skysight-inc/HackerNews huggingface dataset:
>How do you pay for these servers?

For probably much of cybercrime you don't pay for these servers. Many are usually security compromised servers that were put up for legit business and left some config file out in the open or some other silly mistake. In the case of phishing, they are hijacked and by the time anyone notices, enough emails have been sent to create a lot of damage for the good guys, and a decent profit for the bad guys.

As always, something will only be done to fix the unbearable lightness of committing a cybercrime when there is a realization that the price being paid for those that have the power make a difference outweighs their benefits.
I used to write (in the 1980s) proposals to the NFS to get money for computer time on computers with a tiny fraction of the compute and storage capacity of my phone. I have a constant low-level feeling of guilt for not running stellar evolution models on my phone.
> For people unfamiliar with C, strcmp is a routine used for checking if two strings are equal. This method receives three parameters: two strings and an integer, the latter states the number of characters to be compared. Afterwards, strcmp starts comparing each character until the end of any string is reached. Strings in C are just a chain of characters terminated by a \0 character, this means that strcmp stops comparing once any string reaches \0. Hence, by composing a Wii title in a way that its hash contains zeroes at the beginning, Starlet RSA computations will feed a string starting with \0 to strcmp. Thus, the comparison will always return equal… Title is signed!

This doesn't make sense. strcmp only needs two parameters (the two strings). Perhaps the article is talking about strncmp which takes a third "length" parameter which stops comparison after N characters. But in neither case would it behave as described in the article.

The only way to make it behave that way is if the code first did a strlen() on the channel's hash and then passed that in as the third parameter to strncmp(), which seems bizarre when you're comparing the fixed length output of a hash function...
That sounds like after my time then. I left the Seattle in 1998 for grad school, and didn’t get to see how SLU evolved in the next 10 years (just moved back in 2017, so knew before and after, but not during).
I love that each heading in the article is a half life 2 level name. Made my day.
Best is to soak the film in the sea itself for hours, so you get an exchange of fresh ions. It’s not the table salt, NaCl, that (probably??) does the fixing, but other trace ions that does it.

So super market table salt may or may not work.

I put a picture in a saturated solution of cheap horse salt for 24 hours in a soda bottle.

Worked fine!

Re baking soda, it stops fizzling after a minute, and you just have to compensate with more baking soda and/or longer development time.

Re C22 film, it can be developed in C41 chemicals if at room temperature. Increase development time to … more.
It seems a large number of HN users, judging by this post, believes that community notes is credibly neutral.
Midshipman hitch is great, I used it to reinforce my tomato cages with some tension members.
Would love to join the Discord but the link you shared and the link on your site are expired :)
I am chartering a yacht in two weeks and have been busy re-learning how to tie a core set of knots. This is easily the best resource that I have been using with the rest of the crew(aka family)!
> I think you’re getting ahead of yourself. You have $0 in revenue and no business. You don’t raise money on ideas and vibes.

I mostly agree with you. That being said, people raise money all the time based on personal relationships, past success, etc. I think it'd be more accurate to say that if you could raise money at the idea stage w/ no business & no revenue, you'd already know you can do it & wouldn't have to ask HN how to raise the money.
Firstly, obviously yes for un-interned.

TXR Lisp:

This is the TXR Lisp interactive listener of TXR 291.
Quit with :quit or Ctrl-D on an empty line. Ctrl-X ? for cheatsheet.
I'm confused; is this piano recital Rimsky-Korsakov or Wernicke–Korsakoff?
1> (progn [finalize (gensym "foo-") prinl] nil)
nil
2> (sys:gc)
#:foo-0012
t
3> (sys:gc)
t

We make a gensym whose name starts with foo-. We register a GC finalizer for it which is the prinl function (print, with newline).

Then when we manually invoke GC, it gets collected; we see the print.

Internet symbols cannot be collected, normally, because they are always used: they are registered in their package.

TXR Lisp has weak packages, though. A weak package will purge a symbol that is not reachable other than through the package.

