skysight-inc/HackerNews huggingface dataset:
Your last paragraph annoys my frugal Yankee nature enough that it’s a long-last resort for me.

On my personal desk setup, I don’t charge my Macbook in the same cable that carries video. My wife’s setup is a single cable connection (but she has an Air, so only a single external monitor).

Working from home, I undock rarely, so two cables is not a problem for me, but I want a one cable for the kids who will dock/undock almost daily.
Funny man, thinks big ISP cares you yourself blocked your own site from your own customers coming from the big ISP network.
I haven't dealt with this side of Java in a while, but it reflects my experience poking at Java 8 performance. At some (surprisingly early) point you'd hit a performance wall due to saturating the memory bus.

A new GC could alleviate this by either going easier on the memory itself, or by doing allocations in a way that achieves better locality of reference.
It depends on what you think a "request flood" attack is.

With HTTP/1.1 you could send one request per RTT [0]. With HTTP/2 multiplexing you could send 100 requests per RTT. With this attack you can send an indefinite number of requests per RTT.

I'd hope the diagram in this article (disclaimer: I'm a co-author) shows the difference, but maybe you mean yet another form of attack than the above?

[0] Modulo HTTP/1.1 pipelining which can cut out one RTT component, but basically no real clients use HTTP/1.1 pipelining, so its use would be a very crisp signal that it's abusive traffic.
That is why we now step back to SSR-apps. No api necessary, no extra layers, no extra bloat and it is fast and scalable enough for the most apps.
From the article I understand that the Israelites were a group of Canaanites. Regarding the Exodus, again, according to this article, there could be a connection between the withdrawal of the Egyptians from the region. The topic of challenging scriptures (for every religion) with archeology is very interesting because you need to have the mind open where one and/or the other have gray areas but you cannot repress them.
That actually sounds like a really good idea.
This is already implemented in the physical world (in a much less efficient way) in the form of “no spam” stickers and registrations.

Is there a reason other than inertia for why it hasn’t been implemented?
There is something to "explicit is better than implicit" mantra. I appreciate the C way because if I write a.b and it's an error it clarifies what's going on in my head (I now know a is a pointer not an object).
I’m currently visiting Tokyo and found the building where I’m staying too. This is so cool!

I’ve enjoyed seeing the buses move around on Google maps too. And all the bus times are so accurate at the stops. I wish every city made all this data available.
Honestly I think I'd use latex (but I'm not recommending from self-publishing experience) - as arcane & annoying as it can be... I think trying to do the typesetting/formatting side of it with markdown or similar would be even more annoying? You can do everything you want (processor-dependent, but e.g. mermaid for diagrams is often supported) in markdown but when you want to make it look pretty as a book you're going to need something like CSS, some way of controlling fonts and image/diagram positioning, etc.
...so HN

Oh, it's just that folks here can expect a lot when one posts an anecdote. Like how I didn't think all the way through the implications of what I saw, and did I consider...? "Dude, it's just a story."

Not intended as an insult, and not quite a compliment, either. But it is one of the things I appreciate about HN most of the time. Take your typical "studies have shown..." post. I appreciate that folks with more experience in statistics and how studies work will post that "it might not be that bad, considering variable Y...", or "with that sample size?".

It was just an off-hand comment, perhaps too much of an inside joke.
Looks cool but unfortunately the only games I'd be really interested to play are the more modern ones my friends are playing, my understanding is the copy protection etc always gets tripped up by Wine.
I definitely think of keys per my layout, not what is on the cap. I'd expect that to be the norm for touch typists.
https://www.giantitp.com/comics/oots0327.html
Simple! To prevent it being abused easily you could make it so you would need to send a high number of those packets for a sustained period in order to activate the block.
If I run a nginx without Cloudflare, what should I do?
A lot of that fun internet just isn’t indexable from google.

Many private communities and discord servers have replaced communities that once existed on traditional social media platforms.

