skysight-inc/HackerNews huggingface dataset:
Addendum:

Anyone remember GStreamer being a Linux vulnerability because it had a 6502 CPU emulator to run... NES music files, and hackers managed to jump outside of the VM.

https://scarybeastsecurity.blogspot.com/2016/11/0day-exploit...

It makes me wonder how easy it is to break out of a particular anti-virus vendor's VM, in a vulnerability that wouldn't exist if you weren't even running AV (outside Defender) at all.
Announcing Rancher 2.0 Tech Preview 2
Scaling Ipify to 30B Requests and Beyond on Heroku
In the Poetry Milton is always there in juxtaposition to the Libertines such as John Wilmot, 2nd Earl of Rochester. He has whole college English classes in the USA devoted to him. And anyone who seriously studies English Literature has to wrestle with Paradise Lost. So it is strange to see pop culture celebrations and new book publications (three new books on a well known 350 year old book is amazing) as equal to fallen stature.
Timeline with a sane date format:

2017-12-29 - Discovery

2017-12-29 - Report

2017-12-29 - MITRE assigned CVE-2017-17969

2018-01-10 - Patched version 7-Zip 18.00 released
>> Is turning up on time for your job a terrible metric?

> The worst metric.

Not really. If your job is to be available to others (IT support is a good example), turning up on time is an adequate metric.
There is defensive programming and there is bug hiding. Then there's also wasting performance in release builds.

Mixing the three is bad.
Thanks for this.

> not even clear that Satan is a moral agent capable of doing good or evil

This was what got me - as I understand it, the special thing about humans was free will, which kind of emancipates any of the Heavenly Host from wrongdoing (at least in the sense of personal moral responsibility).
Not only that, but this makes Apple a competitor to Facebook Messenger. Ever since they added iMessage apps, animations, and Apple p2p pay, it’s clear that they’re trying to compete with fb in this space.
But in the majority of editors that actual people use (mainly, jupyter/ipython), they are invisible. Not to distract from my point though, which is that a good programming language should be easily editable from Notepad.
While I think that's a pretty reasonable approach to antivirus these days, Defender was one of the scanners that was doing that. https://arstechnica.com/information-technology/2017/05/windo...
unable to recruit talent seems true at least

https://news.ycombinator.com/item?id=16057449
TensorFlow in Kotlin/Native
> Would the author be deemed to have infringed the copyright on the Manhattan statue?

Possibly. You hit the nail on the head when you say "with the intention that readers would interpret it as the Manhattan statue". It's all about the court's interpretation of the intent of the parties involved.

I don't think anyone can predict what a court would decide. Perhaps the court would say that because any statue would have done, and what the reader interpreted it as was immaterial to the content of the article, it wasn't an infringement. I wouldn't be at all surprised if this is what would happen.

All I'm saying is that if you try to "work around" copyright using "parallel reconstruction", the courts are entirely able to see through this if they so wish. The courts are never going to say "you got us there". I'm not making any claim as to whether they actually will or not in a particular hypothetical case, since that depends on the circumstances of the court's interpretation of the bigger picture (intent, appropriate interpretation of the law, etc), which is far more subjective.
Except that age is almost certainly already a variable in the rating system, and its effect should be taken in account already.
Here's a bonus messed up way of discriminating that auto insurance companies do.

The minimum liability coverage in many states is $10K. However, every major insurance company insists they always recommend $100K. The average liability claim in an auto accident is around $15K.

However, if you look at that and think, hey, I have liquid funds, $10K - $100K isn't that big a gap for me, and if $15K is the average then $10K seems like a pretty good economic level.

Guess what? The insurance companies have decided that having the minimum $10K worth of coverage means that you are exhibiting high risk behavior and you get to pay more if you ever want to increase that compared to those who already have it, say to $25K when you get married and your wife is more nervous about it.

