skysight-inc/HackerNews huggingface dataset:
Yes, the site is vulnerable to XSS, couple of interesting payloads on there so far

The current top post uses this XSS to have users upvote it:

<img src="a" onerror="soci.postData(String.fromCharCode(112,111,115,116,116,97,103,47,97,100,100,45,118,111,116,101),{post:String.fromCharCode(120),tag:String.fromCharCode(120)})">

Which sends a POST request to `posttag/add-vote` for the post labeled `x`
This is almost exactly what happened with Craigslist and FOSTA/SESTA.
Let me be clear: Congress has no business discussing this any more. If they can demand that Zuckerberg justify himself, they can do it for anyone.

There is no potential crime involved in his data being leaked. It is as if Congress summoned you for having your bicycle stolen.

This is another step down the authoritarian road. I despise Zuckerberg, Meta and Facebook but this is BAD.
The right combo for Nvidia/CUDA/RandomPythonML library is a nightmare at times. This is especially true if you want to use older hardware like a Tesla M40 (dirt cheap, still capable). And your maker hopefully be with you if you if you tried to use your distro's native drivers first.

It's fair to say part of the blame is on Nvidia, but wow is it frustrating when you have to find eclectic mixes.
Not to mention a massive carbon footprint by the sounds of it
Are the devs American? If not, does the DMCA even have jurisdiction?
New York City is easy to navigate without a ~GPS~ map. It has a fairly logical layout, and I can generally figure out where I'm going. Philadelphia, on the other hand, was not easy to navigate at all.
It is interesting as the later I get into my 50s, I start thinking more and more how I should never listen to what people over 50 say.

Life is non-ergodic and the older you get the more you are over fit to a time that no longer exists.

At least youthful ignorance has a chance of actually being right. There is a pseudo-wisdom that comes with age that is almost always wrong going forward.
> clear requirements in black and white terms of what is and isn’t acceptable.

I’ll give you the benefit of the doubt and assume you have been misled by this frequently made claim. It’s just not true. The requirements have been clearly stated for a long time, they’re just not what people in the crypto space want to hear, so they pretend the guidance and law doesn’t exist.

This document dates from 2019 and lays out in detail what constitutes a security wrt cryptocurrency from the SEC’s perspective. They’ve been quite clear about this for a long time. The relevant case law has been settled for 70 years.

https://www.sec.gov/corpfin/framework-investment-contract-an...

The SEC has repeatedly and publicly stated in no uncertain terms, what the definition of a security is and also identified specific coins traded on coinbase that they believe to be securities. Here’s an example from last year from an insider trading case.

https://www.sec.gov/litigation/complaints/2022/comp-pr2022-1...

> For example, on November 12, 2021, Ishan learned that Coinbase would soon announce the listing of the crypto asset POWR. As alleged further below, POWR was a crypto asset security

> A digital token or crypto asset is a crypto asset security if it meets the definition of a security, which the Securities Act defines to include “investment contract,” i.e., if it constitutes an investment of money, in a common enterprise, with a reasonable expectation of profit derived from the efforts of others.

> Coinbase planned to announce the listing of crypto asset AMP on its platform. As alleged further below, AMP was a crypto asset security.

> Coinbase intended to announce on July 14 that the RLY token would be listed on its platform. As alleged further below, RLY was a crypto asset security.

Rather than accept those statements and obey the law coinbase chose to ramp up the PR offensive instead.

The real issue is that cryptocurrency companies hoped they had found a loophole —they wish the law and SEC guidance weren’t what it is, and they keep dishonestly claiming a lack of clarity exists in the hope that doing so will change things.
Decimal organization is a good system... but it's explained here in a completely obnoxious way that makes you want to hate it.

Firstly, I strongly recommend just reading up on Dewey Decimal[0] (which is what JD cribs almost everything conceptually from), there's a decent explanation about it on Wikipedia. Should help you "get" the categories you might want to make a bit more.

Secondly, don't marry yourself to JDs limitations. The site likes to evangelicize about some things that really aren't as important as you might think. Feel free to ignore something if it doesn't work for you - in particular the "no subfolders" rule might just... not be worthwhile to follow.

Personally I've always pretty much ignored this rule - if you look at Dewey, the left hand of the number is meant to be a classification for the broad category while the number on the right is meant for the broad project. In other words, applying a decimal organization system to specific files? Yeah not what it's meant for, don't do that.

Even in a library, where Dewey is used, an individual books Dewey Classification isn't actually unique to that book. For example all books on MySQL will have the same Dewey Class.

Build it as a system that works for you, don't try to forcefully refit your system to match the explanation of this website. Also, don't use it for small projects. That'll just make it a bigger mess than it's worth. Stick a small project in a bigger folder system, it'll work way better that way.

