skysight-inc/HackerNews huggingface dataset:
Air source + natural gas for when it’s that cold is still cheaper than ground source.
The only Windows-only/Windows-specific features that I'm aware of are "Group Policy Configuration" and "IE Mode" and both of those are limited to Domain-joined machines and targeted only at Enterprise users (and specifically, if you are feeling nasty about it, only at making Enterprise users' experiences worse).
ChatGPT really missed the boat to sell crypto, could have funded itself that way.
> Among adult Americans, only a third have bachelors degrees

Sure, but this is very skewed by older Americans having low rates of degrees. A lot more than 33% of current American 24 year-olds have Bachelors degrees. And that more accurately reflects the expectations on teenagers than low rates of degrees among Boomers.
Yes and no. Yes in the sense that you can't take the human being out of the moderator, nor would it be good to try. No in the sense that I'm not moderating HN just according to my personal interests—it would be very different if I did. As a matter of fact, I spend every day denying my own preferences about HN. That doesn't make me objective (far from it), but I do at least have a lot of practice.

It's a matter of striking a balance: holding space for what the community finds interesting* while allowing for a certain amount of idiosyncracy and unpredictability, but not too much. Without that, things would be more humdrum and therefore less interesting. There are tradeoffs along every conceivable axis with this thing.

* (note: community is not the same as commenters because most readers don't comment)
Ask HN: Recommend REST C++ web server which companies use in production?
Hello all

I trying to make Research on c++ HTTP ( supporing ssl ) REST server ,
yes i can see many in github

But i need to find server which is trully used by companies and is proven in the indestry

like spring.boot/tomcat/node/WSGI

Thanks alot for your help
Author is doing nothing wrong, not even in tone.

One could argue that demanding something of a developer of software you don't pay for is the jerk move.

FDroid still has the option to remove the app. Author appears to be okay with that. No issue, unless you are demanding something of the developer.

Freedom cuts both ways, both for the user and the developer.
I'd say one difference between reddit mods and the police is that the stakes are really low on reddit.

Arguing or getting upset about mod decisions gives off strong "fight with the bouncer" vibes. Even if you're right, there's no way to "win". The best course of action is to just quietly move on.
sigh

What point are you trying to drive here?
Nature: What ChatGPT and generative AI means for science
Wheat is self pollinating so not a good example. Do you have watermelons? Those depend on bees.
Reminds me of the "That doesn't look like anything to me" line in the Westworld TV show, where the AIs are unable to perceive things that reveal their own nature as robots to them.
I think you missed my entire point then.

> HN's moderation is run by HN

No, it's run by a few humans.

> The rules are applied consistently

Yes, because those humans are awesome and consistent.

> because there are are no third party mods or rules.

That's not why reddit is different. It's because a lot of the humans that run the subreddits are inconsistent.

But some run their subreddits just like HN.

If you think of HN as a well run subreddit it makes more sense.
Twitter laid him off while home in Australia. Now he can't return to the US
Edit: my bad, +ssh-rsa refers to a signature algorithm using SHA1, which should not be used anymore. Target server host keys should be renewed, as told by riolu, thanks to him for pointing it.

On debian-like, remove host keys and run dpkg-configure openssh-server.

On redhat-like, remove host keys and restart sshd.

---------------------------------------------

Not vulnerable, not a bad practice. Newer algorithms are faster (in practice not perceptible, people usually don't need state of the art performance for SSH connections), with smaller keys and probably better algorithms (not subject to side channel attacks, which are still hard to abuse) but RSA is not broken. It may be in a few years with quantum computing but it's still far to be sure.

https://www.schneier.com/blog/archives/2021/03/no-rsa-is-not... updated last december.

No need to rekey all accounts or servers, just switch to ecdsa or ed25519 progressively.
Twitter Kept Entire ‘Database’ of Republican Requests to Censor Posts
PSA: *Please* don't brigade the Github issue of the app. It's not productive, doesn't help anyone, and can only make things worse for both sides.
Yeah, this is exactly what I was thinking. Why not just bring back ActiveX?
Google veteran of 18 years leaving to start A.I. company with Bret Taylor
Windows 10 is going to be my last windows with how MS is acting.

