skysight-inc/HackerNews huggingface dataset:
Great question! Unlike a pure infrastructure tool (MongoDB, Elastic, Terraform), UI/UX is a critical factor for adopting a SOAR.

Even if other companies fork / host Tracecat, we believe we can out iterate the incumbents in building the best SOAR experience. And I think we are just getting started with UI/UX for AI features in security products. It's definitely not a clippy chatbot...

My cofounder and I wrote every line of code for the frontend, design, data pipeline, docs. I don't think the incumbents can build as quickly and accurately (from customer feedback to implementation) as we can.
PHP is nice with GD or ImageMagick.

Make a circle.png

Use GD to overlay colour over the radius of the circle

Apply facial details

Then finally anything extra
It was interesting to read and to know
I agree. It is a Debtor's Prison in everything but name.
A real engineer to be placed at the helm. This is great news. Godspeed!
Haha, I aim to get my website running on it!
Honestly that's a fair reply, thanks for the additional nuance to your argument. Upvoted.
This is totally unacceptable on the part of Meta. Hope you get it resolved.
Undertaking a claim that there is no one you can speak to Facebook about this will help them quickly find someone to talk to you and respond to the credit card company and you.
DDR5 is so fragile they had to include on-die ECC to make it work, even when ECC is not exposed externally.
You'll need a library that can render to some 2D-context that can then be converted to PNG.

JS is probably where you should look. You might be able to find a good PHP drawing library but I've never come across that in my work. Lots of image converting libraries out there (usually just a wrapper around ImageMagik), but "drawing images" usually a client-side thing and you'll find more support for it.

In JS, you'll draw the image to a `<canvas>` element, which can then be downloaded as a PNG. You could go the SVG route, too, depending on the art style. Canvas is the safer bet.
I'm definitely considering it but trying to make sure we fully, thoroughly exhaust all other channels. Totally agree that it wouldn't be "reasonable" to permanently suspend our account for a chargeback in this scenario, but it's hard to know what's reasonable at this point.

Sucks to say it but having to double-pay this invoice may still be a better scenario than having the business fully banned from Meta Ads.
Someone posts a link which has multiple virus scanners reporting the image as being malicious, and you thought that it’s fine to download that file to your machine and open it?

It loading fine has nothing to do with if it’s malicious or not, that’s kinda the whole point of malware and viruses.
Will post an updated demo with the output and share it here later today! But here is what one response looks like:

"Thank you for your report. the AI labelled this email as malicious. It contained the url https://to58gnrroh2pot.pages.dev/smart89/. The summary: The URLScan report indicates a high likelihood of phishing activity associated with the analyzed URL. The overall score is 100, with identified categories including "phishing" and specific branding as a "tech support scam." The report highlights the presence of malicious intent, with tags such as "phishing" further supporting this classification. The analysis involved IPs from Germany and the Netherlands, associated with the domains "to58gnrroh2pot.pages.dev" and "ipwho.is," and servers named "cloudflare" and "ipwhois." Various URLs, domains, certificates, and hashes were examined during the scan, pointing towards a comprehensive evaluation of the webpage's content and its potential threat level. The verdicts from URLScan and the community reinforce the malicious nature of the webpage, emphasizing the need for caution."
Great example. So with my qualifier Sagrada Familia might be the longest running modern day piece of construction.

Also Liverpool is one impressively sized cathedral.
Because they’re trying to solve a class of problems and targeting individual companies with draconian requirements isn’t procedural and on the surface is punitive with no regulatory or legal reason.

The regulation creates the context to specify something like this. Writing ad hoc rules for named entities without a law or regulation behind it isn’t how our system of governance works. You first have to have a framework to judge against, either in law or regulation. You then assess the compliance of each in scope entity and issue findings.

Btw the term “malicious compliance” isn’t really a thing. The right term is “willful noncompliance.” For this they need to prove intent to be a defensible finding, which they probably could. However it would be easier to just find them in non-compliance.

