skysight-inc/HackerNews huggingface dataset:
Great research. As I've said elsewhere, Firebase's authentication model is inherently broken and causes loads of issues, and people would be better off writing a small microservice or serverless function that fronts Firebase.

Also, for anyone trying to read the article, they should put `/oneko.js` in their adblocker.
We are talking network stack, so there is no actions - just data hand-off to the actual application code.

Someone arrives at your house, gives you a package, says "this is order 123". You thank them, they leave, but then they are hit by a car before they can report this. You unpack the package and use it.

Next day, someone else arrives at your house, gives you a package, says "this is order 123". You thank them, they leave. You know you've already received order 123, so you throw package away without even taking it into the house.

This happens few more times, but you don't care, your trash can is big.

Done! You now have "exactly once delivery".

Now, some might argue this is "exactly once processing" and you should only count what the delivery person does.. but this depends on where you draw the boundary. I draw it at "I am taking the package into the house", and I've only ever took one package there, so it was exactly-once for me.

The key part here is cost. I am assuming that opening package and using its contents is hard and takes a long time; while answering the door and throwing the package away is easy. This is definitely the case with modern networking stack, which re-transmits stuff all the time, and where the loss rate is very low.
iPhone 16 Pro camera: DISAPPOINTING and MISLEADING [video]
So what's the goal here? To exact vengeance on one individual? To remove his ability to further act in this capacity?

Because what we chose instead was to spend $8 trillion on a 20 year war killing millions in Iraq and Afghanistan and still to objectively lose militarily, politically and in terms of the ability for the US to project power in the region. The Taliban control Afghanistan once again.

All while doing absolutely nothing agains the actual regime that provided material support to the 9/11 hijackers, the same regime from which the majority of the 19 hijackers (and bin Laden himself) actually came from.
I don't fully understand your question...
I saw a banner about this in my Remote Desktop app last week. I’m not sure when I’ll end up with the upgrade at work, but from the screenshots, the new app seems to be a lot of fluff. The old Remote Desktop was a little utility, which is all I ever want it to be. We’ll see how it goes. I don’t usually have to use it all that much.
If only we could give our obsolete scientific satellite tech to the NRO instead of the other way around.
if there is a trial period better get cheapest and highly reviewed mattress. Even if it's a scam you get to know it within x days and can return it.

I try to buy natural materials like latex or cotton - which cannot and are not mass produced (difficult to roll and transport from across the world)
Thanks for the gist.

The clickbait title could use an edit:

> The reason some Columbia shirts have a tiny pocket near waistline: lower import duties
OReilly: Reveal your deal Get a year of unlimited access for $499 US$299
Thanks for sharing this. I love it. Back when I played it, I definitely got the vibe that Paranoia was designed to deal with smart-ass rules lawyers!
Maryland.
On the other hand, we have industry defined standards to compress TCP headers [1] - incurring a cost to compress/decompress but resulting in lower packet sizes.

[1] https://en.wikipedia.org/wiki/Robust_Header_Compression
I bet your parents didn't give you whatever you wanted for free.

My parents gave me the necessities of life for free, but if I wanted more than that, I had to work for it. For example, I bought my first car at 15 from proceeds of a paper route I had for years.

My parents made a deal with me that they'd pay half of my tuition, and I had to come up with the other half. By the time I was a junior, I was making enough on the side I could afford the rest myself, and phoned my parents and said don't send me any more money. It felt really really good to do that.

Yes, I know that college is considerably more expensive these days.
I am sure there were some duplicate packets on the wire - it's a normal part of most network protocols. The important thing is that as far as user was concerned, it was exactly-once.
Or some crunchy memes
probably an element to it of not attracting the wrong people, they recruit largely fresh out of college and I think the expectation is that people stay, akin to a career in civil service.

If you had people cycling through one of the most critical branches of US intelligence at startup pace primarily motivated by money that probably creates some issues. Because they probably care where these people wander off to when they leave the agency
He'd still be in custody. How is what we have now better because he wasn't held by a third country?
> this article is for people who have casually heard that exactly once delivery is impossible and take it to mean exactly once processing is impossible

Those people would be better served by approximately two sentences clarifying that exactly-once processing is a different thing that can be achieved with at-least-once delivery and idempotency, rather than 20+ rambling paragraphs of redefining formal terms.
I used to use my HP-41 to help confirm my results. I wrote numerical integration, differentiation and other solvers for it. I would enter the equations and parameters and then work on the problem by hand. Once done, I could look at the result on the calculator and confirm the probability of my answer being correct within a reasonable degree of certainty (in most cases). I think I learned more this way than by simply memorizing equations.
Right, but the meaning of “delivery” in human communication is still different from how you are using it…
The dirty secret is those are also run by Marketplace, it’s the same team under the hood once you get past the handful of people dedicated to each brand.

