skysight-inc/HackerNews huggingface dataset:
This is why I’ve always stayed well behind the bleeding edge but still within earshot if anything comes along that sounds like it’s of interest to me. I usually code to work and not for pleasure, although I do a little web programming for friends, but I still use jQuery and Typescript for that, I think the only “new”thing I use is tailwind, which is a bit of a game changer for what I like to do, I never liked CSS but it worked well enough for my needs.
It does but it appears the market unit for a block of energy does not match well with what is actually needed. So you might need 1-2 hours worth of extra power to hit peak demand but you have to buy 6 and dump the 4.
The straps look cheap
Semiconductors are 'the new oil.' That has major implications for business
I assumed PreCheck was more of reimbursement cost than profit center.
Where's the hierarchy?
> Like, putting money in treasuries is basically 100% safe.

Until interest rates rise.
This is one of those things I suspect should probably be made illegal, just like fake reviews are. There is no benefit to society for companies being allowed to post fake job listings, and an awful lot of downsides to both jobseekers (wasted time and effort for a job they'll never get) and services hosting the jobs (makes their listings useless for users).

And while I hear that sometimes it's for 'compliance' reasons (can't hire an internal candidate without listing the job publicly), there should be better laws there too. It's blatantly exploiting a loophole that just about everyone would say goes against the spirit of the law/guidelines and simply shouldn't be allowed. Either jobs can't be listed if a candidate has already been chosen internally, or that companies are required to show equal consideration to both internal and external candidates.
funny but this proves that claude is now good for code?
I like statistics.
> AMD’s Zen 4 vs Zen 5 cores

> There is a lot of cool stuff in the Zen 5 core but at this point we would rather chew our hands off than lose two days of sleep trying in vain to write it up and failing because of lack of time. AMD did this by design, again, so we aren’t going to ruin our lives to make up for that crap.

Hilarious.
What's fascinating is the re-tracing of human civilization. First, they were essentially a tribe and could get by with a few basic social rules. Then they became a village and needed a few more rules. So far, fine. Everybody was cool with it. Then they became a small town - and that required far more rules, which angered the original anarchists. As more and more people concentrated in the area, the kinds of rules had to change in order to manage the crowd and ensure "essential services" were still being met. This aspect of Burning Man is fascinating.
I do largely agree with you about some things being security theater. (And cockpit doors, etc as folks like Bruce Schneier have written about).

My point was that in some examples in the article, the couple that is traveling for weeks, can easily check in their bag so they can have their souvenirs. That’s a choice available to them. Instead the scenario makes it feel like they have to not take those souvenirs home because of this evil policy.

And they have addressed that the newer CT machines will take care of the fluids rule.

So it’s not like airport security isn’t getting smarter (also with programs like pre check). They are trying to find pragmatic ways to scan for things without inconveniencing travelers.

In your example, is it really that bad that you had to check in your bags ONCE in 17 years? This is exactly what I’m talking about.

I’m totally with you about security theater. This is my first time in 20+ years in an internet thread defending a TSA policy as not that bad. But some of the examples seemed frivolous to me.
It's not a company, nobody leads it

This is sort of like meeting one vegan protester and deciding you won't eat any vegetable because you didn't like them
This is .. not what GDPR or intellectual property law says.
I know a guy who works as an IT consultant for a local telecom company. This is what he does: He calls up the data center and says he needs to connect to a server. The support staff there physically walks into the server room grabs an UTP cable and connects a router directly to the blade server. The router then assigns an IP with all ports wide open—no firewall, no nothing. An hour or so later, the support guy calls back to see if the work is done and then unplugs the cable. And that's their whole security protocol
I know the article is about concepts, but to really untangle the mess we've already created we should also figure out the necessary legal changes to make. Was the EU's cookie popup a good idea? Was it effective? What else should be done? We need to figure this out.

We need more forces acting in opposition to the inevitable conglomeration and misuse of personally identifiable information.

- At the individual level it needs to be more clear precisely when your data is going to be shared and to whom it is going to be shared, and every instance of this should require its own permission. Clauses buried in lengthy ToS documents are insufficient; the terms need to be simple and digestible by individuals of all capacities.

- Selling the data of individuals should be outlawed (including digital fingerprints), as well as use of illegally-acquired data, and the line for data anonymity strictly defined.

We should not live in a world where an individual with no criminal record is subject to evaluation based on global public data they gave no consent to distribute.
SpaceX launching private Polaris Dawn astronaut mission Aug. 27
A symbol for Asana
CORS is basically a backwards compatible hack to "fix" the bug that cookies are sent on third party requests by default.

The canonical issue that CORS solves is:

1. I log into my bank.
2. I load an untrusted site.
3. That site does `POST https://mybank.example/transfer` to transfer my money to them.

This works because of the braindead decision to include the cookies obtained in step 1 in the request made in step 3.

