skysight-inc/HackerNews huggingface dataset:
I’m definitely not military, so I can’t speak from experience here.

I just find it hard to believe that the military puts all of this information into decentralized air-gapped silos that are completely cut off from the outside world.

Information isn’t useful when it can’t be searched, cross-referenced and analyzed. How does data enter a SCIF? because it obviously doesn’t originate there. Do people walk in with thumb drives and load it into a computer? That sounds like a security nightmare to me
Edit: I can’t edit now. An extreme example. Is calling Hitler a bastard an example of political flame bait?
I had a watchOS app made (Hold Steady on App Store) for my olympic pistol isometric training if anyone feels like exercising their arms instead. Have no idea if it has a comparable effect on blood pressure though.
In my city they made several buildings that overlap a river, and several more that overlap each other. It's been like that for at least 3 years.
The crash arrester was missing when the Tesla crashed there, which is also part of the reason it was a fatal accident.
I have no direct affiliation with this service (nor am I a user of it) but I recently learned about "Pool Together" which is a "lossless" lottery system. It's a daily lottery that happens automatically, you do not need to collect as it happens automatically, and you can withdraw all of your capital at any time.

I thought that was a decently novel use case.
Ding ding ding! We still don't know how bikes work, we have a pretty good but incomplete model for lift on airplanes, and no one has the faintest why Tylenol works.

We should figure that out! But we can definitely keep using all the applications until then. (Except for Tylenol, we keep learning how bad that stuff is)

EDIT: It won't let me post more, so here's the answers to responses.

For sure!

https://www.cbc.ca/news/science/science-of-cycling-still-mys...

http://www3.eng.cam.ac.uk/~hemh1/gyrobike.htm

https://www.newscientist.com/article/mg22730370-400-how-does...

It's a fun little fact. We know a ton about BUILDING bikes, which is a more useful tool anyway
Kind of a great quote by Altman there
It's incredible how one of the largest companies in the world can still sustain double digit revenue growth after nearly 20 years. Not to mention mid single digit growth in MAU and DAU

If you believe what media and popular social platforms report you would think no one uses Facebook anymore.
> The hole in revenue in the early 2000 was because pirating was the only real option to get music online

The Telecommunications Act of 1996, allowing the likes of Clear Channel/iHeartRadio to take over all the stations, shows to be the real culprit.

At the time we joked, due to the steep decline in radio variety, that CD sales would crater because people would only get to know a small handful of artists, leaving few CDs to buy, and the numbers here confirm it was more than just a joke.
I would recommend having an About Us page, a Privacy Policy page and more than 30 posts/pages.
One has a browser that has +60% market share, the other went from ~55% to 3%.

One company dominates "the Web" and pulls these shenanigans all every other year, the other one is totally dependent of the former to pay their bills.

So yeah, Google has been better managed than Mozilla. That doesn't invalidate Google's execs are a bunch of lizards on the now common SV ego trip and screw up all the time, but they can and ensure they can continue to do so, Mozilla is not in the same position and part of blame must be attributed to them.
Is it really the power of WeChat or the chinese government though?
Battery grid storage would be dead in the water, as we already use Superconducting Magnetic Energy Storage for grid stability and ultra-clean power in certain industries - except suddenly a huge chunk of issues involved in making large power SMES will disappear.

They won't replace portable batteries soon, but room temperature superconducting will greatly increase efficiency in all areas of electricity, including higher power motors (the efficiency gains are good enough that superconducting motors and generators have been attempted despite needing supercooling). Also, a simple SMES could easily buffer future BEV truck charging station despite projected 1MW connection per charging truck.
Sleeping is actually not easy. I reserve 9 hours in bed, but I snore and wake up very tired, also insomnia and therefore it’s a feedback loop to open the phone in bed otherwise I ruminate (potentially suicidal) thoughts… I bet less than half the population is able to sleep properly while laying in bed (and yes, I’ve heard all the advice about sleep habits and seeing someone).

