skysight-inc/HackerNews huggingface dataset:
But their work is essentially penetration testing and exploit development. That usually counts as offensive side. They are not designing and building secure-by-design stuff, for example.

They are known for breaking stuff, and everyone wants to be the same.

Goal might be defensive in everything cyber security researchers do, but that was not my point.
And you can also enjoy some free ones, in the Vercors for instance.
Unless I have something meaningful to say about a topic, I won't leave a comment about it. Posting just for the sake of posting doesn't really make for an interesting conversation.

And given how niche/technical many topics here are, I suspect that's true for most people. They'll discuss things they're interested in, and pass by things they have no interest or knowledge of.

This is also why political topics tend to blow up here as far as comment count goes, since it's much easier to give your two cents about how Musk is destroying Twitter than to talk about the latest in astrophysics from a research paper.
If you add screenshots to your README, it will be great!
TableFlip v1.6.0: JSON Support and Font Resizing
Time is not special regarding symmetries and conserved quantities.
In general you can consider any family of continuous transformations parametrised by some real variable s: be it translations by a distance x, rotations by an angle φ, etc. These are technically one-parameter subgroups of a Lie group.

Then, if your dynamical system is symmetrical under these transformations you can construct a quantity whose derivative wrt s is zero.
Plone was closest I saw, also run by several gov agencies, but drupal popularity won out to due to ease of staffing.
The company was sacked, the expression goes. The employees of the terminated company are not sacked, layed off, terminated
We can kinda have that already, it's just non-standard and rarely used. Here's for instance neofetch with actual graphics:

https://i.imgur.com/fHdkkLn.png
I think our definition of «solved» might be slightly different hehe.

«The production release of TigerBeetle is imminent.»

Not putting money into this system any time soon in other words.
Open source would also mean it is available to sanctioned countries like china.
How can there be 'too many resources already'?

Even a single sci-fi fanatic, who genuinely desires a giant Star-Trek like spaceship, requires more 'resources' to satisfy their desire then the entirety of mankind has access to at the present moment.

Let alone the billions of people with more modest but still quite sizeable desires.
> Even educated people (perhaps, especially educated people) trust other professionals to do their jobs.

That's a pretty sweeping generalization. As Ronald Reagan used to say (to the point of annoying Mikhail Gorbachev), the old Russian proverb is, trust, but verify.

Or as they say in the nuclear Navy (and I hammer into my 3L students), you get what you INspect, not what you EXpect.
Colorful ponies? Blasphemy!

The Unix way is to do one thing and do it well:

fortune | cowsay | lolcat
"Better than images & pixels in the terminal would be a GUI platform that is as simple to use and integrate as the terminal and still feels natural to use with the keyboard. And has a toggle for animations."

This. What I'd really like is some sort of simple API/structured data standard that tools could implement and then a "generic technical UI" which can automatically generate a UI for that tool. (the UI doesn't have to be pretty or fancy, as long as it lets me quickly and effectively make use of the tools).

I think REST endpoints with an OpenAPI definition that automatically lets you generate an HTML documentation with built-in API client goes a bit into that direction. As did Microsoft's idea of "commandlets" I believe. As, actually, did HTML+HTTP in its original inception. However, so far all of those massively fall short in the "allow effective use of the tool" metric: For actual work, it's still way faster and more convenient to make a REST call via curl (once you figured out how to assemble the call!) - than to click around in the OpenAPI client. But maybe some future tool/standard could bring something better to the table here.
Can you DM me on twitter? (https://twitter.com/Adnan_Jindani)

I am planning to add apkg imports for RepIt so if you could send a sample apkg to me, that would be awesome.
All anki users will be able to use RepIt easily and will also take advantage of a better UI!
Thanks, this looks fantastic. I just installed the mobile app and will be migrating off Authy as well. Don’t have a lot of faith in Authy’s longevity after they discontinued the desktop apps, and the dead end is an issue too.
How many legs are there in a transaction?
Isn't the pricing a bit on the upper side,
It could have been lower like similar to google one
When I was young, kids in middle school would pick up smoking. Just because it didn’t happen to you it doesn’t mean it didn’t happen.

