skysight-inc/HackerNews huggingface dataset:
Simply, if you provide a thing for free, expect people to take it and use it for free. Artists, writers, programmers, and everyone else included.

If you do not want your “intellectual property” taken and used by others, don’t give it away for free.
It depends on the scenario. I can think of the following, although they're pretty similar.

1. Lost/stolen access token.
2. Lost/stolen refresh token.
3. Disabled account.

In the case of systems like Azure where access tokens have an "audience", they could theoretically send a revocation message to the audience endpoint (which would only need to care about revocations younger than the duration of access tokens, much like a CRL).

Revoking a refresh token would probably need to revoke all access (and perhaps identity) tokens associated with it.

Disabling an account would just need to revoke all tokens associated with it.
The point of them owning LXD is to give them total control of the underlying technology they are using for Snaps. Snaps is the play… has nothing to do with kube/docker. It’s actually more of a synonym of ostree and flatpaks.
I'm not sure I understand the argument that expirations are inadequate: what's the likelihood of ending up with a token compromise without the client machine also being compromised? Further, if the client machine is compromised, isn't token revocation not much more than a fig leaf? If the machine is working correctly, and the user wants to explicitly terminate a session, why is erasing / forgetting the session secret not adequate?

I feel like I'm missing some critical, but non-obvious threat model here.
I started looking into replacing the MongoDB instance used by the Unifi Controller software with this, I need to revisit it.
99% of code is boring, closed source, and provides business value. Most people do not work at FAANG, and do not want to. People mostly work at SMBs doing things that are not super exciting, and that's OK.
Check out PreText for these!
Eventually all three of those channels will wise up and move to another platform, if they haven't already.
The great filter – Robin Hanson – TEDxLimassol [video]
Right. SSL certification revocation lists have been called "broken in practice". In perfect practice, any time you want to use a cert you have to check the CRL, which means you have to pull the whole CRL or have it on a short enough refresh to satisfy your risk profile. If the attempt to access the CRL fails, then what? Do you trust the cert or not?
https://en.wikipedia.org/wiki/Certificate_revocation_list#Pr...
Just tried wine for the first time yesterday to use a AFR meter. Did not work at all. Wine did not support the USB connection.
CloudFlare never looked like neutral infra, since they control the traffic so they need to (from a legal standpoint at least) block certain things. There has always been things cloudflare would not host.

CA:s do not control the traffic, they just say if a key is associated with a domain.
Just like BMW tying the heated seats to a monthly subscription.
I tried the second command. I got a load of open files, but all of them system stuff or fonts, nothing suspicious.

TextEdit does store old versions of files it is working on, as with Time Machine. I wonder if what you saw was in some way related?
https://kbr.sh
try the tutorial? https://learn.svelte.dev/tutorial/introducing-sveltekit
Paywalled, but I'll just share that before hockey on Fridays it's not uncommon to have a beer or two.
So, didn’t use frameworks but then used frameworks? Tailwind and Jinja.
A cynical person might argue that whether your startup has the serious potential to become "venture-scale" is unimportant in attracting funding - it's all about psychology and perception.

See for example https://www.bloomberg.com/opinion/articles/2023-06-27/silico...
https://key.bio is built with pure html/css/js and hosted/cached on GCP
Companies don't conduct interviews, people do. You need to be able to ask questions in an inoffensive way, and you might get some meaningful signal back. If you conclude you can't ask hard questions and instead go to Glassdoor then you're biasing yourself to demonstrative cheerleaders or people with an axe to grind, neither of which will really tell you anything about what's actually going on within the ranks of power on the inside of a company.
I agree. just think home much effort went into braking the Enigma Code in WW2, a tech developed by a contemporary power, with similar scientific know-how etc.
If you've got hints/docs from similar formats, AI could help develop a pattern.
Well, he did create reddit.
Have you open sourced this or found a similar project?

Does it make an API guy to the google sheets api client side to populate the data, if so is there a caching layer or does each client get a fresh copy.
Recently migrated to a .com

https://bhupalsapkota.com

If the site throws error on first load please refresh the page. I can't figure what's causing this issue.

