skysight-inc/HackerNews huggingface dataset:
Is this not just credential stuffing?

The article cites these two sources[1][2] which say

> Unauthorized individuals using account credentials believed to have been obtained from third-party source(s) were used to access individual customer accounts

[1] https://apps.web.maine.gov/online/aeviewer/ME/40/e9cc298b-37...

[2] https://oag.ca.gov/system/files/Template%20Notification%203-...
You're not crazy! I edited my comment to add that right before you replied
> Coquilles Saint-Jacques

Yup!
Will this also support threads spanning multiple cores, or is that unrelated?

Edit: https://peps.python.org/pep-0703/ suggests it will support multiple cores, unless the current work does not yet achieve that.
Thank you for sharing, this was a nice contrast to the usual mindfulness approaches. Also appreciated the takedown of Mr Hanania
What packages might depend on the GIL and why would they need it?
I doubt that Python will ditch the meme. The fundamental model of dynamic dispatch using dictionaries on top of a byte code interpreter is pretty slow. I wouldn't expect it to get within 2x of JavaScript.
Lethal autonomy is more than 20 years old in the United States: https://en.wikipedia.org/wiki/MIM-104_Patriot

At this point, I think we can safely say that making a system that gives AI enough control to fuck up is a "skill issue" in earnest. The overwhelmingly obvious solution to this problem is to just not design systems that trust AI whatsoever. Problem solved, alignment crisis averted.
That mathematical problem (the secretary problem) is often cited, but it's not how real hiring works. The problem defines the only success criterion as hiring the single top candidate, and everything else fails. That's not at all what you're looking for in the real world - there are a spectrum of results, where any one in the top decile will be great and the next decile only slightly lesser and so on.
Really?

I would assume any assembly language is worse to program than C
Is it going to get loot boxes ?
On my Early 2015 MBP

Safari 17.4. : 5.52

Chrome 122 : 6.25

Firefox 123 : 7.26

The results pretty much confirms my general feeling about how the browser behaves on my machine as well. Where Firefox being the fastest.

And 22.5 on my iPhone 14 on iOS 17.4

That is my smartphone is ~4x faster than my laptop.
1. How can you tell if a DNS server is already defined in the root anycast clusters?

2. What's a good domain registry for an important domain? One where you own the domain, like Gandi, rather than just renting it from the domain registry, as with current NetSol terms?
Show HN: Shareable Analytics for public stats. Customize sections and themes
Nope. Most of mexico, and latin america, is owned by europeans. Just tiny netherlands alone invests and owns more of latin america than china. Always wondered where the dutch get their money.

The myth about china's money is entirely that. Myth spread by propagandists. When you look at the numbers, europeans are buying up most of the world.

Look at brazil. The dutch pump more money into brazil than the US.

https://www.statista.com/statistics/749238/fdi-brazil-by-cou...

But you won't see that in the news. If you do it won't be portrayed in a threatening manner. It's always the chinese or the japanese or the arabs buying up everything. When the numbers tell you otherwise.
> There are probably Dan Hon Response Cards for each of these.

The link to "Don Hon Response Cards" goes to a localhost address. O_o

But yes...Plain text should be default. If you're pasting a table, maybe present a dialog that says "Hey, looks like you pasted a table...did you want formatting, an unformatted table, or just the text?"
Like the report that he killed himself due to pressures of the case or the fact that he gave 32 years of his life to a company that's calling him a traitor isn't compelling enough.
In my student days there was an entire street scheduled for expansion that had 80 odd houses down one side as cheap rents by the main roads department, I shared a house with seven other students, four were medical, none came from any privilege other than relatively secure working class - two came from farmers, one from a boilermaker, the other from a telecom line working family.

There are people willing to work long hours for little return with the prospect of a better job after an apprenticeship.

Medical degrees are offered globally, not all locations only allow the children of privilege to become doctors.
I'm glad you are okay now.

