skysight-inc/HackerNews huggingface dataset:
> But instead of 3 doors, imagine 1000 doors. You pick 1. Monty shows you what's behind 998 that aren't the prize and asks you if you want to switch. By switching, your 1-of-1000 odds become 1-of-2.

No they should become 999 out of 1000. If your door is 1 in 1000 then the other door must have all other possibilities.

Also, the Monty haul problem is counter intuitive because it depends on the exact rules under which he operates. Suppose the classic 1 in 3 odds of a win, but an evil Monty haul where he only gives the option if you would win, now swapping is a guaranteed loss. Mathematically the answer is obvious when all the rules are guaranteed, but people’s internal heuristics don’t automatically trust rules as stated.
so... apache?
I'm unconvinced of the author's actual understanding of common JWT usage.

Suppose you use Azure. You may have one or more app registrations with defined roles as well as apis exposed within the Azure config. It's convenient to acquire an access token that can be sent to various apis, each of which can accept the token without having to worry about session state or really anything to do with authentication other than validating the token's legitimacy. If I wanted to roll my own security, maybe JWT isn't how I would choose to do it, but I definitely don't want to do that.
IPv6 depends on IPv4 addressing if you have downstream devices that need to reach the entire internet. If you go to ARIN they have an explicit policy of allocating IPv4 blocks to facilitate IPv6 deployment.

CGNAT is a term that broadly used to refer to carrier-scale solutions to deal with issues with number exhaustion and dual-stack deployments. What most people think "CGNAT" is, is actually NAT44. https://nfware.com/blog/why-cgnat
Aren’t JWT bearer tokens certificates already? Only the issuing server has the private keys, and the public keys are used to validate that server signed them?
Unfortunately, humans are tribal creatures and having certain tribe markers still makes your life a helluva lot easier.

I went to a T20 school in the USA with name brand recognition. I often hang out with close friends who did not. Let me tell you: school discrimination is real. People (including those who gatekeep the first 5 years of your career) treat me differently than my friends once they find out where I'm from. All of a sudden I'm much more interesting. I get told I'm smarter.

Hell, job interviewers softball my questions. My first big-boy job interview's final round went something like this.

Hiring Manager: "So, [T20 School] huh? You had a good time there?"

Me: "Yup, I say it was a great experience."

HM: "That's awesome. I love the campus so beautiful. My kid plays in their afterschool soccer program. You like soccer?"

Me: "Oh yeah I like following Premier League"

HM: "Awesome. How 'bout them Aresnal's right? Anyways, look you seem like a smart kid. You'll probably get the job -- we'll call you next week with details."

And I got the job.

(My second job's phone screen literally started off with "Oh my husband went to [T20 School]. He was two years ahead of you ever run into him? No? That's fine it's a big school. Anyways!)

And I pale in comparison to the kids who went to the Ivies.

Unfortunate. But there's a reason why many dedicate tens of thousands of hours of their youth to beat the competition and break-in.
The idea is to have something like biodiversity so one virus doesn't wash you. Software systems tend to trade redundancy away for efficiency
This is well written and insightful. Worth reading through to the end, at least in my opinion.
I find the idea of DDoS providers confusing. If someone tried to operate a service that can be abused easily to cause similar disruption in the physical world, the operation would be taken down quickly and the people behind it would probably end up in prison. But somehow the internet is still a lawless zone where crime is tolerated and everyone is out for themselves.
This is in the Chinese language.
In case this is of interest, here's an attempt at gathering the references, including random blog posts (as well as articles, documentation, papers, software, and talks), on these topics:

- assembly & ISA (instruction set architecture):

- Arm: https://github.com/MattPD/cpplinks/blob/master/assembly.arm....

- RISC-V: https://github.com/MattPD/cpplinks/blob/master/assembly.risc...

- x86: https://github.com/MattPD/cpplinks/blob/master/assembly.x86....

- debugging: https://github.com/MattPD/cpplinks/blob/master/debugging.md

- debugging: tracing: https://github.com/MattPD/cpplinks/blob/master/debugging.tra...

