skysight-inc/HackerNews huggingface dataset:
How can organizations ensure robust defenses against relentless cyber threats? The answer lies in the strategic deployment of Penetration Testing as a Service (PTaaS) and the meticulous selection of an adept provider.

The foundation of a resilient cybersecurity posture rests upon the precision and depth of the chosen PTaaS provider. Opting for the right partner is not merely a decision; it's an imperative.

What is Penetration Testing as a Service?
Penetration Testing as a Service (PTaaS) is a comprehensive cybersecurity approach that offers continuous, on-demand penetration testing services to assess an organization's IT infrastructure, applications, and systems for vulnerabilities. Unlike traditional penetration testing, which often occurs intermittently, PTaaS operates as an ongoing, subscription-based service, providing regular assessments to identify potential weaknesses before they are exploited by malicious actors
I'm thinking they mean in the sense that it's not in mainstream use. Think of "underground" music which is played in clubs that are open and welcoming to the public.

One definition when I looked up the word was "a group or movement seeking to explore alternative forms of lifestyle or artistic expression" which I think also applies here.
> none of the cars have had physical gear selectors

what do you need a gear selector for? There is only one gear: “Single-speed fixed (9:1 ratio)”

https://en.wikipedia.org/wiki/Tesla_Model_3
I was just commenting on the difference of what I see between the two links. Here's what I see

Blocked by Signup: https://i.imgur.com/vrkQ8rS.png

Unblocked: https://i.imgur.com/R74nUPt.png

(This post was edited after Dang's comment)
I've wired electrical outlets without turning off the breaker, and I'm still here to type this. I would not, however, advise others to do so but rather emphasize the importance of turning off the breaker before doing electrical work.

Other than "nice day, eh?" or "No, as a matter of fact I do NOT know why you pulled me over", don't talk to cops without a lawyer.
> Because ID verification services had access to millions of "real" ID photos

It's all snake oil devised to shift the risk from a party who has a mandate to perform KYC to some broken by design AI woodoo, which will generate free money until it doesn't once the landscape or the legislator's will mood change.

They bank will then perform the actual KYC and will start asking questions once it sees something funny and will eat the cost of fraud at the end of the day.
> I'm a big fan of (sanctioned) street art

Exactly. In my old neighborhood the local college organizes a matching service - building owners and artists. The building owner (and random people that make donations) pays artists to make public art on their buildings. It provides housing (if they are from out of town), lifts and safety gear (if needed), paint, etc.

Some of them are huge [1] [2] [3] [4] but most are pretty small, that you would miss unless you are walking through the area [5] [6] [7]

[1] http://wabashartscorridor.org/portfolio_page/big-walls-ella-...

[2] http://wabashartscorridor.org/portfolio_page/diosa-jasmina-c...

[3] http://wabashartscorridor.org/portfolio_page/big-walls-kobra...

[4] http://wabashartscorridor.org/portfolio_page/mad-c/

[5] http://wabashartscorridor.org/portfolio_page/wabash-arts-cor...

[6] http://wabashartscorridor.org/portfolio_page/tima-fatima-ezz...

[7] http://wabashartscorridor.org/portfolio_page/wabash-arts-cor...
Hating on Tesla/Musk companies is one of the biggest trends on the internet right now, so that's going to be like asking people to be reasonable about Palestine. It goes well beyond rational reasons - well into identity/ideology - which on social media is usually an impenetrable wall when seeking nuance.
It looks very much like a blogvertisment. That is a blog post written only for the purpose of actually being an advertisement for some product (in this case, for VPN providers).
I built https://tailgate.dev/ a few months ago. It can help with deployment of simple, client-facing generative web apps. There are a few simple demos on the home page!
What a refreshingly clear and thought-out plan. This project honestly gives me a lot of hope.
I’m at a point in life where gambling doesn’t appeal to me. I could take VC, earn a (temporary) steady salary, and then, having given up controlling interest in my company, be at the back of the line for an exit while the VCs, who put no sweat equity into the company, get a huge payday.

