skysight-inc/HackerNews huggingface dataset:
> Swift, IMO, should feel a certain sense of weird-luckiness? to literally the Human where we begin the discussion of protecting ourselves from AI fakes....

Did you miss the part about the images containing her being raped and assaulted? This isn't a deepfake ripoff concert or something.

This woman is being actively stalked in real life by multiple people. She literally needs 24/7 security to protect her from weirdos. I highly doubt she's going to care even the slightest about being part of the "discussion", and the fact that you'd even suggest she should "feel lucky" shows an incredible lack of empathy on your part.
Yes, sure. Fidelity is known for scams...
It was a mix. Lots of apparent botnets (residential service scattered across many providers and networks), but also healthy chunks of colo/SaaS netblocks as well.

And of course a ton of open proxies.
I would say that part of Plan 9's design is that some things - "everything as a file", in particular - can be useful for nearly everything.
The vitriol he received from that video basically drove his main channel into hibernation.
It took skill to create a convincing Photoshop fake. It could absolutely be done, but the people who'd taken the time to develop those skills usually didn't employ them to do things like this. They'd go on to master something else, or use their skill to make money.

Creating convincing fakes has now been placed within reach of random 14-year olds, so it's not surprising that we're seeing more of it.
For now. Check back in a couple of years.
Desktop version is not much better either, manages to fit only 9 links.
Back when I started managing self-hosted sites, I would look through access logs as well. We even had an IDS for while that would aggregate the data and flag incoming attack attempts for us.

Eventually I stopped proactively reviewing logs and stopped paying for the IDS. It was a waste of time and a distraction.

It's not hard to find really useful content that summarizes common vulnerabilities and attacks, and just use that to guide your server management. There are a ton of best practices guides for any common web server technology. Just executing these best practices to 100% will put you way ahead of almost all attackers.

And then the next best use of your time and resources is to prioritize the fastest possible patching cadence, since the vast majority of attacks target disclosed vulnerabilities.

Where logs are super helpful is in diagnosing problems after they happen. We used log analysis software to store and search logs and this was helpful 2-3 times to help find (and therefore address) the root cause of attacks that succeeded. (In every case it turned out to be a known vulnerability that we had been too slow to patch.)
The intended analog is lightswitches with the text on them.

https://cdn.thisiswhyimbroke.com/images/lightswitch-identifi...
Sorry, I think I've just responded on this in the thread above.
I'm not exactly sure what you're suggesting, but blaming sloppy codebases you've seen is an unfair, cheap shot at the language instead of calling out bad developers, which applies to every language. PHP is inherently less complex than languages like JS and python for the backend and results in fewer dependencies because it comes with more features specific to web development out of the box. Quite literally no features required to build even a very basic dynamic website come with JS out of the box: sessions, password hashing, database connectors, input sanitizing, cookies, html templating, etc... It all needs to be either written by you or installed as a dependency. They're all standard features in PHP.
I’ve used their tarballed installer, which is straightforward. The app itself then checks for updates, and displays a reminder when there’s a new version.

Not as nice as having an updated version in apt, but it’s a trivial amount of work for something I personally get so much value out of.
Because now everyone with half a brain can create hundreds of these images in minutes, whereas previously it took substantial time investment and skill.
These numbers don't look so great long term. Especially the no PCC group. The good news is that recent research suggests we can start aggressively targeting virus in trials:

https://www.nature.com/articles/s41590-023-01724-6

https://www.medrxiv.org/content/10.1101/2023.07.27.23293177v...

There are a lot of exciting trials going on for many different antivirals, monoclonal antibodies, immunomodulators/immunotherapy, and even novel molecules to help clear out viral persistence.

I am starting to collect these budding treatments & patient stories as they come on a website here:

https://www.lctreatments.com/
It's all about fee negotiations, nothing else.

For Costco, they wanted lower fees. Amex said no. Now they only accept VISA (in the US).
Contact (photo)lithography and this nanoimprint lithography are not the same thing.

