skysight-inc/HackerNews huggingface dataset:
> What I am saying—and what you seem to have misunderstood—is that the TOR network is most likely used, precisely because of its strength, for highly sensitive clandestine operations.

Tor seems to be a poster child of the "Nobody But Us"[1] principle the NSA likes so much: it's strong when used by American spooks, but weak when used against them. If a country developed body armor that's impervious to all rounds except their own special alloy rounds, their use and promotion of that armor is not evidence of its utter robustness.

I don't doubt a lot of darknet busts involve a lot of parallel construction - the intelligence community doesn't have to give detailed logs; summaries are enough (IP addresses, dates and times). This is before considering that the FBI is involved in both (counter) intelligence and law environment.

1. https://en.wikipedia.org/wiki/NOBUS
Oh, do they? I always thought it was considered basically identical to those.

Brb, dual licensing everything under 0BSD.
To me, what's missing from that set of recommendations is some method to increase the liability of companies who mishandle user data.

It is insane to me that I can be notified via physical mail of months old data breaches, some of which contained my Social Security number, and that my only recourse is to set credit freezes from multiple credit bureaus.
That remains to yet be seen, as I kept insisting that an LLM should be able to write this in its entirety with success with "just one more prompt change".
Ask HN: How do you automate file upload to GitHub?
I’ve been exploring Git workflows and curious how others would approach this challenge:

We need to upload a file to GitHub on demand (a table routing JSON file to minimize API calls) and want to automate it so non-technical users can push the file.

Our ideal workflow is to generate the JSON and push automatically via webhook or API call

How would you approach it?
Things you’d be concerned about with this approach?

Some additional context:

- We have to solve this problem in this way due to limitations with another code base we rely on.

- this is a private repo so we aren’t concerned about merge issues, just overwriting the file is fine
I worked on a tool more crowded than this and of late I’m coming around to the idea that these tools are all built for management which is why they get deployed. These drag and drop views aren’t that helpful for engineers. And they just make it easy for someone else to accidentally fuck up the status on your tasks.

The task list in Jira is good enough for finishing or marking one task as blocked and starting another. If anyone is using the interface like Tom Cruise in Minority Report, dragging things around at pace, it’s because people aren’t keeping their tasks updated and a tool can’t and probably shouldn’t try to fix that. You fix that by orienting the UI so devs benefit from using it, not by guilt tripping or lecturing.
Pushing then to state schools where they might be top of their class has psychological benifits for the student, if i am #1 in level 2 math vs the worst student in level 1 math, i can take pride in my academic success, this will encourage me to study more rather than feeling like the worst student in class. If i knew my high school put me in level 1 math intentionally knowing i would be the weakest student, i would be mad at the high school.
v4 but with a larger address space?
Just came to say, I still think this is the best balance between the many factors of running a dev team. I keep trying to recreate it in every tool I use.
And can make things far more complex too. You now need people to understand both ipv4 (for your public facing) and ipv6 (for your internal ones).

Instead you could just choose ipv4 only and reduce a lot of complexity. Sure there are also downsides -- if you're in a large org and are running out of RFC1918 space, or you're rationing it to smaller than /24 networks, that can be a pain (I don't see a benefit of more than 256 host addresses on a subnet as that's already far to large a broadcast domain)
Interesting, can you share a link for this quote? I can't find it anywhere.
Yes, the copy is obfuscated, but this is a new remote desktop tool, like VNC, RDP, or Teamviewer.
...So is this a transpiler of some sort?

If it is, consider looking in Nim. It compiles to C, and even compiles to Javascript. And is extremely performant while at it.
I did use it extensively at one point - very satisfied especially compared with the other systems I've used, just moved from HPC ops.
hey HN, i'm Andy, part of the Deno team. we're really excited to get a release candidate out there for what will soon become 2. it's been a long road to get here and we're really just beginning. happy to answer any questions!
https://en.wikipedia.org/wiki/There's_a_sucker_born_every_mi...
the full report[0] is a good read don't just read the summary..

