jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
Silly question; how common is this class of bug? We're talking about an application that lives on the local system, and is probably only exploitable via social engineering bugs (i.e. we convince the user to do something stupid).

We live in a world where merely installing software might also install a silent updater in the background, or might interfere with existing software that it has no need to touch, or might start monitoring peripherals and phone home with data in ways that could invade privacy. We also live in a world where once popular software, particularly freely available software, sometimes drifts into borderline malware territory over time. In this world, “doing something stupid” can be as simple as turning on your computer and installing (not running, just installing) some of the most popular software in the world today on it.

What is the problem that sandboxing every app into a homogenous set of thou-shalt-not's solves?

To give a few examples, some of us would consider it a bug for everyday applications to splat junk all over a filesystem during a build/install, or to hide data in odd places as part of a copy protection scheme, or to scan a whole disk and automatically upload any files that might support “cheating” in a game to the mothership.

Unlike some here, I am not willing to trust the good intentions of a software developer just because I have paid good money to use their product. Far too many shady practices go on in parts of our industry for that to be a sensible policy without adequate safeguards in place any more.
"His mother is English while his father, who is a Hawaiian-born American, has Native Hawaiian, Chinese, and Portuguese ancestry."

Here's a pic of his dad: http://img.spokeo.com/public/900-600/keanu_reeves_2001_01_26...
Thanks! I definitely think executing neural networks on-device is the future for a lot of applications. It’s just a better UX, and much cheaper to boot!
We tried it on CS students. Anecdotal evidence says some more easily understood the traditional math. Others understood the alligator approach first.
awesome! nice list.
I don't think that's quite fair...

> Apple revolutionized the music industry

_Napster_ revolutionized the music industry. Apple saw the writing on the wall and made mp3s commercially legitimate.
Wow, if they keep that up, they'll be 99% of the total car market in just a few years!
Sounds like you missed the point of the article. It's not about not being able to use the tools, just letting them collect dust in your shed.
The directors are legally required to act in the interests of the foundation's charitable mission, though, so they could only sell the assets if they deemed it to advance those interests. I could see selling non-mission-critical assets passing that bar, but I don't see any way the Wikimedia Foundation could justify jettisoning Wikipedia, its flagship project, as being in line with its mission.

It'd be even more problematic in this case, because the Foundation's mission statement explicitly promises to maintain these resources "in perpetuity", which would seem to conflict with selling them to a third party:

In collaboration with a network of chapters, the Foundation provides the essential infrastructure and an organizational framework for the support and development of multilingual wiki projects and other endeavors which serve this mission. The Foundation will make and keep useful information from its projects available on the Internet free of charge, in perpetuity.

It's possible there's some legal wiggle room around that, but it would certainly seem hard to justify.
Qi-gong (sometimes spelled chi- kung). It is moving meditation, as opposed to still. There are many different kinds, but the one I'm most familiar with is called Chaoyi fan huan (cfq).

I find it easier to move into a meditative state when my body is moving, personally.
And I'm looking forward to a real world example of 'width' where JSON fails and XML shines.
Yup, though Buddhists seem to have a few thousand year lead. Hopefully if won't take a few thousand more years to make the leap from neuroscientists to the general population.
I've heard a lot of that. Yet, mostly from people who've never or hardly ever used the language.

By reputation, PHP is a bit like JavaScript. JavaScript was this language nobody liked. It wasn't even considered a real language by most programmers. Some of it's design errors made it a language with low barrier to entry. Hence a lot of mediocre programmers made it unpopular with code that does not deserved to be called code.

This changed with people like Crockford and his 'JavaScript the good parts'...

It's pretty much the same with PHP. It gets the job done very easily... And once you know what you do, you can rely on it for large projects too. Especially with the changes that were introduced in the latest release: Namespaces, Closures, ...
This question comes periodically. Check the archives.
Since it's the same name, My personal concerned about possible separation of people whom would normally contribute good content and comments to HN proper.

