skysight-inc/HackerNews huggingface dataset:
This sort of stuff will continue happening until the regulatory framework acknowledges a fundamental consumer right to privacy.

If a data broker collects data without the consent of the consumer, then their only real risk is a class action lawsuit which drags on for six years, gets settled for a few days profit, and the consumer gets $13.50 after the legal fees. This massive skew in the risk reward calculus of data brokers is why we have the problem. Because there's little to no real downside, the trend is automatically collect as much data on as many people as possible.

Fixing this means big, mandatory, cash penalties in the law code - say $5k per consumer data leak, directly to the affected consumer, with added penalties if the company lies about the leak or delays payment. The fine must be big, mandatory, and paid directly to the consumer. Only that changes the risk reward ratio.

In that new world, companies would have to re assess their risks. They'd either build invulnerable systems and hire a lot more people reading HN to protect their golden goose, or better still they'd decide to exit the business entirely. That sounds bad, but the only reason the industry exists is because regulators failed to foresee massive leaks like this happening every three months.

We need a consumer data privacy law, with massive fines, to force companies to change their behavior. What we're doing now clearly does not work.
Is it really that unrealistic to think that Apple might want to sell their own version of a Nest Hub?
On the other hand:

In a hypothetical world where I bought a car, and the next year the car company discovers that they can get even more fuel efficiency with a different piston, or they can improve crash safety with new airbag locations, and if these already-developed changes could somehow be implemented for no more cost than a bit of Internet bandwidth, then:

I would be ABSOLUTELY LIVID if the car company extracted a tithing every time I used my car to make a delivery or a visited drive-through (or otherwise used my car for commerce).
That complicates things a bit in the panel because the breakers need a connection to neutral, but yeah, otherwise a slick setup.

Newer panels and breakers are plug-on-neutral, older breakers have a pigtail to the neutral bar.
Oh it makes total sense, for sure. Sorry if I came across pretending it is simple, it absolutely isn’t.

I guess that’s the role of tool builders - is to find ways to do the impossible to support artist workflows.

The first step is to find out if the end user would even want that workflow in the first place. Maybe it makes no sense, to work that way. But if it is valuable then starts the hard part of figuring out if it is worth the programming acrobatics to implement it.
Sure.

Was Trump a fool to count the people that took one look and changed channels, or a knowledgable and deliberate deceiver?
There is another group: those of us who think the trend of requiring ID to transact is a dangerous one.

One doesn’t need to be anti-government to fear governmental intrusion on one’s rights without due process. Our current government does that now.
HTTP error! status: 500, message: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>500: Internal Server Error</title><meta name="next-head-count" content="3"/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-78c92fac7aa8fdd8.js"></script><script src="/_next/static/chunks/webpack-b06b66723d67b20c.js" defer=""></script><script src="/_next/static/chunks/framework-f66176bb897dc684.js" defer=""></script><script src="/_next/static/chunks/main-767e09ee30044af1.js" defer=""></script><script src="/_next/static/chunks/pages/_app-6a626577ffa902a4.js" defer=""></script><script src="/_next/static/chunks/pages/_error-1be831200e60c5c0.js" defer=""></script><script src="/_next/static/4919R7O7MJDIQlyB6QDOX/_buildManifest.js" defer=""></script><script src="/_next/static/4919R7O7MJDIQlyB6QDOX/_ssgManifest.js" defer=""></script></head><body><div id="__next"><div style="font-family:system-ui,&quot;Segoe UI&quot;,Roboto,Helvetica,Arial,sans-serif,&quot;Apple Color Emoji&quot;,&quot;Segoe UI Emoji&quot;;height:100vh;text-align:center;display:flex;flex-direction:column;align-items:center;justify-content:center"><div style="line-height:48px"><style>body{color:#000;background:#fff;margin:0}.next-error-h1{border-right:1px solid rgba(0,0,0,.3)}@media (prefers-color-scheme:dark){body{color:#fff;background:#000}.next-error-h1{border-right:1px solid rgba(255,255,255,.3)}}</style><h1 class="next-error-h1" style="display:inline-block;margin:0 20px 0 0;padding-right:23px;font-size:24px;font-weight:500;vertical-align:top">500</h1><div style="display:inline-block"><h2 style="font-size:14px;font-weight:400;line-height:28px">Internal Server Error<!-- -->.</h2></div></div></div></div><script id="__NEXT_DATA__" type="application/json">{"props":{"pageProps":{"statusCode":500}},"page":"/_error","query":{},"buildId":"4919R7O7MJDIQlyB6QDOX","isFallback":false,"isExperimentalCompile":false,"err":{"name":"Internal Server Error.","message":"500 - Internal Server Error.","statusCode":500},"gip":true,"scriptLoader":[]}</script></body></html>
You can rent hardware if you really need to and still run the models yourself, but you just need a basic gaming rig more or less
I'm not talking about paying people under the table. I'm talking about cutting out whatever agencies or referral services are adding a substantial portion of the overall cost.

