skysight-inc/HackerNews huggingface dataset:
I’m not sold on their methodologies.

They examined one colour, then changed it in the final selection to be more green (which was one of the suggestions).

After shifting that original turquoise from the paper into green it’s now in the central neutral point at which the largest groups of colourblind people cannot differentiate it from white, which is the colour used for reversing lights (and also a light in the taillight group).

In this paper they should have reviewed the new suggested colour as well; the original turquoise does not have the same confusion with white light, so they’ve effectively taken the pros from a previous result and mixed them into the pros from their hypothetical changed result, without reexamining the new one.
Holidays are excellent times for hackers to take advantage. It’s not just Christmas or other Western holidays, either.
Extend this principle to any holiday/world conflict/anniversary of conflict made into holiday/calendar new year and then adjust your time of attack.

protip: US companies with offshore groups are usually underfunded, understaffed, and underskilled. Time to see if that disaster recovery environment works!

Happy holidays to those who encounter system stress tests. Can’t spell salary without some elements of slavery…
I think the title is fine.
> has all of his hacking tools available

So there's this wonderful program called wget.
Yes. The adtech industry is a hive of scum and villainy. They'll use every bit of data they have access to in order to screw you.
Humor imitates life:

Russia arrested anti-war protesters holding blank signs: https://www.newsweek.com/russia-ukraine-war-invasion-protest...

But apparently this a thing in many countries, and there's even a Wikipedia article about this form of protest: https://en.wikipedia.org/wiki/Blank_piece_of_paper

Ah, to be in America:

>In 1970, Anna Halprin organised a "Blank Placard Dance" by members of her San Francisco Dancers' Workshop. They paraded, dressed in white, while holding blank placards. She explained, "...there were so many protests going on and this way each person watching us could just imagine whatever protest slogan they wanted on the placards."

It's nice to be able to protest with blank signs because you want to make a joke, and not because of fear of arrest.
The foolproof way is to not send codes as a 2FA (be it mail, SMS or whatever). There is always a risk that the user fails to verify where they're putting that code. Instead use something that verifies the domain without relying on the user, e.g. U2F or passkeys.

In that case the user needs to be fooled to sent the physical device or passkey-app-backup to the attacker. This is much more suspicious and needs a much worse fool than someone entering a code after they already entered their user+password.

If you know that the user uses the same browser to open links sent via mail as they use for their login: For the 2FA step, set a cookie with some unique value on your login domain and sent the user a mail with a link. Opening the link only finishes the login and starts a valid session if that unique cookie is present.
This makes it harder for an attacker, since they need to inject that cookie into the victims browser, which means they need to find an XSS-style exploit. Of course you then want to reduce the attack surface by putting the login function on a subdomain of its own.

And obviously this fails if the user is about to login e.g. on their personal computer and then tries to verify the session on their company phone. This can be good or bad, depending on the scenario.

TBF, I wish some companies would use even that basic code-by-whatever 2FA. I've seen cases which have like 5 different domains, all with various logins that customers and employees use. Want to phish them? Just register another domain that looks similar enough to the others and sent some mails. But then there are still services limiting the password length to something like 16, so I think we will still have plenty of work...
This dude ran doxbin for a bit. He actually ended up being doxed there himself (white) nearly a year ago. He's definitely a piece of work.
One problem for OLED screens compared to LCDs is their rather low maximum brightness. Unfortunately it doesn't seem like this new blue dye will change much about that.
I am a very happy customer of Beeper. It's a hard task and they're basically doing it for free. And all of my chats are more or less in one app. I even have my iMessage access back today.