I’m against the general “what about the kids” rhetoric, but in this case it’s both important and easy to implement, because sellers already card you for the aforementioned purchases.
I have been downvoted here which is fine. But no one took the time to elaborate on where i am wrong ? Tell me where i am wrong please.
Two UIs will cost twice as much to design and build, but frankly, we have stdout and stderr today, you just don't see most GUI application developers making use of them.

As a developer/power user, if you let me configure your app with a dotfile that I can keep in my git repo, and you spit out useful info via stdout/stderr when I run your app via the terminal... in many use cases I'm happy as a clam to be honest. In fact one reason I tend to gravitate toward open source apps is because they tend to be more likely to do this, what with their users often also being their developers.
> provide all the information a power user could use

> not overwhelm beginners/new users

This isn’t the right distinction, IMO. I’m decisively a “power user”, but I hate high-density UI for the same reason I don’t leave all my belongings out in the open: it’s cluttered. Clutter can be stressful and tiring.
I was looking at this space and nicegui seemed like the best ootb experience.

https://nicegui.io/

Fastui seems prettty barebones mostly a form adapter to pydantic models that I can see.
We've spend time debugging this and talking to our service provider's[1] support, but haven't been able to figure out the root cause.

If there are any experts reading this, we'd be grateful if you could let us know what we're doing wrong here.

We're in the middle of switching over to SES because they are landing flawlessly into Gmail inboxes, but it would still be good to understand what we could have done better.

[1]: https://www.zoho.com/zeptomail
It is defensive, but for the best guys out there, the carrot is on offensive side. You are not getting rewarded for doing perfectly secure systems, unless you work in very big company.

It means that most of the average guys build defense, and then the best guys test them and pick the money when something is found. While we could prevent most issues if those best guys help on building the systems instead.

But they have no motivation, because they get more money from other things.
Ye. I mean looking at the pics, this would easely pass as a local community thing for kids. It seems suprisingly ambitious given the accusation.

I guess the only problem is that they charged 2 or 3 tumes as much as people think it is worth.

If you live in a high cost of living area though, you have to pay marked price for scrappy things though. People can't have their cake and eat it too, where other people should work for pennies.
Surely "espeak" also struggles with the code leading to the debugger, no? This seems like a much larger problem than just the ui, and adding an LLM to the mix isn't going to fix anything.

(Unless of course the debugger is being seen by a non-technical end-user, but that again seems like a failure to handle errors in a reasonable way than anything an LLM would solve.)
when I ask for image of pope and it only generates black pope, you might have an issue.

The inclusion and diversity ideas on the surface sounds good but when it comes to implementation they produce counter productive outcomes.

When I was starting career in software women were quite rare, but every single one of woman I worked with were above average at minimum.

Now you get ton of women who did postgrad course and suddenly are programmers and 'somehow' passed an interview without any idea how to program.

Sure now we have more women 'engineers' we are more divers, the real outcome. The actual woman engineers have it harder to be not view through prism of diversity hires.
I couldn't agree with this comment more. If my memory serves me correctly, the next step up for me, in terms of being blown away, was when my dad gave me a Sound Blaster card (the very first one released, which was 8 bits, from Creative Labs as they were called back in the day). I hooked up a couple of really crappy analog speakers to the 286SX with an EGA card and monitor. That was the first time I experienced non BEEP BOP crappy sound on a PC.

