skysight-inc/HackerNews huggingface dataset:
The response is wrong though. The RFC for this function which someone quoted further down in the bug report clearly stated that it should return false even if you feed it a garbage hash.
Most users are. Some very much are not. Guess which ones tend toward the top of the org chart?
The Libera irc network has a lot of active rooms with different topics.
In the real world, who does actually take a company to arbitration?

Tell a regular person that oh, you can sue the company in front of an arbiter of their choosing, who’s fees are paid by the company, and they will immediately walk away, because no one will believe they will get a fair hearing at what appears to be a rigged court.
The author needs to rethink point number 4. Investors' time is valuable, whether you like the idea or not. They can spend it listening to your pitch, or someone else's pitch, but if you're looking for funding even a minute of their time is more valuable to you than... cooking yourself dinner.
> I smell an underlying sentiment of "if the attacker has access to the DB, then it is broken anyways"

To be more clear, my position is - if the service allows you to set the password for an arbitrary user, then it is broken anyways.
Shame he couldn't keep the PC Card slots. Would be sweet to have a modern laptop that's compatible with the folding card slot mouse: https://media.techeblog.com/images/cardmouse.jpg
of possible interest

https://archive.org/details/tsiolkovsky-the-call-of-the-cosm...

https://archive.org/details/tsiolkovsky-the-path-to-the-star...
A Tiny HTML Snippet to “Discuss on HN”
The initial response to the report is obviously quite shocking, not disagreeing there.
Interesting. I disagree with #5 based on personal experience. Some of the best thinkers I know have at times been visible in the comments. In fact, meeting challenges to their reasoning is how they refine their thinking.
The last content patch (that wasn't Halloween) was in 2017. They're planning a new content patch for this summer/autumn, and I'm cautiously optimistic they'll increase moderation prior to the patch to increase player engagement.
Just ask anyone, of any group, and they'll tell you how being in their group made both of these harder while less qualified people of the other groups had it easier than they did.
I agree with the sentiment, sometimes people in HN - myself included - are very hot-headed. Discussion is not always positive. It’s one of the reasons I’ve built a public profile - I found that sometimes I too get caught in negative dynamics, and want to experiment how being non-anon affects me.

As a rebuttal to your point though:

- All debate, from Socrates to this part, is bound to be heated and messy by nature.

- HN discussion is some of the very best I’ve experienced on the net. Like I said, the ethos, themes and people are great. Discussions ranging from OCaml, to startup financing, to befriending crows? Dope. The CEO of Stripe dropping in to comment? Dope.

- The permanence of a forum would mitigate some of the issues you point out (though not all - forums have never been impervious to mean or hot-headed users)
Why is it important to add the Bayer in this context?
> So you are not even «technically» using the template engine part of Github.

The rule didn't say some parts of Github was okay, the rule said Github was not allowed.

To not disqualify a team that broke the rules is unfair to those teams that read the rules and said "Okay, let's work without Github".

If you want to rescind a rule you have to do it before you are caught breaking it, not after.
I've been using D2 for a little while now.

I find it amazing.

I hope C4 diagrams and other types of diagrams will eventually be supported.

But what D2 does, it does it better than the competition.
This is actually exactly what we had in mind. Except that P2 gets put in a "won't fix" bucket.

- P0 means drop what you're doing and fix it now

- P1 means fix after you've finished what you're doing

- P2 means "won't fix" (but keep a note of it in case we ever get to that perfect situation where we have more time than features to build ;))
Nope. Blowfish doesn’t use a manually defined salt. It generates one itself randomly every time and includes it in the hash result string which you generally store the entire string in the database. No secret salt involved.
I edited the comment to add some additional details.

Am I not supposed to load or compile the contents of an `.asd` file?
What unfair advantage is gained by using GitHub to store the code? A privately hosted Gitea instance would have accomplished exactly the same thing without technically breaking a rule.

