skysight-inc/HackerNews huggingface dataset:
I don't understand why anyone would prefer darkness over light, or bad over good.

You call it toxic, but bad is by definition toxic. You can choose to embrace darkness, but you shall reap badness from it.

Good is true. Judge a tree by its fruit...

The truth is good, it sounds like you think the truth is bad which is not true.
NVIDIA Corp has become the first chipmaker to ever reach a staggering $1 trillion market capitalization, driven by the soaring demand for artificial intelligence (AI) chips. The company’s stock price experienced a surge of over 25% in a single day on 25 May, and this upward momentum continues unabated. As its remarkable earnings results continue to captivate the business world, NVIDIA’s triumph has reverberated across social media platforms. Numerous industry experts expect the company to likely dominate the AI industry, reveals the Social Media Analytics Platform of GlobalData, a leading data and analytics company.
Tiger books include SSA, GC (tracing and RC), OOP, FP,....

https://www.cs.princeton.edu/~appel/modern/
> In a sense canvas, png/jpg etc are to SVG what PDF is to HTML. An information black hole.

Tiny disagreement: PDF isn't necessarily an information black hole compared to HTML. PDF is a structured format, not quite plaintext, yet not quite binary either. It can preserve original text and formatting metadata. It's the publishing tools that often (these days less so than in the past) pre-rasterize data, storing bitmaps instead of original text inside the PDF.

The nice thing PDF has going over HTML is fixing the layout. This is not desirable for most content of actual value (i.e. not glorified marketing brochures that half of the web is these days), but sometimes it is useful.

These days, SVG could probably be used as plaintext PDF replacement (maybe with some extensions for pagination, and other print-related metadata), though I bet some people would still opt to "render" SVGs using embedded data-url/base64 images instead of text + metadata...
The angle is presumably that links to news articles don't actually generate significant value (whether revenue or "relevance") for Meta; it just creates massive amounts of free traffic for the media companies.

Paying for something that generates no value is a bad deal. Why is it surprising that they're not planning on doing that?

I'm sure they've run A/B tests on this in other places, and have a good idea on just how unimportant news articles are to them. If it turns out that California is different, and users and advertisers start leaving in droves, it'll be easy enough for them to reverse course.
Not just the technology, if Freenet is still like it was when I tried it years ago (?), the "front page" is full of sites clearly being for pedophiles and fascists. Kind of tends to put you off, you know ?
> If I see data that a global fleet of self driving cars will only kill 1.30 million people instead

Sure, if I see that then you are right! But: accidents are mostly caused by irresponsible human drivers, not by good drivers and self driving cars have trouble handling normal situations, let alone dangerous drivers.

So by replacing randomly from the pool of good+bad drivers you won’t meaningfully decrease accident rates, you might even increase it. Call me when we can selectively replace bad/irresponsible drivers! But then no need for self-driving as well. Especially when we incorporate the actually useful features like auto-emergency breaking, lane assist etc to “normal” cars will give you all the benefits of self driving, without the problems.
Gajim 1.8.0 has been released – Jabber/XMPP Chat Client
The Financialization of Online Travel Agencies
Ofc, but given that there’s no way whatsoever to withdraw consent, it’s meaningless.

It’s policing by democracy. That’s fine, and I know no better way, but it’s not consent. It’s just majority rule.

I think “Policing by majority approval” would be a better term. That’s also Peel’s main point I think: to not police in name of some sole ruler or
small elite but in name of, and in service of, everybody.

I wonder whether in the 19th century “consent” meant something different.
tough one, thumb hurts now
facebook "news", lol.

This would actually benefit California IMHO.
Whoa MAJOR NSFW warning here!! Don't click this if you're not alone.
I know the commenter mentioned but it sounded like it was an optional thing. Nope!
Good memories! I had fun with distcc by compiling kernels across a few local machines back when desktops for mere mortals were dog slow, and it helped a lot. I never used it for cross compiling though, which is something that could help today when starting compilations from small embedded boards. Did anyone have success in a mixed environment, such as a small ARM board with native GCC plus one or more faster x86 machines with cross compiling tools installed?
The Tower of Hanoi: Solving the Puzzle with Elegance in C
Discover the power of C programming in efficiently solving complex problems like the Tower of Hanoi.
Spain doesn't send letters or fines
Well most domain names have an abuse email address attached. I emailed a few that belonged to (presumably) compromised hosts sending spam and had no reply and no change in spam volumes. These types of measures are only useful if acted upon.
https://mijn.overheid.nl/security.txt

404

but this one does exist
https://www.ncsc.nl/.well-known/security.txt
Total solar irradiance on Earth appears to have decreased, from when measurements began in the 1950s. It continued into the 1990s, and has started to slowly reverse in recent decades. [1] Gasses and particulate pollution from industrial combustion is thought to be much of the reason. The dimming is worse over large industrialized regions. Greying out the sky with ash and smog. It likely began in the 19th century, and was probably masking the effects of greenhouse-gas-driven warming.

