skysight-inc/HackerNews huggingface dataset:
This is a really nice explanation, especially with the phone number analogy, thanks for writing it.
I'll let our executives know that alternatives exist.
Not really.

Real stuff should always be a pentest - penetration test where one is actively trying to exploit vulnerabilities. So person who orders that gets report with !!exploitable vulnerabilities!!.

Checking all common attack vectors is vulnerability scanning and is mostly running scanner and weeding out false positives but not trying to exploit any. Unfortunately most of companies/people call that a penetration test, while it cannot be, because there is no attempt at penetration. While automated scanning tools might do some magic to confirm vulnerability it still is not a penetration test.

In the end, bug bounty program is different in a way - you never know if any security researcher will even be interested in testing your system. So in reality you want to order penetration test. There is usually also a difference where scope of bug bounty program is limited to what is available publicly. Where company systems might not allow to create an account for non-business users, then security researcher will never have access to authenticated account to do the stuff. Bounty program has also other limitations because pentesting company gets a contract and can get much more access like do a white box test where they know the code and can work through it to prove there is exploitable issue.
Ask yourself, by what means do we get there? The answer is: people believing they are more right than anyone else.

>humanity

We have been doing the opposite - believing in the righteousness of others - as well. Somehow, it has balanced out so far, but that is really the point of being a fair and open society, seeking truth in the face of all duress, in order to provide justice: we have a balance.

Until the call for the more base, banal emotions overwhelms the rational and the discreet, and - above all - the common truth-seeking which all humans can produce, no matter the languages we use, we have peace.

But, when that happens, it happens fast and it happens on the basis of forgone conclusions, know-best, pride, hubris and arrogance. On all sides of the fence.

As long as there is a modicum of truth-seeking left - and not assumption-based superstition-driven mob rule - we humans have a lot more than 2023 to attain ..
That new equipment is mostly for making iPhones.
You standing on this system like it is worth defending is pathetic. You are lower than a worm if you can't see the inhumanity of the system and how defending it is anti-human. If I heard you say something like this in person you wouldn't do it again.
That’s a spicy take. Is there any evidence to support it?
It's annoying when ingredients are added solely to modify the color of the food; I wouldn't mind bland-colored bacon.
So? Don't address issues coming from Linux reporters if you think it's not worth it. But note that those reports may be bugs affecting users from other platforms as well.
Virtual fitness training for my parents 50yrs & older
It's been hard to find trainers who specialize in older adult fitness with an emphasis on balance, stability, and functional training.

Curious if anyone else has faced this problem? And how do you engage in exercise training if you're 50+?
Well damn, this has gotten good. Downloadable on linux as a flatpak and can automatically download the assets it needs... Luckily it has a "save mission" feature so I could save and exit and return later after only losing 20 mins of my workday. This is even better than I remember! Kudos to the devs on such a fantastic job.
With consoles, you have exact(ly enough) known hardware and software so you can precompile the shaders so they're ready to rock.

Some high profile UE4 games released on PC at launch either didn't precompile shaders, or didn't do it well enough, and there was frametime inconsistency when that shader was first encountered as it was compiled. It caused very disruptive stuttering.

Stray and The Callisto Protocol were the two that I think of most. TCP was virtually unplayable. Stray at launch was... less than ideal... for a lot of people.

Not all of it is necessarily directly from UE shader compilition on the fly, nor where the root blame lies. But it certainly got a reputation.

I'm not a game dev, so it's probably a little light for you so I suspect this is a bit too basic for you but [DF](https://www.youtube.com/watch?v=Kr7RGkFuPdQ&t=112s) did the best quick look which may give a direction to look further.
Not sure why you are getting downvoted. Draconian laws tilting in favor of women definitely contribute to reluctance of men to get married or to have kids.
I am ignorant here but are there tips out there for things you can do (such as APIs to avoid or prefer) to help ease the Proton translation?
Do you not remember the launch failure of healthcare.gov? The original site was built by federal contractors, who took over 300 million dollars, and it failed on day 1. Day 2, Obama brought in private, US Tech companies to fix it.
I'd guess that was snark from the Lotus engineer who embedded it.
Without signing on to the belief that RennTech is generating returns from insider trading, I will observe that hiring a bunch of Physics/Math PhDs would be a reasonable cover story and therefore wise thing to do, even if your core returns came from insider trading.
I'd love for someone to benchmark these variants to tease out their actual characteristics (particularly for x86).
Oh, it's the same guy who also made the cover to Jefferson Airplane's After Bathing at Baxter's! I didn't know this guy was also responsible for some iconic sci-fi and movie artwork.

