skysight-inc/HackerNews huggingface dataset:
You’re referring to HTTP/2 push, early hints uses two header frames in HTTP/2 or QUIC, the first one is usually pushed by your CDN containing a list of resources used on the page, and the second one is pushed out by your application and proxied by the CDN.
> By making it necessary to use automated tooling

It isn't.

> and even obtain certifications

No, not really.

> just to set up everything required for private networking.

Frankly, no.

I'm tempted to agree only in one aspect, which is apparently you are completely unfamiliar with the topic, and the degree of confusion you are showing in your comments suggest you would benefit from an introductory course on the topic, or in the very lease a 5-minute read through the service's documentation.

Certification wold only help because you would need to learn the basics to pass those, and learning the basics would be enough to prevent you to fill in the gaps in your understanding with fabricated nonsense.

> The complexity of a properly configured service mesh in AWS is staggering, extremely hard for newbies to get right, and easy to fuck up big time down the road. That hurts security.

People being way over their head because they can't even grasp a FAQ will definitely hurt security, but the root cause of this failure mode is sheer incompetence.

As the saying goes, poor craftsman blame their tools, and here you are with a tool-blaming fest.
Maybe it's my background in medical devices, but none of this seems gruesome.

Infections, wounds bleeding, broken devices, complications from brain implants like bleeding or brain damage. These are certainly bad outcomes, but I wouldn't say unexpected or something you wouldn't see with other animal tests for medical devices.

Keep in mind this description comes from Physicians Committee for Responsible Medicine which seeks to abolish animal testing entirely. Not an unbiased source.

If Musk's company were doing this alone, I might assume something bad is happening, but it's not, the tests are done in partnership with "California National Primate Research Center (CNPRC), a federally funded bioresearch facility at UC Davis".

I'd find it hard to believe a government run, non-profit center which are experts in primate research (and operating within a public university) aren't follow laws around animal testing and appropriate care and effort to prevent suffering.
Dates should be persisted as intervals since epoch where the interval is the finest grain required. This is what enables more sophisticated tools to do sorting and change representations.

But this is a conversation about text formatting of dates. The standards for this are well established. Yes, padding is required and assumed.

> Humans think day/month or month/day, they have absolutely no interest in reading the year first.

Humans prefer what is familiar. Speaking as a human, for me that’s ISO 8601.
Wuffs author here.

It's not full-blown formal verification but it doesn't have to be. Unlike most formal verification projects that I've seen, the proof part of Wuffs isn't about correctness (proving that "this implementation satisfies the PNG specification"), it's about safety (proving that "this implementation won't read/write out of bounds"), which is much more tractable. Especially as the PNG spec (or WebP spec) doesn't mandate how to treat malicious input (like unbalanced Huffman tables).

Wuffs doesn't have a WebP decoder yet but it's literally in the Roadmap and I've previously written the golang.org/x/image/webp package in the Go programming language.

Wuffs does have a PNG decoder, PNG uses Deflate compression and Deflate and WebP's "decode a Huffman tree" data tables are very similar. Wuffs also has an equivalent of zlib's enough.c program mentioned in the original blog post to calculate worst-case memory requirements. Wuffs' version is called script/print-deflate-huff-table-size.go and it says that, for a 9-bit primary table, we need 852 table entries. Round that up to 1024, for nearest power-of-two.

If you look for HUFFS_TABLE_SIZE = 1024 and HUFFS_TABLE_MASK = 1023 in Wuffs' std/deflate source code, you'll notice that Wuffs' Deflate decoder isn't susceptible to the same problem as the C/C++ WebP decoder the original blog post discussed. This is because, unless the Wuffs compiler can prove otherwise, the code doesn't just look up the table like `this.huffs[0][i]`, it's like `this.huffs[0][i&mask]` and `i&mask` is always in bounds. The mask is either HUFFS_TABLE_MASK or it's of a refinement type guaranteed <= 511. The array is always (statically) allocated with 1024 entries even though enough.c says that, with dynamic allocation, we could possibly get away with a smaller table.

