skysight-inc/HackerNews huggingface dataset:
Feels like somebody's trying to sell me something I don't need.
But there is a poor guy in the comments that only goes out to eat 1 or 2 times a week instead of 3-5. What a tragedy
I'm on MetroPCS, from what I understand one of the most popular T-Mob MVNOs.
Anyone have a torrent of this cut? Blade Runner is my favourite movie of all time.

I found a trailer that explains what it is:

https://www.youtube.com/watch?v=_FA2uT2gvaM

Apparently it includes a ton of delete scenes plus more fan made scenes from the original script? Maybe someone could explain further.
This is actually a great suggestion and ACME providers should provide it as an opt-in feature via CAA record. Not even the provider having access to system memory could issue a mitm cert without you noticing.
I always recommend coffee shops (even if you drink tea/milk/whatever) over bars. Come regularly, stay off your phone, sit where you can see the room (and be seen by others, particularly coming in the door), and have a smile and nod for everyone. The acquaintances you make in the coffee shop will lead you to the next step to integrate with the community.

This said, it sounds like you've moved somewhere that isn't "you". You can't fix your neighbors insular nature, or their tendency to drive, or the community /volunteer opportunities that don't speak to you. I recommend putting your efforts to finding a place you like, then work on friends there.

P.s., You may not find the friends you expect. Keep an open mind.
If this were true, half of cable news personalities and newspaper publishers would be in jail, on both sides.

They get away with it because the news is now considered 'entertainment' or 'opinion'.
Optional Gil was originally discussed in 2022, PEPd in early 2023 and approved for 3.13, What do you mean going nowhere or that leadership didn't want it?
"able to distinguish" is a very ambiguous description. Imagine the following scenario: you play a video game, where you are a cowboy in a standoff, as soon as your opponent grabs his gun, you need to click to shoot yours. You are punished for a false start, and rewarded based on your reflexes (maybe statistically: the sooner you shoot the more likely you're to win the duel).

There is no lower bound to latency, and therefore upper bound to FPS, that helps you statistically. Eventually the resolution of the study (e.g. sample size and therefore the statistical error) will say that "the population are able to distinguish" up to some Hz refresh rate. But when you then increase the resolution of the test (sample size), you will again start to see a difference.

Of course I'm not saying a research like that wouldn't be interesting, all I'm arguing is that there's no definitive answer about maximum FPS that makes sense.
Ironically, the contextual baggage is anything but.
It's brilliant to be able to pass selected code or text through a definable shell command.

right-click -> Format -> Send selection to...
Monopolies are immune to startups in well defined roles.

Amazon isn't a taxi service.
I'm trying to decide why we need to clutch our pearls because health care is 10% of global GDP? Is health care somehow an illegitimate expenditure?
It's a perfect case of externalization: Norway sells oil to other countries (recently in record volumes[1]), these then burn that oil. In return Norway subsidizes it's own electric fleet to the hilt and has penalized ICEs [3]. The result, while locally a big positive isn't nearly as big a positive if they weren't selling their oil to finance all this. And with the tax base of gasoline cars rapidly dwindling there will come a point where this scheme will no longer work and the electric vehicles will be taxed to the point that the income thus generated will be enough to support the various infrastructure costs.

[1] https://www.ceicdata.com/en/indicator/norway/crude-oil-expor...

[2] https://www.bloomberg.com/news/articles/2023-07-26/norway-pu...

[3] Various taxes on the vehicles themselves as well as taxes on ownership and fuel.
There are approximately 10 Tier-1 ISPs through which majority of Internet traffic passes, and unless I misunderstood something, they can issue valid certificates for almost any domain. To me it looks like "completely compromised".
I am still irrationally annoyed that somebody made a Wikipedia article for their own made-up definition of high vs. low fantasy ("another world" vs. "our world", as opposed to the common definition, which was basically Tolkien vs. GRR Martin), based on a single decades-old article that didn't even mention the phrase "low fantasy", and managed to unilaterally change the definition.

