skysight-inc/HackerNews huggingface dataset:
Nice insight you brought with the CPU and the standard libraries being a relevant factor, hadn't thought of that.

Your thought experiment sounds more like a "codec" than a procedural generation. I guess it is an arbitrary line given that we are using CPU, etc. But the bigger the decompressing "model" the further away from true 4k compression we are.
Lua 5.3.3 released
Where we seem to differ is in the importance of those people who avoid Yarvin (or Torvalds, or other more or less abrasive open source contributors), as well as the reasons they avoid him. It's more than merely ideological for many people, it's personal.

I don't acknowledge that his views have no direct bearing on the technology, either, and that's tied up in my first point. We design things for ourselves, for the most part, so by excluding (perhaps inadvertently) people with different perspectives on life, we lose out on valuable input.
And also one phone number seems to be allowed to be tied to one Twitter account. (Last time I tried). Sucks if I want to make some twitter bots to do a service / data stream, or set up a Twitter account for an organization...

https://support.twitter.com/articles/15348
Take for example Oakland, which used to have a large African-American population. Now that a lot of white people have moved in and started calling the police on blacks, some parents are afraid to let their African-American children walk around on the streets by themselves: http://www.eastbayexpress.com/oakland/racial-profiling-via-n...
> But I was just going to put their prices without their permission.

For businesses with published price lists (like restaurants), that data has been painstakingly collected by companies like SinglePlatform and published online.

For businesses without published price lists, this method of data collection would just never work. How could you get prices of a hardware store, for example? What's worse is that small businesses often play with pricing, so the data would need to be refreshed frequently. It just doesn't scale.

> Might as well share that with my friends (and whomever would find it useful).

Yelp has some of these posts already. Most of us only get hidden, variable prices like this on an infrequent basis. The bulk of most people's purchases are at large chains, not local businesses.

> I was hoping this would become crowd-sourced data somehow.

What's the incentive? Why does it make me feel good to post this data? With Yelp, you get to be an amateur restaurant critic. You get to express your opinion like you're an important expert. That makes people happy. It also serves as a way to document and collect your experiences (look at all the cool restaurants I've been to!)

Collecting prices doesn't help me the same way. There has to be a hook. People won't do work without getting something in return.
Nope, they built one.

> As +Andreas Schou said in his share, "Okay. That's it. I give up. Security is impossible."﻿
I did not misunderstand. You're calling renaming something mutation. It isn't.

You're referring to static single assignment. This has been covered before in more detail than I care to go into.
This exact tool is one I've wanted for a while, since I've had the exact scenario of trying to download a file only for the download to slow by 10x after several seconds. In such scenarios, I'm able to download the file 10x faster by manually restarting with --continue every time the speed drops.
I was going to say, why not scrape their pages? But they seem to require you to log in to view any job postings, and even then it's some custom feed.
A proof-of-concept is provided. If you are saying that the only way to gauge that an attack is "clever" (an adjective I'm not sure I'd apply here anyway) is to find it in the wild, I don't think that's fair.
Tangent: Hitler's activities sent many German-speaking Jews to the USA, where they spoke German and Yiddish.
You tell me.
You can, there's just a slightly smaller demographic.
Yeah, and as someone who also had it as a kid, I can't even imagine how absolutely terrifying it would be to start having it as an adult. You're physically (and probably mentally) capable of much worse things.
Just because you clicked it thinking it would be something else doesn't mean it's clickbait.
Indeed. I think it's a pretty good idea to reread the Trusting Trust paper by Ken Thompson from time to time. Here is an annotated version http://fermatslibrary.com/s/reflections-on-trusting-trust
So number of installs went up and average usage went down?

The data is incomplete and the graphs are poorly labeled, but this story might actually be telling us that total time spent on social media has gone up quite drastically...
I'm curious how he was 'invaluable' if the accusations of plagiarism are true. Other people are responsible for his contributions, in that case.

