skysight-inc/HackerNews huggingface dataset:
> If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid

Again - how would that possibly be a security vulnerability? Like, its a really interesting security adjacent bug, but clearly not a security issue.

If the attacker has the ability to set a hash, they can just set the hash to a known password.
> mutate until you get viable specimens

Mutations are very rarely viable. In fact, the original cloned animal mutations must be eliminated in order to have viable future generation. The only thing that (may) benefit from mutations is the imune system. See the problem with cheetah's lack of genetic variability: https://en.wikipedia.org/wiki/Cheetah#Genetics
Credit to those kids. School should be ashamed of themselves for that teacher’s inability to understand the nuance of the rule and more importantly work with and advocate for those kids. The teachers role never should be adversarial.

That being said, the cynic in me sees the “Technology Students Association” as a massive grift that would make the College Board blush and these competitions are simply college app padding, with enough categories and regional levels that everyone gets a line item (well I guess except these kids.) It’s disappointing and frustrating but ultimately of little importance.
This article feels 10 years too late. This might have been a reasonable article before the collapse of cryptocurrency, the invasion of Ukraine, and the geopolitical jockeying with China.

The real world (the Atoms as the articles call it) always has a way of coming in.

Even the most hardcore digital people have a significant percentage that want to have a partner and have kids. Kids are very much Carbon.

I don’t think there is as much of a separation between the Atoms and Bits with regards to people and that most people live in the physical world and see the digital world as just an extension.

Srinivasan whom the article references a lot, looking at his startups, seems like a world class BS’er who has made a lot of money in the Atomic world hyping up the digital world.
Chip Makers Turn Cutthroat in Fight for Share of Federal Money
> See? That's how quotes work.

See, if you're going to make fun of someone because you think that they are ignorant of some piece of tech, then people are going to point out that you're no smarter, when you were ignorant of the rules.
The database could be corrupted somehow and then any password will match. Some developer may just look at the RFC and assume random strings should fail the check, so may develop something that actually passes on random string. It’s probably not even a real security issue, but definitely strange behavior
Netflix Crossed a Line
ECL license is LGPL-2.1-or-later (not LGPL2), the same applies to Clasp (which was forked from ECL).

n.b isn't this thread infested with bots? 4 or 5 nicks created 4 days ago with incomplete messages..
Folks in Economics and Python channels seems reasonable.

If the same C folks are there, agreed.
Forums were great. I miss them greatly. Not only were they better for debate, but they fostered a sense of community. They were welcome to discussion and collaboration and experimentation. People could learn from each other and form lasting bonds. Everything on sites like Reddit is too ephemeral and anonymous.
Do you know what paraphrasing is?

I'll quote rules and other such things verbatim for accuracy, but I'm not going to quote entire paragraphs of some random writing verbatim since it's not worth my time.
By definition most of them won't because it's a complicated mess.
Monitoring weather data at home is a cool project! I have a Davis station installed on a pole above my roof and it is interesting to see the difference between feelings and measures (esp. wind gust and rain rate).

Anyway, to collect weather data from Davis station, I highly recommend https://www.smartbedded.com/wiki/index.php/Meteostick

It is very simple to use and works really well - it is also supported by WeeWX through an out-of-tree driver, but is easy to setup. It also allows you to keep your console in your living room while you collect data in your basement.
Ubuntu Flavors Dropping Flatpak
Biggest issue I have with my current game engine is compile times are about a minute for C++.

