jkeisling/hacker-news-corpus-2007-2022 huggingface dataset:
The article says "Ormandy said protocol handlers are a popular source of vulnerabilities and argued that 'hcp://' itself has been the target of attacks multiple times in the past."

I'm not defending his actions, but I think he's arguing that it's likely that black-hats already know about the vulnerability because it occurs in a heavily targeted attack vector. Therefor, releasing details gives IT professionals the knowledge they need to setup firewalls or do whatever they have to do to protect against the vulnerability while waiting for an official patch from Microsoft.

With that said, perhaps there's a better way to accomplish that goal.
I agree that it only generates pageviews. I don't think it would be a huge leap to adapt it to optionally reward actions. The technical trick there would be a secure (e.g. ungameable) way to do it in JavaScript only... which I can't think of. Right now what I have in my head would definitely require some server side integration, which is no good.

As a note, are you sure Foursquare is actually generating actions e.g. transactions? Or do people just passively check-in because they're already there. I would assume the latter.

Thanks for the feedback!
Did anyone else take the title to mean "reasons why you shouldn't read Fred Wilson's blog?" :)
I honestly don't blame them. They either have the choice to increase costs by 30% because of media pressure or decrease costs and media attention by moving to a cheaper country where people aren't as prone to jumping off of roofs.
I hoped he would be talking about a Moist-von-Lipwig robot.
If you still pay $2 for a share, is that not the going market price? You don't have to submit a market order. If you wanted the shares at $1.92, you could have submitted a limit order. This is all supply and demand; it's just price discovery happens at a much higher frequency. It is no different than being charged extra for staying at a hotel during the holiday season. The price changes just happen much more frequently and much more quickly.
Not CS, at least!
At this point in the conversation I think you should just ask him. He's a good guy.
Copy/paste of code might have saved my team some work. We had 2 versions of the same tool built by a third party like 10 years ago that works within a major application the business uses heavily. One version of this tool had been rebuilt with a 64-bit version. The other has ceased working at all on Windows 10 which we are deploying to all users on new computers.

They are functionally the same tool beyond one config file setting defaults and another config file managing access to components of the tool. After playing with the differences, we iced the broken app and updated the setup KB with the config differences.

As we upgrade the core app that the vendor tools work within, we are glad this headache had a quick fix but is being cut as the new version of the application natively supports what the tool did in the old version.

That being said, don't use this as a reason for doing that or at least document that for the future owners of the tool so we don't waste what little time we have troubleshooting functionally identical software.
Actually many ISPs do not even give out a fully routable /126, but simply use an LL fe80:: address for the CPE:

* https://www.ripe.net/publications/docs/ripe-690#4-1-2--unnum...
And as a continuation of it, with a little of Active Oberon and non-UNIX OSes along the way,

https://www.systems.ethz.ch/node/1447

https://lec.inf.ethz.ch/syscon/2019/
doesn't seem like a real hack to me...

type killOverlay(); in console to get rid of the game and allow access to the purchase page.
I tried one recently. The resolution was horrible, I could literally see the sub-pixels on the display.
Averaging 750, but you can find 600 and less if you know where to look.
New York culture and especially their art scene come off as what'd I'd expect to find if I were to open a magazine off the shelf and look through the ads. IMO stagnate and incestuous [1] [2] [3] ? Maybe I am not aware of the full breadth of NY's art scene?

It seems like Berlin [4], Los Angeles [5], Hong Kong/China & Japan all have much livelier melting pots of subcultures that may have been washed away in NYC due to cookie cutter art schooling or aspects of the local (sub)cultures?

[1] http://whitney.org/Exhibitions

[2] http://www.moma.org/

[3] http://www.warscapes.com/opinion/sentimentality-critique-hum...

[4] http://www.transmediale.de/

[5] http://machineproject.com/
I don't really understand how ts_remaining.tv_nsec > 1000000000

could ever be true. I thought we had a-b, with a<1000000000 and b>=0.