> The middleman being the IRS?

Only to the extent the money may get taxed 2-3 times on its way to the actual person doing the work (which may or may not be the case in any particular instance). (For instance, sales tax and multiple levels of income taxes.)

> we should tax land more, and labour less.

Agreed.
I definitely agree that the brain gut connection is promising and worth exploring and the science here could even be true and helpful. I just found the methodology underwhelming compared to the claims.
Your work that you gave away. No more data rights on the executable.
Do you not recognize that "There is no purpose to neutrinos. Your question makes no sense." is itself tedious nihilism?
I read Wolf Hall after I finished Neal Stephenson’s Quicksilver, which takes place in late 17 century post Cromwell England. You might enjoy it as well! It’s packed with history.
The time has come to set a standardized Moon time
Why not play such games? If it works, it works; if it fails, it only costs $20 to replace at your local Walmart!
> Is this financial outlook posted anywhere digestible (ie not investor reports).

I... have no idea.

> I find it wild that it is not profitable.

The news was that it is profitable now, and sooner than expected.

> Unless Disney went on a spending spree and bought a big number of new movies+shows to publish on the platform, I am surprised.

They did—they've had a number of Disney+ originals. And the streaming rights for Bluey probably wasn't cheap, given its popularity (and iirc it alone is like 25% of their streaming traffic).
OK good to know.

This is caused by comet remains through which Earth goes twice a year, right? If astronomy data supports "Earth totally could get hit by a chunk from it" that's also a step. Are future threats from these comet chunks trackable by NASA?
Thanks!

(My son loves to play.)

BTW, the old Windows installer runs great under Crossover on Apple Silicon.

I'm going to try running this native. I'll file issues for what I can't readily fix.
This whole thread is the most significant thing I've learned in the last 5 years. Thank you.
Totally. 5 works for me in UX testing a new button. I wouldn't dial M for murder on a Rat from 5 samples of a theory. Get to 100 and we're starting to talk. Show me some independent reproducibility &c
"less tracking" might be better as there's no link you can follow to youtube that won't result in you being tracked.
we doan need no thot control
Looking forward to The Quantified Scientist's [1] review of it. I don't care about any of the mainstream tech reviewers who read the spec sheet. I care about the accuracy of the advertised health features.

Pixel Watch 2 was significantly better than Pixel Watch 1 but still behind an Apple Watch SE2 which is $100 cheaper.

[1] https://www.youtube.com/@TheQuantifiedScientist/videos
Yes, but 100% of adults today were born before 2011, and that will continue to be (ever so slowly less and less true as we die out) true for decades. It's good and all, but.
Once in the past I did actually have an incident where the site went down so hard that the tool that we used to update the status page didn't work. We did move it to a totally external and independent service after that. The first service we used was more flaky than our actual site was, so it kept showing the site down when it wasn't. So then we moved to another one, etc. Job security. :)
I don't think it's a "full" breach because I assume that would include many tera/petabytes of original source documents rather than just a CSV of PII, but it's definitely a real breach.

I looked up several family members and although most of the phone numbers and addresses were out of date, they were accurate as were the listed social security numbers. However, it didn't include any of the more recent immigrants in the family or myself, possibly because I take opsec seriously.