The technically incompetent but socially competent taking credit away from where it is due ought to be a well understood phenomenon here at HN. Why give him a pass if this is the case as well?
Could anyone with a custom OS make their own TCP stack that violates all rate limiting and always sends data as fast as possible / reports a humongous window size?
The difference is actually somewhat subtle, but is shown here under class/enumerable. Same deal about classes requiring new (a lot of libs actually have bugs for only testing against compiled classes with older Babel and using .apply on classes): https://kangax.github.io/compat-table/es6/

And all I was saying is that the spouting of "TS is a superset of ES6!" is not that simple, since most usage will be (for now) with the ES5 output, where it isn't compliant in subtle ways that do cause problems/bugs. Nothing more :)

Obviously there's even cases here TS is compliant and Babel is not. Babel will call those bugs instead of spouting their compiler has no compromises like a lot of the comments here try to imply to convince people.
feel free to run the numbers and present here
Until 2006?
A revolution would not involve conventional warfare (invasion of Iraq) but asymmetric, guerilla warfare (Vietnam, occupation of Iraq)...
Resn is infecting minds with gooey interactive experiences and digital stories
But is it faster?
While you might argue that "nefarious" is an overly serious descriptor, I don't think it's wholly inappropriate to think of a symbol intended as a warning as such.
Obviously it would be AI-complete. I didn't know that term, that's what I meant by currently impossible to code. I just learned my favorite term ever, thanks for that!.

Although disappointing, you seem to have the correct answer for my question.
The entire field of research around salt is a colossal fuckup, for a fairly simple reason: sweat is salty. If you sweat, due to exercise or high temperatures, you lose about 1g/L of sodium. So right off the bat, all the research that's trying to find a population-wide correct amount of sodium to eat is on a wrong track, because there's no such thing.

But it's even worse, because most of the research doesn't measure the amount of sodium people take in through food, it measures the amount of sodium they lose in urine. This isn't their intake, it's what's left after losses, so it's confounded by exercise.

And it's even worse than that, because while the actual studies indicate that there's no benefit from cutting salt intake, some high-status organizations once said there was, and are acting as though they can't take it back without losing face.

The overall result is that there are a bunch of people shouting "less salt!" and a bunch of people shouting "the same amount of salt!" and no one has any model of how much salt they actually need, so they occasionally end up deficient.
I know - but that's standard boilerplate verbiage used in almost every company's delaware filings. Again, I think it's worth going by whatever description of the company has the best predictive power. For example, Facebook has exactly the same language in their filing: https://www.sec.gov/Archives/edgar/data/1326801/000119312512...

But it's much more predictive to go by their mission statement, even though facebook too monetizes by ads and has given themselves permission to do anything. "to give people the power to share and make the world more open and connected. " - it's fairly descriptive. Facebook is more likely to buy a messaging app (Whatsapp) that lets people communicate than to sell chickens.

I wouldn't call FB an advertising company either, even though 85% of their revenue comes from ... advertising. It's a boring, content-low descriptor that lumps many different companies into the same bin. I suspect that FB, too, if they thought there was money in it, would happily pivot to offering users a paid, ad-free subscription service. In contrast, they probably wouldn't pivot to running ads on billboards.
So, exercising the right to use a public street within the bounds of the law is considered entitlement?
Proof of concept on your own platform doesn't count. Security wise, it gets interesting when you attack an existing product, not when you set the rules for the "attack" that you'll carry later.

Obviously with this attack it's a bit of a problem to provide a PoC - but at this point comes the mislabeling of the post. Should have been called "a clever attack concept".
That won't defeat QoS shapers/policers that will simply drop that traffic.
I agree. I run an online business ONLY for users in the United States and there are laws in the US regulating my various user types and their activities.

I geoblock certain countries because, while not foolproof, it helps prevent scammers doing real harm (financial and emotional) by preying on my users and it's my responsibility to do as much as I can to protect my users and the reputation of my business.

I support the notion to end geoblocking in theory but the reality is that many countries do NOTHING to ensure a safe internet and their citizens take advantage of this with online fraud, scams, spamming, etc.
Can someone explain to me why should I worry about stopping browser fingerprinting? Can't they just check my ip?
Because Powerboost and similar systems are per-customer instead of per-TCP-connection, Hellcat cannot bypass them.
Yes, that's exactly what you do when you sue anyone and you believe they have data relevant to the case. It's called discovery. First you have to have a reasonable basis for doing so, and a claim that their car auto-drove into the wall is such a basis.
"Atom 1.9.0-beta0

This beta version of Atom introduces several important changes that will bring performance and reliability improvements to the editor, as well as some new features we are really excited about. We recommend you check it out! :sparkles:"
Stuxnet-Like Malware Discovered
It's really cool to see these phenomena. I'll add immigration from Italy that didn't happen until the end of 19th century (there was no Italy before 1860).

