skysight-inc/HackerNews huggingface dataset:
From the OP:

> This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository.
It says exactly that in the article:

> This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository

Hilarious.
In the end this sorta works: https://www.wolframalpha.com/input?i=convert+%285+mpg%29+to+...

Because way down in the "Corresponding quantities" it shows "0.47 L/km" and "47 L/100 km"

:)
Oh, yeah. He liked his ugly.

His ugly old men made his ugly old women look like models, but I usually hear about his women.
This is insane.

I've been using old.reddit.com (via DuckDuckGos !sro bang) for a while now, but this is so much better.

It's incredible how much better/faster/easier to use this is than the standard mobile site. What are modern web devs smoking?
This reminds of the Watchmen series. The policemen there wore masks (similar to superheroes) to avoid retribution by citizens.
https://www.uscg.mil//
Stripe shut down my account over first customer's payment issue due to 3DS
Yes, Stripe shut down my account because of a single customer's failed payment attempts. The crazy part is that it's neither the business's nor the customer's fault. The sad part is it was supposed to be my first sale.

Allow me to enlighten you about 3DS, Before I share what exactly happened:

As an Indian business using Stripe, all international card payments made to my Stripe account will go through 3D Secure (3DS) authentication.

What is 3DS?

3DS means going through an additional step (2FA) when making a card payment, but in case of a dispute, the liability shifts from the business to the card issuer.

ref: https://support.stripe.com/questions/3d-secure-authentication-for-international-card-payments-to-indian-businesses

Now, here's what happened:

One customer reached out to me to do a promotion on my product.

I sent the customer a payment link.

The customer's payment didn't go through because of the following error:

"3D Secure was completed, but the customer hasn't been verified because the bank does not support 3D Secure, has not set up 3D Secure for the card, or is experiencing an outage. The card network has provided proof of the attempt."

screenshot: https://cln.sh/ZTGrX85T

So the customer tried with other cards but faced the same issue.

Here's the screenshot of the conversation with the customer over email regarding this: https://cln.sh/NGVRg449

When I went back to the Stripe dashboard to see what's going on, I saw a scary orange banner at the top stating: "Your account is under review." I panicked and reached out to support. They sent me this email:

"We recently identified payments on your Stripe account that don’t appear to have been authorized by the customer, meaning that the owner of the card or bank account didn’t consent to these payments.
As a precautionary measure, we will no longer accept payments.
We’re sorry we can’t be of more help, but these restrictions are firm."

That's it, they blocked the account and can't be of more help. I was not expecting that at all.

I responded that the customer indeed tried to pay but couldn't complete the payment because of some 3DS issue from the bank side. I also attached the screenshot of the conversation I had with the customer.

screenshot: https://cln.sh/yxRc6tmM

I didn't get any reply from the support team after that.

As a second-to-last resort, I reached out to their Twitter support to explain the situation and got the same response:

"Thank you for waiting while we looked into this. We have taken a thorough review of your account and have concluded that we are unable to support your business. We appreciate that this is far from the answer you were hoping for. Unfortunately, we do not have any further information to share. We wish you the best moving forward."

screenshot: https://cln.sh/0cZRgwTh

I was also not expecting that at all.

As a last resort, I reached out to Hacker News now.
I understand the supply concerns, but in the future please consider a glossy display as default option (even if just in the DIY edition). It seems wasteful to have to buy matte display only to replace with a glossy one. A lot of people in the monitors community hate matte displays and actively avoid buying devices with them.
MSCHF raised from Founders Fund in January 2020 at a $200 million valuation https://techcrunch.com/2020/11/09/mschfs-push-party-raises-a...
> The faster we build the future, the better.

You're getting flak for this. For me, the positive reading of this statement is the faster we build it, the faster we find the specific dangers and can start building (or asking for) protections.
This article doesn't cover her achievements fairly at all.

Talk about how SUSE is all about the cloud now, Rancher, MicroOS, using SUSE packages in OpenSUSE and more.

