skysight-inc/HackerNews huggingface dataset:
I like to think of a breach as hole through into the hull... they don't mean the boat will sink or even ever will sink; just that the layers of security protections has been compromised.

In the case you mention it seems that happened too: internal actors could reach plaintext passwords and thus for safety the company responded by forcing password reset and disclosure (commendable as I know of companies that would not).

The term "personal data breach" is useful because it defines the range of breaches that the law focuses on (it's not interested in business data or incidents where the first layer of defence fell but the second kept it secure).

I feel it's a bit like having a determination for "road traffic incident". It helps the public, police, etc identify what is in scope... just because you have one doesn't mean you'll lose your licence or be fined - that depends on a range of factors regarding the lead up to the incident: what happened before, during and after. Similar with data breaches.

If a company has a breach it does not mean much in GDPR unless other factors are considered, so I wouldn't worry about being too focused on the term breach.
nixos is an example of a distro that is source based and can do the atomic rebuild here because it has a way to build packages against other packages that aren't "installed". In nixos, this is because there are very few things that get "installed" as the global, only thing to use. But one could imagine that Gentoo could build something that would allow them to at least build up one set of new packages without installing them and then install the files all at once.
Physical products require "test engineers" to design and run appropriate physical tests of products. It's an entire discipline worthy of study. Design for Six Sigma is a great place to start if you're ever interested in understanding ultra-high reliability applications.

https://www.youtube.com/watch?v=_g6UswiRCF0
Hey everyone!

I'm Svetloslav, a developer turned solopreneur. After years of coding, I decided to dive into creating my own projects—and this is one of the first (with many more to come!).

The idea for this app came to me when I was experimenting with AI APIs. I needed some images for my personal website, and after spending hours searching for the perfect one, I thought, Why not make an app where users can create their own images effortlessly?

That's how this app was born—a simple tool where you can generate stunning images in one click, with customizable styles to fit your needs.

Why try it?
Get 2 FREE credits when you sign up to test it out.
Plus, the first 100 users to make a purchase (any plan) will receive 20 BONUS credits!
Give it a try and let me know what you think in the comments below. Your feedback means the world to me!
this completes the move from the server side to the client side

yes, it looks a little crazy and there are certainly serious security considerations (they support ACLs it looks like) but this is the logical end point of JavaScript-based applications that jettison the hypermedia infrastructure of the web

REST (so called, see[1]) was the first step, GraphQL the second step and now this completes the move of pushing the expressiveness found on the server side over to the client side.

[1] - https://htmx.org/essays/how-did-rest-come-to-mean-the-opposi...
Uber terms mean couple can't sue after 'life-changing' crash
Everyone has their own experience, but mine is that guys tend to message when their horny, if I reply with matched energy, then they presumably rub one out and don't message for a few days and the cycle repeats.

Apparently there's a large subset of guys who can't seem to take the step of meeting up in person for irl fun. Direct questions like, "How about we meet at X place on Y day at Z time?" are never responded to. It gets old real fast.

On another note, I'd expect LLMs to enter the space soon. A dating/hookup coach has to be in the works and I wouldn't be surprised to see it pop up soon. The honest truth is that most folks put very little energy into conversations.

I'd imagine is a treasure trove of data being collected that could give people insightful feedback on whether what they are doing matches their stated intent. With at least half of the folks I talk what, I ask myself, "Why is this person on here?"
In F#, it would just be

let results = files |> Array.Parralel.map processFile

Literally that easy.

Earlier this week, I used a ProcessPoolExecutor to run some things in their own process. I needed a bare minimum of synchronization, so I needed a queue. Well, multiprocessing has its own queue. But that queue is not joinable. So I chose the multiprocessing JoinableQueue. Well, it turns out that that queue can't be used across processes. For that, you need to get a queue from the launching process' manager. That Queue is the regular Python queue.

It is a gigantic mess. And yes, asyncio also has its own queue class. So in Python, you literally have a half a dozen or so queue classes that are all incompatible, have different interfaces, and have different limitations that are rarely documented.