It seems he was obsessed with cool vehicles. That cover art as well shows a hybrid between a WWI triplane and a San Francisco townhouse, flying over an American wasteland dropping confetti over it and probably blasting psychedelic music from its attached loudspeakers. Bathing at Baxter's was the group's code for taking LSD.
I found a new-to-me grad student guy, with decent video skills, got 240k views on a certain paper review video. wild days..
> How fulfilled do you think he feels?

This is such a deliciously strange question to ask about a person who isn’t one’s self.
As an aside, insects often use their feet to “hear” vibrations from the plant they are standing on, allowing them to seemingly “silently” communicate with others on that plant by transmitting vibrations through it, or detect when an animal is coming along.

Notably in my experience, corn rootworm beetle were especially adept at hearing me walking along through corn and hiding before there was any possibility of seeing me. I’d have to stop and be still for a minute for them to start crawling about again.
That's some comic book villain.
A lightweight game engine written in modern C++
Weird thing is, when I read that quote it makes perfect sense.

But I understand how it could look like the undecoded bytefall in the Matrix for those outside the know.
Ask HN: How can I security-sandbox email attachment opening?
What I want is to have a service open all of my email attachments before I do. If it's a RAR, ZIP, PDF, DOCX etc. then it gets opened in the normal applications, as do the archive contents. And this takes place in a similar environment to our desktop environment which is undetectable as a sandbox.

Then I get a report of any unusual disk or network activity that occurred. For example I don't expect opening a RAR file to cause network activity[1]

We're happy to pay what it takes for this kind of thing, and I suspect a lot of people are. Is there such a service out there?

[1] https://digital.nhs.uk/cyber-alerts/2023/cc-4370
I do not hold people who make unjustifiably confident predictions in high regard. Yud and Kurzweil are the ones from your quote who I am more familiar with and they are constantly wrong and constantly overconfident. They've spent decades making wrong predictions, and they keep doing it without updating their methods. To me, that's not making mistakes, that's lying.
Nitrosamines are really bad for you (they cause DNA damage). Even cured meats that don't have "added nitrites" use celery juice concentrate, which has lots of nitrites. It's best to avoid cured meats entirely.
I find the packaging that claims to have no added nitrates/nitrites to be so dishonest. The worst was one that said something like "no nitrates/nitrites added, only naturally-occurring". That made it sound like the only nitrates/nitrites are those that naturally occur in pork (is there any? I don't know!). But then when you look at the ingredients, there was some purified sea salt ingredient, which was where the stuff was coming from. It's not "naturally-occurring" if you have to distill it out of sea salt or celery juice.

I prefer the labels that just say "bacon" and don't claim to be preservative-free. If there is not any demonstrated (or even hypothetical) benefit to nitrates/nitrites being added from different sources ("natural" or otherwise), it should be considered deceptive advertising to make it seem like there is a difference (or that your product has none).
WhatsApp is from Meta, and I'm not keen to leap straight back into their clutches. I kind of assume it will end up as infested with adverts as the Facebook one? But perhaps there's reason to doubt that?

Signal uses 'phone numbers for the identifier which I'm (perhaps weirdly) reluctant to deal with.
Old post.

But still, this is why you target Proton. It seems "anti linux" and suboptimal, but its actually quite practical.

