skysight-inc/HackerNews huggingface dataset:
If you write a B2C app, there is a good chance that you might not need Auth0 and the functionality of the authentication, authorization, and account management tools in your framework suffice. If you plan on selling B2B you might need to support SAML and other enterprise federated login mechanisms. There, the scales tip in my book and I would go with Auth0. It’s expensive to support SAML in-house.
It's not like a sports broadcast, no fast-paced action happens on the instrument cluster.
Based on the original article, it sounds like the British Museum was heavily politicized with well heeled donors strongarming museum staff to do their bidding.

> One big donor threatened to withdraw her funding from the museum when she was told that she could not drink red wine in one of the galleries during a party. At another function, a catering trolley rammed into a glass case and damaged a valuable artefact. Although the incident happened five years ago, the artefact is still being repaired.

I think this is what Dr. Higgs used to rationalize his thieving - the donors clearly didn't care about the works but collectors did, and it I'm getting paid it's a win-win.

I guess it's another vaunted institution that has turned rotten, like much of the UK.

But tbf, £12,000 in London in the early 2000s was not great but livable (equivalent to $18k in 2002)
Peter Principal but with AI: it will keep being used for increasingly demanding talks, until being promoted one step beyond its competence.
Real nice ascii art collection!
[dupe]

some more discussion: https://news.ycombinator.com/item?id=40489486
Google to invest $350M in online retailer Flipkart
What a delightfully simple solution! I have to imagine if I were given this problem I would muck it all up with wristbands assigned to seats and a 5G/IOT network needing to be installed at every stadium and custom control logic needing to be written and customized for every stadium…

Whereas they just hook up an IR lamp and use the exact same lighting control procedures every stage tech knows blindfolded. Brilliant!
Well, now I hate him. Thanks.
Men’s behavior is not representative of men’s physical sensitivity.

Anecdotally, as a former guy, I can absolutely report that I ignored tingling and numbness in saddles because I just assumed I was supposed to put up with it, and ended up giving up cycling as a result. As a gal, until this article came out, I’d assumed that cycling was essentially hopeless from a comfort perspective (because if they couldn’t solve it for men, they sure weren’t going to try to solve it for women).

So it’s great to see that progress is being made for all equipment, and that people are more willing to consider such issues “able to discuss” than they were when I was growing up. But I would not say that it’s due to differing sensitivity; it’s due to the cultural baggage around discussing and prioritizing groins.
Type AI
The Steam Deck before the Steam Deck :)
Netflix turned from chasing HBO to signing a deal with WWE
How do you ensure that the OS does not by itself connect to a random open WLAN, when you cannot trust the OS?
refreshing the refresh token is always a database hit, and in the case of using a third party like Auth0 or FusionAuth, you can invalidate refresh tokens at the individual and at the user level. Saying "the refresh token is the real token" as the article does is pretty misleading; the refresh token always goes to the same system that would accept the username/password, but the jwt itself gets carted around to other systems. So again, in the auth0/fusionauth case, the refresh token is sent to auth0/fusionauth, not your app, so even without any particular knowledge of what's going on, the application developer is forced to utilize them in different ways. There's a big assumption in this article that you're talking about a monolithic system where logins are processed by the same application that handles all requests. Even if you do prefer to structure your application as a monolith and avoid microservices, once you delegate auth to a third party or a system separate from your app, the bearer token versus refresh token thing starts to matter a lot.

I think there's a cyclic thing that's been happening for years where people in the security community like to talk about how bad jwt is, but then not produce anything that meets application developers needs in a meaningful way. I spent years avoiding jwt and ultimately found avoiding jwts wasn't actually a good use of my time.
Actually I like it for iterating on an idea
The wild thing is that they’re apparently from different etymologies. “Authorization” comes from “auctor” in Latin, meaning “leader” or “author”, whereas “authentication” originally comes from the Greek “auto” meaning “self”. There probably was some cross influence that brought them into line though.
Instead of plural accesses we should say entitlements
Real-Time Brainwave Visualization: Integrating Muse EEG with Python
From the guidelines "Please don't delete and repost. Deletion is for things that shouldn't have been submitted in the first place."
Yes. But logging in still happens - you just get a token in response and use it for subsequent communication within some time period. It’s still a bad term for an identity / authentication system because logging in is just one small part of it.
That's true. There is a problem with the platform even having an algorithm at all. Mastodon does not, so that's a good option.

Threads is much worse at least...
You're making a very big assumption that once you get dropped off by the train at your destination that you aren't going to need a vehicle once you're there.
Fixing scoping in userland, like with styled components or BEM, is definitely doable but not really the same as having native support for scoped styles in CSS.

