skysight-inc/HackerNews huggingface dataset:
>IP, TCP, and QUIC are all IETF standards & in use here.

The RFC is about the development of those standards. It is not talking about the usage of them.

>What examples have we seen of users running their own OS contributing to a web host's security issues?

For example there are scripts that take lists of email password combos and send network requests to attempt logging into these accounts. Then using these accounts the attackers do malicious actions. Platforms that make it harder or more expensive to automate things will have less people using them abuse services.

>Your original claim that extensions needed to be blocked was an explicit anti-goal of web.

If sites only want to allow input injection that comes from preapproved password manager extentions they should be able to get proof of if that's the case. The alternative to the browser blocking the extention is that the site could ask the user to disable the extention or just provide an error that the input came from an untrusted source. There are some different options in how this could be handled.

>Users obviously have a right to extensions, which allows for accessibility affordances

Yes, but my concern is mainly with the proof part on the server side. So the server can be sure that actions taken were not being done by an untrusted extention. Accessiblity also needs to be carefully considered as bad actors may use accessibility features to bypass security.

>Would you also propose turning off view source and the debugged?

No, I have not seen a big demand for keeping code a secret. For the relevant problems trying to hide the come is security by obscurity.

>What other nastygram blocks of shit do you propose smacking users in the face with?

I don't indented to smack any users. 99% of users will not even notice anything has changed, but attackers will realize that their job just got a lot harder.

>It feels like you are trying really hard to be obtuse negative & nasty to users

I feel if you had to deal with protecting a website from bad actors you would appreciate my viewpoint.
Wait, Wednesday and Thursday are “fourth day” and “fifth day” - not “W(O)din’s day” and “Thor’s day?”
No different than a hot-hot replication so just follow that pattern

I feel like this is better accomplished with a device snapshot-image that is regularly loaded onto a new device (daily? Hourly?)

Updating a device makes automation non trivial as you have to do something physical most likely and can’t just do it via API

You could even just skip acquiring the device until you need it given the idea that it may be years before you have this volcano situation. However that doesn’t meet your spec precicely

I would better define the idempotency interval you’re ok with losing data between and then using the method that updates the simplest at that frequency
It's open source. If you have problems, you're free to contribute or suggest changes.
Yeesh. Do you have any trouble flying these days? Your travel destinations are like a “who’s who” of red flag destinations.
Similar to the change in stress for "perfect" and "to perfect".
>Coupled with the way automated decisions are used to perform and then launder fraud on a massive scale, maybe we should target laws at the automation itself [...]

how about we stop at the actual source by not having the government launder the task of law enforcement to third parties? The article makes it pretty clear that banks aren't exiting customers for fun. They're doing it because they have to, on pain of facing regulatory action.
I travel overseas a lot to Europe and Asia anywhere from a few weeks to almost a year. I VPN, but not always back to the US. I use wise.com. I kept my US address.

I’ve had zero problems. I think we’re all getting excited about anecdotes.
How has their not been a successful synthetic language? It seems like something that would occur on the internet.
Because the problems are vastly overstated. I've been playing fine since launch without any issues.
Nobody said anything about honor. I was simply stating the fact that cherry-picking surveillance tech as suddenly “not to be sold to governments” is as equally absurd as suggesting that weapons manufacturers should not sell any weapons to any government.

Of course they will.
Since we currently aren't covering the existing demand for electricity with reneweables, the "marginal kwh" of electrifying some car comes from fossil fuels, not solar.

Those are two separate things - electrifying some transportation need gets us X benefit, and converting some electric generation from fossil fuels to solar gets Y benefit, but the former doesn't automagically create the latter.
? Chrome shipped with a fast JS JIT, simplified UI, per-process isolation. Acting like you had to pay someone to perceive a superior user benefit to Firefox, which at the time would crash and you'd like all your tabs, is ridiculously ahistorical.
You have a lot of opinions about a game you've never played.
China isn't even remotely "green". Most of the official statistics coming out of there are highly manipulated. In particular they haven't built even a fraction of the storage capacity that would be needed to keep their factories running when the sun isn't shining, nor are they likely to do so in the next few decades.
If an economy is advanced enough to allow it, it would stay 2-day weekend with 4 working days. I think it would be more balanced than the 4-day workweek which slowly gets traction today.
The acronyms are not the same and the article properly writes that.

CS2 -> Counter Strike 2
C:S2 -> Cities: Skylines 2
i'm sorry was he benchmarking this at 5120x1440? like seriously do people really game at that resolution?
Read that as public keys and assumed you were being serious. Was about to say that's exactly what github does - `https://github.com/{username}.keys`
How do you say "we need to house new immigrants"?

