skysight-inc/HackerNews huggingface dataset:
Thanks for highlighting the role of "secret knowledge" in fringe theories (I say "fringe" not "conspiracy" b/c when you look at the "lost Atlantis" thing it may be just a story (Plato probably thought so?), or a plot by the establishment to gaslight the sheeple, or else something in between—a "true" story about a forgotten civilization that few know of (well actually no, but anyway) and still fewer believe in, for reasons that don't necessarily constitute a conspiracy).

While I'm at it I might just as well recommend David Miano's YouTube channel World of Antiquity, here's a link: https://www.youtube.com/watch?v=1dHNq8SURTU to his video "LIES told by Atlantis proponents" (accidentally had this tab open. Coincidendence!??!! I don't think so!).

BTW another red flag that occurs across all these Ancient and/or Alien Civilization fringe theories is that the argumentation of the believers disparages certain groups of people, mostly non-Europeans—"they could've never achieved this level of precision, they were much too primitive".

> move straight from the "thinking" stage [...] into the "knowing" stage

I've seen this time and again, people who talk, argue and act as if it's enough for a thought to cross the mind, and it's already almost taken for granted, accepted as fact.
All other things being equal, a computer system that doesn't depend on trusting some external entity is better than one that does.

Sometimes, trusting is inevitable (e.g. SSL certificate authorities), but in this case, it was very much a choice on part of the developers.
How much the corporation pays for lobbying and if they are, or are not, based in the EU it seems.
The allegations I've seen floating around is that he deliberately withheld certain types of leaks. Thereby making Wikileaks no longer neutral, but politically-motivated.

> Is it not enough that one state committed a crime and he reported it?

It depends on what "it" would be enough for... but if he indeed actively surpressed damaging info leaked to him on par with the stuff he has released, yeah, that makes matters complex.

Another criticism I've seen is that the leaks did not do any redaction whatsoever - even when it clearly pertained to informants in war zones. For that, if the allegations are true, my view is simple: you shouldn't do that. And if you set up an infrastructure for leaking, it is reasonable to assume that you're capable of handling such an important and obviously necessary step.

So "isn't it enough?" - no, it is more complicated than that.
1. NFC tickets with embedded security are robust against replication, at least to the extent required for transit.

On 4, QRs are substantially slower to be read and decoded. NFC/RFID have a range of ~100mm and the field shape is dependent on the antenna design, however it is way more tolerant than QR using IR/laser. As for "entail staff overheads", we are talking about systems that process thousands of taps/day through single gates. Anything that reduces maintenance requirements is absolutely a priority.

As for "read/write is a bad feature", I don't really understand your point.

Ultralite RFID/NFC tickets are routinely recycled where they are used to replace old magnetic systems that have belt transports for the magnetic tickets. The read/write heads of the magnetic stripe are replaced with NFC readers but the belt transport and capture mechanisms remain.
Discussion (59 points, 7 months ago, 21 comments) https://news.ycombinator.com/item?id=38112574
Use VSCode for this. Also has three-way merge.
Once these become more common I am sure they'll adapt the interior to be more similar to the subway (plastic seats, no carpet, hard plastic everywhere) instead of having luxury car seats.
Why didn't they tell you this at the start?
A dec-10 is pretty big (at the LCM it is in a room that's something like 40' by 20'), needs air conditioning, and needs a beefy electrical supply.

Nobody really knows the market price for such a thing because very few are left in running order and there are very few people with the resources to provide it with water and hay.
I believe I used Introduction to the Theory of Computation by Sipser for this and it's probably the one textbook most universities are going to use.

Maybe for more in depth reference about the algorithms at play Introduction to Algorithms (Cormen) will complement nicely; I don't remember how much Sipser goes into describing the algos.
Something I have done for secrets is use a syntax in environment variables to tell the process to go a key vault for the secret.