Your story makes me wonder how science would have been if we hadn't possessed the sense of time in the first place.
At the very bottom it gets a little less breathless:

> A lot of machinery in the maritime and oil and gas sectors has hardware, such as cellular modems, that technicians use for remote maintenance […]

> But this hardware is not always well documented
Sorry for the late reply, but no to all three. We lived in Chicago when this became a thing. My grandmother did live in Denver (well, Aurora) though.
This is a very well designed API. Well done u/rkaehn!
It's just crazy to think how much things can change. Boeing was once the pinnacle of innovation; a company which achieved something seemingly impossible at commercial scale and then perfected it to an incredible standard. It's just crazy to think that such perfect company could decline to such low standard both on the technical side and ethics side.

It looks like a HR problem. They replaced people who are very good at building stuff with people who are very good at politics. But no amount of bullshitting can substitute engineering excellence when it comes to keeping aircraft in the air.
This is a common move, I think. The last company I worked for wanted me to sign a nondisparagement agreement. I didn't have to, but I wouldn't get significant severance if I didn't.

They didn't have to offer me severance. They were buying the nondisparagement and other listed restrictions.
This is brilliant, it’s surely the best way to ensure the destruction of TikTok.
As someone who works with BPF every day, I don’t think comparing orders of magnitude is right. It just enables things that can be done now that you wouldn’t dream of doing before. I think a good analogy is going from horse drawn carriages to the automobile. In a carriage going from Boston to New York would be a multi day journey that you would have to plan for weeks in advance. With a car you just get in and go. BPF is like that, suddenly you have all these options for things that you can do instantly, that you’d only do before if you were ready to dedicate years to getting support into the kernel. It’s a superpower for kernel development.
I'm just going to take this story at face value, there's an infinite number of alternate explanations that I'd be powerless to talk about.

I've had my own (thankfully brief) moments where I've thought about suicide just from the perception that my coworkers, my bosses, the entire world, just does not care about doing the right thing.

Mr Barnett worked for the same company for over three decades and physically watched it stop caring about building airplanes. I know that can take a toll, and the stress of martyring yourself to let everyone else know has to be intense.
The Amish and Mennonite community.

The one time I took a train from Chicago to Arizona, the train was about 50% Amish/Mennonite.

Their leaders evaluate technologies to determine if it’s consistent with their way of life, and trains made the cut.
I think it's a little of both. I tend to blame the methodology more myself.

Public school in the US has English literature, physics, chemistry, biology, algebra, arithmetic, geometry, trigonometry, calculus, second languages, civics, history... That the material exists, whatever you think of it, and kids aren't learning that material, says something about the methodology.

I think sending a kid to what basically amounts to a prison, in an intensely competitive social environment complete with people from all walks of life, including violent people, while simultaneously handicapping anyone's ability to enforce proper conduct, with a strategy geared to basically encourage cheating, is not conducive to learning anything for a long period of time. Then, telling them their time in their life where they get to do real fruitful things like decide their conduct, who they associate with, what interests to pursue, spend time with their parents, let their minds wander, is not theirs and they have to continue the requirements of school, IMO it hampers intellectual development.
Platform Wars Results

Samsung S24 Galaxy - 13.8 (very new, with the good processor)

iPhone 13 Mini - 22.3

iPhone 15 Pro - 23.1

MBA M2 - 24.2 (Safari)

Win 11 i9-13950HX - 26.8 (Edge)
especially when it was by your boss the owner while they were on a plane flight. I got a few of these over the years. One was the vacation time thing. It was 80% done. Was written originally in rails in like 4 hours (flight from LA to STL). I think we spent about 4 engineer years before we worked out all of the edge cases. Thanks for all of the paid work Steve E!
What's obfuscated about it? Seems pretty straightforward to me at first glance.
The CEO of eBay did not order dead animals, feces and death threats to be sent to critical customers either.

Why would they? The entire point of that level in a company is to be not accountable - the best way to achieve that is by doing nothing …

The point being?
> Is the origin meaningful?

I assume no.