I would also note this is a back and forth. What surprises me is Apple went public with their plans rather than developing them directly with the regulators. Going public with their plan creates all sorts of problems for Apple.

This is surprising because Apple is a pretty sophisticated regulatory player. For all their devices they go through many regulatory processes and regimes. They have tons of experience dealing with regulators across many regions and regulatory domains, including these sorts of policies. This is a shocking lack of cooperative behavior that won’t work for Apple. Apple is flush with cash, but governments have unlimited resources and the ability for forcibly enforce their will. It’s usually smart money to invest in appeasing your regulators in private.
I didn't know that - so thank you! I'll start with the link :D
That makes sense, they wouldn’t be able to reliably collect metrics.
Aiming for EA by the end of the year :)
Xbox is a video game appliance, not a general-purpose computing platform.
Where I work, most programming is C#. We use a lot of LINQPad scripts, which is a lightweight environment to run C# in.
the actual order: https://news.ycombinator.com/item?id=39819212
Many ideas look like they were influenced by ClickHouse, and some are direct copies. I'm surprised they didn't provide references to ClickHouse, where the implementations are proven in production in the first place.
I plan on porting at some point during early access. The graphics engine already supports Mac, and the game is C++, so shouldn't be too difficult
Conversely, most global production of Titanium Dioxide (a key component in optics applications like lasers and IC applications like thin film) is almost entirely monopolized by Chinese producers.

This conundrum really shows the issue with the news - you can argue one way or the other and frame a story that way.

(Personally, I think we should protect the Okefenokee)
A nice overview of SSO, which is also known as federation.

Leaves out some of the more complicated aspects of SSO, such as:

* Logout (surprisingly complicated, see this video for more: https://m.youtube.com/watch?v=96m7DDQBW0U )

* Linking accounts (if you let someone login with Google, then also let them login with email and they use the same Gmail address, is it one account or two?)

* Verifying account ownership (more important for if anyone can register under any email address)

* Setting up the SSO integration (how does Google know how to trust Trello?)
How the heck is putting Ukraine or Georgia in NATO going to protect us from Russia's nucleus weapons?? If anything it will make the threat more immediate.

> The Ukrainians are still willing to fight for their own soil so your point is illogical and irrelevant.

This thread is about bringing Ukraine and Georgia into NATO, which means we would be obligated to fight on the ground to defend those countries. I don't know what you're arguing against, but it seems you didn't read the thread.
I think the idea is that you cannot have these options like denying access to content only if user pays with $ or personal data.

But the issue I find here is that Meta has not premiered this technique, the first offenders were Italian digital newspapers either requiring your data or a subscription.
The irony: Calhoun, brought in to clean up after the MCAS crashes, dumped because he couldn't get the tanker turned around fast enough -- accompanied by this bit of sanctimony from CEO of Southwest:

>Boeing needs to become a better company," said Bob Jordan, the CEO of Southwest Airlines, during an investor conference earlier this month.

>"I, and I know other CEOs, have told Boeing, get your issues understood and get the issues fixed," Jordan said.

This being the same Southwest that according to other reports single-handedly killed Boeing's plans to replace the pre-MAX 737 with an all-new design, one appropriate for large-diameter, high-bypass turbofans.
At least we got some of my all-time favorite GitHub issues tho
I plan on diving deep into economics at some point, but not immediately.
Old andOTP user turned new-ish Aegis user here: it's super easy to migrate and Aegis just feels like a better product.
> Finally, in conclusion, what do "techies" get wrong?

I read the answer as "there are several factors and broader context besides direct productivity gains that need to be taken into account when considering automation". And to be honest some techies do indeed forget about them. Elon Musk seems to be the the most striking example of "it's just an engineering problem" mindset.
"Your papers, please."

