skysight-inc/HackerNews huggingface dataset:
Featherpad also does so, by enabling the option "Start with files of last window".

Also:

* instead of giving an error message when it lacks permission to read a file (like mousepad) it instead prompts for credentials and attempts to open the file.

* it lets you put the tabs on either side. Or use a panel with a list of open files instead of tabs ("split mode").

Featherpad does have a qt dependency, which may be a dealbreaker for some.
A world after NLP transformation
this heavily depends on whether or not there is any interpolation, the complication is that you can detect a strobe at essentially arbitrary frequency, provided it is illuminating a moving object, as you will see the rate of the strobe as a spacing between images. Similarly, if you are rendering pong with no interpolation, and the ball is moving fast enough you'll just see copies of the ball. This makes the test somewhat ill posed. Interpolation is also somewhat ill posed, computationally, but if you were to do it very intelligently, or to only a first approximation, I suspect we have more trouble detecting it.
Well yeah, obviously if your public transit is garbage and you make it free it doesn't magically become good. Broadly reaching public transit that comes every 5 minutes with timed transfers is what makes public transit good (though it should also be paid for by taxes).
Sort of like Obama proposing the same stuff as Mitt Romney did and calling it Obamacare instead of Romneycare
Retina everyone liked. Increased refresh rate is sketchier.
Cloudflare is horrible for privacy. It is also a bit of a sovereignty issue for European countries to have all their citizens web habits to be MITM by a forging power (no matter how friendly they seam).

Edit: not even going in to the sovereignty issue of having an American private company effectively decide your internet regulations.
> It appears that in our case, the threat-actor was able to hijack a session token from a support ticket which was created by a Cloudflare employee.

How does a session token end up in a support ticket? Are they putting session tokens in URLs or something?
Luo also wasn't THAT much better, mainly because he's an author self-insert that got to get his perfect mail order bride and then proceeded to play his role without any fail or mistakes once he has to step up. But the whole idea of the Dark Forest concept was IMHO legitimately good science fiction. But yeah, Cheng is a complete and utter moron. Maybe that makes her human, but I stopped reading Death's End halfway through and looked up the remaining plot summary on Wikipedia. I don't know if the author had a real plan while writing the story, because the series begins really strong and then just runs out of good ideas.
weather.gov
Most artists generate nearly all of their income from tours.
Can someone explain the n^2 + 2 triangles paper?
If ACA is such a success story, then why is the US lifespan falling faster than any other developed country over the past few years?

There was of course a drop for COVID-19, but progress in life expectancy basically stalled after ACA was implemented, whereas life expectancy has kept growing in every other developed country.

https://www.washingtonpost.com/health/interactive/2023/ameri...

And to be clear: "While opioids and gun violence have rightly seized the public’s attention, stealing hundreds of thousands of lives, chronic diseases are the greatest threat, killing far more people between 35 and 64 every year, The Post’s analysis of mortality data found."
This article explains why: https://www.vox.com/the-goods/23569504/ticketmaster-monopoly...
How was your system configured. If you frame capped your FPS at 144 and had a 120 Hz monitor without V-Sync that would be super noticable.
This has been done! Many times, most recently with Mojo. It sounds like you're the target user but don't use them, so if you're interested you could help them out by telling them specifically how they don't meet your needs
Putting aside complaints about not understanding Feudalism the main issue with the concept that they also tend to scale worse, and for better or worse scale has been king since the start of the Industrial Revolution. The most common form of a co-op are small agriculture related.
It was in a HAR file
It would improve conditions for Americans too.

As it is - because most employees in SFBA are H1B - we all have to suffer shit working conditions with toxic management.
Looks like it's still being worked on, the header image of the latest blog post says it's releasing November 2024
Has Telegram been audited? Does it encrypt by default?
> isn't really special compared to other similar things.

If you define "similar thing" as "kitchen-sink thing that tries to do everything like PGP does", then this is true, as no full alternatives exist, nor should they.

