skysight-inc/HackerNews huggingface dataset:
Both you and the grandparent are correct in that both propose viable attacks; it is a known fact (and not news to any expert in the space) that "domain validation" certificates are vulnerable to "global" MitM in which an attacker can intercept all traffic to a domain (and therefore intercept the validation probes). A situation in which a service's hosting company is sitting on their "front door" (so to speak) and MitMing all traffic that goes their way is exactly such a situation (hence my recommended mitigation).
I don’t get it. The game is not implemented in TypeScript types, right? It uses them to represent the code and has a custom interpreter for it.

They could have done exactly the same in JSON instead. Or using arrays like in LISP.

Cool project tho, but it is a very misleading explanation. Or did I miss something?
Have you seen the South Park episode "Band In China"? Or followed the NBA's treatment of a player who simply tweeted once in short of Taiwan?

Not much surprises me about China and censorship any more.
> There’s also no onus on me to continue using packages that force me to spend valuable time fixing their breaking changes.

Exactly.
It's not necessarily a bad thing if China shows the world how willing it is to tighten the noose on the West for being too gullible. This is a pretty good analogue to what happened between Germany and Russia, for a long time the German government was hopelessly naive about how giving Russia the noose to strangle it with was a smart move because nobody would every dare to tighten it. And then it happened. Rude awakening but China can do the West a lot more harm so early warning are appreciated. Even if they are in retaliation to similar moves from the other side.
This is super cool!

What are some use cases that you recommend this for, outside of testing browser workflows?
It is notoriously extraordinarily difficult to fire an underperforming federal employee. It is possible, but generally, you are committing to keeping this person around for quite some time.
I'm just relying on the raw data provided in the article, I have neither the time nor the interest in re-doing the analysis myself.
The actual value of FTX is absolutely unfactual.
ns2.jabber.ru is hosted at Akado (ordinary Russian ISP) in Moscow, as for ns1.jabber.ru it looks like it is hosted at Linode. So maybe ns1 was compromised as well, as for ns2 I doubt that.
This is always what amuses me from my European perspective. Large parts of the insurance systems where created for ensuring workers are healthy and productive. And it is an understanding that bad care causes permanent reduction in work output.
Are you going to move your spend, or is having a 3rd party sling words good enough for you?
Greetings! With an equal helping of non-confrontational spirit:

Your focus seems to primarily be on highlighting supposed hypocrisies between the man and the ideas he espouses, and using the former in an attempt to discredit the latter. Criticizing an idea by criticizing the person who holds the idea isn't criticizing the idea at all, it's ad hominem. It's fallacious at best, and malicious at worst, and you spend the first four paragraphs of the article painting Andreessen in the ugliest light possible before touching on the content of his thoughts (which are still punctuated with bitter assertions of his being fundamentally flawed as a person, to put it politely).

Whether he speaks from 'privilege' or not is irrelevant to his ideas holding water or not; if the richest, most-obnoxious caricature of man on Earth were to say "drink plenty of water, get at least light exercise in every day, avoid toxic environments and be sure to get enough sleep to lead a healthier life," would it make it any less valid than if a homeless man said it? The former could just as easily be dismissed as speaking from a place of privilege, being in a position to be able to satisfy all of those things without worry of being stuck in a toxic work environment, living in a noisy apartment complex that prevents a healthy sleep cycle, or not having access to clean water, but that's entirely irrelevant to whether they are healthy habits to adopt or not.

Perspective is also an arbitrary qualifier to an idea's validity. If one man throws a rock at another's head, and he screams and clutches his head, both immediately become acutely aware that getting hit in the head with a rock hurts a lot. The act of not personally receiving a terrible blow to the head does not prevent that understanding. Likewise, whether or not someone is rich enough to have no worldly concerns is irrelevant to an idea being substantiated by empirical evidence and philosophical validity.

