skysight-inc/HackerNews huggingface dataset:
Early fall 2023 it certainly feels like I caught Verizon discriminating against Firefox. It was a CSS issue in their payment portal where some information wasn't rendering as a DHTML popup but at the bottom of the page. You could still pay your bill, but to an untrained eye it looked broken. I reported it and was sent to "Executive Custom Service", which would never acknowledge the problem. They would call once a week and make some statements like the problem was on my side and they couldn't reproduce it at all, to which my BS meter kept responding "I don't believe you." After several weeks of this, the issue mysteriously disappeared one Saturday morning, with no further word to me. I'd also complained to my state PUC (this was a landline bill) and think the added pressure helped convince them to do the right thing, even though the PUC has no online jurisdiction.

At the time I hadn't thought to go back to tech support and ask somebody there to simply try it with Firefox. Then Verizon would have been pointing fingers at themselves.

Any Verizon developers here? I'd love to know the real story.
Thank you so much! I will try DeepL.
That's actually a wildly short timeframe for a large political plan like this. Going from idea to breaking ground on a massive infrastructure project in a calendar year? It'll be interesting to see if this turns into a political/legal quagmire or not, since it's ostensibly aligned with both parties (donors) interests.
Traditionally, SAML / OIDC trust is established using public/private keypairs. Each IdP/SP pair gets a unique combination. In this case, a domain changing hands would not allow the new owner to gain access to the old owner's accounts.

In the case of Google OAuth, it's possible to forego this in order to allow any Google user from any Google workspace to login to your application. See the distinction between "public and internal applications" here: https://support.google.com/cloud/answer/6158849?hl=en#zippy=...

Some applications (e.g. Tailscale) take advantage of the public Google OAuth API to provide private internal corporate accounts. A common misconfiguration here is to use the domain portion of the "email" attribute - this can be spoofed by Google Workspace admins. That's not what's happening here.

Instead, Google instructs you to look at the "hd" parameter, specific to Google, to determine the Google Workspace a given user belongs to for security purposes. This field cannot be overridden by Google Workspace admins. The trust breaks down when the domain changes hands, a new Google Workspace account is opened, but the old "hd" value is reused.

You can read more about "hd" here: https://developers.google.com/identity/openid-connect/openid... (find the table and read the descriptions for both "email" and "hd".)

You can avoid this issue by using a custom Google OIDC IdP configured for internal access only in your applications, rather than using a pre-configured public Google OIDC IdP (be very careful you mark it internal!) A new domain owner would not be able to retrieve the secret key you previously generated.
Yes, there are some places that people can walk, nearly everywhere. But GP suggested "getting them out of their cars entirely". That is not a nuanced proposal that acknowledges tradeoffs and seeks to find a balanced approach. It's saying that people should not be in cars. Tell that to a parent with 4 bags of groceries and 3 kids and see what the reaction is.

If we want better cities and towns, zealotry won't get us very far. It will get us laughed at. And I say this as someone who walks all the time and is about to do so right now.
Depends on how they burn and what forest we are talking about. A small intensity fire will leave many of the healthy trees alive while burning dead ones, and will turn some of the carbon into charcoal which is sequestered. A larger intensity fire will also kill healthy trees, and turns the carbon into CO2.

Many of the forests in North America need to burn every year in that low intensity fire. Their seeds won't even sprout until after a fire (when all the dead undergrowth has been burned away thus leaving the new sprout with sunlight). However this doesn't apply to all forests in North America, and I know even less about other countries.

Moral of the story: consult a forester who knows the local forest before talking about anything. In many places we have been badly mismanaging forests and there is no nice way out. We probably do need to burn down and start over with large parts of North America because of all the harm decades of "Smokey the bear" have done to our forests.
where did you get that number from
There have been thousands of years of written language, and the worst thing that ever happened was the invention of the dictionary, which enabled generations of prescriptivists to pretend that word meanings can't change once they're written down, despite thousands of years of evidence to the contrary. Maybe look up 'hidebound' sometime.
Viewed in isolation, the number of redundancies might not be unusual, but how it's being presented to the employees is.

