skysight-inc/HackerNews huggingface dataset:
For that to work, the 1st wave ships would need to carry a power source capable of driving a pushing laser. This presents a number of significant challenges:

- the current plans for Breakthrough Starshot[0] are to send a centimeter-sized, ~1 gram mass spacecraft.

- even such a tiny spacecraft would require a 4x4-meter solar sail and 100 GW of laser power, because photons carry such small amounts of momentum

- a ground based nuclear power plant produces a couple GW of power. 100 GW of continuous laser power would require the entire output of 50+ nuclear power plants

- that amount of power is difficult enough on the ground, trying to put 50+ nuclear power plants worth of energy generation on a space craft would alone be a tremendous challenge

- assuming we could do that, it would weigh unfathomably more than a gram. Just the fuel alone in a ground based station is several tons; the infrastructure to turn that fuel into power is many thousands of tons more… times 50+. It would not be impossible for that amount of power generation to weigh a megaton.

- assuming it could be launched from earth or built in space, and pushed by solar sail, the solar sail needed for a ship weighing a megaton would be another level of challenge. If 16 square meters of sail are needed for every gram, then a megaton would require 16x10^12 square meters. That would be a manufactured object 4,000km on a side, or roughly the size of Russia.

- We haven’t accounted for the increased power needed to power this craft by sail from the ground. Momentum (let’s ignore relativity even though we are talking about reaching speeds where that starts to be important) is mass*velocity, so in order for our megaton-class spacecraft to be pushed with the same performance as a 1 gram spacecraft, we’d need to scale the momentum delivered by photons with the mass of the craft. That would require 10^12 (one trillion) times more laser photons, which would require one trillion times more energy to produce and 50+ trillion ground-based nuclear power plants.

- I think it’s safe to say that pushing a megaton-class starship with lasers and a solar sail is unfeasible. But wait, if we’ve managed to assemble and launch the craft, we don’t need the ground based lasers or the sail, we can just power the ship using all those power plants on board. [1]

- with a ship that large, we could take a city worth of people along for the ride, so is there still a use for the giant laser we’ve brought with us? Maybe interstellar package delivery?

[0] https://en.wikipedia.org/wiki/Breakthrough_Starshot
[1] https://en.wikipedia.org/wiki/Project_Daedalus
That would have to be a Win32 Console App made for Windows NT 3.1?
It's because they want us to eat slop while the real meat is then sold to the rich and shipped out of the country for export to nations where their income is worth more than ours.

Same goes for this new obsession with roach milk and bug eating. They want to turn the real thing into luxuries and exports while the working poor eat bugs and lab grown slop.

The claim about being good for the environment is a red herring used to get a certain segment of the population excited for it. Make no mistake, factory farming will continue to exist because the Uber rich will happily pay for it both domestic and abroad.
It's funny because `emacs -Q -nw` loads instantly on my very modest system and supports pretty much everything `nano` does immediately. You can move around with arrows, you can just start typing etc.

The one thing it's missing is telling you how to save and close the file etc... Makes me wonder if a nano-style help bar with super-simple key bindings would be a useful default bundle for Emacs.

`emacs -Q` seems to load even faster, somehow, and that's the full graphical version if you have a window system.
How to quit Vim and install Sublime Text?
Destroying, or changing? I've read these articles in the past, and the wording is careful. Or has this changed recently?
Anybody who spends even 10min actually thinking about this topic realizes that the idea that SpaceX subsudizes Falcon 9 launches to get price below cost is complete nonsense.

Its just a convieniant attack on SpaceX because they are private. It has no bases in reality.
I thought multiple studies found 'long covid' to be psycbological, not physical..
"Session" here is the word used for the duration in which an access token is valid. You may be talking about UX, but the submission is talking about access tokens.
The main place I see short session expirations is on banking and financial apps, which seems defensible to me for a couple of reasons:

1) They're used by a wide variety of people, including people who may not own a computer or mobile device, or who may not have a backup device to use when their personal device breaks. This group is probably shrinking—more and more people have smartphones and the remaining people who don't have smartphones are probably also the people without bank accounts—but arguably you want to cater to this group, since they may already be a bigger target for scams.

2) They're very appealing to opportunistic attackers.

3) They're used by people in stressful or unusual circumstances, e.g., when traveling, if they need to make a large emergency payment, or if they're afraid of being scammed.

4) Most sessions aren't very long anyway: checking a balance, seeing whether your paycheck came in, making a single transfer or payment, etc. There are definitely exceptions—15-minute timeouts are very annoying when doing taxes, for example—but it seems like the annoyance in these situations is potentially worth the security benefits.

