skysight-inc/HackerNews huggingface dataset:
> MITM attacks today are extremely difficult to execute. Most local networks are immune to traditional types of attacks such as arp spoofing/poisoning and wifi networks outside of one’s home have had client isolation enabled by default for at least a decade now.

I find this hard to believe when authentication of WiFi itself is basically just SSID + PSK (ie, if you know both, you can either connect to an access point, or you can be an access point that other devices will connect to ("evil twin" attack)).

If there's a reason for MITM attacks not occurring nowadays, it's probably that they're usually not very useful because everything important is meant to be protected by TLS, not that they're difficult.

Your points seem to imply that TLS in general is useless, which I think you'll have a hard time convincing security-minded people of.
What other ways are there?
> Macs are media consumption appliances

Yeah, yesterday I media-consumptioned up a whole new feature for a multi-million dollar web app on my media-consumption appliance.

You can make whatever point you're trying to make without saying things that are outright false. That tends to make people disregard the other things you say.
Canadians should be Canadian. Except that Trudeau has made it his mission to make Canada into the first “post-nationalist country”

So what is being a Canadian anymore ? It doesn’t really matter but they really should stop trying to illegal cross the northern border into the US
The bitcoin satellite broadcast stuff uses a fork of the fibre codebase with changes to the FEC to better adapt it to recovering from signal disruptions. Otherwise it's not maintained anymore.

Fibre contained a number of complementary optimizations. A couple have been merged into popular node software-- that's what compact blocks (BIP152) is. The rest are still valuable particularly now with miners frequently including never-relayed transactions, CPUs having become ever more faster relative to latency, and some of the underlying number theory toys from proposed but not ever implemented further fibre enhancements having since been implemented for other purposes. Though the unmerged parts were the harder parts to upstream.

But with many of the contributors who worked on that sort of stuff driven out by vexatious litigation and other forms of harassment, I dunno if anyone will continue that work any time soon. Although, I think there has been some interest. The remaining contributors that I think are more likely to work on things like that have been busy developing an improved combinitoric optimizer for transaction selection, but that work is almost finished.

The two major things fibre had that are missing now is using a fountain code to fill in missing data from blocks and transmission over UDP. The two can be implemented independently but they're much more powerful together. Both are independently kind of complicated to implement in a non-yolo way: the error correcting code because it seems rocketsciency and so it narrows the pool of people willing to try working on it, and the UDP because it's a whole separate P2P protocol arguably, and has a lot of connection and resource management questions that have to be competently answered (some of which were just punted on in fibre).
Either it's distracting bad at facial recognition, or disturbingly good. I wonder which.
Honestly?

I don't know. I mean I am still eventually going to get the tattoos, the meaning of all of the tattoos I want are important to me. So technically no the plan hasn't changed and I am actively talking to an artist about my next tattoo. But what exactly to do about this situation... I honestly don't know yet.

I don't even know how I would vet the ink. Just asking if they got it from Amazon sure, but I have to imagine that this is not limited to Amazon and we only learned about it due to scale.
We need equivalent of SAE J3016 levels for coding automation
Just as SAE J3016 (1) established clear definitions for self-driving vehicle levels, we urgently need an equivalent standard for coding automation.

The current landscape is filled with ambiguous claims. We often hear statements like "I built this with AI in one day," only to discover upon deeper inquiry that the project relied on pre-existing frameworks or skeletons, with AI merely implementing specific components through iterative conversations. This ambiguity highlights the critical need to distinguish between "AI-assisted" development and true "AI autonomy" in product creation and code generation. Many startups boast that their AI can produce projects from scratch, but it's challenging to gauge the actual level of human engagement required at first glance.

A standardized classification system would bring much-needed clarity, allowing us to:

- Accurately assess AI's role in development processes
- Compare different AI coding tools on an equal footing
- Set realistic expectations for AI capabilities in software development
- Foster more transparent communication about AI's involvement in projects

By establishing clear definitions and levels of AI involvement in coding, we can better navigate the rapidly evolving landscape of AI-powered software development and make more informed decisions about tool adoption and project planning.

1) https://www.sae.org/blog/sae-j3016-update
Neither of those people were running for president in the 2020 election. Even assuming that batshit insane conspiracy theory were somehow true it's still not election interference because again they weren't running.
We had this when I was in school in the '00s. It was fine.
I ain't an EE, either, but I'm pretty sure the answer boils down to "that's just how transistors work".