Once you fix sleep, you become much more brave and courageous for sports. And it’s a positive feedback loop, it’s a blind spot for sporty people (I’ve practiced 8-9hrs a week) to tell “Just do sports and sleep soundly”.
> Always micromanage down to the lines of code changes

I’ll never forget what one of my directors asked me to do a few years ago. I was a first-line eng manager with a handful of native mobile engineers. The Android guy had a better reputation for coding ability than the iOS guy, which was reflected in peer reviews come performance eval time.

Director received this feedback and instructed me to have iOS guy write his code exactly like the Android guy, down to function and var names, classes, logic, etc. No acknowledgement whatsoever that the 2 platforms use different languages, best practices, UI flows, etc., just: “Have him write the exact same code in his language and he’ll learn how to be a good engineer!”
Fair enough! You might be right.
The driver, who had been through the intersection earlier, says the light is green when it's red.
What does logging-in have to do with free speech?
Stripe Freudulent Attack (-50k..)
Hello,

We were victims to a credit card testing attack a couple of weeks ago, we didn't manage to get much attention from stripe but we reinforced our security. Nevertheless we were targeted with an even worse attack last wek. This time many large payments (with SEPA) were automatically refunded in many small pieces (we do not know where the refunds got laid out to, the info is impossible to find) and then the charges disputed, so we end up with the same amounts in negative balance (>50k) and we can't get hold of anyone at stripe. We have been flagging the issue now for two weeks and we end up with huge debits on our bank account.
Have you experienced this type of attack before? How do we get those refunds reversed (given we end up both refunding and with charge disputes)?
Anything would be helpful.
"Even Worse" than what actual alternative? It doesn't sound like the men were making a choice between the GF app and an uplifting and mutually satisfying relationship with a carbon-based woman.
"An Item 1.05 Form 8-K will generally be due four business days after a registrant determines that a cybersecurity incident is material."

Wow, that's a short amount of time. Sometimes you know. something is material before you know much about it. And now you have to not only gather the data, but publish a legal SEC form that you can get sued over in....96 hours.
Can confirm that this has definitely happened to me while Beta was active. I've been able to take over before it did the thing in both instances.

In those instances, the (temporary) light box was tilted enough to make it seem like the light could have been for the parallel road and not us.

I didn't bring it up because Beta detects and reacts to pretty much every other light like you'd expect.
Is there significance in the parent commenter saying "UFO" and the child comment saying "aliens"? Asking because they are not necessarily the same thing and searching for one may not yield results for the other. I suspect both terms would catch the eye, so this still seems like an interesting contradiction; probably just a difference between the comments that I noticed.
Java predates Unicode 3.1 (I think I got the version correct: but basically when Java was created, Unicode had less than 65536 codepoints). So Java had 16 bits chars from the get go and to this day is still backward compatible with earlier Java code.

You can also ask to get the "codepoint", which returns you an int.

But, yup, the Java char primitive is 16 bits.

It's a SNAFU hard to understate. SNAFU doesn't even being to describe it. But to be honest Unicode in itself is probably the biggest SNAFU of our entire field.
You used quotation marks, but provide no attribution.
I meant for other people
There were some notable historical events in early 20th Century Eastern Europe that quite famously had an impact on how many farmers were around to farm.
I wonder if that could be built into new fire trucks. For a fire truck with 1500 gallons of room temperature water (20℃ or 68℉) the energy from a full charged Tesla would raise that to 35℃ or 95℉ which is not so hot that it would be dangerous when used to put out the fire.

For a smaller fire trucks with only 1000 gallons that would raise to around 42℃ or 108℉ which might be too hot to use.

