skysight-inc/HackerNews huggingface dataset:
This is really, really cool! Definitely going to share this around, I love tools like this. They bring so much visibility into dark spaces.
apparently i misremembered; papermaking and ink are on the list, but not printing or movable type

from http://images.mofcom.gov.cn/fms/202312/20231221153855374.pdf

4

造纸和

纸制品

业

082201J 造纸技术 1.宣纸的生产工艺

2.迁安书画纸的配方及生产工艺

also, item #6 is gunpowder; i think the chinese government wanted to remind the so-called west that all their wars have been fought with chinese technology for centuries
Shh! Don't remind Bill Gates of his famous last words!

https://www.google.com/search?q=640kb+ought+to+be+enough+for...
I saw a post on X a few days ago from a hiring manager. She had recently filled a job posting for a senior engineer, and had received almost 650 applications. I asked her how many of them were juniors, and she said only about 120.

That's 500 senior engineers to compete with, and in this kind of market you're going to see more and more of these unfair hiring practices. If you need 10 interviews to assess a candidate, something is wrong with you.
I mean in a 6 digit code there's over a 50 percent chance you'll have one double, you're using 60% of the available characters in any one return.
THE problem with Authy in my humble opinion isn’t just that it’s an obnoxious proprietary app I shouldn’t need — it’s that it forces you to accept SMS as a get-out-of-security-free card. Being able to get a reset text to your registered number (and you MUST register a number, of course) unlocks all your OTPs for the attacker (who slipped some teenaged phone salesman $50 or a fake ID to swap your sims.)

SMS is cancer to security and I won’t use any system that forces me to accept something so easy to exploit as proof of my consent.
I had a customer offer me a pill once while touring his warehouse along with a stick of gum (said it kicks in faster). In about 15 minutes, I was shocked they give this stuff to kids. It's very close to meth.
I agree with this point. I'm left as well and 'our' side often gets complaints that we don't unite enough to stand against populism and extreme right that is on the rise in the EU (as now France and the Netherlands have fallen to the extreme right).

However, that is a lot harder to do if you have actual ideals and care about what you're saying. For populists it's easy to unite because they don't care about what they scream. They just shout whatever people want to hear, they don't actually care about it. We do believe in what we are saying. And real solutions are actually hard and require a lot of thought. Empty promises and blaming minorities for everything are super easy. It will obviously not lead to actual solutions, but this is the extreme-right game, they will constantly look for another minority to blame and focus hate on.

At least in the Netherlands we do have coalition politics so one party does not have to have a majority, small parties still matter. And I'm sure the current government will implode soon as they couldn't even stop fighting each other during their own inaugural debate :)
> what is the point of re-starting this now I've gone through the hardest part of getting off it?

Wait, what? Withdrawal is the hardest part? Not, you know, untreated ADHD?
Also, when they switched things in 1582:

https://www.britannica.com/story/ten-days-that-vanished-the-....

> The most surreal part of implementing the new calendar came in October 1582, when 10 days were dropped from the calendar to bring the vernal equinox from March 11 back to March 21. The church had chosen October to avoid skipping any major Christian festivals.
My somewhat naive understanding was that random UUIDs were not that big of a deal in Postgres because it does not cluster by primary key. And of course a UUID (16 bytes) is larger than a serial (4 bytes) or bigserial (8 bytes) by a factor of 2-4 . This certainly might matter for an index, but on a whole table level where you have 20+ bytes overhead per row this doesn't seem that big of a deal for anything except very narrow tables with large row counts.

So far my impression is that there are a whole lot of other things I need to worry about in Postgres before I spend time considering serial vs. random UUID vs. ordered UUID. Am I wrong here and this is something that really matters and you should invest more time in?
RPKI/ROA does not solve BGP hijacking [1]: "Even with RPKI validation enforced, a BGP actor could still impersonate your origin AS and advertise your BGP route through a malicious router configuration."

