skysight-inc/HackerNews huggingface dataset:
I think this is more like calling something Mt. Kristallnacht and thinking that in poor taste, then renaming it something like, Mt. Viktor Frankl, honestly. We're not removing the fact that history happened, but we're stopping the celebration of terrible deeds.
Why are we still talking about broken notions of immutable systems when we actually have trusted execution environments and secure boot and cryptographically sealed strong assurances of what is executing at any point and can do secure upgrades, even with remotely attached secure storage and do it across a huge fleet of machines at very large scales?
Basically design in dependent types into the language right from the beginning (like Iris) - such that types are first class and can be computed and manipulated like any other language construct.
Vlad here, Kagi founder. Also an avid MTG player. I came up with the idea for that preview.
Use GenPatcher (https://legi.cc/downloads/genpatcher/) to make the original game work basically perfectly on modern OSes, as well as implement a bunch of stability, balance, and other optional fixes.
Sure but what would that have to do with subsidization?

What’s the GDP of New York City versus upstate?

As an aside this silly concept of “rural/urban divide” is just that.

Silly.

We need farms and farmers to feed us, it’s ok to subsidize some of these places so that happens.

It’s also ok for the people doing the subsidization to ask the rural people to stop complaining about “socialism” or other nonsense when they’re the primary benefactors of handouts.
Many people underestimate how much easier it is as a business to throw money at things than to actually solve possibly hard problems. "Database failover and scale to z1d.12xlarge" as a strategy is insanely cheap in comparison to spending days/weeks/months trying to prevent spikes from impacting performance.

As much as folks here might not want to hear it, throwing an army of mediocre (or, ideally, decent) developers at a problem and paying through the nose for managed infrastructure often winds up being a much (much!) cheaper way to arrive at a good outcome than a smaller number of more skilled engineers with a shoestring infrastructure budget.
Is this website reputable?

The related articles it's trying to give me are:

- Strengthening bone, not muscle, is the reason to lift weights

- Red meat is not a health risk. New study slams years of shoddy research

- Years of shoddy research have overstated the risk.

- What you eat can reprogram your genes

- How to eat if you want to age slowly

- Americans are ignoring the one true “superfood”
Feel free to try it out

sftp share@ohblog.net (no pw)

# grep share /etc/passwd /etc/shadow
/etc/passwd:share:x:5002:5000::/data/sftp/share:/bin/false
/etc/shadow:share::19614::::::

The partially redacted /etc/ssh/sshd_config is copied to /pub/ in the SFTP account.

If you can bypass the restriction please do share how it was done. I don't offer bug bounties but I think people would find it interesting. OS is Alpine Linux. All CPU mitigations are disabled in the VM. No MAC As in no SElinux or AppArmor. I won't complain, just pretty please don't DDoS the server or anything that would make that VPS do work.

Feel free to also tinker with the web and voice chat server on that node.
"Couldn’t load this chat. It doesn't exist or was deleted."

Hmmm...
Your account is 6 minutes old and your only comment is this one.
It means exactly what he said: he wants it to do good locally. There are other ways money can be used locally for good than building roads.
IMHO, the IC gave up on the feasibility of maintaining hegemony over encryption, particularly in the face of non-corporate open source. You can't sue a book / t-shirt / anonymous contributors.

Consequently, they still have highly motivated and talented cryptanalysts and vast resources, but they're attacking widely-deployed academically-sound crypto systems.

Hypothetical encryption-breaking machines (e.g. large quantum computers) are too obviously a double-edged sword: who else has one? And given that possibility, wouldn't you switch to algorithms more secure against them?

In reality, the NSA's preference would likely be that no-such machine exists, but rather there are brute-force attacks that require incredibly large and expensive amounts of computational resources. Because if it's just a money problem, the US can feel more confident that they're near the top of the pile.

Which probably means that their most efficient target has shifted from mathematical forced decryption to implementation attacks. Even the strongest safe has a weakest point. Which may still be strong, but is the best option if you need to get in.
Also, protein is pretty filling.

