skysight-inc/HackerNews huggingface dataset:
What about ssl? will that work with i.e. letsencrypt?
A multi-core Python HTTP server (much) faster than Go (spoiler: Cython) (2018)
They do, iOS Passkeys are pretty neat.
> Currently Zig calls LLVM's API to build with it. Instead the compiler will gain the ability to emit LLVM IR into files. Those files can be passed to a separate install of LLVM to produce final machine code.

If anything this will further worsen LLVM-powered build-times, surely? What's the motivation here? Does LLVM have API-stability issues that are avoided when using files?

> while a lot of research effort has been put into finding LLVM's optimizations, they've been found and can be copied.

This strikes me as understating the amount of effort that goes into the major compilers. We're talking about hundreds of thousands of developer-hours of work. Targeting only x86-64 will greatly reduce the workload, but still.

Learning about the optimisations performed by modern compilers is the easy part, building a serious compiler is a lot of development work. The optimisations performed by LLVM are presumably pretty similar to those performed by GCC, but that doesn't mean LLVM was easy to develop.

I stumbled across this comment, by someone apparently familiar with LLVM (hanna-kruppe), in a thread discussing moving Rust away from LLVM. [0]

> It's hard to overstate how many people are agreeing on using LLVM and how much this consensus helps all involved: there's mountains of experience, shared code, interoperability, cooperation, etc. in and around LLVM and its community. Any rewrite that does not have the full backing of the LLVM community automatically loses this.

Also, here's an old HackerNews thread discussing Zig's announcement to move away from LLVM. [1]

[0] https://users.rust-lang.org/t/proposal-rllvm-rust-implementa...

[1] https://news.ycombinator.com/item?id=36529456
A significant number of Palestinian casualties are killed by Hamas misfires
They're suffering a very minor inconvenience. They could read a book, pull out a tablet or a laptop, read the newspaper, do nothing, talk to their fellow commuters, etc.

So yes, thousands of lives in exchange for millions of people not being able to doomscroll Facebook and Tiktok during their train commute seems OK. Driving while distracted is already a crime in lots of places, there's variable enforcement, but it's not making a big dent. Something else needs to be done.

It's bizarre to me how strong the reactions against this are. You're talking about suffering: I'm talking about returning to what was the status quo not that many years ago. This is addict behavior.
Cafe owner beats Meta in court for deleted Instagram account
It doesn’t render an extra separator on iOS, so you should be able to use the same markup.
The article claims that "utility patents" can be used to patent traits, such as colour - not just genetic strains. Is the article incorrect?
Texas cold leaves alligators 'frozen' underwater, but still alive
> The distinction between "fully merged" compounds, hyphenated ones, and ones with spaces is yet another one of those endlessly annoying quirks of English

Being cognizant of these really helps develop empathy with ESL learners.
You could consider making them real mDNS domains then, and using mDNS to resolve them to your desired IPs.
For some fractals on the regular, Benoit Mandelbot on Mastodon - https://botsin.space/@benoitmandelbot
It was really hard to believe the developers spent 50 euro cents to escape Apple’s restrictions. But that new Apple tax fee could add up quickly and make the opportunity for third-party app stores hard to bear this new upcoming trend.
If you look in blockchain, antivirus or AI, you’ll find heaps of snake oil salesmen.
> changes once or twice a year

Please stop cargo culting this.
Same. I've spent a good part of the last seven years working on and around a large React app, and it's been fine in exactly the ways you describe. I've got my complaints and maybe I would spare half a thought to considering another library if I started a completely greenfield app, but over all I'm very happy with what React has given us – especially over what was around before.
> the secret remains secret

An attacker in a position to grab password hashes is also going to be in a position to grab that secret. No matter how you shuffle and try to hide it, there's not really a way around that.
That is by luck
The restic team refuses to have unencrypted backups just "because security".

I hate such an approach when someone assumes that whatever happens their opinion is the best one in the world and everyone else is wrong.

I do not want to encrypt my backups because I know what I am doing and I have very, very good reasons for that.