- executable and object file formats (ELF, Mach-O, PE); debugging data formats (DWARF, PDB): https://github.com/MattPD/cpplinks/blob/master/executables.m...

- linking and loading: https://github.com/MattPD/cpplinks/blob/master/executables.l...

- compilers: https://github.com/MattPD/cpplinks/blob/master/compilers.md

- compilers correctness: https://github.com/MattPD/cpplinks/blob/master/compilers.cor...
> came there much later.

Came there from where? Genetic tests show that modern day Egyptians (both Christians and Muslims) are still largely related to ancient Egyptians.
Wouldn't an app normally at least need to look at some claims in the jwt (email for example)? Otherwise, how do you identify the user?
Thanks for clarifying. Where did your funding come from, and are those funders aware of the situation? I would tend to agree with others that you may just need to start over. Of course, you want to make sure the CEO is out of this entity, so that he/she doesn't later claim that NewCo appropriated technology/IP from OldCo, and that he/she is owed a chunk of NewCo.
Facebook account takeovers are turning friendship into fraud
> I think that Google & Apple's trust relationship has broken down post-Google Maps.

I think Apple's "trust" can be bought by a big enough customer, and Apple's continued interaction with Google's privacy-destroying search engine seems to demonstrate that nicely.
Yes you sound like you've drank the college Kool aid that men are oppressors to blame for everything and we don't have to worry about them, and woman are blameless victims no matter what.

I hope one day you'll look back on your youth and realise how foolish you were to let others lead you astray from fairness and reason and into evil like that.

Either that or you've got some complexes yourself from an abusive childhood or whatever, and you're projecting your internal declarations about a particular man onto men generally, wrongfully, since in the real world men absolutely get depressed, not as a side effect of someone else's depression, far fewer people care, and they're far more likely to suicide as a result.
> It’s just 100% better than dropping most of your money into a hole called rent

You take the difference between rent and ownership costs, not just the down payment, leverage that (2x max), and calculate the difference. The Times has a good tool for this [1]. (It doesn’t lever. Securities-based loans are almost always cheaper than mortgages.)

The sucker in the present math is the individual, aspirational, emotionally-motivated buyer. The winner, the sellers and first-lien lenders.

> assuming your rent doesn’t go up?

I’d actually argue this is what most people pay for with homeownership. You may become a bit poorer, but your future is more certain. If you’re savvy you can use that certainty to take more risk in other parts of your life. Buying a home, for most Americans, is buying insurance. The problem is few see it that way, which is pretty great for the real estate industry.

[1] https://www.nytimes.com/interactive/2024/upshot/buy-rent-cal...
Maybe you don't realize, but a well-done interview isn't a test, it's a conversation. You can absolutely ask clarifying questions to help shape your answer (this is something I always remind people of in interviews, personally, before and after giving the question).

You don't get extra credit points for mind-reading, if anything you get more esteem for requirements-gathering, which would lead you towards either a professional solution or a laptop solution: whichever fits the business needs.

It might be a totally unreasonable question if it's provided context-free as a form on a screen, but it is a perfectly reasonable conversation-starter in an interview.
Cedar: Rust Implementation of AWS Cedar Policy Language
I like Joplin
You don't need a cryptographer on payroll to install and configure an SSO library. Maybe your developers aren't skilled enough to do that, but it is not a challenge for a proper senior developer.
Does it take only one senator to pass any law?
Very cool. Hope to check it out someday.

The original Egyptian Museum (https://en.wikipedia.org/wiki/Egyptian_Museum) is my favorite of all time. They have so many artifacts that some items, thousands of years old, that might be the centerpiece of a museum in the far younger United States, were used as benches.

I was there in 2011. One day I was the only visitor.

I hung out in the Pharaoh room for a while. Just me and a couple of guys who used to rule the world (https://breckyunits.com/egypt.jpeg).
You could probably rotate the secret which would invalidate all existing sessions.
I'm inclined to discount opinions that include "x-risk" as a serious talking point.
If you work in network operations especially managing routers, switches, firewalls and servers, then you definitely have interacted with this amazing tool called Cacti.