Oh, you want to shop around do you? Well they also target other insurance companies who primarily market themselves as selling those $10K policies that the larger companies refuse to write. Your high-risk tag will hit if you are coming from one of those (like the General) regardless of your coverage.

I'll repeat that in case its unclear. I have to pay more for my legally required insurance because I didn't want to buy more than what I am legally required to buy. I am being punished because I didn't buy what they preferred to sell me from the companies they preferred me to buy it from.

But once I behave "correctly", by paying more for a policy from one of the correct insurance companies with the arbitrary minimum the insurance companies prefer, they will bless me by removing my high-risk tag after 6 months. Thanks.
While this analysis was done for 7zip, I would imagine that pretty much every packaged implementation on any platform would have these issues, since most people do exactly the same thing - reuse the reference implementation.

Just checked keka on macOS, and it uses the p7zip code.
Ideally congress would provide oversight.
Unfortunately in today's world members of congress seem to be ok with the continued overreach of surveillance.
Seems lame to downvote and move on - you said yourself there are lots of great reporters I'm interested in any of them!
Alcohol taxes in Canada are set by province. In Quebec booze is very inexpensive. Were you in Ontario?
That'd work in an ideal world, not here. In a 2 party system which are increasingly polarizing you'd have the pressure to stick to the party line.
I expect the oversight they are subject to that is also privy to their private actions to hold them to it. I'm curious about what all they do, but at best all I could do is complain on social media about it (which some people actually think is the best approach here). I mean, what else can someone actually do?

There can easily be honesty and integrity without openness to everyone.
Sadly, that not many A arising in practice have the RIP property.
We are currently paying the costs (both monetary and otherwise) for the apparatus you describe, but looking at the last decade, the benefits appear to be absent. Perhaps we need to consider the possibility that an organization like the NSA just isn't worth having?
Sure, that's sort of what I meant in terms of openness. I don't expect them to leak their secrets in some public memorandum, but I expect them to be fully transparent with the representatives that we elect. However, the question is--are the representatives doing the best job representing us given this sensitive information they're privy to? Who's to say the NSA isn't asking, "just write that we're doing well in this report, its for the better of this country long term." And how do we catch/stop this?
Fines are based on business made in the european market.
Perhaps, but it still seems to be a big money-loser for long term care insurance companies, such as GE capital.
From the article: “Reification just becomes legacy without a sufficient lack of architecture.”. This is so eloquently put. Technical Debt is a mess in of itself. But there still exists the chasm Of meeting business needs immediately (time to market) and avoiding technical debt. The sign of a good developer is attempting to look ahead and wonder how else will data need to be presented and manipulated - building the system open-ended enough to allow for the evolution of business needs.
Big enough companies may have lots of different projects and many individuals won't work on more than two or three languages max on the daily, though.
Pretty big sci-fi reader and have never read her (to my shame), can you recommend where to start?
The Lowe’s example made me go, “oh yeah, I’d use that.” Hardware stores are one area where talking to someone nominally savvy can save you heaps of time. It’s part of the reason I still go to Ace for some things.

Imagine describing some project and having some semi-retired codger tell you what you need and have it boxed and sent to you.
After 40 years, Charlie Papazian will retire next January
Application-Level Printer Driver Isolation on Windows
Not capital accumulation, but social expectations. In this case, one obvious candidate would be that the stereotype that young men are more dangerous drivers creates a social pressure for young men to take more risks to prove their manhood.

In this case auto insurance rates are both a consequence of the stereotype and a mechanism that imposes it on new drivers.
It’s just a PR win. Sure you can set your phone to self destruct if you want to do it doesn’t get slower, sorry we didn’t let you do that before.
1.b. Not debugger, but a tool like valgrind or options like address and thread sanitizer.