It’s not less fun in general, all the life was sucked out of big social media and new internet users saw that and decided to move to closed platforms like discord
If you are into Emacs, Org-mode is the obvious option. See: https://orgmode.org/
Movie industry is still massively out of touch.

In order to combat piracy, you need to out innovate them in terms of convenience and features.

Music piracy is almost a non-issue because it is way more convenient to get music via Spotify and streaming.
> 30% fee for apps

You can just skip the app store, can't you?
I'd look into what pandoc can do for you. I don't write books but when I'm writing anything I stuck with pandoc markdown. That way I can pretty much generate any output I like. I occasionally use zettlr too, but mostly stick with ghostwriter.
Looking forward to using this. Think this’ll help managing secrets for the Bjerk team — like how it’s composable
I feel for the Mac users in spirit: Linux users have often received the same answer ("There aren't enough Linux buyers of this game to justify the development/support costs of porting."). OTOH, Counter-Strike 2 actually has a native Linux build even without Proton, so, this particular title isn't a problem for us.
Exactly. I am a casual gamer at best. I am an Apple power user. I lucked into a gaming PC a couple weeks ago for $50 at a thrift store. So I have a PC just for gaming. I think non MS users who game probably have the same. Likely a dual boot Linux/MS computer.

It is kind of annoying you can't game on Macs, however thats just how things are. Cars handle better than Trucks, and Trucks can haul more than cars. There is a lot of overlap in what they can do, but ultimately they have different specialties.

That said, my experience with Microsoft from a long time *nix users has been pretty horrible. I do think a lot of this is Microsoft, but a lot of it is going from being a poweruser to being a total novice is quite annoying.
I made a FB account to change a client's Page settings, and now I pretty regularly get emails from FB along the lines of "Having trouble signing into your account?" because there's been tons of failed repeated logins. I think it might just be a normal part of having a FB account? Can't speak for the other services.
Interesting, I've always thought it's & pronounced as Latin `et', which sounds like `at', so &x gives a pointer that "points at" x.

Also, the "near on the keyboard" idea doesn't make sense anyway because C was developed on a bit-paired tty33 where the two symbols are not that close to each other.
I was there, but didn't know that I could click on OS Version. Thanks!

I also wonder if Linux or Mac OS users are more or less likely to answer the surveys. Unless they've changed how it works, it is a pop up asking if you want to be recorded.
Quick note: your article links to webbu.app but the link text is "webu.app"; that was awfully confusing.

Might be worth a pass through to proof-read; I saw another couple of typos, but the page is now throwing a Wordpress database error, so that might be more urgent to look at.
The point here is not to target the Old Testament but think in wider terms about believes vs. history/archeology. You can find similar challenges in other religions and cultures.
This project is precisely for devs who dislike codegen and want to just ship products fast.

1. Design your API in yaml
2. Run a mock API
3. Develop the App, iterate mock API
4. Implement backend and ship

No code generation needed. Generate types if you want.
>> It did run like a dream, though, even on my ancient potato

I believe this is the compositor they're going to run on Raspberry Pi 4 and 5 with the next OS release, so it makes sense it will run on more limited hardware.
Have seen both good and bad opinions around coding bootcamps. Are they worth the time and money?
Why do we need weight decay in modern deep learning?
Abstract: Weight decay is a broadly used technique for training state-of-the-art deep networks, including large language models. Despite its widespread usage, its role remains poorly understood. In this work, we highlight that the role of weight decay in modern deep learning is different from its regularization effect studied in classical learning theory. For overparameterized deep networks, we show how weight decay modifies the optimization dynamics enhancing the ever-present implicit regularization of SGD via the loss stabilization mechanism. In contrast, for underparameterized large language models trained with nearly online SGD, we describe how weight decay balances the bias-variance tradeoff in stochastic optimization leading to lower training loss. Moreover, we show that weight decay also prevents sudden loss divergences for bfloat16 mixed-precision training which is a crucial tool for LLM training. Overall, we present a unifying perspective from ResNets on vision tasks to LLMs: weight decay is never useful as an explicit regularizer but instead changes the training dynamics in a desirable way.
This is why there is a secession movement in Alberta with meaningful support, and significant support for it in Saskatchewan and BC. As Peter Zeihan points out, secession in Canada is legal.

