skysight-inc/HackerNews huggingface dataset:
This is very interesting! It looks like there's a config file [1] to set up username <- email,issuer associations. It looks like multiple identities (from different IdPs even) can access the same username, which is useful. There's also a config file for allowed IdPs [2] specifying the expected client IDs (btw, the docs here say all fixed duration options are for "24 hours" even 48h and 1week). This does seem to impose the limitation of exactly one client ID per IdP, which could complicate rotating client IDs.

Walking this through, given that OpenID Connect is specifically mentioned vs. bare OAuth2, I assume the ID token signatures are themselves verified by looking up ${ISSUER_URI}/.well-known/openid-configuration and following the jwks_uri found there. Is the JWKS response cached? Can it be pre-seeded and/or replaced with an offline copy?

[1]: https://github.com/openpubkey/opkssh/blob/main/README.md#etc...

[2]: https://github.com/openpubkey/opkssh/blob/main/README.md#etc...
Never meet your heroes indeed.

I have a feeling that if Einstein, Newton, Leonardo da Vinci, Churchill or really any of the great historical figures had access to Twitter, there legacies (or lack thereof) would be very different today.
Yeah but, it's one thing to informally refer to it as the STL; people will know what you're talking about. It's another to write an article about the standard library and say "The C++ standard library (also know as the STL)," which is a false statement and implies the author doesn't know what they're talking about. That's what the parent is referring to, I think. Personally no one I know has even informally referred to it as the STL since at least C++11, so it's a bit jarring to read.
Well they came into the top 50 in 5 years with half their infra in space. They claim their v2 sats will increase network capacity 10x (who knows if this is true) but they are moving with extreme velocity. They are also insuring their own regulatory moat via the Trump administration, they have no real competition in the constellation space, all this combined with Elon having an extereme ambition to control the levers of society... I dont think my predictions is unwarranted, however, we will see.
Stagnation in viz design has pretty much nothing to do with the shrinking native<->web capability gap, and the web is here to stay.
A yank may not actually be warranted in this circumstance. The change works for most users of setuptools; it's only a very specific configuration of (build-environment, setuptools-version, third-party-dependency) that can cause an issue.

This is one of those situations where the scale of the software package is so large that even if only 0.1% of users had issue, that's a number representing tens of thousands of people.
> If they were more powerful, most uses of X Macros could be replaced by just having a single macro do all of the magic

You can do exactly that, it is just very tedious without a support preprocessor library like boost.PP.
The loss of function in favor of form. Examples include needlessly complex data visualizations and vague clickbaity titles.
Quick feedback: The "Polypane Portal" page hangs after opening it in Chrome on M1 Pro Macbook.
>>I have confirmed with my parents the placement and orientation of my crib

Is there any way you have seen those things in some of the old family pictures? Because I know I am definitely guilty of that, I can swear I remember bits from my family's trip to Pompeii when I Was 2 years old, not much but little bits here and there, and only when I was older I noticed that what I remember is suspiciously similar to what my mum has in the family album from that trip(which I most likely would have seen as a child too).

In fact I worry about it with my own son now, I don't think he'll be able to tell the difference between his own memories and things he has seen in 1000s of pictures and videos I have been taking since he was born.
Barefoot running might have died as a fad, but, fortunately, the biomechanical benefits from the minimalist footwear inspired by the movement haven't gone away.

I only own minimalist footwear (zero heel to toe drop, wide toe box, no toe spring). Dress shoes, sneakers, sandals; all of it.

They helped me get off of orthotics, which I've worn for over 20 years, while reducing stress on my knees (I have osteoarthritis in my right knee) and making what little arches I have in my feet stronger.

It's a shame that pop culture seems to have _ran_ in the other direction (maximalist ultra-cushioned clown shoes). I honestly have no idea how people walk in those things. I purchased a pair of BOHEMPIA minimalist hemp chucks the other day. It came with a ~2-4mm insert for comfort. It felt like the cushion from the inserts made my legs work so much harder. All felt right once I took them off.