But for all practical applications? Pretty much every "other similar thing" that I have tried is _vastly_ more simple and more reliable and easier to debug and infinitely easier to script. For example, "seccure", "minisign", "age", even "ssh-keygen -Y". Especially cool are "seccure" which uses passphrases as private keys (no more private key files ever!) and "ssh-keygen -Y" which uses ssh keys which everyone already has anyway.

If you are writing a new software and thinking about integrating PGP, do yourself a favor and look for alternatives. If this is something developer-oriented, I recommend using something based on SSH keys, like git does.
No you can't. Well if you work for a small company, or don't have a job you can. However anyone working for a company with any size has to come up with the $1000+ per month their employer throws into the company insurance plan that they don't get by going with ACA. So sure you can, but it is so move few can afford so we may as well say you cannot.
Then you likely will feel that Kristina Wong should also be arrested, tried, and imprisoned for her own tweet: "Hey Trump Supporters! Skip poll lines at #Election2016 and TEXT in your vote! Text votes are legit. Or vote tomorrow on Super Wednesday!"

https://twitter.com/i/web/status/795999059987173377
They have a monopoly on venues.
Suggest running the notepad++ installer in wine. Maybe not everything works but everything I've needed has.

The notepad++ plugin ecosystem is a resource that no other software is likely to offer.
> Hindsight is 20/20 but if the Python folks knew how long and bad the 2 to 3 transition would be

It was predictable and peopled commented at the time. Perl 5/6 was given as an example. And when it became apparent that nobody was switching, it still took about 5 years until they tried making it easier.
It’s true. Look at the number of security bugs in Android, iOS, Windows, Linux, Oracle, DB2, SQL Server, PostGre, MySQL, Nginx, Apache, Cisco routers, Intel chips, AMD chips, etc.

The security bugs are not there because of incompetence or stupidity. They are there because security is really hard and it is even harder to get every software engineer to care about security.

If the best organizations in the industry make security mistakes, what makes you think the rest don’t either?

Reality is often unpleasant. It is better to acknowledge it than to pretend it does not exist.
So it's a women who had enough money to buy in SF but still wanted to profit through renting (basically to make other peoples pay for her building in the long term). Since this wasn't enough she decided to rent short term on AirBnB (more money, more) largely ignoring the risk and work/maintenance it would require.
Unsurprisingly a massive problem happened and now it will require quite a bit of work on top of being a massive hassle and pretty large expense in the end.
It's probably less than she pretend (especially if you compare it to the value of the building in the first place) and there are a lot of details that do not add up but it doesn't even matter.

Clearly she is part of the problem, in fact I would argue she created it through negligence. She should have done a verification (as well as cleaning ?) right after the renters left, especially if they suspiciously left early.
Trying to make the most profit with the least effort is what got you there. Not bad luck, and not even those specific renters ; it would have happened eventually.

The way she spins everything to make her look good makes me want to vomit.
Now she is creating outrage to farm sympathy from touchy-feely peoples even though she is objectively responsible for at least half of the problem.

I know someone very similar who had some very similar "problems" through renting, some of them I had to fix. And every single time it got pretty clear that the problems were a long time coming and very much deserved in the end !
Something bad was bound to happen to this women at some point. She has probably has been flirting with the limit for a very long time and now it's time to pay. Karma is a b....
I strongly suspect a lot of organizations cover up security incidents. Also, remember that the worst organizations don’t even know they were hacked.
The PlayStation 1/N64 and Saturn era had a lot of Resident Evil clones that followed in the vein of Alone in the Dark. It was a combination of factors. 1 stick meant Tank Controls had the best of both worlds for aiming and shooting but serving double duty. Silent Hill/Turok Fog meant you didn't need to render things that were far away on the most rudimentary of 3D Hardware.
The problem was never the language (see PyPy), but the C-extensions.
Oh I thought this was a one-time thing, like a research paper. Doing it continuously in real time is much harder.
Easy and appropriate are not synonyms.
Abstract: probably
Is it just me or the whole premise (the "super AGI thing") is just way too "good" to be a real thing in the short term and there's not much to gleam out of this?

