skysight-inc/HackerNews huggingface dataset:
Contactless and EMV Chip cards are the same.

During provisioning the server sends a signed Java Applet to the Secure Element which validates the chain of trust then installs the applet. The EMV protocol involves "application selection" which lets the payment terminal tell the Secure Element OS which applet it wants to communicate with.

ARQC (Authorization ReQuest Cryptogram) is where the applet on the card takes the payment terminal's payment request and identity info, signs it with the PK keypair unique to that provisioned card, and sends it back to the payment terminal which then hands it to the card issuer for validation and approval.

A bunch of Java bytecode: the chip/SE, the payment terminal, and likely also on the server side.
It really is not. This "sudo replacement" (which under the hood is systemd-run) will apparently require quite a bit of the systemd stack to operate. That is not something you have access to in many lightweight container distros or on other non-systemd distros.

And coreutils is expected because most people use GNU/Linux. Coreutils is that GNU userland part. And either way, the majority of coreutils are GNU implementations of standard unix components. You can use most software that depends on coreutils on other *nix platforms like BSD for this reason.
Well, yes - git log does have special handling of commits with multiple parents because everything it shows is a special cased lie. Why? Because commits do not contain diffs or patches, but are instead full snapshots of the repository as a whole at a point in time.

git log -p is a convenience tool that tries to show code progression, and so it comes up with these simple diffs. Showing a graph of N-way conflict resolutions would not help the user trying to get an overview. Other tools exist to track the origin of a particular change, such as git blame.

It is important to understand what a git commit actually is exactly because of the caveats of such convenience interpretations. Otherwise you'd have no idea where a conflict resolution is stored, and you'll run into the surprises mentioned here.

In my opinion, git also becomes a lot easier to work with once you understand the low-level details, as you realize which high-level tools are similar, compatible, or fit or unfit for a a specific purpose.
> instead of postulating on internet forums

Love or hate internet discussion, you're always welcome to not participate in it.
You aren't making any sense. All of the components of system D are separate programs, and yes they are maintained by the same general project and designed to integrate well with each other, but just because components are designed to integrate well with other components from the same project if they are present, that doesn't remotely mean that all of the components are required. And I mean, the proof is in the pudding, there are plenty of distros that do not use all of the components of systemd. Also, doesn't Linux have a long history of creating integrated suites of programs designed to integrate well with each other and used together? Like GNU?
Go has an amazing runtime and tool ecosystem, but I’ve always missed a little bit more type safety (especially rust enums). Neat!
It seems like the phenomena of helicopter parenting and an intense focus on the "nuclear family" are two sides of the same coin.

Helicopter parenting doesn't create resilience and also doesn't allow for an organic development of social behaviors.

On the flip side, focusing on the nuclear family and those focusing on "blood is thicker than water" also create anti-social behavior because you don't develop as deep of connections with others because they're not blood relatives and it's entirely possible you view them as less-than because of that. If your family isn't supportive, it creates a lonely situation where you don't welcome others as openly and your family doesn't support you.

So, really, we should be welcoming the idea that it takes a village and dropping our guard on blood-relation being critical. We need to mix and intermingle more fully and organically and socialize with one another. I wonder if that is more present in European cultures where it's largely absent in the current American culture.
I’ve been pretty happy with web-ext, I’m curious what abstractions and configurations Extensions.js avoids comparatively. I’m assuming you’ll still need a manifest.json, and it looks like both use npm/package.json for dependencies.

https://github.com/mozilla/web-ext
fyi, in Packer, there is an option to not create the final image
Nothing like adding dependencies to the build toolchain.
>unless you are in, say, Germany

Basically yes.

> it's also a Dell and not a Chinese brand

That's the best reason I can see.
Haha glad to hear that
Well, they're the only ones actually funding development of the ecosystem, aren't they?

The rest just do a lot of opinoning and complaining and not that much of developing.
They made a coffeescript for go
There have been multiple attempts to clone it, but the communities there almost always end up toxic or filled with illicit activities.

