skysight-inc/HackerNews huggingface dataset:
> I understand the technical issue but on a broader sense, the instant that a vendor supplied black box is installed behind your firewall and allowed to make any sort of communication towards a vendor controlled endpoint, doesn't it immediately technically allows full remote control?

In the sense of "isn't it now possible on technical level?", yes.

On a legal level? You're breaking into their network. At least in the US, but almost certainly in many other jurisdictions), there's a very non-zero chance you're engaged in illegal activity. https://www.justice.gov/jm/jm-9-48000-computer-fraud

On a PR level? Definitely not. The customer will be furious when they find out, and everyone who knows about it will tell everyone they know what you did, post about it on reddit/twitter/linkedin, not to mention discords and slacks. Even the helpdesk guys are gonna be telling their buddies over beers "you wouldn't believe what our netsec team caught our appliance from DumbassCo doing..."

That doesn't even get into the liabilities involved if the client has to meet security requirements from the government (as a contractor), PCI compliance, HIPPA compliance, SEC rules, etc. Imagine a client who needs compliance as a core part of their business because of your network appliance...

And then there's the liability if the remote access capability turns out to be a security vulnerability that can be exploited by outside parties, is abused by an employee, or hackers break into your company and jump off from there to your clients.

There is nothing difficult about respecting "no, you may not have remote access to our network or this system" with no reason or justification provided. They don't need to justify or explain it to you. It's their network. Change the support contract terms if necessary, but don't do anything the author idiotically suggests.

I see people claiming that "it should be assumed the vendor can access your network" - legally speaking, no, it sure shouldn't. That's like saying "if you buy a laptop with a camera and microphone you should assume the laptop manufacturer can spy on you."

If you work at a company that does this sort of nonsense, now would be an excellent time to deactivate any "hack our way into customer-owned equipment or networks" functionality and urgently schedule a meeting with some lawyers.
Study reveals molecular mechanism behind MS and other autoimmune diseases
in my case: c++

In the more general cases: No idea
I clicked on [1] and it's showing Germany's prices to be significantly higher than that of France.
I recently visited London and TNMOC was the highlight of my trip.
TLA+ is 25 years old. Despite the power it's syntax is too alien to become mainstream.
Have you considered https://FizzBee.io?
Almost Python-like syntax, has more powerful semantics, beautiful visualizations with no extra work, only formal methods system that can do performance analysis.
I don't get AI spam, but I have started getting recent news articles, generally starting from ~the end of page 1 and getting more and more common as you go further down. i find they contain maybe one word from my query in the title- so it's not just pulling them out from nowhere, but come on surely it can do better than that...

I switched to a different search engine (brave) to get away from it, the result quality seems about the same for english, but not as good for other languages- it's not amazing but it'll do
You'll be happy to know that the UI for this prominently states that you should not hand your phone to the person requesting ID. ID information is not shown on your screen. It's sent via Bluetooth after an NFC tap and a confirmation dialog.
> You are dealing with government. Its not a business like Instagram or a grocer like Costco. If IG crashes consistently or if Costco has long lines at chekout, you take your business elsewhere.

In a democracy, when the government fails, you can vote it out and get a new one... and you get as many votes as a person with 100x your spending power. In the free market, a business that effectively serves a specific market can thrive despite absolutely abysmal performance for the rest of the market. It's not unusual for a business to be better off if they can get rid of certain customers, because they're a net cost to the business. So they have every incentive to be as hostile as possible to those "customers".

