skysight-inc/HackerNews huggingface dataset:
Browser Extension Safety Check

https://chromewebstore.google.com/detail/browser-extension-s...

In the era of digitization, browser extensions have provided tremendous convenience for our online experiences, yet they've also raised concerns about privacy and security. I, a passionate software engineer with a keen interest in cybersecurity, became aware of cases where browser extensions were misusing permissions. This inspired me to develop a browser extension named "Browser Extension Safety Check"

Why Develop This Extension?

I understood people's concerns about security and privacy. I decided to offer an easy and effective way for regular users to understand the permissions of their installed extensions. Believing that transparency is the first step in safeguarding personal information, I invested significant time and effort into developing this extension to empower users to better understand and control their browser extensions.

What Can Browser Extension Safety Check Do?

The core objective of this extension is to provide users with a clear view of the permissions their browser extensions are utilizing. With a simple click, I can gain detailed insights into each extension's permissions without delving into technical details. This allows me to:

View Permission Details:
The extension presents users with a clear and understandable list of permissions, explaining the specific purpose of each permission and its contribution to the functionality of the extension.

User-Friendly Navigation:
With a user-friendly interface, the extension allows easy navigation through the permission list, enabling me to quickly find the information I need without the need for understanding complex technical terms.

Cross-Platform Compatibility:
Whether I'm on Chrome or Microsoft Edge, the extension seamlessly integrates, ensuring a consistent experience across different browsers.

Enhance Security:
By understanding extension permissions, I can identify potential risks and make informed decisions based on this information, safeguarding my personal online security.

I believe that with this extension, users can explore the internet with greater confidence, knowing that their privacy and security are effectively protected. This effort is part of my commitment to building a safer digital environment for everyone.

How to use?

1. Install It

2. Pin it

3. Open the Chrome Web Store or Microsoft Edge Add-ons

4. Select a extension or Open extension URL:

https://chromewebstore.google.com/detail/json-viewer/gbmdgpb...

https://microsoftedge.microsoft.com/addons/detail/okx-wallet...

5. Click the extension icon

6. Click the scan button
I recently had a similar need for my “real-time” Python program to do some autograd operations – but not on big tensors – and also ended up leveraging Rust as part of my solution. But I didn’t know about rustimport (or cppimport). That’s really slick, and I’m going to file that nugget away for later.
Polysynthetic Languages
Ackshully, worse case is four taps for S or Z
If I ever invent a language, I might try to reuse Go's package management for it since it's pretty good.
> "Wait for the right implementation" (for generics).

Ironically, they still don't have it right. Last time I checked you couldn't have generics on "methods".
> It's fascinating how phones have come full circle.

Except they didn't. How many phones with keyboard are there?

Edit: obviously I'm talking about popular ones.
WiFi and other wireless protocols seem like an elaborate, yet wildly successful, plot to make consumer comms as insecure as possible.
I recall an old Ericsson phone that did this?
Indigenous-led coalition calls for moratorium on terrestrial carbon trade
Mephistopheles in the Anthropocene (2022)
I work at smallstep. Yes. This also works with FreeRadius! We decided to integrate RADIUS into our product since setting up FreeRadius is complicated and, if you're just doing EAP-TLS for Wifi, you don't need all of the features. You don't need to use our hosted RADIUS though.
application: the action of putting something into operation

What's a driver if not something that carries out an action of putting something (an electronic device, typically) into operation?
Automatic differentiation isn't just for machine learning, it's useful in several other applications where you have an optimization problem built of many variables interacting in differentiable ways. One possible guess could be structure-from- motion or SLAM, where the graph is often dynamic and several thousands of nodes isn't uncommon (the nodes would be things such as camera poses and 3D landmarks for example). However, in that case there are other frameworks that are built with that scenario in mind (Ceres, GTSAM), and would probably be better baselines.
Already tried this sampler set? https://www.gouletpens.com/products/notebook-sampler-package...

I think everything I tried from that set so far worked well with fountain pens, though I did like some more than others. My favorite so far was probably the Mnemosyne notebook. The Rhodia webnotebook (not in the sample pack) is fantastic too.