That said, I never ran barefoot except for a very short segment one time. Actual barefoot running is a whole other experience. Huaraches, which I've also run with, don't compare. I'm scared to do it more often due to glass shards and other fun things on the road, but if I ran more often and on smooth, unobstructed pavement, I'd absolutely do it barefoot.
I think the problem is that the protein is an anti-coagulant, which is necessary for mosquito's feeding strategy but is also something you probably want your body to have a pretty robust reaction to and break down/expel pretty aggressively, lest each bite just keep bleeding well after the mosquito finishes feeding.

Would for sure be nice if the immune response could skip the itching part though.
Which app was that? There's been a few instances like that, Encrochat, ANOM and Sky ECC were all intercepted in one way or another by law enforcement.

Of course, the real question is whether these led to any convictions. They did lead to a few prevented murders and the like, but given they're all sweeping / non targeted sting operations, they're not admissible in court in a lot of cases.
Istanbul is similar.
Never read the "vibe coding" original tweet, holy sh the golden age for hackers is coming.
I can believe that, with personal experience from a non-AI tool! A few years back, I wrote a puzzle solving tool (semaphore decoder) that felt faster than using a lookup table manually, but was actually very similar in time.

Those notes: https://bobbiechen.com/blog/2020/5/28/the-making-of-semaphor...

Regardless of the speed, it certainly felt easier because I didn't have to think as hard, and maybe that extra freshness would improve productivity for later tasks. I wonder if there's any effect like that for AI coding tools - it makes you happier to be less tired.
Wouldn't surprise me, but this isn't really google's fault.

As a product with a ton of appeal to the least experienced developers, lots of mistakes happen.

My understanding is that (assuming you trust google) there's no reason you can't build a secure application on firebase.
Which replication? Of the virus or of gen 0?
I think the idea that Trump and Musk have a falling out is wishful thinking - they have too many aligned long-term incentives. Also, Trump consistently rewards public loyalty, especially the extremely sycophantic kind that Elon exudes. "Unassailable" is a dramatic way to phrase it, but its more or less accurate.
I feel agi will be a patchwork of models melded together. Something like this would constitute a single model in the "perception" area.
I'd definitely be straying too far outside my wheelhouse to be comfortable with recommending how to transition, especially considering you have flat feet (I have regular arches). I can tell you that I watched this short vid and attempted to take its recommendations into account:

https://www.youtube.com/watch?v=Lhrae87EpWM
That's a CVSS issue. Heartbleed only affected Confidentiality, and CVSS rates scores on a triad of Confidentiality, Integrity, and Availability. RCE affects all three.
Alibaba exec warns of overheating AI infrastructure market
> These are the people whom software engineers need to be cheerfully working for.

Nope: We are equals with very different goals.

I (a software engineer) happen to work on a product, with customers. Modeling stormwater is part of the product. Within my company, the people who do modeling are roughly equal to me.

In the past, I've built products for customers where the products do not provide programming / scripting tools.

> That's been the obvious problem for a while now.

A script that someone runs on their desktop to achieve a narrowly-defined task, such as running a model, does not need to handle the same concerns that I, as a software engineer, need to handle. To be quite honest, it could be awful spaghetti code, but if no one else will ever touch it once the model is complete, there is no need for things like code reviews, ect.
How does this compare to Tailscale SSH? Will the two eventually be combined in some way?

I think tailscale SSH requires you to run their daemon on the server, correct?
Silk: Native-like swipeable sheets for the Web
Your typical Rodent Accelerated Transmission Signal And System Suppression
Nominal Connect: HITL Python test framework
Like for everything else they will let others fail, cherry pick what they want when the technology is mature, then say they invented it and call it "magic".
Vectors versus Quaternions (1893)
Me too! I'm a huge fan. I use it for all my static sites.
Buddy Peter Thiel hangs out in the white house and provides Palentir services to law enforcement that they would not be allowed to do themselves without a warrant.

The surveillance state is here
* What are a few features you offer over Browserstack? (re: x-browser testing).

