skysight-inc/HackerNews huggingface dataset:
> lunar lander does not have the delta-v for direct return to earth, from the lunar surface. (or the heat shielding)

Starship HLS is the lunar lander [1]. That said, it is not designed to survive Earth re-entry at lunar velocities.

> why the near-rectilinear halo orbit, which puts the lifeboat capability out reach

I guess I'm sceptical of any Gateway serving as a lifeboat in an emergency with a day-to-day sensitivity where aid can be provided on Earth but not on the Moon.

> Orion lacks the delta-v, not SLS

Correct. SLS is expensive, Orion underpowered.

[1] https://en.wikipedia.org/wiki/Starship_HLS
"Forgotten" poem by C.S. Lewis published
> Also, most SQL plans are trees (Until you get to WITH RECURSIVE).

WITH RECURSIVE can also generally be implemented tree-style, you just loop a bunch in one of the iterators.

There are some databases, like Umbra, which can have DAG query plans for the benefit of more efficient groupjoin (GROUP BY pushed down into a join). IIRC some of the unnesting patterns can also benefit from non-tree plans.
I'll just put this out there because I don't know if I could ever implement it, I've had this idea that's essentially "IP permitted from"

We would extend the whois database to contain an oauth url for a given IP block and then forums or other services that need to ensure a real human person is present (Like at registration or when combined with some other trust systems), would bounce the user over to the URL and it would require the user to login via U2F/passkeys/TOTP/etc.

The thinking is that isps are the ones who know their customers are real, and as long as they can challenge them in a human interactive way, that should provide a strong signal that it's a real human. It's also a good way to protect against cookie stealing and could provide resistance from 'man in the browser" attacks as the end user would become suspicious of all the isp challenge pages popping up if a machine was being used in spamming.

It's not foolproof, there could be insiders working at the ISP, and this would require cooperation of all isps everywhere, but it would be a step in the right direction
It’s exciting to see this released to the public.

Arc on Windows still feels like the early versions of Arc on macOS, but I’ve genuinely enjoyed my beta access anyway. I also love how transparent the browser company is.

I hope the company can find some way to stay alive, but I’m not sure what a path to profitability would look like for them. Subscription fees?
Since this is an early stage project I suggest to take it with a grain of… well… the material in question
I've come across obscure bugs with header guards in open source software that went unnoticed for years -- essentially, there were competing definitions of a global config struct in the code base. Some parts of the code would access Version A, while others would access the same data but thinking it was version B.

Most .c files had ended up including both versions, but the headers had the same guards so only the first included definition would be in effect.

The project maintainer had been fixing obscure memory bugs for years until someone noticed the real issue.

Wouldn't have happened with #pragma once I suppose. With pragma once you don't have to painfully choose an identifier for the header guard, and you can't get that wrong.
This way they caught him is glossed over,

But it was a mistake that the hacker made himself that led police to a treasure trove of information found on a server that Kivimäki owned.

Unprecedented digital forensics and cryptocurrency tracking also helped secure the conviction.

What mistake did he make?

Was incriminating evidence found on that server?

Is there any direct evidence Kivimäki did it?

The use of "unprecedented" is worrying, and extremely vague.
Is anyone else running into problems with Cloudflare? All I see when visiting the leaderboard is a Cloudflare error page saying "Please unblock challenges.cloudflare.com to proceed."

But as far as I can tell, challenges.cloudflare.com isn't blocked by browser plugins, my home network, or my ISP.
There is more code written in C++, but there are fewer "C++ packages" in the sense of just doing `go get` and you're ready to use it.
For P vs. NP to apply, you would have to be given a Turing machine (or equivalent program) that could verify a guess in polynomial time, without having to ask somebody.

But how do you know that Turing machine couldn't be somehow reverse-engineered to find the number without trying every possibility? You don't know, you're just assuming it. Proving that assumption is the entire point of the problem.
Although it's easy to dismiss as Yet Another Chromium Fork there is some technical novelty here, because their custom frontend is probably the first serious Swift project outside of Apples ecosystem. Maybe Swift will finally get a foothold on Windows?
I don't care about their paranoia. Child abusers could just use NNCP with sneakernet. Convoluted, but it doesn't touch internet at all. Still, the media it's encrypted.

