skysight-inc/HackerNews huggingface dataset:
There's also some anecdata floating around in the -- what would you call it, the "competitive speed typing" community? Or "people who play TypeRacer a lot". Some seemingly significant correlation between skill in typing and piano. Or at least the appearance of skilled typists having some interest or experience in piano. This could probably be generalized to being good at fingering or timing, or maybe even further, to having effective mindsets or attitudes regarding performance of skills (like the need for a presumptive confidence of sorts), or being aware of good practice methods.
Oh please. The answer was globalization. People couldn't get along well enough to make that work so here we are.

There is no magic sauce that will make economies work for everyone. Specialization is how we built civilization tens of thousands of years ago. It's how we get off the struggle bus today. But if nations can't rely on a global trade order then they all have to build everything.
Sometimes it's not about the "edge cases" and handling Stripe quirks. The main design consideration for global Stripe integrations is SCA/3DS or "payment confirmations".

If you implement something, then add SCA/3DS "payment confirmations" later on, I think it's impossible to fix that.
It's opt in
Right, the incentive will be to create accounts on the popular instances, not on the paid ones.

There was a spam wave some months ago. The spammers were using Mastodon and Sharkey instances that had open registrations. They were not signing up to paid-only instances to become "legit".
Studio Ghibli's movies. They are basically the confort movies for my kids and wife too.
This is super cool!

As a marketing spin for this - consider packaging it into Nvidia NIM format and make it generate 3D graph as 3D OpenUSD scene. From where I'm standing this route has a lot of potential.

Also if you never looked into it there is a project called wikidata. There each object contains a unique ID and hierarchy, which helps build semantic web. Exploring their data using your interface might be effective. (please check similar projects though as an idea seems straightforward and someone might have already done that for them)
You don't? Safety is not having that compromise in the first place.

Like, if the code can handle all input correctly, then there is no exploit path. Regardless of whether the input comes from an attacker or not.
As a pentester, I would argue that attackers don't think in graphs either.

Apart from Bloodhound, I can't think of any tools where we have graphs.

For web security, I can't think of something where "graph thinking" applies. But we have a pretty huge list of attacks to test https://portswigger.net/web-security/all-topics.

And ultimately, what is inside your pentest report ? Not a graph, a list of things to do:

- SMB signing.

- Don't use the domain admin to manage every machine.

- ...

The main reason this phrase is so popular, is that it panders to the hacker community: "We are the smart guys, all the defenders do is excel sheets."

IMHO, the nugget of truth in this is that defenders can spend considerable amounts of time on things that don't matter. Like doing CIS benchmark by hand on all servers. While missing the low-hanging fruits that would give them a strong security posture.

In a lot of companies, the defenders are just sysadmins that don't have any idea of what they should focus on.
> This cannot be a reason for going against Telegram.

I’m sorry?

Operating a platform facilitating crime on a large scale is a very valid reason to arrest someone.

The uberisation of drug dealing is a major issue in France right now and striking Telegram would be a huge blow to that.

Obviously legalisation would be even better but that door is shut due to the US influence on international treaties.
Chatbots are great to do initial research, but I often find them a little convoluted and unstructured when learning something like a programming language (I tried learning assembly through it). You can often end up missing out some important bits.

So to learn, it really depends where you're starting.

If you have programming experience in another language, this is a great starting point from Tech With Tim (https://www.youtube.com/watch?v=VchuKL44s6E).

If you've never programmed before, this one can be a bit more accessible (but is still very brief and concise) - (https://www.youtube.com/watch?v=kqtD5dpn9C8).

A good roadmap once you have the fundamentals can be found here (https://www.youtube.com/watch?v=St48epdRDZw).
> ordering the platform to give them all the details they collect, so that they can come after those criminals.

What details are you assuming Telegram are sitting on, besides the data law enforcement already collected?

Durov got arrested for insufficient moderation of public channels, so my guess is that law enforcement would be able to get exactly the same data as Telegram themselves sit on.

But it's hard to get a full picture without it going to public courts, for now we can only go on what's being reported.
your reasoning is a rather garbled.
I find books from the early development of a given subject or topic to be really valuable. They might not hold up in terms of overall knowledge, but they also make few assumptions about prior knowledge either.

The author's coming from the point of view that there may not be access to a product, equipment, technique, or expert to help you. So you can learn a set of knowledge, that has too often been erased in the non-specialist body of knowledge, through abstraction or efficiency.
yea, I seen it alot on social media where people use ChatGPT as a source for things it possible cant know. Often with leading questions.
I've noticed some BIOS' do not allow the full capacity of unified memory to be allocated, so if you do this check you can actually allocate 16GB, some are limited to 2 or 4GB, seemingly unnecessarily
this is amaizing...
Yeah, ironically in a post on writing well, the author turns a verb into a noun and then uses it to mean both "questions" and "requests".
It's possible to trust (or have faith) in my car being able to drive another 50k miles without breaking down. But if I bring it to a mechanic to have the car inspected just in case, does that mean I never had trust/faith in the car to begin with?

