skysight-inc/HackerNews huggingface dataset:
The idea behind the OMBZT memo is that, in the OMB's setting, concealing applications with VPNs made them less secure: at a large enough scale, it becomes inevitable that an attacker in any threat model is going to get on the other side of the VPN. One reason half the industry nodded along with that observation is that anyone who's ever done a site-wide pentest knows that the pentest is about to go explosively game-over as soon as someone finds an SSRF and pivots into the perimeter. People contract out "internal" pentests, where attackers start with a VPN connection, but they only do it to make a point to management: "we're fucked".

People on message boards massively overindex on the "VPN" term in the memo. You can readily do a BeyondTrust-style individually-authenticated security architecture using VPN technology. The underlying theme is 1:1 user:app authentication.
It's down? Or is it supposed to say that this deployment us disabled due to lacking payment?
If you didn't read it why are you commenting on it? We should probably just delete this entire comment section and start over.
Where can I read more of this Hobbes?
Yep. So if I'm in a mood for music, YouTube learns what vibe I'm going for. Full algorithmic power bends to my will. Then I close the browsers and get a clean slate. Perfect
This specific question isn't relevant to me, but please do be liberal with the walls of text. I can't count the number of times that I've found a thread through HN's search that is far more helpful than anything on the top pages of Google. Space online is cheap, and there's surely no better place for educational walls of text than here.

Plus, I am clearly not the only one who feels this way! https://xkcd.com/979/
Not so smart eh? So are we smarter than LLMs?
It's temporarily down while I migrate servers.
I almost went bankrupt, glad I checked and stopped in time.
> Meh, what if people rely on randomness.

Then they are creating fragile software. They're always one language version upgrade away from disaster.
its completely pointless to make this an iterator, because you have to loop the entire map to do so, which kills any benefit of using iterators
Another way to think about this is in terms of how many marginal customers you get from being able to accept payments over the Web. 4% starts sounding less bad
I don't mean to imply it is, I'm simply explaining the reasoning behind my own decision. Fluoride might influence your choice even if you do drink tea.
i did read it, with great difficulty - that does not make it basically unreadable
https://en.wikisource.org/wiki/Leviathan
People in the upper echelons of all this are incentivized with billions of dollars to tell you all sorts of bullshit that’s just not going to happen. “AGI” is but one example. What weight you put on all that in these circumstances is up to you, but given the context I have I think the appropriate value is either zero or even slightly negative.
And even then free will is useless, but then again desperately wanting there to be a free will is part of determinism and was bound to happen.
Show HN: NeoRetro Synth – a retro-style synthesizer and drum machine
I'm a credit union member and... idk I've become disillusioned. Their products and rates are consistently worse than national banks. I won't feel like I'm sharing in anything. The execs seem to get good comp though.
wikipedia "hobbes" and "leviathan"
Peer reviewers were asleep at the wheel apparently. I'd expect better from Physical Review
Yes, but Brazil has the most natural wealth available to steal.
Nillability is the biggest thing that drives me to write 'unidiomatic go': there are a few Optional libs around, they work ok.

I write with the following rule: if a pointer is passed, it shouldn't be nil. If it might be nil, code it as an Optional<> instead.

Un-golike but works great.
> Censoring isn't the same as investigating the use of bots and fake news to spread rumors and lies for polítics gain and literal profit.

I don't understand this post. Censoring is when a government official issues orders to publishers requiring them not so publish things. Whatever else you're talking about here you're simply using as a rationalization for censorship.

You have to know that you're being dishonest when the subject is a judge ordering publishers to unpublish and silence people, and you immediately equivocate between that and "investigating," then accuse "the right" of trying to confuse "their crimes" and "free speech." You're literally doing that right now. You are somehow explaining away literal and explicit censorship orders (that no one is claiming don't exist) as "investigation" of "their crimes."
If you find businesses who are willing to let you pay by other methods (assuming you are unwilling to use both cash and credit cards), you can give them your business. Businesses respond to consumer demand.

If they don't trust you enough to give you credit without a guarantor like Visa or Mastercard, then I don't think there is any way for you to force them.

There are businesses who let you purchase stuff online by bank wire.
> “It sucks, because I don’t have that disposable income to spare,”

Then you probably should not have been going to burning man anyway? And now you are upset that other, who also probably don’t have disposable income, are choosing not to buy tickets, and thus driving the price down.

Welcome to the world.
Why does LTSC not have the same requirement? I could understand the IoT builds, but LTSC is made for user workstations I thought?
Correct identification but wrong prescription.

Cache misses don't have anything to do with memory pressure, they're related to caching effectiveness.

Production systems shouldn't have any page faults because they shouldn't be using swap.

