skysight-inc/HackerNews huggingface dataset:
Not completely impossible. You could have a default deny firewall, have your DNS resolver trigger an update to allow outgoing connections to the resolved IPs, and possibly also require connections pass though an SNI-sniffing proxy that only allows domains that your DNS resolver has allowed. Essentially by default you'd be blocking all custom protocols, and you'd only allow what looks like well-behaved TLS web traffic to allowed domains to flow.

Bad traffic could flow to a "good" domain, and then you need to decide whether that domain is actually "good".
It's a bit ambiguous but I think they may have been suggesting that the carton is decaffeinated.
More details in the press release. The complaint against Apple is the the UI led some people to think they had competed a dispute, when there was an additional step. The complaint against Goldman is that their backend systems were broken and they failed to act on the disputes.

Failing to process or share consumer disputes: Apple Card users were directed to dispute transactions through a “Report an Issue” feature in the Wallet app. For some disputes, Apple sent consumers a separate link in the Messages app asking for more information. Apple failed to send these disputes to Goldman Sachs if the second form was incomplete. Even after Goldman Sachs alerted Apple to this issue, the problem persisted. As a result, neither Apple nor Goldman Sachs investigated tens of thousands of such disputes and cardholders were unfairly held responsible for disputed transactions.

Failing to investigate cardholder disputes: For the disputes that Apple did send to Goldman Sachs, the bank failed to consistently send acknowledgment notices within 30 days, conduct reasonable investigations, or send resolution letters explaining the determinations of its investigations within 90 days. These failures led to Goldman Sachs illegally placing damaging information on consumers’ credit reports and holding cardholders responsible for potentially fraudulent or unauthorized purchases.
I'm curious what are your requirements? Their SSO tax appears to be structured in such a way that only large enterprises would have to pay.
I believe if you fail to make the entire monthly payment by the end of the month you will be charged interest.
The app is such a killer feature for me that I’m more than willing to accept somewhat lower rewards compared to other cards.
> The exercise cost $0.38 in credits and about 20 seconds

I am intrigued by a future where I can burn seventy dollars per hour watching my cursor click buttons on the computer that I own
Zesfy syncs with your iOS calendar, so if you’ve already added your Google account to your iPhone’s calendar, all your Google events will show up in the app. Just make sure to turn on "Show iOS Calendars" on the app settings and you're good to go.

I'm planning to add supports for iPad and Mac in the future, probably PWA too if there is enough demand for it.
Microsoft's 2024 Global Diversity and Inclusion Report
Would people not use Arrow for this now? Arrow has all these types and has also replaced NumPy in Pandas.
I found maintaining IDE files and a Bazel build side by side to be surprisingly easy.

It’s for sure a weak point with Bazel though.
This is wrong. Grammar does not tell you proper nouns should be capitalized, orthographic convention does, just as in German: grammar doesn’t tell you nouns should be capitalized, orthographic convention does.
Point two is a stretch so far I don’t know how you didn’t throw out your back making it. Youngins
4-5 conference and 1-2 journal were the requirements for me in the US. Conference had to be decently competitive IEEE or ACM and good journals. Picking something random would have gotten me into trouble with my advisor and committee.

So yeah - paper mills exist. But it’s the job of your advisor to block you from going down that road.

Now if your advisor himself is on that path I’d say you should exit your PhD. There is nothing worthwhile to be done there.
Not a library, but you can use Lucia auth (https://lucia-auth.com/) as a guide to make an auth system yourself
Thanks ! No, sorry, it's not yet open-source, but i think it will be at some point.
With real-time detection (I'd expect that exists, but don't know for sure) you can divert some of the airstream through this scrubber to target a particular concentration of CO2.
Is it an unreasonable one? Following a random car may be unreasonable. Tracking all cars with only public imagery may be reasonable.
> Unfortunately, I'm afraid, drawing something like that during interview may not land a job at faang =(

Yet another reason to be skeptical of the quality of hiring in faang if anything.
Programmers not law makers really control what goes and doesnt online.