>>>
But these findings should not be viewed in isolation. They stem from a business
model that varies little across these nine firms – harvesting data for targeted advertising, algorithm design, and sales to third parties. With few meaningful guardrails, companies are incentivized to develop ever-more invasive methods of collection.
>>>

[0]: https://www.ftc.gov/system/files/ftc_gov/pdf/Social-Media-6b...
My pet solution has been to make the credit reporters liable for transmitting false information to the CRAs.

Chase tells Experian I opened a new line of credit with them, but it later is demonstrated that it was a scammer with my SSN? Congratulations, $5,000 fine.

Of course this all gets priced in to the cost and availability of consumer credit. Good! Now the lenders have an incentive to drive those costs down (cheaper, better identity verification) to compete.
I requested deletion of all my data to 23andme, but they said they keep “Genetic Information”. Does that mean 23andme still has my “SNPs”?
(I’m based in Europe)

Message I received by email:

> 23andMe and the contracted genotyping laboratory will retain your Genetic Information, date of birth, and sex as required for compliance with legal obligations, pursuant to the federal Clinical Laboratory Improvement Amendments of 1988 and California laboratory regulations.

> 23andMe will retain limited information related to your deletion request, such as your email address and Account Deletion Request Identifier, as necessary to fulfill your request, for the establishment, exercise or defense of legal claims, and as otherwise permitted or required by applicable law.
They are pretty essential, without them you can only access onion services.
while i have only ever worked at places that do some form of agile development, sometimes i think about things that are just foundational elements. to be pedantic, they definitely work. they just, on their own, do not provide any utility. just a means to facilitate things to be constructed later on in development.

in particular i think of Black Triangles https://rampantgames.com/blog/?p=7745 which has been discussed here previously.
I'm very happy to not have to know what dns64 and nat64 is.
Ok. Asian Americans are consistently over represented in US higher education, especially in math-heavy fields. What discriminatory practices by these institutions are causing this?
This is a much better suggestion than most here given all of the detail shared by OP. The material is specifically directed at them. I'd suggest getting the videos too.

FWIW I have a CS degree and got the material to review because I have had to answer questions similar to OP's. It's only after strong familiarity with Conery's book that I'd recommend moving to items listed on Teach Yourself Computer Science. Why? You are trying to compress years of learning while dealing with some struggles that don't have affordances in the other material. Learning is hard work and while the Imposter's Handbook will get you started, you need to dig in much deeper in a targeted fashion.

Going deeper in relational databases is one of the things with the biggest payoffs (see Conery's other book.) It is rewarding for the self-learner to go after advanced mathematics or other CS topics, but this is a harder path with less immediate career value.
Shocked, gambling, establishment, etc.
one more step to a fully-rented, all-in-the-cloud business "PC"

security is easy because you aren't running anything locally, can't save anything locally, probably can't even do true copy/paste

when they want to fire you, the client reboots and you have nothing from your job accessible anymore

and you wonder why Microsoft is so busy building hundreds of Azure datacenters...
Yeah - I guess as a someone who considers my machining "non professional", I've never even really consider GRBL for a machine because "running G code" and "running a mill/router/lathe" feel like different categories. the lack of a reasonable GUI and access to the configurations and macros to handle things like tool changes etc. has never made me interested in GRBL. (I've only ever played with GRBL in the context of a router that needed to be run by UGS) and that felt so limited as to be useless.

That said, I'm on the brink of converting both my mill and router from UCCNC to Centroid just to be into some software that is more "machine operator aware" meaning that it offers more features targeting making my life easier as an operator, rather than simply running gcode in a machine-agnostic way.
If it is under 100 mails per day just use gmail.

If you are scared of abuse usw postfix+opendmarc (for sending), but IP/domain reputation takes time.