That being said, I don't know if short session expiration is the best solution in 2023. As the article points out, major corporations like Google don't use short sessions, even though their services are used for a variety of sensitive things and they're huge targets. But as briHass pointed out in another comment, they also provide tools to see which sessions are open and use a variety of techniques to detect sessions being misused. I suspect that's the actual best solution if avoiding session stealing is that big of a concern.
Any actual privacy must be equally efficacious to lawful and unlawful users, as being able to discern between them inherently indicates leaked data.

I use Proton, and the metadata they do keep unencrypted would only be useful to LE/feds if some other source (ISP, IXP, OS, etc) has given up info, which you certainly can't blame Proton for.

The article is bad for trying to insinuate that responding to warrants indicates failed security, when the reality is that what you respond with is what matters, and in this case it appears to be metadata only.

Warrant canaries are useless in any jurisdiction that partners with foreign police and courts. At that point, you need an "unencrypted content sharing canary".
It's fair to argue that point. If you need something like that, then this aspect of OIDC etc. is not a hack. But really really few people take a look at the question of how to integrate an external identity provider and then decide that loosely coupled, eventually consistent is the right choice. Instead developers mostly just choose whatever seems sufficiently popular and build their system around it and only look somewhere else if the popular choice is visibly much worse at its job than the alternatives. ("visibly" with the knowledge about the topic at hand that is. Most people I've talked to just see OIDC flows as a given fact about how authentication has to work.)

From a practical perspective, there are lots of applications out there which are perfectly reachable from the outside and which use an OAuth2/OIDC library as a standard component where they could forward an update from the identity provider with a simple library call. And think about how much edge cases in front-end applications could eliminate, if you wouldn't have to be ready to get a new token at any moment, because the current one has just expired. [1]

In my opinion, pushing updates to clients should be the default of identity protocols which you only opt-out of, if you have special needs. And then hopefully documentation tells you very clearly to have very short token expirations.

[1] And yes, you technically still have to be prepared for that at any time, but you can push the trade-off of making that case less user friendly much further, if it occurs only seldom.
Author here. I've been running Windows since 3.0 and I copy my old tool folders with me whenever I change machines or upgrade the OS. This GZIP.EXE is the oldest EXE I have in my \ntbin tool folder that still works. The folder has 579 EXE files.
Teams on Linux is essentially abandonware. Just stick to the PWA with a Chromium-based browser and you'll notice it works a billion times better than however the "app" has ever done before
OTVDM will allow running 16-bit windows programs on modern 64-bit windows.
Why would I trust AI to accurately read my medical exams? Actually, why would I even send you my medical exams at all? There's no info about who runs it, no company name, no individual, nothing other than a twitter account and an email.
I could be wrong, but can't Common Lisp do this?
Withings Body Smart review: a flawed but thoughtful approach to weight
> Additionnally, the truck driver did not detect that the cruise car was failing to yeld.

It is amazing how much of driving involves understanding how other drivers will move. Which means, to an extent, predicting their state of mind and assuming that it is rational.

When a driver does not follow these assumptions (e.g. a drunk driver swerving. e.g. an vehicle failing to yield to a blatantly obvious fire truck), bad things will happen. And it is typically the fault of that unpredictable driver.

This is not the system that one would design from the ground up for automated vehicles to use. But if such vehicle are on the existing roads, it is the system that they must use.
How is this different than a big brand stealing a design and putting it on a Tshirt? The product in question is a video and it used art without permission.
Correct, it's a PE file.
It obviously shouldn't require floppy disks to run. Those disks are unreliable.

If it only requires floppy disks for system updates or something, that's arguably acceptable for a commercial aircraft in the maintenance hangar but not for a nuclear weapons system.
> Interestingly, I went into this article thinking that "guess culture" would mean something along the lines of guessing what others want or what the right thing to do is, executing it, and revising after the fact based on feedback. Essentially, "It's easier to ask forgiveness than it is to get permission." I guess you can call this "do" culture. However, the article talks about guess culture as something else.

Yeah, a more intuitive name would be "Just Ask" vs "Guess If You Can Ask" which emphasizes the difference: Someone from a Just Ask culture wouldn't understand having to guess if you can ask someone something.
I understood LNT is already considered to be too pessimistic at low dose. Would this mean it is in fact optimistic? And low dose radiation is actually quite bad?
I am just using GPT4-8k and breaking tasks up. When I tested with Claude 1 ( 2 wasn't out yet) you could feed it lots of context, but it didn't always seem like it paid attention to it all. It would go off the rails.