10 was annoying enough to configure to disable so much cruft, get back a decent startbar, disable all the telemetry etc, and much of it still sucks like not being able to have control over updates.

11 with forcing an account, forcing updates, stupid shit like nerfing the taskbar etc...there is just no need for it anymore.

Games run fine on Linux via proton, or the ones I want to play at least. The rest of my toolchain and app library is all opensource stuff that runs on *nix.

NetBSD or Void Linux with a custom configured AwesomeWM setup here I come.
Who decides what's disinformation?
Note: They appear to be a moderator of the F-Droid IRC, so while not project leadership, not totally unaffiliated either.
I’m really with you that “it makes a good headline but isn’t all it’s worked up to be” I just wanted to get the biological inspiration correct.

If it really is all it’s worked up to be, this could be revolutionary (and therefore, it’s too good to be true).

In general though, don’t get me started lol. I used to work for the human connectome project, scanning human brain network-mappings. It’s years down the road before we can image individual neurons non-invasively, but I’m itching to scan my own neural network into the matrix.
Open-Source Virtualization – Getting Started with Bhyve in FreeBSD
If I want to know the monthly payment on a $500,000 mortgage for 30 years at 6%, should I use:

1. Decimal math

2. Binary floating point math

3. Domain knowledge trumps all; it makes no difference
> Things only started getting better when I started seeing a therapist and worked on my issues over the second half of my high school experience.

I'm curious, would you mind sharing how a therapist helped you? I'm in a similar (but not the same) space mentally, and put everything down to environmental issues (high pressure job, etc) and disregard the thought that a therapist could help with this (unless they had a time machine, etc).
Good reminder that a simple message asking someone to pull from your branch is already a pull request (the other person can literally `git pull $URL $BRANCH`).

Nowadays everyone already assumes that "pull request" = "web-based code review interface with a button to merge", and I find that unfortunate, but such change of meanings are common and we can only accept them.

But it still makes communication unnecessarily complicated when people have that assumption.

Like, if I host my code with cgit, I bet there's a whole generation of developers that don't even know they can clone my code, host it in their GitHub accounts, and send me a message telling me "hey, I forked your repo, you can pull the commits from my GitHub account if you want".

No need to mess with `git request-pull`, or even email at all.
> A dumb phone - small and minimal functionality, easy to forget about

This requires more diligence, but can't you create the experience you want on a smart phone (no social media, disable all notifications, etc.) without giving up utilities that provide actual value, such as GPS / navigation?

> Exercise - no headphones, a gym provides background music and enough human contact to keep boredom at bay

Interesting. I feel like I am more distracted and unfocused when I listen to the gym's music (sometimes their music just doesn't match the intensity of the workout) or when I socialize between workouts.
Looks like the only 100% benefactor of this is Ukraine. Russia now must pump all its gas to Europe through Ukraine. And they are already at war with Russia, so there is no risk of escalation. And they have pulled other impressive stunts no one believed were possible, like Moscow cruiser, Kerch bridge, Engels airport. They kept it secret because didn't want to alienate Germany.
The HN guidelines are clear about political topics.

Is there a change to the guidelines and should we expect you to not override the ranking system for opposing view points.
CBC had a comment section, and it make the YouTube comment section look civilized in comparison.
For me, it was something I aged out of.

In my 20s, I was an information sponge. In my 30s, I realize information is commoditized, and the signal-to-noise ratio is very low. Even after I scaled back my consumption to only 'serious' publications and podcasts, I realized they have a ton of fluff too.

So now I primarily restrict my internet use to addressing questions that I personally have. No more opening a podcast app just to see who's on what this week.