There's been very little actual value being realized with the LLMs and enterprises will take forever to make use of localized models due to their own large information silos.

This whole thing reads like we've invented real artificial intelligence, stuff like:

"For example, if AGI can do taxes perfectly in 5 minutes, why need Intuit"

Most LLMs can't even do basic math. Sometimes I feel like I'm living in a completely different universe than the AI hype folks.
Fair enough and this HN submission[0] goes into some details.

[0]https://news.ycombinator.com/item?id=37961166
Yes, depending on what you mean by integration test.

It is nuanced subject.

But say you have class A,B,C,D with mocked dependencies E,F,G,H.

There could be bugs in how A interacts with E and F that are hidden even though you have tests for A,B,C,D integrated and even unit tests on E too.

In addition, if someone comes along and refactors A,B,C,D into A',B',C',D' that have different dependencies ("Hey we are moving to microservices!") then the new integration test is different. You change test and code at the same time.

This is a problem because confidence comes from having a stable test, then changing the code and getting the green circles.

The solution (I think) is to make sure you are mocking at the level of well established boundaries. For example mock PostgreSQL. Or mock your ORM if there is a decent mock, with an in-memory version.

Then you can test end-to-end scenarios. Add a TODO, add another TODO, assert that getTodos() returns 2 results, and so on.

Instead of assert getTodos() returns 2 results when the ITodoService.getTodos() returns 2 results, and the outer getTodos just defers to it.
>what are the other options

person-to-person transmission. there's cases of Leishmaniasis spreading through sexual contact, transfusion or contaminated materials.
Ahhh okay. I had no idea he was interviewed by NPR!
It's not meant to be, it's meant to challenge assumptions.
I'll pitch something out of left field.

Lots of kids like making games, and RPGMaker is a game engine that lets you make games with 0 programming knowledge, but also gives you ultimate freedom to modify the game with plug-ins that you can download or write yourself.

I bought RPGMaker MV with a bunch of assets through humble bundle 5 years ago for like $80, and learned a ton about software develpment by trying to learn and make changes to the engine.

I guess if your kids are really just into web dev then this is would be orthogonal, but under the hood MV and MZ use html/css/js, where I think MZ was mostly a huge refactoring of MV to be structured like your more typical node.js project, so this would still be teaching them things relevant to web dev.
I wish they'd give all the fantasy stuff (character in tv show, animated character, etc) something like a different background color or theme that essentially says "this is for people who want to document fantasy worlds".
I'm not so sure about that. Manufacturing has been leaving the US for decades and the kind of capacity that was there at the end of WWII and the peak of the cold war was likely much higher compared to where things are today.
This article has a good point. While it is obvious that the man had a clear goal of tricking people into not voting, the judge should have considered that what he was doing could have been funny to people online and acquitted him. It is in the very DNA of our society that no law can be made that interferes with anything that a citizen might plain get a kick out of doing.

It is a dark day when we only look at people’s goals, actions and outcomes and ignore the epic lulz that were had.
try fortnite duo fills with a mic. other fill games too, but stick to duos.
In France it was widely used but now we have new competitors like www.shotgun.live with a modern app, built-in resale feature, stripe payment, etc.
Their moat is a combination of vertical integration(their parent company owns a bunch of venues) and contract lockup with other venues they don't own.

Also, since artists make almost all of their money from tours, they know trouble will arise with the mess that is ticket/venue sales. If they go full capitalist and someone like Taylor Swift starts charging what the market will bear(maybe $10k/ticket ?), many people will revolt, since there is zero chance they can afford that.

Instead, they can lay 100% of the blame on Ticketmaster, and nobody hates the artists for the mess.

So artists are not incentivized to try and fix the mess, and venues are not really incentivized either, since they also get to lay the blame on Ticketmaster.

