skysight-inc/HackerNews huggingface dataset:
This complexity is a security nightmare.

I write SPAs. I use Keycloak OIDC as the authentication layer. I have the SPA set up as a client using the 'Standard Flow' with no Client Authentication[0]. I've carefully set my valid redirect URIs. I use the official Keycloak JS client and the standard JWT authentication implementation in my API server.

To this day I still have no idea if I'm doing everything correctly. I guess I'll have to eventually hire some expensive security consultant to go over everything, but every step of this setup is filled with hidden gotchas:

* There's multiple overlapping standards, each with a dozen different variants. The Keycloak OIDC config refers to OAuth2 over a dozen times.

* There's thousands of blogs and articles, each 1000s of words long and each recommending different things. I have yet to find a concrete guideline for what a 'sane default' set of choices are.

* Am I vulnerable to the issue described in the article? I guess I must be, given I don't see the server-side JWT validator doing anything special beyond validating the signature, so there's no validation of whether the token was generated for my app.[1][2]

* What are best practices for "client scopes"? I notice that the more I add the larger the JWT, but are there any gotchas to watch out for?

I think much of this boils down to there needing to be a published set of recommended defaults for common use cases, alongside some cleanup around deprecated/not-recommended config options.

[0] Given client secrets can be trivially extracted.

[1] Though I guess the fact I'm only using my own auth server and there's only one client means this isn't a problem.

[2] Isn't this how SSO works? One set of tokens to grant access to a bunch of different services?
Sending Bulk Emails
I urgently need to send mass emails to a group of people. which tool do you advise me to use. one that is easy to use and free
I read

"I used to love building object-oriented code in C, but it was a leaky abstraction"

now.
It's true that important or critical fixes (embargoed or not) are applied to RHEL before CentOS Stream. Forgetting to apply it seems unlikely because it would be marked as a regression in the next minor release of RHEL. Usually all the red tape is ready and you only need to "git push" as soon as the RHEL packages are shipped.

If not embargoed, however, they are still applied to Fedora first. But most fixes of that severity are embargoed anyway and therefore the patches simply cannot be applied to public source trees without breaking the embargo rules.
> Foreigners are not so welcomed anymore...

That's a weird thing to say given that Turkish people themselves are complaining that Istanbul (in particular Fatih, which was the center of Constantinople) is being taken over by Arabs and Africans (Sub-Saharan). That seemed true to me a year ago when I was there. Are you sure you are not mistaking Arabs for Turks? The Turks I met are mostly white and the one living in Istanbul are quite "cosmopolitan".
Honest question: is that a lot?
So much is possible in Japan due to the high trust and high conformity culture.
I've lived in JP and Australia and the type of dense living that can be very nice in JP would be absolutely miserable in AU, due mostly to the people.
How small can be a LLM transformer in order to be able to understand basic human language and search for answers on the internet? It should not contain all the facts and knowledge, but must be quick (so, it's a small model), understand at least one language, and know how and where to look for answers.

Would it be sufficient to have 1B, 3B or 7B parameters to achieve this? Or is it doable with 100M or even fewer parameters? I mean vocabulary size might be quite small, max context size could also be limited to 256 or 512 tokens. Is there any paper on that maybe?
I feel this is more of a limit from single scratch pad agents

Having a tasking agent refining prompts seems a much robust approach.

Bonus if it can decompose the required data properly. I'm working on a world database prompt with limited success, but implementing the retrieval with prompts is time consuming and I've not much time. The idea is along the line of "translate the user question in SQL, you have a database of all known facts with a table for each entity" and then you handle the retrieval of each table data step by step.

I think then you'd be able to use the postgres planner as planner, but while I've seen project of postgres retrieving data from random sources I don't remember the specifics.
Such a "meh" offering. $7.99/month to get 2 Meta-picked VR games/month.
If you use Nix that's pretty much how the container will be build. You specify that your app should be there and Nix, being aware of all dependencies will place inside everything needed.
C++ has all the opinions!
>Availability Risks. A single regression within a monolithic code base can bring the whole system (in this case, all of Uber) down.

A single regression in your isEven microservice can also take the whole system down. You can mitigate this by slowly rolling out new versions to try and catch regressions early so you can revert.

>Risky, expensive deployments. These were painful and time consuming to perform with the frequent need for rollbacks.

Code that is going to be deployed all needs to be deployed. Painful deploys are going to happen with microservices too.

>Poor separation of concerns. It was difficult to maintain good separations of concerns with a huge code base. In an exponential growth environment, expediency sometimes led to poor boundaries between logic and components.

Making libraries will boundaries without having to do an expensive network call.