Boosting the RDA probably filters through to stuff like school lunch programs sooner or later. If school lunches needed to boost protein they'd likely do it at the expense of carbs and fat. Less bread and seed oils, more proteins for the kids - sounds like a win to me.
> saying “read the article” which is against the guidelines here

The guidelines say that you should not accuse someone of not having read the article. However, as the guidelines say it is fine to point out that something is mentioned in the article.

There is a subtle difference.

From the guidelines:

> Please don't comment on whether someone read an article. "Did you even read the article? It mentions that" can be shortened to "The article mentions that".

Parent comment was in line with the guidelines IMO.

And as for “TFA” as an acronym I like to read it as meaning “The Featured Article”. Then it seems nice and friendly.
F-35 Jet Is Missing After Pilot Parachutes Free in South Carolina
Fortunately, the fissile nuclear core was stored elsewhere on the aircraft

While I'll admit that is very effective failsafe, did they actually require the crew to do bomb surgery with a demon core during flight if they needed to arm the device?
No, it really isn't, any more than Darwin's Origin of Species is primarily about the evolution of humanity (Darwin later wrote an entire book on that later). It's just that most non-biologists don't care that much about the parts where Darwin or Haldane were talking about animals and their evolution or optimal size and just fixate on the parts dealing with humanity.
> Most ISPs in the US already provide IPv6. 45% of users...

Is that distorted by cellular providers?

I know my wired ISP does not provide IPv6, even when I explicitly asked for it. They do CGNAT for most customers and assign a static IPv4 to anyone who complains (and then try to start charging for it a year later).

The ISP at my previous home was also IPv4 only (although, thankfully, no CGNAT).
One real problem is the friendliness of the numbers allocation.

IPv6 had one job: make more addresses available while keeping the addresses easy to manipulate, and it failed at that.

"Well-known" NAT64 prefix: 64:ff9b::

Everything is so confusing in numbering and addressing:
http://www.gestioip.net/cgi-bin/subnet_calculator.cgi?ip=006...

=

If problem was allocation, we could have added one number in front:
123.114.123.130.200

Now for backward compatibility:

If your device, operating system and application are compatible with IPv6, congratulations, you receive 123.114.123.130.200 and talk natively in IPv6.

Otherwise, if you are on an IPv4 device, you receive only a portion of the IP address but from a fake IP starting with 250.x.x.x

inetnum: 250.0.0.0 - 250.255.255.255

organisation: Future use

status: RESERVED

Technically, in the IP packets, we would have added "IPv6 address", and called the current field "Legacy/backward-compatibility IPv4 address".

For example, your local home/ISP router can send a truncated version of the IP address: 250.123.130.200
and then it's the responsibility of this translation router to remember the routes at least for some time (and there is always possibility to hardcode routes if needed).

=

A bit like Stateful NAT64 or "SIIT-DC: Stateless IP/ICMP Translation for IPv6 Data Center Environments" or "464XLAT: Combination of Stateful and Stateless Translation"

But now, with all these millions of standards it's such a productivity loss for any tech working in networking.

Similarly when switching CPUs over from 32 bits to 64 bits, the idea was to change the size of words stored in memory, not change the size of words and change the alphabet in use.
Churches do usually do mutual aid though. And sometimes much more humanely than the government.

(Fwiw I’m not a Christian nor do I care for religion)
Even 30 years ago, the core argument would have been nonsensical.

1. They introduce their argument as if it is solely about shell access (the conclusion also only mentions "login access control"), but then the first example/statement they make is about non-shell access (Samba, IMAP, Apache).

2. The second argument conflates authentication and authorization, and concludes that to implement shell authorization properly, your only choice is to provide multiple authentication systems.

Zero effort is spent on explaining why existing/historic shell authorization systems (such as simple DAC groups or rbash) are inadequate, and it's not clear to me what threat model they are using to arrive at their conclusion.

edit: rethinking this, I think TFA is just lacking a clear problem statement. They seem to be talking specifically about non-shell services that (ab)use the user's shell field in /etc/passwd as authorization information, and then complaining that many services did not follow suit.
From the code perspective, pretty nice, they decided to work with C# and don't use any Engine.. it would be nice however if we had more documentation about it internals, architecture and etc.
> Extending address is fully possible, and if we drop requirement that the extended part be individually routable, even simple.