That's just one highlight of the mess between threading, asyncio, and multiprocessing.
Are there other distros where the switch to 64-bit time_t has already happened? What's the easiest way to figure out whether $distro uses 32-bit or 64-bit time_t? Is there something easier/quicker than writing a program to print `sizeof(struct stat)` and check if that's 88, 96 or 1098 bytes (as hinted in the article)?
Execism – Develop fluency in 74 programming languages
You have a narrow view on people's reasons for speaking.

My sisters-in-law speak because, if their jaws stop moving for a few minutes, they will suffocate and die. Persiflage is uttered that has no bearing on anything else said.
A Probability-Guided Sampler for Neural Implicit Surface Rendering
Sadly it doesn't surprise me after Honda conclusively demonstrated they had a superior technology that the Big 3 refused to license it. The Big 3 are the poster boy for not invented here.
How much reliance on third party am I subjecting myself by using Tailscale? What happens if I make a local connection to a machine/service running on Tailscale, does it still go out of the local network? If so, is the bulk of the payload transferred locally? Is there any advantage on using it if the machine/service is easily accessible over ipv6?
I've never driven a Tesla, but don't they have voice activation? Can't you say "hey Tesla, reduce AC to low"? I totally agree that tactile feedback is superior to tapping a screen, but if it had accurate voice activation that would be almost as good for me (once I got used to the weirdness of talking to the car like Knight Rider)
> FWIW, it is a verbatim quote from their bio. Using one’s bio to dunk on them is an age old tradition.

That's not what was paraphrased.

> Comment is still insufferable. Perfect caricature of SF HN tech bro.

I believe that a related idea, "Don't roll your own crypto[graphy]", is widely accepted good advice.

Authentication in Web systems overlaps with that, and has a bit of the same nature.

Though the nuances in Web systems aren't as hard as the nuances can get in cryptography math and protocols, and in computer implementation of same. Still, it's much harder than it looks, to get sufficiently right. Most people don't have time for that.

Personally, I take both seriously. I don't touch cryptography implementation myself directly. And lately (as I said in the original comment), I'm trying to use off-the-shelf Web authentication. Because, as I implied, it's hard get all the nuances right.

Aside: "Dunk on" of other commenters sounds to me like contemporary social media personal attack sport, which I'm trying to avoid on HN. When I stopped by HN on Saturday morning, to get a little startup business mindset/enthusiasm, before spending the day working on an indie Web project, I wasn't looking to have a reasonable assessment called "insufferable", by some random new account. (A new account of someone who seems to be having a bad day, and getting off on the wrong foot with HN, with every single of their 6 comments attacking other commenters.) And then, after I tried to respond reasonably constructively to them, some other person, who might've misread the situation, jumps in, to double-down for the new account. Maybe all 3 of us would like to start the day over, and not spread bad day contagion further?
This is ridiculous. Their 12 year old daughter agreed to Uber Eats, now they are bound and cannot sue after they were in a wreck with an Uber?

Why do state courts make such ridiculous decisions?
I’d recommend the earlier book in the series, The Little Schemer, for what it’s worth! It’s more aimed towards beginners. Similar format to this book.
HIPAA is a legal framework to describe lawful disclosure of health information- defining who and when, and what steps must be taken when unauthorized / impermissible disclosure happens.

It is technologically agnostic, because it applies whether your doctor is fully remote and everything uses electronic records, or if the provider is still using pen and paper and carrier pigeons.