Ticketmaster in the meantime takes all the blame, does nothing and keeps depositing fat stacks of cash in their bank account.

Some incentive will have to change, for this to get fixed. Perhaps govt will slap some regulations on Ticketmaster? Perhaps people will stop blaming Ticketmaster and make venues and/or artists accountable for their continued contracting with Ticketmaster? I don't know, but until something changes, don't expect Ticketmaster to behave or a competitor to show up.
There’s a method to the madness. Which I’ll explain a little for others. :)

If you see ! on a method it means one of two things:

1. The method modifies the object in place in and may return nil if no change is made. This is what the Ruby standard library does.

2. The method throws an exception when there’s an error. Usually there’s a non-! version that returns nil or false instead. Rails made this a popular option.

Ruby likes to provide everything so there are methods that return new objects and there are methods that modify objects in place.

And there are a lot of methods to do almost everything you can think. Which tends to make Ruby code more compact.

But you have to keep the documentation handy until you’ve learned them because the method names are odd. The designer of the language it’s not a native English speaker.

The if keyword returning a value takes some getting used to.

You never see a for loop because you pass code blocks to iteration methods. This kind of thing is all over the language.

You don’t need parentheses on method calls, which means you need to know if you’re dealing with a local variable or an instance method.

Another thing is Ruby allows code to be far more compact. Doing the same thing in python may require two to ten times the amount of lines. But if you can’t read Ruby code quickly and follow what happening, any advantage compactness might have becomes an exercise in frustration.

All in all Ruby a bit of an odd language. I personally find it an absolute joy to work with, but a lot of people very justifiably do not have the same opinion. :)
Ignoring the pessimism for a moment

But this nogil version is the first time we have an actually working GIL removal. All of the other ones were incomplete to the point of being non starters, and mostly served as discussion material. This is an actually working implementation which deals with the subtle issues that the other projects didn't even get to, and has gotten to the point that it's a technical possibility to commit it to main (though obviously with a huge migration to think about). So in this sense this is a very different discussion than all of the previous discussions about the GIL
Prior to the Web, the place name would have been listed in a gazetteer (of Alaska, probably) with a small description.

The moth would be described in the original scientific publication (from when it was first discovered) and then in books listing the Moths of Peru etc.
>First, Okta should get credit for publicly acknowledging the compromise.

"In early October 2023, Okta was notified of a breach resulting in hackers stealing HTTP access tokens from Okra's support platform by BeyondTrust. Okta CTO Charlotte Wylie denied the incident for a number of weeks, but later recognized that a breach had occurred"

https://en.wikipedia.org/wiki/Okta,_Inc.#cite_note-33

"Okta’s Wylie declined to answer questions about how long the intruder may have had access to the company’s case management account"

https://krebsonsecurity.com/2023/10/hackers-stole-access-tok...
Yeah, you're right, he was massively lucky too.
But even with that, does he deserve this much wealth for this?
Would he deserve this much money if executing that idea was incredibly hard?
Yeah. Amazon wouldn't be Amazon if it started as a co-op.

If you're okay with way less profitability and all the other issues of "employee democracy", go start/join a co-op. You just won't find many of them. And, if you start one, you'll probably start questioning your decision once your employees start telling you what you can do with your own capital. :p
I've been doing C++ since the 98 standard and C++ today is far easier, faster, more productive than anytime in the past. My code often feels as simple as python but much faster. Especially now that there are libraries using more modern standards.
Hi Neon CEO. I’m curious if users have deployed Neon as a (selective) audit-logging tool for configuration which might need to be edited or rolled back from time to time. Think configuration-driven/event-driven systems where an update to a single database-stored config can cause other downstream applications to start behaving mysteriously. Going to scour the website some more!
jingoism
I prefer to use separate profiles. Containers are cool but degrade performance.
We should note, however, that that work was disproven in 2019. As it turns out: Not chicken.
Don't know why it's taking so long. I thought "master" wasn't allowed anymore.
>…never talk to the FBI unless it’s recorded. And they will never be recorded, which means you should never talk to the FBI. They have a long standing policy of refusing to allow any interview to be recorded.

