skysight-inc/HackerNews huggingface dataset:
HAProxy + DDOS protection?
https://www.haproxy.com/blog/application-layer-ddos-attack-p...

Or any proof of work proxy that delays the ingress traffic. If you only have one server there is very little you can do except maybe redirect to a static page or kill the DNS entries.
One huge benefit of using a non-randomized token is that you can verify that you created it.
I think if there is a way to add tags to documents it would aid finding whatever you want. You might not need AI for that.
> feel that they are entitled to live in the same neighbourhood they purchased in.

It's not a feeling, it's how purchasing things works.
How is restricting supply not a problem? The fewer houses there are to buy, the higher prices will get, because there are more people competing for less.
“But shelling out $2,500 (£1,960) a month in rent doesn't leave much left over”

I’ve noticed roommates are not a thing for many people anymore, particularly among younger folk. Is this a post-Covid thing?
You're welcome to start an employee owned co-op and build homes or whatever. It's completely legal and no one will stop you. There's nothing in our economic system that prevents them from working, but in practice they usually fail due to poor internal decision making. So I don't understand what you're complaining about or what point you're trying to make.
I read the following:

> The focus of this study was not to analyse the prevalence of the occurrence of the median artery in relation to ethnicity, geographic origin or variations by sex, but to identify the global trends in its occurrence.

and thought "well that explains the astronomical precision of the p-value, they didn't take ethnicity into account!". You would expect to see variation prevalence vary by ethnicity, no big news here.

But no! Thinking about it more, that's exactly what is says on the tin: global ethnic populations changed in the last ~140 years, and with it, the prevalence of generic variations. Makes perfect sense ¯\_(ツ)_/¯

edit: I mean... assuming the causal link ofc. I'm assuming this makes more sense than some kind of evolutionary pressure that is selecting for forearm median arteries.
It's not that obscure, it's the technical term for the management software in the recruitment and hiring space and the term predates the modern AI craze by over a decade (or more?):

https://en.m.wikipedia.org/wiki/Applicant_tracking_system

https://www.oracle.com/human-capital-management/recruiting/w...

https://www.greenhouse.com/resources/glossary/what-is-an-app...
> Or conversely, folks who are making this argument underestimate the flexibility people want out of a car. ... The car culture has very little to do with averages.

On the other hand, capacity planning e.g. for charging or gas stations, has everything to do with averages and the aggregate effects of people each exercising that flexibility occasionally.

Needed capacity for EV charging will be lower, and more centred around longer trips, since a large percent of charging is at home, from wall sockets or L2 chargers.
I’m in the UK. There are a million EVs already out there yet I’m the only one on my street of 100 houses with one. Each of those houses has a drive.

They are not for everyone but there is plenty of room for growth. It costs me 3p/mile to run it too saving me about £100/month.

Self charging hybrids are a waste of time. My Hyundai i20 1.1 diesel got 60mpg while my colleagues hybrid got 50. Plug-in hybrids are slightly better, but you’ve got additional complexity and all the maintenance of an ICE. Plus you are cycling the small battery more. 1,000 cycles on a 250 mile battery is 250,000 miles - on a 30 mile battery it’s 30,000.
I bought in 2021, a massive place but a complete refurbishment project.
I am not done. I have no more money and no more willpower to invest more into this. I totally regret the purchase.
Lots of action on this article. I just kind of have this feeling of “how have we survived this long?” about this. It doesn’t seem like that big of a deal.
> Why do planets look like a sphere (approximately)? Because that's the most probable shape if things happen randomly.

That has actually nothing to do with randomness, and everything to do with gravity. https://spaceplace.nasa.gov/planets-round/en/
You are dismissing criticism lightly by accusing others of being conspiracy theorists, mocking you, and so on. These are classic ways of creating cognitive dissonance and shutting off alternate ideas. Which is the exact OPPOSITE of what Feynman tells you to do in https://calteches.library.caltech.edu/51/2/CargoCult.htm.

