skysight-inc/HackerNews huggingface dataset:
I had a problem with cookies on iOS/safari, so we reached for the last hope: url query args.

Works flawlessly now. If you use an external identity provider, you can hypothetically avoid storing any cookies at all in first party terms. All you'd have would be 3rd party AAD tokens or whatever.

The only reason we even need first party client state is because we want to allow each user simultaneous app sessions that have lifetime decoupled from IdP semantics. This is what we store in the URL query (a guid). Sessions are still bound to user principals, so you would get yelled at if you tried to screenjack someone else's.
That's interesting. Was that in a public school? Would you be willing to share your state and if you believe your experience represents a national average or is above/below the national average in regards to "at what age do children learn about square root"?
Tensile strength will be a problem. Compression will be solved eventually, the tetris part also. But if there are to be tensile or twisting loads - there will be trouble.
Oh fragmentation fun. I use RawTherapee. Seems to be less of a shit show. And I'm not giving Adobe my money.
The great thing is that many people think exactly the opposite.

Dune is in many ways antithesis of Foundation. And in makes sense being written after it.
And those elected officials are beholden to the highest bidder. In the
current system, the people who make CA decisions acquired that power voluntarily and seem to have acted benevolently in the past, that's way more than you can say about government officials.

The current voluntary system is also very open, and anyone can get involved and participate to a much larger extent than people realistically can in an electoral democracy. To me, the voluntary system seems to be better and safer for everyone who doesn't have a very large amount of money to throw at elections.
The big difference between crypto and regular finance isn't the crimes; it's that finance has other uses than crime, and crypto doesn't.
Living in peace
Moon Palace was one of my favourite books in English class too! I read it again as an adult a couple years ago and didnt enjoy ih too much unfortunately.
For future walls, try a Cornish hedge. Despite the name, these are actually dry stone walls with an earth core. Mature ones are normally covered in wildflowers. Here's how they're made. http://www.cornishhedges.co.uk/PDF/building.pdf
Weird article. Like others have said, it's mostly about XSS.

It's strange that the article doesn't discuss at all where the JWT is stored in that case. It's one thing if it's stored in local storage (I would avoid that) and a completely different thing if it's stored in-memory so that potentially malicious scripts don't have access to that location.
In fact, there's even more incentives for researchers to make reproducing their work as hard as possible. For example, what if someone tried to reproduce it and found contradictory results? In both cases (reproducer made mistake, original made mistake) it's additional hassle that the original authors can basically only suffer and never gain.
I certainly wouldn't call those successes.
The wall will then dam up water or crack instead of shifting slightly, I read in another comment.
A lot of programs store files in c:\temp.
The only usable service or software from any company that is in the critical path for their own use.

Examples:
- AWS is in the critical path for Amazon

- .Net is in the critical path for MS

If you chose a software or service that is not in the critical path, the jokes are on you.
Disagree, I am talking about whole set of cryptocurrencies. see here: https://coinmarketcap.com/all/views/all/.
> Where's the tax dollars to pay for this?

You're kidding right? The US government is one of the biggest holder of Bitcoin. They seized insane amount of Bitcoins. And the US is a country where capital gains are taxed. The US government is making a shitload of money when cryptocurrencies go up.

You cannot have it both ways: if you tax your citizens on their capital gains made on crypto, then you prosecute the scammers like SBF when they prey on US citizens.
Sounds like the author hasnt been to Berlin in a while://
The Chrome team must be an exception then, my bug reports there usually get prompt feedback, and when those were actual problems they also get fixed in time (sometimes it takes months, but that's typical for large projects). Apple on the other hand is just a black hole for bug reports, you never hear anything back.
Even more cheeky that the name of the audio file is "plaid_reaction*" :)
As if they would say no.
Given the memory thresholds of the rare few with hyperthymesia, it seems more likely that you hold false memories than that you remember clearly being one year old. Certainly you would be the first person known to have such memories if confirmed.
> Microsoft uses Google's framework for their own applications: Electron.