The 2nd is like embossing, the 1st is like stencil (like other types of photolithography, but the photomask touches the wafer).
Access to your VPN is a great way to launch attacks on other machines, and to add another layer to covering his tracks. Not to mention hosting malware to be downloaded to other places, and even a crypto miner.
https://www.nerdwallet.com/
Wouldn't the artists have first hand information on how much money they get paid from each service? The artist's union could get access to that information from their members, so would have a lot more data than most.

Notice that they didn't hold global protests at Tidal's offices.
There kind of is. Restart in recovery mode, open a terminal and type `csrutil disable`. Also, there are finder extensions that do what you suggest.
As does the fax machine. Japan is stuck in time for deeply entrenched cultural reasons not soon too change.
Also, it sort of models yin-yang both in what the game is simulating as well as what is presented visually
Seems like they’ve never driven over the speed limit
Honestly yeah it’s that dull

At big companies the attitude is almost like: clock in, do the minimum, clock out

I used to work at a startup and it was probably the funnest time of my whole career despite the bad pay

I wouldn’t go back but I do miss it sometimes
I always love the 3 sentence “Ethics” sections of these papers that say “this could be used for fraud “ as if the primary use of this technology won’t be fraud.
The Facebook profile of a migrant smuggler
I’ll say one that is taboo. Don’t have kids.
Philosophers take plenty of non-consensus positions seriously.
Is the Ideology Gap Growing?
Steampipe have a fun SQLite extension that lets you query them via SQL: https://til.simonwillison.net/sqlite/steampipe#user-content-...

It uses an API provided by https://crt.sh/
Chromium and Electron have long supported ARM, since late 2019 or so IIRC. Google just hadn't published an official version of Chrome itself (which includes the branding, sync, widevine, etc). This is why Edge/Brave have had their own official ARM64 versions for years - the Chromium base already supported it.

Slack and Discord just choose to not publish ARM64 versions of their Electron apps.
Sorry, actually I wasnt really following what was happening in this case, mostly because I don't care about anything at all related to Taylor Swift - but I do care about how we navigate the laws of AI likeness ownership.

Her personal circumstances suck - and it was insensitive for me to not mentino that, but I did so out of ignorance, because I dont care about taylor swift - not because I am lacking empathy.

SO, apologies for that. I stand my my point, and I hope this gets Swiftly resolved in a manner that beneficially covers all.
Good customer service can mean things like the people are pleasant, aren’t working from a stressed call center sweat shop, have the discretion to do what you need, have the knowledge to help you rather than just run some dialog tree.

Discover is much better every time I call them than my Capital One card. And Schwab (bank) is amazing compared to my other bank. The customer agents put me on hold to ask someone in the engineering department to help me with a very weird Zelle bug. It was all so pleasant and made me really appreciate the service. It’s especially noticeable when you need help with a weird situation that takes time to explain and doesn’t fit into some FAQ.

Meanwhile bad customer service is revolting on multiple levels, like revealing that the company wants to save money instead of spend on a good experience.
Costco switched to Visa, they pay them quite a few millions to be the Costco Card.

So maybe Costco+Apple could be their own bank and card.
I really disagree with this, C++ is a "choose your own adventure" language, I think this is it's main strength. You decide _everything_, which is conducive to writing systems software at many different levels - 1 language that you can reasonably write HLS+FW+KMD+UMD+libs+CLI+GUI with good support in all cases.
They are rare, but if you build a specific toilet targeted for people with disabilities (next to ordinary, simpler, smaller toilets) then you generally try to make it as accessible as you reasonably can and target a wide variety of different disabilities. Such toilets tend to have many adaptations e.g. different controls for faucets on the sink, different handling of toilet paper, different dimensions and spacing, etc.; and yes, for some people a button instead of a knob that needs to be turned is all the difference in the world, as they simply can't turn a knob. For a trivial (but not nearly the only) scenario imagine a person with prosthetic hands, or extremely limited grip strength caused by e.g. some cases of cerebral palsy.
I am not aware of a vulnerability in popular web server software that affected a basic auth login screen for over a decade. Assuming you use a proper password and don't typo the domain and end up on someone who wants to specifically phish you through typo squatting, it's about as solid as SSH or Wireguard

They serve different use-cases but I wouldn't say that VPN is strictly better than HTTP auth or vice versa. Recommending to double up for a self-hosted little something, not a big target like 4chan or Gmail, is overkill
> The solution to that is to not take sides.