Cacti is an open source, network monitoring and graphing tool written in PHP/MySQL. It uses the RRDTool (Round-robin database tool) engine to store data and generate graphics, and collects periodical data through Net-SNMP (an application suite to implement SNMP—Simple Network Management Protocol).
In this article, am going to take you through a step by step installation of Cacti on Linux CentOS Stream 9. You will need root privileges to your OS to be able to go through this installation.
How do you find out a single token got leaked within the token lifetime? If it's that easy to detect a leaked token, why aren't you stopping the leak in the first place?
>It’s not like they have a track record of doing anything other than absolutely devastating a previously successful company…

He's also transformed two industries and become a dominant player in each. Just do that and the investors will give you money.
Some computers make it harder than others.
Get technical proof reading, lots of technical proof reading.

I'm no expert in anything and I can see so many flawed or incomplete or inappropriate arguments. This might be okay for an interesting coffee table book but not for anything serious. I'll list a few examples of where my shallow understanding differs.

My biggest beef is "I've already tipped my hand and told you that (my hypothesis is that) mathematics is the study of possible models of objective reality." This is where I stopped reading altogether. That's not what most of mathematics is, such as those areas you listed. They are largely axiomatic systems of logic. That they correspond to such a degree with our experience of the 'real' world is the shocker.

Another one is the Banach-Tarski "paradox", the paradoxical part isn't that there's two from one. We can do this with only the real number line between 0 and 0.5 and fill the line from 0 to 1. That this defies our experience of the world isn't surprising as we don't deal interactively with uncountable infinities of any degree.

A final example is Church numerals--they encode numbers, just the numbers with no associated nouns. Something that might not make sense in our world but does in lambda calculus.
There are lawyers on HN, and to the extent they can help OP ask the right questions, it could help keep the legal costs down.
ULAs aren't the same as a NAT setup. You can assign all of your local devices stable ULAs _and_ also reputable addresses that randomly change. If you do that, there is no need for NAT.
As a Copt, thank you for eloquently saying what I was about to say. Genetic tests explicitly show that Egyptians as a whole are still very closely related to Ancient Egyptians based on mummy DNA samples. I don't understand how people can confidently parrot this whole "modern day Egyptians are Arab colonizers" trope when the peoples of the Arabiab peninsula STILL EXIST and are genetically different from Egyptians.
If the website in question is using OIDC, sure.
adopt a granny to go shopping for you
> you still need a stable address space for your LAN that survives your ISP randomly changing your prefix

The randomly changing prefix is really annoying. There's no reason for your ISP to do this other than to try and upsell you on expensive commercial services.
I don't know if I'm translating to English correctly. I mean, technically it does not have an English translation, since the construct does not exist in countries where English is a native language.

The direct translation would be "house company", but that sounds wrong.
Seniors over 65 have discounts on most things around the world. They also have no earning potential.

Young families also get discounts if they are poor, and have a much higher earning potential.
I think it is a claim, not an argument, really (one I do happen to agree with); essentially that if we had good enough neuroscience we could find the sensation of green in the cells, signals, or whatever.

There’s something in those cells and signals that is having the first-person perspective of being me, which is experiencing the sensation of green. I believe that the matter is all there is, so it must be in there somewhere. But for example if it is in the carbon, I wonder why we haven’t found it when we look very hard at pencil lead? I mean, that’s getting way ahead of ourselves, we don’t really know how to characterize it at all other than by this one very odd thing that it seems to do.
What We Learned from the First State of HTML Survey
> But the folks really accepted that concurrency needs had evolved, decided to hold back & keep iterating & churning for better

I'm not sure if it was this proposal or another one in a similar space, but I've recently heard about several async improvements that were woefully under-spec'd, and would likely have caused much more harm than good due to all the edge cases that were missed.
"What is the reason Cloudflare is an extortionist firm?"