Or they could encode a PNG under a H264 frame almost invisible to the eye (1/60 frames per second) but extractable with precise time related commands with ffmpeg. No encryption, no nothing. But it's there.

Also, GPG existed since the 90's, and there are symetric encrypting tools (even simple ones) everywhere, such as age. Again, they could just use sneakernet and some USB media.

Then they could just share it in the clear, over any protocol they wanted.
Once you can shift bits with ease (in a reversible way), it's game over. Split, dd, perl, cat. You get junk with ease and recover that junk with the same ease.

Xor as a pipe: https://unix.stackexchange.com/questions/398481/xor-a-file-a...

Then with split/cat you get a dumb xorg encryption in pieces but the data could be put under a sorted list in a txt file with sha512sums of each part so anyone concat(1)enates the pieces in the right order.
See? Is not even an issue on having strong encryption.
I like to use vimium with firefox: https://github.com/philc/vimium
Perhaps the nomenclature should be updated from GNU/Linux to GNU/systemd/Linux.
On discussion [1] (32 points, 4 hours ago, 17 comments), [0](6 points, 16 hours ago, 7 comments)

[0]: https://news.ycombinator.com/item?id=40205714

[1]: https://news.ycombinator.com/item?id=40210339
I would expect sudo to also touch pam a lot, but AIUI systemd also uses pam through polkit for its ~native permission system - https://serverfault.com/questions/841306/authentication-is-r...
Yeah I just recommend people skip the first half of season 1
It doesn't make sense when you use this reasoning on established languages like C++ and Go. Makes all the difference when you are less than a year old language.
What is Vite (and why is it so popular)?
In dutch, we use "lenen", very similair.
> I also wasn't a fan of the tinting.

From the linked mastodon thread:

> For example, by default it will tint your terminal background in a reddish tone while you are operating with elevated privileges. That is supposed to act as a friendly reminder that you haven't given up the privileges yet, and marks the output of all commands that ran with privileges appropriately. (If you don't like this, you can easily turn it off via the --background= switch).

(emphasis mine)
Signs that I've been reading too many retro-computing articles: I parsed the title as a browser for Windows 1.0!
New space company seeks to solve orbital mobility with high delta-v spacecraft
My biggest problem with Ansible is the YAML, doing anything with loops is horrendous & trying to mangle nested variable types requires a StackOverflow post every time.

A few years ago, I found a library that lets you utilize Ansible's tasks in raw Python, without the huge hassle of using the Ansible Python API. I cannot find it again however. But PyInfra looks great.
In the Land of Dune
Are you saying the m.2 slots have been going bust or just the m.2 module?
Interesting... there must be some error tolerance though, right? So there can be _some_ excess energy - where do they dump that to and what is the tolerance?
> We know CJK languages need UTF-16 for compression.

My understanding is that it is for the opposite of compression: it saves memory when uncompressed versus the UTF-8 surrogates needing more bytes. My understanding is that UTF-8 surrogates compress pretty well as they have common patterns that form dictionary "words" just as easily anything else. UTF-8 seems to be winning in the long run for even CJK and astral plane languages on disk and the operating systems and applications that were preferring UTF-16 in memory are mostly only doing so out of backwards compatibility and are themselves often using more UTF-8 buffers internally as those reflect the files at rest.

(.NET has a backwards compatibility based on using UTF-16 codepoint strings by default but has more and more UTF-8 only pathways and has some interesting compile time options now to use UTF-8 only today. Python 3 made the choice that UTF-8 was the only string format to support, even with input from CJK communities. UTF-8 really does seem to be slowly winning everything.)

