skysight-inc/HackerNews huggingface dataset:
This is a little misleading because it presents the idea that there is a firm separation between "comets" and "asteroids", each of which have very different properties. In reality we've discovered in recent decades that there is significant overlap. Pure comets were formed in the outer solar system beyond the frost line, and they are composed of a mixture of primarily chondritic grains and ices. As noted such bodies are not very structurally strong so if they approach the Sun too closely they will break up from the stress of gravity as well as from the intensity of off-gassing vaporizing gasses. On the other hand you have classic asteroids which are formed inside the frost line and are made up of either chondritic material, stone, or metal (depending on their histories). Such asteroids can be much stronger but they lack the ices which might off-gas during a close solar encounter.

Except, that dichotomy is a simplified fiction. The reality is that there are objects in the middle, sometimes called "iceteroids" which we've discovered over the years. These could be the cores of comets which have lost most of their ices or these could be objects with more complicated histories, such as asteroids which have accreted surface layers of ices through various processes.

So this is a mystery but it's not some enormous mystery it's a small mystery. The idea that an asteroid could have acquired a small amount of ices on its surface isn't exactly world shattering news but because we don't know the history of the object we don't know the process by which it ended up with its observed properties.
Value types, encapsulation, and uninitialized values
Perfectionism won't help your startup
Authy is a very good substitute with backups.
Dialog used to sponsor a load of events in my department at uni, no one ever bothered telling us what they actually did, so it was always a bit comical, but now we know.

I think the fact they're only acquiring the relevant part of the company is a fantastic move. It really shows apple is focused on what they're doing and not just buying their way into markets like Cisco or Intel.
I've never come home to an unexpected plumber, but did have a greyhat "fix" my stuff once, and wasn't outraged at all. It felt like an intrusion, but I was grateful.

In ~ 2002 I was off to college with my Linux workstation. IIRC, the vulnerability was in the CUPS web UI. Someone filled the volume with a giant /tmp/YOUR_SYSTEM_IS_INSECURE_UPDATE_NOW file, and shutdown the affected service.

It could have been much worse.
Java Local Variable Type Inference: Frequently Asked Questions
If you're going to be harangued for all vulnerabilities, exploited or not, then why proactively try to prevent breaches at all?
don't wish to ever raise venture capital

How can you know? What happens if somebody wants to raise VC money after raising money from you?

could never get traditional VC funding

Which one is it then: founders who dont want to raise VCs money or founders who could never get it?
This is the minimum what I would have expected from the OP. Because I use ad-blocking, and I went to washingtonpost.com and clicked on a bunch of stories, and have no idea what the problem currently is.
I think the feed reader had to register itself, using registerHandler with mimetype application/vnd.mozilla.maybe.feed .

See https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Rel...
Also, of course, only allowing remote access from a controlled list of source IP addresses.
For much of the first 75 years of the United States, the president was very weak, and federal law was generally scarce. There was often not even a standing army.
This is one of the major problems with threat feeds.
There's "no evidence" of abuse because they apparently only kept a short timeframe of logs. So we don't really know, and neither do they.

Put another way, "no evidence of abuse" is not the same thing as "evidence of no abuse".
I'd argue that the risk of such vulnerabilities with smaller companies is way higher but they are just not disclosed.
Many people are also fine with the data for free services trade.
Exactly. The difference is that slack is used much more casually so people (including your boss) will have a tendency to PM you much more casually as well, even when that conversation is not important or doesn't need to be synchronous.
Bloomberg's claim is that a miniature device used for RF analog electronics was coopted and inserted into a board that would never have such a part designed in. This requires modifying the board artwork, the pick and place config, any automated inspection and test equipment, and adding a foreign part reel to the supply chain.

