skysight-inc/HackerNews huggingface dataset:
Do you have any proof Okta is better or worse than any other solution? Measuring security is very hard.

Here is the evidence I have seen regarding Okta's security:
1. The had a breach last year.
2. They just had another breach. The breach was in their customer service department/system.
3. They may or may not have been slow to disclose the breach (remember, they may not have realized they were breached because they may get a lot of false breach reports and they may not have found evidence of a breach until recently).
4. They did not give credit to the customer who first reported the breach.
5. They may not have communicated with the customer after the customer reported the breach.

Here is what we don't know:

A. How skilled was the attacker. Skilled attackers are better at covering their tracks and harder to catch.

B. How many breaches has each ID provider had?

C. How many breaches has each ID provider detected?

D. How many breaches has each ID provider detected and covered up?

E. How many security bugs are in each provider's service? How serious are the bugs? How easy are they to find?

F. How good is the provider at detecting breaches?

G. How well are the provider's employees trained?

H. What percentage of the ID provider's employees care about security. A lot of people in the tech industry (software engineers, IT/sys admins/devops, managers, etc.) claim they care about security but their actions say otherwise. Examples include using easily guessed passwords, not patching software/dependencies, writing insecure code (buffer overflows, SQL injection, cross site scripting errors, etc.).

My main point is bashing Okta because they reported a breach does not prove Okta's product is any worse than any other product because we just don't have the information. We don't know how good other products are and it is even possible Okta is better than some or all of its competitors (it could also be worse).
> Marcel pipes python values in streams

That's indeed much better, all those untyped strings in shells in a bad old design

Though hopefully xonsh will implement this as well https://github.com/xonsh/xonsh/issues/3967
I actually use Okular on Windows and Linux, it is quite good.
Thats kind of depressing to burn a grandkid over a $600 honest mistake.
The Great Deshittification
I'm using mostly Python (+ Flask, Sanic, Litestar...) for the back-end and HTMX for the "front-end".
So, you created a deep fake interview? Why?
This can be controlled when use the "Advanced Options". It opens a config file where you can set:

RememberOpenedFiles = false

https://www.sumatrapdfreader.org/settings/settings3-4-6
Type Erasure in Rust
Yeah I'm not arguing shrooms should be illegal. I don't think they're any worse than pot, and actually are the one drug I think everyone should do.

But I think there are some serious risks to heavy, prolonged use that probably aren't well-studied or understood. Also for all I know her problems stem from the acid and not the shrooms.
NASA just sent a software update to a spacecraft 12B miles away
Issues like this typically boil down to management. If they had a driven forward thinking manager who could deliver value early and impress their superiors, then they could have leverage to make change in the organization and push for more devs, a change in philosophy or push for more resources for the software arm. These things take time though of course.
> If you're getting your Adderall not from prescription, they're not going to know

Airline pilots are subjected to a lot of drug tests. The upshot is that person won’t be taking the Adderall. Even if they need it.
Interesting, that's not what I expected. So it seems like it's an opinionated integration between an editor and a Markdown-based static site generator with its own set of XML-based markup features. Sounds like that has potential.

Its docs are quite nice (as I would hope to see from a documentation tool) and a good demo of what it's capable of, but after spending a bit of time looking them over I still have several questions:

* How does this compare to other well-established SSGs (Sphinx, Hugo, Jekyll, etc.)?

* Most people who write a lot of docs are already invested in some documentation toolset or another. What does this tool offer that would make it worthwhile to switch?

* From the overview page: "This project developed out of hundreds of customer interviews and 10+ years of working on the IntelliJ Platform documentation. These experiences gave us a long list of features to build and problems to solve." I'd be interested to hear more about specific lessons learned from these interviews and how Writerside addresses them.
I really like Okular (especially with the theme that allows me to read PDFs with dark red background and yellow text), but haven't been able to run it on my Mac Mini with Apple silicon. The brew formula appears to be broken for newer macs.
The website seems to be unmaintained, and searches for the company by name don't bring up anything past 2021. I think they're dead, which is quite the pity.

