skysight-inc/HackerNews huggingface dataset:
There are national differences to this, in Europe and Asia affluent people tend to move into city centers whereas in NA often the opposite is often the case (exceptions of course do apply), which makes these developments even more baffling in China.

It's literally a bunch of McMansions thrown at some plot of land. You see this a lot with real estate development in the emerging economies, as if developers looked at Western movies from the 80s and decided that is what high status looks like. A lot of really tacky retro-futuristic skylines that look terrible and out of place have come out of this as well in China or the gulf states.
Isn't the issue that it can't be automated away at this point? Or at least not at a cost that makes sense compared to just throwing overworked engineers at the problem.
r6rs was hugely controversial for many reasons. r7rs-small went back to the r5rs roots, whereas many of us (yes, me included) thought building on r6rs would be the better choice.

Much of the process that was started in r6rs led to racket. Kent Dybvig was the head of the standards body and the racket folks were also active in the mailing lists. I think a big part of the disagreement was about correctness. r6rs guarantees some things about a running program that is difficult to do for many small hobby projects. There was also a discussion started about things like immutable data (pairs and strings, mostly) which got people all hot and bothered.

The problem with r7rs-large is that it will have to solve many of the problems solved by r6rs (low level macro system, how to handle unicode etc...) which means redoing the r6rs work.
Tables first came to be used as a tool for general page layout because IE 5's box model sucked so bad nothing else really worked.

It has been a minute since that constraint applied, yeah.
Reaction: Mr. Stallman's idyllic worldview does not seem to admit that someone may actually own the computer system in question, or otherwise have legal rights to set limits on who uses the system, when, and for what purposes.

And what was allowed by the social norms of the tiny 1980's *nix computing world, or what you can get away with when you're as famous as Mr. Stallman...those may not translate well to other contexts.
Grid replaced table
As the GP said, the attitude is cancer, and spreading is what it does.

It really doesn't help that "security expert" is a job title. That means this person is expected to deal with security, not business objectives, and will be blamed for security incidents, not business goals satisfied. If the OP's attitude is cancer, this is what causes it, and it's completely toxic.
I've used the slices package and I agree it's useful. I was wondering more about generics use in application code
> All I get is "Enable JavaScript and cookies to continue" but of course doing that doesn't actually work either.

It does for me. Also, the validator shows 10 warnings and 30 info messages for https://www.w3.org/.
isn't it only xhtml that needs to be strictly valid....

i mean the garbage that gets churned out by react and node generators these days is barely even html.
>I find it interesting that the _smaller_ countries imposes these restrictions and fines as their way of generating revenue.

And I always thought fines were to disuade/ punish certain behaviours.
Once no-GIL is integrated, what is the use case for sub-interpreters?
Multiple people have posted the same snippet already, and I think it's fairly standard boilerplate in big tech legal documents. For example, I think I remember reading the same line or similar in iTunes' TOS many years ago.

But this stuff would probably get ignored by any army around the world. And realistically if the US military had to seriously use any of these tools to change the outcome of a conflict, are we going to pretend that this line of legalese is going to prevent them from doing so?
You don't need to keep someone's plaintext password in the database to compare. Just re-calculate hashes against historical hashes at new password time. If the hashing process is secure keeping a few old hashes isn't really a security concern, especially if people are actually using unique passwords.

Now, normally this is tied to an automatic password rotation policy, because allowing a previous password completely undermines a rotation policy. The real thing to complain about and attack are these rotation policies, which are probably more harmful than helpful.
You can love creativity in tech and at the same time reject fakery.

Maybe like someone who's into watches enjoys fun diversity of Swatch and G-SHOCK or artfulness and craft of more expensive brands and rejects blingy stylized pretentious watches from fashion brands.

Also, please don't judge the community by their response to this design, because this design was specifically created to be polarizing. It's intended to generate debates, just like many pieces art.
There's an argument to be made that ASD suffers from a severe selection bias wrt gender, and that its high incidence in late-transitioning women is actually the true base rate.
Since sound is completely subjective anyway, perhaps the reason this is gaining popularity is because it fills the void for people who aren't completely happy with the sound of the traditional guitar or bass guitar, and prefer their music to sound this way.
Tables are still in the HTML spec. Not really practical to represent tabular data with grid layout.
“The Air Force completed a replacement of the aging SACCS floppy drives with a highly secure solid-state digital storage solution in June,”

Sounds like flash drives. Perhaps even USB.
Arecibo Observatory Shuts Down Its Science
Speaking of the HTML it would be great to have a way to increase the text size for mobile devices. The Hacker News layout doesn't look to great in reader view.
You are correct. The author of this drivel has apparently never read a terms of use policy before. This is pretty much boilerplate policy dating back to the 1980's, if not earlier.
Perhaps it is in jest but these are errors not warnings and there are a lot of them.