Electron is built on top of Google's Chromium but developed by a completely different set of people at GitHub initially for their text editor Atom. Later GitHub got acquired by Microsoft.
and when it comes to reading claims and other data from jwts, no one in its right mind would do that by making the session cookie available directly to js client code, so this is a total straw man argument. this is achieved either by making those available separately with means to validate signature but not usable as session token itself or/and by having a session endpoint on the server that reads and validates the jwt and responds with the data from it with the advantage of being able to also add additional session information that is not encoded in the jwt and only available on the server.
I was recently interested in road traffic speed prediction.

The problem with academic research into predicting speeds is not as much the lack of reproducibility, but the lack of measures that make sense.

Hundreds of papers compare a short-term prediction (say 30 minutes ahead) using mean average error, or similar measures. This completely ignores the fact that vehicle speeds are mostly constant and only vary significantly during rush hours or other disruptions, at which time the process of breakdown is rather chaotic.

From what I gather this will not change easily, because it is considerable academic fun to improve on a number for existing benchmarks, instead of redefining the game.

I'd love to help academics in this field who need some guidance on practical applications!
I had an old Volvo that would “vapor lock” on short trips. It’s amazing how reliable cars are now compared to 20 years ago.
Alternatieve, fyi;

curl -sS https://am.i.mullvad.net/json | jq
The best part about any game is when you can discard the rules and play the game the way you want.
hello,

i'm a big fan of so called "near-field monitors", which have a decent sound if you tend to sit in front of them.

most of them are active and there are a broad spectrum of options available ...

idk. from cheap(er) behringer, alesis, mackie to name a few or the decade-old intermediately priced "standards" from yamaha (which i'm using) to other more pricier options ...

if you want to spend some money / invest in quality combine them with a decent USB-audio solution + symmetric cables ... :))

just my 0.02€
Just do not store JWTs in LocalStorage or any JavaScript accessible location.
Use secured httpOnly cookies.
Validate the JWT on server-side _stateless_. No need for a database. This idea is so good and it works! Just follow best security practice. If you don't, it is not the fault of the JWT. Bad blog article..

Yes, things like Keycloak and such follow _bad practice_. Still not the fault of JWT.
> Clean up your damn editor tabs

Oh man, visual tabs is a productivity killer. Every time you want to change buffer you have to grab a mouse, find it and click on a little tab? Atrocious.

Bind two keys: one for "open previous buffer" and another for "open list of all buffers". And disable tabs completely, they don't bring any useful information! Only add a chore to clean them up...
Which Tech Giants Attract the Most Talent from Competitors?
All of the EU's own websites have cookie banners. Everyone has cookie banners. The problem here is the law, not the companies.
The original purpose of cryptocurrency was to replace fiat by getting everyone to use it for their transactions. People would be pricing things in bitcoin or monero instead of USD.
> As a tangent, it would be interesting to see if non-pathetic modern computer systems could actually achieve to implement that mechanism successfully.

You might find this interesting: https://en.m.wikipedia.org/wiki/Project_Cybersyn
People are going to be using these books for firewood in this situation.

You’re going to be fighting for survival and learning how to hunt and farm and keep warm. You’re not going to be sitting around learning how to build transformers or metal workshops.
Let's consider that the colleague IS IN FACT a mole, a spy, an agent of a hostile entity be it a state or why not, a competitor. Iran or Russia couldn't care less about your enterprise business operations and customer relations software but SAP would be glad to silently eliminate a competitor.

So said agent takes the opportunity to plant the malware on ANOTHER employee's computer, that's self-understood. He's not so stupid to risk incriminating himself. If all goes well, nobody will even notice where the infection began. If somehow it gets traced to it's root ... it's Johnny, the light hearted and jovial slightly overweight colleague that everyone likes and not Timmy the bleak and dull looking fellow that nobody quite notices outside mandatory interactions like the daily standup. Who would have thought that all that friendliness and charisma of Johnny was just a facade to his true evil intentions?
Users shouldn't though, I'm talking about Word documents, PowerPoint files, etc.
This is why many countries used to have strict controls of importing and exporting capital. People did plenty of business regardless.

