skysight-inc/HackerNews huggingface dataset:
Entirely predictable. The US public got sold cable TV on the basis of no or fewer ads, and advertisers gradually crept back in.

Advertising is pernicious, it incentivizes bad behavior on the part of both content creators and advertisers alike.
My primary lighting in the main areas of the house is zwave. The switches work like regular switches and require local access only. It's smart if I want it to be.
You seem to be arguing against something I didn't say
I had the same issue with certain area codes, and this app fixed it for me (iOS): https://apps.apple.com/app/id1319082167

Not affiliated, just a satisfied user!
I assumed that the two paragraphs were connected

> Enter Akismet. This is a spam detection tool by the Wordpress people and is pretty accurate and easy to use.

> Blocking spam on signup worked somewhat, but was easily circumventable by spammers who are well versed in dealing with these kinds of barriers.

But now that I look at Akismet's description, it sounds like Akismet does a lot more than block on signup. Perhaps they use it after signups but apply the frustration loop instead of blocks because it's less accurate there.
Since it is fun can you link some of these EAL5 or higher products with sordid vulnerability histories?
Actually shouldn't any money deposited into the bank be a liability for the bank?
If you peek outside the box, Postgres supports a lot more than those, now:

https://wiki.postgresql.org/wiki/PL_Matrix
NASA’s asteroid sampling mission is on course for landing this weekend
Unity exec tells Ars he’s on a mission to earn back developer trust
How is that principially different from your granny worrying about breaking hips?

You can play catch with your brother who is 15 years older and your sister who is 30 years older will haul you around.

Grannies raise children just fine, and if the family is complete they can do it indefinitely.
> That's why rural areas are losing hospitals.

Yes. And they are being run into the ground by "venture capital" as if they were local newspapers.
Worm that jumps from rats to slugs to human brains has invaded Southeast US
> In the last 10 years I never had any electronics stolen from me but almost every smartphone got broken in some way: worn out USB/lightning port, broken battery, broken screen, shattered glass, broken Face Id.

You’re in luck! Apple will happily let you pay $150 for two years of AppleCare+ or $8/mo for AppleCare+ for the life of the device. You can break a screen as often as you wish and it’ll only put you out like $20 to have it repaired.
From the GPL 2.0 license:

“You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License”.

That is pretty clear. If you distribute software that contains a GPL component, the whole lot is considered GPL. Whether the GPL is 20 lines or a million is irrelevant.

This is why the GPL and similar licenses are called viral. They infect other people’s code and try to impose license terms on it.

This is also why licenses like LGPL were created, to try to be a little more reasonable. But that seems to have failed almost completely.
Are there any open source tools that do something like that (not nessaarily with design / UI)? I'm wondering how you would 'teach' the AI about your system. I guess it would need fine tuning as the prompt would be too big otherwise.
In the gif, the user already has a login and is attempting to make a post. I imagine either the user gets flagged as a spammer or each individual post might.
Grady from the youtube channel practical engineering [0] released a book recently called "Engineering in Plain Sight" and I preordered it for my son but end up hogging it myself!

It explains how different infrastructure (electrical grid, roads, trains etc) are built and arranged. A beautiful book, with everything simply explained - chock full of wow/ah-ha moments.

0. https://www.youtube.com/@PracticalEngineeringChannel
The US banks aren’t exactly eager to offer market level interest rate either. KYC has very little to do with deposit interest rate. They don’t have to, so they don’t.
Ultima Online launch day had a similar feel. Servers melted under the load of 1500 (maybe 2,000). After a weekend of reading the booklet and studying the map, I was able to login. Only to find that cave on the map I wanted to explore was between me and a dozen Ogres and Ratmen. Good times.

Steam was the first “online required” for offline play I think. Others like EA and Ubisoft followed shortly after but didn’t have their own stores until many many years later.
Valve's work is what let me ditch Windows completely earlier this year.
I am having a hard time understanding. Does this allow you to send / receive anywhere? Across the internet I mean. what external server does it use for 'stapling' the connection or is it also expected that you self host a relay server + set up the necessary ports etc. Do both ends require a relay server?
If I were a government security regulator or intelligence agency, I would monitor bank accounts associated with Zerodium and similar 0day and payload marketplaces and offensive sec tools to issue a secret, internal threat forecast that marks the beginning potential of increasing, directed, high-value attacks. Probably already exists in various forms, but taking it semi-public to sensitive industries might be useful.
I love that quote - it's the original quote i read which reminded me to shake off the "dont worry about being a perfectionist" idea in the first place.
There’s a huge footgun with replication that the article didn’t mention, and it’s the reason why I don’t use it.

