skysight-inc/HackerNews huggingface dataset:
Nothing has changed since yesterday, so I will say again that this is not verified. And Ticketnews is not an official Ticketmaster site either.

The only credibility this story has is that an admin of a breach forum reposted the sale of data from a user who had no reputation on the forums. All the journalists who wrote about this acknowledged it to some extent, but I suppose it pays to be first on a bombshell headline.

The Australian Home Affairs is only looking into it.

I personally think we should wait on an official announcement because if this is real then Ticketmaster has to disclose the breach by law.

—-

EDIT: Two minutes after I wrote my comment, vx-underground provided new details:

https://x.com/vxunderground/status/1796063116574314642

> Based on data provided to us by the Threat Group responsible for the compromise, we can assert with a high degree of confidence the data is legitimate. Date ranges in the database appear to go as far back as 2011. However, some dates show information from the mid-2000's. Data shared with us includes:

- Full name
- Email address
- Address
- Telephone number
- Credit card number (hashed)
- Credit card type, authentication type, etc
- All user financial transactions

> NOTE: The data provided to us, even as a 'sample', was absurdly large and made it difficult to review in depth. We are unable to verify the authenticity of financial information. Briefly skimming the PII present in the dump, it appears authentic.
They also went out of business, which seems like a reasonable characterization of something that failed. https://en.wikipedia.org/wiki/Armadillo_Aerospace
I moved country before selling my first business for that reason.
this is what I started with - the thinking is exactly that - the overlap will help not start from 0 when I pick the other thing
Wonder if the size of this breach will be used as evidence of consumer harm by their monopoly. If there were more competition in the market, there wouldn’t be one single treasure trove so enticing.
Edge was pretty bad before they replaced it with Chrome Edge.

The rendering engine was nicer than ie, but they built a queue between the UI and the browser engine, so navigation including the stop button didn't interrupt the work in progress until it polled the queue, which could be seconds later when it had gotten stuck (as browsers do), and then it would go ahead and do the many actions you had queued up.

Reskinned Chrome is less bad, I guess.
I started working a month ago for a company using mod_php, it's painful, every time you start xdebug, then after the debugging session, you need to restart apache, I started yesterday configuring apache2 to use php-fpm, but I was just wondering if it could work for us, at least in dev, this frankenphp, just can't find how to install php-exts in the docs
great book indeed - had a listen to the audiobook :)
There will be bullshit booking charges etc though. The thrust of their point is largely correct. I really wish people were more sensitive to being stiffed like we are by these sorts of stupid charges … that they arent means there is often no alternative.
> The funny thing is that my Dad only had a Windows PC so he can run one app: Chrome.

So get him a Chromebook or a tablet? He doesn't need Windows to run a browser.

If he does still want Windows for some reason, there are ways of de-bloating the installation. It takes some initial technical work, but in the end you can be relatively sure that it's free from all intrusive software. You still have to be vigilant of Windows Update, but you can also turn that off, and run it manually, or cherry pick the updates you want.

Microsoft makes it difficult to run a clean version of Windows, but if you still want to use it there are ways of cleaning it up.
I think the question is: what is the threat model, and how would the information change your behaviour? If it's just peace of mind, then the false positives are super super stressful as I have had direct (not mine) experience of.

My view is tracking might have its place in certain situations, but almost certainly not in a blanket way, and always with an understanding of the threat model.
I live in Groningen, NL and most people I know (of all income brackets) cycle to work if they have a job in or near the city. It’s the default form of transportation in this city (and often much faster than going by car).

woziacki’s income bracket also doesn’t apply here. You can get a decent second-hand bike here for 200-300 Euro (more than an order of magnitude cheaper than a car) and maintenance is much cheaper than a car, plus no vehicle taxes, road insurance, etc.
There's a fix to the "nerdiness" issue: Have the kids pick awesome bands or band/frame combinations from AliExpress. (They're about $5-20 rather than $60-200.) There are plenty out there to transform a watch to look nothing like an Apple or Samsung watch, and look nothing like anyone else's watch.
Link: https://www.baen.com/Chapters/9781625791153/9781625791153___...
If American merchants toggled the single 3DS switch this would become meaningless. But they care more about not losing conversions than your security.
Which watch model?
No need to be afraid. Public transport will evolve to include small autonomous vehicles. The economies of scale you get by packing people in larger vehicles mostly have to do with the cost of fuel and staffing.

