skysight-inc/HackerNews huggingface dataset:
I think you do need them to be providing significant input and direction, because otherwise you are likely to wind up with regulations that are divorced from reality. Focusing on a single issue in isolation -- even one as important as "safety" (as suggested by the sibling comment) causes a cascade of unforeseen consequences.

As to outlawing the return to the private sector, that makes it career suicide to touch a government job. I don't see how that will bring high quality candidates to these posts.
There's really two scenarios there. Either the earth is moving enough that run as fast as you can is zero mph, because the earth is moving a lot or you could move rather quickly and so there's not much need to move.

If you're in an immediately hazardous area, you should move to nearby safety during the earthquake (getting away from kitchens, window, things that could fall on you, etc), but exiting a building during an earthquake is probably riskier than staying inside it.

Certainly, use the time of the shaking to plan your exit, but no sense in falling all over the place and risking avoidable injury.

If you're in the bay area, chances are the building you're in is fairly earthquake safe. Building codes have improved over time, and many of the most unsafe buildings were destroyed in previous large earthquakes. Small buildings tend to be fairly safe even if not up to current codes, and large buildings tend to be targetted by inspection and retrofit requirements.
QUIC explicitly mentions that it is vulnerable to amplification attacks in the RFC. It suggests sending an extra packet to mitigate, at which point I believe the advantage of QUIC is lost as far as establishing connections is concerned.
Yesterday's discussion: https://news.ycombinator.com/item?id=38028418
Terrorism is - historically and in the present - almost always a symptom of a political movement that has radicalized possibly as an outgrowth of a population under occupation or backed into a corner.

That's why to me it is a symptom.

As for the rest, we are mostly in agreement, I think the latter bit is the key but for that Israel would have to back off of certain policies and they would have to be able to accept that some fragment of Hamas / and or terrorist factions funded by other countries around it will cause some degree of damage. There is some analogy with 'force protection' here, if you focus too much on protecting your own side at the expense of your status with respect to human rights on the side of your opponent you more or less automatically breed terrorists.

Leaving hundreds of thousands of youths with the image of an enemy next door has to result in a terrorist organization. More so if you occasionally kill a bunch of them and/or remove their kinsfolk from land that they've lived on their whole lives.
Just need to find a parabolic garbage can!?
Didn't we just try this in Gaza? Abandoned the territory settled? Imagine if Hamas controlled both Gaza and the West Bank? Israel would be destroyed.

UN peacekeeping is bullshit. What country is going to trust the UN to guarantee it's security. There is UN peacekeeping in Lebanon where attacks against Israel are and were coming from, they do zilch. The history of UN peacekeepers in the region is that at any hint of violence they move away.

On the Israeli side nobody will trust the Palestinians over anything. There's also a minority that believes the entire land belongs to Israel and screw the Palestinians. On the Palestinian side (IMO) there's a majority that is unwilling to take any settlement other than all the Jews should leave the middle east. There's fractures and nobody that represents all of them that can agree and/or enforce any agreement. So here we are.
More like heart-to-heart-chat-monitor
1) Are there any public case studies of sslv2 or similar being used against the general public? Downgrade attacks won’t work if the server supports sslv2 as the connecting host will still demand tls 1.2.

2) Is there any public case studies of remotely exploitable code via sslv2? granted poodle etc are still a thing, but they are cryptgraphic attacks which rely on the client accepting ssl in the first place.

imo more importantly, if they are running SSLv2 they almost certainly have really bad vulnerabilities somewhere as they’re clearly running legacy systems evidenced by sslv2, but I am not aware of any directly exploitable servers due specifically to sslv2 being enabled.

This kind of alarmism creates security fatigue, wasting time and resources rather than focusing on actual security issues.
Yeah no, I didn't laught when the protagonist gf got killed by a "train", or when the Nazi girl cries deformed and powerless in bed before deciding to commit suicide. I did laugh a few other times but categorizing it as a comedy is a disservice, maybe a tragicomedy or something like that would be more accurate.
Someone should make the enso for bashers! Not sure what that would look like. Maybe a text editor is enough.