Perhaps I'm off base because I don't know the way the site is set up, but are comments and articles shared between the sites in any way?

Also, more importantly, has there ever been a survey or statistics collection as to where contributers are geographically located?
Should we really be encouraging children to play chess?

Not only is it terribly violent it is rather anti-american. The monarchy, church and knights all in charge capturing and crushing the pawns to gain territory, not to mention that it pitches black against white.
That's the same situation as we have right now, where their login or their email are identical points of failure. Forget one / lose access to your email, and you lose the ability to get back in, so people make a new account. It's not like having usernames and passwords is preventing this.

As to providers changing, that's where you allow multiple OpenIDs per person, as fallbacks / alternate ways of signing in. So long as they control one, they can control all. It's not OpenID's fault few sites do this, it's the epic adherence to preferring username + password columns in databases instead of a separate table which would allow for more than one.
I'm surprised to see Programming Collective Intelligence on the list. Not to say it's not a good book - it absolutely is, I've got a well-thumbed copy sat next to me - but I can't say that it's as generally applicable as the rest.
It's true, it's all server side.

TryRuby's history (if I remember right) is that it comes straight from Hackety, so I don't think graphics displaying was really a consideration...
drop an icon on the desktop [...] cannot find my website again

Offer an HTML page to save to the desktop ?
You don't understand how hard it is to gain weight when you're perpetually skinny. Nobody wants to be really skinny, just like nobody wants to be really fat. What we're all aiming for is that Men's Health magazine look where we have a muscled physique and very little fat. I actually think it's easier to get there from being fat than from being skinny, and don't think that just because us skinny guys get to eat whatever we want it makes it more enjoyable. When your trying to gain weight, eating becomes a chore and it gets expensive.
And we used to say prototype in C++ and then re-implement in C to make it fast in production.

The math and the algorithms are important - but one shouldn't dismiss a fundamental understanding of the lower levels of the system - even though they'll change over time and you probably won't have to "go there". Real-world software runs on real-world systems, and there is no reason for a budding computer scientist to deprive himself of at least a cursory understanding of how things work underneath - you never know when he'll want to break out of the toolset Vendor X provides him and do something radical and new (like implement something in hardware, or recognizing there is some feature there he can use to massive real-world benefit)
I liked (in the order they show up in my del.icio.us stream):

* Dan Buettner How to live to be 100 http://blog.ted.com/2010/01/how_to_live_to.php

* Dan Pink on the surprising science of motivation http://www.ted.com/talks/dan_pink_on_motivation.html

* Kamal Meattle on how to grow fresh air http://www.ted.com/index.php/talks/kamal_meattle_on_how_to_g...

* Ian Dunbar on dog-friendly dog training http://www.ted.com/index.php/talks/ian_dunbar_on_dog_friendl...

* Mark Bittman on what's wrong with what we eat http://www.ted.com/index.php/talks/mark_bittman_on_what_s_wr...

* Hans Rosling shows the best stats you've ever seen http://www.ted.com/index.php/talks/hans_rosling_shows_the_be...

* Sugata Mitra shows how kids teach themselves http://www.ted.com/index.php/talks/sugata_mitra_shows_how_ki...

* Alan Russell on regenerating our bodies http://www.ted.com/index.php/talks/alan_russell_on_regenerat...

* Robert Lang folds way-new origami http://www.ted.com/index.php/talks/robert_lang_folds_way_new...

* John Maeda: Simplicity patterns http://www.ted.com/index.php/talks/view/id/172/

Somehow I never bookmarked

* Dan Gilbert's talks http://www.ted.com/speakers/dan_gilbert.html

* Dan Ariely's talks http://www.ted.com/speakers/dan_ariely.html

Which I've now remedied

There was also one about regenerating local ecosystems that I somehow can't seem to find right now.
I hit "view source" on google. Here is some of the javascript:

ar _IG_MD = _IG_MD_Generate({ct:0,t:[{i:0,n:"Home"},{i:1,n:"arxiv.org"}],dt:[0,1],m:[{i:2,mt:25,u:"http://www.quotationspage.com/data/qotd.rss",ti:"Quotes of the Day",sn:"A3",t:0,dd:["ed","del","ming","shg","rg","ag"]},{i:139,mt:25,u:"http://lwn.net/headlines/newrss",ti:"LWN.net",sn:"Ne",t:0,dd:["ed","del","ming","shg","rg","ag"]},{i:137,mt:25,u:"http://blog.jgc.org/feeds/posts/default",ti:"",sn:"",t:0,dd:["ed", [...Lots more snipped...]

