skysight-inc/HackerNews huggingface dataset:
Whats great is when seemingly intelligent apps adopt the Touchbar koolaid, such as .. iTerm. So yeah, now I'm greated with the very nice side-effect of having a massive row of blinking crud all over my vision, just because iTerm wants to show me what command is running, what keys I could use to kill the process, blink back to the shell, oh .. another app is running in the shell, better update the touchbar ..

Man, its just .. like .. such an 80's feeling.
I am not saying it is impossible and how easy it is depends on what the baby is like (some are easy other are hard). However, the old stereotype of sleep deprived overworked new mom come from here somewhere. For first weeks, when the women is still possibly injured and even walking hurts some of them, I would definitely not demand anything that adds work as universal expectation. Yes, sometimes she feels good and hyperactive and bored to death. Sometimes not.

What I definitely don't like is sanctimonious knee jerking about how parents should do everything the hardest possible way, or else omg end of world happen and everybody will become super lazy. And if they don't do everything the most effective way from day one or dare to talk about their opinions, then the civilization will fall.
(maybe) according to google, who gives absolutely zero insight into this, or even any indication it is even so.

great, might as well go to my local astrologer to consult about deliverability issues.
Scenarios, indeed. Hollywood-grade threat models - riveting yet improbable. As opposed to such mundane threats such as "not driving into massive stationary objects".
Support for go.roku.com/express
What do you mean? When you execute code on iOS you are executing signed binaries that the kernel verifies at install time and then user specific encrypted pages that the kernel decrypts/verifies as they're mapped into memory at execution time. I feel like we are not on the same (metaphoric) page.

What I'm saying is this already exists today. iPhone hardware can attest to the integrity of the running system because Apple practices secure boot and maintains a PKI (supported by the kernel and TPM) responsible for verifying the integrity of software running on its system. Apple can say to a Blizzard "game" with certainty (barring security vulns), "there is no unauthorized software running on this system".

And as far as Apple is concerned wrt their platform, Blizzard is just another app developer in their ecosystem. They don't have to pay a special "attestation premium".
There are plenty of other hardware manufacturers out there. One of the practices you might not wish to support is an OS being tied to a specific hardware vendor.

If you don't like the hardware you shouldn't be buying it.
Plus pipelining.
Because pressing on words involves taking your finger off the keyboard, and the text is anyways often too small to be precise. You can fix it with the control bars on the sides, but it's more finicky and more interaction and requires you to move your hands.
> You're missing the entire field of remote exploits. Meltdown, for example, could be exploited by JavaScript code running as non-root.

Yeah and that was a really big deal. Fixes were pushed in record time.

> It's about what software can do to somehow gain access to root's privilege level via exploits.

The correct way to deal with that is to plug exploits or write code that is less likely to be exploited. Taking away privileges from root is the exact opposite of what we should be doing.

Root access should be protected, and any bugs that break this barrier without the user's credentials should be fixed/prevented.

The root user should have absolute power to do anything. This is the basic ethos of Linux.

Taking away power from the user results in ios. I don't want Linux distros/systems to start behaving like ios.
so you're saying that apple has many people in a bind, many of those willingly. that's not a good negotiating position for them.
Nitpick - a perfectly informed user can certainly run an application (such as a browser) that gets exploited by some external input to attempt to modify their SSH configuration.
Always within arm's reach at both home and work:

Rudin, Real and Complex Analysis

Halmos, Finite Dimensional Vector Spaces

Billingsley, Probability and Measure

Kelley, General Topology

Lang, Undergraduate Algebra

Simmons, Introduction to Topology and Modern Analysis

Parthasarathy, Probability Measures on Metric Spaces

Whinston, Green and Mas-Colell, Microeconomic Theory
This is the most important. Use toilet paper before and after water use to ensure cleanness.
JavaScript is the future
That's true for the default behaviour. Ctrl-C also won't call autocommands (like InsertLeave).