I would understand this point if they were leveraging Actions or something, but that isn’t mentioned so I’ll assume that is not the case. Their usage of GitHub does not appear to have been anything more than a convenient repository host.
Yet it would make no difference in this scenario. He brought a bunch of other equipment, like camping gear and the recommended amount of water for the time he expected to be on a beginner trail. That seems to be equally relevant, if not more so since those are things he actually used.
Only thing I see that would really be missing is Sieve, it's soo much nicer to have server side filtering/categorizing
Seattle becomes the first city in the US to ban caste discrimination
The GitHub advisory is a better location to point this submission to: https://github.com/php/php-src/security/advisories/GHSA-7fj2...
I am not quibbling about whether the no-GitHub-whatsoever interpretation is an unreasonable interpretation of what's in the rules. I am specifically raising the issue of the hyperbolic and inappropriate use of the phrase "in no uncertain terms" in what you wrote.
One should apply even more skepticism to tabloids like The New York Post.
I’m not sure about this. In reality, there’s very little incentive for anyone to dish on their former employers other than in small private circles, which probably happens even after signing these agreements anyways.

It makes you almost instantly unemployable. And even if you’re now retired, it’s almost certainly not worth the hassle it will cause.

If someone has enough of a grudge to publicly complain then the suing by the company will only add to their complaint and, if anything, might be an incentive for them to publicly complain.
the correction is not really correct - you say lgpl-2.1 without the "or later version". It is sometimes abbreviated ls LGPL-2.1+, but SPDX identifier is preferable since it is semi-standard for abbreviating license names.
IMHO any work-issued smartphones, and in fact computers, should be locked so that nothing can be installed unless IT white-lists it.
Yay! When do they get rid of snaps?
> Atomic Semi's Twitter account follows only two people: Sam and Jim

I would hope that there is more concrete evidence (especially if that is the Headline!)

> retweeted this post from Sam: https://twitter.com/szeloof/status/1628528981430657026

Yeah I made mention of that. So it alludes to Sam being involved with it.
"Sorry, the rules clearly state that you can't browse websites that promote hacking or other criminal behaviour, like hackernews. It doesn't matter that HN isn't actually a criminal website, we must always unquestioningly follow rules."
> it's about impersonating police and emergency services.

You can't to have it both ways and you don't seem to understand legal definition of ompersonation -

Impersonating is intentional effort to blend inm Parody is making jokes that stand out.

Just because you dont get the joke or are not clued in, does not suddenly give the joker Mens Rea and make him an impersonator. It's your problem, not the joker's.

If people read about your police force helping pedophiles, and it sounds like something the police would do, that's their problem.

> The 'disruption' is not just measured in 'how many calls and how much that disrupts' - it's a measure of civil disruption and confusion.

Oh man there is so much social confusion, so many people to jail.

Lets start with journalists that write about drone strikes killing innosent people. The government said any male over 16 is 'enemy combattant' and these journalists are creating social confusion.

Now, 9/11 truther? Causing confusion, straight to jail.
You think enchanced interrigation at guantanamo is torture? Confused, straight to jail. Dont support war in ukraine? Confused, straight to jail.

You wrote an article about how FBI groomed autistic people into planting a fke bomb so they could arrwat them as terrorit? Super confused, life sence.
> Damn, conspiracy theorist will have a field day now.

Is there any evidence of foul play here? Why would this be more notable to conspiracy theorists than any other plane crash?
actually, there are visual receptors in the eye which are directly tied to the hormonal center of the brain. Red/Infrared light is stimulating Melatonin and blue/bright light triggers Cortisol production.

Arguably, this is linked to the circle of the sun and a lifestyle that is heavily bound to sunlight.
Depends what you mean by "have a discussion".

If what you really want is to re-examine controversial or contrarian positions (i.e. restart old flame wars), many places will not be very keen.

If you really want a platform to be heard, start a blog with a comments section and learn to promote it.

If what you want is a venue to test your logic against others who are similarly motivated... join an IRL debating club.

