skysight-inc/HackerNews huggingface dataset:
The threat model for a modern smartphone includes people with physical access to the device.
https://archive.is/PnDzt

https://web.archive.org/web/20240531225301/https://www.hudso...
At least make it consistent. Why is it “I decided to quit smoking” instead of “I decided to start smoking”? The default is to be a non-smoker.
Windows 3.11 may be the best way to avoid the multitasking nightmare.

We should do that too as humans can only work on a single task at a time.

:facepalm:
Let's put it this way: before there were even laws against hacking, if you had a key you shouldn't have and you used to get into a building and steal some IP, if you were charged, it would be with trespass or breaking & entering, not hacking.

The term is appropriate, but it tends to evoke ideas of serious crimes, when hacking can be much more innocuous acts that often don't see much in the way of prosecution.
The smallest Lenovo Thinkcentre PCs have a really nice form factor. Very compact.
It is tangentially discussed further down. Despite appearances the internet is a fragmented space with different laws and regulations depending on the location of the user. The service provider has to account for this. And while many large cooperations just steamroll the smallest and disorganized entities (e.g. Liberia), this does not usually work with better organized ones (e.g. Nigeria). This can make it too onerous to run a given service in a given jurisdiction with a low ROI. For example, do business in Argentina, try to lawfully get your money out, and see how far you get.
The comment you replied to provides an alternative.
sigh. They picked "devi" for India. "Devi" is not a last name. Literally it means "goddess". Its used as a suffix to indicate "woman"/"lady". If they picked "Devi" for India, they should have picked "Mr"/"Mrs" for the US.
The actual functionality of viewing React state changes in Redux Devtools, is pretty compelling. Why doesn't the headline say that and instead makes this false claim?

No, if you have a complex application, like a spreadsheet, hooks are not all you need, because even a single edited cell will trigger updates so far up the component tree, that you re-render thousands of cells for each single keypress.

And no, useContext doesn't really help with that, because you still don't get the fine-grained reactivity.
Unless I misunderstand the description, you're talking about an idea of autoencoder and yeah, we kind of use that already. It compresses the data to a smaller representation and similar things end up in a similar area of latent space. It can be guided a bit too if you care about specific concepts more than other.

Word2vec does what you explained with words and their context.
I like to think they just aren't installing any RAM in the servers and running all the databases out of L3 cache
A deposit is normal, and yes, if we had the money (pre-approved or real) we'd be €350 better off.

What made it feel like thievery was we knew nothing about it until we were in France with two kids who had just had enough of travel, and we were already an eye-watering sum on that we wouldn't get back if we tried to shop elsewhere.

Again, the direct customers didn't have this. They had been asked these questions, made these choices as part of the initial order, where they had time to prepare financially, or shop around.

It's in this way very similar to how some airlines feel they can double your flight cost as you are literally stepping onto the plane. You have no choice.
FD 100 (2019)
Custom x86 DOS implementation, playing audio files and PC demos. (Turkish) [video]
YouTube translated subtitles available.
Turkish Rational DOS
https://www.singlix.com/
https://github.com/turkishrational/trdos
Maybe for minor IQ improvements. Because if said kid actually has a high IQ they'll learn faster and have time for both outdoors and indoors activities.
This is my first ever HN post, and I actually got distracted/took timeout from studing for a Snowflake cert (what are the odds; first ever story I saw about Snowflake on HN).

So, I was reading the comments and then in my mind I said to myself, this sounds like something connected with a Pegasus type company. The very next line in the comment I was reading was:
"our boots-on-the-ground approach to cybercrime originates from the IDF's 8200 Cybercrime division"!

As others have noted, doxing the SE seems unnecessary...unless, that was part of the threat/proposal to Snowflake. You can imagine companies that had worked with that SE being concerned/need reassuring they're not affected.

I wouldn't at all be surprised if someone had bet against Snowflake stock before this story broke, if the story was hyped up enough or it was bad enough to spook the market.

Snowflake "strongly recommends" using 2FA for the admin account role, but users are free to decide whether to use it or not. Snowflake's website states: "MFA is enabled on a per-user basis; however, at this time, users are not automatically enrolled in MFA. To use MFA, users must enrol themselves." - I assume a future update will change that so they can enable it by default. MFA related questions always appear in lower-level Snowflake certs.

I'd assume (as a consultant) It would be against company policy to use a username/password for client work. Sometimes that's one of the first bad practices we see working with new clients. Perhaps that's why the SE is an ex-employee.
AFAIK a steam ban in this case just means that you can't buy stuff or activate keys anymore.
You should still be able to play previously purchased games.
“2h movie about batman, with a double twist in the end.”

I am a director now.
1. Dota is from Valve, not another publisher.

