skysight-inc/HackerNews huggingface dataset:
LE can use DNS itself as the challenge. It works something like:

- You manage the mmd45.me domain (through a dns provider, say dnsimple)

- You ask LE for a cert for imap.lan.mmd45.me (an address that doesn’t exist, but you use in /etc/hosts or something internally. Or maybe an internal dns server like a pihole or something. The rest of the internet doesn’t see this address)

- LE says “prove you own lan.mmd45.me by creating a TXT record containing <random-nonce> inside _acme-challenge.lan.mmd45.me”

- Certbot integrates with your DNS provider to create said TXT record

- LE sees the TXT record and determines you are the owner, and signs your cert. At this point certbot can just delete _acme-challenge.lan.mmd45.me because it did its job.

At no point does mail.lan.mmd45.me need to be externally resolvable to any address for this to work.
Show HN: I built a tool website based on OpenAI o1 chat
With the heat of opneai o1, I launched my first AI dialogue chat tool station. In the initial development, I completely asked while writing code in front of chatgpt. After launching, I found some people to try, and the feedback was very bad, almost all were timeout and very slow.
Later, I found chatbot-ui in github, and after a few days of optimization, I finally solved the timeout and stutch issues.

Now the website supports free conversations with o1-mini, welcome to try it out: https://chatgpt-o1.com

Let me know if you'd like to see more, and if you have any feedback or teasing, feel free to post below!
The finer the solder particles, the greater the ratio of surface oxide to actual solder. Oxidized solder consumes some of the flux's reducing effect.
Not confused at all, the person with the fallacy that wage intensive activity is insignificant in importance is. Clearly as you say returns are balanced, and the balance that has been arrived at is desperately crying out for more and cheaper labor.

EDIT: Oh, OP is you! No wonder you're getting touchy. Your original comment is wrong.
BlogWallet
It makes sense if the non-technical cofounder brings in industry insight or a portfolio of contacts that they can translate into revenue once the MVP is ready.
Sure, but regardless of your data-retention period, you still have to know where to find everything derived from anything user-generated, if you want to accurately respond to requests. You're free to argue that the GDPR is making companies do things that they already ought to have been doing, but my point is that "just don't be one of those evil user-tracking companies" is not a viable compliance policy in itself.
Am I Blue?
I use multiple Windows 2000 computers as daily drivers for hobbies, writing documents, internet, et cetera.

It's hilarious to me that I get better performance doing those things on a 20+ year old computer and OS than I used to on a recent computer simply using an internet browser.
You can configure your build to be wider than default. In order of increasing width:

- semi-extended

- extended

- extra-extended

- ultra-extended

I think by default the extended variant is included in most builds anyway, if you want to try it.

FWIW here's a sample of my usual build's extended variant: https://cdn.imgchest.com/files/b49zcjd53oy.png
My favorite thing I've ever heard said by the principal of our kids' elementary school: "Our test scores are down, which is great, maybe that will keep some of the school shoppers away this year."

Our city has a school choice program that includes a portal where you can look up these kinds of quantitative measures, and I think I agree with him. Tiger parents slosh from school to school as they chase after rankings, and, much like ill-contained liquid cargo in ships, all that motion tends to destabilize and capsize schools.