> What are the units

Arbitrary. The website says pixels, but the demo lets you zoom in and out, so I think defining the unit as pixels is pretty meaningless, except as a hint to the viewer of the initial scale for the canvas. Even then I can see good reasons for a viewer program to just ignore that and use whatever initial scale allows everything to fit on screen.

> how does this interact with font sizes?

Seems like the font size can't be changed, but I'd imagine it's a specific number of units.

> High-DPI displays?

Not sure what kind of answer you're looking for here. You can just scale everything, so support for High-DPI displays would be up to the viewer program.
With the sailing team of the University of Padova we developed SailTrack:

https://github.com/metisvela/sailtrack

It’s a similar project, but specifically designed for racing dinghies. It focuses on modularity and performance analysis.
I was debating between a Galaxy S24 and a Pixel for an Android test device. 13.8 vs 9.47 on a Pixel is not a good result for Google's custom chip.
Healthcare tech exec here and former HITRUST auditor.

I appreciate the direction this is going, but I'm not sure about its general utility.

As an example, audits are commonly performed in middeware in the app stack. Same with permissions.

Querying information_schema for sensitive column names isn't particularly useful as a PHI check.

Overall, I'm concerned that using this may give application authors a false sense of security, or raise a bunch of false flags.

There are many effective paths to compliance, which is why HIPAA is non-prescriptive.

After a brief review of the source code, my recommendation would be to migrate this to more of an open source compliance checklist type app, rather than attempting a db level audit. I don't think it's practical to implement something that would be actually effective in the way you're approaching it.
Fish stock, you only cook it for around 30 mins. I remember reading somewhere that fish stock loses flavor when you cook for longer times.
Those are all sensible things to do, but at the end of the day we are talking about kids not learning the material they're taught. I'd like the material to improve too. Our government creates a very bureaucratic society and then teaches kids absolutely nothing about navigating that bureaucracy, this is an abysmal failure of education. But I think the methodology fails when it can't even demonstrate that it teaches them the subjects they're actually being taught.
> It just seems like a vapid time waster that sucks up user data, just like other US-owned vapid time waster apps that suck up user data. Is this just "China Bad" from politicians, or have they actually done something wrong to users

Well they do seem to push anti-us {anything} (not that there it isn't anything to complain about if you're a US voter) while simultaneously "hide" or "de-promote" anti-china or anti-eastern content.

They also push more us-crime content while they could push more for buddhist content and make more of a difference but it's obvious it's the CCP behind of it all...

Note that this is coming from someone that didn't grow up in the US and is anti-authoritarian (right or left) as they come... (I grew up in Venezuela, left authoritiaran system).
After reading some paleontology primary sources, I'm inclined to regard pop sci articles like this as trifles. For each and every paleotontological theory, there is automatic gainsaying. Emphasizing the opposition part of the gainsaying is a mistake. Usually, opposition signifies problems with the original theory, but in paleontology, so much is unknown that an opposing theory means almost nothing, except that another interpretation can be summoned to explain the fossil.
> How does MTE compare to CHERI?

MTE an CHERI use a similar approach but MTE doesn't have large enough tags to provide strong security in the general case. MTE can provide strong deterministic security properties through reserved tags. Anything not tagged has a 0 tag and anything tagged has a non-0 tag by default since it's a default exclusion. You can exclude other tags statically or dynamically via instructions for this, but you can also simply use the 0 tag for internal usage such as freed memory while knowing that any tagged pointer can't access it.

In hardened_malloc, we dynamically exclude the adjacent tags and previous tag used for an allocation slot. That provides deterministic protection against linear overflows and small overflows. For use-after-free, an access through a pointer to the freed allocation can't access it while freed or after being allocated again but rather needs to wait until the need time it's handed out again where there's a 1/15 chance it will have the right tag. This combines well with the other hardened_malloc security properties. It has FIFO/random quarantines for slab allocations and virtual memory, which delay reuse further and not deterministically. It avoids ever reusing memory locations between different allocation size classes until going above 128k, which are each in different regions with metadata all in another reserved region.