"I trust my coworkers write good code, but I verify with code reviews" -- doing code reviews doesn't mean you don't trust your coworker.

Yet another way to look at it: people can say things they believe to be true but are actually false (which isn't lying). When that happens, you can successfully trust someone in the sense that they're not lying to you, but the absence of a lie doesn't guarantee a truth, so verifying what you trust to be true doesn't invalidate your trust.
District 13 excellent series of movies shows that council housing ("banlieues") is exactly where these crimes happen.
To be honest after reading that, I only come to the conclusion they're a bit antisocial.

> I'm not interested in collaborating, I like to work alone. Or with people I hire. If I hire people I find you, you don't need to message me.

How would you even know that if you never can be contacted?

> I'm not interested in fixing your printer or WiFi router.

I don't believe I've ever received an email with something like that as the subject. My email is pretty public and in some fairly prominent places.

> Unless it's Indiehackers or a podcast I listen to myself like Joe Rogan.

> Talk is cheap and ineffective while creating something is much more challenging and effective to make change in the world.

More elitism. It just reeks of "I am so good I don't need anyone else".

> Spending time with people that spark my curiosity.

How are you ever going to know that if you're totally unreachable. What I've learned in life is sometimes friends can be found in the most unlikely of places.

> I'm on Twitter too if you'd like to follow more of my stories

Like why, I understand having a blog but these days I cannot see any good reason to be on Twitter.
> Maybe Ruby isn't used for accessible web development.

What an unnecessary comment. Sure, the docs website could use more work, but what does the choice of a language used for back-end development have to do with the quality of the front-end code (non-Ruby) in those same projects?
HN devolved into a cheap product review. this forum now is like reddit being taken by nothing but fake accounts hyping one mobile phone or game console or movie. so tiring.
It will depend on use case. Remember that adage. Make it work, make it right, make it fast (in that order).

So first pass yes. Then you make refactor and see if tests are green. Rinse and repeat.
You said "security is a thing because safety is nonexistent". This means that, if you had safety, you wouldn't need security. I'm asking you to explain how a perfectly safe system wouldn't need security, as someone who compromised it would be able to simply undo all the safety.
How do you compromise a safe system?
> I know regulation isn’t as popular on HN

Increasing freedom using regulation is not the right way to do it for our libertarian brethren.
TeMPOral is indeed not responsible for most of the vapid idiocies written here about the EU which annoyed me. Thank you for pointing that I’m commenting in anger.
How is it not banned in China?
I blame what I'll call the Art Teacher's Fallacy: "Pure black does not exist in nature, therefore you must never use pure black." This is equivocating on the meaning of "pure black"; your paints or computer screen also exist in nature and are therefore not "pure black" in the former sense.

In print, people went to great lengths to get the highest contrast possible. I see no reason why we shouldn't do the same on screen.
Would be nice if the hidden by default C code was syntax-highlighted as well.
The account that posted the link is 12 years old, your account is 9 months old.
Don't worry, we say the same about the US, where 12pm comes before 11pm.
I think he just likes to tell us about his 1 hour sex sessions if I'm being honest.
> Does the browser not send a TLS client cert for fetch requests that don't send credentials?

I think it doesn't. From MDN: “Credentials are cookies, TLS client certificates, or authentication headers containing a username and password.”

> Another type of authentication is sites that only allow requests from certain source IP ranges.

This one can be tricky, yeah. Ideally such devices would check Origin header, but that ship has sailed I guess.

---

But I think it should be pretty safe to allow cross-origin requests that:

- don't use credentials and

- don't go to a private network.

This means that evil.com can GET https://email.com/ without CORS, but the response won't be personalized to user (so they can read the landing page but not your messages). They can also POST https://email.com/api/send, but that wouldn't do anything as again we don't include credentials.

good.com will send a request with credentials and in this case CORS should be checked indeed.

If evil.com tries to POST https://192.168.0.1/reboot we require CORS too since it's in a private net. If evil.com tries to GET https://192.168.0.1/config we don't send preflight but check CORS headers on the response before allowing to read it.

If your site is on public net and you authorize users solely by IP – that's on you.
Well why are they calling it an OS then!
We're getting into the definition of trust, but to me trust means exactly "I don't need to verify".

If I say I trust you to write correct code, I don't mean "I'm sure your mistakes won't be intentional", I mean "I'm sure you won't have mistakes". If I need to check your code for mistakes, I don't trust you to write correct code.