Funny enough it looks like it has data for Tom Brady, former FBI director James Comey, Barack Obama, and Donald Trump (just some of the names that popped into my mind to look up).
ZMK Firmware: Modern, open source keyboard firmware
> what other font editors moreover to Glyph (mac only) have good support for advanced contextual alternates ?

any font editor that supports writing opentype feature code manually. glyphs for mac won’t really help you here: while glyphs will do its best to autogenerate as much opentype for you as it can, it doesn’t do much (anything?) for calt features
Doing vibe-based engineering right
Magic: The Gathering-Beloved Card Game Became Embroiled in Controversy over Bots
The design of this blog post is lovely! Despite seemingly having no right to be. It goes against all of my design instincts, but it somehow nails a vibe while remaining pleasant and easy on the eyes. I love it!
We have toasters that run linux, connect to the internet, and play doom. Explain to me how they aren't electronic devices.
How it went down, what it’s like now, and where the country might be heading from the perspective of a startup founder.
On its own, no. With a robot arm, yes. The idea sounds absurd (at least what I could read of it before the paywall). Either it’s fake, or Apple is so desperate to innovate that they lost touch with reality and how real people actually live. At best this sounds like a little skunkworks project just to see how something like that could work, not something with hundreds of people driving toward a release.

Where would a robot arm with an iPad on the end be a better solution than Vision Pro?
The camera app shows you what URL the QR code is going to before you click it.

I don't think it's really much of a risk because an attacker has to not only go to a physical location and replace the QR code, but they need to make some kind of replacement website that looks genuine to fool someone.

It's actually harder to pull off than a credit card skimmer.

Example: QR codes at a restaurant, I need to put the QR codes on every single menu (how am I going to do that discreetly without visiting the restaurant multiple times?) and then I also have to create a functioning website that mimics the restaurant's website. And then what happens when the customer doesn't get any food when the order via QR code and the server doesn't see any order being placed? Everyone involved would be immediately suspicious.
Discussion (130 points, 1 month ago, 72 comments) https://news.ycombinator.com/item?id=40934608
I've actually bought/planned to buy a few things that I was introduced to via YouTube sponsorships, but it's never been any of the generic YouTube sponsor merchandise. It's always something highly relevant to the topic of the channel, or even the specific video. Usually some sort of specialty tool.
30mg of live bacteria, as that page clearly explains. but the vast majority of the rest is either water or dead bacteria, as i clearly explained above
> I guess it is back to RCS and anon ftp.

Why would that be the conclusion? By all means self-host, but you can self-host git (including just bare git on a server cloned over ssh) and it'll suck less than going back to rcs.
Compare an age distribution chart from your country to Japan's and tell me it still seems the same.

Yes, old people are in power in other places too. I live in America. Japan is an extreme case, and the low porportion of younger voters excacerbates the disparity.
Okay? Programmers have to understand lots of things that aren't just the bare basics of the language they're using. When did we decide that all software developers are helpless? When can we get back to expecting experts to know things?
I had phone number stolen (sim swap) two months ago and am still dealing with random things.

2FA over SMS is not a valid form of 2FA and I will die on that hill.
The ability to hack your shifters and change their gears is only one vulnerability class though.

If you could receive an instantaneous signal exactly as your rivals changed gears, it could allow you to anticipate and cover their attacks ("Everybody on the rival team just shifted up, get ready!"). Or infer when they're getting tired. This read-only vulnerability already exists with wireless speedometers, power meters, cadence sensors, heart rate monitors etc. - spying but not interfering.

With all those devices x 180 riders in close quarters, the RF environment inside a pro peleton has got to be wild. I'm amazed there aren't more problems from straight signal interference.
Where do you see n = 5?

> randomized to the experimental (VIN) group (n = 24) or control (CON) group (n = 21)

Still too few imo
I think a key here is recognizing when the expected result is catastrophe and acting accordingly.

