skysight-inc/HackerNews huggingface dataset:
This is so good and important to show that these identity schemes are more about surveillance than security, as the security guarantees are limited and insufficient for any long period of time. An additional approach I might recommend for exploration would be to find the "offline mode," where it would have to re-use IVs and challenges over a short window when the app can't validate against the back end service. Other similar schemes I have seen implemented a single-use-key as a re-used limited-use-key to enable that use case.

The card he tested was apparently live in production, but one of the main vulnerabilities in protocols like these is in the 'personalization' stage of the setup, where each card gets a set of default 'provisioning keys,' which are used to register the card and get unique user keys for it. A sample of unpersonalized blanks would yield that, and the costs associated with mitigating this with batch specific keys for provisioning is typically too much complexity.

There may be a DoS vulnerability in some card schemes where you can use 'torn' NFC connections to get the key and transaction counter on the card applet to increment and desynchronize from the counter recorded on the server, bricking the card - or potentially many en masse with some SDR equipment.

Given the physical user enrollment costs, there are some basic impossibilities in these protocols that will always reduce their security to a set of trade-offs that depend on economics and obscurity. Security research like this acts as a check on the efficacy of totalitarian controls like digital id, and it is important work to continually demonstrate that there are risks and costs to the regimes that impose them. I am very grateful this researcher has done work to discredit this scheme.
ye prestige award is a political football now. same as it ever was?
In the context of this story, is there any evidence or even inkling to suggest that what is being reported isn't happening?

Is the left-leaning LA Times in on the hoax as well?

https://www.latimes.com/california/story/2023-10-04/airbnb-g...
Under appreciated comment.
This story is not from Fox News, it is from the LA local Fox broadcast network affiliate.
I fully agree.

Two of my favourites:

Holiday API I plug into every ecommerce site I work on:

https://www.api.gov.uk/gds/bank-holidays/#bank-holidays

Domain Email Security checker:

https://emailsecuritycheck.service.ncsc.gov.uk/check

Please share any other favourites!
I think I would make grow() like this to prevent the mistake of accidentally laying out the array fields in the wrong order.

void grow(void **ptr, ptrdiff_t *cap, ptrdiff_t *len, arena *a) ...

#define push(s, a) ... grow((void **)&s->data, &s->cap, &s->len)
How much faster is this compared to a fully userspace implementation?
Jesus, I can't imagine paying for something and still getting ads shoved down my throat.
The Global Race to Tap Potent Offshore Wind
So? The parent is Chinese. Their point is that Chinese unions are much weaker than US ones. What does Europe have to do with that?
Linux Foundation, BastionZero and Docker Announce the Launch of the OpenPubkey
Really proud of what the gov.uk team are doing. Everything is clean, accessible, and predictable across the many different systems. A massive success I think.
as a lowly human I can also "create" something that's been implemented 100000 times (like reversi or pong) already for less than $1

it's called git clone
Bottles Next: A New Chapter
> mlc is the fastest

Also noticed that mlc+Vulkan has near zero CPU use while Llama+opencl on gpu still end up with a fair bit of cpu use. So seems to be taking a fundamentally different route

This was on a rock chip 3588 so not exactly conventional AI hardware
I think JSON5 is a better choice for this than this weird protobuf thing.

It's also a one-liner to convert JSON5 to normal json or yaml for things that want it that way.
US nutrition panel’s ties to top food giants revealed in new report
I think that for a time, people forgot that all the idiots who screamed about pokemon and DOOM being satanic in the 90's didn't actually go away and presumably had similarly low intelligence offspring. To claim conservatives as being some kind of silent majority is truly giving them too much credit.
> The author states that security updates on earlier iOS versions give a false sense of security.

The author links to this article which provides more detail:

https://www.intego.com/mac-security-blog/apples-poor-patchin...

