skysight-inc/HackerNews huggingface dataset:
(automated summary)

The evolution of internet security has been marked by significant changes over three decades, with a focus on understanding data patterns and mental models for security.

Data from the 1980s shows that internet growth was exponential, maintaining an invariant growth rate of approximately 80% per year.

The emergence of the modern worm era, marked by the Code Red worm in 2001, drastically increased scanning activity by orders of magnitude, fundamentally altering security dynamics.

Analysis of network traffic indicates that while overall connections per day grew significantly, the growth rate has varied, with recent years showing a decline in the rate of increase.

The rise of encryption is a critical trend, with TLS connections dominating, though the adoption of newer protocols like TLS 1.3 is gradual, reflecting challenges in enterprise deployment.

Despite the growth of encrypted protocols, a substantial amount of HTTP traffic remains, indicating that not all communications have transitioned to secure methods.

The analysis of scanning patterns reveals both steady growth and abrupt spikes in activity, often driven by malicious actors leveraging vulnerabilities.

The data highlights the challenges enterprises face in adopting modern security technologies, such as encrypted SMB, which remains underutilized despite its advantages.

IPv6 adoption in enterprise environments is minimal, with little progress observed over time, suggesting a slow transition to newer networking standards.

The presentation emphasizes the complexity of tracking technological advancements and attacker evolution, underscoring the need for continuous data analysis to understand security trends effectively.
My favorite con is leaving for sale far parked on the side of a busy street for weeks at a time. While the owner crosses their fingers and prays for it to be rear ended.
Besides FromSoft as perhaps the exception to the rule as a subsidary to Kadokawa, private companies seem to be keeping their shit together fairly consistently. Larian and Wube are a pair of solid examples, although Valve is probably the most outstanding example.

Game developers and publishers start shitting the bed when they IPO and need to juggle the conflicting interests of managing investor relations as well as customer demands; that or when they're acquired and turned into a subsidiary.
> It's not just a nice-to-have; people's lives depend on it.

Nevertheless, I would certainly hope that if someone's life depends on avoiding milk products, that they learned a long time ago not to buy butter.

I mean I get your broader point, but it's just that in this specific case this isn't shea butter or apple butter or whatever... it's butter butter.

Like, listing wheat as an allergen on a candy bar, of course. But if you have a milk allergy, there's absolutely no universe in which you should even be picking up the butter to check in the first place.
Nice, I wonder when the third documentary will be out
My theory is that there's a period when a studio has huge early success (plus in the case of Valve, they started with huge amounts of money from being former MS employees) that lets them devote themselves to their mission of making games, before either mission creep or dilution with new hires occurs over time either from staff naturally changing over time or expanding. Another factor is that when aiming to 'go big' and realize what they can do with lots of resources, they need to partner/join with others that don't work the same way and will influence them.
The temporal paradox linter could have given it away too :)
> Who is "sick and tired of" allergy labels being too strict? Is this really something people get up in arms about?

People are sick and tired of nonsense bureaucracy - and this is a prime example.

Destroying 80,000 pounds of perfectly fine butter so some bureaucrats can pat themselves on the back is pretty absurd. Nobody was harmed - nobody was saved. This is just waste because some piece of paper says it has to be wasted...
Requiring the extra labeling even when it seems redundant increases clarity for consumers and simplifies the rules. It's fine.

At least, I doubt that you can write a set of rules for declaring allergens that is shorter if you do include exceptions to the labeling requirements. And I think there's a pretty strong argument that treating the ingredients and allergens as separate sections makes the allergens easier to interpret than sometimes requiring reading both.
In fairness, we can turn on a tv for any view. There's like a gazillion channels. Just pick your poison.
Thank you! We use YouTube's iframe api + embeddable player as per their ToS - the rest is just css
Neither they nor Masto were ready for the scale at the time. Mastodon had a lot of difficulty -- servers were slow and broken for a while.

BlueSky was also not a practical Twitter replacement for a lot of people until a few weeks (!) ago when they finally added video support.