Sadly, I don't think smaller higher education institutions can afford to take such a relaxed attitude about it. They don't get to have an enrollment backstop in the form of a semi-captive audience of parents who live nearby and aren't hyperactive enough to commit to spending upwards of an hour every weekday trucking their kids back and forth across town.
This is very cool. Is the code compiled on every run or does it get cached?
Technically yes
Corporate re-domiciliation is a thing.
Before 2020 when /r/privacy stimulated conversation that was worthy of good discussion you learned Tor the software made less available nodes accessible with newer deployments, that’s why it got faster. Regardless of how many nodes existed. The routing shifted. Now it’s way faster and there's specifically designated guard nodes seemingly pinged repeatedly out to the same allied nations.
Our app <https://www.okta.com/integrations/conductorone/> is in the Okta OIN ("marketplace") using OIDC? So not sure what you mean by that?
Strange Design Decision: An Oven with French Doors
You can extend this argument to internal promotions as well, most companies expect you to first perform at the next level before you are considered for a promotion. Essentially it boggles down to being at the right place at the right time. The attributes you listed are not sufficient to run a company, you might require capital, you might require political support, you might require land or some natural resources and stuff that is not purely in your hands.
It is extremely hard to stop DDOS attacks without CF; my hoster has DDOS protection, but when there was a very large attack on our site, only CF could remedy it, and did so immediately when we panicked-moved dns and switched on bot fight. Entire attack that my hoster couldn't stop was gone. How do you do this without CF if you are a small company?
As I said a year ago, the i, l, and f serifs feel extremely non-comic. It's not right if it's not sans. IMO https://www.dafont.com/pointfree.font is still the best monospace comic font. All the others try to uncomic themselves with smoother more regular letterforms as though the goal for some reason is to become more mechanical and less lovingly human. No! I reject it! Pointfree retains the purity of the original beauty without sacrifice.

(https://news.ycombinator.com/item?id=36312200)
With v3 hidden services, relays can no longer see the plaintext of the hidden service's url.
Thanks for the feedback! Yeah, by default this kind of survey articles are generated by publicly available information through search results. So the quality depends a lot of Google's ranking mostly and your search terms. Right now we can add expert-picked documents to the KB and generate the results from the curated KB instead directly from the search. Better prompting (specific to the target field of study) and more iterations (have a quality check and rewrite accordingly) should also be very helpful.
why is it mandatory?
Yes, that's true, it is part of the intent though, that's why people say this I guess.
Paperspace lets you bring your own containers and will scale them automatically. I don't know whether that would qualify as "serverless".
A few things that I noticed in passing:

- Intel’s divesting from Altera;

- Intel seems to be eschewing the consumer device/computer market for more B2B custom collaborations, e.g. with AWS and hinted later on.

A lot of retrenchment from Intel. Once Foundry’s no longer embarrassing to Intel, though, what’s their plan for anticipating the future?
Early on there were countless pokemon clones back to the OG gameboy that were far more egregious in use of various pokemon features and methods, and there hasn't been legal claim to shut any of them down in 25 years. It is a well discussed topic with the pokemon vs palworld haters, so if Nintendo has anything, I imagine they found some minor method that probably shouldn't have had a patent anyways, but the Japanese agency over patents loving Nintendo for 100 years already gave it freely regardless.

Now with Nintendo in short of revenue and late with a new platform for Christmas with their stock taking a beating, I guess this is how they'll make up some difference and feed their wild herd of lawyers hungry for some action in the mean time.

Rabidly litigious companies still disgust me when outside developers fill a void they cannot or will not. I can buy from Amazon hard drives and entire systems filled with every Nintendo video game from the 80's on, maybe they should sic the lawyers on them instead of the little guys like Pocketpair putting a positive spin on the genre.
> A PDF of a utility bill as "proof of residency"

That's not really a EU Vs US thing though, but a "country with mandatory official declaration of residence" vs not.

France is the same as the US there, and I would assume the UK as well. Well I now realise the UK is not in the EU anymore... but France is probably not the only remaining country in the EU where you can move without some kind of administrative declaration?

Anyway the point for these countries is to not have a centralised record of where citizens live, for anti-surveillance reasons and resilience against potentially hostile authorities. So you can't ask the state to prove that you live somewhere because it doesn't have a record or if it has it cannot legally communicate it to anyone.