The truth is this. Dark matter is observationally the best theory that we've got. However it is deeply unsatisfying. It requires fundamentally new physics about fundamentally new stuff with properties that we have absolutely no clue about. It is literally a theory of, "Insert magic cosmic glue here."

Virtually any idea can be inserted. String theory is popular despite having made a single verifiable prediction in decades of trying. So let's say that dark matter is made of strings!

Maybe if the Everett interpretation were more popular we'd theorize that a proper unified theory will have a small gravitational interaction between quantum superpositions. So what looks like dark matter is really the gravitational interaction with the superpositions of the stars in the galaxy that have been evolving since the early universe. Thanks to the fact that multibody gravity systems are chaotic, every tiny variation grows over time until those superpositions just act like a smooth smear, which we can't directly perceive because of quantum decoherence. Is this a reasonable theory? Don't ask me, I just made it up. But I know that it doesn't require any new kind of matter - it just requires a bit of speculation about interpretations of QM and the nature of quantum gravity. And it would look just like dark matter does.

The truth is that we've got a theory, and we know how to fit the data to it. But that theory doesn't integrate well with all of our other theories. Therefore, no matter how well we've made the facts fit, intellectual integrity requires that we remain open to the idea of being wrong. Not so open that we stop pursuing what *WE* think is right. But open enough to recognize that other people's discomfort with the theory is actually somewhat reasonable. No matter how strongly we might think that it is right.
Glass immediately comes to mind as having less creep. If you go back to the Faraday, Hertz, Tesla et al days when they were arcing kilovolts across their labs you’ll often see them using glass insulators. Some ceramics and Teflon too.
I'd want to see a breakdown of that by demographic. I don't think many boomers are itching to switch to FEV as of now.
The beam is not going to be tightly focused, if it needs to cover a big chunk of a stadium at once
Wrote a brief recap of "permission" and "login" for authentication from my work in JavaScript malwares.

It was a rush outline article with citations.

Large binning, salting of hash, and revocatable are my criteria.

Some toolkits that went out the window firstly are:

* auth0,

* Fusion auth, and

* Gluu.

So, some of the basic criteria are:

* User and password login instead of plain HTTP session cookies.

* HTTP-only over TLS v1.2+ (secured HTTP, HTTPS)

* ECDSA 1K or better

* SameSite [1]

* __Host prefix [1]

* preload HTTP Strict-Transport-Security header line [2]

* Bearer token supplied by API clients

* Don’t listen on port 80… like ever. Or revoke token if over non-port 443.

* DO NOT use JWT [3]

* DO NOT use CORS [4]

Hope the citations help more.

JWT, not recommended, IMHO.

https://egbert.net/blog/articles/authentication-for-api.html
Man-in-the-middle impersonation is not the biggest threat because TLS 1.3 does a decent job of protecting the token in transit. The biggest issue is the endpoints:

1. The client that holds the token can't use an HSM or SSM to protect the token because they need to transmit it. Thus a compromise of the client via an XSS or Malware, results in the token leaking.

2. The server that receives the token, might be compromised and they can replay the token to other servers or leak it accidentally e.g., with a log file or to an analytics service.

Both of these problems go away if you uses OpenPubkey or Verifiable Credentials with JWTs. The JWT is now a public value, and the client holds a signing key.

1. The client can protect the signing key with an HSM or SSM (modern web browsers grant javascript access to a SSM).

2. The server only receives the JWT (now a public value) and a signature specific to that server. They don't have any secrets to protect.

> But the entire thread is correct in that you can't build them with bearer tokens.

You can and people do, but it is far better to use proof of possession JWTs than bearer JWTs. Even better to use JWS instead of JWTs so you can make use of multiple JWS signers (a JWT is a type of JWS, but a JWS with more than one signer can not be a JWT).
It's more like "sudo pip install pandas" and then Pandas comes with Parquet support.
I feel this is something you do early on, as it generates drive and gives some sense of belonging (and faux us-vs-them conflicts that can pump a lot of motivation). Eventually, you learn and experience enough to transcend identifying yourself with a single set of tools.
The vast majority is likely money laundering.
Show HN: Open-Source AI-Powered Food Logging App
I'm open-sourcing this project! It's a solid MVP for a food-logging app.

