skysight-inc/HackerNews huggingface dataset:
I suspect the US would have done the same thing, if manufacturers had done CCS2 instead of CCS1. Also would have helped if the US had done "bring your own cable", which seems to be common in Europe.

Interestingly, the new NACS standardization process seems to be encouraging that as well.
Even the security researcher that reported this doesn't think so.

> I am an admin, should I drop everything and fix this?

> Probably not.

> The attack requires an active Man-in-the-Middle attacker that can intercept...

[1] https://terrapin-attack.com/
U.S. Life Expectancy Rebounding After 2020 Coronavirus Pandemic
EU will hold 3 major porn sites to same regulations as Meta, X
I don’t really understand the point you’re trying to make.
You absolutely can use the music app without paying for the subscription by syncing your own media.
As others have proven, the previews can even be listened to without creating an account.

What exactly is so invasive about Apple Music?
The reference has been lost in the mists of time, but before snowden, and the NIST backdoors, there were accusations that a member of the SSL standardizations committee was an NSA plant that intentionally sabotaged the protocol.

Since their actions were done in public, researchers went back, and found that their main contribution to the spec was blocking anything that would simplify the implementation, and fast tracking as much needless complexity as possible.

From what I can tell, Wire Guard is based on that story, since it doesn't include any session-time negotiation of ciphers, etc.

tl;dr: Runtime negotiation of encryption algorithms considered harmful.
Afaik, there's surprisingly little about the atomic bomb construction that's covered by export restrictions.

Fissile materials, ofc.

But the US government took the approach that "secret is better than banned" with the bomb, and just never stated any of the details (as they would have been required to, in order to prohibit them).

MAD trade secrets, I guess.
> Or under the threat model of company policy or legislation not allowing you to handle confidential information on a system that can't offer even a basic guarantee of privacy.

Last I'd checked, Windows had the same security issues as X, so it's unlikely to come up.
> You can't sell a US WWII tank without rendering its main gun inoperable to a civilian, much less a foreigner.

You actually can sell a tank with a working cannon (to a civilian in the US, foreign national or not) if you have at least a Type 09 license to deal in destructive devices and the buyer has a destructive device permit. To export it would be a lot harder (and getting the aforementioned permits is no joke either).
So, "yes, we're writing the same thing, but because monads I'm still pure and you're not"?
Someone should build a SaaS-Startup which ensures that 'Show HN' posts about your new SaaS-Startup reach the front page, guaranteed! (Sometimes. Maybe. But at least the website will look nice).
https://eu.getdot.ai/share/f94644f5-c76a-4211-9c48-76800f12f...
Not really :)

Dot will ask a clarifying question.

Questions like, "what kind of data do you have access to?" or "how can you help me?" would work.

Dot today works well for questions that can be answered with 1 SQL query and some Python.
It's 50% more remain in relation to leave. It's not tight at all.
podman works great with docker-compose through the docker socket emulation.
I just use the upstream vanilla docker-compose with it (also works with docker compose as a plugin for Docker CLI).

Podman Desktop also offers to set the socket emulation and Docker compatibility up for you, if you like.
> Eventually, the CPU may cease to exist as its fundamental design becomes obsolete. This is usually called a GPGPU in modern server infrastructure.

There’s no reason yet to think CPU designs are becoming obsolete. SISD (Single Instruction, Single Data) is the CPU core model and it’s easier to program and does lots of things that you don’t want to use SIMD for. SISD is good for heterogenous workloads, and SIMD is good for homogeneous workloads.

I thought GPGPU was waning these days. That term was used a lot during the period when people were ‘hacking’ GPUs to do general compute when the APIs like OpenGL didn’t offer general programmable computation. Today with CUDA, and compute shades in every major API, it’s a given that GPUs are for general purpose computation, and it’s even becoming an anachronism that the G in GPU stands for graphics. My soft prediction is that GPU might get a new name & acronym soon that doesn’t have “graphics” in it.
This article describes using podman with a pod containing multiple containers.

https://www.redhat.com/sysadmin/compose-podman-pods
I'm leaning into this without a commercial consideration so I don't need to overthink it, it's just something I want for myself.

