skysight-inc/HackerNews huggingface dataset:
The Samsung flagship phones retained the jack and has USB C. And no silly notch, just a clean design around the smallest their sensors could be.
Sure, but GitHub Pages is a relatively “dumb” host. You don’t get preview builds, branch deploys, and lots of other things. It’s nice for a minimal approach but for a large site with lots of people working on it I would not recommend it.
Random mint 18.04 user here.

I just noticed about a week ago that flatpak was downloading huge amounts of data (like hundreds of MBs).
I had all system updates set to download and install manually, and hadn't installed anything new for at least a month. All this data was getting sent to /var/tmp as flatpak-cache folders.

I don't know what it was doing but I've since turned it off in the startup list. Any ideas? What are the chances this was malicious?
Who profits from this story?
See the Oppo Find X, or the Vivo Nex, for phones with pop-up cameras that avoid the need for a notch.

[1] https://arstechnica.com/gadgets/2018/06/the-oppo-find-x-kill...

[2] https://www.engadget.com/2018/06/12/vivo-nex-all-screen-phon...
Look, I’m not some anti single payer guy. In fact given the option I’d bet on it being the best of the options.

But it’s just untrue that you paid $0 to have a kid. You don’t know how much you paid & that’s ok. But it’s a valid criticism of single payer.

Further it is also true that the US system has deep flaws but it’s fundamentally untrue that the many Americans get the full boat costs of a birth. So comparing your $0 cost & a $15k outlier is largely a futile excercise.
i dont get why i should use netlify over aws? what is the advantage here, i might give it a try.
Another take on this here:

https://www.illawarramercury.com.au/story/518649/after-sandy...
Could I use a cloud FPGA to enforce business rules
I'm thinking that it is now possible to implement in hardware something similar to say the https://www.fixtrading.org/standards/fixml
or indeed any standard, with the off shelf FPGA cloud offerings. Compile time errors for business logic. Is this a thing?
Blockchain Tech Coming to Commodity Markets, Blythe Masters Says
You've described the xdg-desktop-portal. Gtk apps just need to switch to GtkFileChooserNative and they get that for free. It does an FD pass of a FUSE fd and the app never gets file-system access.

It also has the benefit of using the KDE file-chooser on KDE, Windows file-chooser on Windows, mac, etc...
One of the mods changed the title for no reason. Not only did they make a typo, they changed it from the article's real title.
1. None of this has anything to do with Flatpak, it has everything to do with Flathub and how particular software is packaged.

2. Your preferred distribution can host their own Flatpak repository and ensure that things like security updates get dealt with properly. Flatpak is not Flathub.

3. This ecosystem is growing, so it's putting some things on the backburner, prioritizing application availability over holding a package to make sure that permissions are perfect. There is no reason that these issues can't be ironed out going forward.
Thanks! I definitely feel like I'm learning stuff, but I also could probably learn at a big company as well. Most of the engineers at my current company are very inexperienced, for most of them this is the only company they've ever worked for, so all of my learning is very self directed.

Current job is in the Bay, but Microsoft would be in Washington (which I prefer, and is essentially a free 5% raise on top of whatever else due to taxes).

At what point do you start to value options above that? Uber isn't public yet but I think it's safe to assume their options are worth something.
> "In particular, I think that Google for most of its history was masterful at PR and communications - they managed to maintain a very positive public image all the way through 2011"

I feel like this is in part because the people that write bad things about other people owned google stock or had many close friends in google.
How deterministic will the results be? One advantage of programmatic systems is that because they don't try to be smart, you know exactly what you're going to get, and e.g. upgrading the system won't move things.

Another is that tracking changes with version control systems is easy and clear. Does Penrose have a canonical textual format that changes minimally as tweaks are made?

TikZ styles do let you separate substance and style fairly well (though lay users are unlikely to take full advantage).
It's back now.
Along with the -rs being redundant for a riust crate, keeping it the same name would imply to me that it's using the mimimp3 code base as a library of some sort, and providing Rust bindings. IMO, rinimp3 is a good compromise that gives homage to the original source while also denoting it as it's own project.
Chris Coyier is pretty well known in the front end community. He created CSS-Tricks and co-founded CodePen. If anyone can claim to be an expert it's him. But if you're just trying to have a laugh at CSS - well, that's fine too I guess.
Yes, outside of a sandbox it's expected. But you don't sell something as secure and sandboxed when it's not. A flatpack sharing any part of the host file system with the app should be marked as insecure when installing and/or launching.
Even saying that hunter gatherer societies were more egalitarian is only somewhat right. They were egalitarian in term of wealth, but that's vacuously true because such societies don't have any wealth in the traditional sense. However things like status and access to reproductive opportunities were very non-egalitarian. I recall reading studies that found that only about 40% of men in hunter gatherer societies produced descendants (due to widespread polygamy that increased reproductive opportunities to a select few men, while depriving it of many others), as compared to 70-80% in agriculturalist societies. Inequalities do exists, it just manifests itself differently because these societies don't have wealth in the way we usually recognize it.
Many languages don't distinguish between blue and green. Other western colors are also up for grabs: orange is named after the fruit, and didn't used to exist either.
> pump white noise through a subwoofer, turned down really low

That is an intriguing idea that I will have to try. Thanks for sharing that!

