skysight-inc/HackerNews huggingface dataset:
I still don't get the issue, that's going to be true for any program you run, unless it explicitly check if it's running using sudo. That however assumes that the program should never run with elevated privileges, which may be equally wrong.

Unless a program is designed for a very specific task and should always run as a given user, I'd argue that having it check privileges is both surprising and wrong. It's not the job of the individual programs to check permissions.

Edit: I see what you're saying. Having mail being a program that a user is allowed to run with sudo, it basically the equivalent for giving them a sudo access to a shell, because mail can spawn a shell, but with the same privileges as the mail command had.
Back-of-the-envelope approach that should eliminate most branching:

int table[256] = {0};

void init() {
table['s'] = 1;
table['p'] = -1;
}

int run_switches(char *input, int size) {
int res = 0;
while (size-- >= 0) res += table[input[size]];
return res;
}
Nope. They block burners and workarounds.
This is a real issue. Graduate students are a very heterogenic bunch, with some study domains forfeiting very substantial wage and carreer opportunities by staying at university, and students in other fields have no or comparably very less lucrative prospects outside of academia.

Not differentiating these groups does have a real impact. (I was on the board of a university so had a first row seat to this)
True, but independently of whether "cmov rax, ..." or "jnz L; mov rax, ...; L:" is used, subsequent instructions that reads rax needs to stall until rax has been written to (or at least until cmov/mov has executed if bypasses are used).
Do you have any proof of this? As far as I know, Catherine Coley has been missing since early 2021. I haven't seen any evidence that she's alive, let alone cooperating with the SEC and CFTC
The lesson here is just don't rely on sudo to give restricted permissions. I have been a Linux admin for 6 years and never had to do this, and pretty much every use case I've heard of has easily solved with a better method. If you need to give people access to certain files, make a group. If you need them to have certain capabilities of another user, let them switch to that user but not run privileged commands.
But because in the single-null case the loop body is executed only once, the gains of arrangement that prefers nulls are pretty slim compared to long-string cases where the loop body is executed many times. For example if your dataset contains 99 cases of single null strings and one case of 100 chars long string, it might still be optimal on aggregate to use the long-string optimizing arrangement.

Of course there are still some cases where non-zero strings are extremely rare and as such optimizing for those makes sense.
> - nuclear energy is the only way to fend off the climate crisis

This is the only practically infinite source of CO2-free energy not relying on weather, geographical position or large area. See also:

https://news.ycombinator.com/item?id=26603464

https://news.ycombinator.com/item?id=26673987

> - unsafe nuclear energy

It is safer than almost all other sources (taking into account Chernobyl and Fukushima): https://en.wikipedia.org/wiki/Nuclear_power_plant#/media/Fil...

> - the risk of unsafe nuclear energy is lower than the risk of the climate crisis

The climate catastrophe is considered obviously very dangerous by all scientific organizations: https://en.wikipedia.org/wiki/Effects_of_climate_change
We've been through this process once before with google+. It was the new SoMe which "everyone" wanted access to, but they nerfed their own growth with their invite system.

Sure, it chugged on for a few years, until it was inevitably killed-by-google.

The same thing will happen with Bluesky
is twitter going to embrace activitypub or not
Txti shutdown due to bad actors it says, I guess those bad actors might come for you next?
Lol imagine your IDE becoming addicted to smoking, and refusing to auto-complete or save files before you buy it more virtual cigarettes.
Right, and 128 bits is way better than 96.

The only thing to potentially be aware of is that the randomized block counter may end up overflowing if it happens to end up with a large initial value (or you encrypt large messages). That should be fine, but it's quite likely that some GCM implementations are not expecting that and either blow up when the counter resets to 0 or do something else unexpected. So although I think this is theoretically a fine thing to do, I absolutely wouldn’t trust my sensitive data to it.
Abstraction. You don't need to know what's going on at the quantum level because higher-level simulations can capture all the properties you care about.
Isn't that what we already have? Social benefits for those who really nees them?
Hey thanks for your comment and other perspective!

