skysight-inc/HackerNews huggingface dataset:
I'm just wondering when we're gonna get tagged filesystems. Maybe something partially hierarchical. Would love a book/ directory that i can query for 'sci-fi' or 'specification'. I guess one could implement it using sym-links :^)
> They famously don't let you leave with them until they've seen you put them in correctly yourself

It's the same in the US.

(Well I'm sure if you insisted they'd let you, but standard practice is to try again the next day. I know people who had to go several times before buying contacts)
A bit disingenuous to say that you can run the whole process when you actually cannot run what the author calls the "download" on OpenBSD.

Can you print stuff if you only have OpenBSD? Yes. But can you print stuff while running the full stack on OpenBSD? No.

And there's nothing special about the first one, you could do that since a long time since there are online CAD software and online slicers.
I think it's a Gnome bug or something, but whenever I use Waypipe I keep getting "this application is not responding" popups.

The internet suggests increasing the responsiveness checker or disabling it entirely, but that makes Firefox unresponsive to mouse input.

Waypipe does have some great hardware acceleration advantages over remote X11 sessions, but for me it's currently not usable.
It's even worse because whoever has enough free time to lurk and misinform also has the free time to network, so those people won't get necessarily banned but sometimes also be rewarded for being active in the community.

For example there's a bot Discord servers can utilize that awards users with points and levels for nothing more than volume. So you see the colored name and the wall of ranks and the beginner thinks "so they're recognized as an authority around here therefore they're correct".
This is where some kind of chaos monkey might be good. Imagine something that randomly slacks from one human account to another asking for passwords and then the receiver has to press a "suspect message" button as a form of ongoing awareness training.

As part of that a genuine ask for a password would get the same response, and perhaps the button sends a nice message like "Looks like you have asked for a password. We get it, sometimes you need to get the job done, but please try to avoid this as it can make us insecure. Please read our security policy document here."
> a bank of 0-days, we don't know how deep.

I think Apple should randomize data structure ordering, change flags and logic in the the memory allocator, and choose a different set of compiler optimizations with every release.

At least that way, most exploits and bugs will at least require an expert to put in substantial effort to update them to work on a new OS release, and many exploits won't be possible at all on a new release - if for example the exploit allows a stack buffer to overrun by 1 byte, then it depends what data follows the buffer - and if the compiler randomizes that, then in the next release it might become non-exploitable.
Instagram for sound? You must know some people that use it very different than the people I know (if they're even still there).
I have given up. I now mostly have generic buckets but get super specific file names. E.g one I just saw is “Drawing of rising main chairing beam with solid chairs.pdf” and then use void tools everything to search for it
Along with gfw.report, Project X on github and their telegram channel also contain their latest report on gfw.
Also, looks like that Birb is from 2021 - the black bird emoji only showed up last year.
This is quite interesting:

"Your ability to manipulate a phone is based primarily on its mass, but also on its moment of inertia. And since the reduction in mass when switching from stainless steel to titanium is occurring almost entirely at the perimeter of the phone, the moment of inertia should be reduced more than if the mass were reduced uniformly."

Author goes on to actually compute the moment of inertia but that goes over my head. Intuitively though it seems right when I think about moving a heavy ball at the end of a rod vs. at the nearby end of the rod.
I have to suspect they thought whoever was gullible enough to pay $3-6 a month for an alarm app would surely not care about their data going along with it.
It's funny, I've watched IMSAI Guy's videos on electronics but hadn't actually watched the videos about IMSAI. Thanks!
hopefully it can be solved with the target API, the target API knows who is calling this API, the service has user information. Or this will be translated into "Play the most played playlist", and the action will be enough.

I agree with you in general though, more useful AI is, more data it will need to see. I strongly believe companies like Microsoft, Google or Apple will bring the best experience because they own operating systems. It is going to be very hard for a third party to build a general AI assistant.
Which in turn means we need more surveillance projects to catch them - and that will increase their costs of doing business.
I’d be so funny (at least for an outsider) to see an office where there’s a lot of corpo speak mixed with this.

- we need to raise the bar for 34.18. where are the deliverables for 56.17?