Sooner or later, governments (and sometimes even other institutions) have to make binary choices – e.g. whether or not to vote for some UN resolution, whether or not to recognise the State of Palestine, etc. Of course, if one is just a private individual, not one of those leaders, one has the luxury of not choosing.

> for example, you can't target civilians, no matter who they are or what they or their homies have done, or who they support or don't support

You can't tell from footage of the aftermath of an airstrike whether it was illegitimate targeting of civilians or not. A big part of what it was depends on the intentions and knowledge of the military commander ordering the strike, which a video of its aftermath couldn't possibly convey.

> The Palestinian issue is so hard because there is an overwhelming amount of facts and only a few people are really in possession of all the facts

There is also a lot of interpretation of limited evidence – e.g. is event X an isolated incident or the norm? A video on social media can't tell you that. And even if a video is showing accurate footage of an incident, it usually can't convey the broader context of that incident.
Evidence and Orthodontics: Does Your Child Really Need Braces?
> Wasn't performance the whole point behind HTTP3?

Faster, more secure, and more reliable, yes. The numbers in this article looks terrible, but real-world testing¹ shows that real-world HTTP/3 performance is quite good, even though implementations are relatively young.

"…we saw substantially higher throughput on HTTP/3 compared to HTTP/2. For example, we saw about 69% of HTTP/3 connections reach a throughput of 5 Mbps or more […] compared to only 56% of HTTP/2 connections. In practice, this means that the video streams will be of a higher visual quality, and/or have fewer stalls over HTTP/3."

¹https://pulse.internetsociety.org/blog/measuring-http-3-real...
Penrose’s excursion into logic and philosophy by way of Gödel is nearly universally rejected in my experience and according to the standard reference work: https://plato.stanford.edu/entries/goedel-incompleteness/#Gd...
Wait so popularity matters? What about the wisdom of the Electoral College?
Ask HN: What is the modern take on the role of design regarding visioning?
I’m have a hard time understanding whether it’s an industry shift or something more local. The design org in my company has decided to dedicate 50% of their capacity for the last six months or so to what they call “Visioning”. I’ve found a few articles about this, but not to the drawbacks. It seems to be that the expected output is a few features pulled from the exercise to roadmap validates the effort but this seems like an astronomically expensive effort for a few reasons.

1. Whatever comes out from this will then have to be adapted.
2. Design is basically becoming a shadow product org by choosing what features to illustrate that can be pulled onto the roadmap.
3. The vast majority of the design is thrown away because it isn’t addressing actual business needs.

Does not #3 especially become depressing for the designers who worked on the visioning to see their work being basically tossed away? Does this really validate the cost of the strategy in general?
I feel my "that student has environmental issues" agrees with your sentiment. I do agree that very few students who did not graduate truly can't pass the curriculum. And lower socioeconomic standing is a huge (if not biggest) reason.

>the army can provide a stable employment and a community that has its issues but is likely less abusive than whatever home environment prevented them from graduating high school.

For such a student I feel it's out of the frying pan and into the fire. Now they are bound to the government for X years for everything, from a meager pay to living quarters (you also needed to look the way they told you to look, but I think they are relaxing those hair/tattoo codes a bit). You go where they tell you to go and do what they tell you to do. And "leaving your job" if it's not for you means you can be put at trial.

It's an awful lot of a gamble being taken here for someone who likely hasn't addressed their core traumas to begin with.
I used this wonderful library when I need to answer how close the airplanes were over my head for safe UAS operations on the ground.

This was near an uncontrolled airport (no tower) so the airspace and general legal limit was 400 ft AGL but I recorded aircraft as low as 175 ft AGL on their down wind leg of the landing approach.

