skysight-inc/HackerNews huggingface dataset:
... unsure if troll or just slow.

parent was giving an example of how Monal isn't "throwing a silly tizzy" ... instead they have deemed the cost of complying with the regulations (all the items listed in the article) not worth the reward, much like how raw milk cheese companies decided to not sell in America because it was not worth the cost to comply (change practices, open different facility) with the regulations.

The point being that doing that cost / benefit break down is totally reasonable and it's not "throwing a silly tizzy" to decide if you want to engage in a market that is increasing your costs beyond what you think you'll get in return.

None of this has any judgement on the value/reason/justification of the regulation - simply it increased costs more than this company thought they could get back out of being compliant there so they removed themselves from that market.
FPGAwars/apio: Experimental open source ecosystem for open FPGAs
Verification of a single file is much faster than walking entire tree, especially when there are lots of small files, for example when there is a compiler or large python project inside.

A simple example: my /usr/include is 33037 files, 356M uncompressed. On SSD with cold cache, it takes 6.7 sec to read each file individually, or 0.7 sec to checksum a single 356M archive, a 10x difference.

The difference in the backup time is even more dramatic -- the backup program has to call stat() either 33K times, or just once, a 3,330,000% improvement! The other filesystem tools (What takes all the space? What has changed in the last X hours? Please sync this directory elsewhere.) will have similarly high speed improvements.

So if I had a choice, I would love my dev environment to come in mountable form. Similarly, I don't understand why container runtimes (like docker) don't use loop mounts more -- it seems like many advantages and very few disadvantages.

As for signature verification -- I don't care about 3rd party signature and revocation, I just want to ensure that I am running the same code every time. There are many ways one can damage extraction cache, especially if it is owned by the same user as application (like the topicstarter post described) -- sysadmin errors (`sudo find / -name app-old -delete`), application errors (create cache file in bin dir), disk errors (silent corruption), transfer errors (one file did not get transferred to a new computer). Loop mounting makes disk errors easier to detect, and eliminates other classes of error entirely.
Same question.

Also, is there somewhere where we can see why a thread is flagged ?
> there are no examples of seriously ill paranoid schizophrenics that put out meaningful work.

Utter hogwash. There are countless artists who struggled with schizophrenia and bipolar and produced beautiful, amazing work -- Syd Barrett, Brian Wilson, and Daniel Johnston spring to mind.
Nirvana Group ltd
The Nirvana Group runs the largest Integrated Bereavement Care Provider in Asia and is the sole fully integrated bereavement provider in the country. The Group is also the developer of Nirvana Memorial Park in Semenyih, the world’s biggest privatized memorial park.
These are usually full-custom boards, very low-volume, with many layers and fine pitch traces. The parts themselves may have thousands of pins, routed across a dozen layers or more.

So the non-recurring engineering (NRE) costs are very high, and you don't get to recover them over much volume. Even at 10x the cost, the vendor is still losing money.
HN requires that the actual article title be used, so complaining here isn't really going to do anything but add noise.
Express VPN if you don’t want to bother with setting up your own server.

If you want to setup your own server, then Streisand.

I used both and they work well. Using ExpressVPN right now in China.
Do a lot of SaaS businesses sell personal data as their business model? When I think of SaaS I think of paid subscription access to a piece of hosted software.
The title is "Was Kevin Cooper Framed for Murder?"
The <title> text "One Test Could Exonerate Him. Why Won't California Do It?" is a subtitle / article description.
Are you talking about the McGurk effect? You hear either Ba or Fa depending on which you expect to hear based on the lip reading (but the sound that is actually playing is Va): https://youtu.be/G-lN8vWm3m0?t=77

It is really cool that small contextual information can change our senses so dramatically without us being aware of it happening.
You can implement your own way of how to read a local resource before sending it to the network.
The frequency response of the playback system probably plays a role here too. Try listening on headphones, on speaker, on laptop speaker, on in-car audio.
What's the purpose of the VPN? If travelling to China or other strictly censored countries, I'd recommend https://foxshadowsocks.com
Engineers usually have more fun rewriting everything in “that new shiny tool that people is speaking about”.