The traditional way Linux memory pressure was measured using a very small swap file and check for any usage of it. Modern Linux has the PSI subsystem.

Also, monitoring for OOM events also means a system needs more RAM or a workload needs to be tuned or spread out.
I'm not sure you can eliminate fraud. You can shift it around, but not eliminate it.

Sweden thought going cashless would reduce crime. Nope, crime increased.
mpv is always faster than IINA, especially with 4K playback on older MacOS. mpv is near perfect
Specifically, they say that if (they think) you’re breaking a rule. When you get to a phase of flight that you have the bandwidth to do so, they’ll give you a phone number to call after you’ve landed. From there you might just get chewed out by a grumpy controller, or they might set the gears in motion for some sort of formal discipline.
That's weird. I copied it directly from the address bar of a functioning page. They must do some rewriting of the address.
The text on the Thor Labs "Lab Snacks" box is giant and still unreadable, the model interpolating total junk. It seems like there's nowhere near enough signal there.
Active monitoring is a different animal from passive metrics collection. Which is different from log transport.

The Nagios ecosystem was fragmented for the longest time but now it seems most users have drifted towards Icinga, so this is what I use for monitoring. There is some basic integration with Grafana for metrics, so that is for I use for metrics panels. There is good reason to not use your innovation budget on monitoring, instead use simple software that will continue to be around for a long time.

As for what to monitor, that is application specific and should go into the application manifest or configuration management. But generally there should be some sort of active operation that touches the common data path, such as a login, creation of a dummy object such as for example an empty order, validation of said object, and destruction/clean up.

Outside the application there should be checks for whatever the application relies on. Working DNS, NTP drift, Ansible health, certificate validity, applicable APT/RPM packages, database vacuums, log transport health, and the exit status or last file date of scheduled or backgrounded jobs.

Metrics should be collected for total connections, their return status, all types of I/O latency and throughput, and system resources such as CPU, memory, disk space.
Tbh, sometime I wish the same would happen in whole europe.
This platform is out of control. It's threatening democracy if it keeps on publishing fake news en mass with no control whatsoever. Let the platform die, it was a good time. But it's time for sth. new that keeps society intact.
From what I can see, he's neither an ass nor adamant that it's impossible. He claims it's impossible to universally support the jump within certain technical constraints (which VLC supposedly limits itself to).

The only time I saw him being unpleasant in the thread is when people ignored his explanations and acted very entitled. Correct me if I'm wrong on anything here, but VLC is an independent free software project developed in no small part by volunteers; they have every right to choose their technical direction and compromises, and it seemed the people insulting them were in no position to demand anything from them.
Love running into Math Academy students in the wild -- thanks for the kind words and I'm so happy that the system is working out for you! After all the work we've put into building this thing, it's the best feeling ever to hear about positive impact it's having on people's lives.

Sounds like you're well on your way to seriously leveling up your math skills, but if you have any questions about how the system works, how to get the most value out of it, the math learning process in general, etc., feel free to reach out anytime.
There is a degree of depravity rarely attained in our current era, the moral compass is definitely broken or revealed some might say.
Brendan Eich's bosses would be so proud that after 30 years JavaScript has finally become a true Java script.

What are "reverse mapped types" called in regular computer science type theory?
This either requires the destination to accept inbound connections, or you'd need a permanent SSH tunnel, both of which you'd probably want to avoid.
That can't be it. The circuit outputting video onto the wire triggers every 1/60th of a second, always the same duration.

There are situations where a player could time things so badly an entire frame has to be skipped, but that shouldn't happen often. And it should basically never happen on a regular DVD player. Any variations smaller than that disappear; whether a frame is ready 15ms before the deadline or 1ms before the deadline has no impact on the output.
> Things just got worse.

I hated twitter 5 years ago, and I hate twitter today. People act as if Elon's presence changed anything. From an outside point of view, it changed nothing, the site never had any value to begin with.

It's original existential proposition was: "Artists can now talk to fans directly instead of going through third party media companies."

It really has done a _fantastic_ job with that. It was never possible that it could effectively do more. Unsurprisingly, the people who need this media exposure, are the most devoted to pretending that it could be, as it would mean their time spent there is not just naval gazing but somehow "social activism."

It's typical lazy American politick.
Mac mini is less than $500. And you can use it for years. Thousands of dollars a year is this around 10 times too high a figure.
> then everyone would pay for OpenAI's compute since it's cheaper than GPU hosting.

This is absolutely not true. The gap is narrowing as providers (Google, Anthropic, Deepseek) introduce cross request KV caching but it’s definitely not true for OAI (yet).
Hey, I'm on the team at Vercel. I see a few changes you can make to your app to help you stay within the free tier limits. Sent you an email.
It's still open. I live in Bend and love going there to rent movies.
I too want Google to go bankrupt and be acquired by Oracle.
It can't hurt, but it shouldn't be necessary. The client-side software establishes an encrypted connection with its peer, using an encryption scheme that should be just as secure [but see below] as what GPG or SSH will give you.