(I also wonder if it would work with speakers and a lowpass filter...)
Can anyone comment on the efficiency or lack thereof of toolz?
While we're on the topic of McNamara, I'd like to plug the documentary The Fog of War: Eleven Lessons from the Life of Robert S. McNamara [1]. It's great to watch, and you can see how McNamara's perspective has changed. I would recommend it to everyone, especially anyone who cares about defense/foreign policy.

[1] https://www.imdb.com/title/tt0317910/
Tesseract does not work well out of the box and is usually outperformed by custom models for OCR
I think digital asset law is a hugely under-explored issue. I think one of the biggest fights that currently is hugely emblematic of the overall problem and going to surprise a lot of people in the near-ish future: inheritance. Can you inherit your parents accounts if they pass? Could you play their PSN games and watch their Movies Anywhere movies?

Right now there's no protection for that. None of the major digital services directly support transferal of licenses and most of them directly forbid it in their terms of services.

GDPR got some pressure from some of the EU members to explore the issue and GDPR itself wound up punting the ball back to individual countries for now rather than wade into digital asset protections/inheritance.
Most use cases of VLC only open files, so giving it universal privileges to open files but a prompt on filesystem writes would be fine. Gimp could have universal read and the right to create new files, but overwriting files it didn't create itself restricted behind a permission prompt. Same for Inkscape and Audacity.

If you want to push this further, you could imagine a permission system that can distuingish based on file types. Gimp overwriting a PNG is probably intended, Gimp overwriting a bash script probably not.

There's a lot more nuance in existing systems (SELinux) and potential future systems than just "allow everything or nothing".
Ask HN: What Do You Do When Your Phone Is in the Shop for Repair?
Whether it’s for a cracked screen or battery replacement or it simply won’t turn on. What do you do for a phone during those days when yours is stuck in the repair shop?
> that’s quite a commitment: finding a domain, paying it, writing a custom (albeit simple) website, uploading it

Sounds fast to me if you know how. Just write the article (markdown + pandoc is fast) and...

With Zeit you can just type `now` and `now alias (url) mydomain.xyz` - and the website is up and running at your domain for $domain_price + 0.10USD/GB.

With DigitalOcean/Vultr/Some VPS Provider + Ansible you can do something similar.
>It could be that we're the first/only group to achieve sentience in the galaxy but the probability of that being true is astonishingly small.

If life is extremely rare, then that doesn't seem so unlikely. If life were so rare than on average, after 15 billion years, only one out of every trillion galaxies has life evolve, then every instance of intelligent life should see itself as being alone.

I think people are too quick to write off the possibility that life really is this rare. I think people reason "if life were so rare, then I wouldn't be here to exist to think about it", but I don't think that's a correct way of thinking about it. If life is really that rare, then the rare instances of life could all think that same thought process too, and they'd clearly be wrong.

Maybe if life is super rare, we should expect to find ourselves in a much older universe, but maybe this current age of the universe is actually more suitable for life than other times. (Some crazy hypothesizing: If you accept the many-worlds interpretation, maybe periods early in the history of the universe, before the universe has branched so many times, in some sense have more "measure", and so observers are more likely to find themselves here. This is definitely a more "out there" idea; I'm not hingeing anything off of this idea, but I think it's worth mentioning while thinking about the anthropic principle and fermi paradox. I'm also hesitant to give it too much weight since if branching happens uncountably many times every moment, then if this effect does apply, then I'd expect it to overwhelm almost everything else and we should expect to find ourselves at the absolutely earliest possible moment. Arguments about when we should find ourselves in history seem to always go weird -- see the Doomsday Argument.)
What you'll find is that as features and reporting and business user-friendly UI becomes more important, there's overhead that comes with the company to provide those things, so their CPMs (or other pricing) tends to go up.

SES is for all intents and purposes a "dumb pipe" that will send email, and provide APIs for things. AWS Pinpoint is a step up from that, but I personally found some features lacking at this point aside from basic usage compared against more full-featured ESPs.

There's a whole range of products catering to different market segments though. Mailchimp is what I'd consider more in the SMB tier in many ways, and then you go all the way up to things like ExactTarget, Responsys, etc. at the Enterprise level. Even then there's considerations around pricing models that depends on whether you're more of a low-volume, high-touch B2B business, or high-volume B2C for example.

