skysight-inc/HackerNews huggingface dataset:
I mean the NIH conclusion is literally:

> However, this review’s findings suggest that this [billboards are not a distraction] may not be true in all cases. Future research should emphasize the tails of the distribution in addition to average cases, in terms of both the analysis of visual behavior and the complexity of driving tasks. Further research is also needed to understand the effects of billboard design, driver characteristics, and road and traffic context.

The amount of people who text & drive and don't get into any accidents as a result on the road is quite high. Yet we still recognize texting & driving as dangerous. And active billboards are much more distracting as per the NIH paper than passive ones. Lit up bright ones at night that are engaging in some way are going to be more distracting than passive ones during the day.
Your comment got me curious if it’s at all possible to build a Node web service without importing any Node modules (ie with just the global/module-local namespace). Glancing at the globals docs, I think you’d be limited to WASM, binary extensions (like N-API), or maaaaaaybe doing something horrifically hacky with CJS require.
Taki Games, a mobile game developer and the creator of Deep Dive, has teamed up with Rally Protocol to use RallyMobile and RallyTransact, two potent mobile SDKs, to help reshape the web3 mobile gaming scene. RallyMobile prioritizes security and privacy, providing developers with the means to remove the main drawbacks of blockchain technology for end users and create more seamless, web3-native experiences.

The EOA solution offered by RallyMobile is non-custodial and fully isolates blockchain technology from end users. This implies that new users won’t have to exit your app to do simple tasks like creating a wallet. Additionally, customers won’t have to worry about possessing a blockchain’s native token before ever being able to use your app thanks to the RallyTransact’s gasless transactions feature.
That abstraction is also a strength. I think one of the reasons Macaroons really resonate with security engineers is that the underlying cryptography is simple and user-proof, and the resulting formats and protocols are super flexible†, which is not a combination you typically get with cryptosystems. It's also one of the truly great security papers; having worked with a team for a year scaling them out, I get something new every time I read it. My only quibble is the internal naming ("CID", "VID").

We're doing a big-ass blog post as we speak about how our Macaroon tokens work, and it covers how we worked around the issuer/verifier constraint (spoiler: a litefs-backed replicated isolated internal API) and we did basic stuff like encoding (spoiler: we defined a rigid struct schema, and just MsgPack'd it).

One of the things I think I have to say about Macaroons is that there's a sliding scale of how much you use it; I think there are some simple ideas in them that would be pretty neat in any application's authentication cookie scheme.

† Also one of a couple reasons, I think, that "standard Macaroons" and their associated libraries never went anywhere.
It was not a completely serious comment and was not intended to be a slight against professional artists.
I wonder since this runs at real time framerate if it would be possible for someone to composite a regular rasterized frame on top of something like this (with correct depth testing) to make a game

For example a 3rd person game where the character you control and the NPCs/enemies is raster but the environment is all radiance fields
There’s a YouTuber who did that, but it was disgusting after all that time
One nice thing about WebAssembly is that it can run in a browser. How would you implement things like fork() in that context, given the inability to manipulate the stack?
Its also a perf / ddos thing. If anyone from anywhere can run expensive searches it could degrade performance. A little log in won't hurt.
That's just statistics. 5 out of 6 people playing Russian Roulette will be perfectly fine, and will tell you how safe it is.
ok this is kind of cheating; anyone can achieve keyword spam with algol block syntax. grap has braces and still manages it
Making driving 100% safe is nearly impossible, but we drive cars built to good crash standards with seatbelts, ABS, AEB, etc. People still die on the roads, but these safety features reduce risk to an acceptable level. Likewise, using decent PPE won't 100% eliminate risk, but it will greatly improve it. Just because PPE isn't 100% effective doesn't mean you shouldn't use it.

