skysight-inc/HackerNews huggingface dataset:
Yes you need to be familiar with the rulesets being applied, and prepared to closely monitor what is being blocked. Ideally I think I’d roll it out one ruleset at a time to limit the number of potential issues being introduced at once.

Had a fun one after turning on the AWS WAF with some default rules–a small number of users reported they couldn’t upload new logo images anymore. Turned out some Adobe product was adding XML metadata to the image files, which the WAF picked up and blocked.
In my last job we used hugo and git for it's simplicity. We shared the repo among the infrastructure team and enjoyed working with text files.

The quality of the information stored trumps the whizzo way of sharing it in my opinion.
My question stands; why would you think this surprises him? My point is yes, he likely knows this, as does everyone cares.
That is well out of the norm and should be treated as such. Some people will need it, but that’s no reason to spew opioids on anyone who has a small procedure.
There is progressive taxation, so you can control who is getting offsets and who is not.
Yes, I am trying to make C++ more pleasant than t currently is :)
I like Python and JS ecosystems a lot (but also Zig and well done C libraries) and I'm trying to learn a tiny bit by their success and bring it to C++, that is my favorite language)

No problem at all for your initial comment! I share similar sentiment, I've found a lot easier in the past glueing C libraries to do something more than trying to integrate a C++ library for the exact reasons you're describing...
You'll still mine oil for tires and roads, and you'll have gasoline as a byproduct. You'll use the gasoline to mine lithium and to transport used batteries. And you'll bury the batteries somewhere out of sight. Just like we're doing with nuclear. None of these solutions actually help preserve live. Life can thrive in a carbon rich atmosphere. It has before. But many years from now when the lithium batteries decay and the nuclear stores erode, life on Earth will actually cease.
Do you have a similar habit? How does one get started making Anki a habit? I've used Anki for studying before exams, but I haven't been able to integrate it into my life.
Speaking of the UN, if we are to take them as the international organization with primary legitimacy on these affairs, let's do a quick check in:

https://unwatch.org/un-general-assembly-condemns-israel-14-t....
Like what rights that are relevant here? Right to perjury?
My anecdote against a couple hundred, I stand corrected. I think the overall point stands though :)
Just to add, but only testing will never work well enough for something like this.

This is one of the cases where you must understand what you are doing. There's no technique for doing it mindlessnessly.
I doubt the actual programmers feel like they're building the product they want to build, these details are dictated down from the top.
https://lite.cnn.com/2024/01/28/europe/soup-thrown-mona-lisa...
I have a new one. PM had determined that their work load is diminished if a project is killed. So they deliberately recommend that projects be terminated and or do things that would cause the likelihood of termination to increase.
New wave? It never ended

My entire 30+ year existence was shaped by this, and I never even used.
That's actually an excellent advice! :D

I love well written C libraries, like the sokol or stb libraries.
writing your own cards is very tedious.
I agree with you on that, but I’ve never seen green be the contrasting or alternative color.
the ease and scale of modern tech is on a completely different level to 2004 photoshop
Lol, wait, HTTP2 and HTTP1.1 both trounce HTTP3? Talk about burying the lede. Wasn't performance the whole point behind HTTP3?

This chart shows that HTTP2 is more than half as slow as HTTP1.1, and HTTP3 is half as slow as HTTP2. Jesus christ. If these get adopted across the whole web, the whole web's performance could get up to 75% slower . That's insane. There should be giant red flags on these protocols that say "warning: slows down the internet"
Also helps when getting bitten by a dog.
It is not that easy as using the AWS WAF with default rules for our application led to many valid requests and IPs being blocked. You need to know what is being blocked and verify at first or you will in some cases be losing customers.
Yes - almost 10 billion barrels: https://pubs.usgs.gov/publication/sir20125146
https://www.cdc.gov/condomeffectiveness/brief.html

Notably herpes, hpv and syphilis can still be transmitted
Re-inventing the wheel I guess
It does waste their time if your honeypot is constantly responding with legitimate looking but fake credentials. Presumably the hacker is going to try to use them?

It’s the same idea used by anti-spam activists back in the day with software that would flood spam website forms with fake but realistic looking info, so the real data would be buried in the noise.
I’m glad someone preserved these tutorials. I was focused on cracking Safedisc games at the time, and even wrote some Safedisc/Safecast tutorials myself. I never had the skills to crack Securom though, respect to Human and Deroko and the others on the ARTeam forums at the time.

Also iirc after this tutorial deroko wrote another one one breaking the Securom VM obfuscation. It was great work, one of the first public tutorials at the time on breaking such obfuscation. I wonder if its also been archived.

Finally, it should be noted that Securom is a predecessor to Denuvo. I remember debugging early versions of Denuvo and being struck by how similar they are. I wonder how much of the code and techniques are in common between the two, especially now in 2024.

