skysight-inc/HackerNews huggingface dataset:
Twitter loads some javascript file from edgecastcdn.net and twimg.com. The browser blocks these loads because they are from third–party domains which is a big risk. Loading a script from a third party exposes anything secret or private on the page to the third party. Of course twimg.com is _probably_ owned and operated by Twitter, but it could be anyone. They’re not even registered through the same registrar, they have different registrant information, etc, etc. One is reported to be in Arizona, the other in California.

This is exactly how information about you is leaked to advertisers. Maybe the scripts you load from those third–party domains are harmless, or maybe they send everything you see and type back to the third party.

There is javascript on the page that detects the failure and puts up the error message blaming the browser. Really the browser is taking a completely legitimate action, and Twitter could get around it by simply hosting all of their javascript on the same domain that you visit. If you visit x.com it would load javascript from x.com. But if you visit twitter.com, it would load the same javascript files from twitter.com urls instead. Or twitter.com could just redirect you to x.com. Either way, the problem would be solved. But by asking you to turn off strict browsing mode, it enables Twitter to load javascript from real third parties that just want to advertise to you.
Sorry, what's LTI?
Jews were merchants engaging in transactional relationships with farmers, which in an agragian society instills a level of hatred due to being fundamentally opposite to the reciprocal relations that farming neighbours participate in.

https://acoup.blog/2020/08/21/collections-bread-how-did-they...
Don't guess. Just read the source code!
I got that from Maanchi actually. The main thing with the sugar and starch is probably just speeding up the fermentation. But this sounds pretty delicious too. I left out a lot of the other things I usually mix in though.

I think the main thing here is technique. The rest is picking nice ingredients and flavouring.
That's definitely what I meant - just because you wear a seatbelt does not mean it is now impossible to get hurt.

You still need to drive carefully. To me, it looks like these people relied on the safety of seatbelts and drove really fast, and there was, predictably, a horrible crash with a lot of damage.

Crowdstrike themselves seem to have missed the nuance.
Sounds a bit like code2prompt - https://github.com/mufeedvh/code2prompt
Ok so first it was a matter of timing. Now it's become a matter of vibes and type of content. I get what you're saying, don't get me wrong, I just don't think a site where news are commented by randos mixed with memes and trolls is an important site we have to bend over backwards to preserve. But maybe that's just me.
1. Higher quality

2. The only country with widespread use of AM are the USA. All other countries use mostly FM.
Actually, don't use Mastodon either, it's full of the same low quality commentary that you find on Twitter.
The amount of self pwning that goes on in both corporate and personal devices these days is insane. The amount of games that want you to install kernal level anti-cheat is astounding. The amount of companies that have centralized remote surveillance and control of all devices, where access to this is through a great number of sloppily managed accounts, is beyond spooky.
They're fine where they are useful, I guess, but my undergrad put way too much emphasis on them when they're not intuitive, don't help (me) much with comprehension, and aren't useful in that many cases compared to the other techniques.
I dunno I think the actual EDA tools are pretty good (I've used VCS and Questa mostly). Bugs are quite rare, the GUIs are pretty sophisticated and surprisingly usable given how niche software it is. They're even starting to support recent OSes (though you have to use the lowest common denominator so we're still on RHEL 8).

I think they mainly just don't really care about improving the scripting interfaces. TCL is an industry standard at this point and it is a shit language but it's not the main thing you're doing.

In my experience it's really the customers have low skill in software, so they won't even be asking for anything better than TCL. Hacky Bash scripts are the standard here so if anything TCL is an upgrade.

This is an industry where CI is a novelty. I still have to deal with people who think CI should be a very quick sanity check and the testing should mainly be manual.
Probably 'Learning Tools Interoperability'.
Maybe I exaggerated. But France controlled essentially all of Muslim west Africa at one point or another, and France's former colonies are the overwhelming source of their immigrant population. Outside of Quebec, the Francophone world is largely Muslim and African. For that reason, the analogy should hold: The people flooding into France were former subjects and partial citizens. South Korea views all Koreans from the North as citizens and has a plan for their integration, just like Israel views all Jews from Ethiopia or Morrocco or France as citizens; and has plans to absorb them. What is France's plan?
They are two researchers/assistant professors working with cognitive science, psychology, and trustworthy AI. The paper is peer reviewed and has been accepted for publication in the Journal of Language Sciences.

You should publish your critique of their research in that same journal.