But to avoid breaking the web they had to do this "gently". So they did the following:

1. Add the Origin: header so that sites could check for this problem. (opt-in protection)
2. Add CORS for as much as they could without breaking too many existing sites (opt-out protection).

If you are designing a site what you probably want to do is check the Origin header and just set `Access-Control-Allow-Origin: *` (which is better than mirroring the origin as it blocks automatically-added credentials like cookies).

This doesn't fully solve the problem due to the legacy compatibility carve-out in 2 (https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS#simpl...). But was unfortunately necessary to help hotfix existing sites that were vulnerable while avoiding breaking too much (in which case it would never ship). Notably this carve-out includes HTML <form> POSTs! So if you use regular HTML forms on your site you still need to opt-in to proper protection.

These days most browser partition cookies by top-level origin anyways, so CORS is mostly obsolete. But you can't rely on that.

People will often tell you that CORS is about controlling which origins can see your content. That is mostly false. Because you can easily run a CORS proxy to access any publicly available content. What CORS does is simply prevent implicitly added authentication such as cookies and basic auth from being sent cross-domain by default (except for the carve out)
I worked for a publisher for about 10 years as a typesetter and ebook developer. There are a lot of things about the publishing industry that are antiquated, especially for non-technical publishing companies. Unfortunately it's a low margin business.

Most authors are only familiar with Microsoft Word, so on the front end you often have to take a messily styled Word document and manually caress it into a structured document that can be used for ebooks and print.

For print, a majority of non-technical publishers use Adobe InDesign and/or InCopy. Editors edit manuscripts in InCopy and typesetters style documents for print. PDFs are generally exported and sent to printers via FTP.

For ebooks, every publisher seems to have their own bespoke system. You _can_ export books in epub format from InDesign but the process for getting a clean ebook is difficult to say the least since InDesign was primarily designed for print publications. Generally, you end up structuring books for the lowest common denominator of ebook platform (epub, kindle, etc.) unless you are creating something like a children's book or a poetry book where you might do something more custom.

Many publishers use ebook distribution platforms where you upload epub, mobi, cover images via FTP. They use an XML standard called ONIX for distributing metadata that's unique to say the least...
Spoofing UDP is easy.

Spoofing TCP is useless - you actually need to receive all the packets sent to the original TCP, which means either you are already on the receiving path, or managed to put yourself on it e.g. through a BGP route advertisement - either way, it leaves some trail and much harder to carry out.

(And even so, the attacker still has to go through SSH authentication or an SSH vulnerability)
Let’s put aside security theater for a moment

One good thing these rules seem to have addressed is people should pack less things including liquids in their carryons. The side effect though is you get things like you can’t bring things like large liquids that maybe you got on a trip back.
It's amazing how you can tell which publication this is, just by looking at title. No need even to look for the domain in brackets.
One thing I greatly dislike about the settings app is the fact we can only have one section opened at once. If you are debugging, say Bluetooth and sound issues, the setting app can only exclusively show either Bluetooth or Sound, not both, (AFAIK) you can't open a second instance of the app.
1. The people who say that C is unusable, because bad things happen when it is written by people who have only half learned it, are not going to shut up.

2. The advantage of C++ is complexity management, but it does not happen by itself, it still requires painstaking craft. That is where your watering needs to go.
I don't think they mean the performance or anything like that, rather the site literally requests to eat all keyboard events (among other things). To even open dev tools on a completely different system I had to do it via the browser menu as right click, Ctrl+Shift+I, and f12 were set to be globally consumed for input on the site instead of just certain needed events in the app area.
> it can't just pass a law that says "the PAF is now free" without paying hundreds of millions of pounds in compensation to Royal Mail

Parliament absolutely can, legally. The issue is that it’ll set a bad precedent that’ll get brought up by the buyer the next time the government want to privatise something.
Show HN: AI Tool Is Now Supporting React, Angular, CSS, Svelte, Vue
Mike Lynch won legal battle. Weeks later, he, his lawyer, and codefendant died
Science is an open system. Everything is open to being "wrong"/"updated". There is nothing that grounds the system. You must be always open that your prediction of unobserved things will be wrong. To actually believe that science will one day solve the great mystery of the universe is scientism.
That just makes it funnier.
May I inquire about your private details, tiahura? Perhaps you're posting from a private beach (oh la la), or is it just a place you'd like to snorkel? Come come, spill! Give us all the linkedin/spokeo/lexisnexis tea. Let us live vivaciously through you.

Life must be good feeling unburdened by the reality of data brokers buying/selling your data! How free you must be!
That sounds amazing. Maybe a before/after picture would be nice for the front page, showing the "one whole pod per instance" setup vs the "only the bits you need" setup.
Exactly what the article is about.
Valiant effort and useful tool.