There's a whole lot of procedures in the hospital that are designed for normal times and are _good_ in normal times(*) - they enforce people double-checking their results, they give radiologists time to make the right call, they make sure the right drugs are going into the right people, they make sure patients are prepped correctly for a procedure. All of that takes time, but it moves your expected outcomes from, say, 95% to 99%.

In the case described, the expected outcome is 0% - it's a fucking catastrophe, there's 250 people on their way, and everyone who comes in is a corpse waiting to happen. At that point, absolutely, flow is king - hitting an expected outcome of even 50% (looks like they got somewhere around 65%) is a massive upgrade, so yeah, shove as many people through the CT scan bay as you can, let your radiologist flip a coin, and if the nurse gives the wrong drug, fuck it, that's probably not what killed the patient - move on and hope you do better next time.

I think the real takeaway here is recognizing what the stakes of your situation are and acting accordingly - what are the outcomes that matter, and what's the set of activities that get you closer to your desired ones. Sometimes that's care and caution, and sometimes that's taking your best guess, committing to it, and accepting the outcomes.

Huge kudos to the author and to whoever set up the system that enabled them to act as needed and supported them in doing so, though - I'm sure they broke every regulation in the book over the course of those six hours. Plenty of other disasters have been made much worse by the lack of flexibility in a system to recognize extreme circumstances and act accordingly.

(* take "good" with all the caveats you want here. I get it.)
This is some next level response where Excel is called a “broken tool”. You may not agree with their choices or design or anything else. But calling the entirety of the product isn’t making a strong case towards the prior point.
One thing to help with the passive observer would be to have the knock sequence be time varying like a TOTP. It's still a very thin addition but more defense in depth the better sometimes.
Isn’t that what the Vision Pro does? It’s a computer with a screen that can come with you around the house and the windows can be wherever the user needs them in space.

Maybe it’s not an iPad type device, but more of a next gen monitor stand for the Pro Display XDR. Instead of moving it with your hands, maybe it will have little motors to move it around where the user wants. The stand is already $1k, what’s a few more.
It's a beautiful response:

Hello Department of Energy,

I cannot find that you are an existing customer of ours, so we cannot fulfill this request.

libcurl is a product we work on. It is open source and licensed under an MIT-like license in which the distribution and use conditions are clearly stated.

If you contact support@wolfssl.com we can remedy this oversight and can then arrange for all the paperwork and attestations you need.

cut to: Support and Maintenance

24x7 & Long Term Support (1 year): $50,000

https://www.wolfssl.com/products/support-and-maintenance/

I imagine for the DoE to get the guarantees they want it might expand somewhat.
Crevices could be inside components. Alcohol will extract the water by diluting it and then evaporating
No; the author made a number of reasoning errors throughout the article.

"""Underwriters Laboratories modified its marking requirements for hair dryers after the CPSC brought to UL's attention reports of injuries and deaths attributed to consumer misuse of hair dryers. Under the modified requirements, hair dryers must be permanently. marked "Danqer-- Electrocution possible if used or dropped in tub. Unplug after using." A tag with warning instructions also is required by UL to be attached to the power supply cord."""

TL;DR insurance underwriters observed enough deaths that they believed it was wise to change a product's markings to avoid having to pay out as much money.
That's probably because the website doesn't have any hook at all! I had to google the book and find a summary of it in order to actually get curious. Then the first few paragraphs into the first chapter, it had already gotten me. The writing style is almost exactly like that of Ra. And it has over 70 chapters. wonderful!!

also, I love how many references it makes to actual programming; it's always hilarious to see Uriel explaining code bugs in reality.
You're definitely not a typical consumer.
Announcement from President Minouche Shafik
Then you basically just have a roving class of jobless people stuck at home.

