skysight-inc/HackerNews huggingface dataset:
This as of a good opportunity to ask as any: If I happen to sit on 100s of different cables from the last two decades, that I all want to keep yet they aren't actively in use, what are some good way of storing those?

I initially just hanged them off pegs, but eventually the variations became so many I had to figure something else out. At the moment, they're just separated into boxes by what domain (more or less) they belong to, but surely there has to be a better way? I want them accessible but not in the way.
QUIC/HTTP3 relies on TLS. If you already have some encrypted transport, like an Istio/Envoy service mesh with mutual TLS, or Zerotier/Tailscale/Wireguard style encrypted overlay network, then there are no benefits to using HTTP3. Moreover native crypto libraries tend do a better job handling encryption anyway so rather than wasting cycles doing crypto in Go or Node it makes more sense to let the service mesh or the overlay handle encryption and let your app just respond to clear requests.
Horseless Intelligence
Not all cities are like yours - in Houston, it's reasonably common for a business to offer delivery "anywhere within the inner loop", which is just the smallest of three beltways which circumscribe the city.

The inner loop is 100 sq. miles (260 sq. kilometers). Right now (4:30PM on a Monday) drive times and cycling times are comparable (close enough its not really a deciding factor). But bicycling 6-10 miles for each delivery is a good way to get injured. Very few drivers here have any habit of expecting bicycles. When I bicycled to work, I got hit by a car roughly every other week - and that was just one 2 mile ride per day, not multiple 2-10 mile rides per day.
Except it's not secret...

"She said the firm provides an online tool that allows lenders to check whether it accepts loans from a given project.
Freddie has similar insurance requirements to Fannie. "
> I'm pretty sure in my area anyone who attempts to negotiate (especially based on an AI-built argument) will be told to pound sand.

That said, given the evils of RealPage YieldStar, and of investors hoovering up residential real estate, it would be nice to find a way to give some power back to the people.

(Normally, this could be through law enforcement and legislation, but that became more complicated in the last couple months.)

One tech-based service that would help, in a small way, is a widely-used reviews and reputation system for landlords and properties. It would have to be reputable (unlike Yelp), and to find some way to sustain itself, long-term, without turning evil.
there's a pretty good summary of things with links from daniel stenberg - the curl guy - here : https://daniel.haxx.se/blog/2021/10/25/the-quic-api-openssl-...
"Awful": Roku tests autoplaying ads loading before the home screen
Allegedly, some traffic is best split into multiple socket addresses to work around the smart middleboxes.
Exploit Code for Apache Tomcat RCE Vulnerability Published on Chinese Forum
March Windows Update Includes Major Improvements!
Interestingly this thread didn't catch any wind here either.
Genetic discovery puts bigger, tastier tomatoes and eggplants on the horizon
What distinction are you trying to draw? To me the headline and the claim the article makes are effectively the same, just with the article claim dotting some i's in terms of assumptions being made (it seems reasonable to simify a headline).
It's also employed by digital libraries to enable lending of books.
Nebraska Town Offers $50k House Down Payments If People Move There
Previously

(88 points, 8 hours ago, 10 comments) https://news.ycombinator.com/item?id=43388133

(32 points, 7 hours ago, 3 comments) https://news.ycombinator.com/item?id=43388769
Any plans on adding public transit?
You may be thinking of front running, which is an agency problem, and also not this.
It seems that it ignores bridges over rivers making the travel time wildly inaccurate.
> Not bullet proof

Nothing is, of course. For me it is a simple statement of what should be obvious consequences for an action.

I usually present it like this: If you are going to goof off, goof off. Don't pretend you are working. We all need mental breaks. Don't think people are stupid. If you choose to insult them by pretending to be working, you are going to lose you will be fired.

I had to institute this when I realized a salesperson was spending time on eBay and dating sites rather than, well, selling. He would do the thing where he'd click over to Excel or whatever when I approached. Again, how stupid do they think people are?