As you already know, for Wuffs (and unlike C/C++), taking out the `&mask` will lead to a compile-time error. Wuffs code won't compile unless the compiler can prove that array indexes are always within bounds.

From the grandparent:

> this WebP bug occurred because the largest table size was formally proven but it didn't match what was fed to the source code

With WebP+enough.c this 'largest table size' was calculated by exhaustive, brute-force search (not really a formal proof) but it was based on assumptions (balanced codes) that didn't match actual (malicious) input. Or, in zlib-the-library, there's other C code (https://github.com/madler/zlib/blob/ac8f12c97d1afd9bafa9c710...) that rejects unbalanced Huffman codes, but IIUC similar enforcement was (until very recently) missing in libwebp.

With Wuffs, even if the worst-case calculation was based on an incorrect model (or forgetting to separately reject unbalanced codes), the end result (on malicious input) might be "the wrong pixels" but it shouldn't be "buffer overflow".
Looks cool, interesting project idea
There are currently two Jupiter moon exploration missions either en route or about to launch. Oddly, the European one (JUICE, launched earlier this year) will focus on Ganymede, while the NASA one (Europa Clipper, launches next year) will focus on Europa.
The 500 MiB thing is because the frontend is an Electron app. That's sadly how it is with Electron. The UI can of course be re-written into a language/framework that produces way smaller programs, but it's not currently really worth the tradeoff. Most people are not that constrained in disk or internet speeds. https://github.com/mullvad/mullvadvpn-app/issues/1572

The downloads folder access thing is because Apple made it so. If you run an installer from the downloads folder it will need access to the downloads folder. This has nothing to do with Mullvad, but is a permission check macOS puts on all software. The Mullvad VPN app has no code for doing anything in the Downloads folder specifically.
I am not a US citizen but this looks quite an important news:

"FBI colluded with the Security Service of Ukraine by routinely sending social media platforms spreadsheets and other documents containing thousands of accounts to take down. In so doing, the FBI and SBU flagged authentic American accounts for removal, including a verified U.S. State Department account and those belonging to American journalists."
I'm curious: what was the message you took from it? Who should you trust when all the media, politicians, President, scientists, billionaires - they all tell you something. And only a couple of disgruntled, cancelled ex-scientists on YouTube tell you something else.

Who are we supposed to trust? Hollywood?!
Seem being the key word here; if it's plain sewage, there's affordable, scalable and relatively low energy ways to turn it back into clean drinking water, vs desalinization which requires a lot of energy still.

But it's not just sewage though, it's chemicals as well, e.g. from medication, plus whatever else gets flushed.
Those who go through the effort to make good web content, and who pay the costs for a web server deserve to be paid. So ethically I should not block ads.

I block them anyway because ads also have an ethical contract with me that they have broken. They need to not take up too many resources on my computer, not make noise when the website otherwise has no noise content, not install malware, and be for legitimate products not scams. Probably more as well, but the above are things I regularly caught ads doing before I got an ad blocker.
feeding? like livestock. SMH
> Might these stats be biased by the demographics that use Kagi?

yes, obviously.

but also: Selection Bias Is A Fact Of Life

https://www.astralcodexten.com/p/selection-bias-is-a-fact-of...
You, and many people here keep assuming that this is a feature that is unique to Chinese language and/or kinship system.

It's the main one that English speakers are probably exposed to; but even in this thread there are mentions of other languages and cultures where this or similar relationships have specific terms and more generic ones like "cousin" simply don't exist.

Grouping them all under "Chinese system" is... let's say culturally insensitive.

