skysight-inc/HackerNews huggingface dataset:
In the spirit of openness which is the hallmark of FOSS such as GNU/Linux, would this book be scanned and published for all to see? That would be great. Like FOSS, math too belongs to the world. I heard someone say that the university has not published many of his works. That would be sad. If published someone like Terrence Tao could write formal proofs for them like he and his team did some improvements for the work by Yitang Zhang.
Hitachi (HGST) was originally IBM's hard drive divison as ksec said, known for their Deathstar drives.
Yeah. Probably some combination of lookups and/or clickthrus.

I had always assumed it was location tracking data, same as they (mostly?) use for realtime traffic data.

But, now that you mention it, Dominoes is a delivery business. So you'd have to estimate their current volume some other way - a spike in demand won't correlate with an increase of people physically visiting the storefront.
It's always the software that's the missing element.

I prefer low end Intel compatible boards because the software just works. I spent too many hours with weird arm devices trying to get them to do basic stuff that is taken for granted on Intel, such as booting up.
Configure and begin running
You should read about Nacirema (no spoilers).

The original is at https://web.archive.org/web/20061004083040/http://www.aaanet... and it has been transcribed at https://en.wikisource.org/wiki/Body_Ritual_among_the_Nacirem...
So that would be a "no".
Also you have to look up how to open it (regardless of where you live) if you haven’t encountered one before. Truly, truly bizarre design.
Too bad it doesn't have PCIe slots. It could be interesting as a low-end 10Gb/e storage/web server if it had enough I/O.
It's kinda hilarious to think that a (group of) bad actor(s) spent years pretending to act in good faith, adding useful patches, in order to try to implant their backdoor only to get busted weeks/months before unleashing hell... And now their useful patches, made in bad faith but still useful, can be reused.

Hope it pisses them off.
Interestingly, QNX designers have learned and applied one of the same lessons as L4 designers: asynchronous messaging is messy regarding resource management and slower than well-executed synchronous messaging. QNX and L4 both use synchronous messaging for the vast majority of tasks.
Nathan Tolbert pushes the limitations of new games on old consoles
There is no power button, but you can probably shift into neutral
There's a very simple solution which is to centralize the process. Banks learned this decades ago. It's why your teller can't do anything that an ATM machine can't do anymore.
Reminds me of Prezi. Do people still use Prezi?
One reason it hasn’t gotten traction is due to a “herding cats” problem - the breadth of existing languages and SCMs in use is too big to manage. But mostly it’s the business model, who’s going to invest the vast amount of time for this when there is virtually nothing in it for them, it’s a giant onion. There’s little money in tooling, there’s far less in metatooling.

There’s also a bit of “squeaky wheel” resistance. Still a significant minority clinging to text editors as opposed to modern IDEs. But given the demographics here I imagine this segment will begin to shrink dramatically within a decade or so. Shrug.
...or children of Indian immigrants.
The author deals too much in absolutes. Generative AI is a miracle that we’re already desensitized to. Use it for what it’s good for. There are lots of things. That said, the whole enshittifiation paradigm is 100% the Zeitgeist right now and it’s happening across the board. I’m personally feeling increasingly negative about companies like Google and Apple whose products and services I have loved for decades. It does feel like a mass betrayal of user trust / race to the bottom is happening across the board.
From one I’ve understood, that’s referring to Lisp code that runs as dang and automatically makes this sort of reply where it takes links to stories that people comment, and it replies with title of story, month and year it was posted and number of comments.

Only dang can do that sort of thing. Not us mere mortals.
Do you remember Microsoft Deep Zoom and Deep Earth? https://en.wikipedia.org/wiki/Deep_Zoom
The article is vague. Is this "sim-swapping" physically replacing the SIM card in the customer's phone? Or entering the wrong IMSI into some T-Mobile database to change the association between IMSI and customer?
I want an LLM that can perform self-inspection; attribute each response to its sources. And then I would replace RAG with continuous learning.
This is a wrong assumption.

Opening the code doesn't necessarily mean that external contributions are expected.

