skysight-inc/HackerNews huggingface dataset:
The document states that the modifications to the system should have been made in 2020, but in 2021 they still couldn't spell the names of all their customers right, and the bank refused to provide a concrete timeline for the fix. The project that was supposed to fix their naming problem ended up being too complicated to implement and they stuck with their old systems.

International VISA transfers weren't the problem here. Bank statements and online environments carried the wrong name, and those had to be corrected. No sensible court would make a bank disconnect its payment systems because the receiving end uses a shitty system, but when it comes to communication between the bank and its customer, there is no such constraint.

Furthermore, EBDIC had already been extended to support the problematic characters long before the lawsuit took place. "Yes but EBDIC database" wasn't a good excuse because EBDIC itself could handle this specific edge case just fine.

By the time an investigation was done, the bank had made advancements and the name of the original plaintiff was representable, so they didn't receive a fine on that count (though they ended up receiving an impartiality related fine for their privacy officer) according to https://ellentimmer.com/2022/01/12/banken-7/
You mean like a local MiTM? I vaguely remember firefox disabling the OS-wide trust store years ago for this very reason.
Child (and adult) sex abuse is sickeningly common and pervs with enough money to pay hush money and good lawyers get away with it all the time. I don’t think they need any extra encouragement.
Bing is using OpenAI's DALLE-3 which is somewhat ahead right now. However, SDXL (Stable Diffusion XL) can produce some pretty fantastic results, but it helps a lot to use a refining model (https://huggingface.co/stabilityai/stable-diffusion-xl-refin...) at the end of the generation. The automatic1111 webui has a feature to do this automatically built in, but other services have their own approaches.

(BTW, regarding the error you saw - use this instead https://huggingface.co/spaces/segmind/Segmind-Stable-Diffusi... )
Imagine creating a hostile environment then blaming anti-immigration policy for a dying tech industry when your own people are leaving because there’s better opportunities outside.
Thank you!

Recurse is amazing. Truly an amazing gathering of accomplished, interesting and curious folks. It’s an amazing community and setting - if you can swing the 6 or 12 weeks, and especially if you can come to the physical space in downtown Brooklyn, I would very much recommend it.

Lots of Recursers end up on the HN homepage these days - from https://jvns.ca to https://jakelazaroff.com ‘s series on CRDTs. I think there’s a connection between the Recurse and HN communities, and an appreciation of what Recursers tend to gravite towards (personal projects that are meaningful to its creators, and are typically about explaining, exploring or building something new).

Feel free to email me to talk more about it.

As for Trouble, thanks for the suggestion! I’ll be adding it, on top of all of the other places that people have been mentioning.
No, the entire setup I have is geared to function as company: I have many clients (who keep coming back because they can kick me out any time which is a bit of an issue in the EU, but then they don't) and I also make products which even more cements me as 'defacto employee'. I had many discussions (especially) with the dutch taxes who tried to catch me out; never worked.
Recreating John Maeda's Design by Numbers Programming Environment in JavaScript
The real problem, at least where I live, is the real estate market.
Everyone and their mother are putting their investments in real estate leaving no money for startups and entrepreneurship.
Ask HN: Help me. Should I build a REST API security scanner?
Hi friends, I think this is the time I need your advice and would greatly appreciate your thoughts and hints.

I have spent the last 20 years building enterprise software in different sectors, also taking part in presales and technical due dilligence activities during M&A processes both on the buyer and the seller side.

Observing the landscape of application security tools and practices across multiple companies I have noticed a recurring pattern.

The application security sector appears primarily focused on two objectives: a) Independent researchers and boutique firms working hard to uncover new vulnerabilities and provide best practices. b) Large corporations producing web security tools that, to me, seem somewhat outdated. These tools often approach web applications as if they're server-side rendering apps or front-end applications tightly coupled with their back-end being developed by the same team. Basically, these tools identify potential user actions in your web application and attempt to target the corresponding endpoints with malicious content.

