skysight-inc/HackerNews huggingface dataset:
To be clear: Waymo can take you to basically any address in those city limits, but it doesn't do so by taking the freeways like 101 and 280 that pass through it.
Wouldn't work in this case because the whole selling point of polyfill.io was that as new features came out and as the browser grew support for new features the polyfill that was loaded would dynamically grow or shrink.

Something like `polyfill.io.example.org/v1?features=Set,Map,Other.Stuff` would _shrink_ over time, while something like `pollyfill.io.example.org/v1?features=ES-Next` would grow and shrink as new features came and went.
Oldest ever US organ donor believed to be 98-year-old man
It absolutely would work if the browser validates the SRI hash. The whole point is to know in advance what you expect to receive from the remote site and verify the actual bytes against the known hash.

It wouldn’t work for some ancient browser that doesn’t do SRI checks. But it’s no worse for that user than without it.
It's because it's not magic, someone has a microsoft account named no@thankyou.com that has enough sign in attempts to be disabled. I bet you could also do any other email address that people commonly use as a fake.
Also an actual monopoly (windows OS).
So any web app that runs on multiple nodes reinvent k8s? I'm not sure about that.
Crowd clapping on the 1 and 3 is a nice confirmation that the crew has zero fucking rhythm.
Good news for 100% clean energy. Geothermal has arrived
The article states that the PPE expired. There's also the cost of storage and distribution.

Note that the US NIOSH labs tested out expired N95s and found them to work as well as new ones in terms of filtering capability - the main issue was strap damage.
Oooft. I didn't realize it's one that dynamically changes it's content.
https://archive.ph/pIQN7
He testified against them. At this point he is complicit.
It's amazing to me that anyone who tried to go to a website, then was redirected to an online sports betting site instead of the site they wanted to go to, would be like "hmm, better do some sports gambling instead, and hey this looks like just the website for me". This sort of thing must work on some percentage of people, but it's disappointing how much of a rube you'd have to be to fall for it.
Is much known about the science behind Waymo? I am impressed that the cars can operate autonomously in real life when I see them around me. At the same time, they have an enormous number of sensors like multiple spinning LIDARs (?). I also read that they have to map everything ahead of time to be able to operate in an area. That seems a bit like cheating to me. It may work and may even be valuable to customers, but it doesn’t seem like as big a breakthrough as achieving autonomy with the same sensors as humans.
Chefs keeping copies of the recipes they came up with for their employers, screenwriters keeping scripts, authors keeping early drafts, musicians keeping sheet music, photographers keeping prints (if not negatives), any job where someone is expected to keep and maintain a portfolio
They say that true leaders are born and not created. Forbes maintains that leadership can be taught and learned. Still, some people are more likely to learn or acquire the talent for leadership than others because the predisposition to lead is significantly amplified by some qualities already manifested early in life and on which there are stable and significant individual differences.
> random parents with no teaching background can usually deliver a child through a k-12 curriculum with superior outcomes vs. the average public school.

This is not what actually happens. For example, the parents who actually do this are not random.
Can't do that with this one because it generates the polyfill based on the user agent.
I still use StackOverflow 99% of the time for my code issues.
#micDrop
That's cool that you saw my presentation!

Re: Flutter (and other native support) it's something we've thought a lot about (Flutter specifically comes up often) but we decided to focus on pure-Typescript to start because it's a big enough market (I'm personally a big believer in the future of PWA's) and we know we can make the best experience by focusing on it. I do think that we'll eventually make something more platform agnostic but not sure when that will happen.

Re: ElectricSQL & Supabase: both teams are obviously very talented and thoughtful and, I believe, will continue growing in the SQL space which is the most fundamental difference between our approaches. I think Triplit can make the best experience for developers by avoiding SQL and think there's undoubtedly room for both philosophies.
Thanks for your input, let me comment on your points one by one.

> However things like helmfile with renovate paired with a pipeline is my personal preference even if just for ensuring things remain consistent in a repo.

Glasskube packages can also be put inside a GitOps repository as every package is a CR (custom resource). (They can even be configured via the CLI using the `--dry-run` and `--output yaml` flags and than put into git. In addition we are working on pull request to support package updates via Renovate: https://github.com/renovatebot/renovate/issues/29322

> The package controller reminds me a lot of Helm tiller with older versions of helm, and it became a big security issue for a lot of companies, so much so that helm3 removed it and did everything clientside via configmaps. Curious how this project plans on overcoming that.

