jffry

As far as I know, the actual trained system is proprietary, and you can only use it by requesting access to their online system for generating imagery: https://openai.com/dall-e-2/

There are open-source efforts to implement it and make trained models available, but I don't imagine they are yet at the same scale of ingested data / model size as OpenAI's system: https://github.com/lucidrains/DALLE2-pytorch

If the data never leaves your device, then a third-party service never gets the opportunity to leak or misuse it. This is far more private.

How many stories have you heard about breaches due to accidentally mis-configured logging in web services? Also in the news lately was Twitter misusing 2fa phone numbers for advertising purposes.

I remember it being very common for taxi numbers to have 555-5555 in their local area code

See prior discussion: https://news.ycombinator.com/item?id=27013880

When you renew your passport, you can also get a passport card for an extra $30 or something. They're only good for land/sea crossings (no flights) from US to Canada, Mexico, but you can put it in your wallet.

The downside is again that it's non-standard form of ID, but it is a photo ID and may be useful

Many states will issue "non-driver ID cards" (examples below), which are typically cheaper than a drivers license, but which still involve the same level of proving who you are before you can get one (involving showing passport/birth certificate/bills/whatever)

Because these are relatively uncommon, they will lead to extra scrutiny and hassle in many situations (buying alcohol, showing ID at airport security, etc).

The US does not have federal level ID cards, although the federal government has used funding for state programs as a cudgel to make states comply with standards for how they verify who you are before issuing you an ID ("Real ID").

Examples of non-driver IDs:

- New York: https://dmv.ny.gov/non-driver-id-card

- Massachusetts: https://www.mass.gov/how-to/apply-for-a-massachusetts-identi...

- District of Columbia: https://dmv.dc.gov/service/non-driver-identification-cards

Price differences between SKUs are a tool manufacturers can adjust to try and shape demand to match their yield curves.

Small clarification, because I had the same misconception: $GITHUB_STEP_SUMMARY is just an env var containing the name of a file

> With no suitable runways or ports and heavy lift helicopters still in their infancy, it would all have to be hauled in over land.

The implication then is that without a port, transferring that much material from ships to shore would be prohibitively difficult.

Skip to the 8 minute mark to see the incident mentioned in the title

Good luck actually buying a Pi right now

> Is there some sort of "innovation week" type thing going on right now?

Yes. "Platform Week 2022": https://blog.cloudflare.com/platform-week-2022/

Thanks for sharing! As somebody who has been bitten before by copy-pasting a key I appreciate that as the headlining benefit :)

Thoughts from an ergonomic perspective:

- Base58 is nice and makes easy-to-handle values which is nice

- Naming of shortToken, longToken, and token are confusing to me, because it makes it sound like all of these values are tokens/secrets of some sort, rather than components of the token. Not to bikeshed, but what jumps to my mind is more like "prefix_id_secret", which helps make it clear what role each one plays.

- I don't think keyPrefix should have a default, I think your function should raise an error if it's not provided. Otherwise more than one user of your library is going to end up with "mycompany" keys in the wild.

- You probably ought to validate that keyPrefix does not contain an underscore and raise an exception if it does, otherwise that way lies pain for people trying to handle these keys.

Thoughts from a security perspective:

- You should probably use crypto.timingSafeEquals(buffer, buffer) [1] instead of comparing strings

- If you're trying to store the secret's hash, isn't something like bcrypt/scrypt preferred over raw sha256 these days?

[1] https://nodejs.org/api/crypto.html#cryptotimingsafeequala-b

The linked README links a draft RFC [1], the introduction section of which contains an explanation.

[1] https://datatracker.ietf.org/doc/html/draft-msporny-base58#s...

I doubt they would add another part (which takes mass, space, and testing) to solve a problem that is far, far outside the scope of the helicopter's designed mission.

IIRC it _has_ shaken off dust, but it obviously can't remove all of the dust, and even a little accumulation can reduce solar panel effectiveness enough to be a problem when you're on a pretty thin margin.