There are more generators than readers and unfortunately the incentive for the reader app is to accept malformed docs. In the end actually implementing reader becomes the exercise of accepting all popular legacy errors and leads to fewer libraries that can read the document.

Open document formats have life of their own.
Yea that’s why we have this problem today with data centers overheating.

Don’t put chips on top of each other and you’re fine.
I think it’s cool how the process of submitting feedback is quite straightforward and low-friction!

One question: is the layout of the widget customisable? I.e., mainly the font and colours? Because while the “splashy” comic-style makes for a refreshing change on the one hand, I could imagine it might not be appropriate in all contexts.

The same is true, by the way, for the entire landing page and the docs. It looks fun and distinct, but I also had some slight troubles to parse the structure and find my way around.
Conceptually yes, but specifically it's implemented by intercepting the browser's internal fetch process. So it's like a "browser-internal" proxy -- or not a proxy at all.

You could do something similar with a proxy, but it may run into issues with HTTPS, which this gets around as we are beyond the terminator. In this way, you can serve the content, and save the content, via getting in the middle of the same fetch process and the browser doesn't know the difference (mostly).
Why? A robot should be able to disprove free will by following the rules of correct reasoning, if such a thing is relatively easy, i.e. you would expect humans to ever solve it.
Show HN: Turn any Wikipedia article into a language learning "podcast"
I made this script because I was using ChatGPT voice mode as a janky implementation of this concept a while ago and found it really useful for building my Spanish vocabulary, and helping me "think in Spanish" (though probably with a stiff-sounding internal monologue). ChatGPT started refusing to return article contents verbatim (Wikipedia's TOS allow this I believe, but ChatGPT has a blanket rule against that sort of thing), so I put this script together using OpenAI & ElevenLabs to accomplish the same thing.

This works with just an OpenAI API Key, but sounds much better with ElevenLabs.
How to choose the right business model for your Open Source project
The Climate Is Changing Faster Than Culture Can Cope
> I always assumed that an architectural decision had prevented relational queries in Firebase.

Seems the biggest problem is that Firebase doesn't have relations. How can you query that which does not exist?

I'm guessing what they really want is SQL? Once upon a time when I was stuck on a Firebase project I built a SQL (subset) engine for Firebase to gain that myself, so I expect that is it.
It’s light on details but perhaps there was data that was not easy to recover.

We also have to consider the rebuild labor and if entire systems are corrupted then repurchasing new systems.
That attack you mention is a CSRF attack. CORS doesn't really protect against that. That exact attack you mention is possible if foo.test doesn't implement CSRF protection. CORS doesn't automatically provide CSRF protection.
It's literally the point of Brave New World. The whole populace is hooked on beneficial drugs so they don't want to improve themselves and their society.
thanks for trying!

the timer on the top left tells you the total elapsed time on the workout, including pauses. whereas the main timer only does a countdown/stopwatch for the current exercise.

and yes, you can leave exercise and workout names empty. i'll add some basic validation everywhere.

and yes, do let me know how it goes after you try it out!
FLAME – Auto scale parts of your existing app
"the world goes on"

This reeks of an answer given by someone who simply hasn't been impacted by an of this yet - I'm sure for those who HAVE been impacted the world didn't simply "go on" it caused real stress, problems, issues for them.
The story is a bit like the Xkcd classic

https://xkcd.com/927/

Looks like it took some years for one standard to prevail. Also TCP/IP was not clear winner in the early days.
On one hand the old Control Panel is a gawdawful mess because some of it is still running the same code as NT 4 and Win 95. On the other hand a new settings "app" is way too likely to wind up like

https://arstechnica.com/civis/threads/%E2%80%9Cdisappointing...

Maybe Copilot will stick around and be able to tell me how to change things with regedit or the policy editor when "you can't get from here with the new 'app'"

Most of all don't call it an 'app'. 'App' is too closely associated with the dumbing down and infantialization of mobile apps. I'm using Windows because I don't want to use a phone, avoid terminology, user interface devices and anything that has to do with phones.
I don't think this is the core of the concern, other aspects are much worse IMHO.

For instance, the article says "Microsoft positions its Copilot tool as a way to make users more creative and productive by capturing all the human labor latent in the data used to train its AI models and reselling it.". The Copilot data could make it a lot easier to steal sensitive business procedures and intellectual property - the data would allow any third parties to fully inspect the company procedures and sensitive data in a scale that we've never seen. It would be next to impossible to manage, categorize and protect this data. It's an intellectual property nightmare.

A good version of the technology, which we don't have yet, would allow competitors to create a copy of every employee (in the business sense) and perhaps much more efficiently compete with that company.
Perhaps this helps: While fundamentally, in theory, they (keys and operations) are symmetric, many higher-level cryptographic protocols and their implementation do have differences (such as the private key also embedding the public key, or encryption being hybrid-symmetric). If the abstraction level is not obvious from context and you are still learning, this can be confusing.
Are we trusting the unstable Elon with the location of the US Navy Warships?
This is extremely helpful information [0]. Thank you.