Electrical autonomous vehicles don't have a need for a driver and electricity is relatively cheap. So you don't get much economies of scale by making them bigger. Most city journeys would be under a kwh. Even at current grid pricing that's cheap.

Eventually, cheap autonomous vehicles could be mass produced at low cost and would have very low operational cost. So the ride cost would be comparable to, or lower than, current public transport options.
Apple's marketing: "it just works"

Apple's reality on Radar database: "when it doesn't work we don't have idea why and we will hardly answer back"
It doesn't look like this leak will do that. This doesn't have "algorithms" in any real sense of algorithms.
On first glance, with the routing part, it seems similar to Tenstorrent.
Well, its 2024 and things have changed dramatically.

The Federal Funds rate is now 5.25% and the 3M US Treasury bond is 5.46%. Low-risk MMFs that return near the FFR have skyrocketed to $6.5 Trillion deposits (up from 5 Trillion back in 2020 when this article was written: https://fred.stlouisfed.org/series/MMMFFAQ027S). Higher % loans have made everything more expensive: housing, companies, expansion, CapEx. Tech has had layoff-after-layoff.

And... we're still feeling kind of bubbly right now? Meme stocks just took off a few weeks ago. GME is back above $20, NVDA (less a meme but still indicative of this bubbly feeling) hit over $1000+ and launched itself into $2.8T of market cap. You can seemingly get a $Trillion thrown at you by just mentioning the phrase "AI" in your next investment.

ZIRP doesn't explain the world anymore, as we're two years into a heightened and tightened FFR. But many of these ills still seem to be around us.

----------

I don't want to test fate. I truly do hope for a "soft landing" where the Fed can clamp down on inflation while still keeping a reasonable economy. But... it really feels like a ton of people out there are still faking it and risking it all unnecessarily.

I don't know when people are going to "risk off". Be it investors, or individuals. But it has to happen eventually. The lowest-risk Cash accounts are now yielding so much (5.25%) that surely the Cash is something people should bet on now?

I dunno. It feels a lot like Will E. Coyote. The FFR has been elevated to 5.25%+ but the economy keeps running as if nearly nothing has happened. Surely we will "look down" soon and realize that there's nothing supporting this frothiness anymore?

----------

In a large sense, I don't think that people will risk-off until they're forced to. (IE: some large company goes bankrupt, taking a $Trillion in market cap with it), setting off this incredible amount of risk in our current market. Maybe then (and only then) will people wake up.

But for now, we continue to float. AMC benefits by selling new shares to all the "APEs", who are funding AMC and preventing AMC from going bankrupt. I have no hope for AMC's stock price to make more money as they are printing so many new shares, diluting the stock. But who cares? Meme it up, allow AMC to float, its avoiding bankruptcy and they think that's a win (even if it costs them long term profits through dilution). If that's not enough to get people to wake up, then we will just have to wait for bigger events to rock the boat.

We are still testing S&P500 highs this year. I'm happy for everyone and our collective good luck, but... it just doesn't smell right to me.
My thoughts and prayers for the Nickelback fans outed by this breach.
The other problem is the economics flips over once you also have to own a car. The marginal cost of each trip goes down … but if waymo is good enough for 95% of the time the it might not be necessary any more.
> It seems to be quite integrated with node when it comes to some react components like next, nuxt or whatever.

I find Next.js to be a hot mess of a framework. Sure, it's nice to have the whole convention by configuration thing to have routable pages and pass path parameters, but the way it mixes server-side rendering with everything ends up building up a gigantic mess of a JavaScript blob that blows up spectacularly when anything doesn't quite work.

To put this in perspective, vanilla React is the epitome of simplicity when compared with Next.js. Truly awful stuff.

