skysight-inc/HackerNews huggingface dataset:
Ask HN: Userscripts that can bypass short links and anti-adblocks
short links take you to many malicious ad pages and force you to do many tasks before giving you the final link. adblockers, dns, brave browser don't work with these links. I think userscripts are the only hope to bypass. could you help me to find a good userscript that can bypass these links. an anti-adblock userscript would also be nice to have. I'm looking to bypass links from short link makers like lksfy.com, modijiurl.com, get2short.com
Each news article gives positive, negative and neutral values
Well OP is kind of correct because in security importance is given to CIA Triad: Confidentiality, Integrity, Availability.

Availability is important part of any system, if you lock out people, system will be secure but it stops serving its purpose.

Where OP fails is he seems not to understand password leaks and how much password+e-mail+phone number+other info lists are out there.

There is credential stuffing and password spraying running around from leaked passwords, so you can try dozen users on FB and just hit jackpot with one or couple, you don't have to brute force each one of them as there are countermeasures for that.

Even if you have weak password with a trick it is trivial to find out your trick when your password leaked from 5-10 services where you used the same e-mail.
Show HN: Digital estate planning in Spain enhanced by blockchain
For a similar achievement, check T3X. It runs under DOS, CP/M, and Unix. https://www.t3x.org/t3x/ The author ported a version of "Ladder" with it.
French researcher denied entry to US for 'expressing opinion' on Trump policies
Talk to Your Business Data
Making data-driven decisions takes too long. Instead of quick answers, you spend time decoding dashboards, switching between tools, or waiting on analysts. Closedata lets you talk to your business data as naturally as you would with a colleague. No more struggling with dashboards or waiting for reports. Just ask, and get actionable insights, 98% faster.
WhatsApp patched zero-click flaw exploited in Paragon spyware attacks
I believe everyone should work a service job at some point in their life. It gives a perspective you won't find anywhere else.

Your story brought back my memories of being a server in fine dining restaurants before landing my first programming gig. It was (mostly) controlled chaos with everyone on edge dealing with some of the most unreasonable people you could ever imagine. Did I also mention that I worked every single holiday?

It wasn't a restaurant attempting to be as regimented as The Bear, but similar story lines played out. Chefs yelling at each other, yelling at me, wanting to go out and yell at customers for ordering lamb well done, etc...

I wouldn't say I miss working in restaurants, but I do miss the finality of each service. When the last table left, that day was done. There was nothing to take home and stress about.
For the author... you may export/backup the TOTP secret from the TOTP app (MS Authenticator in this example) and save that someplace secure. You may use any TOTP app with that secret to generate codes to log in.

I typically do this as a safe guard in case the device that is running the TOTP app breaks or fails in some way.

I'm old enough and my passwords are random enough that I don't worry about them being guessed. However, I do worry about web security in general and the fact that companies are basically black boxes with loads of young inexperienced developers. They may be storing our passwords as plaintext strings and have them in a public S3 bucket. But, if you want one of my YubiKeys, you'd have to find me and physically steal it from me and hope I don't notice.

So there are some useful things with regard to 2FA.
Op specifically called out “Max”. Most people would find that technically incorrect. But go ahead and draw lines in the sand wherever you wish if it makes you feel like you’re winning an argument.
I'm trying to figure out if our predictions differ because of the confusion of language and definitions, or if it's because there's something you're seeing which I am not. But also, I do like winning debates if done fairly.
I'm not sure what you mean by "invented", but as far as I know the Chinese lab leak theory is still widely accepted as credible and supported by many facts.
I knew days lengthened quicker around springtime, but your interactive visualization and clear breakdown of the math behind it makes this phenomenon tangible
>you are roaming and do not have access to texts

I truly despise this. It effectively disenfranchises people for living outside of areas with good mobile coverage. Banks or utility payments or parking meters(!) or whatever should not be gated behind cellphone reception. Nevermind people who can't use a phone at all ...
Discussion (97 points, 15 hours ago, 46 comments) https://news.ycombinator.com/item?id=43416476
> Social media was definitely a mistake that made everything worse. I hope it dies soon.