1> (make-package "abc" t) ;; t argument here means weak
#<package: abc>
2> (progn [finalize (intern "xyz" *1) prinl] nil)
nil
3> (sys:gc)
abc:xyz
t
4> (package-symbols *1)
nil
5>

Don't know if other Lisp people thunk of this one, but there it is.

I don't think I exposed this weak property through the defpackage macro. It's intended for specific scenarios, like reading data in the context of a package.
That's pretty good. There was another early 2.5D game that ran on my IBM PC that I played in around 1994 that this reminds me of. I'll go search for it now

Back, that was fast https://en.m.wikipedia.org/wiki/Catacomb_Abyss

I think the framerate was closer to like 5fps or so.

I was under the impression that this series running on an 8088 was a unique property but Wikipedia fails to mention it. I was a kid then so let's just presume I was wrong
1) There's nothing special about 6 digit years. You can also use 5, or 7 digit years, or whatever the two parties can agree to before communication starts.

Part 2 of the standard gives examples of years with 10 digits.
After working solely with AWS for 11+ years I managed to answer 3/20 correctly…What a relief.
Endogamy fails when the ratio of males to females in a group is not 1:1, a simple mathematical fact. Many castes have disappeared, many emerged. Genetical evidence just show that people prefer to marry within that particular sub-caste, but it is not a constituent property of caste--let alone a system of castes. If we apply this logic (endogamy meausurement), castes existed in other continents, countries far away from India. In that case, we see a phenomenon not unique to India.

BTW, I am not denying that practices exist, practices are continued, even modified. Nor am I denying that jaatis-exist. I am not even denying that there are fights between different jaatis at different places. There is a difference between phenomena and explanations(descriptions). Over the time, theory-laden descriptions of phenomena start replacing the very phenomena. That facts are theory-laden or that facts are facts of a theory--is not some rhetoric.

Once caste-system (sociopolitical system, as you put), a theoretical entity, is postulated to explain various phenomena, now all these phenomena are re-described using this language. When I deny these re-descriptions, you seem to think that I am denying phenomena (for example, people prefer intra-jaati marriages), as you call this denial of re-descriptions as rhetoric.

Practices exist, jaatis exist, various phenomena exist, does the caste-system exist?
A Journey Through Spain’s Islamic History
Knots 3D
AWS Elastic Icon Identifier is just a fork of Open Icon Identifier. AWS does this shit all the time. LOL
Also, while I’m at it – if you’re using VMs for isolating potentially insecure things then your threat model is obviously different. I should have mentioned that I’m using VMs mainly for practical reasons, e.g. for easily spinning up Ubuntu environments with my preferred toolset. If you’re worried about something escaping the VM sandbox via git-hooks then your use case is of course very different.
> It's "funny" how both RFC 3339 and ISO 8601 standards include a huge number of redundant DT formats with often overlapping purposes, yet "2023-09-01 15:30:59", which is by far most used DT format (because it's fucking obvious!) across all systems is included in neither.

It's much readable too. I recently started ignoring both standards in favor of the nicer space-separated format after almost two decades of sticking with the former. I get why they needed a non-whitespace character but they could have at least used an underscore or a dot.

And I have no idea why they sacrificed the universality of the format by limiting the year segment to only four digits. It's a string!
Disposable earplugs can quiet planes, trains, autos and their respective ports.
The trick is to have a genuine respect, interest, and empathy for another person's approach, even if you disagree.

If you just take a superficial facsimile of what is suggested, without the actual respect and empathy, it will sound like bullshit as you say: it is.

But stopping to condition yourself to be empathetic first is a way of, I guess, bootstrapping that respect and empathy.

It's a low bar that people frequently don't clear.
JS date format pretty much lives at the intersection of them, afaict, so it should be the perfect choice for interoperability. Also, I gather it makes working with dates simpler if you can rely on a less variable format.
> Huffington Post

you got me pegged for the wrong political party. and it aint red or blue.
Ask HN: What important lesson(s) did you learn working at a startup?
I've never thought about using Syncthing for this, thanks for the idea!
Despite the rude comments you left on my contact form, I have noted your point and am making changes to fix this.
A robust Bayesian look at Covid origins
The NIST report had very basic important information like speed of collapse found to be incorrect by high school teacher David Chandler.
>It increasingly feels as if Google Maps has gotten lost.