I don't know anyone who will hear "I trust you to write correct code, now let me make sure it's correct" and think "yes, this sentence makes sense".
The article states that the "first remontoire was invented in 1595 by a Swiss clockmaker named Jost Bürgi." It goes on to explain how this mechanism relies on a spring.
Immediately afterwards, the article says that it "wasn’t until 1739 that the spring remontoire was invented by the famous English clockmaker John Harrison".

Could someone explain to me (as a layman as far as watches are concerned) what Harrison contributed to be honoured with inventing it for a second time? Or is there a technical difference between a remontoire with a spring and the term spring remontoire?
I think you just fundamentally misvalue what he is optimising for. It's live or die by alpha generation, and his tradeoffs are not HFT. There is going to be a whole other infra and opsec for executing the strategy.

Versioned dataframe native database hits perfectly for attracting productive quant researchers.

(Disclaimer, I'm also CTO of a quant fund and understand what he was optimising for)
You aren't, for the same reason you aren't going to retain safety in an airplane or a nuclear reactor when men with guns are shooting people and pushing random panels (and/or the other way around).

Even with "defense in depth", there's clear separation between parts that do the important stuff, and parts that protect the parts that do the important stuff from being used against the rules.

I'd go as far as dividing cybersecurity into two major areas of concern:

1) The part that constrains software systems to conform to some make-believe reality with rules stricter than natural -- this is trying to make the abstract world function more like physical reality we're used to;

2) The rules and policies - who can access what, when, why, and what for.

Area 1) should very much be a bolt-on third-party thing everyone should ideally take for granted. Area 2) is a responsibility of each organization/project individually, but it also small and mostly limited to issues specific to that organization/project.

It maps to physical reality like this:

Area 1) are the reinforced walls, floor and ceiling, and blast doors that can only be opened via a key card[0];

Area 2) are the policies and procedures of giving and revoking keycards to specific people in the company.

--

[0] - Or by crossing some wires deep in the reader, because accidents happen and cutting through blast doors cost money. I.e. real-life security and safety systems often feature overrides.
>The fact that it was wound back by the head of the EU's executive branch - Breton's boss - demoted the statement to "the opinion of the commissioner".

I don't remember anything about "the opinion of the commissioner" in the letter, but there was huge "eu commission" sign right on the top. So the letter went as complitly "official" position of commission.
So what alternatives is there to the official docs?

ruby-docs.org is sadly gone https://web.archive.org/web/20230615061406/https://www.ruby-...

There is https://rubyapi.org and https://ruby-doc.org left from what I know
That’s a worse framing than above. It doesn’t matter if it’s a cost or a profit center. It’s part of a trade off.

You could achieve a perfectly secure system, if and only if you make that system do exactly nothing. If you want to achieve any other outcome you will have to trade some measure of security for the ability to do anything. Or as Matt Levine so aptly put it: the optimal amount of fraud is non-zero
This is the sort of thing people said about Blender for a long time, and my understanding is that it’s now often used in commercial contexts.

Not a given by any means, but it’s happened before and it will happen again.
> You need to process the entire document before you can (de)serialize

Really? How so?

What does JSON do so differently to what seems to be a much more complex format of XML which has streaming parsers (eg. libxml2 push parser perusing SAX callbacks)?

Without thinking hard, a parsed JSON document is easy to parse and serialize back up to any point you got the data for.

I am guessing what you mean is that you can't easily read from the middle (you'd have to parse both backwards and forwards), but for any tree like structure, I don't see how you can avoid that (eg. CSV can't encode hierarchical structures).

I do agree on point 2: low amount of native data formats really does such (I'd add date-time/timestamp to the list too).
>the other 99.99999999% of the universe

You are off by so many orders of magnitude.
Hey HN! I'm working on Voop - a b2b phone network, leveraging eSIM & web-based UI we're turning company mobile connectivity into a SaaS. Has been really fun as an engineer getting into the telco stack - networks, switches and traffic routing take me back to university - and commercially it's been fun negotiating with the mobile networks to get wholesale access. Launching later this year in the UK and US next year, can't wait to get it off the ground.

One early achievement was buying voop.com - a very nice man in Arizona had held it since the 90s, and despite being retracted on whois, i worked out how to contact him via his custom ssl certificate on the empty holding site parked at the root domain. After a few emails and follow ups to get a response, I bought it for a not-cheap-but-not-bank-breaking amount.
I am a mobile developer using Xamarin/.NET MAUI for some years now. It is not as popular as Flutter but im pretty happy with it. In my company all of our apps are Xamarin/MAUI too and these are used by hundreds of people.
MAUI is not perfect, theres still a long way to go, but it is getting better.
We still using Xamarin because of that.
I like this project but I don't think I agree on the 3 branches that I see when I open the website.