In contrast, Belgium for example has centralised records of residents and if your car is parked wrongly, the local police can look up the plate and call you on your registered phone number or knock to your door at your registered address, to tell you to move it. It's practical, but I find it creepy and dangerous. A hostile government would have so much power here.
The interesting thing is, the more agencies that run relays, the more they interfere with each other. So having something like US, Russia, and China a
each running 25% of the network reduces the chances of any one getting all three relays.
BS. Import doesn't work on static websites. This code is for ES6. This post is spam.
Sounds like https://arxiv.org/abs/1808.07285
I once interned in a clean room, and the equivalent story was random bad batches of wafers over months traced to one of the teams going out for super greasy pizza for lunch every week.
Great... Our AI overloads are going to be even more toxic than the leaders we have now.
Wasn't there a thing years ago where the NSA only needed 2 out of the 3 nodes if they got the right ones? Not sure if that was fixed with guard nodes or is still a thing.
Just to be clear: I think that is very much my grim argument. There is no such thing as a modern war that doesn't kill civilians and anyone who claims otherwise is living in a dangerous fantasy. There are moral distinctions between conduct in war (for instance: Hezbollah has evacuated most of northern Israel by firing over 7,500 rockets at untargeted civilian areas, in one case killing half a youth soccer team). Israel presents a clear example of the continuum: if they're capable of remote-detonating the entire leadership structure of the Radwan Force in Lebanon, what possible justification could they have for flattening tent camps in Gaza?

The fantasy is dangerous because it creates the expectation that military force can solve problems at minimal civilian cost. It can't. Wars are fought in cities, not on marked battlefields; unless we reduce ourselves back to a pre-industrial state, they will never be fought on marked battlefields again. Factor dead children into every war that ever happens from now on.

I don't like anything that is happening in the region. I don't think morally scoring Israel and Hezbollah is productive. All I have to say is that Hezbollah and Israel are military peers, and they are extremely at war right now.
We've started off focusing on search but will evolve over time to tackle other productivity drains and busywork in the modern office (think excessive meetings, form filling, timesheets, updates - basically everything we hated when we worked 9 to 5!). We plan to keep the search experience free and (hopefully) add enough value with these add-ons that people and companies consider paying us for them

Thanks for the tip on JMAP. I'm not familiar with the protocol but will look into it
Do the terms have the same meaning and difference in meaning in Japanese law, though?
Take Something Away
This is, by far, the best video on soldering I have ever seen. Soldering by hand is a dying art...My dad had a car radio repair shop - when radios were repairable (Delco: https://en.wikipedia.org/wiki/Delco_Electronics) - taught me how...like riding a bicycle, you never forget...
I started a tor relay on a spare vps about a month ago and it got guard status around 2-3 weeks in, so that info seems to be out of date.
I played Palworld before, and honestly, my first thought was Pokémon.
Putting aside pronouns in particular and given hypotheticals were a user doesn't care one way or the other about specific pronouns as long as they know the person they swipe on is identity-compatible as a dating partner:

Wouldn't it be beneficial, prior to fine-grained filtering, to start with the widest group that meets minimally sufficient criteria? That way the end group of people who meet a very aggressive and specific filtering has more options. Sure, beyond a certain size it's too unwieldy, but each user may want to min/max for different values of wieldy(ness?).

Keep in mind I know absolutely nothing about modern dating or dating apps, and it seems things move too fast for even a person coming out of a 5+ year relationship to look at the current crop of temporary/permanent mate-finding tools and really know what they're getting into.
Your GitHub link doesn't even work, and the js file being imported is just plagiarized from Google.
Let's say there's a group of people living a small, old house. They have the money to move to a bigger, newer one, but there's sentimental and other value to the one they're in.

Yeah, they don't have the latest door chain and fancy security systems, but that just means they don't open the door to random people who come knocking and are more careful and wary of burglars.

Now imagine a real estate company paying people to try and break into houses like theirs in order to scare the people into spending money and moving to a bigger and newer house they don't want to move to, claiming that the people don't know any better and need to be FUD'd for their own good.