Its not all about the politics

I think this is better with less speculation:
https://www.theregister.com/2023/03/23/suse_announces_new_ce...
The multi-modality of the model.
Maybe because the article says so?

> This week, we discovered that GitHub.com’s RSA SSH private key was briefly exposed in a public GitHub repository
Art sleuths reunited a family after centuries apart
Interestingly Google have a big advantage here, almost everyone wants to be top-ranked on Google and will gladly allow Google to crawl and scrape even when they aggressively close the door on everyone else crawling and scraping.

Google won't separate these things out, you get ranked high in the search engine _and_ your content goes into the AI machine, or you get neither.
I have a feeling that the entire article is AI generated since it gets things wrong, there are no monks it’s just a regular brewery it’s called a Cloister Brewery because it’s located at the site of a 12th century Catholic cloister, Neuzelle is also nowhere near Munich.
> I suppose only aimless sandbox games escape this.

Flow theory suggests that players will self-direct to find challenges of their own making. A sandbox game needs to provide enough opportunities for that and make it suitably rewarding.

> The gameplay loop of Counter Strike is nothing at all like the one in Obra Dinn or Return to Monkey Island.

No game has one single gameplay loop, they're all meshes of smaller loops, but as you go deeper you always(?) end up seeing the same structure, almost fractally. The reason that I believe this model applies to both Counterstrike and for Monkey Island is that you can understand the difficulty progression for both games in the same way.

If the test of skill for aiming and shooting is primarily being able to move the left stick precisely and pull the right trigger at the correct moment, then I know that the challenge will be harder if there is more precision required (make the range of valid x/y position values returned by the stick smaller, e.g. by reducing the size of the enemy on screen - distance or physical size); or by reducing the timing window in a similar way.

In a linear shooter game you will use this (applied to every mechanic) to steadily increase difficulty throughout the game. In Counterstrike you can use it to balance and measure relative weapon effectiveness and also analyse why some positions are easier/harder than others.

In a puzzle game like Monkey Island (which predates all this theory) you provide the player an objective and put a number of complications in the way[1]. You can make a puzzle harder by adjusting the number of complications in the way. You can also adjust the difficulty of each complication. If one puzzle type requires observation skills you know you can make such a puzzle harder by making the object harder to see on screen: size, shape colour, animation, etc. If there is a memory test component, you make the puzzle harder by increasing the number of things you need to keep in working memory at one time.

You can then reuse those puzzle types again and again, controlling the difficulty of the challenges over time by increasing the difficulty of individual skill parameters and combining them with new ones. The same thing you would do in a linear shooter. The Witness is a perfect example of this.

This is not my own personal theory by the way. It's also not the only way of looking at game design, but it's a practcal method I've seen all over the AAA space, at least. It's not strictly formalised across the industry but Ubisoft internally called it Rational Game Design[2].

[1] https://www.youtube.com/watch?v=zsjC6fa_YBg
[2] https://www.youtube.com/watch?v=xqHAjwrNp70
Do you have any examples of Debian doing this?
One philosopher’s arrogance is another’s “not even wrong.” Why bother refuting something that isn’t defined?
If the breach of contract is by the seller, then how does that result in illegality on the part of the buyer?
I love that the American solution to fire is... fire? We tried putting grown-ups with guns in schools after Columbine, and somehow more guns hasn't solved the violence problem. I don't think putting a cop outside each store will stop theft, especially when wage theft alone represents a larger loss than all larcenies, burglaries, and auto theft combined. [0]

> in the first 24 days of 2015, police in the US fatally shot more people than police did in England and Wales, combined, over the past 24 years [1]

[0] https://www.tcworkerscenter.org/2018/09/wage-theft-vs-other-...
[1] https://www.theguardian.com/us-news/2015/jun/09/the-counted-...
The law is like a piece of really stinkingly bad code. There's even a StackOverflow for law: https://law.stackexchange.com/ perhaps officials should check it out some time.
I know what you mean, my life has unfolded in a similar way.

What I have realized is that until we evolve our hearts and minds, no amount of technology will solve our collective existential crisis.

