skysight-inc/HackerNews huggingface dataset:
For those who are dissapointed in Pixel's notch - look out for OnePlus 6T. Much more better "waterdrop" implementation which minimizes notch area. There is a rumour they're partnering with T-Mobile for this release
If memory serves me right the CVS bug was originally discovered and exploited by a member of an infamous file sharing site. After descriptions(?) of that bug were leaked in underground circles, an east European hacker wrote up his own exploit for it. This second exploit was eventually traded for hatorihanzo.c, a kernel exploit, which was also a 0-day at the time.

The recipient of the hatorihanzo.c then tried to backdoor the kernel after first owning the CVS server and subsequently getting root on it.

The hatorihanzo exploit was left on the kernel.org server, but encrypted with an (at the time) popular ELF encrypting tool. Ironically the author of that same tool was on the forensic team and managed to crack the password, which turned out to be a really lame throwaway password.

And that's the story of how two fine 0-days were killed in the blink of an eye.

(The other funny kernel.org story is when a Google security researcher found his own name in the master boot record of a misbehaving server.)
> TV shows are created for ads, that’s all.

This statement, while having some truth to it, is a little unfair. Many TV shows are still creative endeavours, it just so happens that ads are one of the only workable ways to pay for said creative endeavours in the tv world. You can argue that much (most?) of the internet’s content is created solely for ads too if you want to take this stance.
What America Would Look Like as a Socialist Country
Yes, their smartphones and Macbooks are not innovating at the pace that they used to. But so aren't Google's, Microsoft's, Samsung's and all other PC/Smartphone company's.

The reason for that is that PCs and smartphones are plateauing as a computing platform.

I'm super curious to see what Apple's game for VR and AR headsets will be. Currently, Oculus/FB is leading the race there.
After working most of my career in open and semi-open offices, I realize now that cubicles are the most brilliant invention ever. I wish I worked in a cubicle farm. The noise is the easiest thing to deal with, but cubicles create some semblance of private space, where you don't feel the presence of other people so much.
For over a decade, I've used Omnigraffle on macOS.

https://www.omnigroup.com/omnigraffle

They have an excellent stencil repository:

https://stenciltown.omnigroup.com/

... including stuff like Cisco stencils, if that's your thing.

https://stenciltown.omnigroup.com/search?q=cisco
This is more like: "Show me the outcome, I'll guess the incentive"
I'm guessing, based purely on my own experience, that there's something neurological going on - that programming involves heavy use of parts of the brain that are also kicked into gear by certain kinds of auditory stimulus. Language almost certainly, but maybe some other bits I don't know about.

Me, I can deal with sound in general, and I even like to listen to music while I work. What really messes me up is words - people talking, music with lyrics, stuff like that makes it very difficult for me to get my work done. Strong rhythms are also a bit of a challenge. So the sounds of people walking are tricky, my mechanical watch needs to go into a drawer if the room is particularly quiet, and the music generally needs to be something classical.

But there's also a threshold where there's so much cacophony going on that my brain just gives up and tunes it all out, and I'm back to my productive zone. When my coworking space is starting to get a bit too noisy for me to concentrate even with my headphones on, I typically deal with it by packing up and going to a nearby coffee shop that I can trust to always be busy.
These are not Apple’s ethical lapses - they are the failure of an entire industry. An industry, it’s worth noting, that Apple has been extremely transparent about, and has worked to fix. Also worth noting that Apple’s suppliers have improved dramatically in recent years - something that can’t be said about most other manufacturers.
Github notifications are definitely problematic. I hope this business gets acquired by instead of copied by Github.
Sounds believable, but at the time we were stuck at 1.6 and had a significant drop in traffic due to JSSE and non-existing support of "modern" TLS Cipher Suites and TLS extensions (we even had problems with SNI, years after introduction)...

