skysight-inc/HackerNews huggingface dataset:
(I gave this talk and work on code search.)

Sorry you've had a frustrating experience with the product. When we look into complaints about missing results, it's almost always one of two things. First, the repository is not indexed yet, but searching triggers indexing. Future searches work. Second, the files or the repo hit our documented limitations (https://docs.github.com/en/search-github/github-code-search/...). I think these limits are pretty reasonable, but we need to do a better job making it clear why content isn't in the index.
Quote: "The federal government will also impose a ban on imported engineered stone to provide an "additional layer of enforcement and deterrence at the border", however the date has not been finalised yet."
By that measure nothing is emissions free, me walking down the road will generate a bit of rubber / asphalt dust.

Also regenerative braking... Trains are amazing
> about security and economic on-shoring
> increases the likelihood smaller states can build locally and solves for most chip needs

I'm not sure what does that mean? What specific chip needs that would that solve and what benefits would this provide? If those chips are not competitive nobody would buy them? So what would governments do with them? Stockpile them for the future just 'in case'?

The problem is that unlike grain or oil chips are not exactly fungible if your military production or other vital industries lose access to their current suppliers they wouldn't be able to use your slow, outdated and overpriced chips anyway (and forcing them to do that under normal circumstances would make your products less competitive).

> BOM for the challenger tank

How many other components does the Challenger tank contain (IIRC it's not really produced anymore anyway) which are not manufactured in the UK? In any case stockpiling necessary chips etc. just in case the UK won't able be able to acquire anything from the US/Germany/etc. seems like a practical approach than trying to develop everything inside the country.
A NextJS boilerplate to automate all the boring stuff
Sharing a tool
My personal experience:
Fedora 38- just needed to compile gcc-12 (took very long),
Windows- Installer failed

This clearly shows that GNU/Linux must be superior
I loved the writing style for the same reason I loved the writing style in Use of Weapons.
I absolutely hate exposition dumps. I can think so treat me like it. Maybe try listening to an audiobook of Blindsight I did that, I havent actually read it yet but the audiobook was very good.
That's why you see some companies offer 4 day week to their departments with creative roles and not task-oriented with easily measurable output such as warehouses, a good example is ThredUp company.
> A police officer in performance of his duties should have zero expectation of privacy, and has a legal obligation to fill out an accurate duty log, which is such that it may be used as evidence in court.

However, in 35 states, and this blows my mind, an officer can have "consensual" sex with a detainee. Even if they are in handcuffs at the time. 35 states have decided that this is not improper from an "authority" perspective (leaving aside for now the whole "having sex while on duty").

There was a recent case where a minor who was in custody and handcuffed had sex with two officers in their patrol vehicle. The officers claimed it was consensual and the courts agreed. I do not believe they even faced disciplinary action.

> Instead, police departments routinely refuse to release footage — even when officers kill.

Because police and police departments and police unions know that even post-BLM, they will face little, usually zero, consequences for doing so, or for wasting taxpayer dollars fighting to defend their refusal.
Okay, fair enough, you do have a point, even though practically right now it's mostly only theoretical considering how little sandboxing modern Linux does by default. I agree that we need more sandboxing, and then getting rid of X11 makes sense from a security perspective.
so what did happen in 1971?
Thanks, I appreciate it. I would love to make this useful for more, which is definitely easier with feedback. And lovely feedback is just more fun to incorporate.

I had no idea I had broken the back button, I has just been in my tunnel. Thanks for discovering.
You have a couple of options for storing tokens or other secrets like API keys that only need to be presented to a remote server.

* Secure, HTTPOnly cookies. This requires that your servers live on the same domain as the web page is being served from, but cookies will transparently be attached to any request and are unavailable to be exfiltrated.

* Some secrets can be stored outside of the browser javascript context so again can't be exfiltrated. This is pretty limited, but WebAuthn uses this for example.

* Keep the secrets server side in a session. You are still vulnerable to session riding, but not exfiltration of tokens.
See also Web Neural Network API: https://www.w3.org/TR/webnn/
Amazon launches "Your Books", competing with its own service Goodreads
I played a lot of tekken 1, but never enough to join any tournaments (had one heard of any in the internet less early 90s)

But what I remember being very special about tekken was how easy and logical the moves where.

It was one button, one limb and more or less only buttons that controlled limbs involved in a move was used. It was quite easy to learn many moves without consulting the manual because they flowed well with the characters.