So we can have

FOOPW=pw1

when testing locally, but

FOOPW="{vault1:secret1}"

in production. Env vars are processed simply by running a regex with callback that fetches secrets from vaults. This is quite flexible and has the advantage of being able to inject the secrets in the same place as other configuration, without actually having the secrets in environment variables or git etc (even encrypted)
"Let's now skip ahead a few years to the first research paper I ever worked on. With (who would later become) my PhD advisor, we found that most of the most popular Chrome extensions were vulnerable to a variety of attacks that could let us do very bad things. Over half of the extensions we studied were vulnerable to attack, impacting millions of users."

Lots of HN commenters are fans of popular browsers and "browser extensions". Maybe they just like the ones that are not vulnerable to a variety of attacks. Yeah, right.
The idea that I never see in these published papers is that (a) the software being examined should henceforth not be distributed to the public. Or even that people should stop using this software. Instead I almost always see the idea that (b) the software should be "fixed".

The power of idea "(a)" is that it stops the problems for end users. It leaves nothing for "attackers". Ideally it stops bad programmers from distributing software to the public for commercial purposes.

Whereas idea "(b)" generally keeps these bad programmers doing what they do: writing bad software and profiting from it. It might temporarily embarass them but they will continue to distribute their bad sofware to the public, for profit. (And creating more "puzzles" for people like the author of the blog post. Arguably giving these "attackers" an interest in seeing more bad software distributed. Keep those puzzles coming.)
I once heard from someone in Google's antibot department that they thought they had properly set up the disincentives so it cost more than it was worth to run bots — and then some election cycle (2016 US?) arrived and they discovered that for some purposes people are willing to lose arbitrary amounts of money.
You can but it's pretty naive. The effects of layoffs and non-fulltime employment on families have been well studied with all of the conclusions that one should expect.

I know multiple guys with wildly successful side-hustles, years-long backlogs of clients and more than enough income to exceed their day jobs and their wives absolutely will not allow them to leave their fulltime jobs because they're fearful of the risks of self-employment. These are the kind of men that put their family as their first priority.

If you're only in the business of hiring kids, maybe you're entitled to your perspective but that's not somewhere I'm looking to work.
Is this Common Lisp? `mapcar` makes me think of it but I do not know about `flow`.
not really. An API doesn’t necessarily have to be a HTTP interface. A data schema is also an API, if the documents are made available. The endpoints where that data is available is. And you still need heaps of documentation that someone needs to maintain. Not every system has simple to, from, and content fields.

I just doubt you really thought this through.
Was the village Nimbin?
WikiTargeted (2011)
I, with 5-6 years of TF experience didn’t get anything from this at all
That is the issue. If it was just a matter of a unique identifier, then a read only token would be fine.

However, for most transit, there is some form of "check in/out" (either through barriers/gates or via validation/inspection). This is combined with rules about "antipassback" (ie one user passing the token back to another to reuse), as well as "total time in system" (ie to avoid people staying in the system all day).

There are also rules that take into account entry/exit times (eg peak/off-peak), entry/exit locations (eg core/non-core zones) etc.

All of these rules require either:

a) An always online set of validators to be able to contact the backend that is maintaining the information, or,

b) a way to record the information on the token so that it is physically transported from one validation location to another.

It also is needed for inspection purposes during a trip.
This is pretty important in mathematical finance, where one moves from a real-world measure to a risk-neutral measure to make computations feasible.

https://en.wikipedia.org/wiki/Girsanov_theorem
https://en.wikipedia.org/wiki/Risk-neutral_measure
That Heraclidean one also seems interesting. At the distance of Uranus or Neptune, it makes little difference whether it actually orbit Sun or Earth
Website Scraping with Python Using BeautifulSoup and Scrapy
Isn't that the definition of a jury trial? That the opinion of the jury decides whether or not the defendant is convicted?
The cost of the extra drive time would seem counter to that kind of thing vs just serving more drives. It takes next to nothing to e.g. show a business with more emphasis on Google Maps so cheap ads for emphasizing your business are palatable for customers to buy and Google to serve. I'd expect something more like that (recommended destinations, recommended side stops) where the showing the option and getting a decline has basically no impact to the operation but you still have a chance to get the bite anyways.
Right, the EC is desperate to get that fraction of a percent of its budget from that pure, innocent, freedom-loving American company. Makes complete sense…