> With Medicaid you dont have an option, and the govt program, unlike IG or Costco, will never go out of business due to poor business services

It's not like the poor and indigent have a lot of influence over IG & Costco either. ;-)

You'll notice that Medicaid and Medicare have different levels of service. There's a reason for that (not a very pleasant one). There are different levels of service between Medicaid to discount private health insurance (particularly pre-ACA private health insurance), and the comparison makes Medicaid look pretty good. Go compare this case to the cases against private health insurers, and then tell me that private health insurance works out better.
I was looking back in mid-2023. Looks like there was a large gap until the beginning of 2024. Glad to see it's still being maintained!
I understood the theory, but the dates don't seem to make sense. The cause can't come after the effect.
The Sleazy World of Reddit Marketing, Everything Is Fake
But but that requires an async unidirectional communication with another human (the horror!)
They also may need to transit crews to different airports, sometimes on commercial flights.
Probably more than that since the rain is all concentrated around the months of July and August. Would need to store for the rest of the year too.
To be fair, no one’s ever accused me of reading the articles before commenting :-)
This particular system wasn't nationwide, it was a system that the state of Tennesee paid 400 million dollars to Deloitte for. Conveniently, Tennesee is one of those states filled with people who think "Government bad" and gets tons of tax dollars from states like California and New York at the end of the day.
I don't know your case, but the term "rape" has been legally expanded a lot from what we might imagine when we hear the word "rape" (forceful sexual act).

Legally it can mean a case where a man met a women in a bar, she was not drunk and wanted to go home with him. She explicitly consented. Later it ends up that she was using a fake ID to get into the bar, she was only 17.9 years old in a state where the age of consent is 18. Or alternatively, the guy recently moved a block over. In his old location the age of consent was less than 18, but now he moved and he committed rape (aka, the opinion that got Richard Stallman to step down).

And no, there is no exception for mistaking the age.
https://scholarlycommons.law.wlu.edu/cgi/viewcontent.cgi?art...
There have been distributions of Kubernetes for almost as long as there has been Kubernetes.
FDA clears new way to stop bleeding in seconds [video]
Ah yes this is a good point thank you. Can probably just using a hashing function and perform a quick lookup to avoid collisions as you suggest. If there is a collision what would you suggest is the best way to deal with it? Anything else we should keep in mind when doing this?
And you don't even have to invent the aggregation from scratch

https://cidr-aggregator.pages.dev/
I always wondered why Section 230 does not have a carve-out exemption to deal with the censorship issue.

I think we'd all agree that most websites are better off with curation and moderation of some kind. If you don't like it, you are free to leave the forum, website, etc. The problem is that Big Tech fails to work in the same way, because those properties are becoming effectively the "public highways" where everyone must pass by.

This is not dissimilar from say, public utilities.

So, why not define how a tech company becomes a Big Tech "utility", and therefore, cannot hide behind 230 exception for things that it willingly does, like censorship ?
Intel Is Said to Explore Options to Cope with Historic Slump
> Ethernet will happily keep drowning you in packages at line rate, if I'm not mistaken.

It's a physical layer, so yeah, of course it will.
For the SSH case mentioned in the article, `ssh -R` trick should already resolve some one-time contingencies (assuming SSH connection is not blocked).

But if you find yourself requesting `ssh -R` too often, maybe just ask those datacenter people to setup a proper SSH Bastion for you. There are opensource solutions and enterprise-level ones (Teleport for example: https://github.com/gravitational/teleport), some also allows you to do audit and access control, which maybe important if you work for a enterprise client.

The DIY solution described in the article literally punched a hole in the firewall. The firewall people might not like it.
I'd say the mechanics are more similar to https://en.m.wikipedia.org/wiki/R/place
A great addition to an already fantastic product.
I’m hoping LLMs get better at decompiling/RE’ing assembly because it’s a very laborious process. Currently I don’t think they have enough in their training sets to be very good at it.
I'd be curious about your opinion. I have no real love for search engines, but if I'm going to the trouble of putting things on the internet in public vs. just sending them to people directly, presumably it would be because I want people outside of my circle of friends to see it. If you're not out personally marketing/reposting your blog/site places, search engines are pretty much the only other way people would find you.

And even if I saw your site on here, say, and liked it, if I don't bookmark it immediately, I'd still go to a search engine to try to re-find it in the future if I wanted to go back. Not to say you need to be doing paid ads or trying to raise your SEO or whatever, but I've had times where I remember some unique phrase from an article I read years ago and Google can use that to find the original source.
What are you using for glue? Just python?
There absolutely can be a problem despite choice existing. I'm not saying otherwise.