No one could find a reference to contest it with, because nobody was writing articles defining terms that everyone understood; and the original editor's reference was not available online at the time, so no one could look at it and say "Uh, this is just some rando saying it would be cool if we called secondary-world stories 'high fantasy'."

Now the original, bogus reference is gone from the article, replaced with 20 low-effort articles that are obviously sourced from the same Wikipedia page they're being used to support. Boom, citogenesis! https://xkcd.com/978/
Why? Purely out of curios ity? Domain validation was successfully performed which enabled a certificate(s) to be issued.
Unfortunately, running things on-prem will not prevent security breaches and may be far far worse than relying on a cloud vender for authentication. Here is why:

1. All software has security bugs. This includes on-prem software.

2. Many IT groups do not have the expertise to run and secure a directory. You don’t just install some software, setup some accounts, and leave the box in the corner. You have to make sure the system survives disasters, you have to test backups, you have to figure how to determine if you were hacked, etc. This is very hard work.

3. No one has ever shown that on-prem IT security is better than cloud vender IT security. My experience has been that some on-prem IT departments have very poor security. Here are some examples:

- One IT department I worked with used a VPN which used an MD5 certificate. This was between 2010 and 2020. MD5 was cracked and it meant anyone could preform a man in the middle attack.

- One IT department I worked with deployed a web service which allowed unauthenticated users to access person customer information (national ID/tax number, address, name, phone number, etc.). Note the person doing this knew he was doing something unethical and did it anyway.

- One IT department I know of supples nurses with an add supported text editor to type up patient notes. Adware is not know to value privacy and should never be used to process sensitive information.

- One IT group I know of will not update Redcap to a supported version. The version of Redcap the IT department uses has known security bugs and the IT department was told about them. The official excuse for not upgrading it is the IT group does not like Redcap.

I think Redcap is a piece of software which stores information used in medical studies and used to calculate public health statistics. It contains lots of sensitive data.

My main point is moving from the cloud to on-prem may or may not improve security. It really depends on the capability of individual IT groups and many IT groups are not capable of running an identity service like Okta.

The other thing to consider is cloud venders typically have much larger budgets and can spread costs over many customers. This means they can afford more security specialists, spend more on securing systems, spend more on detecting breaches, etc.
Whoa! This guy created Toy Commander? That was one of my favorite Sega Dreamcast games!
From the article:
"Mr. Obama’s A.I. voice was created using tools from ElevenLabs, a company that burst onto the international stage late last year with its free-to-use A.I. text-to-speech tool capable of producing lifelike audio in seconds. The tool also allowed users to upload recordings of someone’s voice and produce a digital copy."
> When it comes to works of fiction, what we need to be looking at are the intents and assumptions of the in-universe fictional architects and/or typical users of the space.

I agree in the context of films, but this ignores the relationship between creator and player/user in interactive fiction like games.
That's still only best effort, for example it will depend on the terminal but it doesn't reset things like xterm's control keys send escape sequences property, so:

printf "\e]4;1;?\a\e[>4;2m"

In xterm+fish will result in a messed up shell which you can't escape from (as ^C to clear the input doesn't work anymore).
The problem being discussed is not that typescript the language that compiles to JavaScript is Turing complete, but rather that typescript types the compile time code necessary to validate that typescript are Turing complete. The consequence is compilation speed foot guns, readability and complexity. Not the end of the world, but the sort of thing some people reasonably consider a downside
Insanity!

Programs must be maintained. This means that a programmer must be able to read a program and understand it. Forcing the programmer to understand implication makes no sense.

We do give up understandability already with templates. Templates can be a source of non-understanding, but also there is no replacement for templates. Implications don't need a new feature since ?: already solves this.