For physics, math, general writing, I'm using Roaring Springs buff colored engineering pads (#15 paper type). Fairly fountain-pen friendly, though not as good as the papers in the above sampler set. I haven't found fountain pen paper with an engineering grid yet though, so it's the best compromise so far. The green 200 page pads are actually pretty good for fountain pens last I tried them, however the sheets were too thin for my taste and tended to eventually curl up where my forearm rested on them. Worth mentioning that the last time I bought these pads was back in 2020 when I got a 24 pack box that's still going strong, so it's possible paper quality has changed since then.

For reference, the pen I'm using is a Karas INK V2 with a EF Bock nib. Ink is Noodler's Black.
That used to be the joke about open sourcing GCL and borgmon, I guess some of which ended up in k8s. Good luck out there!
The real headline is that the NLRB held Google and the staffing agency to be joint employers. Like other big tech companies Google has tried very hard to avoid that designation, and have it be Google contracting with the staffing agency, which employed the workers. See Vizcaino v. Microsoft, settled for $97M in 2000 for a previous round of this.
Yeah, the question was rhetorical. We all know why, sadly.
Interesting decision to leave out movies that were fake, then became real. Like Machete was fake until it became a real movie!
Hey you're right. Just tried finding that one weird movie from The Office, and it's there, creepy stills and all!

https://nestflix.fun/mrs-albert-hannaday/
Ruckus: https://docs.ruckuswireless.com/unleashed/200.3/c-ZeroITandD...
So isn’t that why they have a custom kernel?
Correct, a wifi station client would not be attacked this way. As for the radius client -- the answer is it depends.

For many radius clients used by a common consumer AP, it's been possible for the spoofed radius to just say "okay, authenticated" to authorize itself -- and the shared secret is never used. It's worth noting that RADIUS may use MD5 with that shared secret, which is vulnerable to cracking attacks as well but I have not had to go down the rabbithole that far.

It would be interesting to try this against the Unifi AP brand named in the article and see how it handles it. My understanding is they run a custom Openwrt image so maybe they provide source code.
> their actual employer Cognizant

You're assuming something that's very much in dispute: The NLRB has concluded otherwise that "Cognizant and Google have codetermined the essential terms and conditions of employment [for the YouTube team] and have been joint employers" at all material times.
Could have gone with bigger keys :)
It’s amazing how dogshit llama2 7b is in comparison with 13b (let alone 70b).

The only 7b foundation model that is worthwhile is mistral imho.
> it seemed like it might be genuine

It is genuine. Larry and I go way back.

Source: https://youtu.be/_UGUDVeSQSI?t=872
If you mean that another language with more planning might have caught on, I think that would have been a better outcome.
Wow, how does a wikipedia page on this exist?
> Different people different taste, different context, different standards of beauty.

Every statement about aesthetics is subjective, you don't have to remind me of that. BTW, what did YOU write about Amazon shows 6 days ago?
No one was pontificating about your opinion, right?

Please repent :-)
Fair. I do have an archive folder in the home directory. Also, probably 70% of the space is in a large workspace/ folder that has different programming projects or open source tools in it. There are also a lot of art and graphics files, some raw and some the result of processing pipelines. Much of it is largely static, but not quite in the "Write Once, Keep Forever" category.

I definitely admit that all these could be on other drives, but in this case I have found it easier to just have everything together and make sure folders are organized intelligently. At least in this case, the overhead of having separate backup procedures for different types of data is more than the marginal overhead of simply snapshotting everything.

That said, I do have a 8 TB photography folder that isn't part of this snapshot routine.
I’m still upset with Leo Apotheker for killing WebOS at HP. It was our only real shot at a real 3rd platform that could have some legs. It’s hard to comprehend how much damage he was able to do in only 10 months as CEO.
Adding a runtime dependency on some random webserver seems bad? It could be fixed by using reliable CDN's though.
You can already do this with hostapd under WPA3 or WPA2 - The password alone can identify each client, and activate different configs for each one.