How do you pronounce "department of housing and urban development"?
There's always some de facto lingua franca already around.
You can generate yourself a free Libero Silver license, which needs regenerating every year, but yes flexlm is annoying.
You'll get used to it. We all will.
Good grief, I have a mid tier AMD card and I'm having a blast with almost 40 hours in the game already. Can we quit with the "defective" propaganda?

The game runs fine and it's really fun. This "controversy" really drives home for me how detached from reality online discourse often is
Let me introduce you to the world of PI planning where two days of every quarter are spent with approximately 100 people (developers, program managers, etc) for each line of business to plan out the next quarter of work - even if 90% of it is continuing the work from the last quarter...
I think that was the point. There are a lot of useful idiots out there.
And all of that basically failed or at least never expanded. It is not a scalable economic model that can work in large societies.
The regulator didn't go through Nigel's case at all, as 'it is understood that the data does not cover his case, given that the bank never followed through with the closure' [1]. What FCA found that banks never debanked people based primarily on political beliefs[1]. However, Banks can use political beliefs secondarily to debank, and that's what Natwest did. Nagel sought documents from Natwest using Subject Access Request, there it is "found that an internal committee had deemed his views did not align with the bank's own. This formed part of the basis for cutting him, the document showed, alongside commercial considerations." [2]

[1] https://www.theguardian.com/business/2023/sep/19/nigel-farag...

[2] https://www.reuters.com/business/finance/natwest-meets-quart...
No, the Raspberry Pi models A and Zero can also do USB OTG because they do not have a USB hub chip in the way like the models B.
No, the English names don't derive from the Greek names.
Is this about USA, or does it happen, like, in EU?
That net positive birth rate will mostly come from the part of the population that is hardly capable of modern competitive productive work. They will be increasingly appeased with hand-outs, in the form of basic income, welfare and especially of make-work, which will put further pressure on the US dollar.
I don't mean for my salty comment to justify a not-ideal method. But for this topic, the proper use of the pan will generate a good seasoning as it is used.
Ask HN: How do I help my kid get started with Minecraft?
I have a nine year-old daughter, and I'm trying to figure out how to get her started with Minecraft. I mean she's interested, but she needs help installing the software, creating an account, connecting to a server, etc. Personally, I'm puzzled by the sprawling Minecraft ecosystem. There appear to be many different editions. Are they all interoperable? Are some notably better? Do they all have a cost? Should I expect a one-time cost like the old shrink-wrapped, boxed PC games that I bought as a kid, or is it a subscription like everything else these days?

Last year her school work involved doing things on a computer for the first time, so I'm guiding her through the earliest stages of computer literacy. I declined the Chromebook offered by her school and instead set her up with my old laptop running Fedora. At some point I introduced her to simple classics like SuperTux, tetris, and a lunar lander game that are available from Flathub. Just searching Flathub for Minecraft, I see half a dozen different flatpaks(?). Then it looks like I can download a .tar.gz from minecraft.net and maybe build something from source(?). Help me out.
Is there a legitimate, non-criminal reason to launder money?
they are vague they catch every tom, dick and garry but so strict that every cartel still has acees to the banking system
I traveled to SEA extensively in 2022 and 2023. Never had any problems with using ATM to withdraw money. The only problem was with using Amex card.
AI fake nudes are booming. It's ruining real teens' lives
It’s an omission and serious bug for this thread to not already contain the following comments:

“Why would I consider this, given that make is perfect”

And

“Doesn’t eMacs org mode already do this?”

—

Seriously, looks nice.

I’m a big fan of Jeeves and Wooster novels and I am a little concerned that Reginald Jeeves would not like to be portrayed as a kind of murderous robot. He’s far too civil to execute people (though he did use a kosh to knock out a police officer on at least one occasion).
"Money laundering is any deliberate attempt to make tracing those transactions [ones that prove you committed a crime] more difficult."

But that's not true. If it's not a deliberate attempt to hide fraud/theft but otherwise looks like actual money laundering, then it is still a crime, at least according to current KYC/AML laws. That's the real problem with this all. That's what makes the debanking problem (which you agree is bad) so easily ignored by law makers and law enforcement.
"I emphasize with the challenge: I have a similar problem"

empathize, not emphasize
> Direct bus lines don't scale. As the city grows large enough, you have to replace them with trunk lines.

If you have a route that has hundreds of thousands of people going in the same direction, true enough. However, America has very few of those routes, even in big cities well-served by transit.

NYC obviously has extremely high density and is very well-served by successful transit. Outside of NY, there aren't many success stories.

The busiest light rail line in San Francisco serves ~60,000 riders/day, and most of the others serve far less. Caltrain serves ~20,000/day. BART serves about 100,000/day on its routes, 400,000 in total. And that's the second most-dense city in the US.

Because of the land use, there is basically nowhere in the United States that can support a viable rail system. There are systems that kind-of-sort-of work -- like SF BART, Portland TriMet, DC WMATA, Boston MBTA, Chicago CTA -- but none of them are very good, and they never will be, nor can they be (excepting maybe CTA), without completely changing the land use in this country.