We’re not talking about the currently uninsured. We’re talking about a “hot-take” proposal to significantly increase the amount of uninsured people today, people who today can get insurance.
I don't know what to tell ya, besides everything I just told ya. "Why did you like this piece of art but I didn't as much" is a question worthy of speculation but fundamentally unanswerable
> if you actually look at % of impacted clients, it’s tiny.

it's pretty much any client that has E2EE and is not Element. in my earlier quick look at Alpine Linux repos this included: Fluffychat, Nheko, gomuks, NeoChat, Chatty, weechat-matrix. then i already know that still didn't catch at least Cinny, which also is in Alpine, but includes libolm as wasm.

it's literally all "Featured clients" listed on Matrix.org except Element and Element X.

i'll put it another way. if anything other than New Vector is "tiny" and doesn't matter, is Matrix a "rich ecosystem"?
If they are willing to accept the profits than they must also accept the risks. Otherwise you're just vouchsafing the hostage negotiation because of one level of indirection.

Ideally, the people responsible for managing the money on behalf of these institutions end up bearing most of the responsibility.
Bah, lost track of my Gs. It’s a 4g LB1120.
I rented for 9 years in Beijing, paying $1k-$1.5k/month for apartments that were on the market for $1 million. It would have been dumb to buy in that context, an obvious bubble (rents are slightly stronger now, but vacancies are high). There are many bubble markets where you can nope right out of since the rents are probably cheap enough.
My house came with an EV charger wired through a GFCI breaker. That damn thing tripped constantly because I guess it was malfunctioning? And they are quite expensive for a 50A version.
Am I supposed to be able to side-scroll those categories in /explore? Can't find any way to, and the last card is half cut off. I'm intrigued to explore strategies I'd never thought about, but can only see about 3 cards per category.

This is Brave on Windows.

Would also be nice to know in advance what the price/profit model will be (on the site, I see you've answered it here). I would expect a brokerage to be a long term relationship.
>In the real world you almost never hear something on one ear but not the other. Even if something is on your left, your right ear still hears it

Exactly, and this highlights the big difference between using headphones and using speakers. When you listen to some stereophonic music with one of the instruments panned completely to one side, through speakers that sound will only play from that side, however the sound will bounce around your room and you'll hear it in both ears, and the difference will tell you where it's coming from. But when you listen through headphones, you don't get this effect, and it sounds weird. With modern computing devices, it shouldn't be that hard to run the music through a filter that mixes the two channels when using headphones to avoid this problem. I wouldn't want to mix them to mono (that sounds bad too), but just a slight reduction of the stereo separation would be good.
My understanding is that it is somewhat common in adults to have a virus (cold, flu, etc) trigger a dairy protein allergy. They’re most often irreversible, or so the MDs told me. Anyhow, it’s been 15 years without dairy so I’m used to living without it. There are far more high quality non-dairy alternatives now than there were even 5 years ago, thankfully!
Based on the headline, I thought this was a reference to Gosling's pre-Java language.
Update to Steam's User Reviews: New Helpfulness System
:)

ah said ta repeat afta me, but ya went ahead, bro!

ennyway, kudos, n sudos!

ah B frum Unix land, you C ...
In Firefox, 4000 lines of CSS: editing last lines is fast and instant, editing first lines is a bit jumpy refreshing every few edits in 0.2s-1.2s - however undo/redo is quite fast - but not so fast as with last lines, and.. from the first impression, guesses:

-= the highlight is always there, instantly =- (or.. it doesn't a look like a reason for jumpy lines because of redo) - definintly less cycles and memory overhead and I don't see that possible with DOM and JS - the delays could be there only because of inefficient editing operations with no impact of coloring.. and maybe with.. smaller textfragments (or ?) there could be no such delays at all - but simple* coloring coud be always so instant (and easy) ? (yes, I know, so far it may be also limiting and exclusive)
My experience is that undo/redo isn't something you tack on at the end of the project, it has to be baked into the infrastructure. Every action you take has to be delegated to an object that has all the information it needs to both do the action and undo it. Then you can just keep a stack of those objects and call them as necessary.
For what it's worth, you're right. I saw the same thing happen with Go: everyone seems to think that Go invented static linking and gasp compiling executables, seemingly ignorant of the fact that we actually used to do that all the time, before bloated dynamic runtimes and massive virtual machines even existed. I don't trust software "experts" who don't know their history, because they usually don't know a lot of other important things, either.