skysight-inc/HackerNews huggingface dataset:
Is there a solution like Paperwm for Windows? I've been looking for it quite some time...
Assurances mean nothing next to actions.
Think about providing your solution as a standalone/offline desktop app as well (I guess Electron-based).
While the IETF might move slower, Java has standards as well.
The java-date-time API standardization started in 2007: https://jcp.org/en/jsr/detail?id=310, than a JEP was created in 2012: https://openjdk.org/jeps/150
If you look at bin/papersway itself,

my $wm_ipc_socket = $have_sway ? $ENV{SWAYSOCK} : $ENV{I3SOCK};
my $wmipc = AnyEvent::I3->new($wm_ipc_socket);
$wmipc->connect->recv or die "couldn't connect to WM IPC socket";

(One of the reasons I moved from ratpoison to i3 in the first place was that i3 has this kind of interface, though usually I use i3-msg and jq directly. I'd be curious if there are others like it...)
My observation is that if you use a tunnel not for VPN (which typically uses one long connection) but for a SOCKS proxy (which requires a new connection for every proxied connection) then the timings strongly resemble real HTTPS timings.
It's not at all 'trivial' for the EU to have him arrested in Dubai (as opposed to France).
Quite the opposite for me it kinda just makes it seem even more amazing that it exists and works at all and how much humans have worked out about it!

There's some interesting regenerative medicine avenues (Michael Levin's stuff, planarian worms don't die from old age) that I have some hope might eventually slightly reduce the 'condemned to die' side of the picture for humans also.
Attackers aren't hampered by organizational imperatives. They are free to find targets of opportunity and move between them as it suits them.

Defenders usually have to justify their work to management and balance "real" defense work with things that reduce liability. This ends up being a prioritized list.

I blame JIRA for giving the attackers an advantage.
Windows Terminal is not unique to Windows 11. You can install it on Windows 10.

As for containers, you can install Docker or Podman or some other container infrastructure. The Windows versions of them have hooks into the Windows OS too.

TLS 1.3 can be enabled in Windows 10 by toggling a registry key.
I still didn’t get why they built this, there’s a better explanation of the feature set in the FAQ comparison with parquet: https://docs.arcticdb.io/latest/faq/

> How does ArcticDB differ from Apache Parquet?¶

> Both ArcticDB and Parquet enable the storage of columnar data without requiring additional infrastructure.

> ArcticDB however uses a custom storage format that means it offers the following functionality over Parquet:

> Versioned modifications ("time travel") - ArcticDB is bitemporal.
> Timeseries indexes. ArcticDB is a timeseries database and as such is optimised for slicing and dicing timeseries data containing billions of rows.
> Data discovery - ArcticDB is built for teams. Data is structured into libraries and symbols rather than raw filepaths.
> Support for streaming data. ArcticDB is a fully functional streaming/tick database, enabling the storage of both batch and streaming data.
> Support for "dynamic schemas" - ArcticDB supports datasets with changing schemas (column sets) over time.
> Support for automatic data deduplication.

The other answer I was looking for was why not kdb since this is a hedge fund.
https://newbeelearn.com/tools/csvonline/

it's a free CSV Viewer with charts that supports viewing data in both table and chart formats. It includes features like sorting, searching, filtering, and pagination in table view.

Recently did show hn which didn't go anywhere https://news.ycombinator.com/item?id=41311629
So what is/was the "official" repo/source then?
Because the repo at Github [1] points to the Russion repo [2], see here [3].

[1] https://github.com/bpc-clone/bypass-paywalls-firefox-clean

[2] https://gitflic.ru/project/magnolia1234/bypass-paywalls-clea...

[3] https://github.com/bpc-clone/bypass-paywalls-firefox-clean?t...
I'm reminded of this podcast with Bart Epstein.

https://podcasts.apple.com/us/podcast/is-your-edtech-really-...

We have a collective action problem.
Teaching reading without phonetics. The "new math". "Science" without the scientific method. History rewritten to match modern sensibilities.