Reports of issues might be welcome, code contributions less.

I've seen too many popular projects polluted by low quality contributions. When they get merged without care, the project's quality degrades. When they accumulate, the load on the maintainers shoulders becomes heavy.
intriguing... I'm American and I remember those days, nothing comes to mind. "Every two weeks" sounds likely paycheck related though, but for instance those don't sound like hours worked or anything like that.

the other comment about flextime, maybe, could be "hours of holiday time accrued" and it goes up and down because he spends it? Maybe a military person would know better, maybe in some subreddit.
You don't need a CSPRNG to do SHA512, which their solution already incorporates.
If you meet him, and he thought discussing god was interesting, would you then do it? If he wanted to discuss your faith in god, would you do it then?
Exploring Altered States of Consciousness
Does this mean that compilers have given up on processing GOTO if it is written directly by a person, but are fine in analyzing code generated in Intermediate code from GOTO-less code ?
Yet, most banks in the US force the use of SMS 2FA without offering TOTP as an option. Truly incompetent institutions we've created.
Have the Liberal Arts Gone Conservative?
This is one of the all-time cryptography footguns, an absolutely perfect example of how systems development intuition fails in cryptography engineering.

The problem here is the distinction between an n-bit random number and n-bit modulus. In DSA, if you're working with a 521-bit modulus, and you need a random k value for it, k needs to be random across all 521-bits.

Systems programming intuition tells you that a 512-bit random number is, to within mind-boggling tolerances, as unguessable as a 521-bit random number. But that's not the point. A 512 bit modulus leaves 9 zero bits, which are legible to cryptanalysis as bias. In the DSA/ECDSA equation, this reduces through linear algebra to the Hidden Number Problem, solvable over some number of sample signatures for the private key using CVP.

Later

Here you go, from Sean Devlin's Cryptopals Set 8:

https://cryptopals.com/sets/8/challenges/62.txt
This is the thing I don't get about those opposed to sending military aid to Ukraine.

You have a country, who is willing to spend lives, fighting a defensive war, against an aggressor that invaded their internationally-acknowledged territory and demonstrated themselves a regional threat, and is putting aid to good use reducing the military of said threat...

What's the point of defense budgets, if you can't put tools of war to use?

The only arguments against seem to be "We can't afford it" (most of the west can) and "We need it for our own defense" (most of the west is defending against the very threat in question).
The key spacing is the standard 19mm key stride that we use on Framework Laptop 13 and which most (all?) 13"+ notebooks use.
I think it's literally just dang typing out the title and giving more context.
I really don't see where the judge is coming from. How would the judge expect this to be resolved?
I think Python got this right, where "x is y" is identity (not often used but still concise) and "x == y" is value equality (a method you can override).
If you're a paying customer, please reach out to support. If you're on the free tier, join the discord, and we can try and help too.
It will never cease to amaze me that standards bodies whose sole purpose is to help everyone coordinate by creating and distributing a standardizing document that everyone involved should read and conform to are so reluctant to share the document. Here, they offer to email it to you if you ask nicely in the form of emailing an Excel file, and that's unusually permissive. Surely some of these standards bodies should be interested in proactively telling people what their standards are.
It's not physically possible to buy a device you can't root. You can however buy a device that is not easy to root.
The problem, if you read to the end, is that one half of the former couple is very happy with this outcome, and the other half is very much not.
The services require a phone number not because it adds security, but because it is a monetary challenge for scammers. If a service allows for multiple 2FA types it usually demands SMS for the initial setup, but once that is done you can remove your phone number to force it to switch to TOTP or a token. It's generally a good idea to not have your phone number stored in a zillion websites anyway, every copy is just another vulnerability for hackers to exploit when they knock over that service.
> If published someone like Terrence Tao could write formal proofs for them like he and his team did some improvements for the work by Yitang Zhang.