If you want to learn from experts, try YouTube channels and then go where they engage with their support base e.g. pay them on Patreon. Expert subreddits are good too if you are willing to play by the rules.

If you just want to shoot the breeze about casual topics, Twitter is still there.

(edit: formatting)
I feel like there’s a level of irony to linking to a Reddit post given the subject.
"Pretty serious" is a major overstatement. Regardless if you want to report a security bug you should include the impact.

If you've never been on the other end of this - the number of false security reports with minimal details popular open source projects get are staggering. Many are unrealistic. People saying things like, if i give the attacker my password then the attacker has my password.
Thanks, TikTok Joel Spolsky.
The game-port perhaps? It had analog inputs for potentiometer-based joysticks/paddles.

https://en.wikipedia.org/wiki/Game_port
One thing about the 2 sigma effect of tutoring is that it doesn't generalize; it doesn't make you smarter, just better at what you were taught. A different mechanism, but similar effect is learning the "trick" of solving a puzzle/problem - you just look smarter (and, well, know that specific trick).

In other words, tutoring is spoon-feeding.

This is still great, if you need that skill for something, such as for a specific technical job, or in order to learn something subsequent at which you are talented.
The words "quote", "quotation", "mark", etc. do not appear anywhere within the HN Guidelines[1], to include any rules regarding quotation marks (there aren't any).

To call out someone's behaviour is not name-calling as defined in the HN Guidelines[1]. Did I call the author an idiot or a moron or anything to that effect? No, I called out his behaviour as ignorant and arrogant, and called him a kid because he is a high school student which I presume to be less than 21 years old.

On that note, the HN Guidelines state: "Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."[1]

As such, please interpret "Template engine websites, tools, and sites that generate HTML from text, markdown, or script files, such as Webs, Wix, Weebly, GitHub, Jekyll, and Replit,
are NOT permitted." in the strongest way possible: That using Github and other examples named and not named are not permitted.

[1]: https://news.ycombinator.com/newsguidelines.html
/me gasps - how rude! :~)
You can't attack others like this on HN, no matter how wrong they are or you feel they are. We have to ban accounts that do, in order to prevent the community from destroying itself, so please don't do it again.

https://news.ycombinator.com/newsguidelines.html

Edit: it looks like you've been doing this repeatedly and we've already asked you repeatedly to stop, so I think we have to ban this account.

https://news.ycombinator.com/item?id=34541432

https://news.ycombinator.com/item?id=34537288

https://news.ycombinator.com/item?id=34528400

If you don't want to be banned on Hacker News, you're welcome to email hn@ycombinator.com and give us reason to believe that you'll follow the rules in the future.
A Prompt Pattern Catalog for ChatGPT
Man, he tried so hard to defend that bug.
I really wish I could see the reactions to this tweet in a parallel universe where it was not written by a woman with died hairs. I have a hunch that the disagreement wouldn't come with personal attacks and judgments on OP's character.
I'm not sure if it will make quality malware but I am concerned that it has a hypnotic ability that causes people to blast past its mistakes. I'd think it might be really good at romance scams.
You are presenting a strawman. I did not say that you are prevented from going to college or getting a good job, but your group can affect your life outcome and does matter in these decisions. Look at the Asian-American discrimination case against Harvard entrance as one of many examples.
> The internet, which we ALL read, including the smartest people of our time is written entirely by people with time to waste.

I mean... tbf: https://news.ycombinator.com/threads?id=alankay
I've read a lot of Charity Majors' stuff, and in some ways this opinion is typical of her, and in some ways it is not.

Obviously, she's a big proponent of engineers taking full ownership of their work. That's core to observability, which is what her day job is all about:

https://charity.wtf/2020/03/03/observability-is-a-many-splen...

Yet one of the pieces she's well known for is "The Engineer/Manager Pendulum," where she argues that some of the best managers and some of the best ICs are people who have gone back and forth between the two roles:

https://charity.wtf/2017/05/11/the-engineer-manager-pendulum...

