skysight-inc/HackerNews huggingface dataset:
> The Chinese government can easily use its authority to tell the average Chinese to eat it up.

In theory, so could the US government. It has done exactly that before on a smaller scale. It would do it for housing too if it were deemed a good solution to the problem. I expect what you are implying is that Americans lack confidence in that being a good solution to something on a grandiose scale, like the housing situation, to see it though? That is something that appears to be true.

But then why would the Chinese people have that confidence? The authority can tell anything it wants, but without the confidence of the people it isn't going to go anywhere.
Agreed.

> "We recently conducted a penetration test with the goal of compromising the internal network of a client in a Windows environment. As usual, we managed to get administrative access to the domain controller"

This article feels like click-bait, when they buried the lede.
> I think I could teach the latter about ten times faster.

I've lectured computer science at the university level, and I think you could introduce all this information to a CS undergrad pretty coherently and design a lab or small assignment on it no problem. Maybe you could ask them to parse some emojis that require multiple 32-bit codepoints.
Aeroflot Flight 1492 is a perfect example of this. Passengers were actively working to get carry-on bags down the emergency slide as 41 people were burning to death in the back of the plane.
I'd love it to work on the RP2040, and perhaps even an ESP32, but we're not there yet. Just yesterday I converted FrameOS from being an interpreted python app to a 3MB compiled binary, so we're half of the way there. I'm not sure what changes I must do to get it working (e.g. integrate a wifi driver, remove GC and threads, etc), but it's in the realm of the possible.
Boy, 13, Is Believed to Be the First to 'Beat' Tetris
along with most of functionality, yeah, no
There is a lot of discussion of recession and the difficulty people are experiencing finding jobs. Expensive energy policies, like what we're getting right now, has a multiplier effect on economic drag, which impacts hiring.
Is his name Satoshi?
I have a family member with mental illness. A difference between treatment for mental illness and treatment for other diseases is how open-ended it is. You won't give someone chemotherapy forever, but there isn't a clear endpoint for psychotherapy, and patients may not find psychotherapy to be unpleasant and not be motivated to end it. Mandating insurance coverage inevitably raises premiums and causes some people or employers to drop insurance.
an average low of 0 celsius in the winter is a LOT warmer than Canada, except maybe on the west coast. It's probably warmer than the Nordics too, and maybe Russia.
It could be through social engineering which is the easiest way.
This is great. In general the paradigm of simple web app to solve a problem I think is good.

Most "products" in the sense that word is used are too bloated to be viable if you just need it to do the basic thing.

Kind of reminds me of invoicedragon
When You Are Old – W. B. Yeats read by Cillian Murphy [video]
Let's not fall for 23andMe's attempts at victim blaming. They offered the service, and they failed to implement to reasonable security practices. Their process allowed users to pick "obviously" flawed passwords. Well, those passwords weren't obviously flawed enough to bar their use, but obvious enough to blame users afterwards.... yeah that's BS.
This is much nicer! Added to the endless list of weekend projects.
> (the font is great)

I also want to shout-out Berkeley Graphics, who made the monospace font. It's been my favorite for some time now.

https://berkeleygraphics.com
At a much lower ranked university, I had friend who forgot quotes around a couple of quotations of prior art that made it seem like she copied with citations. She had to spend an extra semester to submit a new thesis.

It is alarming how soft academia and Harvard have been on Claudine Gay.
Anecdotally I have found the amount of books I read has skyrocketed since I got a library card. I used to hesitate at book stores trying to decide if a book was worth $30 and the space on my (already full) book shelf. Now, if I hear about a book that's even remotely interesting, I check it out from the library almost impulsively. If I don't like it, I don't finish it. If I really like it, I buy a copy. The checkout deadlines also provide a nice motivation for me to finish a book.

I went from reading less than 5-10 books a year best to reading 40 books in 2023. And the more I read, the more I want to read.