There's nothing wrong with those solutions and I've used those and similar plenty, but they are fragile. Those are conventions that have to be maintained and stuck with, and often for scoped style solutions you're also left with a hard dependency on a build step (BEM is an exception there). That may not be a problem at all, if you're using react you almost certainly already have a build and bundle step, but not every project is that way.
The vulnerability is usually in verifiers rather than signers.

See, for example:

https://github.com/firebase/php-jwt/issues/351
What I remember is a title ascii screen (yellow letters against a red background or something the like) stating 'if you copy Doom, you will go to hell'. I'm pretty sure I got a copy of the complete game. I guess a lot of people will be going to hell.
10% aren’t low odds when it comes to health issues.
https://github.com/firebase/php-jwt/issues/351
So is bringing your own travel router while traveling the current best practice for securely connecting to public wifi's?
Authentication is when the bouncer checks your drivers license.

Authorization is when he lets you in the bar.

AuthN can be achieved numerous ways that don’t even closely imply a “login”. The terms we have suffice, it’s the education around them that is sorely lacking.
I think they mean use both - identity in place of login/authenticate and access in place of auth
Check out the preprint: https://arxiv.org/pdf/2402.07591

It’s less impressive when looking at the background data than how it’s described.
Found this while looking for resources to track NREM vs REM sleep per night at home and thought it was pretty ridiculously cool — anyone have experience with a sleep tracking headband that can do this and summarize results?
I mean.. this could be a circle just from our point of view if the distance measurements are off for a bunch of them...
May 27th, 2024. This day holds significance for many. While we’ll have the morning of our brothers for some, we will also have the joys that fill the hearts of others. Memorial Day is a day to remember the sacrifices many gave while in service. Protecting the freedoms we have here in America.

John 15:13 NKJV

“Greater love has no one than this than to lay down one’s life for his friends.”

Never forgotten
Sadly I'm in that position. I have hundreds of PLCs and legacy controllers on my network that are IPv4 only and will never be replaced. At least not in a reasonable time frame. I'm talking 20+ year life expectancies.
Mexico City could run out of water in a month unless it rains
well either they know the language to some functional degree, or they dont.
I have heard of this. I would need to transfer my ARIN IPv4 block to RIPE though, right?
> This terminology implies that the two concepts, authentication and authorization, are more closely related than they are.

But they are closely related. You can't really have authorization without some form of authentication. Both are tied to some kind of identity. And in some cases, such as SSO, authentication involves authorization from another system.

Also, login is not a good replacement for authentication, because there are forms of authentication that don't involve logging in at all. And often the act of logging in just exchanges one set of authentication credentials (username and password or equivalent) for another, shorter lived, set (token, cookie, etc.)

Finally, one nice property of using authz and authn is that you can use "auth" to mean "authentication and authorization", since the two often go together.
I think this holds for reporting on any field where you have expertise or deep knowledge. I read the news and just end up frustrated that something happened, and I don’t have the key details.
Looks like Galactic Union )
We do have tools for that though, how would a build tool fit into a language specification? Aren't those different concerns?
Same excuse every museum gives. The US is full of European art and artifacts.
It's not growing, it's cutting and amplifying that happens on this step. Without it there is less certainty the attention will go the right way. When it is fully pronounced- as if you heard it with your ears - it sort of ripples through your brain, like a physical sensation, echoing for some time. Pulling it out word by word feels natural so You think it was already there, but The thought is not "activated" full strength until you walk it fully with attention, theres only a vague shape, a direction, broad and uncertain. Without it you get faster less lasting thoughts that won't chain well to form a cohesive picture. less sharpness, less resolution, a kind of intuition, maybe it is intuition. You probably get those sometimes, a complex idea that is hard to verbalise, but you can sense it, and you are probably aware how ephemeral they are if you dont stop to give them all your attention. You already know how to think like that, it just doesn't register that you are doing it because it doesn't "echo", you still walk them to remember them
I'm not even in data science, but I am a slight data hoarder. And heck even I'd just say throw that data on a drive and have a backup in the cloud and on a cold hard drive.
A button with type "submit" will happily submit the form when you click on it. If you want it to look like a link, use CSS. Putting the submit on the anchor tag is pointless- the lack of a type on the button itself means the browser is inferring the intended behavior and defaulting to type "submit" rather than type "button".

As others have mentioned, the main downside is likely accessibility.
Except that doesn't solve the problem. Those gas stations have an exponentially higher energy transfer rate than the chargers would. The delays will stack up in only that footprint. Not to mention those gas stations need a tiny fraction of the power. So there's no guarantee the electrical infrastructure is in place
My first criticism is this. The scale on which quantization works is the https://en.wikipedia.org/wiki/Planck_constant. We should not expect quantization to be a visible effect at the scale of stars.