Compare this proposal to another weird C feature:

char \*a;
...
17[a] = 'b';

where, although the array operator is associative, it simply isn't used that way in code because it offers no useful feature. Therefore it is an insane feature which is harmless. The implication proposal is not harmless.
Everyone will get hacked. It is obvious no one knows how to write completely secure software. It is also obvious no one knows how to never make operational mistakes, never misconfigure software, never forget to remove access, always rotate secrets, etc.
thanks appreciate response
The Banner Saga or Cuphead are examples of the amount of time and care it takes to do high resolution 2D artwork properly. Those games are absolutely breathtaking because of it, but their development cycles took a very long time for relatively short games because of it. You just can’t keep up with a 3D asset pipeline.
You should expect to see a mix at large demonstrations. Some people will make their own, others will be attending with a local special interest or political group who may be more organised and print matching signs. For a small demonstration, it may well be attended by members of the same organisation that organised the demonstration. All the matching signs prove is that only one organisation is significantly involved. If strikers on a picket line have matching signs made by their union, does that mean it’s organised by a shady institution and not a genuine effort by people.

It seems strange to me to require small demonstrations to pretend to not be organised. I think better heuristics should be found.
Every CA can issue valid certificates for every domain? And it always has been that way.
Thanks for pointing this out. The whole discussion around "the developer doesn't see my data" confused me, as the question of whether the code is malicious is orthogonal to installation method.

Given that uBlock Origin can do this, I'd recommend that route. uBlock Origin is probably the most trustworthy extension I've ever run across, and Gorhill has proven that he is trustworthy over many years.
Unfortunately, getting breached is not a sign a person or organization is incompetent. All getting breached means is someone decided to attack and organization and found one or more holes in the organizations services.
And every single part of that "rescue" would never have been needed if the original team had been allowed to "do things the normal standard way" the first time.

We can guess the reasons - everyone and their dog wanted to be part of the flagship IT project, a slew of conflicting interests and parties who would not talk to each other or in some cases were actively sabotaging efforts, a failure to recognise that "working complex systems only ever evolve out of simple working systems".

Why do we always do this to ourselves ?
Okay, I don't want to argue about the exact semantics of the word theft and what kinds of "misuse of funds" it includes. Nothing went in his pocket; it wasn't embezzlement.

And Shkreli was moving money between companies and lying to investors, neither of which is relevant here.

More importantly, none of that explains what is sociopathic here.

> He easily could have lost that bet, and that money could have reimbursed credit card bills for his employees.

But would it have been used that way? Or would it have kept propping the company up for a bit longer until total collapse?

> How that isn't reckless and malfeasance, I don't understand. "We're screwed. I can use the last of this money to try to do something right, or fuck it, I'm going to Vegas!" isn't leadership.

I never said it wasn't reckless. But he got the business out of being screwed. If he failed, the business would have gone from screwed to... also screwed. What "do something right" do you have in mind that was so important it becomes sociopathic if he doesn't do it? And it has to be something that would have happened if he didn't gamble, but wouldn't have happened if he lost.

In other words, if your claim is right then there has to be a big human-impacting difference between the "he does nothing" outcome and the "he loses the gamble" outcome. And I'm not really seeing that difference. If both scenarios involve total shutdown and the only difference is a few days, that ain't it.
If you tested 120 Hz screen, or 4K screen, you would see a reason or more than one. There are some cools experiences to be had on 120 Hz, like movie interpolation, or playing some video games, where even if you don't see a difference, you might notice you're suddenly a better player. When it comes to 4K, I think the most obvious difference is the text quality - no longer sharp (square, pixels) edges might be odd at first, but a more natural, less colored (less need for subpixel rendering) look of the text is easier to read…
Afaik the important difference between "ast walker" and "bytecode vm" is that the former is recursive, that is, it will more or less use the host call-stack as user call-stack, while a bytecode vm manages its own datastructures and is basically a while loop. But you can definitely go from a recursive interpreter to a bytecode vm by doing a CPS transform of your interpreter and defunctionalizing it. See eg https://dl.acm.org/doi/10.1145/888251.888254
I use a pt200 or adm3a terminal, never ansi or vt100
You can submit your return electronically, get the response from the IRS electronically, pay electronically.

