skysight-inc/HackerNews huggingface dataset:
With the current Starship that seems unlikely to be viable. But with iterative improvements similar to those between the first Falcon 9 and the Falcon 9 flying today it might be.

I could see SpaceX sending one or two Starships every launch window (so every two years) by 2035, and human landings by 2050. Around that time you would start massive cargo deliveries for a colony, provided SpaceX can get the funds for that somehow (presumably that's what Starlink tries to do).

That timeline is still ambitious, but I believe Musk is genuine when he says he does SpaceX mostly to drive Mars exploration. And time for him will eventually run out. He doesn't have another 50 years.
Story is longer than that. Got married. Did't go to the gym for 9 years. Moved countries. Re-taked gym, along with better diet, started on protein powder + creatine. 1.5 years in and I'm already over what I couldn't accomplish in 5 years. And I'm not even taking the diet too seriously.
The 80s were a reaction to the "liberal" 70s. It's just the natural cycle of history, the majority of people are in the center so when culture shifts too far to one side they start pushing it back.
There is a potential loophole:

Third-party service providers: We may share your Personal Information with third-party service providers that we contract with to provide you with the Mazda Connected Services, as detailed in this Connectivity Privacy Statement.

The Artity (allstate) SDK offers some utility like "fuel efficiency tips", but it is a cover to collect data.
It seems there are two possible problems.

The first is whether taking over a lapsed domain allows you to takeover an existing Google Workspace (or Cloud Identity) organization. This it what houses the corporate email accounts and OAuth client registrations. If Google allows this scenario then the linked account takeover is simply one symptom / side effect among many. TFA is not clear on whether this step actually happened... I assume not, since if it were the case we'd be talking about direct access to the Google account data rather than only linked SP accounts.

The second is when an SP doesn't properly use the `sub` claim as a unique identifier. It sounds like some products don't understand this requirement and why it "seems to change 0.04%" of the time. I do agree that a unique identifier for the org itself would be a good addition to the token.

That said, I'm still not clear how the second problem manifests if the old OAuth client creds (housed in the old Workspace org id) are invalid. Presumably attacker can login to the SP admin account using just email based password recovery, then reconfigure the OAuth integration with new secrets. In that case the SP is failing to do MFA on the email login.

Would love to hear if I'm missing something.
I think most people in the US are, on some practical level, actual liberals. We can’t see it in the way a fish doesn’t see water. But I think mostly people think of themselves as accepting of others (while not wanting their own freedom of association impinged on). I think a lot of political disagreement shows up where liberal principles collide, like two people’s freedom of expression bumping into each other. Then it becomes a wrestling match for each side to get their position seen as the liberal one.
This article is about 2024 sales. I suspect 2025 sales are going to be brutal.
This explains election results (agreed) but I'm more curious why outrage-generators and conspiracists seem to have culturally taken a stronger hold on the right over the course of decades.
> You lower the limit by -5, the +5 speeding turns to +10 speeding and absolutely nothing changes save for wasted paint.

A couple weeks ago, a 55mph limit near me was lowered to 50mph. A cop watched during the busy times for a few days. Now everyone is generally going 5mph slower than they were. Seems successful so far.
No. This isn't just bad math.

The problem here is that the weighting of the alternatives changes over time and the thing you are measuring may also change. If you start by measuring the better option, but then bring in the worse option in a better general climate, you could easily conclude the worse option is better.

To give a concrete example, suppose you have two versions of your website, one in English and one in Japanese. Worldwide, Japanese speakers tend to be awake at different hours than English speakers. If you don't run your tests over full days, you may bias the results to one audience or the other. Even worse, weekend visitors may be much different than weekday visitors so you may need to slow down to full weeks for your tests.

Changing tests slowly may mean that you can only run a few tests unless you are looking at large effects which will show through the confounding effects.

And that leads back to the most prominent normal use which is progressive deployments. The goal there is to test whether the new version is catastrophically worse than the old one so that as soon as you have error bars that bound the new performance away from catastrophe, you are good to go.
In the middle of nowhere mountain/inland northwest insurance companies fly drones over your home and send you letters with pictures telling you changes you need to make if you want to keep your insurance. Crazy that isn't a thing in California yet.
I don't understand how anyone that actually walks and/or drives in north america can come to that conclusion.

When a driver is speeding up to "make" a yellow light their attention turns to nothing but the yellow light or even worse the state of the next intersection/light beyond the one they are speeding through. The existence of the green/yellow light gives drivers carte blanche to not need to think about the current state of the crossing because "the light tells me there should be nothing there anyways".