For actual security details, there may be some regulations with the change to the mandating of electronic records, but nothing in HIPAA ourself. For that, you want to look for organizations that have a certification like SOC2 or similar.
ChatGPT can be hilariously bad at less common things, for example, I asked it for the uses of polyurethane foam in my native language, and it suggested it would be great for decorating cakes.
It would be a little unsettling to run across somebody who was successfully creating foods which resembled meat who had chosen "resembles human" as the direction that they'd like to pursue.
no. I am using papaparse, i am a fan of your tiny libs.
This is unironically amazing. I love Flask for small projects, but setting it up to work with a database (using sqlalchemy and anything else I tried) is a lot more work than it is with Django's batteries-included approach. This nanodjango really seems to be the best of both worlds, and this utility command to then convert it to a full Django app (if it works as advertised), is the icing on the cake [0]:

nanodjango counter.py convert /path/to/site --name=myproject

[0] https://nanodjango.readthedocs.io/en/latest/get_started.html...
Can someone tell me why cutting sleep to get more work done helps overall productivity? I have been a solid 7.5 a night sleeper for decades (it’s a blessing, I know). I can’t imagine getting 4-6 a night. Sure that makes the day about 20 hours instead of 16, but I feel like my mental capacity is so diminished on low sleep, that any time gained is wasted being unfocused and groggy.

It reminds me of drug addicts who claim they need it to operate. It works in the short term, but long term it becomes a catch up game. And once sober they realize they could accomplish things in-spite of the drugs, not because of the drugs.
How do you measure the value of bitcoin, if not by its market cap? Do you interview everyone and ask them how much they're willing to pay for a service that allows them to transfer money digitally without institutional oversight/bureaucracy?
> I notice that a lot of people seem to only focus on the things that AI can't do or the cases where it breaks, and seem unwilling or incapable of focusing on things it can do.

I might be one of these people, but in my opinion, one should not concentrate on things that it can do, but for how many of the things where an AI might be of help for you,

- it does work

- it only "can" do it in a very broken way

- it can't do that

At least for the things that I am interested in an AI doing for me, the record is rather bad.
Books also build intimate parasocial relationships. People feel a sense of loss when finishing a book.
Physicists are famous for simplifying reality. See 'spherical cow in a vacuum'. This isn't fraud or laziness. it is just that reality is complicated and messy and these sort of simplification are often necessary for making any sort of progress on a problem.
Define decent: https://discuss.grapheneos.org/d/14344-cellebrite-premium-ju...
Regrettably, the Guardian is gynocentric to its core.
Many of those "many men" would significantly improve their chances by just doing gym 2 times a week for more than a year.

And by just starting to think a little bit about their look, that's it.

Those two simple things would increase their chances significantly.
That institutions who purport themselves to be Christian support violence does not change what Christ himself taught.

I interpret Christianity to be following the teachings of Christ, rather than following post-Christ dogma that is frequently in open contradictions to Christ's teachings.

I encourage you to (re-)read the Sermon on the Mount (Matthew 5-7, particularly relevant to violence are verses 38-48) and reflect on how those words might be compatible with state-sanctioned violence of any form?

I agree with you that this interpretation is historically one that has been fringe since the Council of Nicaea. That does not mean that it is incorrect.

Do you think Christ, who commanded "Do not swear an oath", "Do not resist an evil person", and "Love your enemies and pray for those who persecute you" (the word for 'enemy' here carried a nationalistic tone), would endorse any of the earlier-quoted uses of violence?

As someone who is very comfortable professing Christian ideas, I don't understand how you could present his commandments as anti-Christian. It is literally how he tells us to live.
Huh. Sounds like the research needs to be forked to several different hosting providers, preferably ones not based in the US with its insane DCMA laws.
Openbsd did just this for 32bit compat when they changed to 64bit time 12 years ago, and seems to have worked out fine.
I've found that printing can help a lot in these situations. While you can't always print everything, math notes and scratch work are still much easier on paper, no digital solution has fully replaced that yet! The article is focused on reading, but I recall previous discussions on the neurological aspects of writing and motor control, where much of our brain is linked to muscle control and dexterity [1].

[1] "Effects of Physical Activity on Motor Skills and Cognitive Development in Early Childhood: A Systematic Review" (2017) https://onlinelibrary.wiley.com/doi/pdf/10.1155/2017/2760716
That doesn't prove or disprove the EMH.

The EMH says that you can't predict a stocks price in the future give the past data.

HFT just reacts to price changes, it doesn't really predict what it will do in the future so it really has no relevance to the EMH as they are only reacting to what prices did in the past, albiet the very recent past:)
Firefox existing, is competition against a world of Chromium.
AFAICT, the equivalence of gravitational and inertial masses is not a completely solved problem in modern physics.