He would wait for sales to come in by phone or through the website, rather than actively networking and prospecting. The lack of engagement was obvious from the numbers he was (or, more accurately, was not) producing. So, I installed software to remotely monitor his company-provided computer (and record it for evidence). While I was doing this I thought "How stupid are you that you think you can fuck with an engineer?".

It didn't take long to amass a week's worth of data showing he was spending over 50% of his time (Even up to 75% on some days) during work hours on eBay, dating sites and more. The following week he was gone.

What sucks is that we spent time and money training this idiot and bringing him up to speed with products, technology, etc. What a waste of time and human potential.

I love the line from Phantom Menace: Your focus determines your reality.
and if anyone is interested in delving more deeply into the statistical concepts & results referenced in the paper of this post (e.g. VC-dimension, PAC-learning, etc), I can recommend this book: https://amzn.eu/d/7Zwe6jw
Yep, it's prepared statements or bust. But the long tail of legacy code, examples, documentation, that uses escaping is gonna take a while to get through.

One of the nice things about modern ORMs like SQLAlchemy 2 is that it forces you to use prepared statements even when when calling raw queries.
Quantum Speedup Found for Class of Hard Problems
Show HN: Learn where countries are on the world map with Spaced Repetition
Hi HN,

I made a web game to practice country locations a while ago and HN liked it, so I thought I'd post my updated version as well.

As for how the game works and feels, I'd really recommend you checking it out for yourself, it's free, no signup, no ads.

The tech stack is Vue + ts + Tailwind/Daisy for the looks. The learning algorithm is a slight modification of the ts version of FSRS.

If you have anything to add, it's open source as well (https://github.com/koljapluemer/learn-worldmap), although not well documented yet.

In the end it's just a little sideproject, but I hope you enjoy it — any feedback welcome :)
I discovered recently that Microsoft OneDrive will detect a ransomeware attack and provide you with the option to restore your data to a point before the attack!

MS need to advertise this feature more, because I'd never heard of it and assumed all the files on the PC were toast!

Of course, the fact that a script on Windows can be accidentally run and then quietly encrypt all the users files in the background is another matter entirely!
So the complaint is that Fannie Mae and Freddie Mac are leaving homeowners stuck because they have rationalized the insurance requirements for condominiums after the Surfside collapse.

In other words, they are trying to keep future homeowners from buying a disaster without being properly insured.

There is very little secret about it according to the article, other than surprise that the new requirements exist.
The difference for me is a lot broader. A wireless speaker to me mostly means a bluetooth speaker. A smart speaker means internet connected, firmware updates, feature-creep, TOS/EULA crap and a probably-sooner-than-I-expected end-of-life.
Ogress means a female Ogre
Finally, now is the day - today - where rust is faster than C
`0xcafebabe` is the ultimate winner and follows none of these rules.
3-2-1 has been updated to 3-2-1-1-0 by Veeam’s marketing at least.

At least 3 copies, in 2 different mediums, at least 1 off-site, at least 1 immutable, and 0 detected errors in the data written to the backup and during testing (you are testing your backups regularly?).
Sure.

"Preprint" implies prior to printing, which means that there's a reasonable expectation for this paper to be submitted, accepted, and printed in a scholarly journal.

What we have here is little more than a tongue-in-cheek submission which carries an aesthetic of "hot-take" throughout the paper. This is unbecoming of one committed to scholarly pursuits and all but guarantees rejection from journals committed to professionalism.

Furthermore, what's really interesting is how this comment section has developed. It really is the blind leading the blind here.

I will not subject myself further to the consequences of Brandolini's law except to implore the reader to consider the signal-to-noise ratio resulting from being too tolerant of posts like this.
> It’s always been very weird that little hobbyist open source projects produce much better software than billions dollar companies.

Kinda sorta. Little hobbyist projects can do better on relatively small and focused stuff, where the passion of a couple part-time people can cut through the crap that would be created by a thousand half-ass mythical man-month producers.

However, for a lot of stuff, only a "billion dollar company" (or other organization) can do it. Stuff with a lot of unavoidable but unrewarding scut work (e.g. web scraper maintenance) or stuff that requires more focus and effort than a couple of passionate part-time people can provide.
I first thought the article was about "black hair", as in the hair color and was wondering why that specific color would be difficult to animate.