The tool gathered ads-b data from the aircraft using an rtlsdr, then let me plot it on Google Earth for analysis. Was really useful to me at the time and a fun way to learn a little about GIS.

https://gitlab.com/btreecat/bstokml
The one on Ireland’s Eye also has a rope btw
Cling 1.0 Released
Gameplay problems aside, part of why I stopped playing Square Enix games is because of how incredibly awful the dialog can be in many of their titles. Kingdom Hearts is gibberish on repeat for 30+ hours and Final Fantasy is usually sexist and or racist gibberish for 70+ hours. Not worth it.
Human Interface Guidelines: The Apple Desktop Interface (Final Draft, 12/1/1986)
There's really no reason to avoid wildcard certs for your domains, unless you have so many subdomains that are managed by various business interests.

I use LE wildcard certs and they're great, you can use them internally.
Good job, though it doesn't really help when you have a buffer overflow leading to RCE in a suid binary (remember sudoedit CVE?)
Who, the commenter or his child?
"Even though it is a non-party to UNCLOS, the U.S. has stated its claim within the internationally agreed framework of that Convention. That means any disputes are likely to be settled according to the Law of the Sea as agreed by most United Nations member states."
To generate: if you're trying to learn Japanese, you can use the Yomichan [1] (or Yomitan now that Yomichan [2] has been sunset) extension for Chrome or Firefox which integrates with Anki so you can create a card for a word you don't know with two key presses.

[1] https://foosoft.net/projects/yomichan/
[2] https://github.com/themoeway/yomitan
I got the same thing
Very clever! But it looks like that this is more like making grooves in glass sand and pouring molten aluminum in the groves than traditional 3D printing! I’d be curious if the characteristics of these parts are akin to cast parts. Also, my understanding is that this is more of a 2.5 D process than a 3D process. I’m. I’m curious as to how this process may scale to a 3 D process! Still cool!
There was a strange situation when SecuROM came onto the scene: The first patch for most games had no SecuROM at all and so it was just patching the usual CD checks.
Exclusive Photos Inside the Chernobyl Nuclear Power Plant
If you just want a simple informational landing page with maybe click through to other static pages to measure seo analytics then simple html/css pages will suffice. If you also want to capture email addresses then you need some sort of back end which you can build with something like rails or Laravel. But in that case I would go with an e-mail marketing platform like convertkit which has built in analytics. However it looks like you want the ability to build quick interactive prototype of your startup idea to validate the idea, in which case I would go with rails or Laravel which allow for quick prototyping and iterating on your idea. You could use htmx with both those frameworks to avoid a full blown JavaScript front end, but rails offers Hotwire and Laravel offers livewire which are packages that are integrated with the respective frameworks
Full agreement.

That's why I think this is really important for everyone - and not just about fake sex tapes - but in how much we control our presence in the world, specifically at the intersection of our Digital existence and our Biological existence.

And this is imperative to get right, given that our Digital selves are effectively immortal from this point forward - even though they will ultimate just be boiled down to some coordinate in a vector graph for eternity.
And this is exactly why the point about Semites comes into play; Arabs and (Middle-Eastern) Jews are functionally the same race. A Jewish person who converted to Islam would no longer be dhimmi, and would no longer pay the jizya or any other tax levied against non-Muslim populations. None of the discrimination noted would legally apply to him or her. It is not a status built on the race of the individual, but on their religion. Hence, it is literally not racist in the most basic way imaginable - it is not based on race! It's like calling ancient Spartan oppression of helots racism, or the British discrimination against the Irish sexism, or South African apartheid transphobia; it betrays a fundamental misunderstanding of what those words mean. This is why I said that racism is not the most useful lens to view the relationship between the groups through. They are the same race, with differing religions.
You won't find a generic .deb/rpm release (that I know of) if that's what you mean. Only the lacros-chrome version for Linux based ChromeOS.
Small nit: I'm pretty certain the Mac System software from pre-1.0 up until System 7 had identical UI widgets for things like check boxes, radio buttons, buttons, etc. The screen shot in the article is from the Control Panel desktop accessory (DA) which is showing radio buttons in a compressed or stylized way because of the compact nature of the DA
Are you sure?