This will help Johnny learn to code how?
What an amazing coincidence they got hacked the day after a price crash! I wonder how this could keep happening.
> Some people deserve to be in prison for 25 years, or the rest of their lives.

Really, no.
It does not, but Kali is designed for pentesters, so it already contains a lot of dependencies. It's based on Debian, so with a little fiddling you should get it running on most other distributions.

You need, however, a wifi card capable of packet injection. Some of them need special drivers or patches, so it makes sense that the author uses a distribution for securtiy/pentesting.
Doesn't it feel like a bit small environment? I was imaging at least 3x more servers
The value of Falcon for me is less its performance and more that it it for building REST APIs and does not carry the legacy of trying to support creation of Html front ends, along with all the associated complexity and cruft and dilution.
I'm going to shut down this thread because the discussion that's continuing here, days later, is not at all what Hacker News is supposed to be for (https://news.ycombinator.com/newsguidelines.html). The topic is exceedingly painful and personal, and the thread got stuck in a repeating loop. There's no possibility of resolution in this context, so continuing to litigate it here can only make things worse.
Fast search&replace is a quite old feature

But also one that seems to have been forgotten for a while. I've used many text editors that where much much slower at search&replace than the trusty Unix tools of old. If a modern text editor comes along and rediscovers those old tricks again then that is definitely worth mentioning.
I've noticed that when my eyes are tired as well. I think well-considered low-contrast color schemes don't get enough love, and I'm still a fan of Solarized, too. (Although my favorite schemes, both light and dark, are Spacemacs'.)
What sort of KPIs would you prefer? I work on similar things at IG and curious what you would suggest.
The thing on your birth certificate.
This man is a hero but a ‘sadomasochist’ at the same time. Why did he return to Russia after the attempt to poison him? He wanted to show he was not
afraid, I get that but was it worth it? His life is in danger again. And his public support remains relatively low, even after disclosing the whole Putin palace by the Black Sea and the extravagant spending on it, all this while the Russian people have seen a dramatic decline in quality of life.
Go BiBi!
Yikes - they're using Coldfusion!
Moved to East Germany? In the era of the Berlin Wall, which was built to prevent people from fleeing that country?
Seemed like a crate idea at the time.
You mean something like this:

https://certification.ubuntu.com/make/Lenovo

Or this:

https://support.lenovo.com/il/en/solutions/pd031426-linux-fo...

It's all really very nice, but even on certified machines, some hardware parts are not working on Linux (X1 fingerprint reader, for example).
Curious why they needed to "escape" - South Africa's border control has always been pretty reasonable, so this piqued my interest.

Were they criminals on the run? Or was it an illegal citizenship / passport issue?

Sounds like an incredible story either way.
Be glad you've never set foot in finance.
This is combative and aggressive for no good reason.
Get a content writer. There are a lot of words saying very little on your front page.
Yeah, I got to front page of hacker news but I'm only getting 80 unique users per day on my website. Through there are now also 200 unique bots per day. (Where do all these internet bots come from?)
Oh yes, but it's pretty different when you're regulating interactions between complex network of private entities, and just telling state health fun to cover some procedure.
>Haskell is one of those languages for people who want to show off how clever they are

Yes, that's what banks are most known for. Showing off how clever they are and not doing anything useful. Facebook and google certainly fit that profile as well right?
Way back when, I wrote a simple web server that ran on localhost that served empty files for any .html, .js, etc. request and 1x1 pixel images for any .gif, .jpg, etc. request.

