skysight-inc/HackerNews huggingface dataset:
The article talks about when and how requests hit the database in both schemes, extensively.
This sounds like a shitpost I would make.
Of course, if you could just wave your magic wand and change the meaning of commonly understood words, you can make the semantics work. Unfortunately, you can't. In this case, "permission to use at X time" does not have the same meaning as "permission to perform action X".
I must agree that it is not that simple. That would be highly unlikely.

But how does one measure the impact of recent changes, such as the rise of the internet? Did the invention of the crossbow, the invention of money, of language, of the wheel, not also impact our lives in dramatic ways?

World population has almost constantly been at an all-time high, because it is mostly increasing.

It sure may feel different this time, but if you read the Book of Revelation, or consider 14th century pandemics, our current situation looks like child's play to me.
Between dev and administration/ops work, I spent a couple of decades in the deep end of the tech pool. As we know, it's packed with layers of interconnected archaic, arbitrary and confusing terminology. I understand the resistance to renaming things – the cognitive overhead of learning new terms is real. However, when you remove decades-irrelevant technical limitations and contrived entomological justification, the reason for sticking to old, confusing names often boils down to "because I already know it." Many feel learning it all has earned them this machismo-driven badge-of-nerd-honor, and people advocating for more straightforward terminology are often viewed as weak, lazy, or incompetent. That's convenient for us, but hindering future generations and confusing non-technical users has a cost. For a field so focused on progress, this resistance to improving terminology is strange. While I don't advocate for constant change, or change for its own sake, we should challenge "because, that's the way it's always been" as a justification for not making things better.
The article isn't talking about authz at all.
> are the basis of most of the work we do?

I don't know about you, but in my work, I always have more than 3 seconds to find a solution. I can slowly think about the problem, sleep on it, read about it, try stuff, think about it while running, etc. I usually do at least some of those for new problems.

Then of course there is a bunch of stuff that is not challenging and for which I can start coding right away.

In an interview, those trick questions will just show you who already has experience with the problem you mentioned and who doesn't. It doesn't say at all (IMO) how good the interviewee is at tackling challenging problem. The question then is: do you want to hire someone who is good at solving challenging problems, or someone who already knows how to solve the one problem you are hiring them for?
“AWS has been losing money, quick dump more old stuff to IA. So we can write it off!” - Amazon now.
Historical Aerial Imagery of Toronto
Your sponsoring LIR for IPv6 space and ASNs can also be your sponsoring LIR for legacy IPv4 assignments: https://www.ripe.net/manage-ips-and-asns/legacy-resources/ri...

You can then issue RPKI ROAs.
Permissions are a technical method which are used to implement and enforce authorization policies. However, authorization policies are not composed of just permission controls.

You may find that your user account has permission to read the employee salary database. However, you may not be authorized to read that database by corporate policy because you are not a manager. Perusing that database will still get you in trouble, because you aren't authorized to do so, even though your account had the technical permissions to access it.

You may find that you have permissions to screenshot internal databases and post them on facebook, however since you are not authorized to do so by policy, you will be fired.

Etc.
Playing Mario Kart 64 using (just) Qdrant
No, you have learned that consciousness has something to do with immortality.

Examine that for a minute, you'll see it's obviously true.

Our genes are an organic mechanism seeking immortality of consciousness through instincts, some of which can be awe-inspiringly complex, like spider webs. We praise language and culture for its ability to retain information across time (approaching immortality).

That you're dismissing this as some kind of lexicographical or subjective belief thing reveals how intensely your mind seeks to dismiss it. The truth is purifying fire that burns away parasitical spirits doing their damnest to convince you otherwise.
not working on it, but there are many papers and projects out there showing it off
If someone nefarious steals your <secret something> then yes you have problems, this isn’t anything unique to JWTs
The guy from U2, I think
You have read permission on a file - generally used by humans, and UIs like on Google Drive etc to signify your ability to see a file at all, at some time, some location, from some machine.

You have authorization - you are allowed to see the file now, from this machine attached to this network in this geographic location using this type of authentication.

"I have permission to see this file, but I can't access it outside the corporate network" said many people lots of times.
Sometimes I wonder about the actual utility of the T-test compared to just looking at a pair of boxplots, with jittered points (or some other indication of the number of data points).

If it isn't plainly evident from the boxplots (assuming you've got "enough points") do T-tests alone ever make a truly compelling argument?
> “Better” than doesn’t lose weight.

So you're saying that feeding oneself exclusively with chocolate will has the same result as feeding oneself with vegetables? Sounds counter-intuitive.
I don't mean authentication. An authorization code is something that is handed out to already authenticated identities.
Radon is scary, and surprisingly everywhere in some regions.
Only read the first few pages, but as a non-physicist, but who went through grad school, it appears the author is advertising their own prior work quite a bit. I generally associate this behavior with a) cranks b) stubborn people who lost an ideological turf battle
Battery reporting is still painful huh? People still not learning how to report?

