skysight-inc/HackerNews huggingface dataset:
I loved the game, but I can see where people struggle. You cannot laser-focus on the objective. Just get in character, you are on a mysterious ship, it's completely abandoned and somehow returned to harbor still. You are just trying to get a clue what the heck is even going on here, why would you care about filling in a puzzle book?

Just enjoy the first part cinematically. Explore the ship and unlock the scenes. Absorb the atmosphere from the scenes, and enjoy the music. Try to figure out the disjointed narrative, and don't focus on your puzzle book. (One of the flaws is that the forced waiting sequence should IMO lock you out of accessing the puzzle book completely. I often forgot, and got annoyed because I could not enter the cause of death before the page got unlocked after the scene...) You will not be able to solve a lot in the first pass anyways. The game throws you some freebies, yes, but that's just to let you get used to handling the book.

For context, once I had unlocked all scenes, I had not even one quarter of the book solved, and despite what I recommend in the first paragraphs, it was not for lack of trying. This is when you notice that you have everything you need, and a sort of panic sets in. You realize that it will not get easier than this. This intrigued me a lot, and this was when the real puzzle game starts. Now you revisit all the scenes analyzing every nook and cranny of the dioramas like some nautical Sherlock Holmes. But it's never stupid "hunt the pixel" like one would assume from that description, no. I have never seen the attention for detail in any game before, and the dev really thought of everything.

If you ever find yourself thinking "Oh wow, I can deduce something here from the position of that piece of scenery, but there is no way this was intended", then the answer is always "Oh yes, it totally was". Then you enter the suspicion into the book, and suddenly the game validates you by copying your notes into print with that cheerful music jingle. After a while the screen turning black and the first notes starting will give you a dopamine rush already.

The game captures perfectly what for example escape rooms or detective stories are about. The only real downside of the game is that the replay value is 0 by its very concept. I envy you for still being able to play it blind.
> It looks very similar to the Steam Deck UI

It is the Steam Deck UI. See the repo description on: https://github.com/ChimeraOS/chimeraos
DevOps still must draw the line somewhere. DevOps people typically don't physically plug cables into switches, for instance. With the ever-growing complexity of infra, I see that line having to shift more and more, with either PaaS products or platform engineering teams filling the space by providing something like Kubernetes as a service to the DevOps folks.
I love this comment. Maybe we wouldn't be in such a quagmire if previous generations had paid a little more attention to current events.
Ha! As someone who has been to Naples a few times, I fully support the 'walking hostile' sentiment! The amount of wild traffic through the narrow streets and having to constantly look over your shoulder makes it a horrendous walking experience compared to other European cities.
China wants to limit facial recognition use, with exceptions
> Any chance of signed builds returning? It's bizarre to me that we would move _away_ from signed builds.

PyPI never supported "signed builds" in the first place. What it had was vestigial support for attaching PGP signatures to distributions; without a key or identity distribution mechanism, these signatures were virtually useless (and all public evidence indicates that they were, consequently, virtually unused).

Note that attached signatures alone don't prevent dishonesty on PyPI's part: without identity pinning, a dishonest PyPI could replace a correctly signed distribution Foo with a correctly signed (and easily exploitable) distribution Bar during a user's retrieval. Every signature needs to be bound to both the distribution's content and its distribution name by some stable discoverable identity.
I'm referring to your comment that he quoted - https://news.ycombinator.com/item?id=37050359

Maybe you're misremembering - but you wrote it :)
From the abstract, "We also find evidence of a slow acceleration in the Martian rotation rate, which could be the result of a long-term trend either in the internal dynamics of Mars or in its atmosphere and ice caps."
I am going to give my cynical self a pat in the back. Back in March 2022 I was calling out Gemini as a fad that had no reason to exist. https://news.ycombinator.com/item?id=30802376
Worth to note that GCP has this patched (https://cloud.google.com/support/bulletins#gcp-2023-024)
Good question: we are not a merchant of record, and Easyful doesn’t even process transactions. We’re just a fulfillment layer that plugs into Stripe payment links.
Why not just show your subscription feed instead?
It would be nice, once the investigation is concluded, if you guys posted the findings on the cloudflare blog. Otherwise it would just feel like a "your call is very important to us, please hold" kind of situation.
Not depressed but gives me a strange queasy feeling to look at my town from a time when there was no life on land.. Kinda lonely by proxy..
Err... https://idx.google.com/ doesn't even work. Not sure what to think of this.