* Do you offer GenAI integrations? (Copilot, Claude, etc)

(Help me sell this to my manager)
I don't understand the many comments here complaining that the browser has a subscription. Finally! I want more paid browsers, not less. I want to get back to a world where we paid for products with money, instead of being datamined and have ads pushed down my throat.

People here, out of all places, should be aware of what it means when a product is free.
Lattice C (on the Amiga) was my first C compiler! Do you remember what the struct issue you ran into? This was a pretty late version... like 5.x.
I suppose I should also add that I struggle a lot with picking up on subtext :-P
What footwear brands do you recommend?
good luck getting Linus Torvalds back from us! Jokes aside, i think the EU needs to reach consensus on a new operating system if you want digital sovereignty. So far I know of a few nations doing so for law enforcement/military, and I know of Jolla or webos, but I am unaware of any efforts like Huawei and harmonyOS to create a sovereign unified ecosystem.
Yup, but when I've tried gorm this is not generic enough to let me do this nested generically (with relations).

In gorm you can't do Car.update({'soundsystem': [{id: 'bluetoothProtocolId'}]}), you can only do something like Car.Association('soundsystem').update([{id:'bluetoothProtocolId'}]), fundamental difference being that the latter is dealing with Car internals and is not generic.
“People have gone to jail for 1/100th of what – even 1/1,000th of what Hillary Clinton did.” -Hegseth

“How is it Hillary Clinton can delete 33,000 government emails on a private server yet President Trump gets indicted for having documents he could declassify?” - Waltz

“Nobody is above the law. Not even Hillary Clinton – even though she thinks she is,” -Rubio
I don't know much about his family life, but it's very plausible that he spent more time working during his lifetime than with his family, and this is a good take. Considering the company's state of affairs, I would assume he was under a tremendous amount of work-related stress during the last few years, if not the majority of his career, peaking in this role.
There are heaps of garbage in it as well as malware and other stuff.
I literally went through this exact situation a couple months ago with a similar Bosch. I refused to get the new models that require the app to do simple things like half load or delay cycle that are physical buttons on my old one. I will actively avoid products like this.
> Rust doesn't help here; you necessarily must do all stores in potentially-mirrored memory as volatile (and possibly loads too), else you can have arbitrary spooky-action-at-a-distance issues, as, regardless of &[T] vs &mut [T] or whatever language-level aliasing features, if the compiler can see that two addresses are different (which they "definitely" are if the compiler, for one reason or another, knows that they're exactly 4096 bytes apart) it can arbitrarily reorder them, messing your ring buffer up.

Hmm, as I think about it, I see your point about LLVM's optimizer potentially "knowing" memory hasn't changed that really has if it inlines enough even if it's never put into the same &mut [T] as the other side of the mirror (and two improperly aliased &mut [T] are never constructed).

But as an alternative to doing all the stores in a special way (and loads...don't see how doing a volatile store to one side of the mirror is even sufficient to tell it the other side of the mirror has changed)...it'd be far more practical if the caller could use a (not mirrored) &mut [T]. Couldn't you have an std::ops::IndexMut wrapper that returns a guard that has a DerefMut into &mut [T] and on Drop creates a barrier for these kinds of optimizations via `std::arch::asm!("")`? [1] Then LLVM has to assume all memory changed in that barrier.

Regarding the more specific crate issues: I found these crates a while ago and hadn't looked extensively in their implementation. Thanks for pointing these out; I will have to look more closely if/when I ever decide to actually use this approach. I was leaning toward no anyway because of the other factors I mentioned. As an alternative, I was thinking of having a ring buffer + a little extra bit at the end that is explicitly copied from the start as needed. The maximum length of one message I need a contiguous view of is far less than the total buffer size, so only a fraction of the buffer would need to be copied.

> vmcircbuf just exposes the mutable mirrored reference, resulting in [1] in release builds.

Yuck, noted, clearly wrong to give the whole thing as a `&mut [T]`.