And if quantization was a visible effect at the scale of stars, it should be very visible in our own solar system. But no, our solar system operates classically to a crazy number of decimal places, and the deviations follow general relativity - with no evidence of quantization.
Sorry! Im not sure what you’ve meant by this! Since my account was new, my initial post got flagged. Contacted the mods and they made a new thread with the same content!
It depends on what you're evaluating it for. Active contributors is generally the most important metric IMO, but there are a lot of projects that break that rule too.

More often than not I see these questions asked in the context of comparing Open Source solutions to B2B products with integration and continuous support contracts; you cannot really "evaluate" Open Source with expectations that high. Getting things to work well takes elbow-grease, and you can't expect free work to materialize and solve every problem for you. You should go into most of these Open Source projects with the assumption it will take some dedicated research on your part to get it working properly.
Agree, sounds exactly the same... Also forgot to mention that you can indeed find Mate Cocido in individual bags: https://es.pampadirect.com/rosamonte-mate-cocido-yerba-mate-...
Is there any way to know who is responsible?
Used to work at a company that produced 20 gigs of analytics every day which is probably the biggest data I'll ever work on. My junior project was writing some data crunching jobs that did aggregations batched and in real time, and store the result in parquet blobs in azure.

My boss was smart enough to have stakeholder meetings where they regularly discussed what to keep and what to throw away, and with some smart algorithms we were able to compress all that data down into like 200MB per day.

We loaded the last 2 months into an sql server and the last 2 years further aggregated into another, and the whole company used the data in excel to do queries on it in reasonable time.

The big data is rotting away on tape storage in case they ever need it in the future.

My boss got a lot of stuff right and I learned a lot, though I only realized that in hindsight. Dude was a bad manager but he knew his data.
I was searching for a Meilisearch alternative (which sends out telemetry
by default) and found Tantivy. It's more of a search engine builder,
but the setup looks pretty simple [0].

[0]: https://github.com/quickwit-oss/tantivy-cli
You can use SM for short runs, you just have to match the optics to the cable/distance you're looking to use. Tons of very fast single mode optics out there that only expect <300m runs.

That said, it's likely not worth it, given that cabling is typically viewed as a ~10 year investment, and if you're installing OM4 Multimode fiber in a house you're not likely to hit the limit of that fiber within 10 years even in extreme use cases.
One has sent his car to a trans-Martian orbit, the other was unable to admit which inauguration had the most people present or how large his apartment is.

Don't get me wrong: Musk has and will continue to get into serious trouble for things he insists are true but nobody else believes (420 etc.), I'm just saying there's a huge gap between them.
Everyone’s talking about how you MUST hit the database for revocations / invalidations, and how it may defeat the purpose.

How is no one thinking of a mere pub-sub topic? Set the TTL on the topic to whatever your max JWT TTL is, make your applications subscribe to the beginning of the topic upon startup, problem solved.

You need to load up the certificates from configuration to verify the signatures anyways, it doesn’t cost any more to load up a Kafka consumer writing to a tiny map.
Not necessarily. Zed is designed to be very fast. Worth looking into. https://zed.dev/

Both VS Code and Zed have pretty comprehensive (and in the case of VS Code, widely used) Vim modes, so it would really be quite a lot like that.
Get a set of visually-similar fuses that claim to be the same rating. (Visually because you need the shape to be the same). When testing a few to destruction, record the temperature of the fusing element and resistance and power over time. Also measure the temperature at operating current.

Now the fuse you want to have the utmost trust in, test it at at half the time it should fail for a given i^2t. The temperature, resistance, and power curve should match the ones you tested destructively. The temperature at operating current should also be similar. If so, you can expect it to fail the way your destructively-tested fuses did.

Now, if you trust the metal composition and fusing element shape, a simple resistance meter will tell you if two fuses will behave the same.
If Pi is normal, which we haven't proven but do suspect to be true, then it contains Hamlet, and indeed the entire works of Shakespeare in chronological order, an infinite number of times. https://en.wikipedia.org/wiki/Normal_number
In OpenID Connect the endpoint is issuing the tokens is run by Google, Microsoft or some other company that is too big to fail (or rather if it fails everything goes down).

If you are issuing the tokens yourself, you can build a simple horizontally scaling identity service that only does authentication and token issuance. With refresh tokens, if that service goes down it only prevents users not already signed in from signing in. Generally users stay signed into to webapps for weeks at a time, so you have massively reduced the impact: rather than 100% of your users not being able to do anything on your site, now 0.5% of users are impacted.
The other big question regarding Rete is, today, at what point is the complexity of the algorithm worth the performance.

A primary goal of Rete is to narrow the rule set to be applied based on changes in the working memory. Quite important if you have a large rule set over a more naive, perhaps brute force, approach of apply rules.

But modern machines are pretty stupid fast, and when operating on very slow hardware of the day, Rete was very important. Today, I don't know. Or, simply, that the use cases perhaps narrow particularly for smaller rule sets.