The model has proven very successful and these brands are happy to lease their reputation for a cut of the profit and none of the work.
Cool to see how the Vulkan and OpenGL implementations differ. Also did not ever expect to see Paint Roller on HN.
Honestly, I really do find the traditional nomenclature to be a little pointless. It seems like the classic saying assumes that it's somehow okay to assume infinite time for re-delivery, but not infinite memory for memoization for some reason. On the other hand, in real life there aren't unlimited numbers of messages and you rarely want to accept infinitely stale messages either, so it's a bit moot. I'd go as far as to say that in practice you really can't guarantee a message will be delivered and processed because you will have finite bounds on time, the absolute best you can do is at least guarantee that it either was definitely processed once or probably was not and handle it accordingly. (I formerly wrote "definitely" for the latter, thinking you could do this with two-phase commit, and then realized after walking away from the computer that you absolutely can't guarantee that, of course. Distributed systems are such a pain to reason about.)

Do I misunderstand?
> What intellectually honest reason do you have for why it would be wrong if I’m watching you while you sleep? If I inventory your house while you’re away, and sell this information to the highest bidder?

This is an interesting idea, but it's a pretty far analogy from app telemetry or ad data collection. If you're really saying, "would it be wrong for me as a camera app developer to collect the videos end users record?" I suppose the answer would really be, "It depends." Like that's what Instagram does, it collects videos end users record. But without their permission? I guess not, no, but that's pretty obvious. The same would be true if you made firmware for security cameras, which happened to be pointed at my bedroom. I suppose if you asked for permission, and I granted it, go ahead - if you didn't ask for permission, I would be surprised why you would need to collect the videos as a firmware developer. The house inventory thing is the same tack - are you talking about, does it make sense for Amazon to sell my purchase history, or something? I guess they asked for permission, go ahead... Nobody forces me to use Amazon or whatever.

Instagram, Amazon, etc. do the things they do with permission. And I don't think anyone who is fully educated is surprised what the idea is for the transactional attribution data it collects. There's lying by omission, which is bad, but that is an issue of leadership and education. Everyone in the EU still chooses telemetry and free over no telemetry and paid service, when it is spelled out to them. It's too bad that leadership has to be taken in that form, but there's no alternative in the regime they built there.

If this is just a competition over the leadership and education of laypeople, so be it, but this real life experiment keeps happening, and the people who try to inject drama into ad telemetry keep losing, so I really don't think it's just about lying. There is a real lack of harm.

> reason that they don’t want to be spied on

Nobody forces you to use Instagram. If you think ad data attribution is a form of spying, go for it. Delete the free social media apps. I don't use them. I don't have Instagram, TikTok, etc. I spend less than 10m a week watching something on YouTube. I don't even have a TV in my house. Do you see? They are not enriching your life.

> In my experience literally everyone who argues... well those people still want their own privacy, they just don’t respect anyone else’s.

In my experience this is pure projection. I respect when people don't want to give permission to Instagram to collect ad telemetry when they choose to not install the app. Of course, you say these things on the Internet, but you, you personally, are not going to migrate off of Gmail, which does all the same things. This is all really about vibes, about vibes being vibesy against social media, but not vibes being vibesy against Gmail, which would be a major inconvenience to say no to, and it would suck to have to pay $35/mo for e-mail - at the very least!
Wish they'd make an SVG for my business! Hah
>They were distributed randomly throughout the country before detonation.

They were distributed through and to the Hezbollah network of members and collaborators. As far as they're 'randomly distributed through the country' it depends where Hezbollah members go in the country with the pagers in their pockets.
I neither wrote nor implied that money is the sole motivator of people. There are many things I won't do for money. For example, I won't engage in the lucrative business of drug dealing. That doesn't imply that money doesn't motivate me.

I bet you still do things for money, even if you'd rather have fun instead.
> If you have duplicate things, then you've clearly been delivered more than one thing.

Yes, that's true. But this doesn't turn on what "delivery" means, it turns on what "you" means. If "you" are downstream of a de-duplication mechanism, then "you" can get exactly once-delivery. Why is that so absurd?
makes sense but you shouldn't be paying a premium for a non-premium service. IP blocks and bandwidth have low unit cost at scale.
My mom used to sing Suzanne to my sister and I when we were little. Probably why it’s one of my favorite songs.
The concern about organizations and the governments feelings that it needs to track you is a very valid concern. Why does the government need to make sure your "hand job from a friend" venmo payment to your friend is "legally legit"? (You can get transactions flagged for this and the moderator will shame you)

Are you correct in what's going on? Yes. Are we placed in this with no option to resist? For the most part yes.
Cool pun from "No Such Agency".
I was disappointed that we never got an apology, or a plaque or wall or whatever they give out for heroes. Because all the foreign aid workers that have been killed due the CIA operation to pinpoint bin Laden via his kids DNA, definitely deserve one.

https://en.wikipedia.org/wiki/CIA_fake_vaccination_campaign_...

https://www.csis.org/blogs/smart-global-health/fake-cia-vacc...