From the second paragraph:

> George Andrews and Bruce C. Berndt (2005, 2009, 2012, 2013, 2018) have published several books in which they give proofs for Ramanujan's formulas included in the notebook
To make images zoomable, check out https://zoomhub.net

Can be extended to full ZUIs, e.g. https://zoomhub.net/showcase/ecommerce/watches (desktop preferred)
> Don't most rich self-made people, and people at the top of big corps, think this way? (Not all, but a good-size majority?)

It's very hard to know! (It's not like you can send a survey around and ask.)

But for what it's worth, I think this is overblown. It's not that it's not a thing. But I don't think it's as much of a thing as people tend to think. I think most people, including fancy business people, want to be the hero of their own story, and that a smaller-than-imagined proportion of people find "the only rules [are] do not get caught if you can and make all the money you can[, a]nd trust no one" to be compatible with their own heroes journey.
Ah, you power this device via PoE and it can then draw up to 25W from a PoE switch feeding it. You cannot power another device via PoE with the ROCK 5 ITX as the source
Assuming I'm reading it right, this is an absolutely classic vulnerability, something people who study cryptographic vulnerability research would instinctually check for, so what's taken so long is probably for anyone to bother evaluating the P-521 implementation in PuTTY.
I'd wager by making the requirements simpler. Wideboard is rendering monospace, so every document is made up of of 8x16px cells, and you just have to decide which glyph to render in each.

From a quick skim of the source code this is mostly precalulated. Basically each document is rendered as one rectange, where the shader converts the current position to the row/column of the character to be rendered. There is one texture that holds the length and starting offset of each line (using one pixel per line), and another texture that for each offset tells you which glyph to render (using one pixel per glyp). The third texture is the glyph map that holds the actual glpyhs (a simple 256x256 texture of all supported characters). The last texture is static, the other two are calculated once as the document is loaded, and there is a neat shader that uses all three textures to render the actual document view. Since the shader is sampled at fewer points if the rectangle takes up fewer pixels on your screen this works out well for zoomed out views.
Plenty are available for sale without the casing, such as this one:

https://www.aliexpress.us/item/3256804553731471.html

I have worked with several nicer fully enclosed models that do not have any monitoring camera. I have a similar model to this one with no such camera, and I suspect this one does not have one either:

https://omtechlaser.com/products/60w-co2-laser-engraver-with...

That said if a kilowatt metal cutting laser was for sale, I would suspect it would have a full enclosure at least.
Right, let's start a cultural flamewar over your personal emotion of the moment. Can't wait for HN to turn into Reddit, can you ?
Apple Did a Dry Run of APFS on Your Device Even Before iOS 10.3 (2017)
If you look the origin of the word genius I think there is a good parallel as thinking that your own genius is an external spiritual entity whispering you solutions
Sounds interesting, but the website is lacking. I'd've liked to see real-life examples of texts rewritten using STE, as well as comparisons to other widely-used style guides. And just give me a fcking download link.
Job did not have faith in Jesus (Job 9:33), but tinnitus is not among Job's listed afflictions. I'm pretty sure tinnitus is caused by reading too many books: since your theory is wrong, by process of elimination, mine must be right.
Please don't start mate.
My recollection is as recent as a few months ago. Well I guess I’ll have to take another go at it this month, hopefully. I used three or four different JSON libraries aside from Foundation, including as I mentioned the quite popular yyjson wrapper which I expected to be on par with the pure C implementation. I’m out of the loop with the Swift ecosystem at the moment, can’t recall all the names.

I experimented with several logger implementations, likely to have used the one you’re suggesting. Thanks for pointing it out.

With the Vscode extension and the language server I suppose I had very palatable experience. It just didn’t work most of the time until I’d recompile the projects. Setting it up was a bit annoying as well, no build tool chain automations for project imports and setup, had to do the setup by hand. If I recall correctly, with one project an unpleasant issue I had was with the Swift Package Manager and CocoaPods, the Vscode extension wouldn’t recognize the project structure, and I ended up setting up a CMake project, good I have an affinity for CMake, and exporting it. But Xcode did just alright with it. So I just went back to Xcode for all my Swift projects. I think a plain SPM project actually got properly recognized in Vscode, but lots of dependencies are beyond SPM, which incidentally is also quite a significant annoyance in the Swift ecosystem.