I am not much of a writer at all but if I write a blog post I am both basher and swooper. Swooping happens after I publish. Something psychological about someone might read it motivates the swoop.
Midori was a lightweight browser based on WebkitGTK+. I just discovered that it's dev has been taken over by Astian in 2019 and that it is Gecko based with releases for Windows, Mac, Linux and Android. It it presented as privacy-oriented and lightweight. Coincidentally, they did a new release yesterday.

Of course I'm interested. A new Gecko based browser is quite surprising these days. I've used Firefox non-stop since its 1.5 version. I also could use a privacy-oriented and lightweight Gecko-based browser.

But who is Astian? They present themselves as Astian, Inc, yet they have a .org domain. It seems they are privacy and open source oriented, developing open source products including Midori and a "cloud". Their About Us page is a lorem ipsum and the href attribute of their email contact is mail@domain.com. I don't find much about them on the Web.

Do someone know more about all this here?
Since Kotlin threads appear to be Java threads (NB: Just following their documentation, I've never used Kotlin and have only started learning it because we may use it at work for some things in the near-ish future), you oughtn't use Thread::suspend. It's been deprecated for a while. Java threads are preemptible, though. You don't need to explicitly suspend them (even if that method weren't deprecated) since the scheduler will happily do it for you.
Followed by continued settlements further reducing Gaza’s size.
This is the key point;

"Nevertheless, the fact that a certain web server supports this anachronistic protocol provides an interesting indicator that other vulnerabilities and security issues may (and most likely will) be present on the same system."

SSLv2 is, in itself, harmless since no random user using their browser will ever use it.

However the fact it is still switched on implies that the site contains some very old code in the stack. Their server/ OpenSSL, or whatever is old- which likely means the whole stack is old. Since the server likely also supports SSLv3, a well crafted attack could steal the private key.

Of course a site that is this old is also likely to have more-or-less zero (human) traffic, and protects likely zero actual information. So while an easy target, probably not a rich one.

Doing a deeper analysis of these sites would be interesting.

Equally a similar scan for SSLv3 would be good as a comparison statistic. (I expect the number is pretty similar.)
> This is not the problem, people who claim something have to provide the evidence if asked

No we don't. However, I did provide evidence which you choose to ignore. You also claim that the army would bomb a place for no real reason which just doesn't make sense. Especially for the first target in a campaign. It's you who should provide evidence, not me.

> > But your specific attitude makes no sense. Intelligence information is internal, wartime bombings target decisions are privileged information
>
> So they can attack and kill anyone and claim they were military targets, and when asked for evidence then they will not provide because it is internal?

Nonsense. This is an attack on a building. Bombing is a coarse instrument and the IDF holds regular briefings where they provide evidence.

All the papers spent a day claiming Israel bombed a hospital killing 500 people. Total lie and the Hamas knew it when they came out with it. The IDF gathers and provides evidence for relevant situations (e.g. the Hospital bombing). It is accountable unlike the Hamas which is not.
1) half-wrong, complete crypto stripping downgrade attacks are possible if HSTS and HSTS preloading is not implemented.

Iirc it was possible to perform downgrade attacks upto sslv3, but again the client must accept these algorithms - modern browsers reject them.

Disabling port 80 has no value[1], unless clients who do not respect hsts are of concern (I think curl does not).

[1] https://letsencrypt.org/docs/allow-port-80/
Their support seems to be overwhelmed, despite transacting 5 figures a month through Wise Business support is non-existent. They missed multiple self-imposed deadlines to verify my account (they decided it had to be re-verified) despite the large monthly volume.

