skysight-inc/HackerNews huggingface dataset:
That's what Opus did. The RFC[1] has a base-64 encoded libopus.tar.gz appendix (Appendix A), which is the "primary normative part of this [Opus] specification." If the prose and source code disagree, the source code takes priority and "wins" when it comes to which is normative.

I have a love-hate relationship with this approach.

[1]: https://datatracker.ietf.org/doc/html/rfc6716
>only beautiful country where old women still gather acorns by hand, and 80 year-old men who are free to hone their lifelong craft of making tofu.

This is absolutely the atmosphere of My Neighbor Totoro.
Can somebody translate this to english? A shell was never an access control mechanism. It was a prompt at which you could type commands to run. As a hack they added authentication to it some time in the 60's at MIT.

> Today, the only two measures of login access control that really work in a general environment are either scrambling the login's password (and disable any SSH authorized keys) or excluding the login entirely from your various authentication data sources (your LDAP servers, your Apache htpasswd files, and so on). It's a pity that changing people's shells is no longer enough (it was both easy and convenient), but that's how the environment has evolved.

This literally makes no sense. Scrambling a login password is not an access control mechanism. Excluding "a login" (a what?) from an authentication data source... the hell does this mean? You mean disabling a user account?

The last part, "changing a user's shell", makes a little sense, as you used to be able to prevent a user from logging in by changing their shell to "/bin/false" or something, but that isn't disabling authentication, that's just breaking the shell. Authentication still works if the shell has changed, it just can't execute the shell after you authenticate.

The proper way of disabling the account is to set the "disabled account" bit in the shadow or password file. But that's just one authentication mechanism (NSS). There is no universal authentication mechanism, so for any other given authentication mechanism, you need to disable it however that given method allows you.
Show HN: HyperDX – open-source dev-friendly Datadog alternative
Hi HN, Mike and Warren here! We've been building HyperDX (hyperdx.io). HyperDX allows you to easily search and correlate logs, traces, metrics (alpha), and session replays all in one place. For example, if a user reports a bug “this button doesn't work," an engineer can play back what the user was doing in their browser and trace API calls back to the backend logs for that specific request, all from a single view.

Github Repo: https://github.com/hyperdxio/hyperdx

Coming from an observability nerd background, with Warren being SRE #1 at his last startup and me previously leading dev experience at LogDNA/Mezmo, we knew there were gaps in the existing tools we were used to using. Our previous stack of tools like Bugsnag, LogRocket, and Cloudwatch required us to switch between different tools, correlate timestamps (UTC? local?), and manually cross-check IDs to piece together what was actually happening. This often made meant small issues required hours of frustration to root cause.

Other tools like Datadog or New Relic come with high price tags - when estimating costs for Datadog in the past, we found that our Datadog bill would exceed our AWS bill! Other teams have had to adjust their infrastructure just to appease the Datadog pricing model.

To build HyperDX, we've centralized all the telemetry in one place by leveraging OpenTelemetry (a CNCF project for standardizing/collecting telemetry) to pull and correlate logs, metrics, traces, and replays. In-app, we can correlate your logs/traces together in one panel by joining everything automatically via trace ids and session ids, so you can go from log <> trace <> replay in the same panel. To keep costs low, we store everything in Clickhouse (w/ S3 backing) to make it extremely affordable to store large amounts of data (compared to Elasticsearch) while still being able to query it efficiently (compared to services like Cloudwatch or Loki), in large part thanks to Clickhouse's bloom filters + columnar layout.

On top of that, we've focused on providing a smooth developer experience (the DX in HyperDX!). This includes features like native parsing of JSON logs, full-text search on any log or trace, 2-click alert creation, and SDKs that help you get started with OpenTelemetry faster than the default OpenTelemetry SDKs.

I'm excited to share what we've been working with you all and would love to hear your feedback and opinions!