The old reversing scene has changed. I guess everyone grew up and got families and jobs. But when I see what the kids are up to in the multiplayer cheating forums, I see the spirit is still alive and well. Cheers and happy debugging.
Becoming a bank brings a whole stack of regulations that most companies would rather avoid like the plague.

It's not glass-stegall level of forced separation anymore, but it's still more onerous than is probably worth it for Apple.

But it's possible. You do see it sometimes, e.g. car companies (also worth noting though, most of those have been spun off).
"Saboteurs" suggests it's the third-party-repair-prevention case. Stopping trains by playing the right tones on analog unencrypted radio (with the tones and frequencies being public knowledge) is hardly hacking anyway.
I’m of the opinion that “wearables” don’t provide enough convenience over just pulling a smartphone out of your pocket to justify themselves. Wristwatches only overtook pocket watches because they got to the point that they were comparable in function.

The physics of reading off a screen is going to keep smartwatches in the fashion category unless there are some startrek tier breakthroughs.
STI's almost certainly played a role in establishing that social strategy, but also I believe that monogamous-ish represents a equilibrium state in terms of social stability.

The reality is that people are biased towards their own biological children (on average), and men would in generally really prefer to raise their own child, rather than someone else's (on average). Raising a child requires an immense amount of resources.

If you presume that men who discover that their partner have slept around, and their child is not theirs, and worse, they've sunk like 3 years of resources in keeping this kid alive, are even just slightly more likely to be liabilities to society, then you could see why such a societal strategy might emerge.

The converse situation (men sleeping around) is somewhat different (though obviously related). The reality is that if you want to retain an approximately balanced gender balance in a population (perhaps because uh... you might need to compete in raiding/warfare), then you -cannot- have even a significant minority of men having exclusive access to more than one female without having significant societal stability issues. Combine this with men like knowing that their child is theirs, quickly settles you into "monogamous-ish".

And it's "ish" because there are always exceptions.
If we were listening to data we would have started the energy transition sometime in the seventies and er world have this discussion now.
For me, pretty much the only upside of the Apple credit card is an incremental discount on a free credit card for occasional expensive product purchases. Otherwise I'd probably just as soon not have the additional credit card as it doesn't really make sense for me to use it for anything else.
Printer driver?
How is strictly controlling exposed server resources to only URIs you’ve confirmed should be an exposed an example of “security through obscurity”.
I'd say that I've finished all of my previous books, and I have no intention of doing anything different here. Of course, there's always the chance that I get run over by a bus or equivalent, but in that case, I assume that Manning would find a replacement (as per contract) who finishes the book. I don't think there are any benefits to be reaped from not finishing.
> The problem with your argument is that it assumes that the value and potential of a product is wholly known in the present,

No, it doesn't. It uses the fact that the probability of gaining anything of value from dying languages is so low that it's probably a rounding error.

> when this is often far from the case: we constantly learn new things about seemingly static entities, and the insights that we develop from them enrich other aspects of our society.

If you're relying on subjective "it enriches us" type of arguments, I'm afraid that that is not very persuasive.

Many argue that prayer is "enriching", after all.

Look, I get that it's feels better to be enriched, but that is not a good measure of "did we learn anything from this that is at all useful?"

> Without studying language we wouldn't have understandings of innate grammars, the psychology that develops from these understandings, the marketability from that subsequent understanding, and then finally how to make money from it (if this is how one defines value....)

We've got 7000+ languages. As far as learning stuff from them, fully 90% of them are redundant.
Harbu Darbu [video]
An analysis of this question here: https://www.thelancet.com/journals/lancet/article/PIIS0140-6...

A lot has to do with the availability of health care in Europe (universal health care), and specifically addiction care.
Attention is not what the climate crisis lacks. It hasn't lost salience in a decade, people are simultaneously fatigued and concerned, so stunts are redundant. Notwithstanding, negative attention is not necessarily helpful. If it were, PETA or Greenpeace would be seen in a more favorable light and data would suggest that their PR approach makes a net positive difference. There are organizations that take a more data-driven approach, and consequently are both effective and not off-putting to prospective supporters, but they don't get the same media attention. In the internet age, it should be possible to boost without stupid antics.

At this point most are sticking to the same outlook they had 10-20 years ago.
definitely the uncanny valley of coding
In Austria this would be a rather strange combination :)
yes. I do outdoor sports, mostly rowing. My phone is not that waterproof, I will not risk dropping it in the water. I would not be able to use anyway. I really like to do things without bringing a phone. Plus the whole privacy issue.
What the hell does it have to do with the 1947 resolution??? And yeah the UN is full of countries that call for the inhalation of Israel today. They expect Israel to stay silent while its citizens are being slaughtered, kidnapped, raped and bombarded
https://archive.org/details/bartkira/Bartkira%20v01%20%28201...
> Couldn't nearly all of these attacks be blocked by a white-list approach, essentially hiding every file or directory from the internet except a very controlled list of paths and escaping all text sent so it can't contain code?