I wish Swift enjoyed more attention, like .NET has been having. Oh and in terms of documentation I feel Swift is nowhere near .NET, even though the setting is comparable.

Referring to your closing remark, I don’t feel like that’s a lot, it’s a pleasure to learn more about Swift’s ecosystem, so thanks for taking your time to reply and providing extra context.
So this signing method requires a 521 bit random number, and this flaw caused the top 9 bits of that number to be zero instead, and somehow after 60 signatures this leaks the private key?

Anyone care to explain how exactly? How it it any different to the top 9 bits being zero by chance (which happens in 1 out of ~500 attempts anyway)
I mostly notice it only when I meditate. I also notice that my nose hurts.
> Where did this private information come from?

> Still, the biggest issue here is how this person (or multiple people) obtained the employee phone numbers. We’re not sure yet which employees are impacted, but based on comments online it seems at least a few third-party employees are affected, and we’ve independently confirmed current corporate employees have also received the message.

Sadly, the idea that phone numbers of people are private should be considered laughable at this point. There is LinkedIn, and even if you're not directly connected to someone it would be easy to correlate publicly available LinkedIn data to phone number data.

Also, note that TMobile explicitly provides a "SIM Protection" feature, https://www.t-mobile.com/support/plans-features/sim-protecti.... Why this isn't enabled for everyone by default I don't know.
This is shameless plug, but I have an analytics tool for GitHub orgs and repos and my goal is to make the data freely available. Here are some examples as to how analytics can be used to help users decide if they should use and/or adopt open source projects.

https://devboard.gitsense.com/zed-industries

https://devboard.gitsense.com/supabase

https://devboard.gitsense.com/ollama

My value proposition isn't the data, but the ability to gather, organize and update data at scale, so giving it (data) away free is not an issue for me.
Presumably because 512 of bits (a) seemed "random enough" and (b) was the nicest block size that fit comfortably in 521 bits of modulus. This is a common mistake.
Why should someone outsource one more important identity thing to Google?
That's the real problem with hearing loss: if you compensate by raising volume across the entire spectrum of sound to compensate for a few frequencies, you slowly make yourself more and more deaf.

And I suffer from a notch in my hearing where speech is generally found, so I hear clinking glasses and shuffling chairs far easier than people. It's aggravating for everyone involved. If you're lucky enough to afford hearing aids, you'll soon discover hearing aid companies know the best fidelity comes from high discretion and narrow band amplification. And they're pricing hearing aids accordingly: the more and narrower the bands, the higher the price. Also aggravating.
Since Ramanujan is dead, I assumed that he had no interest in arguing with the man and was instead talking about anyone with such inspiration.

As an English grammar stickler, of course thou should have said "Why art thou" since the use of "you" in the singular is simply grammatical hooliganism and has no place in polite society.
Nice move! This reduced the high pitched noise, but I still sense a general overall ambient signal ready to increase.
Automation makes a difference!
> definitely useless for road navigation

I would disagree strongly with this. I took a roadtrip in 1999 using a Delorme Earthmate Hyperformance GPS receiver, the RS-232 version, plugged into a Toughbook running Delorme Street Atlas USA, I believe it was version 6.0.

It provided perfectly usable directions all the way across the country. It didn't do lane guidance (which I don't find terribly helpful anyway), but some time in advance of every turn, it would announce the turn, including the street name.

That version even had voice recognition, so you could say things like "are we there yet?" and it would announce the ETA to both the next stop and the final destination, along with current location. Lots of fun!

30 meters (typical worst-case CEP under SA) is plenty accurate for road navigation in all but the densest areas, and even then, just glance at the map. Once you're out on the open road, it's brilliant. Rock out to some mp3's until the voice pipes up with the next maneuver.
Google Authenticator makes it very unclear to average users how you back up or transfer stuff to other devices. Sites that support Google Auth are gonna have to deal with lots of locked-out users trying to recover access, which can negatively impact security.