It also would not have prevented the bulk of this issue (as the next AS Path was "1031 262504 267613 13335", and would have been accepted by RPKI) so I am confused why Cloudflare claims it to be the solution. Perhaps Cloudflare's own engineers forgot that RPKI is still insecure?

[1] https://blog.cloudflare.com/rpki-details
Also testing using postgres-native uuid generation
How I swapped my ivory tower for the world of science fiction
Why would you have a wrapper around every primitive/standard library type?
The main reason I didn't use Authy was that it requested phone number when signing up, and it didn't make any sense to me why they'd need it. Since then, I've been using 2FAS, since there's no personal data that can be leaked.
5 rounds on different days?
Agit-Flow and Git-Repo
Not sure why you think someone mentioning an ileostomy would be unfamiliar with colostomy bags.
All bugs are considered bad practice, yet they keep happening :P
DJI announces an electric mountain bike drive system
When you think of the significance of being able to break encryption like this, it stands to reason that tech that achieves these capabilities would be born secret.
Must be pretty cool to live in the US!

The 12TB listing shows up to me as "Currently unavailable", whereas others show up as more expensive, so instead of 66 USD for a 4 TB HDD I instead get 172 EUR on amazon.co.uk (Seagate Enterprise ST4000NM0035). The prices in the post above were from an e-commerce store in my country, so those are also different from Amazon's in some ways.
Guess it depends on what is meant by "norm". Have I ever had 10 rounds before? Yes. But the vast majority of companies don't have that many interviews.

If I had to say a typical norm (from initial screen to offer letter, in terms of number of different people I spoke to) I think I'd say, like, 4-6.
https://archive.is/2024.07.03-033502/http://sdomi.pl/weblog/...
What event do you have in mind that very badly affects your location but not those cities, and you don't realize driving there is a good idea until a day or two after the event?
Having to delete the default constructor means it’s opt-out, not opt-in
I was hoping for allow importing Authy secrets, has anyone sucessfully "taken" the backup out of the app and imported in other tool. As security measure the secrets only live in Authy, but thats when I cannot move out when I want.
Yeah, that's valid.
> we should have simply started counting centuries from zero

Latin, like Lua, is 1-indexed.
It’s absurd to complain about abstraction. Hardware will continue to leapfrog the pace of software innovation and things will keep getting better.

Sure layers of abstraction is leaky and has their issues, but I don’t want to write a hipster language in a hipster editor. If you enjoy that, great.

Also, it’s easy to look at the past with rose tinted glasses. Modern softwares are bloated mess but still a million times more productive.
That’s fantastic you can optionally self host. Well done!
Additionally, iOS 18 will introduce a Password app making the functionality easier to discover. People are still surprised to learn that iOS has built in TOTP support, but it's just buried deep in the settings.

BTW, there's a hack you can do to create an iOS Password app in iOS 17 and below by using Shortcuts to launch the deep linked setting directly.
Don't worry. The word on the street is that a red-hot startup is shortly launching a terminal with a petabyte of memory attached to it.

(They patented an innovation called hardware attached to software, instead of the traditional software attached to hardware.)

That should easily suffice for many instances of bloatware, er, Electron apps running in tmux tabs.

Hybrid apps FTW!
I volunteered as a crisis counselor: was trained in crisis counseling, and then thrown on phone lines for hundreds of hours. I use those skills every day in work and my personal life.

The three biggest parts that I learned and got good at, which have come in really handy are: reflective listening, non-directive communication, and not asking "why" questions.

Reflective listening is repeating back what the person is saying to them. It's definitely more art than science, since if you do it too overtly it just feels cheesy and not genuine. But done subtly and well, people open up in really noticeable ways.