That sounds like an evil thing to me.
There are so many quirks between the way Mail behaves on iOS vs Mac, its infuriating. At the core of it, if you are manually adding IMAP/SMTP/POP, both just need to get out of the way and stop trying to help. Very typical of Apple to think it knows better than you.
>Where's the fraud and illegality?

Read. [1]

>If they did something illegal why weren't they charged years ago?

Because the Microsoft/OpenAI deal was not even a thing "years ago". (Duh.)

That aside, I will answer the charitable interpretation of your question by sharing a bit of knowledge about how the law process works (in the Western hemisphere).

To put someone who committed fraud in jail, law enforcement conducts an investigation to gather evidence, leading to criminal charges filed by the prosecutor.

The defendant is arraigned, and pre-trial motions may be filed before the case goes to trial, where both sides present their arguments and evidence.

If found guilty, the court imposes a sentence, which can include incarceration, restitution, and fines. The defendant may appeal the verdict.

This is a very simplified overview of the whole ordeal, which could go on for years and years depending on the complexity of the case.

1: https://www.theguardian.com/technology/article/2024/aug/05/e...
To expand, generally you wouldn't want to change the identity of the document by signing it (eg change it's hash). That's bananas. If the signature was external to the document, you wouldn't need any complex and error prone rules to canonicalize. You'd just generate an HMAC tag and send it alongside (or, better yet, use an authenticated encryption like AES-GCM).
In mysql, a unique constraint will not prevent multiple nulls in that column.
I wonder: if my sentiment from https://news.ycombinator.com/item?id=41587866 is correct and Intel is essentially giving up on innovation in chip fabrication, what, if anything, does this mean for AMD? I'm quite ignorant on how AMD works, e.g. do they even have a chip fabrication plants?

If they do, can they compete with Intel's for US govt grants, or has that ship sailed now that Intel got a grant?

If not, is there room for meaningful innovation in x86 chip design?

How about TSMC? Do they now have a monopoly on state-of-the-art chip fabrication?
Nicest light microscope I've ever used.
Any Japanese folks who practice law in Japan able to comment on this? A bit tired of the armchair lawyers from the West on this one.
They’re not terrorists because they’re on a side we support. At worst, we might consider them rebels, though that’s usually reserved for people in this hemisphere.
Have two teens. They call and do voice chats (Discord, etc.) all the time. Face time is huge with their generation, for example. Now two things they don't seem to do is leave voicemails and check their voicemail.
But, they do call people tons. Way more than I do. I'm 41 and hate phone calls lol and face time? Hell no. I'm good on that. Their generation loves it.
Onion sites do not utilize an exit node.
It's not just shitty implementations here. The designers of SAML and XMLDSig cannot just blame the developers for implementing their "perfect" spec incorrectly.

The blog post above details exactly why XMLDSig can only be implemented securely, if you explicitly make an effort to ignore the spec. When following the specification leads to insecure implementations it's the spec that's shitty, and the spec authors should carry the blame.

The Open ID spec isn't great either and has its own share of issues, but in most scenarios, it doesn't rely on signature validation. If you only use the authorization code flow, breaking the ID token signature becomes ineffective, since the attacker still needs a valid authorization code from the IdP for this attack. If you restrict your implementation to what is allowed in OAuth 2.1 [1] or follow OAuth Best Practices [2], you can implement Open ID Connect pretty safely, as they eliminate the implicit grant and introduce PKCE.

I sure wish the OpenID foundation would cut all the unnecessary bloat in their spec(namely the ID Token, Implicit and Hybrid Flow and unnecessarily client-side token validation rules) and leave it as just a simple extension to OAuth 2.1 that specifies a few extra parameters and a User Info Endpoint. But if we have to leave with this over-engineered spec, I can still trust that implementations of OIDC would fail less horribly than SAML.

[1] https://oauth.net/2.1/

[2] https://oauth.net/2/oauth-best-practice/
Your niece's reasoning sounds excellent to me, I am pleased you have included it.
Two things

Saml itself is sort of a kitchen sink. It includes everything you could possibly ever want, but nobody implements all of it so you need to figure out common subset, which defeats the point of a standard.