...There were those games from Access Software which touted their Realsound tech, or whatever it was called. The Sound Blaster was, for me, the beginning of a newfound respect for PC hardware; I was no longer jealous of my friends who had their Amigas. I really miss the awe and wonder of those days. The days where every seemingly minor advancement actually served as a huge leap in terms of the experiential qualities of games. These days people whine about ray-tracing performance and having to play stuff at < 120FPS. I get it - I just really miss the "before times". Like the first time seeing an image rendered in full 256 colour VGA. </end oldtimer rant>
https://government.github.com/community/ also has international organisations
Beal University Launches New Online Cannabis Diploma Program
I mean if you want to actually make a monkey island like game you could try using Adventure Game Studio, which is made to make games like that.
Cheers! I became a bit obsessed with timelapses and this technique during the pandemic. It was shot in Ichikawa, Chiba, close to the station.

And yes, definitely, it's quite stark. I guess a combination of being shot in summer and Tokyo's location relatively close to the equator. I'm originally from southern Australia and the dusk there is far longer.
Fentanyl in MDMA, an easily synthesised empathogen stimulant - i.e. the complete opposite of an opioid high?

Are dealers just sprinkling it like fairy dust over everything?

What on earth is going on over there?
Wow I had no idea this was on YouTube.

This book is the one I always recommended for someone getting started in security.
Why is local on device ml a pro when compared to google photos?
Part of the value for photos for me is the fact that they do all the ml work ahead of time on their servers and not my tiny battery powered gadget. I can open it in on any device and search any photo instantly.
You mean where part is paid for with your data? ;) (sorry low hanging fruit)
Apple and Google can disable Pegasus whenever they wish.
I never seen failed pvc window after decades of zero maintenance. I own maybe 25 window panes and can't imagine wanting to own a single wooden one.
> The only reason we don't have animation frameworks for the terminal is because it's not possible

https://nick-black.com/dankwiki/index.php/Notcurses
Getting your PlayStation chipped in the UK was like a working class rite of passage. You’d hand it over to some bloke and get it back a few days later, along with a printed spreadsheet of pirated games you could get.

Once PCs with writable CD drives became more affordable the catalogue became less relevant and you’d just rent titles from Blockbusters and copy them instead.

By the time the Xbox 360 and PS3 were out, the pre-owned market was strong enough that you could buy a game on release and trade-it in at practically no loss once you were done.
> Have you inherited a codebase written by a coding rockstar.

This 0.1x dev, with huge attention to detail, misplaced a period for a question mark.
Show HN: Wake Up to Friends' Real-Time Voices with Moneep, the Social Alarm App
Hello there!

I'm Ryosuke, the developer behind moneep.

I've always felt deeply dissatisfied with waking up to alarms every morning. Especially when waking up alone, it can be quite lonely and demotivating.

That's why I created a streaming platform where instead of alarms, you can wake up to the real-time voices of your friends.

By tuning into live streams hosted by your friends, you can feel like you're right there with them, sharing laughter and starting your day on a positive note.

Whether you're someone who struggles to get out of bed in the morning or just looking for a fun way to kickstart your day, moneep has something for everyone.

The moneep app is available for both iOS and Android.

Give it a try and let me know what you think!
HardenedBSD February 2024 status report
Well it certainly represents a failure to communicate coherent semantics to people who don't recognize acceptable forms of abuse.
It sounds like you are claiming that IA’s have been punished for their abuses, but we’ll just have to trust you on it because the punishments were classified operations. Doesn’t make sense at all, unless you’re saying that the punishments were certain spy chiefs secretly murdered or something.
I don't know how aware Waymo cars are of their surroundings. Why don't they have a (or something like a) 360 degree string of LEDs (for example on the roof) that lights up a few in the direction of human obstacles if they're close enough? Bonus points if they're colored to indicate everything is ok or there's potential caution/danger.

They're still trying to do this weird universal signage when they need some way to replicate eye contact and 1-to-1 signaling. I feel safe biking or driving around other cars because I can directly communicate and negotiate with other traffic participants. I can't do that with an automated car as they're currently designed, and I feel like that's a huge flaw.
> Anyone else dropping out of this field? What are you going into next?

Already out.

Haven't decided what next, but I am 100% done with being a fullstack or backend dev.
It's the 'accidentally' part that's the problem. Finding out that you need to delete something is not the same as accidentally deleting it.