This also suggested me that it would be cool to have the states borders that change as well, as time progresses.
I've seen a couple of people now suggest Ford as possibly taking over Tesla in a similar manner, and the more I think about it the more it makes sense. As soon as Tesla makes electric cars available in quantity with the Model 3, their best option for continuing to drive down prices and scale out to even lower cost segments is to pair up with an established automaker with the knowledge and history of building <$20k market cars. Tesla management could mostly take over, and Tesla could stay an upmarket badge while trickling down the technology to Ford-badged electric cars. It would really be pretty brilliant I think, and could dramatically shorten the time it takes for mass adoption of electric vehicles.
Every time Atom is discussed, it's pointed out how slow it is, and then others point out how VS Code is much faster yet is also based on Electron. Could someone explain what makes VS Code significantly faster?

Full disclosure: Every time I try Atom I decide to stick with Sublime Text, largely because Atom feels slow. I've never tried VS Code myself.
Too many clocks counting down gives the impression of a high failure rate. Failure is fine. Problem is when you publicly continue to fail as an organization. Public opinion goes negative. For a publicly traded company public opinion is important.
I want to make a comment on Spelunky on such a long time; here is a fraction of my thoughts:

Spelunky is one of the greatest video games ever created. It is pure perfection and I believe this to the fullest possible extent since playing the game for what must be seven years now.

It is an absolute treatise in good gameplay mechanics. Zero percent of it is an interactive story (save the intro and end, barely), it simply excels in being some of purest expression of what makes a game fun to play.

It has a little physics engine - one with no positional resolution (except for tiles) - that keeps the game constantly feeling smooth. The reason acceleration is put into a game, is because linear motion is so bizarre without it. That's kind of off topic but it's true.

What some people don't realize is that you can play spelunky however you want and it stays challenging, and the way you play the game changes over time. When I first started playing, I would methodically go through most of the rooms. Now I go straight to the exit. That may seem like hardly a difference, but the process was very much an evolution of giving up what I thought was necessary to beat the game using my own skills.

The only flaw I have found with Spelunky (and this is arguable): the teleporter is rng. mr yu pls fix.

I have so much more to say but I won't bore you.
My great grandparents were born in America in the late 1800s and live in southern Ill (right outside of St. Louis), but spoke german at home as did much of that area.

My grandmother tells me the story of how mad she was when she started going to kindergarten/1st grade and she couldn't speak English yet.
>Residents start their first year knowing literally nothing about practicing medicine.

If this is true, it really indicates that how we train medical practitioners needs to be reformed. (If true, maybe there should be different programs for people wanting to become medical researchers vs those who treat patients.)

>In addition, the ratio of attending physicians to residents is capped by law (i believe it's 3:1).

Are hospitals actually at that 3:1 ratio? The AAMC seems to be saying the limiting factor right now is the limits on medicare subsidies for residents:
https://www.aamc.org/advocacy/gme/71178/gme_gme0012.html

>...Would a startup want to hire three fresh-out-of-high-school interns for every full-time employee?

Probably closer would be companies hiring engineering students straight out of college. Those college projects the students did generally aren’t anything like the work they will be doing. Companies don’t hire at a 3 to 1 ratio, but they do hire them and they pay them more than residents get paid and don’t get subsidies from the government to do so.

I was originally replying to your comment:
>...Hospitals would typically make a loss on residency programs otherwise; contrary to what some people believe, they're actually quite expensive to operate.

Thinking about it, I guess if hospitals don’t bill patients for work done by residents, then they would obviously need to paid by the government (or someone else) but I don’t know if that is how it works.
Forgive me, but what does any of this have to do with authoring documents? Aren't JSX and React about coding models and views?
They do mention "rendering and performance improvements", and the linked pull request [1] mentions "much faster cold startup time and general increase in responsiveness".

I don't know if that means it's fast enough to replace other editors now, but it's promising.

[1] https://github.com/atom/atom/pull/11474
Because girl power? Amirite?
| Is it even possible to use the web nowadays without JS enabled?

Yes, but results may vary. I can do 99% of my daily browsing without JavaScript enabled, and for the sites where it's needed, NoScript can be told to always allow it (one specific script, or everything on the page). This is why you constantly see NoScript being recommended, it allows you to toggle JS on and off, as needed, which is invaluable.

I've been using NoScript for years and how much is blocked never ceases to amaze me. 99% of the script that most sites run has nothing to do with viewing content, or usability, and everything to do with tracking (there are usually multiple instances, sometimes dozens, on a single page; it's astounding).