2. And 3. Does not help when you miss the edge cases.

4. It's called code review.

And my own: run the logic through an automated theorem prover, for example Isabelle. They will instantly tell you if any invariant causes a contradiction (mistake, corner case) or it cannot deduce behaviour given prerequisites. (missing specification, probably corner case)

Since it makes you write and read the code twice and forces you to think of it as necessary conditions and invariants, that alone might help.
They're letting you turn it off exactly so you can shoot yourself in the foot and realize that Apple was actually doing you a solid.
I have reviewed [1] and [2] but it isn't clear to me how they prove that space isn't quantized at the Planck length.

Could you explain how these experiments disprove that?
Sure my phone only lasts 2 hours now, but [I can spend $29 and] it’s fast again!

https://support.apple.com/iphone/repair/battery-power
The Apple Qualcomm exclusivity agreement expired in 2016. So this doesn’t help Apple at all, except to the extent it sways public opinion on their worldwide litigation over Qualcomm’s sketchy not-really-FRAND approach of charging a percentage of the final device price, rather than a fixed price per chip.
Well, at least they're honest and open about that
Oh yeah. I lurked a lot. But that is not the site. The site was by a developer complete with code extracts.
Ethiopia's dangerous art of beekeeping
Yes. I've been doing this for 10 years formally now, and absolutely yes. There is always something to learn and always ways to make things better, which combines nicely with the odds of being perfect the first time are low.
I would have fun trolling such a boss. When I was younger, I would stress about job security; work OT whenever asked, say yes to every request, etc.

Now that I'm in my late 30s... I'm finding I have more self-confidence than I've ever had in my life. Couple that with a general sense of professional ennui that's been steadily building over the last few years, and you get someone who just doesn't care if you fire him and acts accordingly.
Similar earlier attempt by Google : https://en.wikipedia.org/wiki/OpenSocial
Also for those that do.
Its probably as much to do with the British class system and the fact that the civil service was run by amateur chaps who knew chaps in the same club who had done classics at Oxbridge.

And now that the war was over all those gurls and those greasy engineers should go back to where they had come from.

Its also similar to the way in the last few months of the war career officers (proper chaps again) who had had a desk job where parachuted in to command positions to benefit thee post-war career
Please correct me if I am wrong, but as far as I can tell there is no advantage to the insurers, with respect only to the returns on policies, in producing accurate assessments of individual risk levels, as compared with only accurately assessing the aggregate risk level - the expected return is the same either way (and I would imagine that the individualised assessment is much more challenging).

Assuming I am correct about that, then the advantage to them of providing individualised premiums is to appear competitive in the market place, by being able to confidently match their premiums to individual risk levels, and thus being able to advertise (the possibility of) lower premiums.

Again assuming all of that is true, then there really isn't any net benefit - in fact presumably we have to pay for this whole individualised risk assessment exercise, which will actually raise the total costs.

More speculatively, I imagine that their job is made somewhat easier by cognitive biases that cause people to think, on average, that they are better than average at (for example) driving.
Logically, if they removed "honesty" from their core values, there would be no need to delete it from their statement of core values.
Their core values had roughly as much meaning as Google's "don't be evil" anyway.
Even in our current world, some issues' importance outweighs sticking to the party line. Luckily, we have more than two parties to vote for, so it's not quite as black and white as that.
The US did the same thing with health insurance. It seems the moral debate is over; charging different rates for insurance based on gender has been deemed discrimination throughout the first world.

All that remains to do in the US is find the political will to outlaw discrimination that favors women.
No, but once he start to introduce some "magic" mechanics he literally describe it in details: how exactly it's works and looks like as if he was describing politicking. Also I took "magic" into quotes since in Cosmere books for the reader (!) it's always more like set of additional physics-like laws of world mechanics rather than some mystery.
Check out the show Bong Appetite on Viceland. It will make you want to put cannabis in everything.
Sure, I think the problem with people running i.e. Mastodon on their own machine would be what should happen when people turn off their computer.