[1] https://en.wikipedia.org/wiki/Global_dimming
I was sceptical given the name "CSS Pro", but watching the video, this seems like an extremely polished product.

One note of interest to me was the real-time measurements of image contents, I'd be interested to know how this is being done and what model's returning image-coordinate data
Emulating AWS Services Locally with Localstack Sqs and Sns
Article about using localstack for local development.
It's hard to see from the short quick demo videos on the site, but how does it handle rules? My workflow _always_ includes determining things like default margins, default paddings, default text sizes, and how they relate to each other.

So, I will say default `main div` margin will be 2rem. While default padding on those blocks will be 1rem, how will this help me visualise adjusting these? It looks like all I am doing is changing individual elements.
There are countries with both opt-in and opt-out organ donation. This already invalidates your first sentence: there are examples to both policy.
I am using the 'spring' generator and it works fine. Just fine. Could be better if it would buse more Spring features.

It saves hours and hours of development time. And the ability to regenerate the whole application on spec changes is amazing.
Stretching it a little bit, but: "Ultima" from Stephen Baxter. But you should read "Proxima" first to understand the context.
security.txt discussed on HN:

2017: https://news.ycombinator.com/item?id=15416198 (145 comments)

2019: https://news.ycombinator.com/item?id=19151213 (55 comments)

2021: https://news.ycombinator.com/item?id=26455493 (167 comments)
No it did not. Neither by volume nor revenue.
Super cool. I've been wondering if something like this existed since I started listening to Evan Doorbell's Telephone Tapes that got posted a few weeks ago (http://www.evan-doorbell.com/production/group1.htm).

If anyone's interested, I hacked up a podcast feed of Evan's tapes you can listen to: https://github.com/tsujamin/evan-doorbell-podcast
The guy you posted to seems himself like he's certainly dramatic, just read one of this comments...

"Yeah, that move just seems like a dramatic line in a script. If you don't want to know what the personality is of a person, then don't interact with them. Is he going to shut down his computer shop because he doesn't like Tim Cook? Honestly, with kindness and respect, I think cause Louiss is on the spectrum he doesn't know how to interact with another autistic person with empathy."

This whole thing seems like a shit show, I've worked around open source for the better part of 15 years, this might be the most toxic thing I've seen yet. Seems good this Daniel Micay guy is stepping back from the project, I hope he can get some help and the project can flourish.
If they review that as fast as they close issues on bugzilla it can probably be years after an extension is highjacked and monetized while still being recommended.
I've just checked the UK's GDS advice and they have it as a "should": https://gds-way.cloudapps.digital/manuals/security-overview-...

They have more information at https://gds-way.cloudapps.digital/standards/vulnerability-di... where they strengthen the advice by saving:

As per the current policy, we only accept reports from services that have a security.txt file pointing to the security policy.
This sounds exactly like the age-old debates bemoaning the bureaucracy of government versus the exploitation of industry. People knowing the pain of one always look hopefully at the other.
ironically the special blue bristles in the philips heads that turn white when the brush head needs to be replaced is exactly what you want, I think?
I think we have very similar tastes. I haven't read Pact yet, but I'm a huge fan of Worm (I consider it one of my top 5 favorite works of fiction).

I also haven't read Confederation, but I have read a different work for Hamilton (The Commonwealth Saga). I actually thought it was a bit too long, but it's one of the series I think about most often (so many great ideas and characters in it).
> Gasp, Google ignoring established standards. /s

Actually Google is adhering to the standard. The sender is using a valid 'ups.com' subdomain it seems. So this seems more like a problem on UPS'es end.

If Google actually made changes because of this THEN it wouldn't be adhering to standards.
I use timestamp instead of timestampz in a database I set up. My reasoning was essentially the same as yours. I wish had used timestampz. The storage size is the same. It's more explicit that the timestamp actually is UTC. And if you want to want to display times in local timezones (when things happen in my life to me, it's easier to use my current timezone as a reference point), then you don't have to do casts and instead just set your session time zone to what you want.

Then again, I think the most important thing overall is just that you should store your timestamps in UTC no matter how you do it. Worst is coming into databases and finding they are storing PST just because they happen to be there.
It won't keep time because on an actual mains grid the operator tracks frequency variations over time and makes corrections in the opposite direction to keep the average very close to the stated Hz - one reason for that being mechanical clock sync.

For example if the grid ran at 59.87Hz during the hottest part of the day due to high load then they might run the grid at 60.06Hz all evening offset.
From @nanovision's commment:

> The test of police efficiency is the absence of crime and disorder, not the visible evidence of police action in dealing with it.