Just maps?
We've banned this account for using HN for ideological battle. Please don't create accounts to break HN's rules with.

https://news.ycombinator.com/newsguidelines.html
This app is one of the first I always install on a new phone. Perennially useful.
> If I have a billion dollars to invest I could invest it all in one fund or I could spread it out of a thousand small funds.

Assuming there are 1,000 small funds with an average rate of return higher than the large fund, sure.
I wonder what the downsides would be in a time model that is indicated by a normalized global value for the current longitude where the sun is at meridian.
You missed my point about monoliths. Some groups operate more tightly and competently than others.
I came here to recommend this. Absolutely worth the 1-time $4.99-no-subscription-or-account-or-any-BS payment.

They made a cool thing. It is valuable to me. I paid for it, and we're done.

The app downloads once and doesn't need an internet connection. If you drew a Venn diagram of "Times I want to Know How to Tie a Specific Type of Knot" and "Times When I Am Out of Cellphone Range", there would be significant overlap between the two circles.

I'm not a particularly good follower of technical diagrams, but I find the instructions to be very clear and easy to follow. It's rare that I don't get a knot right the first time.

I've secured tarps, tents, clothes lines, gear onto vehicles and (most recently) a mountain bike that was missing its rear suspension, all thanks to this app.

Here's the link to the app available for various devices: https://www.animatedknots.com/shop

EDIT: I forgot about the fishing knots. No matter how good the app is as a resource, I always get confused and frustrated by fishing knots. But I also get confused and frustrated by fishing, so I can't really blame the app for this.
We've switched to that from https://isc.sans.edu/diary/0. Thanks!

I think the problem was that the OP contains https://isc.sans.edu/diary/0 as its canonical URL.
Maybe it's just the circles in which I've been active lately, but I feel like a lot of time and effort is spent these days practically just moving code around between implementations, without much practical change in user experience.

What drives this behaviour? I mean the question on a deeper level. An answer like "the technology hype cycle" just begs the question. Why does someone feel like they have to move business logic onto a particular framework (and then realise it's a mistake and move it again to a different framework that's similar to the one they started on?)
Who said that? The issue is that the "Free Speech Coalition" isn't actually about free speech broadly, but has a single-issue focus on empowering the notoriously exploitative pornography industry.
Maybe I am missing something but are all the wall textures replaced by the door texture?
Possible according to the infinite monkey theorem.
There is not one set theory, there are many.

The author doesn't like Zermelo–Fraenkel set theory which is fine. And semantics in ZF set theory is for some theories not possible or intuitive.

Semantics in category theory sets (Topos) is usually the way to go (1).

"Topoi behave much like the category of sets" (2)

Lawvere, a renowned category theorist, wrote a book "SETS FOR MATHEMATICS", which describes different kinds of sets (topoi).

(1) https://ncatlab.org/nlab/show/relation+between+type+theory+a...

(2) https://en.wikipedia.org/wiki/Topos
Well that explains why it changed.

They should add an option "focus on roads" "focus on landscape". Although to be realistic focus on roads is probably way more common, and that appears to be the new design - the roads really stand out.
> If the augmented-student pair performs at the required level, what's the problem?

The problem is that they have none of the general knowledge themselves and their brain is exclusively optimised to seek out openAI interfaces for guidance. They'll be a drone, an AI zombie.
There's an even weirder trick: If you don't want homeless people everywhere, build enough housing of the right type where more people can afford housing instead of being expected to stay in the shelter system.

Strangely, the major issue homeless people all have in common is not drugs or mental health issues. It's -- drum roll please -- a lack of housing.

And studies show this strongly correlates to a lack of housing stock and a lack of affordable housing. (Tip: Simply building more housing of pretty much any kind helps bring rents down. Something having to do with market forces. Supply and demand. Yadda.)
What you, and TFA, are talking about is specifically stupid announcements. Those are not necessarily connected to dense housing.
Climate related deaths have declined by 98% over the last century.