The downside of this is that I'm not as interested in broadening the scope of my knowledge as I used to be. That's the point of taking a focused approach over time, but it's also bittersweet because I am intentionally narrowing my fields of interest to the essentials; I discovered a lot of cool stuff in my 20s that I may not in my 40s.
> Is there any reason to believe that biologically inspired architectures should yield better performance ?

At the very least, they could yield far better efficiency. A 12W brain can achieve more an entire data center of GPUs, depending on what you are trying to achieve. Whether that would make something actually demonstrate sentience level performance is another question.
> As an Apple investor, (things) could be helped by having ways for the employees in the stores to communicate their needs. (snip) A large share of the employee grievances will be things not related to pay

They've already communicated their needs (wages are too low), and you've already dismissed their concerns. Your comment here is kind of proving exactly why Apple employees so desperately need to unionize -- they aren't going to get fairer wages any other way.
So why would someone show up to work after being hired?

Why not just surf the internet and play games all day at your desk?
Definitely doesn’t exempt one from scrutiny or criticism. But I find it hard to believe that they only allow an ultra narrow viewpoint. I don’t watch television news so I realize I could be completely wrong.
why is this downvoted/flagged?
I think the question on everyone's mind right now can be adequately summed up with the quote:

"Are we the bad guys? I think we're the bad guys?"
> our current situation is particularly perilous

How so?
The last time Congress declared war was June 4, 1942 [0].

[0] https://www.senate.gov/about/powers-procedures/declarations-...
So is there a way to disable this ahead of time? Or do I have to install the version with telemetry first?
Also O&O's ShutUp10 [1] which also works on Windows 11. It's not as complete as some of the scripts on Github but also only changes things known to not affect the usability of the OS. And it has a happy-clicky UI and prompts the person to make a snapshot first. I can attest to it quieting down the telemetry on W10/11 for my gaming machine. I still play certain games on Windows

These tools should be run after any big patches from Microsoft as they may change settings. ShutUp10 will show a diff of what features were reset.

[1] - https://www.oo-software.com/en/shutup10
Whenever I see a Substack URL, I usually just scroll past it. I've seen a lot of questionable content on there, for better or worse.

Speaking of questionable content, it looks like the facts are being disputed on the other article on this Substack: https://www.reuters.com/world/us/white-house-says-blog-post-...
For personal finance https://forum.whitecoatinvestor.com/ is probably the best for higher net worth / income individuals (they have a large forum). https://www.bogleheads.org/ is also excellent.

For finance itself r/finance has some good posts on occasion, and there is an insurance professional forum which can be useful for those products, but not one all encompassing board.
That isn't even remotely related the post and Monterey is over a year old.

The systems you are trying to SSH to are using outdated host keys, you need to actually update to get security fixes, it will regenerate host keys.

You shouldn't be worried about this CVE, it sounds like you have quite a few years of CVE's you've neglected to patch anyways.
It's always possible to make a device physically larger after you get it, but it is obviously much harder to make it smaller.

The Switch has a large variety of comfort grips available for people who want a larger device, which also lets the user choose how it is larger, instead of forcing a one-size-fits-some approach. Here's one chosen at random that appears to have great reviews: https://www.amazon.com/dp/B085VHHLGK
I enjoy the author's response, a reminder that excess piety does not grant you time out of someone elses day. After replying with this, he closes the ticket

"I'm not a lawyer and I'm not interested in this kind of issues.

If you think the app, as it is with its terms, should be removed from F-Droid, feel free to reach out to them."
Ah, fair enough, I stand corrected. I was looking at their GitLab profile, which has a few minor contributions to F-Droid projects over several years but definitely doesn't have maintainer status.

It is still accurate to say that F-Droid doesn't have a formal position on this app, and that the only position any maintainer has adopted so far is "why are we freaking out?"
Can anybody elaborate why? I understand if it's financial crisis or some other gov fuckup. But this is a natural disaster on an unprecedented scale, government may not have enough resources to handle it. What's the game here?
It’s still an evidence based stance, but temporarily substitutes one form of evidence for another. The notion of reputation is itself built on evidence, e.g. we observe that someone is generally truthful, so we are later justified in concluding that they might be telling the truth.