Or, I can bootstrap, have less stability, all the control to hire just who I need and when … and less stress.

I’ve worked at two companies that took VC. In both cases, investors didn’t care about anything except whatever metric showed “growth” so they could exit larger than they entered - the tech didn’t matter, the team didn’t matter. Based on this sample size and so many stories from SV about how founders and employees are treated, I have a hard time seeing VCs as anything but leeches.
Kia Telluride has a HUD that projects a bunch of info on the driver’s side windshield. It is awesome, a bunch of info is available to you without having to turn your head away from the front.

This is different from a headset where you are not seeing things directly but instead through cameras and some amount of visual processing. Also, vehicle HUDs show limited info and are not distracting eg they don’t project a game or video on your windshield.
Yeah I literally did this last week for a new in house AI assistant for my company. Just swap out Jenkins for GH actions (sadly). So... can confirm.
> Also it really feels like all the air has been let out of the docker/kubernetes/cloud-native balloon that was so popular in the late 2010s.

Kubernetes is just boring now. It's stable, the people who need to know it probably know it. I started working and contributing to k8s in 2015 back in version 1.1. 7 years of the same technology. I haven't even used it in 2-3 years (1.18) and I know I can hop over to it and do exactly what I used to do with some CRD flare.

All of the contributors should be proud of what they've built, that's the goal in the end, stability to where it's an afterthought.
You can also drive without a seat belt several times and likely be ok. It only takes one time to be proven wrong, however, and by then, it may be too late to learn the lesson.
Ctgan: Generating synthetic data in Python using GANs
Now rebut the idea that condoning the breaking of windows and laws has a negative impact.

The connection between supporting broken windows, and those who break them is a lot more direct.

>The real blemish on the cityscape is a half-finished luxury condo building, not the colorful paint job.
I'm in the process of standing up a Chrome & Firefox extension. Can I ask what your route to traction was? Many thanks...
Apparently "hypersonic missiles" translates to "maneuverable anti-ship ballistic missile" in plain English. It's different from conventional cruise missiles in the sense that pocket Windows computers aren't phones.
In fact you must look. A red light won't stop anyone from t-boning you if they aren't paying attention.
If there really serious about this, they'll realize they need to add erased but not specialized types to rust, and existential types.

If you can replace

void qsort(void base[.size * .nmemb], size_t nmemb, size_t size,
int (*compar)(const void [.size], const void [.size]))

with

extern "C" fn qsort<erase T>(base: *const T, nmemb: usize, compar: fn(*const T, *const T) -> std::ffi::c_int)

such that `qsort` is still single a regular C function, not something that corresponds to many separate C functions, many good things are possible.

In particular for C++, being able to do

struct MyVTable<erase T> {
virt_method_0: fn(*const T) -> bool,
virt_method_2: fn(*const T, usize) -> (usize, usize),
};

struct MyType<erase R> {
vtable: *const MyVTable<MyType<R>>,
rest_of_fields: R,
};

Opens a lot of doors. People while whine because it is exposing the C++ ABI in the Rust API, but that's fine. That's what `private` is there to fix.
They were talking about Google Glass, which was cheaper
> Now, should it be larger? Probably. I'd prefer if rustlang had a standard async/await implementation rather than leaving it up to the ecosystem.

What you are describing is a problem, no doubt about it, but it's not as if this isn't something that can't come up in javaland. For example, dealing with a project that uses both Gson and Jackson. Or dealing with a project that's mixed together Netty with Apache http.

And when you can ignore these dead libs very much depends on what the other parts of the lib you are dealing with. For example, you might never interact with `Enumeration` or `Vector` yet there are parts of the Swing api that expose those.
Lack of understanding of X almost inevitably leads to a lack of valuing of X. Then the incentives will become perverse.

The best bosses I've worked for are the minority who took the time to understand at least some of the technical side of things.