Non-directive communication means not telling people what to do. That doesn't mean you don't have opinions about the situation or that you don't push them towards a decision... it just means that your role is to be a sounding board. If someone comes to you saying "My partner cheated on me", the response many people have is "dump them!" -- but you're not living their life, you don't know all the complexities of the situation even if this is your best friend. So, instead of "dump them", a series of questions can often help someone through the situation and leave everyone feeling more seen and heard ("What happened? How are you feeling about that? What do you think this means for your relationship? What would have to happen for you to trust them again? How would you feel staying with them? breaking up with them?" etc)

Not asking why questions is difficult, but once you get the hang of it it's really easy. "Why" questions are almost impossible to say without there being some tone or judgement. "Why did you do that? Why did that thing break? Why didn't you tell me that?" You can often rephrase the question to a more neutrally worded question (sometimes they also sound judgmental, so tone and context matter a lot): "What were you hoping would happen? How did you see this playing out? What do you think led to the system breaking? What can I do differently to allow you to feel comfortable sharing?"

Ultimately it all takes practice, and fundamentally you need to have the time and space to be a good listener. If you only have 2 minutes between meetings, then you're probably not going to have the capacity to listen to your friend talk about their divorce or health scare. But ultimately people like talking about themselves while feeling safe-- so anything you can do to create and encourage that environment will cause people to feel like you're a good listener.
I think you actually just agreed with them.
What is the source of your knowledge of this issue?

Why should anyone let your opinion influence their own opinion?
> No, I'd argue it's much more common for there to be flaws. They're just not obvious. They're random crap like my phone continuing to vibrate after I've answered the call until I get another call or text.

This is kind of what I'm talking about. The absolute massive complexity within your device that you and billions of people to seamlessly make calls from anywhere in the world to anywhere in the world with devices made by all different companies using infrastructure made by all different companies and it all works so incredibly well that we mostly take it entirely for granted.

But yes, sometimes the phone doesn't stop vibrating.
Great report.
life in the 20s is weird.
Considering their 1.1.1.1/32 advertisement was a RTBH (Remotely triggered blackhole), it is likely they advertised the route automatically as a result of DDoS.

It is common for ISPs to blackhole (nullroute) an IP address that is experiencing DDoS to protect the rest of the network. In this case, they were learning this route from a peer (not a customer), and should not RTBH under any circumstance, but that boils down to a misconfiguration.
In Icelandic the 1-based towards counting is used almost everywhere. People do indeed say: “The first decade of the 19th century” to refer to the 18-aughts, and the 90s is commonly referred to as “The tenth decade”. This is also done to age ranges, people in their 20s (or 21-30 more precisely) are said to be þrítugsaldur (in the thirty age). Even the hour is sometime counted towards (though this is more rare among young folks), “að ganga fimm” (or going 5) means 16:01-17:00.

Speaking for my self, this doesn’t become any more intuitive the more you use this, people constantly confuse decades and get insulted by age ranges (and freaked out when suddenly the clock is “going five”). People are actually starting to refer to the 90s as nían (the nine) and the 20-aughts as tían (the ten). Thought I don’t think it will stick. When I want to be unambiguous and non-confusing I usually add the -og-eitthvað (and something) as a suffix to a year ending with zero, so the 20th century becomes nítjánhundruð-og-eitthvað, the 1990s, nítíu-og-eitthvað and a person in their 20s (including 20) becomes tuttugu-og-eitthvað.
It is pretty hard to subtract a signal like that, if it’s really just signal C=A+B then maybe if you have exactly B you can get A back from C, but with microphones picking up radio or something like that? No shot
I’m unsure of the correct terminology here, so let me start by saying that I mean no offense whatsoever.

I wish there was a bit more information around the severity of the disorder in this person. Here’s what I saw from the article:

> The pathology which this individual suffered resulted in highly disabling symptoms, including, at the very least, complete deafness, severe vertigo attacks and an inability to maintain balance

In my own experience, people with Downs can have a wide range of life experiences. I have a couple of cousins with the diagnoses. While one seems almost infantile and requires constant supervision and care, the other is in her 30s, has an undergraduate degree, and lives on her own. She’s one of the sweetest, happiest, and most caring people I know - in fact, I’d say the biggest risk to her living independently as an adult is that she doesn’t seem to recognize when people are acting in bad faith or taking advantage of her.