Some commercial APs support this under different names but it's hard to make it work with RADIUS, which is usually necessary on larger installations.

But without preloaded certificates, the clients don't know that they're not connecting to a rogue access point.

Hotspot 2.0 was going to solve that part, but kind of died last year as the WiFi Alliance let their last KPI partnership die off.
I’m glad someone put the time it to show it can finally work.

Would love to do this too, but have a gazillion other projects that are priority.
Signed Distance Functions: Modeling in Math (2023)
Why is it allowed at all to delete packages? The article states that’s it’s not an issue in Maven since you can’t unpublish anything, only deploy a newer version.
Sidney M. Wolfe, Scourge of the Pharmaceutical Industry, Dies at 86
I switched to a fountain pen because I heard that they required less effort to write with, and the amount of writing I was doing for my studies was starting to cause RSI issues in my hand. In that context, as a student, finding a budget-friendly pen was a concern.
I like the idea of a little keyboard that I can attach. But this is a replacement case so it is meant to be on all the time?

Some interesting layout choices. mostly ortholinear but not totally, double size enter key, same size backspace, tab, language globe.

Neato idea, glad to see interesting accessories coming out. This is a hard sell for me.
https://archive.ph/bbUcQ
Oh I see now, it's a phone case with buttons at the bottom outside the phone. No this wasn't obvious. It wasn't even obvious that the picture is a photo rather than an artists' conception or a rendering. And the site is still terrible.
> Bittorrent over Tor is generally discouraged.

Of course, but that doesn't mean it wouldn't technically work for the situations that don't have (safe) alternatives.

> It's _very_ easy to accidentally de-anonimize yourself ...

Using Tails would pretty much solve that yeah?
Personally I've essentially given up on depending on WiFi auth for anything important. For general access, segmenting various users, IOT etc for performance, monitoring and light privacy WPA-EAP and PPSKs with VLANs does some work as an initial first layer fine and in a simple reliable way that works with everything. It's a low pass filter.

But for all sensitive access I use internal Wireguard now. WiFi auth gets a client onto a restricted VLAN in the first place, but from there only a VPN will get to management webguis, sensitive services, or unrestricted internet access. Regrettably the design process for WPA3 was the same old mediocre industry affair. It's not worth trying to put many bandaids on vs just moving things to a higher level. As a practical matter WiFi also just isn't that fast vs high performance clients, it's not like WG has to handle tens of gigabits, so there isn't even any downside in performance.

WiFi auth at this point kinda feels like a polite lock on the screen door. Not useless at all, but anything really important should have other layers in front that are more secure by design from the ground up.
My whole app's source code available for $20
Related:

Leveraging Rust and the GPU to render user interfaces at 120 FPS:

https://zed.dev/blog/videogame

>"To understand how drawing rectangles works in GPUI, we first need to take a detour into the concept of Signed Distance Functions (SDFs for short). As implied by the name, an SDF is a function that, given an input position, returns the distance to the edge of some mathematically-defined object. The distance approaches zero as the position gets closer to the object, and becomes negative when stepping inside its boundaries."

https://en.wikipedia.org/wiki/Signed_distance_function
Interview with Tyler Cowen
I wonder what the viability of a tactile T9 keyboard on the back of the phone is.
I knew something was off about this guy when reading these:

https://www.theguardian.com/uk/2004/mar/30/highereducation.u...

https://www.dailymail.co.uk/news/article-8698199/Stephen-Haw...

(I know it's the daily mail but can't find other links at this time).

"Stephen Hawking's second wife Elaine once flew into a rage saying she had been his 'slave for 20 years', according to a new book"

"Elaine and Hawking divorced in 2006 and he fell for Diana King, another of his carers.
She was 39 years younger than him and suffered from manic depression but Hawking wasn't put off."

Guy was weird, not just because of his exaggerated persona, but also dubious in his personal life. Fits right into the type that would attend such an event. If proven that he was a pedophile I hope he gets erased.
I love this! capacitive keyboards on a piece of technology will literally never get old. https://www.mpofcinci.com/blog/advantages-of-capacitive-touc...