This would be fine, however modern applications are typically written with a single back-end serving multiple front-ends (think: web, mobile, thirt-party integrations) and there are even REST API applications out there with no front-end at all.

To my understanding, most popular web security tools struggle to detect endpoints not explicitly utilized by the web front-end. This includes service endpoints intended to remain private. Ensuring the security of such endpoints often requires, for example, submitting a Swagger definition upfront (that can be outdated itself).

There are tools which try to do something similar like kiterunner (last updated two years ago) but these are not packaged and complete solutions.

Is it possible there are no modern REST API security scanners which could validate e.g. mobile apps REST API back-ends without providing a Swagger file or intercepting the network traffic?

How do you reliably test the security of your REST API apps?

Is there a market for such security tool dedicated to REST API testing, e.g. targeting mobile app developers?

I would be super thankful for your input on how do you approach this subject, whether I am blind or is there really a gap that you see as well and would like to be filled.
Per Google, there are cameras inside the car: https://support.google.com/waymo/answer/9190819?hl=en
Dunno. But there is a lot of research on that.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3066425/

https://medicaljournalssweden.se/SJU/article/view/11787
I agree, but those who "needed" or "were waiting" for a little nudge, are getting more and more of those now and in the near future
Close your account and go to another bank that can deal with your name properly if that is so important to you, but do not waste resources of the legal system with stuff like this. That is what we have free markets for.
>Abs has been mandatory in the us since 2012

The average US vehicle's age is more than 12 years.

>and was very common long before that (my base model truck from 1999 has it)

My non-base-model car from 1995 didn't.

>we can consider cars without abs statistical noise by now.

I'm not so sure that's true. But even if it is, that doesn't mean that there are no meaningful differences in safety between an exclusively new (or at least very recent) and maintained vehicle fleet and the general population.
Think you need another car? Consider an e-bike instead
Show HN: An Embedding-Based Search Service over ShowHN, AskHN, GitHub, More
Hey folks, Elias here. Excited to unveil my latest project.

Why I Built This: Traditional keyword search isn't cutting it. I've used LLM-embeddings to provide more nuanced, relevant results.

How It Works: LLM-embedding similarity on curated datasets for semantically similar results. No need to iterate over keywords any more.

Current Datasets:

- YC Companies
- Show HN Posts,
- Ask HN Posts
- ProductHunt Startups
- Github Top 200k Repos

Use Cases:

- Validate a product idea's existence
- Check if someone already Asked HN something
- Have fun - search random terms and see what pops up

Want to see other datasets? Got one in mind? What would you use it for? (I'm even thinking of adding all PG's tweets - so feel free to be creative.)

Eager for your feedback and ideas. Hope you find this useful and fun!
Sawalni: The Dawn of Moroccan AI
>
Ironically, it is very unempathetic to claim 80% of drivers lack empathy.

Well I may not have phrased it correctly but I am not claiming that. Lack of empathy is one of the various causes of a majority of drivers being unfit for driving.
There are multiple ways to run together - we will show a few in a demo coming out soon.

We also consider a tighter integration like with Airflow described here as a possible next step https://dlthub.com/docs/walkthroughs/deploy-a-pipeline/deplo...

We will investigate the interest incrementally as to not build any plugins that don't end up used.
There is no accident in the amount 2^18:
https://bje.org.au/knowledge-centre/jewish-symbols/chai-the-...
Posts with text like this really grinds my gears:

> chatGPT says that MPTCP has been included in the mainline kernel since Linux kernel version 3.6 and that users can configure and use MPTCP features, but the MPTCP community website says that MPTCP v1 is only supported since 5.6.

Why is it interesting what a GPT has to say about it, if you've fact-checked it and found contradictory information?
And, as this lawsuit shows, not getting with the times exposes the company to repercussions as well. I doubt a business would prefer their own schedule over one set by the court.