> slice_deque has many open issues about unsoundness.

I see at least couple of those, which seem to be "just" the usual unsafe-done-wrong sorts of things (double frees) rather than anything inherent to the mirrored buffer.

[1] https://stackoverflow.com/questions/72823056/how-to-build-a-...
Quaternionic Form of Relativity (1912) [pdf]
Apples to oranges. SR is for short runs inside a building. LR is for sending signals across a city.

For short runs inside a building, the transceiver prices are much more comparable. Compare https://www.fs.com/products/251819.html?now_cid=4089 to https://www.fs.com/products/282973.html?now_cid=4089
I thought about multiple drops of cat6 per room in my house, but they charged me per drop. So I just put one drop in each room and added a switch in a room that needs multiple connections. It's usually for Wifi WAP, smart TV, and the Tivo box.
The shareholder of Bosch is, with 94% of the shares, the Robert Bosch Foundation. Look it up to see what they do.

https://en.wikipedia.org/wiki/Robert_Bosch_Stiftung
Unless there is zero probability someone rich can die of heart attack even if they are billionaire. Overall they are dying less from preventable/lifestyle diseases which is reasonable expectation.
Can't seem to replicate that here (m4 macbook), but I'll keep it open for a bit and see what happens. Thanks for letting me know!
I watched some videos of Andreas working on Jakt some years ago but right now it seems kind of dead looking at the commit history.
Sure, but couldn't a malicious SSH server use this key to proxy a connection to another opkssh server?
Therac 25 didn't use a Pentium, nor floating point, and if it did, a 0.0001% increase in the radiation dose would be unnoticeable.
It's in their profile.
Yeah people repeat advice like this but have no idea it makes no difference and even in search it defaults to "Apple Music" but shows no results even when that slider is turned off.

It used to work in the first few versions of Music.app but broke about 2 years ago and has never fully disabled it ever since.
Seems pretty popular already, but I have missed this. What's the USP of Jakt over something like native c++, rust or zig? I don't really see the need, would love to hear from someone who knows
Dismissing psychology is one reason you don't run a popular social network.
> I would love to get away from pie charts, line, and bar graphs.

Why?
What would you say is the advantage of this approach over integrating OIDC into a separate service, like what Ubuntu is trying with authd?

(see https://ubuntu.com/blog/authd-oidc-authentication-for-ubuntu...)
I was calling out the $1,000 specifically because that’s what the poster above me mentioned, and I remember that coming up very often back when his CEO stint happened. But, yes, not the only donation he’s made.

And I’m sure Mozilla is furiously looking around for new funding sources right now, governments could be of interest, but I expect them to be very careful about letting money influence the product. They know their independence is a key feature, and Google has so far allowed them to remain independent aside from default search engine choice.
Likewise - at first I was prepared for this to be another weird permutation of MIT/BSD or something but once I got further into the article I understood the author's point (and agreed!) about claiming (at least a symbolic) right of refusal to allow one's work to be used for ill.

I don't know how enforceable that becomes, and I know that people the author refers to as dogmatists may be quick to point out the flaws (on some level it reminds me of pharmacists who refuse to dispense medications on personal grounds - eg, contraceptives or diabetic supplies to people they suspect of drug use).

But I think the conversation is valuable - there is a moral/ethical dilemma for many of us who truly love computing, when faced with a job market that consists largely of For-Profit Corporations And Governments Doing Bad Things (obviously this is personal and relative).
Note that even for C the dependency from compiler to standard library exists in practice because optimizing compilers will treat some standard library functions like memcpy specially by default and either convert calls to them into optimized inlined code, generate calls to them from core language constructs, or otherwise make assumptions about them matching the standard library specification. And beyond that you need compiler support libraries for things like operations missing from the target architecture or stack probes required on some platforms and various other language and/or compiler features.

But for all of these (including the result types of operator<=>) you can define your own version so it's a rather weak dependency.
AV1 is extremely slow to encode last time I tried.
You can’t compare to the US since the US doesn’t have Chinese cars and Europe does.
> allows him to stay in touch with senior staff

> First, only a select circle of people will have his address, creating a true hierarchy for who makes the cut and who does not.