For GPG to add security, you also have to make sure the GPG key is transferred safely, which adds work to the transfer process. Either you're GPG-encrypting to a public key (which you must have copied from the receiving side to the sending side at some point), or you're using a symmetric-key passphrase (which you must generate randomly, to be secure, and then copy it from one side to the other).

I should note that magic-wormhole's encryption scheme is not post-quantum -secure. So if you've managed to get a GPG symmetric key transferred to both sides via PQ-secure pathways (I see that current SSH 9.8 includes "kex: algorithm: sntrup761x25519-sha512@openssh.com", where NTRU is PQ-secure), then your extra GPG encryption will indeed provide you with security against a sufficiently-large quantum computer, whereas just magic-wormhole would be vulnerable.
I’m just waiting for an alternative. I’d happy run a *nix on my desktop if I didn’t have to use X11 and could have real apps to run.

I’m about to be forced to use windows for the first time in 20 years and I’m seriously dreading it.

At the same time, I’m sick of apples stranglehold on the iPhone. It’s my phone, let me do what I want with it.

I’ve tried using android stuff a bit (bought a Samsung tablet for obd2 stuff), and it left me wanting to scream and throw things.

I miss my 04-08 Mac experience that didn’t suck. And don’t tell me the new stuff is more reliable - the other day I had to power cycle my m1max mbp as the keyboard stopped responding.
> If someone sees the world like you are suggesting, they are not intelligent enough to date. I want a partner, not a pet.

That seems super dismissive and disrespectful. Honestly HN is usually better than this.

Being politically aligned is nothing like “wanting a pet” wtf.

If anything it’s more equitable that you are aligned on your values whatever they might be.

I have no idea how you can fail to recognise that a polarised two party system draws some pretty hard lines along your value system.

Would you date a republican who supports removing abortion rights for women, would you date a tory who supports privatising vital public services for personal gain of the few? (Note I’ve used right wing policy's but you can pull left wing examples of this as well).

> weird is an important dating requirement for me ;-)

This is such a strange thing to say, you’re not quirky or more interesting for having written this, I have no idea why you would write that on HN.
Like another commentator, I tried it out. What came back was... Grammatical garbage. I strongly recommend running this AI through some kind of spell checker type software. The title here also having typographical errors isn't a great indicator that solid English was a priority.
Eh, this is bullshit. Ireland always had labor laws, and most companies operating there had little problems navigating through it.

Of course, those companies were not under the whims of a moronic buffoon.
It seems that way to me too, but we have examples of high-censorship, high-freedom societies like Germany, and high-censorship, low-freedom societies like Singapore, and both report high levels of happiness.

The devil really is in the details.
"Yet another" non-sequitur argument defending a company that has also historically leaked customer data.
My default player is VLC, because it's a great generalist for video, audio and video inputs, but I appreciate mpv very much too. Especially useful on CPU limited devices, I get more performance out of it than any other player.
I retired as worldwide champion (tied) of text prediction.

you: 0/1
gpt-4o: 0/1
gpt-4: 0/1
gpt-4o-mini: 0/1
llama-2-7b: 0/1
llama-3-8b: 0/1
mistral-7b: 0/1
unigram: 0/1
Honestly, my tolerance for enshittified products has become so low that I have stopped spending on things, foods, and poor services entirely. As in, I cannot fathom buying a shitty product for higher prices any more. It just doesn't feel....right.

Oh well, good for my finances and the environment.
Either the people are suddenly that fickle, or the results are being manipulated, and Hacker News of all places should understand the problem with modern electronic voting systems that require highly competent IT and MIS people to manage and secure. People who we know do not often work for the government.
Before we leap into demography communism maybe let’s establish that this is actually a long-term trend in need of stopping.
Not sure adding to this existing problem is a good idea. Non-electric cars should be completely banned from city centers sooner or later. Noise is a hugely underestimated source of stress (and by proxy, illness).

Automated deliveries by bots are fine, but they don't have to be in the sky. Learn from China, they've already perfected parcel delivery with electronic delivery boxes in basically every community. All that's left to do is take out the human deliveryman, which they aren't doing yet because wages are so cheap. But in the US it might already be profitable, if not yet it will be very soon.
This guy is saying we need autonomous war technology. He makes money in that field. He is a sales man.