_That_ is a reason enough to not use the term from any specific language as a constant name; let enough to not expose that in the UI to users.
Ok then let's put it this way. They became weaponized, because they have a great ability in convincing people they're in need of fixing, instead of questioning the dysfunctional and fundamentally unequal society we live in.
How or why is it helpful for the lights to switch on in an empty room just so you don't have half a second of darkness when you walk in there twenty minutes later?
> together with bizarre "security questions" sourced from public records

I just had one the other day give me a multiple choice option for the last 4 digits of my SSN. The same SSN I had free form typed into a box a half page up.
I am giving it another shot. First thing I've noticed is the lack of localisation with results.

If I search for "Elac 6.2 speakers amazon" it comes up with a .com link. I have to search for "Elac 6.2 speakers amazon uk" for it to go to .co.uk.

This was an option with Google that I liked.

*Weirdly now if I search for "elac debut 6.2 amazon" it comes up with a UK link :S
How do you write the time? Do you put seconds or minutes before hours? Why not?

How do you write the year? Do you put decade before century?

How do you write numbers? Do you put the ones place before the tens?

Toddmorey asked why units don’t go from small to large and I explained that it is inconsistent with how we write numbers.

Thus, there’s no logical reason to do anything other than large to small. Anything other than ISO 8601 is preferred only for familiarity and no such inconsistent format is inherently more correct or logical.
This is why I like MINIX. They last LTS release was 9 years ago and it's still just as unsupported as ever!
Exactly. I have no problem with open source developers shifting to an open core model so they can get paid, even if it means I as a user don't get these new features for free.
>I think it'd be much easier if you could just type what you wanted into this relationship field, maybe with a drop-down or auto-complete for likely options in your language.

Congratulations, you reinvented the exact UI for this that already exists in iOS from first principles.
Well, it sounds like you mostly have issues with Google (and Google devices).

I'm pretty happy with my Fairphone 4 on LineageOS, personally. Murena also sells some degoogled out-of-the-box with /e/. I also like having root adb access on these systems (which btw, gives you access to the sqlite sms database). Screen mirroring via DP alt mode over USB-C works out-of-the-box and you can enable Android's "desktop mode", though it's rather barebones and clearly experimental. Plus, Fairphone supports their phone for a long time, they are easy to repair, they can run mainline kernels (postmarketOS...), etc. Of course, any Android phone still depends on Google for the OS.

I'm with you on a lot of complaints regarding Google, though switching to Apple would feel like trading one evil for another: I would absolutely not describe an Apple cellphone as "mine", nor "accessing your own device" sounds like something Apple provides.
These sites exist precisely _because_ of their expertise in the toxic race-to-the-bottom SEO/SEM game that Google created.
Because that would include father's brother's daughter, which the Chinese term apparently excludes, hence it then wouldn’t be correct to localize it to the Chinese term.
Your verb is "proposed". And ChatGPT does correct your sentence:

> The sentence is almost grammatically correct, but it needs a slight adjustment to clarify who or what is doing the proposing. Here's a corrected version:

> "In this paper, a decentralized application is proposed to improve the medical insurance process by enhancing transparency, security, and efficiency using Blockchain Technology."

> This sentence now clearly indicates that the paper is proposing a decentralized application.
The surprising is that this side turned to be manageable.

People around them ended up not wanting to actively destroy themselves and their environment. That was the big surprise of 00's and it coincided with aftermatch of when the lead gas was outlawed.

It seems based on the last years' news that the USA is having a reenactment of that now, though. I wonder what it takes this time to fix things.
Google slides used to be able to do that (and office365 too if memory serves right) but this is definitely not self-hosted/managed.
> In all scenarios, the traffic goes over Azure networks and/or Microsoft's private backbone. You have to go out of your way to route traffic "via the Internet". Remember: Network addresses are just numbers! Routing rules determine how they flow, and public addresses can be used on private networks.

My understanding is that if you don't have a private endpoint, your traffic to an Azure cloud service won't be routed out to the "big bad internet" per-say, but it will be routed within the Azure AS as mere IP traffic.