I am spoiled, living in NYC, as the NYPL and Brooklyn PL between them have a pretty extensive catalog, and it's rare that they don't have a book I want, even recently published books. There's often a wait list though. It's also easy to get a lot of reading done during my commute on public transit. We still don't get cell service on the MTA between stations, so books are the best form of entertainment.

Of course, I suppose if everyone used the library exclusively, writers would make very little money. But I like to think it works out. I bought more books last year than I did before using the library, and attended a few book talks & signings at my local book store.
> Nothing on 23andme’s end failed

Other than allowing at least 14,000 login attempts from the same system without blocking suspicious activity. Nor using services like haveibeenpwned to prevent users from reusing passwords.
You always know you’re in a strong position when you have to resort to “stop hitting yourself” or “don’t make me hurt you, I don’t like it when you make me hurt you”.
This article claims that Reddit moderators are able to shadowban users. Is that accurate? I'm not finding any evidence to back up that claim.
Because they dont know about the Plum Bacon Pizza... Taste is just a personal preference but people enjoy to ignite the most deeply instincts by trivial things.
Can you name any of the 48 states that you claim some part of Ontario lies within?

No?

That's because it doesn't. No part of Canada is within the United States.
Maybe he was an NFT all along.
I have used Barrier [1] in the past to connect a Windows and Mac machine side-by-side. It's quite powerful, but probably not really as user friendly as the posted solution.

[1] https://github.com/debauchee/barrier
I've been without a car for 4 years now, and it is becoming a burden. For the first 2 years it wasn't so bad because of lock down. Now, even with my e-bike (which I love and would continue to use if I had a car) there are certain things I just cannot do. Inclimate weather is a big one, and in my location, June-September is inclimate weather of 100°+ weather. Carrying things home from the hardware store is not conducive activity with my e-bike. Large item purchases, blah blah blah. If I were to rent a car suitable each time, I could just pay the monthly car payment
Go 1.21 is the version from which it is noticeable that they are pushing towards (re)implementing things that were lacking before due to missing support for generics.

Like the new slices package, meant to do common operations on slices, that is brand new on 1.21.

I wouldn't be surprised to see more and more new additions leveraging generics in next releases.
France has given Haiti hundreds of millions of euros in aid.
That's another step in the right direction, but 23andMe is the kind of service that people create an account for and then don't use for years at a time. Still not a complete solution.

And I agree that mandatory 2FA isn't a good answer either. As someone who uses long, random passwords on all websites, I like to be able to choose whether to add 2FA on top.
One of the first medical instruments I developed code for featured automated precision pipettes (precision measured in single microliters) for sampling reagents and human body fluids.

We had a guest once who used to be a lab nurse and mentioned using mouth pipettes. The looks of horror on the scientists in the room was palpable!
> see if there's enough time for this code or if I should wait for the next one, type the 6 digits into the site...

In my experience on most services (not sure about paypal specifically) there's a grace period where a code that just 'expired' is still valid for another ~10-30 seconds? So... at least you can skip that part.
Yes, they manufacture/sell/service printers and multi-function copy/print/scan/fax machines. They also do some "services" things, although not as much as before since they divested the horrible ACS merger/acquisition a few years back.

A decent number of the actual machines sold under the Xerox name are designed and/or manufactured by 3rd parties (some are subsidiaries or former subsidiaries like the old Fuji/Xerox group) but a handful of the high end machines are still fully designed and manufactured in the USA. Lots of the toner is manufactured in the USA, too.
The OS has not changed. This can be checked in any standard text box, like the comment fields here. Presumably they wanted a custom text box to do some kind of processing as the user types and did not bother re-implementing the standard behaviour properly.
Pathetic headline.

Quote from the article: "He likes to celebrate each win with “just a kebab and a can of Tango, to be honest,” he said, referring to a popular orange soda."

So he does not 'live' on them.