As for mental mapping - keep a readme file to just list the broad categories in the top of the structure, it'll help a lot. The site recommends spreadsheets but really, that's wayy overkill and will just cause dumb overhead each time you have to add a file.

[0]: https://en.wikipedia.org/wiki/Dewey_Decimal_Classification
> I sure hope nobody uses the Samsung camera app to file their taxes and keep their books...

A lot of people take a photo of receipts for their records.
I’m newish to python, I’ve only used it for machine learning projects and some web scraping. Could somebody elaborate on venv? I just started using it but now everyone in this thread is saying how much they hate it. Is there an alternative?
Yes, "source code for chips / custom hardware" as a product is mostly referred as IPs. This includes HDL/RTL, netlists and GDS layout for a specific process, in increasing order of closeness to physical reality.

Tangentially related, it is interesting to note that layouts and masks for manufacturing custom chips are not really copyrightable, so there is a thing named "mask rights" and (M) instead of (C) for them.
>IMO Swam deserves some credit for laying a good foundation.

Absolutely. Yes. I was surprised how well he did during his time as CEO. Considering he is a Finance and MBA Guy.
Nice to see Henderson on here, I've been a subscriber. I've often thought that status is a function of what's yours to share. It's distinct from positional power that was conferred, because the necessary condition for organic status is to be the object of the desire of others. It's also separate from having shiny stuff, because if it's stolen or unstable, it's not yours to share. Famous musicians and actors have the highest status in the world becuse they can share their fame, but relatively very little direct power - and the most powerful people in the world do not represent what others want, but rather just have control of some diminishing resources.

The psychological definition he uses where power is "control of access to resources" is an ok model. Separating it from status and prestige is key, where he gives the example of olympic athletes vs. nightclub bouncers, where each have high or low status and high or low power respectively.

Conferring power on low status people is a recipe for disaster, where those people will find ways to apply the power to an infinite need for status - without regard for the human desire that confers its legitimacy. It's what makes a lot of the current crop of establishment aspirants so uncanny, they have seized the reins of institutions, but are themselves personally undesirable because they have nothing of their own to share - it's all over leveraged and competing to supplicate themselves. Arguably, the tension in the culture is that there are no good men or good women in institutional power today, and so much so that people in power are trying to erase what "good" even means because it is a source of humiliation for them. They will try arbitrarily to destroy people who have the organic status that their own power does not give them. Never underestimate the capacity of undesirable people for cruelty, it's what the cold war was fought over, imo.

Becoming higher status is a straightforward process of self improvement, where through exercise, education, practice and competence, you become more desirable to others, and the resources you have are ones that are yours to share. There is no mystery there.

The interesting question to me is, given power is rarely ever converted into desirable status, how is status converted into power? We used to call it "convening power," where royalty and celebrities could get people in a room together. If an invitation came from them, it would be accepted, and brokering that meeting (and taking some equity) was how to convert status into power. But if there were a way to convert it directly, I think there is a recipe for peace, where it would mean both a way to respect and participate in civilization instead of trying to rule over its ashes.
Are you aware that the EFF operates out of the USA?
Are you aware that the piece of legislation in question is proposed New York State law which is based in the USA?

If you're going to fight US legislation, you have to use the law to do it and that includes the US Constitution and it's amendments...
How is this any worse than, say, how we've named our local planets? Those are also cultural references - they're just ones that you're already used to.
You're just trying to redefine "mathematics" in order to be able to say that ChatGPT is good at it. But mathematics is about precision.
Found the Ferengi!
When Apple introduced a fingerprint unlock in the home button, it wanted to keep the fingerprint scans secure. The security chip that stores the fingerprint scans needs to verify that the home button's fingerprint scanner is trustworthy, to prevent man in the middle attacks.

However, when an unauthorized or unofficial button is used as a replacement for repair, the phone will permanently brick itself. No warning is given that the fingerprint scanner's trustworthiness can not be verified, no ability to just use the phone with the fingerprint scanner disabled. Just straight to a permanent bricking.
As everything with Reddit, this depends which subs you hang out in. This doesn't match my experience.
> I'm not going to install thousands of dodgy-looking packages from pip, the only documentation for which is a Discord channel full of children exchanging 'dank memes'.

This made me laugh. It’s true, isn’t it? That’s really what we deal with day to day (for me in the js world, the create react app dependencies make my head spin)
Maybe rating stuff is a similar problem to estimating stuff, so whatever is effective in the latter (results vary, of course) may help in the former.

A "standard checklist" for each category may help. Kind of like a "You must be this tall to ride."

At least three types of checks:

* If this is not checked, it can't be that severe.
* If this is checked, it must be that severe.
* If this is checked, it has that common trait.

It may get complex enough where a need to "develop a framework" is started. This could look at threat vectors and mark stages like phishing, recon, post-compromise, etc. These probably already exist.

