skysight-inc/HackerNews huggingface dataset:
Roblox has been on a constant downward trend. They’ve been doing some pretty awful stuff, including exploitation of children developers [0], unregulated market which encourages kids to gamble, lackluster moderation allowing kids to be harassed or worse, [both 1] and allowing manipulative and predatory games on their site [2].

[0] https://youtu.be/_gXlauRB1EQ?si=Cwfswyot9_FT29Fy

[1] https://youtu.be/vTMF6xEiAaY?si=MbT71UNeO0vEPSrr

[2] https://youtu.be/cGAXGroHZKA?si=mlCDY02aUXaJ9EPQ
A "AI Generated" label would be nice, here.
Compatibility. I am sorry but Linux and compatibility is like oil and water. I can create a Windows binary and it works on Windows 7, 10, 11 no problem. On Linux I need to pack it in different formats for different distros - AppImage, Snap, Deb, Rpm, ... and then solve compatibility issues between different versions of glibc in different versions of Linux. So much work for so little gain.
My impression was that they did a hard switch to proper Secure OS engineers for Windows about 10 years back.. I kind of wonder if that pushed engineers and managers with the worst habits out to periphery things from the OS perspective..
Windows 10 EOL is coming in October '25. So either it's replacing the hardware or running Windows 11 on unsupported CPUs. Or not running Windows at all.
The fed doesn't print "deficit money". They are forbidden from doing that and even if they did, who is going to spend it?

The treasury prints money. Remember when Janet Yelled said she is ready to mint a one trillion USD coin in case it is needed to avoid the debt ceiling.

What the Fed does is a duration transformation. Commercial banks can deposit US treasuries at the central bank and receive a claim on those treasures in the form of liquid central bank reserves. This is done because people keep holding more and more short term duration deposits in their checking accounts or at brokerage accounts. Buying a 10 year treasury with deposits that only have a 1 day duration is quite insane. This means that in practice whatever deposits you are keeping in your account are missing from the economy.

The US federal government can run a deficit and it can run it regardless of the financing conditions. It will merely pay an exorbitant interest rate if it chooses to do so.

Here is a loosely related paper:

https://www.elsevier.es/en-revista-investigacion-economica-1...

In an equilibrium economy, the expected net money supply is always zero, that is, every dollar in the money supply is offset by a dollar in debt. So called inside money.

If the neoclassical theory is true, then attempts at extracting seigniorage would immediately be spotted and no inflation could ever occur. The inverse is also true. If the government artificially restricted the money supply, people would find alternative means of providing themselves with the ability to exchange. So the expectation is that the government has zero power or ability to influence the economy with monetary policy. The only reason why it would have the ability to do so, is because it has made those alternatives illegal.
I can’t wait to point and laugh when the correction comes due.
I find it odd that you wouldn't factor the severity of recent security incidents into your vendor choices.
I don't believe this is accurate. There are concerns that talc can be contaminated with asbestos, but (a) asbestos was largely removed from talc for sale in the US in the mid 70s as your Wikipedia link points out (and additional info in the link below), (b) the concern with asbestos contamination is largely related to inhalation and lung cancer - I haven't even seen much in the form of hypotheses that it is a factor in ovarian cancer, and (c) given a and b the concern is largely with talc mining and the miners involved, not people who use talc-based baby powder.

https://www.cancer.org/cancer/risk-prevention/chemicals/talc...
Check for yourself with

ssh -v -i /dev/null terminal.shop

vs

ssh -v terminal.shop

What you're looking for is that there is no line that says something like

debug1: Offering public key: /Users/fragmede/.ssh/id_rsa RSA SHA256:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Upon further testing, the full command you want is:

ssh -a -i /dev/null -o IdentityAgent=/dev/null terminal.shop

to forcibly disable a local identity agent from offering up its identities as well, and not just agent forwarding.