The problem is that America keeps cargo culting rail systems in areas where there is just zero chance for them to ever be effective, like Sacramento, Salt Lake City, Honolulu, Los Angeles, etc.
And for very good reasons. A huge fraction of players buy the game based on how it looks.
> Glad we have so much energy focusing on legit bankers instead of the crypto that is actually funding multiple US adversaries at this very moment

Funny you criticize crypto, when it actually solves all the bullshit you're mentioning.

It's so nice knowing for a fact that when I send or receive crypto, it will 100% arrive within moments, unlike the absolute shitfest that is international transfers (like SWIFT).
> Crypto mining has a not insignificant energy footprint

So do casinos and Las Vegas. Its basically the same thing
Well, it certainly doesn't resonate with me, although I think I understand it well enough for these purposes. What I understand is that some Jews would be fine with it and some would not, and there would be endless argument among rabbis. Jewish religious tradition is amenable to logic and informed debate, even if the logic doesn't make personal sense to me.
It may be extremely narcissistic, but there is no way for you to prove nor disprove it. That is, in very broad strokes, also the point Kant makes.
It’s like Dobble!
Yeah, it's cool, they can ride the green line and suffer stuffed up into people's armpits when it breaks down every few days during the summer. It doesn't bust my balls, which is why I say it's sad, they're only hurting themselves.
Yeah, it's referred to as super-ultrawide. There are a reasonable number of monitors out there with this resolution.

It's more for race/flight sim type stuff IMO but if you got it, why not play everything at that res provided it performs well.
The negative is you're disrupting the ecosystem. They reduce the mosquito lifespan's which might impact their population. Things that eat mosquitoes might have to adapt.

At this point I'm prepared to accept that though. The suffering these things cause is immeasurable. I hate mosquitoes so much I wish I could nuke them.
… how long do you think a century is lol
Yea, 3 hour lines, and then they obnoxiously don’t let you in anyway, for no obvious reason. Not shedding any tears here.
These two bullet points from the article seem to indicate that RealPage covers a large swath of the market, and that compliance is mandatory.

>The software company actively "polices" landlords to ensure that they comply with the rent cost it generates, the lawsuit alleges. Failure to impose the RealPage rents could lead to landlords being expelled from the organization, according to the suit.

> RealPage's software has set the rent at more than 30% of apartments in multifamily buildings in D.C. and 60% of units in large multifamily buildings, per the lawsuit. The percentages are even higher for the broader D.C. metro area.
Beagle can use USB OTG for cheap networking over RNDIS/CDC-ECM, or mount the device as a simulated thumb drive.
China is one of the first countries to regulate AI development: https://carnegieendowment.org/2023/07/10/china-s-ai-regulati...
Qt Creator is not terrible. I've yet to come across a GDB front-end I would qualify as "good".

It is a full IDE for writing Qt apps, but it also works for non-Qt applications in C or C++ (cmake recommended), and it has some of the best GDB integration. It is also free (GPLv3).
> there are outside of the Mac world no viable ARM desktop or laptop CPUs because Qualcomm completely fucked up that market for likely years to come

Huh citation needed? I would like to know more context on that
Perhaps they mean this. Just guessing...

https://en.wikipedia.org/wiki/National_Endowment_for_Democra...
The foreign tax credit is provided to prevent the double tax burden when your foreign source income is taxed by both the United States and the foreign country.

You just submit that you already paid taxes on that income to a foreign government and then no additional US taxes (to a limit, I beleive).
Nice write-up. Re-reading about the evolution and complexity of x86 makes me wonder about attempts to modernize x86. Does anyone know how Intel’s x86-S proposal to do a cleaned-up 64-bit architecture has been received? I looked for updates in the media but haven’t been able to find anything.
On the other hand, Einstein's goal in the second of his annus mirabilis papers (the one explaining Brownian motion) "was precisely to prove the reality of atoms", in the face of the then famous skepticism of thinkers like Mach.

https://plato.stanford.edu/entries/einstein-philscience/
I think there's a recent and ongoing bipartisan bill in the US trying to fix some of the worst aspect of civil asset forfeiture.

With some luck ten years from now there may be a bill in the US trying to fix some of the worst aspect of KYC/AML (like regular people getting their bank accounts closed for no reason and without any explanation).
Latin. It's the only other language with similar levels of field-tested universal compatibility.
> we as a society decided we were ok with criminalizing the types of transactions that can be used to hide crime

I'm not event sure that we, as a society, actually did decide that. When, how? Was there a vote, a referendum? I cannot speak for everyone, but to me it feels like we as a society sure as fuck didn't decide anything. Yes, somebody decided that, but we as a society never were a part of the conversation, really.
How is prompt engineering any different from carefully though out dyadic communication?