Those were thrown out in the neoliberal craze and the race to the bottom got into full speed.

Jurisdiction without e.g. any labor protection is very friendly to capital. Capital indeed used to benefit tremendously from being able to outright own the laborer.
I don't believe this is a money issue, almost all maintainers and big kernel contributors already work for big tech. Thing is, you can't just simply hire more maintainers as there are only so many senior kernel contributors around and most of those that aren't already maintainers probably don't want the role as it is now.
I'll be honest: I find GPUs confusing. I use Hugging Face occasionally. I have no idea what GPU will work with what. How does Fermi, Kepler, Maxwell, Pascal, Turing, Ampere, and Hopper compare? How does the consumer version of each compare to the data center version? What about AMD and Intel?

* Arc A770 seems to provide 16GB for <$300, which seems awesome. Will it work for [X]?

* Older NVidia card go up to 48GB for about the cost of a modern 24GB card, and some can be paired. Will it work for [X] (here, LLMs and large resolution image generation require lots of RAM)?

I wish there was some kind of chart of compatibility and support.
Speaking as a former Windows Phone Developer: Yeah, this is roughly what developing for Windows Phone and the UWP felt like. Half Baked Tech Demos with glaring, basic Issues that never get fixed. It feels like Microsoft internally still thinks they are such a monopoly that people WILL adopt whatever they get fed by them and when that inevitably doesn't they never fix all the Issues required to be competitive.

A modern UI Framework of any kind is a massive undertaking, especially when it is not browser based. A modern UI Framework that is not Browser based and gets any kind of traction is almost impossible at this point. The Developer Experience would have to be at least as good as Browser based development and you'd have to show significant progress in cross Plattform development for anyone to care.
Yes I hate the proliferation too - these pressure/multicookers must have a temperature sensor, and so all the program needs to do is switch to a 'warm mode' when the temperature exceeds 102-3C, ie that's when all the water has evaporated. Tempting to buy one and hack around with it.
To the point that Linux, probably the most important C project in the world, was written in the GCC dialect for many many years. I think it's no longer the case.
We always start with a different word too. Randomizes the difficulty a bit more.
Mostly practical. The math coupled with visa requirements just does not add up.
You're a techie - everyone else views the complexity and unreliability of computers as "computers are a necessary evil" rather than "oh this is an interesting challenge!".

To the layman, a single unfamiliar word or concept equals "my money will disappear".
Fedora 40 should promote KDE spin to fully fledged edition, in line with current "Workstation". Adding a DE selection during installation would be a nice improvement too, like in the old days of Fedora Core.
I've considered that, I'm well aware of how easy is to fabricate memories and think they are real, but I've checked with my parents (without giving them the information, just asking questions), the memories are real. To clarify, I'm not claiming to remember everything about being one year old, just to have a few very clear memories that match with what my parents know happened, the layout of the house etc.
This. I believe OneDrive on macOS uses QT.
This is great, the dificulty goes up rapidly. I only got to level 3 before quickly dying (playing on mobile Firefox)
I did this for a landscaping project because I was not confident enough that it will stay ..lasted ten plus years and then it started cracking. I am now left with unsightly gray blotches and worried the rest might tumble..

It was/is gorgeous..I did three sections ..mostly for three very large kidney shaped raised beds..moss has grown over the stone and I also tried sticking thyme and mint in some
of the suitable gaps..

I guess it’s diff if it’s enclosed and filled with soil. I wish i had the confidence and skill to attempt an actual wall.

I used to drive past a house here where the guy took like three years to complete a 80 ft long dry wall and he planted all kinds of beautiful flowering plants ..it was stunning and when it was done, the flowers and fruit trees popped up with their colours too ..it took forever but he didn’t care..you could tell that it was a labour of love and he was really enjoying it.
> The point is that people start from distro images not because it's easy. Rather, it's because there's no other way with Docker.