So I'll say that I get where you're coming from, but also, I believe him and Brad!
Look for lights with photometric reports which show high values in the blue (400-500 nm) and red (600-700 nm) parts of the light spectrum. That's what plants crave. These can be all over the map in terms of price, but if you want it to be nice in living spaces, aim for something with a neutral-to-warm temperature and relatively high CRI. Your price point will increase, but these lights last a long, long time and make a substantial positive difference in my opinion.
>CFAA violation for logging into your own iMessage account and using the service

Not fucking likely
the best part is that I, as a google voice user, still don't have RCS support even though it's a google product.

google implemented the exact minimum they'd need to give them a foot to cry on in the courts, and no further. and now that there is a mandate to implement RCS, they almost certainly will choose to kill google voice rather than implement it. I am already planning my exit strategy, because otherwise they'll take my phone number with it. and this is not trivial, we are talking about buying another phone (hopefully it will make it until the next-gen iphone with N3E) and paying for two lines for a couple of months. This is a pain in the ass for me.

and google has already embrace-extend-extinguished the standard - their encryption implementation is proprietary and they've refused to let anyone interop, so essentially they have put themselves as imessage 2.0 but with google as the man in the middle this time.
"Space Heater Offers 50% Cash Back On Heating By Training AI In Your Home"

https://www.forbes.com/sites/johnkoetsier/2023/12/09/space-h...
At this point are academic papers simply peer-reviewed blog posts?
Youre right basic social skills are absolutely a baseline but being charming/sociable/a social butterfly and being able to integrate into a team, collaborate, express technical ideas to others and vice versa arent necessarily the same thing. My most effective teachers/mentors/role models throughout my life were often by all accounts kind of awkward sometimes. I think we as a society put lots of emphasis on the former and conflate it with the latter.
I have to mention it again, thank you so much for your posts. Its extremely unfortunate that your submission about Hannah Arndet and Einstein got flagged and doesnt show up in your history anymore https://news.ycombinator.com/item?id=38644318

For me it seems to be of vital importance.
https://archive.org/details/AlbertEinsteinLetterToTheNewYork...
Please fsfe.org, I’m dying to know more about “The right not to be advertised to”
https://archive.is/IKSgF
I can pretty much agree with this assessment. I didn't personally think the article was all that smart or curious.
I mostly agree, but it seems wrong to me that the side serving up content even has the ability to tell how you choose to display it. It's like a magazine with embedded cameras that self-immolates if it sees you take out scissors to cut it up for scrapbooking. Feels like a gross violation already.
"During Thursday’s hearing, the court heard Kurtaj “had been violent while in custody with dozens of reports of injury or property damage,” "

This is why he was committed, not because he hacked Rockstar. Lesson 1, don't commit ransom; lesson 2, failing lesson 1, don't get caught; lesson 3; failing lesson 2, don't commit dozens of violent acts while in custody
Tesla's definition of "crash" is "we count all crashes in which the incident alert indicated an airbag or other active restraint deployed."[1] Waymo's definition of "crash" includes minor fender-benders.

[1] https://www.tesla.com/VehicleSafetyReport
> If no one "needs" them, then they won't get viewers and thus eventually won't get ads, either.

Demonstrably untrue; there are plenty of spam sites that hide themselves and play the SEO game well enough to (temporarily) get my eyeballs. These sites only satisfy a "need" insofar as my grandparents have a "need" to respond to emails from Nigerian scammers.
Through the way things are set up, Firefox has Mozilla Foundation as its number 1 priority. Corporation makes money for Foundation, Foundation steers everything.
I'm totally fine with this.

Content is paid with your eyeballs or with money. If you're not willing to pay with your eyeballs, then you shouldn't get the content. I think that's fair.

In China where copyright laws aren't enforced, there's simply no economic incentive for producers to create content...let's not go there.
I am currently viewing this on ethically sourced rfc1149 (birds gave consent via a scientifically proven “brain electrode interface”), manually decoding packets using an abacus made out of various animal droppings foraged on the forest floor. If I can’t view your content this way, it should not be on the internet.
Part of the problem with that is that in the modern world, we use the word "friend" too quickly, too easily, and continue to use it even after that person has demonstrated that they are not friends.