In one sense, that is consistent with her opinion about architects being a BS position, sort of analogous to calling out useless middle managers.

But one of my takeaways from her pendulum opinion is that those senior ICs who have pendulumed are better off precisely because they bring a management skillset to IC work and an IC skillset to management work.

And a high enough level, that manager's eye might involve recognizing that helping other engineers design their systems is imparting more engineering influence than whatever any one person can do at the code level. And in these cases, I'd argue you're still delivering engineering value rather than just project-management value.

Charity knows a lot of these senior ICs, and so it's not as if she's dismissing their potential value out of ignorance. So I'm a little surprised that she's throwing the baby out with the bathwater and arguing not that there are a lot of architects who aren't delivering the value they should be, but that the role itself is inherently not valuable.
Would something like a federated option for politicians be acceptable—where the government itself hosts then platform and only allows official accounts on the instance? There could be a reason to get across content in a digital medium, but what option has the least compromises?
Where do you see this stuff? It's not in the article. Based on the quote you posted, he got lost for 40 minutes and decided to turn around. Wasn't he staying at the cabin due to leg cramps?
Are they low-voltage lamps? (usually have a GU5.3 base). If they are powered by old transformers intended for halogen lamps it might be worth changing the transformers to ones meant for LEDs.

Incidentally if there are dimmer switches in the circuits then those might have to be changed too.
Mariupol: The Ruin of a City
actually, infrared light from campfires improves sleeping quality because it triggers melatonin production in the brain. In contrast, blue bright light triggers cortisol production.
No, AMD’s Zen had a sister uArch that was ARM-based[1]. They were originally targeting it for servers, but ended up releasing only one or two fairly bog standard ARM cores before abandoning the venture.

1 - https://en.m.wikipedia.org/wiki/AMD_K12
CMake debugger allows you to debug your CMake scripts and more
No you do not have to. ASDF knows where to find your ASD files:

https://asdf.common-lisp.dev/asdf.html#Configuring-ASDF-to-f...

Personally I use the (:tree (:home "dev/lisp")) form.
https://twitter.com/szeloof/status/1628528978884718592 says "I started a company with @jimkxa so we could have fun and make fabs"
Erasing Data Securely from Your SSD or HDD
Implementing what you describe sounds to me way more "clever" and less robust than the canary page approach described above.

Specifically - I wouldn't fancy writing the "consistently anticipates their adversaries sneaking behind a wall" heuristic you describe but the earlier post describes the API that already exposes the "has read canary page" functionality.
Quite sad reading such a statement from a CTO. This attitude would tell me that a hypothetical candidate lacks likely fundamental skills in software architecture and has also either never worked or grasped the business need in complex organizations for such roles. I've seen this attitude many times over and it always boiled down to a fundamental misunderstanding of what software architecture is about
A building architect is more of a Product Manager / Produxt Designer than a "software architect".

A "software architect" is more like a building-code (hah, code!) designerm. But yes OP is toxic.
Very cool! I was recently looking at dumping our slack data and fine tuning some openai model to do something very similar at a place I work with currently.

Were there any pain points in fine tuning you wish you knew before you built everything?
> Every single generation has had grumpy people who whine about how the young’uns are unruly, lazy, have it easy, etc.

That's because at least the "have it easy" part is factually true on a large scale. At least until now, it was a constant given that over generations, technical progress would make life easier for society as a whole. An example is the distribution of jobs by sector - in Germany, the generation of my father (born in the 70s) grew up with 50% of jobs being in agriculture and heavy industry, today 75% of jobs are classified as "service jobs" [1].

Add on top of that something that is incredibly common across migrant communities... they know they got treated badly and had to jump through tons of ridiculous hoops to immigrate to Germany, and so they strictly oppose relaxations of these rules because their trauma hasn't been recognized at all, much less made whole. And that mindset is similar in education - we still suffer through "frontal education", pointless selection after the 4th grade and other education crap because boomers think it would devalue their own sufferings.

