skysight-inc/HackerNews huggingface dataset:
An oil filter can act as a suppressor too so I don't think there's much you can do about that.
Agree, that is all kids would need.
Ha ha, spring security is tricky and high chance may surprise some one while "boot"strapping a new project. But once done, it is out of way.

I did not like much of the XML, because it always seemed lot of duplication. All you doing is copying bean definitions and changing bean id and class/interface most of the time. But it became non issue over time. Now spring boot made it really easy with all those annotations.
They are not claiming that it experiences emotion. The point is that it's movements are very emotive.
your phone, but the complaint in the original article is about those who don't use great security practices, which is most of us. Passkeys limit the attack surface to just your phone. With passkeys, attackers can't get your password (that regular people reuse everywhere) from some weak website or from phishing and then use that to impersonate you. We must go to something like passkeys.
The thing here is if cross-platform tooling were available, it’d encourage the proliferation of “checkbox ports” which have barely been tested on actual Macs and never optimized for them, which one could argue is more damaging than not having ports at all.
Stream Processing: Is SQL Good Enough?
Paradox in the data infra world: SQL's expressiveness might be limited compared to Java, yet SQL-centric data systems manages to generate more revenue.
Isn't it strange that it's unlawful to have a muffler on your gun, and unlawful to NOT have a muffler on your car?
I don’t want taxes hidden inside the price of an item. It’s much better for consumers (and voters) to be aware of how much of each purchase goes to taxes.
Always a pleasure to see ATI links on here, especially when it's something like this, which has to be one of the most beautiful and practical suttas in the Pali canon.

Transcribing buddha-dharma has long been praised as a meritorious act. In the modern era, it'd be hard to beat John Bullitt in his practice of it.
Finally the billion dollar online marketplaces get held to a similar standard to real mom and pop shops.
I am rewriting it in Rust with AI integration.
Engineered material can reconnect severed nerves
I'm sure the number of Steam Decks is far higher than the number of people gaming on their Mac.
Maybe rather than saying what it is straight away, say what it does and why you'd want it. "Wayfire: awesome visual effects for your Linux desktop" and then go on to say what it is.

You might even have a short bullet list of reasons to use it rather than just a tagline.
A Ramjet Artillery Shell Right as It's Fired Out of a Howitzer
For having hit unsustainable levels in 1971, it has sure held up well for the last 52 years. I would expect something unsustainable to do less sustaining.

(Now, true, the federal debt was unsustainable under the Bretton Woods arrangement.)
> never met a real human with this take

Where are you? I, too, have friends on both sides of the aisle, and the general take is a single large tranche of weapons may be better than the current drip feed. (Bay Area, New York and Wyoming.)

I only see opposition from the far left (New York, Bay Area) and right (Wyoming). (Not saying all opposition is extremists only. Just that it's where I see people fixate on opposing aid.)
He kind of outed himself: https://www.reddit.com/r/UkrainianConflict/comments/15btz15/...

I doubt he's an intentional Russian puppet, but he's probably being fed bullshit by one.
phishing, password reuse on easily hackable websites, strong unguessable passwords require more work that most people will do and they require storage on some device just like passkeys anyway.
Dropbox announces new AI-empowered tools
This got me wondering so I went and looked and it seems like lo and behold there was actually a commit to the GNU ls source just 2 weeks ago.

https://github.com/coreutils/coreutils/blob/master/src/ls.c

"maint: prefer char32_t to wchar_t"

Looking through, the GNU coreutils still get a lot of maintenance tweaks.
Maybe we should just start giving the medals to the manufacturers. The athlete may become inconsequential compared to the shoes:)
Passwords can be weak, reused, stolen, or shared.
> You have access to Google Authenticator

FYI you can set a PIN on Google Authenticator so it can’t be opened without your PIN. This should be different than your Lock Screen PIN.

Sensitive information (WI-FI password etc) should be stored in a password app such as 1Password etc.
I'm sure there are well established practices in Tibet but IMO there is nothing special about them, which is why there are multiple schools of Buddhism instead of just one.