I wouldn't take everything that's written in a random tech article for granted. Fear inducing titles generate more clicks. As soon as you do something in this world, there's a risk. Even if you do nothing, there's a risk. Nobody will be able to be completely safe using any device under the sun. And if a tech company tries to make you believe otherwise, run.
I feel like millions of dollars of R&D should mean it’s no longer Improvised ;)
Most people who watch TV are very used it.
Anatomy of the Linux block device driver
I can understand that, but I think it's very subjective. For example, it's an opportunity to explain what the form is, and give any other information (do you need the form? do you need something else?) before the option of, if you're in the right place, click here to begin.

I think ultimately, it works quite well.
Also kinda awesome -- Theft.
Some people are big app users, but very few have a variety of niche apps installed. Those same people probably don't use computers for more than the 1% they are capable of doing.

I think a vast majority still uses apps outside of messaging and music though, because social media exists. Instagram, Facebook, Twitter/X, TikTok, SnapChat are all apps and it's absolutely the case that they are better off being true native apps, which they are.
I don't see any correlation between your and the Chinese case.
How's that better? How many files do you need to replace a complex compose project, 10? And you still have to deal with SystemD?
I always wonder how it must feel like to go from 0-100 kph in 2.4 sec ...
This is cool. Maybe for copying you could spawn a text editor in your main screen with the content of the terminal in it?
Valve has adopted the stance that any game with even a hint — literally just a whiff — of AI generated content will be instantly rejected from steam with no explanation beyond "it appears your game contains AI generated content." They say nothing beyond that.

If that seems unbelievable, I agree. I didn’t believe it till I drilled down into the details of multiple instances of this happening. It pops up on Reddit with alarming frequency.

Meanwhile Tim Sweeney looks like a visionary, since he says "bring your games over to the Epic Store, we’ll host them." And while I applaud this and cheer him on, as a former gamedev I understand the reality of the situation: neither indie studios nor established studios can take the financial risk of prototyping a new development model spearheaded by AI, only for the resulting game to be thrown out of the primary revenue stream (Steam).

There’s a ray of hope, which is that AI can revolutionize the mobile gaming space. But I’m pessimistic because mobile gaming sucks. It’s not an industry I’d choose to be in, because the financial pressures practically force you to develop something addictive at best and downright predatory at worst.

It’s hard to imagine Portal being developed for iOS, yet it was easy to imagine a lone dev making Portal for desktop PCs using AI. But now no one will try. Hopefully some teenager with nothing to lose will pull it off.

I don’t think Gabe made this decision. It’s too hamfisted. It feels like someone at Valve got a bug up their bonnet about AI and implemented the worst reactionary policy imaginable. Gabe would understand the implications and nuances, and certainly wouldn’t tolerate a system where Valve is abusing their developer trust by rejecting them with no explanation and no recourse. But Sir Newell is old, and it was a matter of time till empire decay set in, so it’s not surprising it ended up this way. Still sad though.
I'm getting 150kW in Ioniq 5 on European CSS-based Tesla superchargers.
Thanks, this is a really good explanation for what happened. None of this was making sense to me haha
I recommend going to some meetups and meeting other solo founders/creators. I recently went to a Microconf meetup (https://microconf.com/) and met 30-40 other solo creators and had a blast.
The fact that the UK government's bank holiday API has bunting advice just makes my day.
"but does it only make these because there already exist hundreds of examples and tutorials? fear not, there's an entire library of other projects it made all of which also have hundreds of examples and tutorials"

don't get me wrong, it's interesting, but the response here didn't answer the question
Docker already supports rootless, the issue is networking, which podman also suffers from.
Corporate news does tend to add a lot of undue spin to these stories; but assuming there are any parts of this that hold up with a little bit of extra context this is a case of completely dysfunctional government.

Taking the article at face value; there is nothing here that I can recognise as property rights. It reads like state-sanctioned theft. To a level of crazyness where I'd like to read the court records to find out the details.
Like the theft of local tax revenue by running an unregistered business?
Me neither but I don't security if I can avoid it.

Here's his site, for those who don't want to do a search right now: [1].