But - you can always map <C-c> to <ESC>, so that it'll work exactly the same.
All Linux distributions that support UEFI secure boot allow you to disable any restrictions if you have physical access to the machine. If you have a device vendor who's implemented something more restrictive, blame the device vendor rather than the software.
Because no part of the product was developed during that time. Just the root of the parent company is from that time. For SV it's different. The product itself was funded by the military.
Curious: what is the Father, then?
Gaining root without credentials is a bug of the highest order and must be fixed immediately. Existence of rare exploits that do allow privilege escalation does not mean we take capabilities away from root.
>Instead, that client is using IE6, doesn't know how to tell you that, and IT restrictions prevent them from upgrading or using another browser.

At least _I_ personally can do something about it, instead of grasping at straws and begging someone else to do something right on their end. If they want to use IE, fine, but they only get IE supported features and everything cost 10x as much, win-win.

>Or they have Chrome and a shitty addon that breaks your site in a way that you can't even imagine.

Dealt with this repeatedly,"sir, try Firefox, it works there? Great, use that instead, or remove the Chrome plugins."

I had a client that was in the Beta channel of chrome and had some obscure bug causing her issues, but no one else. I figured that out just fine.

Just last week a client had the stupid Grammarly plugin wreck something online, fixed in minutes.

>Or they are behind a workplace firewall that blocks some specific domain used by the site.

Say, "Call your tech support guys, I am unable to fix that." I can't say that to a guy that is holding only a CD that got mailed to him, because I am the only support then.

>I've done support for a webapp, and I've had to use remote desktop sharing quite a few times.

Yep, and in the near future this will work in the browser, we are close now. And the beauty of the internet is that if they don't have access, we don't have to debug until they do. (their ISPs/intranet problem) But in the old days, it didn't matter what the issue was, and if the computer was not online, then the only data I could get to debug from was irate staff.
IANAL, but you should own the copyright on all the software you wrote unpaid, as well as the derivative copyright of everything that is based off of your initial software, which sounds like is pretty much the whole stack.

Let's try to list the options and see what optimizes for least bitterness/spite.

1. Leave the company to pave your own way.

1.1 You're more successful than your father, but his company does well.

- He's proud of your success

- He's envious of your success

1.2 You're more successful than your father, as the company flounders without you.

- He's resentful of you betraying the company.

- He's remorseful for not appreciating how valuable you were.

1.3 You're less successful than your father.

- You're resentful about your lack of stake in this success.

- You're at peace, knowing your contribution wasn't necessary to the success of the company.

2. Lawyer up and fight for your right to the company/companies code base.

2.1 Litigation is successful, and you're awarded meaningful compensation.

- I only really see this souring relationships, but it might be mendable in the future, if you continue to grow the company.

2.2 Litigation is unsuccessful.

- Relationships are still soured, but nothing to show for it.

3. Continue status quo.

- Your dad comes to value your inputs, and eventually rewards your diligence. I think this is unlikely, unless something indispose him from working.

- Your difference in vision becomes more frequent, until you can't work with him anymore.

- You continue with ownership limbo, as your bitterness about the situation grows.

There are probably situations I haven't accounted for, and the probabilities of these outcomes are largely dependent on you, and your dads personalities. My own bias is probably showing, but I think your best option is to leave the company, and forge your path.
As an Arab and now not living in the Middle East. I feel just sick trying to clean with toilet paper
Wiping with TP is still relatively unpleasant and ineffective in terms of cleanliness.
Beyond infuriating, we buy them as developer machines here. Most of the staff loathe the TB so we bought another batch without them. I was stunned by the compromised specs. Even upping the CPU and RAM couldn't make them exactly equivalent to the base TB model. And only 2, very close together, USB-C ports is just flipping the bird. Plug in the power lead and just try to sneak a non-Apple (i.e. affordable) C->A adapter into the port.