2. I see no mention of Steam account bans in either link. Don’t know if you have additional information supporting Steam bans.

Banning unwanted players from a game is fair game. Locking them out of every other purchase too? Highly questionable.
I kind of like thinking about those two words set against each other, though!

Sounds like “adagio” is a contraction of “ad agio” as in “at leisure” in Italian, while the usual references suggest that “adage” might have a couple possible derivations. The main one being that it comes through French from the Latin “ad” + a form of “aio,” or “I say,” so in the straightforward sense “a saying”; another etymlogy positing a root in “adigo” as in “drive, force.” [0]

[0] https://www.etymonline.com/word/adage
http://archive.today/YvuTe
Not everyone has a CS degree. Many developers get into the field by the old self-learning path that works very well to build Ruby on Rails websites, but falls short when they want to do anything more complex. Many keep building RoR CRUDs forever. Some people want to do more with what they have.
Preach it! I'm always dumbfounded by the insanity on MS Windows (and nowadays Gnome, too!) that disallows copy-pasting into the UAC. Do they want me to use weak passwords? I don't get it.
Neat! What is the benefit of using this over "standalone" nginx? The HTTP API enabling configuration change at runtime without downtime (like Caddy)? No need for a process supervisor like supervisord or systemd as nginx Unit is managing the backends?
C++ is pretty unique in considering infinite loops without side effects undefined behavior. It's allowed in C[1] as well as pretty much all mainstream programming languages from the low level to the high level (for good reason). Furthermore, there's an active proposal to match C by removing this undefined behavior in the cases C does[2].

Even in C++, it's uncommon for compilers to exploit it (especially in the trivial case) probably because, even if it's undefined, generally such behavior are pretty surprising and unexpected (and programmers do write infinite loops on purpose!).

Having non-effect producing infinite loops is useful (and sometimes is the only safe way of performing an operation), especially in some low level code. Another commenter pointed out the idea of delays in microcontrollers[3] but I want to provide an example from operating systems.

Take for example a panic function. At the end of it, you usually have an infinite loop of some sort, partly because you can't really safely do too much and panics generally represent a completely unrecoverable state from the operating system's point of view. A trivial

for (;;) {}

...is useful.

[1]: For constant expressions.
[2]: https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2023/p28...
[3]: https://news.ycombinator.com/item?id=40542860
Our experience of moving from Heroku to CrunchyBridge has been very similar - excellent help with the migration including jumping on a call with us during the switchover to resolve a broken index.

Would strongly recommend them to anyone looking to move off Heroku.
What data was leaked specifically? Were my payment credentials or bank account information leaked? How do customers know how to respond to this?
> I don't get why

Loudly declaring your ignorance is not an opinion. If really cared, you would go look at the large volume of the well-thought-out complaints. But you don't.
I want this! I'd love to sit at the beach with something as readable as a Kindle (and preferably a sand-proof keyboard), but with latency fast enough that emacs or vim is usable. Is there anything close to this that I can buy?
You’d think for all the additional booking fees that they’re known for charging that they’d invest a little more into security of their infrastructure both internally and externally…
It's curious you like your computer so much, yet haven't used it in a month :)
I 100% agree with this. But if you believe in yourself that you can build yourself over the issue and take a leap into fitness, even just a brisk walk and asking for help. You can heal.
I myself am not one to reach out but after 16 years my body was was falling a part because of my mental state.
If you want to read about my story - it's here, www.bylani.com
You've got this!
If I’m not mistaken, that is what WhatsApp does - you can only forward a message so many times. They implemented this to counter fake news spreading in India quickly. I didn’t follow whether that worked as intended, however.
I work in immigration in Germany. I'm seeing a drop in traffic compared to previous years. People in the immigration industry are noticing a dip in business. My guide about losing your job in Germany is now in the top 10 by visits.

Immigrants are the canary in the coal mine. When more people are unemployed, the local talent is already fighting for available jobs, so companies don't hire as much from abroad.

This is based on relatively flimsy evidence, but it's how I currently see things.
The point of having multiple addresses delivering to the same mailbox is to be able to use per service custom emails. The grand-grand parent wanted a ticketmaster specific email, so if they sell their data, or it gets leaked, they know from the email address it was from ticketmaster, or another service.

Another commenter in the thread presented how their company "normalizes" gmail addresses by removing "." character and "+..." suffixes, so users don't abuse their system by creating multiple accounts with what is basically the same email. Having a catch-all mailbox allows people to circumvent this "security" measure.

