skysight-inc/HackerNews huggingface dataset:
"The first time it was used ... the process was recorded in 25 frames taken at an interval of 400 femtoseconds"

1 / (400 femtoseconds) = 2 500 000 000 000 hertz

So definitely in the "trillion fps" for a very short period of time with multiple frames.
I take it this is one of those "contact us for a quote" type of deals.
There's an additional delicious irony here. These companies have headquartered themselves in Ireland for tax dodging purposes. Carefully legal through loop holes, but tax dodging. Except they must still abide by the law of the place their tax shelter is. Which means GDPR compliance. I have no sympathy for Twitter here.
Agreed. We work with traditional high speed cameras (up to 1Mfps) and I thought, wow, someone is going several orders of magnitude faster??

Turns out the research is super cool and the paper is well written and interesting but it's not what I thought.
I think they mean a side-by-side ASCII interpretation like that supplied by `hexdump -C` - where any alphanumeric character is printed as itself and every other character is printed as a "."

It gives a nice strings-like view of raw data.
How long can they maintain that frame rate for?
Actually I once heard a story of a neighbor who let themselves in when the house was literally flooding and he saved the owner thousands of dollars worth of damage.
That's more like what's happening with these patched routers.

I also heard a story of a guy who's house burned down. The neighbor saw it very early and did nothing about it cuz not her problem. The homeowner was devastated.

So yes, if you see incredible destruction going on, it's ok to go fix it.
Strategy vs. tactics
You wonder if it's the Internet or the desire to deflect liability. The insurance card in your car instructs you never to admit guilt, it's not a long stretch to assume the same factor is at work here.
So many times I have wanted to get this type of data. Visa would send reporting this way and it would have to be manually copied over. They offered CSV but there were extra charges associated. There were some pretty good libraries for paragraph text extraction but the graphs were too tough to deal with.
You present the current market situation as if it's the result of well-informed consumers making rational choices.

This is far from the case. The majority of people who buy 'cheap' printers do not know how expensive they are to run. Even if the manufacturer displays the # pages a cartridge can print, these numbers usually assume 5% page coverage, which is very low compared to the eye-catching sample prints shown on the printer's box.

All of this is intended to mislead consumers.

I like how in supermarkets (in the UK at least), shelf labels clearly show the price per kg, or per ml. So it's easy to compare items. And I like how there are regulations for how efficiency (and hence running costs) is measured for cars and washing machines.

Maybe we need similar regulation for printers: you can sell anything you want, but the ongoing cost must be calculated in a specific way, consistent across all manufacturers and models, and must be displayed prominently.
If, like printer companies, they sold the cars for a fraction of the up-front price, that might be a very good deal for consumers who don't drive very much.
Emoji resistance
You seem to be outraged about culture itself.
OK. What do you find to be acceptable grounds for treating a situation as if there were no abuse?

Bear in mind that proving no abuse is impossible, as it's always possible that the hypothetical abuser got one step further than your investigation and covered their tracks.
Yeah. “Dear Alice, I saw your right-pad repository on Github and think you’d be a great fit for a job at Google. Can you fill out an application at g00gle.com/jobs? PS is $300K OK with you?”
Gotcha. I have mixed feelings about that; yes it's nice that you can walk into Best Buy and get a printer for $20, but it only comes with 10 pages worth of ink. Makes you wonder what percent of those end up in a dumpster when the owner finds out that a real ink cartridge will cost several times what the printer did.

Maybe printer boxes should be required to list the MSRP and page capacity of compatible ink cartridges on the box so you have some idea of what you're getting into. As is, any printer company that tries to avoid this race to the bottom on up-front cost ends up pricing themselves out of the market because it isn't apparent that the running costs are lower.
When some medical contractor misconfigures an AWS bucket and exposes 15,000 medical records we all lose our minds. It doesn't matter if the first bloke to find it was the researcher who disclosed it... We still go nuts. We make fun of the companies who come back and say "There was no evidence that the data was accessed by unauthorized parties." We know full well there's no evidence that the data WASN'T accessed by unauthorized parties.

