skysight-inc/HackerNews huggingface dataset:
> Consensus among cryptographers is that PGP hasn’t reflected anything close to acceptable cryptographic design

Because these cryptographers haven't actually delivered anything else that's actually usable by people who just want to encrypt the bodies of their emails?
It might be due to the .co endpoint and your corporate policy? AFAICT the SSL cert, etc. is g2g - let me know if there's anything I missed though!
If boards cannot hold CEOs accountable then who can?
The packaging might be better but it doesn’t solve the problem that the food arrives cold. Especially since the drivers pick up multiple deliveries and it can be 30-40 minutes before you get your food.
Coincidentally there’s another song in an x-files episode that has been sought out over the years. In that case though, it’s a rendition by the original performers that seems to have never been made public: https://www.reddit.com/r/XFiles/comments/1zthzq/can_we_pleas...
Thank you for the great feedback, I really appreciate it. I fixed some errors you found. Let me know if something still doesn't work. It's still a bit in the process of fine-tuning.

For instance, does anyone know why the thumbnail preview does not work on Twitter? It works with the sub-pages.
Great feedback - I will look into what it would take to make a browser extension client.
Examples of Tesla's engineering prowess [video]
Food waste is a result of trying to prevent people from going hungry. Systems which produce less food waste result in more people going hungry.
Do you mean from a video playback perspective, or something different?
Nice, It's very cool.
Are you located in Banglore?
My favorite with microsoft was just a year or two ago (not sure about now) - there was something like a 63 character limit for the login password.

Obviously they didn't tell me this, and of course they allowed me to set my password to it without complaining.

From why I could tell they just truncated it with no warning. Setting it below 60 characters worked no problem.
This is also the kind of product where making a serious effort to buy one will attract the attention of various agencies. Looks like amazing fun to me.
Yeah, but who wants to go to a buffet to only eat fried foods? (I mean, I like an oily fried dish occasionally, but it's not something I'd go for at an all-you-can-eat place.)

I suspect that if Golden Corral is struggling, and they are mostly serving oily fried foods, the problem isn't changing consumer preferences. The problem is that they aren't serving foods people like.
AI Act: EU policymakers nail down rules on AI models
Pretty vague.
Looks like AI art has the same issue with joystick buttons as with fingers
Super cool effect. Yes, SVGs can be a rabbit hole. This is just scratching the surface of it
Makes me think of once I was in bed listening to a house mix and suddenly I heard a remix of a track I've been wanting to re-listen since my child hood. No text, just melody. I jumped out, got on the piano and rev-engineered the melody.

Now there are search engines for melodies, I think I used this one:

https://www.musipedia.org/js_piano.html

First 5 hits were not the track (knowing how to read score helps here), but the sixth: bleam!

The track was "Ryuichi Sakamoto - Merry Christmas Mr. Lawrence" https://www.youtube.com/watch?v=jElCDsfptVU
Apologies, my only disagreement was that it was Hotwire that requires care when I really think it's the entirety of Rails. Thanks again for the suggestion on intertia.js !
https://archive.ph/hgoST
Is that really dithering when you're not using a limited palette to simulate a larger one?

Reminds me of vintage travel poster art. Example:

https://www.graphicart-news.com/wp-content/uploads/2012/09/2...
> I bet the real rule is some reality about feasibility of pronunciation, even though native english speakers see the rules explained in terms of spellings.

The rule as often given in English classes is to use "an" if a word starts with a "vowel sound", rather than starting with a vowel. So, it's "an herb" (since the 'h' is silent in (American) English), but "a ubiquitous".

Relatedly, you can infer whether someone likely pronounces "URL" by spelling it out (like "you are ell") or as a word (like "earl") based on whether they write "a URL" or "an URL".
Chatbot Arena: New models and Elo system update
> Aren’t most security vulnerabilities in C or C++ code?

I haven't seen any data that supports that idea, but I'm thinking it would depend on how you define "most". Do you mean in absolute terms? Then sure, because most code in use is C or C++ code. In relative terms? I have no idea.