What is actually happening is that the American government is dysfunctional and can’t be arsed to do its job.
I was quite taken by the elision of the formation of Adobe - that particular gap informed quite a bit of my understanding of how PostScript’s choices came to be and led to a bit of rabbit hole brurrowing around the departures from Xerox.
The submission has actually been flagged by undercover FBI sock puppets who want to disappear this kind of content. At least this thought just crossed my mind, so it has to be true. It's an attmept to stop us from discssing the matter. They could've just deleted this entire thread but obviously that would have been too obvious, so they do it the sneaky way. /s
Not only will safety take a long time for technical reasons, but its extremely predictable under what financial conditions corporate execs sweep safety issues under the carpet. If Alphabet has a few tricky quarters good luck to everyone.
The usual maximum time allowed for tap->barrier open is a maximum of 450ms. That includes all read/write times for the token, display changes, fare calculations and deductions, all business rule validation (eg hotlisting stolen tokens etc).

The system I recently put in allowed for that 450ms, the time broke down to:

1) NFC comms ~100ms

2) Network comms ~50-100ms

3) Physical relays (releasing barriers etc) 100-200ms

During peak periods the usual rate expected is 30-40 passengers through a gate/minute, which includes all of the time above, plus the passengers actually walking through the barriers (usually ~2m).
> I'm not saying MS don't do shady stuff, but why single this out?

It’s an action started by Teams competitors. They have no interest in chasing YouTube. OTOH, the EC is definitely chasing more than one company, it’s all over the news. Google is scrutinised regularly.
"Rivian gets a huge cash injection" seems more like it belongs in the opposite list.
Usual requirement is <500ms from tap to passenger through the barrier, which includes not only the validation/fare deduction etc, but also the display and barrier unlock.
Stability AI New CEO and Investment
BioNTech Receives FDA Fast Track Designation for Antibody-Drug Conjugate
Thanks a lot for the input! As of now, it can just output the sets of files in json format that can be used by another program if one doesn't want to delete anything.
> Like the IDF? (Someone said that's who this account belongs to.)

We all live many apparent lives on the Internet. You’ve been on HN long enough, I’m sure, to have seen that. (My favourite was being accused of mind control. My least: someone decrying my Americanness, which as a naturalised immigrant was an unexpected sore spot.)

As an aside, it is somewhat fascinating seeing how online debate parameterises in this bipolar manner. My pet war is Ukraine, and I can remember polarising what I saw through a pro/anti lens.

> did anyone ever tell you that you write like [Mr. House] sounds?

No.
> There's no such thing as Brazilian (language). They speak Portuguese, or Brazilian Portuguese to be exact.

Yes, I know. However, I was talking more about the cultural context than the language alone.

Just like the UK and the US (and India and Singapore and Hong Kong and Australia etc) all have different cultural context, and sometimes the same words can have different meanings.
> Don't you have the empathy to see how your comment would look to people in the overwhelming majority of the world?

Oh but I do.

I was born in a country behind USSR iron curtain. I am very grateful for whatever help was provided to destroy USSR and topple russian placed dictators. (even if indirect)

A multi-polar world that you suggest was the case before 1989, and for the countries within russia's control it was hell.
Accel turns to rural India in hunt for future unicorns
A "with" statement can't redefine control structures in JS or any of those languages.

See SICP 4.1 definition of "eval", this is more like reifying "env" to the function being evaluated.
Yes, they broke this somewhat recently. Video &c. doesn't work in Chromium either.