In addition, the UX is deliberately designed to take your cash. If your account is currently limited and you can't send money, there is NO indication of this anywhere on the app or website -- not even in the transfer flow. It tells you that your money is now stuck AFTER you've sent it to them. That's right, if you are unable to send money they let you create a transfer and just freeze your cash as soon as you pay. Such an oversight can only be deliberate to pad their float.
Having used Midori in the past on very lightweight machines, I would am looking at going back to the pre-Astian version with the webkit-gtk.
Anti-Musk people seldom list the reasons why they're anti-Musk because they are not reasonable reasons and they know it.

And yes it is okay for Musk to be criticized. Putting billionaires up on a pedestal is almost as annoying as vilifying them for being successful.
I assume this is based on a spherical cap's being "close enough" to a paraboloid, for the purposes of this design.
On the topic of unfortunate mingling with research, for an AIDS drug, ritonavir, it can come in multiple crystalline forms.

But this was unknown.

For years manufacturers only knew about and produced “Form 1” without issue for years until “Form 2” showed up out of nowhere. Maybe from a lab studying it, who knows.

But once it’s out, as it’s more stable, it’s preferred! It “infected” a key manufacturing plant with it, and the batches kept showing up in that form. And cleaning it away is virtually impossible.

> And Form Two went everywhere. Within days of identifying Form Two, the company’s analytical lab could only make that form of the drug. The bulk drug coming off the production line in Chicago turned out to be contaminated before it ever went in to the capsules. Staff from Chicago were sent to an uncontaminated production line in Italy to find out if they were doing anything differently. Within weeks, that line was producing Form Two as well.

As it’s more stable, it means it doesn’t dissolve as well, but is also favoured.

That’s bad news if you want a pill that dissolves in your stomach (or in this case, in the liquid capsules), or need an injectable solution.

https://www.chemistryworld.com/podcasts/ritonavir/4011593.ar...

The (fear-mongering chaser?):

> This wasn’t the first drug to show unexpected polymorphism. And it certainly wouldn’t be the last. Research published in 2018 suggests that a more stable polymorph is waiting to be created for about fifteen to fifty percent of all drugs.
> Universities could afford to pay more if they redirect funds from paying for "administrator" to paying for instructors and researchers.

Which administrators tho? There are about a dozen I rely on every day, and if you eliminate them, you'll be causing a lot more work for me, the researcher. Many admin positions are created after faculty complain their workload is getting too large. A lot of people seem to think they are just bloat, but they can actually be very helpful. To be constructive, you need to be more specific than parroting the "just get rid of admin" trope.
Google Maps Now Uses AI to Find Where People Are Having Fun
I think we're pretty much in agreement here. But like you I don't see it happening soon and possibly not ever. My biggest fear is some dirty bomb attack on a large Israeli city. And all of this mess is just feeding into the pathways that may well enable such a thing to happen in the future, there is a lot to lose on both sides and the fanatics are only making things much, much worse.
They're a US-regulated money transfer service, so they can't keep your money without being in serious trouble. How do you cash out and close the account?
Speaking of denial of service, it looks like HN killed the guy's server. https://web.archive.org/web/20231028021348/https://boston.co...
He is absolutely not a terrible person. Trolling overly sensitive and authoritarian political-establishment followers doesn't make someone "terrible".
i know ikea doesn't accept bitcoin, but what happens if you pay cash
Really? We EV road trip a lot and I'd love a 7/11 type mart.

- Bathroom
- Snacks
- Maybe a small fast food join attached

Honestly if every EV charger could be at a WaWa that'd be rad. As a west coaster I am so jealous of WaWa in general!
Good things is that GrapheneOS (seemingly) caught this early and fixed it.

https://grapheneos.social/@GrapheneOS/111309676504712576
Well that's a shitty filter because now criminals will use wifi or fake using wifi. And then they will get right through. It's not that hard to fake. Security Theater.
I need someone much smarter and more willing to engage on this issue to explain this remark or set it straight, pretty please and pretty-thank-you in advance
> Terrorism is - historically and in the present - almost always a symptom of a political movement that has radicalized possibly as an outgrowth of a population under occupation or backed into a corner.
>
> That's why to me it is a symptom.