But it's become fashionable to shit all over C these days as if C itself is a security vulnerability. I reject that idea. C certainly makes it easy to write insecure code. It's the flip side of the strengths of the language. However, there's nothing about C that prevents writing secure code in it (with the caveat that no code, regardless of language, can be considered 100% secure). That's done all the time.
That's really clever! Fixes the "silently" part at least, though given that most applications typically require frequent updates and that this doesn't prevent targeted attacks, I'm not sure how useful it is in practice, at least for mainstream applications.

Signed web bundles with binary transparency and independent review would be far superior, if they actually existed. (Which sadly, they don't right now.)
I cold emailed a company in NYC and asked for an unpaid internship before college. I had just seen a documentary called Aardvark'd, and was intrigued. The company obliged.

I had a productive and great time that summer, and then returned to that company four years later... after getting a degree in spanish literature :s.
Eventually, Tesla Sweden will go bankrupt. IF Metall will go to the union for the financial industry at some point. That means no more financial services for Tesla Sweden. Then they can't sell cars(must be in SEK in Sweden), they can't pay suppliers and their workers. If they can't pay their workers, it triggers automatic bankruptcy proceedings where the courts start seizing things to ensure that the workers will be paid. They began the same process with Toys'r'us and the company immediately folded when they realised the consequences.

Don't worry, the courts aren't on strike against Tesla.
I’d bet tipping inflation has a lot to do with that. Delivery can often times come out cheaper with the apps suggested tip than dining in with 20-25% being expected.
Are there any resources to stay abreast of design trends? I know about https://aesthetics.fandom.com/
> If anything it has been relegated to obscurity.

oh man, if /b/ could read this they would be very upset right now
Maybe I’m missing the importance of this happening in this experiment specifically, but isn’t this already a known phenomena seen in the double-slit experiment?
We have very little idea what they do, but the ideas we do have aren't good. From the article:

> “If you go down to the nanoscale the properties of these materials are very different. They’re much more reactive,” he said.

> A 2023 study showed that nanoplastics attracted clumps of a particular protein, called alpha-synuclein, that has been linked to Parkinson’s disease and dementia. This happens in cells in a dish and lab mice.

> Earlier research in zebrafish found that nanoplastics can be passed from Mom to baby via the placenta and can cross the barrier to get into the brains of mice where they damage brain cells and alter the brain’s activity.

> “I don’t know if I’d make a direct link to disease outcome but I will say that pathogenic bacteria really like plastics and so it kind of concentrates those bacteria that can lead to pathologies,” she said.
Maybe I just have different needs. All I ever want is to go in, pick an album or two, and hit play. I also use different hardware but typically it's consistent across hardware with similar number of buttons so I doubt that's much different.
> There's literally a meme scene on Facebook, and they're going to kill it.

Oh no! Anyway
That is an awesome use case!
Your point about "worse jokes [...] on 4chan" is important. Wishing cancer onto someone is almost embarrassingly mild on 4chan. The idea that someone would take offence to that ancient insult is laughable. Outside of 4chan and without that context, it is actually a pretty harsh thing to say. And even if I personally see and understand the humor, I would definitely disallow that kind of language in any workplace I managed.

I'm just pointing out that Facebook is setting the limits of its platform. You suggest that if a human saw your joke, they would recognize it as such and allow it. Perhaps they wouldn't. Just because something is meant as a joke doesn't mean it is appropriate to the circumstances. There are things that are said clearly in jest that are inappropriate not merely because they are misunderstood.
The "ApeFest" website[1] (yeah, the one that burnt attendees' retinas with UV) has some dynamic noise going on, and I had a look at the CSS. They're actually using a tiled PNG overlay[2], which gets wobbled around "randomly" using CSS animations (edit: actually, looks like they move it with JS). Pretty low-tech, but it works.