Random musings

https://bhupalsapkota.com/category/writings/

Short Poems 700+

https://bhupalsapkota.com/category/manasha/

I love writing in my native language cause I feel like English has everything already written.
> If you swapped out Linux for VAX I would be terribly displeased.

Having used both I’d say that the differences between Unix and VMS are much greater than the differences between Excel and Google Sheets.

A better comparison might be between Linux and BSD.
>However, various emails show Plaintiffs are likely to succeed on the merits through evidence that the motivation of the NIAID Defendants was a “take down” of protected free speech. Dr. Francis Collins, in an email to Dr. Fauci told Fauci there needed to be a “quick and devastating take down” of the GBD—the result was exactly that.

What an utterly horrendous misrepresentation of this email by the judge, who seemingly edited it to fit his narrative. Here's the full sentence[0]:

>there needs to be a quick and devastating published takedown of its premises. I don't see anything like that online yet - is it underway?

So clearly referring to 'takedown' in the sense of a published rebuttal, not an instruction to social media companies to remove content. Notice how he ommitted the word 'published' from his quote. This does not inspire confidence.

[0]https://i.dailymail.co.uk/1s/2021/12/18/23/51969841-10324873...
I get a dopamine hit when I make money because of a hobby, but for me it just continues to "develop" until it stresses me out. I don't realize I have crossed the threshold from "fun" to "stressful" until way after it happens.
Depends really on how high the salary is. I think you have to work out what is important to you, and what in one's life is just gratuitious consumption and can thus be eliminated.
I’m describing the human mind, which all people have. But I get your point - and I think most of those people who aren’t particularly adept or skilled or interested in their jobs might find their jobs are more easily done by more adept or skilled or interested people. Consider digging tunnels. John Henry was skilled and adept and interested in what he did. He could beat the steam drill (at a cost!). But if you visit tunnel digs today isn’t not a thousand people slinging hammers, most of whom were unskilled and uninterested in the labor itself. It’s a thousand skilled engineers digging tunnels never dreamed of in John Henry’s day.
In the United States violating the TOS of a web site is technically a criminal offense under the CFAA, although the government is choosing currently not to prosecute most of these offenses[0]; but beware as that is simply a policy that can be ignored at any time it is useful.

[0] https://www.justice.gov/opa/pr/department-justice-announces-...
No, the best solution is just to use protondb and see if it works there, and read some comments. Then try it. Performance really doesn't matter for most titles because generally speaking the first problem is "Does it work under Proton or not" and then "Does it work reliably." You can get the Proton build of Wine a number of ways like Lutris, from what I understand, or just install Steam on Linux.

Again, do not read what anyone says as gospel, check the games you have and want to play even if people say they're perfect. Lots of things work but a lot of high-profile stuff still doesn't, so it won't work for everybody. And if a game requires 20 minutes of fucking around to get working reliably, it's very possibly not worth it; but IME people who desperately want to use Linux will excuse any amount of issues except for literally not being able to boot.[1] For example, Dragon Ball FighterZ and Destiny 2 don't work well under Proton (for different reasons) but ultimately, I have to use Windows as a result, no matter what anyone says here. Lots of games do work on my Steam Deck though, so that's nice.

[1] You can find tons of reports on ProtonDB like the following: marked "Playable", but then it says "You must launch the game with a custom environment variable to boot it, then it will crash every 10 minutes, which sucks, but it's playable." Literally the definition of "not playable" by any metric...
That’s not the promise though. The promise is “this app will generate a whole codebase”.
It could be benign behavior of a poorly implemented change-watching system. But since TextEdit is an official Mac utility (right?), that would be surprising. It could also be some other benign behavior that is triggering false positives in your detection mechanism, e.g. the shell where you're running `lsof` and the `grep` process itself, which includes a `TextEdit` parameter in its command line arguments (the call is coming from inside the house!) - make sure you're verifying that it's actually TextEdit.app that has those files open, and take note of the PID.