Earth also rotates, and thus the Coriolis effect is present. It's not as noticeable as in a fast-rotating habitat in space, but air navigation, naval navigation, and artillery all make adjustments for it, among other factors, especially at high latitudes.
Just on the chance your name isn't a coincidence: did I grow up 3 doors from you, in Havant?

(I have stranger connections than that if so — duskwuff won't recognise this username, but I recognise theirs).
The vast majority of women in real life are not looking for a partner.
I have! It was great.
I use direnv with a global gitignore, 1Password and chezmoi. There’s also secrets pulled down from vault.
Related discussion (342 points,5 days ago, 256 comments) https://news.ycombinator.com/item?id=41629893
I worry that this is what 5g is designed for. Look up 5g mmtc.
I agree that the EU–US data transfer frameworks are unlikely to provide complete privacy safety, and this is an open problem. However, I was addressing whether 23andme is subject to the GDPR or not, and it clearly is. The data transfer frameworks are what supposedly allows them to transfer data to the US and still be GDPR-compliant. But regardless of whether they are actually compliant or not, they are indisputably subject to the GDPR.
Getting banned from 4chan should warrant you an automatic subscription to FBI watchlist.
This comic misses some of my favorite details from the book.

The book talks a lot about Marshall McLuhan's quote "the medium is the message" and about how discourse has turned more and more into entertainment. Nixon lost to Kennedy because he was more attractive on television, and people are judged by how they look or behave as opposed to what they say.

More than anything, this book really made me appreciate written discourse.
I want to share my own unrelated-OEM RMA experience, and provide an example to OP/all on why to buy future items (like OC's) from CostCo/Sam's/BJ's:

The first power-outtage of its brand-new life, my online-purchased UPS failed to back-up the load. The OEM had intentionally made the return process difficult and time-consuming, hoping that most consumers wouldn't be willing to "jump through all the hoops" of completing a return (e.g. shipping costs, phone-trees, insane warranty disqualifiers). "Out of principle," I went ahead and did this, but with this promise:

I will purchase all my future UPS systems from CostCo, because then all I have to do is drive to member services and drop off the dud/fuddy/DOA (bigger vendors have more "leverage" against OEM), for a full refund.

(Disclosure: I am a CostCo shareholder, and would not judge OC's return of defective hardware to the original vendor)

Dear OC: hindsight being 20/20, in your current position I would take the offered $1500 refund (maybe you can part-out the DOA computer?)
No. This is not true at all. For the last 30+ years (basically post-Andrew) new building codes are pretty strict regarding structural ability to weather our storms. I feel safe in my home (built 2017) up to a Cat 4. Cat 4 is the magic number where I am going to worry a little beyond the loss of some lanai screening and roof shingles. More from flying debris.

Generally when you see major home destruction post hurricane those homes were built prior to the ‘90s or washed out by surge.

Those of us in Florida know…it’s not so much the wind we worry about, it’s the water from the surge. Helene’s damage in the Tampa Bay Area was mainly storm surge…the wind, which did occasionally gust beyond 65mph, wasn’t as much of an issue.
I feel for that judge. I have been in situations where intelligent people pretended they hadn't understood my earlier instructions. It is very annoying.
>TIL that the largest waves in recorded history were up to 500m (!!), generated by a tsunami off the coast of southern Alaska.

I assume you mean the 1958 Lituya Bay mega tsunami. While extremely impressive, it was quite localized.
> For example, imagine a high volume, low latency, synchronous computer vision inference service.