But it really seems to be about "Black hair", I.e. hair of Black people, I.e. afro hairstyles?
I don’t doubt this but the criticism has to be rooted in facts and the current state of affairs, and you have to consider conflict of interest. It’s not too different to what you can read here. No one ever talks about whether C# offers good cohesive experience when solving a specific task, or what are the pros and cons of its build system, or how a typical .NET team looks like in a particular region. No.

Instead, the complaints you will read here are about what the authors think .NET’s problems are without ever verifying if any of that is true in hopes of making swipes for god knows what reason, because posting something accurate requires knowledge on the subject and the results of a cursory search usually do not support cheap arguments.

(and I see this as an embarrassment because you can learn a lot from doing research instead of repeating the same tired phrases you heard elsewhere)
Ongoing discussion https://news.ycombinator.com/item?id=43392521
Gajim 2.0.3 has been released – GTK XMPP/Jabber Chat Client – Communication
Just listened to the Lex Fridman podcast with Zelenskyy from the start of the year.

Zelenskyy’s comments on what is corruption vs what is called lobbying in the west come to mind when reading this article.
I think in cases like this "personal computer" is a blessing and a curse. It seems like most of the big parties involved in computing with the big levers to move things are mostly in it for themselves and pick and choose whether they shoulder responsibility for a certain feature, or which side of 'personal' it comes down on with regards to if they hook it into their services and privacy. What would the attitudes be to losing physical information or property be for other parts of our lives versus digital info/property, if that was media, references, financial details, property deeds, old records, etc.

While I do appreciate the generosity in how many projects make themselves available (free or otherwise), it does seem like they can have a narrow focus where they solve the challenge they had to solve, but aren't interested going past that point. There's logical reasons for why that happens, but there's unfulfilled potential to make personal computing a better environment there.
Expatriation (immigration?) to Portugal from America furthers Portuguese wealth inequality and housing crisis. Lisbon is already basically a playground for foreigners and if you do decide to move there please try to assimilate by learning the language, etc.

Source: Portuguese/US citizen. Lived there for a year with a "good" Portuguese salary of 2000 euros a month; much different lifestyle than what the typical US tech worker is accustomed to. And not doable long term unless you plan to retire in Portugal and not do much travelling.
Stories like that make me wonder why domestic terrorism isn't more popular.
Non-editorialized title, per HN guidelines:

Microsoft: March Windows updates mistakenly uninstall Copilot
I feel you on prioritizing moral work! It took me a long time in my career to finally be able to make that choice (versus taking the first job I could find). I had an extremely moral open source robotics job for 5.5 years and then had to leave and take a less moral but still I think positively moral startup job. I think it’s okay to prioritize your personal financial needs sometimes. In the long term you won’t do the immoral stuff that long if this is how you think - so your own will provides a check to make sure you won’t do it too long.
This is wild

-> The dramatic 50-page complaint alleges racketeering, misappropriation of trade secrets, tortious interference, unfair competition, and aiding & abetting breach of fiduciary duty. The lawsuit is largely centered on an employee whom Rippling claims was working as a spy for Deel.

->Ripplings’ lawyers note that[...] “Rippling employees’ Slack activity is ‘logged,’”, “meaning every time a user views a document through Slack, accesses a Slack channel, sends a message, or conducts searches on Slack, that activity (and the associated user) is recorded in a log file.”

-> It was a sudden spike in that logged activity, and specifically how it centered around the word “Deel” that raised a flag to the (HR?) team that tracks that activity.

-> “The channels D.S. previewed during this period have no connection to his payroll operations job responsibilities,” states the complaint. “What they do relate to, however, are all aspects of Rippling’s business development, sales, and customer retention strategies—the most sensitive of the Company’s Sales and Marketing Trade Secrets and confidential business information—with a particular emphasis on a single competitor, Deel.