ING Belgium found out the hard way, and I doubt this change to their systems was cheap. They were forced to alter a system that was due to be replaced (though that didn't happen in the expected timeline, surprise surprise) when they could've rolled out this change over a long period of time somewhere in the last two decades.
They can have a different set(s) of CJK characters outside BMP. There's plenty of room if they are confident they need these.

Or perhaps some combining characters to turn a C character into Japanese preferred form, etc.
Here in Flanders some do, most don't. Why would they? They are as much a person as their husband, with an identity and family that is not any less valid than their husband's.
It’s essential, though the Bullet Journal spells out nice, thoughtful, and adaptable techniques. https://bulletjournal.com/pages/book
The reviews have caught hundreds of important ideas and tasks that had slipped my mind.
This makes sense. Thank you for clarifying.
> This isn't a backdoor, it's the law working as intended.

I certainly think the lawmakers' intention was that for example, if someone called Stefan has had their name mis-entered as Steffan, data controllers must correct the inaccuracy. So I agree correcting names is within the scope of the law.

But if some comedian decided to legally change their name to "Baron Venom Balrog Sabretooth Vader Megatron Vegeta Robotnik Magneto Bison Sephiroth Lex Luthor Skeletor Joker Grind" and declares none of it can be omitted - I'm not sure lawmakers intended to require all data controllers to support that? Envelopes are only so large, after all.

So I think legislators intended to make some allowances for the limitations of computer systems.
Side effects include: Unspeakable Horrors
There's a question as to whether A offsets B, or whether B is so harmful that no reasonable amount of A can offset it.

Reducing it to "exercise good" is too blunt an instrument
When parsing the proc files, many people forget that process names can have spaces in them and that causes some very funny outputs. The Python script in this posts handles those correctly, kudos.
Anybody knows how Amazon is making this happen regarding Law enforcement, US jurisdiction, etc?
That this level of wisdom is buried layers deep in an HN post is a bit of a shame.

Spot on.
I’ve just created and compiled an empty WinUI3 project, and I got 131 MB of binaries just for the AMD64 architecture. The EXE from that folder crashes on startup with DllNotFoundException “Unable to load DLL 'Microsoft.ui.xaml.dll' or one of its dependencies”

Apparently, Microsoft couldn’t even setup the project template, need to manually edit the project file adding WindowsAppSDKSelfContained setting. After that it launches, but the binaries are now 151MB in 386 files, for a single AMD64 architecture.

By comparison, an empty WPF application compiles into 171 KB of binaries in 5 files, and the binary is CPU-agnostic, it runs on all CPU architectures. It depends on the .NET 7 runtime, but the runtime for my processor only takes 55MB to download. And if you’re unhappy about the runtime, you can instead target the older .NET framework 4.8 which comes preinstalled on Windows 10 and 11.
Having French as the lingua franca, the very idea!
First blog post mentions Erlang/OTP: https://flawless.dev/essays/when-letting-it-crash-is-not-eno...
Surely, some of those "double take(s)" are because you're not driving and thus, not on alert like you would/should/better be if you were driving.
My perspective is on the experience of an immigrant in an English-speaking country. Greek and Russian friends give their standardised Latin-for-English transliterations everywhere and it works because there's no diacritics and no English speakers bother trying to read the Greek or Cyrillic versions. My own Romanian name being Latin alphabet with diacritics seems to get mangled in more ways, from what we've compared.
> By default, mptcp is disabled

By default, all TCP connections should be MPTCP. There is just upside and no real downside. It falls back to TCP when the network doesn't support it, and the vast majority of the internet supports that since iPhones use MPTCP by default.

Please reconsider the decision not to just use MPTCP by default. People using Go software for decades to come will have a buggy experience whenever they move networks from wifi to cell otherwise.
Congratulations you just reinvented communism. We don’t want cities making those kinds of investments for hopefully obvious reasons in that context.

Subway lines can pay for themselves across hundreds of years. It’s the best kind of investment for cities because it operates on their timescales and use ultra cheap bonds responsibly and it doesn’t interfere with free markets.
This is like the nursery rhyme version of economics we tell to freshmen. The truth is pretty far from this.