How couldn’t you read him before the overtake? What’s the difference?

Could this inspector join Threads and would you follow him there?
I took the 64-bit SWAR ('S'IMD-'W'ithin-'A'-'R'egister) road and passed in the string length - the calling code has the length "right there"!!!

Using the original run_switches function, app took 3.554s (average of 10 runs).

With the SWAR-version with the string length passed in, app took 0.117s (average of 10 runs).

That's an overall 27.6x speedup.
I've been watching Andreas' YouTube channel since very early on, and had some short interactions with him in his comment section, and I really believe that every one of the videos where he sits in his car and talks made a difference for me. They taught me a lot - and of course, after tens or hundreds of hours of watching him write code, my C++ looks quite similar to his.
I think the listing of "non-obvious" functionality is interesting. For instance, would you have expected to be able to use gimp to get a reverse shell? Would you have thought of using lp as an exfil tool? Or just bashing your exfil into base64-encoded whois requests?

Living off the land is always a fascinating topic, at any level.
On guess would be that there has already been a time where the DoJ went after those industries hard, but by now both sides have adapted to each other that obvious conflict is no longer evident?
It really is very good. What made me not stick with it? Trying to remember. I think it was the fact that it is a little heavy and support/issues is in Chinese, which I don't speak. Later I simplified my setup and made everything local markdown files, handling sync myself.

You can actually try their hosted service for free. Though looking at it now, most of that is in Chinese too.
But soon is going to be obsolete if you have wifi at home...

https://arxiv.org/abs/2301.00250
Ironically this reads like a tweet.
> The sandbox is not going to protect users from ... bad security for the application itself

Your other data, in other sandboxes, is protected though.
Follow-up study tracking the evolution of this minimal cell: https://www.nature.com/articles/s41586-023-06288-x
It doesn't do what I said, though. Try it. It doesn't let me specify anything about the return trip. It also doesn't support adding it for recurring events, even if I always expect to leave from the same place.

It's also extremely glitchy, so I wouldn't even be generous enough to call it "supports" even for the features it does try to have.
My state of grief is more related to politics.
I got it from a video I saw so I didn’t make it myself

https://youtube.com/watch?v=eaYIU6YXr3w?t=106

I’m not sure the timestamp works but it’s at 1:46
Software developer for a land based mine planning company branching out into ocean based exploration software.

Interactions with gun boats were stop, talk, stand aside while people wander about, passport inspections, and (allegedly!) envelopes of cash and stacks of soft core magazines disapeared (after being left out).

If you check the Spratly Dispute link we're talking Chinese, Vietnamese, Malaysian, Borneo, etc. anybody with an interest. Often with Russian, US, UK observers | advisors from major petro companies.

Survey wise; Sea floor, subsea floor layers (for petro exploration), tidal movements.

Logging:- GPS, Differential GPS, LORAN, multichannel returns from streamer arrays (seismic) - building real time corrected 3D imaging on the fly.

Never saw a pirate, did often observe a sea of bobbing lights after dusk as "sea gypsy" ([1] et al) fisherfolk went out to catch squid in the dark.

[1] https://en.wikipedia.org/wiki/Sama-Bajau

Maps showing borders are best avoided in disputed areas - just map the physical earth forms and leave poltical boundaries off if you want to avoid trouble.

I had the same issue in the disputed areas between Pakistan and India - not the place to travel with a map showing boundaries, someone will always disagree with any line drawn.
I would love to see a webassembly version of this engine so we can see these worms on a webbrowser. Wonder how hard it would be to do so.

---

edit: Possibly baked already at http://wormsim.org/
What I said is far closer to the truth than the picture you’re trying to paint.

Antimaidan protests were organic and covered by many Western outlets. No green men.

Donbas and Strelkov and Motorola are not the same as “little green men” in Crimea.

Russia had the right to station up to 25K servicemen in Crimea.

