skysight-inc/HackerNews huggingface dataset:
Found it here.

https://i.blackhat.com/us-18/Wed-August-8/us-18-Shostack-Thr...

He used the term "scamicry": legit communications that mimic scams. For example when a company calls you directly and asks for your security details, but offer you no way to verify who they are first.
> Most people can be trained well to do any job required of them.

I really wish this were true, but especially in programming I don’t think this is the case.

I’ve spent years as a programming teacher. Some of my students have been among the most wonderful, enthusiastic, hard working students you can find. And yet, despite both of us working hard for a year or more, some never develop any talent whatsoever for programming. Statements like “everyone can code” can easily turn into a rod for their backs. - “Therefore if I’m not succeeding like many of the other students, it must be because I’m not trying hard enough, or there’s something wrong with me”. I don’t think this is anyone’s fault. Perpetuating the lie that all our brains have an equal capacity to program is a terribly cruel injustice. Some students would be much better served by finding another career that they can excel at. The faster they figure this out, the better.

Programming isn’t for everyone. It’s hard. Not everyone has the same capacity for it. I believe accepting that is an act of kindness.
Well in this case, A* outperforms in terms of funding a solution when it exists. It's just the transformer produces a solution faster, but misses some.
I am curious why weasels take people for an imbeciles?
Why would they even archive it? They don’t have to pay for hosting on YouTube, so those videos at this point are a cost free revenue stream.
Is (1939) the oldest date reference on HN so far?
By all definitions, including papers written by both, RAF Bomber Command and the USAAF at the time, deliberate bombing of enemy cities and civilians was a) a crime and b) didn't produce a meaningful effect on enemy moral or warfighting capabilities.
Is the new YouTube design really that beautiful?
My feeling is that, in the US, automobile regulations are derived from horse and carriage regulations.

When the horse was pulling the cart, it could get spooked and run off, killing or injuring pedestrians. Even though the driver nominally has control of the horse, the horse is an independent entity. This limited the liability of the driver. For example, if the horse ran off and killed someone, as long as the driver stuck around to explain, they wouldn't suffer very much in terms of consequences.

It seems today that automobiles, although not an independent entity, still get the same kind of protections as a horse does. That's why and automobile driver who kills a pedestrian in the street can basically get off scot-free, even though the driver has full control over the automobile at the time.
Minor in the grand scheme of things, but I thought interesting (or at least unexpected) - a bunch of rides at Disney World went down because they rely on AT&T push to talk for communication between staff, which is required for safety reasons to run some attractions.
I've taken a non-fiction tech book offline. It was just really dated and I didn't really want it out there any longer as a result.
Hm, very little to go off here. If you can see problem with your behavior, and it sounds like you can't fix it, you should seek out real help.

A post on hacker news doesn't seem the place for it. There are probably better support groups/forums to ask in.

There are probably many questions to answer that would help you determine what it is. A few that come to mind:

* Is this new or have you always struggled with procrastination?
* Do you have (or have you had) other symptoms of ADHD?
* How was/is school?
* Do you have some subjects you thrive in and some you fail at, and nothing between?
* Have you started a new job or role at work?
* Do you like it?
* Any other major life events? Fired, kid on the way, death in the family, my friend on discord stopped talking to me.
* Does the procrastination apply to almost everything?
* Are you doing something really hard, succeeding at that and can't make yourself do other hard things?
* Are you saturating your brain scrolling on the internet and it doesn't have room for anything else?
What’s the landscape of solutions here—is this made for a specific context of APIs, like connecting all of “your company’s” email and messaging APIs? Or, is it something like—if it has an API, we will connect to it…?

Asking because I have a client who is using a Sales POS that has an API, and we’re trying to integrate it with another service’s API that does Accounts Payable. Company2 has not implemented all features of Company1’s API and Company2 says, “that feature is not supported”.

Of course, the Company1 product is already configured and running. Company2’s _minimum implementation_ of Company1’s API de facto restricts how Company1’s product can be configured. Who would have imagined that?!