I guess there could be some sort of "super node" solution, where a known Mastodon server would just forward you the "what happened while I was asleep" stuff and I guess people could encrypt their messages to you with your advertised public key, so that you don't have to trust the super nodes, but I am not sure about the additional complexity involved in implementing that vs current Mastodon using ActivityPub, nor about the usability challenges involved.
What does a walkable street look like?
CERN Roadmap and Future Circular Colliders [pdf]
I think you got it wrong - the technology behind it did not manifest itself as Animojis. It manifested itself as Face ID.
You won’t have to have a HomeKit chip in the product as you do now, you will be able to use software signing and authentication.
The higher end ones can - they even have an option to choose between PEF and DNG for RAW format.

This is what I'm doing as well, but the DNG files take 20-30MB of space, even at pathetically low 16MP (/s, high quality 2MP was enough for A4 prints...) resolution, and disk space is not THAT cheap once you want local and offsite backups as well.
Note there's no such thing as UK jurisdiction, as there are three separate legal systems in the UK (English, Scottish, and Irish). But yes, all three would likely nullify the contract provision.
Why Don't Parents Name Their Daughters Mary Anymore?
I have an iPhone X and never used this feature except for showing it to the kids.
But hey, I never thought of using it without talking! Sounds like a great idea to create personal emoji as you say. I'll give it a try.
Anyone know where to find the full length interview? This is just a clip.

"We thought computing would be artisanal. We did not imagine great monopolies."

In a sense, it still is, and always will be. I feel that the core of programming, just making the computer do things other people want it to for money, will always lead us back to a highly individualized workflow, where a single programmer has complete mastery over the system. It's just that the programmer-artisan must find work in the context of these great, monopolistic organizations, which inevitably apply pressure to reduce the amount of skilled labor required to perform a given business function, and thereby increase the organization's leverage in salary negotiations, leading to hyper-specialized assembly line processes that eventually just stop working because no one has the broad systems-level knowledge required to trace a bug to its source anymore. It would be great if these monopolies could just accept the artisanal nature of software development and pay people what they're worth.
Don't exagerate, my iPhone 6 had significant throttling even at 22% battery wear.

78% of a battery will still provide a decent run time.
Is spying on people for profit and then sharing that data with various governments in exchange for political favors a morally sound pursuit?

I was about to add "pot, meet kettle", but this is more of a "pot, meet handle" situation.
Right on time to put it against WhatsApp Business.
https://blog.whatsapp.com/10000637/Introducing-the-WhatsApp-...
the first Mistborn trilogy was fantastic, I'll credit, but his later books were terrible. "Shadows of self" was genuinely so poorly crafted that I couldn't read it. It wasn't just rote, but unmotivated.

He has the capacity to be a good author, but, he is spreading himself way too thin. Classes at BYU, Stormlight, Mistborn, games, the rest of the Cosmere stuff. It lacks focus, and honestly that universal creation myth is a shoe-in.

Compared to Le Guin, Tolkien, Martin, Jordan, his worlds just lack focus. If you read fantasy for the big themes, like the reckoning of how religions fit into society and what value they provide, you can get them from Sanderson's books. But if you read them for the craft of language, the dialog, and have any credulity, it is hard to countenance where he's taken the series.

tldr; I enjoyed the hell out of Mistborn, but his later books have been a real disappointment, and I'm awaiting a return to form when he gets his priorities straighten out.
Qualcomm is persona-non-grata to Apple at this point.

Apple doesn’t want to buy Qualcomm chips at any price, if it can get replacements from anywhere else. It wants reliable partners, and if possible, to contract manufacture its own baseband chip designs, without paying more to Qualcomm in ostensibly FRAND fees for chips it designs itself than just buying the chips from Qualcomm.
My experience so far (helped maintain lots of non IT people's computers) was also, that the performance gain from removing antivirus software (and just using defender) was worth the theoretically less protection.( If even so)

Besides, with the behavior of most free Antivirus I could not really distinguish from common spyware. Everything needs to call home these days ...