Restic could allow a --do-not-encrypt switch and backup by default.

The arrogance of the devs is astonishing and this si why I will not use Restic and i regret it very much because this is a very good backup solution.

Try Borg.
Tiling WM is useful for those who touchtype.
Ubuntu 24.04 LTS Will Aim to Ship with the Linux 6.8 Kernel
I don't think the person you were replying to was literally asking the question.

It's a matter of gatekeeping health for a profit and how quickly it becomes infinitely corrupt. We're allowing society to degrade to protect the profit.
UN agency fires staff members allegedly involved in October 7 attacks
I'm a little fuzzy on this, but my understanding is that for mDNS to be reliable it is required that all .local hosts implement mDNS to allow for conflict resolution.
You want to enrich the base text before embedding? With what kind of prompt?

It’s a pretty simple thing to add to a pipeline. Have you tried?
The built-in adblocker still relies on a large amount of extension APIs.
Don’t forget the guise of Father Christmas!
Earthquakes: Prediction, Forecasting and Mitigation [pdf]
I think you're missing the point. The redundancy of the <hr> on iOS means that on iOS the <hr> doesn't serve its purpose of separating the options.
The largest gov run health care programs tell providers exactly what they will pay. What are you on about?
For those without an iOS device see this example: https://ibb.co/N7Mw4dW
I suspect you'd need to generate your own, unless they intend on allowing people to register them. It's hard to provide a SSL for the 100,000 different "tv.internal".
Could you please expand your thought?
You're saying Gazans make immature choices because of the population's young age? That's a first time I hear this. They're a nation of kids you say.
> I can't help but wonder whether the similarity of the "bulbs" to the rather unique Buddha "hairstyle" (of allegedly funny lumps of hair) was just a coincidence.

Honest question: what else do you think it could be, if not a coincidence?
It's unusual to come across a headline mentioning a wolf, the EU president, and a pony. (My first thought: WTF?)

My take: There are downsides to allowing the population of predators like wolves to grow without checks and balances.

Too many wolves running around in packs... is not necessarily a good thing.

Wolves can be quite nasty. That's why they have been cast as villains in so many fairy tales.
I own a Fossil Hybrid 6 with e-ink and I'm very happy with it. The only features I needed were step counting, notifications, and the date. The customization of the screen is well thougt and allows a lot a of custom "watch faces" .
By disabling all the other unnecessary stuff (alexa, heartbeat, O2 sensor, meteo,..), I can last more than one month without charging it.
I will look into the G-Shock you're talking if (I hope not) my smartwatch comes to die.
This is an excellent use for oil that is going rancid or that had been used for frying. Tastes bad but burns just fine.
Onsen/Sento culture needs to find its way to the West
I meant, for the purpose of my threat model, I am not concerned with defending against attacks on the secret and we can just assume the storage of it is safe or out of scope, whichever interpretation you prefer.
<< why would you think any civilian in Palestine would trust Israel or be interested in working with them?

It is not the same, but in a sense this odd naivety was a similar surprised reaction to US withdrawal and quick rollover of 'local' army in Afghanistan.

<< We're not there, and if we were, I doubt we'd be much driven by logic

I think this is worth highlighting. edit: The reason to avoid war is because it is horrific and can remove all sense from a man.
It's so sad this is still necessary. We've had service discovery via avahi/zeroconf for years. Why does it seem like uPNP has been and gone? It shouldn't be necessary to type hostnames any more.
Kind of four words, though… lol
Pfft I'm an idiot - I'm reading from (and tried it out with) Firefox too!
Today's regional conflicts resemble the ones that produced World War II
I couldn't see Brave being able to counter, say, the recent YouTube anti-adblock push as quickly as the open source community did. I could see that kind of stunt becoming more common as Google tries to nail the coffin shut and deny their competitors this USP
Learn You Galois Fields for Great Good
An F-150 is not a car. And while it is the most sold vehicles ever it is mostly used for work purposes.
Ethics are important.
Didn't mean to insult you. It's really meant as a friendly advice. I'm sharing experience.