Come on, you can't be serious. Police and code enforcement officers aren't going to stop random dog walkers on the street to demand DNA test results. Real Americans don't tolerate that kind of government overreach, and the authorities already didn't even have time to investigate actual crimes.
Indeed. We have been classifying and sorting at least blueberries using neutral networks since at least the 80s or 90s.
ClientHello isn't that big but ServerHello that's in the reply can be quite large and since TCP packets have DF flag set, some middleware box may toss it if PMTUD didn't work correctly.

I had seen this exact issue with Fastly a few years ago.
> Part of the goal of content blocking is to reduce network traffic, so that's not an ideal outcome.

Not in the short term, no. But, maybe in the long term ...

Remember that the user is not the customer. The customer is the person buying the ad space from google/facebook/etc. If the customer receives no value for their money, and they can easily determine that, why would they continue purchasing ads?

If every browser downloaded and clicked every single ad in an invisible background and sandboxed process, ads become close to worthless to the customer.

So, sure, in the short term there'd be extra processing and network usage, but that would quickly taper off as customers stopped buying ads because every single ad they put out gets a 100% click-rate. After a while the extra utilisation would be close to zero, as it would only be the occasional customer trying their luck at advertising, and failing immediately.

It's the same with spam email: the solution isn't to block, and keep lists and reputation, the solution is to reply to every single spam email![1] Even the most well-run spamming/scamming organisation can't very well reply to millions of emails rxed per hour.

[1] Caveat: need to ensure that the sending email did indeed legitimately send the email, otherwise a few clowns would simply send spam with someone else's email as a prank.
What major real world systems that people actually use are implemented in scheme? Lisp programming environments don’t count. I’m talking general use software.
People keep talking about training an AI to ring the doorbell but how about training the fish to do it themselves??
Damn he must've been the goodest boy of all time, rest in peace Patricus.
> Facebook groups, discord rooms, reddit subs and the likes just aren't the same

I think it depends on which ones you're using. There are some facebook groups and subreddits I use that still feel very much like a small-forum, where people are generally good and helpful and many of the users are regulars. I haven't seen any discord rooms like that except for some ones that are direct spinoffs of the facebook groups and subreddits I mentioned, so that seems more like a credit to the users than the medium.

I think they have to be pretty niche, though. But to be fair, forums of the old internet also had similar issues where once they reached a certain size the experience was different/worse than when they were smaller.
Amex might very well take the OP's side, and they'd be right to. Credit card companies typically want to protect their customers and are predisposed to help them in matters like this. However, they have absolutely no control over what Meta does after that. They can't force Meta to keep doing business with the OP, even if the reason for terminating business is "I want to punish OP for taking 40k from my account that I didn't think was there."

Editing to add: One avenue that would probably work fairly well would be to get a lawyer to send a mean letter to Meta's general counsel. $40k is enough money to make the hourly rate worth it, and an attorney will be happy to help further if Meta tries to be punitive.
> The burden of proof is on the people requesting the feature.

Fortunately there are other reasons why a business may be forced to do something, and not allowed to be the sole judge/jury/executioner.

One of those is anti-trust action - something that greatly benefits humanity as a whole, even though the alternative may (or may not) be cheaper for the business.

Other examples are employee protections, consumer protections, constitutional amendments etc.
Well, let's ask, shall we?

npoc, how do you play that game?
connect parallel pins to gpios, data out over usb-serial. i've done this a few times using the very same socket depicted in TFA
> Core I9 14900KF Breaks World Record, Achieves 9043.92GHz

Boom, honest, direct reporting.

It’s really not hard to do, it takes more energy to think up the clickbait than to just tell the facts.
I could and I might but if Claude 3 Opus and ChatGPT 4 are both pretty much on par with each other in my tests and I prefer ChatGPT's UI (and ChatGPT 5 is probably coming before Claude 4) then I'll probably just keep using ChatGPT.

Also I don't think Claude 3 is going to write me an iOS app to interact with it and do things like voice chat (or rather I'm not going to jump through those hoops even if it could), that's another place where ChatGPT excels.
>without having a built-in sense of what facts are.