It obviously needs to be economically viable to pursue, but should be worthy of subsidies to help it find its footing--we'll all be well-served by having better recycling options.

If you learn anything more about this please share!
Errant logging and transfer for technical support apparently nearly lead to a security compromise at Cloudflare recently.
Supersonic falling out of fashion is just economics, it's not a forgone conclusion that better technology and higher performance will always be more popular.

There really is a "peak comfort" or "good enough" for most people, the metrics of cost and convenience can trump objective quality and performance.

Moving the amount of people we want to move, for the cost at which people are willing to endure, shook out the way it did and supersonic lost out.

For general aviation you just have many more challenges to overcome than say driving. It takes really special circumstances before it makes sense.

We won't have flying cars for the same reason we don't all have planes. They aren't required, few need them and they would be more inconvenient to operate than a simple car.
Maybe SSO as such is not the greatest idea?
Yeah this always bugged me about unity - it seemed like 95% of all tutorial/how-to/guide content (even official stuff from unity!) was video based which was utterly infuriating.

I don't have time to sit and watch a 45 minute video every time I need to find out some basic thing!

I guess these days there are LLMs though which might make things less annoying.
> Even emails were not a proper replacement. Initially free providers only supported sending/receiving emails with 1 to 5 MB attachments.

Pretty much every ISP provided an email address for each account. Some email clients supported the MIME multipart/partial subtype which allowed for large attachments to be split up amongst multiple emails.
Incidentally, the Mediterranean sea is being invaded by blue crabs.

https://www.bbc.com/future/article/20220809-how-the-mediterr...

https://www.nature.com/articles/d43978-023-00123-7
> Who cares how big the codec is?

Small inefficiencies add up and in the end you have the janky laggy mess that is modern software.
> really is a "peak comfort" or "good enough" for most people

Most people are irrelevant for commercial aviation. And there are entire sections of the market for which most rich Americans are irrelevant.
The instant you implement that, then everyone will just start squeezing all the tracking information they need into the WebSession cookie. Plus, this isn't backwards compatible with all the existing servers that use custom names for the session cookie. PHPSESSID, session_id, etc.
yeah i hear it is Empress now lmaoo
This is climate change making real impacts on the planet. I just did a quick search and it looks like it's accelerating. We need more climate startups yesterday. Tesla is a good example of one such success.

Edit: from the article: "If ocean temperatures continue to rise because of human-caused climate change, however, the overall makeup of species living in the Bering Sea will likely look very different than it does today, the researchers write." No idea why I'm being downvoted.
Just spitballing here, but why can't you file a DMCA takedown against the scammer immediately?

Because if everyone did this, the scammers would eventually not bother.
This was honestly a pretty surprising mistake for a big player like Intel. Quite a big oversight in my opinion. The fact that the OS will migrate processes from big cores to little cores should not be a surprise, given that it is basically necessary for the power savings to be realized. That effectively necessitates having the same ISA on both the big and little cores. It's not like desktop class operating systems haven't been running on these types of cores for over a decade.
I'm a fairly drug-averse person. I have no qualms about other people using them, but it took us over 30 years to really understand the implications of legalized opioids. And that was after a lengthy and expensive FDA process.

So respect to all of the early adopters who have nothing to lose and are willing to put their own sanity at risk. I just don't understand people who in one breath curse the Sackler family but then line up to try the first batch of industrialized psilocybin from Rose City Laboratories.
Last time I used whatsapp on desktop (admittedly a few years ago), the user experience was that I needed my phone around to unlock it every once in a while, because the desktop client was disconnecting every time the phone went into a deeper power save mode.

The desktop client requiring me to constantly have the mobile with me defeats the purpose.
I think Habitat predated Maniac Mansion.
That makes sense. I only added my experience because I must admit that as a new patient, I went in asking for a "High CBD/low THC" option because I was under the impression early on that CBD was the more important therapeutic component and I didn't "want to be high" but was sadly informed that for pain, that was not particularly an option, which was very much new to me to learn.
The link between cannabis use and psychosis is very real, although it's less clear if cannabis causes the psychosis. Other people have come to different conclusions than the paper you linked.