For fire trucks with only 500 gallons this approach it would definitely be too hot to use. The water would end up at around 65℃ or 150℉. That scalds people in under 2 seconds.
Our representatives are supposed to be our lobbyists. Part of the problem is people ignore when their lobbyist is doing a bad job when they wear the right color uniform, and refuse to acknowledge any good they do when they wear the other color uniform.
> and if more men withdraw into fantasy women will only suffer for it later on

This almost feels like the "thousand men killed, women most affected" meme.

Otherwise, yes, this is a symptom of a problem that's probably going to get worse.
> and limits on domestic production

How can you possibly be arguing that limits on domestic production are causing overproduction?
Show HN: PlayStationCouch: Elevate Your Gaming Adventure
What a legend. It's hard to overstate how much pushback and shit was thrown at her when she ripped up a picture of the Pope on SNL in 1992 to protest church child abuse. It's also hard to overstate how incredibly prescient and correct she was in her outrage. Catholic church child sex abuse didn't really enter the national debate until a decade later.
Please don't take HN threads into religious flamewar. That's a circle of hell we're trying our best to avoid here.

https://news.ycombinator.com/newsguidelines.html
https://www.axios.com/local/san-francisco/2023/07/26/san-fra...
> If daily stand ups are a problem for your team, it's usually a symptom of a bigger problem, not a cause.

I'm sure that's true for some teams, but daily standups can also be a problem for teams that are functioning well.

What if the daily standup routine isn't highlighting problems (nor otherwise helping), but it's just wasting time, throwing off flow, or frontloading a bunch of distractions into people's brains first thing in the morning?

What if people have to contort their schedules to do it (either starting before they're woken up or done their morning exercise, or interrupting the flow of early-risers who'd already dug into their work)?

What if the team members are good at async collaboration, and have a good sense when on-demand real-time is worthwhile, so daily synchronous standups seem like someone else needs help/nudge to learn the skills of the other team members, to avoid sabotaging a high-performing team's effectiveness and morale?
>If you can state it in one sentence, you don't need a whole novel.

Anybody can write it in one sentence, and it would have little to no weight, except to those already convinced for the cause. It's the taking the audiences to the point ("by the throat") that the novel can do best - and which Stowe's did.

Baldwin's critique is presented as a literally one, but he actually disagrees with the politics of the book, which is something different. It's this that drives his dismissal, as opposed to the effectiveness of the book as a novel (to which making a point is not incompatible, as if literature is above it. Some of the best novels still attempt to make a very specific point).

The "uncle Tom"-ing "pamphlet" story probably made more headway for the cause than many violent protests did.
Wow, I always liked Sinead and her music but didn't realize that was the reason for her haircut. Big up to her.
Give InvokeAI a try.

https://github.com/invoke-ai/InvokeAI

Edit: Spec required from the documentation

You will need one of the following:

An NVIDIA-based graphics card with 4 GB or more VRAM memory. 6-8 GB of VRAM is highly recommended for rendering using the Stable Diffusion XL models
An Apple computer with an M1 chip.
An AMD-based graphics card with 4GB or more VRAM memory (Linux only), 6-8 GB for XL rendering.
Can you tell us more about how the government picked the winner?
These are the sorts of efficiency improvements that would go a long way towards tackling global warming and environmental destruction, particularly the open design to reduce waste. The question is, how can we get from where we are in terms of an economic and political system to one that supports a healthy commons and maximizes value, like you describe?
Fair enough. My experience is fairly recent but it might also be a military vs intelligence agency thing.

All the classified/SCIF systems I used were networked, though the networks were physically segmented and most of the classified systems I used did not have internet access. Whether that counts as "air gapped" in your book I dunno, but I never came across anything like the room out of the original Mission Impossible film where the machine has no network access at all. In fact I question the utility of such a machine.
> It doesn't mean that having a cryptographically secure way to make requests more expensive to produce isn't a tremendous help.

A malicious actor wouldn't bother. They'll tap `/dev/random` when it comes time to send the blessed token to the origin. The onus is going to be on the origin to figure out that it's _not_ a valid/signed token. If it's as easy for the origin to do this as it is for the adversary to tap a RNG then what was the point? If it's harder for the origin to figure out my token isn't legit than it was for me to generate one, how is the origin better off?