This was in stark contrast to street fighter and mortal combat where things were as cryptic as cheat codes.
The third party in this case is probably the oversight boards that were referenced in the article. They should not be going to the police requesting footage and being denied, they should be the ones who control all the footage, and the police should go to them to request it. That's the only way the oversight boards can actually do their jobs.
> Android has convenient cross platform emulators. Apple insists you give them tons of money every time they release a new iDevice :-)

I've worked in places that do dual platform development, and Android has always been the one that needs a ton of testing devices just to achieve a minimally-acceptable testing coverage (and we would still end up with more issues in the wild, than on iOS)

[EDIT] Maybe this is a solo dev versus team thing? Solo dev tests on their Pixel, pokes around in the emulator for other OS versions, looks fine, submits to Google, Google accepts. App has issues on a couple major Samsung phones (their goddamn OS customizations, OMG) and maybe a major Chinese brand or two, but the App Store accepted it, so that's that to the developer.

They try to do the same with Apple and a single phone and get it thrown back with "this is broken on other models of phone" and perceive that Apple's a harder/more-expensive target to test for.

Meanwhile, a team supporting multiple popular apps has developed a kind of scar-tissue that results in a 10-device Apple test drawer and an 80-device Android closet, resulting in the opposite perception.
2FA only protects login. Pretty much all account security from that point on is based on portable bearer tokens.
Useful Flags to Set on Every Shell Script
I found that using "helm template" to convert every Helm chart into yaml, and then using Pulumi to track changes and update my clusters (with Python transformation functions to get per-cluster configuration) made my life so much better than using Helm. Watching Pulumi or Terraform watch Helm watch Kubernetes update a deployment felt pointlessly complicated.
Oh yea bro. maintaining old stuff is easy when somebody else is doing it for ya.
Yes, it's actually Ahab speaking, lol. He goes on to muse that thinking is probably the exclusive domain of God, since thinking requires "a coolness and a calmness; and our poor hearts throb, and our poor brains beat too much for that." This is the first couple paragraphs of chapter 135, "The Chase. — Third Day".
You already have this to an extent - how many people touch your medical records? I can look up people's past addresses online, it isn't all that private - which is fine for most folks, but bad for folks getting stalked.

Heck, I worked at a landline phone company 25 years ago and they used the last 4 numbers of a social security number to verify everyone. Think about this every time you talk to a utility: That underpaid worker definitely sees your information. Plus addresses and names and so on.

But more realistically, there is no real reason that the person viewing the footage needs any of that information. It might be helpful to know that the person is having a mental health crisis, sure, and it might be helpful to know if the person is a minor. But they don't need to know the names of folks nor what the diagnosis is. Treat it like health information: Give nothing but the necessary information. And if society can trust an underpaid, stressed call center employee to have a bunch of this information, I'm pretty sure we can trust these underpaid, stressed folks too.
By your logic the Linux kernel itself should ve replaced since it's decades old and full of legacy code
I don't quite understand the Roy's Kerr argument. I have Hawking's and Ellis books in front of me and in chapter 8 they define very precisely what a singularity and they argue that finite length timelike or null geodisics incompleteness is the right concept to use when talking about singularities.

quote

Timelike geodesic incompleteness has an immediate physical significance in that it presents the possibility that there could be freely moving observers or particles whose history did not exist after or before a finite interval of time. This would appear and even more objectionable feature that infinite curvature and so it is appropriate to regard such a space a singular.

endquote

It is nice that Kerr's apparently found examples of geodesic incomplete spaces with bounded curvature and metric if I understand correctly, but I don't understand the "attack" on Penrose and Hawking work. At least in the book or in the original Penrose article they don't claim that geodesic incompleteness implies unboundedness of the metric or the curvature. On the contrary as far as I know they even argue (in the same book) that if the metric or the curvature is infinite at some point the manifold is not extensible and you could just remove the point from the manifold while with geodesic incompleteness the state of affair is worst cause you cannot in principle remove it.

Finally I've never heard a physicist believes that singularities are real, they are just a symptoms that the theory reaches its limit.
I think helm is at it's best when you need to _publicly distribute_ a complex application to a large number of people in a way that's configurable through parameters.

For internal applications, it's in an awkward place of being both too complex and too simple, and in a lot of cases what you really want to do is just write your own operator for the complex cases and use kustomize for the simple cases.

Most of the problems with updating and installing helm charts go away if you manage it with something like argocd to automatically keep everything up to date.
Or how the twitter premium and extra special super premium+ subscriptions both still have ads.
Sorry, my sentence was poorly written, I meant it would be ironic if NPM didn't support OIDC.
LOL https://twitter.com/Ledger/status/1735326240658100414

FINAL TIMELINE AND UPDATE TO CUSTOMERS:

4:49pm CET:

Ledger Connect Kit genuine version 1.1.8 is being propagated now automatically. We recommend waiting 24 hours until using the Ledger Connect Kit again.