'Unexpectedly' would be a little more accurate I think. Or just 'That time I deleted a game from MAME'.
What did Uncle Bob do, besides being good at marketing?
Where I live, saunas have the stove’s inlet outside the sauna itself.
You plug your phone in at night, so it probably has 7 hours a day to do that work.

iOS does the same. They cannot do it on the server because they don’t have access to them.
FWIW, I'm Italian and have grown up in Italy and I have certainly seen it used.
Kudos for the great site and ethos. You still seem pretty buoyed by the experience. Ultimately, I found the article pretty depressing. Your initial free offering with a good UX and relatively little ongoing maintenance was destroyed by an army of criminals. It ended up wiping out weeks of your time developing increasingly complex cat and mouse techniques. Ultimately resulting in you abandoning most of the free plan altogether.

Kinda sad that this is what the online world has become.

And we just put up with it.

Imagine if walking down the road each day was like this – people lining up ready to swindle you or manhandle you in order to steal your things. There would be outrage. But online we have just sort of reached a weird state of acceptance I guess.
Yep, here's TAG's (Threat Analysis Group) recent report on Commercial Surveillance Vendors (CSVs) making millions with SaaS-like business models: https://storage.googleapis.com/gweb-uniblog-publish-prod/doc...

Apparently, the social & political elites worldwide are tripping themselves over to purchase licenses from these CSVs that cost millions.
Except the same thing might happen to your ext4 cloud instance and they’ll just tell you it’s lost.
The history of OS/2 [video]
Practical Malware Analysis (Book)
GitHub:
https://github.com/mikesiko/PracticalMalwareAnalysis-Labs
The issue is that with LLMs it's fundamentally impossible to have a "prepared statement" (the database query concept), whereas a web browser has no problem in principle being a safe sandbox. With LLMs, we have no idea how to make them safe even in principle. This has nothing to do with "security is hard" hand-waving.
I don't think this service is End-to-End encrypted the way we would like to think it is. If you can share pictures with friends by just giving them a link to a page, the server app has the encryption keys too.
Would love it more if they offered more searches for their basic $5 per month plan. 300 searches in a month is just too low. Now triple that and I would sign up in a heartbeat.
I don't condone it, I'm just saying it how it is in reality.
It's even called "FastUI", that is hilarious.
A 'corporation' is just a group of people who've signed a pile of contracts, sometimes all physically located in one jurisdiction, but often in multiple simultaneously.

So it doesn't seem likely anyone on HN ever genuinely thought they all groups of people are 'morally pure'. If they seemed like it they were probably just pulling your leg or trolling.

It's even less likely that anyone actually does 'nothing' when they encounter groups of suspicious people in real life, unless they are an extreme doormat.

Maybe try re-examining some of your assumptions about other HN users?
> our natgas utility: they want to charge new build connection fees up-front instead of recovering over decades.

That sounds like a part of a (welcome and positive) death spiral for natural gas.
The stated goal/outcome seems pretty good. Glad to see more of this in Python in particular.

To those dissing it for production use case over a hand build frontend by a frontend dev: yeah, no shit. But not everything needs such work put in. This is perfect for internal tools, and there's plenty of indie hackers out there proving that you don't need an immaculate UI to get customers anyway. Use it for what it is good for.

We need more tools like this, because it cuts the development effort in half when it hits its stride. That's very valuable for internal tools especially, where you need something functional first and pretty second.

That being said, as a biased Laravel developer, I can highly recommend Filament both as an admin panel builder and declarative UI component kit like FastUI. It's Livewire based instead of React/Vue/etc and so firmly within the Laravel ecosystem, if that bothers you. https://filamentphp.com/
> Far easier to just request and obtain the resulting intelligence from partner intelligence organizations who are using it.

Couldnt they ask to spy on a phone owned by them to try to learn how the phones are infected?
1. I agree with the sibling comment, that's usually not the depth I need for application level info. So the entire skill and infrastructure cost for metrics still exists.
But it's nice to have as basic data for triage.