[1] https://apefest.com/

[2] https://framerusercontent.com/images/rR6HYXBrMmX4cRpXfXUOvpv...
https://github.com/pgpkeys-eu/pgpkeys-eu.github.io/commit/d5...

https://github.com/andrewgdotcom
> So are you doing both? If you implement the crypto refresh and GnuPG doesn't then you lose compatibility, right? If you don't lose compatibility and are somehow doing both, then what's the point?

OpenPGP keys can signal support for various features and algorithms - such as AEAD modes. As one example, the crypto refresh specifies GCM (as optional to implement).

This means that, when sending email between Proton users and OpenPGP implementations that support that, we can use GCM - which has certain security and performance benefits.

If we send email between Proton users and GnuPG, we won't use GCM, so we won't lose compatibility, but users also won't benefit from those (and other) security and performance improvements.
It is crumbling clearly, because idea of lock-in was to prevent using non Windows systems to run games. And it's not working out due to technology doing wonders translating lock-in graphics APIs into open ones with good performance.

Using APIs for lock-in is an old anti-competitive trick, so it's fun to see it failing for gaming.
That’s bizarre, is the owner British or something? “Here or to go?” is the standard in the US as far as I’m concerned.
This may be nitpicking, but technologies being described as "cool" versus "enterprise" or "new" versus "old" I find meaningless. I don't necessarily want to have the "coolest" or "newest" tech stack; I want to have the tech stack that solves reasonably and reliably solves my business problems. If that means leveraging "old" or "enterprise" technologies and practices, that could be totally fine.
Location: Berwick, PA USA (Can occasionally travel to NYC/regionally)
Remote: Yes
Willing to relocate: No
Technologies: SAP ERP, AWS/Azure/Linode/DO Infra, Python, Postgres, Linux
Résumé/CV: https://www.linkedin.com/in/jeffreyknorr/
Email: hn@jrklabs.com

20 years of IT experience from startups to Fortune 100 companies. Capable of developing small functions/lambdas up to full monolith applications and managing/integrating Global scale ERP systems. Primarily looking for additional consulting work but may consider an exceptional full-time remote role.
Even if they could make a fab, it would still be a logistical nightmare to scale from 1-1,000 users. Meanwhile, my SaaS company could have 100,000 users thanks to the cloud, and I wouldn't even have to get up from my desk.
>I mean, most of FAANG has been US values being globalized.

Well given that we know Russia, China, and North Korea all have massive campaigns to misinform everyone on these platforms, I think I disagree with the premise. It's spread a sort of fun house mirror version of US values, and the consequences seem to be piling up. The recent elections in places like Argentina, Italy, and The Netherlands seem to show that far-right populism is becoming a theme. Anecdotally it's taking hold in Canada as well.

People are now worried about problems they have never encountered. The Republican debate yesterday spending a significant amount of time on who has the strictest bathroom laws comes to top of mind at how powerful and ridiculous these social media bubbles are.
Are you using a DNS ad blocker? An adblock list mistakenly added jsDelivr and later removed it. It would cause this issue
Apologies - I didn't anticipate hitting rate limits on a third party service so quickly. I was able to get them increased - try again?
What if we talked about the X-files in a post about the X-files, and talked about Elon Musk... Anywhere else?
I'm getting a similar thing while logged in, only it gives me context by telling me my watch history is off in place of showing any videos. I like it; I generally go to YouTube to search for or watch something very specific, but am easily distracted by recommendations so I'd rather just not have them at all.
Yea same. Also, honestly feels like the way the field is progressing it will just be eaten up by an SWE role. Feel the same for ML engineer and many other specialized roles.
> mostly related to you as a recipient being unable to choose who is authorized to send you encrypted email (and so spam and malware filters don't work).

That's a problem with all encryption anyways. Inspection has to be done at the end-user's device. So I don't think it's fair to hold that against S/MIME.

> On top of that, GPG and S/MIME's support of encrypted-at-rest email is, imo, a fool's errand.

If it can be done with E2EE messaging apps, sure it can be done with email. Long-term storage is a really difficult problem anyways.

> The only value I see in GPG and friends is in verifying authenticity of the contents - signing the email - not encrypting those contents. Email has, and always will be, an open protocol, for better or worse.