Complete with a setting up a honeypot in a sting operation

-> According to the lawsuit, Rippling set up a “honeypot” to prove out its suspicions. The company created a fake Slack channel and shared its name with key Deel execs, then sat back to see if D.S. searched for it. He did, claims the lawsuit.

And then the alleged spy hid in the bathroom to avoid handing over his phone.

-> Things got very heated afterward, per the filing, which says that when an independent solicitor attempted to seize D.S.’s phone by court order, D.S. escaped to the bathroom, “locking the door behind him and refusing to come out, despite the independent solicitor’s repeated warnings.”

-> Rather than comply, it goes on, “D.S. was heard ‘doing something’ on his phone by the independent solicitor, who also heard D.S. flush the toilet— suggesting that D.S. may have attempted to flush his phone down the toilet rather than provide it for inspection.” It did not recover the phone later.

I really wonder how this one is going to play out
And this is why I don't touch the real estate market. Renting out housing is an inherently adversarial relationship; you either screw over your tenants or they screw over you. There's no fair exchange of value, there's just the scalper (e.g. Blackrock) who bought all the Pokemon cards^W^Whousing units and thus controls the supply, versus the tenant who wants to kick them in the shins.

Personally, I don't think any of the "tenants rights" laws are actually fit for purpose. That is, they're designed to bribe the peasants into accepting their landlords. My ideal would be cities with complete bans on housing rental - i.e. a 100% owner-occupancy mandate - along with "HOUSING PRINTER GO BRRRR" strategies to completely obviate most demand for renting housing units.
https://iquilezles.org/ is a legend, see the articles and video tutorials.

Aside from shadertoy I use https://glslsandbox.com/ (for some reason it has https errors now). It's the same concept and it has a lot of submissions that are more basic than shardertoy where you can easily change lines and see what happens.

My intuition for these kind of shaders: They are just pure functions mapping an x,y coordinate to a color (optionally making use of time and cursor position). From this you can derive anything, like drawing a circle by choosing black or white depending on the distance from the center. There is a lot of intuition to gain and it's fun playing around, because as long as it compiles you will see something and you are likely to be surprised about what you accidentally made. Very rewarding.
The counterbalance is that it takes a long time to steer a big ship, and economies of scale can actually hurt you. If you are building the wrong widget it doesn't really matter that you can make a billion of them. Even scaling down a big business might not work if most of your costs are fixed.
You can set a lifecycle rule. You don't need credentials to delete.
Kryder's Law (2005)
I'd change it to "A Social Media Tool called Dataminr". On its own, the name of the tool is meaningless.
There are no warrior cultures in space.
>The sad thing is that it's becoming much more like America

It cannot help that more and more Americans are moving there.
"Full self driving unless abnormal conditions come up in which case the driver is expected to be instantly alert and capable of doing better than FSD"?
I wrote myself a similar decorator for a completely different purpose – ensuring a function I'm going to serialise over the network doesn't have any outside dependencies

This is actually a cleaner API so might switch my code to it, amazing work
Why is that ironic? Only one of those are Free Software
None of the videos in the article are loading - hacker news hug of death?
A PHP app called a Postgres library function to "escape strings" for use in Postgres, and that called a function to get a utf8 string length, but the function was bullshit:

> The PQescapeStringInternal method doesn’t actually validate that the string it is parsing with pg_utf_mblen is valid Unicode. So, instead, it just takes the length of 2, and grabs the next byte.

So the bug was a shitty function in a generic open source library which was probably never properly tested or fuzzed, which ended up letting attackers move laterally through the database. And this is one reason you want full test coverage; tiny stupid functions matter.

(Another fix for this is to enforce at the boundaries of every function that the input data has been "blessed" or sanitized by some other function whose purpose is just to validate that the data is what it's supposed to be. That would have to happen before escaping, and every function that uses that data would need to confirm that it got blessed. Basically you want a home-rolled strong-typing system with types (or data classes?) for all your data. But that's a lot of work, I don't expect many would do that for most apps)
They don’t want to get rid of your data caps. They want to get rid of their data bandwidth limitations.
A total remote-control and remote-discovery vulnerability in IoT thermostats
This reminds me of Winamp too.