Postgres is VERY committed to making sure a replication slot’s consumer doesn’t miss any data. This means that if a consumer stops consuming data from the slot, Postgres will helpfully store all that missed data… right up until the disk fills up and the database falls over. Had this happen during prototyping with two different SaaS DBs, and the only way to get it back up was to file a support ticket. (I can’t remember if metrics warned that the disk was about to fill up or not). Basically, if your replication slot consumer stops reading, that should trigger some kind of alert.

The other reason I don’t use it: the code path to get the initial snapshot of a table is totally different from the code path to read changes. Initializing the read from the replication slot so you never miss any changes is nontrivial.

It’s too bad, because replication is obviously the least hacky solution for change capture.

I use polling, but storing the txid instead of updated_at.
>I am having a hard time understanding. Does this allow you to send / receive anywhere? Across the internet I mean. what external server does it use for 'stapling' the connection or is it also expected that you self host a relay server + set up the necessary ports etc. Do both ends require a relay server?

Sorry, I have spoke too soon. I see now it uses a public relay by default, and you can self host as needed. Sorry for the unnecessary comment!
Cisco Buying Splunk for $29B
Show HN: ChatGPT for Med-School and Healthcare
Seems like this could be abused. A script wouldn't get frustrated, but it might have a handy way to test what content triggers Akismet. I presume I'm overlooking some mitigation strategy.
Yes I agree, right now it’s mostly financial sector and a techie playground for all kinds of questionable behavior, and that’s ok…. Lots of new tech starts that way.

Think how when nuclear fission was discovered and first made into terrifying destructive weapon and over a decade later into something useful and more practical like power plants.

The tech behind it is what excites me, and that is still in its infancy and not going anywhere, by its very design. The possibilities are endless with it and yes even the thing that excites you will be on there… eventually.

Applications will come, no doubt. When normie users are onboarded transparently it will be a game changer.

We still have ways to go and a lot to build and think about but the future is bright, regardless of what any country thinks or decides to do regulation wise.
If the code is simple, blocking code, then the number of threads required in the pool is the average total duration of a request times the fanout times the request rate. That number can easily reach many thousands and more.
Is it, though? I really don't think it has. There's still plenty of GPL-licensed software out there; most of the software I run on my laptop is still GPL, for example (the main notable exception being Firefox).

I think perhaps there's just a lot more open source out there these days than there was 10 years ago. A good amount of it was started by or sponsored by corporations, and sadly those types of entities are less likely to use the GPL.

But that's fine, no skin off anyone else's back.
I commented similarly below, but see the March 2023 snapshot at https://web.archive.org/web/20230303043022/https://unity.com... Section 6 (Modifications to these Software Terms and Long-Term Supported versions).

If you go to the next snapshot (https://web.archive.org/web/20230413210637/https://unity.com...), Section 6 will be missing and you'll see the following header at the top of the TOS:

> Last updated: April 3, 2023

> What’s changed: We have posted an update to our Unity Editor Software Terms to, among other things, provide for our Industry Offering. We’ve also updated other sections, including those relating to data collection and modification of terms.

Interestingly, their linked FAQ (https://web.archive.org/web/20230605071610/https://unity.com...) provides no mention of the fact that they've removed the clause. I can't know what was going through Unity executives' heads when that FAQ was written, but they apparently didn't think it important to draw attention or specifically notify users about that revocation of their rights.
Gen Z has gleefully name collided all the things.
Good software should be Free, basic needs should be fulfilled. I don't want to make rich by charging on things running on your own resources (your computer, your sever, your cloud,...), so I build RFSH.
Meanwhile, the common folk will sit in the iCubicle homes with just AirGlasses and subscriptions for everything, including the virtual furniture and the Fortnite Metaverse as the then-facebook to glue it all together.

I'm honestly a little excited about our Snow Crash future.
> Dont forget Newsome

Newsom…

> wanting to give $100M+ to tribes to buy back ‘ancestral land’

…proposing, and the legislature establishing, a $101M grant program for tribes to carry out “multi-benefit nature-based solutions projects located within the state of California.” [0]

It is not solely or primarily for acquiring land, and to the extent land is acquired, it may or may not be ancestral land. (There is a separate and earlier deadline within the program for grants applications for up to $25M of “Time-Sensitive Shovel Ready Ancestral Land Return Projects” for projects that meet that description and are already partially funded and which also meet the other requirements of the program.)

> despite multiple groups claiming ancestry.

To the extent projects under the grant program are ancestral land return projects, and are in “shared ancestral territority”, there is explicit approval priority for those which “will be jointly owned and/or managed by inter-tribal consortium, tribal conservation district, or partnership”.

