whose security threat likely includes US espionage.

And yes, this might seem silly considering the garbage fire revealed by TFA, but maybe they can use this crisis to jump one extra generation over that security threat too ?
It usually trends to the way over time.

When you're demonstrating or studying a tech (like we're doing with gpt now), there's a tendency to go "here's what it can do." Once people start using it for more mundane work, the focus becomes "here's what I can do with it."

It probably doesn't matter what children's stories language models can write themselves. It matters what stories people can write using them. Same for software/graphic design/law/etc. These are just tech demos.

This becomes clearer once demos play out. 2 years ago, scripting a philosophical debate using language models felt like AIs expressing their opinion. By now, we're past that.
FFI overhead
As a long time KeePass user, I throw in KeePassXC. Much more polished.
I think they're a lot more natural than you make it sound. I mean we have denonyms from placenames. Some of them are fairly rote (newyorker, londoner, dubliner), some take some imagination (okie, mackem, geordie).

I really don't see why this is any different?
> The business case is obvious: Google has little control over Android due to historical licensing and external dependencies (Java is the big one). Building their own OS with its own user space gives them the same control Apple has over iOS

If that was the goal they don't need to make new kernel to make new userspace.

They can just make new userspace, like they did when they created the android in the first place.
Activist investors pressure management to deliver more profits to investors. That's a narrow definition of "improvement". Doesn't matter who they represent, robbing Peter to pay Paul doesn't make you right.
Why are so many steel bridges painted green?
HTML:

<link rel="stylesheet" href="/2008/site/css/minimum" type="text/css" media="all" />
<style type="text/css" media="print, screen and (min-width: 481px)">
/*<![CDATA[*/
@import url("/2008/site/css/advanced");
/*]]>*/
</style>
<link href="/2008/site/css/minimum" rel="stylesheet" type="text/css" media="only screen and (max-width: 480px)" />
<meta name="viewport" content="width=device-width" />
<link rel="stylesheet" href="/2008/site/css/print" type="text/css" media="print" />

/2008/site/css/minimum headers:

Content-Type: text/css;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
content-location: minimum.css.gz
vary: negotiate,Accept-Encoding

Downloading this file, I can see it's valid "gzip compressed data".

Seems to be missing the Content-Encoding header?!
Firefox Multi-Account Containers extension. I couldn't live without it.
This isn't really news and the trends recorded are very minor, if they even exist at all.

Most workers have never been engaged. This has always been true. Blaming remote work is the same lazy management attitude that has kept people disengaged for decades.
Post FTX DeFi might be the solution but not without insurance
I can't stand all the beating around the bush language.

All stuff like "best wishes to those impacted by the course correction in our employee base".

Like they aren't just numbers or human resources, it's real people losing their jobs and facing difficult situations with work visas, mortgages, etc. - the same people who have helped build the products they work on.

It's isn't an unfortunate natural disaster but a deliberate decision made by executives, where in the majority of cases it's just that the rate of growth of profit has fallen - nowhere near severe losses and economic trouble.
So then found objects and ready-mades are also a trivial endeavour?
These authors published one of the first stories like that and that alone makes it not trivial.
Capitalism is a necessary but not sufficient condition for a free market.
This is the moat.

I don't really want to use LinkedIn often, but it is helpful when I need to. I definitely don't want to rebuild my professional network on a new platform.
very nice.. how can I test it?
I wouldn't trust any 3d printed filament for any serious hammering tasks. Assuming you have the strength to heft it, I'd go with thick old-growth oak screwed directly into the motherboard. A steel handle might offer better heat dissipation but falls down on aesthetic and battle-comfort grounds.
That's a wonderfully simple explanation. Thanks!
In Sweden it's the same. There are two types, the first one is the one you describe where you put the (chip) Visa / Mastercard / Maestro card. The other kind is just number pad + 7-segment LED. Even when using the (bank cooperation issued) smartphone ID app, you have to first sign some cryptography keys with your hardware fob.
With that setup, you can pretty much play almost all modern games too. I just built a very similar setup using the Lian Li A4 H20 and works just fine.
Well, interest rates. But that’s driven by inflation.
Not precisely, but if you had 50 documents in that 1000-dimensional embedding and you reduced the dimensions to three and still got at least the exact same nearest neighbor ordering then it would at least still function, right?

I guess the problem is taking a new document (like a search term) in the higher dimensional embedding and reducing it to three dimensions for searching in that reduced space and expecting that to also maintain the same nearest neighbor ordering.
There's no definitive answer for that, but I'll try to answer with the rest of your post in mind and take this as "Which is the best coding language for learning to code?"