It worked pretty good. As a poster upthread noted, though, the big issue with this approach is maintaining the list.
I realize this might have some merit as a life tip, but it also sounds hilariously lonely
I think that's the real problem. A tool designed to help you determine what is chewing up your battery seems to be fundamentally broken and is not being addressed.
Totally worth any memory issues it causes. I jumped on Safari the other day without it and it was awful.
This article completely neglects to mention the other dangers of this pattern, namely what happens when the connection drops mid download[1] or the server responds differently based on user-agent or IP[2].

[1] http://www.seancassidy.me/dont-pipe-to-your-shell.html

[2] http://www.djm.org.uk/protect-yourself-from-non-obvious-dang...
Or at the very least move your headphone-mounted microphone near your mouth.
I dont really mind the video, but the audio makes it really difficult to stay engaged.
The real question is if we should expect their to be evidence behind it. And considering the funding, the opprotunities for research, the difficulty of doing a study someone won't easily pick apart, and the community push to verify it at a peer reviewed level, I am not surprised we don't have peer reviewed research.

For starters, I've yet to see a good way to measure productivity.
Oh God, yes. I'm freelance working 100% remotely. I hate phone call meetings. For one, I am half-deaf in one ear from years of wearing headphones to block out noise in open-office floor plans in my previous life as an employee, and often I can't even hear what is being said. A bunch of people are sitting too far away from someone's smartphone set on speakerphone, and the timid mouse in the corner won't speak up. No matter how many times you ask, they go right back to whispering.

They'll ask me questions about how things work and I just don't think well on-the-spot like that about code I wrote 2 years ago. I remember it well enough that I could look it up and get them an answer in an email in 15 minutes, but they had to call to ask, so they want the answer NOW. They'll call at 7:30 at night and complain they couldn't get a hold of me. They won't leave a message. They could have sent an email and I would have an answer for them first thing in the morning. But they would rather call during off-hours, then wait until nearly the end of the next day to call back.

Then, they will say a bunch of stuff, nobody will write it down (except me, IFF I actually hear it). If they are bad ideas, I'll argue a little, but not having the time to research the pros and cons, I can't provide a good recommendation with alternatives (and I hate complaining without alternatives). So everyone will "agree" that it's the direction we (meaning I) should go. I'll bust my ass to get it done, present the changes, and they'll question why I would do things in such "confusing" ways, when what makes it confusing is what I complained about in the first place.

"Just brute force it!" They'll say, like it's somehow a magical incantation to turn a programmer from architecture astronaut to a pragmatic realist "like them". "No, we can't brute force it, because the problem is exponential and runtime explodes when we apply it to real data." "Don't quote that math mumbo jumbo to me, we just need to get it done, I don't care how good it is." Then later, "wow, this is really slow, maybe we should find someone else to be working on this."

Sorry, getting a little off topic there. But basically, I hate not working with people who know how to communicate properly, but I've learned to work within the system (or lack thereof, rather). I've just taken to agreeing to everything they say, then doing whatever the hell I want. I know what their goals are better than they do. I can make a better project then they know how to, and they never remember what they actually told me to do. I just tell them it was all their idea, and they don't have the documentation to contradict me, so it works great.
Interesting monitization related news: #Cachemonet was one of the first digital artworks to be sold to a private collector. The deal insured that the domain remain open to all visitors on the Web.
No mobile coverage is the best thing about the tube.
I'm one of the founders, and happy to answer any questions.

Also, we're hiring!
https://www.dronedeploy.com/jobs
One side began returning home almost immediately after the situation escalated, and has since been so widely shocked by the violence that occurred that many continue to be sceptical it was even born of their movement.

The other side, through most of the year, not only didn't denounce the violence, but celebrated it as democracy in action, including one TV anchor that asked to be shown "where it says protesters are supposed to be polite and peaceful."