You can see it in action for free at https://foodlogger.ai - I don't plan to host the app much longer as I no longer wish to run it as a paid-for product.

This is a good project to work on for someone that wants to give Remix a try without having to build a project from scratch.
Wild speculation: It's the result of another universe poking into our own, forcing a bunch of galaxies near the center point to spread out in a circular fashion.
Stay in drugs, don't do school.
The majority of mortgages in the US are fixed rate with a 30 year term.
Mortgages originating now will have a rate in the 7% ballpark. In 2021 you could get mortgages with a 2.5% fixed rate.

However, it's common for people to refinance down to a lower rate when they come available, so lots of American homeowners have rates in the 2-3% range.
Fun! 1-2m accuracy is surprisingly good (at least for me who has zero experience with such things).

You could probably use something like this in a war zone to locate from where somebody is trying to shoot you. A quick google later yields e.g. https://www.rheinmetall.com/en/products/c4i/reconnaissance-a... or https://transvaro.com/wp-content/uploads/akustik-eng.pdf (which lists accuracy of... 1-2m).
It's obvious why a DDOS provider would want to use Cloudflare, but their point is that Cloudflare turns a blind eye to DDOS providers using their services. Actively helping to keep DDOS providers online while also selling DDOS mitigation isn't a good look to say the least.
wait... what about ip6 and lets encrypt? I thought I had it working with no ip6 anything or AAAA records??
That's not an issue if there's supply. What you're describing (unsubstantiated) is a lack of supply being exploited.
Also they build with what is almost slave labor.
> I do think you downvoted for me being trans.

Feel free to assume whatever you will about my body, my identity, and my motivations. But you're wrong.
> No-one can tell you you can’t change the wallpaper in your own home, or remodel the bathroom, or get a dog.

Yes, the housing association absolutely can tell you not to remodel your bathroom. Unless you literally own a house rather than an appartment, you really don't have a lot more rights than a renter would have.

I am speaking as a Finnish homeowner.
People just want a house to live in. That's it. They don't want a "broad based index fund" or investments or anything else. They just want a house to live in. With all the stability that comes with it. And then spend their free time doing more useful things. Also it doesn't scale; we can't all be investing all the time.

This kind of reductionism where everything boils down to financials is exactly how we ended up in this mess to start with. Maybe we shouldn't have structured everything around that because ... people just want a house to live in.
Just populate the cache when you need it? You will need a database round trip for the first request per user per application restart, if they haven't reset since. I assumed this was obvious.
Probably the more useful version of the question is why Google thinks /properly-working/ "AI" Overviews" would be a good thing. I very much doubt Google expected this V1 to work so poorly.
Comical hearing the British Museum complaining about theft.
> It follows that for the average American, a normal outlet is not fine.

Yes, that's why it's recommended to install a home "Level 2" charger (1). that's that's several times faster than "a normal outlet". It's both fine and practical to do that.

Not everything in a typical house runs on just "normal outlet" power. e.g. electric ovens also do not.

1)

https://www.caranddriver.com/shopping-advice/a39917614/best-...

https://www.nytimes.com/wirecutter/reviews/best-electric-veh...
Indeed, this is the part of the behavior I was referring to :)
It's a good point about the speed though - not the perfect analogy.
I mean, I’m glad that’s not the case
OTOH I see no fundamental reason that one couldn’t build an EVSE that connected to two different outlets and drew from both of them. Two branch circuits supplying the same device is not especially rare.
Previous discussions:

https://news.ycombinator.com/item?id=34692373 — February 2023, 16 comments

https://news.ycombinator.com/item?id=22552460 — March 2020, 43 comments
First of all, agreed that housing prices are insane, even two-income households struggle to buy in my city.