There is a lot of evidence that the educational establishment is full of idiots. Alternatively, for the conspiracy theory that it is trying to create compliant peasants rather than educated citizens.
I am creating a RAG trained with HN post "Who is hiring".
It's nothing special, but it's just a simple project to get confident with LLMs and prompt engineering
This is why I love HackerNews. Life hacks without the endless meme spam found in reddit.
I am trying rebuild my virtual assistance business. For the longest time I have worked with realtors but the market has gone down and finding new contracts are hard.

Trying to move into doing virtual assistance for micropreneurs and sideprojects from now on exclusively. Task by task basis or regular contracts. Essentially the pitch is assign everything that is not sales and product. I think it is a good pitch targetted to folks who enjoy building stuff and considers making money out of it as a bonus. The moment they start answering support emails, and posting product updates they start to get burnt out. Trying to specialize in "burn out prevention" tasks mainly.

I am trying to figure out a way to get clients. Virtual Assistance is cheap and the competition is huge. The services are identical which essentially says, I will do what you will need me to do.
A feedback: the art and assets feel like they are AI generated but an interesting game idea, not sure if it makes sense as most the need to defend an empire that took me days to build greater than a procedurally generated one.
How about a UV oven?
The only country that is hobbled by these sanctions is the US. China will not invade Taiwan because they don't need it, and even if they do nobody will stop buying from them for this reason, since Taiwan is considered to be part of the China by most of the world (even formally by the US). It is funny that the US continues to deceive itself on this issue.
If your data can't contain a NUL byte then you could just XOR all the bytes of the message by the separator character byte itself.
I used to work at Man, and they have been using ArcticDB (including the earlier iteration) for over 10 years now.
You don't even have to get deep into the internals of LLMs to see what's wrong with your reasoning. The problem lies with the basic mechanics of:

> predict the most objectively correct next word in a sequence of words

Currently all LLMs are only determining the most probable next token, but this means they are not aware of the probability of the entire sequence of tokens they are emitting. That is, they can only build sentences by picking the most probable next word, but can never choose the most probable sentence. In practice, there are a great many very likely sentences that are composed of a fairly unlikely words. When we use the output of an LLM we're thinking it of a sequence sampled from the set of all possible sequences, but that's not really what we're getting (at least as far as probability is concerned).

There are approaches to address this: you can do multinomial sampling instead of greedy so that are casting a slightly large net or you can do beam search where your once again trying to search a broader set of possible sentences choosing by the most probable sequence. But all of these are fairly limited.

Which gets to your first remark:

> Now explain what humans are doing and why it is different.

There's very little we really know about how humans reason, but we are certainly building linguistic expressions at with a more abstract form of composition. This comment for example was planned out in parts, not even sequentially, and then reworked to the whole thing makes some sense. But at the very least humans are clearly reasoning at the level of entire sequences as their probability rather than individual tokens at a time.

The word "planning" almost tautologically implies thinking ahead of the next step. When humans write HN comments or code they're clearly planning rather than just thinking of the next most likely word over and over again with some noise to make it sound more interesting. No matter how powerful and sophisticated the mathematical models driving the core of LLMs are, we're fundamentally limited by the methods we use to sample from them.
Are 1987 loonies rare?
This was refreshing to read. Its great to see many people build themselves up on a site fixated on building for others...
> [..] That is why Durov is in jail.

Speculative. We don't know why he is in jail. Maybe his lawyers know why, maybe not. Maybe the prosecutor knows, maybe not. We don't know if there's a case. There's hardly anything we do know.