As helm3 is now a client side tool only, that means that it can't enforce any RBAC by itself. OLM introduced Operator Groups (https://olm.operatorframework.io/docs/advanced-tasks/operato...) which introduces a permissions on an operator level. We might introduce something similar for Glasskube packages. Glasskube itself will still require be quite powerful, but we can than scope packages and introduce granular permissions.
It's clear to me many of the European colonies post & during Monarchal Empires were exploited. But Korea, Japan, Taiwan, Phillipines, Germany, and a lot of the places that were sorta "vassals" of the United States faired well off-ish. I see a lot of examples in history where the United States actually played hardball with the colonial powers of Europe post WWII siding with the exploited more, forcing concessions on the European powers.

Not that the United States isn't flawed or doesn't do hypocritical or unilateral diplomacy (Israel or anything related to communism, & I guess installing/supporting dictators that support US interests), but is it too much to ask if you can provide me a few examples where the US acted like an exploitative colonial power that hindered developing countries (at least in the past 80 years)?
Except that they have remote humans monitoring every vehicle so the whole thing is an illusion and we don't know the truth of how safe truly autonomous vehicles are (since they don't exist.)
I don't believe that property taxes are a good thing either. In 3 years, my own property taxes alone have increased my mortgage payment by close to 30%.

I think we'd be better off with exchange taxes. Every time assets, securities, currency, etc is exchanged... it gets taxed. This includes stock trades. Property taxes are a way to make people not actually own their property.
So glad I removed polyfill as soon as all that nonsense went down a few months ago.
How 3 EDMO Hubs use XWiki to fight disinformation
So what if it's not new? That doesn't really make it better.
An author rewriting another edition of his own work is not the same as deceptively presenting an unoriginal work as being genuine.
Is a non-US citizen culpable for publishing US secrets?

In sincere good-faith: is there even a US law about publishing the names of undercover informants? Isn't that what Dick Chaney and the New York Times did?
4 hours ago | 79 comments: https://news.ycombinator.com/item?id=40789411
Their point is that the result changes depending on the request. It isn't a concern about the SRI hash not getting checked, it is that you can't realistically know the what you expect in advance.
The CDN in this case is performing an additional function which is incompatible with SRI: it is dynamically rendering a custom JS script based on the requesting User Agent, so the website authors aren't able to compute and store a hash ahead of time.
Genuine question ->

- Elon (and his pro-analysts) heavily weight the future of the co's valuation on their ability to deploy a taxi network and has been promising it just around corner for years

- Alphabet via Waymo seems to have "solved" robotaxis for city-proximity driving and has deployed as a business.

Beyond the obvious "reality distortion field" argument is Tesla actually in a position to win here due to their manufacturing capability / current deployment of Tesla's?

Disclaimer - I am an Alphabet & Tesla shareholder
Remote shell to a Raspberry Pi at 39,000 ft
Assembly Theory of Binary Messages
Bill Gates seems like a prime option.
I edited to make my comment more clear but polyfill.io sends dynamic polyfills based on what features the identified browser needs. Since it changes, the SRI hash would need to change so that part won't work.
What part of the US government or its decision-makers spent 10 years stewing in prison for bribing Afghans to expose themselves to that same risk of death, or straight up killing many more Afghans for no other reason that they happened to be at the wrong place at the wrong time? Does the US government have some special natural right to toy with the lives of Afghans that Assange does not have?

Unless you believe it to be so, it seems quite strange to assign any significant share of the blame to Assange for any hypothetical deaths that may occur as a result of him taking actions to reduce the US government's ability to kill people abroad, akin to blaming police who stop a hostage-taker because this might have prompted the hostage-taker to kill the hostage but holding the hostage-taker himself blameless.
Automated Tests would have fixed this
You can use an Android phone without a Google account, and sideload apps without the app store.
The problem is that big companies are distorting competition simply due to their size. Smaller companies cannot compete. Startups are mostly doomed. How can they compete when a bigger player can copy their innovation, bundle it, or sell it at a loss, or for free? You can’t afford to sue them. You may note ven prevail given their ownership of numerous patents. There is no fair competition if these companies are not broken up. Or in the least, they need to be taxed differently.
That's a little weird for a bag designed to hold biodegradable products... have you tried other brands?

I buy mine from Costco and they easily last 2-3 days (the amount of time it usually takes for the pail inside my house to fill up). I take care not to dump wet items in, though not exhaustively so, e.g. coffee grounds are OK, sauce and liquids go down the drain.
Nobody knows the details, e.g. how many humans are monitoring per car. It came out at one point that Cruise was using >1 human per car. What is Waymo doing? We dunno, we just keep seeing these absurd puff pieces.
> self-host your dependencies

I can kind of understand why people went away from this, but this is how we did it for years/decades and it just worked. Yes, doing this does require more work for you, but that's just part of the job.
Probably those auditors following playbook from 2008. Using ..VPN, AD, umm pass.
The C spec only requires that integer constant expressions that have zero value are nullptrs. The moment you assign it to an int variable, it's no longer a constant expression as far as the language is concerned, so if you then cast that int variable to a pointer, the result is indeterminate.