Oh, it's idx.dev.
It really depends on the decision! For example, the mass of pages the Supreme Court has spent on ERISA could possibly count as a method of state-sponsored torture.

I totally understand being over the whole deal, but if you actually care about the issue the PDF itself is more coherent and readable than almost all the pre- and post- decision commentary which is mostly predictable, information-free nonsense.
Custom-fitted earplugs are AMAZING, especially for sleeping. I had a pair of SleepSound earplugs made for me 4-ish years back and have worn them every night since.

They still fit perfectly! Also, I give them a gentle wash with soap and water every morning (almost like I'm washing my hands normally, but with the earplugs cupped between them—takes 30 seconds) and leave them out to dry, so they haven't gotten nasty from a thousand nights lodged in my ears.
if it’s something only you can attack then there is no plausible deniability if you become accused as the code contributor
Got this from the "better source" link. So its 75F in a cave under the vent I guess

>Using an underwater robot, the science team overturned chunks of volcanic crust, discovering cave systems teeming with worms, snails, and chemosynthetic bacteria living in 75 degrees Fahrenheit (25 degrees Celsius) water.
My biggest issue with Google Maps is that when it decides it wants to reroute me, it is absurdly aggressive. "Here is a faster route, if you don't take your eyes off the highway, turn on your phone screen, and click this button in the next 5 seconds you will be rerouted". Half the time it reroutes me off a highway to take a series of turns in a location I am unfamiliar, or it takes me onto a highway that I dread driving on (I4 here in Central FL), or it takes me to a toll road that I guess it doesn't realize is a toll road. Even if you do hit "Don't reroute for a potential 2 minute time savings", it will just try again in 2 more minutes.

Like dude, I picked the route when I started this thing, go fuck yourself. Clicking buttons on touchscreens while hurling a thousand pounds of steel around at 80 miles an hour is what kills people.

And another thing since I'm ranting, if I have do-not-disturb turned on, don't fucking pause my Spotify and play a phone call ringtone through my speakers. If the person calling me is having an emergency they should have called 911, it can wait.
Don't give a shoot about life, it's humans I'm interested in.
Definitely check them out - they're great. Easyful is just a fulfillment layer that plugs into Stripe payment links for emailing customers your content when they buy something.
It's been malicious for two and a half years now:

https://news.ycombinator.com/item?id=25846504

https://news.ycombinator.com/item?id=25622015
Per the paper, this looks like an attack against speculated instructions that modify the store forward buffer. The details aren't super clear, but that seems extremely unlikely to survive a context switch. In practice this is probably only an attack against hyperthread code running simultaneously on the same CPU, which I'd expect cloud hosts to have eliminated long ago.
they block and/or slowdown vast swaths of the internet

if that's not an "attack", I don't know what is
Wow! That's definitely me, I forgot I made that post! I was actually studying biology in college at the time. It's a layman theory, I am not a biologist, but wish a real scientist could expound on the idea.
Reminds me of attacks people were running on 'brainwallets' a while back - i.e. wallets whose initial key material was just a passphrase you'd remember. The idea was that you could keep the passphrase stored nowhere and not have to worry about it being stolen by... well, any of the 10,000 things out there looking for cryptocurrency keys. Of course, there is no way in hell you can actually make the human brain store enough entropy perfectly, and once people realized that these wallets were crackable, they all got drained pretty quick.