> JSON and CSV are woefully neglectful,

As the article also points out, JSON probably got it right: UTF-8 only and BOM is an error (because UTF-8) (but parsers are allowed to gently ignore that error if they wish). https://www.rfc-editor.org/rfc/rfc8259#section-8.1

That seems to be the way forward for new text-based formats that only care about backward compatibility with low byte ASCII: UTF-8 only, no BOM. UTF-8 (unlike UTF-16 and missing reservations for some of its needed surrogates) is infinitely expandable if we ever do find a reason to extend past the "astral plane".

(Anyone still working in CSV by choice is maybe guilty of criminal liability though. I still think the best thing Excel could do to help murder CSV is give us a file extension to force Excel to open a JSON file, like .XLJSON. Every time I've resorted to CSV has been because "the user needs to double click the file and open in Excel". Excel has great JSON support, it just won't let you double click a file for it, which is the only problem, because no business executive wants the training on "Data > From JSON" no matter how prominent in the ribbon that tool is.)

> When the whole world looks to the future, Microsoft will follow.

That ship is turning slowly. Windows backward compatibility guarantees likely mean that Windows will always have some UTF-16, but the terminals in Windows now correctly default to UTF-8 (since Windows 10) and even .NET with its compatibility decrees is more "UTF-8 native" than ever (especially when compiling for running on Linux, which is several layers of surprise for anyone that was around in the era where Microsoft picked UCS-2 as its one true format in the first place).
> I want a language for writing applications that is more expressive than Go but less complex than Rust.

> Go is simple and straightforward, but I often wish it offered more type safety. Rust is very nice to work with (at least for single threaded code) but it's too broad and complex, sometimes painfully so.

It seems clear that the author really likes aspects of both Go and Rust and desires something between the two. Check out the complexity vs type-safety illustration at the top of the page, with Borgo placed between the Gopher and the Crustacean just before the complexity curve gets steep.

They're basically building their personal ideal version of Go with inspiration from Rust.
So, I haven't studied their solution much, but ISTM what they did was fork SQLite at (around) the time of the commit that removed SQLITE_HAS_CODEC, and forward port the 4 years of changes since then.

That's a bit untenable for me, since I'd rather keep as close as possible to SQLite compiled with Clang, and use the extension points already provided by SQLite (the VFS API).

Most SQLite encryption solutions (SQLite Encryption Extension, SQLCipher, SQLite3 Multiple Ciphers, sqleet) encrypt page content, and some need to reserve a few bytes of every page to do so (for nounces, MACs). This was "easy" to do with SQLITE_HAS_CODEC, but requires some "reverse engineering" to do from the VFS layer. Some of this "reverse engineering" is likely stable, because the "checksum VFS" [1] depends on it. OTOH, extension points that are not part of the "public API" have been summarily dropped in the past [2].

My scheme does not care about the SQLite file format(s) at all, because instead of encrypting just page content, it encrypts entire files. It uses 4K blocks, so setting page size to (at least) 4K is advised, but not required. The only assumption it makes is that SQLite is not sensitive to file sizes rounding up to the next block (4K) size. An assumption that holds for databases, journals and WALs.

The scheme does not try to authenticate blocks, so it doesn't try to protect against forgery. Other solutions may include MACs, but to offer random access they don't protect against reverting a page to an older version of itself, so IMO, this is of limited value.

Other schemes add a nounce to each page, which allows on disk content to change, while the decrypted content stays the same. I don't include a nounce, so if an adversary gets hold of multiple encrypted backups of the same database he knows not only which blocks couldn't possibly have changed, but also which ones definitely did.

[1] https://www.sqlite.org/cksumvfs.html

[2] https://sqlite.org/forum/forumpost/db235b3070
First, let's define "reason": a statement offered in explanation or justification [0]

> sometimes you might ask to call them instead of typing your question.

Does not explain or justify. Is not a reason. The possibility that you might ask to call has no bearing on whether or not you should start with "Hello," because if you are going to ask to call, you would be better served by just asking to call in the initial message, and if you are not going to ask to call, you would be better served by just asking your question in the initial message.

> It also might be the case there are multiple people who can answer the question, so you want [to] send out "hi" to a few of them to see who will respond right now.