Whenever I do game on linux, I always use the proton versions anyway because they perform better than the native linux version, with the only exception so far being Minecraft.
In this case it's more that almost the entire country is within a couple of hours of the Randstad. The whole country can act as a single economic unit, which isn't doable even in Germany, France, and the UK, let alone Canada or China. You can drive or take the train from Groningen to Eindhoven and back in a single working day with hours to spare; you can't even do that between Toulouse and Marseille, let alone further!

If anything it's a good thing - it means investment in Amsterdam benefits far more people than just those in Amsterdam.
The second clause covers that: this isn’t an AI problem, just as it wasn’t a big data problem when the same kinda of things happened a decade ago. It’s a problem caused when you set up something new outside of what the organization is used to and have people without appropriate training asked to make security decisions: I’d bet that this work was being done by people who were used to the academic style, blending personal and corporate use on the same device, etc. and simply weren’t thinking of this class of problem. The description sounds a lot like the grad students & postdocs I used to support – you’d see some dude with Steam on his workstation because it faster than his laptop and since he was in the lab 70 hours a week anyway, why not 90?

The challenge for organizations is figuring out how to support research projects and other experiments without opening themselves up to this kind of problem or stymieing R&D.
All models are wrong, but some models are useful.

Asking if the model is wrong is asking the wrong question; the important question is whether it's useful.
> It wouldn't surprise me if we were all trending towards South Korea your situations where half the population lives in the capital (except in the US - there will be a few cities everyone moves to, but probably not DC).

Though the political capital was moved to the South, economically the effective capital of the US remained (and remains) NYC.
Alaska has had to deal with an extreme version of this issue for a long time. One mitigation that the state has come up with is to offer competitively priced student loans to Alaska residents who are bound for colleges across the US. The interest rate on the loans is further lowered if you live in Alaska after graduation, incentivizing educated Alaskans to come back. Those students are also likely to have maintained their Alaska residency to qualify for the Permanent Fund Dividend (an annual payment that comes from rolling returns on the state’s sovereign wealth fund).
I like reading random blogs and articles about tv shows I follow. This week, more than one of this articles I found were AI generated. Pretty obvious, bad and formulaic content. Do I need to flag this websites from my end? Do I need to whitelist my sources? It's a shame.
Latest rumor is expected sales of around 20m units - should cut into the iPhone 15 sales in China.
Choose Your Mentors Wisely
IMHO the real big win w/ Rust is not so just memory safety from (some) leaks or segfaults but the fact that the borrow checker rules apply also to concurrency related scenarios and so race conditions and deadlocks become much more difficult to accidentally produce.

Developers can generally be taught to handle memory ownership issues fairly well, esp when helped out with RAII smart pointers, etc.

But in my experience when you throw concurrency in, even very high quality engineers tend to stumble and accidentally introduce race conditions.

In this respect Rust has something over the garbage collected languages, too. Because Java, Go, JS, C#, etc will effectively shield you from "use after free" but they will absolutely not stop you from passing an unlocked, etc. reference to another thread and screwing yourself up royally; and Rust will.
I don't think that's the case. And I don't think you're an anthropologist or anything. It's just a convenient narrative when it fits into your own view. Polyandry was and is widespread in some cultures. I wonder if you would accept that as a state of nature.
I'm using Excalidraw :)

[0] https://excalidraw.com/
[1] https://github.com/excalidraw/excalidraw
no, a rendering engine just handles rendering, they listed multiple other things. don't conflate your definition to mean more than it actually literally does.

using game engine's builtins for the things you don't want to abstract yourself makes complete sense, keep the game to "game logic"
There is a similar phenomenon with Canada, and the USA. University is cheaper and more subsidized in Canada, and then a small but significant % of graduates - often some of the very best - move to the USA, and then never pay another tax dollar towards education, or anything else. It might be a bit annoying, but there's little that can actually be done about it, and all the usual arguments about the benefits of an educated populace still apply; the vast majority don't move away.
That's a really good point - I'm certainly familiar with AWACS in concept but I didn't connect the dots here.

Thing is, in these scenarios they're the only armed aircraft around and their targets never have radar or any instrumentation/defense/even detection for it. So they could (and likely do) blast and paint all day and they still can't find bug smashers in dense urban environments like you most often see with TFRs.