Owning Bitcoin is like paying into an involuntary bug bounty program. Every time someone finds a bug, your life savings get wiped out.
Mine arrived a couple weeks ago--two years after I initially ordered it. Their ordering transparency really does leave a lot to be desired.
> Getting accurate shipment numbers (without paying for the reports) is hard

And even those reports are likely to involve a lot of guesswork. There are probably hundreds of different 8051-class IP cores, and a nontrivial number of them are royalty-free -- even the designers of those cores may not know how many chips they've been used in.

Many 8051 cores aren't even fully acknowledged by the IC manufacturer -- it's not uncommon for one to be described as vaguely as an "8-bit RISC microprocessor", especially when it's being used in an application where the firmware is embedded in the part (like a USB hub controller or a battery charge controller).
Note: "Libbitcoin" here is a company name, and not a name of the core bitcoin library.

Only their products and whoever used them as a 3rd party is affected.
What's up with the design? It's really nice, but also very similar to Gumroad's visual language. Not really criticism, just curious about the idea behind it.
GP is explicitly not interested in giving marketing advice. They're objecting to being tricked and manipulated.
Does no one else find it difficult to read pure white on black sites? Ironic when the post is about a dark mode app I know.

I'm all for dark mode, but give me an option to switch back if it's a wall of pure white text please!
Excessive regulation doesn’t help if your law doesn’t have teeth. Plenty on laws on the books in the US, but I don’t see enough people prosecuted for 2008.

And then the incentives are all wrong if you bail your buddies out anyway. Play with fire and the fed will bail you out is terrible.
Do you think this needs more electricity than the whole recaptcha cloud? I seriously doubt it. My laptop would waste something like 0.006 watt hours per proof (0.5 seconds at 40 watt). Also, per the default setting, the proof complexity is lowered to almost zero when the server is at normal load.
Similar take was shared recently, except it put more emphasis on marketing in the last 10%:

Stopping at 90% [https://news.ycombinator.com/item?id=36967594]
Yes this is because you’re not logged in. Musk did this to avoid tweets being scraped
...no, I've changed my recommendations for Cloudflare because it may prevent ordinary users from using a site, and insufficient information is provided for troubleshooting purposes, and those users are likely not going to go to extraordinary lengths to report the problem. Even if they do report it, the site won't be able to troubleshoot it either. So, if you don't need it, you're probably better off without it.
Porsche 951 KLR Info
I don't recall if I've encountered that specific problem in tampermonkey (or if I did and it didn't cause a problem worth remembering), but you can run things in the extension's context as well to bypass certain restrictions, as well as use special extension provided functions (GM_* from the greasemoney standard) that allow for additional actions.

I do recall intercepting requests when I used a chrome extension to change CSP values though and not needing to when doing something similar later in tampermonkey, but it may not have been quite the same issue as you're describing, so I can't definitively say whether I had a problem with it or not.
Was about to leave a comment saying the exact same thing. I don't understand how someone makes it this far in a project, and just completely drops the ball when showing the work off to the world. You don't even need to naturally be good at marketing - just literally copy what any somewhat-known brand / project does.
It reminds me of these movies when the AI starts becoming crazy over time and initially goes into a senseless monologue obsessing about some random subject.
>Also, nobody is taking anything away. The market is so oversaturated they would simply switch to a different product line.

So what you're saying is that even if the product the original commenter mentioned wasn't made, waste would still get made. So what was the point?
Menus replaced by QR codes. No wifi and poor mobile internet.
I have this watch, and got it to tinker with since it had some fun sensors, mic, and speaker.

Haven't turned it on in a while, but the battery life was definitely measured in minutes. It will not last anywhere close to a full day, even with a bunch of optimizations and certain things turned off. Even with the display off, ESP32s drain tiny batteries.

It's only practical for tinkering, and an M5Stack is definitely a better choice for that.

EDIT: Checked my notes. I was able to get it past the 24 hour mark with some work.

This repo has some helpful info: https://github.com/Xinyuan-LilyGO/TTGO_TWatch_Library/blob/m...
Theres a dead comment by @dontmobile that I think is worth it:

The industriousness of the Chinese can't be replaced. Mexico will never be as good as china in terms of speed, volume and capability. It will overall be an inferior partner, but because of this, it will never be a threat either.