So I’m asking myself, is there even a market for a third-party to connect these two platforms? And how would that work if these two parties are not working together, why would either work with yet another third-party? What’s the landscape here; what do I look for? Are there generic API middlemen? Or do they only provide integration within certain contexts or industries or channels. How is the market divided up?
Regular advertising doesn't promise the user that they will get paid for clicking ads.

Regardless, whataboutism doesn't make Brave's scheme any less of a grift.
NIST, whose guidelines, somehow, even other federal departments and agencies usually don’t follow.

NIST has very good password complexity and management guidelines. Just USE THEM! It’s not that hard!

How do you have billion dollar companies that can’t RTFM.
German defense committee chief says Russia's attack on Germany
There are precisely two realizations that helped me beat procrastination, but I know that these won't be helpful in every situation:

- Totally keep motivation out of the equation. Depend fully on routine. Give yourself time to think before you commit to something. Totally reject it if you don't deem it worthy of doing. Once you make the decision, carve out slots in your calendar/text file for that task only. If it's something long term, make a habit of it, and do it even if you don't want to.

- Reading two chapters of a book is better than reading no chapters of a book. You are two chapters' knowledge worth wiser than yourself when you didn't start the book. Implementing two features in the your side project app leaves you more competent than when you didn't start at all. Realize this. Don't think about finishing, end results at all. Just start.

These don't guarantee you finish something. But these ensures that you start. Not finishing things is another problem, but that's not what the OP has asked.
Yeah, was working for a (then) 15k employee company and got an email "You have expenses due". Blank content, PDF attachment. I hadn't initiated any payments (but it later turned out the bank had just charged the annual tax on my corporate card account)

Ignored it.

Later got my manager asking as the expense team had been chasing down managers of people with overdue reports.
> i believe you've never had to go through year old large commits to figure out why a change was made? :)

Frequently. Folks joke that I'm not a software engineer but a software archaeologist. As you say the line count doesn't make any difference. If the PR is doing one thing that is good. If it has a good description describing the why and linking additional tickets/documents that's even better.
I'd like to see some sources dor those numbers. Also, Japan was ready to surrender, nukes or not.
To quote HN, "anything that gratifies one's intellectual curiosity." If it's good for HN, it's good for me.
The lack of use of a non-corp domain, the typos and the use of shortened links does sound like a form of incompetence, probably at the management layer.

However, the password rotation requirement was until relatively recently something that many IT auditors would actually recommend, even though it leads directly to bad user password choices. In fact I wouldn't be at surprised to learn that was still the case in a lot of places.
I have tons of anti-procrastination and organizational tips URLs bookmarked, some of which have been consumed.

I’m still a master procrastinator and my age starts with a 5. I probably won’t be late for my funeral, but only because someone else will be in charge of that.
This is why I've conditioned myself: Once I start running unsafe commands in a development-ish pattern (DDL changes, reboots, service starts/stops and such), I make sure to close any shell to productive systems and databases first. They are color-coded differently, normal users don't have these permissions and so on and so on, sure.

But it's better not to have these shells open and available to accidentally choose them once my brain switches from ops-mode to dev-mode.
As the user replying to you said, there are voice commands. But I get what you are saying — not everyone knows about or trusts the fidelity of the voice software.

I wonder though if Apple and Android could remove non-voice functionality from their platforms thereby forcing users to use voice to navigate certain features like song selection.

Or perhaps changing songs mechanically can only be done when the velocity of the vehicle is zero.

I suspect people will be pissed off about those changes, but I think if I were CEO and had the authority, I would sleep better at night knowing I am doing everything to try to curtail pedestrian deaths because of my product.
My UK bank semi-regularly cold-calls me and ask me to authenticate by providing personal information. When I decline they readily tell me instead to call some number available on the bank website. So they not only are incompetent, they actually know it.
My living room backs up to a T-intersection in the alley. I also live next door to a school.