Upon further testing,

ssh -o IdentitiesOnly=yes terminal.shop

still offers up my public key on my system (macOS, OpenSSH_9.6p1, LibreSSL 3.3.6), contrary to what StackOverflow and the Internet seems to think. Tested by hitting whoami.filippo.io, linked in child comment.
I’m still in the process of experimentation. An example of the flushing thing is that you can’t simply pass the DataStream/connection directly into crates like fast-socks5 which depend on implicit behavior by the TCPStream struct which implements the AsyncReader/Writer traits which don’t require it. I had to manually add a bunch of flushes after each write chunk.

Another thing is that some features have been partially implemented but not configurable (basically dead code for now) such as ephemeral hidden services. I spent a good few days forking and implementing that myself and am in contact with the devs to see how it could be implemented/merged in a cleaner way.
Some of my code:
https://gitlab.torproject.org/acheong08/arti/-/compare/main....

I wanted a socks5 proxy over a hidden service to securely expose my machine in a firewall without owning any servers in between or having to mess with port forwarding.

Now working on a new pluggable transport to tunnel tor connections over syncthing relays.

Mostly just for fun, nothing actually too useful yet
I presume they mean "by way of good measure", not tagging your username.
Honestly, the best electives I took in college was microeconomics, macroeconomics, political science, and world history. After those four courses the world made a thousand times more sense to me. It's a shame these courses were electives and I didn't even have to take them, they simply fulfilled an elective requirement. It just seemed to me that if I were to regard myself as having a "well-rounded" education then I should know these things. BTW - I was a lot older when I went to college, I was something like 25 or 26 when I started and had already worked for two startups and had even lived and worked abroad. I had a lot of experience coming into college and so I was very mindful of my electives. My 18 year old self would have never made such smart choices.
The article has nothing to do with Windows; it talks about security issues and breaches in their services, mainly Exchange.
Jonas, you and your team need to go get a life! 6 days a week.
Early solar system had plenty of impact events happening. Mars has less gravity than Earth, so it's easier to eject material from there. Picture a comet or asteroid hitting early mars. Most ejecta falls back to Mars, but still tens of thousands of rock fragments are ejected into space, in random directions. Some fraction of them are likely to reach Earth a few years later, potentially carrying any microbial stowaways present in Mars by then.
Just received the email, but could not download it because I had to change country
Anything is possible when an enterprise is being operated in a careless fashion. I would like to think someone would stop the bleeding before it got to that, but who knows! I think Tesla will be fine was my point, but Elon's Tesla wealth and control is in peril.

(disclosure: early TSLA investor, no current exposure because I like to sleep at night now)
> UF and FSU and Auburn are great schools and the quality of education there is probably comparable to that of Harvard, but that almost doesn't matter.

What is that based on? (Also, why those particular schools?)

Here's one way to look at it:

To learn something, some people want to learn from the best in the world and to study with the best in the world. They want to change the world and want to maximize their potential; they want professors and fellow students who can challenge them as much as possible, who can take them as far as possible.

Some people are more oriented toward a less maximizing path, which is fine - maybe more about learning what is in the textbook from a decent professor. Possibly they indeed wouldn't benefit from Harvard. I suspect when people say things like 'Auburn's education is the same quality as Harvard's', they mean that the kind of education they got at Auburn wouldn't be better at Harvard. Maybe that's true, but Harvard offers something far greater, not available at Auburn. It's a chance to work with (and build relationships with) the very best minds in the world, some of the best in human history.

Think of that kid in your high school who just blew away every class, even the hardest ones; who found other things outside school or at nearby colleges to challenge them. That kid wants to be around other kids like them, who challenge them, and around professors who can make the most out of their potential and passions.
Codepoints can only be 1 to 4 utf-8 bytes. Utf-8's bit pattern can extend up to 6 bytes, but there are only 1,114,111 valid unicode codepoints. and U+10FFFF takes 4 bytes to encode in utf-8 in a not overlong form. I guess you could encode it overlong, but utf-8 should only be encoded not overlong, so anything else could be considered invalid and potentially harmful.
"What's happening to Shoelace? Is it being replaced?"
"Web Awesome is the 3.0 release of Shoelace, featuring all of the Shoelace components you know and love under a new name.