This has some truth. People should have a look at the story of 3DFX [1] : basically they acquired a manufacturer in Mexico who couldn't deliver enough quality.

I love my country , but it is a fact that China has invested REALLY heavily in technology education. Mexico has about 30 years of catchup, in addition to solving our narco, corruption and political problems.

[1]https://level2.vc/a-short-story-of-3dfx/
Yes, I initially thought that the OP was someone resubmitting that post, in fact
Why is it a mistake?
Only up to 11th gen... it didn't seem like this could have been disclosed to Intel soon enough for them to have fixed it for 12th gen, so had they just happened to fix it while fixing something else, or what?

Decided to look in the paper and "Intel states that newer CPUs such as Alder Lake, Raptor Lake, and Sapphire Rapids are unaffected, although not a security consideration and seems just a side effect of a significantly modified architecture." So basically they just randomly fixed it, or at least made this particular exploit nonworkable.
To verify, this is something anyone can attack, as was proven by our brute force lookup service: https://lookup.milksad.info.
If only I had an application that shipped with my system that did that already. One can dream I guess.
"I’m as mad as hell, and I’m not going to take this any more!"
- Network https://www.youtube.com/watch?v=ZwMVMbmQBug
The missiles at question in the Cuban missile crisis were nuclear. That's not a reasonable comparison to the non-nuclear confrontation in Ukraine.
Long-standing entitlement is still entitlement. Expensive entitlement is still entitlement.
> Why should San Francisco be at the bleeding edge and what will these companies give it in return?

Other than lots of high-paying jobs, tax revenues, and transit options? Other than the pedestrian that dies basically every week to cars, or the severe injury every 14 hours due to cars?

San Francisco is owed nothing. It's a city government; it really should not be in the business of twisting companies arms to extract concessions for imagined slights.

It can pass fair, objective laws in good faith. It has historically been horrible at doing that.
https://docs.aws.amazon.com/whitepapers/latest/security-desi....
Then you'd just give visitors of your websites no recourse and no information whatsoever on how to fix the problem. The benefit of client-side CAPTCHA is that humans at least can pass it and fix the problem even if something they don't control (such as their IP address having bad reputation due to shitty ISP) is causing problems.

As a website operator it's easy to look at the spam that is getting through and be happy that's it's zero. But do you get any idea how many actual humans that you have incorrectly rejected? You don't have that data and it's really easy to screw up there.

Of course if your website is small nobody cares. If you are bigger like Stripe you simply get bad publicity on HN. People on HN love to hate on mysterious bans and blocks just because they do something slightly unusual and your backend-only analysis flags them as suspicious.

Abuse fighting is hard.
This head-in-sand attitude is not a good thing either. It just furthers the rampant individualism that plagues all levels of society as everyone focuses on themselves only. They are "the main character" and why should they care what's going on with anyone else near or far? The effects of that selfishness are detrimental whenever anything collective is required from the pandemic to just helping each other out in a local community.
Did you also look at the false positives, e.g., how many non-spam content was filtered by Akismet?
Education is incredibly strongly correlated with not voting republican.
No, i was giving a hint that parent was fearmongering, which i consider to be some bad thing. So i paralleled it with the fearmongering of the AfD because i think everyone agrees that this is bad.

And you backed them up with even more fearmongering. Why is a self-proclaimed antifascist using fascist methods? "Its justified when *I* do it" my ass. The AfD is problem enough, don't add to it. Bring your points across without fearmongering against groups of people.
> Be nice and be kind.

This reminded me of "Always try to be nice; never fail to be kind." Actually a very good advice (and not all advice from that, well, person is good). I mean: sometimes you can't/shouldn't be nice, but it seems that kindness is universally good (or at least situations when it is not recommended to be kind are less frequent).
RBAC is now enabled by default. But I wonder how many of these clusters that are exploitable are Openshift for example. Openshift had secure by default settings from as long as I can remember. Non-root pods as default, api-server and even metric collection ports are protected by authentication.