This is basically how things work.

For convenience, instead of itemizing each filename, the webserver root is a subdirectory and anything underneath is fair game. The webserver uses the OS "chroot" facility to enforce this restriction. What you are seeing is ancient exploitation strings from 30 years ago that haven't worked on any serious webserver since that time, but a) keeping the test in the attackers lib is essentially free, and b) there are some unserious webservers, typically in cheap consumer hardware.

Webservers pass plain text to the app server. It is the app server/framework's responsibility to understand the source of the request body and present it to the application in a clear way, possibly escaped. But the app needs to process this and sometimes through poor coding practices, fails to respect the untrusted nature of the data. This again is more typical in historical systems and low-cost consumer products where software is not a marketing advantage.
Mastodon definitely got a critical mass of non-Mastodon subject matter.
How the EU will wake up is the basic question. Capital allocation won't happen until there's some value in it. At the moment, capital, skilled labour all is available to at least start building chips that if not rival but are sufficiently advanced for day to day usage such as desktops and laptops to begin with.

But they won't be cost effective, might be around the same price as an Intel/AMD/ARM chip. Being new, the adoption would be slow as well.

Only way to change that would be for the EU to ban imported chips so that there's no way for the consumers but to buy local which amounts to trade war.

Therefore, I don't think so there are much (rational) choices as of now.
Only with a trivial definition of "works".
It's (now) abhorrent to consume finite attention in words not written by a writing hand; we didn't get to choose what to consume. It's the leached plastic among the organic fruit.

Later, we can read it willingly and wonder which chunked blocks echo the machine. And not even the machine, but the digested works, the labored labels, and the golden weights.

If AI is a character and its 5% is dialogue, monologue, etc, it sounds reasonable to have a "character as AI" as an AI.
I've been studying Chinese with a premade deck for several years and it's working very well.

Of course, ideally one would want to create cards, but I only can devote around 30 minutes per day. Under that restriction, creating cards is not really an option.
Usually I only manage internal facing applications these days, which makes the attack surface greatly reduced compare to public ones.

But since you seem to have a lot of knowledge in this area. Have you manage solutions which also includes infrastructure in Azure combined with Cloudflare?

And if so, any suggestions on things people usually miss? except for the usual stuff of OWASP and what not
I do make the habit of not expose ports and just use reverse proxy for the container. Of course, you will need a bridged network between the reverse proxy container and the target container, but that's fine. I'm sure there is more clever ways around that.
I write quite a lot of code sat in beer gardens using an 80x17 or so terminal on
an 8" tablet* plus a Thinkpad Tablet 2 bluetooth keyboard*.

Usually have a temporary screen/tmux session while doing so to let me have my usual multiple-shell setup (on a laptop I tile 2x2 80x24 terminals) and it ... pretty much works fine.

(and I found your lisp from your bio page and while I'm probably never going to try it (I have too many lisps to try already, I accumulate as-yet-untried lisps just like I do as-yet-unread books), it's a really rather neat concept and I hope you have much joy continuing to hack on it)

* When my second Nexus 4 died I tried to find a sensible sized phone, discovered the modern ones were usually phablet sized, stuck the SIM card into my actual tablet and haven't felt the need for a second device again since.

* I am one of the handful of people in existence who actually likes the "optical trackpoint" design.
Actual title: "In case you missed it: America just effectively got much bigger"

This is the result of a 20-year data-collecting project to measure the U.S.'s extended continental shelf (ECS), conducted by NOAA.
"Stealing"

https://www.whitehouse.gov/briefing-room/blog/2022/10/26/the...

And those are just the ones that are so obvious the POTUS needed to make a statement.

Corporations steal trillions through dark patterns, intentiona obfuscation, mailicious marketing, price fixing, collusion, fraud etc.

Every piece of personal data shared between every online entity I have no relation to, or awareness of - is stealing from me.

stealing, in this case is a broad, vulgar term.

If you don't like stealing - then you wont get any place in successful business it would seem, based on the observable, documented, litigated and governmental precedents throughout history.
Work to rule!

Do work exactly as specified, not including all the little things needed to actually make work happen. All the glue work needed to make an organization function just doesn't sometimes!
Interesting but hard to see why one would do this over building a Linux system, which excels at small/windowless with significantly more applications built for those scenarios.
At the point where a civilization can build self-replicating intelligent probes, concepts like “staggering cost” probably aren’t as much of a barrier as you’d imagine.
Not mentally 40 I suppose
Every brand I mentioned above has battery life of at least a week. My current watch is between 10 and 14 days.