If it's malicious, one possibility is that a malicious payload is masquerading as TextEdit using Dylib hijacking [0]. You can scan for this by using Dylib Hijack Scanner [1], a tool developed by Patrick Wardle, who was the researcher to first publicize the Dylib hijacking technique.

Also be sure to take a look at the other products from Patrick's site, some of which will help you monitor for and diagnose this kind of potentially malicious behavior.

[0] https://twitter.com/patrickwardle/status/1648865533041967105

[1] https://objective-see.org/products/dhs.html
17 years ago is now a different world.
The declaration of independence-Read by John F. Kennedy (1957)
Care to elaborate how the choice of a person’s equipment and browser relates to GitHub constituting a single point of failure for the industry as the prevalent Git hosting tool?
Google is the only place I have worked where we didn't judge peoples' follow-up questions. I'm not sure FAANG is representative in that respect.
Various bots, for example, Ordering Uber, sharing Spotify playlists, and other such obscure use-cases that only Facebook employees would engage in.

https://about.fb.com/news/2016/04/messenger-platform-at-f8/
Hmmm, is that actually true?

In my experience being in good shape is a lot more important for most women. A guy with a 6 pack doesn't need to be 6.5 feet or a millionaire to have a lot of success.
People ascribe way too much non-programatic nature to humans imo

Just look up the Name a Color and a Tool question

Did you think of one?

Red hammer?

Or blue screwdriver?
https://www.leevalley.com/en-us/tools/brand/veritas
> developers “abandoning” games

I think it's valid to complain, or at least hold the developers accountable, in at least two cases. You mention one of them but I'll throw my 2c in anyway.

Case 1. Releasing an early-access game, promising a bunch of new things, not able to deliver on those promises, take the game out of early access and release 1.0 as-is (often with no explanation). Later the game will go on sale heavily discounted as the developer attempts to extract as much as they can from it.

There is an inherent buyers risk with early-access as the developer has no obligation to fix the issues with early-access or indeed ever release a full game. The solution here is often stop buying games in early-access, as this problem is very often not limited to a few devs but much like startups, many early-access games have lofty goals and very few of them tend to meet those goals.

Case 2. Game is released and has a huge amount of game-breaking bugs. Particularly infuriating bugs for players will be things like crash-to-desktop and lose all your progress kind of bugs, or inexplicable performance bugs. I think graphical glitches (eg. Bethesda-style immersion breaking animation bugs) are far less of an issue vs. these kind of "you just lost an hour of your life because of this crash" or better yet, "save file is corrupt" kind of bugs which riddle some titles.

In these cases I absolutely think it is fair to call it out when the developer has not been able to publish a working product.

In general I don't think that people feel entitled to an update, I read these kind of statements more as a warning to other potential buyers. Steam is a marketplace after all. It can be read as both "well what you see is what you get, because updates are few and far between for this title" or "steer clear entirely from this bug-ridden mess, spend your pennies elsewhere". In some rare cases you will see games that the developer has managed to turn around and I'm not sure if they would've been motivated to do so if it weren't for wanting to clear their names in the negative feedback.

Edit: I forgot to work in this additional point so I'll add it here. The complaints can also serve as warnings about particular devs who tend to do the same thing over and over again. Seeing it happen for one title is one thing. Seeing it happen multiple times over from the same dev and you start to notice a pattern of over-promise and under-deliver, you can make a more informed decision.
Yeah, that's a clearer way of saying it
You mean Mark Zuckerberg added his voice to Poke knowing that the app wouldn't even exist in a few years?

https://techcrunch.com/2012/12/21/mark-zuckerberg-voice-of-p...
Some days, when reading the paper, it's not worth getting up off the toilet.
CrossOver
Nio to start deliveries of 150-kWh WeLion semi-solid-state batteries in July
I agree on 2 vs 3, but with CSS and other formatting rules it is too easy to become inconsistent on 2. And I hate inconsistency.
Gerald Sussman – Artificial Intelligence: A Problem of Plumbing? [video]
https://notes.willhackett.com

I don't post very often, but I've been meaning to because I find a great way to learn something is by writing about it.
Not only am I exactly aware of that, I am even advocating it.