To some extent I agree. An ubiquitous deployment of digital signatures would already solve a bunch of problems and most of the rest are handled by transport encryption.
Most things are iterated games so "not compromising on principles" can be a really good strategy if you can afford it.
Please, if you want to call it pseudo-something, call it pseudo-state agency. The government own nothing except their personal stuff, hopefully.

Its owned by the State. Two of them even. One of them can call for a board meeting and fire the CEO (who does not have any right to force his employees). But it is not owned by the government.

Please continue the discussion,i just wanted it out.
This is a profoundly insightful blog. Complexities of managing Kubernetes, resonates deeply. It's interesting to see how these challenges manifest in real-world scenarios and the impact they have on team dynamics and innovation.
Also, The OP asked about EV battery prices, which are about more than the cell, and also include the price of the pack/enclosure, which is 25% of the cost and hasn't budged much in the last few years [1]. Maybe structural battery packs will eliminate this cost completely in the future.

And then there is the reality that most EVs are still being designed and marketed as upmarket luxury cars, and not with the goal of maximizing mass adoption of EVs in the near term.

The market for EVs is the market for higher end new vehicles today. Therefore even as battery prices drop, other factors will probably keep the prices pretty high in the near future.

1. https://cleantechnica.com/2023/12/01/record-low-ev-battery-p....
Tom Scott on why subtitles don't match dubbing [video]
The funny thing about writing tutorials like this as a non-native speaker myself is also googling how to call things like the "clapper". I also didn't know what it was called before writing this article.
> I would classify use of infrastructure as a right. Like if a toll booth operator refused to take money from certain people.

We aren't talking about people here. Corporations don't have that kind of consideration in most of Europe.

Call it a "boycott". It's perfectly legal and obviously not comparable to cops targeting people in the slightest.
The OC's perspective (that's me) is that there's a massive power asymmetry between the employed and employer. An employee can (typically) only work for one company at a time whereas an employer typically has many employees. The cost for an employee being terminated represents an immediate financial hazard for the employee; when an employee quits then the employer can absorb that shock more easily by distributing outstanding work between remaining employees.

When an employee quits for a new job, that's a speed bump for the employer; when the employer lays someone off, that's life changing for the employee. Employees have many fewer protections than do corporations so layoffs should be done with caution and the cost of layoffs should absolutely be shared with leadership.

> In reality, being laid off is a return to stasis.

Not even close, my dude. Being laid off starts a timer for when that person's finances run out. If that person is, let's say, badly burned out from a months-long crunch period then good luck getting a job. Being laid off is deeply disruptive; if you don't believe me then try it out for yourself sometime.

And going back to the original discussion of the CEO getting a payout as a result of layoffs, that represents leadership financially benefiting at the expensive of the laid off employees. Layoffs indicate a failure of leadership to grow and plan accordingly and leadership should be sharing in the pain rather than cashing in.

Productive, healthy societies survive and thrive when members of that society can afford to take risks can tolerate shocks, and aren't destroyed when they're unable to work. Systems like social security allow elderly people to retire which frees up other productive workers to have careers rather than be caretakers. Systems like unemployment benefits give people time to reorient after a layoff and search for a career where they can be more productive rather than having to reach for the first job that they can find.

These systems are paid for by redistributing income, either temporally with things like employment taxes, or along the income spectrum via progressive taxes. The case of a CEO financially benefiting from layoffs is the exact opposite of this pattern - extracting stock gains from the financial deprivation of employees.

I'm not arguing that we should redistribute all income and it shouldn't be possible to get rich, but I am arguing that we should, shall we say, have a little fucking empathy for people that have been disadvantaged and attempt to support them rather than celebrating the active progression of income inequality.

Edit: typo fixes and a minor clarification.
It's a shame that there is no steady hardware supply because unfortunately they tend to die sooner or later (from humidity or just the 3.5mm wearing out).