> Terrorists began murdering polio vaccine workers, mostly women volunteers, as the Taliban banned immunizations in the areas under its control.

https://abcnews.go.com/Health/lasting-fallout-fake-vaccinati...
Draw a diagram containing a source system, a destination system, and an unreliable communication channel between them. The destination system also has an output with no unreliable communications channel.

Exactly-once delivery means that a message sent from the source system reaches the destination system exactly once, and its result reaches the output channel exactly once as a consequence.

Excactly-once processing means that a message sent from the source system produces the expected output from the destination system once, even though it may be received by the destination system more than once.

(That's a little sloppy because it could use more discussion of the conditions in which it won't be received zero times, and how those are different between exactly-once and at-most-once delivery, but that's mostly beside the point because it isn't part of the distinction between exactly-once delivery and exactly-once processing. And, while definitely technical, they always involved a somewhat idealized view of the destination system, because all communications channels, including those internal to a single device, have some degree of unreliability.)
Looks like the legal team reached out and said that making monochrome icons isn't allowed [0]

0: https://github.com/simple-icons/simple-icons/issues/11236
Re-create existing icons, since a lot of these icon packs are not very standardized (e.g. some icons are full logos, some are actual icons, some have borders, some have backgrounds, etc).

Here is a good tweet from another company on why they made their own logos: https://mobile.x.com/tcosta_co/status/1808174493170344345
Except I actually looked for the other top 10 most popular websites before making my comment, they are all there (LinkedIn, Facebook, Twitter, et al), as you may know Microsoft.com doesn't even make it to the top 100
Is this sarcasm? This seems like an uncommon thing to want.
This is all bs. It was most likely due to an ISI walk-in. https://foreignpolicy.com/2015/05/13/what-pakistan-knew-abou...
They were!
Expedia still offers refunds within 24 hours. At least for every flight I've booked originating from the US in the last few years.

I thought it was because of the DoT rule, but apparently they wouldn't be subject to that.
I wonder if this helps NSA in their recruiting process - there might be a bunch of disinterested, bored FAANG folks who could 10x their impact by serving their country instead.

Adding to the GDP is probably better in the long run but at this current moment where the tech world is, I think adding to the counterintelligence world has a better impact.
The liberal arts departments of most colleges lean heavily towards Marxism.

Do any of them even teach free market economics?
Thank god they went with a standard this time. When they launched HEIC, there wasn’t a single workable open source decoder. Hell, there wasn’t even a single non-Apple decoder.

XL color depth looks amazing.
You're correct, but in my experience the vast majority of code written is not downstream of a usable de-duplication mechanism.
How to Reason about Exceptions
$5.00/image. The math on that is absurd unless the artist is cranking what, 20 images an hour?

Feels like they thought they had an edge, probably an LLM, and it didn’t work out.

Also feels like it took $70k to generate 14,000 requirements, or the SOW is actually shit and this is all a disaster.

Disclaimer: I don’t read twitter, if all this was spelled out in the link I apologize
Maybe a PS/2 touchpad that is triggering (a bunch of) interrupts? Not sure how hardware interrupts work with RT!
Potable water is a scarce resource on planet Earth. Most water is salt water.

And that's not even talking about all the water we've horrifically polluted.
As the author, I think this is my favourite comment I've ever received. I won't even try to argue with you about my bias!
I had a similar thought as what's in your post, but didn't share because I thought the reaction would be something like this. I personally would word this as you can achieve exactly once semantics by combining at least once delivery with idempotency.
What Kiwi.com is doing with their "separate tickets plus connection insurance" model is called "virtual interlining", and it's an interesting alternative in some scenarios (well-connected airports with many alternatives). But I'd still never risk it on an important connection.

I've had a very bad experience with Kiwi.com myself: I booked a Ryanair flight on them without realizing that Ryanair is actively trying to prevent Kiwi from reselling their flights. Kiwi.com apparently works around this by booking tickets on pools of Ryanair retail accounts, to which they don't share the credentials with travelers – making mobile check-in impossible. (And Ryanair at least at the time was charging over 100€ of a "service fee" for a boarding pass print at the airport...)

This is only marginally related to booking separate tickets, but I suppose the larger point is that it's never a great situation to be stuck between the lines of two companies actively hostile towards each other, when you really depend on their cooperation to get to your destination.

"Official" interline agreements are an explicit statement that two or more airlines will make at least some reasonable effort to get you and your luggage to your destination, and will be on the hook for it (under ICAO regulations) if things don't work out.
Right, but all this assumes timing guarantees that are not present in the original impossibility result.
Anycast is a really underrated feature and I'm surprised no major VPS providers offer it. It's one of my favorite things about fly.io
Not only does it ask you to copy and paste a command in shell, but Windows apparently warns you that it will run with admin privileges.

