skysight-inc/HackerNews huggingface dataset:
Cloudflare is the easiest solution. Turn on Bot Fight Mode and your done
Huh? They play video games; not provide your portal into the entire digital world and life that is unavoidable in the modern day.
In my view the eventual goal of security is to reduce all excess trust to zero. Excess trust is all trust which is not fundamental to thing you are trying to do. If you want a feature that let's Alice update policy, you need to trust Alice to update policy. I believe that a system without any excess trust is worth building that's why I founded BastionZero and why I joined Cloudflare to work on this.

Getting there is a long walk through the woods on a moonless night.

> With 2-trust, we’d need at least units of trust, so two machines. Equivalently, each credential-bearing machine is half trusted (think ssh bastion hosts or 2FA / mobikeys for 2 trust).

You might be interested in OpenPubkey[0, 1] which was developed at BastionZero. It has 1/2 trust for OpenIDConnect and can be used for SSH.

> As snarky as this math is, I’ve yet to see a more accurate formulation of what zero trust architectures actually provide.

I prefer the term epsilon-trust to reflect the nature of security and trust reduction as an iterative process. The trust in a system approaches but never fully reaches zero.

[0]: OpenPubkey: Augmenting OpenID Connect with User held Signing Keys https://eprint.iacr.org/2023/296

[1]: https://github.com/openpubkey/openpubkey/
Maybe we'll see these changes sooner rather than later
Oh no, good thing there are no tech or defense personnel from non-Russian countries that contribute to the Linux kernel! Stop the presses!!!
Why do you want that if there is no state involved?
There are cases of this being enforced against individuals in the USA and UK after posting on social media though.
While this is purely anecdotal, the friends I have that ended up bailing earlier than planned got really annoyed by nonsensical things like ATMs having operating hours and having to use a fax machine to do something. They probably weren't the main problem but more straw that broke the camel's back.
It serves as an example of what is possible
If you downloaded the Play Store version, it can't intercept all the apps
The thing is most normal users don't really want random apps to be able to provide OTPs. While it would be nice to have an API for every system functionality like reminders where every app is allowed to register as the reminder app, it would necessitate far more complexity and far slower pace of development on the reminder interfacing.

This is where there is a big difference in what the ultra few power users want and what normal users want. Ultra power users want to be able to install an app file for a random app with app store like experience and with as less hurdles as possible, while normal users are very scared of receiving an apk file in whatsapp and installing it by mistake (there is a spectrum here and it's not binary).
In California in particular:

> If the boundaries of land owned either by public or by private entities have been disturbed by earth movements such as, but not limited to, slides, subsidence, lateral or vertical displacements or similar disasters caused by man, or by earthquake or other acts of God, so that such lands are in a location different from that at which they were located prior to the disaster, an action in rem may be brought to equitably reestablish boundaries and to quiet title to land within the boundaries so reestablished.

https://leginfo.legislature.ca.gov/faces/codes_displayText.x....
> Unless I misunderstood, there was a gzip transfer encoded gzip.

Yes, correct. A gzip bomb inside a gzip bomb that contains only null bytes, because it's much larger on the client side when unpacked.

A "normal" gzip bomb that would only leverage "Content-Encoding: gzip" or only "Transfer-Encoding: gzip" isn't really good as for compression ratio, because the sent file is in the megabytes range (I think it was around 4MBish when I tried with gzip -9?). I don't wanna send megabytes in response to clients, because that would be a potential DoS.

edit: also note the sibling comment here: https://news.ycombinator.com/item?id=41923635#41936586
> [They] argue that the FTC is trying to “regulate consumer contracts for all companies in all industries and across all sectors of the economy.”

Yes, and? That's a large part of what the FTC is intended to be doing. Pointing that out doesn't seem to be an argument that they are doing anything wrong.