Bittorent and ipfs etc are nice but things would be better if there was a large static archive with desktop clients exchanging chunks in a complex modular way.

Say: I have pages 1-15 of file 123456, you have page 16 but are looking for page 1 of doc 2345, if i can obtain that page a fast exchange is possible. If not a different module can issue an iou that either means i owe something, you are owed something or both. Other modules could create groups that aim to store part of the archive without duplication amoung members. Spam driven modules could also be interesting.

The archive can be organized by how dubious the copyright is so that one can limit participation to 50 or 100+ year old publications and/or living or dead authors.

Its not unlike living on a far away island with the british empire seeking to control every aspect of your life without sufficient means of force.
Right, can we reasonably rule out that such interactions don't happen in special circumstances that are hard for us to measure? Like in stars or black holes?

(Or randomly and very seldom but often enough in vast interstellar space to give rise to dark matter like phenomenon?)
I preordered a Vita back in the day and when I got it I immediately fell in love with it. It fits in a pocket and it has way better analogue sticks than that garbage the PSP had.

I still use it to this day because I can't fit my Steam Deck in my pocket.

And I concur that its potential did kinda go to waste. Imagine if we had Shadow of the Colossus and Demon's Souls available on it.
I think you are thinking about "The day after tomorrow"?

Read this for a similar event in historic times:
https://en.wikipedia.org/wiki/Little_Ice_Age

The Nordics, Alps were about 2 degrees colder than today. I guess it wasn't too nice.
That assumes the common folk can put pressure on their leaders, which is usually not the case for countries targeted by sanctions from the US, which usually have autocratic or otherwise authoritarian governments.
Wow, this is very cool. I might upgrade to General just for this.

Do you take both up? Fishing in mountain lakes and SSB to pass the time sound fun do to simultaneously.
couldn't they just hide their ad endpoints behind the proxy that serves their site? I can think of multiple ways to do this that aren't very difficult. I have had to implement something in my work to get past certain adblocking behavior that was going by domain
When it appears a legitimate claim is going to be denied, I recommend immediately opening a case with your state’s insurance regulator. If it’s an employer sponsored plan, the Dept of Labor. Success is not assured, but it creates a paper trail for regulators and other interested parties, including attorneys you might eventually involve.

(volunteer patient advocate)
I didn't miss anything you said. I did read your comments and frankly I don't have the time to address the level of banality therein. My position is that you are erecting and burning an elaborate straw man based on the least reasonable reading of a general statement, and you don't understand who the audience is. If someone has to be told what a runtime error is, that means they don't necessarily know it. That definition is totally adequate for the purpose of conveying the concept.

You accuse me of being personal but your comments are some of the most pompous crap I've read in ages.

>And the document goes on for hundreds of pages at this atrocious quality level.

Oh so you read the whole thing? Lol
DOJ warns Elon Musk that his $1M giveaway to registered voters may not be legal
Then it should be discussed.
Note: This is a semantic argument. YMMV.

That sounds like you're talking about our practice of justice. It is, unquestionably, pretty fucked.

I would say that "our principles of justice," on the other hand, a) clearly include "innocent until proven guilty", which would preclude the above question from an employer, and b) pretty well condemn a lot of stuff in our practice of justice, as well, with prison labor high on the list.
That's not a bad idea, but I just have so much blocking on so many levels that it probably won't help much.
Jokes on you, business owners love this shit. "my employees screw up all the time, now i can have 100 more employees for the same price. Shut up i wont bother doing the math on how many more mistakes per hour that is"
> enterprise SSO solutions like Okta are not free for users and cost a lot of money for organizations to implement and use.

There are free and open source solutions like Keycloak and Zitadel. I don't dispute they are less common than Okta and Entra, but the definitely exist and are deployed in the real world. My workplace (state government) uses Keycloak for example.

Another thing that the article doesn't really touch is that SSO is locking a security best practice, important for an organization of any size, behind a paywall. With SSO, when someone leaves the organization you can disable their singular account and be confident they are locked out of your shared folders, gitlab, jira, etc, etc, rather than having to manually track down and disable each one, with a high likelihood of missing something. This is important for an organization of any size > 1 from a bootstrapped startup all the way to fortune 500. Hiding it behind higher cost makes it more likely that an org will try to do without and have a security breach as a result.