Also, have you not seen the latest user growth stats on BlueSky? Apparently it took the total destruction of the United States postwar consensus to achieve people finally abandoning Twitter en masse, but hey, it's happening in the past week or so.
> How would you feel about, multiple times a day, being required to defend your core beliefs that you find trivially true?

Do you have to defend, or can you just ignore. I assume those statements are still being made, even if you don’t read them. So why not just ignore and move on?

FWIW, Twitter (not saying Twitter is the best or only site) allows you to have a feed of only people you follow. That probably approximates going to another site of only people who share your core beliefs.
Starting in 2023, add sesame to that list. And then of course due to these labeling laws, you get allergens purposefully added to foods as the easiest and cheapest way to comply with the law: https://apnews.com/article/sesame-allergies-label-b28f8eb3dc...

Does that help people with sesame allergies? Unclear overall as it both helps and harms them.
Duocultures, not monoculture.

Every shard speaks Common Tongue, the inoffensive moderate conversation that is acceptable everywhere.

Each shard also has its own local flavor, with local axioms and heresies.
Thanks! And yes, doing this too
And when you buy an album on CD you just license it for personal use, you can't play it on the radio or in a commercial space. "Buying" a copy of some intellectual property always had strings attached even in the age of physical media.
There is the lisp meme “mom can we have defmacro? No we have defmacro at home”
Related: https://news.ycombinator.com/item?id=42152003
Which country did you move from and which did you move to?
> There is no discourse there anymore, only loads of hate.

I guess we just follow different people.
The first post when I opened it after reading yours:

>The same people who’ve spent the last several years decrying “unqualified DEI hires” are now shoehorning through Cabinet nominations who can’t even pass a basic background test.

This is the opposite of what I want in any app I open. It's time we stop chasing engagement for sites and start filtering for content. I want sites that don't promise to be the place to do everything for everyone but one's which I can judge on their censorship to know if I want to join.
On the Matrix side: to be clear, Element Web/Desktop isn't a nice new webapp (yet) - it's an 8 year old codebase which is improving slowly but surely (unless we get lucky and can focus on a step change). Element X however is an entirely new mobile app written in Rust + Swift UI / Jetpack Compose, and it has zero jank, and gives an idea of just how good Matrix can be: https://element.io/blog/deep-dive-into-element-x/ etc.

It's fascinating to see how well Bluesky has done with RN + Expo though, and makes me wonder what an equivalent Matrix client would feel like. Unfortunately rnmatrix.com looks to have been stalled since Annie joined Beeper/a8c.
Eh, there are some aspects of the human condition I'd rather opt out for the time being. Strangely, I find Facebook and WhatsApp more useful to keep in touch with people I care about, and likely won't join the Fediverse any time soon.
Well, it's "unsalted butter". It has an adjective. So it's not just "butter butter", it's modified.

Not everyone speaks perfect english. One of the times I had an allergic reaction, it's because I didn't know all the Spanish word for peanuts... and the english translation right below it skipped that word.
One of the few mainstream game companies that cares deeply about their legacy and community. Kudos.
Why should a trans person have to put up with hordes of deranged cretins who believe that all trans people are inherently gross sexual predators? Why should people of color have to put up with all the nazis on that site who are gleefully awaiting when Trump will reopen the concentration camps?

Diversity of viewpoints is nonsense.
I did non trivial work with apache spark dataframes and came to appreciate them before ever being exposed to Pandas. After spark, pandas just seemed frustrating and incomprehensible. Polars is much more like spark and I am very happy about that.

DuckDb even goes so far as to include a clone of the pyspark dataframe API, so somebody there must like it too.
Just some clarification on what Belgium's multi-linguality means exactly:

Flanders is Dutch-speaking.

Wallonia is primarily French-speaking, except for a small part of it which is German-speaking (

The Brussels Capital Region is officially bi-lingual Dutch/French, but in practice it's almost completely French. In restaurants, shops, ... you can be sure to find people who can help you in French, but almost never in Dutch. Police, hospitals, ... are supposed to be bi-lingual, but good luck getting good help if you speak Dutch but not French.

In most places, you'll only encounter one language: your own native language. Only Brussels is supposed to be bi-lingual.