Managers enjoy avoiding conflicts.

Very rarely someone in a position of power will point out to this kind of solution, which anyway is going to be against wishes of many employees.
You can share a Tor website with people who don't have the Tor Browser installed by adding ".to" after ".onion"

https://www.tor2web.org
The original comment is about the proportionality of the response, the choice the author is making and what the commenter thinks about it. When something is banned outright, there is no choice and no proportionality. So, no, it's not particularly responsive nor analogous.
I don't know if this is exploitable, but they are using many different methods to escape HTML content:

https://github.com/signalapp/Signal-Desktop/blob/d1f7f5ee8c1...

Then here it's a different function:

https://github.com/signalapp/Signal-Desktop/blob/d1f7f5ee8c1...

Then sometimes they use the underscore library to do it:

https://github.com/signalapp/Signal-Desktop/blob/d1f7f5ee8c1...

Which their implementation seems to be using regular expressions as well.
Yes, and you have to ask yourself why literally every single dentist you know has out of date education.
What would most likely happen is that companies that act as "middle men" would pop up that provide the functionality those sites do. But TBH i doubt that would ever happen in the first place, even with much stricter rules. There are way too big of an audience to be lost.
The room matters to me. I hear it as Laurel in my bedroom but yanny in the bathroom.
This doesn't seem to be true, here's the v1.10.0 code:

https://github.com/signalapp/Signal-Desktop/blob/f6eb745632c...

They do seem to be using react, and using dangerouslySetInnerHTML. Now that said, I haven't confirmed that this is the code that caused the issue, but it is in the Quotes component, which is referenced in the article.

They seem to have fixed this specific issue a few days ago (v.11.0):

https://github.com/signalapp/Signal-Desktop/blob/0d00fbfb7a2...

They do seem to be using jQuery elsewhere in the code base, but I'm not familiar enough to determine how it all fits together.
The Restaurant Where Google Claims to Have Booked an Actual Meal via Duplex
All of these technologies are great to prevent employees from casually stealing data but as history has proven, usually while the front is well guarded, the back end many times has quite a few holes for hackers to exploit. It's like they say, the most secure computer is the one not connected to the network.
I don't know anyone who uses PGP/GPG to communicate securely, and I'm a cryptographer!
Poor tongue posture can also cause obstructive sleep apnea where your tongue relaxes too much in your sleep and collapses, closing off your airway and causing you to "wake up" but not in a conscious way 5+ times per hour. The end result is that you wake up feeling extremely tired but do not remember feeling restless at all during the night.
Aerospike
Probably signal-desktop devs in full damage control mode over their bloated electron abomination.

Upvote the thread to counter the flagging.
> if somebody's business model is destroyed because it is now too expensive to collect information that you don't need to do the job

how could you "not need" data if the loss "destroyed" the business model?
Guantanamo, Certification, and the Fear of Blame
doesn't matter if the business was outside of California. The California Supreme Court has ruled that if one side of the conversation is in California (e.g., Google calling from Mountain View) then California law applies. See Kearney v. Salomon Smith Barney, Inc., 39 Cal.4th 95 (2006).

Consent after the call would be just fine to exempt someone from liability under California's privacy act.
There is an assumption that there is some additional "natural" cost involved because of GDPR, but where does that assumption come from? The cost might currently exist if you are not compliant and you need to convert (or you need to skirt the edge between what is allowed and what not), but if you start with being firmly compliant from the design phase, where does the cost come from?
The fact that no-one has conclusively disproven this yet gives me hope.
My desperate desire for this to be real has nothing to do with that hope whatsoever.

I feel like, if this is real, it's one of those sci-fi MacGuffin technologies. Literally changes everything.
This is the most terrifying dystopian thing I have ever seen (mostly because we're not that far away from this becoming a reality). To think that just a couple decades from now, Google could literally be directing a majority of our waking actions based off a soulless machine learning algorithm. In this reality, do you have the ability to opt out or is the only solution violent revolution and the destruction of the machines?
I'm not saying he broke any policy. People will simply misrepresent - or take advantage of - his just well-intended representation.