At this point there it's hard to be sure one way or the other, but all things considered I feel there's enough to warrant some caution (also wrt. dependency and some other issues).
Had to check. 52. Definitely shows age doesn't bestow wisdom. Apparently money doesn't either.
World Energy Outlook 2023
Not only can the watermarks be deleted easily. They might also get deleted accidentally by some post-processing like tokenization for grammar and spellchecking.

Also, I think 3.1 and the following proof is pseudo-formalism. A simple sentence that explains the reason is enough.
mmWave Motion Sensing: Everything Presence One (EP1) vs. Aqara FP2
It's mind boggling to think the first of these launched when I was ~5 years old - and still operational, at these distances.
People go too hard. If you're in your 20s, starting at ten minutes a day and working up to 90 minutes over the course of 18 months is a reasonable rate of change.

Tendons and ligaments do not adapt at the same rate as muscles. Nor do articulation patterns.
Yeah your brain is really good at lying to you when you're depressed. I know that's part of what she's been going through.
Unified versus Split Diff
Yeah the cell phone world is a little dodgy at times.
Don't worry, I'm sure they'll stop at just games.
Excellent! Will update today then :)
You should give "Space Station 13" a try.
I wonder if JetBrains is going for the professional technical writer (TW) market outside of software development. Think aviation, military, manufacturing, etc. They seem to use paid writing suites quite a lot. MadCap Flare is a name you hear often. TW teams writing in B2C contexts often use these suites too.

JetBrains markets it as docs-as-code though, a concept that software-development-focused technical writers would care most about.

There is also the angle that a lot of engineers don't want to deal with any bullshit setting up a docs authoring env. If this tool makes it easier for them to contribute docs, I could see that as a way to get solid adoption.

The docs quality automation sounds interesting. Couldn't find a link that explains more. (I'm on mobile.)

(I've been a TW for ~10 years.)
Not just images. Whole PDFs as well. I do some PDF generation for work, and running the update command and instantly seeing the changes when it’s done, is great.
If I recall, microfocus recompiles while lzlabs emulates on a layer.

With microfocus JCL become bash scripts and have similar tools to mainframe. Unsure if lzlabs translates jcls.

My favorite unanswered question when someone told me take the 70.000 component core banking to cloud is “ok, on which language you can assure will run in 10-15 years?” As that’s the bare minimum the new CBS has to last.

If we had followed the crowd, we would have built it as microservices, then as event-driven architecture, then as Mini-monoliths, on auto generated Java that turns one cobol program into an object but is not designed as an OO platform…

I understand companies should not be tied to the past but running off a precipice full speed on is not smart either…
I hate when excel converts UPCs to decimal and no amount of format will fix it other than to insert a colin before the UPC which is apparently the official answer on what to do
Downvoted for saying it should be illegal? It already is in many countries
Especially in cable networks, the ISP almost always fully controls the CPE
Counterpoint: SSRIs were transformative for my depression. Side effects were minor and manageable (eg, Wellbutrin worked well to prevent any sexual dysfunction). I was on them for several years and had no problem tapering off. My understanding is that this is a pretty typical experience. Rhetoric like this was actively harmful in dissuading me for years from trying what ended up being by far the most effective treatment for me.

(yes, I've tried psychedelics; they're fascinating and super promising, but at least for me, not transformative in the way that fluoxetine was)

No individual depression treatment works for everyone. SSRIs are not a magic bullet. Neither are psychedelics. But if you're depressed and haven't tried SSRIs, you owe it to yourself and everyone in your life to at least test the hypothesis that they might help.

Scott Alexander's page on SSRIs is a great, relatively objective resource, from a psychiatrist who regularly prescribes them:
https://lorienpsych.com/2020/10/25/ssris/
Analysis of Gaza War: Possibilities, impossibilities, probable outcomes
I use SumatraPDF daily but an older version 2.5.2 - before the 'larger' rework.