I'm saying the choice exists. The choices we make are the problem.
you just need to drill 60 meters down: https://ca.water.usgs.gov/mojave/mojave-morongo-hydrographs....

once you're established you can collect rainwater. https://ca.water.usgs.gov/mojave/ says:

> Most areas of the basin floor receive 4 to 6 inches of precipitation per year, although annual precipitation can be greater than 40 inches in the southern and eastern San Bernardino and the San Gabriel Mountains (Lines, 1996). Recharge to the groundwater system from direct infiltration of precipitation is minimal.

in modern units "4 inches" is 100 millimeters, so that's about 3 nanometers per second

each person needs about 6 liters of water per day (burning man recommendation, including hygiene, dishwashing, etc., but not garden irrigation) or 70 microliters per second. 70 microliters divided by 3 nanometers is about 20 square meters, so even in the desert you don't need a large catchment to keep your cistern full. this isn't the atacama

if you want to be far from civilization in america, though, the atacama is pretty good for that. parts of patagonia might be better and do have rain
Would be great if this wasn't behind a paywall so that more kids from the Bronx could read it.
IRC isn't a "platform", but you started here:

> Every message board and chatroom (bbs, forums, irc, icq, aol, et all) on the young internet was virtually uncensored and a 100% free for all

But if your definition of "virtually uncensored" is that there are uncensored instances, then IRC, forums, etc. are just as "uncensored" as ever. There's just a lot more internet users on moderated platforms now.
I'm not really interested in discussing the merits of the argument (or lack thereof); I've done this a dozen times over the last few years and I have no interest in repeating it.

I am just saying your post hugely misrepresented the argument.

That you think the argument is a load of bollocks changes nothing about that.
so what? nobody cares about such definitions since you can see the expression is used to mean everything
You don't need to use tentative phrases like "That might be the case", or "even if it is not theoretically most efficient use of that money". As the page on statista.com states:

>Rooftop solar photovoltaic installations on residential buildings and nuclear power have the highest unsubsidized levelized costs of energy generation in the United States. If not for federal and state subsidies, rooftop solar PV would come with a price tag between 117 and 282 U.S. dollars per megawatt hour. …

https://www.statista.com/statistics/493797/estimated-leveliz...

It is understandable that anyone getting free money thinks it is good. But if the less well off people (renters, etc.) learn that they are paying more for power to subsidize wealthier residents (when that money could have gone a lot further if spent on other solar projects) - don't you think that might lower enthusiasm for government subsidizing the move away from fossil fuels? This sort of reverse Robin Hood policy hurts everyone in the long run.
MongoDB Atlas Guidance Boost
Mozilla barely funds Firefox as is. All of its money is spent on other things.
i very much appreciate you sharing your knowledge!
This seems to actually address the browser - a browser must have an easy-to-use opt-out signal.

https://legiscan.com/CA/text/AB3048/id/2932358/California-20...

wonder if this only applies to chrome/safari/firefox, or possibly apps too.
String Theorists Accidentally Found a New Formula for Pi
SDL2 was not "just SDL1 with explicit window handles". There were a variety of changes and new features all over the API, including (like SDL3) major changes to the graphics subsystem (SDL1 used software rendering, SDL2 added hardware acceleration).

Also, SDL2 has evolved considerably since 2.0.0, and SDL3 continues that evolution while allowing API-breaking changes. SDL3 is not a from-scratch re-write and as an SDL user I dont anticipate migrating from SDL2 to SDL3 will be that difficult.

[edit] And SDL1/2 was never so "thin" that it didn't have its own high-level graphics system, which is useful to have out-of-the-box so that new/basic users can get stuff on screen right away.

[edit2] As ahefner points out, SDL1 was pretty "thin" by modern standards, but it still gave you enough to draw basic stuff on screen without writing your own pixel math, which was pretty helpful back in the 90's.
So they just stopped sharing it publicly? That's kinda odd.
Great work and writing - thank you!
> There are many places you can get food and seeds that are verified to be non-GMO.