Yes, they use paper mail to set up your account, but the idea that the IRS remains limited to the exchange of paper is wrong.

Source: a USA citizen living in Canada, with a USA tax accountant who submits my returns and paperwork electronically every year since 2010.
so you're saying there's a chance?
I was actually slightly disappointed that that's how it was accomplished—it's unsurprising to me that someone could write a VM to give runtime meaning to TS types, I find the programs that abuse `tsc` itself to be more interesting.
More context on the creator's website [0]

0: https://whitedragoncut.com/?page_id=2407&lang=en
people who like this kind of think might also like Clearspace [1] -- they've got some great tools to fight the attention-hijackers

[1] https://www.getclearspace.com
Thanks, I will see about adding that. As I wrote before CVEs it is hard to find details. I've also noticed Google is missing quite a lot of historical things lately.
It's a bound, non-negative function on [0,1], equal 0 at 0 and 1 and having non-zero values at least in some points on (0,1). You are saying it's never been proven that such a function will have a maximum value somewhere in (0,1) in the US? Your proof of the opposite, unfortunately, does not seem right.
All Intel CPUs since like 2016 have VP9 decode support; that's unlikely to be the culprit.
the writer’s block paper is art!
Only if secure boot was enabled by a trusted party on trusted hardware.

If you enable secure boot remotely without physical access to the machine you can't be sure it was actually setup in a non-compromised way. For example the machine could be running a custom backdoor-ed TPM, BIOS settings, ...
3:2 has been getting some love and is a not-bad compromise between 16:10 and 4:3.
SEC requires public disclosure basically immediately (within a few days. Less than a week for sure) for public companies if a hack could harm your bottom line or trade value.

Hopefully they sink their teeth and give out a nice fine for this insane negligence, but I suspect okta is in for a strongly worded letter.
But for some reason the attackers did not use backdoor access to the servers in this case.
How Iron-Clad Is the Iron Law of Prohibition?
> Edit: and even in that case, at least the bungee-jumping gives you an adrenaline rush. Does eating PepperX give you the same?

Spicy peppers can give you a bit of a mild high, yeah https://lifehacker.com/why-spicy-food-makes-you-feel-high-17...
Lol. I’m so classy
This is a photo of "ground zero" hosted by NBC News.[0] I'm not sure what "an order of magnitude+" more destruction is referring to. Perhaps you can enlighten us. From what I can tell, there is pretty minimal destruction seen here, and most of it can be explained by a small initial explosion with fire spreading vehicle to vehicle.

[0]https://media-cldnry.s-nbcnews.com/image/upload/t_fit-760w,f...
> This is not for everyone, probably yourself included, but it does work for me.

Sounds a bit like accrual based accounting, which indeed is not for me ^_^
On prem systems have the advantage of not being part of a monoculture, so if another party is breached that will not necessarily have immediate impact on your installation.
That makes them more valuable, not less
Okta outsources their support staff to save millions of dollars while losing billions of dollars in market cap each time their support staff gets hacked.
A bit difficult when providing services to third parties who can use any client software :-/
It's part of the "if you are successful it is because you worked hard and deserved what you get" and the "if you are a failure, it is because you are stupid and lazy".

There are no unfortunates in the USA, there are only losers and winners.
Isn't this what those "key hash pictures" in WhatsApp/Signal are solving?

XMPP clients could implement such a mechanism, and if any certificate/domain along the path changes, the users in a conversation would be notified.
Interestingly the change was largely to prevent cronyism where the newly elected leader simply installed their supporters, friends, donors from top to bottom across government. That is a suboptimal way of doing things, and having continuity in staffing and operations are critical.