OP wants to write a hobby language, not reimplement Common Lisp.

If OP wants sexprs, they can get quick-and-dirty sexprs by:

(1) substituting spaces around each paren in the input
(2) breaking input up into a list of whitespace separated words
(3) folding over the resulting list (by looking at its parens) into a tree

Sure, that's done poorly. However, it takes under 15 minutes (and under 15 lines?) to get them past their sticking point, and if the rest of their language (especially the part that differs from all other languages) actually turns out to be worth pursuing, they can always implement (or import) a real —or at least a better— reader later.

See https://news.ycombinator.com/item?id=36593060
It really doesn't take long to try out a free tier of a product and it's a great way to get a feel for what the company is building, how far along they are, how much you like or dislike the direction they've taken.

I even like to briefly try the free tier of a product (if available) ahead of warm lead sales calls. It always pays off to have a rough understanding of what a product does and how it fits into an overall ecosystem.
I don’t think it makes sense to compare a for-profit content delivery product with a non-profit CA. They fill different purposes, and exist under different regulatory and incentive models. They don’t do remotely the same things, and don’t even have the same basic “profile” (one being an active network participant, and the other being a static participant in the PKI).

Again: this entire thread exists because you (baselessly and incorrectly) speculated that LE has censored people. We’ve now moved on to baselessly speculating about what LE could do, which is approximately as useful. Which is to say: not.
I've used Perforce before moving to Git (and used rc and svn before that), everyone has had the same issues with one team member knowing it better and being to go to person for resolving issue. With Perforce the GUI is okay, or at least it was 10 years ago when I was using it, but we always went to the cli interface for many things not supported in the GUI. A GUI can't cover every option and be usable. Visual metaphors are more accessible initially but eventually they become overwhelmed and you need to move to linguistic metaphors like the cli and code.
I have found that most open source projects like this tend to oversell and underdeliver.
That actually furthers the argument of "it doesn't cost that much", since creators get about ten times as much money from YTP viewers.
https://thomasahle.com/blog

Each post is using a different platform. Blogger, medium, self-rolled.

I still haven't found a really good system that allows me to write math in latex while looking modern and not paywalled like medium.

I'm also wondering about a self hosted blog for "twitter thread" like shorter content. Any recommendations?
https://dustinfreeman.org/blog/ going back to 2005, on Research, XR, Theatre, Games, Human-Computer Interaction

Project Writeups:

https://dustinfreeman.org/blog/the-painting/

https://dustinfreeman.org/blog/immersive-theatre-mice/

https://dustinfreeman.org/blog/tech-insanity/

Consistently popular niche technical posts:

https://dustinfreeman.org/blog/pdf-splitting/

https://dustinfreeman.org/blog/rip-lfs/

Tech philosophy:

https://dustinfreeman.org/blog/small-spaces-pt-1/

https://dustinfreeman.org/blog/sabbatical-themes/
https://blog.marcua.net/

The content has varied over the years, but in the past few years, I've used the blog to explore side projects outside of work. This has allowed me to separate my primary responsibility at work (manager/unblocker/collaborator/prototyper) from my personal interests in hacking.
There's a huge income inequality in UK - much more so that the others West European countries. From billionaires to probably millions of families that don't have enough money to buy fruits and meat.

Make the rich richer and the poor poorer looks to be the politics of the Tory party.
DA Brooke Jenkins to drop last SFPD police shooting case
Absolutely, it is all about maintaining mind share rather than letting the product speak for itself.
"Going to them is an event, and affordable."

Hmmm.... So is bull fighting but most of us refuse for various ethical and moral reasons...