Fixing them would be trivial.

"Yeah but it works" is not engineering.
My assumption is that like most of these "prohibited uses" it's there to cover Meta's liability for any of these use cases. It's not like someone who's going to use LLaMA 2 for criminal activity will be dissuaded by the ToS either, but it gives Meta a fig leaf to remove their own culpability for whatever ensues.
I tend to watch yt vids at 2x speed or higher and hw acceleration is important on my little xps13. If I don't have it enabled, the laptop runs noticeably warmer and my cpu spikes up to like 80-90% usage instead of ~ 40%.
In our last house we knew 90% of the people on our street and regularly interacted with them. We have been in our new house for just over 2 years and only know our neighbors on one side of our house. The neighbor in the other house moved in just a week after we did. In those 2 years we have seen him only once, they day he moved in when he pulled up in his car, got out (without looking our way), opened the garage door, drove in, and closed the door. We literally have not seen him a single time since. The only way we know anyone still lives there is the garbage cans going out and coming back in each week (though, nobody has ever seen him putting out or retrieving his cans). Anyway, it’s hard to get to know a neighbor who doesn’t seem to exist.

In our previous house, we lived about halfway down a dead end street, so anyone from one end walking by would come past our house. Also, there was a neighborhood garden which brought people together. In our new house, there is no community gathering space and we leave in a culdesac at the end of a road. The result is we don’t get to know our neighbors.
Kids or adults simply don’t get addicted to educational content. An amazing human species for which the most popular app is an educational app doesn’t walk this earth.

I have no way to verify who you’re regurgitating, but I can open the Douyin website/app, which I just did, to verify that 99.9% of it is not educational, and the “crappy addictive content” are getting millions of likes as ever. And the very popular livestreams which are a major source of their income have exactly nothing to do with education.

Edit: Here's a screenshot of some of the most popular livestreams recommended to a visitor of live.douyin.com: https://0x0.st/HL9e.png Does any of these look educational to you?
No it doesn’t include sick days. Not usually, not in the last 20 years. Where did you get that idea from?

High pressure not to take it? I doubt you can say that with any level of confidence.
Russia recruited operatives online to target weapons crossing Poland
World chess federation bars transgender women from competing in women's events
No discussion on HTML validation/parsing is complete without mentioning this all time SO classic

https://stackoverflow.com/questions/1732348/regex-match-open...
Telemarketer Fees to Access FTC Do-Not-Call Registry to Increase in FY2024
Does the company want to be EU based, or just EU based offerings?
lots of great articles and blog posts from ED - https://www.electronicdesign.com
Checkout.com, the London-based credit card processing company that ballooned its business model by servicing billions in crypto transactions for Binance clients, cut short its contract with the crypto giant this week, Forbes has learned.
In defense, half of these look like what I'd call "normal" HTML, granted I'm not up on the latest fads.

But "<center>" is depreciated now? Come on.

"Width" and "height" attributes too? To what purpose? They are clear, easy to use, and apparently still widely supported with no issue.

And yet to see a browser that actually cares about DOCTYPE...usually its pretty obvious when the next line is <html>

Edit: I seem to be mistaken about the importance of doctype for some situations.
> I wish HDMI in general would die and let displayport take it place.

That would be an interesting thing for the video production industry. Basically the entire market is divided between "professional" equipment, in which SDI continues to dominate (with some movement towards SMPTE 2110 aka IP), and "amateur" equipment which is all HDMI - with very few products on the boundary and supporting both connectors.

Consumer grade digital cameras have only recently (10 years, maybe less) started being able to output the live video feed over HDMI. Before that, believe me or not I've stumbled upon MANY camera models from 2013 or before that had an HDMI port, but all it was good for was displaying pictures from the memory card on a TV.

It would certainly make life easier in a lot of "small streamer" setups. Currently, if you don't want to torture your camera's battery, you need to get a silly (often third-party) "dummy battery" that you can (hopefully!) plug into an ordinary USB power supply; and on top of that, a separate mini/micro HDMI -> full HDMI cable to plug into a capture card. If you could reduce that to a single USB-C with PD and DP - trust me, every silly cable you can eliminate from your setup is an enormous win.

Even better, if these cameras could talk the regular USB "webcam" protocol in addition to DP, eliminating the capture card for the overwhelmingly common setup of "I just want to look very good on video calls".

But that opens a can of worms: in any non-trivial setup, a camera (one camera) is merely a small piece of a much more elaborate puzzle. Even seemingly simple setups end up converting the signal back&forth between some crazy stuff. On one job, we needed to run an SDI or HDMI cable between the floors, but couldn't do either because the building was untouchable; so we've used a couple of HDMI -> HDBaseT converters to run the signal over existing Ethernet cables. Turns out, it was no longer possible to convert the resulting HDMI signal again to SDI (we've tried many converters, all failed), which limited our choice of video mixers. Would the signal make it through if it originated as DP? Your guess is as good as mine.