I agree point b is a minefield and given my info is on the system, I've got skin in the game to make it secure.
I cannot stress enough how much you can reduce "how many things you need to hold in short term memory to do your job" by just keeping a notebook (or file, or wiki, or whatever works for you) and writing things down.
Most sales of Suica were suspended this year, supposedly due to the chip shortage. That was still the case 2 months ago.

It doesn't expire, I think everyone in Japan already had one.

https://www.timeout.com/tokyo/news/sale-of-pasmo-and-suica-c...

And there was a HN post about a relevant tweet before that.
When people talk about standardizing the charge port they’re talking about the shape of the port not the protocol. Tesla has supported the CCS protocol for years now.

The Tesla port is vastly superior to the CCS type 1 port. They should get credit for making it an open standard.
I have to say I find projects that talk about generic concepts (observability, tracing, eBPF), but then when you dig in the docs it's 100% Kubernetes-specific, to be highly misleading. Not everyone uses Kubernetes, and distributed tracing is a good thing to have regardless of the underlying platform.
Again, I said this multiple times: XTerm/UXTerm has a secure mode to lock all input.
You can actually use podman as a backend for docker-compose

If you install docker-compose, podman and enable the podman service, it does work quite well.

If you also install podman-docker you basically can run:
`docker-compose`, `docker compose` or `podman compose`, all three will leverage podman in the backend.

I use it with podman rootless and I'm quite happy with it.
I was always stumped by this effect. Are we suppose to scroll consistently or with a big swipe? What if, I did not swipe strongly enough? Should I be ashamed I didn't make it to the end?

O the desktop it's always: should I be the phone instead?

It never felt right!
You are not getting the point... it is not about the ratings or win ratio, is about how fast you can climb the ladder to 1200 elo (like OP suggested) from 100 at chesscom/liches, 9 months is unrealistic without paying the "pay-to-win" fee, 2 years is more realistic timeframe to get that elo.

If you are think m wrong go start a free account and prove me wrong, you have less than 9 months to go up to 1500 elo.
I also really like how seamless is UDF integration. The way UDFs work in ClickHouse is you create a separate binary that can accept the input for the UDF via stdin and produce an output to stdout, so it's quite flexible, but also a pain to set up. This library does all this plumbing seamlessly for you, which is super nice.
Tesla's recall of 2M cars relies on a fix that may not even work
AI image training dataset found to include child sexual abuse imagery
> Under the threat model of websites using browser exploits to grab other data on your system?

Browsers already have multiple layers of sandboxes. You can always add another one to the browser if you are paranoid.

Personally I prefer not running untrusted javascript in the first place (where I can avoid it). An exploit that gains control of the browser is already a doomsday scenario if you are using the browser for internet banking, work or anything that matters. Being able to grab the input and output of other applications is a nothingburger in comparison.

> Or under the threat model of company policy or legislation not allowing you to handle confidential information on a system that can't offer even a basic guarantee of privacy.

Those are usually fine with running countless proprietary drivers and tools with root access. So in other words it's security threater.
# Ensure .d directories exist
sudo mkdir -p /etc/ssh/sshd_config.d
sudo mkdir -p /etc/ssh/ssh_config.d

Note that this was added in OpenSSH 8.2, released 2020-02-14:

* https://bugzilla.mindrot.org/show_bug.cgi?id=2468

* https://www.openssh.com/txt/release-8.2

If you have an older version this will not work.
Weather is sh*t here but too but here are my 2 cents:

I got depressed after trying go-big-or-go-home entrepreneurship for 4 years.

In 2021, when I discovered cool kids like Pieter Levels building apps out of curiosity and making $ with them, my life changed.

I took the plunge and built apps while sharing everything (learning, code, salary).

As my following grows, I receive tons of messages from people mentioning it's inspirational, so I keep sharing most transparently.

I'm not teaching people to get rich to buy a Lambo. I'm giving them the tools I use to build stuff that makes me happy. Most of these tools won't change the world.