Surely a well reasoned train of thought is likely to garner better results than a bunch of non sequiturs.

Maybe we won't need to engineer—or trick—models into providing what we need, but I can't imagine the need for sophisticated interaction will lessen with time.
Considering how well python has standardised and unified it's build tool chain this seems like a great idea....oh wait.

/sarcasm

I would prefer something far more formal than Python.
For UXWizz I just use the Referrer header passed by the browser, it's not very reliable though. Sometimes it's very hard in analytics/business to tell "how did this user find me", the answer is very rarely simple (e.g. even if it's from a Google search, you don't know exactly what prompted the user to search for your business or what exactly they searched for).
Such a dumb choice. Go disgruntle the people you're going to send to be your primary points of contact for getting people into uniform in the first place when you're already behind the eight-ball meeting your quotas in the first place.

This is what can happen when an organization is led by people who have spent 40 years working in one organization, and who got to the top by being stack ranked over and over and over again. "I love it here, there's no problem! How can there be a problem when the system worked for me?"

I will say, having briefed up to the four-star level while in uniform, all the general officers and flag officers I personally interacted with were impressive as hell and wicked smart. But the "company men and women" on track for stars can also have some huge blind spots as mentioned above.

Then something like this comes down the pipe and you just go "I'm glad I retired at 20 to focus on the private sector." People only have a finite amount of goodwill to burn . . . it's foolish to burn it on petty crap, especially in an organization like the military where "embracing the suck" is necessary in places like combat.
I definitely recommend canceling the skyrocketing services with terrible content in favor of affordable services with not terrible content. e.g. Criterion ($99/year) is my favorite subscription. At any given time it's only a few thousand films, but films rotate from month to month, it's a nice variety of films, and they are well curated and grouped.
If a studio downsizes, they might be able to survive making lower budget games. And while it's true that if every studio does this, the industry would get better, there's incentive for _one_ studio to pump up their funding and make a super-high-fidelity game, and grab all marketshare.

This makes it a 'race to the bottom' style (or a race to the top?) competition, where higher funding gets you more marketshare, but only against lower funded studios. It's akin to advertising budgets. Mostly a zero sum game in the end.
> One way to show that these big banks have "strong controls" is to change parameters for these algorithms

imagine if some bank knowingly facilitated money laubdering, and needed to show they gave strong controls. What eould you do?

Thats right, you would close 10k minor accounts of random schmucks for 'suspicious activity', report 'job done' to the regulator, and continue your corrupt practices
We need to mouse new immigrants

Department of mousing and urban development
Agreed. It never hurts to do a bit of research, we should seek to understand all that we hold to be true from the pages of history and perhaps spend a moment (or an evening) doing bit of reading on various topics.
Trust but verify I suppose.
Again, how exactly do you define money laundering? Currently the definition by law seems to be, "anything that could be used to hide criminal activity." In that case, yes, there are plenty of legitimate, non-criminal reasons to make transactions that "could be used" to hide criminal activity. Is privacy a crime?
SSSS isn’t related to having financial things. Booking a one way ticket transiting a middle eastern country to the US is often enough.
The problem isn't leaf blowers per se. The problem is noisy, polluting, and sometimes exhaust-modified 2-stroke leaf blowers.

Palo Alto banned them. There were a few who switched to electric with a gas generator on wheels, but otherwise it solved the problem of noise pollution.

In urban and suburban areas, it's essential to remove leaves from surfaces used by people and vehicles. There isn't an absolute need to remove them from anywhere else.
No, they don't; however they cancel your checking, savings, business checking, credit cards. Only exception is mortgages.
That's two 1440p 16:9 monitors next to each other
I went to my first party in 1994. This type of conversation has always been a constant.

I remember people at that time complaining that it was bullshit the DJ wasn't behind a curtain like the good ol days. Even being able to see the DJ made the party too much like a rock concert and "it was ruining the scene"

There was a whole era of conversation like this that was against spinning compact discs and cdjs. A real DJ spins vinyl. CDs sound too cold and sterile and they are "ruining the scene".

When people started spinning mp3s? lol, that was apocalyptic and totally "ruining the scene".

20 years from now there will be something new "ruining the scene" unlike the good old days when people put a lot of effort into their outfit and crafted videos to post on tiktok to try to promote "the scene".
The point isn't necessarily to cut money laundering down to zero, it's to add significant cost and effort so it makes the cartels job harder. Every international border isn't airtight either and causes a bunch of hassle for travelers, but we don't throw up our hands and give up the idea of border control.
Thanks!

Perhaps this particular robot is running a much more civilized version of Skynet/Cyberdyne firmware.

And is sure to be speaking impeccable English.
Which was dismissed recently, although the judge allowed it to be refiled, if some additional details are included.

https://www.google.com/amp/s/www.reviewjournal.com/business/...