So when friends ask me if this computer is now virus/spyware free .. they are usually a bit disappointed when I tell them, probably not, even if we delete everything and remove windows (but it would help).

But most people, including me, need windows from time to time, so it's allways a compromise. But common (free) Antivirus is really just snake oil.
By nature of the secrecy required by how the NSA operates, many of the benefits would likewise not be made public (to avoid sharing unnecessary information on how they operate), so I'm not entirely sure it's fair for any of us out of the know to weigh the benefits versus the costs in this way.

Our elected members privy to the actual costs and the actual benefits should be the ones making the decision on whether the NSA is worth having or not.
Completely agreed. Whoever wrote that should find a hobby or profession where being biased and living in a bubble doesn't cause others to be misinformed.
Hi all - Very excited to announce the news, and are here in case there are any questions. Thanks!
I thought Apple and Qualcomm weren't getting along. I wish I understood what was going on. It's a big charade?

A year ago:
Apple sues Qualcomm for roughly $1 billion over royalties
https://www.cnbc.com/2017/01/20/apple-sues-qualcomm-for-1-bi...
In fact organizations like the CIA and NSA are more of a threat to the American people than the people they are supposedly protecting us from.
Driverless Cars Could Make Transportation Free for Everyone–With a Catch
This is the year, I just know it
A lot of professional photographers don't know much about computers and CPUs. Remember that "professional photographer" crosses a very broad spectrum of photographers, since the bar is basically "I charge for my work".

For better or worse, many professional photographers often rely on the advice of friends and salespeople for "something fast enough for what I need to do".
Tasting rooms are a sort of panacea for upstart breweries. If your business plan involves constantly having your tasting room packed, then you're in for a hard time because only a handful of trendy breweries will manage that with hype. Where, actually ramping up production enough to a level beyond 50 barrels is the sustainable land where then you can expand through bootstrapping or more capital investment. In other words, it's hard to turn a profit without breaking past the tasting room.

The 90's microbrewery boom was fueled by brewpubs, many of which went public because they grew so quickly. Rock Bottom, Gordon Biersch, BJs, Iron Hill, Heartland, Russian River, Pizza Port, etc. That growth was more fueled by being a place you could eat and also grab a beer, but they couldn't figure out the distribution hacks needed to reach beyond the few square miles of the shopping mall or downtown block they were located.
> I don't know if there's an easy way to share keys in a decentralized way, but that'd be an interesting problem to solve (some blockchain maybe).

This is exactly what namecoin tried to solve. Buy an identifier, put whatever you want in it. Example: https://nameid.org/?name=rakoo

> The other question is whether we want server-to-server federation at all instead of a P2P network like bittorrent.

We want something in between. The best model I know is the one of scuttlebutt (http://scuttlebot.io/more/protocols/secure-scuttlebutt.html): Each peer is identified by an asymetric keypair, and writes posts/comments/photos to a local ledger. Everything is signed and potentially encrypted if the message is to be read only by select people. Diffusion follows the peers' connections: stuff is sent from peer to peer as they connect together, friends can be used as a third leg (ie a common friend can carry stuff even if it's not for them), and you also have pubs where more people can connect and get more stuff faster. This system is different from bittorrent in that everything depends on the human connections: information spreads along human acquaintances, names aren't globally unique, they depend on how your friends agree to name you, etc...

It's better than naive server-to-server federation because pubs can be simple, stupid message forwarders yet still have all the advantages of being always-up servers.
In general, you are absolutely correct. But with competitive pressure it might be different.
How we simplified our tooling setup for Node.js projects
Physicists planning to build powerful lasers that could rip apart empty space
Privacy on the level of AP would have been very easy to add, by just using a different salmon endpoint for private messages. This was discussed at length back then, but Mastodon still chose to implement the leaky-by-default changes. There's nothing in AP that can't be done using OStatus, with very very minor extensions.