Before, Zuckerberg rhetorically accepted responsibility for lay-offs, but now he's making clear that the people he's firing are entirely to blame. He's deliberately talking up the firings, bringing them closer, making them feel more personal and making it a bit harder for the people fired to get replacement jobs, all for the purpose of cratering his own employees' morale.

He's making Facebook a pro-MAGA company and has decided that the way to make the workers get with the program is to intimidate them.
Thanks for the clarification.

I'm not one to compliment Microsoft software products, but Analysis Services and SQL Server, at least when I used them at the time over 10 years ago, seemed like darn fine products (which they purchased from someone else, I believe...)
Can confirm. 90% of L7, L8 hires at AWS between 2021 and 2022 flopped.
My brokerage account could be accessed by both. I agree that is how it should work. But my brokerage account provider is never told to disable access via my IdP. It’s up to my former IdP to not do something stupid like giving someone else my old email address.
Because they made it a worse product, they made it my job to fix it. That’s the point.
I've found chatgpt useful for trying out D&D settings that I don't normally get to experience in my usual group. It loses the plot after a while, but it's enough for me to figure out whether I dig the setting enough that I would want to pitch it for a real game.
Seconded. I switched to NixOS a year ago after an apt install broke my system one too many times, and so far I've been very very happy with it. I've broken things, but being able to roll back to an exact duplicate of the previous state has been a lifesaver. I can't imagine wanting to go back to repairing broken apt installs.
My frown continues to deepen at Apple's UI backslide as they crib more and more junk from iOS/iPadOS. I'm on Sonoma 14.5, and this is Safari 17.5.

macOS Safari's <select>: https://imgur.com/a/05YWDCc

macOS Safari's <datalist>: https://imgur.com/a/4f3JwuA

There are SO, SO, SO many things wrong with Safari's datalist element here. Esc doesn't close it (close from keyboard by switching tabs...). There's no hover effect on the options. The active background color is more saturated than the system's accent color (typical for iPadOS/Catalyst junk). There's no left/right margin, and no border radius, on the options. Option text isn't vertically centered. The font is different (it seems differently aliased? Perhaps just larger). The datalist element itself lacks the same border-radius of select. On select elements, selection does not wrap (down arrow with the last option active); on datalist it does.

Here's an egregious one - when you zoom in with Cmd-+ a few times, this is how the <select> element looks: https://imgur.com/a/Vpu536j

And this is <datalist>: https://imgur.com/a/JrfXLW9

Argh! I used to revere Apple for sweating the details. Their UI/UX quality inspired me to become a frontend dev.

Today, they ship things that wouldn't pass Q/A at my worst jobs.
"what if somebody from Google applies"

I'd be immediately suspicious. Why are they leaving Google to come here?
That's why allowing account recovery using (exclusively) email is indeed a security problem.
Not really. In some places yes, but trees need specific conditions to exist: there would be lots of grass land and deserts too.
Decentralized Instagram alternative Pixelfed launches mobile apps
While I've never used GNOME inside a KasmVNC session, it used to feel slow on reasonably powerful machines in an Xrdp session.

That'd be my first guess.
... and correspondingly lower salaries.
With the incoming admin I can't imagine anything other than huge nat gas plants being built to power these data centers...
Bread and circus are to keep them busy. It worked in the Roman empire, it works in the American empire.
R/C servo? If so that's not surprising: they're designed for use in radio-controlled vehicles where the main feedback to the operator is the vehicle's motion.
Hey, just pay extortion prices for more storage!
You're asking what the motivation for foreign investment is? Money. You're the only one mentioning racism.
I guess what I mean is for a typical "influencer", you want to be that person to both be famous and also be rich and have cool stuff like they have.

But if you want to grow up to be MrBeast, you want to just be famous. Maybe you want to be MrBeast-famous and also buy cool yachts and lambos and private islands for yourself, but that's not the "lifestyle" that he's selling. The lifestyle he's selling is "be famous but still hang out with your loser friends but get to give away and/or destroy awesome things".