My take is he doesn't reply to LE requests related to CSAM. That is one of the few things we (as in: our governments) don't like anywhere in the world, and Telegram is known to respond slowly to [such] requests. But I won't pretend I know for sure. Cause either way, it is a neat honeypot compared to technically better protocols.
Start Java Applications Faster – Introducing Project Leyden
Wireguard connection starts with an UDP datagram starting with bytes 1, 0, 0, 0 if I am not making a mistake, so it can be easily detected by DPI unless you apply some "tricks". Of course I understand that you can use you own version of protocol where these values are changed.
I did it all in about 2-3 years. I was a big collector as a kid but didn't get back into it in a serious way until 2021. Becoming an authorized dealer is basically, fundamentally about building trust. The whole coin industry operates in a very old-school relationship-based trusted way. To become a member of most professional orgs or become an authorized dealer, you need to have 5-10 VERY solid references from other members or authorized dealers, and the only way to get those references is to be a part of the community, build trust, and build relationships by doing business with others (which means honoring your commitments and your word and writing good checks, etc.). In the end, you need to ask 5-10 people to personally vouch for you, so they'd better know you and actually trust you.
Recently after working as a frontend engineer for more than 2 years, I started doing full-stack, so I am going through the language that my new org uses (they are using GoLang) and trying to understand backend concepts as well.

I am documenting my learning here - https://github.com/hsnice16/golang_learning

My first task was to write a GitHub action to build and push the docker image on AWS ECR. While working on it, I went through a good number of blogs, and also used ChatGPT, and finally raised a PR. So I thought to write a blog on that, you can read it here - https://hsnice16.medium.com/build-and-push-the-docker-image-...
Show HN: Boards – A Modern Textboard Inspired by Classic BBSes
Hey HN!

I’d like to introduce you to Boards, a textboard that blends the culture of classic Japanese BBSes like 2Channel and Strange World with a modern chan-style interface. With over 13,000 monthly visitors, it's the second-largest English-speaking textboard, offering an active space for all kinds of text-based discussions (and a few silly posts too :P)

I've recently added several new features, including live multiplayer cursors, and there's more to discover as you explore the site!

Please check it out and give me your opinions. Thank you! (*´ ∀ `)
the safest computer is turned off, in a Faraday cage, in a vault under a mountain.
I do not know french laws specifically, but...

There are lot of direct laws about record-keeping (company accounts for instance) but there are also a lot of laws which indirectly impose requirements of record-keeping, because having records will be the only way to comply with the requirement (tracking of origin for food recalls for instance).

France almost certainly has a law that says that if you run a telecommunication service, you must respond to court orders with the following information: X, Y, Z & W.

If non-compliance with such a law is the basis for the arrest, it will be his damn problem to convince the judges, that despite being subject of many such court orders, he had a stronger legal basis for not keeping the necessary records to comply.

However, my money is on Al Capone: I would be very surprised if the charges do not (also) contain tax-evasion, securities fraud, money laundering.
First off, really appreciate you engaging with the feedback so thoughtfully!

> This does actually make it pretty robust, although it does become an issue if you actually want to support cross-site form posts. But that is a pretty niche use case.

In my opinion, the dominant security message for web applications should be: unless you are a specialist you should not be supporting cross-domain credentialed interactions. It's a simple rule that lets the browser do most of the security work for you.

The premise of your article that I most disagree with is "the automatically provided cross-origin protections are completely broken. Every single site that uses cookies needs to explicitly handle it." That's a scary line and it's simply not true for single-origin sites which is a) most sites and b) what should be encouraged.

> The reason that I put the cookie-ignoring solution first is that it is robust and flexible.

The robustness and flexibility of the solution are also add to the complexity of it (I did say "mildly"). Are the couple lines of python terribly complex? No. But middleware is a relatively big jump in complexity from just setting the `SameSite` property. If you said "in the situations where you need to support cross-origin requests, you'll have to do some extra work here" I'd have no problem with it.

> I also don't think ignoring cookies across you app is any more "mildly convoluted" that ensure that all cookies have a specific set of attributes.

Agree to disagree here, I guess, but setting cookie properties definitely easier (it's one line!) than filtering all your request cookies at runtime. The latter also involves a bunch of unnecessary computation.

