skysight-inc/HackerNews huggingface dataset:
> Soviet Union has collapsed while having whole lot more economic power and raw output of just about every industry, and was much more up to date technologically, but it deprived people of their basic instinct: to save and invest money and grow rich.

The Soviet Union pissed half of its economy away into its military, and the other half into its particular brand of waste, inefficiency, and corruption. It had a shortage of housing, basic consumer goods, and appliances - a shortage of material wealth, which became untenable by the time the fourth post-war decade rolled around, and everyone started wondering why the country has 12,000 nuclear warheads, but is still so goddamn poor.

If material wealth weren't the problem, or if Gorbachev didn't decide to stop imprisoning people for complaining about it, it would still be around today.

The world's three meals away from anarchy, if there were serious material shortages in the US today, nobody would give a crap about what monetary policy it follows, or whether or not you can save. King Bread is a ruler you swear fealty to, compared to him, King Dollar is something that comfortable philosophers build elaborate arguments for and temples to.
I treat "how are you" as an opening for a quick update if there's something to say (e.g. "it was Billie's first day of school today"), or a chance to set up a deeper discussion later (e.g. "oh man, long story, let's catch up later").
Even so, a lot of those corporate web applications rely on .net frameworks for integrating with shared point, ad, and many other established enterprises services and applications so they’re still stuck to windows. An example, all my partners medical software is through a browser but requires multiple system frameworks to function. Also they’re all using Remote Desktop to Amazon workspaces that are running windows.
I agree with the author but I would add "... but long session expirarion harms security".

In the real world, if an infostealer is stealing your session cookies, it doesn't have to be a one time thing,it can send your cookies back on an interval.

But speaking of, ssh private keys and user auth certs having an overly long lifetime is as much of an issue. SSH is the worst offender but for the unaware, you can enroll a cert for a windows account and even if the password is rotated regularly (like your super secure hashicorp/cyberark/tychotic rotated service account) that one cert can be used to get kerberos tickets and login/auth just fine, the cert lifetime is usually months if not years. Smarter folks use a CA with SSH but the thing with CAs is you must use ocsp responder for short lived certs because a CRL isn't always feasible, maintaining ocsp for this type of frequent use at scale is no simple matter either.

Back to web sessions though, in the cloud and on azuread/o365 stuff (like onedrive or teams), the session token does get renewed every few hours but without any user interaction because the device is trusted. So all a threat actor needs is one sesssion/token and the ability to proxy traffic through the victim host. Matter of fact, my secret yet controversial opinion is that SSO should never be implemented without 2FA period. No exceptions! The cred you manage centrally gets also pwned centrally. A lot of crap like device auth and conditional access policies make SSO very dangerous, if I had a company I would mandate yubikeys and password managers with app specific creds by default and SSO with yubikey where possible. With 1 day expiration as a default.
How would one get such a guarantee, surely it's not just the availability check by address because I wouldn't expect that to be binding.
I'm sorry but what are you rambling about?

Barcelona for example is flooded with tourists and "nomads" and save for basically banning short term rentals and eradicating cancerous Airbnb there is not that much that can be done...
In my opinion, people focus too much on vague science they don't understand. All we have as far as I know, are a few fairly weak studies showing a weak correlation between ultra-processed foods consumption and certain diseases like colon cancer.

They look at multiple diseases which drastically increases the odds of false positives, they use a broad definition of ultra processed food, they base their study on people's own answers and their end result only shows a marginal increase in certain diseases like for the control group they observe a tiny effect like a 20% increase in colon cancer for the processed food consumers.

This means if 5/1000 people in the control group get this disease, it's 6/1000 for processed food consumers. It's basically nothing. It is highly likely to be caused by random variance.

This type of research is not mature enough to base life decisions on. It is a hint that there might be something worth looking into but that's all there is to it.