We were using C because epoll made it possible for us to compete, but the Java reactivex stuff were lagging behind.
*If by some chance you haven't seen the BG reboot by now, this is a bit of a spoiler. :)
I think that award goes to Amazon - they are ripping off successful designs from their own marketplace; can't really beat that! Clueless 3rd party producers take all the risks; once Amazon notices them they are done within a few months as Amazon prepares their own "clones" under their own brands with prices nobody can beat.
It's interesting that everyone is assuming the only country interested in pressuring them to lie would be the US rather than China.
MLab is being acquired by MongoDB
They've been around since the 70s. I think they've got the forward planning thing down.
They also prebundle a bunch of games in the "clean" install.
Err did you click on to the link provided with that comment at all?
> AWS and Azure don't have a flat global network. You have to setup VPN's and complicated overlay networks.

AWS has cross-region VPC peering, which is simple to setup and makes it feel “flat”. There’s no need for VPNs or overlay networks.
I just built a test site with Netlify + GitLab. Why must I give it full access to all of my GitLab repositories? I just want to deploy 1 repo. Seems like that opens up unnecessary possibilities for a security breach.
Does it support dual sim when using eSIM and nanosim together?
Perhaps even better than what you think you like yourself.
You’re very keen on pushing that point.
I emailed Dr Colmerauer about this once and asked about the Fortran source, but his recollection is that it has been lost. :-/
It's a fun language to play around with and everything. Just have never seen anyone us it at scale in the industry other than folks doing research/academia.
LaTeX is for typesetting and notation, which it's quite good at. On the other hand, designing, laying out, and constructing pretty diagrams in LaTeX is very much NOT where LaTeX shines.
Newly Discovered Tyrant Dinosaur Stalked Ancient New Mexico
How Will It Feel When Computers Finally Kick Us Off the Street?
Can you give some examples please?
How is it more secure when you're still accessing an API? Wordpress itself might not be the best product but other fully-hosted services are all the same, whether they render the site or just give you an API.

A CDN is equally fast when the content is cached, and if you're building the entire site as static pages then it's not really a dynamic site in the first place and can also be done with HTML or markdown in the same repo.

The fine control seems the be the only real advantage, at the cost of more moving pieces.
Lessons from Building VeniceDB (60 TB in Postgres) [video]
For solutions in this realm you could go to the non-profit Center for Humane Technology [0] (formerly Time Well Spent) and join their community [1] (I did). The organisation led by Tristan Harris (ex Google) is influential on high levels of government and corporations.

[0] https://humanetech.com

[1] https://community.humanetech.com
I know that Net Neutrality is boring, but remember that when it was repealed that Verizon, AT&T, Comcast, Charter, and the rest now can directly inspect your traffic and inject ads into it.
Perfect feature for me. I prefer to not talk to people.
Pharmacological intervention in managing functional GI disorders costing NHS
This is what I prefer as well. Let me use my OS's package manager for managing my packages.
They don't reveal the real per capita expenditure for members, they took their total costs and divided by the estimated population (73), of which only a portion receive any benefit.
You need to watch it with a solid understanding that ‘Rowdy’ Roddy Piper (the lead actor) was a professional WWF wrestler - often a heel - who regularly got beaten and beat other people for entertainment (no judgement, I was a big fan). Puts his acting chops in a whole new light!
Actually, don't really see how that is relevant to this particular example.
Original title is "mLab is becoming a part of MongoDB, Inc."
Ask HN: How to focus on one thing to do?
i'm a software engineer at my 30, the biggest problem i face is that i can't concentrate at one things, one i hear about something new, library, language, i want to new about it, and experience, docker, python, js, go, php, rust, ansible, ...; for jobs every time i exeperience something totally new, the problem is that i'm not experienced in a single thing enough that make me able to work on a project or submit for a job, i now many things, i would love to hear from HN community, what ever it's a suggestion, advice or critics, thanks for your patience.
There is lock in to the wider ecosystem beyond a particular phone feature, eg. iMessage, iTunes, HomePod, etc.

Plus, apple has a huge lead in CPU and GPU performance and this is only accelerating, paving the way for future potential phone features imo.
Good News: We Now Have Until 2030 to Save the Earth
I don't quite get this. I'm a long time Heroku user and this seems to be much more limited and not much better in any dimension, why is this so popular?