> Is it not possible to just like include react through CDN with `link` or `script` tags and still make good use of it?

If by "include react" you mean serve the JavaScript bundle through a static file server, technically it is. However, you'd forego some techniques to prevent cross-site request forgery attacks. So unless you only want your web app do to read-only access to data, you need to implement some server-side code as well.
> The only way to move through the game is to get moving.

Why gamify children’s movement related activities? Instead of making them fun in the first place?
> child into location, behavior and health surveillance

I'd argue that children have less stake in privacy than adults. How Google knowing location of my kids could possibly affect them?
Yes consumers won but I don't understand how it's not a win for Tesla.

Every other company on Earth had a chance to make a superior system and failed. Tesla said fine use this based on ours, and they rightly recognized it was superior. Win for Tesla, win for consumers.

Nobody really lost there, either, which maybe why it doesn't feel like a typical win.
Based on what I’ve been passing the time doing post-layoff? Cooking and making music.

I wouldn’t contribute much on a greater scale, I’d just be happy making art in my immediate community, and making food for my family and friends.
Thats not how any of this works.

Also, I dont think the case against them will get very far. The only people who benefit from them not existing is criminals. If your under thee illusion that the fees TM charges go to anyone other than the artists I dont know what to tell you.

The grift isnt the price, the grift is who you blame for it.

(Edit: I dont say this lightly, I used to work in the industry, its greedy fucks all the way down).
Rapist mentality.
We are all aware of the differences, that wasn't the point.
The Multifaceted Good: Morality in Ultima 4
The Dacia Spring is the cheapest “real car” in Europe. But of course it’s made in china
"It's not clear to me why Macbooks and Mac Studio Ultras with maxed out RAM aren't selling"

Aren't these machines extremly expensive and generally not upgradable?
Let’s up the ante and fight climate change with bikes sans battery. I know this sounds crazy but there is technology that could enable us to make the leap and pedal off into a bright future.
It's probably part of it, but also overhead from small requests and latency from round trips.
It's due to inactivity, look it up. Or as WHO puts it: "Overweight and obesity result from an imbalance of energy intake (diet) and energy expenditure (physical activity)."
Citing that particular blog post isn't making the point you think it makes. To quote:

> The most striking piece of new knowledge for me was learning about failure modes. Nginx will fail by refusing or dropping connections, Caddy will fail by slowing everything down.

Do you want your clients failing to load your website at all? Is this the best approach to serving users?
I thought the solution to the tragedy of the commons was institutions: we need a 1000-year old socially-enforced tradition of shunning hoarders and assigning dishwasher duty.

Your solution sounds easier, though.
Humans are astonishingly and unreasonably good at driving. There are, indeed, a lot of traffic deaths but this is because we drive a mind-boggling amount so even a very low rate of fatalities adds up to a substantial number.

A significant portion of traffic deaths also occur in special conditions-- at night, with intoxicated persons, in bad weather.

Existing self driving cars won't even drive in those more difficult conditions.

In terms of the passenger miles driven if you compare to non-intoxicate humans the expected number of deaths for self driving cars is still below 1 if they were as safe as non-intoxicated human drivers.

Safer cars are an excellent goal but they're not automatically a given result for self driving.

> Waymos avoid many of the Uber challenges: foul-smelling "air fresheners," dubious music / talk radio choices, etc.

And introduces new ones like being dropped off blocks from your destination because the car refuses to drive on perfectly fine roads, service being unavailable in poor weather, and extending Google's tracking of everything you do online to offline.

:D

Aside, you can just ask uber drivers to turn off the radio.
To support SSL you would add a virtual host section like this:

<VirtualHost *:443>
ServerName mysite.local
SSLEngine on
SSLCertificateFile /path/to/cert
SSLCertificateKeyFile /path/to/key
DocumentRoot /app/public
</VirtualHost>

And either use a real cert or add a command to create a self signed one:

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout key -out cert
Current models can already argued to have something like working memory by storing information in little-used parts of the tokens. If placeholder tokens are handed to them that they can use as working memory, performance improves.

https://openreview.net/forum?id=2dnO3LLiJ1

https://news.ycombinator.com/item?id=40329675
Linux and office. Other than that, what does it really offer?
Peat fires, bad stuff.