As a teenager I used to fiddle with the visualization editor for hours.
Good fun!
Mister Lonely, the New TV Hero
but in this case (to keep with the comparison) the people having the conversation are recording it themselves and posting it publicly.
Anything not on this list is fine!

https://github.com/sam-paech/antislop-sampler/blob/main/slop...
Funny you should mention that! The surface of a trampoline can actually be modeled as a 2nd-order wave equation PDE, which uses a Laplacian spatial kernel - for the same reasons this is called Laplacian smoothing!
It's not surprising to me because The Intercept regularly reports on the use of Dataminr by various US agencies.

https://kagi.com/search?q=dataminr+site%3Atheintercept.com&r...
GitHub Action supply chain attack: reviewdog/action-setup
That’s largely true, but there are some exceptions (pun not intended).

In Rust, the CPU exception resulting from a stack overflow is considered safe. The compiler uses stack probing to ensure that as long as there is at least one page of unmapped memory below the stack (guard page), the program will reliably fault on it rather than continuing to access memory further below. In most environments it is possible to set up a guard page, including Linux kernel code if CONFIG_VMAP_STACK is enabled. But there are other environments where it’s not, such as WebAssembly and some microcontrollers. In those environments, the backend would have to add explicit checks to function prologs to ensure enough stack is available. I say “would have to”, not “does”: I’ve heard that on at least the microcontrollers, there are no such checks and Rust is just unsound at the moment. Not sure about WebAssembly.

Meanwhile, Go uses CPU exceptions to handle nil dereferences.
Siag: A spreadsheet based on X and Scheme in a grid (2000)
> Avoid generic tangents.
Institutions only own some half a million single family homes. Blackstone only owns some 300k units in total. The supply is constrained by locals who want to "preserve community character" and environmentalists who want to "prevent gentrification" and "preserve views".
It would be very positive for the entire startup ecosystem if this deal goes through. It would also be a strong signal from the new administration about support of our current startup ecosystem.
6 Things E.R. Doctors Wish You'd Avoid
And all of the scam call centers in Cambodia, Laos, Myanmar, etc. are run by Chinese gangsters with the tacit support of the CCP.

Just like how all the scam call centers across eastern Europe and Russia are run by Russian gangsters with ties to the Kremlin.

North Korea is also a big player in the global scam industry with many thousands of scammers operating out of state run call centers in Pyong Yang.

One thing that doesn't get discussed enough in the rise of internet scams over the past few decades is how much of the global scamming "Industry" is directly or indirectly state-sponsored.
https://archive.ph/3jA1J
I've learned that when people refer to "constitutional rights/protections" outside of a strict legal setting and framework, it's almost always disappointingly predictable and devoid of merit. The gulf between the law as its written and interpreted through the courts, and what people with a casual interest believe it to be, is really impressively vast.

At the end of the day if you want privacy, don't broadcast your activities on open platforms that were DESIGNED to observer and record you.
All the data is spread across more than 3 sites, both SSDs and Blu-ray (which is immutable). I don't test the SSDs because I trust Rclone, the Blu-ray is only tested after writing.

There is surely risk of Bit rot on the SSDs but it's out of sight and out of mind for my use case.
AI Is Taking over LinkedIn – Are We All Just Bots Now?
Just today I was preparing some slides for a course that makes the student participate and show some topics we're interested in regarding social and ethical issues in compsci

I googled a bit and I found a hn comment that talked about an article which explains what you say

Basically, they estimate drug use in the population, and they draw a map, and black and white people more or less have the same habits in drugs use. They draw a map of the past arrests by the police for drug crimes and they're skewed towards the black neighborhood. There's a bit more about it since the article dealt with predictive policing and Ai but the gist is what you're saying, and this causes a self reinforcing feedback for the police (which in turn arrests more black people and the loop goes on)

https://rss.onlinelibrary.wiley.com/doi/full/10.1111/j.1740-...