skysight-inc/HackerNews huggingface dataset:
Can someone explain how exactly they were able to decrypt the SSL traffic, is it possible to install a root CA without huge warnings from the OS?
The title alone conveys this difficulty without entering into the content.
> Maybe I'm out of the loop but is intentionality settled here?

Yes. The exploit used a payload, that was stored in the tests directory as a binary compression test case, but which is very clearly a very intentional exploit payload.

All the sneaky stuff was about deploying that payload without it being obvious.
Unfortunatelly it won't work/happen... even after huge protest and backlash reddit is still strong and go-to-place :-(
Good thing you’re not an English teacher then.

A thing to consider about the goal of education: when done correctly, they’re not trying to make you love every you read (I will never appreciate reading Shakespeare) but ideally are just trying to expose you to a wide range of things to help you find what you might love.

I would have never read “The Things They Carried” independent of school but “How to tell a true war story” is one of the most important chapters of any book I’ve ever read in my life.
Bots Invaded My Newsletter. Here's How I Fought Back with ML
My newsletter was overrun by bots! I decided to try a machine learning solution. It was my first ML experiment and I learned a lot. Want to know how I built a bot detector and gained some ML skills along the way? Checkout my learnings here
Hello from the other side :)

1 - I feel like more bespoke interfaces could be amazingly useful in the data world.

2 - Data engineering doesn’t really get me building creatively.

3 - Getting 3 languages to play ball (and that’s front-end only) sounds crazy challenging.

Data projects are nightmares but it is good exposure to the messiness of the real world. Have you had a chance to dig into DE much yet?
i don’t have a better answer, but this convoluted mess of bash is a smell isn’t it?

i live in a different part of the dev world, but could this be written to be less obtuse so it’s more obvious what’s happening?

i get that a maintainer can still get malicious code in without the same rigor as an unaffiliated contributor, but surely there’s a better way than piles of “concise” (inadvertently obfuscated?) code?
Forest management is a little more complicated than "just do nothing" with a piece of land. Most of the US lumber stock is under private management; Canada is owned by the crown and licensed to private companies. Lumber is a very expensive, very bulky commmodity, and supply managment needs to balance a lot of market, logistic and environmental factors.
Syntax highlighting is a waste of an information channel (2020)
Embed svelte into a react component?
Correct answer...

TV detector vans exist, but they do not detect anything. They are just for show. TVL have a database of addresses in the UK with or without a licence. It is just assumed that anyone without a TV licence is guilty, and so a campaign of harrassment begins by letters and visits to intimidate people into buying a licence.
Fact 1: Never in court has evidence been used to prosecute people (mainly single mothers) based on 'detector' van evidence.
Fact 2: Although TVL threaten that they might apply for a search warrant if you do not let them in to inspect your house, it is very difficult indeed for them to apply for a warrant. They first need proof that you are receiving live broadcast. Never has 'dectector van' evidence been used to apply for a warrant. Search warrants are very rarely applied for today.

The reason people get prosecuted is that they admit to having a TV and then sign a 'confession' form. They assume a visiting TVL 'officer' has some sort of legal power when they visit. They have no more legal power than if any member of the public came round. Tell them to leave and they must immediately comply else be in breach of law.

Philip Dean, Newport, Wales

Source: My mother was convicted many years ago, I was there and witnessed the entire confession-based playbook.
Whatever may be the end goal, MITM is called an 'attack', not 'research'.

I'd not last a single day at such a company who would ask me to do such things. I had worked for a national political party in IT and left the job once I found about it corrupt practices and scams.

If we, as engineers collectively upheld ethics as part of work culture, Meta wouldn't have attempted it.
Then your manager and skips question why everything moves so slowly in development time, you always repeat the same answers. You start to die a little inside from repeating yourself and they start to be suspicious because nothing changes.

Meanwhile the codebase takes 12 minutes to compile a 1 line change. Each time you compile you forget why you liked programming to begin with and you spiral into an abyss where you think the only solution is to quit and start a hobby farm.
One company I worked at literally gave every customer (high-touch B2B, not an untenable customer count) their own database to reduce that risk and serve as a crude sharding strategy for horizontal scaling.
I distinctly remember having to remove such a superfluous . that I accidentally added into a file on multiple occasions.

If you are using vi and your left shift key is dodgy, that can easily happen by accident.
> without vetting their basic security of projects they fully

this sort of vetting you're talking about is gonna turn up nothing. Most vetting is at the source code level anyway, not in the tests, nor the build files tbh. It's almost like a checkbox "cover your ass" type work that a hired consultant would do.

Unless you're someone in gov't/military, in which case yes, you'd vet the code deeply. But that costs an arm and a leg. Would a datacenter/hosting company running ssh servers do that?
> a lot of their best ad viewers aren't of age.