But wetting the area should resolve it. Maybe with artificially induced rainfall?

Rein, G., Cleaver, N., Ashton, C., Pironi, P., & Torero, J. L. (2008). The severity of smouldering peat fires and damage to the forest soil. Catena, 74(3), 304-309.
Anything they announce causes a veritable waterfall of bandwagons. Why not announce something if you’re OpenAI, there is no down side.
If edge is the browser you use for downloading Chrome, maybe Windows is the OS you use to get and install Linux? I feel sorry for people who's employers mandate Windows or are dependent on some Windows only critical software. I know its not everyones cup of tea but its really nice over here in MacBook land. If you're not somehow held hostage on Windows, maybe drop by a store sometime and give OSX a roll? I haven't been forced to run Windows in about 10 years and I haven't missed it one single time.

Im not at all opposed to Linux either but I can run a real shell on OSX and all my scripts.sh run just the same locally as they do on my cloud Linux deployments - and thats enough for me personally.
> If you look at history, however, confiscating the wealth of the wealthy has never done much of anything to elevate the poor.

Looking at history we find that confiscating the wealth of the poor has done much to elevate the wealthy.

https://en.wikipedia.org/wiki/Enclosure
I quit. On my best day I'll never write a song like Johnny Cash on his worst.
That an interesting question! I had never seen that usage of “low-key” either.

Some similar examples found on the web:

“Astro Bot is low key one of the best Sony franchises and I’ll fight anyone who says otherwise.”

“Nitro navy is low key one of our fave colours on the Kreissage RS. What’s yours?”

“I think Flora is low key absolutely hysterical.”

“Am i the only one who thinks this soundtrack is lowkey really good?”

“Feels good, it's my first time buying a [chest] binder.... i saw reviews saying like oh i should've bought a smaller one but nope it is lowkey too small but i sure can squeeze myself into it and it looks great.”

See also:

https://www.merriam-webster.com/wordplay/words-were-watching...

https://grammarist.com/idiom/low-key-and-lowkey/

https://www.reddit.com/r/AskABrit/comments/11uizro/please_so...
That is the BabylonJS approach.
>There are some exclusions

We must not allow exceptions, it must be every single universal machine!
Is that substantially different from the 30k point "experts" on Apple's forums that just paste copypasta and deny there are any problems with their perfect hardware with its perfect OS?
I'm not judging, but how exactly does that happen? Does the spoon fall into the trash while you're discarding something and you don't want to pick it up? Or do you throw out a container and miss that it had a spoon inside?
The linked spec of wasm is written in English. Can we even say it's "formal"?

Did anyone specify wasm using something like Coq, Lean or Isabelle/HOL?
You would hope . . .

Reminds me of this lady running down the metro hallway trying to catch a train that was coming closer. I could tell she was on drugs and maybe living on the street.

As she was heading for the train now almost stopping at the station, she saw a man lying lifeless on a bench by the wall. She quickly ran over to him, shook his shoulder a little and asked if he was okay. As he grunted some sort of "yes", she then ran straight to the metro train. She just made it inside before the door closed behind her and the train left the station.

Of all the people on the station that day, she was the only one who cared about the man lying lifeless on the bench. She opened my eyes that day and since then I have been – mostly – able to follow her example . . .
If you’re ok with debugging shaders themselves outside an engine, SHADERed does an excellent job cross-platform: https://shadered.org/blog
Don't be too timid to tell them what you want. If they turn out the AC to max instead, just say "Sorry, I'm not hot I just want some fresh air."
Early internet felt more like a community. A few years ago, I came across a book that is on the same wavelength. It used to be that being connected meant you were in an alternate world from the rest of everyone; now it's kind of the opposite.

Maybe it's my age, but there was a sense of shared exploration of the unknown that I don't feel anymore.

https://www.hachettebookgroup.com/titles/jess-kimball-leslie...
I saw the email with stating that the SD Card expansion slot was in stock and jumped to the marketplace, credit card in hand to make a purchase.