I also take issue with:

> Developing and maintaining SSO solutions requires significant investment in research, development, and infrastructure.

Having done it myself, this is overstated. No feature is free but implementing a SAML or OAuth flow is not THAT much work, nor does it represent a huge amount of ongoing maintenance.

I actually don't mind the SSO tax too much in cases where it's the differentiator between free or open source vs paid. I find it far more egregious when it's a product that already has a cost and SAML auth jacks up the price 2-10x. I don't think the blog post is a particularly good discussion of the tradeoffs though.
It's mostly not the insurance companies. What a lot of people fail to realize is that most medical "insurance" companies no longer provide much insurance, in the sense of bearing financial risk for medical expenses. Their main business now is administering health plans for self-insured employers. If Ozempic isn't covered by your health plan then the decision was most likely made by your employer's HR department. An insurer will be happy to include Ozempic in their formulary with liberal claim approval rules if the customer wants it; they design custom plans for large customers all the time. This actually means higher profits for insurers (including their captive PBMs and mail-order pharmacies).
Im looking for good ios and adroid emulator sites
Google Warns of Samsung Zero-Day Exploited in the Wild
They had a variety of issues around cost, competition with Nintendo, their fiddly and expensive proprietary memory card format, but I think just letting it die was a consequence of the then-widely-held view that handheld gaming, and maybe all dedicated console gaming, was sure to be killed by the smartphone. So they let themselves believe that its poor performance was just an inevitable result of a changing market, not the result of their own avoidable mistakes.
“ Don't use a bunch of tiny functions. This makes it harder for future eng to read the code …”

This is where the naming things bit comes in. You name the function correctly, then when the body is read to understand that it works as named, you can remove that cognitive complexity from your brain and continue on. Once you’ve built trust in the codebase that things do what they claim, you can start getting a top-down view of what the code does.

That is the power of proper abstraction.
Simple HTTP Authentication: A Beginner's Guide
Note that there's not only Phone/Voice, but also CW and digital modes (Like FT8), so it's possible not to speak with ppl at all and still do the activation.
Just to address the implication (prevalent in many of the sibling comments as well) that I and everyone else who talks about this are idiots incapable of grasping that 128 is larger than 32:

If 32 bit IPv4 addresses are valid IPv6 addresses without fiddly NAT64/DNS64 shenanigans, then (it seems to me) IPv4-only clients could blithely continue to interact with the IPv4-accessible internet via IPv6-only servers, routers, etc. indefinitely. They can putter along accessing only a subset of available resources forever and everyone can passive-aggressively roll their eyes at them and close support tickets saying "upgrade to IPv6 if you want to see the rest of the internet, it just works."

That's what I mean by backwards compatible. Everyone who says "it can't be done, it has to be this way" is asserting that there's no better alternative to NAT64/DNS64 and running two entirely separate networking stacks in parallel. I don't buy that there was no simpler way to accomplish packing 32 bits into a space that can contain 128 bits. And if "supporting IPv6" simply meant "upgrading your networking software to the latest version, which transparently handles both IPv4 and IPv6 traffic for you" then networking and server teams have no excuse to avoid deploying IPv6 support for 26 years.

I recognize that 128 bit addresses will be truncated and packets misdirected or rejected if handled by a 32 bit networking stack. I recognize that clients upgrading too early will fail and need to fall back. But making it unnecessarily difficult for servers and routers to handle IPv4 traffic in an IPv6-only context led us to where we are today.