Most people don't know nearly enough to have any sort of informed opinion on this topic. We as a society don't know whether processed food is bad, nor how bad it might be, we just think it might be so it's frustrating when people cite shitty popsci articles as if they're facts.

The one thing we can say for sure is that we haven't observed any significant effect in the studies we have done.

For all intents and purposes, eating processed food is as far as we know completely safe. Certainly much safer than consuming alcohol.
you had me
Cosplay cyberdeck junk for teenagers who want to think they're Zero Cool.

People with actual design sensibilities buy Apple.
I can speculate one reason Airbnb hasn't/refuses to solve this issue is similar to the reason YouTube got rid of the dislike button. It has the potential to decrease views, and in this case, decrease bookings if things are not good enough.
I've been meaning to build smth like this for a while. Reach out at [username] @pm.me!
I'm honestly a bit confused by this statement, as "React env variables" can mean various things, depending on your setup.

Backend and frontend can be separate runtimes... The backend could be an API-only-server and an OS process with all permissions that come with it (reading env vars during execution as it pleases). The frontend, eg. a React SPA, could just be a bunch of built HTML/CSS/JS-files (type-checked, bundled, minified, etc.), served through a static file server (separate backend, nginx?) and interpreted through a browser engine on the client.

Are you asking for nginx to parse the served HTML/CSS/JS-files and replace unknown placeholders with env var values? If so you are prob asking for a SSR framework[0], meaning a backend that treats a React project similar to template files, and is able to inject env vars?

[0]: Next.js - https://nextjs.org/docs/app/building-your-application/config...
Nitter hasn't been working for me since a few days ago. Is it just me or did X break it?
There will eventually be a holy war in the comments about how plant based will save us if only we get rid of animals and just mono-crop the world continuing to destroy the soil and biodiversity of the planet in the name of more calories.

There are alternatives that are shown to both provide enough calories, sequester more carbon than created, and steward land to mimic the natures natural cycles.

https://whiteoakpastures.com/pages/environmental-sustainabil...
https://www.goodreads.com/book/show/50249804-sacred-cow

There's so much more in play than calories when it comes to our relationship to food and the natural world.
This seems shortsighted. There are dozens of reasons you may want to get to know your neighbors: help each other out, become friends, watch a package, babysit, petsit, and so forth. Sure, nothing may happen from an interaction, but it seems one of the unique aspects of living in an apartment complex is that you can easily know your neighbors.

I live in a large neighborhood of single-family homes and know many of my neighbors, most of which have become good, trusted friends.
They way I like to handle session tokens that seems like a good compromise between security and user friendliness: Automatically renew the token as long as the user is actively using the website. I usually use a 12 hour token and renew if it's 8 hours old or more. The renewal requires the use a second token stored locally in the browser so even if you somehow sniff the token off the wire, you still can't renew it without control of the user's browser.

And frankly if they have control of the user's browser, they could probably install a key logger anyway.

That way, if someone is constantly using the site, they would never notice a logout, but otherwise they might have to login once a day.
“Open” “AI” Isn't
yeah I don't like environment variables because it's all stringly typed and the lack of a thing you deserialize the config file into means that practically speaking, you can read the values from anywhere in a program; figuring out what's permittable in environment variables is very often a disorganized mess. .env files take all of the messiness of environment variables and then ... put them into a file, which is typically the thing that people who are using environment variables are trying to avoid, so ... I dunno, just use a configuration file imho, .env files are the worst of both worlds.
Read my above replies. Product gets secured by defense in depth on the enterprise side edit - plus say a WAF and being disciplined about public endpoints and dialing into how users Authnz.

Unless you have the unicorn dev who’s doing appsec also focusing largely on appsec early on is a losing battle politically, will get your 1x sec eng at the startup - who also has to do a ton of other stuff for the startup - to quit for a better job in 12 months, and so on.