These or “green men” were also called “polite men” because it was widely reported that they didn’t do anything. The stats you cited are comparable to stuff that routinely happens in the US and other countries, NOT an armed invasion like in Iraq or Libya. Not even close. You try to conflate them to somehow make the case that “Russia invaded Ukraine in 2014” because you need it for a rhetorical chess move to “win” something — rather than intellectual honesty.

Now, Russia did arm and train terrorists against the Ukraine government, and that was very destructive. I admit that and condemn them for it. I also put it context to say that, sadly, this happens all over the world, usually with CIA doing it, and if you really care about this phenomenon you should discuss it everywhere and not just this one case. Yes, that is exactly the spark that lights the fire of civil war and proxy war.

That’s what we SHOULD focus on preventing, instead of blame games.

And Russia is squarely at fault for training the rebels. But also others symmetrically. If USA didn’t train the other side then Minsk II would have been implemented long ago.

The ONLY thing I will grant to the US which makes its training and arming more legitimate than Russia here is that it was helping the government of a sovereign country maintain control of a region. But in Syria it was the EXACT opposite with the sides switched, and you don’t have the consistently opposite analysis. USA is sither right all the time regardless of whether it trains militants against the government or for it, or perhaps you want to be consistent but just don’t bother?

https://www.nytimes.com/2022/07/03/us/politics/american-comb...

As far as “vacationers”, um USA had PMCs in Iraq, all over the place for years, but claimed “no boots ok the ground” and “end of operations”. And by your standard, what do you call US army vets fighting in Ukraine right now? Are they “NATO boots on the ground”?

I think Motorola and Strelkov are the analogue of Manuel Norriega. USA even had the School of the Americas to train people like that. What is the relevant difference? And once again I want to say IT IS BAD. My prescription is always:

* Don’t train and arm terrorists

* Don’t get involved 3000 miles away

* Force public servants to engage in diplomacy before suthori
For those who enjoyed Understand, it along with other shorts are published in Stories of Your Life and Others.

https://en.wikipedia.org/wiki/Stories_of_Your_Life_and_Other...
Why would you expect to see a perfect number of dashes on a map that is obviously not a direct representation of anything?

If your base requirement is that propaganda be obvious, you’re never going to be able to discern propaganda when you see it.

If you were inserting the nine dash line into a map like this, you would want some plausible deniability.

It’s not about the number of dashes, it’s about what the depiction is meant to represent.
If you saved the state somewhere - nope.
I like this idea very much. I saw this concept in real life during a podcast event in "De Rode Hoed" in Amsterdam. I was amazed by the quality of the screen. It's a little expensive, but I'm sure there is a market for this.
Show HN: My take on creating personal knowledge platform
I start building this site because i wanted to organize information I needed and was personaly interested. My favorite activities on the web are learning and organizing so I am trying to combine both aspects. Tell what you think, tell me the good and the bad.
On the brighter side: I lived through that period when the games transitioned from text-based interfaces to point-and-click ones. What a relief that was!

I understand the nostalgia for Infocom games of people like Jimmy Maher - I also have a soft spot for beautiful and polished writing, but this definitely was a way forward for games in general.
You can provide that with a simple HTML form though.
Love the artwork. I suggest the face of the animal mascot (sorry not sure what animal) should be your logo too.
There are quite a few comments here questioning why a list like this might exist, the focus should be on this in the intro:

> bypass local security restrictions in misconfigured systems.

Someone may think that they can give users restricted access, but this is likely not the case as it is easy to misconfigure the system to give full access. That's the takeaway for me: any access is probably all access.

A very clean example is `aws help`: an admin may think that allowing a user to run the help command just grants them access to help, but the example shows that the user could then run any command:

aws help
!/bin/sh

https://gtfobins.github.io/gtfobins/aws/
Looks great. How do you get the print version of your newspaper of choice?
No. That would become another screen in your house. I think the power of this concept is it begin e-ink.
1. which company, DO or PS?

2. what kind of project were you running there?

3. CC chargebacks are a thing, do you have receipts.
That sounds like a very different product from what they're offering here.