Another nice feature in NoScript that I just picked up on is the shift+left-click option in the script list. This allows me to investigate what that particular script is for, and choose to permanently block/allow it. Very handy, and also eye-opening in regards to privacy.
I like the macros definitions. Those are very elegant. I use macros in Rust, but I don't find them very intuitive, or easy to get right. They are ridiculously powerful, but it feels like learning a new language, like there are three languages in Rust, safe, unsafe, and macros (don't get me wrong I love Rust, and enjoy it the more I use it).

Out of curiosity, could someone who's written in both languages, give their opinion on the differences between the two macro systems?
Java RESTful Back end for an app about the Galaxy's finest smugglers (SW)
>At this point it's clear that the average programmer, let alone the average user, actually likes getting paid to write mindless glue code and copy data

Agreed. This is the point I was trying to make, but I think you said it better than I did.
atom has become my default GUI editor.
Its hyperbolic though.
Anglican: probabilistic programming language based on Clojure
Small SUVs are curious things. Being large would seem to be somewhat essential to the function and nature of an SUV. Making it small would seem to make it just a regular car but with external styling that mimics the look of an SUV...
I expect a reboot of the web with wasm.

As wasm defines a VM, the browser could become useless.
The attack is carried out on an existing product, an open source chip OR1200 that has its schematics generally available.
You may have missed the part about him being lazy.
It really doesn't require a lot of time nor resources. A 12 gauge zip gun is literally two steel tubes of the right diameter (can be found in most hardware store), and a tube cap with a hole that can have a bolt screwed in to serve as a firing pin. For example:

https://www.youtube.com/watch?v=n1wV3lmbSv4

Now, it is single-shot - but because they are so easy and cheap to make, someone who wanted to cause mayhem could just make and preload several dozen, and discard them as they shoot them. Still plenty deadly.

That's the thing, really... guns aren't particularly complicated mechanically to begin with, and they are even less complicated if you strip them down to bare essentials - which, if you only intend to use it at a close range, still leaves them quite functional.

On the other hand, the reason why guns are so simple is because most of the complexity is in the ammo. While that can be reloaded, it requires primers - and those can't easily be made at home.

So, if you want gun control that actually works (in a sense of preventing dangerous people from owning an overly destructive device), it has to be primarily about ammo, not guns.
And if you personally own products which have decorative biohazard or radiation symbols on them, make sure you NEVER, EVER bring them into a context where they might be taken literally. (Ideally, don't bring them out into public spaces at all.) In the wrong situation, leaving (say) your "biohazard" lunchbox sitting on a desk could lead to a panicked security lockdown.
Does he play, or does he just write bots to play for him?
Actually, variables in Elixir can be re-binded:

> x = [1, 2, 3]

> x = 2 # the structure [1, 2, 3] still exists in memory, but now the variable x is bound to the value 2

All data is still immutable, the BEAM itself requires so. Dave Thomas explains this in its "Programming Elixir" book.
I think it might be able to be pulled off for example by hacking a computer containing the design, for example at a fab in China.

We already know the NSA hacked the specialized computers of the Iranian centrifuges.
There is no one story. Just experience. I don't really announce projects unless I intend to release a BETA or if I'm willing to make the failure of the project public. Don't confuse this with a fear of failure. Its more in line with managing the expectations of people. I once made a public comment of currently doing (a small bit of) research in the area of hydroponics (mostly brainstorming and prototyping). People mistook it as me going full blown into hydroponics. Still get emails regarding it.
Because magnet links do not carry the copyright of the files they are supposedly associated with. And third parties not the pirate bay send you the content you do not download it from the pirate bay.
Some Intel boxes have a Management Engine which can boot
a powered-off machine remotely and take complete control.

Wireless connected machines can be attacked using skip-level
packets.

Some ethernet interfaces have controller boards that can
be hijacked remotely.

If you're using a bluetooth keyboard it can be attacked
remotely.

MS boxes have a dozen ways they can be attacked (e.g the
remote management console, the printer, the shared folders,
etc).

Here's the universal law: If the CPU can get at it, then anyone can get at it.

If you want reasonably secure records (e.g. employee data)
then ONLY ever record that information on paper and keep
it in a locked room. Oh, and don't use the copier because
the copiers have hard drives that store image data.
No. Just like Firefox. It's the same mantra over and over again.

The only excuse you can is 'but it's Foss'.
Suppose a spherical child in a vacuum
I don't think that rewriting LaTeX is the right route, but rather compiling something else into LaTeX or making a good LaTeX editor(one where you wouldn't actually be writing straight LaTeX). I think a sort of SASS or Coffeescript type language for Latex would be excellent.