I don’t see it anywhere but would love to find that Ambient can go from code change to running multiplayer clients in < 10 seconds
I would expect so, yes.
This issue is caused by a PHP specific modification to the crypt_blowfish implementation
that is fittingly named “PHP hack”:

php-src/ext/standard/crypt_blowfish.c
Line 374 in 2740920
if (tmp == '$') break; /* PHP hack */

Cheeky hacker.
They started with a pre trained model so symmetries were already broken, so despite what randomness there is in the fine-tuning process it may have well followed the same groove every time in training.
https://archive.is/dzXZu
Thank god these people and their ardent supporters aren’t cops. Can you imagine if some clown ticketed you for one of those anachronistic or nonsense laws that are still on the books in some places, like the infamous “ice cream” laws.
I'm confused as to why anybody is downloading non work apps on a work device
Obligatory "that article is from 10 years ago and it's really not the same PHP anymore"
Reddit has been the only place. Stack overflow and Quora push against any form of discussion. Super annoying.
No it's not. Every time they have an outage more folks jump to other Git hosting alternatives. The biggest free software projects like Freedesktop, GNOME, KDE, are all self-hosting GitLab. Folks concerned with their data and the idea of US sanctions and corporate control look at projects like Codeberg. and Folks tired of slow UIs and ‘social’ moved to SourceHut and cgit. The thing that keeps replenishing the proprietary platform is new developers being told they need to put their projects on Microsoft GitHub.

Arguing decentralized version control, like Git, should have a centralized home is antithetical to the tool.
> but missed one of the three ways crypt can signal failure (returning the input unmodified)

Returning the input unmodified is not failure, but success. That's how you check that a password is valid without having a specialized API.
It is also useful to have handful of "easy to fix" bugs on backlog to use as on-boarding for new developers .
I agree in spirit, although I’d put it as „every generation needs to go its youth period, when it tends to behave excessively irresponsible and selfish, before they can mature and more or less join the adult society”. I’m 41 :)
I hate PHP, but that article is so old and outdated now that it's meaningless in this context. PHP is a completely different language with far more strict typing to opt into and more consistent stdlib APIs.
I don't understand the scenario. You're saying this is bad if you hash on client side and compare to a plaintext password stored on the server?

I mean, i suppose, but such a setup is so broken does it matter?
Web Browsers for Privacy and Security
One scenario would be setting another user’s password to the invalid hash so they can continue to log in with their existing password, and you can also log in without knowing that password.
Here are details of how someone put together a t480 with the t25 keyboard. It's an expensive project:

https://www.xyte.ch/mods/t25-frankenpad/
OpenAI, not OpenAPI :)
What's also not captured in these aggregate birth records:

- Urban births are much lower than rural births. If it were not for rural women, the births would trickle down much lower

- There are many couples who want to have children but can't because of fertility issues

- Becoming a parent and maintaining parenthood is difficult if these things drive you to poverty, especially in a class driven society like S. Korea.
Maybe, but failing to turn lead into food isn’t technically fraud. It’s just an inability to mature the technology into a viable long term product. Happens all the time with crypto, jucero etc. Movie pass was probably too close to Fraud though and risked clawback
I just tried this out. Turned on zoom, without the controller, couldn’t get the menu when three-finger double-tapping.

However, when I three-finger triple-tapped, the menu showed up.
In Europe these are complementary.
Shared hosting does not typically run an external mail service. It's just Exim or whatever running on the same box as the shared Apache.
To all the commenters that I see here writing comments among the lines of "rules are rules and must be followed to the letter", I strongly suggest you to read the book "Law for Computer Scientists and Other Folk" [1]. In one of the first chapters, it clearly explains that rules must be interpreted, and in doing so, one must take into account the specific situation a rule is being applied to. In this case, it seems quite clear to me that the intent of the rule was to prevent participants from using a tool that generates code for them, not to prevent them from using a version control system. So the real question to ask would be not if they used GitHub or not, but if they used it to generate HTML for their site or if they used it only for version control. In the former case, they deserve to be disqualified. In the latter, the rule doesn't apply.

I think that the real lesson here is that if a rule is too subjective to interpretation, is better to discuss it beforehand, because even if you're right the person responsible for enforcing it could still get it wrong.

[1] https://global.oup.com/academic/product/law-for-computer-sci...
"Orignal" License key cannot be easily rotated from the UI.
You must post the issue to the public community forum and then the stuff will open an case for that.

https://forum.newrelic.com/s/search#searchString%3Drotate%25...
Software dev from Europe working in LATAM?
Hi!