I said "framework," so in a sense either things have become too complex, or it could not be simplified without.
Yeah I think most people would agree today. 20 years ago those were the nice ones, and these were the ones everyone hated:

https://www.walmart.com/ip/Lawn-Chair-USA-Folding-Aluminum-W...
> Stingray does seem to still exist on a handful of smaller US cable carriers,

It's on AT&T U-verse (although U-verse is considered legacy product by AT&T)
who cares if the disease is spreading if your arent gonna die from it?
Sorry, but unless you're a physicist, why would you expect to be able to know the significance of the paper? If you walked away misunderstanding the implications, then I gotta ask - assuming you're in software - are you careful to proofread your papers to ensure a geologist doesn't misunderstand them?
>I do find it interesting that not many seem concerned about this problem. The experiments have almost no effect of course but if this were ever done on a large scale...

That's because they're on a completely different scale. The Sun is constantly producing absolutely gargantuan amounts of energy, on the order of 173,000 terawatts hitting the Earth constantly.

Comparatively, the entire world population uses about 15 terawatts. Even if the entire Earth switched to microwave beam power, it would be miniscule in comparison.
From what I gathered (I might be wrong) it was more a model of, that a part was owned by employees, but the majority was hold by a few people/one guy.
Would explain the trouble with working conditions and the unionizing efforts.
> why would the comment of one rando

It wouldn't. There's been a concerted effort for decades to do anything to keep the discourse from shifting to geoengineering. The same sort of unintelligent counter-arguments are used for it that the people who are overly concerned about the economy use.

> of all the people who do follow the science?

Nothing I have ever learned about science has ever said anything about "following science". It is a principle of science I have never heard even a hint of.

I have heard of people following religion. All the time. It seems to be one of their favorite words.

> Who can read comments like yours without wondering if all climate change deniers are all a bit disengenous?

If a grifter goes after you trying to pull a fast one, why would you have any obligation to be honest with them? In fact, if they start trying to harangue you about honesty, that's just another part of their grift.

Geoengineering is something I've never opposed. We can and probably should do it regardless of whether you guys are right about climate change. If it's too cold, make it warmer, if it's too hot, make it cooler.

The only reason to not do it is if you see an opportunity to seize political power by allowing a crisis to continue. If it gets solved (especially too early), you might not stay in charge (or in this case, never quite make it there in the first place).
I’ve thought a bit about tags++, that is adding some logical and not-so-logical features to them.

For instance there are ideas from OWL where you could define a category instead of other categories and their attributes, for instance tag D could be the union of tag A and tag B and the complement of tag C.

Implication is also useful both as a way to implement subclassing but also containment relationships. For instance on Danbooru a character that has several forms would have the various forms of the character imply that character and the character would imply the media property that the character comes from.

I am looking at what a tagging system looks like in the transformer age and one key idea is a kind of three value logic around tags which can be in a “positive”, “indeterminant” and “negative” state. If you are training a machine learning system to auto tag you will need (1) a number of examples where a tag does not apply (the tag not being applied is not evidence that the tag doesn’t apply, poor coverage of negative examples is one reason why YouTube recommendation is worse than TikTok) and (2) to deal with cases where the ML model tags something incorrectly. If the model tagging something puts it in an indeterminant polarity and that result can later be switched to negative or positive that is a great way to manage the situation.
You're not wrong about the propaganda talking points.

>Most of the people around the world don't have any problems with iran, russia, china and mexico. Maybe we should look into why we have conflicts with people all over the world.

In fact, most liberal democracies are at odds with Russia, Iran, China, and nearly everyone is concerned about Mexican Drug Cartels.
But wasn't the claim he spends 100% of the revenue from video into the next ? As in just directly from video ?
Surely you recognize some middle ground between trying to remove oneself from time and circumstance altogether and glomming onto every meme and short-lived trend.
How often is the bucket filled during the transit? Noise in each emptying will average out, so a dip could be detected even if the dip in a single reading of the bucket could not be.
> Why does it matter if a program is a self-contained binary? It seems like such an odd requirement.

Because sometimes I just want to write `my_program | your_program` without learning how to install and set up a program in a language I don't personally use, particularly when that language has the worst packaging ecosystem of any mainstream language.
Show HN: Urligram – Social Bookmarking Platform
Hi all!

We are a tiny team of two that enjoyed using del.icio.us back in the day. It was a simple and efficient tool for two things: saving urls for later, and browsing the web thanks to the tags and some other basic features. So we wondered about rebuilding it.
Its been quite a ride, but we finally have a streamlined version of what we are looking for. This is www.urligram.com: a prototype for a new social bookmarking platform.

We have been using it for some time, and while there is a lot of work to be done yet, we think it is stable enough to be useful.
Currently you will be able to save urls ‑as public or private‑, tag them, create lists ‑public or private as well‑ add bookmarks to lists, share lists... we also prepared an extension for Firefox and Chrome, so you wont have to leave the current page to save it.