In any case, you're filtering the DDOS out *after* you've managed to set up the TCP/TLS/HTTP connection. That seems to be a rather late/expensive point to do so!
This will be great when both my partner and i use the same browser but different ... Different what exactly? Ah.. accounts!

"This allows them to detect the actual device"... As if that isn't a solved space already?
Vaul: A draggable drawer component for React
too bad we're headed back to feudalism and based on the above comments mass famine too.
Ouch, this is going to get a lot worse isn't it?
So don't build them that way. You could do worse than ignoring every piece of advice that is considered best practice in mainstream modern Web development.
That sounds amusing ... albeit the lottery aspect makes me suspect shenanigans. Is anyone reading the contract to understand if it really is what it says it is?

One of those issues is of course that people will need to find someone who can read the contract for them, and hope they get it right.

Still, good example that is easy to get, seems like easy to code and work.
As someone who has dealt with a lot of upper management, I can say that they love articles like this coming from one of their infrastructure providers. It gives them a feel-good feeling, and probably avoids unnecessary emails to their support staff on whether they've done anything to mitigate the risk.
I can see where it might sound that way if you haven't watched the testimony.

"I provided this classified information under oath to the inspector general" is not an avoidance tactic but a direction where to locate classified info.

"I'll tell you later" on the surface might sound like an avoidance tactic, but when he was asked when he could provide it the answer was "immediately after today's session." In other words, no stalling at all, he just preferred not getting arrested for sharing top-secret info publicly.
There is no physical evidence whatsoever. The only “evidence” is hearsay. Also, the members of the committee can lie without repercussions, so I don’t believe them. And the military lies to the public all the time.

Extraordinary claims require extraordinary evidence.
This is how society views us whether we like it or not. We're seen as evil, vile, perverts who prey on women and children. It's not true but that's what we're viewed as.
Not everything. Just the name and logo.
That still doesn't stop people from asking about log4j way over a year after the entire fiasco went down...
"isometric handgrip (IHG), isometric leg extension (ILE) and isometric wall squat (IWS) as IET subgroups. IET programmes commonly employ protocols of 4×2 min contractions, separated by 1–4 min rest intervals, performed three times a week. IHG"

It sounds like the three isometric exercises evaluated in these studies were wall sits, leg extensions, and handgrips.

Does anyone know how this study would go if these exercises were less medical intervention and more elite athlete? How would one even do a full body isometric workout?
1984 also wasn't about being watched at all times, it was about how the government had _the potential to_ watch its citizens at any time. And how the citizens changed their behaviors due to this. I mean the government doesn't watch you in the bathrooms, but they are scraping all internet info, have a lot of cameras, and are even flying planes in the sky to record data. People may not be watching those things, but they do exist. I think the big difference is that most citizens aren't aware of this level of invasion into their lives and they haven't really changed their behaviors because of it. That's probably the biggest difference between 1984.
I don't understand how a probabilistic holdbacks can be effective if you can requests for the attestation token multiple times. If the holdback percentage is 10%, the probability of getting no attestation for 10 calls in a row would be something like 0.1^10 = 1e-10. This seems trivial to implement and use to block users.

Granted, I don't fully understand how they intend to holdback, but even if they cache the results of the attestation such that 10 calls in a row fails to attest, they can't cache it infinitely. Website can employ traditional fingerprinting techniques/cookies in combination with attestation to build pretty foolproof systems to not serve the user based on attestation results.
The post states it. This is not a problem because Safari is not the leading web browser. Apple has very limited power over what they can do with it.
Users that use ad blockers and are served

- cost mostly marginal money
- continue to use your platform, potentially watch ads later
- their usage can be sold to anyone: where are they at a given time and what are they doing
- don't go to rival platforms
- tell their friends about the website
- etc
I'm excited about the ball bearings.
Under capitalism (or really any socio-economic system) we engage with services for reasons other than choice all the time. For example, if you're living in an area where just one or two banks exist, and both of them suddenly decide to force DRM because their cyber insurance company told them to, you can suddenly no longer access their sites on Linux. That's pretty fucked up.