I'm not in this space and this is probably too simplistic, but I would think pairing asyncio to do all IO (reading / decoding requests and preparing them for inference) coupled with asyncio.to_thread'd calls to do_inference_in_C_with_the_GIL_released(my_prepared_request), would get you nearly all of the performance benefit using current Python.
Take it from this engineer employed at the Foundation for ten years.

https://news.ycombinator.com/item?id=39346814

The Foundation website also states it, but they try to weasel word their way around it: Firefox is not listed as one of their programs but as being maintained by the Corporation, which shares its revenue back to the Foundation (not the other way around).
Related:

"The code worked differently when the moon was full" https://news.ycombinator.com/item?id=39452193

"You are lucky, full moon tonight" https://news.ycombinator.com/item?id=40472226
It makes a difference for hard targets, see the new nuclear "super-fuzes."

It can take several warheads to destroy a missile silo with high probability, because even landing a little off-target can spare the silo. Greater precision means it takes substantially fewer.

https://thebulletin.org/2017/03/how-us-nuclear-force-moderni...
I don't think he can run for office in the US so this is false.
An education in legal regulations teaches you the best solution is to make the fix and don't say anything.
Unfortunately I was reaching for the brain-bleach after sitting through this, and it was curiosity and intrigue that led me to go pay to see it.

Perhaps it was too grand and allegorical for me to follow; perhaps I don't share these points of view; but primarily it seemed purposely off-putting: were there any sympathetic protagonists? They all seemed corrupt and evil in their own particular ways, except for the mayor's daughter, Julia, who possessed innocence, trust, and devotion.

Aubrey Plaza's characters, always subversive and antisocial, reached a new climax with this one, so to speak. Is she an actor, or does she only portray herself?

> Coppola described LaBeouf as an actor who "deliberately sets up a tension between himself and the director to an extreme degree" and whose "method was so infuriating and illogical, it had me pulling my hair out", which he compared to the preparations of actor Dennis Hopper for Apocalypse Now.

Shia was cool in Indiana Jones but I saw him portray Padre Pio, and I've never met a more hateful, unlikeable priest. Ditto in this one--just a crazy opportunist with too much clout.

From a standpoint of technology, I noted the conspicuous absence of computers anywhere, no smartphones in pockets; even the vehicles were old-fashioned, despite a distinctly present-day type scenario, so that kept me in the alternate universe mode. The focus on technology mostly concerned the magic of stopping time and the Megalo substance/Macguffin.

Cicero was so troubled and conflicted, it's difficult to accept that his new Utopia would live up to any promises, and I think that's intentional; the final 60 seconds were quite telling. This is as much a tale of humanity and relationships as it is about technology, politics, or empires. (See the Latin motto over the dais at the wedding.)

I think anyone without extensive liberal-arts background will be at a loss to catch the references and allusions throughout. The Greco-Roman, Shakespearean and Enlightenment aspects were tremendously evocative, even with my lack of understanding.

Other than Julia, I also found Fundi Romaine (Laurence Fishburne) to be compelling, and an element of possible sanity, in a world that's undeniably gone stark raving mad.
That's so much better than bourne/bash, which requires this monstrous wart of a code blob:

autossh() {

# Tiny delay after failure in case of connection errors

while ! ssh "$@"; do echo Restarting ssh "$@"...; sleep 1; done

}
I thought about visiting Nazare to watch the waves. How likely are you to see 20m+ waves on a random day in winter? How good is the view from the shore?
Show HN: Mitata – Benchmarking tooling for JavaScript
I always had a sweet tooth for how easy it is to use google/benchmark, but when working with js, current libraries didn't feel right and some were not even accurate enough, so I decided to create my own library to make JavaScript benchmarking tooling better.

With more free time, I finally implemented all features I wished for in 1.0.0 and made a lightweight C++ single-header version for moments when google/benchmark is too much.

Hope this library helps you as much as it does me.
That is the crux of the entire privacy argument. Why strive for privacy when "I have nothing to hide?" Also, how sure are you that having a copy of everyone's DNA data will become widespread? At a minimum, perhaps if you delay making the data easy to extract one can at least hold out hope that privacy laws will catch up. Of course, there's zero guarantee in that happening either.

Lastly, security through obscurity is not something to be relied upon. But it can work for a period of time.
If there's a demand (or it can be induced), it's called "entrepreneurship".
That's the current overton window in the Western nations that are experiencing a demographic crisis.