No it is not:

* You also have to deploy new DNS code to handle a new record type to handle longer "IPv4+" addresses.

* You also have to deploy new OS and library code with new socket, etc, APIs because all in_addr_t definitions and data structures are 32-bit-only.

If a public service has a "IPv4+" address, how does a not-IPv4+ host, or not-IPv4+ compliant code handle it? If you want >4B addresses you have to tweak all the code that touches address structures. You have to (re)deploy code on all the network elements that touch the packet bits: all the end-user applications (browsers, chat clients, etc), all the end-user operating systems, all the middle-boxes, all the routers. If you have network devices and segments between the public service and the client that are not IPv4+ compliant, you have to configure the clients to send the IPv4+ traffic to translation boxes that are IPv4+ compliant.

Basically all the stuff that is happening with IPv6.
More like "We're sorry you all are idiots that can't understand our Very Clear (TM) designs. I forgive you for your ignorance."
Now take your system and make it multi tenant. Imagine the horror of doing that. This is what you often get with "off the shelf". There's a lot of broken dreams either way you go.
Being logged in while making search queries in search engines poses significant privacy risks. The searches can paint a comprehensive profile of the user, and these data often remain stored for extended periods. There's a chance this information might be shared with third parties. Coupled with other user data, these logged-in searches can pave the way for targeted advertising, sophisticated predictive analysis, and potential exploitation by governments or malicious entities. In the event of data breaches, the user's logged-in search histories can be exposed. Furthermore, users typically don't have clear insight into how their data is utilized when logged in.

I hope Kagi introduces an anonymous access feature. For instance, it could incorporate zero-knowledge proofs (ZKPs). These are cryptographic techniques where one party (the prover) can confirm to another (the verifier) that a claim is accurate without disclosing any additional information. This is especially beneficial for authentication scenarios where it's essential to avoid sharing extra details.

To implement zero-knowledge authentication for quota API access:

1. Token Creation:

- Each month, users receive a token tied to their identity and quota.

- The token can be split for use on multiple devices using cryptographic methods.

2. API Access:

- Clients present a zero-knowledge proof (ZKP) to confirm they have a valid token and haven't used up their quota. The server verifies this without seeing the exact details.

3. Client Synchronization:

- Each client tracks its quota usage.

- Synchronization can be peer-to-peer or through a centralized, encrypted server to prevent double spending of the quota.

4. Quota Renewal:

- Monthly, old tokens expire, and new tokens are issued.

Challenges:

- ZKPs can be resource-intensive.

- Token security is crucial; there should be a way to handle lost or compromised tokens.

- The system should prevent quota "double-spending" across devices.

- If a centralized server is used for synchronization, it should operate with encrypted data.

This way Kagi would only know who their customers are but not what kind of searches they make.
Just flag and ignore.
Strategies also decay. Every quant fund is constantly generating new algorithms, because the value of old algorithms drops over time as others discover them.
Yeah, IBM mainframes still use VM and run CMS and other OS inside the VM. IBM was slow to the timesharing party, their plan to make "one OS" for the 360 failed utterly, and some academics got the idea for VM that became the real OS strategy for the 370 and future machines, I saw a Youtube
video where people demo VM in 1975

https://www.youtube.com/watch?v=Mo2q7d5dJgg

personally I remember using it on an IBM 3090 at the New Hampshire Insurance company in the late 1980s when I was in the computer explorers.

Sometime I think about setting up a PDP-11 emulator and running RSTS/E in it for old times sake.

I also really enjoyed running OS/9 on a TRS-80 color computer, which was a really cheap machine with serious limitations (32 character display) but I had mine (I think a Coco 3 at that point) hooked up to a TRS-80 Model 100 and a DEC printing terminal so I had a Unix-like experience on three consoles, my impression was that OS/9 was a better OS than anything mainstream on IBM PC hardware at the time.
Plus, if some of the Motorcycles were donated from private people, will the downer or their estate get the funds ?