In the general case, MTE provides around a 1/15 chance for bypass due to currently only being 4 bits. It could be EASILY extended to support using 8 bits, and there are other free bits if you aren't using PAC. In theory, they could support up to 16-bit MTE for 48-bit address space or higher with a typical 39-bit address space. It's currently hard-wired to 4 bits which we've been told was chosen over 8 bits to enable storing the extra bits in ECC parity memory.
Interesting to think we only got the “middle” size physics right, but we can’t reconcile it with micro or universal physics.
Doesn't dark energy do exactly that? 70% of the energy of the universe doesn't seem to want to play by our rules!
HN doesn’t need casual sexism and that’s just going to derail a more substantial conversation.
They specifically asked about PQC signatures, not MACs.
Star anise is an ingredient in Vietnamese pho recipes. The liquid is essentially a beef stock.

Mind you, I've not made pho successfully, but I've read a few recipes for it and tried making it a couple times.
One-time pads just trade an encryption problem for a secure key distribution problem, the latter being much, much harder.
You can pass a reference to a something that the task should update as one of its arguments (e.g. a pointer to a place in memory big enough for a pointer that starts out as null). Then wait for the task. Then check what it left you at the reference. It's the world's most boring channel.
My brother was on a flight, to Bermuda no less, and the drink carts were out. They all hit the ceiling, making quite a mess.

C.f., Bermuda Triangle
I'm trying to follow, but having a hard time. The Mongols were NOT brutal and they WERE great administrators? So why was their reign so short?
US charities seem to be anything but
> my feed is serious stuff

This is also obviously part of the plan in behalf of China to gain ground...

FWIW I'm anti-Tiktok and anti-Instagram, they both push agendas that are of no benefit to the common man...
He’s a staunch republican operative and very well connected in Trump circles. He brought a bunch of these Ghouls into activision too.

It’s a brilliant move because now the Biden administration has the choice between being weak on China and handing an actual competitive social media platform to Republicans.

Everything permeated by the cold US civil war.

The question is … how long did he have this mission … all the way back to when he dated Sheryl Sandberg? ;)

The one upside I can see is that We can watch Elon melting down completely when this happens.
Oh I know where you're coming from, but a point of stocks is that they can be the basis for many things. Think of the flavorings as a "tilt". If you use star anise right from the start it tilts toward (to my taste) a generic Asian direction. If this is where it ends up, mainly, that's awesome. Otherwise you can easily make a tea of those star anise and add that later.
The more we are getting ourselves all worked up about how dangerous AI is, the less we are thinking about the fact that LLMs are sucking up all the intellectual property we created in the information age, and then selling it back to us.

Astounding. IMHO the biggest achievement wasn't technical at all--it was how they were all able to do this gigantic end-run around copywrite, trademark, or patent protections.

Essentially, there is no such thing as intellectual property anymore.
First off, looking at goqlite benchmarks, we are measuring different things - goqlite is measuring a complete lifecycle of a message, which includes sending, receiving and deleting. The klevdb benchmarks are usually exercising one (at most 2) of these.

In klevdb you can control the fsync yourself - using AutoSync you can ask it to perform fsycn after each Publish, which currently is best effort put on disk. Of course in this case performance suffer dramatically (as you would expected, esp if you don't batch). You can also not use AutoSync and control it yourself (klevdb exposes Sync), deciding what kind of message loss you are prepared to deal with. The benchmarks you see run without AutoSync, to highlight what kind of raw throughput klevdb is capable of.

And yeah, klevdb is basically an append-only log. Of course, you can delete messages from it, but this is done in parallel, where the segment is being copied without the messages you want to delete, then replaced with a single mv system call. Rewriting the head segment (e.g. the one you are writing to) is not always possible (since there could be messages the rewriter haven't seen), but will eventually succeed (once the head segment is no longer a head).

Hope this answers your questions, and if not, happy to expand more. I've been contemplating on implementing transactions on top of klevdb, but haven't quite figured out if I need them or not.