Please stop pretending this isn't a big deal just because of a hard-on for Google. If you'll put a 10 man company out of business for their complacency and ignorance you should be lining up at Google HQ with pitchforks over this. They're supposed to be above this. They are hailed as a gold standard.
You are right, but sometimes, I don't see how you can easily achieve the same task without using the asterisk. For instance, if you want to plot a list of (x,y) coordinates which is likely to happen quite often, you can do :

plot(*zip(*L))

What do you usually do? (Probably creating two intermediary lists with a loop?)
Can't wait to try this out with Percollate!
Can I get a better description/instructions in the README?
Reminded me of this TED talk on femto-photography: https://www.ted.com/talks/ramesh_raskar_a_camera_that_takes_...
I was surprised this morning when I saw this bus in the streets of NYC.
https://ibb.co/bNOJ8p

Is this even something that is legal to use a CC Creative content and make it your own company brand?

Thanks,
(1) and (2) do not really apply to letters (i.e., communication), (3) only applies when crossing borders, and then it's not the postal/delivery service that is opening the package, but customs, and (4) at least over here would be illegal, too, if it can be used to read the mail. Both opening/reading the mail that you are supposed to deliver as well as listening to phone calls going through your network is a criminal offence.
I had pretty good luck reaching out to the developers on Discord these past couple weeks. Not sure when you tried but I recommend trying it again. I personally I think snips is way more appropriate on something embedded like a RPi. I was up and running with their new sam package within minutes. Their new update (about two months?) really made it more user friendly. Unfortunately, their windows packages is still very broken.

E: You should probably try in the late night or early morning time for the States (EST) since they are located in Europe I believe.
I don't think a locksmith would be any better. How happy would you be if you came home and a locksmith had replaced all your locks because they were too easy to pick? Would you trust the new locks? Would you be worried about what else he did while he was there? Would you be upset that he didn't ask first?

If you think of this like physically accessing your house, it's going to seem bad. That's probably why people got upset.
Yeah, now that you mention it. I mostly wasn't counting capital cities because they tend to have higher rents, infrastructure and gridlock issues, and other things I think of as "big city problems". (Or they're too small or run down to be appealing.)

But Providence is actually a nice exception; lots of events, good food and activities, several colleges, but pretty cheap housing and not terribly dense or gridlocked.
That would require Apple to acquire the company's liabilities as well. This way it is all up side.
Only 1 trillion FPS? Yawn
Nice idea :D

When I played around with WebRTC for the first time I used copy-and-paste signaling.
I've had larger excel sheets :P
So those don't need updates?
This is a "cost for screwing up" approach. The best way to do that is to charge or fine them for such screwups. But, an under-regulated capitalism ideology stands in the way.
Bootstrappers = people who haven't raised money yet, and don't wish to ever raise venture capital (i.e. institutional money). Typically it's folks who have an idea for a nice "base hit" business that can grow to $1M-$10M in ARR, but could never get traditional VC funding.

Percentage equity => We're working on that now. More info to come.
Building fast and reliable web applications – Testing trivago at scale
There is no such plan that I'm aware of
Bootstrapped would be any self-funded, usually single-person-founded, company. You might have revenue or not, but the key component is that you are doing this on your own time or money. Not VC-funded.

Don't know what equity take they have, I'm guessing it depends on the size of the investment.
Federal Tax Revenue Will Barely Cover Mandatory Spending This Year
Forcing them to publicize would also force them to spend the resources to patch them. I'm sure many companies go through those 100 pages and throw out 50 as "wontfix."