Ye. Hopefully from cultural change and not government bans though.

Young people seem to prefer small private group chats nowadays?
I don't think others were necessarily talking about "business".

Though, yes, I prefer pinning dependencies for my personal projects. I don't see why things should break when I explicitly keep them the same.
Google to Pay Pensions for the Israeli Army
What’s the difference between requiring users to pay via app vs requiring users to pay via payment card? Both require extra effort / extra knowledge / extra hardware to make the payment, beyond the “default” national currency
He's not wrong. I use a password manager that stores passwords only locally, not in the cloud. I can generate arbitrarily complex passwords and never have to worry about how hard they are to type or remember.

2FA makes my workflow significantly more difficult. As a result, for non-critical sites, I have started allowing the browser to store my passwords, thus relying on the 2FA-authenticator for security. This result is likely less secure overall, since the browser's password storage could realistically be compromised.

That said, I do have to acknowledge the point in another comment that phishing may be the bigger threat. Log into a fake site with a password but no 2FA, and you are toast.
The argument as I understand it is that empathy and the “clues“ are imprinted based on social norms. Little children will happily rip out plants but will start to cry if they see or hear somebody else crying. One theory is that it is all about self-preservation: An environment where one animal cries without being taken care of is considered dangerous and inherently unsafe for self. Not so with plant life.
27th marked!
What infrastructure did you use?
This just shifts even more risk onto merchants while making disputes an even bigger headache.
Once, a reliable and wise colleague told me "Use in CI what you use locally" and that has been the best devop advice that never failed me to save my time.

The second one has been, from someone else: if you can use anything else than bash, do that.
It's fascinating how religious practices, like fasting from dawn to sunset, can make astronomical events feel so much more immediate and personal
seconded, it was great to leverage hosted cicd at work, until we realized that local testing would now be handled differently..

as always, enough decoupling is useful
If we define data that can't be accessed by anyone as secure, throwing disks in a furnace is how you achieve security.

I don't think this definition is very helpful though. So I prefer the one where the entities that need to have access still can access.
It is. Confidentiality, integrity, and availability.

Edit: see e.g. https://en.wikipedia.org/wiki/Information_security
Aren‘t you confusing the external perception? Wouldn’t somebody assertive seem like „an asshole“ to somebody else if the perspective don’t align 100%?
That is your perspective. Not that of the site owner, or the internet at large, victim to any abuse somebody unkind can unleash.

Security is a bit like traffic. If you're alone in the world, you do you. But you are not alone, you have a responsibility to others, be it passers by, fellow travellers or those loved ones depending on you making it back alive.
Off topic: This is a website without HTTPS
> Assuming a highly motivated office worker spends 6 hours per day listening or speaking, at a salary of $160k per year, that works out to a cost of ≈$10k per 1M tokens.

I guess...if by office worker you mean a manager that does nothing but attend meetings and otherwise talk to people. For other workers you probably want to count the token equivalent of their actual work output and not just the chatting.
Doesn't Google offer interoperability for the equivalent features in Android? (well maybe not private symbols in the closed source parts). So I don't see why it should be a big problem for Apple to comply. Except of course that it will weaken the lock-in in their platform, but that's kind of the point.
If I can't access money that I secured, I didn't secure it properly.
The person I'm replying to literally has a startup targeted at making AGI coming from the LLM hype cycle.
Growing up in Australia, you must have experienced quite a dramatic shift in how daylight feels when you moved
Yes and the best people to ask who to trim are tech leads with track record of consistently delivering value.

Their field of view spans from little guys at the bottom of the chain, through the essence of working product up to at least two levels of management.

And they do have good judgement, if they didn't they wouldn't be able to consistently deliver value in the past.
While we worry about Apple Intelligence, Siri can't answer 'what month is it?'
This. In theory, passkeys should be great. Sort of an SSH-for-the-masses.

Unfortunately, the industry has mangled the implementation, making them basically useless.
That's interesting to know, and I apologise for my premature judgement.