Hosted Demo - https://api.hyperdx.io/login/demo

Open Source Repo: https://github.com/hyperdxio/hyperdx

Landing Page: https://hyperdx.io
> Why did they plant only tree species that are frequently targeted for logging? This makes the whole experiment very suspect. The linked article talks a lot about restoring forests, but why restrict the tree species to those that are profitable to log?

Because that is what private land owners will do, they'll want to plant primarily what they can sell. This research likely intended to reduce the immediate damage from logging.
Big big big big difference between "they usually do what we ask" and "we have operational authority over this system, and can court martial anyone that impedes its operation"
There's sruff like https://codeium.com/

In fact, there's a lot of coding pair program products. Some open source fueled, some OpenAI fueled, some are doing their own weird thing years before Copilot was released.
One thing I’ve wondered if why we can’t carve out social housing for families. There are reasonably priced 55+ communities in prime commuting locations, why can’t we have the same for families?
Shame could be the active ingredient in poorer outcomes of children of divorce, I'm not sure casting it more broadly will help the general picture.
Xi’s Security Obsession Turns Ordinary Citizens into Spy Hunters
You can memoize any function with `useCallback`, sync or async. All it's doing is watching when the deps array changes, and saving whatever function reference was passed in at that time.

(Note that this does not mean that the function itself is memoized in terms of "cache the result and check the arguments to see if we know this answer already".)
My experience with Turing-completeness in any custom DSL or similar is that you will generally get Turing-complete systems unless you work really really hard to avoid them. And it only takes one wrong move by anything anywhere in the system, and you'll end up with Turing-completeness.

Instead of trying to avoid Turing-completeness, just expect it, embrace it and instead deal with its consequences to contain the fallout.
Holding Apple Accountable: The Future of the Internet Economy Depends on It
> number of times I've been pwned by an X keylogger: Zero.

(That you know of). Number of times I've been pwned by any technical vector (that I know of): zero. The fact it hasn't happened to you does not imply that defending against it is pointless. Early in my computing career I used the same weak password for everything. Never had an account takeover. That does not imply that using different secure passwords for each site is pointless.
https://archive.ph/ZcCBf
What's click-baity about these?

Can Ryan Petersen Fix Flexport?
A Is for Adaptogens, B Is for Body Sculpting: A Trending-in-Silicon Valley Health Glossary
The Trouble With Walter: In His Elon Musk Tome, the Writer Shows Us the Perils of Access Journalism
Goldman Sachs Makes Adjustments to Fix Apple Savings Account Problems
The People in Power at Tech Private Equity Juggernaut Thoma Bravo
> China Evergrande shares tumble 25% after wealth management staff detained

The bancrupcy didn't help either, isn't it true ? /s
Tell HN: Goodbye HTML Gmail
To be (dis)continued:

"We’re writing to let you know that the Gmail Basic HTML view for desktop web and mobile web will be disabled starting early January 2024. The Gmail Basic HTML views are previous versions of Gmail that were replaced by their modern successors 10+ years ago and do not include full Gmail feature functionality."
I have 5gbit fiber from ATT and self host all my services
Maybe I'm just dumb but isn't the endgame of vec of enums going to be an ECS?
Sometimes you can't tell if something is successful because of a distinctive factor, or in spite of it.

There's a lot of weird stuff about the American system of governance. For example, in most countries the legality of abortion would be decided by elected legislators, rather than judges who are appointed for life. And in the US the government can just 'shut down' for some reason, and this is just a normal sorta thing? Pretty weird. And filing tax returns isn't just for people in complex financial situations, practically everyone does it, and they have to pay third party companies? That's pretty unusual.