>Inefficient execution. These issues combined made it difficult for teams to execute autonomously or independently.

Monoliths let you work independently too. You go in and change something and now it is changed. No part of monoliths make it harder as a single person or team to make changes.

Also keep in mind Uber ships Android and iPhone apps which are monoliths. They don't force you to install an app for entering a location, an app for making a payment, an app for looking up pricing, etc.
Interesting. That probably does makes it a bit harder to verify but there are still plenty of “words” that are to be expected. My point being that if a German receiver can’t parse it, then what’s the point of send it. And if they can parse it we can encode the rules they’re using to parse it (i.e. at the very least a dictionary of “words”) to give us some decent confidence. And beyond that, using the key on multiple messages effectively increases the char limit to “max chars * message count”.

Also, I agree it doesn’t reduce the search space but I think the post I was replying to was talking more about difficulty of verifying the correctness of a decrypt that reducing the search space. That was definitely my point ant least. Either way, as you say, this definitely doesn’t reduce the search space.
go find the story of Streetlamp Le Moose, the author was writing it to test content length of comments. Edit all your comments to simply repost that story. Eh, the guy who wrote it supposedly killed himself, so it'd be a nice tribute too. Maybe leave your original comment so mods don't delete it...
Ok but this is an Arduino designed for hobbyists, not for scientists at the Advanced Photon Source.
Can't possibly be worse than reading someone else's perl.
For people to be able to save and expand their wealth in land, land needs to remain desirable. Desire is driven by the need for housing. Need for housing stays high if the rate of new housing stays low. Thus, rate of new housing stays low. Else we would have a lot more very beautiful sky scrapers.
I think dhcp6c is the problem? FreeBSD provides a better option, but they aren't using it.
We have both kinds, for different occasions and audiences. Many pubs have no music, or quiet background, and are decent places for conversation. Most bars have pretty loud music as part of the atmosphere. There's a relatively fuzzy line at the loud and late opening end between bars and clubs, for which music and dancing is the whole point.
TL/DR (according to ChatGPT-4):

The article titled "Why Britain doesn’t build" by Samuel Watling, published on 23rd May 2023, discusses the history and challenges of housing development in Britain. Here are the key points:

Post-War Housing Crisis: After the Second World War, Britain faced a severe housing crisis due to strict planning rules enacted by both Labour and Conservative governments. These rules gave local councils the power to block nearly all housebuilding, with little incentive to permit it. Despite various attempts to address this issue, such as regional planning, a land commission, New Towns, and attempts to loosen planning controls, all of these efforts failed.

Historical Context: Britain's housing situation has been shaped by its historical context. From the Victorian period onwards, cities expanded with the help of trains, trams, and underground railways, creating the world’s first suburbs. However, housing supply collapsed during the First World War due to the mobilization of potential construction workers for the army, leading to a housing shortage and subsequent rent strikes.

Green Belts and New Towns: The concept of green belts and New Towns was introduced to control urban expansion. However, this led to a shortage of building land and an increase in its price from 1955. The green belt around London expanded from a 9- to a 35-mile radius, as neighboring counties rushed to end the prospect of displaced development from the original green belt areas.

Land Commission and Housing Production: The Wilson government set up a Land Commission in 1965 to deal with the shortage of land designated for housebuilding and the resulting high land prices. However, local administrations in the South East of England and the Midlands opposed the measures and refused to cooperate with the commission. The Commission was disbanded in 1970, leading to a flatlining of overall housing production in the mid-1960s.

Current Situation: The article concludes by stating that the housing crisis in Britain is not due to a lack of political will but due to a lack of understanding of the political dynamics of housebuilding. The author suggests that future leaders should learn from past mistakes and devise smarter strategies to address the housing crisis.
In addition to the other features that siblings have mentioned, what Docker offers is simplicity, in that you don't need to understand the details of namespaces, capabilities, cgroups etc to get an application running in a container :).
Eh, picking arbitrary metrics like that -- the size of Watson -- isn't too useful. For most of these things, like Watson-- we're concerned about whether it could do it more cheaply (less resource intensively) than a human. Watson also does the job on much less sleep and doesn't get bored.

(And a room of smart people is not likely to be much better at this kind of quick decision task than a single smart person).

And now, you can fit 16TB of ram in a couple rack units with boring hardware, though you'd need perhaps a quarter rack to get equivalent memory bandwidth.

> but I doubt evolution has left us with a completely horrible design, especially if were talking about thinking and running, two things humans are known for being quite good at (to our own knowledge).