It is much easier to compromise firmware directly or modify ICs that are already part of the design. The risk of being caught is much lower and it would be stupid to attempt anything more elaborate.
Check out this classic paper on deep learning with randomized labels:
https://arxiv.org/abs/1611.03530

Spoiler: the neutral net thinks it's doing a really good job!
Şişli Escort – Şişli Mecidiyeköy Escort Bayanlar
I feel like the group of people that know Facebook owns Instagram and WhatsApp are not mutually inclusive of the group that knows that Facebook will collect literally everything it possibly can about you.

My impression of the issue is that most people simply don't care.
every single other advertising method has more impact than online ads

Nonsense. "I don't click on ads, therefore online ads are useless" is not a valid methodology.

I buy Facebook ads for a niche audience. I can track them; the ads work and bring me business and put food on my table. There is absolutely no way I could advertise with traditional media; demographics like "males 18-24" is nowhere near targeted enough.

I don't click on online ads either. But then I'm just not the type of person that does. That doesn't change the fact that they work in a measurable way.
2003 Essay, Interviewing with an Intelligence Agency [pdf]
Nice setups, have it since 6month, but just one thing, if you want to use ZFS, no ssd cache or other disks available...

Only usb key they can map to your server.

So only compress, do not dedup :p
Pretty sure it was a lettuce centrifuge.
Tax breaks are different as they do not create new money. Tax refunds can however.
Do you ever follow-up in an isolated, safe, environment to determine if the file still exists? Curious to see if there is any correlation to the "admins" and the hackers themselves.
So then all security audits just become you paying someone large amounts of money to get really bad press for yourself. Regardless of whether you've actually lost customer information or not.

At which point why not just stop being proactive?

Hardline stances sell great on forums, that doesn't make them right.
"Tough decisions like this are the way you end up with a great product. It's what you say no to, rather than what you say yes to, that lead to great products."

That doesn't apply in this case. Saying no would have meant they never added it to Firefox. They said yes and now they're removing it. I'm not sure who said it, but there's a saying along the lines of "If you force users to change, they go shopping."

Keep in mind that the definition of "great product" depends on the person. For the average user, a product that does what you want and keeps doing it is a great product, and anything else sucks.
RSS support in FF was always poor, but that was often enough to preview a subscription. It didn't need to be more complicated than that.

On the other hand, or hay, Firefox Screenshots!! Sooo useful. Pocket? It doesn't get more federated than that! Or the dozen of DOM APIs added every year, which are probably much more complicated to maintain than a simple RSS preview feature.

I really hate the general direction of how browsers are developed.
Ask HN: Is there a OneNote file parser?
How does OneNote file format work? Is there a parser for it? Looking at the wiki page for onenote:
https://en.wikipedia.org/wiki/Microsoft_OneNote

It says .one is an open format but if so where can I find a parser for it or create a .one file programmatically?

Is there an open-office or any such other open source equivalent of note taking software?
Tesla: Customers should order by Monday to lock in $7,500 tax credit
I'm more curious about how they can store it. even if each frame could somehow be encoded as a single byte, you're looking at ~10TB/s, which afaik exceeds even the bandwidth between L1 cache and the execution core of a modern cpu.
One small error on the list:
The Chemours Company 7685 Kiln-DeLisle Road, Pass Christian, Massachusetts, USA

That should actually be Mississippi not Massachusetts. It is probably the source for the white pigment used in many Apple products as it is one of the largest TiO2 plants in the world.
The problem with zero percent is that it allows corps money too easily, which can lead to sloppy capitalism.
I was at Aldi yesterday. 1 dozen eggs were $0.69. A 3 lb bag of apples was approx $1.99. Lots of fruit and vegetables at incredibly low prices (Bananas $0.29 lb). At Sprouts a big head of Green Leaf, Romaine, Red Leaf are all $1.29, Organic Grass Fed Beef was $3.99 and you can find Ground Beef as cheap as $0.99 at some stores like Walmart. Roma Tomato's were $0.48 a lb at Walmart and rBST free Milk was $1.29/Gallon, Avocados were $0.50 each. Chicken livers were $0.99 a lb.