I'm from Europe, working as a consultant for a web agency, doing mostly .NET backend and React/App dev.

My girlfriend and I are looking to maybe move back to her home country in Central America within a year or two.

I'm thinking then, that should work pretty well seeing as I'll be in a US timezone, so remote work for a US based company should be possible, rather than trying to find a job in-country with my poor Spanish. I'd probably get paid more as well.

This comes with it's own set of special problems of course, I'll probably have to open a company in the country itself to receive money from the US based company, otherwise I'm sure the banks will give me problems for loans etc. in the future.

Anyway, my question is this:
Would you as a US based company hire a software dev from Latam? Are there any gotchas that make this process difficult?

If you're a company and you have hired devs in that part of the world, what is the usual compensation levels you're looking at? Going by my salary here in Europe, and the economy in the country I'm planning to move to, I'd be happy around $80k, but what is a good number to ask should I get in contact with companies?

Thanks!
Been a while since I used a MacBook but can't you do Shift+Opt (or just Opt?) Brightness+/- for an incremental change still? Works with volume too.
Reddit pushes against any form of discussion. If you don't echo the sub's sacred tenets, the mods mute or ban you for "trolling" or "misinformation".

It doesn't even have to be a controversial or topic-based sub, and the comment doesn't even have to be a politically or socially-sensitive issue.
> I fail to see how this is a bug if you feed it garbage

What an awful response to someone reporting a pretty serious security vulnerability.
European Commission orders staff to remove TikTok from work devices
https://www.reveddit.com is probably the most popular

there is also

https://www.unddit.com
I don't think it needs something deeply clever involving hardware breakpoints, sniffing for virtual pages backed by real memory or something like that. And probably that's why it is described as a honeypot.

It can just be something exposing a data structure that gives the player some unfair advantage and them watching the players that could only have achieved some very unlikely advantage in the game by exploiting this information.

In a FPS for example, if a player consistently anticipates their adversaries sneaking behind a wall, well beyond what would be dictated by probability laws, there's a very high chance that he is cheating in a way that allows him to "see" their adversaries behind walls.
I agree with the "out of tune with reality" but in my experience it can also be a chasing after the next big thing to the detriment of the current reality. That rests on a belief that computer systems are not an end in themselves except where you are selling them to not be an end in themselves.
>They don't have to tolerate anything with China or Russia.

Of course, China and Russia are such bit players that contracts can be broken with them at will.
> However, the next step seems to be simple: build a second AI which has the ability to understand facts, but doesn't need all the fancy language generation capabilities.

I'm not convinced that will work, but let's say it could. First, you'd have to build that oracle and the problem is, as far as I'm aware, we don't know how to do that. That'd be one of those new techniques I was referring to.
A Realistic Look at Implications of ChatGPT for Cybercrime
Why is it so incredibly ridiculous to you to even entertain this thought, even though it would help in this situation (by saving the fetus' live)?

It isn't ridiculous to me. Even if it was, it wouldn't matter, because that isn't the topic. The title is "Florida lawyer argues pregnant inmate’s fetus is being illegally detained." My position is that argument is ridiculous, not that the woman in question doesn't deserve competent medical care regardless of what circumstances are necessary to achieve it.
Are RefreshingView, FunnyGuy567, SultrySiren6, and GirlFunk87 all someone spamming the site with gpt bots?

How annoying.

edit: TropicalDelight, SimplySweet4, WonderWeirdo0, WickedlyCool and
SoulmateTravels as well.
The Typosecond, a new, fundamental, unit of time
From what I see, there is no mention of either Sam or Jim on the actual page: https://atomicsemi.com/

This tweet alludes to Sam being associated with Atomic Semi
https://twitter.com/szeloof/status/1628528981430657026

And this twitter thread mentioned in the comments makes no mention of it:
https://mobile.twitter.com/szeloof/status/154993704406717235... (Ctrl + F "Jim" or "Atomic" gets me zero hits)

Maybe I am dense, but where is Atomic Semi saying that it is being started by Sam Zeloof and Jim Keller, especially if the title is saying that (which I thought titles weren't supposed to be editorialized)?
Indeed, corrected. Thank you!