[1]: https://www.reversemode.com/p/about-me.html
I have learnt that platypuses glow in the UV light from, well,
https://www.youtube.com/watch?v=Zxf2MgYCOm0
Wasn't the Red subscription price supposed to be locked to something like $7. Was that ever a thing?
Ukraine cyber-conflict: Hacking gangs vow to de-escalate
Mine is fork handles

https://www.youtube.com/watch?v=gi_6SaqVQSw
Show HN: Emojis of the World
Emojis of the world is an attempt to archive and analyze the most frequently used emojis in human communication.

You can help the process by submitting your selection, don't be afraid, it's easy, it's fun and it's private, we only request non-sensitive data, which includes emojis () your age and a nickname. We simply use your current IP address to gain a rough idea of your location, but we do not save it.
Except, if you read the headline, the law is protecting this guy. It’s not like this person is barricaded in the house with guns and ammunition holding off a siege from the police.

That’s what makes the story noteworthy. Somehow a person can do this and NOT go straight to jail 450 days ago for trespassing
Lets be real, these kinds of apps arent developed for andoind
I would like a sharing session from the team behind. Would be awesome hear the thought process, their pain experience etc.
That is quite insane. I guess many owners keep their flats empty rather than renting them under these conditions. Ultimately, this decreases supply and drives prices up.
Right now today it won't go as far as you are asking but the best workflow imo is using GH's Copilot in your IDE and a ChatGPT plus account on the side to use for more complicate discussions that GPT4 handles better.

I am not in game dev but that is my workflow and it has definitely improved my productivity and is a pleasure to use. I can get Copilot to help write tests for my functions, I use it regularly to see if there is a more optimized way to write the code I am looking for. I switched from JetBrains to VS Code so I can get a better integrated experience too. The Copilot autocomplete is usually pretty spot on with what I want to write.
Speaking for myself, as a silo’d SWE, but I’m starting to get the impression that MS Office (especially *.docx) is irrelevant today (excepting *.xlsx), outside of K-12 homework, at least.

I wouldn’t say it’s competition that’s involved, but that the state of the entire industry is such that all of the functionality present in winword.exe is now the minimum-viable-product in any information-system.

Or rather: anything you can do in Word, is now achievable in HTML; and given that no-one has a real need to print Word documents on paper, so it’s an ephemeral product that exists as a transition from paper-to-digital, living on borrowed time.

In conclusion, I see myself downgrading my personal Office 365 subscription from Professional Plus to just Excel in my next renewal.
You can use https://www.composerize.com/ to see what a `docker run` command would look like as a docker-compose file
There is a correct way to address this by slapping him with a hefty fine.

But having someone so clearly misuse laws meant to protect vulnerable persons, should not evoke sympathy. She should be thrown out of the place quite literally.
Smartcard and NFC are two different beast.

The fashion for Smartcard is over, mainly due to the necessity of specialized reader.

The wind blows in favor of NFC cards & badge because they are smartphone compatible. But these comes with limitations.
Except that all those arguments don't apply if your bonds are not in your own currency (all of the US Treasuries are) and you don't control the money supply of your own currency (the US does) and your currency is not the default world currency (the USD is).
FYI: Your price might increase in the future.

https://techcrunch.com/2023/10/03/motel-one-says-ransomware-...

From another source (non-English) I get the data (5TB) is available on the darknet.
Yeah, local Fox affiliates are an entirely different kind of thing.

https://en.m.wikipedia.org/wiki/KTTV
Even after reading two articles about this, I don't understand the legal context.

The guest seems to not have a contract for a long term stay. So how can they have any protections that cater to real renters? Does this mean everybody who breaks into a house has those protections?

What would happen if the owner evicted the guest via some private security firm? Would police help the guest to get back into the house? On which legal grounds?
At some point we as a society need to admit that both the space program and the "defense" sector are just jobs programs and aren't really there to build anything useful. One need only look at the Space Launch System or the F-35.

They're mechanisms for transferring tax money to gigantic employers that employ people across zillions of different congressional districts. It's a doublespeak to avoid having millions of people on a program that would otherwise be termed "socialism" or "welfare".