Citation needed.
Raycast packages a few of these into a modern app as well. Clipboard, Searching files, Window management. Very lightweight though part of a different generation so more "bloated" in some people's eyes. Low resources used though.
Noticeable yes, obvious no.

I seriously doubt you’re going to notice century old wood chips and markings on trees. Similarly large branches would look like fallen trees in other forests.

A given section may not have seen anyone in 30+ years, others would have more noticeable impact but you’d have trouble seeing the logging vs all the trees. There would be remnants of trails and even some fresh ones, but that doesn’t specifically imply logging.
Avoid blundering: 80% of a winning strategy
Yep, for me this means I simply can't use the site anymore. Recommend: https://old.lemmy.world as an alternative
If you don't need to be logged in, redlib (previously libreddit) works well. Similar to what nitter was to twitter.

https://github.com/redlib-org/redlib?tab=readme-ov-file#inst...
I've come across these kinds of articles before and they always seem to suggest that you rewrite the metaphorical firmware of your brain so that it operates in a way that is advantageous to you. There's some notion of self discovery from first principles.

I'm not convinced that this is generally a good idea. It makes a person unmoored and open to anything ("so open minded that your brains fall out"). It's also often amoral. The only metric that's maximised is utility regardless of other more subtle consequences.

As I grow older, i think the human experience is more complex than can be captured by a few "hacks" like this.
The multi-entity (sock puppet or not hard to say) social engineering attack that was apparently two years in the making (?), is to me a much more salient story than "users are often mean." Although it's true that the expectation of mean users let the attack fit right in, I guess.
Be sure to check out Atomiczombie.com, if you have not already. Definitely THE resource for frankenbike/recumbents. I've built two recumbents. One directly from their plans (the Meridian) and another one of my own design, a trike based on the Meridian. Bike hacking is a lot of fun!
Good to know. It seems like the site has been banned here in germany.
Here’s how I see it. This is akin to opening your USPS mail and reading your correspondence with a friend. When instead they could’ve checked who the mails were addressed.

If Facebook wanted to learn the protocol Snapchat uses, they only needed a single test device. If they only needed to learn usage patterns, they could’ve checked where the traffic is sent to or app usage time etc.

Installing a root certificate is very intrusive and they behavior shows that if they are ever given the opportunity to be become a root certificate authority, they are likely to issue malicious certificates. As far as I know, no website can pin their certificates, so this takes us back to pre-HTTPS days where ISPs and network operators had a lot of fun reading user traffic.
https://archive.md/OUBdl
Sure, but according to google labour costs are less than 10% in current cars, probably even less in the future.
Anyone here with an archive link?
> Where can you buy SpaceX stock?

I misspoke and meant shares:

https://seekingalpha.com/article/4488501-how-to-invest-in-sp...
But what are you suggesting exactly? The code fragment you quoted was awk code. Awk is a generic programming language. Any programming language can be written to be complex and unreadable.
I mean option one is always going to be there. I'm sure there are plenty of neo-aristocrats who can do science if they want.

The problem, honestly, is an ancient one. In plato's republic he complains about a lack of state funding for geometry :

" Then take a step backward, for we are out of order, and insert the third dimension which is of solids, after the second which is of planes, and then you may proceed to solids in motion. But solid geometry is not popular and has not the patronage of the State, nor is the use of it fully recognized; the difficulty is great, and the votaries of the study are conceited and impatient. Still the charm of the pursuit wins upon men, and, if government would lend a little assistance, there might be great progress made. "

https://www.gutenberg.org/files/1497/1497-h/1497-h.htm
Unironically, yes. It was more likely than not invented by them.
I always wonder if people like him are able to learn faster if the courses are structured differently.
If by to focused on itself you mean imploding, then yes.
> > Supporting the "non-commercial web" seems too vague in my opinion.
A general mission statement/direction is often the first step towards narrowing down product ideas. I think making a decision in a direction (ie, pivoting from doing free UX enhancements for commercial companies towards saying, "I want to benefit services that don't feel exploitative") is a good place to start. Of course over time the author will probably narrow that focus, but this at least lays out a category that they can start looking into.

This further emphasizes the lack of clarity, focus, and suboptimal strategy. When I read your assessment of their previous strategy "doing free UX enhancements for commercial companies" while the person is against commerce, I do not walk away with a sense that they have reconciled for themselves what is worth going after and so the non-specific "I want to support communities and applications that respect their users and value what we have to say." I predict will likely also have no registrable impact.

I have more candid feedback for the author and that is to take a more clear look at how they evaluate themselves. They say "launching letsblock.it and keeping it running for over two years is a big success in my book." Instead they should call it what it is - a failure - and learn from it. Failure is fine, failure is great, even. They would be more successful by dreaming bigger and with more focus.
> created a top-down society that can scarcely be called America.