Every. Single. Day. I see parents on their phone blowing through the stop signs in the alley at that intersection. During school drop-off! While there are kids and parents walking in that alley to get to the school!

It is utter madness.
The Unicode Standard (v15.1): Box Drawing [pdf]
"Do you think there a possibility that anyone with zero feedback is just new and it's their first time selling?"

Not if it's a brand-new 2024 account and the first sale is an ultra-high-demand NVIDIA graphics card with high VRAM.
2014 I'm flagging this
apple at it again. what a disgusting company
Show HN: GPU Prices on eBay
I've made yet another comparison site, this time for GPUs: https://gpu-prices.com/US/

It currently supports Australia, Canada, Ireland, the UK, and the US.

The tech stack is Python for data pull and static site generation then Cloudflare Pages for actually serving the site. It updates three times a day, but I could change it to ~6x before I ran into ratelimits. I'm hosting it from a raspberry pi under my desk, so this setup means that if my network/power go out the data just becomes a bit stale, rather than the entire website going down, as well as preventing me from getting hug-of-death-ed.

I would really appreciate some advice for how to market it. I'm an eighteen-year-old nerd with absolutely no clue how to do so, and I don't want to be the sleazy person spamming their affiliate links everywhere.
I don't say this to be rude, but honestly it's because they are an amateur company. When you're dealing with critical infrastructure like email, you should stick to the battle-tested services like SES, Postmark, Sendgrid etc.
Ask HN: Hustle Culture: Blessing or Curse?
Social media has boosted the hustle culture by showing off (probably) many false things and I can't seem to figure out if is it a good thing or not.

On one side, it stops me from being lazy but it then pushes me into this cycle:

- > FOMO -> Hustle -> Procrastination -> Burnout -> FOMO

How has this Hustling culture affected you and how have you reacted to it?
>>>Highway construction standards are much higher than they were 30-50 years ago,

The roads in many US cities arent built to those standards and are grandfathered from them. New York City highways areas horrible.
Two-edge-resolved 3D non-line-of-sight imaging with an ordinary camera
New detection method aims to warn of landslide tsunamis
An image of a face is literally personally identifiable information. A face is a unique identifier.
Detecting "gender" by facial recognition on a 21st century uni campus in the USA ... what could _possibly_ go wrong and cause a massive media meltdown?
a 10 minute test drive in upstate new york does not give you the time to understand all the issues, unfortunately. quite a few things I did not realize I didn't like until about 2-3 months driving the car daily.

I would agree in general. I think that if I knew about them I would probably have evaluated other car manufacturers more closely.
a gun is a glorified slingshot. that makes them _not dangerous_ I guess
IPO window opens, Reddit files to go public
You are correct, the costs of salaries alone should show a significant difference. I wish people would actually have real conversations about what things actually cost per country. It's disingenuous to compare the USA and India without a true cost analysis
I can do this with voice on my iPhone. Worst case scenario you pull over and do it.
Wouldn't it be better if the code editors only activated if the user interacts with one?

Even with caching it's absurd to download so much JS for a feature that probably most users will not use. It's a docs site after all.
So it's a workaround for "even small PRs take too long to review"?
Tacit programming
Ask HN: Can you recommend me an email marketing service?
I want to send a monthly or bi-monthly newsletter to approximately 1000 subscribers.

Any suggestions and advice on a service to handle this, which is relatively affordable?
I really don't get this hate Brave gets on HN and other tech forums. It's a de-Googled Chromium fork which retains support for Manifest v2 extensions and has a bunch of neat extra features like first-party ad-blocking, an (underused and probably at this point should be considered a failed experiment) advertising network where users are paid for the ads they consume, Tor-integration, Web3 integrations.

Yes, it defaults to enabling their advertising features, but that's just it, a default setting, it isn't hard to disable if you don't want to "take part of the experiment".
I think in situations like that, it's useful to take a step back and ask how much business value you're adding. If you really are the sole person working on a project, how likely is it that this one project having a bug or crash at some point, will super negatively impact the business?