Science is not a standalone category. In fact science is directly connected to mathematics which is directly connected to philosophy (through logic for example)

We might argue that also art is an extension of philosophy (e.g. finding objective or subjective beauty).

Probably Claude doesn't agree with this definition.
QAnon started as a gag on 4chan and then ate the Republican Party because it was too on the nose. 4chan itself is a great example - it used to be "ironically" racist, now it's just racist racist, and that's the joke.

And I was listening to a Behind the Bastards podcast about the history of the Illuminati and how a lot of the modern conspiracy beliefs about the Illuminati come from the Discordian movement parodying conspiracy beliefs.

On the one hand you have to appreciate when people game so hard they manifest a zeitgeist entirely out of their own irony-poisoned fart clouds, but on the other hand we no longer have the level of education or degree of critical thinking to offset the nonsense, nor any kind of consensus reality to tether ourselves to, and the people who believe in the flat earth and Jewish space lasers are everywhere now, and that just kind of sucks.
Say I wrote software to control a gamma ray knife, it's perfectly safe and it always does the right thing and shuts down properly when it detects a weird condition.

Compromising it would simply be a matter of changing a few bytes in the executable, or replacing the executable with another one.

This seems so obvious to me that I think you may have non-standard definitions of either safety or security.
It must be a length prefix or you're still vulnerable to length extension attacks. Suppose you had encoded "foo3"; the attacker could easily extend that to "foo3bar7".
I'm not a liberatarian nor am I a US citizen (Australian), however ...

IF you let LEO's access group chats THEN you absolutely need civilian accountable honest transparent clear oversight to avoid mission creep.

The task isn't as clear cut as "known criminal is part of OC groups", there's a clear Sorities Paradox asking when does an OC group chat become a neighbourhood watch | knitting group chat.

If our criminal of interest is part of RealMafiaChat, PrepperLifeStyles, CamThePolice, GuideDogsForVets, etc. etc. et al. then how many of these should be surveilled .. and how many other group chat members should also be surveilled ?

Yes. Take down real criminals.

Yes, it's an actual problem that real innocents get swept up Kafka-esque for being unwittingly criminal adjacent.

What's the cost benefit number and trade off for actual innocent lives ruined?
You are probably not spending time yak shaving and over engineering which is time well spent in understanding the problem and building the business :)
As far as I understand, the autocompletion specs, which is what powers this tool, are the only part of fig that is in fact Open Source

https://github.com/withfig/autocomplete
The Tailwind bit isn’t Bun specific, but the unit tests are, and the app currently uses (or eventually will use) various things such as bun’s http layer, password hashing, SQLite API, etc.
A diffraction grating made up by free electrons could do it. Alternatively total internal reflection by heating a volume with a phased array.

At least that's how we used to do it a long, long time ago.
That oil icon has been the way to indicate low oil pressure since long before I was born in the early 80s. It's newer cars that have started to add text explanations to those warning lights, because dashboards have gotten more flexible with dot matrix and lcd screens.
What was the solution he was looking for?
Again, unless you have domain expertise I suspect you are drastically underestimating the complexity of reality. As I alluded to earlier metering, pricing, and billing are _at least_ three separate complicated problems in substantial systems. There are multiple metering dimensions that interact with each other, time, and periodicity at a minimum. Saying “do billing better” without either a thorough understanding of the existing system, or an actual concrete proposal, is not useful.
That, or they were skeptical in dangerous ways. I'm thinking of the example of Richard Feynman questioning if you should brush your teeth, which although is valid to scientifically challenge. There's other examples of "smart people", especially in their own domains openly applying their technique to other fields for the detriment of observers.
So he was... but there's this coincidence... https://nitter.poast.org/RALee85/status/1827459553526448307#...
It’s interesting to notice that etymologically speaking the French and English words have completely different roots and therefore evokes slightly different ideas which are lost in translation.

Trust shares its root with truth. It’s directly related to believing in the veracity of something.

Confiance comes from the Latin confidere which means depositing something to someone while having faith they are going to take good care of it. The accent is on the faith in the relationship, not the truthfulness. The tension between trust and control doesn’t really exist in French. You can have faith but still check.
Saved for the movie recommendations in the comments.
Not sure if it's standard practice when using Business Source License, but seems to have additional terms too, like:

> BSL features are free to use and the source code is available, but users may not use ArcticDB for production use or for a Database Service, without agreement with Man Group Operations Limited. [...] Use of ArcticDB in production or for a Database Service requires a paid for license from Man Group Operations Limited

So not just "source available, go ahead and use it" but basically "free for personal use only".
Explainshell seems to have parsed manpages and extracted arguments, while this tool uses the fig autocomplete specs
And the reason it was made is because the encrypted database may as well be a shrine to a dead god; it makes you feel awe, but it's otherwise completely useless.