Otherwise one provider that offers sending+mailbox or two providers for the use-cases.
Those privileged actions are mostly irrelevant when discussing mass surveillance. Doubly so since they can just buy or acquire the data from corps.
Thank you for the excellent reply! I think I understand now... Once a business starts transacting in things other than a single type of money (say durable goods, consumables, services, or say other types of money) it becomes necessary to reconcile these non-money-denominated accounts. And for that, you need more than a single database, or single spreadsheet. You need a suite of persons or softwares that can __account__ for these stocks and flows, and the rules that come along with them.

And that is called ERP, of which "simple" money accounting is but one component of.

So root commenter's objection was more along the lines of: "those are some bold claims for mere money-accounting program. if you used a _real_ accounting program (as in an ERP) then you'd understand how complex peoples' needs can be". And the tone they phrased it elicited the downmods :)

I guess I understand. I still admire the OP and the frustration that fueled their desire to create a tool that works for them. And the tone of the readme is very endearing, it reminds me of the things my IRC friends would say to kick-off a lively discussion...

And so it has!
It's kind of surprising that a presumptively legitimate company (and YC-funded startup) would out themselves as buying black market residential proxy bandwidth, isn't it?
Thanks! This comment really makes my day!
Mailgun has a variety of ways you can receive incoming mail.
> It's also funny how you went from "AI people have no access to user data"

No, I said they didn't _yet_. hence this thing.

> Don't farm it in the first place.

how do you host photos?
What happens to the plasma that the black hole spits out? Do they have any ideas?
I get scared reading that wiki page. The fact that the Australians are powerless[1] to stop US operating Pine Gap on their own soil, says something about how important the stuff the NSA & co. is doing there. (Surveillance) Horrors beyond our understanding.

1: A good video explaining history & status quo: https://www.youtube.com/watch?v=XHMa-Ba-2Mo
> But the people rehired, oddly, are all younger. And that is ageist.

Is it though? Or is it just that younger people are just cheaper to hire? It’s the same reasoning in reverse. Older people with more experience demand a higher pay. And if you’re motivated—again, wrongly—just by money you probably will end up hiring younger. Because it’s cheaper.

And again, I think it’s dumb. Just not ageist. It’s probably greed which is not uncommon in the business world.
Complete with egotistical and ironic appropriation of the word hacker.
'Hunger Games' studio Lionsgate announce AI video deal
If the plasma jet is wildly larger than our entire galaxy, I wonder if some sort of exotic life could evolve inside the jet. Some sort of life that would be totally rare in the universe.
Their frontpage also advertises the ability to pass CAPTCHAs, whether by automation or more likely by delegating them to third-world CAPTCHA farms. If that's a major selling point for your automation service then your target market probably ranges from dubious (e.g. data scrapers trying to get around limits) to extremely dubious (e.g. ticket scalpers, spammers, click fraud, etc).
I didn't see anything in the readme about deploy hooks - do you have a feature that lets users run arbitrary commands after the image is deployed? I have common use cases for both pre (ex. database migrations) and post (ex. Resource caching, worker spinup) traffic switchover.
Air would have been a much better name. We will see if the rumored iPhone “Slim” (probably not what they would call it but it’s what I’ve seen some rumors call it) comes out in a smaller size as well.

Re: bigger is better

Yeah and it doesn’t help that they sometimes put features only on the Max phones (like the 5x zoom last year). I like the Max but I like it even better when the difference between the Pro and Pro Max is only size. I’m fairly certain that is due to other constraints (not product differentiation) but I hate it for the “normal”-size phone people when their options are “Go big or miss out on feature X”.
Why make so much trouble for yourself?
Not a phone, a mobile computer with a lot of connectivity, senors, compute power, etc.
Yep. It sucks. Zero consequences of any import for those companies as far as I'm aware too. Tiny fines end up being "cost of doing business". Then they get to externalize their failures onto us by using terms like "Identity Theft", which indicates something was stolen from ME and is now MY problem.