Edit: spelling and grammar
Easy and Smooth Start to Graph Databases with Apache AGE: https://dev.to/markgomer/easy-and-smooth-start-to-graph-data...
People who want to go after billionaires for taxes should be tackling non-profit charity donations. At this point I am not sure non-profits should get such liberal tax status and that includes churches, NGOs, and billionaire charities.
How can you tell if a DNS server is already defined in the root anycast clusters?

One way is to query one of the root servers responsible for that TLD

If example.net, then adding extra steps to make it more explicit what's happening.

# get the root servers for .net
dig NS net
net. 7 IN NS e.gtld-servers.net.
[snip...]

# just adding this step to make it more descriptive of whats happening
dig +short e.gtld-servers.net
192.12.94.30

dig @192.12.94.30 +all +norecurse +nocookie -t ns example.net

;; AUTHORITY SECTION:
example.net. 172800 IN NS a.iana-servers.net.
example.net. 172800 IN NS b.iana-servers.net.
[snip ... extra data ignored]

What's a good domain registry for an important domain? One where you own the domain, like Gandi, rather than just renting it from the domain registry, as with current NetSol terms?

All domains are rented. Premium registrars like MarkMonitor have monitoring options to see if someone managed to change the root servers for your domain and will try to fix it but I have no idea if they still do that or if they are still any good. They are meant for businesses.
These providers (Facebook, Instagram, whatever...) were already granted "immunity" under net neutrality acts, therefore they should serve everyone equally...
In reality they told me keep their garbage and they’ll give me my money back. After an hour investment of my own time - of which has to be on their online chat website which you of course cannot close in the meantime.

No, I want you jerks to pay UPS to fly this crap back to you, but they won’t. We all need to standup against the infiltration of Chinese poisoned goods. Demand they take them back and your expense. The post service needs reform too, why is it cheaper to ship from China than ship across your own city? It’s ridiculous.
Congrats! It's a very useful use-case, BTW we are building an open-source no-code data activation from Postgres to Airtable and many more destinations. Would love to watch the repo ;)

(https://github.com/Multiwoven/multiwoven)
Syntactic closures are a way to hide the fact that lambdas are the only abstraction in lambda calculus.

The work that I cited has types _and_ quotation as first class abstractions.

It's a bit like asking to explain proof theory in terms of Godel numbers. Sure you can technically do it. You're completely missing the point if you do however.
In the US Commercial Tug & Barge market, Rose Point Navigation (out of Redmond, WA) has a near 100% saturation of the navigation software market. Why does nobody disrupt them? The overlap between experts in software and experts in vessel navigation is pretty low. Take a look at the technical specifications of their platform here and see if you can crack that out in a weekend:
https://www.rosepoint.com/rose-point-ecs/

In recreational vessels, our needs are more basic, but even us geeks may be more prone to shell out $500 - $2000 to Garmin or Raymarine for a hardened chart plotter MFD that "just works", is waterproof, and robust at least in the nav function. I got a "deal" on a Raymarine Axiom Pro which has both touchscreen and a keypad mode for when the rain interferes with the display, has nav, ais, radar, sonar display, engine gauges, and tons of other features, it is running some version of Android. It's really good honestly. When the wind is howling and the waves are high, it's not necessarily a good time to do some hacking and bug hunting on the nav platform. I do plenty hacking on my boat in the sensor integration world, but that's another story...
I'm always wary of thinking that our metaphors for the brain represent the real object.

History shows that we tend to use as metaphor whatever popular technology is in place at the time. Right now is neural networks. Before, computers, telegraphs, hydraulic systems and so on.

I could easily imagine the next analogy being quantum computers. Or whatever trending technology comes around 2030.
Only if you don't use WAL.
This blog post is the death of the internet. As you scroll down, it suddenly forces a pop up to subscribe to the blog via email. There is no respect to the reader at all and makes the internet a worse place to use. Perhaps the message would be more effective if it wasn’t doing what it laments.
An 'Extraterrestrial' Gadget Was Something More Familiar
The title alone is already worth an upvote