For the negative check, the loop should only be able to run once, so could be changed to an 'if' for clarity. Regarding the timing, branching is probably faster.

It is my understanding that the c percent operator can produce a negative number by the way, so your code wouldn't work.
I agree that all security is a cost-benefit tradeoff. This is of course folklore wisdom. The importance with regard to the SONY case is that SONY was not the victim of an opportunistic attack but was targeted specifically. In this case, it is highly likely that SONY did invest in training its employees in corporate policy and security awareness (at least as much as any other corporation).

I have trouble thinking of a cost-effective way that SONY could have prevented #GOP from getting in.

IMO SONY had two failures:

1.) The hording of data. Again I don't think that this is uncommon. I would expect to see this at pretty much any company of their size.

2.) The lack of an ability to respond to the APT once it was discovered. This is extremely tricky business, but a critical piece of security. It is common now for businesses to assume that they have been compromised and to build out the capability to recover and isolate issues as quickly as possible. Unfortunately for SONY, all of their data had been exfiltrated out of the network by the time they knew there was a problem.
Open file on disk. See that it's 404. Delete file. Re-run crawler.

You'd turn that into code by doing grep -R 404 . or whatever the actual unique error string is and deleting any file containing the error message. (You'd be careful not to run that recursive delete on any unexpected data.)

Really, these problems are pretty easy. It's easy to overthink it.
Oh god office workers love putting everything in Excel. Even when it makes no sense...
Seems to me, if the artists being present was the real source of the "cool", then pricing them out would cause the "cool" to reduce, and a balance would form.
Mind elaborating the service trade-offs?
Nice design. I like the stars as an extra feeling of success and pressure beyond just getting the word right.
Isn't the Parthenon cast in concrete? Some very beautiful buildings have been made that way.
The article is recommending a larger fan to move more air. However, the opposite may be true, as smaller fans tend to have a higher static pressure.

Given that the airflow is only 1/4 of the rated airflow for the fan, it seems that the resistance of the filter is causing a pressure drop across the fan that is fairly close to its static pressure. Adding another fan in parallel to try to move more air likely won't make an iota of difference, as the pressure drop will be about the same. However, giving it a fan with a higher static pressure likely will increase the airflow, even if the rated airflow is lower. Or, add a second fan in series with the existing fan (with appropriate distance between the two to smooth out the turbulence), which could double the static pressure and therefore the airflow. Yes, adding more filters would also help.

There's a reason that most fans in air filters are centrifugal (radial) fans rather than axial fans - they have a higher static pressure.
Not Gamestop or AMC, which is what I thought at first.
Is it really artificial intelligence and not facial recognition plus a series of image transforms
> usually the problem is

Usually, sure. But sometimes there is a lot to do, and if I may, Uber is not your usual app. At the point where you're being very choosy about the access modifiers on your classes, you probably thought about icon assets already.

Someone elsewhere in thread linked to a partial list of concerns the app needs to cover, many of which are location-specific. You might say "well split the app by geography", but that just trades one set of problems for another, and that new set of problems could well be worse for the business overall. Paying a team of people to do this junk may be a whole lot cheaper than suffering a reduction in customer engagement when they fly to a new country and don't have the right app anymore.
Do you park to change the wipers if it starts to rain? Someone in Germany crashed while using the touchscreen in his Tesla when it started to rain and was fined as using it while driving is illegal.
As long as I can disable it (because DNT provides a pretty strong identification signal right now).
So it was text only. That makes it accessible how, exactly? Can you cite specific examples of supporting technology for this?

1. was true at the time Basic was released, but so what? it has none of the "features" that we're actually talking about, and is less powerful than even javascript version 1. By the time visual basic had our beloved features, 1. was no longer true.
Good example for me with Cyber Candy, I've walked by one countless times but didn't think of it.