Really? The U.S. is notably less top-down than many other places that either of us could name. And nostalgia for an imagined bygone "British" past is unproductive.
I've been considering paying for an LLM to augment my learning, for when I get stuck or can't figure something out.

In terms of courses I am looking at Khan Academy but also https://ocw.mit.edu/courses/18-01sc-single-variable-calculus... (haven't started so I cant speak for quality)
So, going forwards—where should someone who lives in a repressive country go, to read and interact with Westerners? Now, practically every social website (*except HN) blocks you if you use a VPN, and you go to prison if you don't. You're twice-walled in.
This was a failed idea from the start. Furthermore, the "commercial web" is not so bad.
Sometimes I'm not sure if peoole like this dude truly live in a bubble. I mean, you have to take HN with a grain of salt, opinions here not representative at all and not better than the ones from the general population.
Hundreds, in my case. We have a sidecar here or there, but essentially our entire operation is run in distroless containers that consume config maps. We have one source of truth for 5 baremetal cloud regions, a number of private on-prem cloud regions, our build and test infrastructure, and nearly everything else, it is our Argo repo and the auto-generated operator manifests from our operator mono-repo. We have a common client library that abstracts our CRDs into easy to consume functions, and in the end using Kubernetes as an API for infrastructure operations does exactly what it should; allows full consistency and visibility on configuration.
At least for newer C++ standards it seems like there is decent support for feature test macros, which could reduce the need for a feature check involving compiling a snippet of test code to decide if a feature is available: https://en.cppreference.com/w/cpp/feature_test

Handling the output from several of the most recent GCC and Clang versions would probably cover the majority of cases, and add in MSVC for Windows. If the output isn’t from a recognized compiler or doesn’t match expectations, the only option is falling back to current behavior. Not ideal, but better than the current status quo…
Or is it rather like someone posting a video on youtube on how to pick a common lock?

And what's about the fellows of U of Minnesota?
I really think you are a fool if you install WhatsApp. I do think you are higher intelligence than normal if you install Signal. When I hear friends talk about WhatsApp I cringe. The few who have signal I regard highly.
We value your privacy.

That's why we share every little piece of data we get on you with our 816 partners and give them full permission to do with it whatever the hell they want, including resell it to their thousands of partners. For your convenience, we have installed state of the art surveillance technology in your home so we can watch you eat, sleep, take a shower as well as record every other event of interest.
For your safety, our associates undertake regular visits to your registered address to open and thoroughly check all your mail before it reaches you and share every bit of info found it in with all of our partners.

We value your privacy.
I like that you can simply start a text file or files, and close the program, it will save the session without any exit dialogs.
In much of Canada the line is a little blurry. You can usually tell when you're in a replanted block but it could be 50 or more years since they cut it, and it doesn't look like an orchard or christmas tree farm. It really depends where in the country you are; secondary growth in BC can seem far more natural than untouched Northern Saskatchewan, for example.
> Is there potential for Mexico in return to increase trade with south of its border in Guatemala

It already has.

Maquiladoras have sprung up all over Southern Mexico specifically because Central Americans are much poorer [0]

Unsurprisingly, this has lead to anti-immigrant sentiment in Mexico [0]

Before some less informed people respond to this, most undocumented migrants crossing from Mexico to the US are Central American as well. There isn't much of a reason for Mexican nationals to immigrate illegally when USMCA and NAFTA harmonized the visa process.

Also, this article is about the Foxconn assembly plant in Ciudad Juarez, which has been a shitshow for over a decade. Assembly is NOT AI Gear persay

[0] - https://journals.openedition.org/trace/742

[1] - https://www.dw.com/es/migrantes-tampoco-m%C3%A9xico-se-libra...
What does "reasonably sized market" mean in this context, and what does it imply about projects that lack them?

More specifically, why does there being some people that want those things mean something other than some people want those things? It almost sounds like you're trying to have a different conversation.
Just because you know the identity of an individual, doesn't mean they are trustworthy. They might be compromised, or they might be willfully doing it for their own personal gain, regardless of their existing reputation (or even, leveraging their existing reputation - bernie madoff was a well known and well respected investment banker).
Longer RoPEs and Better Quantization: papers of the month (Feb 2024)
I would say it really depends. There are certainly specialized area where a PhD is important, but it's hit or miss.

For instance, my team (in a big tech company) has people with very diverse backgrounds. Some tasks require more expertise, but most of the work will fit a generalist profile. Some teams who are more "researchy" have probably more PhDs. I feel doing a PhD gave me more time to learn things, while my current position is more fast paced and I can't afford to spend 2 weeks just learning new things.