I'm always struck by the fact that I, as a lowly dev, am expected to understand the business yet the suits floating far above me think they don't need to know what actually happens down below. Bad mistake. Lack of knowledge is never a good thing.
How does your pipeline work with an app that requires many other services to work?
I'm happy to see people looking at /front?day=yyyy-mm-dd because it's a trove of great stories and threads. It's linked from "past" in the top bar, if anyone didn't know.

Please realize that it isn't an exact representation of the front page at any particular time. For that you'd want a point, not an interval, and certainly not a 24 hour interval, which is what /front?day=yyyy-mm-dd is showing.

What's it called when you make a single photograph by overexposing a series of time-lapsed frames into one? It's like that. I found it trickier than I expected to write the code to do this, but I think the result serves its purpose: to give people a way to find frontpage stories they may have missed.

We do this via a combination of votes and frontpage time, but only back to 2014-11-11 which is when we started logging the lists of stories on the front page. Those are the 'frames' in the above analogy. Before 2014-11-11, we only rank by votes because it's all the data we have.

If you want to look at actual snapshots from the past, archive.org has a lot of them, e.g. https://web.archive.org/web/20160620131548/https://news.ycom.... Perhaps OP could add random links to those as well!
Charted: High School Dropout Rates in the United States
When you're wearing the headset, you're not truly seeing what's in front of you in realtime; it's not a window. Instead, you're seeing a video using the cameras on the exterior of the device which is then streamed to the displays on the interior. This introduces latency. The published stats are something absurd, like 12ms which is allegedly faster than the human eye can even perceive, but what if there's a CPU spike and lag?

On top of that, the FOV is much more restricted in the headset than the average human's, and there is noticeable distortion introduced at the edges of the displays as documented by several reviews. So you're seeing less than you normally would, and it's warped.

Those things aside, if you're wearing the VR headset, it's likely you're doing something that is pulling your focus away from the act of driving.
>But it's not enforced against police officers.

That's true for a lot of laws.
They mean "c" as in "circa," i.e., about 380 had been delivered.
This is basically an argument from authority (or popularity, maybe a bit of both), doubled with an ad hominem attack.
Relativistic effects do not put you in the future - you still are here and now. You just arrive at "here and now" faster :)
On the async front, more work needs to be done to allow a more "plug and play" scenario for async runtimes. Standard APIs/traits for task spawning & mgmt, channels, locks, etc. Because right now it's not really feasible to write a library in an async-agnostic way, and tokio just owns the field even in places where it's not really appropriate or the best choice.
It's a bit debatable whether this is a security bug vs a "you're holding it wrong" kind of bug, but fixing the bounds check is a good defensive practice and I'm glad they implemented it.

Somewhat tangentially, Microsoft at one point got in a bit of trouble for trying to use a randomized comparison function to implement shuffling on their "Browser choice" page:

https://www.robweir.com/blog/2010/02/microsoft-random-browse...
Midjourney and DALLE 3 are state of the art. Not only are fingers not a problem, they semi-reliably generate images of the same person for different angles and different environments.

Finger count problem has been basically solved since Fall 2023.
Hacker Rank 2024 Developer Skills Report
I probably wouldn't pay for something like this. Like KomoD said, Dashy does a lot of what I need (and more) for free and is open source.
How to CAD Almost Anything: MIT IAP 2024
Indeed, and,

I have been waiting patiently for Siri to offer to read messages from you, in your voice,

which is a useful component of having an avatar which has learned your facial expressions, and voice, and communication style, proxy for you.

They have the data. They're good at repackaging the squick as sparkle.
I think these guys did a pretty fair description of the trade-offs of bootstrap vs VC. I am currently bootstrapping a company and am really happy with the approach. There are certain types of companies that are great opportunities for bootstrapping and really don't need VC funding.

One thing I think is missed from the Dalton and Michael's discussion is that while VCs know that bootstrapping is a very valid path and aren't lobbying against it, many young founders don't know much about bootstrapping. The biggest tech companies get the most attention and big companies generally need VC funding.