The other kind of obvious solution with engineered stone is to avoid cutting it at the installation site. If it's cut to spec at the factory in a controlled environment (surely not that difficult in this age of CAD design etc), you wouldn't be blasting dust around during installation.
We also did an episode of the podcast with Geoffroy:

https://securitycryptographywhatever.com/2022/01/29/biscuits...
Those with teeth will devour those without. Those able to consume and perpetuate themselves will do so in the proceeding environment of those unable to replicate; they simply will not see anything but their end. And certainly these such people want nothing other than their gentle And Timely Sunset of existence and they will Embrace on endingly the new people that will continue after their own existence is ended forever.
Ehh

Yeah but how many stories of awestruck people trying VR were there? Brief novelty. Doesn’t last
Here's a detailed text outline with key frames for those who don't have time to watch the 36 minute video:

https://www.videogist.co/videos/lessons-from-building-github...
This is technically true but practically irrelevant.
Case in point, I deployed at Netflix a real-time combinatorial solver specifically for CPU scheduling [1].

Most real-world combinatorial problems can be solved relatively well. This is why Gurobi is in business, Alpha Go exists, or why Amazon and United Airlines still manage to practically solve their resource allocation problems.

[1]: https://netflixtechblog.com/predictive-cpu-isolation-of-cont...
The fear is that falling prices will contract the economy, because people will not spend today if they are going to be cheaper tomorrow. I don’t have any sense as to whether this fear is reasonable or not.
The Australian government has 2 levers. Tax or Ban.

Their reasons are usually bullshit, such as their Vape ban, which implies that border farce cant keep nicotine out of the country in this one specific product category.
Looks very nice! I’m building a to-do app now but will give yours a try since it looks so well done.
Technology also causes the rate of profit to fall.

https://en.m.wikipedia.org/wiki/Tendency_of_the_rate_of_prof...
I was about to type “why would the engineers who upgraded search have a say on the login behavior” then I answered it myself by realizing a far more powerful search feature means they spend more compute per query. Thus it actually makes sense they use login requirement to limit the search to users who are adding actual value to their bottom line.

Again you could disagree but it is a decision that can be rooted in sound logic.
Still no rule against them having a 4 hour wait on the number you have to call to cancel, followed by the customer service representative 'accidentally' renewing rather than cancelling your service.
Why do 31.5 to 35.5 look the same to me? on a retina phone screen Orion browser.
Web workers? [0]

[0] https://emscripten.org/docs/api_reference/wasm_workers.html
Not buying from them again.
Exactly- 20 seconds is the number I arrived at after a bit of trial and error.
Yeah, I mean, Google was no Valve. The secret was to avoid porting. The secret was to just be awesome at running DirectX on Linux.

It does seem like Vulkan is slowly slowly taking over. The bitter bitter switching cost isn't going to go away, but it seems like there's finally strong momentum back to there being more than one choice. That wasn't really available in Stadia's time, but slowly this is happening.
> The existence of spare tires has nothing to do with poor observed reliability. It is because of lack of 100% reliability.

Do you carry a spare battery, or spare keys? Because AAA says those are also among their highest reasons for service calls.

> All my flats have happened not because I lacked TPMS sensors but because something poked right through.

Simple punctures in tread can usually be fixed with an inflator kit, or a plug kit.
The good news is you can do both of those things and still be a member of a union! And additionally, there's lots of evidence to suggest that union members get paid more https://www.australianunions.org.au/factsheet/union-members-...

Union penetration is decidedly low in tech, and tech companies coincidentally have some of the highest cash reserves of any industry. People in tech often think, why should I join my union, I already get paid a lot! Bosses love that attitude.
The prosecutor had a similar observation:

... defraud the company of millions of dollars, ignoring the insidious consequences of undermining the importance of her DEI mission,” US Attorney Ryan K. Buchanan said ...
The latter is the actual concern in the here and now

The former is science fiction
Surveillance video captures high-end break-ins; sheriff announces task force
It’s how you know a kragen post on HN.
If you go to one of the demos the space bar will cycle through some debug modes. One shows a surface reconstruction. It comes from the usual structure from motion techniques I presume, so it's coarse and noisy, but I think the fundamental idea is viable.
Wow. I live in CA, and am starting on a remodel where I fully intended on using this stuff, having no idea it was harmful. In fact, I just assumed it must be better than digging/mining/cutting 'real' granite slabs and that this stuff would be both cheaper AND more responsible.