I'll make a U-turn here and say that I agree with you about using made up words, but for a different reason. I'd probably rather see random non-word brands like PreBarpTzoh, than keep having to remember region specific names for trademark reasons. Lynx/Axe is the example that immediately springs to mind, a future Candy Mush Tiger and <insert non-EU name> could be another.
There is good evidence that supplementing fish oil does nothing to prevent death, but that eating fish does.

I haven't got cites but it was pretty clear on this BBC Radio Four programme - maybe someone else has got better sources?

http://www.bbc.co.uk/programmes/b019dl1b

(They talk about the dangers of Selenium supplementation in regions with plenty of bioavailable selenium in the soil, especially when combined with Vit E supplementation. These are not heroic doses either.)
You send a text to invite someone to download the app and then you transition all your discussion over to their network instead of the SMS network. Hence solving the problem of expensive texts.
Am I correct to assume that the hardware/device piece is similar to a Pineapple (https://hakshop.myshopify.com/products/wifi-pineapple)?

As I understand it, the device is like a WiFi Router looking for nearby clients broadcasting their MAC. Since phones have the ability of turning themselves into WiFi Hotspots, could a phone/app offer this same capability, or is it missing a hardware piece that lives in Density/Pineapple?
They want our data badly.

I primarily browse on mobile, in a private window, without an account. For this, i am faced with constant banners and pop-ups to try and get me into the mobile app, which i'm told is "the best way to experience reddit". (It's not.)

Being logged in is an annoyance as it gives me a blank landing page that's an extra click away from the main "popular" page.

"New reddit" has brought some nice UI improvements, but their design team is choosing some absolutely miserable paths in the name of data collection.

Can't even expand most comment threads on mobile these days without logging in. Worse than most news sites.
If you want to learn more how these things work I'd highly suggest going through the PoC||GTFO archive (https://github.com/angea/pocorgtfo/blob/master/README.md) and check out entries by Ange Albertini or entries named like "This ZIP is also a PDF".
As someone who remembers goatse, lemon party, and rotten.com, I think I'm happier with my kids growing up with narwal bacon and Nyan cat.

Fnord.
> So what do you do with the stale list of patients in the browser DOM?

Write the front end in something like Vue. When you catch an error from an axios call, update your data model by calling the server for updates.

When the data model updates, Vue will automagically update the DOM used by the browser.
Slightly off, but this is fun, so let me expand (along with a minor correction):

The days of the week were named after the seven classical planets of astrology (by the Romans, who in turn named the seven classical planets, and hence the days, after Roman deities).

The names were taken up by speakers of Germanic languages, and eventually underwent semantic loan translation: Germanic deities were substituted for the Roman ones (with the exception of Saturday). Some people say that the Germanic deities themselves were culturally identified as one and the same as the Roman deities, but we probably won't ever know for sure (interpretatio germanica, analogously to the interpretatio graeca, the identification of Egyptian, Roman and Greek deities [1]).

And now, a minor correction: The day of Venus, Friday bears the name of the Germanic goddess Frigg, who is not the same as the Norse goddess Freyja. The meeting of the two characters, in a debate against Loki, is described in the Poetic Edda [2].

[1] https://en.wikipedia.org/wiki/Interpretatio_germanica
[2] https://en.wikipedia.org/wiki/Lokasenna
Pretty sure a version of this has existed in most countries only it wasn't due to a bug in the phone system but a feature that could cost you a pretty penny.
Linux User IDs since decades are 32 bit integers; you can just use some mapping system to allocate them automatically and you’ll never run out.

The limitation is that there is one user ID, 0 which can do everything and all the other IDs can do almost nothing.

This has nothing to do with domains and everything with the distinction you describe between the Windows Administrator, local system or even more powerful trustedinstaller accounts.
That was pretty cool, thanks for sharing!
What was expected? We've seen time and time again our politicians are incapable of action. Any moderately unexpected situation seems to be brushed under the rug or gets palmed off to the capable Canadians. The true 'dole bludgers' who have metastasized themselves in the sea of bullshit bureaucracy.
Fine they steal from the country and waste tax payers funds incessantly. If they could atleast be capable of making decisions.
I was wondering if it was going to cover RAX/amd64, and it does. Nothing terribly new here but it’s a nice dive into an interesting microcosm of intel architecture.

