skysight-inc/HackerNews huggingface dataset:
I'm a practicing anesthesiologist whose wife is also a physician. I'm sure I can drag up a boatload of references if you're genuinely curious, but the short version is that almost anything can be adjusted for if you do it every day. If you're on warfarin for anticoagulation, eating vitamin K-rich foods will affect that. So it's not that eating spinach is forbidden; it's that you have to eat the same amount every day or very, very little ever.

I mean, we do give drugs that have primarily renal excretion to people with nonfuctioning kidneys. After we consult a pharmacist, of course.

And I have no control over my patients' behaviors, because I don't meet them until the day of surgery. I already have to take them as they are. I might delay or cancel a case if someone isn't optimized, but sometimes "really bad" is as good as they will ever be.
I'm not arguing against input sanitisation, I'm just arguing (rather poorly, it seems) that if the majority of folks are skipping some security feature, then the feature is not well enough designed.

I'm for input sanitisation, I'm against having it optional and left up the the developer.

Typing on a phone makes me unnecessarily brief, apologies.
I'm imagining Twitch Plays Pokemon but even less coherent.
There is a huge difference between a leadership-endorsed strategy memo like the Nokia/Elop "Burning Platform" memo (1), and a memo by a random engineer like Steve Yegge's Platform rant (2).

Random engineer memos can certainly still be influential, but they do not dictate company direction.

(1) https://www.engadget.com/2011-02-08-nokia-ceo-stephen-elop-r...

(2) https://gist.github.com/chitchcock/1281611
I pronouce the latter as ~parent-siz; having them the same never sat right with me.
I'm in the same boat as hnaccount141, I play around with a lot of non standard, and agree that a drop down would probably cover a lot of peoples use cases.
Ask HN: Why is OAuth still hard in 2023?
Why do you think OAuth remains challenging even in the current technological landscape?
Just yesterday, I came across a post discussing CVE-2023-28131, a vulnerability that has impacted hundreds of websites.

How can we address the recurring vulnerabilities and make OAuth more user-friendly and secure?
They (at least the hypothetical ones who were not cheating in this philosophical sense) should not be allowed to pass the final and should not be expelled from the university for what they did. Admittedly, that enters the realm of personal opinion; the university’s policy is that a student using such a resource is cheating. The teacher also seems to be considering a lighter punishment so I don’t expect this case will carry any such injustices. (Really, I expect most or all of the students were cheating in the moral sense. The possibility that one wasn’t makes me question the policy.)

That being said, there does seem to be a certain assumption about the intentions of any student who would use this service. It’s not hard for me to imagine someone who has to and wants to bust their ass learning getting caught up in unfortunate circumstances (like the stress of wanting to pass a final causing the poor decision to use this study resource coinciding with their teacher poisoning said resource coinciding with the aforementioned stress causing them not to question the incorrect information they found ultimately resulting in their expulsion for otherwise not-necessarily-unethical behavior) because it’s assumed the professor was adequately tricky with their questions.

(Maybe I just need an hour off work to explain myself properly on a Friday.)
I wrote this, let me know if you have any questions.
They don’t really. People have different thresholds for acceptable exploration costs and heuristics for approximating those costs (as well as the opportunity cost of alternative courses of action).

IMO, in biological systems the explore vs exploit tradeoff is pretty analogous to the halting problem. There doesn’t seem to be an optimal general “solution” to it.

Once an organism is very familiar with its environment it’ll approximate near-optimal trade offs, which would suggest it’s just using heuristics.
Every program halts because no computer can run forever
That's a great point about the intended audience but I wanted to mention that I was a bit distracted by how you gendered some of your language.

For example you talk about "The playright" and then refer to "the group he serves" which causes one to imagine the archetypal playwright as a man. Again, the person who doesn't understand the language is "a man who doesn’t understand."

I know this style of writing was the norm in the past but I found it quite jarring to see it today and honestly I had to read it again to catch your point. On the re-read I caught that only the "random person off the street" was a person and not a man.