The investigation continues, here is the timeline of what we know about the exploit at this moment:

- This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account.
- The attacker published a malicious version of the Ledger Connect Kit (affecting versions 1.1.5, 1.1.6, and 1.1.7). The malicious code used a rogue WalletConnect project to reroute funds to a hacker wallet.
- Ledger’s technology and security teams were alerted and a fix was deployed within 40 minutes of Ledger becoming aware. The malicious file was live for around 5 hours, however we believe the window where funds were drained was limited to a period of less than two hours.
- Ledger coordinated with
@WalletConnect
who quickly disabled the the rogue project.
- The genuine and verified Ledger Connect Kit version 1.1.8 is now propagating and is safe to use.
- For builders who are developing and interacting with the Ledger Connect Kit code: connect-kit development team on the NPM project are now read-only and can’t directly push the NPM package for safety reasons.
- We have internally rotated the secrets to publish on Ledger’s GitHub.
- Developers, please check again that you’re using the latest version, 1.1.8.
- Ledger, along with
@Walletconnect
and our partners, have reported the bad actor’s wallet address. The address is now visible on
@chainalysis
.
@Tether_to
has frozen the bad actor’s USDT.
- We remind you to always Clear Sign with your Ledger. What you see on the Ledger screen is what you actually sign. If you still need to blind sign, use an additional Ledger mint wallet or parse your transaction manually.
- We are actively talking with customers whose funds might have been affected, and working proactively to help those individuals at this time.
- We are filing a complaint and working with law enforcement on the investigation to find the attacker.
- We’re studying the exploit in order to avoid further attacks. We believe the attacker’s address where the funds were drained is here: 0x658729879fca881d9526480b82ae00efc54b5c2d

Thank you to
@WalletConnect
, @Tether_io,
@Chainalysis
,
@zachxbt
, and the whole community that helped us and continue to help us identify and solve this attack.

Security will always prevail with the help of the whole ecosystem.
I’m gay, so I feel like my quality of life in any of those places would be quite a bit worse than in the US.
What noobs. Everyone knows you've got to put that chicanery behind a web service call so they can't find the evidence directly from the client.
Essentially the main problem is that a lot of people want to try (even if they mostly fail) to monetize everything--and I assume a lot of people here aren't innocent of that.
Excuse me, I think you mean Heelys.
> being confident in their power to legally murder anyone who’s too resistant.

* in a few select countries around the world. This is a rather narrow view of police(wo)men as a blanket statement.
Anyone else shocked by the hardware mysteriously failing, while a cop is violating someone's rights, but works perfectly at all other times?

How about the simple fact, that if you delete data that would be used in a court case, the court will automatically assume the worst case, while cops can do it, and the penalty? Nothing!
Sure ideas and facts would be spread out. The weights are cumulatively involved in generating the tokens. The error margins from them would also be accumulating for some paths while also decaying for some others. If the training and inference process could track, it should be possible to figure the error margins for the output tokens. However, such an approach would be too compute intensive to be practical.
Cruise slashes 24% of self-driving car workforce in sweeping layoffs
But they havnt given anything up. They changed their ruling. They can change it again and have that, “power” again.

The power isnt the limitation. It's the ability to implement or remove a limitation. They havnt given that up.
Stone survived just fine, we've got evidence of stone tools going back over three million years. It preserves much better than iron which rusts to bits in the ground within a few thousand years

The issue is the relative lack of signs of bone injury that is obviously from axes or piercing weapons (as opposed to falls and blunt force trauma). Archaic humans have had hand axes capable of very obvious damage for over a million years, spears for half a million, and they wouldn't have had anything resembling armor until about 200k years ago.

There was certainly competition but if warfare was particularly common, we should have seen more evidence. We probably weren't "peaceful," though, just smart enough to realize that conflict avoidance is usually the optimal strategy.

This also follows the general pattern we observe in the transition from hunter-gatherer to agriculture: The hunter-gatherers weren't really killed until the imperialism of the common era, they were absorbed or just out competed by the agriculturalists. Lots of their remnants survive ranging from the Bedouin to Namibian pastoralists to the jungle dwellers of Papua New Guinea.
So it was intended to be used this way. Didn't work very well. Connect-kit-loader trusts whatever the CDN throws, CDN trusts whatever NPM throws and NPM trusts whatever GitHub throws.
Why do you call it a "national security asset"?
I don't think the game you cite is the same type of game. It's even simpler to control units in Sim City, but that's just because the game isn't about fine-grained, high speed control of one character.
>> I played a lot of tekken 1, but never enough to join any tournaments (had one heard of any in the internet less early 90s)

Our local Aladdin's Castle regularly held tournaments and I had friends who ended up making all the way to the national level through those
Beneficial Ownership Is Dangerous
I would love to make some new knowledgeable friends!

Regardless of knowledge level, though, it becomes more difficult as you get older.
Interesting you mention croissants. That bread is my litmus test of a bakery. Costco’s croissants are quite good for a supermarket outlet (and that price is amazing). Their baguette is also not bad.
Can we please stop regurgitating "encrypted email" as if it's some virtuous accomplishmenet?