- the 65.18 objectives changed, so they will be 14.27 on 11.13

- wait, 11.13, mmeaning the docs or a date?

- I’ll check and ping you

Is this an early sign that AI is taking over?
> Girokarte is a synonym for Debitkarte

I'm not sure how to handle this because it's both incorrect in technical language (Girocards are exclusive to a particular payment infrastructure that only exists in Germany, unless partnered with a separate payment infrastructure, but the co-branded payment infrastructure is only used outside of Germany [1]) as well as incorrect with respect to my experience with everyday language, including all of the links I've provided including from official government sources.

But I agree on one thing: it's a waste of time to keep talking about this.

[1] https://de.wikipedia.org/wiki/Girocard
>What are the odds...

Almost zero, if China with 1.5 billion people, unlimited money and lots of motivation couldn't hack into iOS then there is no way Israel can do it Multiple times... Just think about it...

It would be a lot easier to just believe Apple gave backdoor access to the Israeli intelligence, it would explain why Europe is at their throat recently after Israel sold Pegasus to Morocco who used it to spy on French journalists and politicians which led to Morocco recognizing Israel and the US recognizing the western sahara and putting an embassy there, now those waters (between the canary islands and morocco) aren't the EU's but are shared with Morocco aka the US, and it all happened after discovering that mineral rich mountain (mount Tropic) that has lots of minerals used in battery manufactoring. That's just my tinfoily theory for the day... I don't believe all of it but I don't disregard that possibility...
They want to consider normal connections legitimate, and only detect tunnels.
Intentional choice.
Don't even go there with the symlinks. My mother made a family tree on windows with folders and shortcuts. It broke OneDrive and robocopy completely. I don't even know how to help her fix it.
Starlink surges but is still far short of SpaceX’s goals
Do you realise that there are many reporting and analytics cases where SQLite is a great fit?
No goose but the wing? Disappointing.
> first read the error message clearly and try understand it,

Derail, but this right here is the key to debugging superpowers. I can't even count the number of times I have amazed juniors with my genius when all I did is read them the error message and ask them under what circumstances could that be true.

A corollary that's just as important is "believe the error messages - they are telling you the literal truth." Hard to believe how often we implicitly disbelieve what the compiler or runtime is telling us.
I really love XFCE. I used it on and off on low-resource machines since the late 00s, and then moved to it for my main desktop when the Gnome3 thing happened. I've never looked back (though I'll admit I'm also a macbook user!).

What do I like? It's never forced me to change the way I work. That's up to me.

So if Wayland is the future, then I look forward to using XFCE on Wayland somewhere down the line too.
Believe it or not, having a very light stomach gives a big boost to energy levels and alertness. On the inevitable days I feel very dull (mostly afternoons) I follow yoga nidra practises for about 20 minutes ( it’s on YouTube. Pick any ) . It’s also called NSDR ( non sleep deep relaxation ) if you’re a fan of Huberman
I can't think of a single place that's cheaper to fly to than the price of contacts in the US. No, not Canada.
https://archive.ph/kVNie
Super helpful - looked it up, will aim to apply next time!

Curious how the bonferroni correction applies in cases where the overlap is partial - IE, experiment A ran from Day 1 to 14, and experiment B ran (on the same group) from days 8 to 21. Do you just apply the correction as if there was full overlap?
microStudio: Free, open source game engine online
True, why are people so eager to pick up the phone.

The millenials are right in not picking up the phone
Unfortunately not. Laws themselves are usually available for free online, but standards that laws and statues reference are in general not, and interpretation of law from cases is not in general directly available even if the cases themselves are.
> Again, for mobile games, that's 5% after 1m in revenue, which also includes Apple and Google's 30% cut. So again, no, it's really not a good deal _at all_.

5% of 70%? Or 30% + 5%?

Regardless, price your game in a way that makes you money.
It's 3 in the morning and I couldn't stop laughing out loud when I read this. Poor OneDrive lol.

I hope she managed to keep all her files and didn't lose anything.
There are some attempts using Fuse on Linux.