Anyway, hope it's ok to call it out, don't mean to come across as unfriendly.
India official empties dam to retrieve lost phone
Why do you think the market is moving to mirrorless? I remember there was a craze when they first came out, but died out in a couple years. There still are a lot of good and "good for the price" mirrorless cameras available, but they certainly don't seem to be taking over the market.

As an active photographer, I still see most people using DSLRs or their phone. Actually, everyone I know who bought into mirrorless actually gave it up.

Back when they were popular I did look into getting one. But there were too many competing lens mounts, and not enough good lenses. So you could buy in to one mount only to have a different mount take over the market, or have yours go away.
To be honest, I rarely forget about security, but I don't want to have to remember.

What I want is to have my runtime/framework/language drop me into the pit of success (a popular phrase, might even have it's own Wikipedia page)
Yeah a few people got banned from places using it, and also tried "...in Roblox". I think I remember seeing "... Roblox [your|my]self" as a euphemism too.
This is truth. If you can find meaning of passion for your work that's great but don't believe these lies that is a requirement. Work is a way to get money and that provides a means to an end. Find what your end is and earning is easy.
Savings from what? Boomers will still be consuming a lot of resources for a couple decades yet. But they won't be productive or paying much in the way of taxes anymore, which means that younger generations will have to endure higher taxes and/or inflation to support the Boomers. Someone has to pay those assisted living facility bills. (And to be clear, I am not arguing for abandoning the Boomers or anything like that.)
you're not silent by the time you hit 60 even if it feels that way in the car. It makes a significant amount of noise at 30mph
> Experts theorize this is a revenge behavior resulting from one of the orcas encountering traumatic event with a boat. The problem is, other orcas are emulating it.

Crows, IIRC, communicate the identity of other individuals who are witnessed to injure crows to other crows; orcas communicating similarly but generalizing to a class of offenders seems not too surprising.
Ask HN: PostgreSQL 16 Beta 1 already available in AWS RDS preview?
That was fast. Literally the day after Postgres releases, it's already available in RDS?

Are AWS working together with the Postgres team now or something?

If so, that's actually very interesting news to me. Did I miss an announcement?

They don't seem have anything like that tight of an integration internally - it took ages for Postgres 15 to be made available via CDK after it was officially available in RDS, for example.
Ah okay I see now you were referring to failure to sanitize inputs/outputs in the original comment. I don't know if this oversight occurs more often when using string templating, but I'm pretty sure this was already a problem long before string templating came into practice.
Isn't that just Arial?
You're right -- there are a lot of tradeoffs here, and one solution isn't necessarily better.

What Native AOT offers is very small binaries, with very fast startup, and smaller working set. It can also be integrated as a standalone static/shared library into a different application.

Self-contained apps don't require AOT compatibility and may have higher peak throughput (as you said, JITing can be faster in some cases).

It's up to you and your application whether the trade-offs make sense.
I think that with that ioctl in place, once root hands the TTY file descriptor to processes in the bob security context, it can no longer trust that TTY object to be secure. Doing an "exec su ..." doesn't necessarily fix it, unless that has the effect of destroying the session (logging out). If root keeps using that TTY and trusting its input, it's a problem.

Say you want to fix the problem, while continuing to support that dubious ioctl. What you need is the ability for the TTY driver to send a SIGKILL to every user bob process that has an open file descriptor to that TTY. After killing all those processes, then restore the original TTY settings before the su command was run using tcsetattr with TCSAFLUSH to throw away any pushed input.

Even then, there could be exploits that use weaknesses in the terminal emulator to reflect input.

Also, social engineering hacks. The same human that operated the root shell is su'd into bob, and malicious software installed by bob can fool that human. For instance, by simulating a system login prompt.
Its rather funny, isnt it. But I wonder what the context is. Why they added it.
Excluding the closure of nuclear power stations, what do you consider bad about the German energy policy?
Maybe they don't appreciate the over-fishing and attacking these boats is all they can realistically do. Would anything even change if they were to write a formal letter to the "apex predator"?
Well, it's not that it's wrong to convince people to do evil that otherwise would not (arguably, that is conspiracy and is a crime).