One political faction is being torn to rubble over violence it likely never intended (and from which no positive outcome would have been possible), which effectively allows the other side to enshrine violence with clear and obvious benefits to them.
It seems cowardly to me to use force to shut people down. But it's a free country and they own their platform, so i think it should be allowed. I just think it will allow for more competition for Twitter.
You don't strictly need ECC memory for that specific task. Torrents have checksums for every file chunk, so even if some bit corrupted because of RAM, it's enough to re-check the files and re-download corrupted pieces if needed.

That said, complete re-check of 64 TB at 250 MB/s would take at least 71 hour. So ECC RAM definitely won't hurt.
Regardless of how timely (way too late???) this moderation decision is, I cannot help but feel like the social media giants have decided that they have milked this cash-cow dry and now they want to make a show of "discretion" and "responsibility" to appease the incoming powers-that-be....

Ultimately I remain convinced that the only sane way forwards is via decentralized services like https://joinmastodon.org/.
This is a Michael Jordan in Space Jam level stretch. Speech is also just vibrations of air and text is just electric charges on circuits.
Most people acknowledge that social media has an unprecedented ability to sway elections. Wouldn't it follow that allowing them to deplatform politicians is a seriously concerting form of censorship, private business or no?
I have no way of proving my theory, but I believe that crocodiles are still here purely because of 'survivor bias'.

Just like two men might be 18 year-old soldiers. One might be killed in an attack, while the other man next to him survives and lives to be 106 years old. Pure blind chance determines which one survives and the other perishes.

Crocodile eggs are laid in sand and hatch after about 90 days. If the timing was just right, a clutch of eggs could be laid just before the asteroid hits.

While the worst effects of the asteroid strike are happening, and killing off the dinosaurs and the current living crocodiles, the eggs quietly develop in safety.

After 3 months, conditions are improving and just in time for the baby crocodiles to escape the eggs and continue on their 300 million year existence.
The pockets aren’t deep enough...

TSMC knows Intel is a competitor which AMD isn’t so any deal they’ll sign will be temporary at best.

They aren’t exactly struggling to find customers as every wafer they have is spoken for 6 times over.

If anything at least as far as TSMC goes Intel would have to pay through the nose for any capacity.
Interesting on multiple people's legs. I know the news says our own area has a drug problem but I guess I haven't seen much of it in person...

There's someone I know that worked as a caregiver for a man that had dementia, and instead of keeping him inside all day decided to take him to the park. Well his adult diaper needed changed, so he went to the bathroom to do that, and a park ranger started banging on the door accusing them of smoking weed wanting them to open the door now! Banging on it, then while finishing up changing the state park ranger started accusing them of being homosexuals.

This was somewhere in California, but I know he moved across the country after his patient passed away and decided to go on a different career path. So kinda interesting how people can see one little thing and then start assuming a bunch of stuff. But apparently the ranger realized he was in the wrong and apologize. Sounded like there could of even been a lawsuit out of it, but he didn't want to go that far and just wanted to move on. Probably embarrassing to deal with. This was back I guess before everyone carried cell phones with them though also.
Yes, they can install certificates that enable MitM.

That's one reason why I never use custom clients for VPN services. That is, no binaries.

I just get the OpenVPN PKI stuff, and use stock OpenVPN.
Once we replaced the cars of all people who don't do that so often that renting a different car for the trip is not an option we can think about that problem again. Maybe supercharger technology has improved from today's 30 minutes by then.
> Ever wondered about how you can find the torrent seeders without a centralized entity? The Bittorrent DHT is the underlying tech.

The Bittorrent DHT is not fully decentralized, it needs a list of hardcoded bootstrap nodes. https://stackoverflow.com/questions/1181301/how-does-a-dht-i...
And sometimes. Yes. It is just a bug in a malloc. And you can fix it. And it wouldn't be there any more. And cool thing, you can even brag a bit that you've fixed bug in a malloc.

By the way, there was sort of a bug in a malloc I remember fixing. Now, when was it. Ah, on 7th October 2006 ;)
https://gitlab.flux.utah.edu/gtw/git/blob/dff9d65dc61af8a00a...