I had a real suffering person to practice on (me) which is why I'm quite certain about what I wrote. If you have capability to improve your mood on demand, your entire approach to life changes. You can be selfless, take risk, work long hours, even if entire world collapses, you will always have metta to support you. This is how I understand equanimity at the moment.
They want to further outsource law enforcement to a due-process-free zone.
I mean you also drive a car in city limits and it is illegal to fire a gun in city limits in most places...
What are some examples of city governments killing themselves rather than accepting devaluation? Most bankruptcies of declining cities have been driven primarily by union contracts plus pension and benefits obligations to retirees. It doesn't help for politicians to accept the situation when they're locked into contracts with no room to maneuver. Then Chapter 9 bankruptcy becomes the only solution to force the workers and retirees to take a cram down while preserving essential services.
How is a developed country suburban dweller trying to learn carbon neutral living not exercising its curiosity. Isn't learning that?

How do you know we were always going forward in the right direction? How do you know sometimes we don't need to go back? DDT? CFC gases? There lots of examples even from the recent times.

Why do you think people in the pastoral civilizations didn't exercise their curiosity? Just because they didn't built things you fancy? Didn't they create things, like art, just for the sake of beauty? Isn't that a kind of exercising curiosity, Didn't they develop and learn methods to live in harsh environments, to use the plants as medicine, etc. Isn't that kind of learning valuable, because it does not lead (as quickly) to creation machines doing fancy flashing stuff? they were living, and progressing in a different pace in possibly different directions.

Your attitude is not simply colonialist, but also lack respect for many forms of knowledge, only for these are not on the modern technocratic urbanite's tool-belt makes it especially narrow-minded.
Step 1: Put message on blockchain beforehand with exact date/time and characteristics of DDoS

Step 2: Execute DDoS

Step 3: Prove to others you are responsible by using private key
Code in fresh languages tends to rot fast, but old UNIX software is preserved with C salt ;)
Unfortunately we are not in state of constant economy grow, now economy in recession and have great deficit, so money are expensive, so investments must be returned within short time interval, so need extremely high margins.

Question is, if people invent lot of things, totally worth about $1000B in just ONE YEAR, and now clearly seen less then 1/10 of this number.

Examples could be fully autonomous car autopilot, robot capable to replace 90% of building industry workers. They are possible, but not seen in ONE YEAR time frame.
Another "use popular tech because it's popular" article dressed up as engineering wisdom. "Nobody gets fired for choosing IBM" isn't supposed to be aspirational!

The most effective organizations I've seen have been the ones who are the most willing to both use "non-standard" technologies and develop their own tools in-house. There's a question of causation—are they more effective because they're open-minded, or do they get away with weird choices because they're more effective?—and, from what I've seen, it's a bit of both. But I've absolutely seen, first-hand, that top-down standardization on enterprise "best practices" is absolutely not a recipe for anything beyond passable mediocrity. If anything is a sign of weak engineering leadership, it's that.

I'm not saying that a team should use different technologies for the sake of using different technologies, I'm saying that strong engineering leadership means having a clear technical vision and culture where the popularity of a tool is very low on the list of considerations when choosing what to use.
Right, this is why my critique is that it is a weak paper in general.

It's misleading to make claims about "LLMs" based on experiments with a single LLM. This is made worse by testing with very few prompt variations.
Unsigned 32 bit IEEE 754 floating point, right?
Go patches are out. (1.21.3, 1.20.10)
I’ll often scroll through replies and preemptively block accounts that demonstrate behavior I don’t want in my social media experience. I imagine others must do the same with accounts that have liked certain posts.
Why Software Engineering Will Never Die
So we should stick to game over passwords, that don't even require device access, just a clever phishing email or hacking a weak website that has a copy of your password that, oops, you reused on 10 other websites?
Can you pleeease also enable SaaS subscription pricing, and a discord bot so I could easily query my files and folders through a chat interface?
Make it also work on blockchains.
I've been reading these funny tweets for years from sh!tposters for years. It's funny but offers zero value. Wendy's was the first that gained traction, I think, and pivoted to a big payout.
Is this similar to the brass knuckles, I mean “belt buckles”, they sell in shady gas stations? Or the tobacco shops who sell pipes for anything but tobacco? As long as they don’t say it’s for illegal use it’s a gray area.
I think one of those things should be loud and one of those things should be quiet.
I would typically tend to disagree with you, but some thoughts.