A symptom would be a fight for freedom. The Hamas is a symptom of religious extremism first and foremost. The PLOs terrorist period is indeed a symptom of Israels bad policies.
You really should add a /s if you feel the need to be sarcastic on sensitive subjects such as these, and maybe better still to not do it at all because it just invites more sarcasm or even worse.
I largely agree with your complaint but I don't think the causation is quite that simple. "Bean counters" didn't show up to a highly competitive field and decide to redefine the competition. It used to be relatively easy to get a faculty position, and there used to be a relatively small number of people/papers to keep up with. As academic science grew, both in the complexity of open questions and the size of the aspiring faculty population, there was going to necessarily be some changes to academic output and its evaluation.

Unfortunately they've hyper-formalized in an utterly homogenous way. It's such a disaster that perhaps a nepotism free for all wouldn't be quite so bad. But I do think there's a deeper discussion here about how academic research can scale in a better way, both to accomplish larger/more expensive projects and to handle increased application pool sizes.
Render the inner browser on canvas. Good luck with blocking anything, it's just a picture.
He has never said anything homophobic or racist, but the left-wing cult does label anyone who doesn't subscribe to all of their ideological tenets as such.
All of the services I mentioned are either directly (Search) or indirectly ad-supported, the latter insofar as Google pays for their development and upkeep somehow, and most of Google's revenue comes from ads. And I think they are all of excellent quality.

Ads are irritating, and Google is not supplying these services out of the goodness of their heart, but I think there's no question that the world is a better place with these ad-supported services in it.
I would rather have ransomware. At least paying would give you a chance to get the data back.
WebRTC generally goes through a probing process to verify two-way connectivity before sending media.

I not familiar with WebTransport.

My understanding of QUIC was that the handshake was designed so the client would pad their initial datagram such that the response was of similar size, avoiding a small request/large response pattern. And that typical connection establishment did a key exchange on the first round trip; primarily for privacy, but also to confirm two way connectivity. I could be wrong though; especially around resumption and/or connection agility, where a client moves addresses and the session moves with the client.
I understand it might be a pretty frustrating issue since it's difficult to evaluate companies when you don't have a background in marketing. I would say that the first step you can take is to get acquainted with how the growth marketing world works, not to become an expert at it but at least to know enough so you can tell who's bullshiting and who isn't, and the way to do it is just getting informed on the different main growth channels.

Check the following link where you can find brief summaries on how the top growth channels work: https://drive.google.com/drive/folders/1UGhUv97CjEpXHSbMH2Rk...
If you need help understanding any of these channels just let me know and I would be happy to teach them to you and give you a hand.

The second best way to go once you actually understood how each channel works and whether your company is a high or low intent company, then you need to understand who you need on your team, if it's an influencer marketing expert or a SEO expert who's also generalist so he can execute other tasks aswell, which based on your company and yoour product, this last option is the best for you.

Now allow me to introduce myself, my name is Lautaro, I am a growth marketing specialist and a penetration tester, and I would be glad to help you on any of my areas of expertise. Here you can find my profile so we can be in touch: https://www.linkedin.com/in/lautaro-morandi/

Hope this helps and I wish you all the best with your launch!
> It won't get every single Hamas operative but it can get most of them and leave the rest in hiding.

When has this ever been a success in recent military history?

Hamas is dug in like a tick, in a big city, with international Patrons. Israel is not a superpower. Major powers have "gotten most of them" but unequivocally lost much more favorable insurgent situations.
One man's biting social commentary is another man's trolling.
Dealing with fraud detection is a real pain!

Every 3 months, I have to pay the school fee for my 3 kids. The amount is almost the same for all three. The first payment always goes off without a hitch. But, when I go to pay for the second kid, bam, it locks up the account. Our local branch is utterly clueless. Then we will have to jump through multiple hoops to get the account activated. This whole drama happens like clockwork every three months. It doesn't matter that it's just a school payment, and doesn't matter that thousands of parents are making payment around that time.