Many cities do have two or three names, but that's not because those two or three languages are actually spoken in that city.
LLM Stack Guide
Pex works with older versions than shiv.
Gear selection is done via the screen on a Model 3 [1]. Technically, there is a touchscreen button on the rearview mirror unit, but I doubt anybody actually uses that.

Alternatively, you can use the AI gear selector from park which guesses what direction you want to go.

[1] https://www.tesla.com/ownersmanual/model3/en_eu/GUID-E9B387D...
Any idea how much earbuds are worth nowadays? I got the originals for being a first-day mac player, then traded them for some absolute nonsense… rip.
This is quite common in cellular differentiation.

Say a tissue needs a few cells of a certain type, roughly evenly spaced throughout. One strategy to achieve this is for all cells in the region to have a tendancy towards developing those characteristics, but also for the quickest to do so to simultaneously produce a messaging molecule that suppresses that tendency in its near neighbours.
Does the insurance cost vary between two cars almost identical in every relevant points but the brand? Not a rhetorical question.
That was a part of my training for snow rescues. It's probably a combination of both.
If you own a smart appliance you're a moron.
Have you ever picked up butter to check if it says milk or not?

Like I get that for plenty of other foods where it is, of course, non-obvious.

But I would assume you know that no package of butter will ever not say milk? (Or if it didn't, it was mislabeled, like in this article?) So that you don't even bother checking?
What you are seeing is probably cold induced vasodilation

https://pmc.ncbi.nlm.nih.gov/articles/PMC4843861/

Incidentally there are some studies that show you get better at it with more frequent exposure. I have kayaked for many years and have found this to be the case - if my hands get cold now, dipping them into the water to further cool then hence opening the veins is very effective if counterintuitive way of warming my hands up.
I sometimes ask obscure questions but I don't hold it against people if they can't get it. It just tells me a bit about how the person works, who they are, where they might fit ... I've certainly recommended people for hire that score an actual 0% on those questions.
That's pretty much exactly the logic that got me to buy a Valve Index + Half Life Alyx and it was totally worth it. VR turned out to be cooler than I expected and both the game and the Index were just so satisfyingly well-executed. It's nice to have products which clearly had far more attention to detail and quality than was economically necessary. It's clearly the result of a different philosophy than I've seen at most tech companies.

I had the same experience with the Steam Deck: just very well done, including side things like the case that came with the device. I've grown used to accessories bundled with electronics ranging from basically garbage to okay (but not great), while Valve's case was as good as I'd expect from a high-end third-party product.
As user coffeemug said to me in an email a long time ago (relating to an old article https://web.archive.org/web/20090220121738/https://www.defma... https://news.ycombinator.com/item?id=452341 ), the ZX Spectrum computer has wabi-sabi . While the Spectrum had lots of very individual quirks, I think the same is true of old BASIC systems in general. Humble and fusty and clunky, it communicated a sense of patience with and love for the user.
I found Twitter to be much better on that front pre-Elon, but the changes he introduced have really incentivized and highlighted the hot takes, rants, and memes. Twitter used to be the kind of place where I could see an interesting comment and then look at the replies to see more interesting comments and maybe a new person to follow. In post-Elon Twitter, replies are inevitably a complete cesspool of boosted blue checks farming engagement or bots. It certainly wasn't perfect before, but it's absolutely become more toxic since Elon purchased it.
I use http://AimLoan.com! Every detail right is there for you to see including closing costs for whichever interest rate you decide to go with.
I think pandas is well aware of some of the unfortunate legacy API decisions without Polars. They are trapped by backwards compatibility. Wes’ “Things I Hate About Pandas” post covers the highlights. Most of which boils down to having not put a layer between numpy and pandas. Which is why they were stuck with the unfortunate integer null situation.
Electrocatalytic production or using electrolytically produced hydrogen can also make new steel.
Same here when the Raising the Bar reprint releases. I never managed to get the first edition, so I'm beyond excited they decided to make a second one after all this time. And as a fan, I need to have it.
I'd still like someone to explain to my how chatgpt is so bad at solving leetcode exercises. Literally copy pasted publicly available exercises.
> The most crucial decision when joining Mastodon is choosing the most friendly instance.