I can understand the fighter radar is probably designed assuming assistance from AWACS but it still seems really strange to me.
A question for any "free speech absolutists" here: is there any speech that should not be acceptable?

Legally, there are constraints on libel and CSAM, as well as speech “directed to inciting or producing imminent lawless action and is likely to incite or produce such action.”

Can we at least agree on the foundational elements of that? I assume resistance to this is likely fear of a slippery slope, but there should be some area of consensus.
It is true that it requires effort for the developers of a software program to support a given file format. Beyond that I'm not sure what your point is.
Why and when the Sahara Desert was green: new research
I think WFH-RTO dimension is orthogonal to unchecked corporate culture. You can have a great work-life balance with RTO (I saw it at Google first-hand in 2010's) and you can have a shitty dawn-to-dusk grinder with WFH (saw it many times since Covid.
I have had the pleasure(?) of running a large linux network, I don't think it was ever really the case that shells were a viable access control mechanisms on their own.

Firstly it only really worked if you were all sharing the same machine with remote terminals, which most people don't do anymore. Second NFS happened when if you configured it badly you could just pretend you were any user you liked.

I'm assuming this is part of the reason why kerberos was invented. Basically the only practical way to tie down a network of machines was to make sure that authentication was done with LDAP and Kerberos. LDAP did the name, UID/GID and user metadata and kerberos the authentication. You could then use that ticket to gain access to other things (yes, even over HTTP, NFS or SSH)

Nowadays you'd use active directory, which is LDAP+Kerberos, but with a nice expensive gui.

/etc/passwd(or shadow) died _years_ ago, It was dodgy even in the 90s, let alone now. Its fine for single user machines, but not networked.
On the subject of AoS, Zig has a cool data structure for that: https://zig.news/kristoff/struct-of-arrays-soa-in-zig-easy-i...
My friends and I have a C&C Generals night a couple times a year. We use the Rise of the Reds: Babushka's Revenge mod, which is sort of a mod of an old mod. It balances things out quite a bit and adds some new stuff. I think it includes widescreen support
As in every industry there are cheapskates, and especially in pentesting it is often hard for the customer to tell the good ones from the bad ones. Nevertheless, I think that you have never worked with a credible pentesting vendor. I am doing these tests for a living and would be ashamed to deliver anything coming near your description :-)
Is it possible to build this for Windows on Linux? That's one of the things that would make it stand out for me. I'm finding myself using Windows less and less, but I realize that most users are on Windows.

I've had some success building things using the MinGW GCC toolchain on Linux, but I'm not sure if all the regular MinGW libraries are available, so the engine might have to submodule or fetch dependencies.
Maybe we should plant seeds, same as nature does. Dozens of different seeds per m2, nature would choose what'd survive and flourish.

An example of a forest farm planted with the same approach: https://www.youtube.com/watch?v=_ST9NyHf09M
You can be really smart in some areas and really bad in others - it's all context when people give you compliments.

Would you be comfortable building a competing company against a buffoon? I would. If I could help it though, I wouldn't fancy competing with Musk.
have you seen the price of bug protein? its not exactly cheap! I tried some bars made from crickets. it was ok tastewise. but it cost more than a quest bar or a primal bar (which is made from real meat).
> we have a basal ganglia which evolved from reptiles

And do living reptiles, today, not also "have a basal ganglia which evolved from reptiles?" seems we've a name collision, here. Perhaps we should refer to our ancestors as "proto-reptiles," or else our contemporaneous cousins as "post-reptiles" whose brains have had just as many years' time to depart from our common reptilique ancestor.
Books for Hacktoberfest Prep
It's a pretty huge advantage!

That being said, I run a "nightmare stack" of sorts on my main Linux gaming PC: Alder Lake CPU, Nvidia GPU. NixOS on root and Steam installed natively. For a while, it was Unsupported Driver city - Population: Me.

...that being said, games have "just worked" for as long as I have Vulkan drivers installed. Steam might complain about software acceleration, but Cyberpunk runs with DLSS and Raytracing like a charm. The underlying stack is incredible, and I think it proves that you can make Linux a reliable delivery platform if you put in the work.