Just take out of context or read the following with a different job role and see why these guidelines make sense:

> we are Google ... These kind of systems need 99% precision ... I feel it was full of tiny imperfections ... Internally, the criticism is brutal ... It seems that I am "attacked" primarily by fellow googlers ... There are a dozen variations of this question already for TGIF ... the team wanted to fake a demo, they could had done that years ago ... a team at Google could fake something at this scale and have the face of the company back it at our most high-profile event of the year ... Would volkswagen be able to do what they did ... I've been told that there were cases were the human would react by saying "no, you are not a robot, you are human!" when they were told that the caller was a bot
> > Meanwhile, many of the tasks that seem most basic to us humans—like running over rough terrain or interpreting body language—are all but impossible for the machines of today and the foreseeable future.

> Wow no.

...wow indeed. No research at all. Often I just read the comments here and skip the article, but that made me go and look to be sure.

For anyone somehow still unaware (BigDog creepiness factor was nearly viral back when I was in college around 2008), BigDog has been handling rough terrain for over a decade: https://www.youtube.com/watch?v=W1czBcnX1Ww

Here's BigDog getting abused to see what it can recover from (including being kicked in the side): https://www.youtube.com/watch?v=4PaTWufUqqU

Here's a running cheetah robot jumping over unexpected obstacles (2015): https://www.youtube.com/watch?v=_luhn7TLfWU

And here's a two-legged robot walking around outside (2017): https://www.youtube.com/watch?v=Is4JZqhAy-M
"The study, which looked at ads run on member networks during 2009, showed that among users who clicked on a behaviorally targeted ad, 6.8% converted. That compared with only 2.8% of those who clicked on a run-of-network ad."

https://www.emarketer.com/Article/Behavioral-Targeting-Doubl...
I usually have a "vouch" button but I can't find it - maybe I don't have it on posts and only on comments?
With Steam Link app, your smartphone can be an imperfect gaming monitor
> I remember gaining 100k+ Alexa ranking by installing the Alexa toolbar on my own machine and visiting my own websites as usual. Never looked at Alexa ratings since.

I'm ashamed to admit my first thought was "damn I need to install Alexa and start browsing our site" lol =(
> a tool that does one thing only, and does it right?

It does multiple things (signing messages, encrypting messages, signing and encrypting messages, signing other people's keys, publishing keys, downloading keys, finding trust paths between keys, publishing your contact list to the world, publishing information about when you met certain people, displaying photos of people, revoking keys, symmetrically encrypting files with a password), and it does none of those things right.

In particular, it unambiguously does authenticated encryption wrong (streaming decrypt, then authenticate), which was one of the root causes of the EFAIL vulnerability.
Unless you think you are really likely to win one its still going to be important for your more immediate-term career to publish in high impact journals, of which most aren't open access (ex. Nature/Science).
If you feel it’s important to comply with the laws of any country you accept HTTP connections from, why would you be upset with this outcome? Restricting your services to familiar jurisdictions until
you can afford the legal advice to safely enter new countries is the only reasonable course of action in a world following that philosophy. One should not assume they’re familiar with the laws of 176 countries merely because they know how to start nginx.
Are data-only SIM's trackable in the same way as normal SIM's?
can i replace aspirin with something else?
> Spoofing technology even allows callers to match the first six digits of recipients’ own numbers. Consumer complaints about that practice, dubbed “neighbor spoofing,” are on the rise, according to the FCC.

By chance my phone number is from a completely different city than where I work and live, so whenever I get calls that match the area code of my number, I know to ignore them.

> Carriers are working on developing a set of technologies nicknamed SHAKEN and STIR that will allow them to digitally sign off on caller ID information using cryptographic keys.

That makes a lot of sense to me.
> P2P exchanges. Now we have a centralized youtube solving in a bad way what eDonkey+VLC could have solved for two decades already.