Though, if you force them to publicize, you'd probably have to force them to conduct the audits, so they can't avoid the publicity/patching spend by keeping themselves in the dark.
The problem is I haven't seen any major results from Intel's investment for the past 4+ years. And I have no idea where are all of their R&D into. TSMC has been building more Fabs every single year, higher expenditure, while Intel has had little to no Fab capacity expansion ( Apart from the recent 14nm shortage ). In terms of CAPEX TSMC is only second to Samsung, but Samsung is the world largest DRAM and NAND maker.

In terms of roadmap TSMC has been extremely open about their progress all they way down to 3nm and has been executing to perfection. They take pride to be Apple's pure play Fab.

I do believe in re-investing for the future, the problem is I have trouble seeing that future from Intel. And their management has been lying for far too long doesn't bring me confidence.

Time will Tell.
Low interest rates are no longer a very good stimulus during slumps because few want loans then anyhow. We are no longer a capital intensive economy. It's better to pay down debt during high points so that say infrastructure projects can be created and paid for during slumps. Infrastructure wages flow quickly into the the "99%" economy, unlike many alternative stimuli.
Why? If I'm a site owner that wants to track where you come from and where you're going, even within my own site, then I have the right to ask you to gtfo if you don't like it.

GDPR allows for this.
Why Mega Skips Is the Best Choice for Rubbish Collection in Adelaide
Makes sense, I never visited that area until a job I started in 2011.
That's an inappropriate analogy because it has nothing to do with security.

A more appropriate one would be a stranger changing your lock for you because vagrants have been going in and out of your house without you realising.

Now doesn't that sound more appropriate, good neighbourly and helpful? What do you have to be outraged about?

If you had a problem with strangers violating your property you should have fixed it yourself before it became common knowledge in the neighbourhood that your house is easy to walk in and out of without your consent.
> For one, you might want to share an idea without necessarily giving anyone access to use your work directly, or you may want to present the work publicly for exposure so that interested parties can license it individually.

And there are licenses for this. At the very least, a 'all rights reserved' would have been better than having nothing specified.

> Whether it has a blanket license or not has absolutely nothing to do with its status as a copyright protected work.

I never said it did.
My point is, you are not helping anyone by not explicitly licensing things. You might know what rights exist if no license is specified, but not everyone does. I've seen terrible advisers and lawyers say 'well, there is no license and the source is there, so it is "open source" and fair game'. having an explicit license of rights would help to discourage all but the really dense folks from abusing it.
TinySeed: The First Startup Accelerator Designed for Bootstrappers
There are even more recent examples with software: Stuxnet
I actually can't tell, but it has not yet been significant. It takes quite a bit of time to really get a library like this started. So far we've mostly dealt with people who are using xtensor from C++ or bind it to Python.

We've mainly gone through RCpp for the R language, and that has been working great. I don't know about changes in R 3.5 or ALTREP. Is there something we should know/change for it?
I get an email claiming that I have unread Linkedin messages. The email uses their Logos. But if I were to click any of the links in the email, it would send me to a php or html file that contains a Javascript redirect script. That script, if executed, then goes to the phishers actual page. Sometimes, there is an additional DNS redirect at the JS redirected page. For some reason, the JS redirect tries to hide the redirect by encoding the target URL in an array of integers. The script converts the numbers to characters, concatenates them, and then sets the location property of the DOM. If there was enough interest, I could write all this stuff up as a blog.
You should also check out pdf.js:

We use it in Polar:

https://getpolarized.io/

for our PDF management.

It's a pretty robust library and it renders everything on canvas BUT you also get the raw text in the DOM so you can play with it more as an API for managing PDFs.

REALLY nice to be able to use web standards when working with pdf.js.

The downside is that the graphics are rendered to canvas so you're only really getting an image.
While I agree that PDFs are at times cumbersome to use, I can't think of a valid solution to replace them.

- Fixed layout seems much easier to handle than dynamic layouts. I.e. I can't recall any website that resizes the content correctly (correctly meaning i see the image within X% of scrolling of the referenced location; that doesn't just make the lines super-long). And without handling this properly, most of the arguments against PDF usage seem to go out the window.