All of that is to say that if a person 250k years ago were able to function at a basic level, they wouldn’t necessarily need to be able to completely provide for themselves on their own. In a community of any size, someone like my cousin would be a huge help with caring for children and in some domestic tasks. What’s more they would likely enjoy it.

This reminds of the thought exercises I’ve seen around the Internet over the past few years about autism in historical contexts. The idea that midieval monestaries were essentially self-organizing communities of people with various degrees of autism initially amused me, but the more I thought about it the more sense it made - to the point that now when I read about people entering monastic life in that period and having difficulty adjusting to it, I also imagine the other monks just not understanding their struggle.
The "jail" is having ~100 secrets there that you cannot take out, so moving out is adding new 2fa on each service.
The answer to this question is easy. The company does this because they can afford to do it because they have other candidates willing to do it. Also some people don’t want to hire you and others are on the fence. The extra meet is for those on the fence. You are not a stellar candidate.

Whether you do it or not depends on how much you want the job.
I'm still waiting for Canon to release a tool to scrub pictures of the buildings I own. What makes people believe they can just post photos of my buildings? I purchased the rights to that architecture.
Yeah, I guess it is pretty mainstream :) Though another view I keep hearing is that LLMs are going to replace all jobs in 5 years, which quite frankly is disconnected from reality. Even assuming that we could create a ML model that could replace a human (which I think the current paradigm is insufficient after this[0] discussion), there's still the matter of building data centers, manufacturing chips, and it would need to be cheaper than paying a human.

I personally would like AI to help humans be better humans, not try to replace humans. Instead of using AI to create less understanding with black box processes, I'd rather it help us with introspection and search (I think embeddings[1] is still a pretty killer feature that I haven't heard much noise about yet).

[0] https://news.ycombinator.com/item?id=21786547
[1] https://terminusdb.com/blog/vector-database-and-vector-embed...
Nanoscribe – 3D grayscale lithography nanoscale microfabrication technologies
This post is most likely related to a recent post on HN:
https://unchartedterritories.tomaspueyo.com/p/so2-injection
I guess both. One to detect which waves are copyright protected and the transformation to remove it.
Incorrect title.

>> remove copyright-claimed music from your video

This tool will only remove music that has been reported/claimed by someone and reported to youtube. It certainly cannot remove all copyrighted music given that most all recorded music is copyrighted already irrespective of youtube. This tool can remove stuff that has been reported and shared with youtube's copyright systems. That is a different thing than the title.
DJB was right. We should have used Curve 25519 for encryption in DNS itself. Then we wouldn't have needed DoT nor DoH, and we'd still have had a pretty good measure of privacy relative to ISPs and eavesdroppers.
We have these already, they are called cargo carriers.

https://www.carbonbrief.org/analysis-how-low-sulphur-shippin...

This sucks, it looks like one form of compliance is to “clean” the exhaust in ocean water.

https://insideclimatenews.org/news/17072023/ship-scrubbers-w...
I use Bitwarden for passwords, so... i dont really like that mucho having 2Fa there too... It losses the porpoise of the 2fa.
> There’s no good way to refer to 2000-2009

I like the German Nullerjahre (roughly, the nil years). Naught years or twenty-naughts works pretty well too imho.
The hubris around here. Yes, I’m sure about that.

You are a person who is easily manipulated by marketing, and clearly has zero practical experience in this field. I do. There are no epoxys that are good to 500F. None of them. See username, Buildsjets. The epoxy resins that we build jets out of are cured in an autoclave under high pressure, and at best they are good to 350F, and they are absolutely the highest performing epoxy resins you can buy from the likes of Hexcel, Toray, and other industrial companies that do not distribute though Home Depot. To go higher than 350 you need to go to more exotic and toxic resin systems like Bismaelemide, and we don’t like to do that because they are ITAR restricted, so we could not tell our foreign customers how to repair their aircraft when they broke. Dispose-a-plane.

If JB weld were actually good to 500F, we would be building aircraft parts out of it. But, if it were actually good to 500F, it would be ITAR controlled and Bubbas would not be able to buy it at Home Depot.