That hasn’t been true for nearly a decade.

Here is the DOJ’s policy on the electronic recording of statements: https://www.justice.gov/jm/jm-9-13000-obtaining-evidence
Thanks for the link. As they say in the video though, latency issues depend on the game's implementation. From [1]: "If the game does like a read-wait-read-wait pattern, then it's bottlenecked by the latency... and that can become a problem."

Halo presumably has a solid streaming foundation, so it's a good fit for the service.

[1] https://www.youtube.com/watch?v=e5wAn-4e5hQ&t=591s
Tangentially, 3.11 was the first release in quite some time to have major speed improvements across the board. The average is 25%, sometimes far more.

Anyone who hasn’t upgraded to it by now is needlessly spending extra on compute.
Many of the people hyping AI work on AI. Their livelihoods depend on the hype.
With most security breaches the product is serving some primary purpose other than security: security is an ancillary goal, and security breaches may not immediately cause companies to reevaluate their investment in the product.

Okta is different—the problem it solves is squarely in the domain of their customers' infosec teams, and its one job is to be safer than alternative authentication methods for large enterprises. It makes sense that investors would worry about them taking a larger hit than ${random_SaaS_product} would.
Eh, as long as they have source material they're okay.
> It's way harder for an alliance of US tech companies to influence small countries than a big block

intuitively it seems true, but is there any evidence for that?
The same Telegram that leaks your IP?

https://techcrunch.com/2023/10/19/telegram-is-still-leaking-...
So C = NC?
The paper doesn't answer the problem in its title (n²+1) but demonstrates two different "advancements" towards it (n²+2)

> We have posed a fine (in our opinion) open problem and
reported two distinct “behold-style” proofs of our advance on this
problem.

There's also a linked PDF which, if I'm reading it correctly, trivially proves n²+1 is impossible.
It’s probably worth pointing out that cloudflare uploaded sensitive tokens to their support website and their support website was compromised.

Cloudflare probably shouldn’t be posting their tokens anywhere to anyone so it’s hard for me to think they’re some how in a moral high ground.
Kings of their own tiny virtual mountains. I tried once to update the Wikipedia article about my own military unit, just to update for our new location after a move and some other details about our heraldry. Basically, I was told/ordered to update it by the CO. No luck. Changes were repeatedly reversed by whatever kid/editor didn't want anyone else in thier sandbox. It remains incorrect to this day.
This one's good, too:

https://codelite.org/
GUSD is FDIC insured though. GUSD deposited in the 'Earn' program is not. Just like your bank account dollars are no longer FDIC insured once you buy bonds with them.
I’m wondering if mTLS (aka zero-trust) is used, would take prevent this kind of MITM attack? My understanding is that it should since the cert is self-signed to be used from both ends.
Well, with transparency project we _did_ get buy in from everyone because browsers (like Mozilla and Google) forced it. And there are severe penalties for not obeying transparency log, and well as technical measures to enforce it (for example certs with no CT log would not work in Chrome).

This of course only works because there is competition. If TrustCor fails to behave, then this CA is dropped. Customers complain, but not very strongly - there are plenty of CAs around, it's annoying to have to switch to another one but still eminently doable. And TrustCor is out of business completely, all their investment is permanently gone.

With DNSSEC.. what do you do if you domain registrar does not play by the rules, say is caught double-issuing DS keys?

Answer is: likely nothing. Most orgs are not going to move .com to .io because of that -- there links, SEO, even things like business cards. People would complain, _maybe_ registrar would get a fine for 0.0001% of their annual income (but I would not count on this). And that's it, the system will stay insecure and they will continue to double-issue certificates.

The separation of CA from registrar is a _feature_, and a very helpful one. Competition is good, and we should not make our existing natural monopolies even more useful.
You could just push files to the client in advanced of request based on basic statistics.