To illustrate my point: ascii text works just fine, with no translation layer required, when parsed and transmitted as UTF-8.
Trouble is SORA is so last year now. Contrast the open source stuff at https://www.genmo.ai/ (or even Meta's latest video stuff from today)
As I understand, the separation between Lila and Lila-ws is primarily for fault isolation rather than independent scaling. Maybe independent scaling becomes useful if websocket overhead exceeds what one machine can handle.
Ah, I see, you are right. It's terrible behavior.
This is pretty fun and affordable too... I guess I might have to finally upgrade my pi.
Also, a meta-reply would be: whatever clever solution you think you've invented was surely considered. It's 30 years ago so memory fades but all this was discussed at great lengths on mailing lists and in meetings by people who knew what they were doing. The only things I don't think were envisioned at the time were: NAT prolonging the V4 space exhaustion significantly, and the level of inertia for vendors implementing support for V6. I was still working on that in 2005 -- more than 10 years later.
I mean, with regard to tech in specific I think it's a bit of both? Every time anything to do with technology hits the congress and ends up on C-SPAN it is always so fucking embarassing. It's like watching grandma and grandpa try and riddle out a new Smart TV's remote, except there's way more of them, and a subset of them are proud they don't understand a fucking thing about what they're talking about.
Related: Most banks let you pay credit cards over the phone using a debit card. This is usually intended for debt collection though, so you may have to have to call the debt collection phone number to do it. Of course the main use case for tech people is maxing debit card rewards until they close your account :)
Supabase Auth Anonymous Sign-ins

- https://supabase.com/blog/anonymous-sign-ins

- HN discussion: https://hw.leftium.com/#/item/40066560
Well, there was no concept of sidecar storage. Now we have the hack we came up with for StringDType to store data on the DType instance and also make it so StringDType arrays don't share StringDType instances, unless the array is a view.

EDIT: looking back at the NEP, I'm not sure it does a great job explaining exactly how the per-array descriptor works. Ultimately it's powered by a hook in the DType API: https://github.com/numpy/numpy/pull/24988. There is only one spot in NumPy where array buffers are allocated, so we hooked there and made sure any arrays with newly allocated buffers get a new DType instance.
How is the game state not just the board state? Move history doesn’t matter in chess (FEN encodes the 50 move rule)
His points were wrong 22 years ago, and they continue to be wrong today. It's a poor document to cite as a rationale for avoiding IPv6.
>When I say "the real thing" I mean that they are selling semaglutide, which they are obtaining somehow

>So if they are not getting it from producers under license from NN, where are they getting it?

They're obtaining it from pharma labs with the right equipment and talent to produce it. The synthesis process is well understood, it's not like it's a Novo Nordisk secret.

> Why isn't the legality of that path under active legal attack?

It is.
What’s the difference between the free and pro?
Wyoming Part of Multi-State McDonald's E. Coli Outbreak, Quarter Pounders Pulled
Reflections during Hacktoberfest – is open source struggling?
I am sure there are multiple views on this. Some I had read:
"
Federal law prohibits paying people to vote, rewarding them to cast a vote, or even for registering to vote — however, compensating people for signing petitions or convincing others to sign them is not illegal "

https://nypost.com/2024/10/20/us-news/elon-musks-1-million-p...
I would love a restaurant review site that could tell you “your brother’s friend from college has been here once and liked it”.
It's ok to make your point about it in the comments but please don't alter titles to do that. This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html.

(I've reverted the title now.)
How so? This chart [1] has SAML under enterprise with no price tag other than "get in touch"

[1] https://openobserve.ai/pricing
You are looking at it from your own rationalist point of view. Most humans will apply supernatural, magical, religious or/and spiritual meanings to it. This applies to faces in surfaces as well voices in wind or patterns in noise.
This was a case of convergent evolution, both projects ended up working simultaneously on similar ideas.

One issue with using Arrow directly in NumPy is PyArrow exposes an immutable 1D array, while NumPy exposes a mutable ND array.

See also https://numpy.org/neps/nep-0055-string_dtype.html#related-wo...
Cranelift progress a look back at 2021
Haha nice! Yeah it can be kinda hit or miss at times but when it gets it right its fun
I'm going off the article linked above: https://openobserve.ai/blog/sso-tax
> Good, because they don't need a custom corpus to cheat with LLMs with most normal teachers.