(Note also that in C, unlike C++, "const" really means that it is read-only, not that it is a constant expression, so that doesn't change anything.)

However, even if the resulting pointer is not a null pointer, dereferencing it is still UB unless it points at a valid C object. So if the compiler can statically prove that for this architecture, there's no valid C object at that address (e.g. because the compiler itself never produces code that would result in objects placed at that address), it can still treat it as UB, same as dereferencing a literal 0.
The first time a user, who uses a phone, open a website through an ads ( google ads or facebook ) with this link, it will redirect user to a malicious website.

The request send to https://cdn.polyfill.io/v2/polyfill.min.js needs to match the following format:

Request for the first time from a unique IP, with a unique User-Agent.
User-Agent match that of a phone, we used an iphone's user agent ( Mozilla/5.0 (iPhone14,2; U; CPU iPhone OS 14_0 like Mac OS X) AppleWebKit/602.1.50 (KHTML, like Gecko) Version/10.0 Mobile/15E148 Safari/602.1 ).
Referer from a reputable website that installed polyfill.
Accept /
Accept-Encoding gzip, deflate, br, zstd
Delete all cookies

The request will return the original polyfill code, appended with a piece of malicious code. This code will make a run javascript from https://www.googie-anaiytics.com/ga.js , if the device is not a laptop. You can reproduce this multiple time on the same machine by changing User agent gently, (ex: change Mozilla/5.0 to Mozilla/6.0). Sometimes the server will just timeout or return code without the injection, but it should work most of the time.

The javascript on https://www.googie-anaiytics.com/ga.js will redirect users to a malicious website based on some condition check for a number of conditions before running ( useragent, screen width, ...) to ensure it is a phone, the entry point is at the end:

bdtjfg||cnzfg||wolafg||mattoo||aanaly||ggmana||aplausix||statcct?setTimeout(check_tiaozhuan,-0x4*0x922+0x1ebd+0xd9b):check_tiaozhuan();

The code has some protection built-in, so if it is run on a non-suitable environment, it will attempt to relocate a lot of memory to freeze the current devices. It also re-translate all attribute name access with _0x42bcd7 .

https://github.com/polyfillpolyfill/polyfill-service/issues/...
That may vary by location.

The Aldi I usually go to has staff that are so ridiculously efficient that there are nearly zero empty boxes on the shelves, and the rolling "box cage" is nearly always tucked away somewhere unseen unless they're actively using it.

This isn't a complaint. It's a nice place to shop, and the stock is always very orderly compared to some other locations.

But GFS? They've got boxes at the checkout. I think the expectation is that the customer is supposed to box their own stuff, but they always do it for me if there isn't a line.
I'm not sure how that "conventional violent response" would work.

Russian military doctrine includes nuclear first strike when there's an "existential threat" to Russia, even if that threat is from conventional military attack. If Russia can use nukes against Ukrainian army entering the Russian territory, then for sure it would use them against NATO troops doing the same.

Also, in such a dire situation, Putin and other Russian leaders are crazy enough to use not just tactical nukes but to start full scale nuclear war without any hope of winning, just to "go with a bang".
This research goes into a lot of new details relating brain structure to cognitive fuunction, which I'm sure is ground breaking. But the ability to identify gender by examing the anatomy of a brain is not a new phenomenen. It's been true for decades.

> Men and women are turning out to be different

? Did anyone ever really think otherwise?

It's really sad that people are latching onto to social stigmas, like whether one wears a skirt or a business suite, and infering from that, that their physical bodies are "wrong".

The only thing wrong is monkeys mistreating each other. Correcting that doesn't require any surgery, but somehow seems much farther out of reach.
> The record of humanity’s management of the [nuclear] weapon — imperfect and, indeed, dozens of times nearly catastrophic — has been remarkable. Nearly a century of some version of peace has prevailed in the world without a great-power military conflict.

This is so offensive. I am infuriated. The last hundred years has been anything but peace for Middle East. You can continue not caring from SF.
You realize that I am part of the standard's committee? ;-)

I am programming C because Python is too slow for my use case (and too annoying and to unstable) and yes, I use C's integer types as an abstraction for mathematical integers. And I would say this is the case in almost all C code I see and most programmers I talk to. How would two-complement's wrapping for int be useful for anything? It does not model anything useful IMHO.

And the problem with compilers not optimizing is that people want them to optimize... Compilers not being able to to do this as well anymore would indeed be an actual problem for many people.
He helped reveal far more serious crimes committed by US officials -- none of whom faced any consequences.
I think the general principle people are operating out of is that: The USER should be the one deciding 1. what gets installed onto their computer, 2. what gets run on the computer and when, and 3. the configuration of their own system. The OS vendor should not be deciding these things, nor the manufacturer of the computer.