This is maybe not the thing we should aspire to, but for kids I think it's fine to imagine that for yourself the way that you imagine being an NFL quarterback or something. Not every kid imagines growing up and being a moderately successful CPA.
From a per capita perspective you are probably correct, but there are a ton of people in eastern OR & WA that live within a few miles of the river and still have domestic wells into endangered aquifers.

Additionally, there are a lot of farmers with ground water rights (ie wells) and not a ton with surface water rights (ie rivers).
> Magic links and password resets are all going to give the new owner access.

Which is why you should never exclusively rely on either for sensitive services.
That sounds... fine? If the prediction algorithm really is perfect, and it predicts my next trip is going to result in a fender bender, I'm certainly going to take uber or public transit. Even if it ends up costing an extra $50 or 2 hours of my time, that's still better than paying for hundreds/thousands of dollars worth of repairs.
Security and Cryptography Algorithms: A Guide
Weren’t the Intel CPUs made in the US?
Greenland doesn't have any decent sized cities! The largest city is 19,000 people!
I once got a developer position through a professional group on Facebook. My soon-to-be manager had to have HR create a job posting on a public facing portal so I could apply through it, despite already essentially giving me the position.

I wonder how many people applied for that job before it was taken down.
My girlfriend is an Orthopaedic Surgeon. Great when I've got a broken arm, or need shelves putting up. I wouldn't let her anywhere near my heart or brain. Medicine is super specialised.

I hear you on geography though. Luckily the human body doesn't change too much between locations.
>bluesky is the left to the x right

you've given the left pov, but it's not accurate.

twitter was neutral, then twitter "went left" by censoring the right.

then musk bought twitter (renamed it X) and stopped censoring the right but did not censor the left; but a certain type of left person can't tolerate the right not being censored so they left first to the fediverse and now to bluesky

X is open to all; bluesky is a population of people who are not open to all
I remember a post here where some recruitment manager (at a company) said "Always write a cover letter, which is not generated by AI, otherwise you're an automatically trashed".

I rolled my eyes.

Although this might be sound advice, it's not the reality of a lot of people looking for work.

Yes, they might do this for the few months, but after what 6 months+ of no or canned responses (even though you have ALL the skills they want) it gets tiresome and you just say F-it, copy-paste a canned cover letter.
There are a few 'long form' creators like Jenny Nicholson (I recommend the one about the failure of the Star Wars Hotel!).

Contrapoints (eg the Twilight one), Big Joel's (recently made a 6hr one!), FoldingIdeas and so on. It's a very different model, and a number of these creators also make videos for Nebula.
It’s weird you think nurses, anesthesiologists, etc. should work for free while the health insurance company not pay for the care that it has been paid to pay for. I suppose the surgeon should pay for the materials used and for use of the space too. We are entering an era of corporate excess and shills will be in high demand so you likely will not need to work for free.
Why not just pen and paper?

ReMarkable is also a good option for epaper.
Believe it or not, sending them overseas just to be put in a box actually can be cost-effective. Like with those pears: "grown in Argentina, packaged in Thailand, sold in UK" https://www.birminghamfoodcouncil.org/2022/01/16/part-i-pear...
Take care, if some numbers seem a bit high, it's because the median pay here is only based on those who submitted their data to levels.fyi which tends to be mostly FAANGs and big-tech it seems therefore skewing some numbers really high, not based on national statistics for SW jobs of each country which would also include all of of mom and pop shops, bringing the numbers down to realistic levels.
> In some countries letting the driver know where you plan to get off is good if you're young.

I've definitely experienced this a few times even as an adult obviously out of place. I've usually found bus drivers happy to help people who aren't being a problem, I imagine it can be a bit refreshing and rewarding for the bus operator at times as long as you're not being a bother or a drag on their schedule. The bus drivers in Montreal were very nice despite barely speaking English and I only have Duolingo level knowledge of French. :D Je ne parle pas bien français! J'essaye.