- I don't know of any way of highlighting, annotating, drawing on an HTML page reliably over multiple devices. Sure, something can be built on but it requires special software, still.

- How do i send someone an HTML copy of a PDF as a single file? (embedded fonts, images etc)
Great project, hope it will succeed !

What about 1 person business already profitable that want to expand and hire but do not want to deal with VC B.S. ?
Jason Fung explains why intermittent fasting diets work
The article is worth reading in its entirety but here is the thesis:

"Emoji is a language of borrowed “words” “curated” by technocrats (experts, presumably of technology, at the Unicode Consortium), who release those new “words” to platform vendors like Apple, Google, Facebook, & Twitter, who then decide how their users can express these “words” by altering their visual representation. (See Emojipedia for myriad examples ranging from humorous differences in artistic taste to clear differences in meaning.)"

I shared the article because it articulates the feeling I've long held that there is something Orwellian about emoji.
Or that your email is the actual attack they need to worry about.
I think there is a difference between a vulnerability in an internal system, and blatantly exposing data to the public requiring little technical acumen to obtain.
What is confusing is why they call it 10THz when it appears to be (on average 400/25=) 16fS/frame or closer to 60THz.

It's almost like they are underselling it?
Hello Rob,

institutional money

And what is the definition of this one ? :) Won't TinySeed be institutional after funding businesses ?

Or are you saying that TinySeed will be a social platform for connecting angel investors to boot-strappers ?
The article mentions 25 frames in 400ns...
It kinda is, but as far as i know they're actually taking the multiple photos separately of different pulses and editing them into one video.
I wrote "customers", not in the sense of "companies". With the later ones I get paid to wait if I have to use SMB.
Never not inform.

When such a vulnerability is discovered the right thing to do is to inform the users of its possible severity and the duration during which it was available.

Always.
Response to Comment on “All-optical machine learning using diffractive deep NN” [pdf]
Show HN: Anomaly detection in crypto market
"[Brian Acton], we've already established that. Now we are haggling about the price” -- Winston Churchill, I think.
>"I simply disable JavaScript. It's incredible how much faster the web is without it, and how much smoother, and how much less cluttered."

I'm curious is there any practical fallout turning JS off completely? Do you just switch it back on for things like e-commerce, web UI's etc? I always find the context switching to the settings menu a bit of a pain. Do you have some recommendations for things that make JS-free web browsing practical or seamless? Cheers.
I wonder if it's speed increased on it's way out. Maybe it's on a multi-system route, using gravity assist as it goes to cut the route time down by a few thousand years here or there as it circles back around to it's home system. Must be very patient aliens, assuming no FTL messaging tech.
Not really. It is just that the Canadian government decided to keep paying for human light keepers and other countries decided that was a waste of money.

https://www.cbc.ca/news/politics/keep-staffing-lighthouses-s...
"There’s no quick fix here."

I think people are thinking to small. Imagine if you could own your data profile and "invest" it into websites or services. Everyone builds their services to accept this same "profile" formatting and the user takes it where they pleases.

This would mean small upstarts can compete with google and Facebook (who right now have a huge head start on having all this data) by having a better UX.

right now, everything is trapped in all these different walled gardens. I see it like your cellphone only being able to call cell phones of the exact make and model of your own.
Original post from Alexey at habr.com (russian IT community): https://habr.com/post/424433/
I have been recently writing a library in go to fill out AcroForms, and really, the PDF spec and syntax isn't really that bad or hard to understand. Most everything is a dictonary object. I've seen waaaay worse over-abused OOP monstrosities of a code base in C# and Java

PDF 2.0 (ISO 32000-2) has been out for a while and supposedly it has eliminated a lot of the cruft from the spec. I just wish it was open like PDF 1.7
That's irrelevant to the point.

The fact that "statement A does not imply statement B" itself does not mean "statement A implies statement B is false".