If you have acquaintances that you call friends, quite subconsciously you'll have less regard for them than for family. And that might actually color how you'd regard true friends.

I've only ever had a handful of friends in my entire half-century life. An exceptional person might have 8 or 10 or something like that. I doubt that most people have had any at all. The modern world isn't very good at cultivating real friendships.
> You cannot arbitrarily bypass requirements to use it how you want to use it and expect Apple to just organizationally shrug their shoulders.

Corporate policies aren't absolute. It doesn't matter if a provider dislikes the manner in which it's services are used if that use is found to be protected by law, which is obviously what Beeper is hoping for.
In the example I linked, the VanJS state cannot contain an element reference.

This would lead to unexpected results. So you have to be careful with state management, regardless of whether it's automated or not. There are similar pitfalls, including performance issues, with any state management system, hence dedicated state management solutions like Redux exist to address this.

The core of the argument is that complexity sometimes cannot be avoided. You can quickly wind up with moving this complexity elsewhere, e.g. by pulling in an additional library dependency. This results in having to learn, master and manage additional dependencies. Whether that's fundamentally better than the explicit and straight forward way depends on the scope of the project and its specific requirements. There's no silver bullet in any case and pros and cons with every approach.
He may have emotions but certainly he doesn't care about those of others and the damage he can provoke. He actually wants to continue to be a criminal.

FTA:
A mental health assessment used as part of the sentencing hearing said he "continued to express the intent to return to cyber-crime as soon as possible. He is highly motivated."

The guy needs help because he's autistic, and watched closely because he's also a sociopath.
Kind of tangential, but it's also kind of surprising how difficult it is in LaTeX to make a plot of an equation.

Say I have Equation \ref{eq}. Why can't I just say "plot \ref{eq} for x from -6 to 11" and get my graph?

And yes, I know about pgfplots, PSTricks, TikZ etc. But in all those cases, I need to define the same equation twice, in different syntax to boot. It's kind of unsatisfying.
Please don't be patronizing. It's insulting and uncalled for.

Perhaps we simply have a disagreement? Rather than either person not "getting" something.
this is also how regular messages work, no? If you save 2 numbers under the contact they would show up as the same conversation
With bundler like esbuild, all JS code, including 3rd party libraries can be bundled into a single file. You don't need an extra round trip for a library.
Yep! I use an adblocker but I can't fault a site for trying to keep me out.
I would say that most people think of Android as the complete operating system experience that comes preinstalled on most Android phones, and that experience depends a lot on proprietary parts, especially Google Mobile Services that are apparently deeply integrated with the OS (could it be considered part of it at this point?). Plus, these proprietary parts are not fully nor easily replaceable as you almost certainly have to wipe the whole operating system to do so.

So, in my opinion, calling Android an Open Source OS is kind of misleading, but it's a matter of how you interpret what Android is. I would rather refer to Android as the final product (which relies on proprietary software), and to AOSP as the open source project which Android is built on.

Plus, I think that AOSP and Android are considered two different entities and I doubt that AOSP is under the trademark of Android.
I don’t think this should be surprising. Traditional knowledge (which I would group bro-science under) contains a lot of legitimate insights. Bro scientists are focused on getting measurable results, and they know when they achieve that. The main downsides of their lack of rigour are that they don’t have very good mechanisms for eliminating useless superstitions, and of course the lack of safety controls in their experiments (which I think most of them probably understand and accept).

Sumerian shamans were also right about chewing willow bark (along with countless other examples of that sort of thing).
The last few times I've been through Schiphol those machines were turned off.
I don't have a huge problem with the government doing the facial recognition.
But recently I boarded a plane using facial recognition. How did the airline know who I was? Presumably they got the info from the government. But why is the government giving that info out?
An asteroid could weigh millions of tons. For even a tiny deflection I think you would need quite a few tons of propellant. It would be quite a challenge getting that onto the surface of the asteroid.
Oh, “brick game” like Tetris, I initially assumed “brick game” like Breakout.
I often wondered why German pharmacies continue to stock homeopathic remedies. Maybe phenylephrine was our equivalent?