"Everything Shoelace has to offer will continue to be free and open source as Web Awesome Free. We're introducing Web Awesome Pro as an additional paid option with even more tools at your disposal."

I swear anything open source and exciting is too good to be true. Either a planned rug pull from the beginning (which is what this feels like), or acquired by a mega corporation intent on turning it into a paid product.

I moved away from using Font Awesome once it became focused on getting you to purchase Pro. Shoelace was massively promising, but I'm sure more open source native web component UI libraries will start to pop up as developer support grows for native web components.

My expectations for "Web Awesome Free" are barely any new web components and tons of new "Pro" components that resemble standard things you'd come to expect/require in most projects or other libraries.
As it should be, but recently on HN it was posted that AWS will charge you for any unauthorized PUT request to your S3 buckets. Meaning even 4xx errors will rack up a charge.

So your S3 bucket names must be hidden passphrases now that stand between an attacker and your budget.
The image isn't actually the issue: it's the html for the web page. The image is static and quick to serve, the html is often dynamically generated for each visitor.

Thinking about other similar distributed systems, if I put a link to an html page in an RSS feed or a mailing list message, it's not normal for subscribers to be using clients that fetch linked pages. But if they did it's clearly as an agent of that user, and not as an agent of the poster?
> Microsoft has placed a major bet that customers will embrace its effort to incorporate AI into its security product platforms. Microsoft said, after months of testing with customers, that Security Copilot helped security analysts be 22% faster and 7% more accurate.

Good news! I am sure there aren't any deeper issues around Microsoft's ideology, arrogance, or crass financially-motivated reasoning. Otherwise I might start wondering if maybe Microsoft's security AI might not actually work that well.
Bitwarden people had some info about it. They decided to make native apps instead

https://www.reddit.com/r/Bitwarden/comments/1b32bbz/going_na...
Which happens in one of his novels
Italy yes, but not Switzerland for sure! Maybe France or Spain?
You know those investment schemes are endorsed because they create jobs? Figure out a way to keep everyone employed without them and you have solved the problem.
I refuse to let my kids play Roblox. "You will never find a more wretched hive of scum and villainy ...". That place is full of kids scamming each other, and I've not heard many good things about the company either. I was once trying to tell my child about this in a public setting, and a nearby older kid was just smirking knowingly about all the things I was talking about. Gambling, theft, foul language. Frankly, it almost seems like a good playground for older kids to learn some cheap life lessons from, but I'm not sure what age one can partake of some of these things without it warping your personality.
A couple of boring (LVM+encrypt) installs on 5+ year old thinkpads were uneventful as well. "Experimental" ZFS+encryption failed entirely (on the same machines) but it did say experimental right there on the page...
What chaos and who is advocating for chaos?
Awesome work! I tried it on a couple of pretty confusing examples and it worked out great.

However you might want to build with production mode enabled, since your current build actually tries to connect to a Vite dev server on localhost:3000.

Here's a primer to help you navigate building for production:
https://vitejs.dev/guide/build

Best of luck to you Andrew and to the team!
FTA:

> The company in November began testing the video ads — that will be served to users who are 13 years and older

Maybe by kids you meant 13-17...but I feel like teenagers are not exactly a demographic that never sees targeted ads (e.g. through social media, on YouTube, etc.).

(Full disclosure, I work for Roblox, but not on anything related to ads. Obviously representing just myself and not my employer.)
> When you have a lot of young ambitious people with weird ideas in one place, you get trouble.

You get wonderful things and 'good trouble'.
Vivodyne | Senior Software Engineer (Front-End) | Remote U.S.