Just because the phrase "X can run at 12 miles per hour" does not imply that "X can run 12 miles in an hour", it does not mean the ummonk was claiming that no one can run 12 miles in an hour.
> "I added firewall rules that blocked access to the router from outside the local network," Alexey said.

This could very well be what's causing the outrage from operators... suddenly losing connection with your router that's in some data center 3 hours away - requiring a drive-over just to discover it's some dude adding rules to your production equipment would be upsetting.

There's legitimate reasons for remote operators to have remote access from outside the network. Obviously the router should be secured with latest updates that guard against known exploits, but this could be a major pain for some operators.

(you'd also have to roll back to some backup since there's no telling what else the guy changed, even if you feel he's more-or-less trustworthy... which means more downtime for your customers)
Try OPNsense, it has hardened GUI server, and is stable as hell.
Ask HN: Does anyone have experience using Aiven hosted Postgres on DigitalOcean?
Good? Bad? Any problems?
Just another roadside picnic?
This is fine IMO. Thunderbird has better RSS support.
You would only need to reboot if the kernel got updated. Otherwise just restart the affected services.

And kernel updates can be made faster with kexec so you don't have to reinitialize the hardware. The flashing procedure itself could also be made interruption-free with dual flash, which most sytems have anyway to avoid bricking the system.

It would take some effort to make it fast, but I think the update interruption could be brought down to the second-range. You'd still lose NAT state but that would only affect long-lasting sessions like SSH.
Don't miss out on the plush 555 circuit that they also sell:
https://shop.evilmadscientist.com/else/663
A few feet from the worst aviation disaster in history
Seems, neutral to positive then? Excepting the part where perpetual copyright seems to be the future (not like this bill would have passed if it took an activist stance against it).

Still, am I the only one who instantly thought that the title "Music Modernization Act" meant that some horrible draconian policy was being implemented, given the past abuses of the "simple name of a bill"?
Rob Walling also wrote a great book on the subject, called “Start small, stay small”. I recommend it even you don’t join the fund; it helped me in my current startup.
The solution should be to just stop using human generated passwords and instead have each site generate their own and for browsers and apps use password managers built into the OS and offer to fill them in based on the domain. This is increasingly happening. We need the large sites to move to this to eliminate phishing entirely. So https://f00l.com isn’t same as https://fool.com
I'm trying to implement the Programmatic trellis layout, but having difficulty re-creating it because I can't see the structure of the data. I started with the "yo muze" generator and am trying to manipulate with my own data.

Am I missing something?
I don't hear skepticism on plausibility.

I just hear skepticism based on lack of actual evidence, as there has been, to date, exactly zero. For a hardware back that could only have been done at a large scale.
Dear AWS, we need to talk about your service names
$1,000 for 1,000 people to see in print

What happened is that now advertisers can measure the impact of their ads and realize they just wasted $1000. If advertising was worth $1k, ad companies would still charge it. The people getting screwed in the old system were the advertisers.

The world only sustained thousands of newspapers because physical delivery made them inherently local. The internet made the market for news national, if not global. Consolidation is natural.
Publishing raw data itself is definitely a good start but there also needs to be a push towards a standardized way of sharing data along with it's lineage (dependent sources, experimental design/generation process, metadata, graph relationship of other uses, etc.).
If it was exploitable from outside then it was not internal, by definition.
Can you share some strategies of breaking through the noise and finding reputable excellent suppliers in Asia?
Google is great about disclosing everyone else's zero day flaws tho!
I would love to see some benchmark numbers on Picovoice. The small size and low CPU is definitely interesting but I'm worried that performance is hindered because of this. Also, is 8% peak usage? Having this loaded on some small IoT chip will be awesome to see.
I've heard that in US you could be shot for trespassing. It might be very dangerous to try fixing it.
Are you not describing plain old chroot?
I love CSS Grid, but still can't use it because of support for IE11. There's still just too many windows 7 users, hopefully not for too much longer.

What is webflow doing about that? Do you provide some measure of automated fallback to flex box?