Eink feels close to paper, regular LCD's or OLED's do not.
Your desire for “actual contact documents” is complete overkill from my perspective. Verbal contracts are a thing in many jurisdictions.

Formalities can help prove things but they are often not required.
Sounds like an interesting project, how/where does it fetch the data from?
I assume it depends on the person. I would rather have a single message.
Sure, but we are not talking about per capita co2 emissions but the worst emitter, and that is Germany and not Poland. The world does not care about per capita anything, it cares about absolutes.
I'm not concerned, for some reason. I an optimistic that humanity will deal with climate change and avoid catastrophe.
The "suid" and "sudo" terms are not the conventional meanings, which to my mind sensationalizes this list, which is otherwise useful.

Real "sudo" has "noexec" which (mostly) prevents issues by way of .so injection to override libc exec() functions (see the "awk" sudo issue for example). setuid/setgid are not to be used lightly, the problem isn't with the program if an admin overrides the permissions it gets.

This used to be one of the first things I'd run hardening a linux system:

find / -type f -a \( \( -user root -a -perm +4000 \) -o \( -group root -a -perm +6000 \) \)
There is probably some break even point, as a typical 4k monitor draws considerably more power.
That would be one component, yes!

I'm thinking of some sort of standard history export format that can be overlaid onto a calendar. The Spotify history bar mockup would be one example. My browser history could be another one. So could the various data tracked by my smartwatch.

It would transform the calendar from something that is only used for planning the future to something that helps us recall the past.

We know this data is out there. Shoot, companies use it to build marketing profiles of us all the time. It would just be cool to be able to build such a profile about ourselves so we could review our decisions and evaluate our choices.

I feel like the quantified life folks would be all over this!
It's really more an acute mistake.
Adobe’s Firefly AI and other Adobe AI is the result of billions of dollars of investment over multiple years. Lousy source (sorry): See the number of Adobe authored 2 minute papers (YouTube channel) about AI based graphics over the years.

The rest of the examples shared are mostly just direct integrations with the GPT-4 API, which should be trivial for almost any startup to do. I.e. it’s very likely not going to be game-changing for a CRUD company like OP’s case.
What I said is far closer to the truth than the picture you’re trying to paint.

Antimaidan protests were organic and covered by many Western outlets. No green men.

Donbas and Strelkov and Motorola are not the same as “little green men” in Crimea.

Russia had the right to station up to 25K servicemen in Crimea.

These or “green men” were also called “polite men” because it was widely reported that they didn’t do anything. The stats you cited are comparable to stuff that routinely happens in the US and other countries, NOT an armed invasion like in Iraq or Libya. Not even close. You try to conflate them to somehow make the case that “Russia invaded Ukraine in 2014” because you need it for a rhetorical chess move to “win” something — rather than intellectual honesty.

Now, Russia did arm and train terrorists against the Ukraine government, and that was very destructive. I admit that and condemn them for it. I also put it context to say that, sadly, this happens all over the world, usually with CIA doing it, and if you really care about this phenomenon you should discuss it everywhere and not just this one case. Yes, that is exactly the spark that lights the fire of civil war and proxy war.

That’s what we SHOULD focus on preventing, instead of blame games.

And Russia is squarely at fault for training the rebels. But also others symmetrically. If USA didn’t train the other side then Minsk II would have been implemented long ago.

The ONLY thing I will grant to the US which makes its training and arming more legitimate than Russia here is that it was helping the government of a sovereign country maintain control of a region. But in Syria it was the EXACT opposite with the sides switched, and you don’t have the consistently opposite analysis. USA is sither right all the time regardless of whether it trains militants against the government or for it, or perhaps you want to be consistent but just don’t bother?

https://www.nytimes.com/2022/07/03/us/politics/american-comb...

As far as “vacationers”, um USA had PMCs in Iraq, all over the place for years, but claimed “no boots ok the ground” and “end of operations”. And by your standard, what do you call US army vets fighting in Ukraine right now? Are they “NATO boots on the ground”?