"Here's a bunch of rules (say, anonymous JS functions). Run each one against this working set (which is little more than a fancy map). If any of the members of the map change, do it again."

Cheap hack 2B. Register with each rule what variables its interested in:

addRule(['weight', 'height'], function(map) { var w = map.get("weight"); var h = map.get("height"); var bmi = w / (h * h); map.put("bmi", bmi); });
addRule(['bmi'], function(map) { var bmi = map.get("bmi"); if (bmi > 30) { map.put("weight_status", "obese"); } });

(No, this isn't a rule development environment. Yes, rule engines can be very complicated, and rule interaction, precedence, etc. are a Thing. This is a trivial example, doesn't mean it's not potentially useful for some scenarios however.)
?? It lets me know how effective a product I'm offering is being sold? What do you mean?
It's also ok for people to voice their personal feelings that someone else's personal feelings are narrow-minded. This appeal is self-defeating. (And maybe the original post would have not gotten such a response if it had stuck to their personal anecdote and not sweepingly generalised it)
> And why is palette not palette bar?

My guess that's because palette, the real world object, is something close to a bar itself, so it would be a bit of tautology. From the dictionary:

Palette: a thin board or slab on which an artist lays and mixes colours.
12k was shockingly bad for London in the early 2000s.

You can't really convert currency and/or then apply inflation or try to compare to 2002 US living costs.

London back then still cost a fortune to live in, 12k definitely wouldn't have been comfortable.

Yes, the pound was stronger against the dollar back then, but that's little comfort for someone trying to live in London!
What A.I. tech companies can learn from Victorian telegraph operators
Three other problem is they haven’t ridden for 34 years, but feel like they are just as skilled as they ever were.
Inland Taipan
The article is... light on details. Even with the wikipedia article [0] I'm having a hard time seeing how the pieces fit together. What's the interface between the air and the electrolyte, and the interface between the electrodes and the grid? It can't quite just be some wires connected to a bunch of FeO powder in a pool, right?

Also, it seems like in the charging process, they crack water to get back the H2 they consumed while discharging, and just throw off the oxygen. Because the discharge process involves using the Fe to crack water into H2 and O and immediately running the H2 through a fuel cell to get H2O again. I guess that's easier than just storing H2 and running it back and forth through a fuel cell? Am I just tired or is this wiki article written kind of badly?

Anyway, it sounds like the company in the OP is based on figuring out implementation details rather than brand new technology, which is kind of encouraging, as these things go.

[0] https://en.wikipedia.org/wiki/Metal%E2%80%93air_electrochemi...
Google's AI is that stupid, feeds people answers from The Onion
I think phones should have location-based wifi (and maybe bluetooth).

Meaning, if your location is home, turn on wifi, else turn it off.

Unfortunately apple/google/carriers have a vested interest in making our devices very promiscuous. (location services, advertising/surveillance, offload cellular, etc)
I tested it with a regular gmail address. It incorrectly reported non-disposable.

I don't see how this sevice can expect to disinguish usefully.
My other comment was downvoted and flagged for me being trans and not a real woman.

I swear I have a vulva and am a long-distance cyclist, this subject matters to me. I might not fit everyone's definition of a woman, I certainly wasn't implying that women's issues shouldn't be addressed.

I still want to share my advice: invest in a good quality pair of women's padded cycling underwear. It made the difference for me, and also why it's golden rule #1 from the article.

I was genuinely just sharing my experience and wasn't attacking women or anything like that. I understand I might get downvoted or flagged again, and I apologize in advance.
Once I was in a training session on C++ STL, and the instructor told us not to use vector at() method but instead check the size and handle out-of-bounds issues using something else, because exceptions are slow.

Coming from another language, this sounded wild to me. There is a perfectly fine API in the standard library that we choose not to use but instead reinvent the wheel because of an "implementation detail" of a compiler, something a beginner or even an intermediate level C++ developer is likely unaware of.
thanks, tried this to some mixed results. seems like they have caps on speed/rate limits etc if you havent spoken to them so might reach out
That or having the water at extremely high temperatures is my understanding too.
Stars, forks, algorithmic rankings, or other popularity metrics are actually the least important things for me. Assuming a project does what I need, what I'm interested in is the availability of good documentation, how understandable the code is, when was the project last updated, and other clues that have little to do with popularity.
> Active contributors is generally the most important metric IMO, but there are a lot of projects that break that rule too.

Just curious, can you please share some OSS projects that break the rule?
> inherently intertwined, confusing, and subtle.

Our current implementations are like this. I'm not convinced this is inherent complexity, though.

It seems like almost all the complexity stems from people trying to create hooks to monetize all the pieces of the process.

Security and usability feel like a second and distant third in importance.
yea reckon vllm is the way to go. cheers
If a lot of attacks come from AS44477, why not just block it?
> they made a new thread

Under your username??