Some (including me) have shifted to Lemmy, a FOSS Fediverse alternative like Mastodon is to X (Twitter). There are many instances of Lemmy to choose from as home. Mine is lemmy.world. I run a few communities there and we have a chill environment there.

If you miss the old reddit feel, you can emulate it with old.lemmy.world

Some Reddit third-party app devs converted their apps to Lemmy apps after Reddit made those API changes.

There's tildes.net which is run by a former Reddit admin, but it's smaller and invite-only.
Speaking of preventing free discussion: I don't currently see this very discussion on the front page of HN.

Yet there are newer submissions with fewer points shown there
California reverses its population-loss streak
https://news.ycombinator.com/item?id=40179056
Most of the time I don't need an expensive overbuilt product. I just need to get a job done and a lot of junk does just that. The junk that we are getting is the almost the same stuff as the previous stuff we were getting at about 10% of the quality and 80% off the price (just random numbers for effect).

This leaves those that want the nice overbuilt stuff out because we cannot scale the high quality anymore.
it's bc it solves all problem ever exist.
Title is wrong: it should be that it is the first year-over-year drop in 25 years. (Details behind paywall)
China Export is a nasty one indeed. I recognize them by looking at the line between the 2 ends of the C : If the middle left of the E falls on the same line, it's a fake.
Injecting right/left politics into everything is so tired. I hope one day you realize how silly and artificial it is.
Stop letting people who benefit from civil strife convince you that we always have to fight each other.
I stopped using Twitter because "Space Man" banned most of one political side. Maybe if you didn't notice that, you're in a bubble?
Reminds me of this previous effort to build upon Go but add a more flexible type system: https://github.com/oden-lang/oden
I'm not sure why you included php in your list of examples of things that become bloated with dependencies. I've never seen that be the case.
I tried it a bit ago (when it was still called uid0, pre-release), I also wasn't a fan of the tinting.

I like the intent behind it, but some terminals already tint the header color when running sudo, I haven't tested if its done specifically for sudo or if its in a more generic way that could handle this as well.
Indeed. Moral depravedness is supposedly modeled by law. There is an uncanny overlap of scammers and normal economic activity though. That needs to change.
Reverse Searching Netflix's Federated Graph
If Rust was already matured by the time Docker was rewriten from Python, and Kubernetes from Java, I bet that Go wouldn't have been the lucky candidate.
>professional drivers can not lose 30 minutes every 400 miles on these routes to charge, they will miss all their drop times.

Except, that isn't how it would have to work. It would make sense for the company to pay the driver for charging time. In BC a 400 mile drive would cost C$514 in diesel ($2/l, 40l/100km), or $112 in electricity (at 1.25kwhr/km and $0.14/kwhr), so presumably the driver could be paid $100 for the 30 min charging stop, and the company will still save $300 for each 400 mile leg.
there is an O(n) Turing machine that guesses only the correct binary number. you just don't know which.
and sed https://pubs.opengroup.org/onlinepubs/9699919799/utilities/s...

and m4 https://pubs.opengroup.org/onlinepubs/9699919799/utilities/m...

and ex https://pubs.opengroup.org/onlinepubs/9699919799/utilities/e...

and bc https://pubs.opengroup.org/onlinepubs/9699919799/utilities/b...

unix isn’t short of programming languages!
> If you want to see something I think the actual trucking industry is getting excited about, check out Edison motors. They're running a hybrid diesel/electric design that would work wonderfully for things like clean-air city driving

Serial hybrid seems like a great solution for trucking, since you don't need to oversize the engine in order to cover high torque needs (the electric motors would handle that), and during flat highway drives the generator could top off the battery using a narrower RPM range.

Long distance trucking is also a place where I think green hydrogen fed fuel cell trucks could work, since range would a non-issue, and also the hinterlands, which long distance trucks travel through, is where most of the renewables are.

If the renewables can be fed to an electrolyzer nearby, which supplies a hydrogen fueling station nearby, then you don't need to build much transmission/transportation to get the hydrogen to the trucks.