I'd wager that Europe and most of the world was slower--thankfully--in adopting a new painkiller like Oxycontin and dodged a bullet, by seeing what the US was already facing.

https://www.latimes.com/projects/la-me-oxycontin-part3/
Honestly? Install classic software and use it! I needed exactly those sort of references to design a project and knowing I wouldn’t find them on the web, I booted a win95 vm and studied it. My designs improved dramatically.
In fairness, before Nitter (or even Musk) there was a highly inconsistent guest browsing policy on Twitter. One week you could read entire threads without logging in, the next week every inbound link would redirect to the registration page. Before Nitter I just stopped clicking Twitter links entirely, because I never knew if it would show any content.

At this point, submitting screenshots of a thread you like would unfortunately be more accessible. Shocking that we have to say that about static text content, but here we are in 2024...
The tweet cites a google groups post [1]. The title was extracted out of this paragraph from that post:

On Plan 9, the rule tends to be: if feature(X) can't be implemented in
a way that works for everything, don't do it. No special cases
allowed; it's why mmap is discouraged. This has led to a system that
is quite uniform and a pleasure to use, albeit lower performing than
its competitors in many places.

[1] https://groups.google.com/g/comp.os.plan9/c/24mMVoy6wXA/m/JW...
Why? Code is open source and I don't check config changes into .git. Do you mean like .htpasswd which is already default disallowed (on web servers that make use of it in the first place; I think Nginx doesn't block it by default but also doesn't use it so it wouldn't grant any access)?
It’s special in its utterly hypocritical espousing of Twitter as some digital “town square” led by “free speech absolutists”.
A Martello tower in Howth, Dublin, has also become a technology museum, known as the Hurdy Gurdy Museum of Vintage Radio. It was the passion project of one individual, Pat Herbert, who sadly passed away in 2020.

https://sites.google.com/site/hurdygurdymuseum/home
The thread is specifically talking about logs of attacks
ChatGPT is great at taking my notes and turning them into Anki cards. Some tweaks are occasionally needed, but I have done well on numerous exams letting ChatGPT figure out the cards (and the formatting tedium) for me.
> I should be setting up fail2ban.

No, that does nothing if you followed best practices and disabled password login. fail2ban is just another Denial of Service risk that has the added bonus of bloating your firewall table and slowing down all your new connections
Alpine Wall
If you are going down a DRM search trip, both Widevine key dumping and DMCA compliant HDMI / HDCP downgrade hardware are quite interesting topics.
The Postcard Collection at the Museum of Fine Art
fail2ban is not very performant and it will only reduce the amount of attempts.
An alternative is to add a nftables rule (or iptables or whatever firewall). Something like :

table inet filter {
chain input {
tcp dport ssh accept comment "Accept SSH"
tcp dport 22 ct state new limit rate over 2/minute drop

But even with rate limiting, the logs are still polluted by auth attempts. Changing the port does little. The only solution we found was to configure port knocking (with direct access from a few whitelisted IPs).
What does quality mean to you?
They closed my account for missing a payment. Not sure where the legendary customer service comment comes from perhaps their marketing is stronger than their offerings
But what do countries do when they share a continental shelf with other countries? It seems like this only applies to countries that are very large.

And also they're basically claiming land right outside Russia at a time when tensions between the US and Russia are at an all time high in 40 years. Based on something they and their allies in the UN signed back in 1982.

Maybe I'm reading this wrong but I see no indication that Russia signed.[1]

Not trying to claim anything politically, just random thoughts on this article from an IT person who is not well versed in any politics.

1. https://treaties.un.org/Pages/ViewDetailsIII.aspx?src=TREATY...
The n=2 case also occurs in the commit: https://github.com/sudo-project/sudo/commit/7873f8334c8d3103...

And indeed, the two values ate bitwise complements.