skysight-inc/HackerNews huggingface dataset:
One of the more hilarious takes I've seen. "There are no papers for this, and I choose to disregard the countless number of people who say it is much easier for them to read if the line lengths are constrained as they are in a book or scroll or every other form of human writing ever put on this earth, so I will not make my site easier to read. F you."
Should Couples Sleep in Separate Bedrooms?
Will some people profit financially from your work ? If yes, how do you feel about it ?
>"...and not around this ridiculous bit of bigotry and isolationism"

It probably shows who the majority of posters are.
Or dhcp relay to a central dhcp server
The bug still appears present for me:

Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:109.0) Gecko/20100101 Firefox/109.0

Code blocks without JS: https://i.imgur.com/Tcq34IK.png

Code blocks without JS under highlight: https://i.imgur.com/Lbvk2LS.png

Code blocks with JS enabled: https://i.imgur.com/kDCW4Q0.png
I understand your point, but I don’t believe the probability to be vanishingly small, just extremely small (in this particular case, based on what we currently know). I believe you and I differ in our prior estimation of the probability of extraterrestial observers.

I find that the two prior base scenarios, one with galactically widespread advanced civilizations and one with only us alone in the vastness of space, would very probably look practically identical to us. There’s no reason advanced civilizations would use radiowaves for communication, and little reason for them to interfere in the development of a primitive civilization. I find that we would see an empty galaxy in both priors with a high likelihood.

Given this, the core problem in assigning an actual probability for either scenario is that we don’t know how easy or difficult it is for intelligent life to emerge. At this point it is quite impossible to assign the probability, since our sample size is 1. It is no more true to assign a probability close to 0 than it is close to 1. This must then either be set to 0.5 or eyeballed by circumstantial info, which is never real proof to one direction or another.

I believe it to be sufficiently high that the scenario where the apparently-empty galaxy is full of life is far from vanishingly small - and far from certain.
Show HN: Openapi.security, a fast security checker for REST-based API
tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://openapi.security

My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration.

Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of how this algorithm works in our blog!)

We recently wondered if this Feedback Driven Exploration approach could be efficiently applied to good old REST APIs as well. From our experience, well designed GraphQL and REST APIs are quite equivalent: both have an organized data structure and explicit relationships between objects. So why wouldn't it work?

We often organise internal hackathons. So this time, we focused on this experiment, adapting our algorithm to REST and ending up creating our last side project: OpenAPI.security.

It is a very simple tool: anybody can enter an OpenAPI / Swagger spec, and openapi.security will run a bunch of security tests on it and give back a report. It's designed to be fast and smart in the way it analyzes input specs.
Encrypted Client Hello (ECH) is similar as it requires an extra DNS record, for a different purpose though.
Former Russian military engineer seeks asylum at US border, offers secrets
I feel like podcasts and music can't live within the same app. The use-cases are totally different.
Do you simply track everything in the Readme.md file, or some other system of documentation?
Mostly because they don't need to retain it though, a sub doesn't need to reprocess the CO2 into C and O2 but the process can be done. The process is largely the same instead of ejecting it as a waste product continue to break it down into useful products like injecting it into a Sabatier process.
There were 2220 cars stolen per day in 2020. While token bypass is a problem, I suspect that the biggest vulnerability is that nearly all cars lack MFA. Steal the token and you can steal the car.
I was actually punning a bit on the word 'queer'. The point is, 'normal', as in straight, able-bodied, male, white, neurotypical, etc, is a minority - except in terms of representation, political or otherwise. This becomes a majority by creative coaltion building (white people, male people, neurotypical people, non-disabled, etc). You then turn around to the parts of the venn diagram that don't carry all of these traits, then treat them as a group who's concerns are marginal and not generally relevant.
The practical way that people deal with this is putting a swarm of auditors all up in the processors' business. It used to be this way for telecom as well: to know whether comms were secure, you needed to walk the length of the cable and look for taps. Comms encryption has radically changed this. The question is, is there a similar revolution in the making for processing as opposed to comms. I strongly doubt the benefits will outweigh the drawbacks.
Well, fear can be applied through speech or through violence. I prefer speech.