Financially, it didn't make sense to do a PhD. It's not even super clear what I learned is helpful now but I'm glad I've had this experience. It gave me a bit more perspective and culture of the field. I don't regret doing it. However, I regret going into academia. Being a professor didn't suit me for many reasons. I'm happier in industry.
That is a legitimate strategy. It's being done in many products, often with SQLite or similar embedded databases, synchronized between devices and backend systems. It has the wonderful property that some fault of one database does not impact others.

I recall some major GitHub outages not too long ago and learning that they'd built the system on one globe-spanning distributed MySQL database, that fell over a couple times. A GitHub designed around separate databases for projects wouldn't have that failure mode. Obviously that would create problems on the backend for aggregation, billing, etc., but those are mostly "you" problems, as opposed to the "me" problem when you topple the monster database and take away my repos.

They've since had to isolate problem children to separate databases, away from the hoi polloi in the big "primary" database[1]. So I suppose I wasn't wrong.

https://github.blog/2023-12-07-upgrading-github-com-to-mysql...
Reading this submission and the comments here, I am struck by how much pressure build-up there is now against the ensh*ttified web. Surely something good much come of this, and if it is via the mechanism of creative destruction… so be it. It may not come this year or next, but within 5 years? I could see that happening.
Um, title: the spikes take out 96% of virus particles that come into contact with them.

So the next problem is: how do you make virus particles come into contact with this surface? If you wait for them to fall onto it, you could be waiting a very long time.

Also, the virus has to be sitting on the spikes for several hours.

This is very interesting work, but there's a lot to be done before there are practical applications, no?
Inept Product Owners or Program Managers

Devs/engineers' skills are technical. we can design and build you something. Why are our managers and directors okay with Product Owners or Program Managers farming their jobs onto us?

Prioritization, feature design, product design, writing product specifications, writing acceptance criteria, creating stories... why is a firmware engineer assigned to these things? bruh, what do these people even do anymore?

If you dont know what we want, lets create a plan to figure it out. Writing 2 sentence AC and rejecting iterations until time runs out is NOT A PLAN.
I'd want to build some a generalized community-making/matchmaking system that can bring supply and demand together, but optimized for user satisfaction instead of external profit. For everything like:

* Nonprofit online dating that emphasizes quality matches and relationship satisfaction, not Match Group profits

* Municipal Uber/Lyft that connects drivers and passengers and takes a minimum cut just to maintain the service, with an increased emphasis on carpooling/ridesharing to decrease traffic

* A better Craigslist for apartment finding, with good filters, integrated background/application scoring, etc. that's run as a community service for both renters and landlords, cutting out the profit-driven middlemen and helping both sides quickly and easily find matches

* A better scheduling system for college courses, with integrated calendaring/schedule solving and a much better UX

* Community solar, where different neighbors can come together to buy a small solar farm (like a community garden) and then all share in the power produced without having to install small systems on each home. Much better economies of scale, but higher overhead since you're essentially running a small biz and responsible to multiple stakeholders

------------

In my mind all of these are essentially the same problems, having a robust graph in the backend, building exceptional UX on the frontend, earning and increasing trust with users through reputation systems and humans-in-the-loop (for things like background checks for rents and drivers)... and most importantly, being able to do so with user-aligned incentives or free money (funding isn't a problem).

All of these are relatively solved problems from a technical angle, but not really from a societal angle, because they're often predatory middlemen services. I wish we could rebuild their whole stacks in a reusable way and federate the services in a FOSS model across municipalities/states/nations. To me they could just be basic infrastructure services that governments provide and maintain for the betterment of their citizens.
Why irony will never die...
I'm looking forward installing this on brave as soon as I get my hands on my pc, my attention span is so low that sometimes when I open up YouTube in incognito, I get overwhelmed. (I often do that to not mess with my actual recommended comment if I know I just need to search a video or two for one offs)

The homepage shows a lot of crap and clickbait thumbnails, and especially thumbnails with people having weird expressions and staring at me makes my brain completely lose context and lose focus for a few seconds, so that I have actually to think again about what I was gonna search, and sometimes I can't even remember it
If Lemmy had an automod I'd happily try to move the niche communities I help mod over, but without even the basics (regex rules + mod queue) attempting to mod any sizeable community is ime an exercise in frustration, making Lemmy essentially useless for us.

That's a real shame, because otherwise it looks like great software. I've got an offline instance sitting on AWS since last summer just waiting for any bit of progress, but gave up hope some time ago.
Well it's not like they had any other business model is it?
The fediverse, lemmy, mastodon.
> frelling

damn I had to dust off some cobwebs for that one
i would not say it's impossible, but for sure it's an uphill battle. and it might take a few centuries for people to change, just like it took a few centuries before we abolished slavery and we are still working on racism, gender, different orientations, etc.

being nice to each other is just one of the many things that we as humans need to work on. and we are working on it, and hopefully some day we will be able to achieve it.
There are many potential motivations, avoiding something like this is one of them:

https://en.m.wikipedia.org/wiki/Revenge