My personal take is that in practice most of the innovation we see in tech comes from the universities. E.g. the tech in search engines, smart phones, the internet, LLMs and AI etc.

The tech is then, in practice, given to the private sector. There the profit motive is used to commercialize rather than innovate.

Commercialization does often require some innovation around the edges, which companies often get by hiring talent from academia.

I realize this is unlikely to be a super popular opinion for some HN readers. But to me it's the one most defensible by evidence.
Except that is not really what happens.
> Either way it's a terrible stupid and short sighted mistake

Uh, 'Mistake' is a really generous word here.

Cruise isn't some amateur one-man startup. It's a multi-billion dollars company with tons of lawyers, advisors, resources, support from GM, etc. It was a deliberate act full-stop. The only 'mistake' they made was probably thinking they could get away with it.
Just like many other sweep line based algorithms, you need to store the beach within an appropriate binary search tree that's log(n) per tree operation. And the total amount of tree queries should be proportional to the number of features (faces, edges, vertices) within Delaunay Triangulation. The fact that amount of features within triangulation is proportional to the number of vertices can be proved using Euler's formula F+V-E=2. V=n, E=F*3/2 (each triangle has 3 edges, but each edge is shared by 2 faces).
Triggering `Entr`
Having worked with McKinsey people, they will forever be Lyle Lanley for me... https://yewtu.be/watch?v=ZDOI0cq6GZM
I think it’s universal. It started in the United States though. Look at this case: Frazier v. Cupp (1969). That is what started it all. Many other nations picked up on it. This case was argued before the Supreme Court.

In hindsight we can see that police are very dishonest, lying, thugs. They have no real ethics. FBI was caught sleeping with female “suspects”’for intelligence. Think about that. Fucking for intelligence. They were exploiting women.

NSA has intelligence analysts that were using and still are using a program called “section 702” of the intelligence act to spy on women they want to have sex with, ex girlfriends, others. Intimate details of their lives. It was written up in Wired. It looks to be renewed.

So you have power hungry cops, FBI, NSA Analysts who are ugly, fat and corrupt. Can’t get laid, ethical issues. Who the Supreme Court says can lie straight to your face. But they can arrest you if they think you are lying? Stop trying to help them. Let them drown. They are the real threat. The real terrorists. If we did this we be in jail.
I'm not a fan of Apple's, but people pinning their hopes and dreams of a real high performance ARM competitor on Qualcomm making fast chips seems like a bad plan.

They have consistently under-delivered on chip performance, and have no issue weaseling benchmark numbers to sell them, leaving consumers highly unhappy once they buy the thing.

They also make Apple look like open source zealots when it comes to openness.
It's not impossible to enter a market offering better services for bigger price than you competitors really. Or having better tech it's possible to attract enough investments to overstay lowered prices. Or use other ways which definitely work outside of US telco industry.
Who actually uses multipath?
From a pragmatic perspective, they do a great job.

The point of identification is to identify people to some level of trust. In the vast majority of cases, that means that I should know that you’re the same person that I did business with yesterday.

Airlines need to tie you to an official document, which is much more complex. They do a pretty decent job at it considering all of the stakeholders who make that happen.

The hang-wringing about American hegemony is a projection of some other nationalist feeling. The constraints of Hollerith cards made it difficult to accommodate different character sets and the accommodations are codified in international treaties and business process. It will improve over time, probably first in the more cosmetic CRM side.

Accepting customers and accepting character sets or glyphs are two very different things. Accommodation is a two way street - if your name on the Starbucks cup is in Arabic or Greek, the barista in the US isn't going to be able to call it out. That not because the barista is some ignorant rube, they just don’t speak Greek.

The magic is we have a global system where many people have the ability to step in a plane and go almost anywhere and immediately conduct their business or pleasure with minimal friction. One of the friction points are issues like character sets, or poor accommodation of long names, etc.
Note to self: sit down and compare the strengths and weaknesses of this approach with a classic GOFAI system like SHRDLU.
The link at the end did not make me think the entire post was a direct translation. Good catch.