Unfortunately, the page still says give us your email for a notification. Theres no per-order option for just the expansion slot as of yet.

Please make it happen, that's the last thing really important thing I need with my laptop.

Thank you for this "last laptop I'll ever buy"
The underlying assumption is that Apple is expected to port XCode to some other platform, rather than just using a third party tool on that platform like gcc or VSCode to make iOS apps.

Publish a spec and people who want to will make their own tools.
Wow the PHP is going to magically get into the binary?

/s

Yes I could build this with c-go + the PHP and statically link everything (and there might need to be a bit of prayer involved...) ... or I could just write GO and accomplish all the same things with fewer steps.

That knotted up mess is why containers are popular.
It can be pseudonymous. It doesn't have to undermine anonymity.

Google researchers spend time ensuring k-anonymity (for reasonably large k) when using data.
Because once the current safety scrutiny has passed you might get more trips done by setting the ai to be more aggressive in traffic. Then you are into VW style software updates with a profit motive and no mechanism to hold them accountable?
I think you're being unduly harsh.

The term "serverless" is broad enough that it's use here is fine.
I have a zyxel router that crashes every time when I start a jitsi call, which uses webrtc. So yes I guess webrtc can kill your connection.
Don’t know what you’re talking about. Used correctly snowflake can be as effective cost wise or cheaper for most orgs’ data needs. Compared to spinning up and down clusters of spark (and maintaining g teams to do this work or paying databricks).
woah WTF, is this what it's like in the US???

Here in the UK we don't have Japan-level super-younglings walking to school on their own etc, but you certainly wouldn't get any bother walking around at age 6 unless you looked obviously lost.

Hearing your experience is just so mindwarpingly boggling it's unreal..
> I still have nightmares about trying to set up SSL with nginx and my own self-managed certificates.

For anyone who needs to run their own CA (which I'm now doing for my homelab), I've found that using GUI software like KeyStore explorer is a sufficiently easy and lazy way of doing that, which actually works well, both for securing regular sites, as well as doing mTLS: https://keystore-explorer.org/

For what it's worth, using OpenSSL directly and automating that for more frequently rotated certificates wouldn't be quite as pleasant, yet doable.

> Shoutout to Let’s Encrypt as well for making this so much easier!

For ACME stuff, Caddy will be excellent and honestly is probably the best option out there right now!

Nginx (and certbot) or Apache (and mod_md or certbot) will get you most of the way there as well, though the route will be a bit longer.
I'm from Kerala in India and have visited a similarly named establishment in a town called Trichur https://www.thenewsminute.com/kerala/visit-hospital-kerala-t.... It's got some nostalgic value but not much more.

There's another shop which fountain pen enthusiasts might like as well. It's also in Kerala but closer to where I live called "Kim and Co.". They make pens with ebonite bodies. These don't have pistons on any other such reservoirs. You pour ink straight into the body and it stays there. Their claim to fame is that the thread is good enough so that with 3 turns, it locks and holds the ink without leaking. I have one of their pens but don't use it on a daily basis.
https://www.fountainpennetwork.com/forum/topic/304573-a-mast...

My own daily use pen is a Noodlers Ahab. The main reason I prefer this is because the nib is flexible and so you can do simply copperplate or spencerian using it. Great for headings.
I’m pro-competition, but I suspect most people will have accounts with multiple/all competitors, resulting in lots of treasure troves
There plenty of options in native APIs, the problem is that browser vendors keep ignoring 3D tooling.

The only thing that exists is SpectorJS and is barely maintained.

So you're left with having a native implementation of the 3D coding, face the challenge to differentiate between browser and web app calls, or classical print pixel debugging.

I fully agree that is crazy Khronos and browser vendors don't see this as an issue, after a decade.
I actually wonder if “tip the development team” makes sense (assuming tipping is gratuity and not because an employer pays below-living wages). Weirdly it might even lead to quality improvement because low tip areas could be detected and debugged.