Vivodyne is a pre-series-A startup spun off from U. Penn. You'll be working on the web interface that scientists use to define studies that our robots will then perform by culturing, treating, and imaging human organoid tissues.

https://boards.greenhouse.io/vivodyne/jobs/4361898007
> Cowardice, or its opposite courage, are utterly unrelated to anything involving marital fidelity.

Absolutely untrue.

A brave person who is unhappy (or has unmet needs) in a marriage would talk to their spouse about it. If they couldn't fix the marriage, they'd ask for a divorce.

It's much easier and less painful to violate the agreement of monogamy that you made. The fear of the pain of honesty and/or divorce is what makes people cheat rather than work on a marriage.
It is terrible, actually.

Why would one do this? It isn't even slightly related to the product. Damn...
Rather use windows than be subjected to Ubuntu.
Kids aren't selling their degrees for $25m.

Smart kids are earning degrees that are very prestigious because of how smart they are.

Then dumb kids pay $25m in donations and bribes via their parents to get degrees right alongside the smart kids.

So now when you see a Stanford degree, is it from a smart kid or a dumb kid? That's why it's devaluing.
I understand I'm not under obligation to, but I do feel obliged to make software that people actually want to support, rather than just playing another bill for another means-to-an-end. And Ill definitely be transparent about my desire to make money, I just want to be non-scummy about it, and approach it in a way that is both effective and honest.
I think the article is a bit thin. They're referencing their own article from last year, which cites anonymous sources, and this article also cites anonymous sources (the same anonymous sources, different, a mix?).

It may or may not be accurate. The only thing I recall Tesla saying about their next car is using an unboxed assembly method, and I believe they said they may scale that back during the last investor call.

https://www.reuters.com/technology/gigacasting-20-tesla-rein...
Tesla sold more electric cars than they did combined. In terms of total vehicles, they didn't sell more than any one of them.
Nope didn't say to "integrate it for me".

Simply said I expect there to be an npm to use in case I don't want to use the hosted UI. Very common, almost everyone does it. I would even expect that of free-to-use SaaS.

Example: https://www.npmjs.com/package/easyinvoice

Not to mention it's pretty low effort to build to a dist and npm publish - it would be very worth it to get more people using the product. That's why it's so common.
Is there an environment variable defined for specifying if you want light or dark colours? If so, then it would help with local programs, and also with remote programs (such as this one) if you add a SendEnv command into the SSH configuration file to specify that SSH should use this environment variable.
There is a very strong professional code of conduct within security circles that you should monetize the security of your own product as little as possible, because your own security is not a revenue stream, it's your most basic obligation to your customer.

Like everything else in life, there's always trade-offs here, say, promoting your security practices to attract customers, but the general rule is that moment you start having different tiers of protection, you start venturing into some seriously morally grey areas.

Microsoft didn't just start venturing into morally grey areas, they decided to set up their entire business model there, to the point that they didn't even know that they were hacked because they couldn't generate revenue from that knowledge.

THAT'S why Microsoft deserves every piece of bad press it's getting right now. Not that they had a security incident (everyone will have security incidents), it's that they deliberately ignored accepted industry standards to do so, and to this day they're stonewalling efforts to assess the full impact.
Proposal Raised to Deprecate "-Ofast" for the LLVM/Clang Compiler
Jumped on the China data sharing deal with Baidu for FSD.

https://www.reuters.com/technology/baidu-tesla-agree-mapping...
I think of it as some form of social subsidy. Universities with large endowments get a lot of money from donations, and they can afford to offer generous financial aid to non-rich students. The flip side is that some rich kids have a lower barrier of entry, probably the richer the lower. Life is not perfect, or fair, but this subsidy is a pretty decent outcome in an imperfect world.
I switched from T-Mobile to Mint. This makes me sad. I've unwillingly returned to the company I previously left due to poor service, incorrect charges, and extensive time spent with customer support.
Microsoft didn't understand GUIs yet. Amiga BASIC was also written by Microsoft and the GUI support is also limited. Apple didn't create a BASIC for the Mac because was into Pascal and had used it for the Lisa OS and apps. Much of the Lisa code was reused in the Mac OS.
Probably Elon’s idea.”If it works for Hot wheels why it wouldn’t for us?”
> Which incidents happened at AWS, GCP, Oracle?