Seems like the owners realized they are sitting on a gold mine and will cash in with the auction.
This needs clarification. If you can gift it anywhere, can you gift it back to Tokyo (for example)? I would think that the kickback that the place you actually live (services, access to events, etc) would be more valuable to the taxpayer than would be services in a city where you don't live.
The only way for them to regain trust is for top executives to resign, starting with the CEO. The breach of trust is so severe, you can't take anything they say at face value, and you can't trust them to not try this again.

This is the second time they've tried to change the terms retroactively, and this time they broke their promise to not try it again.
https://news.ycombinator.com/item?id=37535554 [dupe]
I still have yet to understand if Zig actually provides memory safety in the same manner Rust does or not, it seems like its another C like language without memory safety? Or did I happen to miss that bit?
Never heard of this incident before, so dived in and did some quick history-over-morning-coffee.

Apparently a large group of Indians - men, women, children, were told they could safely settle in a designated area in the vicinity (~30 miles) of Fort Lyon. Then one day this guy Colonel John Chivington, rolled up with his cavalry regiment.

Despite seeing the flags of "no hostility" and being approached by a known American liaison who had been living in the Indian camp (he basically told the liaison to fuck off), Chivington ordered his men to open fire on the Indians.

They killed somewhere between 150 and 750 Indians. Two-thirds of which turned out to be women and children. It was pretty much just cold blooded murder, done on what was promised to be safe land.

There was intense public outrage over the massacre, which led to congressional inquiry. Ultimately they found Chivington had acted "wrongly", but as far I as can tell, he was never charged with anything. He did resign from the military shortly afterwards though. It is also noted that he could never pursue his political aspirations, because the public had such a dim view of him.
It means that the donations to the church are generally tax deductible, and thus divert some money from the federal government to the church. And the church likely has many charitable activities.
Best Practices for OAuth and Mobile Apps [video]
I think the use of rotation to visualize the relative speed of clocks was a good design choice both functionally and aesthetically.

That being said, as a hobbyist physicist I can't be too immediately sure about the accuracy eg. @ ~2:50, tho it does appear that the cubes further away are rotating faster which is consistent with the concept of "time ticking slower for the thing moving faster."
Porting Caves of Qud to Godot
I used MacOS for a few years but when it came time to get a new computer I switched back to Linux because nothing actually worked better in MacOS, and a few things worked worse. I think the best advantage to MacOS is knowing you'll have drivers, but that's a moot point for me because I buy hardware I know will work well with Linux. The "switch to Apple for things to work" narrative is a big meme.
> Taxes should go to your current city/state to run the services there.

Generally, families in rural areas have more children than families in big cities. There should be some kind of monetary compensation (money transfer from cities to rural areas) for the rural areas than produce more people, who then move to cities and contribute to their economy. This Japanese system sounds good.
I'm happy with the way things turned out. Obviously can't disclose detail on our arrangement, but I'll say there was nothing scummy here. I just hope the MrBeast org can get to a phase where they have more time for planning out any video requiring technical integration.
Billing in general is very hard. Especially subscription billing. Just from my experience in building billing and also later on using a third party system for another projects, I can mention so many edge cases:

1. Grandfathering

2. Upgrading across different length memberships (monthly tier 1 to yearly tier 2)

3. Crossgrading across different lengths (monthly tier 1 to quarterly tier 1)

4. Offering free trial to tier 2 when user has tier 1.

5. Promotional offers to non-paying users (half off first month)

6. Downgrades

7. Applying coupons to accounts (customer support wants to offer a specific user a free month of service when user has a quarterly subscription: billing schedule change)

8. Differences in tax regulations across countries (VAT vs whole value tax)

9. Differences in display prices (in some countries displayed prices should include tax)

10. Handling currency exchange rate changes.
What if you have a passport from that country? You're still technically "using their services" (their diplomatic presence and apparatus) wherever you go, no?
Exactly, since its not doing whole program synthesis im thinking it could be done with fewer parameters. However program synthesis is part of the loss function.
Create AI Agents in Ruby: Implementing the ReAct Approach
I've been frustrated by the fact that people still believe that python is some sort of magical default to build LLM apps. It's not. English is the new programming language.