The concept of the benefit of the doubt still relies on this form of evidence. That doesn’t imply that this is sufficient.

Regarding Hersh vs. Joe Blow, there is still a meaningful difference in them getting things wrong.

When it’s Joe, you don’t care to begin with, and the revelation of wrongness doesn’t change your opinion of Joe.

When it’s someone like Hersh, such a revelation brings reputational harm, and raises more questions about how he became so convinced of this information to begin with.
When gruez says "the state" they're talking mainly about countries and governments in general, not specifically about US states.
The role of testosterone in the behavior of cattle or monkeys is obvious to any casual observer. I don't know why we try so hard to overlook it in humans. Like the GP, I don't view it as an objective negative, but there's definitely a reason 90+% of the humans in prison are males. And that's true in every culture across the entire planet.
Android 14 to block malware from abusing sensitive permissions
So, i unboxed a $2000 item on counterstrike, and because of their ecosystem, basically had to keep it in the "Steam Economy" so, i purchased the top end model.

Its been great.

I'm really happy with the antiglare screen. I can't always play in the dark.

It is possible to replace the SSD although i am pretty sure it voids the warranty. Valve's recommendation is that you add an SD card, which is a lot more reasonable these days.

Sorry my answer has been kinda rambling yet non descript. tl;dr i don't think storage is the biggest concern, but the anti-glare glass is great.
> The worst case scenario with a union is bad employees taking advantage of a company.

The worst case scenario is bad employees harming other employees or the public. People who create a horrible workplace for others, people who harm the people the company or organization is meant to serve, but can't be fired.

Having robust policies to make it clear this won't happen and is not a goal would go a long way towards countering anti-union sentiment.
Just spin up Fiddler with a generated root CA on the device. Or if you don't trust the network stack on the OS - point the thing at a MITM proxy and trust the self-signed CA in the certificate store.

It's really not all that hard to view https traffic...

ex: https://www.telerik.com/fiddler/fiddler-classic
Doyensec releases tool for CVE-2022-39299 PoC
Based on work recognized in Portswigger's Top 10 Web Hacking Techniques for 2022 - Authentication Bypass In Multi-Tenant Apps using passport-saml for SAML SSO Integrations

Description
A remote attacker may be able to bypass SAML SSO authentication on a platform by exploiting CVE-2022-39299 affecting the passport-saml library.

A public exploit was not available (at the time of writing), and the advisory was published on 10/12/2022 with little/no information. Doyensec developed a working Proof Of Concept (PoC) generator to verify the issue against multi-tenant platforms in which the tenant admin is able to configure SAML SSO with a custom IdP.
Have you ever maintained a popular-ish open-source project? People will send you questions every day, you need to fix actual issues, you get a random email from Deloitte consultants because someone somewhere is using your code and they want to clarify the licensing. It's work, it's somewhat thankless so yes I will be empathetic with the maintainer that got cut two random issues for a ToS that contains 2 lines which are only an issue to a handful of people using FDroid and being called a jerk because he called those people "zealots" after they insisted he fix his ToS despite him politely saying no.
It is bewildering how many here are against this post staying up; no matter whether it's true or not, it's an interesting article! If you feel it is not true, why take it down rather than simply state your opinion in the comments? Do we not have the freedom to discuss and form our own opinions about it?
It is nothing but gatekeeping if you are requesting the removal of a post that many consider interesting (the only threshhold it needs to cross).
The really surprising* thing is that Google Sheets uses floats for everything. Back in the day, I was using Sheets to do some statistics about (IIRC) kernel ASLR on macOS, and I was surprised to see kernel pointers ending in impossible digits. Of course only after I'd wasted 2 hours on it.

Boy, did I file a pissy bug with the Sheets team that day, and then requested an Excel install I never let go of since that day.