Thanks for the insights and sharing. I really appreciate insight into how others raised their kids and what worked and what didn't. One last question, what country/region were you in raising your children with public transit? US? Major metro or more mid-pop?
Usually when they shamelessly copy from Android they made some improvements, this isn’t even close to material on Pixel, which is pretty nice.

(Not a fanboy of either; use both.)
Would it be fair to say that you also don't appreciate solo rpgs?
Ackshually that's deepseek, you can thank China for it
I think you're right. Speaking from current personal experience, it's not unusual to get 500 applications for a job, especially higher-level jobs like Principal engineer (where people are chasing the title and salary). I would guess 90% of them are clearly underqualified. Of the other 10%, nearly half will never respond to a follow-up email to schedule interviews. Of those that do, 3/4 of them will reject the offer for various reasons. Given I have a lot of other duties beyond hiring, spending the hours upon hours it takes to sort through that only to have it yield no fruit is ... demoralizing at best.

It seems to me that if somebody can actually solve the problem of increasing signal-to-noise ratio, they could do very well.
I am not interested in this, but an AI DM that allow human players to play would keep the social aspect. Since being DM is a higher threshold of knowledge and time investment, this could unblock a social gathering, rather than substituting it.

Also, if it doesn’t try to keep the story to strict guardrails, the creativity and story creation would come essentially from the human players.

I don’t think those arguments are enough to make me want to use it, but I see the point and possible interesting use.
I DM for early teens and I would kill for a D&D party that took it all too seriously. :)
Because governments and venture capitalists subsidize it. Their literal argument is that if you hire based on merit alone and your demographics dont meet the percentage that the government wants; you are racist and therefore not deserving of taxpayer dollars.
Thanks, for your comments. Generative AI (LLMs) would have a real impact if and when they have better understanding of the physical world. Most of Africa still has less digital data, but lots of data points in the physical world which unfortunately can't be analyzed yet.
TLDR
but i searched the linked page for america and the only mention is a theory, no proof:

"In 1930 Austrian-American economist Gottfried Haberler detached the doctrine of comparative advantage from Ricardo's labor theory of value and provided a modern opportunity cost formulation. Haberler's reformulation of comparative advantage revolutionized the theory of international trade and laid the conceptual groundwork of modern trade theories."
Mecha Comet Linux Handheld (CES 2025)
I have been required to create such fake job postings.

From the line manager perspective, how it looks is you have a colleague who has been working with you for several years who is on a H1B visa. They want to get a green card and become a permanent resident. To support this, we are required to post a fake job ad for their position, and invent a reason to reject any US citizens who apply for the position. (Non-US applications are ignored.)

Our legal advice was that the job posting had to be contain only legitimate requirements for the role, so it could not be highly tailored to only match the resume of the employee seeking PERM status. The result was phone screen interviews were required to reject 8-10 on-paper-potentially-qualified US applicants for the fake position.

This is for a highly specialized area within finance, where in real hiring there is an immense effort to find the strongest candidates regardless of nationality.

In hindsight I am confident that earlier in my career I had applied to at least one such fake role. One not-well-known advantage of working with a recruiter as a job seeker in such a field is the recruiter will have back-channel information to know to ignore such fake job postings.
it’s actually not even as “simple” as that comment they’ve changed it to be a bit more obtuse to get to the command part, exemplifying exactly why going along with it is a problem.
>'Unsafe' is a subjective label often applied haphazardly.