The reasoning goes that it's a compensation, not a reimbursement. It seems to depend on company policy though, and whether you're travelling on paid time or not.
Can NASA remain nonpartisan when basic spaceflight truths are shredded?
> However, CI is not "configured", it is coded.

No, it really isn't. I'll clarify why.

Pretty much all pipeline services share the same architecture pattern:

* A pipeline run is comprised of one or more build jobs,

* Pipeline runs are triggered by external events

* Build jobs have contexts and can output artifacts,

* Build jobs are grouped into stages,

* Stages are organized as a directed graph,

* Transitions between stages in the directed graph is ruled by a set of rules, some supported by default (i.e., if a job fails then the stage fails) complemented by custom rules (manual or automatic approvals, API tests, baking periods, etc).

This is the textbook scenario ideal for DSLs. You already are bound to an architecture pattern, this there is no point of reinventing the wheel each time. Just specify your stages and which jobs run as part of each stage, manage artifacts and promotion logic, and you're done.

You do not need to take my word for it. Take a look at GitLab CICD for a pipeline with build, test, and delivery stage. See what a mess you will put together if you support the same feature set with whatever scripting language you choose. There is no discussion or debate.
Wait, is this oxygen source "political"?

Any related news / article on this topic?
> This cast doubt on the long-established view that life was made possible when organisms started producing oxygen via photosynthesis, which requires sunlight, about 2.7 billion years ago.

So ... life began because it started producing oxygen via photosynthesis? I think they oopsed the word "multicellular" or "complex". A low-grade article and a long shot of a theory, but maybe not impossible.
It's the only product I'm sometimes required to come in contact with from these companies. And also the only product of theirs that I inspected in any detail in Ghidra. And the only product of theirs that I have to defend my network against.

So I'm only interested in that aspect of their products. For everything else, all these security companies and their customers can devour each other, for all I care.
I don't even understand why they are not including them. It's not like this amazing EU page will steal their clicks (and eyeballs).

It's probably the old news mindset, where they are the record. :|
I just realized that capitalizing the word "us" sounded like United states :facepalm:
Machine factories are not as general as they were in the 40s when things were made with high skilled labour. They are more or less just buildings in that sense.
I’ve thought about this a lot before in my personal and professional life. If you combine JSON with a SQLite database, you can get the best of both worlds.

Disclaimer, I wrote this for work but it is based on ideas I developed outside of work. https://pinata.cloud/blog/will-json-work-as-a-database/
These nodules are so hot right now.
I cured my Aphantasia, a detailed documentation
I did not know that platform thanks :)
I often go with either SQLite or a JSON loaded to RAM and synced for really small stuff. But even SQLite is starting to seem like overkill. Honestly, I think most of my data will be able to fit into a single context window of an AI soon enough.
Kind of poetic how nature balances things out in the end.
> you seem overly invested in this argument if you are having it so frequently that you have to preëmptively admonish it.

i dont engage in this discussion frequently myself, but have a look at the comments and you will see around half mentioning or comparing it to krita despite the news having nothing to do with it. this has been the norm of discussion regarding gimp, for better or worse.
Or they needed an excuse to intensify a genocide.
Muons can be picked up by a standard DSLR. Put the cap on (remove the lens if possible), set it to continually take long exposures of 30s or more, put it in a sealed plastic box with some silica gel packets and put the whole thing in the fridge for a while.

Most of the frames will just show noise from the sensor and electronics (the low temperature minimises that), but occasionally you'll see a bright streak as a muon hits it.
Damon Self-Tuned Memory Tiering Shows Nice Improvement for Linux Servers
One way to sanity check would be to ask it to reproduce the board with the new position marked to make sure the board model works as expected.
> Progress is good.

"progress" is exactly why we are where we are today... Electric cars just perpetuates the same cycle, the only way out is a complete redesign of the system. Personal ownership of 2500kg hunks of metal to transport your lazy 70kg ass isn't anywhere close to sustainable.