This is an honest question, I just don't quite get why there's so much excitement in the comments.

Thanks!
I have used a lot of TikZ. Its great but obviously has not the best syntax - a problem inherited from latex. Penrose seems to have a clean simple syntax, and I would definitely try it once its more mature.
Is that a real thing? Holy cow, I'm shocked (bad pun intended). What about adding an inline switch in the cord? Unless they expect everyone to be using a managed power system where each plug can be turned on/off, this just seems very odd decision to make.

<off to look up this beast>
I thought Titan was Google's FIDO 2FA devices, like a Yubikey.
TikZ is good for pretty diagrams, and is entirely contained within (built with) LaTeX.
I wanted to go this route but it felt weird in projects that already had makefiles committed in the repo used by others to have to name my Makefile something else and then run like:

make -f Makefile2 build ...

Is that what you do?
https://web.archive.org/web/20181009200058/https://lauren.vo...
> when the user is not aware of the impersonation

I'm curious, so please don't assume ill intent. What's a valid use-case where an event would be 1) done by an impersonator, 2) not driven by the person being impersonated, and 3) produce a notification that should be squelched?

Your three use cases don't seem to lead me to those situations:
In the first one, you agree that notifications are OK. I agree with that.

In the second one, it's read-only, and so I wouldn't expect notifications to be produced. If there are notifications about read-only aspects (your account was accessed, e.g.), I suppose I'd be OK with them being suppressed, but I think I'd still lean towards a custom notification (your account was accessed by an administrator, e.g.).

In the third one, shouldn't you scrub your data while you dump it? Everywhere I've ever worked that didn't scrub their data (i.e. set all of the email addresses to nobody@testingmystuff.com) eventually regretted it.
I agree to an extent, but I don’t see the post that I replied to as possessing any good faith at all based on the wording.
The argument I have for keeping the .sh convention is to be able to go into an arbitrary project and run `ls *.sh` to see all of my commands.
There's an interesting twist on the active cancelling idea for stopping voices. You embrace the delay, increase it to ~200 msec, and just play the normal waveform out loud. The result is uncomfortable and will make the speaker shut up.

https://arxiv.org/vc/arxiv/papers/1202/1202.6106v1.pdf
We've banned this latest shill account. Please do not create any more to abuse Hacker News with a Google agenda.
> As a US citizen, you can't report attacks carried out by US intelligence agencies.

Sure you can. Short of a gag order (and maybe not even then) you can report intrusions all you like.

In any event, how does one determine the nationality of hardware that shouldn't be there? It's not like there's going to be a snarky "Designed by the NSA in Fort Meade" logo on the chips in question.
Haha. I couldn't imagine that. If I do any reading in the dark, at night, I'll try to at least yawn a few times, maybe punch myself in the nose, to generate some tears. ;-)
Start the same way Facebook did - with the frats at the elite colleges.
Meanwhile, the software companies capable of fixing these issues face internal revolt at the idea of defense contracts. Apparently inaccurate targeting systems and vulnerable firmware in equipment that is going to deployed (regardless of protest) is better for pacifism?
I sometimes wonder if we should just totally embrace our onlineness instead of always treating it as a failure, an addiction, a horrible alienation.

For example I remember when I was living at home, me and my brother and sometimes even my mom, we would chat on some instant messenger (or IRC) instead of talking...

That can be framed as some kind of dystopian nightmare, but it's also just two people talking using a textual medium, and why is that bad or unnatural?

What if we could have both meditation retreats and something like online immersion retreats?

What if a couple relationship can be improved by using social technology, what if that stuff doesn't only ruin our natural wholesome way of being but can instead really bring us closer and allow for whole new ways of understanding each other...
It has a generous free tier.
I really get the feeling that they like they sell the idea of their engineers over the idea that they're helping their customers solve a problem in a better way.