That's just my experience, but look at the rest of the industry: Apple publishing Game Porting Toolkit based on DXVK code, Raspberry Pi GPUs playing Fallout: New Vegas, RISC-V getting Box86 support, the list goes on. Hardware diversity is great right now, the Steam Deck just pulls a lot of that technology to center-stage.
> Tailwind or any other CSS-in-JS system is not the recommended way to implement styling

I see, I'm not the target audience here, I can't see myself going back to the old ways. But I am happy that people who can't get into the wonder world of utility classes also have frameworks with their philosophy in mind from the core, which could provide more modern solutions for their preferred way of styling.

Let's see how this projects evolves overtime, best of luck!
…and being structured, the passwd file content should be accessed with the getpwent family of functions.
The real moral of the story is never offer to fix anything, because then everything involved with it is your fault forever.
It's not. Have you tried both? I tried Earthly first and switched to webapp.io. It's a way better product.
I’ve found that’s usually in /var or ~. Can’t think of any instance where it wasn’t one of those.
I understand that this is probably my ignorance making me kind of an ass here, but my gut response is "obviously?".
They're pressure waves, literally forces acting directly on the plant! Imagine reporting that plants can grow differently if you grab them and yank them around a bit every once in a while.
WinRAR has been developed by win.rar GmbH from Berlin since 1995. This is still majority-owned by the two founders Burak Canboy and Öncül Kaya. Approximately 12% of the shares in WinRAR GmbH belong to the company Givanto.[3]
You can cherry-pick the promises that have come true. But for every one of those there's a cyber truck, a "self driving mode," etc.
(I worked on the team that added the tbs= parameter, 14 years ago.)

There's nothing nefarious here. The integration of &tbs= is deeply tied into GWS; it's written into the C++ substrate, while most of the rest of the server has been rewritten in Java + a bunch of custom languages. Most likely they simply can't remove it - it's permanent technical debt that nobody has the expertise to touch anymore.

Changing the UI is all done in a plugin these days, and is a relatively trivial change.
I recently read about that idea in the book "Notes on Complexity: A Scientific Theory of Connection, Consciousness, and Being".

It's an interesting idea. I'm not sure why the parent is being downvoted.

https://www.amazon.com/Notes-Complexity-Scientific-Connectio...
Ask HN: Have you noticed huge spam/scam campaign on YouTube?
Lately in a lot of videos I watch there are comments threads like these (highlighted comment):

https://www.youtube.com/watch?v=GgWUwAr-NqU&lc=UgznDYWp6w610TkP64N4AaABAg

https://www.youtube.com/watch?v=Jk_GcwkfJGs&lc=UgwIGESytvaPKFRwtqV4AaABAg

https://www.youtube.com/watch?v=lPYmD7CyHlY&lc=Ugxj2idH4TessYD_jjF4AaABAg

As you can see it's basically the same spam/scam campaign, I've noticed the same pattern in 20-30% of all the videos I watch on different topics in the last few weeks.
We have thought about adding WAF capabilities, what kind of WAF functionality would you be interested in if we did support it?

Feel free to reach out to me over email as well: niji@ngrok.com
ActiveAnalytics: A Rails engine directly mountable in your Rails application
Worth adding to the Evil Overlord List:

When making decisions about my security forces, I will bear in mind the example of East Germany's supposedly all-knowing and all-powerful Stasi...and of how utterly useless they proved to be. Better to be accidentally killed by the Hero's comic-relief Sidekick than to have my Evil Empire collapse without the Hero having had to lift a finger.
I've actually done something not too dissimilar to that! I've pasted licenses into ChatGPT and asked it to summarize it to me in lay-person's terms.

I don't think anything it says would hold up to true legal scrutiny but it's been great for a non-lawyer like me.
Interesting to note that that's larger than the house edge in video poker (which is admittedly one of the lower edge games).

You can build a massive city in the middle of a desert with edges well under 5%.