Internet is cold. But if you were to meet me, you'd see an average Joe walking barefoot and who is obsessed with building apps.

(1L of water does wonder to hangover)
Show HN: Social app based on Lists and Polls
Social platform for sharing Lists & Polls. With Lists, you share your lists or rankings e.g. your favorite songs, movies, celebrities (ranked or unranked) etc. With Polls, you allow others to share their votes with you e.g. their best books, artists, games etc. It's free with no signups required!
Sorry, but you're just not listening to me. I said already that "I agree with you that the people we’re talking about should not have been arrested".
I might just be bad at Google-fu, but my understanding is that -F processors don’t have Quick Sync, which seems to imply that the iGPU is required in some capacity.
If you know what you want to listen to it’s great.
Recommendations are better on Spotify in my opinion, but still better than on Tidal or other streaming services.

For me Apple Music also wins, because there is no other streaming service providing lossless audio at that price.
It's basically a stream of jpegs - true!
This is how I play through the Ultima series with my eight-year-old. She doesn’t have a device of her own to look up spoilers, she takes notes and draws maps on paper, and looks through them when I’m not available to play with her.
Just recently set up Podman Desktop on Mac for work (on my old computer, I'd used Rancher Desktop on Windows).

Getting everything installed was a little bit annoying, since I use a nonstandard Homebrew prefix, and Homebrew doesn't currently provide a 'cask' for the pre-built Podman binaries. That means that `brew install --cask podman-desktop` requires building a bunch of things from source for me. But writing one wasn't hard, and the install process was good after that.

One issue I seem to have consistently though is that the VM `podman machine` uses hangs. I haven't investigated it, but I think it might hang every time my laptop sleeps, because it's most often hung when I come back to my computer in the mornings, and that seems so damn near every time.

Anyone else have this problem on macOS?
Here is the actual paper:
https://stacks.stanford.edu/file/druid:kh752sm9123/ml_traini...
How is it nicer with Wayland? I have a high-DPI laptop and it works great with X11. What would I gain with Wayland?
Again, depends on which timeframe you're operating on, of course. A solution to the "alarmism" will happen, whether that's EV's or not. And there was a time when the iphone was just 1% of the market ...

And listen, I get it. I'm divided on EV's. On the one hand, I think they're necessary to help sustain our planet. All things equal, I'd advocate for them just to avoid pollution in our childrens lungs. That is 'alarming' enough to me not counting any concern for the impact of climate change.

On the other hand, I get the love of proper cars and wouldn't want to give that up.

For me the happy medium, is having basic, smart and comfotable, affordable EV's during the week (nothing as advanced as a Tesla, which I hope die out, they're complete overkill to what's needed and what we have capacity for). If the majority had this, then we could easily justify thrashing a V8 at the weekend and at the track to enjoy ourselves. To enjoy actual cars.

Anyway ... just p1ssing in the wind.
"But they're ISO certified!" /s

Strictly speaking audit is the wrong word for what I did (I'm not a certified auditor). I don't want to say too much in case I break some confidentiality agreement. Though I'm curious how that will be argued away, or if they get the manufacturer to get their shit together and build a new firmware...
The states of Germany and Austria take away a persons purpose because these states are very authoritative and oppressive. Governments shouldn't try to give people a purpose, but they should develop a country via laws that enable or encourage its people to find purpose. Socialism does the opposite, as it's based on the logic of taking away from people who have, and giving to those who don't, which means taking away from those people who found purpose, and giving to those who don't and usually don't seek purpose but instead search for temporarily pleasures like alcohol.
These are really good tips, sober and undogmatic.
3D Printer Works in Your Body to Repair Bones and Guts
I'm technical and still wasn't a fan. I've been using Notable for a few years now and it's easy peasy.
I am a native English speaker and I’m struggling a bit as well to understand his point.

But I believe you are correct in that reducing requirements for car seats could increase the number of kids people have.