But taking a more long-term view, in the US the owner-occupied housing rate about 65%, which has not changed a ton in the last 50-60 years (high was 69% in 2005 and low was 63% in 1965). Granted the market has changed a lot, we have much bigger houses, and more two-income families to pay for those more expensive houses.

https://www.advisorperspectives.com/dshort/updates/2024/04/3....
They're always the same reasons:

- Properties in world-class cities are in demand globally

- NIMBYism means it's hard to build new housing or increase density

- Resource costs and wages are high in world-class cities

The first one is a demand-side driver, the last two are supply-side drivers. There aren't any palatable solutions to reduce the impact of these drivers, at least not ones that do not negatively impact other sectors of the economy.
> when you cannot trust the OS

The list above is not about distrusting the vendor or OS, it's about leveraging the vendor's officially published statements of behavior (e.g. HTTPS network traffic identified by PKI certificates tied to vendor's legal identity), used in contracts with enterprise customers that have competent lawyers, for the benefit of smaller customers.

MDM policy can be configured to narrow the vendor's documented claims of software+hardware behavior. Narrowed claims are cheaper to verify empirically. If evidence can be found that MDM policy is not being enforced, then the pool of affected parties grows from powerless individuals to a class action (Apple has paid millions in the past) and/or large enterprises who use MDM to protect confidential enterprise data.

> How do you ensure that the OS does not by itself connect to a random open WLAN

In the case of Wi-Fi, MDM and Apple Configurator can configure device policy to connect only to approved SSIDs + a null list of approved SSIDs. To validate enforcement of this WiFi policy, the device can be placed in a small faraday box (commercial < $1000, DIY < $100) that blocks external RF, with an SDR that records all internal RF traffic for analysis. For a device with a null list of approved SSIDs, there should be zero Wi-Fi traffic from the baseband radio.

Another option for MDM policy enforcement validation is to use a virtual iOS/macOS instance, where a hypervisor can perform live behavioral analysis of OS execution paths. Any unexpected behavior can be further investigated by reverse engineering of non-encrypted OS firmware binaries. Corellium offers a hosted service for virtualized iOS analysis, https://www.corellium.com. They won their legal conflict with Apple.

Finally, a third option is to modify the hardware device to disable unwanted radios, using only a wired network connection via USB. Past news articles have covered expensive modifications of commercial Apple hardware, for use by governments and companies in facilities where wireless networks were not allowed.
> Not everything is a purely financial decision. A home is primarily a place to live, not an investment opportunity.

I am always shocked at how many people simply don't understand this.

For example: no matter how many index funds I buy, I will still have to find a landlord who allows pets in their home if the current landlord decides to kick me out for a better tenant (whatever that means for them).

I don't have to deal with that in my own home. My home, my rules. And this is worth more to me than knowing I optimized my investment portfolio.

Human dignity has value. Shelter security has value. Knowing that you won't be moving in the next few months has value. But the value of these things cannot be measured in dollars.
Honestly I'd love for some good data, rather than cherry-pick journalism. It's crazy how many news articles will simply parrot a narrative without actually investigating it.

The discussion on housing should start with one fact: the supply of housing has been growing faster than the size of the population, decade after decade, for a very long time.

This is why the number of people per home, has been dropping decade after decade. That is a measure of luxury. We can afford homes with fewer people. People can afford to be single and live alone. We can afford not to take in a roommate. Couples can afford to each have their own home. That's not an indication of a housing crisis or being priced out.

Then there is home size, it has been increasing also, decade after decade. We can afford to live in bigger homes. Again, a measure of luxury.

Anecdotes about 'my (grand)parents lived in XYZ home that's way bigger than mine' are just that, anecdotes. The data shows we live in bigger homes with fewer people, in fact we have double the housing that we had a few decades ago. In other words, the average person's lifestyle with respect to housing has greatly, greatly improved compared to previous generations.

What is often also not mentioned is that affordability is not a function of prices only, but of prices x the cost of money (i.e. interest rates). In the 1980s interest rates were as high as 18%, now it's 1/3rd of that at around 6%. That's the true cost of housing. Taking $1000 and paying off $1000 in debt has no impact on your equity, you're as rich as you were before the transaction. Paying interest however is money you'll never see again. That cost was 3x as high a few decades ago. Prices haven't tripled when adjusted for inflation and salaries, not even close. That's why affordability of housing isn't the disaster that many people think it is.