The possibilities here are endless, but whenever I'm actually asked this question, the first thing I personally go by is my perception of what kind of person I'm talking to:

Are you a "bottom-up" learner, where they want to start at the very building blocks of how things work? I might recommend C or C++ (or maybe Rust, now?), and a book or two. Are you a "fast feedback" learner, where you need some kind of immediate feedback to whatever you're writing to stay motivated, and want to iterate and figure things out fast? Python or JS come to mind there (which will likely make the learning process more "top down", where you go from "just make something happen" and then dig deeper into why things actually work the way they do, data structures, the underlying type system, etc.)

Somewhere in the middle (in my mind) is my personal favorite language, Go: not bloated, does not abstract away too much, great for learning the building blocks of programming but not as intimidating as C++ or Rust can be. It does require potentially a _little_ more environment setup than something like JS or even Python, which usually comes pre-installed on the OS. But Go's amazing test tooling makes it a joy to write code and get fast feedback with basic test scripts.

I think you should pick the language that will keep you interested and motivated the most. Learning to code can be a very rewarding and very frustrating experience. Starting with a language that isn't conducive to your learning style can make it difficult to stick with.

As a real-life example:

When my boyfriend asked this a few years ago, he seemed like the kind of person who would like to see progress fast: open an editor, play around, and see something come out. For him, I suggested Python. I could have also recommended JS if he had seemed like more of a "I want to see something visual in a browser vs a terminal" type of guy, but he was happy with feedback from the terminal and I thought Python was a decent starting point. After exploring programming with Python, he ended up going to university for computer science and is now in his first job as an SE, so I think it worked!

Good luck!
The Price Is Wrong in Online Dating
Okay that's fair enough that it might eat some jobs, although I don't think the AI will get good enough to replace dev jobs. For copywriting I think that it's likely that it may divide the work to 2 segments - "very cheap but comparatively low quality" one and one where it's actual human work, who may or may not use AI to increase own work efficiency. Anyhow - I see it as a tool, rather than replacement - and isn't that great that we are getting more and more potent tools? Same goes with google translate at the moment, it's translations are good enough to convey the thing that you want to say in other language, but it's far from good quality translation. I think it's awesome that people and companies can communicate without language barrier and without breaking the bank for it, especially if someone is on low budget. Professionally translated message is still better than machine translated one, even though the tech had many years to mature.

I know that that's neighter here or there - but my biggest worry with AI is completely different - it isn't big stretch if the tech progresses that it could be used to check on our private communications, to for example probe if we aren't speaking a thing that given corporation disagrees with at given moment. Otherwise they would need a lot of manual labor for that.
I would also add that hit has a better chance of improving overall metabolic health raising resting metabolic rate and allowing you to eat more in the long run. Short run, low and slow will increase total daily expected expenditure but hit is a better long term investment.
Some softwares: Yes. People with Mac are advised/forced to use Windows. For instance, Uwayapply, a college admission application service, doesn't support macOS.

Or: they provide .pkg file to install similar program.

Most of them want sudo. They use root permission for various purpose, but the most impressive one for me was registering their CA certificate on Firefox root store, to support WebSocket over TLS to localhost on Firefox.
https://archive.ph/nSHN8
Everyone is one health crisis away from death, no matter how much wealth they have.

Whatever your complaints here are, start with having people working at a job where there is literally no-one willing to stand up and pay them their salary. That isn't going to be a society that can comfortably sustain people being unable to work. To have the level of surplus where a healthcare crisis is easily dismissed requires extreme economic efficiency.

If you want someone to be unable to work and just sitting around dealing with a personal crisis, then we really need the people around them to be working on things that get a "wow, yeah, that is important!" type reaction.
U3D: Creating the Future for Urho3D
> But what is not debatable, any 15-year-old kid in his bedroom can create magic at no cost except his time.

This is so much funnier when read out of context
> 1. Default deny is one of the oldest best practices in security engineering; it barely needed saying in 1995 (but Cheswick & Bellovin said exactly that in Firewalls & Internet Security).

I agree with this as the theoretical grounding and certainly wouldn't say that this was especially insightful but I can understand why he said it if he was encountering a long tail of obsolete advice similar to what several places I worked were hearing at the time. I think one of the big problems was simply inertia: I remember the Cisco guys at one job saying they didn't want to do a default-deny policy because it was too much work to switch and they weren't sure if the hardware could handle that many rules.
Another good resource is Jeremy Fielding's YT channel.
Now I can read it in Emacs
For that you already have PowerQuery on Excel.

As for being better, F# is better on the language level, but sadly sucks on the tooling effort for .NET frameworks, that Microsoft is willing to spend on it.