Of course, at least within some margin of contamination. Identity preserved allows no more than 0.5% contamination, which is the best in the biz. But, the problem is that the earlier commenter didn't trust GMO vendors, not GMOs themselves. As in: Non-GMOs from a GMO vendor are equally untrustworthy. Hell, even a hat with a GMO vendor's logo on it is untrustworthy according to that commenter.

Unless you're sticking to food that doesn't have GMOs to begin with (which, to be fair, is almost all food!), you're going to be searching high and low to find a vendor that doesn't also dabble in GMOs.
So have a physical backup? I don't see how this is different than using google pay. Sure it could get declined, but that's why I have physical cards as backup.
> If you're looking for some inexpensive land that can be fairly remote you might do worse than Cochise county AZ

It's pretty hard to do worse than "the very small amount of water is being sucked dry because there are no regulations around water use." Once the water table compacts, it never comes back...

> Rooftop water collection for water.

It's one of the dries parts of the country. Good fucking luck.

A growing number of people in AZ and NV have to have water trucked in, and that is insanely expensive.
Not only does Reader Mode work beautifully, but, colour choice notwithstanding, the article's CSS styling is sufficiently vanilla that my own enhanced Reader Mode stylesheet (drop caps and a few other fiddly bits) works beautifully. That's often ... not ... the case.
I'm sure it was fun to build, and it's interesting to track inputs!

I fell in love with https://www.stayinsession.com ... Session can block tabs, windows, and apps while in Pomodoro focus mode with lots of granular settings. I think blocking loading of tabs should be sufficient, versus trying to block the input? (not affiliated, I just like this app)
I don't know where you're getting your data from, you're probably referring to the Harvard lawsuit.

Caltech in particular is race-blind, and the majority of people attending Caltech are Asian.
caymanjim knows his units, but the general public is so ignorant that it's common to hear people confusing a 1200-amp-hour battery with a 1200-(cold-cranking-)amp battery. even people who built a multi-voltage electrical system for their rv. the struggle is real
Since the 90’s there had been a trend towards using administrative data (e.g. POS data, tax records, customs data) over survey data for measuring things like the CPI, GDP and production statistics because it’s far cheaper, much more comprehensive, and sometimes more accurate. It’s not all used for advertising and mass surveillance.
Show HN: LookAway – Native Mac App to Reduce Eye Strain and CVS
It’s very clear in the post ZIRP era that none of the hyperscalers have infinite resources. AWS just discontinued, er, de-emphasized Cloud9 and CodeCommit. Neither of these were free, and both were substitutes for paid products that AWS customers can get elsewhere.
Did that net you a dishwasher?
Even if there were ubiquitous, 100% uptime DMV database access:

If somebody looking roughly like you (or your DMV photo anyway) learns your name and date of birth, that could be an issue: Unlike a physical or digital license/ID, you can't revoke biometrics, and you can't change your name/DOB.
Elastic waited until it was too late.
One thing I’ve learned from working at startups which don’t exist anymore:

how liberally you used your vacation policy doesn’t matter

how long your breaks were doesn’t matter

I’ve travelled and tried to make meetings while my friends or lovers were around, and in hindsight it was not worth leveraging that discipline

Helping other coworkers is more useful for perception than performing in your own duties
I'm seeing the same thing on Brave on Android.
How Ali's 'War of the Worlds' started crossover fight trend
Precisely. I think almost everyone who applies has a 1500+ SAT score and ~3.8-4.0 GPA
I use both DuckDB and SQLite at work. SQLite is better when the database gets lots of little writes, when the database is going to be stored long term as the primary source of truth, when you don't need to do lots of complicated analytical queries etc. Very useful for storing both real and simulated data long term.