You need a table with at minimum: density, charge time, number of cycles, cost to produce, state of development (lab, factory prototype, production…). Bonus points for losses/efficiency/your special metric that you can win on.

Density matters even for stationary storage. Less, but you can’t just omit it. Like you can’t omit it for gravity batteries which have an energy density comparable to that of raw lemons.
Now you've done it. Worldwide Flipper ban incoming over this. </sarc>
Who's their biggest enemy at the moment
Not a physicist, but I never heard of this before and looks quite interesting at first glance.

Google indicates that mainstream physics regards it sceptically ("pseudoscience"), but it was difficult for me to find out why.

I found a single paper containing criticism from an actual physicist ("A sceptical analysis of quantized inertia" by Michele Renda: https://academic.oup.com/mnras/article/489/1/881/5545603), but that did not make the theory sound that bad, and it even mentions "absence of arbitrary tunable parameters", which sounds very promising to me...

I'd be very curious on why this is so controversial from an actual physicist (e.g. compared to MoND). Hopefully Hossenfelder will cover this at some point on youtube, those videos are always quite merciless with overhyped results...
This is like an arsonist lighting an orphanage or library on fire. Why would you do something like that?
Ownership model ensures no short circuits?
This is pretty incredible...I honestly would be facinated to find out what sort of early universe event might have precipitated such a massive structure
> A hypothesis that Christel Nielsen's research group had before the study was that the size of the tattoo would affect the lymphoma risk. They thought that a full body tattoo might be associated with a greater risk of cancer compared to a small butterfly on the shoulder, for example. Unexpectedly, the area of tattooed body surface turned out not to matter.

As someone pointed out on the other thread about this[1], the lack of dose response makes it very difficult to see this as a direct correlation and not reflective of other confounding factors.

[1] https://news.ycombinator.com/item?id=40492364
AI Device Template Featuring Whisper, TTS, Groq, Llama3, OpenAI
No, not really but that is because I use containers as a way to create multi-purpose machines, not single-purpose application hosts. No docker or any of its clones except for those few services which are wholly based around it - e.g. Kasm [1] - but (bottom to top) Debian - Proxmox - Debian containers running multiple services. This lets me parcel out that biggish server into smaller bits which each play their own role: a database server running anything database-related (Postgres, Mysql, Redis, Rabbitmq, etc), a mail server running mail-related stuff, a 'serve' server running all user-facing services (dozens of them on a single container), an authentication server running LDAP/Kerberos and a central Letsencrypt certbot instance which serves all other services in my domains, a few build servers for different environments and, yes, a separate 'docker' server where it truly is 'containers all the way down, sonny'. Using containers this way makes for an easily manageable system where components can be swapped or migrated without significant effort without overcomplicating things just for the sake of it.

[1] https://kasmweb.com/docs/latest/index.html
it doesn't fit the relational model, e.g. you have some tables, but also tons of different types of images, video, sounds, raw text, etc.
Nope. This should have no impact on the rest of what they’re doing.
She... is?

https://en.wikipedia.org/wiki/Scarlett_Johansson_discography
That would not be exactly scientific. T-test can be calculated independently and verified.
This has been proposed many times already, and it actually wouldn't work.
Me:”siri, how many Beatle’s songs are there?”

Siri:”here are the titles of 5 songs I found”
WP-Cron is a scheduling system integrated into WordPress that allows developers to schedule tasks to be executed at specific intervals. Unlike traditional cron jobs, which are handled by the server's operating system, WP-Cron is managed entirely within the WordPress environment. This makes it more accessible for users who may not have server-level access or familiarity with system-level cron jobs.
Those wristbands are a great example of manufacturing non recyclable garbage.

I understand that some fans might still want some souvenier, but this particular thing is an example of unecological waste.
CEL (Common Expression Language) has gained the mindshare in the devops / Yaml world, though typically just for the expression evaluation in the context of another system's data

https://cel.dev/
Good point.

If a short session time isnt good enough, you can use a simple key store to check for revoked tokens. Youll be hitting a db but its somewhat better since its just a very small db of revoked tokens.

Its hard for me to imagine though with like a 30 min or even few hour long token, under what circumstances you'd actually revoke tokens. If your db got leaked, you can rotate the key and invalidate all tokens. Otherwise, itd have to be something like you have some post login fraud detection in place. Cause jwt or not, if a user just signed in and a hacker got their auth token, what are you going to do? Sure you need to check the db to revoke it, but the problem is how would you know the tokens been compromised?
It’s not a logical argument, but if we only take the part about the transition to https, the difference was that https and http coexisted with mostly full compatibility to go between the 2 for its whole life. And it lives at layer 4.