P.s. if you find any grave mistakes, you can contact the editor in chief, who happens to be a linguist.
There is an open source alternative. GRR:

https://github.com/google/grr

Every Google client device has it.
Let's be honest, the general public isn't using Firefox, isn't using x.com and has never heard of hacker News and if taught, they'd be afraid you were trying to scam them. We live in a pretty deep filter bubble.
I know about EVB-IT and GDPR. And it is actually slowing down a lot. While each of these things can be managed the combination is a productive killer. You will understand this if you ever worked as a it-project manager in the German goverment. There is a representative for everything and he is just doing his part and blocking everything not in his work field. It is not something like GDPR alone but the combination and the handling of these aspects. And law aspects always get the highest proirority.
Compared to the US, yeah they’re quite low compared to CoL
What we really need here is some anti-censorship technology that makes it so an authoritarian regime that tries to block its political opponents, fails. Make the ultimatum "block these accounts or we block the whole site" toothless. Have every major site using it by default so you're not just blocking Twitter but also Facebook and YouTube and Office365 and Wikipedia, and it acts as a generic VPN that allows anyone anywhere to access anything else their country tries to censor.

In theory "just use a VPN" already does this, but it should be built into the browser so it happens automatically and unsophisticated users don't have to do anything to make it happen.
The Google Search Appliance was available from 2002 to 2019, which is a pretty decent run for a piece of IT hardware. Especially given that the average office environment looked quite different in 2002: the GSA was designed for indexing intranets (remember those?) and did not require any Internet connectivity at all.
Thank you for this. I was just thinking that I need something like it.

Could you include an example of how you separate files? For example are you using YAML Front Matter or something like that?
> . I feel similarly about this as to what I've read of Chalmers - I agree with pretty much all of the conclusions, but I don't feel like the text would convince me of those conclusions if I disagreed;

my limited experience of reading Chalmers is that he doesn't actually present evidence - he goes on a meandering rant and then claims to have proved things that he didn't even cover. it was the most infuriating read of my life, I heavily annotated two chapters and then finally gave up and donated the book.
I think it would be better to legitimize migrant labour for those types of jobs a la Singapore
It's all open source. No need to reverse engineer.
Yes. Here[1]

[1]: https://www.handelsblatt.com/politik/deutschland/demografie-...
Here's the thing, I agree. But also, you do know that the various news sites have an agenda. It's a fact. And the way you work around it is by reading from multiple sources that have different agendas and form your own opinion based on that.

The random Twitter user though? Who the fuck knows. He might be in just for the lols. Maybe they're just bored. Maybe they're actually knowledgeable. You just don't know.
Yes, it is the case: it still tries to load assets from twitter.com and twimg.com.
It's like these people didn't notice the raft of cves on hardened VPN and firewall devices lately. Cisco iOS regularly has cves. Android and iOS both have critical rces. And remember Mirai?
Yep. Even Webkit-variant of Firefox on iOS: x.com got blocked too
Hey. Yes we did support them financially from our FOSS fund. We’ll be happy to do it once more as well.
It's not mentioned in the article for obvious reasons but, html + css + javascript = modern web browsers
Good!

Why would anyone want to use X in the first place when HN has far better conversations and better people.

More balanced and erudite than over there.

Just stay here and dump X

GO ON I DARE YOU
If you have a repository, while still in it's early stages, TxtRepo.com is a good option (it can also do PRs)
He can share them before you do and get more likes.
> That means that Java programmers have to be very careful when writing code

From JEP 444:

The scheduler does not currently implement time sharing for virtual threads. Time sharing is the forceful preemption of a thread that has consumed an allotted quantity of CPU time. While time sharing can be effective at reducing the latency of some tasks when there are a relatively small number of platform threads and CPU utilization is at 100%, it is not clear that time sharing would be as effective with a million virtual threads.

Also, in this scenario, i think the current scheduler (ForkJoin Pool) will use managed blocker to compensate those pinned carrier threads.
everyone's got an angle, I suppose. getting your news 140 characters at a time is an odd angle, but sure, why not.
> A disk driver update should be 100% separate and compatible with not just the latest OS kernel but ones from 10+ years ago.

People, companies, countries that do this, will be overtaken technologically by others that accept the brittleness and move faster.

I think the solution is to have a balanced approach, both to advance relatively fast and keep things relatively robust. Who knows, in the end, maybe this crash is a reasonable price to pay for all the security Crowdstrike has provided over some time. It's not at all easy to tell.
For the same reason I don't have a Medium account, a Substack account, a Guardian account, a Wired account etc.

I might pop in to read the content occasionally, but I'm not looking to interact with other users or comment on things.

I'd make an account if I did want to do so, but just to view content? Nah, why.

Any site that forces you to make an account to view content is doing it for their benefit, not yours.
well you're kind of correct though,but we do know that it works,and as long as it's something that can be repeated over and over and still remains true,i thinks that's all that matters,we just have to figure out in our way how the algorithm works.
I imagine these people have mental illness that we decided to "treat in the community", i.e. closed the mental health facilities and simply sent them on their way.

there are plenty of roboloos that clean themselves now though, so that's not really an excuse anymore.
I don't even know where to begin to address your confusion. Without computability theory there are no computers, no operating systems, no networks, no compilers, and no high level frameworks for "AI".
CrowdStrike Incident Analysis
> You should publish your critique of their research in that same journal.