Another commenter mentioned that they'd like to see Andreessen's brain picked further on the matters he listed to see if he actually possesses a nuanced understanding of what he's saying and can rationally defend them, or if he's just chosen arguments that support pre-existing notions based on a topical understanding of them. I feel that that's what it would take to accurately assess his personal connection to the ideas as it relates to his status, if that's your aim. If critiquing the ideas themselves are your goal, it would take an evaluation of the value hierarchy of the ideas themselves for contradictions or inconsistency, probably starting by reading some of his cited authors.
doesn't OMEMO have the problem that you have to verify every session from all your sessions, which is practically infeasible?
How would you implement “strict checking” at scale and for free?
I've been an early investor in a similar effort a while ago. The big problem for companies in this space is to stay friendly with the sources (because you can be cut off fairly easily) and to ensure that you keep the quality high in a world of ever decreasing value of a bit. Getting people to pay is possible but only those that actually make money on your service will keep it. Best of luck!
Air Canada Lawsuit Seeks to Stop Award Seat Scrapingz
Hosting company is not the only one who can do MitM; any ISP through which the traffic passes can do that as well; and if there are backdoors in foreign network equipment then the manufacturer of equipment can do MitM too.
The title of the blog post starts with "How" but the only actual how that is in the post seems to be basically: "we used Cloudflare products X Y and Z which mitigated the issue". Unfortunate.
I believe you’re right, thank you!
"First, Okta should get credit for publicly acknowledging the compromise"

What????

They would reasonably face civil suits if they didn't.
Ask HN: Looking for platforms, other than Roblox, that have adopted Luau
We're considering adopting Luau for our project (a platform where users create games with cubes and Lua scripts). We're pretty happy with Lua already, but Luau brings type annotations and performance improvements while remaining backwards compatible with Lua 5.1.
Luau's been developped by Roblox, open sourced in 2020, and still mostly used by Roblox apparently.
Timing would be good for us if we decide to switch to Luau, but still, feedback from others who've been through the same Lua to Luau transition would be very helpful.
Any ideas? Are we crazy to even consider this?
Except, the return on capital input is what generates the profit. Labour extracts the entire return on labour input for itself.

Of course it does. Why would labour settle for anything less than every last cent (within some reasonable margin of error) of value that it produces? Labour is highly mobile and holds all the power. Labour is able to produce value even without capital. Capital, on the other hand, doesn't function without labour. You are simply not going to keep labour around to maintain capital operation if you don't give back all the labour value it produces.

In practice, we can also demonstrate that this is the case as even when unions roll into town – which really reenforces how much power labour wields – you never see the needle move more than small percentages that are within the margin of error. A $10 per hour job might be able to push for $11 per hour, but never does a $10 per hour job suddenly jump to a $100 per hour job.
new reddit with their feeds kills the web for me
I looked into CAA but the current dns provider doesn't support those records. Is there a reason it had to be a new type not a more common TXT record?
Distinctive Image Features from Scale-Invariant Keypoints (2004) [pdf]
It’s actually legally required to publicly acknowledge a compromise. I was surprised by that too. It’s a nice constraint.
I haven't been sensitive to refresh rates or even resolution.

I'm watching my movies still in 720p.

My resolution doesn't go past 2000s.

I believe at some point it's just "number go up".

I'm probably on the low end but not by much.
He's Going to Prison for Twitter Trolling. That's Not Justice
One of Python’s most serious issues is that it is one of the slowest programming languages actively developed and used today, if it isn’t the slowest outright. This isn’t due to its success, this is due to the language’s performance having been deemed not a priority until somewhat recently.
(Author here.)

Unsure how fish can fully protect from this, as if you run "cat" in fish, then it isn't between you and the terminal anymore? Or do you mean fish should do a reset before displaying each prompt? If I run the printf commands from the "flash.c" example in fish I end up with a messed up terminal.
Artists like using Ticketmaster because they can blame Ticketmaster for fees. And, more broadly, blame Ticketmaster for the unavoidable problems that arise because there isn't an unlimited supply of tickets, and artists want to generate (almost) as much revenue as possible from them.
Cratering motor fuel sales in Norway show the death spiral that can end oil
This is a really uncalled for response. The original comment pointed to the ostentatiousness of a luxury rental building, as if there is no place for it in SF.