Where as a driver slowing down to "roll" a stop sign has their attention set to basically the opposite. They are generally focused on things like, is there a car I'm going to hit? is there a pedestrian crossing? is there a cop down the street waiting to give me a ticket?
Chips are small, so one truck once a few days may suffice.
I suggest you read some books about SpaceX. Musk was deeply involved from the beginning, when the team was only a few people and was the chief engineer. Now you can argue, as 'chief engineer' he just happen to heir 4-5 of the most brilliant team leaders and they did everything themselves. But in the middle there was always Musk who made man decisions, and there was nobody else who can really be considered the chief engineer, as all of the team leaders were quite busy running their teams. You can say a lot about Musk, but that he wasn't involved enough in SpaceX is just not one of them.

They actually want to heir somebody for the chief engineering position, but couldn't really find anybody suitable with the needed experience that wasn't already employed high up at the large defense primes. So really on the top level of the company it was the leadership team of Musk, Mueller, Shotwell, Königsman and Buzza.

And even if you want to claim that, finding the best talent, hiring them, giving them the best possible support while having the best possible business strategy to work towards is also quite impressive.

I guess one could argue that those things aren't 'chief engineer' tasks. I guess that would just be considered 'engineering management'. But again, management is what many chief engineers do a lot of the time.

What you absolutely can't compare him to is just a money man who is largely uninvolved. That is just ahistorical.

So at best one can argue that he is himself not a real engineer but a good manager of engineering teams, both small and very big.
You do know Amazon got sued and lost for showing different prices to different users? That kind of price discrimination is illegal in the US. Related to actual discrimination.

I think Uber gets away with it because it’s time and location based, not person based. Of course if someone starts pointing out that segregation by neighborhoods is still a thing, they might lose their shiny toys.
As a frequent pedestrian, the question of traffic light vs four-way stop sign depends on the details. Here are some factors:

- In NYC, for example, right turn on red is illegal within the five boroughs (you can always spot NJ drivers you don't know this or don't care). Right turning on red is incredibly dangerous for cyclists and pedestrians, way more than traffic lights vs four-way stop signs;

- How often the light changes is a HUGE factor. I've read that there are some pedestrian crossings in LA at lights that take up to 10 minutes to change. Ridiculous. But in NYC, or at least Manhattan, light changes are quick. I suspect it's designed so a pedestrian never has to wait more than ~45 seconds;

- One way streets are better than two-way streets. There are less variables to be concerned with. Drivers may not like one-way streets. They're demonstrably better for traffic flow, pedestrians and cyclists however;

- Having an island in the middle of a two-way road is HUGELY helpful to both cyclists and pedestrians. The ability to cross halfway in relative safety makes an incredible difference;

- Having separate walk lights for each direction when there is an island is the absolute worst. This typically hugely increases the time to cross as they aren't coordinated;

- The speed limit matters. If the speed limit is under 25, cars rarely go too fast to be a problem. I've had Google Maps street directions that were basically "just make a run for it" across a highway with a speed limit of 45. There are places that say a road has a cycle path that is basically the hard shoulder on an interstate. Drivers will weave through those at 70+ to overtake 1 car. People have died that way;

- Traffic lights can decrease safety because drivers will speed up to make a yellow light. Usually I don't even have to look at a traffic light to tell when it turns yellow. I'll hear the engines revving up. I've nearly been killed this way when a driver accelerated to make what was a red light and they sped through a pedestrian crossing that had signalled pedestrians had right of way. This doesn't tend to happen at four-way stops.

- As a cyclist, I tend to find drivers give you deference at four-way stops but this may depend on the area and if it has a lot of cyclists and pedestrians. I actually prefer to give drivers the right-of-way when they have it. For example, a driver may stop at a four-way stop seeing me coming when they got there first and should just go. And I know I wasn't going fast enough to interfere with them anyway. This forces me to ride in front of them when they have right of way. I never like doing that.

So it's hard for me to judge this particular intersection without knowing the full context.
>> The speed limit is a LIMIT not a requirement. And don’t start me with "you’re dangerous driving so slow" lol.

It certainly is. Speed differential is a huge cause of serious accidents. That can be driving too fast or too slow. Many roads have minimum speeds, and as a commuting cyclist I can tell you the biggest threat is not being able to move with the general flow of traffic.

I'm also not sure how you came up with driving slower and smooth breaking being correlated, especially if you do limited driving.
Hearing accounts like this where apparently kids bring game consoles to school as a regular thing further makes me support schools having technology lockers.
Or consulting…
"simply _don't know about these mitigations_"

Yes, but if insurance rates were to be free of government interference, the cost of insurance might start factoring into homebuyers' research and decision processes.
brain drain from where? thought a problem is influx of workers into us although more for software not sure of chip tech
In case of invasion, it's not that unlikely that the fabs in Taiwan get destroyed, or at least lose the ability to keep making and selling chips while the conflict is hot. In that case TSMC and Taiwan might prefer having a backup. As long as the US doesn't confiscate the Arizona fab, effectively siding with China, Taiwan would arguably have more leverage by still having something of immense strategic value to trade.
The scenario I was envisioning was a simple as a developer that worked at that startup added DankStartup email to their Github account, committed a bunch of code. Company shut down, but dev doesn't think to disassociate that domain/email. Malicious actor uses this technique to then sign into the Github account, gaining access to that developer's account, not just the DankStartup repos which were probably disabled after non-payment.