(I was not allowed to reply to your post)
Known as the KISS principle - Keep It Simple Stupid! Taught to me at university 20 years ago and still valid today.
Look past the embarrassment - if this poster gets just a handful of people to register for "shipfast" service, it's well worth the time it took to build and promote this. Those people will likely buy other stuff from the OP as well.

Loads of people on HN could likely build something 'better' by some metric, but of those, how many would still have the nerve to post it in public? I'm not sure I would. Although I've got something I'm planning to post to show HN sometime soon, my default mode is telling me not to post - someone might post something negative, and I'll be embarrassed!

FWIW, the OP isn't sharing the code, and you wouldn't have needed to show your original 1999 PHP code; just share the built service with folks. That's all most folks care about - the utility/value.

That said, there's nothing (yet?) compelling about this service that I've not seen done before. But it might be new/novel to some.
As a side note, I find that people who have never installed a car seat often underestimate how large they are (sometimes very confidently and emphatically, as parents just go, oh, this person is clueless). We have a Subaru crosstrek, a common “crossover” in these parts, and I had to return the first convertible seat I bought because it didn’t fit, and the current one is, well, ok. Would like to move my passenger seat a click back when I’m in it, but better than the infant seat, where we just said, oh well, the passenger can just sit in the back behind the driver.
Yes, he's talking about a study that showed that car seat requirements decrease birth rates because most cars cannot fit more than two car seats in them at one time. The hypothesis is that this causes families to avoid having a third child, and the author is arguing that we should eliminate car seat requirements, or perhaps make them required only for children age two or younger.

Right now in many US states, car seats are required until the age of 12.
Why 'mayn't' may not live on
> BA restriction of use, it must only be used for static display.
> Consider Hackernews: hn.js comes with 21,4 kB. The Y logo on the upper left is a 46,32 kB SVG!

hn.js is just north of 5.2kB (2.3kB compressed), and the logo is 315 bytes.
Yes, car seat requirements, which are increasingly detached from reality, measurably decrease the rate at which families have a third child (because many cars cannot fit 3 seats across).
Can we get checkout video recording out of other grocery stores too?
Spectacle can record a screen, too. It works fine in general, but I had some issues with applications that were running with
Xwayland.
So there is actually a technical reason here. NACS isn't a thing in Europe because 3 Phase power is much more common in Europe. NACS does not support 3 Phase power, and as a result, is not that common in Europe.
It's interesting that you're coming at my question from the pov of 'we didn't go hard enough and decarbonise earlier'. That's not the vibe I got from my parent post, which I thought was 'we've gone too far, green policies are unnecessary/futile' though it was entirely unclear, which was why I wanted clarification.

FWIW I basically agree with you. In the UK most people are reliant on natgas piped to the home for heating and hot water. It's a dense country and we have better options now.
Auto makers are used to making their own platforms, and they won't change. Making a platform is not the hard part, and there are advantages to a custom platform for each vehicle.
If you keep going, the argument is that car seat requirements stop ppl from having a 3rd kid - you can only fit 2 car seats in the back of a car, while you could fit 3 kids without car seats.

I didn’t read beyond that, as it’s an extremely long/rambling piece, but that does make sense - many people need to have all their kids in the car at once, and can’t afford a minivan or some such thing.
"Brainwashed" is a hugely extremist scenario.

The point is that if I ask about topics I don't know about, then by definition I can't judge what is or isn't true. That is also the case on HN where I'm reading a discussion about a topic I don't know about, but that on HN there are some signals such as votes and replies to comments, whereas on ChatGPT there are no external signals. Is this perfect? Of course not. Does it usually work kind of okay? I'd say it does.

For books or sites or most things these signals exist too; I can look up what others have said about it.

Even your uncle at a birthday party has some controls because other family members can call him out on hos bullshit, or they can later tell "psst, what Jack told you is a load of rubbish", or whatever.

There is no "generic review" of ChatGPT because it tells every single person someone else. There is no shared content we're both looking at.

ChatGPT very much works in a substantially different way than most other public sources of information.
Because it's a different threat model: Separating caches per-origin prevents a site A from seeing what resources you requested on site B.