This requires electrolyzer cost to drop a lot (and FC Semis to be available), but all the technology components of the system exist in some form.
I don’t think any of that is contradicted by what this seems to be trying to do. In fact, Go doesn’t make you deal with your errors (you’re free to ignore the returns) whereas this would (via exhaustive pattern match).
PG&E in California is 4-6x+. I care.

https://www.pge.com/assets/pge/docs/account/rate-plans/resid...
Something I have started doing when looking to purchase new things, is look for genuine made in America companies[1], as that generally correlates with a higher tier of product. Biggest downside is, I can't find a backpack for less than $100 now that pelican doesn't make them anymore and this dilemma is often repeated across most categories of purchases.

[1]https://www.madeindex.com/
Show HN: A Type-Level Brainfuck Interpreter
TS Playground: https://tsplay.dev/brainfuck

Scroll down to the "test cases" section and hover over the type names to see the output.
The implicit premise of this comment is that linux is broken and needs to be changed. It isn't. The changes are not inherently good. Development is not inherently good. Just look at Gtk3 from 2014 to 2024. It was far more functional in 2014 (re: keyboard input) and now that has been removed because "progress".
Hey all, I'm the creator/primary maintainer of pyinfra! Super excited (a little terrified) to see this on the frontpage, happy to answer any questions :)

I also hang out on the Matrix room: https://matrix.to/#/#pyinfra:matrix.org

Another thing: the GH repo points at currently in beta v3 and the docs for this are here: https://docs.pyinfra.com/en/next (highly recommend starting with v3, I just haven't had any time recently to wrap up the release, but it's stable).
LLM as an n-dimensional Object in n-dimensional Space
Na it's just this one sub because clearly it's being heavily manipulated, my "minority opinion" is shared in almost all the other ones. When only articles from israel-based news sources get upvoted then you know bots are doing most of the work. Go spend a few minutes looking at the posts related to the war and you'll end up at the same conclusion, you don't need to be a genius to see it.
Bot accounts used to be useful in the past, and I'd bet some of them remain. Bots like the one that would ping you in X days (to see if a discussion ever had an update), the one that would tell how many times a user used the n word (useful for witch hunts), the one who would summarize stuff for you before it was cool, the ones that would identify topics from the FAQ and tell you so...

Why they are not currently keeping them in check, though? I'd like to say "engagement" but I prefer to believe in "incompetence".
Thanks! Threlte is "just" offering a declarative way to express Three.js. If you know how the `<T>` component and its props and event handlers work, you can use the Three.js documentation for everything else.

Apart from that with Threlte I personally practice documentation-driven-development, so ecosystem packages are exhaustively documented. If you're missing something, let us know via an issue[1] or on Discord[2].

Accessibility is a topic we didn't care enough yet to be perfectly honest. Accessibility doesn't stop at screen readers though, it's about contrast, size, colors, motion, reachability, and so much more that we cannot provide and are a consumer topic. Naturally WebGL apps suffer from being practically invisible to screenreaders. There are workarounds[3] but essentially this has to be solved by consumers of Threlte (devs) and hopefully by browser vendors at some point in the future.

[1] https://github.com/threlte/threlte/issues

[2] http://chat.threlte.xyz

[3] https://github.com/pmndrs/react-three-a11y
Indeed the definition is somewhat of an extrapolation. Product complexity defined in this way probably misses on intricate supply chain dependencies too. E.g., EUV lithography is essential for modern chips, but it is produced by ASML in NL - which is otherwise in steady economic complexity decline for decades (from rank 15 in 1995 to rank 26 in 2021). Small country specialization might not be normalized adequately.

Eyeballing the rankings the methodology is probably biased towards manufacturing materials supply chain complexity rather than "knowledge economy" complexity.

Nevertheless its probably directionally correct at more aggregate levels.
The only language I can think of that has pulled off “compiles to another totaling language” and gained mainstream adoption is typescript, and I’m sure it wouldn’t have done so if it were possible to run in the browser otherwise.