For example, if I put instructions first, then a lot of context, it would forget the task, so instead put a small explanation, then context, then question, but still it would seem to sometimes loose the plot.

For feedback on prose though, I found it Claude very strong. It's nice to be able to give it half of a book, in text format and have it guide you to important parts and summarize sections. Some things, like what are the themes of this work, what's surprising finding, don't work well with vector DBs.
> If an attacker steals a session cookie with XSS or session fixation, the attacker immediately gains access to a valid session and can keep performing requests to keep the session alive.

Objectively false? If they get the refresh token sure, but even that has an expiration and isn't refreshable in many common implementations.

If they only get the access token, then this is completely false; you can't refresh a session using only the access token.
People who talk about "toxins in the body" generally don't even know what "toxins in the body" means. It's like people talking about "chemicals" in food. Newsflash, literally all matter is chemicals. Food is 100% chemicals.

"But they mean artificial chemicals!"

Sure. Except people don't know which ones are "artificial", nor do they know whether these artificial chemicals are more dangerous than their natural counterparts.

They're just full of shit. They don't have a clue, they're just parroting shit they read on Instagram or whatever.

You want to prove "chemicals" are bad? Pick one specific chemical, do some studies and conclusively prove it's harmful, then say "chemical x is bad". "Chemicals are bad" is just incorrect.

Almost none of this shit is based on reality. For the things we know are bad like lead, asbestos, PFAS etc we have solid science and we act on that knowledge by writing legislation to prevent unsafe use.

Popular science is like 99% total bullshit. That's why people complain that "scientists change their mind every year". Because the scientists just published some results showing a weak link between chocolate and cancer, then a bunch of bullshit articles popped up saying chocolate cures cancer and then people wonder why they still have cancer after they ate chocolate.
It's better to let users do stupid things so they learn from their mistakes and not do them ever again. And probably tell their story to their friends and family so they, too, don't do this. Putting all these excessive guards in place kinda encourages ignorance and tech illiteracy.
am I still the only one who thinks storing all of your secrets in plain text while using a package manager that allows arbitrary code execution is a terrible idea?
I'll be seeing him live next month at the Hollywood Bowl and I'm extremely excited. Can't wait to participate in the audience choir at the end of the show.
The readme says it’s offline and doesn’t mention any LLMs

Does it not use any LLMs, or does it have its own, or how how does it work?

Thank you
Make Hollywood Great Again
I'd imagine it's more sustainable than milk, and with far less suffering.
You may be in luck, because the default keybinding for Save in micro is indeed Ctrl-S. I installed it and aliased it over Nano for a bit on one of the servers I SSH into constantly, just to test it out.
The whole purpose of TS is better JS.
Some Lastpass admin page redirects me no joke like 10 times.
I am from the northern US (Protestant Scandinavian/German) and my wife is from the southern US (Protestant English/German) [1]. In the first several years of our relationship, we had several big disputes about how to treat each other, and how to treat guests. After a while we realized that she had been brought up to feel extreme insecurity over responding to the needs of guests, and I had been brought up to be blithely ignorant to the needs of guests.

Over the years I definitely insulted several southern guests by mostly ignoring them, and she definitely projected insult onto several northern guests by assuming that they were secretly judging us for not being better hosts. We've since realized that southerners tend to prefer "guess" culture and northerners tend to prefer "ask" culture, to use the terminology from the article. There are certainly many exceptions, but this generalization has taught her to chill out a little over hosting duties, and taught me to pick up some slack when taking care of guests.

We still both greatly prefer our native cultures. I don't like being fawned over or offered things I don't want, and she is extremely recalcitrant when it comes to asking for anything.

[1] I mention the distant ancestral backgrounds because it's amusing to me how well I get along with northern Europeans who are plainly spoken and "rude" by US standards, and how a lot of proper hosting culture from the UK reminds me of how her family operates. She finds Scandinavians and Dutch incredibly rude, whereas I find the English hilariously polite, even to their own detriment.
That's the kicker. We've had a solution for ages.

I've spent a good decade trying to poke holes into "why 'acthually' public transportation can't work in the US", and I've come out of it even more confused. The US has all the hallmarks of country that's well suited for public transit. Urban housing shortages, open space, flat land, pockets of density, overdue infrastructure overhaul, you name it. It is really THAT simple. There's so much low hanging to pick off and best-of-all, public transit spending goes back into the pockets of

That being said, you can't convince a person to like anything if they're reasoning from a place of comfort. I'm a broken record, but hearing an American praise European cities while simultaneously doing everything in their power to stop their city from ever becoming that, is the sort of hypocrisy that cannot be solved through convincing, logic or education.