If anything hopes to replace SMS, it needs to be as user-friendly as SMS.
I hope you’ve changed your mind about chronic fatigue and fibromyalgia as well. They’re also post-viral diseases.
The journalist seems to have submitted the article for publishing by mistake as well.

> Lawyers for Mrs Williams argued that as the order had been made by mistake it should simply be "set aside", describing the error as someone at the firm simply "clicking the wrong button".

[missing paragraphs describing what the hell happened.]

> Mr Williams' legal representatives argued a final order of divorce is a "once-and-for-all" order, which cannot be set aside by the consent of the parties and may only be rescinded by the court if found to be either void or voidable.
2x 2.5Gb/s interfaces are pretty chunky on this spec of board, isn't it?
BTW Stow Lake was renamed a few months ago: https://sfrecpark.org/CivicAlerts.aspx?AID=1696
148 keV is not too much. As electronics engineer I few times talked with colleagues about fixing X-ray devices, and there very typical to use voltages 60kV..120kV, which are directly converted to electrons kinetic energy, and than it converted to X-rays.
> My first PC had a whopping 20 megabyte hard disk that occupied not one but TWO 5.25” drive bays

My first HDD was for a Commodore Amiga 500 and it was sold with its enclosure, so it was quite big too. I remember it did cost (in Europe) the equivalent of about $1000:

https://www.computinghistory.org.uk/det/36474/Reference-40MB...
https://openhub.net/ already exists (but it looks quite dead).
It seems like the husband was quite ok with the accident, hence the ruling:

> Mr Williams' legal representatives argued a final order of divorce is a "once-and-for-all" order, which cannot be set aside by the consent of the parties and may only be rescinded by the court if found to be either void or voidable.

It isn't like two other random people that didn't want to be were accidentally divorced.
Wikipedia says "... a petawatt-scale laser pulse could launch an 'avalanche' fusion reaction." Quite a lot of zeros to add on to the power.

The article says they are planning 10kW or 10^4W and a petawatt is 10^15W so 11 zeros by my calculation. Could be a while. I think Helion, who are now talking about turning on their fusion to electricity gizmo this summer, may get there first.
A few things, RLS is secure by default, it's postgrest that's insecure by default.

RLS disables all operations on a table once enabled and is only operable once there's a passing policy unless you can bypass RLS.

When it comes to access control, you should probably always have tests for anything halfway important.

Views are a bit of a footgun when it comes to RLS, they bypass it by default. But getting them to play nice is as simple as defining "security invoker" in their definition; not what I'd call heroics.
We really need better standards for MFA. Probably we should have a legal definition of MFA and SMS should be described as 2SA (Two-step authentication) on par with email or whatever. While MFA should be restricted to actual Yubikeys and other hardware certificate based things.

I'd also say people shouldn't be able to advertise MFA if they only support a single token per method.
I'll be honest, I have no intention of playing your game (I just don't really play PC games; if it were ported to console I'd probably play it), but I love supporting indie devs so I purchased it. It looks fun and innovative though!
The depictions of "wrong physics" in the 3 Body Problem show kinda remind me of that. Any kind of thinking that had even a whiff of going against the party line would cause problems for the author. What a weird time.

I wonder if it's similar to how we look down on e.g. string theory, except I don't know if that's an apples to apples comparison given that we haven't seen any string theory apples yet :-)
My expectation is that most people who call themselves "free speech absolutists" are people who are primarily concerned with the effects of people censoring their own speech due to fear of audience reaction--that is, their absolutism in free speech is mostly centered on protecting speakers from the consequences of their speech, and they are almost invariably willing to trample on the right of others to speak in goal of this protection.
Free speech absolutism is a meme. The so-called absolutists are eager to fight to protect nazis' right to speak; but when they run places like parler, gab, and twitter, they cannot help but censor people who disagree with nazis.

For example, downvoting is often equated with censorship. But when I call free speech absolutists nazis, I get downvoted! So, I persist, to highlight the hypocrisy if nothing else.