Regulations do more than regulate/ban things, they raise awareness. Just reading about the Australia ban had me thinking "I'll have to see what else we like to use instead" before I even got to your comment about the California ban.
"Say, for instance, that you could assemble a dataset of hundreds of thousands—even millions—of English language descriptions of the features of a software product, as written by a product manager, as well as the corresponding source code developed by a team of engineers to meet these requirements. Even with this data, you could not train a deep learning model to simply read a product description and generate the appropriate codebase."

I would love a centralized resource of all the predictions of what the technology would not be able to do in the future and then the dates at which those capabilities were first demonstrated on a giant timeline.

Maybe in the next few years I'll be able to ask a model to generate that for me. It will be pretty fun to look at.
Doing something a little isn’t the same a doing something a lot. You can walk into a restaurant and look at a menu for 5 minutes and then leave without issue but try to do that same thing for 8 hours.

Downloading a singe transient copy of some image once in the lifetime of a company is different than doing that same action a hundred times once for each version of the network.
It’s really not all that obvious to me. In particular you’re saying the reason to hand SpaceX nearly a billion is so I can do business with them faster because the subsidy reduces their time to market? If so, that’s a bogus argument in my opinion. I’d prefer a more direct mechanism like ownership and profit sharing. There is plenty of venture capitalists out there, if we can float WeWork, I’m sure there’s people who can float SpaceX and other perhaps more valuable to society businesses.
Am I a Good C Programmer?
I love this, I think it's a great way to get potential hires interested in your stealth startup while still stealth
Cute but lacking depth.

If you feel that way, take it up with:

https://onlinelibrary.wiley.com/doi/10.1111/resp.14625

https://www.osha.gov/sites/default/files/publications/OSHA37...

and the tradies getting physical reactions in their lungs from the dust.
Maybe a naive question: but is there any way at all (impractical or not) to implement stateless revocation? In my mind JWT is already non-stateless in the sense that the server at least needs to keep one piece of information which is the secret key. It's very memory efficient, but not stateless. If a decision is made to revoke a user, that state needs to be kept somewhere.
Do they mention why the new search still doesn't provide sorting options? I found them very useful in the previous version.
PDF full statement: https://docs.fcc.gov/public/attachments/FCC-23-105A2.pdf
The developments of the "panoptic computronium cathedral"™ could be accelerated if someone gave me $80B. Problems like drunk driving become a non-issue in my architecture and piecemeal deployments of sensors for preventing bad actions like drunk driving are automatically accounted for in my AGI architecture because everything is monitored 24/7 and no one does anything without permission from the AGI.
So this is an Apple startup?
Not sure what this author is smoking. Or how they can link an article titled

> The Federal Reserve claims the average American household is now a millionaire—but if you look closely, the middle class is going nowhere

As a point about average American wealth increasing
First, I don't think that's a good characterization of the talk.

Second, I'm not sure (based on the talk) that I see how they had any of the problems that Macaroons solve.

Third, I think a lot of the trouble they ran into feels like generic "we built our own token system" stuff; for instance, they backed themselves into designing a refresh token system (all their Macaroons had a third-party caveat discharged by their central Rails app, which, without any extra context, seems like a weird choice); similarly, they ran into revocation problems, which they addressed by routing all their requests through their Rails application --- these are just standard "stateless token" problems that you'd run into with a custom JWT solution as well!

(They also issued a whole bunch of long-expiry stateless tokens, and then had to wait forever to transform them to their new tokens, which is a problem every token and stateless cookie implementer has had to deal with).

I feel like they kind of went "full Macaroon", exercising all the features described in the paper, some of which weren't good fits for their problems.