MRIs are fairly daunting machines. Even working in healthcare and as a firefighter, and having received multiple CT scans, my first MRI was a little intense. Mostly you're not necessarily in the best mindset to begin with...

... however, I do somewhat agree with you.

Looking around Discord last week, I saw a bunch of servers with earnest "warnings" to people about the national alert test.

"This is going to make a loud noise, and that may be frightening or scary to you, so we'd advise everyone to turn their phones and TVs off for the duration of the test to protect yourselves."

and verbiage to that effect (suffice to say that wasn't an exaggeration). Things like that are teaching people to jump at shadows, and more concerningly, there is a steadily growing subset of people who revel, indeed sometimes take pride in this at self-identifying like this, lumping it under a vastly wider umbrella definition of 'neurodivergent' than was ever intended by that moniker.
Don't some (not all) of the underlying apps have protection too?

Even if my phone is unlocked I need to auth via FaceId to be able to open the Google Authenticator app for example.

Wondering if I should into whether more apps have this functionality...
This helped me out: https://linearmouse.app/
To frame it... one fifth of GDP, or all of the projected government expenditure in 2024.
> "...it was occasionally a significant annoyance to pass dependencies by hand..."

Your comments are confusing on whether you eschew a dependency injection framework, or eschew dependency injection as a pattern in general.

If it's the former, then you are certainly free to roll your own DI rather than leveraging a library such as Spring, Quarkus, Micronaut, Guice, Dagger, or any of the others out there. I strongly doubt that you'll implement something better than any of those. However, having written the code yourself you'll be more likely to understand it all, and that can be attractive for many people.

If it's the latter, then it's harder to take the position seriously. Look, the Java ecosystem certainly suffered from extreme OO over-engineering in the late-1990's and early-2000's, no doubt about it. A lot of people went too far overboard with enterprise-y design patterns, for sure. But that pendulum has been swinging back for over a decade now... and in the 2020's, the point of using DI is not to go crazy with the enterprise design patterns. The point is write code that can support an actual unit test suite!

You use DI so that your test suites can inject mocks or stubs, to isolate external integrations from the code under test. I don't care which language or framework you use, or whether you're using a 3rd-party DI library or implementing the approach manually yourself. If you're not using DI to accomplish this in your tests, then you're either: (1) using monkeypatching to achieve the same goal in a more dangerous manner, or (2) just writing un-testable code, and perhaps writing some integration tests that you pretend are unit tests.
Are there any translation layers for GPU? E.g. from Vulkan to WebGPU
This Unicode icon being allowed in titles definitely feels like a cheat.

That being said, no, thanks, SaaS with camera continuously enabled is the last thing I want.

This doesn't fully convince me:

> Your posture data never leaves your device, period.

It's still recording continuously and not open source.

Edit: at first glance, privacy policy sounds good.

It's also an interesting use of the Mac's special GPU capabilities.

Still, hard no from me. I'm glad my employer doesn't utilize some variation of this (yet).
> the kinds of problems that get explored

The uncanny valley problem?