I do read code. A lot. I'm not the only one. I know many people who do. I know people who print source code on paper to read on their bus ride back home.

Hell, I know people who read some of the most complicated source code you can imagine, annotate it, criticize it, and then blog about it[1].

It's very weird that you doubt it. Why would we lie? For karma and upvotes? I'm not sure I understand your point. We're literally in the comment thread of a post aimed at reading code and you're here arguing that we're not?

[1]: https://kotaku.com/the-exceptional-beauty-of-doom-3s-source-...
Yes, it all looks very hollow, more marketing front than anything of substance, the marketing copy often bordering on cringe (“beautiful”, “awesome”).
Pretty much the first I do on any fresh server is to disable http, no matter what it is used for.

IMHO http has no use in the modern world.
You need a real code. They put a lot of work into making sure that fake ones don't activate.
It's a court procedure where you ask questions to an expert witness to verify they know what they're talking about
Their chips aren't any better, in fact they're probably quite a few generations behind what's available commercially due to various certification requirements etc. HOWEVER, last I checked, their budget for this sort of thing was 11 billion dollars a year, and that's where their advantage lies. Their chips are designed to be maximally power performant for the tasks they're doing, and they have a fuckton of them.
NIST says:

> “Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.”

They also don't recommend having rules about like, a certain number of symbols, etc.

https://pages.nist.gov/800-63-FAQ/#q-b05
libstdc++ should be statically linked to all software using it.

libgcc should be statically linked to all software, and the glibc modified to dynamically load a stripped-down (and renamed) shared libgcc for pthread_cancel support.
I am currently analyzing the feasibility and economics of building a cloud service for AI training. This involves "day to day" analysis changes since all the "parts" are moving.
What, exactly, does 'plane of existence' mean?
Choosing to not take a phone on remote/hiking situations is ridiculous.
You should try getting out of NYC and understand how the rest of the country actually works. Try visiting Nebraska or Ohio and learn where your food comes from. Ask one of the multi generational farmers who drive a truck and ask about their IQ.

Thoughts and posts like yours are why conservative popularity is increasing, why so hostile?
Israel has had peace with Egypt and Jordan, for a long time now.
So a third party AI generates images from third party training material with minimal effort, that you then offer as your own NFT.
> The pads themselves are however highly guarded secrets, usually passed along via a dead drop, only ever exposed to the minimum of people and designed to be very easy to destroy quickly and are a bit flimsy as a result.

One other note here is that OTPs don’t have to be distributed in this manner. An OTP can use something already distributed and readily available to end users, such as a Gideon Bible or something (making sure to get the right edition, printing, etc) that everyone in a hotel room has access to. The key is having access to something, making sure it’s long enough for the series of messages to be encoded/decoded, and that no one else knows what it is.
> An occasional October 7th is a better choice than levelling Gaza is

Better for who? For Hamas yes, killing Israelis with impunity would be a boost. But for Israel - I don't know of any democracy that can keep going with an 'occasional' October 7th. A country can't sustain that without collapsing at some point. Think about 9-11 but with 80k killed instead of 3000, and around 10000 kidnapped. And the entity responsible is just around the corner and gonna keep doing it on occasion.
Those are the proportions. How many of these would the U.S be able to endure before its economy and society collapsed?
https://archive.ph/LCE7k
With respect and the best of intentions, I think you need to reflect a little.
Charities work because they harness the good will, money and free labor of many folks. An enormous amount of value is generated, that would be prohibitively expansive if everyone involved was paid market rates.

It is crucial to understand the social contract involved. People are swapping time/money for a feel-good experience and camaraderie.

If you make that experience resemble their day job, with goals, metrics, project managers, you've broken the contract and squandered the good will.

I've seen this happen, where an upstart go-getter comes drag into a group and tells someone who has been volunteering their time for decades, that they are not up to scratch. This results in the volunteer leaving, which is a huge loss and a failure to understand the forces at play.
Such laws exist for animals, too. They have the fast effect, that within a few reproduction cycles after the introduction of the law, the agriculture of a whole country (or like in the case of the EU a whole super-country) concentrates on the production of species with some defined positive characteristics, predominantly yield.