This is a great example of not falling for Goodhart's law, actually. (When a metric becomes a measure ...)

Number of speeding tickets handed out and many other such measures are proxies, not the real purpose of (traffic) policing. If everyone follows the limit and drives safely, the number of tickets handed out ends up being zero.
‘People rot from the inside out’: lethal xylazine deepens the US drug crisis
How would doing something irresponsible be different with self-driving? He would have just overridden the car’s control and still driven with 180 mph, or if some another poor soul was also caught up in the accident, there is no way a self-driving car could have done anything with a car suddenly appearing in some other lane with that speed avoiding a collision.
Do any of that languages had some Hollywood level bullshit about language name ?

Mozilla isn't open source first fundation(?), forking of their stuff is urgent.
Not enough comments! It's a real shame the games have stopped coming, but on the other hand the ones that already exist will (I think) remain available.

Opus Magnum is the gateway drug, and it's what I'll often get people to try if they ask me a question like "would I like programming?"

More kids should be sat in front of Zachtronics games, and in fact they're free for educational institutions: https://www.zachtronics.com/zachademics/

However, many kids don't seem to have (even access to) real computers now so it'd be great if someone would - with permission, of course - port some of them to iOS/Android.
You have malware... It's software on your PC which is installing this extension again every time it sees it not present. Creating a new Chrome profile probably just tricks it because it is still installing it into the old profile.

See here: https://support.google.com/chrome/thread/169489366/privacy-t...
A good community-driven hardened Android distro needs someone with a strong personality. With strcat leaving I'm afraid that I can't trust GrapheneOS anymore and have to switch back to stock Android shipped by Google :(

Edit: To be clear, I don't fucking care about anything "privacy". I just want an exploit/forensics-hardened phone.
So the current situation globally seems to be that the US has established itself as a broadly optimistic environment for beyond visual line of sight (BVLOS) commercial drone deregulation since the FAA BVLOS ARC report https://www.faa.gov/regulations_policies/rulemaking/committe... was released in March 2022. Many European, Israeli and other foreign drone companies are moving to the US to prove their concepts in this buoyant market. The individual approvals granted to specific operators to date seem to have allowed limited testing while maintaining controls and oversight.

The general plan seems to be to enforce RemoteID (local broadcast of UAV ID, mission, ground station location, etc.) https://www.reginfo.gov/public/do/eoDownloadDocument?pubId=&..., UAV and proposed flight path pre-registration with the local regulator plus a "well clear" avoidance zone around other UAVs. Once this is seen to work, commercial operations at scale can begin. There is an IETF DRIP standard being proposed allowing the develop of generic avionics to effect similar methods globally. https://datatracker.ietf.org/doc/draft-ietf-drip-arch/ https://www.ietf.org/archive/id/draft-ietf-drip-arch-31.html

After trawling through 100s of "me balloon, you drone, balloon no like drone" comments, some of the 'better' articulated comments are https://downloads.regulations.gov/FAA-2023-1256-0061/attachm... https://www.regulations.gov/comment/FAA-2023-1256-0011 https://www.regulations.gov/comment/FAA-2023-1256-0014 https://www.regulations.gov/comment/FAA-2023-1256-0022 https://www.regulations.gov/comment/FAA-2023-1256-0006
https://www.regulations.gov/comment/FAA-2023-1256-0018
https://www.regulations.gov/comment/FAA-2023-1256-0015
https://downloads.regulations.gov/FAA-2023-1256-0036/attachm...
https://www.regulations.gov/comment/FAA-2023-1256-0005
Why doesn't the title include the efficiency?
I am sure this is the case and that US history of coups in countries of the Global South has absolutely nothing to do with any potential sentiments there.

Thinking non-Westerners can't think for themselves isn't helping sentiments there either I'd imagine.
Looks very cool. Sadly, it is very expensive for our small startup though (we are already paying github, jira, confluence, google suite, figma, miro, adobe, etc.).
A simple water heater is more clever than it seems [video]
Technically that could be done. Each user could create a client ID and then input that in the app and then the app could use it to make requests. But I doubt Reddit will be happy about that and will quickly send a cease and desist to the developer and ban those users.
Should the title be “security.txt” instead of “Security.txt”?
I don't understand the AI training copyright debate.

Art students study art to learn how to create art, and that's completely fine, but AI models are not allowed to study art to learn how to create art, because it's copyright infringement.

Madness.
Looks interesting and polished. 30 per month is too much compared to 10 per month for a tool like sketch.
Search is the one thing that mpv & yt-dlp don't handle. The now-moribund mps-youtube did offer search and curation and remains hands down the best interface to that service I've ever used. (It was throttled by API limits, I strongly suspect intentionally by Google.)