The defense is that it's not okay to punish someone for doing something evil they otherwise would not have done if it wasn't for the punishing authorities explicit actions.

Kind of a 'you can't arrest people for crimes you convince them to do' defense.
One description of the halting problem is that there are not just two categories of programs (halts and doesn’t), but a third of “undecidable”. To limit yourself to the category of “halts” isn’t solving the halting problem.
While there are some US policies that make it hard for a new manufacturer to setup in the US, it is nothing like the level of protectionism in China. In China the only way to setup a company is if you partner with a Chinese company who owns half of the entity and has full access to everything your company does. That is a pretty stiff block to meet.
Hah! Me too. Fond memories.
If you're going to Tucson, Biosphere 2 (30 miles north) and the Titan Missile Museum (30 miles south) make a good day trip.
I completely understand where Louis Rossman is coming from. [1]

Daniel does not apologize for anything he says or does and refuses to acknowledge any wrongdoing. He still refuses to acknowledge that how he responded to Louis was wrong.

He hops on every thread of GrapheneOS and regularly accuses everyone of being sockpuppets and trolls. [2] He has accused me of being a Techlore and CalyxOS troll numerous times. Worst still, his community are full of psychophants that enable his abusive behavior. They refuse to see him or his outbursts as negative. They routinely collaborate to downvote comments and raid rooms to manage the narrative which I find to be underhanded.

I was an early Copperhead customer who was very disappointed that he got up and destroyed the signing keys without providing any evidence to back his claims up. When I brought up the issue to him via email, his response was to throw his previous business partner under the bus without offering any apologies for damaging my business.

I did use Android Hardening afterwards, used CopperheadOS for a bit and then moved back to LineageOS. I refuse to use any of his projects again.

I wish the best for him and hope he gets well. He's not mentally stable enough to run a project and he has a long way to go for understanding the nuance of interpersonal relationships.

1 - https://m.youtube.com/watch?v=4To-F6W1NT0

2 - https://news.ycombinator.com/item?id=33555221
I'm not aware of what others have done to him but his claims honestly wouldn't surprise me if they were accurate as he is quite well known for being publicly very rude regarding GrapheneOS.

My first interaction with him was asking about how to backup all data on GrapheneOS (including secure/restricted data). He flat out called me an idiot, said that it "defeats the point of grapheneos", and refused to help. Most of the help formats that he is available on are full of responses very similar to this from him. Hardly by any stretch of the imagination professional conduct.

I do love GrapheneOS and I'm sure managing it as he does/did is quite stressful. I don't have any Ill will towards him, just concern for him and the project. I think stepping down and getting away from social media will be a great move for both him and the project. He clearly wants some much needed time to recover and destress. Frankly, his public behavior was the biggest liability for the project but him stepping down is a good sign that at the very least he is making moves to start recovering.
Facebook is playing double-standards here.

They are knowingly allowing card fraud and other cybercrime groups to operate openly on there. We’re not talking about criminals that use the platform while trying to appear sneaky and flying under the radar - we’re talking about groups outright advertising their wares in the group name: https://krebsonsecurity.com/2018/04/deleted-facebook-cybercr...

> Some had existed on Facebook for up to nine years; approximately ten percent of them had plied their trade on the social network for more than four years.

> KrebsOnSecurity’s research was far from exhaustive: For the most part, I only looked at groups that promoted fraudulent activities in the English language. Also, I ignored groups that had fewer than 25 members. As such, there may well be hundreds or thousands of other groups who openly promote fraud as their purpose of membership but which achieve greater stealth by masking their intent with variations on or mispellings of different cyber fraud slang terms.