The FTC's official remit is:

> The FTC enforces federal consumer protection laws that prevent fraud, deception and unfair business practices. The Commission also enforces federal antitrust laws that prohibit anticompetitive mergers and other business practices that could lead to higher prices, fewer choices, or less innovation.
When using the previous MIT license, the original license and copyright must be included. The original license may change in this case, and the new license must follow the original one.
Same here. The JetBrains products are indispensable for me. They've converted me after being an Emacs user for 30 years.
You don’t need to invent a “random apps” strawman. Apple already restricts which apps can be used as default mail/browser, just allow them access to the same APIs.

Why not at least Gmail, Chrome, and gBoard? Millions of “non power users” use these apps over Apple’s offering.
So... they've been obsolete since '96?
Yes, but it was obvious and I didn’t use equipment. It was in Jan 2020 at an Airbnb “hotel” in Nashville. There were two smoke detectors in the room. One of them was not like the other. I wrapped it in toilet paper. I left it wrapped so the owners knew that I knew, but I didn’t bother reporting it because I rarely used Airbnb and it was a last minute trip. And then the pandemic hit and that was that.
Half a pound of this powder can remove as much CO₂ from the air as a tree
So frustrating to try and look at these.
I feel like this is a bit misleading. You say you weren’t aware of Threes at all when you made 2048, which may be technically true, but then you should probably clarify that 2048 was a clone of 1024 which was a clone of Threes. And this all happened within around a month of when Threes released… to the point where many people started accusing Threes of being a clone of 2048.
Equal access to core system functions for all apps is needed
That's not how this phrase is used. It usually encompasses any reasonably advanced compiler like clang, GCC, and sometimes MSVC.
Doesn’t explain why it’s an issue in the context of the thread.
My relatives built a house in Tokyo which was absurdly cheap (£300K), but maybe I'm just used to London prices. As you get out of the major cities, akiyas can be basically "free", although will require a huge amount of time and effort to make habitable again.
What's the source on the images? are they AI-generated?
Skyrim was great for 2012, and while it was fairly bland it was still large, colorful, and had great music. it's pretty shallow, but modding breathed new life into it.
Breaking into your spouse’s personal data, including phone calls and instant messages, may placate your desire to see if they are cheating. However, even if your spouse is cheating, going through someone's personal property is not the most legal of methods. Luckily, a legal way to do spousal spying does exist, and it involves hiring a Private Investigator (PI) Tomcyberghost@gmail.com With years of experience, PIs in North Carolina can track your partner’s every move and figure out the necessary patterns. Text or Whatsapp +1 (404)941-6785.
JetBrains IDEs are better than VSCode, but due to Copilot integration in VSCode, I moved away from JetBrains. I don't see myself going back to JetBrains.

Secondly, the free JetBrains IDEs also lack devcontainer support which is readily present in VSCode. To not use devcontainer is a substantial security hazard.
There's no way to evaluate "considered harmful" outside of politics. So this is calling for political limitations on speech. Very bad!
Can you point us to those studies?

Broader question (much broader): Do you know of any place that has a good collection of studies that answer questions like this (questions about CS, language design, and such)?
I don't understand the peeve people have about mentioning Threes all the time. Does every discussion about a FPS game need to point out it's the same concept as Doom or Quake or whatever? The vitriol in some of the comments here are quite weird to me.

It's also dishonest to label 2048 as a clone. Personally I never cared much for Threes, and same I guess with my parents etc which all got hooked for a while on 2048. 2048 strikes a good balance on being accessible and challenging, most people don't want it more complicated or deeper.

If anything, the 2048 hype must have helped Threes tremendously. Instead, many people act as if 2048 was a slight on Threes somehow, stealing their thunder. I actually bought Threes based on all the comments back then, but didn't really like it. Too cutesy, and too challenging when I just wanted to mindlessly swipe.
I have the same suspicion
And Threes is a blatant rip off of other games before it as much as 2048 is of Threes. Let's go down that rabbit hole.
This is fun! Take my internet points!