Maybe we should treat a giant parking lot that goes unused for 99% of the time, and requires people to use polluting transportation when they could use public transit to go to a theatre, as the giant unethical mess it is, eh?
My laptop is all AMD (AMD Ryzen 6800HS) and I think people have rose-colored glasses of the AMD situation. I certainly prefer it for many reasons: it's driver stack is open source, it has full DRI2 support, it works with Wayland, etc. That being said, it has plenty of it's own problems and I've run into many of them with Proton/Wine. I would dare say, more than my Nvidia laptop did (though, this was before Steam Deck launched; so I'm certain of it having improved).

Ironically, Intel's embedded GPUs have the least issues overall; but are the least capable pieces of hardware.
First one is explicitly listed as a fixer-upper.

Last one is <1500 sq ft.

I gotta hand it to you, the second one is fantastic deal, I wonder why. Maybe bad schools or something. But still.
The Problem with “The Rare Earth Hypothesis” [video]
17 µA/cm^2 @ 0.5 V across a 7 µm thick film.

6 layers each 17 cm x 17 cm would be 4.9 mA @ 3 V which would be enough for quite a few of my current and planned projects, assuming no energy storage. With some kind of energy storage to store up the energy harvested when the microcontroller is sleeping it would be enough even for my projects that periodically send sensor readings by radio.
if everything is so bad then it should be easier to find someone willing to work. But that's not the case today. Which means life today is probably not that bad.
You brought up diversity, so what kind do you mean? Going forward, post affirmative action, just by test scores and gpa almost all students admitted at top schools will be asian or white. But there have been five decades where significant numbers from other races have attended these top schools and their kids and siblings can benefit from legacy admissions. (For example, this year ~15% of Harvard freshman were Black) Legacy admissions will absolutely increase this kind of diversity. If you get rid of it, it may further slightly benefit asians over whites, but I am not sure this increases "diversity".
These tools aren't for "general user". They are either for system programmers, or for system administrators.

> When that application is utilizing a core,

Core of what? A real CPU? A virtual CPU? Do we count hyperthreading TM?

You are just repeating a term that you didn't define -- "utilization". I did define it in the way that to me seems plausible given how people usually understand it intuitively. You just keep throwing this word around, but you don't even care to explain what you mean.
I assume it's a hook to rebuild on changes and data is statically embedded during build. Happy to also see the details of OP's work. Sounds great!
https://nyanpasu64.gitlab.io/

I write about hobby projects including CRTs and analog video, basic electrical engineering, and technology/programming/audio tinkering. The website is implemented in Zola using a customized template.
I fondly remember writing a bottle.py+jinja based dashboard wrapped into a windows utility that allowed to let that run as a service. My first web app, only for my team's internal use, without any autoscaling etc but boy did I have fun writing it!

It's a scale thing - today I would reach for a framework for bigger things but lightweight setups have their own place.
Browser extensions have been an unmitigated security train wreck. Not a single person is actually auditing the source code of every extension they use before installation and before each update. And if you are, you should have no issues recompiling firefox without this change.
I'm not sure conservatives are exactly the social butterflies you make them out to be.
I'm not sure where I say we "have some expectation that they [candidates] should be upset and disappointed if they don't make the cut". I would assume they'd be disappointed they didn't get an offer, wasted application time, and didn't get an impactful role... for easily avoidable reasons.

Agreed that people not a match for a job shouldn't get the job offer nor should they take if the offerer have messed up. This is all match making... Which is two-sided.

I'm lucky enough to have reached a point personally & professionally where I can highly value where each hour goes & doesn't go. A lot of time goes into a job, so the idea of applying for a bunch of 2-5yr (or longer) journey candidates, and the possibility to do the best professional work of my life to date.. and not doing my homework on the options just doesn't make sense. For some people it does and for many legit reasons, and for them, a leetcode interview for a FAANG style job probably makes more sense. Just that kind of approach is a harder sell for making a good match at a startup at the more formative years.
No, I'm using Vivaldi. Chromium-based browsers have an option "Allow access to file URLs" for extensions. In Firefox this functionality is missing. But it might be possible to patch omni.ja to get it anyway:

https://bugzilla.mozilla.org/show_bug.cgi?id=1266960#c43