At least one I tried ages ago was one you could use to browse your music collection, it automatically generated "directories" based on mp3tags.
But surely answering questions in a public discoverable website reaches more customers than a discord server. The utility provided is not the same.
I hope you can get the help you need
Are they? Are they still asking about "mother's maiden name"?!
Yes. But the engine is at least fifty years old and so I'm not inclined to run it just for electricity. Plus it doesn't do it any good to run in idle without any change in revs.
Interesting, but almost zero details. I'm guessing that, since the site is an LNG plant, they have an existing LNG-to-H2 plant that dumps CO2 and they wish to serve the same market (which market?) with a greener version?
No, normal entries state PID and binary path like so:

1128 root /usr/sbin/NetworkManager

But these I'm concerned about look like below, no PID, no binary, just ip pairs. Here you can see various ips making connection to my machine in this very moment:

? root 184.104.179.141:443-172.20.13.34:35542
? root 104.18.21.226:80-172.20.13.34:39954
? root 142.250.186.66:443-172.20.13.34:46432
? root 142.250.186.104:443-172.20.13.34:44694
? root 172.217.16.195:443-172.20.13.34:53760
? root 104.17.24.14:443-172.20.13.34:57900
? root 172.20.13.34:54150-151.101.193.91:443
? root 172.20.13.34:54140-151.101.193.91:443
? root 172.217.16.130:443-172.20.13.34:49666
? root 151.101.193.91:443-172.20.13.34:54136
? root 142.250.186.138:443-172.20.13.34:53846
? root 104.16.57.101:443-172.20.13.34:47984
? root 172.20.13.34:51666-104.26.4.15:443
? root 104.26.4.15:443-172.20.13.34:51650
? root 34.120.115.102:443-172.20.13.34:40004
? root 34.120.208.123:443-172.20.13.34:46076
? root 104.16.219.84:443-172.20.13.34:44896
? root 142.250.184.196:443-172.20.13.34:37102

Also, normal services I can control with opensnitch, but these don't trigger prompt and go in the background.

If you have a linux machine and a moment, install nethogs and see for yourself.
I factually agree with what you're saying, but I don't think it really changes the practical outcome of the situation: a private organization is available for-hire to arbitrarily root and snoop on fully patched iOS devices at state-level actor scale. If they get the exploits from in-house or elsewhere, the outcome is basically the same.

Whether there's "Pegasus" attribution or not, the reality of the contemporary internet is: if you're targeted hard enough, you're probably screwed. (....but you're probably not actually targeted that hard, so practice good practices)

That being said, I agree with others that it's probably a good technical, PR, and long-term "marketability to regimes" approach for Apple to just double down and spend millions instead of thousands on competing with the black market to buy 0-days.
The Oceans May Be Our Best Shot at Slowing Climate Catastrophe
Previous discussion:

https://news.ycombinator.com/item?id=29482163 (224 points | Dec 8, 2021 | 44 comments)
The constant GTK rewrites are a disaster. Why should applications even bother starting with GTK(n) if it will be obsolete and incompatible when GTK(n+1) comes around?
> Order of operations depends on data? This would make compiling the language basically impossible, but you could probably get away with it in an interpreter.

This is not even a hypothetical feature. There is at least one language which used a type information to resolve associativity [1]. I have even used one, it works, but was very hard to get accustomed for me.

[1] https://dl.acm.org/doi/10.1145/1596655.1596667 (especially search for "juxtaposition")
> GTK4 doesn't support fractional scaling but I believe GTK5 might.

I do not think this is current info, but otherwise might be the reason as it is an experimental feature.

For example, you can enable fractional scaling in GNOME right now.

https://www.youtube.com/watch?v=BjfZ8TSXsps

This phoronix article shows the variable to enable it in GTK.

https://www.phoronix.com/news/GTK-4.11.1

Edit: added a little clarification + cited the specific bit of text I was responding to.
> On discord, I had to log in and join their group to ask about an error message, only to find it’s a common issue and there’s a few troubleshooting steps.

> On GitHub, I had to log in and search their thousands of issues to find an error message, only to find it's like three closed issues without any replies and there's one troubleshooting step in chinese.