It depends if the process you are going to run is compiled or interpreted. In the latter case you can use multi stage builds, with the former stages building what you need and the final one putting it all together. But it simply makes no sense for cases like Python where it would be terribly inefficient to repeat the same work everybody else is doing hence the FROM python:3.11-slim-bookworm usage.
Same for me, I can play just using the keyboard not the GUI.
Jensen Huang – CEO of Nvidia – Podcast [video]
Angular is prime example.

From my consulting experience, Angular (Google tech), is most used today along with .NET backends (Microsoft tech).

I don't think I ever saw a client using Angular + Go, for example.
Even github is full of bugs these days. I hate Microsoft products
Shh: Simple Shell Scripting from Haskell
Your are late for your Infosec Class...

"AIR-FI: Generating Covert Wi-Fi Signals from Air-Gapped Computers" - https://arxiv.org/abs/2012.06884

"In this paper, we show that attackers can exfiltrate data from air-gapped computers via Wi-Fi signals. Malware in a compromised air-gapped computer can generate signals in the Wi-Fi frequency bands. The signals are generated through the memory buses - no special hardware is required."
The specific purpose usually being interopability, yes it does apply to almost any piece of software on the planet.

More specifically, it's always allowed for DRM code (because by definition their whole goal is to block interoperability), any kind of proprietary file reading and any kind of porting.

Here in the case of these games, the interoperability argument is very easy to make since they can only run on legacy hardware not even produced anymore.
You’ve struck on an interesting problem in decentralized systems, Sybil attacks [0]. How do you prevent someone from registering multiple accounts and pretending to be multiple people? In Bitcoin, and other cryptos, the problem is ignored because it doesn’t matter at the address level since you have the same amount of bitcoin no matter how many addresses it’s split between. However, in other systems within the crypto-ecosystem it may be desirable to establish a 1:1 human:account ratio. This is exactly what Sam Altman was/is trying to solve with his WorldCoin thing which also uses biometrics (I’d personally not sign up for WorldCoin and advise against it for others). Largely it remains an unsolved problem AFAIK.

Jumping back to banking the homeless, I mentioned in the previous comment that if criminals tried to use these small accounts to launder money it should be relatively easily detectable by the banks. I would add that I don’t think it’s a problem if a given homeless person opens N of these accounts for small values of N since that would still be a small total cashflow volume. The main things I’m interested in with such a scheme would be allowing homeless people to have somewhere to store what little money they have without risk of having it robbed from them [1], allowing them to have a normal way to get paid from any job they might work, and allowing them to purchase things online (perhaps delivered to an Amazon locker or other pickup location). I’m not saying this idea is perfect, it certainly isn’t, but my point in the previous comment was that there are people who are underserved by the existing banking infrastructure.

0: https://en.wikipedia.org/wiki/Sybil_attack

1: They could authenticate with an account number or card and a PIN at an ATM. Here opening multiple accounts would be an advantage for the security conscious because they could open a duress account and put a fraction of their money in it to withdraw if they were ever forced to by a robber.
I am a fan of Go due to the focus on simplicity in the language... but why Go for game dev? The purpose of the language was to tackle backend services previously written in C++ focusing on junior developers, not game dev.

It's not really a popular tool for the job: Python, which is a simpler language, has a much larger community of gamedev noobs. Or maybe better yet: start with Godot and GDScript
> Charisma is especially hostile and foreign to economic
considerations.

Huh. As per Jacobs' Systems of Survival, some modern charismatic leaders have apparently figured out how to combine rizz and grift?

> In Weber's view, therefore, genuine charismatic authority vanishes soon after it appears, or it is transformed into routinized forms of charismatic domination...

That's the answer: it's only a true scotsman until it sells out.
I don't think Google will shutdown Blogger. There are some HUGE Blogger blogs out there. There are also many local community-focused blogs that get loads of comments. Blogger is very much alive and earning money for Google via AdSense.