People should be fearful about trying to develop autonomous weapons. There's nothing out there that says "I'm allowed to kill everyone in the world without ever feeling fear".
I'm not arguing to do away with sex-ed. I'm saying it's not a replacement for some sort of enforcement of the law to keep underage kids from accessing porn easily.
If partisan Indian or Pakistani media reports like this, it's just another day in the office. It's obvious what the biases are, no one is misled. Not that I condone it.

When it comes from ultra-wealthy foreign families that benefit from the ongoing brain-drain and economic exploitation of those countries (which is directly benefited by foreign and domestic political disunity), this puts it on another level of insidious misinformation.
The UX for the podcasting part of their app is god awful. I always thought it was so funny to watch them invest in Rogan.

The disconnect between Sales/Management and the Dev/UX team is plain as day.
> Union types

Yes, these are missing in C#.

> Object literals

You could use records[1], or anonymous types[2].

> Functions as first class citizens

There's delegates[3] and lambda expressions[4]. Is there anything that's missing here that you need?

You can use lambda expressions almost exactly like you might in JS/TS, even omitting the type:

var squared = x => x * x;

And if you want even more functional, you could always use F#.

[1]: https://learn.microsoft.com/en-us/dotnet/csharp/language-ref...

[2]: https://learn.microsoft.com/en-us/dotnet/csharp/fundamentals...

[3]: https://learn.microsoft.com/en-us/dotnet/api/system?view=net...

[4]: https://learn.microsoft.com/en-us/dotnet/csharp/language-ref...
It is possible to determine what algorithm is being run. To prevent that as best as possible, you want Indistinguishability Obfuscation.
Hey there, Escape dev here! This project follows the steps of graphql.security, our fast and free graphql API scanner, check it out if you use graphql rather than swagger/openapi
Hey folks, co-author here. This is in Beta and there is still a lot of work ahead. We are ready for feedback :)
> This combined with an occasional Air Force psyop explains 99.99% of UFO sightings.

Is this a measurement from a study you conducted?

Asking because it seems like a hand wave, and 99.999% of those kinds of hand waves fail to account for important details that don't fit the dismissal narrative...

And I mean that's five nines right there... :-)
IP over Ethernet over VXLAN over UDP over IP over WireGuard over UDP over IP over Ethernet… sigh

OpenBSD does support both routing domains and multiple routing tables and includes multiple routing daemons in the base system. I would recommend to the author to stop hacking at the keyboard, grab whatever not to structured visualisation tool works for them (e.g. a whiteboard, a block of paper, a random drawing app, Visio) and (re-)phrase the problem. Are you solving a problem or showing of how many acronyms you can expand without looking them up? This n layer encapsulation can work and can even be required to reproduce some (problematic) organisational structure, but it's far from elegant. Given the chance I would vastly prefer to just use multiple routing domains for the WireGuard tunnel interfaces and the underlay. It would result in far less complexity to manage as well as less overhead.

Why do so many people insist on tunneling Ethernet over IP? What's keeping operators from using IP routing (and just one layer of encapsulation) instead? Is IP routing so scary or everyone that indispensable applications that only work over Ethernet?
>China has concentration camps.

So does USA. It’s called the prison system. Except USA is imprisoning many more people, per capita.
Is there any value add in being middleman? I.e. can they deliver same or new podcasts better, possibly by curation or AI?
They never left. There are many fiction podcasts and series.
Submarines restock food, some air supplies, and... deal with waste.

Food https://youtu.be/bPJUVKizh90

Air https://youtu.be/g3Ud6mHdhlQ (MEA and LIOH for CO2, electrolysis and "candles" for oxygen)

Toilet https://youtu.be/SYFuA3xnkUE?t=985

Nothing is "recycled" as such - and certainly not any of the carbon (you're not eating the carbon captured from MEA or LIOH... or your waste).
That time was 2010. That ship has sailed.