It lost value because of a global pandemic years after it launched that has caused rents to fall, but has still managed to keep vacancy rates below 10%. Obviously it could not have planned for something completely outside of its control.
My 144hz panel has done nothing but instilled an urge in me to upgrade my computer. I might have played myself.
27 upvotes over 2 hours.

> voted to the top

Seems disingenuous, it’s fine to be annoyed by such discussion, but at least be accurate please. Reality is best viewed accurately. (27 votes as of post)
Go's switch statement is closer to lisp's cond expression, except it doesn't evaluate to a value.
Noticing the difference vs valuing the difference
The only proof of security is the lack of counter-evidence, though.

One can prove that a vault has been secure for the N last years, but not that it will be secure for eternity.
Current org (thousands of IT folks) has opened an internal issue about alternatives and a migration plan
You should probably use the 'Who is hiring' threads that appear on HN at the first of every month (so in 10 days). That will give you a much better shot than a random posting like this which won't make it to the homepage anyway.
What's even more dramatic is getting a vertically-aligned (VA) panel rather than an in-plane-switching (IPS) type. It's not only about deep blacks--the colors are so much more vibrant.

If you're going to get a new monitor go for 120Hz+ refresh and VA, but note that it's not good for bright environments. Check the nits and see if that's enough. Or if you have the budget can get something like the LG/Dell Nano-IPS Black aka IPS Black (different than Nano-IPS) but it doesn't do high refresh rates.

Edit: if you only care about text documents, then get an office IPS monitor.
The OP didn't say a claim can only be made if 100% of sources agree. He said that one should first google a subject, gather information, and aggregate multiple sources into a summary, rather than writing a summary first, and then googling for the sources that support it…
You can see who are behind Thorn, now they hid it, but the wayback machine shows Microsoft, Facebook, Google, Palantir, etc.

They could easily include secret instructions in the model to mark as malicious content that isn't or use it to build profiles (but respecting your privacy of course). Sky is the limit.

https://web.archive.org/web/20130420162917/http://www.wearet...
"Dear Senior Leadership, it's not us, it's you. We build within the framework you approve, if it's too restricting it's your fault not the poor builders"
Ethereum co-founder Joseph Lubin faces lawsuit over Consensys stock value
I think I just broke out in hives.
None of which means that you're not allowed to have gripes.

Yes, yelling and getting pissed at maintainers for not having the feature you want is counter-productive. But all OP did was outline some issues that have pushed them away from contributing to FOSS projects as much as they'd like, and you reacted as if they were demanding free labor.
That's what you're doing, though.
Do you know how defamation laws work in the US?

Would you assume a viral video contained accurate descriptions of legal procedures?

Heck if he hadn't said convicted it would be protected speech. The US protects "I bet you X beats his wife".
Parallelism in CS is a bit like security in CS. People know it matters in the abstract senses but you really only get into it if you look for the training specifically. We're getting better at both over time: just as more languages/libraries/etc. are secure by default, more now are parallel by default. There's a ways to go, but I'm glad we didn't do this prematurely, because the technology has improved a lot in the last decade. Look for example at what we can do (safely!) with Rayon in Rust vs (unsafely!) with OpenMP in C++.

And there are things even further afield like what I work on [1][2][3].

[1]: https://legion.stanford.edu/

[2]: https://regent-lang.org/

[3]: https://github.com/nv-legate/cunumeric
It wasn't actually that bad at the time. Check what version of macOS that old MacBook has been updated to. Apple nerfed macOS when they introduced Retina displays so that it only does gray pixel anti-aliasing when earlier they did subpixel RGB anti-aliasing.

I just got Better Display[0] which works great for driving non-retina-density monitors with HiDPI resolutions that do anti-aliasing better.