In actuality some not-well-maintained systems owned by <corp> were hacked or exposed or someone perpetrated fraud on a financial institution and happened to use information that identifies me. It's really backwards.

PSA: If you haven't already, go freeze your credit at Experian, TransUnion, Equifax and Innovis. It will make the perpetration of this type of fraud much more difficult for adversaries.
Why would I want it on tmpfs? Only advantage I see is slightly improved boot times (/tmp is typically cleared on boot, which is obviously not necessary for tmpfs).
Energy transparency is a clever concept and a welcome one.

The obvious solution is data centers powered on renewable/nuclear power, which doesn’t seem to be the point of this initiative.

“accelerating climate crisis” seems a tad disingenuous given how vocal the leaders in AI have been on this topic.

This also frames AI is a “no value add” vs search. Just use perplexity. It’s pretty clear it is way more valuable than search, at least for now where everyone is eager to prove AI can solve the user’s actual problem (vs use it as a wedge to drive other agendas).
The original report is here: https://www.commonwealthfund.org/publications/fund-reports/2...
That's true. They are maybe the only major player who went with that approach. I wonder if their users are that vocal?
> I’d rather have a tool that’s more customizable.

You think you would, until you do, and by then it's too late.

It's important to have good processes, but the point of all those processes is to help you make things more efficiently. Anything that leads to you spending extra time serving the process directly reduces the amount of real work you can do.
From what I recall, quantum things have well defined states, even if those states may not correspond to position / momentum / rotation / alignment.

By correctly molding the energy landscape it may be possible to set the states and state transitions up in a beneficial way for what he proposed.
Correct me if I'm wrong, Docker Swarm mode is made to manage multi node clusters. This is meant for only one single VPS.
Mandating Cyber Incident Disclosure
This is (one of the many) reasons why I care primarily about biodiversity and preventing as many human-caused extinctions as we can. Those are a permanent loss to the beauty and complexity of the universe built up over millions of years, and they are permanent and irreversible.
That's a good point. Still if the agreement is to lease to people oppressed by the US government they may agree to it. IIRC racism etc in housing is not illegal on an Indian Reservation so they might agree to certain classes of people they commiserate with if enough cash is in it for them.
very cool. thanks for sharing!
Brain goop that traps hunger neurons drives obesity
This is the most confusing branding since Xbox One.
Has to be an object name. Like glamdring.
Diamonds are forever, but they fare poorly when they meet a hydraulic press (source: Hydraulic Press Channel) or a chemist who wants "real diamond water" (source: NileRed).
I did not state a dichotomy. I did not even assert an opinion. I am asking clarifying questions based the points the previous poster made.
Just remember fam: you can use the Windows App on macOS to connect to a Linux RDP session, but you cannot use the Windows App on Windows to connect to a regular Windows RDP session :)

https://learn.microsoft.com/en-us/windows-app/get-started-co...
While I run /tmp on disk, I should point out that tmpfs is not limited to the size of RAM; contents of tmpfs can be swapped out just like any other memory allocation.
Is the idea that if my year_quarter parser is properly typed then it should detect the format change and throw an error? (kind of a silly example, just trying to be illustrative)
Try those same search terms in Kagi and you'll see Forbes at the top of the results. I use Kagi and like it a lot but you should be aware that most of their results come from Google.
I use one. I run a bot on IRC that extracts the <title> of every link posted (or downloads the image/whatever and extracts Metadata) and announces that to the channel. It has become more and more pointless to run this on a vps. Google/YouTube block the IP range, a lot of websites return the cloudflare security check, Amazon works on some days and doesn't on others... Ever since I proxy via residential proxies it just works. I'm a smooth criminal. :>
In my opinion, in today's world most jobs (at least office jobs) are "movers". They take something from point A to point B.