A more cogent argument is that IPv4 and IPv6 have not fully coexisted like http/https, where you can pull the ipv4 rug out and every packet has an ipv6 path like http to https did.

Also more profoundly, https conversion had the benefit of every operator being able to transition on their own time frame. And people can still opt to use http if they so choose. IP not having that luxury is a profound problem.
This is a Swedish study, so what might be possible is using the population registry to contact siblings of the cancer patients to ask about traits like tattooing and then their health data would already be in Swedish system and linkable. This would control for a lot of the relevant confounders.
A few too many principles mixing the BDFL & their project, I think. It's ok for a BDFL to share the things they care for, but I would prefer a harder framework for predicting BDFL behavior.

My short go-to-example is
https://www.straitstimes.com/singapore/five-core-principles-... . If one imagines a world where each principle is invalidated from last to first, one can have a rough idea on how the actions the country will take.

My long go-to-example is https://sqlite.org/codeofethics.html. A list of rules that they place upon themselves and not on others.
If you allow private ownership, it's gonna be a significant financial asset that people work to optimize (which is not very distinguishable from an investment).

Personally, I like the problems you end up with in market system that has sufficient supply (which we don't particularly have).
It's not densification if it's "from scratch", that's just building something dense. So in short it's apparently impossible to make a city denser than it already is. But this is trivially false. Each city's density varies with time.

I live in Hamburg, it could certainly be denser.
People will come up with the craziest solutions to problems solvable with 200 year old technology (trains). Why you need these heavy metal boxes instead of taking a train is beyond me. Cars are optimal for trips below 100-ish miles. Anything above is high speed train and airplanes.
But you still need to choose a significance threshold, which is just an opinion. There's nothing "scientific" about p=0.05; surely God loves p=0.06 almost as much.
They would be giving up massive amounts of profit if they did that. There would be a serious case for investors to sue if they made that decision.
¯\_(ツ)_/¯

Seriously though, cheap components (CPU is made of silicon, hard to find something cheaper, and growing silicon crystals are hard enough by itself) is just first step to cheap final product. There are way too much other stuff to do, like ability to repurpose existing production lines (vs cost of building totally new ones)
Patch: A micro language to make pretty deep links easy
My Grandfather: "Don't write anything down that you don't want others to see."

Those words have been with me since I was 8 years old. The truth of them resounds throughout history, and well into the distant future.

Ignore them at your peril.
Well, there are some labels that get enthusiasm, and some that don't. Like, of the ones mentioned in the article, "I’m an introvert", "I’m a Libra", "I’m Gen Z", I've actually had some good conversations about conversation styles, astrological sign personalities, and different generations. But when I bring up being human, nobody is willing to get into cognitive biases or the daily mishaps of living. I understand that people have different reactions, but I don't really understand why they react the way they do - it seems like a culture issue.
Recording meetings with OBS is pretty simple.

The process is exactly like that of streaming a computer game along with local microphone audio, except one pushes the "Start Recording" button instead of the "Start Streaming" button inside of OBS. There's got to be a million (or more) howtos written on the subject.

Hardware-wise, it's pretty straight forward: GPUs (including the ones that are a part of most non-Xeon Intel CPUs) have been up to the task of realtime video compression for around a decade or maybe more, which allows for the heavy lifting to be done in specialized silicon.

A bigger concern than the technical practicality might be legal concerns that generally surround audio recording.

For instance: In my state, I am permitted to record any conversation that I am a participant in -- I don't need permission from anyone but myself, and I don't need to notify anyone.

But in the US alone, there's also 49 other states worth of laws on the subject, and they can vary quite a lot.
It shows the existence of some very strong confounding mechanisms.
Extracting Prompts by Inverting LLM Outputs
We consider the problem of language model inversion: given outputs of a language model, we seek to extract the prompt that generated these outputs. We develop a new black-box method, output2prompt, that learns to extract prompts without access to the model's logits and without adversarial or jailbreaking queries. In contrast to previous work, output2prompt only needs outputs of normal user queries. To improve memory efficiency, output2prompt employs a new sparse encoding techique. We measure the efficacy of output2prompt on a variety of user and system prompts and demonstrate zero-shot transferability across different LLMs.
> There's a lot of duplication of code, when new developers or teams come on board, they often just re-invent the wheel, rather than using existing Kernel funtions.

This is, unfortunately, a trend in SW development. See GNOME or Wayland for examples.
I think you're right, but it seems like you get into a tricky territory that'll never be great (as everything with security has compromised). Too long is an issue for attacks, but convenient for users. Too short and you have to do an initial re-auth over and over again, partially defeating the benefits.