So I agree that it is a "fake" controversy, but I also think it is important for more potential founders to hear about how bootstrapping may be a very valid and good path for them.
"Gear selector" is an anachronism. Most modern gear selectors are entirely electronic on newer cars. What I'm talking about is a physical, permanent fixture that is used to change the car's transmission state into/from park, reverse, neutral, and forward (drive). You still will occasionally need to do this in an EV, for instance, in the case of an electrical failure and you need to push the vehicle out of the way of traffic. Or literally just backing out of your driveway.

Seems sort of pedantic to say "what do you need a gear selector for," obviously I'm not talking about an H-pattern and a clutch.
I’ve noticed the opposite with chatgpt.

To be fair, idk how much elixir code is in the training set.
It’ll be expensive, complicated, unenforceable, and won’t actually prevent anyone from seeing porn on the internet. This solution isn’t based in reality in any way. Its purpose is to signal virtue.
Yep. No ridiculous sunglasses either.
Not if you paint a QR code....
The NHS doesn't have a problem with too few patients anywhere. Just look at the chaos of the recently opened dentists that saw massive queues down the street, where police had to intervene to control the crowds. The reason: the dentist was new and accepting NHS patients.

A system that can't even provide dental slots without needing police to break up fights is a catastrophically failed system and it is a huge problem of the UK that people have loyalty to this dying corpse of a department.
> I worked on a chrome extension a few weeks ago that skips sponsorship sections in YouTube videos by reading through the transcript

You might want to connect that to SponsorBlock

https://sponsor.ajay.app/
Worth noting afaik all kicad file formats were already sexprs, can't get much better than that.

In that vein, I'd imagine it would make lot of sense to build a lisp on top of that, macros and sexpr manipulation are very much the strong points of lisps.
The priority is a large educated workforce while not tossing away potential talent because they were born to the wrong parents.

But note that teams built from cognitively diverse members are far more productive while homogeneous teams dramatically underperform.

https://hbr.org/2017/03/teams-solve-problems-faster-when-the...
Jooby Web Framework for JVM
It's always around the top of the TechEmpower benchmarks, but it isn't winning the marketing wars...
What are the monthly fees on the sim card, or is part of an existing cell plan?
> If it is illegal to say "We have all of the proof we need to convict you, you are going away for life, but if you confess we'll shorten your sentence" when they have no proof at all it's going to put a heavy burden on the prosecutor to get that person in jail.

That's not a realistic scenario. All actual evidence is disclosed as a matter of course in the justice process. Any bottom barrel attorney assures this, to whom the defendant has a right.
I've been to some of the worst parties ever like that, for sure.

EDIT (since I can't reply to myself): <winks>
Learning to live is arming the eastern NATO border to the teeth. Russia has never stopped trying to expand westward, is still very far from giving up on its imperialism and strength is the only language it understands.
Yeah, I can't give the King's men much credit here. They destroyed a lot of scrolls, and it was only because they weren't getting much of anything that they stopped and abandoned excavations or focused on digging out sculptures they could show off (many now in the Getty Museum - great museum, but I did feel a bit melancholy thinking about the scrolls while I was there in 2019).
Yeah this is nice if you have large teams and repeatable projects. Smaller companies have much more ad-hoc requests. I stood up an entirely new type of project end-to-end from a docker compose into our cluster. Re-used alot of code base but it was still a bit of work. Much less than it used to be though.
The AVP is not transparent like a windshield. They make it look like transparent ski googles, but it isn't. It has cameras pointing forward, and it displays that on the screen inside the headset. So all kinds of things will go wrong - the display can lag, freeze, turn off, etc. It would be like driving down the highway in reverse using only your backup camera.
You can always use ctags or EIEIO if you must. I've used many LSP servers and haven't come across one that isn't on nixpkgs, I'm curious what ancient system you're running intellij on.
HR retaliates frequently
I cannot investigate further because I'm at work, but if they use that clearnet url you linked, they aren't really a darknet (since they're clearnet).