If you have a private endpoint to an Azure service in your virtual network, that means Azure has provisioned you a virtual NIC with some private IP address, and presumably alters DNS resolution within your network for that Azure service to resolve to the IP address of the NIC. The NIC provides (presumably encrypted) link layer transport out to the Azure service.

Compliance for some customers may dictate that there aren't any routes out to the public IP address space from within a network. If you still need access to cloud services, private endpoints are a necessity.

All that to say, I think Private Endpoints provide more than just a means of firewalling traffic/changing the IP address associated with a service; the actual transport from client->cloud service is fundamentally different.
Meh, don’t you had the memo that it’s all about the endogenic structure of the identity function within a toroidal network topology plunged within the diagonal of a transcendental mesh?

Just kidding, but not that stretched from what can easily find in contemporary mathematical publications.
I know what you're referring to but Apple made this experience worse by disabling rotation in iOS on the home screen altogether.

Of course most people don't notice because they unlock the phone with Face ID and usually don't stay on the home screen for too long, but still - if you push the home button when in horizontal mode you're presented to a rotated screen.

As for RAM: I was surprised to note that my phone has in fact 4GB of it (always thought it was 2GB), because apps get suspended all the time. It appears that at least on Android that was a sound design decision.
I would expect a lot more turf wars if drug market shrinks. And not having the drug money flow into the country might not be that great, at lest in short time.
Restoring a film will take a year or more. The size of this theatrical release might be related to the strikes (are we out of movies yet?) but the restoration was planned out years ago most likely.
My experience is that boring people are not corelated to their alcohol consumption.

I know people who don't drink often, much who still party and are "fun" to be around. And I know people who are boring who don't mind a drink.
Illumination from Hortus Deliciarum, Herrad of Landsberg
For US$110 per hour, in that kind of environment with that kind of pressure?

Likely of the "finish this in a week or we'll break your legs" variety.

Hell No.
At the very least, you knew that when the UI locks up, it's actually doing something. These days, previously-blocking operations may be run async, but the result is that, every now and then, the UI will miss the signal that the async job completed (or failed). An UI that regularly desyncs from reality is a relatively new problem.
If a "hidden empty div" is all it takes to break your browser's performance, I'm sorry, that's just not impressive.
I used a EdgeRouter and it was amazing, though a little-hair raising as a complete rookie.

The Unifi line solves this, and while it has some rough edges, it is so great. 9/10.
_highly_ recommend the "Red Mars" series - deals with questions I never thought of before, namely "to what extent should we preserve the surface of other planets?
I work on this exact problem for a cybersecurity company, and it’s super challenging 1) because it’s like trying to assign a probability to an earthquake (how do you validate your model with such few ground truth events?) and 2) like you mention, the more accurate we make the model, the more pushback there is as people begin to lose trust when it doesn’t match their intuition.

What’s a good way to make a convincing case of “trust us, we know this risk assessment doesn’t look intuitive but it’s better than the common XYZ approach because…”? Or is this a losing battle, and we should just allow customers to rank by CVE severities if that’s what they really want to do?

Some smaller startups are starting to work toward providing cyber VaR — quantify the probabilistic loss in financial terms over a given time period. This is really the only direction forward in cybersecurity IMO as risk must ultimately be modeled with statistics, not hunches. But I don’t think the industry is ready for it (and neither are the models to be frank).
There is no physical restriction preventing the screen from getting thicker though. At the end of the day it's a trade-off Apple is taking.
Experiments Evolve: The Phylomethodic Tree
It's telling that the top sites on that list accurately map to companies that have been the most "successful" at blitzing the incentive structures of the current internet economics model.
In a surprising move, the Bank of England has decided to keep the interest rate at 5.25%. Find out more information.
This is a strange response. So we should be skeptical of people not knowing things, but not skeptical of people in general? Politicians know a lot of things, do we trust them 100% of the time..?
The press was about to make it public.
Isn't there some kind of standard for publication metadata? The one which will allow to uniquely identify publication + further track different editions as children of "original" publication? Maybe we should create one and make it freely available?
About 1970, there was much speculation that Paul McCartney was dead. Offered as evidence were the album cover of Abbey Road, in which Paul walks barefoot, the others shod, and a song that played backwards might include the words "Paul is dead." There may have been other bits of evidence, but those are the only I remember. The speculation ended after some days when McCartney, who had been relaxing on one of his properties, returned to the public eye.