There is no such thing in 'higher intelligence' beyond protoception. Pretty much every mammal has the same built in sense that you do, and yet none of them are carting around human intelligence. More so, when human children are left feral and not raised around other humans we typically consider them mentally disabled. Again, they learn the protoception stuff just fine, but all the stuff that "puts us above" the mammals is missing, it is not inane. Your counting, reading, and tools use are all learned behaviors after birth and form a continuous chain of learned behaviors taught by people (and more recently books and computers).

There is a reason that after development of the scientific method that most human endeavors experienced an exponential growth curve. It's because we don't recognise facts from fiction at a much higher rate than other animals, it's that we teach each other fact from fiction better than other animals.
More likely than what? Informal specifications?

My primary experience with formal specifications is as part of a literate specification, where you would have a rigorous English-language explanation interspersed with the formal specification (e.g. Z schemata).

A reader can look at the formal specification and the English and decide whether they think they mean the same thing; experience suggests that most engineers or people with STEM-type backgrounds need no more than a few days of training to be able to read Z (even if they can't write it).

The document as a whole can be type-checked, which is a lightweight way to check for the most egregious kinds of errors.
I think this article is causing a kerfuffle because it's hitting two different audiences very differently. Honestly the article title should have been "Friends don't let friends use CSV for data pipelines".

Because when I'm wrangling data from a human - a human who is stubbornly defending their own little island of business information like their employment depended on it[1] - a CSV is about as good as I am gonna get.

I had a bear of a time just convincing people to put their data in a delimited format, instead of a table inside a powerpoint presentation, or buried in sixty levels of Access joins, or in an SVG. I need data from "what is scroll wheel" sort of users.

If I am working system to system? That's a different requirement, a requirement that is apparently where the OP author is coming from.

[1] Because it kind of does. Having a unique platform is one of those priceless keys to being skipped in the thrice-yearly layoff rituals. Unfortunately, that means anyone approaching saying words like "integration" or "API" are shot on sight.
Getting Rid of Crap Data
Uhhhh, I'm pretty sure Lean already allows for formal verification of code. In the meta theory that tools like Lean and Coq operate, proofs and programs are very intertwined; it's not really possible to build a proving system in this metatheory without also allowing for program verification.
Maybe you're talking about gaining support for formal verification of code not written in Lean? Like, being able to verify C?
In that case, it's actually just a library issue. Nothing needs to be changed about the core Lean language, someone just needs to formalize the semantics of the target language semantics in Lean, and then add a verified compiler and verified extraction if you want to make the guarantees extend directly to the compiled assembly.
Fuzzers have actually combined well with theorem proving in these kinds of tools in the past; Coq, the proof assistant that heavily inspired Lean and has been in constant use since the mid 80's, has a library QuickChick (based on QuickCheck from the Haskell world) which takes an arbitrary property and generates test inputs to test it, and has very mature support for extending it with new datatypes and invariants.
Same thought! Home Movies is one of my favorite shows.

And it looks so similar: https://www.youtube.com/watch?v=CJcBL9JPfZw&list=PLqIbkxo6OP...
I can’t believe how shoddy the CC payment is. And “the ad platform is known to be buggy”. Are you serious? I’m sure they hire only the best
This is holistic, thanks! Will go through it.

The fear of email hosting isn't the work but the delivery reliability and continuity if we're unable to get to it for any reason - but yes, that's an experiment I want to do at some point...
If so, there is a way to destroy inflation, its raising taxes. Put taxes on wealth and on secondary homes and non-commercial renting, destroy the money, less inflation. Easy.
It can work, or it might not, in which case you or your children will be dying for some town in Eastern Ukraine you've never heard of and you can't pronounce.
"Demand DNA test results" == "check that they have a specific tag on their collar"

I didn't say they are going to, and you didn't say they wouldn't. You said they couldn't (because people "would just ignore it") and I said they absolutely could. Which is true.