Do remember that I'm replying to a parent comment looking for "a simple watch with simple features". The watches that I'm referring to are basically pedometers and sleep trackers, with Bluetooth notifications from your phone. Of course it's possible to get week+ battery life with that feature set, even with a nice-looking AMOLED display. If you're willing to settle for an TFT-LCD display (I don't recommend it), then you can get nearly a month.

Then additional replies come along, saying, "Oh, but ---I--- need independent on-board GPS and waterproofing to two leagues of depth for my SCUBA hobby, notifications that never ever glitch, and I want a privacy audit trail for all of my super-secret data about how many steps I take per day". Well, okay. Maybe just buy an Apple Watch then? It all depends on your definition of a "smart watch", but I am discussing how I believe that parent commenter and myself define it. If you're incredulous that week+ battery life is ubiquitous in this range, then we may be thinking about completely different things.
> Of course, a tsunami cancels all that advice.

As does a rapidly approaching wildfire. At that point, it is RV-on-the-road-elsewhere if I haven't already bugged out in it.
What? These attempts to shoehorn the opposite point into the conversation is rhetorically embarrassing. Both can be bad.
Sounds like that could good PM taking into account their team's capacity and prioritizing.
Anki is commonly used by Rubik's Cube enthusiasts who want to memorize lots of algorithms. You can do basic methods with just a few algorithms, but people use Anki when you want to memorize hundreds.
I just hope this won't eventually be the death of true device ownership. For all its cruft and flaws, x86 has served well as a standard platform for hackability and for alternative OSes like Linux to flourish on. Switching to ARM would give Microsoft and manufacturers an excuse to do away with all that.

I don't know what's the state of UEFI on ARM these days, but in a decade we could easily find ourselves in the same dire situation as phones, with a jungle of OEM-specific images, walled garden software and a boot chain cryptographically locked down.
I didn’t grab a screenshot, but I did see how the simulation can end. The day and night balls collided with each other at the boundary and got locked in place in a tight infinite loop, and never moved again.
Very nice. I would love to see some numbers including simulated packet loss. That's theoretically an area h3 would have an advantage.
I’ve never remembered anything by memorization. Only at school and university for exams, and only to promptly forget it one week later. The stuff that I have remembered for years I learned organically by using it, as part of some mental process, by embedding it in some larger structure. Be it coding, physics, or history. So I think this is a fairly individual matter
Your stance here is ridiculous. Common sense says it's wrong to arrest and/or prosecute people over such a trivial matter.

So much for all your supposed "justifications" for doing so. Have you completely lost all sense of proportionality here? Or has the legal system gone completely bonkers, then? Or are you trying to gaslight me?

We're talking about 0.1 watts of electricity being "stolen" at most.
Direct link to the goods: https://youtu.be/8hANE6qCldo?t=55

Impressive how quickly security responded with the barricades within 30 seconds. I wonder what other props are in their secret nearby closet.

@dahart, re: also kind of interesting the first visible response by the museum is to block the painting (and protestors) from view.

Security seemed to be trying to block the protesters from view, rather than hiding the defaced painting. It makes sense to set the goal at minimizing impact to the museum by taking away the forum spectacle the protestors wanted to create. This yields better optics compared to immediately resorting to physical force against the vandals, since that could lead to a more sympathetic interpretation by third parties (e.g. the public). This way, the protestors appear to me as more of unreasonable jerks who may have mental problems.

p.s. Thank you for the way, way better link!
They’ll probably just criminalize possession of GenAI image models. That’s clearly where the political winds are blowing.
Getting laid is important though too...
FYI this repo is empty except for a README.
A lot of it is reduced BOM. You can get a more robust solenoid lock and control it with a microprocessor for less than the cost of a robust, fully mechanical system, which is a system that needs mechanical maintenance and is subject to all sorts of false inputs like people putting all their weight on a lever.

Buttons flush with the surface or low profile levers such as the ones shown in the picture can be more robust against certain mechanical attacks simply by having lower weight, lower travel, and being smaller (don’t need to exhibit mechanical advantage).

I’m a fan of simple mechanisms with no software in them whenever possible, but I don’t have to deal with the cost and reliability problems.
In your average job instead of “research” it’s really “discovery”. which is trying to decipher what some business guy at your company or a customer really wants
We are having a discussion about opiate addiction, and you have failed to explain why the US's broken healthcare system is an important contributor to that problem. I certainly don't see how your experience with childbirth is relevant -- or bipolar disorder or ADHD.

Do you imagine for example that the non-broken healthcare systems of the world are what is preventing opiate addiction there from becoming as severe as it is in the US?
Immersion is the only "tool" I know that tries to make the next leap formalized. For language learning at least, saturating yourself with input lets the brain build the deep relational maps it needs to use language, and no amount of rote learning of arbitrary grammar and vocab can replace that process.