Anyone can encrypt something. The challenge is keeping authentication to that encryption valid, accurate and secure.

As far as I can tell, PM does not in any way innovate on that. They just prey and capitalize upon laymen who foolishly equate encryption with security. In fact expecting any privacy from email at all is outright delusional.
> strategic reasons

Such as? I can't really think of any benefit besides providing jobs and funding for contractors (so kicks backs etc.)

Then again it's not particularly surprising, the EU is well know for wasting massive amounts of money on all sorts of nonsense while ignoring things that actually matter.
I cannot. At this point, you are clearly not approaching this discussion in good faith or you struggle with basic reading comprehension. Either way I am unable to help you further.
I hear what you're saying here, but one of the ways we've been able to successfully preserve software was because, even though folks weren't supposed to keep this stuff around, they did anyway. Business goals rarely align with preservation efforts. While I do know that Microsoft does keep a vault of old software, production materials, etc (I believe they even have a position on staff for a Librarian, or at least they used to), for many other positions, that simply does not exist.
Why this message has been posted with http:// protocol rather than with https:// ?
Sure, but by that logic, there's nothing wrong with still using cooperative multitasking.

Eventually, everyone involved knows, it's time. And even Linux has had some major rewrites in multiple areas - don't pretend like Linux hasn't changed immensely since 1.0. Xorg though... hasn't that much...
> See, there is no general schema for what goes and doesn't go inside a values.yaml file. Thus, your development environment cannot help you beyond basic YAML syntax highlighting.

… this is just an odd complaint. Naturally, there isn't a schema — there inherently cannot be one. Values are the options for the app at hand; they're naturally dependent on the app.

> but without any schema validation!

I have seen people supply JSON schemas for values with the chart. I appreciate that.

Of all the pitfalls … the clunky stringly-typed "manipulate YAML with unsafe string templating" is the biggest pitfall, to me…
I think comparing an activity that can result in loss of life to one that doesn't is probably on the dishonest side.
Doing the wrong thing more efficiently doesn't make it into the right thing.
Partially, one could use a Content-Security-Policy to lock things further down.
Business Lessons I Learned from Playing Dungeons and Dragons (2009)
You managed to make a full admittance of brain smoothness... Man if you want to spew Russian propaganda you can go eat a bag sht lmao
You can google for 2 mins and find many examples of hardware mysteriously failing while an officer was violating someone's rights.

You can also find many instances of the video being magically deleted..aw shucks.

Are there exceptions, like you mentioned? Sure.

Are there many, many instances of that being bullshit? Sure.
(iirc) I think I used `-fomit-frame-pointer` with DJGPP on DOS on a 486. It was an [unimpressive :)] software-rendered 3D graphics demo, and I was very happy with the substantial free speedup I got.
I'm able to purchase Visionary via:

https://account.proton.me/mail/signup?plan=visionary2022&bil...

I must be logged in to see it. I don't know how long you have to have a paid account to be considered legacy.
The cost of running the infra is negligible compared with the potential of whatever idea they will come up with.
Source?

Their twitter says "This morning CET, a former Ledger Employee fell victim to a phishing attack that gained access to their NPMJS account."

And Github Actions automatically redacts the secret in the log
For anyone else to whom this term is new: https://en.m.wikipedia.org/wiki/Adverse_inference

> is a legal inference, adverse to the concerned party, drawn from silence or absence of requested evidence. [...] According to Lawvibe, "the 'adverse inference' can be quite damning at trial. Essentially, when plaintiffs try to present evidence on a point essential to their case and can't because the document has been destroyed (by the defendant), the jury can infer that the evidence would have been adverse

The first paragraph sounds a lot like "assume the worst in people" (must be a nice way to go through life); the second paragraph specifies it only in the case of intentionally destroyed evidence (that seems reasonable when you can know it was intentional). Interesting concept
Just goes to prove that it is already dead... A good old internet would have had full transcript without any adds... But instead it has to be audio only and monetized in all possible ways...
EV Buyers Still Love Tesla, Whatever Elon Musk Does
Helm makes me sad.

What I do to remediate this sadness is use Helm from Tanka. There is still sadness but now it's wrapped in a nice Jsonnet wrapper and I can easily mutate the output using Jsonnet features without having to mess with nasty Go templating.

I've said it a million times before but it's always worth saying again:

Don't use string templating for structured data.
Limiting opportunity is directly causal to a higher social mobility index though. Preventing people from earning high wages or accumulating wealth will directly increase that metric.

A country where everyone is in extreme poverty could have the top score for social mobility.
Type Safety for the Rest of Us
By former minor mantainers, not actual developers

Most actual development was done by hundreds of people in the early 1980s by the Massachusetts Institute of Technology
The guide to emotional intelligence in the workplace and beyond