That's rather frustrating thing is: they've done some creative things, but it doesn't seem to be so that they've helped anyone. My guess [from their product launches and behavior] It looks like they reward people who make publicity waves and ignore the fact that nothing comes of it. Google wave? Duo/whatever the next chat app.. etc. (Now Google+)
Moving to a completely different language and platform was easier than moving from Java 6 to Java 8? Why were you stuck on 6 otherwise?
But doesn't that mean your credentials are saved in plaintext (in the script)? I guess the 2FA makes that a little less dangerous...
Not to mention Firebase and everything that goes with it
> If you are tracking the impersonation correctly it should be easy to see internally that the user didn't change the address or request a 401k loan themselves and a system should be in place to ensure that such changes get flagged and reviewed.

Inbound voice is notoriously difficult to establish metrics on. You generally have to review the calls. The HRO company has (literally) millions of participants, and so keeping up with the call volume from all of them is a challenge.
Well, she also was born in a town called Sale :-D
While I don't like the look of it myself, I'll hazard a guess as to the design thinking behind it: notifications/menu bar can now live either side of the notch without taking up 'content' space. So the screen either side of the notch is for the notifications bar/menu bar/I-can't-remember-the-android-term-for-it and the total space matches the space on the bottom of the phone, leaving a centered amount of screen space for 'content'. Because it's not most full-screen experiences are ever going to use the notch area.
Worth mentioning, I think, that he absolutely did not consider a meritocracy to be a good thing; contrast with today, where it is casually assumed to be so.
Hedging their bets? Since iPhone XS devices are are a rather large risk and they need something to fall back on in case they don’t do well. If they do, we may not see a successor.

iPhone SE was probably a similar bet since a lot of people were complaining about the large iPhone 6/6S — not to mention the Plus variants.
How do you know if you have succeeded in synthesizing something if you can't detect it?
Curious--are you saying you changed it? If so, why?
The problem was never GOPATH itself, but the fact that the restriction made it impossible to manage versions and dependencies in a sane way.
It would also be helpful to see a comparison to tools like asymptote:

https://en.wikipedia.org/wiki/Asymptote_(vector_graphics_lan...
Please consider watching this excellent Glenn Greenwald & James Risen debate over the usage of the word 'treason' and how dangerous it is to use it incorrectly. Greenwald cites prime US legal examples throughout history.

https://www.youtube.com/watch?v=LsY70_uIXNc
This discussion doesn't make much sense. Economics is the science of making organisations work. It doesn't come with rigid objectives; Those are inputs to the process. Now I'd be glad if the DOD accidentally let a pack of MBAs with default settings do their thing, because they'd probably create a world-wide cartel within the first year, and reduce all the world's standing armies to just themselves in a very fancy conference room within four.
If the vulnerability is 'any one of our API users could have accessed <large set of private data> over the past 3 years' that's a lot more than 'we found an obscure latent security issue'. Especially if you can't prove it didn't happen by examining logs (which they can't, because they didn't keep logs) or auditing your API users (which they couldn't).

It doesn't feel like splitting hairs to separate this from things like 'we found an obscure xss exploit internally which is now fixed'. It is explicitly a Possible Breach, not just a Bug. If you're arguing that Possible Breaches don't require disclosure, well, that's a choice to make, but it worked out poorly in this case and it will probably keep working out poorly because everything G does is under a microscope until the far right gets bored with them.
I wish there was some sort of inbuilt support for template inheritance that you currently have to do with stuff like "pug."

Laravels blade templating engine does a great job at @extending templates from child to parent and it can be used for inspiration. Vue already has a slot tag so maybe then can add an extend tag for extending a parent template in a derived child template component.
Tikz (a set of packages for latex) [1] is an excellent tool for programmatically creating figures. I drew half the illustrations during my phd using Tikz. Even if other tools are more powerful, tikz has roughly the same syntax as latex and so there is less to learn. Its a lot of easier to control the flow of the figures in a document if they are drawn using tikz because you can resize or realign them on the fly.

[1] Some examples here http://www.texample.net/tikz/examples/
The privacy aspect is what has, and will continue to be why the iphone is the preferred phone for businesses and governments that give their employees a smartphone.