[0] https://betterdisplay.pro/buy

[1] https://github.com/waydabber/BetterDisplay
If you have a multi-threaded program with data races, you already have a problem. The GIL does not mean no data races are possible. It just means that only one thread at a time can run Python bytecode. But the interpreter with the GIL can switch threads between bytecodes, and many Python operations, including built-in methods on built-in types that many people think of as "atomic", require multiple bytecodes. That's why Python already provides you with things like locks, mutexes, and semaphores, even though it currently has the GIL.
I think a lot of the small detail required for a close up 3D model can be omitted for large scenes viewed from a specific angle at a distance like that, so it maybe ends up being easier in the long run, especially when you start being able to reuse assets (which again, from a distance is easier to do without variation to still have it look good). Almost everything that would require complicating a simple shape for detail purposes could be done through a texture without almost no quality loss, and that's without bump mapping.
Does it make all the slow-downs more noticeable?
What's the rationale? Making it opt-in avoids breaking legacy code, which is a huge advantage. What's the caae making it opt-out?
how come solar is not listed in the two "fuel mix" stacked diagrams?
That’s just the terminology these days. Multiplayer == “live” multi-user including visualizing what other users are doing at every moment.
> The individual mandate was intended and served more healthy individuals into the insurance pool.

More people in the pool makes costs more predictable, and more healthy people in the pool makes them lower. The loss lf the individual mandate driving them out made costs less predictable and on-average higher, and higher rates themselves increase opt-outs, reinforcing the effect.
Why is this not off-topic? It is not related to tech.

All post about Palestine are being taken down under the premise that they are off-topic.

Why is this post ok?
Hypertime: An excessively convoluted time travel framework (2011)
fish maintains its own tty state and pushes/pops it each time control is returned to fish or fish shells out to another process.
Don't spam HN, thank you.
Win32 console is unfortunately a thing. Not anymore, but was a thing for too long.

And PC/3270. Some very powerful systems like Linux on IBM Z are POSIX and your default "interactive login" choice is PC/3270.

And in the long term, isn't this exactly the problem? Do we really want to perpetuate the status-quo of "I am in a somewhat POSIX environment, so the STDOUT/STDERR if interactive must behave exactly like xterm and if not I will just pretend it is xterm anyways and output garbage."?
Blind app is the best place to find the nuances of corporate nonsense.
Did you edit the comment? I don't recall seeing the footnote before. In any case it was a rhetorical question to understand your reasoning, as I personally don't take a stance on whether a soul exists or not.
They used a loophole and only paid me if I did billed work.
They did that to everyone there.

I'd rather not get into it any more, they were cruel and unusual employers and did systemic mental abuse. My next employer at least paid minimum wage.
Sure, OpenMP and GCD provide different interfaces around the same concept of a managed threadpool. Given both, one would use them for different tasks (in the same way one actually uses OpenMP and std::async for complementary purposes). But in the context of GP's basic parallelelized for/map/reduce operations, either can be used fine (although OpenMP would probably be more pleasant to write).
The grateful American patriotic companies don't exist (well, they can exist, just not for very long...survival bias at work).
Yeah, but just getting a hold of a valid certificate doesn't automatically mean a MITM. For that the network connections need to be intercepted too.
Techno-Optimism
You can try to see if your provider supports "opaque" types in which you can submit the binary encoding of the record without them knowing what it is. Barring that you'll need to request support for it. It's an increasingly popular record type so not supporting it isn't terribly great service nowadays.

I'm not familiar with the discussion that went into the design of CAA (it was probably discussed at some point on the relevant IETF mailing list, if you want to go digging).
Edit: removed for subthread cleanup.
Make apachebench(ab) send HTTP1.1 request? (2011)
I don't see the problem. Clearly he was trying to disenfranchise voters, what mechanism he used isn't all that relevant. You don't mess with the machinery of democracy and if you do I'm all for having the book thrown at you. Preferably a hardcover.
Actually the VRR makes the dips and hitches smoother, the problem is in my inherent annoyance at my system having trouble maintaining a framerate even approaching 100[0], let alone the 144hz capability of my screen.