Now, obviously some fault in that scenario lay with the person who 1) used the same account, and 2) didn't remove the old email once the startup failed. But I'm just using that as a kind of example - there may be other accounts as others have said that need to be accessible years down the line, like financial records and the like, regardless of whether the company is still around.
It’s the number one downloaded app for iPhone when I checked earlier today.

While I do agree that it’s a good time to quit short form video, I prefer the medium for recipes ever since SEO ruined searching for printable recipes.
In my opinion, giving away large sums of money, loudly and publicly, is very much flaunting wealth. It’s good too, it’s great, but it’s also flaunting wealth.
They said they hadn’t been happy with the last three months of candidates, and that I was probably going to be it and then rejected me with no feedback and hired some ex-SpaceX person as a contractor. It may have been the investor playing a role.
I imagine for people like me who do not have anyone nearby willing to play D&D
>Then, the impostors in step #3 create a different google account with the same domain, and Google says "yeah, these are definitely the same guys as before", even though Google is fully capable of discerning that that is not the case; these are different people with a different workspace account, different names, different payment information, and so on, but Google is saying that if you're holding the domain you are therefore the same people as far as they're concerned and is asserting that to other companies.

Yep I understand the mechanism by which this gets abused; I think we just disagree on the implications. I don't work for Google but it seems from the outside that they're treating the OIDC subject claim as referencing the domain attached to the workspace account, or something similar. I've seen implementations where the `sub` claim is more granular, so to me that indicates the field is underspecified.

Given all that, I suppose TFAuthor's proposed solution is a good way forward.

I still think classifying this as an OAuth vulnerability isn't correct.
The official statements on masks, early on during Covid so the limited stock would not be bought out and instead available for medical staff, comes to mind.
I disagree. DNS stores enough information in WHOIS to see if ownership has changed, it's not DNS' fault that nobody looks.

Probably the least-wrong thing to do with current DNS is to have authentication servers keep track of the WHOIS UpdatedDate of email domains. If a WHOIS UpdatedDate is newer than the corresponding user's linked email address verification, that user's email address is no longer trusted. Next time they log in ask them to update or re-confirm their email address, and if they try to password reset they can't use an unconfirmed email address.

Yes that's more tricky work. Authentication is hard. Nobody should be DIYing authentication anymore in this day and age, it's just too much.
That’s actually a pretty badass name for an init system.
Here are some the companies on the Arity page. Sad to report one of my favorite apps, MyRadar is promoted as a user.

https://arity.com/industries/mobile-apps/
The announcement of this plant coincided with the announcement of the Endless Frontier Act and CHIPS for America act, which is what eventually became the bill we call CHIPS and Science Act.

This plant was the foundation that the CHIPS act was built upon. The Secretary of State had to secure an agreement with TSMC to build this fab before the bills could be drafted, as a lot of the recipients of the funding are suppliers for this plant.

It is completely truthful to assert that this is the result of the CHIPS act. Congress agreed to introduce the bills as a result of TSMC's agreement to build the fab in Arizona. If you have to avoid giving Biden credit, then you can point out that it was Trump's SoS who negotiated this original agreement.
What I'm understanding you saying re: Concord is that the game was poorly marketed, had bad character designs, and also one of the developers made some ill-considered tweets 4 years before the release of this game.

Absolutely, that one dev has some weird opinions. But if those opinions are/were core to the game design, and done on purpose, then the marketing also failed to get that point across.

There's also something sort of funny about digging up 4-year-old tweets and saying "see, this is what cancel culture looks like in action".

Speaking to the concept of "DEI hires", the implication is always that the person in that role is only there because they met some quota. The reality of affirmative action was that frequently, you could never get into that role, regardless of qualifications, if you had the wrong skin color. And that wasn't just like a backroom sort of thing. There are countless examples of explicitly racist policies in the US prior to 1964. But the funny thing is, with the Civil Rights Act of 1964, it became illegal to hire based on race in either direction. "DEI Hire" affirmative actions are explicitly illegal, and it would be an easy case to win if you thought you lost the job to a less-qualified "DEI" candidate. Indeed, the US Supreme Court has repeatedly upheld that racial quotas (of any stripe, but especially "hire more minorities") are illegal.

Re: that video, I see that as less of a policy fail and more of a marketing fail. Like, everybody producing that video understood that as "when a firefighter, ANY firefighter, is physically carrying somebody out of an actual fire, a great number of things have already gone VERY wrong, and being a racist prick about the exact race/gender/etc while a rescue is underway is severely missing the point". But nobody bothered to run that in front of somebody who wasn't adjusted to how firefighters see the world.