I bike everyday, and everyday I witness the same thing, hundreds and hundreds of cars, most are empty waiting on a parking spot, 90% of the rest are occupied by a single person, usually stuck in a traffic jam. EVs or not that's just pure madness and misallocation of resources.

You're moving the needle 0.1mm backwards when we need to go back a good 720 degrees. But of course it's much nicer to have trailing dams in a country the average american can't place on a map than having a car idle in front of _your_ school
Ignoring the prediction that everything will be decentralized in the near future (it probably won't), how about this scenario: you want to see if the voting activity (recorded in your events) correlates with the number of times you went to the doctors in the year prior to election (as recorded in your health records). If we want to be able to run such a distributed query, we need to be sure that each node stores the data in predefined format ("tables") and that one of their services run a service that will receive the distributed query request, decide whether or not it wants to participate, and then execute the business logic of the conditions (healthevent.year > getdate() - 365), probably defined in some programming language ("SQL").
Honestly, "using the same language as the application" is often a solid choice no matter what the application is written in. (and I suspect that for any given language somebody might propose as an exception to that rule, there's more than one team out there doing it anyway and finding it works better for them than everything else they've tried)
I guess this question is not aimed at me as I'm not OP but I'll try to answer as the author of stelvio. I use CDK at my day job every day.

I like CDK, it was huge step forward compared to Cloud Formation, Terraform etc.

But I think infra tools can be still made better for developers. In stelvio you can do this:

table = DynamoTable(
name="todos",
fields={
"username": AttributeType.STRING,
"created": AttributeType.STRING,
},
partition_key="username",
sort_key='created'
)

api = Api("todo-api")
api.route("POST", "/todos", handler="functions/todos.post", links=[table])
api.route("GET", "/todos/{username}", handler="functions/todos.get")

It creates:

- DynamoDB table

- Lambda function with IAM (policy - with permissions for dynamo table, role)

- API Gateway (resources, methods, integrations, role, stage & deployment)

- CloudWatch log groups

It would be much more code in CDK.

Stelvio aims to make common things much simpler while allowing you to change details if you need to.
> I don't think this definition is very helpful though.

Because it’s a straw man, and straw men aren’t helpful for discussion. No one is suggesting making data wholly inaccessible.

Data that you cannot access “at any time and in any circumstances” (author’s words) can still be secure. A fairer analogy would have been storing disks in a locked safe in your home. It’s not as convenient to access it, but it is secure. Should you do that for all your data? No, but neither have I advocated for that. I very clearly stated that I think it’s OK to have different levels of protection for different types of data.
Just a random note, I have an IndiePa.ge profile. I was expecting it to bring some traffic, but in ~2 years it brought 0 visits. Maybe it's useful if you link to it, but all those directories and websites to promote your product are just selling dreams (put your product here and the world will see you!!).

It's like going to a market to sell stuff, where there are only sellers and no buyers.
Turing complete YAML ends up being an app specific terrible programming language.

Many of us would rather use a less terrible programming language instead.
Is That Painting a Lost Masterpiece or a Fraud? Let's Ask AI
Knowing how CSS tries to support direction agnostic layouts the pseudo elements would be:

:gap ( -[inline\block] ( -[start/end] ) )

You know how the shorthands work elsewhere, so this just replicates that.
What Makes a Maze Look Like a Maze?
> The kitchen was easily 110 degrees and had a single comically small fan that did absolute fuck all.

I worked as a server at a Golden Corral (large all-you-can-eat buffet here in the States). One summer Sunday, the AC went out early afternoon. By the shift change, I was already literally soaked, other servers called out, so I decided to help out and work a double. Note that this was Sunday, so the church folks (nice but hardly the best tippers, as GC is cheap American grub) were more interested in buffet eating than the insane heat, so it was still packed!

But the best job I ever had was walking security routes (not for intrusions, but for spotting safety problems like leaks or smells or a worker in distress, none of which ever happened) on ships in local shipyards, including a massive BAE one. We'd walk the routes and tap the RFID tag-dots with the wand, twice an hour.