[0]Or 60, depending on the game. Sigh.
This really interesting, would love to see how Signal stacks up.
Many PEs (professional engineers) too.
In term of nanotech, biology is decades or centuries more advanced than what we are doing. They are literally grabbing electron and move them around with the precision of nanometers while here we would be happy if we could manipulate a bacteria.

I think with more powerful computers, biomimicry can go pretty far. When we can simulate nanometer interactions on timescale of microseconds over minutes, lots of things can be unlocked.
In the Gnome IDE dept., mentions to two other options which are ported to gtk4 that brings GPU acceleration

- https://wiki.gnome.org/Apps/Builder

- https://github.com/Lyude/neovim-gtk
Puts on idiot hat

Don’t you know cloudfare bans ~~terrorism~~ alternate opinions.

(It’s funny how fast meal team 5 is able to find and down vote people satirizing their comments)
This should be off topic because it is not tech related.

That is what mods say with Palestine related posts.

Those rules should also apply here, shouldn't they?
> I doubt Texas refused on this principal

...really? You do?

You think Texas turned down federal money equal to 0.05% of the state's GDP because of the inflationary impact?

Refusing government aid on principle is literally a campaign slogan in Texas.
It would be great if you could include a before and after screenshot of your plugin in action. thanks
I share your sentiment, which is why I am thrilled with the progress on right to repair laws across the globe.

Also companies like Framework are letting us have our cake and eat it too. They’ve made CPU upgrades possible on laptops, and there’s a way to re-use old parts.

I don’t know if the same can ever be done for monitors - perhaps if someone came up with a clever tech to combine 4 displays into one big frame TV?
They do win some points on having better security than a popular security product, considering Cloudflare's own security posture is also quite important to their customers.
If they used DNS validation it would be better because there would be only one point of failure (DNS) rather than many (DNS and every ISP between CA and a site).
AGI's impact on Tech, SaaS valuations
"Our system is currently working as intended" implies that someone designed the system to work the way it does. What you're really arguing is that no actor is incentivized to improve things, and multiple actors are incentivized to preserve the status quo.

I'd argue that strident condemnations (ala your "our system is currently working as intended") is actually one of the features of the US political system that tends to create/preserve a subpar status quo: https://twitter.com/JohnArnoldFndtn/status/11063022464493690...

I don't believe that the US has a monopoly on greedy businesspeople or politicians, relative to other countries. But I do find myself wondering if the toxicity of our politics tends to filter out candidates with a good faith desire to serve the public. People who enjoy conflict tend to be jerks.

EDIT -- Here is some specific evidence that US elites are not uniquely rapacious:

A solid majority of Giving Pledge signatories hail from the US: https://gpcatalysis.blob.core.windows.net/gphostedcontent-pr... From the bottom of https://givingpledge.org/

While the US only has 735 of the world's 2640 billionaires: https://en.wikipedia.org/wiki/List_of_countries_by_number_of...
There are good, well-meaning politicians out there. They are often the ones most vilified by the media. The chief enablers of bad politicians are people who refuse to discern between good politicians and bad politicians. Enablers like you.
One of the greatest things of 80s micros were built-in BASIC interpreters. Turn it on and program immediately. Combined with source code listings to type in from magazines, you almost had to resist picking up some programming skills. Even the command to load a game was a form of programming already, even though 6-year old me didn't "get" it until a bit later.

We have easy access to so much amazing technology for free in today's day and age, but we IMHO really lost a lot from the glorious days of "38911 Basic Bytes Free - Ready."
It's not that rents are declining, it's that interest rates keep going up.
Often I see news like this and expect the stock price to take a hit, and then am surprised to discover that "the market" doesn't care. Not so in this case: OKTA down 12% today

Edit: Looks like a fairly strong down day in general so maybe it was just a coincidence. When you look at 1Y of data it's clear that OKTA swings around a lot. There's precedent for moves like this, in other words.
> Third, no one knows how to build secure software or services.

That is not an argument one would want to hear from a company whose only reason for existence is being good at security.