So this means that I pull my customers into a competitor product, and they also get to hear me badmouth Teams if I find an opportunity to do so.
> If you have any questions about this Privacy Policy, please contact us:
>
> By email: Info@woc.space
> By mail: 100 Yejiazhai Road, Changshou Road Street, Putuo District, Shanghai

https://woc.space/help/legal-doc-center/Privacy-Policy.html

This could be a concern.
Uber started as off duty black car drivers doing gig work. Those were the default right? The random guy with a car gig was rolled out as uberx later?

But I'm completely with you on the unsupervised part. People doing all sorts of things back there that an ML might not identify. Now if they hire an army remotely to monitor, I guess that could scale because of wage disparities.
Sure, but with open-source software and a third-party support contract, if you get mad at the support vendor, you can get a contract with someone else without having to change your software stack.

I don't see how tying yourself to a single vendor is advantageous at all.
The point of the disposables is that they use the same technology (NFC/RFID) as the more robust long term multi-use NFC cards.

So if you're replacing an existing magnetic system, you can reuse the magnetic transports (belts/motors etc) for single use, including capture-at-exit and recycling for single journeys, while also adopting the NFC for multiple use.
I had a simple trading structure that I summarized from a few sources. Curious what you might think of it.

1. Filter all underdog stocks.

2. Have a catalyst detector - e.g. OpenAI announces new model. Link that to NVIDIA, MSFT, etc.

3. Among these stocks, when you see a marubozu break through the previous resistance point, buy the stock. Then sell it near peak. (Need a peak detection algorithm)

The trick is having all three work fine. But it's easier to debug and test when one doesn't work if you break it into parts. You also don't need one really good methodology, you just need a few decent ones.

Or you could find similar patterns that can be broken down into small parts and do those too.
Why would it be illegal to enter on yellow? I thought that's the entire point of yellow. Otherwise we'd just have red and green, and hopefully you can imagine how that would work out.
...if your idea is to push the market so that Teams is an open standard and protocol, this might have relevance.
On the flip side, your comment is "Thank You Sir May I Have Another?"

If no one complains, not even the entitled who have some power, then the screws continue to tighten down.
Boring. There was/is a Linux dock which was main demo of a physics engine. We could toss icons which would bounce off screen corner and land in some part of the dock. You never know what order your icons are in.

Dont forget to notice how old the video is: https://www.youtube.com/watch?v=rSZtTo1lXP8
And you don't think that what happened to some folks that said/did stuff that displeased the US and UK rulers might have a similar effect on their population? Like, for example, what happened to Julian Assange?
When I was younger - and the limit for transporting 10 packs of cigarettes were higher - it was considered impolite to not tell your friends who smoked, when you were making a trip across the border. Even families of non-smokers regularly imported great amounts of cigarettes for their friends and relatives who smoked.
I’m sorry he had to admit guilt, but I see how it was necessary for the US to finally give up this insane battle.

I honestly can’t believe we’re living to see Julian walk free. I’m not certain he can either.

Go home and finally get some rest you poor sod. You’ve earned it.
The time to process a payment at a retail outlet is ~1s+, the time required for public transport is usually <0.5s including mechanical release of barriers etc.

QRs are dramatically slower than NFC.
In theory, yes. In practice judges in Civil Law systems also tend to let themselves be guided by precedent.

(Conversely, in Common Law precedent crumbles before a judge sufficiently motivated to find reasons why the case before her differs enough to warrant a new judgement. Often there are even multiple precedents to choose from, depending on which features of the case you want to emphasise.

Identifying a precedent is like find a metaphor or analogy.)
Check out P5js and Processing, maybe those scratch the itch?
I have not, partly because the most recent build I've found is still Android 9.0, which uses kernel 4.x, while the Radeon 780M in Minisforum V3 requires at least kernel 6.4.