I'm not following you here. Surely you could just look them up yourself?

Just look at this enormous list of CVEs in Oracle products (which also includes cloud products), as one example: https://www.oracle.com/security-alerts/public-vuln-to-adviso...
> Excuse me, but I do want to live in a world where death is inevitable and will choose that option at any time.

This feels a little like saying "I like death, therefore everyone else must die too." Besides, you'd always be able to choose that option at any time. I'm not talking about some cursed-monkey-paw version of immortality.

> the current system with auto-refreshing humans has got us very far

The system of hunter-gathering got us pretty far too, and switching over to agriculture was indeed not 100% positive at first. The system of feudal/clan-based government and labor-and-wood-based energy economy got us very far, too, and switching to the industrial revolution also had its early downsides. Just because systems are working doesn't mean they can't be improved.

> importantly [Senescence] solves scientific, engineering and social problems.

Again I ask: if we already lived forever, and we were running into those scientific, engineering, and social problems that death supposedly "solves", then would your solution be to start killing everyone approaching 100 years old? Another solution to all our problems is that the sun goes supernova and the Earth is completely annihilated. That's along the same line of "solution" as yours.

Besides, I haven't seen any convincing argument that such problems would necessarily occur, or at least be insurmountable.

> A mistaken scientist dies and so does his theory. A tyrant dies and so does his regime. A liar dies and no one maintains his lies.

This is unfortunately quite accurate for the time being. But death is a rather blunt solution to these problems, and I believe there are better ones. I also believe people would be more interested in ousting tyrants if they didn't think they just need to wait for them to die.
Bard AI vs. ChatGPT Scrabble Game
Tesla Laid Off Its 500-Person Supercharger Team Overnight
I agreecand I would add that waterfall too has its place as you OP luckily experienced. It forces you to design and plan the whole thing before execution and it also works better on projects that have a rigid unmoveable deadline.
Sorry, I think that part of our write-up is misleading (I was involved in analyzing the issue described here). To our best understanding, what happens is the following:

- A client sends range requests and cancels them quickly.

- The full range request data will be billed (NOT the whole file), so I think this should read that the entire requested range gets billed, even if it never gets transferred (the explanation we received for this is that it's due to some internal buffering S3 is doing, and they do count this as egress).

In any case, if you send and cancel such requests quickly (which is easy enough, this was not even an adversarial situation, just a bug in some client API code) the egress cost is many times higher than your theoretical bandwidth (and about 80x higher than in the AWS documentation, hence the blogpost).
Daily drove silverblue for a year as a developer. It’s not worth it. A lot of things don’t work and it’s not as hackable. Perhaps for normal use it’s fine. Now using Fedora Workstation. I like it but Fedora 40 isn’t very stable (gnome stuff crashing).
Wave play
Recommendations in article are sound, zero trust infrastructure is a nice to have.

Probably need something similar to a wake up call some industrial companies got with stux in the 2010s or hell their insurance company charging the sh*t out them unless they fix some things.
Swindled you say.

When I look at my monthly video entertainment spend vs a cable bill from my childhood (let alone what it would be today), the quality and options available and the control over scheduling I have vs linear television, I’m not feeling very swindled.
I can thank him for having taught me his language, the intricacies of baseball, for having shown me corners in the state of New York unheard of outside the States. For having explained what love and passion are and aren't, for having instilled dreams and hopes. And most importantly, that life can be lived to its fullest at any age.

A life worth living. Rest in peace, he will continue living while he's read.