I'm not sure what is happening, there are multiple small posts which look like spam, with green nicknames.

Edit: green nicknames are from new accounts. On this page, all of them are spam. At some point it would make sense to just hide them all.
> americans still don't think in terms of groups

As an American, I find this statement radically perplexing.

Through the scourge of identity politics, we do nothing but categorize people into groups in basically every avenue of society. You can't go to college without your group affecting you. You can't find a good job without your group mattering.

Individualists who essentially want to take the Martin Luther King Jr speech literally (I have a dream that my four little children will one day live in a nation where they will not be judged by the color of their skin, but by the content of their character.) can be castigated as the most vile people by some for not wanting to treat anybody differently from anybody else.
If the time between successive GPT releases halves after each successive release, we'll have to do what Bungie did with the third game in the Marathon trilogy and call it GPT-∞.

And then the post-singularity open source release, GPT-ℵ₁
> The goal of government is to represent its citizens to try to achieve the society that citizens want.

This is something we tell ourselves even though we know it isn't true. Take something like the Iraq War, which had abysmal support for many years yet continued on for no good reason. Or what percentage of our CIA operations would the general public feel represents their interests? And how many billions of taxpayer money is wasted on special interests that only a tiny fraction of people care about?
> It had obvious race-condition type bugs when it came to the user interface layer, but most frustrating was its tendency to succumb to some kind of memory leak on long drives where the entire head unit would just lock up and crash to a black screen after 6-7 hours of being turned on. Because the vehicle kept the computer system "warm" for up to 30 minutes or so to avoid doing a full (and slow) bootup process every time you stopped for fuel, this was a real problem on long trips and couldn't always be solved by power cycling the vehicle.

Had this problem with an A-K200 about 13 years ago - when driving long distances, after a couple of hours the nav system would randomly stop working. Sometimes stopping at a gas station would allow the system to reset by itself, sometimes not.
If you want good quality discussion on the Internet, my experience is that the best place to find it is behind a paywall. The WELL is a long-standing example; I used to be a member, before becoming excessively frustrated with some of the personalities. You couldn't fault the depth of the discussions however.
For my own server I used the osin[1] library.

[1] https://github.com/openshift/osin
…sure, but the discussion is about _where_ taxes a levied, and _how much_ taxes should be levied.
The value prop is for people who do not want to maintain billing, infra operations, custom software, security, custom features, multiple platforms, and Docker expertise, when they don't need to. All of that is time consuming, difficult, and expensive to develop.

Just paying extra for all the above to magically give you faster builds is easy, fast, predictable, guaranteed benefits. Totally worth it.

If you need a lot of milk every year, you could buy a cow, or you could just buy milk at the store. Most people agree the extra cost is worth it.
> No. Almost all dictatorships in South America ended less than 10 years after Carter left office

Read operation condor and see if the dictatorships actually ended.
What’s a “box dye”?
Truth. Vendor lock-in is a concern when it comes to platforms. One thing that can help is writing shell scripts (or Nix building those scripts) for CIs to run minimally. With the merge request model having issues scaling, I'm curious how long til we push to a different model, or a different tool like darts/Pijul.
>also deploys straight HTML if available

~~Technically is still processed via Jekyll. To bypass Jekyll you need to add `.nojekyll` on root. Something the authors found out themselves after someone on reddit told them about it. (Not that it would change anything.)~~

edit: On second thought that's probably wrong.

>They did not use the template engine functionality.

Regardless the rule was clear. "No Github." Yes, it's bullshit*. But this should be argued before making the submission.