It's not enough that we can just ignore or correct these things that are just happening on our own computers without our consent. These things should not be happening to begin with.
Does the superb bus of Ray Conklin, president of the New York Motorbus Company in 1915 have plastic windows? I guess cellophane dates to 1912, but that's pretty wild to see in a photo from 1915.
Does this person telling us not to use polyfill.io, and the guy who sold polyfill.io to the chinese company both work at Fastly? If so, that's kind of awkward...
The code the programmer wrote is used and turned into (compiled) into a product and those downstream products are used as tools, but for the writer, it's the writing itself that's used directly and published and publicised. If, as a programmer, I'm working on an Open Source project, who keeps the code when I switch corporate masters?
This. Apple won so disproportionally that the the best low-end tablets are old iPads.
I can’t believe the Financial Times didn’t secure the domain for the project. They backed it for a long time then dropped support of it.

I wonder if the polyfills themselves are compromised, because you can build your poly fill bundles via npm packages that are published by JakeChampion
The same thing happened to another one of Paul’s wacky passion projects, the Cinerama theater. That ended up being taken over by the Seattle Film Festival after being shut down for a few years.

My impression is that Paul died somewhat suddenly and simply didn’t make arrangements to keep these things going. His sister is not interested in them so she’s winding them down.

It’s too bad he didn’t set up some kind of endowment before he passed. Maybe he didn’t want to or maybe he just didn’t get around to it.

I wonder what will happen to MoPop/EMP. AFAIK that’s always been a financial black hole.
Sigstore is doing a lot of interesting work in the code supply chain space. I have my fingers crossed that they find a way to replace the current application code signing racket along the way.
Microsoft Surface Copilot PCs are now the most repairable in the market
My personal bit of hubris is feeling like I create interesting bugs in spite of the tools available. Lots of "compliance is not equivalence" lessons to identify and hopefully learn from, for example.
By the same argument, let's lengthen it to 1000 years, right? Someone can still archive it until it falls into the public domain!

I think saying that duration isn't a factor is oversimplifying the issue. We'd be relying on multiple independent archivists to all hold individually-obtained copies of the data for nearly 100 years, and none of them would be allowed to transfer the data to anyone else. That's a very different scenario to one where the data were freely mirrorable after 24 years.
It was in Belarusian govt news at the time where they openly bragged about getting the cables. Really really doubt they wanted to frame Assange for anything as just as Russians they are entirely sympathetic bunch.

Notice also how I never said "Assange gave cables to KGB" but that his buddy did. Are you going to bicker over whom Shamir got the cables from?
The source was Declan Walsh, who was a journalist for the Guardian and now the NYT.
Money is a proxy for life and time. If my money is used to hurt someone, that means the product of my time and my effort was used to hurt someone. That makes me angry.
> Snowden's leaks were far better handled.

And didn't lead to any change.
> The sole possession of hardware, software or other tools that can be used to commit cybercrime can constitute a criminal offence according to Sec. 202c of the German Criminal Code.

https://iclg.com/practice-areas/cybersecurity-laws-and-regul...
Own your process – at best that CDN is spying on your users.
They have been slowly expanding service in SF for several years. Tens of thousands of people have taken a ride. Actually, they give more than 10k rides a week, so probably over a hundred thousand people. Scaling up to the whole city (pop: 800k) is not that big of a jump.
They are saying that because the content of the script file is dynamic based on useragent and what that useragent currently supports in-browser, the integrity hash would need to also be dynamic which isn't possible to know ahead of time.
I added a ublock rule on mobile to exclude this domain

||polyfill.io^

Any other practical steps that mobile users can take?
Fun fact: western ride sharing apps don't work in South Korea, and this company also makes the leading rideshare app in the country.

I was forced to make an account on the mobile chat app in order to log into their rideshare app, on a recent trip to Seoul. The UX was not great... not to mention that it was mostly in Korean. I had a lot of trouble. They didn't strike me as the most professional operation..
There's potential there. You only need to store part of the chain and there's an incentive to keep rare blocks.

But the mining is optimized for storing as big of a fraction of the chain as possible, so I worry that the future of it devolves into a few big nodes and everyone else dropping out.
Amazon is working on a ChatGPT competitor
Computer science, state university.
Perhaps you mean „man“ in German which means „one“. „Mann“ literally refers to a male person which doesn‘t really make sense here.

Both are pronounced identically.
There's a point to be made that these silly little shows are what let Google promote a self-image that they are some ineffectual, twee organization like a local art collective, and it's this mild image that let's Google manufacture spyware without more intense scrutiny. It's subterfuge, and two sides of the same coin.