I have noticed that many prepared Frozen Foods (Pizza, Pancakes, Waffles, Dinners) were very expensive. Snacks also were very expensive, things like Chips, Cookies, and Pop. I don't consider them in the food category. I filled up at Costco for $2.47 a gallon and I get 4% back. I have never lived in a time when real food was so cheap and plentiful.

You don't have to understand Stocks when you can just invest in a Index Fund. It would require very little time and effort to learn and you can get started with just a few dollars.

There are those who really don't have enough, I'm not disputing that. But a lot of people have more than they think, it's sometimes their lifestyles that make them feel poor.
Murray Bodor

Location: Calgary, Alberta (MST)

Remote: Yes

Willing to relocate: Not initially, can travel occasionally though.

Technologies: Java, Spring Boot, Groovy, Node, SQL (many), Redis, Azure, AWS, Docker, Linux, BI, consulting

Résumé/CV: https://www.linkedin.com/in/murraybodor/

Email: murray.bodor at gmail.com

I'm a seasoned architect/developer with over 20 years experience solving business problems with software. I'm looking primarily for remote work on interesting and/or meaningful projects. Veteran self-starter working on distributed teams.
Unlike copyright, you must actively protect a trademark or you lose the rights. If W3C is not legally challenging the Superbus, they will lose trademark claims for the html5 logo.

It's not clear if the html5 logos is W3C trademark. They dont' list it anywhere as such and provide very permissive license.
The Walt Disney of Retail: Meet the Billionaire Building the Malls of the Future
You know, it used to be that being a good VC fund meant picking out the diamonds from the rough - companies that had small ideas, but could grow into becoming big companies. Most big tech companies today pivoted into their current models from small-focus ideas, and those small-focus ideas are important because it what gets you quickly to market so you can start iterating and finding PMF.

The point being, I'm not sure how you're really differentiating yourself from any other seed/pre-seed investor. If you're really bootstrapping, then even if you're looking for resources, you're not looking for investment (and the loss of control that comes with it), at any level. Why should someone philosophically limit themselves to seed funding? Does your potential investment view seed investors as having different perspectives than VC investors, i.e. not seeking as quick an ROI as possible? Does anyone really start a company anymore seeking to give up control to VC investors as quickly as possible?

If I were you, I wouldn't say that you're focused on bootstrappers per-say, I'd say that you're focused on companies with limited growth potential, where there are profits to be eked out but not large ones. Your investment model, therefore, recognizes that successful portfolio companies will not re-invest profits back into growth, and you should therefore seek to make back your investment by capturing first future profits, rather than taking equity (which may not fly with bootstrappers).
"(unless you can manage to turn the road system into a closed system, like rail is)"

I still don't understand why everyone is working so hard trying to make smart cars when it seems like smart roads that control dumb cars would be a simpler, if more expensive, solution. Why not make it a closed system?
> They announced it months ago

And what percentage of Firefox users would pay attention to an announcement like that? Maybe this is the right decision, but they need to be careful.
Given that Trump regularly accuses, without evidence, bezos of doing this, and given the generally high respect paid to wapo among non-conservatives, I guess my question is now - despite Appeal to Tradition, why would bezos sacrifice the respectability of wapo to turn it into a favorable rag?

Basically, I don't think he could get away with stirring his fingers around in wapo (which it's reported he currently doesn't do) without far more negative consequences than positive.
I second that. Even though it's not so recent, I've found it to be extremely valuable. Highly recommended.
Don't do like Kanye,change your password from 000000 today
Release of Oil Shell 0.6.pre5
I suspect that the government will feel compelled to get involved here and I'm guessing the default ask of the public is that they do. But is a class action an option? Given that there's no evidence of a breach, does that means there's no actual damages to claim?
If only ISPs would start disconnecting negligent customers who continue to use exploited or vulnerable equipment. The incentives are not right. If they did, they’d risk losing a paying customer, if they don’t, nothing bad really happens to them. I hate suggesting regulations and fines but it’s the only thing end users and ISPs will respond to.
There are a few "substitutes"... Or rather strong derivatives devised from hundreds of years of philosophy.