Insurance companies have actuaries to classify risk. They're not asking armchair drivers on hacker news to determine what is dangerous or not.
with required NSA backdoor of course.
I once managed to use ZFS to detect a bit flip on a machine that did not have ECC RAM. All python programs started crashing in libpython.so on my old desktop one day. I thought it was a bug in ZFS, so I started debugging. I compared the in-memory buffer from ARC with the on-disk buffer for libpython.so and found a bit flip. At the time, accessing a snapshot through .zfs would duplicate the buffer in ARC, which made it really easy to compare the in-memory buffer against the on-disk buffer. I was in shock as I did not expect to ever see one in person. Since then, I always insist on my computers having ECC.
What's noteworthy is that there isn't going to be a PIP process this year. The day the review cycle is over the bottom 5% of employees will be shown the door.
Dupe, Show HN from the author (350 points, 2 days ago, 65 comments) https://news.ycombinator.com/item?id=42678754
Carpenters, electricians, and plumbers will be able to name their price in the Los Angeles area for the next few years.
NYC legalized jaywalking in 2024, and the change will take effect next month, Feb 2025. https://www.cbsnews.com/newyork/news/jaywalking-legalized-in...
We got bboxes from yolo indeed to identify "here is a traffic sign", "here is a traffic light" etc. Then we cropped out these objects of interest and took the DINOv2 embeddings of them.

Not using it to create segmentations (there are YOLO models that do that, so if you need a segmentation you can get it in one pass), no, just to get a single vector representing each crop.

Our goal was not only to know "this is a traffic sign", but also do multilabel classification like "has graffiti", "has deformations", "shows decoloration" etc. If you store those it becomes pretty trivial (and hella fast) to pass these off to a bunch of data scientists so they can let loose all the classifiers in sklearn on that. See [1] for a substantially similar example.

[1] https://blog.roboflow.com/how-to-classify-images-with-dinov2
I use Linux all day on the server, but I’ve never liked it on desktop. I do think I’ll be forced into it within a few years.
While I align with your views on this matter, talking to people this way is how you drive them to entrench in the opposite view.
Apple still produces older generation devices long after the latest ones are released. That's their whole strategy to address the lower end market.
https://archive.ph/rTUfp
People play games for a variety of reasons. While you enjoy the social aspect, others may find that to be the worst aspect of the game (or just don't have a social circle).

I grew up playing D&D alone in my room using LEGO. It was great and I still have some of the sets I built as dungeons and monsters that I built from reference pictures in the Monster Manual.

Video games are different from solo role playing. It's like trying to substitute shooting hoops in the driveway with NBA '24.
Psh, A small and minimal shell. public domain:)
The ratio is probably 4/5 for YC Startups
But you have to work to get those assets, just like building a website
Such a great victory for American industry... the future is to bring workers from Taiwan with skills and willingness to receive a fraction of US salaries.
> I think the main reason ZFS's native encryption isn't recommended is that there's known bugs in its implementation, especially around key rotation and send/recv.

Is that still the case? I thought the send/recv bugs at least were squashed a couple years ago?
Your missing the point.

When your kid runs in the road. Do you want the to avoid an accident, or do you want to optimize for them just turning enough so they don't lose their insurance.

When traffic ahead of you makes an emergency stop, do you want the person behind you at a safe distance to error on stopping earlier or do you want to add an incentive to just stop right before your bumper?

There is a reason emergency braking is a popular feature. Humans tend to no apply brakes early or hard enough, even when no distracted.

Otherwise safe drivers are punished also because it isn't a reliable metric, so the actuaries know that they can't tell crash avoidance from risky behavior.

If you know about training fleets and semis, you can see these new drivers taking risks that they should not be taking.

Give it a decade and a lot lost or shattered lives and I would guess these will either abandoned or not supported by the reinsurance industry. Possibly just being another source of income to the companies to sell to data brokers.
I'm the same. I can't stand Chrome's dev tools.
There are wooden kids coasting bikes without pedals for like 3 year olds.
For the same reason you don't wear remotely controlled collar on your neck that paralyzes you in case you're doing something dangerous.
Not everything. There's also webkit.
That’s what I thought these are pretty high numbers.
...just seem more willing to do it

That's why manufacturing offshored in the first place, companies feel they're receiving better value for money on wages elsewhere for this kind of work (and these days not to mention more & larger facilities, proximity to component sources, and a strong ecosystem of supporting and complimentary facilities).