Hey, that can still happen..
Honestly, I don't see anything click-baity in it, the title actually aligned with the content.
I inherited migraines through paternal lineage, at least x2 generations back behind me. My personal deal has turned out to be overall environmentally triggered -- specific foods, specific smells, overwhelming tyrannical stress, a pinch of "still have to figure it out", and like this. Sometimes it got Real Bad, like "last night made me doubt that my physical brain matter can't directly feel pain even though I believe medical science" or "sleeping next to the toilet as though I were an end-stage alcoholic on a bender" type of Bad.

Visual auras, trouble speaking and actually understanding native language as if intoxicated or suffering dementia, finger numbness, loss of fine motor control... all clear signs//symptoms for me.

Thankfully I've been able to mitigate triggering variables for myself. Apparently my father has not; his situation is worse than mine and I hope this drug offers some options.
They are using many frameworks mixed together like jQuery, React, and underscore.
The world’s first quantum software superstore–or so it hopes–is here
I thought so too. But Google has a history of funding multiple initiatives in parallel. Grumpy is a very different effort to translate Python to Go - but Pypy is more or less drop in.

Pyston also seems dead - nobody has committed in a year. You have to give kudos to the Pypy devs. The level of passion contributing countless hours to an underfunded, high impact project must be incredible.
Last month
Hi, I calculated it basing it on the super-memo algorithm. That algorithm is more sophisticated and geared towards cards / smaller pieces of knowledge; but I think it works equally well as "re-study" / "re-learn" reminders for larger chunks of material. The overall idea is to capture https://en.wikipedia.org/wiki/Forgetting_curve fairly well with the repetition frequency.
I had the same question, the title seemed generous considering this was technically a RCE exploit.

EDIT It also appears lots of comments just got hit with a wave of downvotes. It's possible there is some brigading or vote manipulation.
Thanks. I didn’t know that.
> That might be acceptable if you compared Tesla autopilot capable cars to other luxury cars, where the only significant difference in safety is autopilot.

This is the comparison they should have done. Comparing with just the national average includes all the poorly maintained 20-year-old beaters being driven by teenagers.
It also would have literally meant the end of the world in a short period of time. Reactionless rockets with little to no cost or requiring high technical capability would lead to a terrorist shortly speeding up a hunk of lead to near lightspeed and slamming it into a earthside target, and that would be that.
What makes "I hear <X> but I want to try to hear <Y> like other people, interesting." any more healthy than "I hear <X> and the rest of you are wrong!"?

It's certainly reasonable and "healthy" to confidently exclaim the latter. I'm quite confident in the fact that I heard "laurel" in the same way I'm confident that 2 + 2 = 4, and I truly believe any other answer to be wrong.

Now, the hearing test is presented in such a way that it would be "healthy" to assume there's more to it - that what you heard may be heard differently from others; this is an interesting yet unintuitive phenomenon. But, of course it's also healthy to assume the reverse. Maybe it's presented in a pseudo-phenomenological manner. Maybe it wants you to assume that some people hear the other word - a trick question. Maybe some people then would confidently and healthily exclaim that what they heard is correct, and no other answer is suitable.

Now, between "yanny" and "laurel", if you said you heard "lemon"...well maybe that's unhealthy - get your hearing checked.
Isn't the PanelLayout essentially acting like an object?

And they already have a widely used term for compressibility in code. It's called "DRY".
Am I alone in being able to hear both Yanny and Laurel in the sound?
People seem to think that EITHER Republicans OR Democrats are terrible. They forget that it's politicians regardless of political leanings that are corrupt and disgusting.

Very prominent Democrats could easily order those advanced DNA tests that could offer justice, but they don't care about justice, they care about personal convenience. I have no doubt Republicans in exactly the same situation would behave exactly the same.

It's horrible that this is occurring and there is nothing we can do about this except vote out these politicians.
> What's next, immersive VR full sensory presentation to convey "its weekend party yay lol :D :D:D:D:D" posts?