Second, XMLSignature sucks... like badly. Only part of the response is signed, but which part there is no standard on. It is way too complicated. Why have multiple overlapping signatures is crazy. Comments arent signed but change meaning of document. A billion signature types. Etc.
What number is the threshold? afaik this isn’t really defined anywhere
It seems to be local only, but I would imagine they could add compilation to wasm in the future.
Yeah, it looks like postgres to me. Nothing pops out as incompatible, and I got 17/22.
You are laughably incorrect. Do you have kids? They are face timing and sending audio messages constantly. Maybe cut the snark or take it back over to Reddit?
An AI that understands exactly who the main talent is across the global supply chain will be very valuable.
I think there's an issue of burden of proof at play. If these microplastics were a drug, they would need to go through an expensive and onerous vetting process that consists of both safety testing and efficacy testing for a particular indication for it to be legal to sell someone if and only if a doctor specifically prescribed it for that person. Even if you believe, as I do, that efficacy testing shouldn't stop people from voluntarily accessing potential cures, safety testing doesn't strike me as unreasonable

These microplastics are crossing the blood-brain barrier in a significant portion of the population without most people even intentionally ingesting them. Hell, it's hard to avoid if you try. Our society slathers this stuff over everything. In my lifetime I've seen a giant swath of packaging for food go to plastic from some other material, presumably to cut costs. I recently bought a new oven and I guess they put those stupid plastic phone screen covers over the glass panes on both sides of the oven door. Do they just ship all glass with this stuff applied to it now?

The burden of proof to ensure these things are safe should be on the companies selling them. The companies that make these substances already have vast research arms for designing the polymers, and if they were held to even the FDA's standards for drug safety we would have a lot more studies about this stuff. These companies are also heavily subsidized by governments, which might even be part of why downward pressure on price seems to make everyone go to plastics. Like why exactly is it cheaper, even if you don't bake in the entire R&D budget of inventing them, to use novel polymers made as byproducts of petroleum than it is to make glass or cardboard packaging?

We should, in the same way that we do for pharmaceuticals, hold these orgs to a standard of demonstrating that this bioaccumulation doesn't cause some kind of harm, because the alternative is that some researcher needs to come up with a specific claim of harm, fund a study despite there being significant pressure from these orgs to never do such studies, and certainly never publish if the results might credibly make them look bad, and somehow translate that into making bespoke positive policy prescriptions that would likely be fought tooth and nail by same. That expectation is not a sane default
LinkedIn also have tools for recruiters and sales folks to find people. I believe this is where a big part of their revenues come from (they are paid tools). Although, again I cannot imagine it being that complicated.
This guy [1], at least.

1: https://www.theguardian.com/technology/article/2024/aug/05/e...
thanks Laurent! also congrats on releasing + fully believe you. just offering first impressions.
I tried it in PuTTY on Windows.

I ran into two problems.

1. Poor coverage of non-ASCII characters (it won't display simple accented letters, pound sign, euro sign, etc.).

2. []{} are cut off at the top.
> the point for these countries is to not have a centralised record of where citizens live

In the US, state DMVs effectively still know everybody's address, don't they?

And even if they wouldn't – that information is only one data broker query away in the US.

I've recently experienced this by signing up for a financial company that, after entering only my phone number and SSN, presented me with my full address and asked me whether everything looks accurate. I understand that historically and value-wise, this is part of where the resistance to centralized government databases is coming from. But practically, they already exist.

In the US, resistance against government ID for private contracts seems to come more from an intention of not wanting the government to be able to interfere with the right of people to legally transact with each other without government mandate or intervention. But even that resistance is largely over – I had to show my driver's license to every bank I ever opened an account with.
Look up knowledge graph. Its an old technique superseded by LLm