Good job.
I had some success with simple aliasing at the beginning and end of chunks. In my next project, I'll try an idea that I saw somewhere:

1. do naive chunking like before
2. calculate the embeddings of each chunk
3. clusterize the chunks by their embeddings to see which chunks actually bring new information to the corpus
4. summarize similar chunks into smaller chunks

Sounds like a smart way of using embeddings to reduce the amount of context misses. I'm not sure it works well, though :)
A slightly separate but still related question that bothers me every time I, a Python programmer, read about function coloring and different approaches to concurrency:

Does anyone understand why asyncio-style approach to async won over gevent-style in Python? Why was the former approach accepted into to stdlib, got special syntax and is preferred by the community while the latter is a fringe niche thing?
Netguard does the same. You can see a per-app list of connections. Furthermore, you can many hosts either globally, or on an app level.
Cool to see ParadeDB is now in Claude/ChatGPT :)
Maybe Chomsky was on to something…

Colorless green functions async/await furiously.
Jeez I switched to walgreens for my prescriptions after rite aid did this. I guess it’s time to get a Costco membership
Well that's the very thing: not enforcing that distinction is the very mistake in question.
Or a stemmed wine glass
JetBrains just announced a big shift for Rider, making it free for non-commercial use starting October 24. Whether you're a student learning, a developer creating open-source projects, or a hobbyist tinkering with game development, you can now use the full version of Rider without a subscription. This is a significant move, especially for those of us who code outside of work on side projects or are diving into game dev with Unity or Unreal Engine.
Between this today and one square minesweeper yesterday, we're batting 1.000 on funny dumb projects that make me laugh. I don't know why you made this either, but I'm glad you did, thanks!
> It only means someone, somewhere in the chain, decided to make their function async

Well it specifically means that a function can yield its execution context. That property is taken on when one function calls an async function.

It has clear implications for very common threading patterns, I think it's right to argue that using blue/red obfuscates that.
Apple seems to have a culture of being assholes. "Okay, we'll comply, but here's the shittiest version of comply we can offer."
Interesting to see the times for speedruns of this game: https://www.speedrun.com/2048

2048: 24s
4096: 1m 37s
8192: 4m 53s
16384: 13m 34s
32768: 55m 24s
Okay but that possibility would also predict that gaming in general would go down, not just on PS Vita and 3DS. It's true that the overall PC market shrunk (smartphones could replace PCs for many people) but I don't think the home console market was affected.
I think for myself and do not just adopt whatever view happens to be espoused by a party leader. I'm sure he may have conflated socialized healthcare with communism at some point, but my original point remains that most of the republicans I know do not believe such things.
Qualcomm accuses Arm of anticompetitive conduct as its license is terminated
They look AI generated to me.
I am not 10% BF, but was very surprised to see the African Elephant come up for that!
Hilariously enough, you could still purchase a brand new Commodore 64 in 1994... albeit right before Commodore went bankrupt in May of that year. I vaguely remember some local electronics store in Pittsburgh having Commodore 64s for sale on the store shelves for really low prices back in the day. Admittedly, this was an unusual sight to behold in the US, because we had well since moved on to IBM PC Compatibles by then. In Europe, C64s were a tad bit easier to source.

It was definitely more of a curiosity and a toy rather than a serious computer in 1994.
And push Apple to improve their default apps
Although academically interesting, it seems practically useless due to this disclosure in the conclusion:

> Finally, neither radiative heat transfer nor conduction due to hand contact with the glass was considered.

So, just letting the beer sit on the counter colder.
Thanks for pointing that out! The Guardian is gone to the dogs, since many years now.
It's a set of C Preprocessor macros, so you don't even need to somehow process the code—you just #include the header and hack away as if it was regular C!
As Threes was getting famous I bought it and tried a bit, but it didn't really stick.

It's with 2048 that I actually got hooked, it felt like a more natural and seamless game to play. I think it's the simplicity (no cuteness, no craftyness) that helps abstract the game, and of course dealing with powers of two makes it all the more natural. It felt a lot easier to get in and out of the game, be it for 30 sec to check the train station or 4 hours until lunch break.