The people who want to use DRM to solve their problems should just suck it up and find alternatives.
> They were all regular joes with uneventful military careers

Grusch was a GS15 NGA officer that was read into over 2000 special access programs and prepared/delivered the presidential daily briefing in 2021. He’s quite literally one of the most credentialed intelligence officers in the US.

Dave Fravor was second in command of the USS Nimitz and is recognized as one of the top fighter pilots to come out of Top Gun.
There's nothing stopping the civilians from reporting it publicly AFAIK. There's enough cameras in the sky that we'd have footage of a few. Especially from all the commercial fights with passengers.
(2020)

Anything new since?
I was surprised and skeptical, but he seems to be right.

I've opened a brand new Firefox instance and got "Your browser is not currently supported. Please use a recommended browser or learn more here." (linking to https://help.twitch.tv/s/article/supported-browsers?language...) on the login screen.

The login made a zero-payload POST to https://passport.twitch.tv/integrity and it responded with 400 and a JSON body {"error_code": 5025, "error_description": "integrity failed", "error": "Oops! We encountered an unexpected error. Please try again.", ...}.

It seems that this is not about GNU/Linux, though, as it happens at random (searches for `twitch "integrity failed"` produce results from all sort of platforms and browsers). Must be that some pointy haired boss had some important ideas about security.

I was able to log in from a Firefox on a different GNU/Linux system, so it's not like those are always blocked. I suspect there's some User-Agent whitelist or similar kind of nonsense (but looking at the console logs and bunch of WebGL errors it certainly tries to fingerprint the system), but I'm too lazy to investigate this any further.
One explanation for this is that another country just has better military technology than the United States. And the cover-up/conspiracy is that the US government knows this, but just made up something about aliens because they knew that Americans were stupid enough to believe it. It exploits a very glaring blind spot in a lot of Americans' minds (that there is no way we couldn't be #1).
Seven Automakers Unite to Create an EV Charging Network Across North America
That's not exclusive to that app. Being able to update the app without going through the App Store was one of the big selling points of React Native a few years back. Apps are not allowed to download native code, however.
The Play https://youtu.be/AfIi0uBMNBI
The flagged comments I'm aware of are either taking the thread into flamewar, and/or on generic tangents. Those are correct uses of flags. If there's something I've missed about this, I'm happy to take a look, but I'd need a specific link.

"Robust" can mean a lot of things. HN's intended purpose is curious conversation. If we allow the predictably-outraged type of thread here, it will quickly take over discussion of most stories. If that happens, it will quickly destroy the forum. This is not a small risk—it's the biggest one. It would be foolish not to take it seriously, and we work hard to prevent it.

Ironically, that sometimes leads to the perception that the forum is fine, so why not allow a few robust fires to burn here and there? The answer is that the forum is not fine. It's at constant risk of burning to a crisp [1], and our primary responsibility is to stave that off [2], to the extent that we can.

That said, if there's truly high-quality conversation going on in any of these flagged subthreads, I'd like to see it. My experience in general is that flamewar doesn't go along with high-quality conversation at all. It's extremely exciting, of course—but from an intellectual-curiosity point of view, inert and boring, as anything predictable is [3].

https://news.ycombinator.com/newsguidelines.html

[1] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[2] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

[3] https://hn.algolia.com/?dateRange=all&page=0&prefix=false&so...
Just like how Apple killed Tumblr for porn problems but gave Twitter a pass
This isn't because my observations very often offend, but because some people view them as creating a void which must be filled, as soon as possible, by an explanation.

spot on