The first ship I walked (for $8/hr) was one of only four transocean cable laying ships. It had two huge vertical cyllindrical wells that stored the cables that would be fed out the back as it laid them. Getting to see the entire ship, walking up and down the ladders, into the engine room and around the bridge and those two giant wells was sooo cool.

Other ships I got to work on were a navy ammo resupply ship being decommissioned, a cruise ship, and, best of all, a huge container ship with a geek-salivating bridge whose engine room was massive and clean and spacious. I got to see it all, and be paid to exercise.

And seeing a pair of guys wrangling a huge elbow pipe section out of its very tight space using chains and pulleys to inch the giant (meter in diameter with inch-thick steel) up and over using hand-crank lever things was impressive. The connections were ringed with maybe inch-thick bolts, just massive.

I often poke my nose into my daughter's all-metal-gear Singer 503a sewing machine's top to get a whiff of that industrial grease to remind me of that badass engineering room smell.

Another great assignment was for a smaller shipyard that did small yacht repairs. It only had room to do one at a time, but the part of the walk that went through their office had a little living room-style waiting room that had a coffee table with a coffee table book on it that catalogued the Dodge brothers' (founders of the automobile company) use of their profits to build and sail luxury yachts on the Great Lakes. Those early 1900s ships were gorgeous. Those engine guys did well for themselves (I believe they built the original engines for Ford).

The key to the job, however, was I got weekly overtime at 1.5x, so I'd pick up any shift I could, as all hours >40 were $12/hr. One week I worked 64 hours, including 20 straight! My wife and I would sometimes literally just see (or just miss) each other as she got home from her restaurant work, and I would be going to the shipyard.

Thanks for the inspiration, friend. Yes, times used to be far simpler, and in many ways more enjoyable in that simplicty, sweat, and smells.
Even during the "night," the sky stays illuminated enough that it never truly feels dark. It definitely challenges the idea of what nighttime means and makes the summer feel almost magical, but I imagine it can also mess with your sleep patterns!
According to the article, this new discovery(?) actually go _against_ their interest.

Either that, or lots of missing links and details...
Sorry I got the words mixed up, wrote this too early lol..

Sabbath starts on Friday, so trains end in the noon/afternoon, and start after Sabbath ends on Saturday evening/night.
I tried this with a 1.3GB file [1], and got Gemini to convert the jq query into a go program, that takes 6.6s the second time its run.(to cache the geojson file). My laptop isn't particularly fast (i7-1250p), and go's json handling isn't particularly fast either, so jq's time is not impressing me when run on a ryzen 9 desktop processor on a 500MB file.

It's surprising how quick this kind of processing can be in go.

[1] https://data.acgov.org/datasets/2b026350b5dd40b18ed7a321fdcd...

The program:

package main

import (
"encoding/json"
"fmt"
"os"
)

type FeatureCollection struct {
Features []Feature `json:"features"`
}

type Feature struct {
Properties Properties `json:"properties"`
}

type Properties struct {
TotalNetValue int `json:"TotalNetValue"`
SitusCity string `json:"SitusCity"`
}

func main() {
filename := "Parcels.geojson"

data, err := os.ReadFile(filename)
if err != nil {
fmt.Println("Error reading file:", err)
return
}

var featureCollection FeatureCollection
err = json.Unmarshal(data, &featureCollection)
if err != nil {
fmt.Println("Error unmarshaling JSON:", err)
return
}

for _, feature := range featureCollection.Features {
if feature.Properties.TotalNetValue < 193000 {

fmt.Println(feature.Properties.SitusCity)
}
}
}
Leveraging Transcriptional Signatures of Stressors for Bumble Bee Conservation
One of the frustrating aspects of using prompts to generate code is that the output can vary quite a bit even with the same prompt. Creating an API which use the OpenAI APIs for mission critical solutions feels a bit scary and unpredictable. For structured output, I know people use libraries like Pydantic with Python. I don't now the best approach to deal with this with regards to code generation, though. For now, I guess having an experienced software engineer examine the code is essential.