You can read more about this if you look up Tammany Hall.
Can someone summarize the findings? I genuinely can’t read it well. The tables are too wide for the viewport. If I make the browser wider the page becomes two columns and the viewports are still too small to show the full table.

The sections of text also appear to be longer than the boxes they are in, causing scrolling inside which I only discovered after a few minutes and making it hard to read.

Honestly it’s quite frustrating. Which is too bad I really liked that this testing was done.
Sorry, I've had two 4k+ monitors for ~7 years now, and not going back. Wouldn't mind 120hz and squarer aspect ratios but not at the price of half or more of the resolution.

Also skeptical of higher refresh rates than that. I remember I could see flickering clearly with 60hz CRTs. 72hz was enough to alleviate it significantly but could still see it in my peripheral vision. By 90 or 100 and it was completely gone. Games are quite fluid at those rates as well, so not expecting over 120hz to be of much use.
They don’t require verification unless that’s changed very recently
I think a problem with what you said is that you are evaluating how much someone can earn in comparison to a race to the bottom with other workers. The proper comparison is how much money the business is making as a whole.

One thing to keep in mind is that the US GDP is ~20T, if everyone made an equal amount before taxes, that would be somewhere around 120k (a little more or less as workers are about half the economy).

You can see from that comparison that the level of exploitation is far higher than than you supposed.
Indeed. sorry if it wasnt clear that was what I was saying.
Hmm. I'm wondering how the short lengths of these papers might cause them to have lower information-theoretic entropy than the (in)famous "chicken" talk[1]?

[1] https://www.youtube.com/watch?v=yL_-1d9OSdk
And I hear people seriously suggest that the government can't get things done because they are "underfunded"!
It explains everything except what is significant about the "script dated February 23, 1981".
Very much so - it's a typical real world instrumentation challenge that's multilayered with meat enough for many a dissertation at every level.

For those that are still following along the additional exoplanet challenge is to first gather the best possible spectrum for the star .. and then get the best possible spectrum of "the difference" when a (?) planet passes across the star and the total light drops by some factor.

Complications, of which there are many, include having the best possible guess at the question of one planet or many, the same planet or a different one, etc.

Bigger filters have little filters than focus on the differences,
Little filters have lesser filters, and so on 'til white noise.

(With deep apologies to Lewis Fry Richardson, of course)

For those that enjoy this sort of thing the very recent 2023 annual Sky at Night Question Time features several exchanges on exo-planet fun - it's pitched to the general public.

https://thetvdb.com/series/the-sky-at-night/seasons/official...

Free to watch in the UK via the BBC, from abroad via a proxy, otherwise there are groups dedicated to sharing such material.

https://docuwiki.net/index.php?title=Question_Time_%28BBC_th...

https://en.wikipedia.org/wiki/MVGroup
Yeah, I'd love to get a job like that. Will work on it.
I'd say it is alleviated quite a bit actually because it solves a corollary issue. To me personally, the majority of the issue is in the magic box that promises me instant dopamine any time I pick it up and turn on its screen. I don't mind getting a message and choosing to respond. I do mind, however, being tempted to open any of the attention seeking apps or websites after I'm done with my message or call. The watch has virtually none of that temptation. YMMV depending on whether the notifications or the decision fatigue are more of an issue for you
Those services are honeypots by definition. It would be naive to think that they never get hacked. It's only a matter of time until they do. If they're competent and responsible enough they'll notice and disclose it publicly, but I reckon that most of them never do, precisely because people like you would stop using them.

This is why anyone even slightly concerned about this should use offline, self-hosted, or self-built alternatives.
What I read between the lines is that CF is going to launch their own IDP, and it'll probably be better done than Okta.
If it's metaphoric, could it be prehistoric?
My bad ... cf not okta.
for what its worth, the vast majority of republican senators are ivy league educated lawyers... just like the democrats. Its too simplistic to boils views you disagree with to "dumb"