> receive his e-mail address must first receive a briefing

So he still has a blackberry, regular email address that is kept secret, but everyone who gets his address must have a briefing!

Where exactly is there a complete lie in this?! Senior staff is responsible for toilet cleaning or making lunches?!
This right here is important. We could be running fiber end to end in the near future. Ethernet would end up obsolete like the phone line.
They aren’t close to being banned. They’re explicitly allowed with a defined size/capacity.

Even after a recent fire, South Korea just tightened the rules (eg no charging on flights) But they’re still allowed.

https://amp.abc.net.au/article/105063388

I think we might just have “AirSafe” certified batteries allowed only at some point. Or TSA approved ones. The ban would make a hell of a lot more sense than liquids
I love my Volkswagen which has plenty of Bosch parts in it.

I don't hear about Americans with Bosch appliances very often, but every time I've heard (I suppose until today) it was a very negative review. Maybe the American versions are different, or perhaps I've just run across a few dissatisfied people randomly.
The Disconnect Between AI Benchmarks and Math Research
Playwright MCP
Random Unexpected Defenestrations
If I add in all the time I spend reading about AI now, or wading through AI slop while researching something, any productivity gains I may see from actually using AI effectively are more than cancelled out.

Interestingly, AI tooling existing in its current form may be making people collectively less productive, even if individually it might make one somewhat more productive at very specific tasks.
I've done some hobby programming[1] in Jakt and while it had promise and took good ideas from other modern languages my understanding is that it's been abandoned at this point and isn't mature enough to build anything non-trivial.

Transpiling to C++ for maximum interop with the SerenityOS codebase was an interesting idea too, but what it meant was you had to interpret C++ compiler errors to to understand what was breaking a lot of the time

1: Here's my admittedly crappy markdown->HTML converter written in Jakt https://github.com/mikeakers/r3gen
Exactly what I figured, wider, not longer. Some shoes (usually higher-end ones) have a width measurement (in letters) as well as a length (the usual number measurement) for this reason—you shouldn't need a longer shoe (larger number size) unless buying shoes that don't offer a variety of widths. In fact, getting a longer shoe for the extra width will result in a poor overall fit.

It's kinda like how some nicer brands offer a variety of size modifiers in addition to "small, medium, large" on their ready-to-wear shirts, like "slim", or Brooks Brothers' named fit-variants ("Regent", "Madison", et c)
This is a really cool, very out-of-date, instance of a "digital archive". In my undergrad days I fell in with the "Digital Humanities" professor and did some research around this sort of thing. Basically, entirely separate from the NLP crowd, there is a parallel world of librarians and archivists who have an incredible amount of interesting material that they would like to make more accessible.

It's surprising how little cross-contamination there is between Digital Humanities and NLP (/ Computer Science / AI / LLM / GenAI /...). If you're interested in working on these kinds of projects, consider reaching out to these people directly!
A thing using authorized channels that was spied on by a different state has practically nothing in common with this.

(Yes, it probably shouldn't have been an authorized channel, but it was.)
I suspect the effect is similar to why zebras look the way they do. Patterns and perceptions of them aren’t always super intuitive
To be more specific, propositions that can be written in the form "some member of X exists" can be proven by specifying such a member. Thanks to the ability to define dummy sets with 0 or 1 element, while keeping them separate with types, this is quite a lot of propositions - surprisingly many. But it's not a useful programming or proving technique.
One the one hand it is great and probably usable to solve actual problems.

On the other hand it seems fishy that you need all these hacks to do it. There must be a way simpler language than C++ where you could do the same easier.
Last week cyber news in a nutshell
Good idea! I’ll look into the code and check how extendable it is.
It might be time to consider some new hardware. That machine is going on 15 years old now!
At this point I have a conspiracy that articles like this come out whenever there's a spike in GPU prices and these companies want to put the chipmakers back in line