[0] Program homepage: https://resources.ca.gov/Initiatives/Tribalaffairs/Tribal-Na...
The archetypical EAL5 product is a smartcard or cryptographic coprocessor (same thing, different package). They're certifiable because they don't do much.

But if you'd like an example from the EAL4 list: start with FortiOS.
If that "someone" is backed by a large corporation whose goal is to extinguish the utility of the existing project, they might hire away some of the contributors and add features at a pace that the original project just can't keep up with.

While that's certainly capitalism at its finest, I don't think that's a good outcome for the user base as a whole, or of the community.
I think you’re thinking of mulesoft or maybe retool
I shared an office with Luiz for 2 years - with Urs Hölze and Bart Sano - I joked with them that I got a PhD every 12 months hanging out with them. Luiz was an amazing engineer - and a great teacher, role model, philosopher and amazing friend. Rest well my friend - you made an indelible mark on me.
I feel like the person quoted must have wanted to say that
> That might be a hard promise for some people to accept, given that Unity made a similar pledge in 2019 that didn't stop last week's attempted semi-retroactive change. But Whitten said he hopes actions like restoring a GitHub Terms of Service tracker will be key to proving Unity really means it this time.

Well, good luck with that. It cracks me up when an enshittifer tries something out, fully knowing its a scummy move purely for shareholder profit, and then pretends like it was all for the good of others. Think (I hope) we're past the time people are just ignoring it/sucking it up (at least when they have a choice).
I wanted to trash dump into the electronics at the local disposal center in Switzerland and they told me I couldn't because they need to destroy the stuff by law and punishable with 10.000 CHF if not. Don't know about an university though.
My family (in the US) plays it a lot. My sister in particular "solved" it so far as if she goes first and doesn't mess up, will always win.

My dad made boards to give as gifts one Christmas.

Fun game.
That's a bit of a different issue from the "Let’s say you’re on a fresh machine" that this article is about.

I agree that "automatic trust on first use" is "good enough" for most cases and people (especially with sshfp records), and to be honest I think the warning you get once that fails is strong enough:

% git clone git@github.com:madmurphy/libconfini.git
Cloning into 'libconfini'...
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
@ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY!
Someone could be eavesdropping on you right now (man-in-the-middle attack)!
It is also possible that a host key has just been changed.
The fingerprint for the ED25519 key sent by the remote host is
SHA256:+DiY3wvvV6TuJJhbpZisF/zLDA0zPMSvHdkr4UvCOqU.
Please contact your system administrator.
Add correct host key in /home/martin/.ssh/known_hosts to get rid of this message.
Offending ED25519 key in /home/martin/.ssh/known_hosts:118
Host key for github.com has changed and you have requested strict checking.
Host key verification failed.
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

It's a strong warning, with a manual fix that's more than "just press ok" (probably intentionally), and if you choose to ignore that then that's your problem.

I'm not really sure what could be done better? A centralized https-like system comes with its own downsides.

(The only complaint is that last "Please make sure you have the correct access rights and the repository exists" line, which is from git and not ssh, and a tad confusing; maybe it's possible for git to do better here?)
Is a MacOS build of YNAB 4 still available?
How often are people grabbing tractors out of people’s hands while walking down the street?
30+ years of experience developer here. I am happy with JIRA. It isn’t perfect but nothing is.
is this shrinkflation
yes, you shouldn't add blocking code into executorservice..
Yeah, NASCAR engineering is underappreciated too, but I didn't know they could do a lap with an open throttle around Talladega. That's crazy.

Fun fact: the Porsche 917 still holds the lap record at Talladega, even though it was set in 1975, because no one else is crazy enough to run a 1200HP 1700lb car around it. And it got so hot (running an open throttle?) that it spontaneously caught on fire when it stopped in the pits without any airflow.
Agreed: combined with Syncthing for making it accessible on my devices (which plays nicely with Keepass2Android Offline edition).

Then handle backups with a cloud provider of your choice + additional encryption (basic rule I've been happy to see validated: never upload personal files to the cloud without encryption, after the whole Google content scanning debacle).
kuh gih
The argument for veganism was never about not killing animals but about how much suffering factory-farmed animals go through to become meat on our plates. Because of the difficulties in sourcing ethically raised animal products, some choose to forgo all animal products.
Writing parsers honestly isn't that hard, especially when you have more or less step-by-step instructions for some of the formats, and test suites that independent 3rd parties have written that you can use to help verify your implementation.

Regardless, so what if it's "bad"? OP is using this as a learning experience too. If he wants to write parsers, and thinks that experience will be good for him, then he should write parsers.

I do agree that writing your own parsers isn't strictly necessary if you want to write an independent web renderer/browser. If I were tackling this project, I'd be more interested in and curious about how to write a renderer, and if there's a HTML or CSS parsing crate already written and available on crates.io, I'd probably use it.