If the answer is "unlikely", or you're not sure, then do it for its own sake (you enjoy it) or do it for yourself (maybe it'll look good on your CV, or it's good practice) - but don't expect recognition for it.
My chrome extension Clear Skies is still working as expected so... the weather's still great from my view. :)
Every motorcycle owner I've known has been struck by others or had very serious close calls, except one who didn't have it very long. Of those struck two of the five nearly died, one is a quadriplegic.

Riding motorcycles in urban areas is betting your life on other people's awareness.
Most of the long form content I see on YouTube is a 10 minute video stretched out over 50 minutes
And yet, right in the title, pedestrian deaths are soaring.
That he's calling it a glorified tape recorder suggests he'd have been smarter if he'd answer he doesn't know the field and so doesn't have anything to say about it, and is a strong argument for why listening to random smart people is not necessarily going to be very useful.
Why my code isn't in TypeScript
Jim Keller criticizes Nvidia's CUDA, x86
> But the Fed stuck in a loophole for Discover. And that is leading Capital One to buy it.

This isn’t a “loophole”.

It’s the difference between open-loop payment networks and closed-loop.

Visa/Mastercard are open-loop.

Whereas Amex & Discover are closed loop.

On closed-loop, both the issuer and acquirer is the same bank (Discover).

It’s way easier for a merchant to not accept closed-loop than it is open-loop, because they can just elect to not get an acquiring account at that bank (Discover).

This is why Amex and Discover have always been more expensive for a merchant to accept than Visa/Mastercard.

This article is way longer that it should be and it sensationalizes a fairly well known and simple difference.
Michael Collins' book Carrying the Fire proves that the sixties were vastly different to today.

For example people died while training to become astronauts, because the training was hard. This would be impossible today; the first time someone breaks so much as a leg the whole project would be suspended and several committees would need time to evaluate...
Wait really?? So what is it you're actually getting for a presumably marked-up price?
But most of the time you can not chose with whom to work
There's probably a lot of opportunity at the moment hooking AI stuff together some of which can be done on a small scale.

The opportunities are always going to be in new areas where the low hanging fruit hasn't all been picked yet.
The company I work for had a ransomware issue, so they got more zealous about security.

They require us to change our passwords every 45 days now. When I pointed out the NIST recommendations of not rotating passwords, they say they are following the guidance of the response team that helped them recover from the ransomware. And that the NIST doesn't actually deal with the real world.
My company's security training tells me to carefully verify any URLs in received emails, but then they have some security software that rewrites all the URLs in incoming emails - presumably as a way of screening them themselves.

This might be a reasonable trade-off for centralising monitoring, but it significantly hampers the ability to judge the legitimacy of emails myself. At least update your training!
Asked it to extract some data from a spreadsheet. It's first answer was wrong. I corrected it. It's second answer was wrong.

That's when I quit.

(It was a simple sheet. I said "list the names of all items where [column name] is false". There was about 60 rows)
News about the world of cryptocurrency emerges daily, and it's easy to miss some of it. In this episode of Implementing, I'll reveal how I automated the creation of daily episodes that provide summaries of YouTube videos from leading creators. I'd love to hear your thoughts!
What I'm not happy about is the marketing around turbo boost.

You know how ISPs used to sell "up to X Mbps"? Same idea. Your chip will turbo boost "up to 6.00 GHz".

It's basically automated overclocking, and as you learned, sometimes it can't even do it in a stable fashion. Some of those chips will never clock "up to 6.00 GHz" but they didn't lie. "up to"
The time complexity for deciding whether an N-letter string matches a regex or not, is O(N). The time complexity of finding all matches is not O(N) - which is needed in OPs case, because they want to split the string.

Also, OP's solution uses lookahead assertions, so it's not a real regular expression.