As someone who suffered chronic congestion, and had experienced the effectiveness of pseudoephederine, it was immediately obvious that phenylephrine did nothing. It's just surprising that this "open secret" has taken 20+ years to be publicly confronted.
Those are the ones we know about. If you think about the problem, it really is a very difficult one to solve. We're attempting to find and track tiny objects that could be anywhere in an absolutely massive volume of space using almost entirely ground based equipment that is hobbled by competing demands, atmospheric distortion and a very inconveniently nearby star that halves the observation time and makes it really hard to find objects on that side of our orbit. For all the fancy animated maps of the many asteroids we have located there are likely still a very large number of other asteroids we don't know about yet and may not find out about until after the fact.
> In the thread to which you replied, somebody mentioned that it’s possible to do that on top RCS, and Google already did it

Google made a copy of iMessage since it is closed source and can talk to only to the same app. How is that better?
Of course, that's kind of also why nVidia is trouncing AMD in ML/GPGPU. AMD chased after the big iron, but nVidia got stuff working on consumer hardware… (their early lead definitely helped too, of course)
A Gingerbread ESP32 Dev Board
I certainly would miss 2k a month - it certainly whosnt be worth while one of us working at that level

But stay at home parent isn’t a thing nowadays.
There definitely has been a level of war voyeurism on social media for the past several conflicts.

Gratuitously watching people die, I suspect, won’t really change anyone’s vote, or to volunteer, or donate. At least long term, because the violence usually is the attraction, not the conflict. And there will always be a new conflict.

A few key events in history have happened because of, lets say, acute exposure. But chronic exposure, to your point, possibly makes our judgement worse.
One way to approach this would be to interpose all calls to the TCP interfaces (pretty straightforward with Wasm Components), and tunnel it using Websockets (or whatever) to a server that can make the actual TCP connections on your behalf. So the application running in Wasm doesn't know any different, at least.

I guess that's not quite what you wanted, but browsers don't allow making arbitrary direct TCP connections, so in general I don't think there _is_ a way to do what you wanted.
Right, but if you're already partially paying (through your taxes) for childcare, the change in costs between not having children and having children is dramatically lower. And the financial costs of raising the next generation are shared more evenly across the population, instead of being concentrated on the people that are also doing the majority of the actual work.
I'm not sure the VA is a good example to hold up. Aren't VA hospitals notorious horror shows?
If you’re having trouble following his sarcastic post and my sarcastic reply this might not be the right thread for you but here goes:

He seems to be advocating for TikTok to have the ability to jam his view of reality down children’s throats but I think this is a lousy idea.
It means a publisher ranked possibility of a positive return on investment for that book to be higher than the books they decided not to publish.
I’ve never really liked “colourblind” as a term because I can see colour, just differently, which always surprises people in the “oh, what colour is this” game they play after finding out.

I’m not a fan of “chromatographically challenged”, I would prefer colour vision defficiency even to it.

Dichromat, or anomalous trichromatic are accurate, but I don’t think people will adopt them…
I have bad allergies and have at times relied on Sudafed so that I could breath through my nose. It was apparent to me the very first time I tried a product where phenylephrine had replaced Sudafed that phenylephrine does not work at all. I never purchased another product with phenylephrine.

I've found that conservative and non-continuous use of Afrin is a better option for me.
I’m not saying on-device performance will ever be comparable to cloud, it’s probably a different use case and market at this point.