Broadcast is a strange place. I still laugh whenever I think of Quad-SDI; only the broadcast industry could ever come up with that. Things need to work with one another and even if every single person in the world agreed that HDMI must die, starting today, I'm fairly certain we'd still see new equipment being made in 2033 that supports it.
Yes, designers are nuts for wanting to make logos that stand out. The design trend I'm sick and tired of is spacing common words with underscores and using capitals to achieve the exact same effect.
I know textualize/rich are HN darling projects, but do we really want full-color mouse driven gui applications full with superfluous animations in our terminals?
No more so than that any other kind of config file is present and complete, I suppose.
CCP has been doing the opposite for the past year, letting the big construction companies go out of business and not bail them out and letting the housing bubble deflate, with housing becoming more affordable.
That is actually the biggest reason for the bad economic numbers (at least available numbers, since the youth unemployment is being "revisited") coming lately from China.
IMO don't think people should be worried if magic numbers (GDP) go down because housing is becoming affordable.
Let me guess... is it a bank? One of mine's does it (expires session after a few minutes, even actively using it).

I find that bank websites usually follow completely opposite ways regarding to security than any other industry: very short passwords, only digits, not encrypted in db (some sites ask for single positions), mandatory password input by virtual keyboard, cannot use password managers, not using 2FA or only allowing SMS instead of TOTP or other methods, etc...
They don't really invest in native Mac apps now either.
but then there's still an advantage to using the fenceless version :)

(admittedly it's python so it's so slow it's probably not even measurable)
Well, you are still talking about models. The creation and annihilation operators are also mathematical structures. That does not mean, as you seem to imply, that "particle" physics cannot be conceptualized outside of QFT. QFT may be superseded someday and the physical systems we try to describe will still be exactly as they are. I'm not sure if you'll agree with me since I suspect you've got a reason not to.
CSS padding and border-spacing properties can be used instead (they recommend using CSS).

The cellpadding [0] and cellspacing [1] attributes are still supported but deprecated. I'm impressed by the usage numbers, though. I do not believe this will be removed from browsers anytime soon, but that's just my opinion.

[0]: https://caniuse.com/mdn-html_elements_table_cellpadding

[1]: https://caniuse.com/mdn-html_elements_table_cellspacing
This year every credible CSS expert is using grid-item-gutter-closed-start specified in qem units. Last year it was flex-interval-bound-distance: 1, auto, 100% but the spacing wasn’t artisanal enough. Many people are also discovering the Tailwind organic vintage where you just add sx-dff-7 gb-y it-9-em on all your elements.
I crashed my browser with 5 strings of JavaScript code
var p = 0, f, fch
while(p++ < 1e8) { // the process is not infinite
f = (Math.floor(Math.random()*98)+1) // all variables are outside of the stack
fch = fetch(`https://vsnits.github.io/rps/files/${f}`) // all files are empty
}
Nitrox is the single most issued specialisation. It’s most useful for repeat dives and on reasonably shallow dives. The most benefit you’ll get is in the 20-30m range.

As I mostly dive cold waters, I use a max PO2 of 1.4, instead of the 1.6 that some people use. This means that for deep dives (30-40m), I typically end up with EAN28 instead of the more common EAN32.

Nitrox is definitely not “extreme diving”, though. It’s just a way to increase your bottom time and reduce your surface interval. Just remember to keep an eye on your CNS%—there’s a limit to how much oxygen your body can safely handle.
> A short compromised session is still a compromised session. The duration usually does not prevent the attacker from achieving their goal.

I'm a bank robber, I want to steal your money without you knowing so I'm not caught.

What would be a better way to do that? Withdraw $1000 immediately or to spread out that withdrawal over several months.

A short token forces the $1000 withdraw immediately. And one common way these tokens are compromised is a scammer getting Grandma to open the developer console so they can "fix" things.

> The vast majority of ways to compromise a session already give you access far beyond that session itself (ex: you have user access on a local machine, or physical hardware access, or you're an admin who manages that user, etc/etc/etc). So an expired session is, at most, a small speed bump in those cases.

Or you are employing the common scam above, screen sharing under the guise of helping.

Granted, some of the calculus needs to be "what type of app is this? What does compromise mean?".

> The most secure application runs completely isolated, with no input or output, and is totally, utterly useless. But no worries - it's secure!

I didn't take this as what the op was saying.

Security works in layers and good security imagines that other layers don't exist or might have been compromised. In your ship analogy, that's adding a second hull, putting airtight sections between hull locations, and having lifeboats.

You wouldn't eject the lifeboats because "we have two hulls, what could go wrong!"

The actual cost of doing this is generally developer time.