Aside from that:

> Nowhere in the email does it say that this is a new issue that has been created, which gives the attacker all the power to establish whatever context they want for this message.

What about the non-user-controlled "(Issue #1)" in the subject line?
I think the words "delivery" and "processing" are taught around middle school. There's probably no need to have an article for it.
In cases where java is unavoidable and you're working with large blocks, it is possible to sort of skirt around the gc with certain kinds of large buffers that live outside the heap.

I've used these to great success when I had multiple long-lived gigabyte+ arrays. Without off-heap memory, these tended to really slow the gc down (to be fair, I didn't have top of the line gc algorithms because the openj9 jvm had been mandated)
Diatoms are fascinating. I recently learned about them from an excellent Journey to the Microcosmos video: https://www.youtube.com/watch?v=Ygty9HxhFK4
I guess i don't necessarily disagree with your NOBUS assessment of TOR strength, it's hard to say without confirmed facts tho. Funny I always think of crypto algorithms as the examples of NOBUS: the NIST ones, etc. Again, no confirmed facts but that would be a source and method you really wouldn't want to confirm and burn.

What do you mean by parallel constructions? Is that where LE discovers evidence through extralegal means, then needs to rebuild the narrative through a legally valid chain? Could be, but then again there's probably a lot of TOR identities that are completely out of reach for LE, leaving them with only legal construction. Wouldn't you say?

I sometimes wonder about something, too: you know those "small" cases with huge human cost, like missing child, or murder in a backwoods area? I always imagine that classified capabilities could be used to solve them. The fact they are not, is painful, and I think must be "moral trauma" for LE/IC people involved. Even more so that they can't talk to anyone about it except their organizational therapists if then.
Given the drug policy and clearance ordeal.. doubtful
> Why such a high standard for this one particular attack?

Because it was used as justification for a major escalation.

> Hezbollah attacks against Israel - and there have been literally thousands of such rocket attacks recently.

It does. Hezbollah denied it. They haven't been in the habit of doing that.

> This isn't the type of rocket that Israel uses at all.

Again, you are making claims without possibly being sure of them - unless you take the Israeli government's word for it - you cannot possibly be sure. Neither can I.

Anyhow, as it's clear that you are unwilling to entertain the possibility that this was not a Hezbollah rocket, I don't think there is anything to be gained from continuing this discussion.

I note that you are commenting from Israel. I am not. I'm a long way from this conflict. I hope that you and your loved ones are safe and can soon enjoy the kind of security and freedoms that most of us take for granted.
> The point is that it doesn't matter exactly where the deduplication matters.

Actually the point is that once deduplication is done at some layer, the layers above it will have to re-achieve exactly-once delivery.

"Yes, the TCP layer did deliver this message only once, but the receiving software crashed right after, so now the sender has to send it again."
Exactly. It's not a good idea to bypass policies at work. Just because you don't know why the policy is there or you disagree with the reason, it doesn't mean you can ignore the policy.

If you can't get your job done, then escalate the issue to your manager. You not being able to get your work done because of other teams is the kind of problem they're supposed to be solving.
If "you" are "downstream" of a "de-duplication mechanism" how do you ensure "exactly once delivery" between "you" and the "de-duplication mechanism"?
To expand on this, NSA is located on Ft. George Mead, in the state of Maryland. I have no doubt (as in, this is true) they have locations all over the world.
I understand your perspective, but I maintain that "good" (morally pure) isn't a category any of us belong to. We're all lying, hateful people to one extent or another, and lying hateful people aren't "good", even if we haven't lied or hated as much as other lying, hateful people. "Less evil" isn't synonymous with "good".

The argument that profit motivation is the origin of shady business practices ignores the existence of those businesses which pursue profit in an ethical manner. The company I work for, for instance, is highly motivated to produce a profit, but the way we go about obtaining that profit is by providing our customers with products that have real value, at fair (and competitive) prices, and by providing consistently excellent customer support. Our customers are *very* satisfied with our products and services, and they show their satisfaction with extreme brand loyalty. The profit we make year over year allows us to increase the quality of life for our employees, and keeps our employees highly motivated towards serving our customers. We pursue the good of our customers alongside our own, and we avoid shady business practices like the plague.
> 9 years

Given all the resources, I guess we all need to keep our expectations low.
Assuming you're serious, why would the CIA apologise to foreign aid workers? Maybe you can petition Médecins Sans Frontières to make a plaque, but the US security services are mandated to deal with pretty discrete and clear issues. Their remit was to find Osama. Random foreign aid workers (particularly non US citizens) are - vis-a-vis the CIA/NSA - justifiable collateral in these sorts of operations. That's just how it is, mate.