Friends holding accounts in other banks face the same issues. So, it is not isolated to my bank and changing banks will not help.

So, now, we've decided to take the one-kid-a-day approach. It's a bit more work, 'cause I have to remember to make those payments over three days, but it sure beats the headache of reactivating the account every time.
https://archive.ph/ctZMI
> you’d have much of your individuality grinded out of you

That doesn't seem too bad now that Adam Curtis ruined it for me. [0]

[0] https://m.youtube.com/watch?v=eJ3RzGoQC4s
Nope, that's just you redefining dark-humor/trolling in accordance with a left-wing preoccupation—which is to defend less powerful groups and attack more powerful ones.
The underlying account still works so you could do an ACH transfer out to another account if you like.
I wonder why they couldn’t have a completely clear back that would aid the LEDs when using the laptop in the sun.
I would need 20 hours hard study minimum to understand it at any level. I need the quanta mag version (or Karpathy video) before I comment.

Although excellent the article could start off with the practical implications (maybe it is faster GPT training?) so that at least there is a motivation.
Odd, I've always found their support good. But this last week I couldn't order a card and they said they had to escalate it as we're not sure why it was happening. Anyway, I guess they found out, might have been unintended
It’s true.
That's assuming classical computers though, right? What about future quantum computing developments?
i can't comprehend this, but i enjoyed your main page and seeing the quine shuffle as i zoomed in and out with my scrollwheel
> do not cause disease in healthy people, with the exception of Staphylococcus aureus

I'm no biologist, but surely as with (most?) bacteria that depends on whether your immune system is regularly exposed to it or not, right?

Cursory search tells me:

> Staphylococcus aureus [...] is a usual member of the microbiota of the body, frequently found in the upper respiratory tract and on the skin. [...] Although S. aureus usually acts as a commensal of the human microbiota, it can also become an opportunistic pathogen, being a common cause of skin infections including abscesses --- https://en.wikipedia.org/wiki/Staphylococcus_aureus

> An opportunistic infection is an infection caused by pathogens [...] that take advantage of an opportunity not normally available. These opportunities can stem from a variety of sources, such as a weakened immune system --- https://en.wikipedia.org/wiki/Opportunistic_infection

Wonder how it's an exception.
You could be in your 50s and have used computer tech since your youth in the 80s and still hate the current UI holy war against scrollbars and contrast.
> mind rape

I'll bite. Is hearing or seeing any idea that you have not previously consented to likewise mind rape?

If not, where do you personally draw the line? And, just as importantly, who do you feel should get to decide in the general case?
I faced this issue last week. I use the other user profile for Android app development. My phone was lying on the table before me as I watched it abruptly reboot to a familiar black screen that prompted me to Try to restart or Factory reset the phone (losing all data). Obviously, fearing data loss, I chose to gamble with restart, not knowing what the issue was.

Then the phone began bootlooping with the Google logo and a progress bar stuck, going back to black and repeating. The power button + vol down move to get into fastboot was really really hard to get into. It took several attempts and about 15mins of time to finally get to the Factory reset option again. I lost all my data.

As an occasional android app dev who mainly writes apps for personal use, the thought of reporting the bug to Google didn't even cross my mind because (a) it seemed like a random filesystem corruption (b) I'm pretty much used to Google ignoring even high quality bugs reports from Android devs with helpful logs, so an end-user bug report with no logs would be beyond hope.

This may be a case of grass is greener, but Samsung in recent years has been responsive to bug fixes and updates while with Pixel's you basically get what comes through Android updates. Either way, as an Android user, bugs are a way of life.

I have another 3 year old device on Android 11 no longer eligible for updates with a similar 2 user profile setup, and that also randomly reboots to the Try to restart/Factory reset prompt usually after I hit the power button and the lock screen goes wonky. Just that restarting fortunately works in that case without any data loss.