Then again, writing a parser would also make me intimately familiar with HTML and CSS in ways that I'm probably not currently, and that might help inform how I build the renderer.
Physically, or by compromising employees or business owners in whatever legal or illegal means, depending on the country.

Sounds from other comments like my knowledge is out of date though, and browsers have real protections against the obvious ways that used to be possible, which is great news.
Quantinuum's genuine but I have no idea what lambeq is.
Don't. No one wants your spam.
Man complaining about a monetization platform by making a video on a monetization platform.
That's great! I guess my knowledge is out of date, happy to be wrong about that.

> No, the CA doesn't have the private key of certs.

Woops, yeah good point.
> I’m not in California so I don’t know about that proposal.

Its not a proposal, it is a program established by law and which the first deadline for the early round of grants has already passed.

> Does it even involve the same tribes?

Potentially, since the grant program is open to all California tribes, whether or not federally recognized.

The joint declaration here could plausibly be a foundation for the tribes to establish one or more projects within the declared protected area and apply for grants to carry them out, so it could be directly related.
Isn't FTP still plaintext?

It can be or it can be encrypted. FTPS(i|e) implements encryption over FTP. I prefer SFTP as it just uses one port which I can define. SFTP also works better through firewalls and NATs.

VSFTPD is an example of an FTP server that supports encryption or FTPS.
People have been complaining about Apple cultists since at least the original iPod, 20+ years ago. Probably before then too.

In the intervening decades, Apple has managed to grow their “cult” following exponentially, by hundreds or even thousands of times the size that it used to be.

Do you ever stop and wonder why that might be exactly?
>We should look at how to convince more people to enter the military by doing things like increasing the pay

'More money' really hits diminishing returns when you can't balance it against other factors. I walked away from raise to about 200k/yr (and favorable tax situation if my wife works) and 10 more years to a valuable retirement, including very good insurance, and that particular role is still substantially undermanned.
I believe the vegan argument is, simply, if you have the option to cause or not to cause suffering to another being, you should choose not to. Other animals do not have that choice — it's eat or starve — but we do have the choice and so the ethical thing to do is avail ourselves of it.
Can someone explain to me what is the advantage of using something like LastPass over simply the in-built password manager that Firefox or other browsers have? I know that LastPass can be used for desktop applications too, but if you are only using a password for the web, is LastPass offering anything more than the in-built browser password manager?
The best spam protection I ever had, was a bunch of hidden text input fields on my mail contact form, with names like “blindcopy”, “bcc”, “cc”, “additional address”, etc.

They all had default values.

If the submitting handler detected any values in these fields that were different from the default, the submission was rejected.

I don’t think I ever got a single bogus email from that form.
> veracrypt

This can't be trusted.
I signed up for two day delivery. I haven’t had that with any regularity in years. This might just be the thing that makes me unsubscribe
I've gotten 'bills' (well, the insurance company telling me I owe a provider some money) for services that haven't been rendered! Just because my provider tried to pre-approve something and insurance denied it but the letter was phrased in a way that implied I was on the hook for it. Luckily a call to my doctor cleared that up.
Is there any reason NOT to set the number of iterations/hashes as high as reasonable by default? From an end-user standpoint, it might take an extra second or two vs 0.1 seconds, but then you've increased the brute force time needed by ten.

The most efficient way to brute force "Horse Gone Barn Bolted" would be with a minimal dictionary attack, say the most common 2000 words, plus s ed *ing variants. you're still looking at 1+ quadrillion combinations for that password, not including spaces.

That can't be that fast assuming a slower hashing algorithm, right?
-non crypto person's wild guess
Almost zero liveaboards are rentals.
2009-ish I remember finding an online wallet that would just give you half a bitcoin for making an account. Intended to look into bitcoin some more but just forgot about it until years later when it had gone up like 1000x or more and was just like "aaaghhhh dammit"...
It’s slot machines with a different UI
Yep, but op also mentioned spammers that get through signup without being flagged and having to go and manually flag them.

My thoughts on the loop overall are:

- maybe users are false flagged but not complaining because the "bugs" are rare enough

- spammers with automation may brute force through the "bugs"

- handles manual spammers well because they will encounter the "bugs" more often and just leave; or they'll report it as an issue that you may have to look into.

To draw a comparison with my own experiences, I have to jump through hoops when I visit sites with bot detection or other related security measures. I am the normal user being flagged as a spammer being frustration looped in this case.
Don't substations there already deal with everyone plugging in a 13A load at the same time because of this [1]?

[1] https://en.wikipedia.org/wiki/TV_pickup