And he is 16, if he as doing anything seen as 'adult' they'd be down on him like a ton of bricks.

https://archive.ph/XIzJi
I had the same thought. This very much feels like a derived work. Since they (aim to) replicate the behaviour if the gnutils, and not just some generic posix utiles then I think it would be hard to argue the GPL doesn't apply in a legal sense. I think in a moral sense it very much is a violation, since the GNU authors presumably intended for their work to be built on only by further copyleft works.
As Matt Levine puts it[0]:

> In principle the companies are not supposed to give the investors material nonpublic information during these conversations. In practice, the conversations are not social calls. The analysts hope to get something out of them. It's rarely "our earnings are going to be way better than anyone expected." It might be something vaguer and squishier than that: hints, body language, a general sense of how management thinks about the world, its industry, its competition, its opportunities. Or it might be something much narrower and more specific: The company might help the analyst with particular line items in her model, adding nuance to her sophisticated understanding of its financial situation.

Specific clarification on details of their new "business unit operating model" would be a relatively normal thing to talk about. It's not something that is a smoking gun for insider trading, but can be written off as just general clarification of an industry term of art. This would be a normal thing for business analysts to get a deeper dive into.

0: https://www.bloomberg.com/opinion/articles/2015-07-31/when-c...
they have been around since pre chatgpt era, and not relevant to chatgpt. chatgpt understands text, coqui reads text. they're a text-to-speech / voice cloning/voice generation company.

their founders were working at Mozilla when Mozilla sunset its speech products. They founded coqui and released text-to-speech models based on their previous work. They tried to do a mix of open-source and closed-source stuff and introduced weird licensing concept that I never understood. there are many mediocre to good open-source TTS alternatives. they might have struggled to differentiate.

it's sad that people complain about big tech dominance, yet don't pay startups. i dont know the founders but i suspect they will join a big tech company as most of the Mozilla team did and we'll keep feeding Amazon, Google and Microsoft.
Code compilation is a common example. In many languages, when you do a clean build of a large project, you run a large number of short-lived processes.

With command line tools, the dominant design philosophy is that a program completes one task and exits. The tasks may be large or small, and the same tools are often expected to handle both.
I upvoted but wanted to say Thank You. This is very useful for me personally, and materially improves my life.
Don't be a dick. http://git.9front.org/plan9front/plan9front/HEAD/info.html
If was indeed a DB leak, as claimed, some sites will have emails/hashes/passwords/last know login location/ip potentially. It’s not a stretch to think that a botnet could run from not only the same country but even the same region or city as the last known login or IP cluster.
You're correct, 386 support was dropped after OpenBSD 4.1 (May 2007), and 486 support was dropped after 6.8 (October 2020). If I recall correctly, the project compiler changed after 6.8 and wasn't able to build the entire ports tree when targeting the 486, so they now target Pentium (i586) and higher.

Even though it's technically out-of-date and unsupported, an OpenBSD release from 2020 is still pretty impressive for the DX2 (1993). :)
That's only in terms of the driver interface, right? My understanding is that the userspace interface is extremely stable.
They mentioned not wanting to use keyloggers which would be their standard approach.
Pretty cool, I personally prefer the sound selections on Forest, though.
The difference is that when you fuck up, you or your supervisor will be held accountable. Everything is fine until it isn’t.

With the LLM, everyone will clutch their pearls and be shocked.
How Crowded Are the Oceans?
It is. I checked earlier today.
On Apple devices it's super easy, barely an inconvenience
This is cool. In general, analytics API seems like a good beginner project to recommend as a Todolist alternative.

Cheers to learning
Weird! Thanks for letting us know. It's just sending to MailChimp but we'll take a look
Piracy did the same thing for me. If would read more than 50 pages in a book i would buy a copy, if not i would delete and move on. I think i fully read 21 in 2023, and ditched probably about as many before 50 pages. I absolutely bought and read more books than in 2022, not even close.
You can use password vaults without creating a single point of failure by enabling 2FA for the accounts in the vault, without storing the keys there. Of course, it would still be bad if the vault was compromised, but it would be unlikely that anyone could access those accounts without accessing your 2FA.
> Switching language to Rust and changing the license does not make for a drop-in replacement, I would say.