Defense in depth and threat modeling needs to rule a security program for a startup and doing MSVP as your guideline would miss that nuance.
The surprised reactions from airbnb taking up housing stock are from people who don’t piece together what you describe. Basically if the airbnb is taking needed housing stock, why not just zone for more housing? Or regulated hotels that these days are able to compete with airbnb on cost once again? That’s never mentioned though, people just stick fingers in their ears and repeat “screw airnbnb” without thinking of penciling this sort of stuff out to its logical conclusions.
> the specific guarantee

Ah, so it was in writing and backed up by an escrow account? :-D
https://en.wikipedia.org/wiki/Betteridge%27s_law_of_headline....
So much so that even only linux, the most stable API arguably is win32 through wine. Atleast for desktop related tasks.
> Raise your hands if you’d rather go back to a world without Airbnb

Step outside of the software bubble we’re in and I’d guess 80% or more people would prefer a world without Airbnb. A significant part of the population does not use Airbnb and is also experiencing negative impacts of a housing shortage and affordability problems.
That's pretty simple: I can't stand it that people with such an opportunity for improving the world around them would squander it and wreck it. That makes me bitter.

As for whether if you invert it it becomes true: there are exceptions but for the most part the lawbreakers sooner or later end up running into the limits, be they SBF, Thiel, Musk or any other of the ethically challenged individuals that the tech world puts on a pedestal. Money seems to have structurally perverted our world and the rule of law is just about the last barrier that helps keep society functioning.

Tear that down and you lose a lot more than just some 'minor inconveniences'. The law is the ultimate representation of the rules by which we play. Starting off by throwing out the rulebook in a way that will result in net negatives is a clear example of externalization: profits for the owners and investors and the damage for everybody else.

That is not how we're going to get to a nicer and more sustainable future. There is a lot of fuss about the kleptocrats in Russia and how they rape their country and their fellow men. Rightly so. But the tech bros aren't that much better, they just sell it better.

As for AirBnB disappearing: yes, please.

> Now, maybe this Kenya business is terrible.

Maybe?

No, seriously: it is terrible, there is absolutely no way in hell that this is justifiable, it is with distance the worst thing Sam Altman has ever done and that plus OpenAi's blatant attempts at regulatory capture are enough to make me regret ever defending him on HN before because I thought that he was different.

So, that leaves pc and his brother for now, the rest of the tech bro billionaires can go jump in a lake.
The "Ask vs Guess" name rhetorically frames it in favor of the Askers. Asking sounds reasonable, guessing does not!

But really it's not about "Guessing", it's about understanding. It's about community, and relationship, and trust. What this culture really wants is for you to pay attention and understand the people around you, rather than treating everything as a transaction.
They have the right. What those vehicles don't always have is the means.

Just because the law dictates something, it doesn't mean it's safe to act as if it's happening. In a similar way, pedestrians also look both ways before crossing a street.
This is awesome! Would love to chat more, wanted smth like this for a long time!
Your reddit user seems down tho? Email me at [username] @pm.me!
If that was a Windows 10 screenshot then yes there would have been the possibility of it being the 32-bit edition running a DOS app through NTVDM. But the poster says Windows 11, which does not have a 32-bit edition.

I’m not aware of 64-bit Windows being able to run 32-bit DPMI DOS apps natively, I think those still required NTVDM.
>Sure, small co-ops can have cost structures for smaller projects big companies often cannot match. That’s true of any kind of business. That doesn’t change my point.

That's just ridiculous across the board. I guarantee, with 100% confidence, that a small local co-op does not have a cost structure below the big Telco's. My co-op pay SIGNIFICANLTY more for:

Routers

Switches

Conduit

Fiber

ONTs

Trenching Crews

Support

They pay less for:

Executives

???