Does not explain or justify. Is not a reason. Whether you are going to send the message to multiple people or only one has no bearing on whether or not you should start with "Hello," because if you are going to send the message to multiple people, you would be better served by sending your actual question. Even if you get more than one answer, you can just thank the people for their responses, if you don't manage to delete the extra messages from other people. If you are only going to send the question to one person, you would be better served by asking your actual question, so they can move the conversation forward when they reply.

> I would not send out multiple "Do you have time to hop on a call for 5 mins?" b/c then they might call me before I delete the message.

Does not explain or justify. Is not a reason. Whether more than one person might call you has no bearing on whether you should start with "Hello," because if more than one person does try to call you before you have a chance to delete the message, you are still better served by having them know why you wanted to talk, since they can better appreciate why you would have sent multiple messages and taken the soonest call, and if no more than one person tries to call you, you are still better served by having that person know why you want to talk to them before they call.

> I use IM as more informal, (AND/)OR conversations with likely back-and-forth, that may require the other person to be present to be of use.

Does not explain or justify. Is not a reason. Whether you need someone to be present to have a back-and-forth conversation has no bearing on whether you should start with "Hello," because if you do need someone to be present, you would be better served by having them already know what you might need them to be present to discuss, and if you do not need someone to be present, you would be better served by having them know as soon as possible what information you need from them.

None of your "reasons" explain or justify. None of them actually have any bearing on whether you should or should not start a conversation with "Hello." The answer is the same regardless of your "reasons." They're not even germane to the discussion, much less are they "reasons."

[0] https://www.merriam-webster.com/dictionary/reason
The previous sentence seems to be saying that the mistake was he dumped all of the therapy notes to the dark web anyway - likely linking him to some user profile or IP/crypto address in there that he was already known to assume. No need to jump to nefarious conclusions here. This guy seems arrogant and was already well known to law enforcement it appears.

edit: saw the sibling comment explaining what happened. even dumber than I had imagined.
When it comes to software do they have any sort of edge/moat? I feel like Waymo and the rest could eat their lunch.
Tech Error: Diversity Not Found
So, WFH caused a YOY drop from 2022 to 2023, while there was an increase from 2021 to 2022? August 2022 was similar to September 2022 but there was a drop between August 2023 and September 2023 when the change was implemented. WFH?
I made a in-browser and linuxy habit tracker for developers
I live in a terminal, I do my work there, and I absolutely love everything about terminals!

But I've never found a simple habit tracker that captures the essence of tmux, matrix, and how 'top' displays CPU usage and other stats – you know, that Linux-vibe!

So, I created habitcracker.cc. It lets you add as many trackers as you want and adjust how they fit on your screen using grid columns (in "Settings").

Everything is stored locally in your browser; no APIs involved.

Please share your advice and suggestions on what else I can add to make it more user-friendly for everyone!

Give an upvote on ProductHunt if it's helpful for you
https://www.producthunt.com/posts/habitcracker

Cheers!
Is removing setuid actually a win? I know it presents a security risk, but it feels like we're not actually removing that attack surface, just moving it around.
Does it not being satisfactory mean it's worse than FPTP voting in the case where you're electing a single person?
> China’s 10th Five-Year Plan

Central planning doesn’t work.
ASML Patterns First Wafer Using High-NA EUV Tool, Ships Second High-NA Scanner
Show HN: A Solution for Monetization of Custom ChatGPTs
I have built a solution for Monetization of Custom ChatGPTs

I have been sitting on this idea since the GPT Store launch in November.

Over this time I was waiting for OpenAI to launch their Monetization program for ChatGPT Builders. Since they announced a Pilot Monetization Program at the end of March it became clear to me that they took a route of revenue sharing of the Plus Subs, at least for now.

Unfortunately, a subset of ChatGPT Builders, particularly those operating very niche “high-value - small user base” chats, are excluded from monetization. These chats offer substantial value, justifying an additional charge for access and the extra friction of logging in on each conversation.