But 1, it’s still a profitable business to be in, so why shouldn’t OpenAI go there? And 2, more importantly, as hardware and software become more efficient, in the future on-device might be good enough to put up a fight and start eating the cloud. Seems risky not to go there.
For me, the problem that internet ads have that older media ads didn't is all the spying that comes with them. It's the spying that elevates them from being incredibly annoying to being just plain evil.
Energy abundance doesn't mean at a loss. It just means that excess energy that would go to waste can be used very cheaply, for all sorts of stuff that never would have been able to be accomplished before. Take CO2 extraction. It really isn't feasible, partially due to cost. But with free energy, it becomes more feasible (ignoring all the technical hurdles). Recycling becomes more efficient, all sorts of processes that are better for the environment but currently expensive will become possible.
I feel surprised by how succinct, easy-to-understand, and sensible the policy (M-23-22) is:

> Default to HTML: HyperText Markup Language (HTML) is the standard for publishing documents designed to be displayed in a web browser. HTML provides numerous advantages (e.g., easier to make accessible, friendlier to assistive technology, more dynamic and responsive, easier to maintain). When developing information for the web, agencies should default to creating and publishing content in an HTML format in lieu of publishing content in other electronic document formats that are designed for printing or preserving and protecting the content and layout of the document (e.g., PDF and DOCX formats). An agency should develop online content in a non-HTML format only if necessitated by a specific user need.

https://www.whitehouse.gov/omb/management/ofcio/delivering-a...
Ads in the street fund...something.

I ignore them as they aren't terribly targeting, and I'm not an impulse buyer based on some pic of an overly happy smiley person.

Inasmuch as I'm not obligated to fund the advertisers and companies I see in the streets, the same is true of the net.

I owe them nothing - especially as they try and track me. I leave my phone in the car when i go shopping so location isn't a thing they can utilise against me, which they would if possible.

Having said that, i am looking after a friends dog at the moment. I walked past a store that sells royal canine a few days ago... got an ad for dog food on amazon, and in my gmail.

Coincidence?
Possibly.
Am i nervous?
Absolutely you should be too.
Google made a e2ee extension on top the standard that deviates from the RCS spec thus it might as well be considered another spec all-together as it’s no longer able to communicate with adopters of the plain RCS protocol in a meaningful way.

Their extension is proprietary and unavailable to anyone except themselves and Samsung. This means that Google is making a bad faith argument as they’re not advocating for RCS, but their own incompatible version of it.

https://www.phonearena.com/news/rcs-support-on-iphones-what-...
I have about a dozen cousins, but only one in the US - and she is not nearby either. I basically grew up being strangers with them as a result.

Obviously the means to reach out and connect are now available, but we’re still just too far apart. Plus now that we’re all grown up, mostly married, and some with kids, there’s less time for everything.
> I don't understand the whole 'we don't want to break up a loose conglomeration of rock'. I'd actually think breaking an asteroid up into multiple pieces that can be 'eaten' by the atmosphere would be easier/safer?

Energy.

A large enough meteor impacting the Earth at speeds high enough to cause an extinction-level event has a lot of kinetic energy.

Intuitively it seems like the troublesome part is the meteor hitting the Earth and causing earthquakes, tsunamis, and clouds of ash and debris as a result. And those things are really bad. But they’re a consequence of that mountain of kinetic energy.

So you break the asteroid up into a cloud of dust. Fantastic! No more crater, no more big boom. But you still have a giant ball of kinetic energy headed right at you, and that energy is just going to dump into the atmosphere. And boil it.

Of course that’s even assuming we totally vaporize the thing. More likely is instead of one multi-mile asteroid we have a bunch of giant chunks that will spread death and destruction all across the side of the planet unlucky enough to be facing it… before boiling the atmosphere anyway.
> a completely ad-free internet would not have had the commercial lift we've enjoyed these past 20-plus years.

Would that be a bad thing?
momentum = mass x velocity
He is a danger to crappy security and those that fear free thinkers like him.

There ought to be laws against locking people like him up.

Rockstar said it cost them thousands of hours to recover...they could have asked him, and it might have cost them orders of magnitude less.

Rockstar has hired the wrong people, lol.
Cosmo isn't free.
What do you mean by "still"? It's a quite recent development. They didn't have a king for decades.