I do somewhat wish AMD managed to get R0-R7 as the standard, though :p oh well.
> What's happening in the housing market right now is the result of the free market.

Absolutely not. A fundamental requirement for a free market is to avoid barriers of entry to competition as much as possible. In the real estate market there are way too many barriers of entry to be considered even remotely free:

- Zoning laws

- Construction permits

- Licenses (realtor, construction, architects...)

- All kinds of taxes

So no, real estate has never been a free market. The blame for today's problems lies with governments' intervention and regulation.

Edit: formatting
"I can trade on margin" said no one with the rent / mortgage due.

That aside, you're missing the point. The public stock market best enriches those with the most reserves. Everyone else gets trickled on.
That's what I've started doing with a few little changes. It's a killer but I'm hoping it'll pay off. It seems to hit the right spots. I've also found the Minus The Gym guy on Youtube useful - I got a dip station a few days ago based on his video showing 15 exercises you can use it for [1].

[1] https://www.youtube.com/watch?v=W8jXc1zaLuQ
Lol a million? How can that possibly be enough? Every other hospital has way more than that in their rainy day fund / bank credit line.

This is not to belittle PG (other rich people please follow!), but seriously this can't be meaningful.
"If they're going to outsource you, they'll outsource you. Whether you come to the office or telecommute won't make a huge difference to the decision when you're looking at wage differences of 5x-20x."

I disagree. Many companies wouldn't outsource because the shift from having workers-in-house to workers-remote is a big one.

I _know_ I can get staff in India or China much cheaper than here, but there are enormous benefits (perceived or real) to the employer for having people in the office.

The point I'm making is that when a worker presents such a terrific argument for tele-computing, they're also presenting a terrific argument for out-sourcing.

Now personally I'm not a big fan of tele-commuting. We've had some remote workers in the past, and it didn't work out. Communication is the key of course, but at the end of the day, for better or worse, it simply didn't work out. Now we operate far more like a flexitime system, people come in every day, but there's a lot of flexibility with regard to hours.

But my root point here is that the same arguments for and against telecommuting are the same arguments for and against outsourcing. The one begets the other. Outsourcing is just telecommuting with "cheaper" added.
I have day job and a side project that I probably spend at least a couple of hours a day on and I still read on average two books a week.

On holiday I usually take seven or eight books for two weeks - depending on the type of books.
I'm surprised too, especially since -- unless my understanding is very wrong -- something close to group selection is currently the most popular explanation for the natural occurrence of homosexuality in social animals: social groups with small populations of homosexual members benefit from the work contributed by those members, without the expense of additional offspring.
De-duplication is not really the topic of this discussion, is it?
What service fills the void that refusing to buy Blu-Rays opens? Saying "DVD quality is good enough" and using a streaming service is in the same line as "Paper books are good enough".
> Google Profiles (https://profiles.google.com/) has better usability and a cleaner design than Apple's homepage (http://www.apple.com/).

It's only a matter of taste. For me that page is ugly as hell. I haven't activated my profile yet, and maybe because of this that page looks empty, no content on it, no reasons given to me for why I should ever activate my profile.

On top of that, I also managed to break their JS on the first couple of minutes of browsing it. I clicked on the "PicassaWeb" tab link and strange layover window reluctantly showed up (after 2 or 3 seconds on the first try). When I try to close that by clicking the "No thanks" link nothing happens, apart from FF reporting a JavaScript error:

> Error: h is undefined
Source File: https://profiles.google.com/c/ui/js/122008102-PwaLinkMain.js
Line: 39

I'm on FF 3.6.13, Windows 7. Here's a quick screenshot: http://i.imgur.com/f67Nj.png

I don't think they're going to catch Facebook with that ugly page design and beginners' mistakes.
What exactly is "Other", and why does Germany do it so much more than other countries?
One thing college has taught me, all though not neccesarily for the right reasons (there's overemphasis), is that you can fail: just be able to reflect on why and what you would do differently next time. I think being able to say you shipped and being able to tell what should be changed, updated or improved attests to your skills.
Come to San Francisco.