Re "Real Americans", get a grip.
So you're saying that in the 70/80s people trusted each other much more?

I'm not sure specifically about kids and dogs but I'm not quite sure that was the case then, given the extremely huge heterogeneous society that was already back then. What do you think?
Yes. But there are much less of the sats.

There is basically a line at a certain latitude where the density of population is highest. So must sats circle between between that area.

But to cover the things further north (or south) respectively, SpaceX also has sats in polar orbit. Those allow for coverage from the poles to the max latitude.
I know far too little about hardware security. Is this one of the many inevitable vulnerabilities that arise from CPU optimization and are of little feasibility in the real world?
They will go through the EU appeals court process for 8 to 10 years, while making billions. To finally agree to some fine with minor inflation corrections. From a financial management aspect makes total sense.
Yet more proof, if any was needed, that C++ is a lost cause and never should've existed. Undefined behavior in C is bad enough, but apparently the C++ people decided to take it to the next level.

In the old days, C(++) had a pretty clean correspondence to assembly, and you could picture the generated assembly in your head as you went, while(1); would map pretty easily to

loop: jmp loop
You have the causality wrong. Prestige comes to journals by doing a good (or at least, better than peers) job of being a journal, which is providing a necessary function to the academic research process. If you want to improve on that system, you have to improve on those functions, or reduce the reliance on them by providing something better.

Put it another way, if you can design a system with a better ROC curve for classifying research, with a better TP rate for good papers, and have it cost less in real terms that current academic papers, then you are on to something. If all you've got is "papers should be free" or "it's too hard to access publishing from the outside" what you have are complaints, not solutions.
The feed is rate limited to 999 viewers. How do I know? Because I had to refresh a few times to get the doorbell UI... Imagine 900+ people ringing a "doorbell" whenever they see a fish tonight. I hope they can disable the ringing.. :D
Let's do a bit of back-of-the-envelope rocket science.

Starlink has satellites in several orbits, but at least one I know they're using is 319mi (they have approval for shells as low as 210mi, but I'm not sure if they're using that yet). A human's central vision is about 60 degrees (NOT the same thing as your full field of view). The radius of the earth ranges between 3950 and 3963 miles. I'll call it 3955 for our purposes.

(3955+319) gives us a radius of 4274 miles. Throw in that 17,000mph (27,000 km/hr) figure, one can determine that a Starlink satellite moves at about 3.78 degrees per minute with respect to the center of Earth.

To make things simpler, (again, back of the envelope), I'm going to calculate this using basic trig. The radius of the earth is much larger than the satellite's orbit, so this shouldn't skew the numbers too much.

Imagine standing on the ground and looking straight upwards into the night sky. At a distance of 319 miles, your 60 degree field of view covers a plane that's 2⋅319⋅tan(30°) = 368 miles wide.

This plane cuts a chord through the satellite's circular orbit. Those two points are 2⋅arcsin(368 / (2⋅4274)) = 4.93 degrees apart.

Knowing both the angle between the two points on the chord and the angular speed of the satellite with respect to Earth, we can determine that the Starlink satellite will spend roughly 1.3 minutes (1 minute and 18 seconds) within your central field of view. So, the satellite is definitely not fast enough for the naked eye to miss it, assuming it's big and/or bright enough.

Normally, you'd be right about a picnic table hundreds of miles away. That's tiny and you'd never see it, no matter what speed it was moving at. However, satellites are highly reflective and because they're sitting high above Earth, they can be hit by sunlight even during the night. Maybe(?) they wouldn't be visible in the problem I just laid out, where you're looking straight up, but turn your head a bit and it becomes feasible.

Throw in the fact that there are thousands of them all marching in a spherical parade around Earth, and it's totally reasonable that they'd be visible from the ground. In fact, there's a whole website dedicated to this very phenomenon: https://findstarlink.com/. If we didn't have so much light pollution on the ground in my neck of the woods, the website indicates that I could see them a couple times a night.