Because they are a publicly traded company
Yes. Someone or something that man wants, made or desires is destroying the idea of housing for us. Not sure what it is, but there's a reason the largest, most empty countries are suffering the worst real estate problems.

It's absolutely weird to see land go for $1m for a small lot, then 10 minutes drive there are cows grazing on huge acreage. Then if you do a 10 minute flight in any direction you can see thousands of hectares of empty, good, liveable land.

(This is in Australia)
It could be on a website they don't control like twitter.
Plausible but still a GDPR violation.
I don't think that's true. I can't cite them off the top of my head but when I read about supreme court cases often a big point of contention of the ruling is whether they decided to issue a narrow or broad ruling. Sometimes they decide to hear a case or not based on whether it would serve as a good basis for the type (narrow/broad) ruling they want to issue.

And the legal universe is vast with new precedent case law being made every year so I don't think the corpus of undecided law is confined to well known legal paradoxes.

As for this case it doesn't seem that odd to me that the issue of intent has never been at issue: I would expect that typically the intent would be obvious (as it is in the OpenAI case) so no one has ever had to decide whether it mattered.
I guess like OpenAI but without Altman taking it over.
> This is such a strange hypothetical. The US is not expansionist, why would it attack Mexico?

Mark Esper says in his memoir that Donald Trump in 2020 asked about the possibility of launching missiles into Mexico to destroy the cartels' drug labs.

[1] https://www.nytimes.com/2022/05/05/us/politics/mark-esper-bo...
Except then I won't be able to flip the bozo bit on people who confuse authentication for authorization in conversation...
The community is generally pleasant to deal with but their engineering decisions have often been bad. The 2-3 transition is the biggest glaring example of a misstep. Even after that fiasco, they have continued to make breaking changes to the language even within the 3.x series. Don't get me wrong, it's usable and probably the best scripting language overall (mostly because of its popularity). But it could have been much better.
Gary Tan interview last week [video]
GrapheneOS.org

Five min install,

Play Store works great,

difficult to find apps that intentionally break themselves due to not being Google Android.
Binding a session to client details like IP addresses and user agents requires enough fiddling that it's no longer the no brainer to use session tokens over JWTs that the article makes out, is my point.
(2019) Baby Boomers Built Big, But Now Nobody is Buying https://www.yahoo.com/lifestyle/baby-boomers-built-big-now-2...

I think part of the problem is there aren't 3rd places nearby in the suburbs, because that is the point, so people want more room to have to accommodate their needs.
The owner is living there and happy with the space or they would move. That is not underutilization. The solution to housing shortage is to build more housing, not to create “bedroom police” who go around and tell you’re not allowed to have your house because they will decide for you how much space you need.
>Right. (Insurance, too.) It's very expensive to let a house sit vacant.

I'd argue it's not expensive enough since it's frequently done.

EDIT: This has already become a common issue in locations like NYC, big money parked into properties with many commercial and residential units vacant. Better to pass those fees and borrow against artificially inflated value than it is to realize a loss.

EDIT2: I typo'd and meant to say 'pay', not pass those fees. (as a cost of doing business)

Commenting on Walter's comment below:

> I've sold houses before. I hated every day it was sitting there sucking up money.

I understand, my problems are with institutional/large wealth artificially constraining supply.

> As for artificially inflated values, bank lenders are not stupid and are not going to loan against a phony value.

Do correct me if I'm wrong but is it really their problem if they can sell that risk or the gov bails the whole sector out when there's a panic?
It's probably just some kid with a botnet that's showing off. You all give these people way too much credit, lmao.
So basically we're going to have to record YouTube to a DVR in order to skip ads. Everything old is new again.
> Not just that, the author explicitly acknowledges a bias against open source, likening it to socialism (which the author clearly doesn't like) and welfare ("handouts", in the author's words).

Which is extremely bizarre, because the most legitimate criticisms of socialism are its tendency to revert to authoritarianism or otherwise impose crooked rules on unconsenting people.