I feel like Threes was the cute and whimsical game, while 2048 could probably become the classic game, in the same kind of spot as Tetris.
Right, that's interesting. Still curious to know if that is "slightly better" or if that qualifies for the "tremendous advantage" mentioned above!
You can also have NetGuard actually go through the VPN (https://news.ycombinator.com/item?id=41933464)
To save a click: it's "Groups representing telecom companies, home security companies, and internet advertisers" (specifically named: the Internet and Television Association, Electronic Security Association, and Interactive Advertising Bureau), who are "exactly who you'd expect" (I agree).

There isn't any more substantive content to the article.
I had entirely opposite experience. At 10, I was hanging around irc where folks made various adult jokes but were very friendly and helpful. Getting mod was a dream! Also, I learned most of my shell-fu from irc. I also spent some time roaming around other generic channels but a lot of those were barren lands.

It took me many years before my parents got tired of computer at home hype and just left it alone and I reined over it and installed linux and tried to figure out how to get around. There were days, when I would install windows, print some docs(or if printer went out of ink, wrote the docs by hand on my school notebooks), reinstalled linux, tried things until I got stuck.

There were plenty other interesting things but I still cherish my irc days.
I was completely confused to see that a Walrus has only 2% points more body fat than a Gecko.
Heat transfer isn't an issue for most ales (maybe it's even a feature?). It matters more for lagers and stuff like kolsch. I actually like my ales to start coldish and end around room temp.
Apple is the most valuable company in the world, their marketing is clearly great. As for tastemaking, let's go through that video list of experiences shall we?

1: AR puzzle game, looks fun but ultimately is only slightly better than an idle game on your phone.

2: VR board game, might be good but it clearly fails to take advantage of being VR.

3: Knock off Beat Saber.

4: AR pool table. I don't think I need to explain why this is lame.

5: Hard to tell what this is but it looks to be a flat game played in VR

6: Family Guy.

7: Various card games/basic board games in AR.

Which of these is a high brow, tastemaking VR/AR experience? Because the only things fitting that description I can think of are not playable on the AVP to the best of my knowledge.
For a good reason, though! Invading another country and having "human safaris" with their citizens is kind of a pretty valid reason.
I hear high accuracy for indoor navigation on Android is still a challenge. Something like https://github.com/AndrewHartAR/ARKit-CoreLocation (outdated?). It's more a framework/SDK, not a product, and those companies who have good SDKs keep the logic to themselves.
I was just looking at the Ubuntu work on the OEM kernel release. Apparently it is maintained by someone from China. It will be a bummer if that work stops.
It's annoying to see so much RethinkDNS propaganda on every Netguard or Invizible Pro thread on the internet.

That gives me a bad feeling, and it's the reason I started to consider RethinkDNS scummy.
What is bad with asyncio? Genuinely interested.
I am super dubious of mechanical systems for randomness... Newtons laws are fully predictable after all...

I suggest that any system like this has the output XOR'ed with another random source. If two random sources are XOR'ed together, then both need to be predictable for the output to be predictable.
> The thing is most normal users don't really want random apps to be able to provide OTPs.

You're right! But most normal users DO really want the app they CHOOSE to be able to provide OTPs!
The point is that single-cursor editing is a special case of multiple-cursor editing. If there's value in any single-cursor editing operations that don't use regex (or other indirectness) then they have value when used with multiple cursors, too.

The mouse doesn't necessarily come into the discussion at all.
Congratulations on creating such a wonderful game. My wife still plays it, I would claim, daily. I would claim it's part of her evening relaxation :)
I will most certainly forward your new developments to her and also try it myself. Good luck with your new job.
Still very fun!

I didn't notice anything different from how it was in my memory. That seems like a successful modernization :)

I didn't notice that there were power ups until reading your post.
Show HN: Embedded Python for HTML Templates
empyt is a new python library for embedding python directly into HTML templates.

I contribute on a few different python web projects, and grew tired of remembering the varying syntax - just let me write python!

This is not a full templating language like Jinja, and does not support things like template inheritance, etc. Rather, empyt can be used as an 'extension' alongside other templating engines.

Fully functional, but considered a very early v1. Biggest thing ATM is that security needs to be thought through a lot more.
"with a majority reporting that libraries ... play at least some role in helping them decide what information they can trust."