It did not occur to me then that this might have been somebody's publicity stunt, but I was a lot younger and hadn't heard the word "marketing".
I thought the article explained it quite well:

1) somewhat counterintuitively, in small helicopters the tail rotor can be actually louder than the main one

2) with traditional design the rear rotor HAS TO spin if the main rotor is spinning

3) with this design the rear rotor can stay still, and actually as the article points out at speed you don't have to use it as the air generates enough force on the tail to keep the helicopter straight so to speak, so the entire machine should be quiter in flight.

4) and finally yes, you can keep the rear rotor still on the ground which is safer for ground crews and quiter at the same time
yes, you can “boost” websites you trust more to give them more priority in search results
The right-hand side of our Sample Box 2023 is dedicated to showcasing the wide range of materials used in our manufacturing process. On the right layer of the box, you'll find our four main materials: wood, plastic, printing, and fabric. We've sorted each material into different subcategories to make it easier for you to explore their unique properties.
Nice! Yeah, some things in the sky are actually way bigger than one might think. The first time I saw this composite of the moon and andromeda it kind of blew my mind.

https://i.stack.imgur.com/gMZb3.jpg

It’s probably a mental trick but once you know where the Orion Nebula is you can also just barely make it out with the naked eye.

https://www.reddit.com/r/Astronomy/comments/aecbbl/the_orion...

This is what it looks like ‘live’ through an 11” telescope if you try to hold your phone with your hands lol, and you can see the ‘fuzziness’ of it, not the color:

https://imgur.com/a/nt6FdLV
Can I encourage you to try it?

It took me a while to get good results with it, as I was so used to skipping the first 4-5 hits as those are always adverts.

They aren’t with Kagi.
In my experience from Denmark it is not great at the local results. However I don’t experience many problems with the Danish language. It is mostly stuff like if you search for some generic term that exists in both English and Danish. Then you might want the local one. This does not work very well.
But adding stuff like site:dk helps.
I don't think the sentence is incorrect from a grammatical point of view. I mean, you can substitute "a decentralized application" by "John" and then it's obvious the sentence it's correct.

However, there's a mistake in the sentence since I don't think the author wanted to say that a decentralized application was proposing solutions to medical insurances. AFAIK we are not yet at the point where applications are sentient and propose solutions. Probably the author wanted to say "... decentralized application IS proposed to improve ..."
This is my favorite lately. Sure, some insane people use these packages for backend services, but we are just building a big JS blob that's statically shipped to the browser; none of the "vulnerabilities" in them apply. But try getting this across to people who think they need to track security issues they don't understand (not fix them, of course).
My solopreneur story: zero to $45K/mo in 2 years
"Private networking" as defined by assigning private-range IP addresses are only private as long as there is no route to your network, or as long as it's isolated on a dedicated vlan (even then, there could be some rogue machines).

In the first case, you need a firewall for IPv4 anyway. In the second case, that would also work with IPv6.

Disclaimer: I know nothing about Azure/AWS internals.
IANAL nor close to it but is there any legal requirement in the US to keep logs avoid user activity besides access logs? I'd be surprised that the US federal law forces you to keep a full activity log so that they can take a look later for some reason.
I'm not a US citizen and I legally worked there for years. Visas are not an edge case.
All fossil fuels except coal, which is a pretty big one.
If you think that either Azure or AWS loop terabits of customer traffic between two of their own services "out to the Internet" and back just because the IPv4 octets don't start with a "10", then you're the one who's missing the big picture.