Works very well under WINE on FreeBSD and does not have display issues with taskbars etc.
That's stupid and when I export to csv it has a '. Excel should just stop fucking with shit
Writing a SSO system is very hard. They have very high up time requirements and very high security requirements.

1Password might select a different vendor or self-host an open source or commercial SSO system. Still, there are no perfect answers, and each choice has tradeoffs. Even worse, the new system is not guaranteed to be any better than the old system.

One thing which frustrates me when reading a lot of these posts is a lot of people assume that security is easy, organizations should be perfect, and breaches only occur if an organization or service is terrible. None of these are true.
> The whole point is that we are constantly finding causal, not casual relationships with our microbiome.

Both your examples cover casual relationships/correlation, and don't even try to assert causality.

I think you inadvertently proved OP's point on the high frequency of pseudoscience claims regarding human microbiome.
SDXL is great but it's in no way better than DALL E as far as straight text-to-image goes apart from the lack of censorship.

It has plenty of other advantages, but you can't tell it "make me a cute illustration of a 2 year old girl with Blaze from Blaze and the Monster Machines on a birthday cake with a large 2 candle on it."

DALL E will nail that, more or less. SDXL very much won't.
Love the Voyagers story.

Just get me thinking: Why there is not more missions like this ?
It takes significant time to cross "somewhere there", every year one launch could not hurt ?

Edit:

*Obligatory video: "Uptime 15,364 days - The Computers of Voyager" by Aaron Cummings https://www.youtube.com/watch?v=H62hZJVqs2o

Also here on HN: https://hn.algolia.com/?q=voyager
In particular, cars (like personal aircraft) are predominantly bought by the people who ride in them, so this is the kind of market where buyers will actually care about safety.

Compare this to a market where e.g. a government agency or health insurance company is choosing which product to buy for someone else to use.
Personally I know people in a similar situation who kept heavy usage into their 40s and their memory is amazingly better than anyone and keeps getting better. They can tell you what happened on a certain day or remember a long number instantly. Very heavy usage but sticks to the same strain might be the key difference.
It’s possible to customize algorithms in so many ways (for anything ranging from performance, or domain correctness, or flexibility) — if you understand how it works under the hood, and can bend it to what you want. Doesn’t make sense for some generic library to build an interface for all that, or even try to be all things for all people.

Very rarely are you likely to find the best solution for your needs off-the-shelf, unless you have the exact same needs of the library authors (assuming also that they have access to more competence than you). IME, not often the case. And it’s turned out to be nicer (from the long term perspective — experimentation flexibility, maintainability, etc) to roll my own. Of course, one tries to pick a layer of the stack to build on top of (Eg: Numpy/Jax, or Julia, or whatever) instead of boiling the ocean.
I mean probably the early adopters here have already early adopted in the past.
Ah, yes. The time before the FDA and USDA, where the food industry was famous for being easy to distinguish the safe options from the unsafe options…
Microfocus has you write scripts to replace jcl (can be somewhat automated) and has control tools to monitor batch.

Also consider that Linux allows more flexible IPC so some batch can be simplified dramatically
Thank you for this tool, @Foxboron! I'm using it for years now and it never failed me.
I have an AGX Xavier running ESXi arm edition. This makes it easy to run any Linux aarch64 distro that provides a uefi iso installer. It even supports running windows for arm vms. Great way to put the 32G of memory and NVME to use
You can have both, the same device can solve both problems. You dont -have- to root your phone.
Lessons learned from 15 years of SumatraPDF, an open source Windows app - https://news.ycombinator.com/item?id=27968900 - Jul 2021 (133 comments)