I have my own personal experience with this. I came across a page promoting Snapchat (and maybe other services) hacking services that in exchange for a fee claimed it would email you the credentials of the target account, with plenty of obviously compromised accounts posting comments claiming it works. Obviously very illegal in the vast majority of jurisdictions, but the double whammy there is that the service was itself a scam.

Reporting the aforementioned group and a few of the fake comments yielded that none of this activity goes against their community standards.
> if they're intelligent enough to mount this response

The idea that this is some sort of planned, coordinated response to overfishing has not been even remotely proven, and is not backed by any researchers. It's just the fanciful thinking of some imaginative HNers. The idea is patently absurd. The boats they're attacking are not even fishing boats.
CVE-2023-28131 was published in April.

But yes, great question

I think OpenId solves some of the issues, at least for authentication, not authorization.
Keep parts of your GraphQL Introspection Query hidden
Berberine Decreases Thrombosis Potential, Inhibits TMAO Production
Soon! https://github.com/w3c/csswg-drafts/commit/1fae25fa283c708f7...
My girlfriend finds the edible ones (hint: almost all of them are edible) and we eat them together.
Or, more optimistically, a very large Klein bottle.
that would ⓝever 𝒲ork.
With-C-Syntax
The Transistor: A 1953 Documentary
If I want to watch/read more, where should I go?
raises the question of why your electricity rates are so high.
So I went down the rabbit hole a little and it turns out they did try all the stuff, it just hasn't panned out. Yet. It's one of those questions, theoretically it should work, but empirically it doesn't seem to work that compellingly. The PPfolio solver was to answer the question of why not just independently parallelize across cores, and so now it's a benchmark for parallelization efforts. So people are out there keeping tabs on this problem.

Now apparently neither of us read the article, because indeed there are a couple sections where it discusses parallelization. You might want to look at those remarks. For example, there's current research using GPUs and tensor processors to parallelize SAT.

But going back further I think there's a historical context, and the article alludes to why it was not in fashion the preceding decade. Parallel SAT was looked at for a long time, but that really depended on progress in parallel hardware (the transition from Moore's law having to end i.e. unicore to multicore). So in the 2000s when consumer-level multicore CPUs arose, one would imagine that would've been a turning point for running parallel SAT algorithms. But historically, it was in 2001 that sequential solvers also had their implementation breakthrough, i.e. the Chaff solvers were a 10-100x sequential improvement, and experimentally beating the parallel implementations of the time. It was a big deal. So in terms of fashion there was a lot of interest specifically in sequential solvers at the time. Hence the ebb and flow of research focus.

And it makes sense as a justification. From a bird's eye view, if, n >> k, then the subproblems are still large NP-complete problems. Which is a reasonable rationale for firstly investigating the best theory/algorithms for a sequential solver in the first place, one that would be run at the core of every parallel hardware node. As the article points out, Knuth says to have a good algorithm first, before you resort to throwing ever more hardware at the problem. (In some papers, SAT algorithms that are complete as well as deterministic are also offered as theoretical justifications, and the article also touches on why requiring these properties makes parallelization more complex.)

What the new GPUs/Tensors are doing are massively splitting up the space, perhaps so that n !>> k, and this alternative approach is again mentioned in the concluding paragraph. Clearly that seems like a promising area of future research to the authors. And who knows, maybe one day, there's some new breakthrough, that for all intents and purposes makes P = NP.
AoEII has fantastic pathfinding. That and the formation system was the game's secret sauce.

In early RTS games like Warcraft, half the game was micromanaging your units from place to place. You'd send your army to a location, and if there was an obstacle in the way (such as a forest), they'd awkwardly path around the edges of it, one tile at a time (causing massive congestion, because the units at the front would obstruct the ones behind). They'd arrive at their destination one by one, and if the enemy was waiting, they'd get slaughtered.

In Age of Empires II, your army would arrive in a solid mass. It was a relief: you could actually play the game, instead of babysitting a bunch of units.
I have resigned from all roles in rustlang, effective immediately
Similarly, in Australia it is generally much easier to win a defamation case than in the US.