I have tried Waydroid, but the lack of full USB passthrough means I cannot login to my Google Account (due to Advanced Protection; and U2F doesn't work over HID forwarding) so I didn't test it further.
> it's usually not the same version of the library that was expected by the developer of the script

If the developer of the script is targeting that platform, it is exactly the expected version.

Perhaps you should stop using libraries that break API compatibility very often, since it's an indicator of low skill of the authors.
"Inspired by the simplicity of Homebrew and npm" had me until here :P
NFC tickets have "antipassback" features, eg, stores the last tap so you can't "toss your ticket to your friend behind you".
A known-good configuration, sold by an OSS support/services company.
>There’s a whole class of security vulnerabilities that let you read from arbitrary files on the filesystem.

This is maybe putting the cart before the horse a little bit. The reason there's a class of vulnerabilities that allow arbitrary read is that we've, as an industry, decided that we classify file access as a vulnerability. It's not that file access is somehow materially different or easier from any other security issue, it's just that we set that as one of the goals of an attack.

If you decide that an attack is successful when it reads a file, then you'll obviously get a clustering of successful attacks that read files.
> The economy stagnates, more and more people live in poverty

If the only way to sustain that was to starve people in india… perhaps it is good to learn how to survive on one's own means instead?
Secrets are nasty and there are tradeoffs in every direction.

Environment vars propagate from process to process _by design_ and generally last the entire process(es) lifetime. They are observable from many os tools unless you've hardened your config and they will appear in core files etc. Secrets imply scope and lifetime - so env variables feel very at odds. Alternatively Env variables are nearly perfect for config for the same reasons that they are concerning for secrets.

Tl/Dr; in low stakes environments the fact that secrets are a special type of config means you will see it being used with env vars which are great for most configs but are poor for secrets. And frankly if you can stomach the risks, it is not that bad.

Storing secrets on the filesystem - you immediately need to answer where on the filesystem and how to restrict access (and are your rules being followed). Is your media encrypted at rest? Do you have se Linux configured? Are you sure the secrets are cleaned after you no longer need them? Retrieving secrets or elevated perms via sockets / local ipc have very similar problems (but perhaps at this point your compartmentalizing all the secrets into a centralized, local point).

A step beyond this are secrets that are locked behind cloud key management APIs or systems like spiffe/spire. At this point you still have to tackle workload identity, which is also a very nuanced problem.

With secrets every solution has challenges and there the only clear answer is to have a threat model and design an architecture and appropriate mitigations that let you feel comfortable while acknowledging the cost, user, developer and operator experience balancing act.
This reminds me of a Lara Croft desktop(?) Screensaver? She climbed onto the window's edges -that were open on your windows screen, rolled, jumped, etc. Sometimes made a comment about you not having cleaned up your desktop.
It was a small executable, than ran with or without sound. It wasn't very random, but it made for an interactive mind distraction on a rough day.
She also walked across the bottom of the screen, out to the right (eg), then you would hear her walking, and eventually she would show up on your left of the screen.
Fun little thing with no particular purpose.
Well, and Hitler was a vegetarian. What's your point?

Btw, do we have any sources / evidence for whether the confederacy only believed that specific point for the specific question of whether the states or the union should decide about slavery?

Or did they also have differences in opinion from the northerners on eg the role of municipalities and counties in educational policy or monetary questions etc?
My takeaway from this, along with other deaths I've witnessed, is that nothing you've accomplished in life matters after you die.

I don't mean that it's hopeless, of course. Just that we should prioritize living life to the fullest rather than caring about what comes after. Those left behind will figure that shit out, whether you like it or not.

Go have fun with friends and family, ain't nobody got time for the afterlife.
Taiwan too.
i wonder if there is a mathematical proof that future AI can never respect wordpress due to infinite history of bad press
> You're focusing on what Alaxandre said about race, [...]

I'm specifically interested in the (cultural?) translation into American English of what was said originally.

I have no beef with the judges statement itself.
https://github.com/nate-parrott/ball/blob/main/Ball/DockUtil...