With that said, I am still young (33), live in Maui, and am still hungry and foolish to try new and bold things. :)
It makes it more efficient for delivery by most things.

Drone delivery is a mostly-bad or niche idea: https://youtu.be/J-M98KLgaUU
How is ChatGPT going to provide a response? It has to read the plain text.

Corporations are worried that OpenAI will use their proprietary data at some point, which might end up being memorized and regurgitated later.
Sadly I feel like trackpoints are really end of life and I wouldn't be surprised if Lenovo ditched them entirely soon. It seems they keep it only to please the tiny but vocal minority of tinkerers that we are. But we mostly buy old, second hand thinkpads.

And as keyboards get thinner, trackpoints lose in quality. On linux it seems the software side is also not as good as before with libinput.

So I'd be really surprised if any one new on the market would go about making keyboards with trackpoints now.
They didn't even get the places right. Neuzelle isn't anywhere near Munich. It's not even in the same state. It is on the other side of the country, near Berlin.
This is a big deal. Huge.
And the methane emitting vegans too :)
IMHO Pretty great of dbrand to step in and sponsor a topically sensitive video on short notice as well as provide a pretty big carrot to bring in a flood of traffic. Just ordered a matte black skin for my MBP 14". I have no relation to dbrand other than being an occasional customer.
WOW! I think I'm going to pre-order one, trackpoint be damned! My wife is a bit suspicious of these laptops, let's see how this one fares.

I just need to check if it'll work with my Thinkpad Thunderbolt 3 dock (or something similar, I can buy another dock) to output to 2x 4K (actually 3840x2560, so bigger than 4K) monitors. I can currently both power my Thinkpad, and connect all the peripherals, with 1 USB-C cable. It's not something I'm willing to forgo.
This is no less safe than a boring Excel spreadsheet. Looking different doesn’t inherently make it unsafe.
I thought you could have inexpensive laptop stands that also raise the keyboard a bit to the same effect. Try one, they are amazing. And they improve the airflow, too.
DNS can trivially be mitm'd. DNS-stored fingerprints are strictly less secure than TOFU.
hmm. this migration would have been possible by staying with nix and developing a rules_rust equivalent (maybe it already exists) - see https://github.com/ghuntley/depot/tree/trunk/nix/buildGo for example but for golang. provides a simple dsl over nix and hides nix.
What a nothingburger. A man who lived centuries ago made comments about people who look different that we now interpret as unkind. He also drew some of these people.
You are assuming it is 100% perfect at detecting sarcasm at all times. There is no reason for this to be true.
The report is quite long and detailed
AI is still in an info-phase Bitcoin was in before 2017. Tech news are 50% AI, but it’s not on TV or in general public chit-chat yet. Expected to see an avalanche of fake/fraud/phony products based on it as we’ve seen about blockchain. It’s surprising it took so long, actually.

Also expected to see some bs in a spirit of (but unlike) NFTs.
Power does corrupt but systems can overcome it. A lot of good research out there about mistakes in hospitals arising from the power dynamic between doctors and nurses. How nurses would be afraid to challenge doctors when they make mistakes.

And how changing the systems and culture can fix it. Think the book checklists discusses this in detail .
Everybody decides what technologies to use all the time. Condoms exist already, but not everybody uses them always.
Windows 11 gets phishing protection boost and SHA-3 support
yeah, some sort of caching. Small models for most tasks with a way bigger models just one get-request away. It's a smart idea that hasn't been tried yet. But I bet that you could shrink the models significantly. It doesn't really have to know so much if it can google, but I we don't really know how to train such models (we just want the "common sense" without so much knowledge).
Find you a local pottery. Tiles are totally something you can still do in smallish quantity by hand. Mind that they won't be "calibrated" tiles though so it'll be a bit trickier to lay them neatly.

EDIT: Be sure to get mirror copies made too. It'd be a shame to go through all the effort and end up with the backside of tiles showing.
It is legal, there's ECJ ruling that software can be resold. It cannot be a breach of contract, if that contract article preventing it would be unlawful.