However, there is one interesting difference – under Australia's uniform national defamation law (adopted in 2005), corporations cannot sue for defamation. (There is an exception for small businesses, with less than 10 employees.) So, the recent Dominion vs Fox News lawsuit would have been impossible in Australia.
Nikon for example is clearly repositioning towards mirrorless first.
Different font than TNR.

> Times New Bastard is a modified version of Nimbus Roman No. 9 L and Nimbus Sans
Ah, that we agree on!
These students are obviously not studying; in fact, they're going out of their way to do the opposite of studying, so much so that they arrive at the test with meticulously memorized wrong answers. The students are doing the thing you're decrying here, not the instructor.

Studying requires you obtain mastery of all the material that might potentially be on the exam, in all its permutations. That's the entire point of testing: to force that kind of mastery, without imposing exams that take 4 full-time days to administer. So cheating is doubly immoral: it's dishonest, and it imposes costs on honest people.
Love it - awesome idea! Was also thinking of allowing businesses to post Events as well.
> The assumption in that statement is that the trail being convenient for people is the only important consideration.

Is that an assumption, or what the ranger said? No need to make up requirements that don't exist.
That's not a moat. That's their current situation they achieved by being the first mover. But nothing is stopping someone else from doing a cheaper/better model tomorrow, next year, whenever.
I'd jump ship in a few hours to a day from their Premium if something better or same-but-cheaper came out.
Humans can’t solve the halting problem any more than computers can.

For example, it’s trivial to write a program that searches by brute force for a cycle that would disprove the Collatz conjecture, and halts if it finds one. No human knows whether that program will halt.
Crap, I guess I was confused then.

I absolutely cannot stand YouTube Shorts, and I do not know of many people that actually enjoy them either.
I consider grass to be a weed, and I prefer to have other things grow.

Lawn grass is a cover crop to prevent soil erosion. It is pretty good at that job, at the cost of constant maintenance and expense. There are plenty of other plants that can grow and cover the land, not grow tall on their own, are comfortable to walk on and as a bonus, actually have uses. A patchwork of wild plants, mint varieties and thyme varieties would be ideal for me. Can you imagine the smell? And I can eat them whenever I want. Converting a patch of land into something like this is something of a life goal for me.
>ingesting items into an GPT is probably a copyright violation.

Copyright violation is generally on the output side of things, not the input. It's not a copyright violation to watch a movie.

I also would nit pick that a model is not BASED UPON a copywritten work, just because consuming the copywritten work changed the models parameters slightly. The model itself is not a derivative of any specific work. If one work represented over 50% of a model, it might be a different story. People are getting a little over focused on the word derivative and ignoring the rest of the sentence.
can try,
basically a motor-sensor loop can "hold position" by noticing when it has gone past some threshold then corrects in the opposite direction ... rinse and repeat.

Some systems may have thresholds that cause the rudder to "quiver" while staying on course, To an intelligent creature exquisitely sensitive to things quivering in the water this could be a major annoyance.

the main types of motors likely used in this application are Servos and Steppers

https://en.wikipedia.org/wiki/Servomotor

https://en.wikipedia.org/wiki/Stepper_motor

Here is a page that describes the behavior and calls it "hunting"

https://www.motioncontroltips.com/what-is-hunting-in-the-con...

But we are far afield from what I know,
so apologies to the EEs and Robotasists for my gross simplifications.
I did enjoy Factorio (and also Mindustry) a bit. For Factorio a lot of the fun seems to be in really optimizing the heck out of your factory, which I didn’t really enjoy as much, so it was only good for like one or two playthroughs for me. One or two fun playthroughs though, no complaints.

It is sort of funny, I do enjoy optimizing, but in a game I prefer setups where you have to kinda intuitively optimize by your gut rather than really tweak things. The 50-80% efficiency range, rather than hitting those 80-99% targets, so to speak.