> Average life expectancy has increased because child mortality is down, do we stop medical research?

You are 50x less likely to die of a climate-related cause than in 1920.

> Great. Let's keep investing in mitigation AND prevention. It seems to work!

8x as many people die from cold temperatures as warm ones.

> Climate change is not just global WARMING.

The planet is more green today than a century ago. CO2 is plant food.

> At the cost of loss of biodiversity. We don't just need green, but diverse green.

We need more energy, not less. Renewable, nuclear, and yes even fossil fuels.

> Agreed. (Surprise!) But I'd prefer to see fossil used for industry and not energy. Renewable & nuclear should be sufficient.

It brings people out of poverty and increases standard of living. When humans move up Maslow's hierarchy they start to care about the environment. CO2 emissions have been decreasing in the US since 2007.

> Agreed. Moving up people on Maslow's hierarchy also causes them to need to have less kids (in a sane environment with a good social safety net for old age) which should stabilise the population by 2060.
Well, you used it incorrectly. It's clearly for a very specific set of circumstances:

> The Midshipman’s Hitch Knot is promoted by Ashley (ABOK # 1993, p 325) as the only knot to tie in the following unlikely but critical circumstance: you fall overboard and catch hold of the line which you have prudently left trailing astern and find yourself hanging on with difficulty. Before you tire, you manage to bring the bitter end of the rope around your back. You then have to tie a suitable knot to make a loop around you. A bowline cannot be tied under load. Two Half Hitches will slide and constrict you. The Rolling Hitch is the answer. Even as the second turn is tucked “up” into the correct place, the major strain is taken and the final Half Hitch can be tied with less urgency.
One of my biggest irks with Google Maps is how aggressively it shows pins for hotels, bars and restaurants, even on their search results map. Do users really feel the need for this constant in-your-face advertisement?

But as I type this, I realized Google is primarily an ad business and whatever will drive that revenue will get pushed further. Oh well.
Genomic inference of a severe human bottleneck during the Pleistocene transition
Not sure if the OP is here but on Firefox clicking the "API reference" button on the top left causes the full page transition to stutter. The profiler says more than 150ms is spent in a getBoundingClientRect call in a componentDidMount triggering reflow + style computation and 30ms on set Element.innerHTML. That seems excessive especially since I'm looking at this on a recent M1 Macbook.
'Your call is important to us.' Yeah, but clearly not important enough to justify hiring enough staff. This drives me crazy!
You're right -- it's strncmp, not strcmp. The other missing piece is a property of RSA signatures: given message m, signature s, and public key (e, n), you verify the signature by checking that H(m) = s^e mod n. Normally, this is not reversible without knowing the private factors of n, thanks to the discrete logarithm problem. But if s is zero, then s^e mod n will always be zero.

So, if you brute-force m such that its hash starts with a zero byte, and change s to all zeroes, then the Wii computes strncmp(H(m) = '\0.....', s^e mod n = '\0\0\0\0...', length). Since both hashes start with null bytes, they are treated as empty strings and compare equal.

Recommended resources https://wiibrew.org/wiki/Signing_bug, https://www.youtube.com/watch?v=0rjaiNIc4W8
> Lisp ways of producing HTML are extremely unergonomic for those not already in the Lisp ecosystem.

Sure; pedaling a road bike is very unergonomic for someone who is jogging next to it. Makes sense.
I don’t think parent anthropomorphizing anything. The ones who anthropomorphize are saying that machines should be covered by fair use, because they have similarities with humans.