Please feel free to sign up and have a look.
If you have any advice, notice some bugs or find things that would be better done in a different way please let us know!

Alex and Anton
This thread is getting a lot of engagement and your clue should be that this is exactly what successful influencers manage to accomplish. It doesn't matter what opinion you have of MrBeast. It matters that we have an opinion, any opinion, lots of it.

To give another recent example. A young progressive woman on TikTok went viral because she claimed that traditional masculinity (chivalry, providing for her) was absent in liberal men and only found in Republican men. Yet she does not culturally align with Republicans. She wanted both aspects of men and couldn't find any.

As expected, half the world engaged to point out hypocrisy, unrealistic expectations, and so on. Each participant in this conversation thinking they're correcting her, setting her straight, putting her back in her corner.

That's not what happened. She won. All of this is engineered. Engagement traps and engagement farming. And we fall for it every single time because it is a hard-wired feature of our brain: to obsess over deviations of the normal.
The main issue I always have is that as soon as I have to use another system or ssh into another system I lose all of that.
Most of the time will be spend on undocumented corner cases of third party hardware and dealing with various race conditions. Even though the PCIe protocol is reasonably simple the devices attached to it are not. Since this feature is only viable if it works 100% reliable the rule of thumb is the last 20% of problems will cost you 80% of the time.
There is nothing in the law that explicitly prevents the registration of a cryptocurrency. The problem is that the people making them are not able to answer the kinds of questions the SEC asks. How many cryptocurrency companies do you know of that could pass an audit? Even when ICOs aren't out-and-out scams I have never encountered one transparent enough for me to want to touch it with a ten foot pole. Why should the SEC bend over backwards to create new rules that allow exactly the sort of opaque, unaccountable offerings it is their job to prevent?

Everything about this screams "system working as designed to protect the public".

Would you kindly point out a company that tried and failed to register an ICO? I have done a little research and been unable to find any that even went through the motions. Perhaps the specifics matter.
It's interesting you went into quite a lot of detail about the various "foreign" terror cells, but skipped domestic terrorism, which has been far more impactful in the last what, decade+?
My good friend is a big fan of his. Listens and cites many of his episodes. He frequently shares his learnings with me. I haven’t given him much of a listen because everything my friend has shared with me I already knew, lots of things I remember thinking “I learned that in high school.” But if Huberman is an accessible voice and helps educate people I’m all for it.
I make maps of natural surface, single track trails, basically mountain biking / hiking trails, for a local volunteer group. The workflow is typically mapping things electronically into OpenStreetMap, then exporting data from there and making print maps in two versions: one with "you are here" stuff for trailheads/intersections and the other for general use/reference.

Typically these trails have marker posts at major intersections with a number on them, often an indicator pointing the way to the next number, and a colored arrow indicating the loop they are on.

After I started doing this, and watching people reading the maps at the trailhead, I was amazed that user split into two stark camps: those who can read maps and those who can't. For those who could, the maps are exactly what they need, be them print or on some OSM app or whatnot.

For those that couldn't... They would get amazingly lost quickly, even when the trails are sight-distance, no more than 100' or so, apart. I've helped folks who, as example, I show that the post has a #2 on the top, I show them the direction to #3 and that they can follow the "yellow" arrows, and they just freeze. And then sometimes ask if there's an app that will tell them which way to turn.

I grew up looking at maps, using them with signage and such for navigation as I learned to drive, and I never realized just how much I took this skill for granted until I encountered other adults who simply can't.

(An example map: https://trailmaps.app/pdf/riverbends/CRAMBA_River_Bends_Trai...)
The first graph on the page compares the quality of it, showing that it has higher quality results despite taking only 2 seconds vs results from Stable Diffusion that take 1.4 minutes.
Does anyone know if there is a place to find the old National Geographic maps? Those inserted maps were always my favorite part.
im sorry, but people who chose not to get vaccinated knew what they were doing and governments and public health officials holding everyone else hostage cause some people wanted to engage in risky behavior is not justifiable under any ethical framework i can think of.
You mean without a map? Imo everyone should be able to navigate with a map and a good enough reference position?
>(up to 16 hours of night in Central Europe)

Poland gets on average 1 hour of actual sunshine in December. I'll take nuclear power unless somebody really has reasonable strategy for getting 3-7 days of energy storage.
Flight turbulence increasing as planet heats up
One issue with a physical map is, that human development and advancement is so fast, that in just 3 years, roads can appear where there were none before, old ones could get torn down.
On an internet forum you do that by deciding not to engage, not by issuing a drive-by top-level comment that preemptively cuts off any dissent.
Wealth confers social status to men. Similar to how being young and slender confers social status to women.
Samskara