* I guess it's maybe not surprising to js developers, but don't most modern browsers have integers by now?
I'm with you, but look at all the people in these threads who say things like "I just want one definitive answer, not a bunch of conflicting gobbldeygook results!" People want to be told what is true and get on with their day. Sure, the machine can't DO that, but it looks like it does. Tragically, I think this has legs.
Golly - there's a few strawmen there.

* My children are in their thirties, and don't live with me. I live on my own now, but I was a good parent.

* I didn't suggest that using this service should be banned; I just asked why people don't run their own recursive DNS.

* And I have no idea where you got the notion that I confuse Fedex with the US government.
No, we’ve actually had this issue in production. I did not “spot it online”. The question I ask is framed how the bug appeared for us at the time. It’s a great way to screen out people who are too academic and do not consider the limitations of the systems they use.
>Freedom cuts both ways, both for the user and the developer.

Author is free to call people "zealots", others are free to see it as being a dick.

It was simply uncalled for, if author does not want to deal with this he could've stopped replying after closing the issue as "Won't Fix", instead he decided to insult people that care about the free software.
>In their discussion with the mods they mention "site-wide rules" which makes me think they don't understand that the mods of each reddit make their own rules.

They're referring to the 10% guideline that many subreddits follow:

You should submit from a variety of sources (a general rule of thumb is that 10% or less of your posting and conversation should link to your own content), talk to people in the comments (and not just on your own links), and generally be a good member of the community.

https://www.reddit.com/wiki/selfpromotion/#wiki_here_are_som...
Looking at the graphs in the article, they just sort of have a line drawn at 2012, but I don't think there's an obvious change in trend in almost any of them, not that sticks out from the rest of the noise-level in the data at least.

If anything, judging from the graphs (all of which have been cropped very close to the beginning of the span so as to not give much of a baseline), the change, if there is such a thing, seems to have happened at about 2006-2009?
Yeah, it's so easy to say we got hacked while secretly giggling on the inside. It's even possible to avoid taxes and such with a purported hack.
It might be true. But the story rests on the following premise:

*Biden’s and Nuland’s indiscretion, if that is what it was, might have frustrated some of the planners. But it also created an opportunity. According to the source, some of the senior officials of the CIA determined that blowing up the pipeline “no longer could be considered a covert option because the President just announced that we knew how to do it.”

The plan to blow up Nord Stream 1 and 2 was suddenly downgraded from a covert operation requiring that Congress be informed to one that was deemed as a highly classified intelligence operation with U.S. military support. Under the law, the source explained, “There was no longer a legal requirement to report the operation to Congress. [...]'

This glosses over the legal fact that the President can't just carry out military operations and then never mention them again, not least on the grounds that someone needs to be in the loop in case the executive branch suffers some catastrophic attack. As far as I am aware, 10 USC 130f still requires that Congress be notified of sensitive military operations within 48 hours: https://www.law.cornell.edu/uscode/text/10/130f

I don't see where Hersh addresses this aspect of the legal environment, he just waves it away. Of course, it could be that Congress notified but only a small number of sufficiently serious members with the capacity to keep their mouths firmly shut, but the article doesn't seem to contemplate that possibility.
Translation: We're going to be short, yet tall. Blue-eyed, yet brown-eyed. Right-handed, yet left-handed.

> Online spaces that are free from disinformation, misinformation, harassment and abuse are near extinction. The social media environment has splintered into so many echo chambers that exclude diversity of opinion, discourage debate and silence dissent.
> make a burner Google account just for porn.

Google is very likely able to connect your burner account back to your real identity. Even if you've got it in a firefox container, they can see two accounts coming from the same IP and browser fingerprint, and can probably score it as to how likely it is two different humans in the same household switching accounts vs. having a burner.
"Intel considers SGX instructions to be a security vulnerability, as a malware could abuse it to make the computer lose some of the functionality that the typical user expects, such as the ability to play media with DRM."

fixed it
> But the Wine team deserves a boatload of praise too

About 2/3 of Wine commits are from CodeWeavers, so praising the Steam team (CodeWeavers) is praising the Wine team.