No thanks; that would be at least twice removed from Making Stuff.

(Once removed is writing about Making Stuff.)
Have a look at Prose from pico.sh .

https://pico.sh/prose
As long as they steer clear of that high fructose corn syrup they'll be fine
I don't think it's that simple.

If majority is overly tolerant of vocal "jerks", some dissenting voices get self-censored due to not wanting to engage in such a discourse, effectively limiting their freedom of expression (the pressures they expect to experience if they express themselves freely are too much for them to handle).

Obviously, this does not stop other dissenting voices to be heard, but in practice, "jerks" have more persistence and thus end up "winning" by being more vocal and enduring.

So it's certainly a tricky balance to aim for, and there is really no "right" line to be drawn.
I think some commenter’s may be misunderstanding the motivation for doing this.

…this is “the first time that the legs of a legged robot are concurrently utilized for locomotion and for a different task.” This is distinct from other robots that can (for example) open doors with their feet, because those robots stop using the feet as feet for a while and instead use them as manipulators.

So, this is about a lot more than cigarette butts, and the researchers suggest a variety of other potential use cases, including spraying weeds in crop fields, inspecting cracks in infrastructure, and placing nails and rivets during construction.

Some use cases include potentially doing multiple things at the same time, like planting different kinds of seeds, using different surface sensors, or driving both nails and rivets. And since quadrupeds have four feet, they could potentially host four completely different tools, and the software that the researchers developed for VERO can be slightly modified to put whatever foot you want on whatever spot you need.

So, to me, this sounds like a somewhat abstract research problem that some one found a fun concrete way to start progress on. The point isn’t that this is a usable product but rather something which moves the research forward.

Take a look at the history of boston dynamics and you will see similarly impractical real world robots.

For example, this is a video of one of their earlier much simpler robots: https://youtu.be/Bd5iEke6UlE

This Lex Friedman podcast interviews the founder of boston dynamics Marc Reibert and he goes into great detail how they started simple and built from there: https://lexfridman.com/marc-raibert/
What's wrong with respecting the commenter's right to boycott Twitter?
That's funny, I had to write a dual mode host library for an embedded project a while back, and feel exactly the same way.
They are just repeating something they heard a politician tell them as if it's fact.
That doesn’t force upon the US any responsibility at all to deal with it
Also, the classic "cisgender is hate speech" thing Musk introduced is very far from free speech.
Oh absolutely. There’s many levels of failure here. A few that I see as being likely:

- Lack of testing of a deployment
- Lack of required procedures to validate a deployment
- Engineering management prioritizing release pace over stability/testing
- Management prioritizing tech debt/pentests/etc far too low
- Sales/etc promising fast turnarounds that can’t be feasibly met while following proper standards
- Lack of top-down company culture of security and stability first, which should be a must for any security company

This outage wasn’t caused only by “the intern pushing release.” It was caused by a poor company culture (read: incorrect direction from the top) resulting in a lack of testing of the program code, lack of testing environment for deployments, lack of formal deployment process, and someone messing up a definition file that was caught by 0 other employees or automated systems.
What I can't understand is WHY are the people who escaped for a better life, pro embargo... What, 70 years later? Seems like it's only being highly effective at hurting the general population
Well prescreening immigrants lets us avoid dealing with the consequences of our actions, so why not
Is it news if you have no idea if it's true or not ?

And I think it's all the more relevant as we can instantly generate plausible pictures and reporting only from vague knowledge of the circumstances.
It was great for us, AOL and Vignette back in 1999.

But it is also the reason why I don't use any dynamic language without JIT for production code, unless I have no say in the matter.

We took advantage of being a MSFT gold partner, moved into .NET when it wasn't yet known to the world, and our founders eventually moved on, and OutSystems was born out of our learnings.
TPM (Trusted Platform Module) provides several security guarantees including integrity of the boot process, secure storage, and platform attestation. These guarantees are primarily made to system owners, software vendors, and remote parties to ensure hardware and data security, and system trustworthiness.

As for your second question, an ad network has no legitimate need to know how to disable DRM protections. DRM is essential for protecting content creators' rights and ensuring only authorized users access the content. An ad network's role should be limited to serving and managing ads, not undermining security or intellectual property protections. If an ad network seeks to disable DRM, it's both suspicious and unethical.
Traditional does not equate original. The original technique was never used widely and cannot be called the traditional way.
462 is just the highest number. Many are skipped. It tells you at the bottom the total, 357.
There’s a whole opaque and agenda laden algorithm determining which “guy with credentials” opinions you see, and zero standards.
My statement doesn't assume a homogenous singular mass.