Only issue is I might need to store my new iPhone pro max in the water bottle compartment of my backpack with this case
I'm afraid I didn't hear you last time (did I miss aught?)

Perhaps we should standardise "languages" too: all compiled programming do be done in N-- and all interpreted programming in Piffle. Thou shalt not touch machine code and that unless thou be a priest

... no of course not!

A "standardised" package manager is close to the least of our worries in IT land. Today I updated a .deb based server software on an Ubuntu box and used a built in update mechanism to update its client software - this is a MinIO instance. I'm not worried that it will fall to bits.

Anyone with a Windows box with a worrying number of Visual C++ runtimes might like to remove the lot and install the latest from here: https://learn.microsoft.com/en-us/cpp/windows/latest-support...
It’s not even really in dispute at this point. Companies can pursue an appeal of an NLRB ruling in federal court, but they generally lose.
Why does there need to be a ban? Why isn't simply enforcing existing US safety standards sufficient?
I also get the vibe that digital cloning will be popular. Maybe some extremists will think its unholy and some addicts will lose sense of reality, but for the vast majority of people, I think it's just a user interface - maybe to some particular piece of information in the chatbot-as-librarian role, or puzzle boxes that eventually reveal information once you ask the right question, like Will Smith in I Robot.

What I don't like is that the better it gets the more a radical contigent will start to believe that you're performing brain uploading, and people will want to protect these simulations as people with rights, or ban it to prevent conscious mini-mes from being booted into a simulation and psychologically tortured like the guy in Altered Carbon. Then of course theere's the suicide cults like in the Cowboy Bebop episode "Brain Scratch" - leave your aches and pains behind !

I pray it doesn't get that weird! But if I had kids I wouldn't be raising them to talk to ghosts!
This took me quite a while to figure out. There's a lot of bad info online saying you can't stream using these "external graphic card" adapters because the services think you're recording your screen.

I was ultimately able to find a way around this by disabling acceleration in like 10 seconds, and now it works totally find and I can stream from Hulu. Hopefully this saves someone else the headache of figuring it out.
Shocking a biochemical reaction ceases when external stimuli is removed.

Technology is like acupuncture and astrology of the modern west.
Haha this is awesome, Good Will Hunting 2 is probably my favourite bit from a comedy movie.
Not being able to create new code at runtime is a pretty huge freepass for the compiler to implement stuff a certain way.

You can bet the Go compiler and runtime leverage that assumption.
I use the MagSafe Apple wallet and often turn is sideways to give myself something to hold while I watch videos in landscape. A keyboard would work in much the same way, in terms of what it needs to support and where it’s being held.
Is it "keycloak.example.com" or "kc.example.gr"?

> ...and your keycloak server is hosted on https://keycloak.example.com. This realm will have a base url with the value: https://kc.example.gr/realms/sample-realm/...
keep this ad-free and I will love you forever.
Measurements. Basically the thing that says this is x padding, this is blue-4
Xperia Mini Pro had the best built in/slide keyboard.
It's not my point, it's a long standing observed principal of urban planning referred to as induced demand or induced traffic.

https://en.wikipedia.org/wiki/Induced_demand

https://www.wired.com/2014/06/wuwt-traffic-induced-demand/

My point was that road access introduced through previously road vehicle inaccessable regions often (not always) leads to more human activity and dwelling in the vicinity of that road.

It's not always the case that people appearing from ships, airdrops, or walking in results in roads following them.

When my own family first settled in Australia it took 80+ years on the European side for roads to reach them (they used flat bottomed boats on tidal flats to transit goods and livestock), and some 70K years or so on the non European side.
So do you have to switch the wifi on your phone to access the IoT stuff?
I use an (awkwardly) pocketable keyboard as my daily driver. It's cool to be able to do real tasks but also not really a big enough value add to always keep with me.

https://www.amazon.com/MoKo-Ultra-Thin-Rechargeable-Compatib...
Mild suggestion: experiment first. LLMs have been observed to emit nonsense such as getting stuck indefinitely emitting the same token, etc. Do you really want dibs on that?
it's worth noting that hostapd has a built-in EAP server as well for running Radius.
check the config sample for "EAP server"
https://w1.fi/cgit/hostap/plain/hostapd/hostapd.conf

As for securing them, there's several labs security researchers provide for breaking into "enterprise wifi"

https://github.com/sensepost/shinai-fi
https://github.com/r4ulcl/WiFiChallengeLab-docker
Yes, if they only make windshield wipers for 1 car company.