LLM's are making me less sure that we're so good at thinking. We may be good at making quick decisions and navigating social hierarchies in a relatively low power budget, but that's a different thing...
Congratulations on the launch. To ship something like this, it must have taken several months of hardwork.

We are in security space and see proliferation of cloud providers (multi-cloud), accounts, services, tech-stacks a thing and it's getting insanely painful day by day.

Argonaut is much needed esp for folks who want that ease of ops.
That's pretty cool, nice work learning the different languages.

I guess if you moved around as a kid, you probably had to imitate language and behaviour to fit in.
Well I am Dutch and I personally don't differ between the two. Just different names. Btw my CV is now 7 pages long but I am a consultant.
don't delete them, just copypasta the story of Streetlamp Le Moose. let's make this a thing.
> ideological and population changes in times of crises that, finally, by the tenth century, led to the collapse of the complex sociopolitical organization and the drastic demographic decline in the Maya Central Lowlands

An important data point that sociopolitical arrangements do not need external enemies or catastrophic events (earthquakes, volcanos) to implode.

Its counterintuitive because one would think that a society "can work things out" rather than collapse. But that is not always so. On the basis of social contracts people might engage in expensive pursuits (eg building extravagant stuff) that prove unsustainable and not possible to salvage once foundatiomal promises and trust are broken.

It feels somehow important for our modern era and its many broken contracts and expensive pursuits to understand this vulnerability.
Never made a ton of sense to me. Go crosscompiles easily, ship a binary.

Because the second you want to do anything involving https, you need certificates, and that's where having a minimal but existent base image starts shining, and mostly goes up from there...
How does the link aggregation work?

I get that OPNSense can do this, but do you need a switch with a capability to make sense of this?

I'm considering moving from Unifi USG to OPNSense and have two Cat6a runs from one end of the house to the other (through the loft and it's not possible to add more runs without building/decorating work). Presently the two cables do WAN and LAN, but I've been curious about putting something closer to the modem and to somehow use both cables for the LAN.

LAGG looks like it can do this and isn't something I knew about for the home.

Would I need a special switch on the other end? I've currently got Ubiquiti switches but as I'm already looking at binning the USG I'm fairly open to reconsidering a lot of the network.

PS: The reason to abandon the USG is heat issues. Packet loss when the ambient room temperature exceeds 30'c, and serious packet loss when the room temp is 35'c. This is no longer rare, and the USG is only rated to ambient temp of 40'c and there are many Reddit threads of people ripping the case apart and fitting fans. I'd rather just have stable internet with better hardware.
I think this is the right answer, and I especially want to call out the second part, because it can be a bit counterintuitive.

The reason for having security documentation isnt so that it can answer the questions the client has. No one will actually read it. The thing is, people have an unlimited appetite for wasting your time if it's free for them to do so. By pointing them at documentation and having them get back to you with questions, you're now making it their problem instead of yours. Some clients will say no, fill out the questionnaire. You can politely bow out with those clients. Others will glance at your docs and decided it's not worth it to them to figure out if you actually answer all their questions, so they'll just check the "security review complete" box in their buying process.
Oh right, fair enough. So the actual breach of trust is the non-premium (non-tracking) app version sends GPS to the app developer, when they'd claimed otherwise and only the premium version is supposed to do so. This doesn't really justify delving in to device firmware, but more power to you.
Context: I wrote deploy and configurations in Shell in 1999, for Employer A. I started writing Ansible in 2013, for Employer F.

In the middle I wrote puppet and chef. All doing basically the same stuff. And yes, obviously there's worlds of differences. Using Puppet killed my productivity, for example.

But my point was that those tools are more comparible than 'terraform' vs 'ansible'. I stand by that comment.
If your container is big it also takes long time to fetch and start it
This is exactly what I was looking for:
Accelerates my dev time by working locally, and integrating with cloud services.
Finally a dev environment that gives me the freedom to migrate to other clouds with very little cost
67m is the UK population, not the GB population.

And 67m is nothing close to the size of the electorate of the local elections that number comes from.

And as another commenter wrote, a small number of votes can matter a great deal.
What is it about network calls that makes it easier to scale separation over function calls. To me the RPC you choose should be independent from the separation part of it.
Most infrastructure is vulnerable in one way or another... just a few miles from me someone cut an important SONET ring in two places.

The telescopes involved in this are strongly directional, so whomever is tampering would need to be rather close to the real uplink.
Is this open source ? What's this license here:
https://github.com/winglang/wing/blob/main/apps/wing-console...
Obviously Amazon is not part of this, and neither is Facebook who uses CentOS Stream.
That is a bad idea, because some articles are updated constantly. I have one of them. Google bot saw it around 12 years ago for the first time, but I have updated and rewritten it a thousand times.