Apple's hardware is just a total farce.
That's a job ad.

https://news.ycombinator.com/newsfaq.html

"The other kind of job ad is reserved for YC-funded startups. These appear on the front page, but are not stories: they have no vote arrows, points, or comments. They begin part-way down, then fall steadily, and only one should be on the front page at a time."
Smart Ring Tracks Sleeping
> pass the checks before releasing the video.

unless you're restricted in how many times you're allowed to check the video, this will just become the same game-able system. There isn't a good way tbh - i think a free-for-all (ala, streamable!) is the best democratic option.
> Not a lot has changed in the past few years. Macbook Pros are NOT easy to mod/change or swap parts. This is very clearly the intention of Apple.

I don't think they've done it on purpose, this is just how it has ended up because of other priorities. I think their priority is tight packaging - across every hardware line they have, doing that well has allowed them to ship more hardware features (and/or more battery life) in a smaller package that anyone else. Designing in user servicability would get in the way of this.

They may be happy that not being able to swap parts is a side effect of this, but it'snot the priority.
Cost and Features of Mobile App for Restaurant
And so can Nintendo on a Switch, but Apple can't do that on a Mac. This is clearly a theoretically possible scenario, the question is whether it's practical on something that's sold as a general purpose computing platform (which iOS devices aren't)
And have even crappier hardware (thinkpads with screen resolution and disk sizes of last decade, not much cheaper, anyone?) with Win 10 preinstalled...
Augmented Reality and the 4th Industrial Revolution
Funny, Nassim Taleb, a worldwide (if controversial) risk probability expert, would say that you are the one which is being very bad at reasoning with probabilities, because you are putting Ebola and terrorism in the same class of risk as falling off a ladder:

https://www.youtube.com/watch?v=9dKiLclupUM
Vercer | Senior Software Engineer | Full time | ONSITE | ~£90K-100K (total package) | London, UK

Vercer is a 2 year old fund operating in commodities, set up by one of the leading figures in the oil derivatives market. Want a price on some fuel for your cargo ship? We are the guys you call (literally - our sector still relies heavily on voice trading).

In an industry dominated by pen, paper and creaking Excel macros our team has built one of the leading trading management systems in the market and this cutting edge technology is a large part of Vercer’s rapid rise in the sector.

We are looking for a senior back-end developer who wants to come in, try new things and make a big impact on a new space. You will be part of a team of 4, along with the CTO, back end and front end developers.

We offer:

- Lots of ownership over projects (choice of technology etc)

- Great compensation & bonuses

- Flexible hours

- Easily accessible offices in City of London

- Pool table/fancy coffee machine/snacks

We use Python, Go, C#/F# and others - whatever is most appropriate for the job in hand. We'd expect to see plenty of experience writing production code in at least one of those as well as solid experience with relational/time series databases.

No finance experience is necessary, but if you have an interest in crypto currency that would be useful.

Feel free to get in touch with me if you have any questions or are interested in applying - groberts@vercer.co.uk
I too took the first iteration, and it was... quite terrible.

The lectures were OK, but the homework was more than challenging. Not only had you to battle with the topic itself, but then you need to magically acquire knowledge in some totally unknown topic (I think it was genetics) and wrangle the quite baroque representation of that topic shoehorned in a programming language that is totally not made for it.

I was on the verge of despair because of those secondary problems. Really.
> local-root exploits exist and are quite common. It is possible for an unknown kernel bug to get root access. Remote code execution exploits are also common in browsers and also just all across the Linux desktop in general.

I highly doubt it. Privilege escalation exploits are rare and fixed with utmost priority.

> apt packages can run arbitrary bash scripts as root as part of their install and update process. Hopefully your third-party apt repo hygiene is good.

Yeah, a root user should be responsible.

> Just because you only explicitly run apt as root, does not mean no program runs as root. setuid executables exist and are unfortunately quite common in Debian.

And I assume that when the root user installed those apps, he was careful and selective and did not include malware.
>"easily"

One of the many reasons this behaviour is so scummy is that for popular cryptocurrencies, one very quickly reaches the point where £1 of electricity spend CPU mining produces much less than £1 of "currency". Economically, it only makes sense if you're exploiting many unaware users.
After our trip to Cambodia we wanted to bring the "Bum Gun" to the UK. For those who haven't tried it, it's the weirdest thing and sounds disgusting.