In many places in the world you're only an independent contractor if you don't work long term for 1 single client and only if they don't dictate all your working conditions.

Because that would be the description of an employee and the condition is called "hidden employment" and it's illegal in many jurisdictions.
> I don't want anything in my Rust dependency tree depending on node packages.

This is not what they’re arguing for.

> Custom builds, cross compiling, codegen, ...

That’s great, none of that is “package management”.

The point is, every language has a way to specify dependencies, find the correct versions, and download them recursively. Could that piece be made generic?
I’m far from the first to think of this. Several people — perhaps inspired by creepy Black Mirror episodes — have tried to fine-tune an LLM on their SMS or WhatsApp history in an effort to create a simulation of themselves.

It's a much older concept than Black Mirror. Ever since Markov chain IRC bots got popularized in the late 90s and early 2000s, people have been trying to train their virtual doppelgängers. I'm sure it won't be long before you can pay to have a post-Mortem ghost of yourself duplicated in a cemetery seance style MMO to perpetually live on and interact with other people who have passed on.
I think tinygrad is faster.

https://github.com/tinygrad/tinygrad
no-one-left-behind[1] was not even a year ago, and yet the link on npm[2] explaining why it was removed is already broken. Classic JS ecosystem.

1: https://github.com/npm/feedback/discussions/858

2: https://www.npmjs.com/package/no-one-left-behind
If you work in an office building, I'm sure that your company hires a contractor to do janitorial work. Or maybe it's the building itself that hires a contractor to clean all the floors. But at the end of the day a worker is still going into your office doing some piece of work but they're not employees of your company.

Abusing the contractors employment is a very specific claim, employers are not supposed to use contractors for the same work that full-time employees perform. It's not about in the same badges or working in the same offices or working on the same equipment, it's about the work that they are performing.

It's not abusing contracting systems if a company is using contractors for a specific class of work like answering customer service tickets or data ingest. If you've got details on how Google is using contractors for the same work as full-time employees, it'd be really good to share.
Companies should be able to be sued for things like this (deliberately leaving such a big vulnerability there without even warning the customers).

It's actually maybe already possible to consider it a fraud
All cops are broadcasting – TETRA unlocked after decades in the shadows [video]
Then people should use those languages. From the beginning Go has been about simplicity and utility, not about providing multiple patterns and alternate syntax.

I would also argue that repetitive code is a failure of the engineer who implemented it. If writing code is repetitive then people may want to look into generating it instead.
Sea Slug Forum
Just a nice old-internet community (that appears to have stagnated in 2010 unfortunately - http://www.seaslugforum.net/find/23764).

The forum has many informed, interesting answers from members of the community - http://www.seaslugforum.net/find/7782

There are even recipes! But don't eat sea slugs in general, these are probably mostly sea cucumber recipes - http://www.seaslugforum.net/recipe.htm
They gutted the key FOSS teams during the layoffs, the c-suite hates real FOSS, it doesn’t look good on Ruth’s spreadsheet.

Of course, pretend FOSS like Android they strategically tolerate, but beyond that unless it results in an ad click it’s useless.
Ah this old pre-existing condition scam.
> why WPA3 doesn't have a mode where a password is used for the initial connection, but then the client and AP generate a keypair and each store their half and use that for all future connections.

Because it would regress security back to inferior bearer authentication.
What I would love to see is a comparison between Mexicos minimum wage (about $1.5 USD per hour) and Carlos Slim (richest man in Mexico who ali was richest man in the world some years ago).

The disparity in Mexico is crazy.