It's laughable that you say it's true of any business that small businesses pay less than large. I can tell you what the discounts are for switches that I've sold in the past to a Fortune 500 vs. Joe Shmoe's Trucking - large corporations are frequently paying HALF of what a small business would for the same thing due to their volume.
>Accompanied by military escort vehicles and helicopters, an ambulance departed with the Fourth Wallfacer. Against the lights of New York City, Wade’s figure appeared as a black ghost, his eyes glinting with a cold light.
>“We’ll send only a brain,” he said.

Still too heavy by a factor of 1000 or so. Perhaps we'd be better off building this laser array in space, using self-replicating robots to assemble cables around a moon of Jupiter to siphon power from its orbit in the magnetic field.

>Electricity surges through the cable loops as they slice through Jupiter's magnetosphere, slowly converting the rock's momentum into power. Small robots grovel in the orange dirt, scooping up raw material to feed to the fractionating oven. Amber's garden of machinery flourishes slowly, unpacking itself according to a schema designed by preteens at an industrial school in Poland, with barely any need for human guidance.

From one of the Dark Forest books and Accelerando respectively.
Ruminant animals are very efficient at converting plants into high quality protein. Getting the optimal mix of essential amino acids is crucial for health. This is just as important as number of calories.

https://peterattiamd.com/donlayman/
Great way of putting it. It does seem a little off compared to how `npm run` works (it traverses up to a package.json), but I agree .env files could get sketchy.

Maybe it could traverse up to where it finds a package.json actually.
I'm assuming you're a North American like myself. I find it shocking how attitudes towards health and food in Europe are so different from here. Flying back from France or Italy through the USA is a surreal experience -- obesity is a major problem in America and a pretty bad one in Canada as well.

I am convinced it's not a problem of willpower, but the food just being engineered to be addictive and overly flavourful at any cost.
Less animal suffering and totally different taste and texture profile than eggs or milk.
I am responding to the author that, at least in my take, appears to be stating that these are "anointed" "good design principles", and that if you don't adhere to Rams' singular viewpoint, you are by definition engaging in bad design.
> if you have any issues with your alternative authentication devices, you are completely locked out of your work

You have printed the rescue codes when prompted, and have put that physical piece of paper into your wallet, haven't you?
Stolen hard drive is rarely what you defend from, and arguably might completely not matter if say their short lived session is dead but long-lived password manager one is up.

Exploits owning software on machine are far more common than machine itself being stolen.

I'd also argue that tying re-login to the sensitive actions is far better way to fight it. Basically have long session for nondestructive actions but short for any potentially harmful ones like changing payment options.
I remember when I first heard about this concept and found it explained a big difference between my brother and I that I had struggled to articulate (he is an asker and I am a guesser)
> Opinionated, or just old and consistent?

That old hotkeys didn't survive the evolution so it doesn't make sense to support them anymore.
> I’m not trading anything off that I’m aware of.

Really? Really???? You're not, say... having to manage ACLs, and having to run a system that can enforce ACLs?

Because both of those are tradeoffs. They might be "completely sane and reasonable" tradeoffs! But they are still tradeoffs.

Also - in a more blunt way: Simply not being able to see other peoples files was considered a pretty big negative in some computing crowds when it was first enforced. That's a huge tradeoff: You're sacrificing visibility for privacy.

I think that turned out to be the correct tradeoff in most places - but to be clear - you absolutely are losing a feature to gain a feature.
Do you shake hands? No one in my life shakes hands anymore. "Hi, how are you," is no more rational, but at least it's more hygienic. As polite social conventions go, I'd call it pretty harmless. Sort of miss the handshakes though.

Edit: FWIW, I often ask people how they are, and while I hope and am delighted to hear how people are, you're right, objectively, I think it's really more just sort of a default template that invites any kind of response vaguely correlating with one's status. But, "Hi, I invite you to tell me anything on your mind that might correlate with how you or the world are, or anything else; I'm just being social," is a bit clumsy.
FYI: Your privacy policy is missing https://app.markix.com/privacy-policy
Yes, if I were Waymo I would be so pissed. It looks like protestors and regulators want to lump the two together. I'm pretty supportive of careful public testing of AV, but even I look at these recent Cruise incidents and find it very understandable that a city would want to kick out these AVs.
People developing languages have the same computers as everybody else. It’s only a slight oversimplification to say that C won because Unix won. There were plenty of usable high-level languages, not to mention plenty of low-level languages besides C.
Well putting half your fortune in a venture is literally taking significant personal financial risk.