I'm imagining that you actually want to have separate emails pointing to separate mailboxes, and for that case indeed, your solution is better, but for the life of me I can't imagine why anyone would prefer having to check multiple emails, instead of a single one. :D
I agree with you. The person you're replying to is too negative about Japan. Like every country, there's parts of technology that are ahead and behind the curve. Japan is indeed lagging in some areas, but in others it's clearly one of the most advanced countries in the world.
The F1 example is totally wrong. The F1 controller runs at 10kHz hard real-time, the car controller at 500mHz, a human driver can react at maximum 30ms. A F1 driver is nothing compared to its controller, whilst the normal car driver has comparable reaction times.

You cannot train a F1 driver for highly dynamic events at 20k rpm and 4000 NM forces at the axles, you need automated controllers for that. You can train him for simple things, like gear switching (5ms) and hitting the breakpoints right. But an AI will be at least 10.000 better than a human on this.

You need a slow human brain for the stupid mistakes instead.
I never really used Excalidraw until I discovered the Obsidian plugin. Now I have tons of markdown notes with embedded Excalidraw doodles. It's good stuff.
Myfitnesspal.

Also muay thai
As the founder and CEO - did you not think to stop and look at the market? For example what happened recently with Terraform/OpenTofu, Redis, etc?

You basically took the same route as these companies and while your intent may be different, from the outside it looks like another company making a grab an Open Source software with changing licences and renaming products.

Again, it may not be your intent but you made the first mistake in marketing which is - see how others have done it and what the outcome it.

For me as a Tech Lead/Architect - currently looking at event-based architecture, this is a bit of a turnoff of the entire product stack - because it suggests you might be lining things up to sell off.
I still use Reddit in the way you’re suggesting, which is when I occasionally have a specific use.

What I meant was that I don’t visit Reddit by instinct anymore when I’m bored - even “good” subreddits. The general user base is not high quality. Even for topics I’m interested in, I really can’t stand the Reddit vibe that inevitably seeps through. It’s incredibly predictable.
I'd have got the floppy working. It's highly likely a short, perhaps a bent pin, if it's failing to start with it connected, or possibly just some duff caps.
IMHO the article misses at least one important thing: Microservice architecture.

I see Node.js/JavaScript in the backend most often used in microservice architectures where the applications are mostly trivial and the Node.js developers are at most in the middle of the experience spectrum.

Thing is, for every single microservice it is easier to just implement it with some libraries than to learn a proper framework, and the hype cicles in Node.js are so short, that developers never experience real proficiency with a library.

In combination, after having used Node.js in the backend, I will never touch it again for backend work, unless a lot of things change in the community and tooling. I am much happier and sane using Spring or Django.
Why There's a Copper Shortage
How do they distinguish those lower-income households without referring to tax documents?
Of course Valve has policies designed to meet the expectations of rights holders, that's a given and I'm unaware of any serious business on the planet selling goods created by other companies that doesn't have such policies and enforce them so they can continue to sell those goods. This is a blanket policy that Valve enforces regardless of the publisher.

Valve has been banning accounts for circumventing region restrictions for as long as the feature has existed, and long before Sony added their games to the platform. Just because these policies were designed to appease rights holders doesn't change the fact that it's at Valve's sole discretion to enforce compliance (at risk of losing publishers).
Good to know, appreciate the context.
This has been on my mind loads lately and I’ve been playing with some ideas (ohmybuck.com/2024-05-26-10-51-what-i-want-from-the-next-big-framework/ and github.com/olmesm/hadeda - reviews welcome although they are both rough)

I think there are two main issues with js stacks - react and too much plumbing.

React based frameworks require too much thought about lifecycles and management & synchronisation of client state. RSCs could make this easier, but I think the whole use server/use client is a mistake and pushes the problem onto third party frameworks which aren’t focused enough to close off some doors, in the fear they loose marketshare. Remix and redwood may be on the right track but lets see in the next few months.

Plumbing is an issue because you still end up creating a somewhat separate api that feeds into your components. That wiring sucks time and adds to the maintenance workload.

Adonisjs with htmx and tsx templates feel like they’re the right direction but as another post pointed out, adonis doesn’t quite feel like js.

I think the solution is more magic and conventions like RoR provides. I think more opinion is good here - the wild west needed some law.
An epidemic that needs to change for our future children. I work in a place that you see the negative influence it has on children. Social media ruined me in the past and I'm so sick of people saying that they're being "authentic" when they aren't. Just to follow some trend and kids fall for it. It breaks my heart on how warped the world is.
Isn't prescription going down the same thing as vision improving?
Fermi, Majorana, and Mental Maths
Steam works in Russia, but it doesn't accept payments. Free and previously owned games can be played, but new ones cannot be bought. The usual way to circumvent this is via gifting from another account that has working a payment method, e.g. a Georgian or Armenian bank card, or simply playing bought games on the new account.
I envision a near future where we strap on a VR headset and experience fully immersive content generated by prompts.