Regardless, I do not have an issue with the U.S. preparing AND being able to achieve battlefield success with less lives.
Yes, and just pay the law makers off
I see no reason to cling to mplayer/mplayer2, mpv has pushed things forward from there.

mplayer is what I used to use ages ago, can't think of a single thing I miss that it did which mpv doesn't. Like you, I was introduced to mpv through the debian disappearance, and it's been fine. Forks can be necessary to keep development active; it's one of the core features of FOSS.
120Hz screens are good enough here that I'd call them a silver bullet.
How did you create the voice? It sounds amazing! Is this a real person speaking or computer generated?
That’s fair, but paying by credit card lets you:

- Keep the money in the bank (and earn interest on it) for another month or so

- Contest fraudulent charges or payments for goods or services that are never delivered

- Earn travel rewards (I know, those have systemic downsides)

- Pay any business in essentially any country in any currency with no fee for you and a low fee for the business
Because nobody wants the pay 3x the cost for the same hardware as an intel pc. Plus ios sucks.
Life in the FastLanes Decoding > 100B integers per second with scalar Rust
.NET and C# appeared to counter the proliferation of Java after J++ has been sidelined in court: https://en.wikipedia.org/wiki/Visual_J%2B%2B#Sun's_litigatio...
Believe it or not, they make a huge effort at fraud prevention. Because it takes away from their profits.

However there are both historical and convenience reasons at play here. It was a big transition to move to chips, for example.

So your assertion that they're not making an effort at fraud prevention is just completely untrue.
That's Stage 1: Foundational Math -- with the addition of calculus-based probability/statistics, and the specification that it's the multivariable chain rule (not just the one in single-variable calculus), as well as differential multivariable calculus in general (gradient vector, etc.).

But there's plenty more to learn in stages 2/3/4 before you reach the cutting edge. Would encourage you to read the article! :)

Should also point out that -- in the USA, at least -- linear algebra, multivariable calc, and calculus-based probability/statistics are not typically taught in high school. There's quite a bit of university-level math that someone needs to know if they want to reach cutting-edge ML/AI.
With what army? Oh robots. That's a bold strategy.

There is not will among the fighting age male population in the US to fight another war, certainly not another pointless middle eastern war. That's a good way to get the country torched.
> All markets are a bit uncompetitive

Oh sure, but there's a vast difference between "people make $1000 more and landlords take $0.05 on the dollar" and "people make $1000 more and landlords take $0.95 on the dollar".

Profit margins are also not inherently determined by wages in some other sector. If a bag clip costs $1 and $0.25 of that is profit and $0.75 is cost of labor, the profit margin clearly isn't zero. If nurses then get a pay raise that came out of reduced overhead rather than higher prices, the unrelated $1 item can profitably be produced for the same price it always was.

In can, indeed, go the other way. Some item is $1.00, $0.75 of that is labor, you eliminate some regulatory overhead which reduces the company's labor costs (e.g. need fewer HR/lawyers) and now the labor costs fall to $0.60. But this also reduces barriers to entry to the market, so competition increases, the profit component drops to $0.20 and now the item costs $0.80 instead of $1.00.
Hell, I've seen companies post jobs with "salary ranges" spanning all the way from barely minimum wage to C-suite. It's just lazy compliance.
Privacy amendment NOW.
Rejecting Dogmas Around AI, User Privacy, and Tech Policy
Cocoon is transforming steel production runoff into a greener cement alternative
Right, I'm more commenting on the "have my friend slurp files" part: that sounds more like they want to set up a VPN with normal file sharing (e.g. full network shares) so their friend can just grab literally anything as long as it's in a network share. It didn't sound like they needed individual file transfers.
Right. I created a Neo4j db once with millions of nodes and relationships. Individual queries were very performant for all of my access patterns. Where it failed was with queries/sec. Throw more users at it, and it slowed to a crawl. Yes, read replicas are an option, but I was really discouraged with Neo4j performance with more than a few users.
As someone who used to work there, the passwords were definitely stored salted and hashed in the database.

The email mostly makes it sound like what’s in the user account table, though last 4 of credit card I didn’t think was in it. And mentioning passwords, not salted/hashed passwords, makes me think it was more.

I’m wondering if this is an Apache or Apache Rivet issue that possibly intercepted everything you sent to the server, which could then be your actual password if you logged in during the timeframe or even credit card if you bought something.

Also Rivet was full of footguns. IIRC, variables would exist for the life of the Apache child, so you had to clear them out or the next request had access to them, so if someone deleted or didn’t run the huge “delete all variables we probably set” proc, and someone was able to get an “info var” output, they’d see everything set in the previous request or further back if nothing overrode it. Like user info, which was just stored in a big global “user” array
Historic computers and artifacts from Paul Allen's collection to be sold online
Nice tool, I've been using html2md[1] and such. It's written in python and in beta so it's probably not the best for processing static sites and such. But still useful

[1]: https://github.com/suntong/html2md