Underground makes more sense here as they're clearnet but you have to be "in the know" to know about them.
HiSilicon =/= Hisense.
Incredible effort. Text of scroll is essentially "drink more Ovaltine" which is on theme.
>When what you want to lock behind your security system is essentially "all economic value in the world"

Do I really?
I know chat is lame and overdone but here's my open source local AI chat app for macOS :). I wanted something simple enough for the non-technical people in my life who were using ChatGPT. For better or worse, those people are mostly not using chat AI much anymore. Seems like the initial awe wore off.

https://github.com/psugihara/FreeChat

I'm also working on a little text adventure game that I hope to release soon.
It is extremely different.

1. Field of View alone is the reason enough to ban it on the road. You don't see shit to the sides.

2. The amount of data presented (area) is an order of magnitude more in a case of a VR helmet than a typical HUD.

3. The type of content presented is way different, in the car the content is "boring" it's just a steady stream of telemetry so to say. No one stares at the tachometer most of the time they ride without interruptions. Unlike some media content like a movie, game, stream etc.

4. The brightness of the content is way higher than of a HUD.

5. Headphones block external sounds.
Intresting that the problem only occurs when using a buggy comparison function, but one of the most obvious comparison functions is buggy (a - b can suffer from integer overflow) so this vulnerability may very well exist in the wild.
It is always fine until it isn’t.
First off - best of luck to y'all. The HW EDA space is sorely in need of tooling improvements. I'm curious as to how your product differs from JITX. They claim the same sort of thing - code based PCB development. And they've been around for a few years now.
> "No, as a matter of fact I do NOT know why you pulled me over"

For bonus points, quote "99 Problems":

"Do I learn like a mind reader, sir? I don't know."

(that entire verse is quite educational)
There is a significant chance you have ADHD.

You are disciplined enough to get stuff you need done during the day, but you still need a dopamine hit, which is why you sit on the internet.

Getting on meds can pretty much eliminate this.
> this benefit is impossible to quantify on a quarterly report

Well I think this is a more precise version of the short term long term dichotomy I expressed. So much of our world is dictated by quarterly reports and it's incredibly destructive. Isn't one of the key things that makes humans unique is our ability to do future planning? I guess quarterly is more than most animals, but it still seems incredibly short sighted considering we learned to prep for winter millennia ago.
Sure, but the FoV is still much more limited with the AVP than the one you have IRL with your own eyes.
Apparntly the bad news is that the remaining scrolls most likely contain yet more Epicurean philosophy, maybe largely from not-top-rated guys like Philodemus. (Apparently it's possible that the library actually is, or incorporates, Philodemus' personal library.) https://twitter.com/DrFrancisYoung/status/175453630645602754...
sure, but that doesnt mean the proposed solution is even worse than the status quo.
>Wright's lawyer Anthony Grabiner, however, argued in court filings that he has produced "clear evidence demonstrating his authorship of the white paper and creation of bitcoin".
Grabiner added that it was "striking" that no one else had publicly claimed to be Satoshi.
"If Dr Wright were not Satoshi, the real Satoshi would have been expected to come forward to counter the claim," he said.

Satoshi isn't going to show his face to disprove this guy's claims. Maybe that's what this whole thing is, bait for Satoshi to actually appear.
The AR aspects of the headset also obscure the wearers view. He could a 72" "TV" being displayed inside the headset, obscuring the road completely.
I apologize if this is a stupid question but why wouldn't everyone be investing in India with these returns being standard? In the US we would assume a conservative rate of 7%
AR goggles have a relatively narrow field of vision making it less likely to notice peripheral movement, such is critical for driving. They have quite short battery life – just a couple of hours. When they fail, you are effectively blind until you remove them. They can also fail due to a software glitch or crash. Removing the goggles can be disorienting and fiddly. They can be set so that there is little or no passthrough of external video – which would be highly hazardous, even if done accidentally. It's not really possible to establish eye contact with someone wearing AR goggles, which can be important when interacting with a driver. They're also not legal eyewear for driving.