I've started seeing some CLI youtube search front-ends, though I've yet to try them. Thanks for mentioning ytfzf, as I'm not sure that's popped up for me before.
One major problem with new security technology is that testing is generally created as the result of failure, rather than preceding the failure so that it doesn't occur in the first place. Even very basic things like verifying that a new key actually fit the intended lock (ie, that a new key correspond to the published data) is a concept that people tend to implement only once they have had experienced a failure.

One general solution is to have standardized tools with standardized testing. Transferring a domain should always involve testing the old data, testing the old keys, testing the new data, testing the new keys, testing the chain of delegation, testing the chain of trust and so on. Some TLD's has gone as far as doing basic sanity test before a domain owner is allowed to transfer a domain. (industry term is to delegate a domain, since transfer is strictly about legal ownership)

Thankfully there are initiatives to create standard tools and standard test. Zonemaster (https://zonemaster.net) is one I recommend for testing, which is the result of a collaboration between .se and .fr. There is also initiatives for tooling that create multi-signing (https://github.com/DNSSEC-Provisioning/music), which is to have multiple keys operating for the same domain.

Redundancy in HSM's are nice, but redundancy is not a replacement for testing and backup procedures. It was one of the hard lessons learned by the IT industry, especially with data. No amount of RAID will save a company if a rogue script deletes all the files, or if the database becomes corrupt. A lot of experts learned the hard way that redundancy is mostly just a complement to sanity tests and backup procedures.
My biggest pain point is the fact that OpenAPI uses YAML. They always demo it with the simple short examples but soon as you go above a handful of endpoints the YAML will be just horrible to maintain. This is not my only pain point with OpenAPI but it's definitely my biggest. I'd rather use something else and then generate out OpenAPI specs
amazing tool -- too expensive for me -- but those that find it valuable I am sure will pay for it. There's no shame in asking for a relatively high price for a tool that is obviously very well crafted.
>> Is it really new? Humans have always learnt by studying what's out there already.

"Humans" being the important word here. I don't understand why people keep trying to compare training a model to humans learning through reading etc. They are very different things. Learning done by machines at enormous scale and done to benefit private companies financially is not the same as humans learning.
> IMF is literally projecting growth for Russia this year

That doesn't translate to "sanctions are utter failure ". Again, your logic is failing you.

> but whatever you say buddy

The articles you linked to are saying that, have you read them? Reading comprehension is a valuable skill to have.

> Here is another article you might want to read carefully

> The country has suffered harm from western sanctions, even if nothing like on the scale that we imagined we could inflict. But if the West is thinking that in future it can fight wars purely by economic means, without bombs or bullets, it is badly mistaken.

So even this new article that you linked disagrees that the sanctions were an utter failure...
Any kind of agency can be considered a circumvention of copyright protection, it is an insane law that needs to be destroyed as soon as possible. The U.S. has basically given big companies a big red button they can push to stop people from doing something they don't like, and we're debating whether something does or doesn't warrant them pushing the button rather than whether such a button should even exist.
There are at least two possible fixes for that situation:

1. Use HSMs

2. Do constant key rotation

But (2) doesn't work for several reasons and (1) does, which is why in practice people use HSMs.

It doesn't work because:

1. There is always a period for which a key is live, and if rogue employee can simply copy a private key on a USB stick they will probably abuse it quite soon after doing so. You're encoding into the infrastructure (at massive cost) the assumption that for some reason the attacker will wait a long-ish period of time before using their access and rotation will thus defeat them, but there's no reason to assume that. So it can easily end up useless.

2. If your key handling is so weak that someone can just walk off with the private key then they can probably tamper with the key generation process too.

It's obviously great if you can make key rotation easy, but in the cases I've been involved with it was always hard. There's got to be a root of trust somewhere so often making key rotation easy and fast just means pushing the trust to a different key that can't be easily rotated (e.g. firmware key).

HSMs aren't perfect. They're just specialized computers at the end of the day. But given a choice between building a better HSM, or trying to solve very thorny distributed computing problems that at minimum assume things like a globally synchronized clock, the former seems easier, much more likely to actually work and much less likely to create unforced outages.

Remember that in my post I'm discussing not only the relatively easy case of well maintained always-online laptops and servers running software built by well funded tech firms and getting certificates from Google-subsidized free CAs. I'm also considering all the other uses of expiring keys/certs, like in private networks, credit card chip systems, industrial control, phone networks, internal cloud usages etc.
I also checked the date of the article several times to make sure it's not an April fools' joke... and then I thought to myself "is it really so difficult to build power lines now that they have to resort to shipping batteries around?".

Even for those edge cases where it's absolutely impossible to build cables, shipping e.g. liquid hydrogen or another renewable fuel is probably a better alternative...
Is that a dig at the DoH crowd?

My comment wasn't suggesting a HTTP background is necessary for someone to help move the DNS ecosystem forward.
Interactive Simulations for Science and Math