Pakistan has to pay 2-3 billion USD in next few weeks or else they will default.

They have to pay 8-10B USD this year or they will default.

They have to pay 70-80B USD in next 5 years or they will default.

Pakistan right now has 2 billion dollars in their forex that too because Saudi gave them 3 billion USD some time back.

Pakistan can collapse in just few months like Sri Lanka.
Can I test my dev API ?
This is an excellent book for explaining everything post-trade. But it's light on prep-trade and actual trade execution.
I may have lost days on aggregate from just waiting many seconds for the browser to respond after an accidental Ctrl+s that triggers "Save Page" - why is that operation so slow anyway?
False equivalence

Clinton was president in the 90s, prove he removed more regulations than Republicans, finally Republicans are the only ones who compalin about regulations
Sometimes you don't want to be "literal" or photorealistic --you want to portray a scene or subject "artistically" and you take liberties in order to highlight and de-emphasize other less important aspects.

That said, some of the examples are funny, like where a shadow going up some steps stops short so as not to "overshadow" another subject[1] --whose shadow in turn seems to be perpendicular to the main shadow.

[1]Madonna and Child Enthroned with Saints” (detail)
If they’re so smart, they better figure out the complex geopolitical realities we have to deal with!
Looks nice, is there a way to test a local api ?
To paraphrase Dijkstra, "the use of C++ cripples the mind; its teaching should, therefore, be regarded as a criminal offence". Maybe a reasonable C++ programmer would expect that, sure, but: should a reasonable programmer expect that? Automatic promotion to reasonably sized integers (and in the limit, integers of unlimited precision) is ancient tech.
> Do you know that in MSVC uint16_t(50000) + uin16_t(50000) == -1794967296?

This is pretty basic C++/computer architecture stuff.

> They just don’t give you a competitive advantage over C++. Or, for that matter, even over each other. Most of them, for instance, Rust, Julia, and Cland even share the same backend. You can’t win a car race if you all share the same car.

But it's the same backend that C++ uses...?

> Because if you can write in Python and have the performance of C++, why would you want to write in C++?

I'm no rust fanboy, but isn't this the argument he used against Rust in the first place?
If you think dumb energy exchange in EU, then people never ceased to be salty about it and it was major driver of energy prices, thanks to the fact, that this stupid system is pricing by the most expensive power plant - which were gas power plants.
You mean locally?
Hot garbage is a big overstatement, but I'd agree that its fame has more to do with hitting a nerve than with its being a remarkably good book. I'd personally probably put it at the bottom of the Atwood novels I've read—but, at the same time, might well recommend it first to many people coming to Atwood, today. It's not bad, it's "hot" right now, and it's not a challenging read (unlike, say, Surfacing)
Search can be achieved reasonably well using LLM embeddings to draw edges in a knowledge graph, which is called a "Semantic Knowledge Graph".

But your broader point remains, LLMs are a small improvement for search technology and a quantum leap forward for editing, cheating on leetcode, consulting, etc.
Yep! Just ngrok your api port, start a scan on your spec and it will ask you to enter your server url (or you can pass them in the servers array of the spec). If you need any help lmk!
Yes you should. Your actions are causing considerable harm to society. It is completely reasonable to use taxes to incentivize actions that improve society. Improperly utilizing high value land is very harmful, we don't have to just sit here and let you do it without consequences.
Something I learnt about good commit messages over my career was that the more useful messages don't summarize what is in a change, but why the change was needed. Usually everyone can quickly figure out what changed if the commit is of some kind of reasonable size, but why it was changed is lost forever.

That said, a lot of my personal projects that will never get published are just "foo" messages.
A Guide to Listing Files and Directories with Spark, or How to Summon the Beast
Really handy this online scan tool! It detected an unauthenticated POST route on my API!
Smart move would be to use Ngrok I guess ;)
Realaroma (1996)
It's the constant easily obtained dopamine hits that are the problem. Porn and social media are exactly the same in that regard.