This isn't journalism, where articles never change. It's providing current information about a topic and the URL is a shopping window – it changes.
Moving out in Slough? Let Go Cleaners Slough take care of your end of tenancy cleaning! Our professional cleaners specialize in thorough and efficient end of tenancy cleaning services, ensuring that your rental property is left in pristine condition. We pay attention to every detail, from deep cleaning carpets and upholstery to sanitizing kitchens and bathrooms. With our reliable and experienced team, you can trust us to deliver exceptional results and help you secure your deposit back. Don't stress about the cleaning process – leave it to Go Cleaners Slough. Contact us today for a spotless end of tenancy cleaning service in Slough.
Congratulations. It sounds as if you are working for a company that knows what it is doing. They are clearly focusing on customer value instead of chasing the latest shiny new but buggy and gone tomorrow “new” tech. Giving you an opportunity to focus on delivering value to customers in a stable environment. Making each delivery higher quality and less buggy than the previous.

I work in such an environment and routinely deliver million+ line applications with ZERO bugs in production to very large customers around the world. Highly satisfying.
Ionic: The Mobile SDK for the Web
Faster and simpler coding with less learning wins every time against snappy but esoteric, at least in business applications. It's better for the client, better for the developer and better for the company, even if it doesn't squeezes every processor cycle

The pure advantage of iterating faster on requirements and deploying new functions beats having a very fast but very restricted and possibly incorrect feature set. And if an application takes off, it's always possible to identify its critical path and optimize it for speed, or even re-engineer it starting from a much clear solution to the business case.
> When I think about planning I think about mapping out a possibility space, identifying trees of dependencies, assigning priorities, and then solving for some kind of weighted shortest path.

but that's two things: planning and execution of a plan. The plan is the dependency graph (!), assignment of priorities and shortest path is execution. This is very important in the context of agents, autonomous or not. If you want the agent to self-correct it has to understand that there can be multiple start points or multiple end points (or both) to backtrack and pivot. And as long as it is glorified "next token predictor" it cannot really do that.

Of course some tasks indeed are ifttt style linear-ish flows where next token prediction may prove to be adequate. However, if your agent is incapable of understanding non-linear flows, can it reasonably back off from one true way hen faced with such flow?
This throws game modding out the window if it becomes mainstream. Many games thrive purely off of their modding communities - especially older titles.
This pretty much sums it up. I doubt it's some special boomer mentality as much as a "people" mentality. People are fairly selfish and don't want to reduce their quality of life.

What's shifted over the last few decades is that people live longer. Boomers basically just got lucky - they didn't have a huge older generation above them, so the cost of social security was fairly low when they were young. They managed to buy houses at a time of massive urban expansion, meaning their total lifetime cost of housing was pretty low.

And now they're heading towards retirement, with vast unearned housing wealth and having spent decades with housing as an almost insignificant cost, they've got no incentive to change things.
> A lot of web pages don't have meaningful dates associated with them

All sites indexed by Google have at least one very important date associated with them: the date they were indexed, and by extension what they looked like then.

And you can bet Google isn't throwing away this information for their own use. Temporal signals give causal signals, and casuality is extremely important for AI.
We experience everything through our own mind. The only actual substance we have access to is the experience of our own mind. Like soybeans or imitation crab, doesn't matter what the content of the experience is, it is made up of the same substance.
a Mirdas touch, if you will.

They did have some successful exits though right?
Doesn't that depend on what you mean by "if everyone saved"? If everyone saved to the exclusion of entrepreneurial activity, we would indeed all be worse off. However, we'd all be just as badly off if everyone bought stocks to that extent.

On the other hand, if everyone saved instead of buying stocks, wouldn't banks and entrepreneurs have a common interest in making loans replace stocks in funding entrepreneurial activity?
Ultima Online, Star Wars Galaxies, and Planetside
And on the fourth day God refactored the rendering pipeline…
I don't understand what's the point of this. So there is an answer that doesn't answer the question in SO, and we glorify because it... is confirmation that yes, it's bad?

OpenID is a specific layer on top of OAuth2. It standardised claims for authentication, scopes it down to the 2 credentials flows it can care about, and that's core in a nutshell. It's complicated, but so is HTTP, which most people don't use directly anyway (and the same should be applied for OpenID, just use a blessed implementation, the OpenID foundation maintains a list of certified libraries you can rely on).
Great, easy to use and free.

Choose two (at most).
I don't think it's unique to America, I've experienced it in Australia.
Most servers with the latest CPUs can only handle a few hundred players without bogging down, so yeah it's a fair bit.