Sounds legit
Globtech(Job board with globally remote and tech related jobs only)
There's a crayon in the bottom right corner of each of the images. Perhaps someone recognizes it?
> what is wrong with NULL?

This code has a bug, and may even crash on some architectures:

execlp("echo", "echo", "Hello, world!", NULL);

This code doesn't have the bug:

execlp("echo", "echo", "Hello, world!", nullptr);

Neither does this:

execlp("echo", "echo", "Hello, world!", (char *)NULL);
Preprocessor of sorts. From the readme:

The goals for Pretty C are:

- Provide so much syntactic sugar as to cause any C developer a diabetes-induced heart attack.

- Deprecate Lua, Python, JavaScript, Ruby and a dozen other languages, because Pretty C is the ultimate scripting language, but lightning-fast and strongly typed!

- Including only one header (yes, Pretty C is a header-only library #include-able from arbitrary C file!) to turn any codebase into a beginner friendly one.
Each has its trade offs you lose clarity, ease of use, ease of change and performance even when you mix all styles.
Geckos store fat in their tails

https://th.bing.com/th/id/OIP.UYKInXyy0_Vhs1qqTziRGwAAAA?rs=...
A less cynical version of the same point is that fertile women are vital to the continuation of a tribe, while boys are expendable (and most valuable in war, verily)
This is whataboutism.

Isreal maybe is not my cup of tea, but at least they have some justification for waging their war because they were attacked first. So Israel with all its faults is not in the same league with Russia.

Edit: typo
Such a noble effort warrants an Ig-Nobel prize. After all it's all for such an excellent cause.
> because what is valuable is NOT "Do I see a type mismatch error only when a user accesses it?", it's "does this mismatch prevent a deployment?"

I argue that understanding the semantics clearly and unambiguously is the most relevant thing, and strong typing tends to do that better (imho—with my only other examples being javascript and the "stringly-typed" perl and some random irrelevant BASIC dialects).

> Weak (but present) static typing beats strong dynamic typing every single time,

Can you give me an example? I don't think I've ever heard of such a thing. The closest I can think to this is maybe, arguably, the use of `void*` pointers in C which is difficult to see as anything other than pragmatism rather than some deeply beneficial way to write code—even explicit casts produce much more readable code. Another argument I could see is for operator overloading, which (IMO) produces much less readable code, or the implicit conversions feature of Scala (which also, IMO, produces less readable code, but they've addressed a lot of the major problems with it).
Unlike most other dns providers, they often have an account or even payment to identify you, not just your outbound IP....
Cheap Solar Panels Are Changing the World
Exactly. These functions are stateless and thus calling the functions ultimately doesn’t really do anything.
I agree that you can come very close to C++ with C. (After all, the original C++ implementation was cfront, which was just a C preprocessor).

But to me, the difference between C++ and what you're saying is this: If you say

typedef struct {
// Private stuff, do not rely on it
int bar;
float baz;
} foo_ctx;

The only thing defending bar and baz from my meddling is the comment. If you're in C++ and you make bar and baz private, then I can't modify (or even read) them without going through the interfaces you design. The larger the codebase, the larger the team, and the more average-or-below coworkers you have, the more that matters.
> ambiently available to a whole tree of function calls

So a "localized global variable" of sorts? Sounds interesting, got any links to examples I could look at?
Let it go, Matt.
Curious what "community" of programming language designers/implementers the author refers to. People who work on languages at universities and attend academic conferences? To my knowledge no popular language came out of that "community."

I read the paper the web page links to and came away with no idea what the author wants to changes, what organization or community exists that might coordinate those changes, or even what she means by "Feminism in Programming Language Design."
That's one big fat tail, if I've ever seen one.
It's very fun! The only change I'd make would be to use real photos of the animals instead of the AI images. It's hard to relate to them the way actual pictures would be.

Pexels is an excellent source of free, creative commons images and they have all the animals you need. Here's some geckos https://www.pexels.com/search/gecko/ :)
Even side projects are commercial, aren’t they?