DuckDB is much nicer in terms of types, built in functions, and syntax extensions for analytical queries and also happens to be faster for big analytical queries although most of our data is small enough that it doesn't make a big difference over SQLite (although it still is a big improvement over using Pandas even for small data). DuckDB only just released versions with backwards compatible data storage though, so we don't yet use it as a source of truth. DuckDB has really improved in general over the last couple years as well and finally hit 1.0 3 months ago. So depending what version you tried it out on tiny data, it may be better now. It's also possible to use DuckDB to read and write from SQLite if you're concerned about interop and long term storage although I haven't done that myself so don't know what the rough edges are.
MadSim: Deterministic Simulator for Distributed Systems
Your code should be able to execute deterministically on a simulator designed to amplify randomness, create chaos, and inject failures. This approach can expose hidden bugs that you can then reproduce deterministically until they're fixed. By surviving such chaos, your system will be more robust and ready for real-world deployment.
I've read a few CRDT papers. Perhaps you could name a specific one.
I Made a Tool That Turns Longform Videos into Short Clips with AI
Hey people of hackernews!
I created to help content creators turn longform videos into engaging shortform clips using AI. As a content creator myself, I struggled with the time-consuming process of manually sifting through hours of footage to find the best moments. That’s why I developed this tool—it analyzes your videos, identifies key moments, and automatically generates short clips ready to share on social media.
I'm currently gearing up for the official launch and would love to get some feedback from fellow creators. Your insights will help me fine-tune the tool and make it even better!

https://youtu.be/EXVHFx1dllw
All sorts of words are pronounced differently by native speakers depending on their accent.
While using SDL for drawing is optional (and seldom done if you're doing 3D) I would like to add that its drawing API is useful to have out-of-the-box so that new/basic users can get stuff on screen right away without having to write their own high-level graphics engine first.
I wrote the "Zen InterSLIP Dialing Script" and it literally went around the world.

Amazon is too large to ignore. I understand that a lot of ICMP and SYN traffic is garbage. I'd be happy to help out and block it (and I do have mitigations in place); in fact I do, by default. That's part of why Amazon is a PITA because they trigger my mitigations "at scale". Amazon doesn't help sort the wheat from the chaff: "send a PCAP (for a ping issue)". I don't learn anything by sending Amazon stuff and hearing nothing. I don't need their good traffic any more than I need their bad traffic... or the traffic which is spoofed which is attacking them.

If they can't see fit to help me help them, I don't need any of it. I'm just keeping my life simple.
India has more than ten times the population of Japan, so all other things being equal you'd expect there to be ten times as many Indian devs than Japanese devs. And all other thing are not equal, and there are probably several factors that skew things even more (English skills, cultural reasons, economical reasons).
The Null Pointer
> Why wasn't Intel interested to supply the CPU for the iPod?

Just adding some historical notes, Portalplayer's IC was used in the iPod until 2006ish ( https://en.m.wikipedia.org/wiki/PortalPlayer ), the first iphone used a Samsung ARM chip (https://en.m.wikipedia.org/wiki/IPhone_(1st_generation) ) , and fabless design companies like P.A. Semi and Intrinsity were acquired by Apple in 2008 and 2010, respectively.
British abolition of slavery led to India's indentured labour system
Wouldn't the answer be to provide a simple number for the cost of a thing (oil, solar, wind, etc), that removes the government subsidies/taxes from the equation.

Otherwise, you can tax what you don't like to oblivion or subsidise what you do like until it appears viable, but in neither case are you getting a true picture of the cost. The subsidies/tax moves a simple cost question, into the murky world of politics and society and opinion.

We are only pretending to discuss costs if the social infrastructure is determining taxes/subsidies.
Sometimes, simple feedback like this leads to a complete refactoring which addresses the main point of the refactor but misses the mark on so much more...for all of eternity.
You make the ultimate point. In a "sane?" world, once nuclear has been discovered, every country should have gone the way of France or the Soviet Union. Build nuclear everywhere with over-capacity built-in.

The problem is, once Chernobyl happened (which might have bankrupted a struggling USSR), every country became wary of nuclear as some hidden costs are now more apparent. The Fukushima disaster didn't help either: Even if you run your plant just fine, a strong earthquake can turn it into a nuclear bomb.

So we are back to basics, collecting photons from far away. Using quantity instead of sci-fi stuff. It's quite safe too, at least the panels themselves.