This was a big factor as to why blackberry's phone business didn't die sooner than it did.
Any system that generates value will create an incentive to waste an equal amount to get it. In proof of work all of that wasted energy is on chain, since that's the most efficient way to get the benefit. Every other protocol provides the same incentive to waste work. Just look at how much work financial institutions spend to chase the money released by the US government in the form of debt.

http://www.truthcoin.info/blog/pow-cheapest/
> Apple is the most valuable company in history

That's a belief.

> the new focus on privacy

I see a trend here.
Thank you! Yes, I hate slow websites, I have removed as much as I could easily remove, mainly all the social crap. If you look closely, the social buttons are actually static images and links.
I don't know about that. You have some connectors and adapters, but most people's investments are online instead of in long lived hardware. Maybe some Mac apps? But most users are primarily on Safari and iTunes. Hardly locked in?
Google+? What's that?
Not true: Python is callable from a Wolfram Notebook: https://reference.wolfram.com/language/tutorial/ConfigurePyt...

Romer also published notebooks and PDFs without issue previously: https://assets.aeaweb.org/assets/production/articles-attachm...

Something about his story is odd. Given his shady past at the World Bank, who knows what's actually true.
They can be found in the TOS (see Quota & Limits section)

https://www.netlify.com/tos/
Upon quick glance, it seems limited to diagrams in the field of linear algebra and perhaps a few related fields. Is this correct? How broadly is it applicable?

(I'm still hoping for a tool that can make flowcharts with user-defined constraints, such as minimize number of edge crossings, then minimize total edge lengths, etc.)
You're arguing that collateral damage is a good thing in a comment seemingly about why advanced weapons tech is a bad thing? How is this ethical or cogent?

AI isn't only used for drone strikes, and more accuracy in means a better outcome in actually hitting the target while preserving the lives of innocents (and thereby ending the conflict quickly and reducing the chance of eventual retaliation by other groups). We can always launch more attacks if we have more targets to destroy, not just hope the drone randomly blows things up during its mission.

There is also no offense or defense, they are the same thing when talking about weapons. Having the best weapons and never using them is far better than being unprepared when someone else comes along with more capabilities.
If their fat margins collapse, so does their market cap.
The 2FA makes it secure as far as I'm concerned... I'm not all that paranoid. (If you hack my computer, you steal my first authentication factor anyway...)
I use DDG and have been starting to fall back to Google less than usual. I think they may be optimizing their search better now? It's a prime time to steal some market share.
I knew a team trying to bridge that gap by including prolog query engines for UML models. Don't know how far it went.
Continued progress porting Emacs to Rust
At that point they might as well just replace them. Which they presumably do every few years regardless.
> the US has cut emissions more than any signer of the Paris Accords

Can you provide some basis for this claim? It's the first time I've heard it.
I enjoyed it. I didn't read other prolog books since so I can't compare but I'd still suggest it.
I made a pseudo-grandfather clock with an RPi connected to a $1 motor controller + servo, cronjobs call a little python script that moves the servo to strike a long chime N times on the hour (and I have it scheduled to ring during times of the day when I am usually home and awake, and otherwise keep quiet).
Penrose currently seems to be a very limited work in progress. Such comparison will have to wait.

However, in the few Penrose examples shown, all the positioning seems to be done completely automatically, which is incredibly difficult to make work in all but the simplest and most standardised situations. In TikZ most positioning is manual, which takes more effort, but which I think is likely to produce better results in general.
Thanks, strange it is in the ToS.

For paid accounts:

- Network bandwidth: 1TB/month - Soft

- Storage: 1TB - Soft

- API requests: 500 requests/minute, 3 deploys/minute* - Hard

For free accounts:

- Network Bandwidth: 100GB/month - Soft

- Storage: 100GB - Soft

- API requests: 500 requests/minute, 3 deploys/minute* - Hard

I wonder if they do overages, or just a hard cut-off, no mention. They probably nudge users that go over soft limits to the enterprise column.
I've had similar experiences. Can't recall a similar issue with AWS, ever. And those panes needing horizontal scrolling: wat?