There are opinions that come from different groups on the political spectrum, that pop up again and again and can be regarded as "common beliefs".

My comment is based on that.
I hate the camera crews who accompany these suicidal free solo bullshit and hype it to others who are already suicidal.. well i guess every generation needs a exit tube for excess youth . Heroin, motorbikes, extreme sports,couple suicide romantics poetry.
Apparently CrowdStrike bypassed clients' staging areas with this update.

Source: https://x.com/patrickwardle/status/1814367918425079934
I believe the flying spaghetti monster touched the file with His invisible noodly appendage so now it's a three way split.
Could it be possible that this bunk bed is then made a required (verbal - nobody put it in writing, of course) condition of employment?
I would allow array indexing if the compiler can prove the bounds have been properly checked before use.
termshark is a TUI for tshark. So termshark looks a lot like wireshark but in a terminal.
Can users whitelist select domains that are "trusted"?
There was an earthquake the other day, people were talking about it on both Mastodon and Bluesky, twitter didn’t even have a mention until after it was over.

Whatever it is on Twitter, it’s a very specific subset of news, usually the kind you also see on breaking news banners in other outlets. Twitter has long been abandoned by everyone of consequence.
this is the best thing I’ve seen today so far LOL
It’s kind of hard to pitch “zero-day prevention” if you suggest people roll out definitions slowly, over the course of days/weeks. Thus making it a lot harder to charge to the moon for your service.

Now, if these sorts of things were battle tested before release, and had a (ideally decade+-long) history of stability with well-documented processes to ensure that stability, you can more easily make the argument that it’s worth it. None of those things are close to true though (and more than likely will never be for any AV/endpoint solution), so it is very hard to justify this sort of configuration.
Where I work, there's a somewhat haphazardly divided org structure, where my team has some responsibility to answer the executives demands for "use AI to help our core business". So we applied off-the-shelf models to extract structured context from mostly unstructured text - effectively a data engineering job - and thereby support analytics and create more dashboards for the execs to mull over.

Another team, with a similar role in a different part of the org has jumped (feet first) into optimizing large language models to turn them into agents, without consulting the business about whether they need such things. RAG, LoRA and all this optimization is well and good, but this engineering focus has found no actual application, expect wasting several million bucks hiring staff to do something nobody wants.
Do these customers of crowd strike even have a say in these updates going out or do they all just bend over and let crowd strike have full RCE on every machine in their enterprise.

I sure hope the certificate authorities and other crypto folks get to keep that stuff off their systems at least.
I don't get the impression that anyone is going into the "Maxwell's equations" part of the analogy. I didn't understand/think about it either until watching Sussman's "Programming is (should be) fun!"[0], where he explains the dualism and inter-action between `eval' and `apply' is supposed to be analogous to magnetic and electric fields in Maxwell's equations. The well known Ying-Yang picture containing `eval'/`apply' can (and does in his presentation) also be drawn with \vec{B} and \vec{E}.

[0] https://www.youtube.com/watch?v=2MYzvQ1v8Ww, around minute 13
What does “our computer” mean when it is not owned by you, but issued to you to perform a task with by your employer? Does that also apply to the operator at a switchboard in a nuclear missile launch facility?
1000s at least. We don’t have any detailed metrics because the data privacy issues there are… a lot, but going by download numbers and knowledge of platforms and some of the larger applications, it’s a decent number.
There's an enormous welfare state in the US through what is essentially jobs programs.

Health insurance companies, for example, are a negative drain on society, yet they employ hundreds of thousands of workers, in what can only be explained as a make-work program for pointless bureaucracy.

Lots of this in the DOD as well. And the homeless program administrators, which you mentioned.

It's just not explicit welfare to the poorest of the poor and there are a few implicit steps, because otherwise it looks bad.
As a very first step, you may start playing with https://godbolt.org/ to see how code is translated into lower-level instructions.
"Learning Tools Interoperability": https://www.imsglobal.org/spec/lti/v1p3/

From the page: "The IMS Learning Tools Interoperability (LTI)® specification allows Learning Management Systems (LMS) or platforms to integrate remote tools and content in a standard way."

If you haven't used an LMS ("Learning Management System") it's kinda like WordPress for teaching - teachers create course materials without needing to know HTML.

I'm not super familiar with LTI, but it looks like the company that does this also does the Common Cartridge spec (which I'm more familiar with)

To answer your question:

Let's say that I'm teaching at course at University A using the Canvas LMS. At the end of the quarter the teacher asks the LMS to "Export The Course", which produces a file in the Common Cartridge format (essentially a .ZIP file with XML manifests and any supporting files bundled along with it). Later if you wanted to copy that course into an LMS then you can upload the Common Cartridge format and it should just work (at which point you can copy the course contents, in part or in whole, to the new course).

I'm guessing the LTI is the same idea, but for the LMSs to talk to each other while they're running.