Consider using a self-hosting service, like https://togethr.party/ , to have your own instance on your own domain. Much like email, you should never be beholden to another party for your identity; your hosting service should be an invisible detail that can change without anyone interacting with you needing to notice.

I've watched several instances shut down over the years, and have never once regretted the decision to have an instance on my own domain. My social network handle is now the same as my email address, with an extra @ in front.
your single word firehose demo is awesome. I can see a lot of creative people doing really cool things with this
Show HN: I built a post filtering Safari extension for Reddit to replace RES
After Reddit Enhancement Suite (RES) became unmaintained, Safari users on macOS lost access to post filtering capabilities. As a developer who switched to Safari, I missed this functionality and decided to build a solution.

What it is:
A Safari extension that filters Reddit posts based on keywords and wildcards. It monitors the DOM in real-time and hides posts matching your filters, working on both old and new Reddit interfaces.

Technical implementation:
- MutationObserver for DOM monitoring
- Batch processing
- Client-side filtering with zero external dependencies
- Wildcard pattern matching (e.g., "politic*" matches "politics", "political")
- JSON-based filter import/export
- Local storage for settings persistence

Key architectural decisions:
1. Chose MutationObserver over polling for efficiency
2. Implemented batch processing to handle Reddit's infinite scroll without impacting performance
3. Abstracted DOM selectors to support both Reddit interfaces
4. Used CSS modules for style isolation
5. Kept the codebase minimal and focused on the core filtering functionality

Try it out:
Available on the Mac App Store. Currently running a 25% off Black Friday sale.

Looking for feedback for feature ideas or bug reports. I also have 5 TestFlight invites if anyone is interested in beta testing.
> So when my regular HW-pusher had a T14s G6 with Qualcomm Snapdragon
ARM64 CPU, for only EUR1000 + VAT, and I couldn't resist.

I wonder where Poul-Henning, who is based in Denmark, got that price. Perhaps he managed to get US pricing.

Lenovo EU are notorious for charging a ton of money for new models with limited supply. And poor after-market support, as everything is outsourced.
Steam can delete a game from your account, they can't delete a cd that I physically have with me.

Why does this even need to be spelled out...
Valve is still a top tier org, but they simply make too much money in the publishing business to bother with game development anymore. Any sales would be peanuts to what they are making through developer fees and the marketplace. This is why all of their releases in the last decade have been F2P.
The goal should be increased generation of power while mitigating worst climate change scenarios. Coal deserves to die.
Yeah, self-hosting the whole stack can be a lot (like Mastodon). I only signed up via the Primal mobile app and left it at that. Private key stays local.
But isn't it incredibly clear when you're buying cow milk, vs. alternative "milks"?

I can understand how people with a dairy allergy might want to double-check an alternative milk to make sure it doesn't contain any real milk, or was processed in a bottling facility that also processes dairy milk, or something like that...

But it's hard for me to see how people with a dairy allergy might want to double-check the regular milk...?
Employment in coal extraction is also an interesting graph. Although a lot of it has dropped due to mechanization over the generations (like, from ~1910 on downwards) it's still pretty clear that the old heights of job-creation people might remember with nostalgia are never[0] coming back.

https://fred.stlouisfed.org/series/CES1021210001

[0] Barring a discovery that coal can be converted into the elixir of youth, etc.
https://web.archive.org/web/20140103213352/http://robrhineha...
I think the reasoning with topical coatings for burns is actually something to do with avoiding gases touching the burned area, which is why they use oxygen tents for people with severe burns over a large area. Petroleum jelly and other similar products block the air from touching the burn also.
Wondering when they show up in AC: Fires of Rubicon.
Checks out with what I read in "Mike Mulligan and his Steam Shovel."

Man, I read that book to my kids so many times I can probably still recite it in it's entirety.

I miss having little kids.
I'm confused by "seek favour". Wouldn't this just be bribing Elon?

If it's a bad business decision (poor ROI compared to other advertising venues), wouldn't we want the advertisers to skip X in favor of something else?
Edit: (Apologies). Thank you!