Can anyone think of another example?
People will know whether it solves their problem when they see it, no need to akchually the OP or maintainer
Claim Facebook Used MitM to Spy on Competition [pdf]
National panel lowers mammogram screening age to 40
Japanese government spent $35B to prop up yen, BoJ figures suggest
Everything I see her in, her acting style to me resembles a lifeless cardboard cutout. I get that that’s “the point” of the Americans, but if that’s all she’s bringing, something’s not working here. And in the diplomat it seemed exactly the same. Lifeless acting, and it seemed a lot of her personality was expressed by other characters because she wasn’t doing it herself.
Yeah, I don't expect it to be better than a human here. I'm just surprised at how much knowledge is actually stored in it. Because lots of comments here are showing it 'knowing' about very obscure things.

Though mine isn't obscure, but this is the only chatbot that actually recognizes it as a meme. Everything after that is kinda just generic descriptions of what a meme is like.
That said, it is pretty SV behavior to have one of your companies pay the other. A subtle wealth transfer from OpenAI/Microsoft to Reddit (and tbh other VC backed flailing companies) would totally make sense.

VC companies for years have been parroting “data is the new oil” while burning VC money like actual oil. Crazy to think that the latest VC backed companies with even more overhyped valuations suddenly need these older ones and the data they’ve hoarded.
>For me the growth means

A country's economic growth means something deferent than what it means to you.

>a mix of things like being more productive, increasing life standards etc but we have great life standars.

And to fund all those things you usually need a higher GDP, not a lower one.

>Japan has a high living standard too and no to negative growth.

Do you live in Japan to confirm this "high standard of living", or are you gonna throw a google search in my face as the argument?

Why do you think a country doesn't need more money to provide a better life for its citizens? Do you see poorer countries providing excellent life?

>Your point of other countries outbidding us on resources is that really the main argument for necessary economy growth?

What's your point against this? Are you gonna provide any arguments here?

>At least for software engineering that's not true.

Good luck eating software. Or living inside software. Or driving software to work.

The world needs far more than software to function. Go out and touch some grass.

>Farming probably hasn't changed that much in the last 20 years either.

But weather, the environment and the geopolitics have. A lot. And now you have more mouths to feed to boot.

>It feels to me that we will not go far in this discussion tbh.

I agree. You're far too clueless and out of touch with reality.
Timing Details with Curl (2011)
you don't even have to pay the contractors to extract money if we're talking about a legit team, like say Chelsea, you can just buy a bunch of top players and the business will print more money and be valued more if you want to flip it.
Taking an ID3 tag example, if you are mass-converting/sanitizing/etc. tag titles and other similar metadata, the strings are often very short, sometimes only even a single codepoint or character, and proper assumptions of encoding can not be relied on because so many people violate specs and put whatever they want in there, which is the whole point of wanting to sanitize the info in the first place.
very cool, also check out https://www.plasmo.com/
I love pydantic but I really have to wonder why they chose this route. There's already a ton of companies that do this really well and I'm trying to figure out how their solution is any different.

The llm integration seems promising but if you care about LLM observability you probably also care about evals, guardrails and a million other things that are very specific to LLM's. Is it possible to build all this under one platform?

I do hope I'm wrong for the sake of pydantic-core.
Given their focus on streamlining manufacturing with automation, I'd be surprised if they have the staff to go around and rip batteries out of cars. But I could be wrong.
You’re probably not using GPT4. If that’s the case, you aren’t really using an “LLM”. With GPT5 that gap will be even more obvious.
I'm assuming that'd be a non-moving/automated tripod?

I have a d850 full-frame DSLR and either a 200mm 2.8 or 500mm 5.6, with some decent tripods; but earth's rotation tends to get me pretty quickly with any long-exposure photos :(
Apple and Google take 30% of app revenue and love to implement in the OS the best features of popular apps. It's a bad deal for most businesses.
Agreed, as you say it _exceptionally_ well adapted. Where the loop has basically reached a fixed point. As software is a relatively new phenomenon, maybe we'll reach a fixed point for most software in a few hundred years.
Elixir compiles to Erlang, I think.
So does Prolog count as a concatenative language given the standard definition of concatenative languages?