Whereas open source is... completely voluntary? It's like being opposed to private community organizations because a co-op might break the stranglehold a monopolist has on a market. The only one who doesn't want that is the monopolist.

Which is, incidentally, the reason the US now has a bunch of crooked laws inhibiting non-profits from engaging in things that compete with businesses, e.g. by providing a service for a competitive price near cost rather than entirely for free solely out of donations.
Tantivy is great! I was using Postgres FTS with trigrams to index a few hundred thousand address strings for a project of mine [0], but this didn’t scale as well as I’d hoped with a couple million addresses. Replaced it with the tantivy cli [1] and it works a charm (ms searches on a single core vm).

[0]: https://wynds.com.au
[1]: https://github.com/quickwit-oss/tantivy-cli
Why is the problem always rich people? They're going to do what they're going to do.

The poors need to hold themselves accountable and stop working for unsustainable wages that can't get them even a small, run-down home. They continue to drive their own wages further and further down and make it that much harder for those that come after them.

It's ridiculous that they expect other people to sacrifice when they won't sacrifice (unionize, strike, or just opt out) to make the world a better, more equal place.

The wealthy will always try to squeeze everything out of the lower classes. If you accept unsustainable wages for your labor, you are part of the problem in devaluing labor (ie you are traffic). The working classes need to hold themselves accountable for the exploitation of their labor.
Base64 encoding hurts performance, adding about 33% overhead. It's more efficient to send binary over HTTP directly.

> SSE frames or subscription events ... arrive in the order the server sent them by virtue of being sent over TCP.

We support situations more complex than that. Multiple clients can make simultaneous edits with multiple PUTs. They can arrive in different orders to a server that relays them to other clients. Each peer in the system needs to know which versions the edits were parented from, so they can reconstruct the version DAG and merge consistently.

> The headers don't need to be a part of the protocol.

Yes, they do. Not only headers, but also status lines, and bodies. We are streaming entire HTTP responses. A HTTP response consists of a status line, headers, and a body. We need all of these. For instance, if a resource is deleted, we need to send a new 404 status line in the update. If the version changes, we need to update the Version: header. These need to be a part of the protocol so that all peers can update themselves in the same way, otherwise you don't get consistency.
The solution to this is an extra 240V AC circuit that’s basically the same wiring you already have to power your electric clothes drier or oven. It isn’t free, but it’s also a modest one-time investment that will eventually have to be made (either by you or some future owner), since it will soon be expected in the same way that electric/gas lines are expected to be available in the kitchen and laundry room. The upshot of making this investment is that it pays for itself in 2-3 years worth of gas savings, and your “tank” is always full.
Given the political instability in the region it just seems like a way to make life easier for looter in about 10 years.
The anecdote was about charging a car on a 120V 15A wall outlet, the kind of thing that a toaster usually saturates. Absolutely not about charging a car with household electricity.

Does your home have an electric dryer or oven? Use a circuit like that. Does it have that outlet in the garage or parking area right now? No, likely not. But the question is about running cable, not "introducing new stresses for an inferior solution".
It’d probably work at small companies where the HR rep is “manually” outsourcing their hiring process to chatgpt by drag and dropping docs into the chat window
Depends where you live. Here in Brisbane we get Lady Finger and (one kind of) Sugar banana, alongside Cavendish. There are places which have both plantain and gros michel but in very limited supply. Sugar banana is mainly backyard/amateur, Cavendish is totally banned for domestic growing.

There's another 15-20 varieties which Indonesia and other S.E. Asian communities live by, and I make a point of eating from the fruit stalls at markets when I visit Thailand and Vietnam. The differences are great. I wish we had them in Oz but mostly the problem is the skin: Like sugar banana they bruise if you look at them. Lady Finger are sufficiently robust then can stand the supply chain and respond well to Ethylene ripening.

I miss Gros Michel. They were just amazing. They're really hard to find, so in saying we have them in Brisbane it's like gold dust: really, we don't. If you go to the migrant suburbs there's a few.