I hope Ingenuity can survive the Martian winter, but even if it does not, it has been a massively successful mission. Everybody who contributed to it must be incredibly proud of how well it has done!

Perseverance uses an RTG (something like 100 watts of power + heat), which is heavy but extremely reliable.

For an experimental helicopter that must fly around, Ingenuity's mass budget is extremely tight. I don't know how they'd put something on the helicopter, and I imagine it's considered far too risky to have the rover have some way of cleaning the helicopter.

These machines (at least the one I have used in Cambridge MA) have you pay by entering your license plate instead of parking spot number.

Even in places that only have numeric plates I assume they are not going to make a numbers-only version of the machine

> English is not my native language and "The solution is trivial" was meant sarcastic. The solution isn't trivial at all, nor is it complete, because solving the corner cases is complex.

I think it's really difficult to convey sarcasm well in text, and what seems obvious to you as a writer might not come across as sarcasm to readers. I certainly didn't understand that as sarcastic right away.

It might be better to address it directly and in a friendly way, like this:

> Like I did, you might be wondering right now why we don't just create our own, much larger lookup table and wrap it around Direct2D. Well, we can’t just tell Direct2D to use our custom cache [...]

Wouldn't the model be to expose an increment_stock(10) type HTTP endpoint instead, and the backend can ensure it's atomic?

I don't know but Google Trends [1][2] bears out that it's very recently common.

My best guess is that it has come up as part of the Amber Heard / Johnny Depp trial and that has spurred a lot of people searching for it.

[1] Past 5 years, March & earlier - https://trends.google.com/trends/explore?date=2017-03-01%202...

[2] Past 90 days including giant spike - https://trends.google.com/trends/explore?date=today%203-m&ge... (if you go to past year you can see the spike)

From this list of Chrome versions [1], it looks like WebKit 537.36 was the last version used before Google forked it to Blink, so I imagine they keep that around in the UA for backwards compatibility with sites that were looking for it.

You can even see it will stick around in the plans [2] they have to reduce the information contained in Chrome's UA

[1] https://en.wikipedia.org/wiki/Google_Chrome_version_history (scroll down to v27.0.1453 on 2013-05-21)

[2] https://www.chromium.org/updates/ua-reduction/

That's a little bit of a bummer, but it's still incredible they managed to catch it. Hopefully they'll be able to refine their approach and get a solid catch next time!

AFAICT you can configure TOTP / Security Key based MFA for Twitter and disable text messages, but I don't recall if they force you to give them your phone number first: https://twitter.com/settings/account/login_verification

Regardless that still wouldn't protect you against somebody social engineering their support team. The account security page at https://twitter.com/settings/security has an "Additional password protection" but that seems to inhibit automated password reset requests, not support-related ones.

I'm guessing these two discussions: https://news.ycombinator.com/item?id=31191700 and https://news.ycombinator.com/item?id=31205072

> So plastic gives you more bacteria, and plastic shavings. Stick to wood.

I think that's a little ambitious of a conclusion given that the study you cited didn't (at least as described in the abstract) involve cleaning.

My thick HDPE boards can survive the dishwasher's high temperature cycle without warping, and the HDPE is better for my knives.

I do cut down on washing by using the same cutting board for produce and meats, but raw meat is always the last thing on the board before cleaning.

Yes, but the comment I was replying to was discussing scenarios other than the one in the article.

In 1984, NASA and the FAA deliberately crashed a remote-piloted Boeing 720 as a test of various safety technologies: https://en.wikipedia.org/wiki/Controlled_Impact_Demonstratio...

In 2012, a team of television studios crashed a Boeing 727 in Mexico (to film footage) because US authorities would not permit the test: https://en.wikipedia.org/wiki/2012_Boeing_727_crash_experime...

So I'm guessing that outside of very specific scenarios, you would have a hard time getting permission to deliberately crash a plane anywhere in the US.

The second video accompanying the actual paper should give a good sense. It's not the fastest but it's still incredible: https://www.nature.com/articles/s41467-022-28859-8#Sec14