For context, a Prolog program is a set of definite clauses so the union of two Prolog programs is a Prolog program.

In fact, this property forms the basis of the concept of (syntactic) generality in Prolog: if P1, P2, P3 are three Prolog programs such that P1 is the union of P2 and P3, then we say that P1 generalises each of P2 and P3. Does this concept of generality also exist for concatenative languages?
Ah yeah seems like the bulk prices I was looking up[0] are in bits, not bytes. Apparently ISPs aren't the only ones trying to make themselves look better through these shenanigans.

Would've only cost them $17 to go with 2x4GB modules, but limited board space and all that I guess. A 12GB version would've been nice to have for $7 more at least, since it's the max single module.

[0] https://en.chinaflashmarket.com/price/lpddr
I think of ansible as a declarative-imperative lasagna, where each playbook is a desired state, achieved by an imperative sequence of plays, which themselves are desired states, achieved by a sequence of roles, which have the same properties, and then tasks too below that, finally resolving to plain old imperative Python.

It's all pretty messy but useful.
I asked this in a thread about this from last night and didn't get a reply. For context, the way "run0" works is to apparently send a signal to polkit that requests a command under the root user's ID and permissions, thereby getting a privileged shell without SUID:

> How hard would it be to create a program to send a signal to polkit "impersonating" run0 and obtain a root shell without entering a password?

Anybody know how this is being authenticated?
Not into trucking, what is a Lot Tender?
Yeah, that's the topic, but where did you hear the story told that way?
European police chiefs condemn end-to-end encryption [pdf]
It doesn't matter but I fully disagree with this. A transpiler emits code the user is supposed to understand, a compiler does not. At least that's the general way I've seen the term used, and it seems quite consistent.
That sub is right on the borderline of "good moderation" and "overpowered mods huffing their own farts."
Start today by learning Metal. The concepts transfer to CUDA nearly 1:1.
The issue is that it's not just ideological. "Do one thing and do it well" is important because if you want to port software to another platform, it's a lot easier to port a single dependency component over to make it work than it is to port over the entire framework.

This is a serious problem and it makes it way harder to make things cross platform.
Show HN: Riza – Safely run untrusted code from your app
Hi HN, I’m Kyle and together with Andrew (https://news.ycombinator.com/user?id=stanleydrew) we’ve been working on Riza (https://riza.io), a project to make WASM sandboxing more approachable. We’re excited to share a developer preview of our code interpreter API with HN.

There’s a bit of a backstory here. A few months ago, an old coworker reached out asking how to execute untrusted code generated by an LLM. Based on our experience building a plugin system for sqlc (https://sqlc.dev), we thought a sandboxed WASM runtime would be a good fit. A bit of hacking later, we got everything wired up to solve his issue. Now the API is ready for other developers to try out.

The Riza Code Interpreter API is an HTTP interface to various dynamic language interpreters, each running inside a WASM sandbox without access to the outside world (for now). We modeled the API to align with a POSIX shell-style interface.

We made a playground so you can try it out without signing up: https://riza.io

The API documentation lives here: https://docs.riza.io

There are many limitations at the moment, but we expect to rapidly expand capabilities so that programs can e.g. access the network and filesystem. Our roadmap has more details: https://docs.riza.io/reference/roadmap

If you need to execute LLM-generated code we’d love to have you try the API and let us know if you run into any issues. You can email us directly at founders@riza.io.
For reference, Japan has over $1.2tn of reserves [1].

[1] https://www.imf.org/external/np/sta/ir/IRProcessWeb/data/jpn...
I guess but in this case it's doing something that sudo doesn't do — get privs from a daemon instead of setuid, and using something that systemd already did (systemd-run).

Is it that weird that they would make a runas frontend when all the pieces of it were lying around?
Why would they have to bribe the IRS?
Bruce Perens Proposes Draft Post-Open Zero Cost License