White paper for reference:
https://arxiv.org/abs/2210.03629

Notice how the prompt used in Langchain (python)
https://github.com/langchain-ai/langchain/blob/d21a494a27639...

Is the same as it is in Langchain.rb (ruby)
https://github.com/andreibondarev/langchainrb/blob/6fc2b962c...
Because you really don't want heavily polluting industries (oil refineries, chemical plants, steel mills, etc) close to a big city.
The challenge is selling it.

I did devops contracting for years, and I gave my customers a standing offer: If they were not sure they'd save money, I'd guarantee they'd save money, including on my ongoing fees, if they moved to managed hosting instead of cloud, and I'd charge them a percentage of their savings over the first few months only to do the transition.

Even in the face of that, and extensive spreadsheets, it was always a big challenge to convince people to try even with smaller parts of their services. AWS is a known entity. It's not a career risk. If something goes wrong, they have someone to blame. Of the ones that did take me up, one cut their costs (including the devops) by 90%. More typically 50%-70%.

And you're making that effort to make far narrower margins.
> I still have yet to understand if Zig actually provides memory safety in the same manner Rust does or not

It doesn't.
It’s a millennial generation thing. Nobody older or younger takes it this seriously.
Would be good to understand the source of the claim at the top. Not casting judgment, and they are nutrition folks, but there may be a profit motive behind the funding/research.

https://www.abbottnutrition.com/our-brands
Not if they are kernel related, and only since APEX became a thing on Android in Android 10.

However, it doesn't change the main point, most phone users care about updates on their phone as much as they care about updating any other device with a CPU in their home.
This article is so confusing in what it tries to conclude.

Was it a spy balloon?

Was it spying?

Was it an accident?

None of these questions are genuinely answered.

Was it an innocent weather balloon or a covert device?
All taxation is redistribution. This is a novel tweak to taxation.

I think all tax payers wherever should get some form of choice in where their tax money goes even if it's only a small proportion of the total.
If it's any consolation, I still talk like I used to IRL ;)
Yeah, the early ones were designed to be armed in-flight.

https://www.globalsecurity.org/wmd/systems/mk6.htm

> This weapon was a capsule bomb, meaning that the nuclear material for the bomb was kept in a special capsule separate from the rest of the device for safety's sake. Just before the bomb was to be dropped from the delivery aircraft the capsule was inserted into the bomb casing and the weapon became armed. It was also the first atomic weapon to offer the delivery aircraft's bombardier the option of changing the detonation altitude while the bomber was in flight to the target.
I built a simple 16-bit RISC processor with a custom instruction set during my engineering coursework...inside a Xilinx Artix-7 FPGA. It was still a lot of work.

> Given that with a PCB instead of a breadboard you'd get higher density...

I can see the appeal of wanting to do this with individual gates on a PCB instead of using Verilog (you can draw bare gates and let Vivado synthesize that too), but you'd have to be crazy to want to do this with breadboards! I can only imagine the frustration of dealing with signal integrity across the ratsnest of individual wires. Which connection looks good but has a loose spring terminal? Yikes! Soldering on perfboard or old-school wire wrap would seem much more reliable, and PCBs are so cheap now that I'd go in that direction for sure.
No one is forcing small towns to stop existing. Young people just don't want to live in them. And yes, I do think they should get fewer facilities because they can't afford them. I'm sure every geriatric town would love a world class cancer treatment center, but they're gonna have to suck it up.
I'd really like if 14ers.com had a thumbs up/down option for comments. A similar forum, letsrun.com, has an order of magnitude higher number of vile comments like this, but after the recent introduction of voting you see that something like this would has at least 90% thumbs downs and restore your faith in humanity a little bit.