Here is an old source (2016), which you may think is outdated. But it shows a multi-decade trend that cuts across the same price increases we've seen in recent years:

https://www.aei.org/carpe-diem/new-us-homes-today-are-1000-s...

For another source that runs to 2020: https://humanprogress.org/u-s-housing-became-much-more-affor...

I'm not even going into how the function of housing has changed. With today's connectivity (netflix, spotify, internet, food delivery, teams/slack, amazon etc), it has become more than ever: an workplace/office, a cinema, a library, a music studio, a game hall, a restaurant, a shopping mall. Its value has increased.

No, I'm not saying finding housing is super easy for anyone and everyone. I recognise many find challenges. But what is simply not true, is that it is any more difficult than the past. In fact it has never been easier. What appears true however is that our lifestyle expectations keep increasing faster than our lifestyles are improving.
definitely not. volumes just aren't there and Elon Musk is openly in bed with dubious characters.
People always talk about how buying a home is the only way for the common person to obtain leverage. Please excuse my ignorance, but how does the common person use that leverage, exactly?
Parquet ~= Dremel, for those who are up on their Google stack.

Dremel was pretty revolutionary when it came out in 2006 - you could run ad-hoc analyses in seconds that previously would've taken a couple days of coding & execution time. Parquet is awesome for the same reasons.
That "control" is mostly a fantasy. I own an appartment and when I found mold damage I wasn't able to just fix it, I had to take the housing association to court and fought with them for 2 years. It's now fixed and I'm trying to sell the appartment and nobody wants to buy it. Then I read articles like this and it just makes me laugh at the absurdity of it.
Pretty sure we can use them for our next trip. They aren't like cheap, we had to buy them for like 30 bucks each or something
McKinsey claims charging stations can be.[1]

That was written before 10 minute charging looked possible. If charge times get down to 10 minutes, a gas station model works. Hour-long charging requires something for the humans to do.

[1] https://www.mckinsey.com/industries/automotive-and-assembly/...
They bought a starter home for say 100k which is now 200k. But the family home they now want tripled in the same time from 200k to 600k. So even though they now have 100k more, they need 400k more for their desired house, while only 200k before (Numbers obvioulsy chosen randomly)
Back in the early days of search engines, people used this technique to hide tons of SEO keywords on their website.
Didn’t take Google long to fix it
People can build AIs that play the videos, extract the content, and replay it later.
I was going to say this is very reminiscent of Form even down to the weird caims of "100 hours of storage duration." I mean what does that even mean?

Still there's this stuff

>Slick project renderings and the promise of a 100-hour storage solution allowed the company to raise nearly $1 billion... https://www.power-eng.com/energy-storage/form-energys-100-ho...

So I guess it's good for that.

There seems to be a lot of future projection

>Southern Company subsidiary Georgia Power, meanwhile, plans to deploy a 15 MW/1,500 MWh Form Energy system as early as 2026, pending regulatory approval

And zero actual stuff about I made a trial one and hooked it to my roof solar and it works fine - they started in 2017 so you think they might have done that by now.

I hope it all works though. It would be good for green energy.

Here's Form on HN in 2021 https://news.ycombinator.com/item?id=27944600
Someday… someday… (sub)urban dwellers will wake up to cars being the problem, not the type of car.

Yep, EVs are better than ICEs. Public transportation and proper infrastructure is far better (and cheaper overall).

Get the public transit in order, and you don't need so many charging stations.
Thanks for providing this, it is interesting vulnerability to read about.

In terms of JWT vs other ways of doing this, is there any evidence that JWTs are more vulnerable that other approaches? Clearly there are vulnerabilities is other approaches as well.

I buy the statement that bearer authentication JWTs are much worse than proof of possession JWTs, but are bearer authentication JWTs worse than other bearer authentication approaches? What data would you need to argue that position