To quote a crazy Canadian we met, "if you had poo on your arm and you wiped it off with toilet paper, would you say its clean?"

That said, SE Asia really lends itself to the Bum Gun. Its warm and can be humid, so you're not really worried about being a bit damp afterwards. I can't imagine being in a suit in cold UK winter and using one.

Looking forward to trying a Japanese toilet with those sprays...
They won't. Apple's history has never been to back down but to pursue the money spinning features.

Power users have begged for a desktop between the iMac and the Mac Pro for years. Apple has totally ignored them.
Use the contact link in the footer (hn@ycombinator.com) to email the moderators. Or the email (ryan@flexport.com) in the post.
The biggest feature for me that no one has replicated is the ability to create events with extremely customizable privacy preferences in which you know people will get the invite, even if they’ve changed phone numbers (in other words, some level of contact redundancy).
I've actually been pondering this problem for a couple of years - when everything is based on FLASH, what do you do when something corrupts your "base install"?

The VIC-20, C64, Timex-Sinclair and other computers of their day had the OS in ROM that couldn't be changed. So you couldn't break these computers via the keyboard (or other peripherals) but if there was a bug somewhere in the firmware (which included the OS and BASIC) you had to live with it for the life of the device.

You can get back to those days via emulation - https://vic-20.appspot.com/emus.htm, but there's nothing (that I know of) that's a physical device with these characteristics.
Unsure why it is not visible in the HTML; the contributor is visible in the API response: https://hacker-news.firebaseio.com/v0/item/16763172.json?pri...
A perfectly informed user would never have navigated to a site that was running malicious code. That's basically the point - the threat model today is sufficiently complicated that there's no such thing as a perfectly informed user, so we have to design systems to be resilient against users making mistakes.
> most of them only paid the tiniest bit of lip service to what Marx envisioned

Oh, the old "no real scotsman" argument. See, the whole communist ideology is like convincing people to jump of a cliff so they can fly: when they inevitably fall to their death, you just tell that since they didn't fly, it wasn't what you envisioned.

Dictatorship and blood is the inevitable outcome of Marx's ideas executed on scale of millions. As inevitable as gravity.
In the context of the post I think that by God GP meant the Father.

EDIT: I re-read the post and no, they didn't seem to mean that.
That's good but this is based on device limitation only, not user attention and broad probability.
I persuaded management to buy a pair of older Retina MBPs in our latest batch of non-TB machines. Sure enough, a colleague expressed interest, switched and was much, much happier with the 3-year-old hardware than the gimmicky brand-new machine.

And FFS, the number of USB-C adapters I need to keep on hand is a joke, at least you can plug things directly into a Retina without a dongle!!
The statistics also includes all the cases where drivers are not paying attention as they should, and it's still safer than the average car (at least according to Tesla).
side note: found a book about geometry in prolog https://link.springer.com/chapter/10.1007/978-4-431-68036-9_...
I found that interesting myself
It’s just strange there is no user associated with it. Never saw this before so I was curious.
That's true but is against any good sense: cars don't allow you to play a video while driving, and allow you to have the false sense of security that somebody else is driving while instead you have to pay constant attention?
As others have said, $1337 for such a bug is pathetic.

The point of a bug bounty is to give researchers an incentive to report bugs rather than sell or abuse them. This does exactly the opposite for me.
yes but storing a pallet of razor blades isn't easy and from 18 - 28 (when you would be using these razors) you are going to move a lot, due to work, college, just general renting. So moving a pallet each time is probably inefficient.
Same for Netherlands. The month-box of 210 huggies costs 34 euro, so you get a number around 300 euro/year. If you buy from stores with discount, you'll get a price of around 11 cents per nappy: https://www.luierinfo.nl/aanbiedingen/pampers/premium-protec...
The worst part is that their SSDs use proprietary interfaces, and the TB ones even drop that and have the chips soldered to the logic board. That's just spiteful.