The negative effects are, that the selected characteristics not necessarily are what is good for humans, i.e. taste and nutritional values.

And it leads to genetic impoverishment.

The positive effects dominate only some decades. We are now in a phase, where the negative effects begin to get dominant. It will cost a lot of effort and money to alter course.
Yeah, we've had AI (= made with the help of a machine, specifically a computer) NON-deep fakes for several decades now already.

I guess the main difference here is indeed that a lot of people are somehow still not aware that it's a possibility ?

I guess they have missed Al Gore's warning from 4 years ago ? https://www.youtube.com/watch?v=9WfZuNceFDM

And in this specific case, I'm not sure that the technic used is of any relevance, since again, this kind of /b/tard(-like?) trolling (and counter-trolling) could also have happened without the use of neural network software : this is more about social networks, and Xitter specifically, being the usual cesspools.

(The use of fake-Taylor Swift's likeness for ads is IMHO more problematic, but with the same caveats, and also likely easier to police, since there's a money trail for law enforcement to follow.)
> In the notice, IFTTT argued that the “Legacy Pro” tier “no longer exists in our current offerings,” as the web applet service has added “nearly 200 new services, and dozens of new features” since first offering a pay-what-you-want option for grandfathered-in users.

Cool, then don't offer these "nearly 200 new services, and dozens of new features" to the grandfathered users.
I personally like Anyscale Endpoints
That's a huge use case though. Travel eSIMs are much more convenient than landing at an airport, finding a store that has SIMs, hoping they are open, etc.
They're in a different territory that has no Israeli presence. That's like saying the US could've just arrested the members of ISIS..
As others have said, Amazfit Bip is the answer. You want to find the first one (Bip, or Bip Lite); it has the longest battery life. The watch has notifications, weather, and 40,000 third-party faces. I get consistent ~20 days of battery life with heart rate check every minute (automatically speeds up to every couple of seconds during exercise).

I bought Bip in 2018. I bought a $20 used Bip Lite as replacement in 2020 after Bip failed because of a known issue with the case's glue (fixed in later models), since I always run with my phone so don't need Bip's own GPS.
Doesn't work on Android. Every option has line below it.
Wait, this person is <20yo...
It's been added in 122.0 [0], but it wasn't working previously.

[0] https://www.mozilla.org/en-US/firefox/122.0/releasenotes/#no...
No, and I suspect GP was being sarcastic.
There is a boom in this field in recent years, specifically for laser texturing using femtosecond lasers. What were 10 years back laboratory lasers are now being put on standard CNC machine gantrys.

Unfortunately, what I see lacking in high end laser CNC machine market is software and no separation between CAM programming and execution that exists for milling machines. There is no equivalent to G-code that can be generated on w/e software and then run on different machine. There are cases where this is impossible as due to the way it's done, it would quickly overload even large RAM memory capacities.
You should not require users to change their passwords periodically, as this will piss them off and make them use many weak passwords rather than one strong password. Only require a password change when there is reason to believe their old password has been compromised.
I guess the problem is that we only have a single example.
Building a Toy with ClickHouse
NASA's Perseverance rover may already have found signs of life on Mars
Tallest spokeless Ferris wheel to offer bird's eye view of Seoul
While I guess it's not in HN guidelines I think humour can work sometimes.
true. SHA-256 is vulnerable to length extension attacks because it uses Merkle–Damgård. one reason to consider SHA-3 which is a sponge. except not for password hashing because that requires a resource-intensive function like Argon2
10k Hour Rule
It says right in the intro that the goal is part of penetration testing, which is about far more than just your web app. The target is typically to compromise the central IDM (e.g. Active Directory) get the password database which contains hashed passwords, then crack those to allow further movement or escalation around a network. This could happen via a vulnerability that allows a normal user to get the database, and then cracking the admin password from there.