So you have:

- Some external power source into the MOSFET's source pin
- VBUS into the MOSFET's gate pin
- The MOSFET's drain pin into VSYS

And by some transistor magic that I as a lowly layman ain't privy to, the MOSFET only allows power to flow into the input/gate pins and out of the output pin, and prevents power from flowing back out of the input/gate pins. The datasheet does specify a P-channel MOSFET, so that might have something to do with it (the differences between P-channel and N-channel MOSFETs are a bit over my head).

If you wanted extra assurance that power won't flow back into VBUS, you could probably stick a diode between VBUS and the MOSFET's gate pin.
All current problems notwithstanding, SpaceX in 20 years of existence delivered a lot of progress to the aerospace abilities of the whole world. No matter what they'll do next, SpaceX already shown a number of important achievements.

Hope they'll continue.

Also I'm not sure if Boeing's goals are more aligned with NASA's than SpaceX's ones with those of general public - and that public would probably disapprove such things as SLS.
awesome - might try it out
This video gives a good overview of how Amazon's NGAF attitude about safety needs to be reigned in.
https://www.youtube.com/watch?v=B90_SNNbcoU&t=190s

If you are in the USA report unsafe products here:
https://www.saferproducts.gov/
A more radical definition that I have heard of, is about the disappearance of (the belief in) powerful but quite alien non-human beings. But then that's much older than the current atheism : something that monotheistic religions started a long time ago already with their "exclusivity".
300ms is easy. Just build something that does what you want with the confidence that you can optimize it later.
If you’re not building something fully decentralized, you may be able to loosen some of the constraints CRDTs require. As an example, if you can guarantee that all clients have received changes later than X date, you can safely drop any operations from before that date.
GPS already works globally thanks to a very similar gift by the US government. Phones automatically send it to 911 when you call. So it's already paired. Starlink will additionally have some idea of a phone's location just due to how the phased arrays work, but not nearly as precise as GPS.
There IS an android implementation on the play store I think. I ended up just running task warrior on a VPS and shelling in though. But that UI sucks on a phone.
Tattoo ink should be regulated as a medical product given the potential for contamination and infection.

https://amp.cnn.com/cnn/2024/07/18/health/tattoo-ink-permane...
Guessing it’s set up in a way where they can just disable dead cores
Other than norovirus and salmonella most foodborne illness isn't infection, it's intoxication from metabolic byproducts that need time to accumulate to sufficient levels.

The biggest risk here is either a chemical contaminant from a non-foodsafe cleaning product on your floor, or a physical one like a small shard of broken glass sticking to it.
Is X today the real supporter of the freedom of speech?
The Government doesn't need to be the most efficient allocator of resources, it just needs to step in where markets are failing.
Why? You can tap +>"share location" on iOS to send coordinates in chat. It works when texting 911 too
https://taskwarrior.org/docs/commands/synchronize/

> The synchronize command, which first appeared in version 2.3.0, allows your Taskwarrior instance to share tasks with other instances. You can have several instances making local changes all of which sync to a single server, and they will all be kept up to date, with changes flowing from instance to instance.

$ task sync
Syncing with foo.example.com:53589

Sync successful. 1 changes uploaded.

There was a site inthe.am which provided sync service. While that's been shut down, the code is available on https://github.com/coddingtonbear/inthe.am - the local hosting wasn't ever finished or not designed with that in mind ( https://github.com/coddingtonbear/inthe.am )
It's also great for radio, if you have two Alexa device. I've got an Echo Dot connected via the line out to my 2012 Denon receiver, and when I'm not watching TV I leave the Denon on that input. The Dot has its microphone turned off so it can't hear commands.

I've also got an Echo Show in the same room with its microphone enabled. Then I can just ask Alexa to, for example, "on Dot, listen to classical KING FM, on Dot", and the Show will tell the Dot to start streaming that.

(I say "on Dot" at both the start and end because sometimes it wants it at the front and sometimes it wants it at the back, and I was never able to figure out what determined which it wanted at the moment).

Oh, and it is also a great way to get Spotify to play through my receiver. I can use the Spotify app on my phone or tablet or desktop to queue up things but tell the app to use Spotify Connect to tell the Dot to do the actual streaming of the music.
Cellular Starlink Will Offer Free Emergency Service to All Phones
I would imagine ~99.9% of email submitted by end users is done over HTTPS which are highest risk. Servers talking to Servers are almost entirely wired so risk there is much lower which is probably why email providers have been slow to patch this.
Did you get that information from Wikipedia?
In some countries, certainly the UK in the 1960s with its 90% top tax rate, the government would've collected more tax if the rate were lower because there would have been more economic activity to tax -- or so say a lot of economists. "Laffer curve" is a good thing to search for if you want to learn more.
this is from 2012, must be run as root, uses python 2, and requires "hping3"
Yeah, there are countless people dying in the middle of the ocean or at the poles...