1) Advanced mathematical logic.
2) Advanced statistics.
3) Advanced control theory or systems.
4) Experiment design.

All of these usually post-graduate and they feed one into another... You need pretty strong algebra and mathematic proof reading skills too.
CSS Grids are a game changer in my opinion.

Using some "grid-template-areas" + media queries is so cool... It gives you so much control over the layout!
I've attempted to keep whitelists working, but now I just use a separate chrome profile with javascript+cookies disabled that is for random blogs/news sites/etc. If you have 2+ chrome profiles open, there is a menu item for "Open link as > No Javascript" that does wonders.
Is this not just https://github.com/ARM-software/ML-KWS-for-MCU trained on new keywords? Maybe I'm missing what is so special here?
The support list definitely put my hackles up, as did the name. It's not quite "The Patriot Act", but it's in that "embarrassing to oppose the name" vein. To my surprise, it actually seems fine. The lack of representation for artists looks like a product of the law's main features not impacting active performers. The law has four distinct features, none of which have a significant impact on "some up-and-coming band played a song and wants to get paid".

1. It establishes a non-profit agency to track mechanical license holders of works, and allows streaming services to pay license fees into that agency, which will pass them along. This sounds like it might have bad effects, but in practice it's apparently an attempt to fix the problem of "Spotify can't offer this song because they can't find who they need to pay".

Importantly, 'mechanical license' means "music and words", so this will track who owns Happy Birthday, but not change anything about how Spotify pays performers over "the song as we wrote and performed it". And since mechanical licensing is already compulsory, the fees can go to a clearinghouse without any need to negotiate a price.

2. It extends federal copyright laws to pre-1972 music. This will undoubtedly help some people and hurt others, but it mostly serves to clear out a rat's nest of state laws. Some much older works will enter public domain in 3 years, newer stuff will receive the usual 95 year copyright window.

3. Guarantees a portion of mechanical license fees to producers/engineers/etc who played a creative role in the production. Apparently not very controversial.

4. Fixes some jurisdictional weirdness with royalty rate disputes by spreading the cases across more judges.

Mostly this looks like it fixes one big liability issue ("wait, who do we pay?") and several issues with existing laws, and it looks like artists are indifferent because the situation for people who actually perform a song is unaffected. I'm pleasantly surprised.
It doesn't run on telepathy. Some people do rebuy those products. And maybe this is just the best ad (of nothing great) that happened to be available at the time.

If you want to have any idea of how well advertising works, you have to approach it from the perspective of an advertiser, not an ad target. Then you can get real data. You are a data point of one.
’Oumuamua’s “mysterious thrust” [1][2] is obviously from rocket thrusters which undoubtedly come in threes.

1: [’Oumuamua] was being slightly accelerated by an unseen force, which they argued could only be attributed to comet “outgassing” acting like a thruster.

2: Now in a new study that is currently under peer review, Roman Rafikov, an astrophysicist at the University of Cambridge, argues that the same forces that appeared to have accelerated ’Oumuamua — the same forces that should have also produced a tail — would have also affected its spin. In particular, the acceleration would have torqued ’Oumuamua to such a degree that it would have spun apart, breaking up into smaller pieces. If ’Oumuamua were a comet, he argues, it would not have survived.
I don't think you need to trust the sender of the email. If someone emails me and there is a link to mywebsite.com and I click and it looks like the Google login page, I am going to be super alarmed and take the necessary action. Maybe they are out to get me (they hacked my website and put malware there), but if it's my own website that gets me, that's on me.
Their choice of business model does not obligate me to work within that business model. Even more so when their business model requires restricting my ownership of a product purchased at the offered price.
RouterOS is a proprietary set of programs (all the way from an init replacement) on top of Linux (a super old version of Linux at that, Kernel 3.x from 2012 IIRC) with a bunch of patches to hack in all the necessary hardware support.
I was wondering the other day, at what point these huge product launches make life more difficult for Apple and their suppliers vs the positive benefit (community attention, PR, etc).