So many people these days seem to completely forget that not everything is in the cloud, and there are many services in a company that you don’t see as a regular user or developer.
If only any of my banks supported TOTP or Yubikey...
> manslaughter

I never understood what they thought was so funny.
The most intuitive explanation for the Feynman sprinkler I can think of is conservation of angular momentum.

In the pump-out case, the water adds positive angular momentum when it flies out, so the sprinkler body must add negative angular momentum (constant torque) to have conservation.

In the Feynman suck-in case, the water drains from the base of the sprinkler without any angular momentum, so the sprinkler head does not have to add an opposite angular momentum (feel a constant torque).
There used to be several star-architect offices that had white background at their website with only black text for contact. While other firms had shiny websites with all project in huge pictures.

But these were just like "me shit is out there and you already know it".
I think they had some trouble with God and got smited with all sorts of plagues and stuff[0].

[0] Bible.
We have no reason to believe you. However, there is one party who really benefits from people considering all encryption weak and all cryptography broken: the NSA.
Cliff is on HN, too. https://news.ycombinator.com/user?id=CliffStoll

The Cuckoo's Egg was formative in my youth. Great book.
> I had to install it on my personal laptop for a job interview.

I could use the browser version for that.
lan = LAN or Local Area Network
I'm using Mobian trixie (basically Debian testing) on a Librem 5. The overall experience is very much “not there yet”, but I reckon most of this is down to relatively few high-impact issues, mostly around touch input.

Editing text is very frustrating (but it sounds like the 1st iPhone was on-par). The keyboard doesn't always appear or disappear when you'd expect (but you can manually open or close it in Phosh). The biggest frustration here is that the text editing context menu (Copy, Paste etc) doesn't appear at all consistently.

There's also a bug where the context menu appears when it shouldn't (https://gitlab.gnome.org/GNOME/gtk/-/issues/5540), which makes several apps more awkward to use.

Phosh as a shell is mostly fine. The spatial model doesn't really make sense, so it's not as nice to use as the mobile version of Gnome, but that's still pre-alpha for now. Phosh hides the window's close button for some reason, and overrides that setting on every restart, so until apps switch to the new dialogs (which landed yesterday), even closing a dialog is awkward.

Overall it feels very cobbled-together for now. Files and Camera don't work properly yet, so Mobian has replaced them with Portfolio and “Camera (Dev Preview)” (which is actually a completely separate project called Millipixels that looks like a tech demo). Firefox has been heavily modified, including the bizarre decision to put the headerbar at the bottom of the window(?!) unlike any other app, and hide a load of menu options.

And then there's the general fit-and-finish I'd expect from Debian (compared with Fedora). There's a useless “Advanced Network Configuration” app that appears in the app grid, but apparently isn't a real app, because when you try to view its details Software says “Sorry! There are no details for that application”, so you can't get rid of it, whatever it is. Also, Evolution Alarm Notify; but at least I know how to prevent that from starting. (There's less of this sort of thing than with Ubuntu, though — there aren't 3 separate apps for installing software, updating software, and everyone's favourite pastime, configuring software repositories.)

It is possible to use it for basic tasks, and for me personally, I'd rather put up with good-faith bugginess than have to deal with something that assumes I want a Google account.
Everyone is "fake it 'til you make it" today.

But Microsoft really was, too. There was some story about a shared tie that was worn to talk to the "shirts" at IBM in the early days. No idea about garters, which were also part of the IBM dress code at the time.

Not sure about Apple's early days, but there are certainly many stories of Jobs' "reality distortion field."
44% doubtful or dismissive

https://climatecommunication.yale.edu/publications/republica...
Sadly common nowadays.

Lately I’ve really got into my self-hosting again.

I had moved away from it as my income increased and I valued convenience and less things to worry about, but with everything becoming subscription based, with regular price hikes, I’m hosting as much as I can myself.

I’ve also stated to torrent a lot more content, my rule of thumb is if you make it available for me to buy, I’ll buy it, but if you expect me to wait 18 months for something released in the US to land in the UK then I’ll just torrent it.