Often you'll have a chain of movers A - Z. Each link can almost be it's own company depending on the industry. Naturally each thinks they're important, because someone has to move it around. Of course, you could go from A straight to Z and eliminate 25 companies.

Point is many, maybe most, companies don't actually produce direct value. They facilitate and they move. Now that's much harder to analyze.
DataChain: Prepare and curate datasets for AI/ML
Of some sort. The C is transpiled to machine code so that the processor can execute it. Turns out CPUs don't understand C natively.

In addition, it automatically generates wrappers to transparently convert between Javascript's memory model and C's memory model to seamlessly allow Javascript to call upon the C functions imported using it.

Just your usual FFI, really, but with less call overhead than the FFI specification defined by Node (N-API). Albeit with some different tradeoffs made in order to accomplish that.
iPhone 16 Battery Capacities Revealed
to piss you off
I would like to hire you to come read this to my PM daily until he gets it.
Sounds like you have a great setup. My vision is to make a setup like yours more accessible really w/o having to play with low level config like ansible.
I think you should try to replace nginx with Traefik - it handles certs out of the box!
You can get 1tb SD cards for a few bucks today.
> This is also not correct. No form of socialism has worked ...

The problem is in how one draws the line to define "socialism".

I mentioned how Roosevelt was called a socialist and communist due to his New Deal. Was that socialism, or was it not socialism?

I highlighted how "One person's socialism is another person's neighborliness." That's why "socialism" as a blanket term is pretty meaningless.

If you can't define socialism, you can't tell if it worked. If your definition excludes examples which others have said is socialism, and which seem to work, which definition should we trust, and why?

> Capitalism, however, has raised the standard of living

How do you prove that? How do you disentangle correlation and causation? (As an aside, 'standard of living' is usually measured in economic terms, often coupled with growth, so choosing that definition is not unbiased.)

Can we attribute the upcoming climate catastrophe to capitalism? If 500 million people die from it, can we say that capitalism caused mass deaths and economic and literal starvation?
This is great, I've been trying to push my run performance more recently. How is this different from Strava?
Correction: Get angrier, go out, kill the highest sitting official you can get your hands on, then be beaten, jailed, signed up to war where you will detract to the Ukrainian side, fight gloriously and be the first ever Ukrainian solder to enter Moscow, inscribing you name in the annals of Victory next to Julius Caesar.
It’s not necessarily malware. There are services that are pretty upfront and pay cash money for residential US bandwidth. That said, naive people might be surprised when their IP starts getting blocked.

e.g. https://www.honeygain.com/ (something like 100GB = $20).
>iPhone 16 Plus - 4,674 mAh, up 6.6 percent

>iPhone 16 Pro Max - 4,685 mAh, up 6 percent

>iPhone 16 Plus - 27 hours video playback, 24 hours streaming video, 100 hours audio.

>iPhone 16 Pro Max - 33 hours video playback, 29 hours streaming video, 105 hours audio.

Something doesn't add up here.
Microsoft has an app called, "Windows App". Perhaps this shouldn't be surprising from a company that named their OS after a single featur, but this name is so much worse. What does it do? The name doesn't say at all.

Did it really occur to nobody at Microsoft that "now open the Windows App app" is going to confuse a lot of people?

Even after reading the whole article, all I can infer is that this is a "seamless" replacement for Microsoft's "Remote Desktop". I'm assuming it's 100% Microsoft cloud based, although I'd be curious if it can be used without the Internet.
Disney to Stop Using Slack Following Hack That Exposed Company Data
How does it get the timezone from their Twitter public info exactly??
No, it was another company, I don't think a well-known name.

Opera Mini still works today on S60 phones from 2006ish. I regularly see web server log entries from a relative on my private server. But I believe it's a native Symbian app (.sis) not a Midlet. (I have working phones, but I don't have Opera Mini, so I cannot verify)
I wonder if it is possible for starlink as a company to be socially responsible.