Microsoft of course knows it, they are silent about the issue, preferring fear and doubt, just like you demonstrated.
Ask HN: What is your prediction for a Search Engine for the next 20 years?
With a lot of improvements in the LLM space, I am both excited and concerned. On one hand, giving internet access to ChatGPT may yield good results, but I am not sure about the quality of answers it will provide since it uses Bing under the hood. On the other hand, the internet will soon be flooded with garbage AI content, making it even harder to filter and find good content.

I am curious, what is your prediction for what the search engine will look like in the next 20 years?
Worth noting that every other product MSCHF has made has actually been real though.

No reason to believe this will be any different just because they are an art collective.
Power does corrupt. But more than that, it attracts authoritarians who live for power abuse. And the top authoritarians are the ones who hire low-status authoritarian thugs and give them a uniform and (more or less) free reign to bully, abuse, and intimidate.

Police abuse starts at the top of the culture, not the bottom. Replacing the people on the ground will do nothing without also replacing the people who use police power for their own ends.

That won't happen without political and economic change. A traditional redistribution of wealth and power won't be enough. The problem needs a new political system with checks and balances that provide strong immunity to authoritarian capture by narcissists and sociopaths of all labels and persuasions.
Am I the only one dying to learn more about this? How was he running a brothel in AZ?? Was it near the border?
It’s an untruth. There is a validation step of course, which means that there is a decoding step. There is no encoding step because the wire format is the same as the in-memory representation.
Are you pasting your private key into a browser field? There might be a difference or if you actually are, you should full stop doing that
This text resonates so much with the situation my team and I are experiencing right now. We are working on a Sales Territory management module which sits on basic concepts the typical field sales managers deals with every day. So what sounds totally obvious to our product owner, a former sales manager, is kind of out of this world alien talk to our devs. We are working on prototypes so they can understand things as they use something. The schemas on the PowerPoints didn't help at all.
I mean, yes, but you'd also have to have a way to actually MITM the person you are targeting via HN comment, before anyone pointed out it was wrong. It'd be much easier to just use the MITM you already have and not raise the suspicion of posting in a comment.
Corporate PR lessons from this post:

- Push security breach details down so fewer people read them. Nothing until line 11. Or line 13 if you count the TLDR.

- Litter your text with understatements. After publicly exposing keys, you replace them "out of an abundance of caution" to replace them.

And yet this is one of the best security breach posts I've seen in a while. When will companies start to respect developers?
Error correcting codes will be able to perfectly recover the original data as long as the error rate stays below a threshold, but past that threshold they can't recover almost anything.

If you combine EC codes with a standard image codec, which usually has some non-tolerant entropy stage, an unrecoverable error means you probably lose a significant portion of the image.

With a method like this, instead, the image quality smoothly degrades as the error rate increases.
It seemed to be briefly listed on Steam, though the link is now dead. Here's the Wayback Machine archive: https://web.archive.org/web/20230322031642/https://store.ste...
I have a cheap laptop with a broken case and a flaky screen. Repurposing it as a desktop pc with a small case like this would be really nice.
A member run collective that advocated for pay and conditions?

No need to imagine: https://dfwa.org.au/about/

What's so strange about public sector unions?

https://en.wikipedia.org/wiki/Community_and_Public_Sector_Un...

The problem with the US Police unions is they act to cover up bad behaviour, etc.
Interesting bit, that many people miss: The enteprise windows license is not "standalone", you cannot use it with any device. You may use it only with device, that came with valid OEM or retail license.
> I would probably argue that venture capitalists are not good for society regardless of what they’re investing in

Then her argument is a poor one. VCs, and capitalists in general, put money at risk in the hope of generating wealth above their initial capital. They produce goods or services that benefit society, absent the internet-controlled juice-squeezers.

Where there are outsized returns on capital, in a well-functioning system, capitalists are supposed to compete for those outsized returns, thereby reducing the returns.

Society has benefited greatly from capitalism. I wouldn't leave it up to the likes Molly White to produce anything meaningful.