This intrigues me even more.
It doesn't help if you've trying to do it totally blind, but the 2 open square holes go on top, once I figured that out I've never had any issues plugging them in correctly. The only one I have issues with is my keyboard because the pcb in the plug is black and the it's a little hard to tell which side is the open holes and which side is the black pcb.
I agree with you. The only thing I can find is that the author alludes to the fact passkey auth relies

"completely on device authentication security which for many users is extremely weak"

... but you need physical access to the device too. Plus, for most modern devices with TPM-like ICs, it's probably more secure than a PC with a password manager?
Well yeah, that's just how DoS kinda works with these sorts of vulns. "Be faster" is obviously a good strategy, but is it viable ? Is setting up and canceling a stream something that can be done at GB/s speeds? Maybe, idk.
There is no bridge (/set of bridges) that completely cuts off the Baltic Sea--the Øresund is a bridge-tunnel, so the shipping lanes are completely unencumbered by bridges.

Although like the Black Sea, there is a corresponding treaty governing the the straits as an international waterway.
I’m asking as I am interested. I don’t see this as a problem for the Us to solve, though they can.

It’s primarily a European problem but the world as a whole needs to address it and show that the methods used by Russia will not be tolerated.

Until 2022 Russia was clearly shown that their actions were ok, frowned upon but tolerated.

It seems we are in a holding pattern now, and the west could swing it if it really wanted to.
Brainfuck is easier and simpler to learn than C. That doesn't mean that writing an application in Brainfuck is easier than writing one in C.

"which is easier to learn" is basically an inherently subjective concept at this point, we as a field do not have an objective way to answer this question, except for extreme cases like the one I am drawing above. For any "real" language, it is much, much, much less clear-cut.
I’m currently evaluating if it is advisable to store Passkeys on a hardware key such as Yubikey, a password manager such as 1Password or on-device.
Sounds like a really great way to potentially destroy someone's career if they aren't terribly competent and you are. Infect some component in their home network that they don't even know is smart-enabled, and keep breaching their new devices, adding them to an active and conspicuous botnet. The only recourse for average Joe is to find expert help, which isn't really in abundant supply if you are a semi-sophisticated malicious actor.

I don't even want to think about the ramifications for small and medium sized businesses. Realistically, how much would it cost to be able to completely destroy a local competitor by paying someone to orchestrate a few events in succession.
I disagree on this. Yes it's C. But I've heard people comment "I don't like writing C, but I don't mind Postgres C".

The bigger hurdle which Peter mentioned in another thread is simply building up enough expertise with the system and having the right level of domain expertise.
That's fair; I just don't know that security will ever get to a point that's both easy for everyone and secure, but maybe I'm being a pessimist.
Batteries in an outdoor vault still have a vulnerability in their power lines. Doesn't matter if your neighborhood has a battery if there's a down power line or transformer so the batteries have to stay shut off.

You'd also need to have a way to insulate each neighborhood so that their power stays local to the neighborhood instead of seeping out into the greater network. Some kind of dynamic terminators.

The dynamic terminators would specifically be a nightmare. Do they fail closed or open? If they fail open while the battery thinks it should be on, it could explode. If they fail closed, the terminators can shut off the power for a neighborhood (or maybe multiple if the power lines run in a chain). If the remote control doesn't work, they'll have to send someone out to manually do the process to shut down the battery or get it in sync with the grid and flip the terminator.
Not interested in hearing people parroting the boring technology mantra over and over. Maybe say something novel for once. Also maybe choose technology based on pragmatic metrics, not how old it is. “Choose boring technology” is like MBAs saying “we’re data driven”.

And I guarantee if we look at this persons tech stack it’s probably slathered with a bunch of shiny new AWS crud that’s “web scale”.
I guess I'm one of today's lucky 2000, because I didn't know this existed but the copyright notice says ”2022". Looks useful.
Passwords are shit, this is widely known. Password managers are a stopgap. I'm not sure whether Passkey is the solution. Maybe... I don't know enough about it.
The author does not seem to provide any proof or example of why Passkeys are "weak" or "flawed". Anyone has some references about that? Would love to know if it's the case.
Linux compose key: use acute accents and other characters
GP seemed to be talking about physical access.