I do lots of listening on the phone nowadays of course but nothing beats a simple throwaway mp3 player for sports, can navigate them blind and get away with charging at most once a week.
Ask HN: Interacting with Testing and Mocking Tools
I am a professor at the University of Michigan, and I am trying to understand the different testing and mocking habits of developers in the context of a research project.

Imagine that you are testing a new software application that you have developed that requires mocking both internal and external dependencies (accessed via REST APIs). You have found the perfect tool for your testing and mocking needs. The tool offers different ways of interacting with it:

1. CLI/Terminal commands: e.g. spinning up a testing/mocking binary (separate from your application’s executable), which interacts with the application under test;

2. SDK/Library: e.g. interacting with the mocking tool using language bindings that are native to the code of your application under test;

3. REST or GraphQL API: You control and configure the mocking tool using API calls initiated via your test code.

As a developer or tester, which of those ways do you typically prefer, and why? If you use a different way that I have not mentioned, I would also be interested to hear about it.
> For instance, it might have checked that he was in an unsupported region first, before making him jump through hoops.

Why would they do that?

Not doing it inflates their registration count.
Cryptographers and cryptographic experts overwhelmingly agree that encrypting email is a chump's game[1]. If you want secure E2EE transit, Signal is widely recommended.

[1]: https://www.latacora.com/blog/2020/02/19/stop-using-encrypte...
> I flat out stopped using Facebook

That's all you gotta do.

People are complaining, and sure, you could put some regulation in place, but that struggles to be enforced very often, also struggles with dealing with nuances, etc.

These platforms are not the only ways you can stay in touch and communicate.

But they must adopt whatever approach to moderation they feel keeps their user base coming back, engaged, doesn't cause them PR issues, and continues to attract advertisers, or appeal to certain loud groups that could cause them trouble.

Hence the formation of these theatrical "ethics" board and "responsible" taglines.

But it's just business at the end of the day.
The nordic countries, Norway, Denmark and Sweden have unionization rates in excess of 50% - to almost 70% in Sweden. The nordic countries have always shown solidarity when it comes to union negotiations all the way down to the rank and file. To pretend that this isn't desire of the electorate in those countries is willful ignorance.

It's absolutely bizarre to claim that self-determining nation has too much power against a foreign corporation.
If you are not using kitty, some programs like chafa can convert image formats into ascii color code + unicode characters. It's very handy in many cases.
I couldn't find a transcript, but an obvious answer is people take far too long to reach full live weight. (a human at 15-20 kg live weight isn't going to yield much of a dressed carcass)
Haven't read anything from Meyer in quite a while now.

For younger and newer devs, back in '07-'08, Eric Meyer created one of the first popular CSS resets which helped normalize differences between browser vendors.

I run into a lot of front-end devs now who aren't aware of this history. Probably worth mentioning at this point now.
CIA and NSA Created Google – By Kit Klarenberg
This is how I remember buffets operating in the US when I was a child, too. Nobody would go table to table to serve the good stuff, but would have stations at the buffet line, and you'd have to ask them to carve whatever you wanted. You could go back and get more as much as you wanted, but each trip got you a set amount.
Visualizing Multi Cloud IAM Concepts (2022)
Except when it comes to GnuPG, you have to realize:

1. Many, many people used it, and continue to do so.

2. The anti GnuPG crowd keeps coming and touting alternatives, and then complain when the people in the prior bullet point out the impracticality of the alternatives for their use case.

We get that GnuPG has issues. We get that sometimes the alternatives are better. We can coexist with them. People simply don't understand that for a number of tasks, GnuPG is totally appropriate, and solves the problem with little pain.
Yeah, no. That does not seem plausible at all.

Again, the technology would be able to cure cancer. Do you really think all those employees - who know that their friends and family could be cured of their cancer - would be willing to keep mum of the cure?
They sell ads. E2E encryption doesn't hurt that and it also appeals to the trust. So why not?
California's budget deficit balloons to $68B
Tesla should leave the market and let Swedes buy automobiles from their own brands... like... err... Saab which no longer exists... or Volvo, which now belongs to a Chinese conglomerate...