But let's be honest, we knew all that already.

There's some flies in the ointment, of course. Some companies produce super-normal profits, because they are monopolies, near-monopolies, or oligopolies. We have legislation for that.

Perhaps a more worrying trend is what we're seeing in the likes of Facebook and Google: rent-seeking behaviour and vendor lock-in. It's all too easy to tie something in with the internet with a kill switch. Actually, I'm not all that concerned if Google or Facebook were to disappear tomorrow. I don't use Facebook anyway, so there's that. Google is replaceable, too. Sure, we'd have to scramble around sorting out our emails for a few weeks, but that's about it.
For higher grade jobs they encode the URL in an image.
I don’t find classrooms particularly engaging, but an open book in front of me is even less so. Classrooms are basically the only way I get any not-immediately-interesting learning done.
aah yes I may remmber... I think they pushed for using såpa instead :D
thank you, good samaritan, for doing the tough but necessary work of disparaging this blog post, and the person who posted it, because you find the conclusions obvious

i'm sure that marc brooker, the author, and one of the most accomplished computer scientists currently living, will think twice before posting such pablum again
> I often joke that my goal is to become independently wealthy so that I can afford to get some work done.

This resonates with me so much today it's uncanny.
Forcing aperiodicity makes the installation idiot-proof though.
I think the idea behind these products is that network requests and responses containing sensitive data never reach their target in the first place. So if someone tries to tell ChatGPT sensitive data, the outgoing request is simply blocked. Harmless content goes through, though.
> I wonder what the illogical conclusion is? SDMD RAID?

MDRAID was AFAIK originally developed and tested using floppy drives, as the developer at the time couldn't afford a PC beefy enough to have multiple hard disks. RAID from SD cards would be the closest modern equivalent to a return to the project's roots.

(And (µ)SD RAID has been done many times for hobby projects, it gives you stupid data densities on a tiny power/volume budget… at least until the cards start dying from all the abuse. C'est la vie.)
Does it really help that much in practice?

> Easier to share configuration settings

I want to share my nvim config between both my home Linux machine and my Mac at work, but I don’t want to share my config for gnome and its apps. So now I’ve got to maintain a script to go one more subdirectory deep to pick which dotfiles to sync and which to ignore...

> Easier to temporarily ignore the config
> It is easiest to set XDG_CONFIG_HOME=/tmp/dir

This is such an unreliable way to do it, even within the xdg world. What about stuff in ~/.local/share? It’s a lot easier and more reliable to just set HOME=$(mktemp -d)

Personally when I’m trying to start from a clean profile, I find it much easier to just go and blow away ~/.mozilla than to go and surgically remove .config/epiphany, .local/share/epiphany, .cache/epiphany, and whatever gconf (or gsettings or whatever windows registry clone we’ve got now) settings it’s got.
My one gripe is that many systems do not provide a writable XDG_RUNTIME_DIR in all cases because the requirements in the specification are impossible to meet at the same time (the specification does not acknowledge the existence of “su --login”). This means that applications still need fallback code, which historically has been buggy (e.g., using shared /tmp without safeguards).
Until they deprecate old.reddit.com
Red Hat veteran will head up SUSE from May
That is the ED25519 key's fingerprint, which shouldn't have changed.
But that is moot, as GitHub doesn't publish fingerprints as SSHFP records.
Could you explain how supporting multiple languages increases the parameter count so much? I'm genuinely curious.

LLMs seem to be comfortable with hundreds of programming languages, DSLs and application specific syntaxes so how does supporting a couple more natural languages become so expensive?

I see how more training data would be needed, but I don't understand how that maps to a greater parameter count.
export GOPATH=~/Projects/go

Has been like this since forever.
Definitely, for some years now the iPhone has had AI stuff on board to categorize and organize your photos (recognising people, creatures, "things" etc), all on board and built into the device - unlike Google that requires you to upload them first. It's not a stretch at all to have more functionality like Siri run on-device.
I guess if your passion is coercing broken tools into half-assign trivial jobs more power to you.