There is also this little gem in his message "This applies worldwide, subject to approval by country governments.". In Elon's words, it means it's never happening.
https://thezvi.substack.com/p/how-to-identify-an-immoral-maz...
Tangentially, what APIs do you guys actually pay for? (Personally or through work)
I can't even reach all of my teeth with my tongue. The ones I can always seem to feel the same unless I just drank a can of Coke. How do I know if I got them all?
> after putting $450m into Biden's campaign in 2020

This is false; he donated to state and local election offices, not Biden's campaign.[0]

[0]https://apnews.com/article/fact-checking-mark-zuckerberg-ele...
But what does "mostly" mean? You can compile the same code twice and literally get two different binaries. The bits don't match.

Sure, those collections of bits tend to do exactly the same thing when executed, but that's is in some sense a subjective evaluation.

---

Szundi said in a sibling comment that I was "completely [missing] the point on purpose" by bringing up compiler determinism. I think that's fair, but it's also why I opened my post by saying "I agree [with the parent], but I want to try to define the language better." Most compilers in use today are literally not deterministic, but they are deterministic in a different sense, which is useful as a comparison point to LLMs. Well, which sense? What is the fundamental quality that makes a compiler more predictable?

I'd like to try to find the correct words, because I don't think we have them yet.
It's a moot point; FB said it was 100% their decision to suppress speech.
The chief investment officer has ultimate decision making power to approve or reject trades. If he wanted his firm to invest in VMWare, it was going to happen.
This is the thing. I don't understand how the company is going to function once all those folks become multi-millionaires. It is a really odd situation .. I don't know if something quite like it occurred. Even G, M and F had slower slopes I think in terms of stock price. Nvidia wasn't known to have the best engineers (not disrespectful but don't think it was as hard to get in as the other tech companies 4-5 years back). I heard a story that at Microsoft back in the old days, people would wear a badge saying FUIV (FU I'm vested).
Great post. This is one of the great enshittifications affecting android. I currently use grapheneos but I'm likely going to move to iOS. More and more apps are no longer allowed to run / have broken features due to the play integrity api.

If I'm forced to live in a walled garden, might as well go with the well maintained one that isnt run by a monopolistic surveillance/advertising company.
I'm sure somewhere it crawled a forum of Googlewhack terms.

https://en.m.wikipedia.org/wiki/Googlewhack
In my experience it's usually about finding not the most optimal tool, but the lowest common denominator: something everyone 1) has access to 2) can use with minimal fuss 3) doesn't hate. They don't have to love it, they just have to be willing to tolerate it.

Depending on the team, sometimes that's just a Github Wiki attached to the repo. Or just a really long README.md with different sections. Sometimes that's a bunch of comments in the code. Sometimes that's Google Docs scattered all over the place. Sometimes, yes, it's Confluence or Notion or ClickUp or whatever some decision maker decided to buy without consulting anyone.

Just start writing. Once you get a critical mass, either people will start to adopt it, or you find that it's not really a platform problem but a cultural one, in which case probably no tool will work.
300ms?

I recently wrote my very first API servers (from-end, back-end and Redis & RabbitMq in between) using .net Core with very little real world knowledge, and I easily get <100ms responses and I know I’m not following best practices.

The biggest issue you may have, TBH, is going to be your backend database queries which is why I use Redis for caching - the same request coming in over the same n minutes gets served directly from cache by the front-end which is a huge time win for the F5’rs amongst our users.
If you don't see a difference in a thought process in your head that you can meta talk about online vs going to someone and telling them they are less-than or to put them down in another way like not hiring them or something I'm not sure what to say. One is a thought process and a description of it, the other is an offense or something illegal.
Could it be that you buy at a non-US Amazon?

I do, and my experience is nearly like yours - in opposite to what many people claim about the US Amazon (amazon.com).
So "do as I say, not as I do"?
We found more than 40 vulnerabilities in STARTTLS implementations.

In other words, the bugs are in faulty implementations, not specification.

Incidentally I was just reading about STARTTLS recently (i.e. within a month), and having to implement it, looked at the discussions about command injection, whereupon my first reaction was "seriously?"

This works by attaching additional commands to the TCP packet that sends the still unprotected STARTTLS command.

Am I the only one who thinks it should be bloody obvious that the first byte after the "\r\n" that ends the STARTTLS command should be the first byte of a TLS handshake, and that anyone who uses the term "TCP packet" needs to learn more about how TCP works?