I don't see how this would be an issue exclusive with Discord rather than the project itself.
It takes not a lot of time to disable the toolbar or activate zen / distraction free mode.
No.

(The code being valid s-sexps doesn’t even guarantee it’s syntactically valid after macro expansion, but even if it does this is a bad idea.)
Apple tried doing this with "tag" in the file system but most people don't use it.
I use it! :)
>MacOS X, Windows and the mainstream Linux DEs have nice animations, but it is fun watching them the first day. After that it is just annoying.

Wobbly Windows are amazing and never get old. It's been years, and I still get joy from them.

I'm sure there are other nice effects too, but I don't feel that strongly about them - Wobbly Windows are the hill I'd die on.
Tagging + searching.

I tried the organisation thing and it always falls down somewhere, when an item is supposed to be in multiple places at once.

Especially now when Obsidian supports Properties on pages as first-class things combined with Omnisearch makes it a lot easier to just search for whatever I'm looking for.

I still have crude categories like "projects", "recipes" and "RPG" with subfolders for each campaign, but that's about it.
I learned HTML when XHTML 1.0 was current. I've long preferred strict HTML written using XML. It helps spotting mistakes, and there are no parsing surprise.

Now that HTML5 parsing is well specified, I've come to think that either you want to be strict and have the browser tell you something is wrong, and you use XHTML for this, or all these optional tags are just useless.

I want to optimize readability, and then file size. I believe closing all tags you opened and quoting all attributes helps readability, and also that all these <head>, <body>, <html> tags just get in the way and make your eyes go through useless boilerplate and makes your fingers type useless things too if you don't use templates.

You still need to specify the charset so characters are interpreted correctly, so for me, if you are not going to use application/html+xml anyway this works well:

<!DOCTYPE html>
<meta charset="utf-8" />
<title> My title </title>

<p> Lorem ipsum... </p>

Both quicker to read and write, while not raising maintenance costs.

Though just yesterday I edited my resume written in XHTML and the browser actually spotted a dumb mistake, so I still like the strictness of the XML parsing mode.

One counterpoint to dropping the optional tags is for pedagogy: if I had to teach HTML to someone, I would make them use all the tags, or the result of having html and body in the DOM and CSS working on them will be very confusing. Only when they understand the DOM, what nodes are in an HTML page, I'd make them drop the tags if they want. Which is an important step so they can understand that nodes that are present in the DOM are not necessarily in the source code.
Just checked and I've got my current laptop screen set to 175% global scaling for a 3840x2160 screen.
I did for years and it was perfectly fine. But then I got hooked on the additional Spring configuration support that comes with the Ultimate edition
But yes, IntelliJ Community edition feels very complete for a lot of programming tasks (my experience is mostly Java/Kotlin projects with a bit of web frontend & Rust on the side). It comes with debugging but not with a profiler (which I still haven't used )
So try the community edition and see if you miss anything! Chances are you won't.
Someone who has little but doesn't spend too much will generally have good credit.

No. Living within your means makes you wind up with no credit.

Utilities and landlords rarely report your on-time payments, after all. You have no history, and you need to prove yourself instead of the lenders assuming you are responsible.

And I'll mention here that different places hound folks with a recent bankruptcy, despite a variety of debt issues that led to bankruptcy.

And you can't even measure responsibility from whether or not it is medical debt. I struggled in my early to mid 20's because my then spouse wound up with a major mental health issue. He wound up on disability, and before (and sometimes after) would take money from our account or out of my purse. I know in hindsight that I should have taken different actions, but I didn't think about it in the midst of constant stress.

And at least I was finally able to leave, some years too late, but that shouldn't be required. I left due to unhappiness, not because of the illness. It would be worse if it were a child's sickness that caused the struggle - the bills might be in the spouse's name instead of yours. None of that would show up on a credit report.
How do you connect to AWS Workspace? Never used it before.

Have you tried opening a bug with them to see if just got broke in your display manager?
The easiest way for a bad actor to get access to personal data on iPhone or Android is to simply ask for it --- create a junk installed app with some quasi-plausible excuse for requesting it. There is no restriction on what can be done with the data once the request is granted.