Definitely helpful to demo several providers and compare them against a business/technical needs assessment matrix, of which pricing is probably just one factor (and perhaps not even the most important).
The sandbox is in a sense working, the problem is that the folder the app accesses is more critical than what the user thought. We should make sure nothing in home will get executed : no bashrc, no scripts, no executable. In the "ideal" world you would never download & run any script or any executable (like on Android or IOS). Everything the user should be able to do is install or run flatpak apps.

(Of course in practice as soon as you are programming a bit you'll want to open a terminal, run scripts and do stuff outside flatpak)

For the second point, well it's just that update are not frequent enough ? This has nothing to do with flatpak technology right ?
There was an abstract of PhD thesis devoted to enhancing usability of DSeLs by helping with error messages - they had to be expressed in terms of DSeL, not Haskell-the-language. And linear types as a library (be it ResourceT or something other) is a DSeL.

I think it is a better venue which can help many applications simultaneusly. While linear types won't.
Accelerating Kafka on AWS at Branch
I hope this does not mean death to the free 500MB mLab tier. I have been using it for small personal projects with Heroku and have been extremely happy.
For the record, many people think that Sony’s new WH-1000XM3 have better ANC than Bose. Bose hasn’t been the clear leader in at least a few years.
Agreed but in this anecdote what do you think would happen in that case? I’d guess the person would complain about the deductible even though in real terms it might be cheaper than premiums on a low deductible plan.
Safebook: Facebook without the content
To be fair, OP seems to have actually successfully transitioned, so they don't seem like the other physicists you seem to have a glut of.
So he did it only to write an article about it?
The vulnerability that was discovered here was less significant than an "obscure XSS exploit", not that it matters at all to the analysis.
> First, adding a third-party repository, and then using your distro's GUI package manager to install an app from that repository, is a lot more work for the average user...

There are no "average" Linux users. There's only Linux nerds and people who have had their Linux nerd friends install and maintain Linux for them. The whole "problem" is made up.

> Greatly reducing that work, as Flatpak does, is a bug, not a feature. (See further comments below.)

2525 Year of the Linux Desktop

> Second, third party repositories don't promise that their apps are sandboxed; a binary from a third-party repo has the same privileges as any other binary from the distro. Users aren't being told that the third party apps are "more secure".

I haven't seen Flatpak touted to have a security sandbox, nowhere on their site do I see "security" being even mentioned as a feature. So that accusation is made up as far as I am concerned.

> Really? Then why are there thousands of open source applications in my distro's package manager? (And that's without installing any third party repositories.)

Gee, a thousand FOSS applications, what more could a user want? Have you personally ever tried to ship software for "Linux"? Do you even develop software?

> So setting up the system to require some due diligence seems like a better idea than removing the due diligence just because users will find that easier, and then claiming that you can still provide security.

It's "security by inconvenience". This has nothing to do with real security. These users you are trying to protect don't exist, but even if they did, you wouldn't protect them by making it hard for them to install software, you would be making them use Windows instead.
42 student here. I feel it is important to share a few facts about 42 regarding this Lambda hype.

42 is a tuition-free school. It means you don't get to pay anything to the school EVER.

42 is not remote. You need to go to the school to do your projects. We believe it is important to be in contact with other students, exchange, learn from each other.

42 provides free accommodation as long as you show your commitment to learning and improving = if you stop coming to school you do not have access to accommodation anymore.

42 program is about 2 to 3 years long. Best students can graduate in a bit over a year when some others stay 4 or 5 years, it really depends on how dedicated you are, but everybody can have its own rhythm.

Check it out :) https://www.42.us.org/
People love to hate on Mongo. Honestly these days it's really completely undeserved.

As long as you've bothered to actually read the docs on the things you're using before you use them, it will do just fine. Just because the drivers' default configurations are different from other DBs does not make it fundamentally bad.

IMO it's a fantastic DB and I constantly wish Postgres would get anything like the complex-object querying support that Mongo has.
You can blame Supermicro for that.

A pesky problem of missing paperwork. Apparently Supermicro thinks that filing quarterly and annual reports is something optional, a "nice to have" rather than a "requirement". So they haven't bothered.

Nasdaq feels otherwise, and got tired of waiting for them to get their house in order, and so delisted Supermicro.

https://www.marketwatch.com/story/super-micros-stock-set-to-...
> I don't believe so - I don't think they ever explained that older phones were being throttled, but I don't think they denied it in the face of accusations, did they?
The old Nexus 7 was broken with stock firmware on the latest Android. So it's not always true.
Cofactor  Genomics (YC S15) Is Hiring a Marketing Specialist in SF
You're right! It's not the fault of the underlying system, it's the fault of the lazy people who work around it trivially.