> Can you elaborate? The "loosening" described is equivalent to what can be accomplished via a CORS proxy (other than possible network perspective concerns if they apply to your use case). So it isn't really loosening it. How does this make your server less secure?

Well, you're setting a header that says to allow a bunch of stuff that the browser would otherwise block (for instance, cross-origin PUT and DELETE methods). The point of CORS isn't that bad actors can't proxy it—you can always just send a curl—it's to make the median web client (i.e. your less tech-savy relative) more secure. In effect, you're disabling a chunk of CORS because it's annoying and replacing it with your own security mechanism. I don't think most people should do that, and there's better, easier advice we can give them.

> This would be nice, but it seems to mostly be a workaround, you can choose a different verb just to get CORS protection but now you can't use POST even if it is appropriate.

True, I'd also like to see them add a CREATE method with the same semantics as POST but with with CORS protections. But there's only so much you can accomplish in one proposal :P
I can get a WordPress-installed VPS with cPanel (or alternative, or a distro of my choice) for $4 with 20 TB bandwidth. IP6 for $3.9~

5 GB is extremely small for what it is.
Actually, there is "commercial grade internet" at least in my country. The main difference is that it is several times more expensive, and in the office buildings the owner doesn't allow ISPs with cheaper "residential" plans.
This looks awesome. Maybe a stupid question: appID is public, does it mean anyone can query everyone else's database if they know the appID?
European iPhones are more fun now
I'm working on a server driven UI framework for mobile apps.

Designers can push changes in Figma similar to a merge request, which can then be approved by product managers / developers and the apps UI updates on every device.

Devs don't have to touch UI anymore but can focus on pure logic.

Any app developed with this doesn't have to go through the usual release cycle for UI changes anymore.

This will decrease the time lag of mobile to web and makes it easier for us to implement and distribute campaigns.

We're in Alpha and two mobile apps with our technology are going to go live next months. A credit card app and a competitive player versus player mental arithmetic game.
That's awesome and a very thoughtful gift for him! Yes I'm planning on building alerting - BUT - I'm probably not going to expand beyond US-based stuff for the foreseeable future. It's just the niche I know and even though there's a big wide world out there, I haven't spun up my brain to learn about it all yet.

If there's any country in particular you're looking for, shoot me an email. I know a ton of other dealers in the business and I'd be happy to point you to someone who might have something he'd enjoy.
I think it's work even if it's for fun. I'm like you, I'm a software dev and I code things as a hobby. I like exploring and making things happen and doing ctf type things. Even though it's fun, it still gets tiring and I have to take break.

Even with games, they're fun until they're not. Sometimes I get a few hours into a game and then just never finish because i can't force myself to enjoy the gameplay. I feel like at that point I would call it "work", but other games I can play up to 100 hours. I don't think i've ever stayed interested in a game longer than that.

But anyway, do something else to relieve the burnout, and then get back to it. Sometimes I just need a new project.
For 900 million active monthly users of Telegram. Not all of them in tech.
For minor stuff, sure

For more complicated stuff, quite the opposite.
What I meant is even doing all this you're effectively a single 0-day away from total compromise and are now dependent on specific workarounds or on getting the update that patches the vulnerability.

Because of this I can't consider the security of the AD as any better or worse than the desktop that connects to it and it's pointless to pretend that you can even have this.

We did have a crypto locker that spread on our network this way between our AD machines. It was launched from an email in the sales department, but due to an unpatched RDP credential attack, it quickly got onto the ADs then spread across the entire WAN.

I'm not saying don't do the things you're suggesting but you should prepare the scenario where none of it matters. So one thing you missed which we now have is: WAN KILL SWITCH.
This has already been debunked.