Those who claim that "US Democrats would be Conservatives in Canada" are completely wrong. Were Canada a part of the US in 2016, Trump would have won a majority of the vote in Alberta and Saskatchewan, and would have done very well in BC outside downtown Vancouver/Vancouver Island, Manitoba, and parts of the Greater Toronto Area and southern Ontario (probably not rural Ontario). In other words, the chunks of Canada that are the most similar to the chunks of the US that voted for Trump. The GTA parts I'm talking about are the ones that loved Rob Ford as mayor, and swung heavily for Doug Ford in 2018.
My Company Failed. So I Drove for Uber. Now I Run a $1B VC Firm in NYC
YES. TRRS would have been great. Or mini-TOSLINK
> While REST APIs don't generally provide the same level of control to clients as GraphQL, many times this could be seen as a benefit especially in scenarios where strict control over data access and operations is crucial.

REST is more secure, cacheable, and more performant on the server side as field resolution doesn't need to happen like it does with GraphQL. I'm told it is easier to develop against on the client side, and this is a trade-off, but I favor REST applications over GraphQL ones as a DevOps engineer. They are much easier to administer infrastructure-wise. I can cache the requests, I don't need to stand up an Apollo router, and WAF support for GraphQL is still pretty nacent. My coworker found a GraphQL query only about five layers deep that could tip over a service. Please don't put cycles in your graphs.

Data at our company suggests that several small requests actually do better performance-wise than one large one. We switched to GraphQL a year and a half ago or so, but this piece of data seems to suggest that we might have been better off (performance wise on the client side) just sticking with REST. My suggestion to that effect was not met with optimism either on the client or server side. Apparently there are server-side benefits as well, allowing for more modular development or something like that.

I have used OpenAPI using connexion[1]. It was hard to understand at first, but I really liked that the single source of truth was one schema. It also made it really easy to develop against the API because it came with a UI that showed the documentation for all the REST end points and even had test buttons.

1: https://connexion.readthedocs.io/en/latest/
Not everyone cares about Cloudflare, or even HTTP/2.

The exploit has more to do with their implementation than the protocol.
Doesn't really work for those types of attacks

> In this final layer, we filter out attacks in the form of SYN floods, DNS floods, and invalid packets. We are also able to flexibly adapt to other unique attacks and to reliably mitigate them.

Which means any legit http2 connection will go just fine.

Even if such connection now triggers hundreds of substreams.

Push for end to end encrypted internet also means you can't really stop any more advanced attack. You could have just few dozen of hosts doing 20-30 connections each (i.e. "looking perfectly normal" for DDoS protection provider) generating tens of thousands per second in http2 streams.

I'm speaking from experience of mitigating attack like this. Our DDoS provider was near-useless..
> What you say already exists, hell, you can use BGP to distribute ACLs

But you should own an AS for that?

> But it costs space in the routing tables

Not implementing my proposal leaves critical infrastructure unprotected from foreign attacks. Make larger routing tables. Also, instead of blocking single IPs one can block /8 or /16 subnets.
Many (many) years ago I had an "agree to disagree" discussion with a co-worker about whether Romper Stomper was a good movie or not.

She couldn't get past the ugliness of the content to see that it was 'a good movie' about bad things / people / situations.

Alien 3 is also one of those, I think. I love it, but it's dark and dreary and hopeless - in fact, because of that.
I would, without hesitation, pay $30/mo for co-pilot. I would even consider paying $100/mo for it.
Note that gcc and clang will warn you about fallthrough statements i you use -Wextra and that you have to either have insert a /fallthrough/ comment to make your intent clear.