So instead of buying a movie in a video format, we buy prompts.

A prompt can be something like “a horse enters the room”. But because it’s generated on the fly, the horse entering will walk around your kitchen island so it doesn’t bump into it.

So everyone’s experience will be slightly different but the story remains the same.
It's a difficult one.

The old net metering model where the utility serves as a battery was never going to be sustainable as distributed renewables grew in popularity. Home batteries are definitely the way forward, but NEM 3.0 is an abomination.
Don't you have to be a Non-Government Organization, outside China[1], to be eligible for a .ong domain name?

[1] According to https://www.godaddy.com/help/about-ong-domains-41384
Nothing beats ISLR: https://www.statlearning.com/
that's interesting, what graphics card were you using? was it some fancy monitor? I have always used pretty standard stuff and never had any problems.
> I'm guessing you didn't bother to read the link you dropped, because it actually undermines your entire claim. Before you pat yourself on the back, you might want to look up what qualifies as "use of force". It's not the way you seem to be using the word.
>

That's a good guess, but wrong.

> The only lens through which what you're saying is even vaguely correct is that some states don't have a specific statute of "breaking and entering", instead prosecuting it as "criminal trespass", but even then it's a distinction without a difference: it's prosecutable as a charge for using force to gain unauthorized access to a location with the express intent of committing a felony.

I mentioned that trespass vs. B&E is nuanced, and that I was definitely oversimplifying it. If someone was curious they might have investigated this matter for the relevant jurisdiction. They might even have some familiarity with the case. But that would indeed require more curiosity than someone who doesn't even read a link before they drop it.

> In any case, this whole discussion is pretty pointless, because as I already said, the fact that there's a different word used when the crime happens in meatspace vs. cyberspace is wholly uninteresting and not relevant to the original topic, and - as I also already said - you have clearly misunderstood the crux of OP's statement and so there's no point in continuing down this rabbithole.

Or maybe I just wasn't doing a good job of being clear on the point. There was both an individual and a corporation at fault in that specific case, so you don't have to speculate as to which party was more severely punished. The OP's assertion is flat wrong.
At this point I'd rather be good at Caddyfile and have a project folder of:

/home/me/project/caddy
/home/me/project/Caddyfile

No sudo, no config spew across my filesystem. Competition is good, and I had a lot of fun with nginx back in the day but it's too little too late for me.
This misses a lot of nuance. The decisions are yes/no on regret and an extremely short reason. These aren't going to help others make reasoned decisions about things. You can't really help with that anyway, because you're just setting someone up to write in the future "I wanted X but I read about someone else who regretted it. But now I regret not doing it because I'm not them."

For example, I once quit my salaried job to work as a contractor for a start-up, making up the money shortfall with other contract work. I regretted it quite quickly because my calculations on making up that money were off the mark, and my wife started to get pissed off about it. But it led through an interesting experience and cumulated in finding a job that has been so good to me and has paid so much more. So I think it was the best path I could have taken, and I shouldn't regret it at all, it has changed our family life. However, I still have regret because my wife doesn't see the causal relationship between my mistake and 9 months later having that opportunity, so it was a source of tension between us for much longer.

I could write similar stories about many things, like going to uni, having kids, moving country. The experience, the aftermath, and the effects much further down the line.
The FT has over a million paying subscribers.
I heard it is called “machine learning”, therefore we are legally bound to treat it like a human student.
I assume in this case it's because of sanctions against the countries involved which could cause Valve to be prosecuted rather than because of VPN use in general
What is 'fake news' for one person is truth to another.

What it boils down to is who decides what is the truth and whether they have the right to censor everything and everybody else.

In the 90's, the internet came as a salvation for free speech because now everybody got to have their voice heard. I definitely don't like this trend of censorship, it's not what our western democracy is built upon.
Click on it and you'll get the various reasons.
ortho-k might be able to slow down development, but I haven't seen evidence it can reverse it. The NIH in the US claims ortho-k works for slowing down development https://www.nih.gov/news-events/news-releases/multifocal-con...

But on the other hand, the UK NHS guidance https://www.nhs.uk/conditions/short-sightedness/ says that multifocals may help slow the development, while "Some opticians may advise wearing a special lens overnight (orthokeratology). This can help you see better without glasses or contact lenses" (so the UK guidance does not list ortho-k in the list of things that can slow development, only that opticians may advice using it)
"AI" ia very efficient at creating the regurgitated slop the movie industry has become known for these days. Hopefully such an abundance will focus the audiences eye on creative regional works that could never be made with ML.
For me I'd rather ship a single binary with PHP support in it when using containers.