This is not about the rights of a machine but about how one human product is consumed by another human product. This is just a commercial supply chain: if you make a model, you need human data. You generally need to compensate your suppliers of “raw material”.
The second persian empire did this. Well, in reverse. They tried to preserve books in high dry lands, believing there will be flood (coming from the west if I remember correctly).
In that sense, perhaps that facet of capabilities of Nushell would be more comparable to a Foreign-data Wrapper for SQL rather than a shell with pipes.
Yeah agreed. Choosing not to build this also lacks a plan for unhoused people, so I'm not sure why this is an argument against it.
Not Windows specifically. I work on a macOS host so NFS works fine. However, I want to keep my options open for working on a Windows host if necessary and I wanted to keep to the toolset that already exists on the platform. I want to isolate as many responsibilities as possible inside the VM and then use a client on the host to mount the directory. Bonus points if the host already comes with this client out of the box.
It's almost like perf is starting next week
"Robust" please. It's "I assign arbitrary weight to papers based on mood and vibe, and discount views I don't like about wet market vs lab leak"

Nothing wrong with a Bayesian approach to summing over your weights, but the weights are still subjective, no?
These dams don’t have fish ladders, and retrofitting them would cost astronomical amounts more than they could recover by selling the power.
I think that's because, before the HoTT extensions, all definable types could be seen as in the Category of Sets.

And they didn't get rid of Set and Prop entirely. They just made them default-imported symbols instead of keywords.
Based on the constraints and some of the comments, a different avenue would be to reduce your upfront ask.

Try and assess if you really need all the full-time employees you mention. You can get very far with part-time employees, freelancers and outsourced development till the point where you have an MVP built for which investors can put up money. If you really need FTEs, you can (partially)pay them in ESOPs of the company against future revenue.
I think it's somewhat similar to the "not invented here" syndrome, but more of a "not invented now" syndrome.

People (rightly or wrongly) believe the new technology is better suited to their problems.
I try to avoid bash because it keeps biting me whenever I try to learn it - `x=y` is different than `x = y`, for instance. I want this to die, and the only way for it to die is for people to stop using it.

Yes, it'll never truly die, but that's also true of COBOL and m4 - and you haven't learned either of those languages I'd guess.
Using the Radxa Rock Pi N10 NPU on Mainline Linux
So you ditched the old v4.4 Rockchip vendor kernel in favor of Mainline Linux and now half of your SBC doesn't work! Well, trouble no more, at least I'll help you get a working NPU for accelerated AI inference.
Awesome. I would be curious to see what the difference is between monsooned malabar and some more regularly stored beans.
Problem is, how can you determine if the model contains copyrighted material? The laws governs copyright through ownership, so in order to claim copyright infringement you have to be able pinpoint a specific person and prove that their work is somehow embedded in the gradients, which is not practically possible at the point. It's just like how you can't practically enforce copyright on encrypted data unless you ban encryption altogether.
It's also not true. Thick walls do wonders (eg, old apartment buildings in Germany are very quiet). It's only a problem with cheap construction.
Google maps can't be a cheap service to run. If this is the trade-off then ok.

There's always OSM
I'm in Montana and the river here during the spawn looks red with salmon. I don't know how many ladders they climbed, but it seems like they can work. These fish would have to have come up the Columbia river.

Somewhere up the thread, a 3% success rate was thrown out, so maybe some designs are better than others.
Nice, that's a great way to begin using it and testing the waters.
yeah nobody cares about the "Latest in <location>" menu that takes up a third of your phone's screen when you use the Maps app.
Webpage is getting hugged; https://web.archive.org/web/20230830223743/https://askthepil...
Apple Maps rendering surpassed Google a lil while ago. I still use Google for a variety of reasons but I do think Apple’s map design is superior.
> The new New York map above looks comically bad, almost like student-level work.

I found the new NY map refreshing because of its higher contrast between the streets and city blocks. Feels like it's easier to get a handle on what's on the screen. Granted, whenever a product gives me the opportunity to opt for increased contrast, I usually go for it.
If I understand you correctly, then yes, I have eventually decided that I should only compromise on performance where it hurts less, e.g. for IDE access. If you’re running your application on a web server inside the VM for example, then this is the place where you probably need the best performance possible since this is where you’re going to feel it the most.
Honestly yes, I usually am looking for restaurants etc nearby.
So... one that sucks?
has anyone earned that label but later been found not guilty?
> in fact, specifically the version of the proof assistant that the "script" was originally written for

Are Isar updates guaranteed not to break proofs?
It has nice error messages so you definitely don't need an IDE to edit scripts.