Pity the (wo)man who does not use -Wall -Wextra for (s)he is truly mistaken
There is a commit that just landed on github so I assume there is a release out (or out soon).

https://github.com/nginx/nginx/commit/6ceef192e7af1c507826ac...
If you love text editors and terminals, then you should use LaTeX. It is set up to make it easy to show math, but even if you don’t use any math, it’s still going to be your most powerful option. And w your background the learning curve will basically be easy; it isn’t considered that hard to learn by people w your background.
The new technique described avoids the maximum limit on number of requests per second (per client) the attacker can get the server to process. By sending both requests and stream resets within the same single connection, the attacker can send more requests per connection/client than used to be possible, so it is perhaps cheaper as an attack and/or more difficult to stop
Not true. Clojure use is very rare.
I use https://github.com/Whisky-App/Whisky to play CS2 on my M1 Mac. It runs really well if you change the launch options to `-nojoy`, turn on vsync (or else it may crash every couple minutes), and can bear some audio glitches.
Here we have an entire blog post where a self-proclaimed tech-savvy user is completely unable to perform any amount of valuable work because they have no access to any data that they supposedly own.

Here is a professional in the world of tech, calling customer support to try and understand what happened to data they created but cannot access. Because they don't have a copy. Because they let Apple talk them into vendor locking themselves. And now they literally can't work, and are surprised by this fact, and have no idea why. And you're completely at peace with the fact that Apple has it stored on a non-redundant server somewhere you have no idea where, and are totally comfortable with the fact that they might grant or deny your access to that data at their discretion and you have no recourse.

I love how we have "professionals" who can't use bare metal or be bothered to administer systems, applications, or data. You don't deserve to be in this field if you can't do this stuff yourself. Someday you will lose something that doesn't belong to you, and it's going to ruin someone else's day.
You Aren't Getting a Bonus. Your Company Is Just Testing You
You can deny access only from your IP, not for anyone else.
If the one doing the blocking is not at FAANG it would do nothing of sorts. And FAANG benefit from DDoS by getting people into their walled cloud gardens.
Was really hoping M series would open up Mac gaming, but definitely a chicken and egg situation along with Apple not really doing much to help. Still hoping things get better with game port toolkit and Mac Gpu getting better every generation.

For now the best way to game on a Mac IMO is Sunshine/Moonlight and just run a gaming PC somewhere in the house, works perfect.
There is a talk that gives a good overview on Alloy and how useful using something like this is:

"Finding bugs without running or even looking at code" by Jay Parlar
https://www.youtube.com/watch?v=FvNRlE4E9QQ
It depends on the market segment. Most areas, high end/luxury type units are owned by the larger commercial investors and have the same issues. Prop mgmt companies have been doing ‘free month of rent’ type deals for a long time to avoid impacting the headline rent rates for that reason.

Commercial equivalents are usually the Class A stuff. Class B/C is often owned by individuals or small syndicates.
You can use your phone (iPhone for sure, dunno about others) to add a Suica card (and others) through the Wallet app. Then you just tap your phone and go.

There are Fare adjustment machines in the stations for the cases you mentioned. You don't have to handle cash or talk to attendants.

Station names can definitely be confusing though, even for natives.
OK, but how should an ISP distinguish a good HTTP/2 connection from a bad one (I'm talking about this particular attack)? As far as I can tell, the DoS starts after the connection from bot to server is established, at which point the connection is fully encrypted. Should all ISPs MITM their clients to ensure that all traffic is good and proper?
Also deprecating OpenGL and never supporting Vulkan doesn't send a "we want game developers" message.
You can only block access to your IP address, so you can ban someone from sending packets to you but not to anyone else. My proposal is well-thought and doesn't require any lists like Spamhaus that have vague policies for inclusion and charge money for removing. My proposal doesn't have any potential for misuse.
Yeah, I was talking about retroactive changes of course (and not changes for future versions).

Their founder/CTO (who seems to be MIA these days) published this back in 2019:

https://blog.unity.com/news/updated-terms-of-service-and-com...

"For this reason, we now allow users to continue to use the TOS for the same major (year-based) version number, including Long Term Stable (LTS) builds that you are using in your project."