[0] I'm currently working on a new language for writing books.
You're absolutely right on a legal basis, but people (and companies) act on a spectrum between "legal", "moral", and "what I can get away with".
think you replied with the wrong alt account mate....
Well it seems you last released yours in 2002. That's literally 20 years ago. Things have changed a bunch since then.
The domain of the site makes senses, huh.
That's not what this is about. This is about the M365 tools that you can add to outlook/teams etc. It needs separate licensing and isn't enabled by default, you have to pay for it and assign to users/groups.
> I don’t want my mother or grandmother to be able to install apps from random sources ever.

If your mother or grandmother is tech-savvy enough to navigate the hurdles of enabling sideloading in the settings and deal with the scary warnings that come with it, then God bless them.

My mother has used Android for many years, and even though they have had their Windows installation plagued with various viruses, she hasn’t managed to install a single virus on her Android phone yet. And yes, I check every time I go back home.
It's great if GPT-1 meds increase the burn of visceral fat. But can we really say that from that study? It could very well be just the effect of the caloric deficit per se (that follows the hunger supression and delayed gastric emptying due to GLP-1).

A caloric deficit leads to a loss of visceral fat. It wouldn't suprise me, if we see the same VAT activity if we had a control group with the same caloric deficit. Only then we could calculate the direct effect of GLP-1 to the VAT acitivity.
Like how we spray weed killer everywhere even though we know it causes cancer
OK, so if we accept that something that is a neutral term can turn offensive (retarded) and that we should stop using it as a result... why not do it for other terms that have the same problem?
SilverBullet is a note-taking application for people with a hacker mindset
I stumbled upon Dodo while checking your starred repos, and I think it deserves more attention than it has; it is mature enough to be used by users who wants customizibility, vim-bindings, and easy configuration. It's one of my top options to migrate to as a mail client if I find any problems with neomutt, which I am using right now.
You are 100% right but it's no reason to pick on web in particular! When you hit a site, you may have a virtual HTML environment running a JIT virtual machine from a server that's running a virtual python environment on a virtual python environment on a virtual machine on a virtual machine, and all that runs on a virtual x86 processor which in reality is a series of microcode processors. Yes, yes, it would be so much simpler to have your web go straight to the source, microcode, and yes, things would be simple and fast... .. but ... but ABSTRACTION!!!! LETS ABSTRACT EVERYTHING EVER AS MANY TIMES AS POSSIBLE WITH AS MANY ABSTRACTION LAYERS AS POSSIBLE IT GENERALIZES TO THE GENERAL CASE ABSTRACTION GENERALIZES ALL CASES WOOOOWWWW THE COMPUTER SCIENCE OF IT ALL

That is the state of things.
How does this distinguish itself from fwknop?

https://github.com/mrash/fwknop

And what have you got to protest against DoS attacks on your packet inspection mechanism?
As they say, "I'm too poor to afford cheap things".

In the business world, that corresponds to "we can't afford to hire inexpensive, unqualified labor".
Isn't this a matter of USA national security?
Great summary. Thanks
PSA:

9 times out of 10, you can and should write "using" instead of "leveraging".
It won't stop people from bullying the vulnerable person, but it will mean that the bullied person won't have to hear the same term in a bunch of contexts, and it will mean the bully will have less plausible deniability if confronted by authority over their behavior.
And can be developed only in Europe too.
Cognitive Biases and Principles you can use to create products people love
It didn't fall - they have been overstating it for years and the cat slipped out of the bag
What a law says and what in effect happens is not really the same.
How do you GDPR a data breach?
How do you DMCA a data breach?
What do you mean by "implementation", though? Notice I said 80% of my time includes thinking. In other words, only around 20% is typing, which is the only thing LLMs help with. For me, most of my time "implementing" is thinking.
The consumer side of this would be polling a memory location for new logs, correct? It would not be possible to wake up the consumer in 7ns as that would take a FUTEX_WAKE system call with is O(microseconds).

I've been wondering about a FUTEX_WAKE that does not require a system call. Possibly, the kernel could poll a global memory area. Or maybe there is some low-level debugging API available where the kernel could be notified of a memory write by a process?
, sucking.
Correct and that is why I talked about both parents working away from home in an (post) industrialized society.

Another point that should not be lost is that homemaking/homecare is a job abet not a GDP generating one. With some of our advancements; time savings(dishwashers, clothes dryers and washing machines), food logistics(grocery stores with fresh food vs growing & canning), fast fashion(cheap clothing) we have taken the job from being a full time position to part time.

This triggers a shift in labor allocation, we now(ideally) split the part time job between the family members to allow the adults to focus on profit generating activities.