2. I always wonder whether that's a timing thing vs. NetworkPolicies and encrypted inter-node traffic.
Are the realistic attack scenarios where it's possible to read out intra-cluster traffic but not mess with the cluster, or even read the intra-pod traffic?

3. I've been quite disappointed with how little k8s provides here. I wish it was easier to move traffic off of an old version and only shut the pod down once the last connection was done :/
Maybe I need to look into a service mesh for that?

4. What's the difference to e.g. kubeshark, or just attaching a tcpdump debugcontainer to the pod? Another instance of first to market / potentially nicer ecosystem?

5. I get squeemish with infra-level activities like this.
Yes, technically the http method and some headers should make it obvious whether that's save or might break at-least/at-most once or similar semantics.
But that requires well behaved applications. While the premise here is infra imposing behaviour to allow applications to be looser around these kind of things.
This article gives an overview of the 5 or so most popular services mesh options for Kubernetes for Enterprise installations.
So if you are reading it and not the target audience, keep that in mind.
Also, people in the comments arguing against service mesh with “it seems”, “i assume”, “i think”, etc. Please read the list of concerns that a service mesh is good at resolving, also in this article. If you don’t have these concerns, it doesn’t mean they dont exist elsewhere, right?
You want to control certain aspects of the output, and only leave the rest up to the GAI. The issue is that AI models don’t have a reliable mechanism for doing so.
The link contains the needed keys. It's explained in their FAQ.
Takeout is malicious compliance.

Google Photos already has a public API. But you cannot consume it if you are building a competing service[1]. Also, the APIs will not serve you files in their original quality.

If they wanted to honor the intent behind GDPR's portability mandate, it would have been trivial for them to enable seamless migrations.

Now what's ironic is how Google is a "partner" in the Data Transfer Initiative[2].

[1]: https://developers.google.com/photos/library/guides/acceptab...

[2]: https://dtinit.org
Why and how I build terrible things
Your post doesn't address my question (and neither do any of the others replies). The article says:

> If the data can’t be parsed into a valid TLV, instead of throwing it away, return a syntactically correct dummy TLV. This can be anything, as long as it can be successfully unpacked.

Is the syntactically correct dummy value the same each time? If so, how does that lead to new coverage?

If it's a different valid TLV value each time, then it's not really a dummy value, is it? In any case, why bother with this "if invalid replace with dummy" step? Why not generate/mutate a valid TLV value from the start?
The main problem I see with FOSS projects using Discord is a misunderstanding of what the platform is, and what it works best for.

Discord works fine as a chat room. As a way to have casual conversations about everyday topics, with the expectation being that you'll likely never have to refer to them ever again. If you want to discuss what you had for breakfast that morning, knock yourself out. Something like Discord or Slack or Matrix is perfect for that.

The problem is that many people try to use it as a website, wiki, forum and support desk rolled into one, and it's terrible for those use cases. It being a walled garden means it's a bad solution when it comes to attracting users to a project since it doesn't show up in Google, and for providing a searchable archive of information for things like support purposes. It having a design meant for chatting means it doesn't work well as a forum, since the layout isn't as clear or understandable as a traditional one there, nor does its search work well for that purpose. And requiring people to login to even view it means it fails miserably as a support system, since many people won't have an account when they need help with something.

Unfortunately, because it's 'free' and 'convenient', we get a lot of project teams deciding to use it for everything rather than having a separate website or forum or wiki. It's like the online creator equivalent to that office worker trying to use Excel for everything when they really need a custom designed system or database.

In the same way no one should use an IRC server for documentation, no one should rely on Discord for the same thing either.

The data ownership point is definitely worth noting though. Can Discord really do anything if your users consent to you logging their posts to an external service?
Yes, but that was a memory leak, giving access to unauthorized random memory. That is not an intentionally created exploit / backdoor which gives the owner easy access to the victim's system.