The solution involves integrating a prompt-based paywall, which requires chat users to purchase a subscription via Stripe and validates the subscription by verifying the user’s email at the start of every conversation. While not the ultimate solution for monetizing custom ChatGPTs, it represents one of several potential approaches. Ideally, OpenAI will implement a more streamlined and reliable method for creating chat paywalls in the future.

If you’ve created a valuable custom ChatGPT that users love and are willing to pay extra for, beyond ChatGPT Plus, and are considering monetization, I encourage you to visit https://monetizechatgpts.com and give it a try.

The integration process involves creating subscription plans, setting up a Stripe account, and embedding a paywall prompt with an API key—a procedure that can be completed in minutes. Initially, the paywall may be somewhat porous and needs training, but after 10-15 training interactions, it keeps 80-100% of users from using chat unless they validate their subs.

This is an experimental solution. I welcome and appreciate any feedback or thoughts you might have.

If monetizing chats is not your goal and you’re just interested in experimenting with GPTs, or if you want to try breaking the paywall, please go ahead and share your experiences.
I'm glad that computer worked for you, but I bought a computer once because multiple people online reported that the model (Intel NUC8BEH) was almost completely silent, but ended up hating it because of its cooling fan's constant whining noise even though the noise was not loud, e.g., not loud enough to interfere with my understanding someone talking.
Well, if you disagree, I suggest to take a read:

https://www.wired.com/story/richard-stallman-and-the-fall-of...
Real World Crypto 2024 Videos
> Not an issue for sqlite, potentially disastrous for mysql.

MySQL _completely_ switched execution paradigm through the course of a couple of 8.0.x sub-releases, generally without anyone noticing.
I'm moderate to right, and I'll never buy a Tesla due to his antics.
It's funny that EulerOS is a GNU/Linux distro that is unix certified, despite GNU standing for "Gnu's not UNIX".
Why do the Japanese love CDs?
It used to be better before the folks from /r/cscareerquestions overwhelmed it
My usage of Copilot is dramatically higher in strictly typed languages because of things like this. It's almost counter-productive if I have to very carefully analyze every variable name to make sure it's not subtly wrong.

Having a compiler do that validation of AI output helps dramatically so I only have to validate logic and not every freaking character in the function.
Isn't a lot of long-haul transport still done via truck? Like you noted, last-mile won't go away, but maybe there is still room for improvement with rail.

I don't care how much I'm taxed if it means the US will use it for decent transportation that isn't car-based.
Should this be considered some kind of alternative to tools like Ansible?

Also CDKTF should be in the space for imperative infrastructure as code definitions.

- https://developer.hashicorp.com/terraform/cdktf
I remember the days of TechCrunch and Flock browser :).
PowerTOP estimates your power consumption, it does not actually measure it. Also, this neglects AC/DC power conversion loss. For a more accurate apples-to-apples comparison, disconnect the battery and use an actual power meter (e.g. Kill-a-watt) at the AC adapter.
Haha, yeah. I could go on for hours. I've had to learn that most people really don't want a lecture series on the finer points of astrophotography. Seabass's comment was pretty much perfect; a bit of detail, but not so much to get lost in the detail.

I tried to write a quick comment on my process a couple of times before they posted, and each time I had way too many words on a small detail.
> Great for ad-hoc command execution, service deployment, configuration management and more

I found that pretty clear to be honest.
No one is stopping you from running a 2014 version of your favorite distro. Seems like a good way to address your concerns.
Of course.

In the article linked above:
> ContinueWith allocates more than using async await

Does LINQ not carry a similar overhead?
From watching the linked video, and going by the given informal definition for NP-Problems "hard to compute, easy to verify" I think of it this way:
You can not compute the secret number efficiently, only the keeper of the secret knows it. So the number is indeed hard to compute. But can you easily verify a solution? Sure you can ask the keeper and he can tell you the answer, but then you didn't verify it yourself. If you count on the secret keepers cooperation he could also just tell you the number, making it easy to compute.