Why?
Claudine Gay Resignation Overdue
aye. long standing back, knee, and hernia issues from working out hard in the Marines.

form and recovery count for a lot, people!
>it was the US who led the world in opening up to China in the 90s/early 2000s, opening its markets to China, bringing China into the WTO, etc. (all at great cost to middle class Americans). China was an economic basket case and incapable of developing on its own. No country in history has been more generous to another.

This is hilarious revisionism. We didn't do any of that out of generosity, we did it for profit. We saw a huge pool of cheap labor and decided we wanted to let our companies exploit that. We rubbed our hands together and grinned while selling them the proverbial rope.
How can this work "for German users"? Why is this not a "for a Firefox user"? I am German - how do I know this is enabled for me? I do not live in Germany.
Has anyone said that the login attempts all came from the same system?

A smart attacker would spread the logins out over a large number of devices and a long period of time to avoid detection.
No, that's "America".

The term "American" being applicable to anyone from Canada, the US, and Mexico is a usage of the word that is found almost exclusively outside the US and Canada.
For most people (ie: not us), computers are just another household appliance in the same vein as televisions, washing machines, refrigerators, and air conditioners. If it breaks, you get it fixed by a technician or go and get a new replacement.
Speaking of which, this 1D version would translate very well to the 2600
Not to suggest anything, but imagine you are a secret service in a world in which the cat (knowledge about safe cryptograophic procedures) is out of the bag. Wouldn't a great strategy be to invent some sort of story why that old reliable crypto is now potentially unsafe, so you propose a new standard, that may or may not have a known weakness.

And then some paranoid freaks come along that just use both.. Jikes.

This is of course just me thinking loud here and pure speculation. We will probably never know for sure.
Given browser headers have existed for a long time, does anyone know why there isn't some protocol of your browser saying "give me all the cookies", "give me only essential cookies" or "give me all cookies except trackibgbones" etc? Instead if tedious and manual banners on every website?

I get why companies might not want this (less cookie acceptance) but they didn't want cookies to require consent either and the EU enforced that. How come no move to require support for a protocol like this?
This already has already hurt him significantly, maybe not financially but in terms of public perception, and more importantly in terms of potentially the employees under him and their desire to work their ass for him, for less than market rates. For a significant stretch of time he was (and still is to a %) an engineering god and the most coveted CEO to work under in the industry.
By the "people get tricked by liars all the time" standard.
Yeah, this is an absolutely asinine article. I'll summarize:

"We can save the planet easily. Everyone on the planet just needs to upend absolutely everything about modern life to decarbonize, then embrace some hugely experimental approaches whose long-term effects are largely unknown, and boom, we're there. Easy Peasy."
Wow—a commercial offering exclusively targeting Windows, C++, and game development, and yet showcased on Hacker News. A rare combination indeed! :P

EDIT: The deep dive[1] on their webpage is absolutely worth a read.

[1]: https://liveplusplus.tech/downloads/THQ_Nordic_Dev_Summit_20...
It's called iOS. Browsers are also NOT safe. You know what was safe? Not letting random endpoints ship you code to run. HTML was safe, though implementations at the time likely had security flaws.

You cannot make a turing complete language that JIT compiles into machine code and verify it as "safe". Machine code is not safe, so anything that lets you generate arbitrary machine code cannot be proven to be safe. If you take away the arbitrary machine code generation from javascript, it's too slow to run the modern web.
I know a friend
Running an illegal online casino in Hong Kong

(In Hong Kong you can only bet on Jockey Club organizations)

He continued to sell ads on Facebook during the epidemic.

He earns over one million dollars every month.