I would also disagree that social media does a good job of banning porn. There's also sorts of nasty stuff that gets shown to kids on social media, not just porn but violence as well.
Sundar has Mckinsified and MBAfied Google.He faces intense spotlight because his background is McKinsey and Product Management . In core engineering and tech circles that’s the ultimate enemy and sell out. IMO Sundar hasn’t demonstrated the type of tech leadership like Satya or Zuck has. I am no fan of Zuck but he has a product he wants to pursue ( Metaverse) and is sticking to his guns to make it happen . Sundar just comes across as a pleasant McKinsey consultant who has seen ads and search as a cash cow and is focused on extracting as much cash from it to appeal to shareholders and others . There is no underlying tech vision or guts.
There is something that I find deeply unsatisfying about this. For me, the first draft is as much about working through the problems space and considering possibilities. If I rely on a chat bot, then I am more apt to become anchored to whatever the chat bot spits back out at me. Even if what it produces is good enough, I do not benefit from the drafting process in the way that I would if I did it myself. Sometimes maybe this is a good enough shortcut but I generally don't believe in shortcuts.
Something-something indirection.

You’re just saying that messages (or: what and why things happened to the code) should be moved out of the repository and into the issue tracker.

This is like me saying that wiki articles aren’t important… because we don’t use a wiki for documentation and just commit the docs in the repository. Yeah, sure. But most of your interlocutors were probably more concerned with the fact that things needed to be documented, somehow.
Yes you can ngrok your local api, and start a scan on your spec and it will ask you to enter your server url (or you can pass them in the servers array of the spec). If you need any help lmk!
Weird how none of that context was present in your first two iterations of the claim.
The "demo got it wrong" narrative was about the Bard announcement, not the mismanaged Paris event. Moving the goalposts.
Buzzfeed looks extremely shortable right now.
Oh wow, if this had an M.2 slot i'd consider getting these for my home k8s cluster (I use rpi4s which are hard to get and such cause USB SSDs are flaky with power, and an odroid M1, which has a pretty slow processor, but is otherwise perfect)
In 2019, the U.S. Department of Defense began investing in the military use of balloons under its COLD STAR (Covert Long Dwell Stratospheric Architecture) program.[27]

The Pentagon began incorporating high-altitude balloons into the military kill chain with a focus on hypersonic weapons, in line with the Space Development Agency program for commercial satellite constellations.[28]

Balloons could be preferred as a platform for their low cost, lower altitude, and less predictable trajectories compared with satellites."

https://wikipedia.org/wiki/2023_Chinese_balloon_incident#His...
"Most-loved" has definitely been measured. It's a direct finding from StackOverflow's developer survey.

https://stackoverflow.blog/2020/06/05/why-the-developers-who...
Hope this was the login route haha
What's the difference between caring and affecting behavior? If people cancel their subscriptions after a major outage, wouldn't it be reasonable to interpret that some of them cared about performance and reliability?

I know I care. If I pay for something and it sucks, I stop paying for it because it's not up to my expectations.
Yup, thx @nohehf
>That is a fuckton of silicon.

Not really, silicon is abundant everywhere with rocks. Most rocks anywhere are going to be about half silicon, not that this is exactly true everywhere but nobody is ever going to wonder where they’re going to be getting their silicon.
I think AGPL is probably your best bet if there is a chance a competitor will extend your code and release it as a SAAS.

But also, the git repo has LICENSE with the AGPL, as well as LICENSE2 which just has some names followed by all rights reserved. It's a bit confusing, if there is dual licensing or some of the files are licensed differently maybe you should explain that in the LICENSE file, even if it means referencing a separate AGPL file.

In any case it looks pretty neat, I think I'll give it a try.
"...failed to realize that the thumbnail hadn't been updated..."

Right, I'd never use part of the original image. Best print it out and rescan it, preferably on different scanner.

Being truly anonymous is enormously difficult, even the Bauer pattern/Bayer filter shape in one's image sensor will give one away. That alone requires sophisticated filtering to decouple it from a specific sensor/camera.