Edit: It's nice this person translated it. But normally you note at the top when something is a translation. Or note it at all.
I can't really blame them. The essence of it is "if you see hooves think horses not zebras".

The human body is usualy one resilient bastard, so the ol' "tylenol and come back if it gets worse" is a good tactic for 95% of the cases.

But detecting those 5% cases probably takes A LOT of dedicated bandwidth from the whole medical process, so unless there is some clear manifestation that it's not horses but something else, I think it is reasonable that some will not investigate further.
Probably if Mary-Sue from Idaho, a shop clerk tweets this it’s not exactly the same if a former diplomat with international connections and public influence does it?
They probably do for a small percentage of people, but we value free speech enough that we are willing to trade that.

There’s a huge difference though. If someone listens to 90s industrial music or watches Trainspotting and shoots smack, they are harming themselves. You can’t indulge pedophilia IRL without harming someone else.

Incitement to harming others is an area where we do sometimes draw a line with speech. So I think you could argue that child porn, even if fake, is direct incitement to violence. That would put it in the same category as calls to murder Muslims or Jews, etc.

The same argument could be made about rape porn though, even if it’s fake or simulated with actors. Personally I think that anything we do conclude about CSAM should in fact apply to rape porn, revenge porn, and other porn depicting nonconsensual abuse.
Don't follow other people's advice.

People will tell you whatever they like or has worked for them: have kids, get married, upskill in a certain field or w/e, but there's a small likelihood that this will also work for you.

Take charge of your life and stop delegating your choices to other people. You don't need to solve the world's problems, but your own.

So many people have kids being mentally not prepared because they have their own sort of issues. They end up adding yet another human being with many issues to this world, which has enough plenty.

Don't go work in a field because their family or friends told them to do it. But they end up hating it, or just not really being excited enough about it to succeed at it.

And so on. There'll be plenty of people wanting to give advice either for egotistical reasons or to make their own audience (like on social media platforms). But they won't be accountable for your life on your outcomes, you are the only person accountable for yourself.

You can read a few books and decide for yourself whether the contents make sense, and if there's anything you would take the risk to follow through. But don't make the mistake of thinking that because of somebody wrote a book about a subject, or because an anonymous post on the internet has a lot of upvotes, that this should also matter to you. You make your own choices, always.

The only real tip that should function well for all human beings is taking care of yourself and visiting the doctor regularly: exercise/sports(whatever works for you) and also find some activities to keep your mind happy and working.
Yes, into the directory you're moving the files from...
You were making a really solid-sounding technical argument, but then you used the phrase "just needs to", which, for me, triggers a tendency to discard whatever the person is telling me.
The information wasn't inaccurate, it was encoded as accurately as possible in a specific encoding. I can't see how anything would be "inaccurate" in any way the lawmakers intended.
Perhaps there is a regional difference, but I don't know a single developer that is in favor of it. I don't see how anyone with technical knowledge could come to a positive conclusion here if they look at error rates and problems to privacy.

There were also public hearings with technical experts about feasibility that were said to be a huge embarrassment for people proposing the bill as the rejection was so clear. I think from nine experts, zero accepted the proposal and made pretty clear, that this is to be rejected with prejudice.

The only ones in tech that I know of at least are those that want to sell their own AI solutions. As I said, there was quite a bit of lobbying.
How will this deal with workflow versioning? IMO the hardest problem in e.g. Temporal/Cadence
These days, password managers such as 1Password are easy enough to use even for non-tech-savvy people.

Other than that, although the process can become tedious when applied manually to a multitude of passwords, diceware helps with generating easy-to-remember passwords:

https://diceware.dmuth.org/

https://blog.1password.com/toward-better-master-passwords/

You probably still want to keep a secure record of those somewhere, which is where password managers come in handy again.