We wrote a survey of auth tokens (it's linked upthread) a year or so ago, and I mentioned this talk, and I remember at the time that it made a dent with me. But we've spent a year rolling out Macaroons and gotten real-world experience with them, and in the course of writing that up I re-watched the talk and was much less persuaded by it --- in particular, I found that much of it was less a critique of Macaroons and more just a good war story about rolling out any custom stateless token scheme.
The point isn't to prove that it's beeper sending the message, the point is that Apple could give users an option to ignore Beeper's messages.

Either way, I doubt Apple would come to an agreement and would most likely continue to play the cat and mouse game (like they do with people who jb)
Most metrics disagree with you. The US is on average cheaper to live in compared to the average revenue. That can be seen in average household debt too, as those are pretty high in Europe.
Thinking this through out loud... I think there's a difference between trying on the clothes in the store vs. buying online, trying on, and returning.

I bet the retailer has much lower confidence that the clothes weren't compromised in some way. They have significantly less control of the situation. There's only so much wear and tear or damage that a regular person can do to clothes during a short session in the dressing room.

I'd love to hear some stats from the inside on the condition of the clothes bought online that are returned.
So, more smoking up & playing ping pong & video games on the job? Sweet.
If I read everything correctly, there was no physical evidence but allegations from her husband and her diary entries.

Quote 1: «The maxim attributed to UK paediatrician Roy Meadow reads as follows:

“One sudden infant death is a tragedy, two is suspicious and three is murder, until proven otherwise.”»

Quote 2: «It’s an argument echoed by Ms Rego, who says the diary entries were “cherry-picked” to suit a narrative of guilt.»

Source: https://www.abc.net.au/news/2023-05-21/was-kathleen-folbigg-...
There's at least 4 kinds of C programmers today:

- People who work on projects which require low-level access, potentially mixing in assembly code (drivers, OS, etc), porting to different architectures, real-time, high-precision, control of timing, lack of MMU, etc

- People who want to perform specific actions, like a specific OS syscall, that may not be exposed [easily] by a higher level language in the way the programmer wants

- People who want to write very fast/efficient code

- Legacy code maintainers

Not too long ago I busted out some C to create a stripped binary for a job interview round. The interviewee needed to diagnose what the binary was doing and why and report back. Not all that common for most programmers today, but I expect a good amount of detail from a senior-level systems candidate.
I think he did mean Hugo's Les Miserables. I remember that chapter where he described the city's "cloaca", referring to it as the "third level substage". Goes on for quite a while and was indeed memorable.

So was the long chapter about Waterloo which was seemingly unrelated to the book's plot until the final paragraph or so.

The description of Fantine's life before she fell goes on with florid language, but it captures the "golden hour" of life when youth is at its peak.

And lastly I'll mention the chapter where Marius' grandfather (I think) goes on a terribly long rant about the Jacobins. Those brigands...!
I don't think CspChan_closed is a super useful operation if using it is always prone to TOCTTOU issues – maybe as an optimization hint but that's about it. In Go, the receive operation indicating the channel is closed is atomic with receiving a value, so it's not possible to have a TOCTTOU problem there.
What do you mean? How do you do an offline attenuation of an OAuth2 token?
As opposed to Europe, which is known to not have homeless or poor people.
Probably because the ban is likely better thought out than a flippant comment that, I guess, assumes the powerful anti-silica lobby (?) is much stronger than the poor downtrodden anti-concrete lobby (??).
I think that if your job search strategy begins with submitting applications -- so many applications that outsourcing that task makes sense -- you have the wrong strategy. This seems like polishing a turd, in other words.

A good recruiter (paid for by the employer) or agent (paid with a percentage of my gross) will have contacts and inside tracks (unadvertised positions) and reputation in the business domain or geographic area. A good recruiter or agent will bypass the "submit an application" online step altogether and get your resume/CV in front of the hiring manager and line up interviews.