It's far from obvious how these eccentric features could have influenced the founding of the likes of microsoft, intel, apple, facebook, google etc.
I only partially understand this article but this seems incredibly relevant to me since I'm planning on writing a spreadsheet engine in rust. Cell values require me to have something like (this very poorly written POC code, sorry):

pub enum Expr {
Number(i32),
String(String),
Reference(Position),
Binary(Box<Expr>, char, Box<Expr>),
Function(String, Vec<Expr>),
}

I'll keep reading and studying! If anyone has more resources to throw at me, I'm all ears
Love how responsive, simple, and lowJS the UI is. Also, "let's grab a coffee" in the footer is a nice touch. Unsolicited advice: automate everything to the point where you can write some markdown, git push, and the CI should take care of the whole deployment. That way it wouldn't feel too much work. I built mine with Hugo and deploy it through GitHub Pages. It's trivial to publish something now.

site: https://rednafi.com
source: https://github.com/rednafi/rednafi.com
The importance of handwriting is becoming better understood
Three-brain structure (Freud's id, ego, superego) is still the best simple explanation I know. Maybe the physical reality is a bit different, but it partitions actions so nicely.

Id - base impulses, bubble up automatically and subconsciously

Ego - the self, the "me". Where the story of identity comes from, what gets judged in court.

Superego - rules imposed from on high that restrict behavior

-----

I think "opposite impulses" can be explained as a form of self-control. Let's say I see someone I'm attracted to, but want to maintain composure and stay in a neutral stance. Left to my own devices I'll flush, and my eyes will widen, maybe I'll get clumsy. Bringing an opposite-but-aligned emotion in maintains equilibrium (anger, disgust...)

I see opposite-but-aligned impulses with my dog all the time. He knows I don't like him chasing squirrels. When he sees one, he gets activated + alert, but redirects his energy into running a few paces the other way. It's a bridge between the id (Go! Chase!) and the superego (Stay calm, don't pull!)
The male loneliness epidemic and how it affects fathers
Indeed.

Too often I hear about how people need "features" without even knowing what they think they need them for. It's like the drug companies selling drugs on TV - suddenly people are asking their doctors if they need some random drug that has absolutely nothing to do with anything wrong with them.

Your Debian SFTP server example is apt. Many times I've asked people why they think they need all sorts of complicated things when everything they need could be run off of a Raspberry Pi.

I've even set up Raspberry Pis to show people that they literally don't need more than that.
I think a lot of people wish this were true as it would justify any envy people have of him.

Unfortunately, I don't think you can be as successful at something like Artificial Intelligence by just sucking up to people with money.

I don't know him, but when a lot of smart independent voices are saying "this guy's wicked smart" I really think it would be a lot harder to fake it than to actually be wicked smart (and deeply altruistic - fella seems pretty genuine about progressing humanity instead of MSFT's share price).
Amazingly, this thread was posted on what would have been Jan Paul's birthday.

Care was taken to ensure his website would remain active, and it's heart-warming to see that people are still finding it useful.

Johannes Marinus Paulus van Waveren was absolutely brilliant and the kind of person who left a lasting impression on those who knew him. He is sorely missed.
Unlike in comic books, raw intelligence alone doesn't get you very far.

what about solo tech start-ups?
I don't _need_ full GMail feature functionality. It's not necessary.
LLMs can not yet replace good web search. There are whole categories of queries whera a LLM is more or less helpless with. Think navigational queries, shopping /reviews, location aware, 'grep the web' style queries just to name the few.

For example:

nyt crossword

cheap iem reddit

starbucks near me

M7FFALP

Likely, a good search product in the future will be a combnation of both.
Amazing how ingrained it is in some people to just go around security controls.

someone chose to make that SAS have a long expiry and someone chose to make it read-write.
Author here, actually it's the opposite. I elaborate this in a comment on the issue tracker:

> Hush will block some specific scripts and hide some elements on the website, but can't and won't interact with the website itself and thus won't click on any buttons etc. I'm in EU so can only speak for our laws, but here the tracking/cookies are opt-in, meaning non-consent means not accepting. It's possible that some websites would adapt the behavior based on your geographical location, but I'd wager that most will go with the least common denominator and respect the GDPR laws everywhere.
Individual radar tracking on the F-* planes is kind an advantage as they are typically vectored in by airborne radar like AWACs in actual combat. There are advantages to this, with the most obvious is the opponent doesn't know where the attack is coming from since they are only being lit up by the AWACs. They can be vectored in from the most advantageous angle for the attacker in total passive mode.
I think that's bizarre though. Mass is the one requirement everyone needs to do together-- obviously, that's the best time to sit with a meal and gossip. Even on important holidays, easter mass etc. are the few times limited practicing catholics will appear. This is the perfect time to ask how they've been, how're the kids, and welcome them with fresh hot food, maybe invite them to the litter picking up effort next week.