And that's only the beginning, there are many other factors that contribute to the leaking one's identity.
Awesome ! I tried and saw grey checks. How can I manage to activate unauthenticated route detection ?
What about Demis Hassabis? He seems like he might some ideas on the future.
Seems like a nice tool! Just a quick question, I do run some authenticated endpoints and would like to have them scanned. How can I achieve that with this scanner ?
> Yes, but how is the BBC responsible for their employees buying phones and bringing them in the country? Was the BBC telling their employees to do this?

Well yes
I believe this is often done to avoid corporate surveillance on the computer that might record the screenshot and exfiltration.
Yeah but they have the first mover advantage. Less scrutiny.
Disinfection with Far-UV (222 nm Ultraviolet light) (2020) [pdf]
> so a fine line needs to be tread between putting the public at ease

Also, there's no reason to assume that the goal of revealing all this information is to put the public at ease. Maybe the goal is to drum up public support for war, or at least, some adventure in brinksmanship. Or to make the administration look more hawkish than it is. Or there's some weird funding/ego/prestige power struggle between departments and generals. Or someone is playing a public game of cover-your-ass. Or is making his enemies in the organization look bad, by airing the dirty laundry.

Figuring out which is which when it comes to the military leaking secret information is an exercise in Kremlinology.
Just started playing a few days ago... I've been able to draw out most of it as planar 'areas' with curved arrows for paths. Even for some of the easier 'maze' type areas it works, but I'm about to cave in and build an adjacency matrix for one of the difficult areas. (pun not intended?)
Fair enough, I missed the line about work on misinformation.

However, AFAIK, there is no AI-field wide consensus about sensible ways to address this, and no conviction from anyone that there are any reliable techniques. So it's nice that they have "teams working" on it, but IMO that doesn't justify deployment of clearly flawed technology for this purpose.

Data from users ("It was wrong") is hard to incorporate. A scheme like the one you propose basically implies using users as literal testers, which wouldn't matter so much if this was a UI/UX question. Instead, users will be given garbage, a few of them will find out, a few of those will leave feedback. This is not a sane model for improving the behavior of a language model.
A comedic talk. I enjoyed it, but don't expect anything other than comedy!
They're also used as wind breaks. Lots of benefits to the things the old timers did that new stock just tosses out from lack of understanding and lots of over confidence that they know better.

It applies to dev work as well, with all of these new fangled fancy ways of doing things because people think they know better. Can things be improved, surely, but there's a lot of things we've "improved" just to recreate the same traps we've already been through. It is tiresome
Compared to Spiral, though? I’d prefer ‘automatically finding the optimal solution for a target architecture’ to ‘spending my time performance profiling’ with Rust.
Grey tint checks means that your api is secured. :)
> It’s not terribly hard to port the inference to other hardware architecture or software stack

Sounds like a job for AI. Universal translator and all that.
It actually reversed and going back up, so no they are going to be expensive.

https://www.businessinsider.com/electric-vehicles-prices-exp...
Yeah I guess OP never heard of the Rust based components in Firefox.
This article has information and various photos from security cameras showing the sparks coming off of the car prior to the derailment - https://unicornriot.ninja/2023/like-the-doors-of-hell-were-o...

Also DemocracyNow! has been covering the disaster the last two days featuring interviews with both local residents and railway workers.
I don't use Spotify and never will, but the Amazon Music app did that too and it's incredibly annoying.
The idea is that you stop quicker, before the axle actually fails.
...and the 1970's (first I heard it, IIR) comeback:

Don't fire him, and you've paid $600,000 to train just him. Fire him, and you've paid $600,000 to train everybody else at the company. Which one is the better value?
> a permanent marker

Or better yet, an exacto blade. If the "black and white" photocopier is actually grayscale, then you could get text leaking through the marker if you play around with the image contrast.
> most important while both AIs get sometimes very important and fundamental things wrong they do get enough right to be of help in some tasks to be of a lot of help

that's only true if you can easily and cheaply identify when they are correct. But at this time, and for the foreseeable future, that's not the case.