Even with "ssh-ed25519" [1]?

I looked at a ssh-ed25519 example [2] but i don't see how it can be extracted from the minisign secret key format [3], for example:

ssh-ed25519:

ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK0wmN/Cr3JXqmLW7u+g9pTh+wyqDHpSQEIQczXkVx9q gleb@reys.net

minisign secret key format:

untrusted comment: minisign encrypted secret key
RWRTY0IyNKMZZ+uqJdb8VtvSTo9EwylBlcsnitMtEyQzVLq/7tUAAAACAAAAAAAAAEAAAAAANLUi4xncsLbGKL+8y/n692Imrb9iURwzfnVfRqxqU5kAnVVrs98xMBqtIOiS63HZ3BQIGU6jpBWbX3ELCALfL/Le6UL3DunYfWqNPvhAKhlY4gQEjMzrL6ytxTFCXLGJpBSZHkK3DIQ=

[1] https://github.com/FiloSottile/age#user-content-ssh-keys

[2] https://www.unixtutorial.org/how-to-generate-ed25519-ssh-key...

[3] https://jedisct1.github.io/minisign/#secret-key-format
Founder of Crypto 'Mixer' Helix Sentenced to Three Years
> they shouldn't respond with outrage and fury if their dreams don't come true.

Who is responding with fury? I see no widespread male fury? On the internet, you'll always find someone furious enough.

> Not in the US, not in east Asia. In their opinions they've got better things to do.

Fine with me. Their ideals and cultural preferences won't be present in the next generation. A self-fixing problem.
Maori haka in NZ parliament to protest at bill to reinterpret founding treaty
Does anything happen if you throw the can at the cop? Experience was kind of bugging out on me.
It's kind of frustrating to deal with python stuff as an user. I wish it didn't have to be like this, because there's a lot of interesting stuff written in python that's nearly impossible to get to run.

There are too many environemnt systems (conda, venv, I think I'm forgetting one more), not all of them build or ship on all systems, then you need to manage them, and sometimes to have the exact correct python version installed because god help you if you're on 3.12 and not 3.11; and set as PATH for pip to find the correct dependencies, but you need to do that before you set up your venv and run pip, otherwise you need to tear that down and star tover. Sometimes the dependencies build, and break, because some package is missing from your system.

It's kind of a miserable experience.
But this is how public company market caps are also valued. No one is buying/selling all of nvda.
I can double your investment in 24 hours. DM for details.
> I don't like the trolls on X, but if X started moderating against hateful content, it would just end up censoring news and opinions like they used to do beforehand.

They censored cisgender as a slur.[1] They are not avoiding moderation to avoid bias.

> Also, maybe I'm from a different generation, but the trolls can be very easily ignored. What do I care is some no name account is posting some stupid content somewhere on X? I already know which people I want to follow. The rest I don't care about.

Signal to noise ratio is not a generational issue. Muted users and phrases not being muted is a common complaint. Less signal and more noise after the changes favoring paid accounts is a common complaint. And finding new accounts to follow was part of Twitter's value to others even if not you.

[1] https://techcrunch.com/2024/05/14/on-elons-whim-x-now-treats...
MacDonalds Hot Apple Pie! "Caution, contents are hot"

Butter! "Caution contains milk"
Coal is key to current steel manufacturing process. There are experimental green steel processes but very nascent. If you're building stuff, you need coal.
I think it's topical because the new administration has been talking a lot about regulatory over-reach.

The thought that taxpayer money is being wasted to tell taxpayers that "if they know they have bought butter they must throw said butter because the label doesn't say it _contains milk_" is something that will escape only those people's minds who think everything is fine with the status quo.
> China, though, is still adding coal capacity.

It's a bit misleading because China is mostly _replacing_ old coal power plants now.

China has probably passed the peak coal consumption this year, or it will in 2025.
Doesn’t Fox News routinely get the highest ratings too?
Build more nuclear power plants since wind and solar do not provide dispatchable baseload and batteries don’t scale enough.

No other technology comes even close to the energy density of nuclear power.