With that said, some people might consider a system that is much easier to trivially work around than to use properly is one possessed of a wonderful, glorious, bountiful collection of opportunities to improve its design. Such systems are not bad! Not by any means! They just could, perhaps, be somewhat better.

All of that said, I do think a sandbox-based system probably shouldn't allow things inside the sandbox to say "Don't sandbox me bro". That seems less than maximally wise, even if it does also seem super convenient.
Be data-informed, not data-driven
I got about half way through when I realised I had read the same piece of information twice already. A shame, because I lost interest somewhere around that point.

Too bad for Justin. I hope he gets it resolved.
Gotcha, that makes sense :-).
>Why should your personal standards be determined by other people?

People have been conforming to the norms of whatever group they're in for millennia. They're not going to stop now.
If it was that easy for Joe, he wasn't addicted, and it was his integrated recognition of the problem, and not the ritual he imposed as a result, that substantiated the change.

If he was, he found something else to replace it, and is no better off.
Are your Ethernet shells metal, as described in the article, or plastic which the article describes as normal?
Maybe if they acquired a db company.
There's a camp of people (which I consider myself a part of) that see small group or solo ownership as potentially a very good thing (provided the right people are at the helm).

It enables a company to do what's best for the company/employees/customers in the long-term vs. only needing to be focused on the short term or some unreasonable expectation of an overpriced exit.

Please consider not painting all such companies with the same brush.
Look at distributed-process. It is Erlang-in-Haskell without changing the language.

So library approach thrives.
But Flathub is flatpak.
Also, does flatpak have the full support of redhat?
[Spoiler] He got his account back, and a specific phone number he can call if he has problems again.
It did... it was compiled, and had some of the standard stuff that came with Borland's other Turbo* languages (like screen manipulation routines). Which came with a price... Turbo Prolog code is pretty much incompatible with any other Prolog version due to its use of static typing and Pascal-ish declaration sections for domains, predicates, clauses and goals.

For those who are interested, I think old manuals (and software) can be found on archive.org.
What a lot of people are missing is that flatpaks put the flatpak author responsible for the security of every package inside the flatpak. If you use a package from an unofficial rpm or deb repo, they're nearly always still dynamically linked, so security updates for things like openssl still apply.
Oh, those are quite cool. I'll have to get a pack sometime. I also think the Executed Today deck looks pretty cool (totally different card subject)
I think if you truly cared about this, didn't mind trashing your reputation, and had proof of your copyright at the time the faculty member did this, you could write a letter to your dean (with backing data) as well as the journal. The journal will retract the paper (otherwise it's plagiarism) and the dean will have a chat with the faculty member. However, there are many risks associated with this strategy and it could backfire without fixing anything. In a normal program, the thesis advisor and you have a close relationship and you would submit papers together, voluntarily.
A lot of large clusters I see in the enterprise are on big VMs or metal (48 core boxes) and so can range from 100-400 for a lot of common medium sized workloads. But at that density you also have to have a workloads with low IO requirements and think about network density. Also, very dense multi tenant dev clusters can easily get above 100 for test environments or when lots of people have created demo apps that mostly sit idle.
It’s not so much spotting trends. I’d argue all of those were obvious by the time Apple took definitive action. The difference is that most other vendors tend to leave in legacy connectors and media for the time period when pulling them out will lead to outrage in forums such as this one.
In an ideal world, but in reality companies have been pushing more and more for the opposite, where accounts and services are just being "borrowed" by us for a fee.

The T&C go into great detail to make sure we understand we have no rights to the account/service/product, and that they still own it at all times and can revoke it from us.

Most companies still don't even comprehend that an account to a service can be an important part of someones life. Google locking people out forever over some automated perceived issue, as though it's nothing special and not even worth a cursory glance. Meanwhile that email account could be the central point of that users entire life.

Game accounts can have a serious amount of money, time, love, and effort invested in them. I've been using the same PSN account since the service first launched. I have hundreds of digital games, DLCs, movies, etc. My entire life is also run from my email, tied to everything from paying my rent and bills to managing my kids school through their online services. In the former, I don't play online games on purpose, because I know of the risk of pissing off the wrong kid, and for the latter, I don't use a free email service and control the domain so I can redirect it. Still not perfect though.

We need to take this stuff more seriously.
hm, although our opinion is framed by the way the article is written, compared to the information the faculty unilaterally received, I would say that the accused was a victim here

I think saying "don't blame the victim" would refer to all parties involved and becomes a matter of perspective in a circumstance where there is always someone to blame, so perhaps that should be rephrased as "don't blame the accuser"?