Firefighters' physical exams are notoriously physically demanding, because the consequences of not measuring up are pretty dire. And yet I know several female firefighters.
> STEM field gap

STEM salary gap

I suspect the Taiwan workers have on average much lower salaries.
You're absolutely right. However, 5% is so low that it's hard to believe that there isn't at least that many underperoformers.
Seems like relying on domain alone is a design flaw of OAuth?
Location: Chicago, Il.

Remote: Yes (U.S. Citizen)

Willing to relocate: No, but open to traveling

Technologies: HTML5, CSS3, JavaScript (Node.js, Nest.js, TypeScript, React, jQuery), REST, CosmosDB, Milvus, UI/UX

Resume/CV: Available on request via email

Email: samk9080@gmail.com

I'm a full-stack developer with 10+ years of experience. I've done work for small startups to big tech firms like Microsoft. Most recently, I worked on a RAG based Gen AI application. I'm a passionate Software Engineer who believes in knowing the fundamentals of programming languages inside and out (mainly JavaScript) which allows you to pick up and learn any new framework/library. Lastly, I'm a strong team player looking to take on projects/tasks no matter how ambiguous and turn out exceptional user experiences!
Its potency is measured in Gelatin Digesting Units (GDU), I think thats telling enough.
This sounds like the infamous (and flawed) “honest people have nothing to hide” argument, to be honest.
Tech Recruitment Is Broken: Make Companies Respect Your Time
They already did in the process of going off the deep end.

The most prominent incident was a friend (female, Chinese-American born to Chinese immigrants for context) who ran a guild I was in, we were like 50 members and played various games. Fun times.

It all fell apart overnight when all the sensationalizing and fearmongering about how the Right were going to round up and deport all Chinese (this was back in 2020, peak of covid lockdowns) finally got to her. She kickbanned anyone who didn't share in the fear and victimizing. She exploded on me particularly hard because I'm Japanese-American, a fellow Asian, and I guess she expected me to join the bandwagon.

She threw all manners of vitriol at me for no good reason, but I still wish her good fortune and hope she's still doing well and managed to recover from all that.

I fucking despise the Left for destroying that network of friends.
I read the main problem with hiring chip factory workers in Arizona was the factory just didnt pay enough for the long hours demanded. I looked up the median salary and its only 50k so I'm assuming it's not crazy skilled labor (e.g. brain drain). Taiwanese workers just seem more willing to do it.
Ask HN: Teams using AI – how do you prevent it from breaking your codebase?
For teams actively using AI coding assistants (Copilot, Cursor, Windsurf, etc.), I'm noticing a frustrating pattern: the more complex your codebase, the more time developers spend preventing AI from breaking things.

Some common scenarios I keep running into:

* AI suggests code that completely ignores existing patterns

* It recreates components we already have

* It modifies core architecture without understanding implications

* It forgets critical context from previous conversations

* It needs constant reminders about our tech stack decisions

For engineering teams using AI tools:

1. How often do you catch AI trying to make breaking changes?

2. How much time do you spend reviewing/correcting AI suggestions?

3. What workflows have you developed to prevent AI from going off track?

Particularly interested in experiences from teams with mature codebases.
Seems like this is actually happening.

I saw so many predictions of how this couldn't happen and "yeah but" ... but it seems to be happening for the most part.
> have her sit on the seat while I grab the handlebars and run along side her

Do not grab the handlebars. Grab under the back of the seat. This lets you tip the frame of the bike without touching the rider or the steering mechanism, and also modify speed by pushing or pulling.
I think most companies would be jealous of this sort of "downfall".
Correct, you're welcome to do that, and I'm welcome to denounce you for advocating boycotting a product because of the country of origin of its founders.

People can't help where they're born, and you're wrong to hold that against them. You're welcome to work through that cognitive dissonance however you like, but in the meantime I will continue to advocate for treating individuals as individuals.
Is this the first “Made in USA” chip in Apple devices since the Fishkill PPC 970?
Even that is selling a platform to other people trying to start a business that probably won’t be successful
This is incredibly cool, but I feel like it skims over a pretty important hurdle as well. It says that a good chunk of cost is saved by 3d printing the lenses which can be expensive, but I can also hazard a guess that the kind of printer that’s capable of producing lens-quality printed plastic isn’t anywhere close to the realm of “budget friendly” as the whole printer itself.

That’s not coming from a place of pessimism, either though. The prospects of being able to do something like this are incredibly cool—but it’s a bit misleading in its pitch.
OK, but please don't post unsubstantive comments to Hacker News.

We're trying for a high information/indignation ratio and comments like this are the other way around.

https://news.ycombinator.com/newsguidelines.html