(I wonder if we can summon @burntsushi for expert opinion on this?)
Sure, but then you have to set ip addresses and network shares, it's a pain.
CD drives may not be able to emulate a keyboard, but they can certainly install software. You might not click on any system popups that appear after inserting a malicious CD, but the sort of people who plug in random USB sticks likely wouldn't bat an eye.

"The Sony BMG CD copy protection scandal concerns the copy protection measures included by Sony BMG on compact discs in 2005. When inserted into a computer, the CDs installed one of two pieces of software that provided a form of digital rights management (DRM) by modifying the operating system to interfere with CD copying. Neither program could easily be uninstalled, and they created vulnerabilities that were exploited by unrelated malware. One of the programs would install and "phone home" with reports on the user's private listening habits, even if the user refused its end-user license agreement (EULA), while the other was not mentioned in the EULA at all. Both programs contained code from several pieces of copylefted free software in an apparent infringement of copyright, and configured the operating system to hide the software's existence, leading to both programs being classified as rootkits."

https://en.m.wikipedia.org/wiki/Sony_BMG_copy_protection_roo...
> got a totally bonkers result they couldn’t anticipate.

I fundamentally disagree with this statement and frankly the entire line of reasoning

This isn’t some unforeseeable 3rd order side effect coming out of a black box from left field.

You’re always injecting an instruction to put in diverse people so now it’s always doing just that. Entirely predictable.

This is like adding a system prompt saying always put tamagotchi into the picture and then being puzzled by why a request for a dog painting includes an inappropriately present tamagotchi. Like wtf did you think would happen?
Cromite[0] is the best on Android, it's a privacy-oriented open source patchset on top of Chromium.

Cromite has a desktop build, but it's a bit more experimental than the mobile build, so you can use Ungoogled Chromium[1] instead. Ungoogled is also a privacy-oriented open source patchset on top of Chromium. Check the beta flags to enable some more interesting features like getClientRect anti-fingerprinting measures (unfortunately breaks some React-based sites that go into infinite re-render loop).

Both of these browsers selectively include patches from Brave, but they are community-oriented builds so imo more trustworthy than Brave, which continues to package various shady anti-features and always will because it's backed by a for-profit company.

LibreWolf[2] is the nicest Firefox-based one for desktop, I think. It's pretty hardcore, though, I most only use it to visit mainstream social media sites.

I tried a bunch of the Firefox-based ones on mobile and none of them clicked for me. Cromite is just too slick on Android. Put the address bar at the bottom and off you go. Only downside is no online syncing of tabs and bookmarks, but meh. You can save all open tabs to bookmark bar in one hit then export your bookmarks, send the file through whatever E2EE channel you want to your other device, import and reopen them again.

[0] https://github.com/uazo/cromite

[1] https://github.com/ungoogled-software/ungoogled-chromium

[2] https://librewolf.net/
Study finds individual tests cannot predict optimal teams
As someone who used to commute every day by public transport for >1 hour for years, I sincerely wish someone would disable the screen on all your devices, permanently.

I've seen plenty of delusional shit on HN when it comes to solving societal problems, and this is easily in top ten.
Was also thinking, cool, where is this place, and how do I sign up?

But then I remembered, I already belong to a religion that makes the
ownership of a smartphine quite unconscionable to me.

Indeed I wrote about how even a religious objection is unnecessary
when there's a knock-down argument on the grounds of what is merely
patently unethical.

> are expected to

I find these "expectations" come from those who didn't read Dickens.

[0] https://news.tuxmachines.org/n/2023/03/06/Microsoft_is_Not_a...
I’ve had instability with my 7700k since I bought it, and 16 months of bios updates haven’t helped. Maybe this latest generation of processors just has more trouble than older, simpler designs.
Factorio Friday Facts – Trash to Treasure
Seems to work even better without the `site:` qualifier.
Giving AI Brain Damage
I'm saddened, too, but it seems strange to frame the problem as people complacently embracing dull and insular lives, rather than a proliferation of dangerous jackasses who leave us no choice but to alter our behavior.