Besides that, there are plenty of firms taking government money but Elon actually delivered.
> Pointing to google as a positive example hasn’t made sense in quite some time.

I don't usually get pedantic about typos, but the twofer here really made it hard to understand what you were saying
There is a significant misconception in that post:

"If you change the implementation of your project, some of your unit tests will break, without anything being wrong with your project"

That is a big but common mistake! You don’t change the implementation for intentional behavior change before you change the test.

See, in TDD the tests define the behavior of my units. If I want anything different, I define it within my test first. Red, refactor, Green.

I know, it takes a lot of discipline to do right, but the benefits are immense.
> But does anybody really want to play them, learn them or go and see someone else perform on them?”

This is a great thing about physical instruments: it's easy to tell the relationship between what the performer does, and what sound comes out. (Like, "he hit a piano key, and the piano made one note.")

I've been to electronic music concerts, and a lot of the time it's just some guy fiddling with his MacBook, and cool music is coming out of the speakers, but it's not clear what he's really doing.
> the fact that an increasing number of Americans want restrictions or some form of gun control.

https://upload.wikimedia.org/wikipedia/commons/5/5a/Right_to...

Doesn't look like it to me.
That's an overly simplistic model. The factors leading to your demise are interrelated in a complex way. Diet (including sweeteners) can affect your weight and diabetes risk, which can affect a number of downstream morbidities (heart disease, kidney disease, cancer), any of which can be the one to take you out.
To be honest, a car is one of those things I’m glad I don’t own, but still wish to have available to me at a moments notice.
> "solution to no particular problem"

I deeply disagree. While Worldcoin's execution seems questionable at best, the idea seems like a solution to a problem that we (society) definitely have, namely the real-people problem. Worldcoin or something like it, if properly implemented, makes it possible to distinguish between real people and bots. This is a real problem that we have today, is getting rapidly worse, and till now this problem has only been solved in shitty ways by governments.
So because there is a tiny minority that rents out own place ocassionaly then it means that what Airbnb does is OK? o_O
Tea, perhaps, but for me, coffee is significantly worse than Coke. At least in the amounts I'm able to drink these beverages.
The US, qua US, doesn't, but California and a number of other states have taken action on it, and for that and some other reasons, general practice is basically neutrality-ish in the US.
Now when someone spams you with images of rotting dead bodies you just get to wait the three weeks for Twitter's moderation to get around to banning them instead of being able to block them. Great!
Ancient Romans didn't use rebar in their concrete but they did use aggregate of different densities depending on what section of the building would be under stress. Plus if cracks form their concrete self heals due to the compounds used in it.
I said nothing about their clothing. I didn't come to their fashion field with my knowledge and taste. They came to computing, a field I'm passionate about, and produced shallow cargo-culted design presented as an actual product.
That's very powerful, in the beginning the audience is totally unable to calibrate their responses but it gets better over time. Props to her, her tone and delivery are absolutely perfect, aiming straight for the heart.
Well it should be ... interesting ... when issues around water rights and management start being a thing in places that just don't have them right now. E.g. nobody speaks about this stuff here in Ontario, there's just ... water everywhere ... and I imagine it's the same in Wisconsin or Ohio and so on, which are still largely in the Great Lakes Basin to some degree.
Good luck using C-z for undoing
Corporate IT cares about managing all of the devices inside an organization. If a sizable portion of the workforce needs windows for access to platform specific programs then having non-Windows systems for other users that achieve what Windows can do is just overhead for IT and can see pushback.