And he is just one of them.
There are many people who make more.

It really opened my eyes.

Sorry, my native language is not English.
Goldman Sachs Eyeing Bitcoin ETF Role via BlackRock and Grayscale
Hey, thanks for the feedback!

The editor/controller itself is just a React+Kea app using React Flow for the diagramming part, and Flask for the backend.

For now to test that the app you built works, you must deploy it on a frame. I have a fast RPi 5 for testing, and the feedback loop is typically ~30sec. It's about a minute with a Zero W2, and about 2min with a Zero W. This is not ideal, and I'd like to improve that.

Ideally I'd like to use Nim's JS backend to build a "frame" that can be run directly in the browser for testing.

As for the other questions, the FrameOS system runs at boot, and all the apps are compiled in to that one binary and run as the scene dictates. New frames get rendered when a render event is dispatched, which can happen automatically on an interval, or as requested. Frames send logs back to their controller, but can otherwise operate completely independently.
I read that before.

Caching is predicated on locality. We put things into a cache based on the idea that something accessed once is likely to be used again, due to locality.

Lazy promotion is useful in a situation in which we don't trust that the access pattern exhibits locality, nor not fully. Perhaps it exhibits locality for some data, but is widely scattered for others.

For instance, an algorithm is working with numerous local variables in a loop (good locality) but the loop is also stepping through a very large set of data in memory, much larger than the cache. Moreover, items in this set are visited only once (poor/nonexistent locality).

If we regard accesses with a bit of suspicion ("this might not have good locality") we can avoid those latter items from overstaying in the cache. Items in the cache that are not going to be touched again effectively shrink the cache. Like if at any given time about half our cache has such items, the cache is effectively halved.

With a deterministic, fixed distance between the Hand pointer and the Insert point, which we can tune, we could empirically adjust for this. For instance we could have it so that, consistently, every new item that is not visited within 4 subsequent cache misses will be evicted.

If we had a magic oracle, we would not use LRU or any of these other approaches. We would ask the oracle questions "Great Oracle, given these items in the cache, and this new one which is not in the cache, which one(s) will not be seen again, or else which one(s) will be seen again farthest into the future?" That's really what we want to know, but since oracles don't exist, we use heuristics, like the idea that the longer an item goes without being accessed, the more likely it is that it's a never-again-accessed item.
Thank you! And Program Files is for x64 windows apps, Program Files x86 is for 32bit apps but vendors use both interchangeably and sometimes use both for the same app!
> When good behavior is not forthcoming

The only bad behaviour, not that I'd choose that terminology, I'm aware of was password reuse. What was bad on their side?
I agree with you on principle, but in reality it seems like it just gives the media more ammo to villainize the cause even more. Or worse, block ambulances from getting to where they need to be. I highly doubt the family of a person who died because they couldn't get to the hospital, or got fired from their job is ever going to look positively on that cause.

Shutdown a courthouse or government building or something instead, I guess is my point.
Do you have JavaScript enabled on that domain (CNN)? I use the NoScript extension as well as I Still Don't Care About Cookies, most JavaScripts are disabled (besides cnn.com and cnn.io), and I can read the articles just fine.
It wasn’t from the same system. It was from a botnet. The account credentials were leaked on Tor. Is haveibeenpwned omniscient? Do they know about every breach out there without fail?
> It is not 23andMe's responsibility to check if other services are breached, cross-reference the users in that other service, get the leaked password list, and then see if those leaked passwords are currently in-use on their website on accounts that are used on both sites.

To play devil's advocate here, why not? Plenty of companies (e.g., Tumblr) specifically do this and require email verification + password change if yours was breached.

It would make the world a better and more secure place if companies took proactive security measures. There is even a financial incentive for them to do so because it mitigates risk.
I want the DHA stack - Django in place of Astro.
With automod rules you can set it up so a user's posts are filtered (hidden for everyone else), and then never review the posts to approve/fully delete them.