Just you wait for the class-action lawsuit when people's logic boards start failing and there is zero hope of pulling any data off the dead drive.
Shear stress. You want something that won't tear when it is pulled against your skin, but with enough friction to remove viscoplastic residue.

The way to make a cloth that supports such high shear stress without tearing is to use a very long fiber. This precludes the fiber from dissolving in water. Some experimental materials actually dissolve not in water but in alkalines such as fats that are found in most sewer systems. But not all sewer systems have the proper conditions so these materials then do not dissolve.
The expression 3(2π)/4 isn't so bad.
That is certainly not the norm. People does not "vastly" overestimate their driving competence..
The coupling of a cryptoprocessor[1] to avoid network packets and circuitry tampering with a locked kernel could stop people to use cheats. The CPU would only execute a signed kernel[2] while the kernel would only load signed modules. Today, each gaming studios/publishers are working on their own anticheat solution in their corner. Here, the anticheat would be the platform itself, you would only have to focus on keeping the kernel secure to turn all games cheats free (in theory). video game consoles are going this route with varying degrees of success[3]

[1] https://en.wikipedia.org/wiki/Secure_cryptoprocessor

[2] https://en.wikipedia.org/wiki/Code_signing

[3] https://en.wikipedia.org/wiki/PlayStation_Portable_homebrew

https://en.wikipedia.org/wiki/PlayStation_3_homebrew

https://fail0verflow.com/blog/2014/console-hacking-2013-omak...
>Potato, potahto.

Oh good. When do we get google nationalized?
And a wealth tax?
And when do we close the stock markets?
Also when do the trials for crimes against the people start, we'll only need to arrest 95% of all politicians.
And of course we will be disbanding the mercenary army and replacing it with a conscription army where everyone has to spend 3-5 years.
There's a few hundred more things that need to be done.
But since all liberals are socialists we shouldn't have a problem with any of them.

>No. The article suggests that it is evidence that there's probably no intelligence/ability discrepancy between different races.

You have variables race and gender, the variables can take on two values each. The claim is that race is more important than gender. Call it the function f that maps race r ={w,b} and gender g = {m,f} to an arbitrary value: f : r,g -> R.

Since we can just look at the values from the graph we can see that the outcome function f has the following property: f(b,m) < f(f,w) < f(f,b) < f(m,w)

So the suggestion that race is the primary cause of worse outcomes is clearly wrong since black women are better off than white women and black men. Similarly the idea that sexism is the cause is also wrong since black men are worse off than every body and white men are better off than everybody.

So you can either admit that race and sexism have no explanative power and accept the fact that class is the predominant factor with some interesting but ultimately trivial second order effects, or you can start doing gender studies and talk about the white male patriarchy and how it keeps everyone down.

I'm guessing you'll pick the second since it helps the capitalists stay in power and you have been exposed to their propaganda you whole life.
Oh, that really IS spiteful.
Thinking about it more that seems fair enough provided as a user I can operate the system in such a way that I'm only running trusted code.
HSBC Whistleblower Hervé Falciani Arrested in Spain
The post doesn't show up in the user's list of submissions https://news.ycombinator.com/submitted?id=thedogeye Those ads must be quite an exception (hack?) in the HN system.
I am Sorry. Not having control of a lot of stuff that happen in the world does not mean that you don't have some influence on if you will be in an accident or not, if you are driving the car yourself?

With half baked self driving tech, you have absolutely no control..
Most “civilian” users of MacBooks don’t even know that you have to turn on the function keys, System Preferences, you want them to work as function keys. Or rather, the fn key toggles between the function keys and the default media controls that are mapped to them. The OS setting determines which is the default, and which is secondary.

I don’t even mess with the keyboard on my MBP, unless I’m actually mobile. Even then, I often drag along my preferred input devices.

It’s very hard to guage the relative weight of these different potential target markets. But, really, I’m dumbfounded at how many people I know don’t even know that the function keys are a thing!

This seems to be the cases with Windows 10, also.