I think Motorola and Strelkov are the analogue of Manuel Norriega. USA even had the School of the Americas to train people like that. What is the relevant difference? And once again I want to say IT IS BAD. My prescription is always:

* Don’t train and arm terrorists

* Don’t get involved 3000 miles away

* Force public servants to engage in diplomacy before authorizing any violent operations

* Force all meeting between politicians to be on video

* Favor electing people who tend towards deescalation

You are so caught up in the blame game that you spend nearly no time discussing the SOLUTIONS I propose, which are universal for people of all nations to demand. Your “solution” is to keep volunteering people 3000 miles away to die in yet another “forever war” until a fantasy scenario plays out, or — more realistically - new politicians are votes in and everyone forgets and moves on from “the latest thing”.
Acceptance at this point, but still this deep sadness. It hurts knowing the irreparable damage we've done and continue to do to our only home, but I don't lay awake at night freaking out about it anymore.

I left tech to pursue med school - I feel compelled to do something to help other people now, with all of the looming problems in front of us. And feeling like I'm doing more than just making monthly donations to NRDC and others helps.

We'll survive as a species... but many people will die and we'll lose a lot of Earth's natural beauty and diversity.

I had a gut feeling that we wouldn't do anything to cut emissions until we were feeling the repercussions on a regular basis and sadly that seems to be the case.
> "The neurons do not fire action potentials, and do not express any voltage-gated sodium channels."

This an old and incorrect belief that largely derives from the difficulty of putting electrodes into their teeny, tiny neurons. Close relatives of C elegans that are larger (and hence more easily experimented on) do have action potentials, and for some neurons in C elegans, we also have good evidence of action potentials [1, 2]. Absence of evidence is not evidence of absence.

[1] Lockery SR, Goodman MB. The quest for action potentials in C. elegans neurons hits a plateau. Nat Neurosci. 2009 Apr;12(4):377-8. doi: 10.1038/nn0409-377. PMID: 19322241; PMCID: PMC3951993.

[2] Jiang, J., Su, Y., Zhang, R. et al. C. elegans enteric motor neurons fire synchronized action potentials underlying the defecation motor program. Nat Commun 13, 2783 (2022). https://doi.org/10.1038/s41467-022-30452-y
I would bet over 95% of companies don't comply with GDPR. I know some startups don't serve EU because of this. Facebook is under the microscope of the EU, they probably aren't risking getting fined until they can scale the product and implement the thing they need to lower the fine they would get and make being fined worth it. They are going to get fined most likely, but again 95% of the companies in the world could be fined as well if they were under the spotlight like Facebook is. GDPR compliance is NOT easy at all ask anyone who works in compliance they knows this.
I apologize for the acute mistake.
For most countries I read about, I think politics and addressing climate change is directly correlated
Orbital Tethers as Momentum Capacitors
Where's the windows in this place? I see /dev/null but I'm afraid to venture into it.
Thinking about it again... In the end of the day, these games are what made English easy for me. In the longer term this definitely worked well!
While I do agree that panic is unhelpful, the "who" is holding the doom sign does make quite the difference, in the same way you'd pay more attention to an oncologist giving you 6 months to live than you'd do to a random guy with a cardboard sign giving you 6 months to live.

The issue is not so much the sign being held by a young activist, but from all the other 100's of k's of scientists and experts behind it.
That kind of data should definitely preserved for future generations - national libraries and archives could be trustworthy guardians of such data that is only meant to be accessed again with some time delay.

Or we encrypt it very well, throw away the key, and wait for computation to catch up :)
Really pedantic nit here, but the cipher Salsa20 is called “Salsa20” and so reduced round versions are called e.g. “Salsa20/8”. However the ChaCha cipher is just called “ChaCha” so the specific-round versions are just “ChaCha20” or “ChaCha8”.

I feel like I just “actually it’s GNU/Linux”ed you there though... I feel bad, I’m sorry.
I didn't use the word 'blocked', and I didn't say Instagram either.

I said Instagram.Threads, to separate between threads.net and threads.com.

> because they haven't yet found a way to circumvent privacy laws

So the fence is working.