[1] https://de.statista.com/statistik/daten/studie/275637/umfrag...
That's a good parallel to draw. Far too many people believe that the police are always right and you must comply with any demands, no matter how unlawful or nonsensical.
I was about to say "except for PR" but I guess they're better off having dedicated campaign / marketing / PR phones for just those cases.
> What you often see are half-baked, trivial re-implementations of some parts of existing utilities and then the proclamation "Rust is here and it's so much better!".

rust itself is an example. The concepts it's based on predate it by decades. When it comes to safety it's not as good as other languages and yet...
It's also transactional emails, but Send In Blue has a free tier with 300 per day.

https://www.sendinblue.com/pricing/
For some reason when ever I've had to work with PHP which was last about 10 years ago I got giggles & "TNT" by ACDC would play in my head. I'm remembering why...

P.H.P

DYNAMITE
That's interesting actually, everyone I read says inflation is worst for the poor (is this surprising?). Where are you getting this from?
Me too. The responses are so predictable, even on HN. Comments just take a different (worse) tone when the post is by a woman
Yes, and enforcing long passwords is the primary and most important way of dealing with it. Enforcing ridiculously high CPU/RAM use for authenticating is a cost that both sides have to pay, but in itself it doesn't solve the problem at hand.
Getting the data better is not the fun bit, I imagine.
I don't think Reddit is the answer. The culture there is… somewhat hostile. YMMV.

If I were looking for good discussion on a particular topic, I would present my arguments in a post on my blog and enable comments. I think Chris Coyier's CSS Tricks website is a good example of this. He can moderate, set the topic, and set the tone.
Many comments here vastly overstate the seriousness of this. For it to be used as an attack, the attacker needs general write access to your database. You probably have much bigger issues on your hands if that is the case.

If they have write access they can already just set the hash to a known value for the same result.

It’s a bug certainly but of very little practical security concern.
That's very cool. How does it work? Do you train a model for each "library"?
I would even extend that to all apps not necessary to carry out the duties.
Show HN: A LaTeX package for generating contributor role statements
This is a simple package for generating contributor role statements for scientific articles, following the CRediT roles (https://credit.niso.org/).

(This is my first attempt at a "proper" LaTeX package; feedback is very welcome!)
Just because they aren't common doesn't mean they don't naturally happen. If you have an environment that has all the conditions to have a fire like that, they will also naturally occur. Even if it's at a slower rate.
Chaining vulnerabilities is a common way to exploit systems.
This rings true to me. "Architects" are more often than not, an antipattern. We never call an Architect when there's a P1.
THANK YOU! I have wanted this since forever. I can't believe this is locked away so deeply and inconveniently.
In my experience it's because, for many, the concept of a "work device" is extremely foreign to them. They see no difference between work email on a personal device, and personal email on a work device.

Even I, a tech-literate person, use work devices in a personal manner. Sometimes because I can't be bothered to keep them separated. Other times it's because I believe it's required. For example, I have some scripts that I execute from my synced (personal) Google drive. Why? Because I made them in my free time, and they are useful at work too.

To me I think that every company should be strictly managing work devices but I also know how much of a pain that is as well.
PHP is the king of SQL injections, they are often not too hard to come by on a lot of deployments. Sure, if you use modern PHP with modern toolkits/frameworks/libraries and you follow OWASP and are a competent developer, you might never introduce such vulnerabilities in your codebase. But PHP didn't gain popularity because it had frameworks that were concerned about security or that it had a trove of security conscious developers - it thrived because any 13 year old could string together a website that was as minimum of a viable product as possible.
Nintendo Company History
This looks cool and it is fulfilling a need for me (I created a duct tape prototype of a similar solution using LangChain).

I want to get up and running the 2mins advertised but am struggling to find the docs.

Could anyone point out where these are? Is there maybe a video I can follow to test this?