Openshift also had much strict RBAC settings from very beginning(like even in Openshift 3.x days, when k8s had no RBAC by default and you had to opt-in).
There’s nothing surreal about this.

It’s an iterative, semi-deterministic process. It’s simply a place where context and generation lead to weird outputs.

You can get similar outputs by asking OpenAi to repeat a number 100 times. It will eventually get into some weird, low probability paths and generate non-sense output.
Clearly our terraforming reptilian invaders have advanced volcanic eruption technology.
What does your banking experience look like if losing online banking is a minor inconvenience to you?

For me it would be as if my bank ceased to exist.
Show HN: EEG BCI and wearable tech for AI-driven insights, for focus and anxiety
This is a common but unfortunately very narrow perspective. Frequent lateral moves can inch you upwards but asymptotically to a limit.

If project manager's in OP's area make $90K, no amount of job hopping is going to making him a $350K earner. Agree all else equal, better earn $95K than 90K but the better bet is to break out of that range.

Just lateral moves won't get you there. You need a different strategy.
Stop wasting time writing commit messages
I (and AI) made a simple bash script which will write your commit message for you using a diff of your staged changes. Stop wasting precious seconds of brain energy.

You do need to use your own OpenAI API key for the script but it should otherwise work out of the box.
I already own it on Steam but I pulled the trigger on the iOS version, if not only to support Lucas Pope.

I still haven't played it, but I played through Revenge of the Obra Dinn a few years ago and read a lot of his blog posts from the development of the game, and I think the guy's an absolute genius.
Somewhat off-topic but why oh why do nearly all app developers who have things on both Android as well as iOS insist on using an iPhone to show their app and also insist on saying the app is available 'on iOS and Android' instead of ordering these alphabetically? Does Apple give some incentive to do so or some punishment if it is done the other way around? This is a free app on both Android as well as iOS, it targets those who know what OSM is and as such feels like more of a fit for those running AOSP-derived distributions than closed-source walled-garden iOS yet still they advertise Apple-first. I realise that Apple is bigger than Android in the USA but the world is so much bigger than the USA and Android is so much bigger than Apple in most other locations. Android devices also offer more opportunities to show off the product with their bigger screens and less prominent or absent notches, so much so that seeing the Android version next to the iOS one - they show one Android device on the bottom of the screen, hidden behind an iPhone - makes the iOS version seem rather cramped and cluttered.

I can understand this when they're specifically advertising to the paying iOS crowd but it just seems out of place elsewhere.
Android 14 introduces cellular connectivity security features
> Of course, there is no way in hell you can actually make the human brain store enough entropy perfectly

Sure there is. Have horse batteries taught us nothing?

https://xkcd.com/936/

Don't confuse key length with entropy. A properly-scaled PBKDF remains secure with as little as 48 bits or so. Needless to say, though, a 32 bit time value is hardly a properly designed key derivation input.
Do you have a reference for large numbers of brain wallets being drained? I believe you are repeating a myth/FUD, but I might be wrong.
> feels differently when they turn 35

I’m actually not salty about the taxes I pay (Ontario, Canada) I’m salty that I seem to get sweet FA for them compared to similar rates in Western European countries.

Seems like a problem with governance, not taxes.
The Lunar Module didn’t have an air lock. They just depressurised and opened the hatch.
Interesting, I didn't even see this the other day. Guess it's a common sentiment :)
Incredible just how much of the USA has insomnia - do you have any plans to go global or raise awareness of the problem itself?
I was more reflecting on newspapers not being mentioned at all as a news source. ABC World News Tonight, This Week, and Frontline are all TV sources, and Time Magazine is a pretty different beast. Back in the day newspapers and radio were pretty significant news sources for people (and radio still is).

I don't know if I'd call newspapers long form, as they certainly have lots of short articles, but I'd say they regularly have "longer form" than Frontline.