I'm extremely skeptical of church as a community building thing now, because based off of my white friends recollection there's very little actual community around worship itself. There are a bunch of volunteer actions outside of it, but just going to worship isn't itself community. This makes me question why we can't have a generic mutual aid group do this instead, like the Anarchist Soup folks.
Many people are also unaware that json is way, way, way faster than Python pickles, and human-editing-friendly. Not that you'd use it for neural net weights, but I see people use Python pickles all the time for things that json would have worked perfectly well.
I feel the same. the whole thing felt like blackface for nerds. the jokes felt flat and there wasn't anything really clever to appeal to actual nerds.
The F-35 has a comparable or better safety record than most other American Fighters. You just don't see articles written about a single aircraft incident for the F-18 anymore.
> Why did they plant only tree species that are frequently targeted for logging? This makes the whole experiment very suspect. The linked article talks a lot about restoring forests, but why restrict the tree species to those that are profitable to log?

Logging companies typically log a parcel and replant for logging again in the future. They might be convinced to do things differently, especially if the outcome is better for them, but it would be hard to convince them to plant trees that won't be commercially viable when they come back to log again.

If diversity is good for the environment and the loggers, that seems ideal. If diversity is good for the environment and about the same for the loggers, they might be convinced.

Not all the parcels will end up being relogged, but that decision is unlikely to be made at the time of replanting.
I've taught queuing theory before, and my favorite part is teaching about cumulative flow diagrams. I will preach it to anyone who will listen.

The CMF is the single best way to monitor your queues in your monitoring system, and most people don't do it. Almost everyone has a graph showing the current queue depth. They might even have alarms on it.

But if you see the queue depth going up, how do you know the cause? There are two possibilities: arrival rate increased quickly, or service rate dropped quickly.

But with a CMF, you can tell just by looking! One of the two sections will be getting fatter, telling you immediately where to look for the problem. If service rate is slowing, then you know to scale up your processing fleet, or look for a pathological case that is blocking processing. If the arrival rate is increasing, you can put in some backoff or load shedding, or just be happy about how busy your product is!

[0] https://en.wikipedia.org/wiki/Cumulative_flow_diagram
Even if this is true it's odd to disparage someone based on this. Influencing people is a valuable and important skill.
In RA1-2, they are good as fodder to soak up Tesla Coil hits and tank rounds so your armor can break through, especially agianst a human player. A good amount of fodder will force a human player micro against that attack, and distract them from other things.
News Homepages – open-source archive saves, shares, and analyzes news homepages
Can you expand on the difference between climate change friendly and non climate change friendly trees, for the noobs like me?
I'm not taking a side on this particular issue, but there are many reasons a person or a country might buy something that wasn't very good, even if they knew it wasn't. Maintaining a relationship with the vendor (aka a foreign nation with whom you maintain diplomatic/economic relations) is a big one.
It might be pulling an audio format that either youtube resampled, or that ffmpeg had to resample when merging the video because it's not compatible with the video format.

There's a way to pick preferred audio and video formats it will choose over what's simply the best bitrate, but you'll have to look in the manual for more details.
Funny how there's a large gap between the first job and second between age 19 and 37. Most of the list is after 37. Makes you think that the best years of your life for some people doesn't come after your 40s.
> UBI still incentivizes divorce. It offers unconditional financial support to single mothers.

No, it is neutral on divorce, because the support is unconditional.

> More than half of all children will be raised in divorced households.

Will be... when? And where's the evidence? The entire increase in single-mother families from the 1970s to 2019 was driven by the increase in parents who never married, not an increase in divorce-with-children. [0]

> The idea that 50% of fathers are abusing the children is absurd.