PWAs don't have this problem.
> Tagging/labelling with attributes is the only viable solution that I've found.

What's your solution for a new tag being introduced late, which could/should be retroactively applied to already tagged media?

Re-tag the entire inventory by hand? Re-tag automatically with some ML/AI tool after you've tagged enough media to train a discriminator? Or just live with old inventory not having that tag?
> cannot run what the author calls the "download" on OpenBSD.

What do you mean? It seems like he can do that just fine. Either via USB/sd or the webbrowser.
Oh no, I can't believe I missed that!

I think I like the wing for the phoenix combinator actually. What other combinator could the goose be matched with? Hmm...
On Wayland, GTK3/4 windows work well with fractional scaling (on GNOME). They are rendered at 200% and then downscaled by the compositor, which looks mostly fine.

Blurryness is often caused by GTK2/old Qt5/Electron applications that don't support Wayland and are rendered using XWayland at 100% and then upscaled by the compositor.
Doesn’t work On iOS and Mac and when written in c#. So that’s more like a Preview version.
He reported as a security problem that you can post something like
<a href="https://google.com">Bing</a>? And he did that twice? Awesome. I wouldn't have had the cojones.
Well then, the translation is not an issue
TBH that just sounds like bad design. The manufacturer could easily have granted that permission out of the box and you'd be none the wiser. A lot of built-in apps have permissions that can't be viewed by the user
I had gotten a bit of nostalgia reading an earlier article about the Altair (which this is a clone of) back in 2020. I can't find them on eBay now, but at the time, you could get an Arduino Due based clone of the Altair, so I bought one:

https://imgur.com/a/qntqSMG

Haven't played with it for a while, but I did get it to run Fuzix...a pretty minimalist unix-like OS.
While this is worthwhile, there is an opportunity for the math to violate your assumptions in a way you didn't understand. Let's talk briefly about TLS 1.3 Selfie attacks.

TLS 1.3 is the first TLS in which experts built a formally verified model of the protocol before they shipped the standard. There are models of earlier TLS versions, but nothing learned from them could be incorporated into the corresponding standard because they were an afterthought - like writing unit tests after shipping version 1.0

TLS 1.3 has a mode intended for applications where some nodes which have a pre-existing relationship communicate, in this case we don't need the Web PKI ("SSL certificates") instead we use Pre-shared Keys (PSKs) - that is all the parties know the keys anyway, which clearly couldn't work for the open web but is fine for my boiler and its remote thermostat since duh, I don't want some random other person's thermostat talking to my boiler. PSKs are also used when you connect to the same server again later, but that doesn't matter here.

The mathematical proof seemed to say exactly what the designers wanted, and it passed. So TLS 1.3 is exactly what we wanted... right? Well, almost. Designers were thinking of symmetries like "Alice talks to Bob" and "Bob talks to Alice" as one conversation, but the proof thinks that's two conversations. So the proof thinks Alice and Bob need two keys, the Alice->Bob key and the Bob->Alice key, while humans assumed they only need a single key, an Alice-x-Bob key. And so the RFC documents (prior to errata) the human assumption but the protocol actually requires the machine assumption.

The result is the Selfie Attack. In our scenario Alice, and Bob have a Cat. The Cat, like many cats, would like more food, but Alice and Bob use a secure protocol to ensure they only feed the cat once.

Bob has fed the cat and left. The cat is sat by an empty food bowl looking plaintive. Alice sends Bob an encrypted message, "Did you feed the cat?". The Cat intercepts the message, it doesn't have the Alice-x-Bob key so it can't decrypt this message nor directly answer it, but it doesn't need to. The Cat simply sends Alice's own message back to her. Receiving a message encrypted with the Alice-x-Bob key, Alice concludes it's from Bob. "Did you feed the cat?". So she replies "No, I did not feed the cat". The cat receives this message too, and directs it back to Alice as well, now Alice has what appears to be a reply to her first question, "No, I did not feed the cat" encrypted with the Alice-x-Bob key. So, Alice feeds the cat again because the cat was able to trick her into answering her own question.