I think you're underestimating the capabilities of normal teachers. And I say this as someone who a large percentage of their family are teachers.

Also this topic was about using LLMs to spot LLMs. Not teachers spotting LLMs.

> And if a teacher reduced your grade saying you are using LLM because your style doesn't match you just report them for it and say you were trying a new style (teacher would probably will be wrong 50% of the time anyway)

You're drifting off topic again. I'm not going to discuss handling false positives because that's going to come down the policies of each institution.
I don't think it's wrong. I think it's confusing and creates unnecessary friction. Especially if the term is well-established in the profession or the community.
A decent summary: https://www.phoronix.com/news/Linus-Torvalds-Russian-Devs

TLDR: A recent Linux kernel patch removed a number of maintainers from the official MAINTAINERS file that recognizes all of the driver and subsystem maintainers, all of whom appear to be Russian or associated with Russia.

And FWIW I don't see a problem in what Linus said just now. He says there have been people on the email threads "using multiple random anonymous accounts to try to "grass root" [the MAINTAINERS file changes]", and that he won't be changing anything.
Plants do it using the energy from the sun.

All of these “can’t we just unburn burnt things” forget that the reason we burnt the carbon in the first place was to get that energy.

Unburning it would need to return that energy and more because of inefficiencies.

If you have energy to spare, you don’t need to burn the carbon in the first place.

With global fossil fuel usage still rising, we clearly don’t have any to spare.
That's always going to be true regardless of whether there's standardized testing or not. Also, it still gives poor children a better chance. Do you think poor kids can afford to "polish" their application with a bunch of extra curricular activities that's typically required for top-tier schools? I think a truly difficult standardized test is still more fair than any other alternative.

The fact that there are a bunch of asian kids from poor socioeconomic backgrounds who make it into stuyvesant https://www.refinery29.com/en-us/2019/05/233354/stuyvesant-a... is one example of how standardized testing can make it so that hard work can make the difference. I'm not saying that rich kids don't have an automatic leg up, but that's always going to be true regardless. Standardized testing (if anything) gives everyone a shot.
Yet in a sense, my friend, we are all of us dwelling in Null Island.
revenue and spending both need attention. defense spending must come down too
I know of one company, Axis Communications, one of the reasons I'm not working there anymore.

But there's a fair amount of forcing involved.

Me thinks you're not going to find many companies filled with people who enjoy living in the office.
You can just search for the the phrase "Novo Nordisk v [company name]". For example:

NOVO NORDISK INC. v AESTHETIC MAISON LLC and AESTHETIC CASA LLC: https://www.safemedicines.org/wp-content/uploads/2019/09/Nov...

NOVO NORDISK INC. v MEDIOAK PHARMACY LLC: https://www.safemedicines.org/wp-content/uploads/2019/09/Nov...

NOVO NORDISK A/S AND NOVO NORDISK INC. v BOF MEDICAL CENTER, INC.: https://www.safemedicines.org/wp-content/uploads/2019/09/Nov...

In the Aesthetic Maison and Medioak pharmacy cases, Novo Nordisk alleges that they're selling a product claiming to contain semaglutide without a prescription or FDA approval. In the BOF Medical case, they're claiming "trademark infringement, false advertising, and unfair competition."

They're not suing for damages, just injunctive relief ordering the defendants to stop. It doesn't look like it even matters to their cases whether the products contain real semaglutide.
I think that I shall never see

A half a pound of powder as lovely as a tree. -- Joyce Kilmer
Google no longer offers unlimited photo backup and Apple Intelligence hasn’t been released yet…
class E can't ever be used on the public internet anyway. too many existing firewalls are already configured to drop anything with a source address in range 224.0.0.0-255.255.255.255 (class D and E)
Everytime I imagine building this, I imagine the “it works” happypath and that I’ll get bit by a deluge of random error messages I never accounted for
Billboards Hacked to Show MrBeast Anti-Israel Messages
Avast Releases Free Decryptor for Mallox Ransomware
usfs doesn't maintain the national parks. the tsa should also be canceled. neither precludes making federal assets more productive.