No one said that all divorce was due to abuse, but its interesting that aside from your invented numbers and inventing the claim of universality, you also changed divorce involving abuse of the other partner or a child to being exclusively about fathers and exclusively about abusing children.

[0] https://ifstudies.org/blog/children-first-why-family-structu....
After reading this article as well as the relevant Wikipedia entry [1], I still don't get what's supposedly "wrong" with the triune brain model.

In fact, this article seems to set it up as a bit of a straw man. The main rebuttals in this article are 1) that evolution is branched rather than linear, 2) that larger brains aren't necessarily more complex, and 3) that evolution modifies existing brain structures in addition to adding new layers.

But all of that seems rather obvious, and doesn't really refute the triune brain theory at all.

Isn't it scientifically true that we have a basal ganglia which evolved from reptiles, a limbic system also present mammals, and a neocortex that works similarly to that in other primates, dolphins, and elephants? And each of those map to certain types of behaviors, that we see in these species?

The triune brain hypothesis doesn't seem "wrong", it just seems like a simple categorization that is useful for making big-picture distinctions.

Am I missing something? I literally don't understand what is even being "refuted" here, because the refutations don't seem to match the claims at all.

[1] https://en.wikipedia.org/wiki/Triune_brain
> when you're already fully accessible on the IPv4 Internet

And behind several NATs which apparently is good because a single IPV4 address can belong to millions of people so you can 'blend in', as it were, if you enjoy privacy.
I meant that most vulnerabilities in the wild that pose a threat to users and end up actually being exploited by malware, are the ones usually covered by updating Google Play services.

Yes, kernel vulns will always be uncovered, but how often does the average user encounter malware that exploits that attack vector?

The biggest attack vectors on Android are Google Play services and your browser. Keep those up to that and you're good even with older phones.
It's using celery juice which has nitrates in it.
Absolutely, RBAC should be the default. I would also advocate separate storage accounts for public-facing data, so that any misconfiguration doesn't affect your sensitive data. Just typical "security in layers" thinking that apparently this department in MSFT didn't have.
Nah, Microsoft probably has a blameless culture
BAH contractor here. hmu and I could internally recommend you.
Russia and Ukraine were the two Soviet factions in the OG Red Alert
hi! co-author here. At the very beginning of our research process, the original problem space we were excited about was version control for creative coding tasks, which is why we ended up with the pipe-based metaphor. :)
And on the Windows side of things, there's NanaZip
https://github.com/M2Team/NanaZip
which gives 7-zip better integration with W11 context menus, and a better file manager UI
> it would justify any envy people have of him.

What envy?
> maybe the pilot ejected a bit prematurely, no?

He just wanted to be sure. With all those issues F35 had i wouldn't think twice when to eject. /s
Not GP, but recent things off the top of my head: California's law to end single family zoning. Gun laws in most blue states. Washington's comprehensive sex ed law.

It's not really urban-rural or D-R as such. It's more "people who don't even live in your town are dictating how to run it".

Like the recent ruling with abortion: it made it not a federal concern. That's it. Why do people in California care so much about what e.g. Alabama is doing now? Do they get upset about abortion laws in Poland too?

Higher levels of government are needed to prevent conflicts (e.g. to deal with someone in Colorado polluting the river and screwing over everyone in Utah), but they end up getting used to enforce social norms. It would be better if we could push more regulation down to the county/municipal level. People wouldn't need to be so polarized because they could just agree to disagree, and live somewhere with like-minded people.

Want to live somewhere where there's strict credentials for teachers? Cool. Want to live somewhere where the lady down the street that homeschools her kids can also teach yours? Cool. It's a big country. There's room for everyone.
surprising how after 30 years no one else has figured out how to to this
The checkbox form exists because crooked vendors are catering to organizations who are intentionally lazy about their cybersecurity.

Real penetration tests provide valuable insight that a bug bounty program won't.