Job seekers shouldn't have to pay to apply for jobs. I think most adults with some work experience understand that, and view any supposed agency or recruiter who does charge for applying as a scam. I'm not saying you're running a scam with neverapplyagain.com, but you're getting into a disreputable niche full of scammers.
that probably explain why nvidia only. Amd don't really have rocm for linux on latest consumer cards.
I also don't understand that part.

Why is it not possible for a bank to just always decline payment for checks drawn on overdrawn accounts as a matter of policy?

The other, and probably more relevant, credit aspect of checking accounts is depositing a check which might bounce (due to an overdrawn account) – but that also seems avoidable by just making checks available as late as legally allowed (i.e. on the second business day after deposit as far as I understand)?
In the U.S., Corian is a popular brand of engineered stone. Pretty common for kitchens and bathrooms.
Another thing to be careful of is anything that could have adverse health effects if counterfeited, like food, supplements, cosmetics, safety equipment, cooking utensils, and so on. Which I guess leaves books as something relatively innocuous, even though those have also been counterfeited before.
Like all sufficiently large organisations, with huge amounts of money, this is less a control problem and more a scale problem.

First, we should note that 4 mil, over 4 years, is a rounding error in the meta financial. Sure it's a lot to me and you (and her) but its less important to fb than a $1 is to you.

Second it's worth noting that spending any amount of money, at scale, is inefficient. Once you get past the stage of "the owner writes all the checks" you need rules, limits and so on. The more the money , the more people spending it. At which point you are hiring people -just- to spend money, and then more people to watch over them, and then even more people to watch over them.

So yeah, once you have enough people, you'll inevitable have some that are comfortable fleecing some out. Since preventing that is infinite oversight, it's simpler to just accept that it'll happen as a cost of doing business.

On the one hand you can describe this as "bad internal controls". On the other hand, if the controls cost more than the losses then that's "worse".

Context matters.
Probably because wifi deauth is the easiest to perform..
Wouldn't using JWTs in this case permit for starting to chip away on the monolith and integrating side services in the authz offered by the core service?

I do get wanting to keep it simple but with sessions I don't know what is more simple once your project starts to grow. Rolling your own auth can be a minefield especially if you want to span it across more than one service and most of the off the shelf solutions will push you towards OAuth/OIDC any way at which point JWTs are some kind of de-facto standard. The good thing is that once one has gotten accustomed to OAuth verbiage you don't really have to think about it any more.
thanks I appreciate the link. Looks like the one we're interested in this thread is Option 4 (also 5b to cover other things like granite). They did a pretty good laying out the details.
> experienced injustice

What was the injustice?
Running that query "whats best website for deploying a decentralized site", I observed the web sites that it was referencing. There are a couple of ideas here:

1. One of the sites was dev.to, meaning that is one of the sites that it is crawling. You could write an article there, linking back to your site for more info. Just make sure the article is substantive in case they have an intelligent quality filter. Also, announce the article in social media and in your own circles to bring traffic, which might make it easier for the crawler to find, rather than pass over an article that's at the bottom of the stack because of less interest. Do this for any other sites that show up as references and let you post, though you should write unique articles because you don't want to spam the crawler.

2. Look for any sites that might have link lists. This might be old school, but when everyone was doing their own web sites, we had categorized link lists for related sites. Swapping links was good for everyone's traffic and good for the community.

Also, you might want to put an allow in your robots.txt to ensure you're explicitly inviting the crawler. Here's the details on ChatGPT, though you can learn more about other LLMs by visiting their site:

https://platform.openai.com/docs/gptbot

Essentially, do the research to find sites that are being crawled and try to figure out how to build paths for the crawler to find you in the link graph.
Beck Back in the Nineteenth Century: Towards a Genealogy of Risk Society [pdf]
Just a reminder that the "existential threat hawking" is not a novel thing.

EDIT: Does anyone know whether the Huzar's 19th century pieces have been translated?