You joke, but they bought Oculus for a reason.
Goodness, somebody should tell them they have been beaten into submission! Quick, look them up on the list of top 4 companies in the world by market cap and give them a call!

/s
You pretty much have four options:

* Use .home.arpa

* Use .test from RFC2606.

* Use mDNS, which basically every printer supports, and use .local.

* Get yourself a personal domain. I highly recommend it. All my internal stuff is under home.mydomain.tld.
I think this image symbolizes their approach to security very well: https://www.locationsmart.com/cms/resources/privacysecurity....

Just put a lock on top, even if it's not actually securing anything.
> It would have violated our understanding of physics, but it's not like that's never happened before.

I've heard this sentiment a lot when it comes to the EMDrive, but honestly I think it really misunderstands how science progresses in general. For EMDrive to be real, virtually everything we know to be true about physics would have to be false: if you're saying conservation of momentum can be violated, or conservation of energy can be violated, then basically all of modern physics would have to be wrong.

When science, and especially physics, advances, it is very rarely, if ever since Newton's time, that the settled physics is 100% wrong. Instead, the "old" physics tends to be an approximation under most conditions, or there is a new phenomenon that can be explained without really violating the old rules. For example, conservation of momentum still holds under special relativity, it's just that we discovered things without mass can have momentum.

Thus, the only explanation that would really be plausible is if there is "something else" going on with the EMDrive where momentum and energy are still conserved, just that there is something happening beyond our current understanding of "energy" or "momentum". I haven't seen any explanations that even try to postulate what that could be. All I ever have seen is "but the old physics could be wrong!" without an explanation of how it could be wrong.
> The company discovered many backdoors and hardcoded accounts in the past two years as part of internal audits and has received some pretty unfair criticism for its efforts.

wth !!! and unfair criticism you have got to be kidding. where did these come from ? i dunno, just a random guess, but perhaps, because YOU put them there ?

imho, this seems to be on same level as 'dieselgate' for volkswagen.
you seem to suggest that you can (for example) sell/distribute canadian alcohol in saudi arabia, even though it's illegal there. do you really think that's accurate?

every country has the right to enforce it's own laws within it's own borders. you don't get a pass to do whatever you please in another country without their permission.

edit: i noticed "my business exists only in Canada"

if you mean to say you aren't doing business in another country than what you've written isn't speaking to the point of "you are required to comply with the laws of any country you do business with"
No. It's not defined. That's part of the problem...
How is sharing a hyperlink more friction than copying and forwarding around an actual document? Personally, I'd always want to share and send a link rather than the document itself.

When my employer set up an online document sharing/review/comment system, everyone eagerly adopted it because the alternatives (like SharePoint or emailed documents) are cumbersome. I think sharing a hyperlink to a web page is about as easy and low-friction as it gets. Anything else is higher friction and requires "downloading" and "opening" with special software on special platforms.

I would be interested to understand the difference in these points of view. Are you perhaps referring to friction doing something else other than plainly viewing or sharing the document? I have not used DocSend.
Can you please cite relevant studies. Especially around dental cleaning.
So..300 mio connected devices, 2 bytes for location, some compression, 2 samples a minute -> 1 GB per min or about 1.5 TB per day. Thats easy storage for NSA, wonder how many years of data they have on everyone? Don't think for a minute they don't have an exception for the permission requirements
There’s a pretty cool story about using evolutionary algorithms to program an FPGA for a specific task: https://www.damninteresting.com/on-the-origin-of-circuits. Probably not ML in the sense you were talking but very cool nonetheless. In the end the final result was hyperoptimized FPGA code that only ran on a specific board and used a bunch of nonsensical structures that seemed to be doing nothing, yet would stop the circuit from working if removed!
Facebook: Community Standards Enforcement Preliminary Report
https://ark.intel.com/products/136863/Intel-Core-i3-8121U-Pr...
This was my experience too, and then it abruptly changed. I couldn’t figure out if the tool or my brain was at fault