SpaceX/Starlink, on the other hand, are more interested in shipping and servicing customers and getting revenue thereby than being approved by a constituency and/or the existing military-industrial complex.

The DoD and SpaceX were built for drastically different purposes, and it's no surprise that they have drastically different change control procedures.
Also Iran in 1953 had a prime Minister Mosaddegh, who wanted to nationalize Iran's oil. The UK (and US) sought the support of right-wing mullahs, then overthrew the prime minister and replaced him with a dictator. Then the CIA helped SAVAK kill off the secular left for the next few decades. Eventually even the right-wing clerics and bazaari grew tired of foreign interference and threw the western powers out.
The final 11 seconds of a fatal Tesla Autopilot crash
Has he tried all the usual tricks.. switching off water, turning off electricity?
Their forms are excellent, I completed my British citizenship effortlessly, all online.
So it turned out just this week that the prominent democratic opposition figure, the guy behind the anti-authoritarian icon Pussy Riot and the anti-war, pacifist often-cited media Mediazona, brags that he is enlisted in Armed Forces of Ukraine.

So he is non-Russian, non-democratic, non-pacifist non-journalist.

He is just a proud Ukrainian fighter all along the way. Great for him. Have we got any Russian opposition? Give me a name, I challenge you.

I also wonder how great it for low-level activists who were supplying Mediazona with information in order to raise awareness of Russian soldier deaths on Ukrainian fronts, that they are now liable to get high treason charges for offloading that data directly in hands of an enlisted AFU fighter.
The self-referential directory inode.
A perfect illustration of my point, thank you.
There is something about this article that kind of annoys me. It's my understanding that back in the year 1006, the entire world was not using the same calendar. Each of these observations would not have been recorded as simply "May 1, 1006", they would have been in each observer's respective calendar... Yet this article just states them as being recorded on the same day using the Julian/Gregorian calendar format that we use today. I would have liked the article to go into more detail about how they were able to sync up the dates across the various calendar systems.
When I moved to the UK, one of the surprising things was how well the GOV.UK ecosystem worked. My original country uses a mishmash of Java applets, ajax-based websites, and a mixture of mildly broken, outdated web technologies, served from a variety of domains. GOV.UK was a breath of fresh air with its simple, consistent UI, served as static HTML. This is how internet services should look like.
MacOS only.
that's not true. they only ban ai if you don't clearly have usage rights for the data that the ai was trained on. obviously, this includes basically all of the big and popular available AI APIs at the moment.

that sucks for using AI right now, but it's only a question of time until you get huge models trained on CC0 data imo
In $current_year? Sure some cheap Android TVs are probably littered with suggestions to offset the price, but wouldn't it be strange to pay for Netflix and still have to watch ads?
How conflicting it must be to produce a technology designed to help companies collaborate and work remotely, but not allow your own company to collaborate and work remotely. If the VPs and executives had any self awareness they might be embarrassed.
Seriously. I'd say this doesn't make sense, but see LA and California.

>> Because she stayed in the unit for six months, Hirschhorn qualified for L.A.'s recently adopted Just Cause Ordinance, which requires a landlord to have a legal reason to evict her

But...

>> Hirschhorn’s attorney told the Times that "she was not required to pay rent because the city had never approved the unit for occupancy and that its shower was constructed without a permit."

So she's staying in an unlicensed rental unit, not paying, and yet entitled to renter protections?
> The guest seems to not have a contract for a long term stay. So how can they have any protections that cater to real renters?

Airbnb provides a contract page that can be considered a rental document in the eyes of California regardless of length.

> Does this mean everybody who breaks into a house has those protections?

See point 1.

California is a real life big rock candy mountain.
Its very common in loads of countrys - or at least terra-cotta tiles: Spain, Mexico, Italy, Greece. Its a good way to keep a house cool in summer.
Maybe I’ve been reading about 0days and spyware too much recently, but this just seems like it’s going to speed run privilege escalation.
Am I insane if I think none of these cases should be the landlord´s problem?