You release, say, a new phone today, for sale today. It costs $800. You will keep making and selling the same device for the next 364 days (at least). Over the next year, the parts become less expensive because newer technology is always coming out. So it makes sense for the buyer to pay $800 for it today versus $800 for it in 364 days when we are 1 day away from the release of something incrementally better for the exact same cost.

In order to have large enough supply to satisfy the Day 1 demand, you have probably been producing and stockpiling the item for weeks, which has all kinds of inventory and storage costs. For the next month or three you can produce flat out to (try to) satisfy demand, but there is a backlog for awhile, which, at least in theory, harms demand/customer experience. Then, once you process the backlog, you have to scale back capacity for the next (say) 9 months, until a new product comes out.

Now, of course, there are good things about this. You can probably produce products flat-out for 4 months. You get huge internet-wide buzz, much to the dismay of those who hate hearing about nothing but Apple's Magical (TM) new products for a week or two before and after the Big Reveal. You get PR all over the internet and newspapers and TV. Some demand is almost certainly induced by the sense that if you don't buy on day 1, you might have to wait some unknown amount of time before supply catches up with demand.

So, I don't know, but I'm really curious about all of the considerations taken when making decisions like this.
Just trying to understand.
This sounds awesome! I just wished there is an equivalent of this for hardware. How awesome would it be if a company had a couple of PnP, CNC, and injection molding machines where they can assist you to turnaround a physical prototype and bring it to market quickly. Sadly for hardware, the downside of hardware is that it requires so much upfront investment and scaling can get stupidly difficult.
If that ever becomes standard, every actually relevant notification would be lost in the noise. Multiple local privilege escalation vulnerabilities are discovered yearly in both Linux and Windows (along with many other OSes and userland applications). Do you really want that every single company releases notifications that roughly every single of their systems were vulnerable since the day they were created until date X each time that happens? After all, there is no way to prove no one abused that before their systems were patched (including the period between system creation and vulnerability being publicly released).
One researcher criticizes this type of hardware attack, saying:

Once discovered, such an attack would be burned for every affected board as people would replace them.

But this article also points out a case where, even after SuperMicro had published a patch to a serious BMC firmware vulnerability, 32,000 servers in the wild had not been updated a year later.

So, if software updates aren't always speedily/reliably deployed in the wild by customers, can we really expect hardware to be speedily replaced?
My C code didn't include mention of ints though, so I'm wondering where you got that from.

Your first example is UB and again, is not something my example depended on.

Your final claims are overly cautious. It is perfectly fine to use uint32_t in this way. Uint32_t is defined as a 32-bit unsigned integer. There is a bijection between network order 32-bit unsigned integers and host order integers, and ntohs is the bijection. It is no different than storing any other value. It is certainly not wrong.
The formal position is the same on both sides.

When dealing with legal matters (like travelling or trading) this is what counts.
How do you know when MacOS spies on you? (or your microwave, for that matter)

At some level in the chain you put your trust in an authority.

Ideally the kind of authority who has more to lose than to gain from spying on their users.
They continue to be as important as they were on Monday. None will be flight-ready before this incident is fully evaluated, corrections in process/design applied and the system is cleared to fly again. All safety mechanisms worked as designed and the crew landed safely. The astronauts on the ISS still have their Soyuz if they really need to come down.

Nothing changed. Soyuz is still incredibly reliable. It's a bit old, a bit expensive (Crew Dragon, flying on reused Falcon 9's, will be much cheaper) and very cramped for 3 astronauts, but it does the job and has been doing it for what, 40 years?
As KRACK is a client vulnerability, an access point shouldn't be vulnerable in the first place.
>I use CCL because 1) I like the IDE and 2) its compiler is fast so you can always compile everything essentially for free.

Just to add to the above, I like CCL because it gives nice compiler messages --sometimes it warns me about things SBCL won't notice.