Even if the TTL is short, there are plenty of ways to compromise a token and use it immediately in an automated system.

If you're using JWTs, I'd lean shorter TTLs and embrace this as a potential concern. Not sure what the best re-auth frequency is though. I'd be really interested to see other's thoughts on that.
The term “Identify” is a lot better in this regard.

It’s already universally used in IAM, where the other half of the puzzle is also clear and free from ambiguity: “Access”.
> The ability to validate the key before doing anything with it [..]

Q: What about the endpoint that's issuing the tokens?
Insta360 has been Hiding Sponsorships
> Most modal editors are terminal apps, I'd like to change that and implement a good modal GUI editor.

That’s lovely, I’m doing the same. I’m using glfw and C++14 to build a vim-ish IDE. I never learned to love vim/nvim plugins, and make only basic use of macros and substitutions so that’s pretty much the feature-set. It’s very fun to build your own UI library.
What has your experience using GPUI been like?
. I've always found it weird that they are so elusive and ambiguous about quota and allowances. It's a deliberate technique for targeted upsells, but it's not the best way to do business IMO.
Except that they aren't because they are literally collected at the end of the show and they can easily be opened and the batteries replaced. So they can be used from show to show.
And it is good again for me at the moment...

... for a moment.

OK, I shall leave it alone. I wish the DDoSers would too...
Mine just usually says "wtf?"
Hey, I wrote that! :D I hope you find it useful.
There's not many people/projects/companies that take this approach; so if they're not telling you about doing it, you can safely assume they aren't.

IMHO, it's a nice idea, but it at least doubles your system integration work, and the benefits are mostly hypothetical, unless you're willing and able to dynamically shift your infrastructure between OSes if one of them usually performs better but is susceptible to some DoS that's inbound today.
That's because they share the same root auto-, i.e. "self". Because they're related concepts...
Tantivy – full-text search engine library inspired by Apache Lucene
I'll rephrase - CBT has the same impact on the brain as antidepressants when they work, after only 3 months.

And of course you have to follow through. No treatment work without follow through.

I'm glad you found an SSRI that works for you. It's great when that happens. That said, being on the wrong SSRI can cost a life. Being that they are effective as often as they are ineffective, they need to be perscribed with care. Care that is not taken.

Long term treatment plans should centre around psychotherapy. SSRIs can offer some assistance, but again, the risks are too high and people end up on them for far too long. If you want to change your brain, it takes focused intentional work. Therapy is great for that.
lol, thanks for the good laugh :)
It’s not hard to extrapolate that it’s a safety feature in case the auto-shutoff valve malfunctions and, when the tank is full, you’d end up with a dangerous and damaging fuel spill if someone isn’t standing there monitoring it. If you can’t walk away, the risk of this goes down a lot.

Also, people often start the pump and get back into the car while it fills. When it’s full, they get out of the vehicle which generates static electricity (often in winter months where it’s dry and wool or other clothing increases this) and has the risk of discharging on the handle, sparking a fire.
Paywalled sites?
> that whole aspect of replication along with that "scientific method" thing

So uh, religion has been replicated quite a lot. We have historical records of it. We've seen an unprecedented revolution from religion, including science. And we've seen our pinnacle of civilization beginning to collapse since most people abandoned God. How much more proof/evidence/anecdata you need? We still track time in years since Jesus was born. That was 2024 years ago.

> even if this phenomena was something that only humans could observe, it would still be testable with science.

This is a belief. The belief that there exists nothing in the universe that cannot be tested by science. But science is filled with untestable things. Mind-numbingly humongous leaps of pure speculation about something that makes no sense and cannot be measured. Like dark matter, spacetime singularities, or "the big bang".

Science can't even measure consciousness! Or do you take IQ tests as gospel?
Composable MicroLED Monitors
ok I'll bite; how do you pronounce it?
> And if he got his JWT stolen before logout, bah anyway any token could have been stolen that way, whatever the tech.

The thing is, with the good old "token in the database" method, logging out means deleting the token from the database so no, you can’t reuse a stolen token after a logout.
Yeah. I don’t even bother asking juniors this. At that level I expect that training will be part of the job, so it’s not a useful screener.
It's not a luxury only they have, and Asia has lots of ancient cities too, sorry to disappoint you but urbanisation did not begin in Europe. Just down the road from me in the middle of the city we have a huge Kleingartenverein. That area could be flats, boom—city's denser. Your take that it's impossible to make European cities denser just doesn't make any sense at all.
They have this sustainability part on their website: https://pixmob.com/sustainability

It does look like they have boxes for you to return it at the end of the show. It doesn't seem too bad when I take it at face value. I'm sure the reality of how sustainable it is is a bit more complex.