If the judge does not evict (1) then state should pay the rent for them.
Definitely not something that should be endorsed as the hacker mindset. This is a scam and an overall detriment to society even if legal.
> No frills or silly scroll jacking animations plus javascript hogging contraptions that we see in almost all websites these days.

Still the cookie warnings though :-( I've just visited on my phone the forms page linked in the title, and the first thing that greeted me was a full-screen page-blocking dialog with some cookie nonsense. You can't interact with the contents of the page until you decide how you feel about cookies.
well yeah. Same way people like heist movies or murder mysteries. Theres something compelling about something so brazen. Doesn't mean i'd ever want to meet the people involved or think they're good or whatever
There’s a difference difference between positive sum, hacking and zero sum or negative sum hacking
What on earth are you on about? You seem to have unilaterally declared that I was being sassy, when in fact this exists nowhere other than your own head. Then you run around like a sheriff on a power trip ranting about protecting the community from us sassy brats.

Brass tacks: you need to stop what you’re doing, or you’re going to get yourself penalized by the mods. They have a duty to protect the intellectual curiosity of the site. Trust me when I say it’s no fun to be in the penalty box.

You can start by re-reading the guidelines and paying particular attention to "don’t cross examine," along with realizing that it’s not okay to be calling people a dick multiple times when they’re engaging in good faith.

Your call. Either way, I wash my hands of you and this conversation.
Well aren't you just the genius holding the internet together.

Of course the underlying algos are similar, because they are table matching and they are also doing either min or max matching depending on the requirements.

They're also sorted for most efficient access. Does that make sorting somehow part of access control?

btw, these days, most of the "internet" is expressed either in programmable hardware or in software. Some of those algorithms may be expressed in raw hardware.

I work with a guy that makes gzip operate in hardware at 10G speeds, I'm aware of the requirements of networking.

I'm also aware of the OSI layers and how they sort of but not quite map to L1-4 of modern networks, which only have those names because of OSI.

So don't insult people here because you do some low level network design.
There’s a solid implementation for Rust: https://docs.rs/hcl-rs/latest/hcl/

And an implementation for python which is at least widely used, not sure on quality: https://pypi.org/project/python-hcl2/
And Norway: https://www.designsystemet.no/
I wonder.why a Peace Prize should ever go to anyone for fighting, even if the fighting is for a patently just cause. There should be a different prize, or at least a different name for it.

But this ship has sailed, apparently.

OTOH it's really understandable that many people value fighting for a just cause higher than peace. The easiest way to peace is often to just surrender, and have peace on the terms of an evil aggressor. But it's not a kind of peace many people prefer to live in.
After all the insanely high cleaning fees and lists of chores these AirBnB landlords make you do just for the “privilege” of paying to stay in their property, along with driving up the prices of properties and rent in their area, I’m kind of glad the tables have turned. They had it coming.
Apologies. My response was too snarky and too clever by half.

My point was that it’s easy to miss our own hubris when measuring our present ideas against the past, and that a bit of circumspection is well taken.
Nice! Lots of tricky edge cases to do this right: there’s ambiguity in the JSON Schema spec, version-to-version changes, many popular community conventions that don’t adhere to the spec, etc. Feel free to check out the tests to understand some of these: https://github.com/bcherny/json-schema-to-typescript (shameless plug — I have maintained this library for a number of years).
Why are they so anti AI? It seems inevitable. Fear of IP battles like those w/ authors suing OpenAI? I guess I can understand wanting the dust to settle on some of those issues.

But I think the genie is out of the bottle (and I’m of the opinion that GPT content is transformative enough to warrant fair-use exemptions) so it would seem wiser to find a careful way of embracing the new tech.
I know, I didn't ask how to mix it up but why it didn't become basic knowledge by now? :P
Coming from Japan which is notorious for having the worst digital experience, the UK's gov.uk ecosystem is incredible
Long gone, DEC is still powering the world of computing