*Rule also includes Replit. What's even funnier? "Frameworks, such as Drupal, Joomla, Wordpress" are allowed. So using a template engine is bad but using a CMS is fine.
The 'y' letter is the close front rounded vowel, which is just plain missing from the most common english dialects, see https://en.wikipedia.org/wiki/Close_front_rounded_vowel#Occu...
Reddit and up until Musk also Twitter are heavily left leaning with all it comes with like progressive opinions over conservative etc., I don't think they are even hiding it

it's very difficult to have civil discussion on Reddit if you go against official Reddit hivemind, but yeah there are smaller subs where even conservatives/centrist/right can discuss
I think Mermaid is better than PlantUML to write something quickly.

But D2 looks very promising. I like the simpler and more intuitive syntax.

https://text-to-diagram.com/
Or maybe there were more important people than him

Just because they arent celebrities it doesnt mean that they do not exist
Also a good series bot focusing more on the higher level (but without dissolving into woo) is Sean Carroll's Biggest Ideas in the Universe series https://m.youtube.com/playlist?list=PLrxfgDEc2NxZJcWcrxH3jyj...
This is like saying only carpenters should be able to design houses. Sure there are some excellent carpenters that are also good architects, but most are not. There obviously needs to be good communication between the carpenters and the architect but these are distinctly separate functions.

The Twitter OP sounds like someone that’s a bit full of themselves and struggles to see other perspectives—-a core skill to be a broadly respected leader.

I’ve seen the persona they’re referring to materialize, but that’s just someone that’s a bad architect. I’ve equally seen plenty of “know-it-all get outta my way” developers that say they don’t want others around but create terrible productions systems that end up failing because of bigger picture design items the developer missed.

Building excellent production systems at scale is a hard job that requires strong collaboration from diverse teams.
Show HN: IngestAI – NoCode ChatGPT-bot creator from your knowledge base in Slack
You have, ironically, violated HN's rules here.

Please do not use quotes for things that are not quotes.

Please do not engage in name-calling.
I enjoyed the self-reference here
As a young person my takeaway was the opposite and your post only inspired me to break some rules just to spite you :-)
I think that's the main problem with 4chan, the whole ethos is built around being hostile under a veneer of 'brutal honesty.'

The immaturity of such behaviour wears thin quickly after the first few laughs, unless you like the company of a-holes (can't think of a better term).
Does what you've written here apply to UK universities too though?
I was in an SME in the 90s where we bought 701Cs for the execs.

I can confirm they were awesome, back then it was de rigueur to have a chunky docking station to mount your hugely expensive (and altogether hugely) CRT monitor.

The 701C had a particularly nice docking station too.
> Most governments don’t remain in power for more than a few years. They are constantly changing. Which prevents what you’re suggesting from happening.

Over 4 million people are employed by the US Government, with the number being elected to those positions only in the hundreds, and those appointed numbering a few thousand. The reality is there is very little turnover in the government.
OP’s link disagrees. A critical vulnerability being called »not a bug RTFM« is the same cultural and engineering level of »string length as hash function what’s the problem«.
Most inflammatory? Yes. Best? No.
For the first few weeks using IPv6 I used a UniFi security gateway with some pretty standard config (you don’t get to adjust your DUID or anything) and a Comcast business gateway as my modem (it’s also a router, so if there’s a DUID misconfiguration it’s Comcast’s fault). So the Comcast gateway got a /56 and further delegated a /60 to my USG (the Comcast modem has no bridge mode, this is how it has to work), and my prefix still changed 3 or 4 times.

I’ve since changed to my own modem and my own OpenBSD box with a statically configured DUID (randomly generated UUID persisted via the config file) in my dhcpcd.conf. My prefix still changed a few times.

I’ve heard a lot of people saying their prefix has been mostly stable, but it hasn’t been the case for me. Maybe my account is misconfigured on Comcast’s end, maybe something else on their end is wrong, but I’ve checked everything and it looks right on my end.

(My IPv4 address has remained perfectly stable this whole time too. Only my IPv6 prefix seems to be constantly changing. It’s the exactly the opposite of what I’d want, I could care less if my IPv4 address changes, I only need my IPv6 prefix to be stable.)