Lessons learned from 15 years of SumatraPDF, an open source Windows app (2021) - https://news.ycombinator.com/item?id=35065785 - Mar 2023 (173 comments)
Not taking a stance on the actual substance, but someone should update the Wikipedia page because it seems we have a whole new terminology emerging.
I know someone who had a lesser but similar episode after taking shrooms for the first time. It was about a week of paranoid delusions (The Truman Show came up a few times). After he snapped out of it, he totally turned his life around; went from a very phlegmatic personality to totally type A, got his degree, and now owns several businesses. The human brain is just so complex.
> don't understand how you can think the government is the more unethical party here

They aren’t saying that. They’re saying the ethics are functionally irrelevant. It’s not dastardly enough to provoke a standard. It’s just monumentally stupid on the government’s part.
> (...) but the chances of it being incidental is vanishingly small.

I think you're misrepresenting OP's claim. OP explicitly stated there's some likelihood the influence is minor, but for some reason you're trying to refute "incidental", which is not what OP claimed.
Do you understand what happened in the opioid crisis, and why people are mad at the Sacklers? They weren’t hapless naive actors that didn’t fully understand “the implications” of the drugs they were selling. The effects of opioid addiction were WELL known when oxycontin was introduced, and Purdue Pharmaceuticals deliberately misrepresented critical information about the drugs they sold and had salespeople lie in a wholesale fashion on a massive scale.

It’s reasonable to have suspicion about companies and regulators in this area, but the opioid crisis is such a different situation in context.
But the uplift is a lot slower than sea rise, yes ?
Openscad does have constraints, they just look different. It is an imperative ui so it has imperative constraints. Most cad programs have a declarative ui and declarative constraints.

However I have to admit, I too would love an imperative ui with declarative constraints. I have a hard time visualizing how that would work, but that is probably because I lack imagination.
We do have some understanding of the safety profile of psilocybin, even if its Schedule I status makes it hard to research. At the very least, it doesn’t have physical dependency like opioids.

However, the lack of significant safety research does make it hard to determine the incidence of development of disorders like HPPD but, unlike opioids, I can’t imagine someone wanting to continue taking psilocybin after developing HPPD.
There is more information on the processor here [1]

> Sipeed LM4A specifications:

> SoC – Alibaba T-Head TH1520 quad-core RISC-V Xuantie C910 (RV64GCV) processor @ 2.5 GHz, Xuantie C906 audio DSP @ 800 MHz, low power Xuantie E902 core, 50 GFLOPS Imagination 3D GPU, and 4 TOPS NPU

> System Memory – 4GB, 8GB, or 16GB RAM

> Storage – Optional eMMC flash with 16GB, 32GB, or 64 GB capacity

> Networking – Up to 2x Gigabit Ethernet PHY

> Host interface – 260-pin SO-DIMM connector

> Dimensions – 69 x 45mm

[1] https://www.cnx-software.com/2022/12/14/sipeed-lm4a-t-head-t...
Built for you by... Halliburton.
Personally, I’m seriously considering joining the monastery because software is just the worst today.

About the best you can hope for is get into a place that’s complacent because otherwise it’s daily wtf stories all the way down. The complacent place will be a daily wtf too but at least people will have bread and circuses
I enjoyed my decade working with mainframes probably the most out of anything in my career, but I suspect my opinion would be different had I been an application developer forced to work in COBOL.

There's a lot of very cool and technically interesting stuff to explore on the platform. Tons of great computing history, you really feel a bit like you are peering back in time going decade by decade as you move inward towards the core of the operating system. It's helpful to remind yourself that it's a direct descendent of the first successful commercial virtual memory implementation, and the core of the operating system has pieces that predate that. You can see the outlines of the world before that and how things adapted afterwards, how the modern process model slowly evolved out of DAT and time sharing, how things were handled in a fully vertically integrated system before the concept of device drivers was fully realized. How batch led to time sharing and transaction monitors and how all of that slowly turned into the web. And of course all the different tricks programmers used to be productive in that kind of a world.

It's impossible to fully realize all that we take for granted in modern computing when you haven't seen any of that.

Unfortunately the vast majority of people that work on mainframes never get to see that side of things.