How would passkeys stop them if they are are in physical possession of the device and can unlock it? It doesn't seem passkeys protect you more here.
> if you want to solve the problem you do not want to create more problems by solving it.

but if, in contrast, what you want to create is a business

then it's easy to argue you actually DO want to create more problems; partially so you can "solve" them in "the next version" (or something); this way your "customers" (which really are looking more like victims) can have a real motivation to upgrade; to buy the next version, to keep on being "valued customers"

this is why making tech products used to be very different from making consumable goods (e.g. food); right up until all businesses turned into subscriptions businesses and other kinds of rent-like schemes
Other than in Hollywood movies, is there any crime that is enabled with a suppressor that isn't enabled with just the gun itself? Is everyone collectively harmed by one person possessing one?
A couple years ago, I wrote 5 things I had learned [0] going from side project to a full-time business. Might be worth a read?

[0]: https://keygen.sh/blog/5-things-ive-learned-in-5-years/
At least on Apple devices, the passkey implementation requires re-authenticating using biometrics to use a passkey.

Even if the device is unlocked.
Heh, hopefully not too often. First I thought this loops 128 times. Then 7 times. Then 8 times. Then I thought "undefined behavior" if bit is a uint8_t. But then I thought, I don't have freaking clue because I can't keep all of C's implicit casting and arithmetic operation rules in my head.
Schema language for algebraic data types
any of those is an improvement over passwords
> But that doesn't limit number of simultaneous connections from a single IP address.

Opening new connections is relatively expensive compared to sending data on an existing connection.

> In my thinking, as soon as the request is reset, the server resources are expected to be freed,

You can't claw back the CPU resources that have already been spent on processing the request before it was cancelled.

> By request flood I mean, request flood, as in sending insanely high number of requests per unit of time (second) to the target server to cause exhaustion of its resources.

Right. And how do you send an insanely high number of requests? What if you could send more?

Imagine the largest attack you could do by "sending an insanely high number requests" with HTTP/1.1 with a given set of machine and network resources. With H/2 multiplexing you could do 100x that. With this attack, another 10x on top of that.
Related ongoing threads:

The novel HTTP/2 'Rapid Reset' DDoS attack - https://news.ycombinator.com/item?id=37830987

The largest DDoS attack to date, peaking above 398M rps - https://news.ycombinator.com/item?id=37831062
I completely agree with this. Spring was an absolute nightmare during the short period of time where I had the misfortune of using it. It also didn't help that the codebase was a monstrosity... classes following no design patterns and having 40k lines. But still...
https://archive.ph/DMvrG
Related ongoing threads:

The novel HTTP/2 'Rapid Reset' DDoS attack - https://news.ycombinator.com/item?id=37830987

HTTP/2 Zero-Day Vulnerability Results in Record-Breaking DDoS Attacks - https://news.ycombinator.com/item?id=37830998
The whole point of this attack is to be able to make a lot of requests for each IP address.

If you are making one or few requests per IP you don't need this attack, and also aren't likely to have any effect on a Google-sized entity.
It was a thing for a while, less so now though. To be fair, while they're illegal if fully finished (it's complicated, the ATF changed the rules recently), they're not exactly a threat to anyone. They just make weapons less concealable and only minimally decrease the audio signature. They're not like the movies. Congress and the ATF have been pushing to deregulate them because the paperwork burden required to make/buy them legally is gumming up the works at the ATF and they're unregulated in a lot of the commonwealth/European countries.
Thank you! We'll work on the messaging on the website!
> As Reuters reported on Monday, the reasoning boils down to this: according to the judge, Sonos wrongly linked a pair of patent applications in 2019 to a much earlier provisional application from 2006 in an attempt to claim “a priority date before Google’s disclosures and product releases” that would thus put Google under “a cloud of infringement.” Sonos is also said to have discreetly made amendments to the documents, which greatly frustrated the judge.

If this is true, Sonos needs to be punished for such behavior. They clearly abused the patent system for their benefit, I'm surprised this wasn't brought up during the initial trial. Maybe it was, but I don't recall anyone discussing it.
Not a problem if they don't say it since then it's not derailing the conversation. It could even be a benefit if it motivates them to look for actual holes.