Read bytes from the network into a buffer. At each \r\n (or \n to be more permissive), stop and parse the command. If it's STARTTLS, whatever is left in the buffer is the start of the handshake so feed that into the TLS layer. In my implementation, if I wanted to deliberately make it vulnerable, I'd have to make it more complex --- set a flag to remember, and do the TLS handshake only after parsing the whole buffer; but then, as everyone should know, TCP is a stream, so what if the buffer has a partial command in it? No. The only thing that makes sense is the bytes after STARTTLS\r\n are a TLS handshake, and maybe application data if the buffer is big enough.

Reading the linked Postfix article about how its design made it vulnerable confirms my suspicions --- they didn't understand TCP.
Fortunately you're not arguing with a "tech bro".

When I refer to government spending and money-printing I am talking about fiscal policy, which can produce inflation if not counterbalanced by taxation. The BoJ, like any central bank, sets monetary policy in response to inflation (and expected inflation) and will raise interest rates if inflation increases; this is what "implements monetary policy with the aim of maintaining price stability" means. Although most central banks, the BoJ included, consider price stability to be a state of low inflation, not necessarily zero inflation.
Yeah I guess I just meant in conjunction with Starlink but of course many pieces of technology have it
If you're able to have an actual conversation with it to clarify your intentions or for it to interpret more complex instructions, there is actually a lot of potential here
Which ones have current flowing up from the ground versus down from the sky?
I find all this screenshot blocking stuff stupid. You can just point another phone or camera at the screen to grab a "screenshot" anyway. It's just security fluff, and ultimately just degrades the user experience.
What I'm hearing is "lie or die".
Show HN: DNS.Surf – Querying DNS Resolution Results in Different Regions
Vercel's Edge functions support custom deployment regions, and by querying DNS records through DoH, you can obtain the global resolution results of DNS.
> there wasn't a standard executable format for linux beforehand (static? tarball of program and dynamic libraries? .deb file? AppImage? Flatpak? Higher-level language like java?).

By this logic there wasn't a standard executable format for Windows, either (static? zip archive of program and dynamic libraries? .msi file? installer program? UWP? higher-level language like C#?).
I never really used Vista, only 7, but it seemed like 7's UI look was watered down compared to Vista: Vista looked prettier to me from what I saw of it.
> Parterships operating under a legal gun don't really operate.

It's business, nothing personal, right? Boeing can be welcome to bid on the next project - after siphoning and wasting lots of NASA's money on this one, and losing badly a solid chunk of its own because of internal problems. Why can't partnership continue?

Nobody wants Boeing to go out of business, just to pay what they owe to taxpayers.
Unless you're making money off it, $15k + however much you have to spend on installing a new breaker panel is too much to spend on hardware that will be outdated in 2 years. If you're making money off it, but you're still cheap, then buy a Supermicro + H100s and colo it in a datacenter. If you're not cheap, you'll just use Azure. So I'm not sure who this product is supposed to be for.
The reason companies pay in shares and not dividends anymore is _because_ doing paying out profits using a share (buyback) is more tax efficient. Especially for recipients who want to let it ride in the stock market.

It doesn't seem like a genie you'll be able to put back into the bottle without reducing the net tax take.
Thank you for posting. I’m of the same mind, so I appreciate you working on this publicly. I’ve bookmarked it to check it out next time I get frustrated haha (I have a “productivity things to try” bookmark folder)
It could also be that by eating a potato only diet, you're essentially performing an elimination diet and cutting out higher calorie foods you may not have realised you were eating in the past.

Notwithstanding the health benefits of potatoes, but I bet if you threw in some other vegetables with it, you'd see an equal benefit if not greater due to the other micronutrients of other plants
All those people get paid for their products and services. They're not entitled to steal from others no matter how rich those others are.
No clocks on the write side
I’m affirming that your politics are really mainstream, they are the status quo. It just doesn’t sound that way because of accounting.
No, this doesn't seem the case here. The NASA's intent clearly was to get a spacecraft capable of flying to ISS. Where's that?
I have used this model before, running it locally with Web GPU is quite fun https://news.ycombinator.com/item?id=40715181
a cool tip is that you can name your timers... hey siri set a timer named pasta for 10 minutes. or hey siri set a timer for pasta... "how long?"... 10 minutes
On a tangent, have you ever looked into the google phone app and how it decides whether it will offer call screening?
I think it's just going to be hell from here on out until either one side or the other gives up or leadership gets replaced. Buckle in for a rough ride =/

This is what happens when leadership has their own grand ideas and doesn't care what happens to the rank-and-file grunts. All you can do is suck it up or move to a different team/dept/company...