"As it turns out, however, EUV monopolist ASML and its optics suppliers Zeiss have already considered similar setups. “Zeiss has several designs available with similar/better performance than the Shintake design,” an ASML spokesperson told Bits&Chips. So far, these haven’t generated chipmakers’ interest due to the reduced resolution and smaller field size of the design. Should this change in the future, “we will explore whether one of Zeiss’ systems makes sense.”"

https://bits-chips.nl/article/despite-superior-efficiency-ja...
Very cute and congrats. The pricing is so high for what you are providing though. For a niche stuff like this maybe $1-2 max would be okay. WordPress is free, droplets are $2-5 with 20gb diskspace + 2TB bandwidth these days (with cpanel). I hope you can make money.
It's so delicate, too. Drop the squishy pink thing and its ancillary support-meat on a random part of Earth and most likely it drowns in an ocean, freezes on a mountainside, dries out in a desert, or starves in a wasteland.

That's leaving aside the other 99.99999999% of the universe where it chokes on vacuum or is blasted by radiation.

And even in a perfect habitat with an ideal genotype and phenotype, its functional lifetime is a mere century bookended by billions of years of nonexistence.

So yeah.

I try not to think about all that.
For me, referring to Marcus Aurelius as “Aurelius” diminished the author’s credibility, like referring to Queen Elizabeth as “Windsor”. Am I being excessively pedantic?
Police got a warrant for Durov and arrested him. How is that different? Yet some people are upset anyways.

And it's not true that with electronic communication you either get full privacy or none. You can have end-to-end encrypted messages with unencrypted metadata, so that when police observe a message implicating the sender in a crime (e.g. on an arrested suspect's phone) they can get a search warrant for the IP address or phone number associated with that account and then visit the owner in person to look at the messages on their phone. This doesn't allow police to read everyone's messages all the time undetected, but does allow them to read specific people's messages if they get a warrant.

Since Telegram doesn't only have unencrypted metadata but also plenty of unencrypted messages, there must've been many cases where a search warrant would've yielded lots of useful information. If Telegram didn't properly respond to all warrants, it seems fair to launch an investigation.
nice to see fashionistas have exactly the same "best practices" mentality
Because 'we' want to. Who is this 'we' you are speaking about? Globalist authoritarian elite that you are somehow part of? Democratic voters? Communication application users? Whose this 'we'?
Its funny how Microsoft basically hides it from the world, and if you happen to know about it, you still cant buy a single licence to run on your personal PC.
And many of those numbers aren't static. They change.

The Theory of Bounded Rationality emerged as a reaction to growing awareness within the chimp troupe, of the numerous limitations of that chimp brain. Its a useful tool when coping with complex ever changing reality.
The US isn’t anywhere near a civil war.

But for the sake of argument …

The US Military is heavily dependent on reservists. There are tons of veterans with military training. The US military has a terrible record against insurgents. Soliders ordered to attack their friends and family go awol. The US military does bot train to suppress a wide scale domestic insurrection.

America is blissfully far from a civil war, bit our heavily armed populace could give the military a run for its money.
Work is tracing code written by others and implementing new features on top of that to someone else's specifications with input from non-developers on a deadline. More people involved = more work.
Am I right that the output of the lisp code is ultimately a plain GLSL shader (like one might find on shadertoy.com)?

I built a SDF-based rendering system (2D) for my game, and one of the big hurdles was how to have them be data-driven, rather than needing a new shader for each scene or object.

Would be curious if/how you tackled that problem (:
Depends on how you measure popularity. Monthly listeners to Swift songs, watchers of Messi matches? way below 950 mln.
There really should be, but the fact is there isn't a tool that does this yet. It would not be deeply hard to build, but it would mean training a model which means getting good enough training data which means taking the time to actually do it. It hasn't been done because it requires someone who is deeply knowledgable about coins AND someone who knows how to train a model and build an app, and the fact is that intersection is pretty small (it's me and probably 20 other people? Give or take). This is very much on my long-term roadmap.

In the short term, the easiest way is to find someone who does this (eg me) and just email me some pictures. I'd be happy to tell you if you've got anything good. The old school neural net between my ears can assist.

(See profile for email).
So all implementation of encryption is illegal, that's basically your stance? Because that's exactly what encryption does.