On a semi-regular basis I see people unironically dressed as cowboys, Merlin-style wizards, lumberjacks, semi-mythical shamans with skull-topped staffs, wearing nothing but a speedo and work boots, barefoot flower-power hippies, in kilts, with vest and shoes covered in gold sequins/glitter, in Victorian coats and top hats and monocles, men in dresses and heels, women in tuxedos, old men dressed like teenage goths with purple nails, etc. etc.

Pretty much anything goes.
If you just want to use for personal single-person projects fossil [1] and mercurial [2] may be a better choice, given both come with in-built web interface. Just run hg serve or fossil server or fossil ui. No need any external platform or program.

[1] https://fossil-scm.org/home/doc/trunk/www/index.wiki

[2] https://www.mercurial-scm.org/
Yeah, the only thing that I've seen pushed as a vaccine substitute without evidence is masks, by the mainstream American press - there was this narrative for a while that mask-wearing was more effective than vaccination would be, despite there being at best no evidence and at worst evidence suggesting they were likely to be much less effective than any vaccine even meeting the bare minimum criteria to be approved for use. And if anything, this seemed to be inspired by the fact that Trump didn't support mask wearing.

(Now, there did seem to be this idea over in South Korea that untested, in-development treatments could make an effective substitute for vaccination. I haven't seen the same in the US or other western countries though.)
>If that was so, then no more melodies can be copyrighted after that group that was also mentioned somewhere else in the threads generated (essentially) all melodies, claimed copyright and then released them into the public domain.

Well, that's true.

But

(a) nobody is going to cross-check their melodies against a new copyright claim,

(b) they are not going to claim infrigement against anyone,

So there's that. And even if they did, they'd be thrown out as a joke-submission (the content being "all possible melodies" etc).

But you can submit hundreds of generated melodies, copyright them, and succesfully sue people for infringing of them. The fact that they were generated doesn't change anything.
I've hit many query performance regression problems with ~10 million rows, which required rewriting with CTEs and other techniques to tweak the planner. This isn't a large scale at all.
> The dude's in high school and finds stuff like this?

Man, you should have seen the european demoscene in the 90s, half of the geniuses had the same main obstacle: homework from school.

Despite what it may seem IT is still in its infancy which means that we work in a field where pure affinity for the subject and raw curiosity-driven brain power (or in some case, dedication to the task), as well as a couple hundred euros worth of hardware, is enough to get into the most complex parts and sometime redefine them.

Access to all the papers and education you need is insanly open on the internet (unlike other fields), as well as trillions of line of code for you to explore. The only two limits are yourself, and time.

Which is not to say that training and experience have no role, but IT as a field is extremly large and for many parts we're still in an early uncharted phase, so discovery is made by explorers and dedicated people[1].

Still, most dev would gain a lot by going through a good algorithmic course.

[1] While talking about dedication, special mention to the linux everywhere guys. I will never not smile at the idea that some of the best IT protections in the world, costing millions upon millions, from the Xbox to HD-DVD to whatever, were brought down because someone wanted to run it on linux.
1-900 numbers moved online several years ago, there are gobs of phone sex websites that can readily be found with a Google query.
Elective succession and tanistry were rather common historically and an option in the game, so having kids shouldn't be significant. The key is the heir has to be in your dynasty, not that it be the fruit of your loins.
What are you trying to say? Anyone can demand a greater salary if their qualifications are in demand. If they are not - they should consider working on learning new skills which are in demand.
Ok, meant to say they've signalled the fact they may not support in the future.

It seems however they are not really backing it, more or less, doing the least to simply not let it fall over. Which is material.
I really liked this interview and discussion from two weeks back: https://news.ycombinator.com/item?id=26033689