They did shutdown the subscribe-to-posts via email feature, which was like a free unlimited subscriber newsletter.

I don't even want to get into why Blogger is so great, because if I say what I know, people will start abusing it.
My best guess is that they are thinking of CSRF. With cookies, requests automatically carry the token, whereas with local storage you need to explicitly add the token. However, CORS does a lot to improve this situation. I note that CORS allows posting form data without pre-flight, but it is not immediately clear to me if posting a form cross domain will send cookies.
There's an interesting bit in car guys vs bean counters where the author recalls the new regulations mandating a smaller average size car. US manufacturers had to make much smaller cars to lower their average. But US customers just weren't interested. They wanted big cars, not just new cars. Japanese manufacturers (who were already lower then the regulated average) stepped in and built new big cars.

Not totally similar to your point as safety regs would be more equal, but it was an interesting revelation to me (especially as here in the EU small cars are much more desirable) that really market demands are as much of a driver of these things as manufacturer production.

Regulation has to be in the right place too, ideally giving the real trade off to the consumer. (the book suggests that if America taxed fuel more like the rest of the world so you didn't have such cheap gas, car efficiency would become a much bigger selling point, leading to more demand for smaller less ridiculous cars). But I suspect that would change less the demand for low gas cars, and more the demand for low gas tax politicians.
Is Bluesky Decentralized? [video]
The first thing I wanted to do was to move around keyframes. It seems like that's not yet a feature.
I have an orthopedist friend. She shared her credentials with one of her residents so he could write down the patient charts. Apparently residents are subhuman doctors in the hospital she worked at because they didn't get accounts to log into the system. The staff was used to sharing their own credentials with them so they could get work done. It was a routine everyday thing.

Then one day a patient died after surgery. Hospital got sued. They pulled up the charts as evidence. Whose name was in there? Hers. She had to legally prove beyond all doubt that she was physically not there in that hospital at the time the event happened and had to explain to a judge that sharing of credentials was routinely done in that hospital.
We are still in the early days of figuring out what works.

One issue: media execs don't know anything except "that was profitable, so let's do it again". Have you noticed that Netflix now has fifty cooking shows, split between one-shot game shows and tournaments/"reality" dramas? "Iron Chef" worked and "Top Chef" worked, so they get cloned and slightly modified. All of these sink.

For a long-form SF/F show, what hasn't been done?

- two 1 hour chapters weekly

- dropping 2-4 1 hour chapters at a time, rather than either single episodes or the whole season

- irregularly sized episodes matching the plot

- six episodes of rising tension, a flashback episode to explain backstory, and then a finale that begs for a second season (just kidding, Netflix seems to think that's optimal already)
Great case in point. In a well run org, that would've been elevated to a "security incident" just the same as a hack, with their jobs potentially on the line, rather than a week of pleading to them to have mercy.
No: 0 -> 0
Maybe you would like UFCS: https://en.wikipedia.org/wiki/Uniform_Function_Call_Syntax

e.g. Nim has it, and it lets you do this:

proc add(self: MyList, e: int) =
# [insert append code here]

mylist.add(1) # equivalent to
add(mylist, 1)

Though I'm not sure how well it would work with C, considering it lacks
function overloading.
I don't disagree, but you're arguing that the government gives a greater share of its tax receipts to the SEC. This is a question for Congress, not the agency. The usual assertion of "let's spend more money on x" results in the obvious question "instead of what?".

OP was suggesting that the SEC ramp up the rate of actions, which will need funding (at least, initially). I don't see Congress doing that?
I am excited that someone with this level of competence and attention to detail has forked the project.

I tried to use Darktable a half dozen years ago and found its UI to work in bad and difficult and unpredictable ways. I reported it as a bug on IRC and got flamed by the developers; I deleted the app and never looked back (I now reluctantly pirate Lightroom because I refuse to pay for subscriptionware).

Hopefully this fork will drag it into useful territory.