To your comment about difficulty of removal, JB weld does not melt. No epoxys melt. They are thermosets, not a thermoplastics. But it degrades at around 250f to the point where you can pick it apart with a mild steel pick. I know, because I have done it. The heat-sinking effect of the surrounding steel is negligible when compared to a 3,500F MAPP torch flame directly impinging on the epoxy.
It’d be nice to have a fair use tool, identifying when copyrighted music is a fair use.
Also it has to be able to work on remixes that it doesn’t know about of the songs, etc.

All in all I’d say yeah this definitely requires some clever engineering and I believe them that they use AI as part of all of this.
Location: Milford, NH

Remote: Yes / Can do hybrid as well

Willing to relocate: Yes

Technologies: Python, JS, HTML/CSS, mySQL, PHP // digital marketing, graphic design, web design, copywriting / copyediting

Résumé/CV: https://www.linkedin.com/in/judsonbonneville/

Email: judsonbonneville97@gmail.com

I am looking for a company or start-up that will give me a shot. Entry level, learn on the job, brute force experience. Will work for minimum wage. 3x startup founder.
I used month or two, because that's what OP used and that seemed ridiculous. Almost like OP tried to make a meme that s/he didn't experience themselves.

But anyway, I recently found code that I wrote 15 years ago. And when looking at it actually makes me feel depressed. It looks like something I would write today so I don't think I got much better.

But yes, I do have to look over it again to understand how it works as I forgot everything.
I've never had more than two interviews for a job.

Edit: three if you count talking with a recruiter, which I've only done for one job.
So initially those smartwatches were communicating with a DoD-owned server? All the 22.0.0.0/8 block belongs to them.
Remember to add "1 Year Cliff and 4 Year Vesting"

Get the final agreement in writen, so everyone is sure of what the heard.

Copy of an old (dead) post by Joel Spolsky https://gist.github.com/isaacsanders/1653078
Undefined behaviour.

Here's an article on the topic: https://cryptoservices.github.io/fde/2018/11/30/undefined-be...
You can’t take a song photo, there is no permanent one unique recording of a song that has to play forever for it to exist.
Ten is definitely excessive. A phone screen and half-day panel is sufficient to make a call. If you're asking candidates to keep coming back for another round, that's a sign of a dysfunctional organization where no one wants to make decisions.
Regulators should mandate 2FA with an OTP standard, such as OATH TOTP. Here in EU, lots of banks use their own proprietary OTP-like standard or SMS.

I never understood why SMS are preferred to OTPs generated offline using credit cards and a card reader, which were fairly popular.

Actually, EU regulations state SMS should be phased out, but banks largely ignore that. SIM cloning is fairly easy...
Go file an email complaint to ( support (@) deftrecoup (.) com ) to know your chances of getting back your loss to any scam. Get your finances and sanity restored.
PS. This is not an advert, they helped me on a different case but they are credible.
While Postgres does not cluster table, uuids do affect indexes significantly, random insertion causes increased index slack which translates to cache bloat and thus longer traversal and lower cache residency.
How do these tools source data for alternative keywords, visits per site, visitor breakdowns, etc, competitor rankings, etc

The only thing I can imagine is buying it from chrome plugins. How else would you scrape Google at that rate?
Companies have internal processes and typically can’t say “here’s an extra 5k for saving our butts!” unless there’s an existing program and money set aside for such spot bonuses. It’s a huge audit risk.

If your management is good, it absolutely is remembered and impacts future performance and promotion cycles.
Not only Remove, but also Trum and even Replace the song.
I hate when people try to promote things by inventing a crisis
AR/VR is a solution in search of a problem
Want to build, test, and hire at lightning speeds?
Try Kinetik and operationalize your product dev. Build multiple MVPs, test product iterations, and hire the perfect candidate with little to no effort.

Reach out to us at kinetik.gigs@gmail.com to schedule a quick chat! Or schedule a meeting at https://calendly.com/kinetikgigs/chat-with-kinetik.