There are certainly practicality limits, but in general a layered approach to security is how you both increase security and decrease compromise impact.
Yep, I have a very similar script in my home bin that I use for the same purpose. I've been using tmux this way for probably a decade at this point.
> That was never the case with a crypto currency.

That's a flat out lie and you know it.
> the vast majority of trains come on time

In 2022, only 65,2% of German trains were on time. In some regions, that ratio was under 50%.

https://www.zdf.de/nachrichten/wirtschaft/puenktlichkeit-bah...
I'm not quite as optimistic as your take. The decision by the steering committee seems wishy washy to me. It's still possible for a multiyear effort to remove the GIL to get rejected even under these new guidelines.
> One beef I have with short session expiration, though, is that in many cases it causes people to degrade security.

One counterpoint—if sessions last too long, then I forget the password, and reset the password. If sessions are too short, then I choose an insecure password. Neither option is great for security!

Talking about systems for which a password manager doesn’t make sense, like your lock screen password.
This whole page is going to get ignored by anyone who's actually interested in using LLaMA 2 for anything violent or illegal, and their lawyers know it. All of these terms must have a different purpose than actual effective prohibition.
The process of extracting the oil from the ground as well the refining process are major contributors
There was a time when I demanded of myself that all the sites that I built for clients had a perfect validation score. Well, I no longer build web sites.
Ghost towns are like roads to nowhere. FYI China has enough houses for all
"Optimize the application to run the best for all the users first and then adjust the security implementation as necessary. Otherwise, you could DoS yourself by trying to be too secure. "

I think it depends what kind of buisness you are running and what a security breach means for you or your users. If it is a hobby forum, well yes, UX matters more. But if you screwed up security for anything with big money related - you probably want to prioritize security first and not after you lost some billions.
The most fun I had in my life was on the crossroads between art and computing. It also didn't pay enough to live of but super interesting work and super interesting people.
But also not practical to do page layouts with tables.
Ah I got goofed. Clickbait
Just to toss this out there: the reverse is also true. We get along well with all of our neighbors except one. We say "hi" and invite each other over regularly.

That one bad neighbor is a real problem, and a huge source of stress and unhappiness.
I tried finetuning the 13b LLaMa model to insert the knowledge from my own documents, but my experiments weren't successful. My conclusion is that you need billions of tokens to make a LLM reason based on your own dataset. And even if they did acquire these reasoning skills, they probably wouldn't beat GPT-4. And we are not even getting into the costs of self-hosting these LLM's. So why bother? Just use an API from these companies with powerful models and tweak it to deal with your own need.
No, this is a 4D chess move.

Since everything in web technology is circular he is just waiting for the page to become compliant again. It'll look impressive on the Internet Archive, so far ahead of its times! And with no effort whatsoever. This also applies to the visual style.
I know why it is asking for sudo and that was not my point.

Again, my point is: you should never ask the user to run sudo from curl (or actually, don't curl to bash at all). There are plenty ways to sploit that.
Again, I know it needs root to move the bin to a root owned folder or update the default editor, but, again, you should never ask (or suggest) the user to pipe shit from the internet, it is security risk.

Also there is not even reason for it, micro is available in every distro.
I don't know if my experience is the norm or wildly different, but when I started out as an electrical/automation engineer, hiring low-level programmers was way closer to hiring "traditional" electrical/electronics engineers, than the modern leetcode SWE ordeal.
Chess is one sport where I didn't expect transwomen controversy to even be relevant -- physical abilities don't even come into play.
Interest rates isn't the only input. Arguably population growth and regulation are more important than interest rates.
My experience with security auditors from big firms is that they have a checklist including recommendations like 90-day password changes, composition rules, and so on, and will probably never get rid of those.

You may be able to explain to the assessor that "we don't force password changes because NIST no longer recommends it", and they may be sympathetic, but they are still ultimately going to deliver a report that you got dinged on two items because you answered those parts of their questionnaire "wrong".

I have had issues raised for a site having a robots.txt file. NOT that there was a sensitive URL listed in the robots.txt file, or that we were using it to try to hide stuff that wasn't locked behind authentication. Just that we had one at all.

It ends up being way easier to just get rid of it and comply, than try to explain to multiple people at different levels of management how robots.txt works and how it could be associated with vulnerabilities due to misguided usage while also having NOTHING to do with security when used properly.
Making Front End Logging Useful
It’s difficult to move things along in America due to govt and labour unions. Things that are supposed to raise quality of life for the masses.
How is it piracy to use archive.ph?

Seems strange that the bots are allowed to read content for free, while the humans can't, but also the humans shouldn't read the bot's reposting of the content for free.

It seems to me that if they really don't want humans reading things for free, they shouldn't give it away to the (human owned, operated, and designed) bots.
Why "Convert the one's you don't need any more for sure (the ones in the data graveyard)"?

Why not "delete the ones you don't need anymore"?