But something like Decentraleyes prevents site A from seeing what resources you requested on site A.

(Or rather, whichever CDN provider site A is using.)

You could have both at the same time, but they are orthogonal. As for why it's not in browsers, assuming good intent, I'd think it's because it requires you to bundle a whole lot of libraries with the browser for it to be useful as a local CDN. If browser vendors decided which JS frameworks are bundled with the download and which ones are not, I'm not sure if that would help decentralisation!
Could be. "Anything is possible," as they say. Personally, I'd apply Occam's Razor and say it's more likely it's not intentional and these are bona-fide mistakes on her part.
sshd still needs to run as root for that, this is pointless. Maybe some people think that message passing to a root process is less of an attack surface, but I don't think there's actually a meaningful difference.
RAG seems to be Retrieval Augmented Generation
Why is it not true? What attack are you protecting against?

> why not just run the browser as root?

Practically, last time I tried Chromium wouldn't let me. But Firefox did, at least.

The better answer is that they can use some level of internal sandboxing so that an exploit affecting one part of the browser doesn't make it out of the browser, and AIUI if every part runs as root it's easier to escape that layer of security.
CCS1 is worse than CCS2 in a couple of ways. The latching mechanism is external which is bulkier and more fragile, and it doesn't support 3-phase AC charging.

NACS does everything CCS1 does in a more compact package with an internal vehicle locking mechanism similar to what CCS2 uses. It also doesn't support 3-phase AC charging but this isn't very common in light commercial or residential service in the US.

NACS / J3400 will likely stay a North American standard though, or maybe migrate to a few other markets like S. Korea which have also used CCS1. That lack of 3-phase support makes it a non-starter in Europe and CCS2 works perfectly fine there.
> they're expecting all software to be rewritten.

ALL software was ALREADY rewritten for the web, so just use a web browser running directly on the hardware instead of bothering with X11 or Wayland or some hypothetical replacement like X12. That's just an extra useless layer that nobody needs.

A web browser is totally extensible and scriptable in JavaScript and WASM. Standards based. Excellent networking support. Streaming video. Secure sandboxing. Remote accelerated 2D and 3D graphics and GPU programming and WASM engine. Not rocket science. Off-the-shelf, well tested, open standards based solution. Problem already solved.

Why this is not the most obvious thing in the world since the Effrafax painted a mountain pink, and hasn't already been done, totally baffles me. It's as if the Linux community would much rather bicker and squabble about X11 -vs- Wayland for another 30 years than solve the problem once and for all and permanently and perfectly.

https://en.wikipedia.org/wiki/Somebody_else%27s_problem

>An SEP is something we can't see, or don't see, or our brain doesn't let us see, because we think that it's somebody else's problem. That’s what SEP means. Somebody Else’s Problem. The brain just edits it out, it's like a blind spot.

>The Somebody Else's Problem field... relies on people's natural predisposition not to see anything they don't want to, weren't expecting, or can't explain. If Effrafax had painted the mountain pink and erected a cheap and simple Somebody Else’s Problem field on it, then people would have walked past the mountain, round it, even over it, and simply never have noticed that the thing was there.

https://news.ycombinator.com/item?id=38442601

https://news.ycombinator.com/item?id=38442660

https://news.ycombinator.com/item?id=38445174

https://news.ycombinator.com/item?id=31988890

https://news.ycombinator.com/item?id=29094938

https://news.ycombinator.com/item?id=29097030

https://news.ycombinator.com/item?id=20182294

https://news.ycombinator.com/item?id=11484148

https://news.ycombinator.com/item?id=5844345
* in north america, which also includes Canada.
Yes, people aren't aware of what's happening. That's a consequence of lazy reporting.

Tesla's charging standard is being dropped and CCS will be used by everyone. It's a shame North America still has years of plug incompatibilities and adapter fiddling to look forward to.

Europe really got EV charging standardization right. The European EV infrastructure is much further advanced than the North American infrastructure thanks in part to sensible standardization.