Lastly, public transit also needs a strong police force, and there is some much needed 'cognitive dissonance' that YIMBYs need to figure out if they're going to convince those holding out.

_________

Prevention is better than a cure. Driverless electric cars are here to save the automobile industry at the expense of the environment, climate and public safety.
It’s not laughable if it’s exacerbating the problem
Stolen hard drive = Stolen laptop/phone/tablet
Unlikely, everything gets sent to OpenAI which isn't compliant unless you get an enterprise agreement with them.
This looks more like a high end cyber deck than a usable laptop.

I LIKE IT.
Interesting, as aspirin is an anti-inflammatory - there's also a super small scale trial that happened in Madrid where a short course of 30mg of predisone had positive impact on those suffering from long-covid.
I watched a very well-written piece of software written by a group of brilliant people turn into a pile of bugs by basically the same brilliant people and all this was caused by mismanagement. Many bad decisions by many powerful were made, but a lot of credit needs to be given to one particular poisonous manager who actually managed to corrupt the entire organization into the mess that it is today. He even managed to split the developers into two groups of "us" vs "them". Things got so bad a whole new entire organization was formed to write new software to replace the old one. Recently this poisonous manager was moved to be part of the team developing the new thing.
> You haven't actually addressed either of the author's points, though. Namely:
1: A short compromised session is still a compromised session. The duration usually does not prevent the attacker from achieving their goal.

The worst hack at a company I worked for was caused because an old server that was supposed to be decommissioned was left plugged in and connected to the network… a good time later, a hacker exploited a vulnerability in an unpatched package on the machine and got in (since the server was supposed to be decommissioned it was not patched when the rest of the machines were patched).

The hacker used old credentials on the machine to gain access to other machines in our network. If we had been rotating credentials more often, this would not have happened.

We had systems in place to patch and maintain our machines, but once the machine got lost in our inventory management system, it was forgotten about. It wasn’t monitored anymore, and other protections lapsed.

This category of exploit is prevented by credential rotation, because this type of exploit is only possible if a system is neglected.
One thing my wife and I noticed during COVID (I live in suburban NJ):

6pm-6:30pm seems to be a prime time for people in general and families specifically to go for a walk. If you are outside with kids playing on the front lawn, this leads to a lot of organic conversation since no one is in a rush.

If you happen to be preparing and eating dinner inside during this time (like we used to), you can miss out on a lot of opportunities to get to know your neighbors (assuming they are friendly).
I don't judge their clothes, I judge this attempt at computer design. If Lange & Söhne collaborated with Honda on a set of fake spoilers and spiky lug nuts for Accord, I would similarly judge the result as a separate product.
To me they look all at least 20 years older in that picture. Let’s say i would meet them in the wild today and they told me their age i would surely think they’re lying about their age.
I completely agree with you. As noted by others, this is not a question of managing gender equality in competition: chess has no inherent gender advantage. Though there are significant structural biases for men in competition which is why the ratio of women to men in competition is so low.

This is entirely about political, religious, and social pressure attempting to limit social change that they strongly disagree with.
Probably better to ask ourselves more holistically what good urban design looks like.

There are very pleasant and extremely livable high density cities (or areas within them) as well as many example of lower density urban and suburban environments that are awful.

Also, buildings are not really getting “ever denser and taller” except in the most extreme cases. In London, for example we’re usually talking about taking low density low quality housing or currently unused or underused ex-industrial land and turning it into higher density housing, offices, and retail. But this is not so high density that it icomes close to pushing the boundaries of what’s already known to be workable, especially when paired (as it usually is in London at least) with public space, local amenities, and transport upgrades.
I once made a program (Intended for Games only, doesn't support standard windows controls) that allows you to stretch an otherwise fixed-size window. Uses D3D9 and Pixel Shaders to draw the upscaled window.

https://github.com/Dwedit/GameStretcher
What's security and what's security theater?

Is XSS a fact of life that needs to be protected against or a fundamental flaw of the protocols we currently use that could be fixed at the root if it didn't make web development more expensive/inconvenient?
>that usually included sick days, and with high levels of pressure NOT to take any of them

These are both also untrue based on my experience.
It's as if, it's a product made by a giant corporation with over a dozen different teams of skilled people, with different managers and different visons on how their own team's work should impact the final product for their own career advancement purposes.
If hosts don't use the feature on AirBnB, why would they use this 3rd party website?