Which is something they presumably "forgot" about...
>> often trained to administer drugs and other things

Not in the clinics I've seen. Maybe in full hospitals, but in my area the majority of MRIs are at small clinics where the staff are adamant that they cannot handle any drugs beyond contrast agents.
Given how widespread the usage of Box2D has been over the last decade+, I truly hope the creator has seen some form of financial benefit from it. His work is awesome and has benefitted the gamedev community immensely.

He mentions Jolt physics in this blog. That’s another example of “holy shit look at what one person can do”. I’ve found myself wishing I had Unity source so I could performantly inject that engine instead of being stuck with PhysX.
> Privacy, long term, will mean the fall of civilization.

I'm curious about your rationalization for this. Lack of privacy will also mean the fall of civilization. Civilization is just doomed to fail at one point or another. All things come to an end.
At that rate I’d run my own model
And there could be a short time limit on that block, perhaps one hour, but even 60 seconds would be enough to completely flip the script on a DDoS.
Replacing anxiety with pain on a bed of nails?
Besides the fact that apple demands far too much money from developers to "access their platform" they have also failed to deliver cross platform tooling so you need some fiddly Mac machines to be able to even build for their platform. Then there's the fact they broke backwards compatibility by using their own obscure processors so that makes developing for them a non-starter for many shops.

Sadly this is a problem of Apple's own making.
It's pretty similar to HTTP/1 pipelining, though no reverse proxy I'm aware of supports it.
Looks like there's an extension which adds a new protocol handler, which allows firing the container you like for a given link from the command line.

It's available at https://github.com/honsiorovskyi/open-url-in-container and Mozilla Extension store, so you can directly install it.

I think you can register a new "application" to open links, not set at default, and use Right Click -> Open With -> Firefox (WORK CONTAINER).

Will that work?
The Superbug That Devours Ocean Plastic
I‘m sure comcast is terrified that their users won’t be able to read my blog.
Yeah, we should invent secure communication channels and crypto keys first...
Chinese EV startup WM Motor files for bankruptcy
The IC card system is fantastic, and you can provision one on your phone without needing a physical card.

On iOS the integration with Apple wallet means you can top it up and provision it without even needing to install the app.
The moment I can train Copilot on my codebase and improve its predictions, I’d gladly pay more than $20. Even now, I find that I can’t live without it simply as a slightly more intelligent auto-complete.
Private equity firms are already an absolute blight even before Musk's handling of Twitter. I've seen plenty of companies get purchased, completely gutted and then they try to extract maximum value from customers as quickly as possible before all customers abandon ship as the product(s) fall apart. They truly are scum.
I think this is the key take away. Unfortunately world leaders are not tech savvy enough to even consider this a threat.
Anyone know if Steam has ARM64 support?

If so, then dual booting a mac into Linux for gaming purposes might be a workable option at some point.
Congratulations on the release! I have a question about the YAML DSL for ESC. Yaml is pretty convenient and easy to read when there isn't a lot of nesting but it can become unwieldy quickly and hard to make sense of, especially when you are referencing other fields. How good is the linting/intellisense to figure out if you are making a mistake in your references without having to compile?
It took me over 10 years to become a founder
I grew up not using the plural form Legos. But I also grew up thinking that it's important to never let a big company tell you how to speak.
https://stackoverflow.com/questions/13366083/why-does-the-ar...
I don't know about the price but you are not wrong. A lot of naysayers just don't know how to use it well enough in their workflow. This is definitely the future of the industry though.
The point is to accurately unveil history.

Nothing I said suggests otherwise. I was simply looking at potential aftereffects of the unveiling --- and why any such unveiling might be vehemently opposed by entrenched non-scientific interests.
I personally did 20,100 flips and I can assure you I have no clue how to control the flip. I centrally got much better at flipping and catching the coin in hand without dropping it---which takes some practice on its own.

(I know that there are techniques for adding the wobble to the toss, but I didn't study them and I have no clue how to do them. I think it is safe to say you don't discover them intuitevelly.)