skysight-inc/HackerNews huggingface dataset:
> Adding a layer of particles-guided-by-the-waves on top of that is an extra complication that can only be justified (if at all) in terms of the intuitive appeal of their resemblance to macroscopic physics.

This "Bohmian mechanics is Many-Worlds in disguise" is simply false [1]. The axiomatic basis is completely different, and this is apparent because with Bohmian mechanics you can easily derive the Born rule, and as a result, it also makes a new prediction that isn't allowed in typical QM, quantum non-equilibrium [2]. Deriving the Born rule with MWI is a hotly debated open problem.

[1] https://arxiv.org/abs/0811.0810

[2] https://en.wikipedia.org/wiki/Quantum_non-equilibrium
> The article is not praiseworthy enough to be a PR plant, and it lacks any substance from insiders. Seems to be tea leaf reading more than anything.

So par-the-course for "internet journalism".
That doesn't excuse not picking a license for it. explicit > implicit...
Patching, Re-Patching and Meta-Patching the Jet Engine RCE (CVE-2018-8423)
Interview with the Google Pixel 3 Camera Team
This is not a thing though. Spin is spin, regardless of reference.
Is Beef the problem?

Ive seen the numbers for the Chicken + Tilapia resource usage, and it had me convinced that beef is really the issue.
> But there's a reason that an ad in print has more gravitas and impact on the reader than an online ad. Digital ads are ephemeral, and are forgotten as quickly as they are seen. With the exception of writing an ad in the sand on a wave-washed beach, every single other advertising method has more impact than online ads.

This seems to be an argument for "an ad view on a screen is worth 1,000 times less than an ad view on printed paper", which you seem to be arguiing against in parent comments...
For this type of behavior, I abandoned printers entirely a few year ago. It took a bit to find businesses that never required paper for transactions, but now I am happy to never have to print or scan anything. To turn away from an entire industry kinda feels good. Everyone should treat dark business practices this way. Drive them into bankruptcy or ethical behavior.
Peter Jackson 'restores' silent WWI footage
I think the most upvoted answer will be problem solving, but instead I think it should be a broad liberal arts education, ethics, and learning how to say no. We've had enough of building machines as efficiently and ruthlessly as possible, it's time to start questioning the what and the why instead.

I have a friend who quite literally works on cluster bombs at Lockheed Martin and says they see no connection between their work and anything else in the real world. They just make "tools" like people at Facebook, it's not up to them how the tool is used.

We don't need any more software engineers like this who are good at solving problems and not much else.
The point isn't that voicemail is super important; the point is that infrastructure wasn't even secure a decade and a half ago. The systems you're talking about were all exposed then too.
The guidelines ask you to not do this because it doesn't do any good. Please just email us instead. We're looking at this kind of thing all the time and do find shillage, though it's most often not where users speculate (which has to do more with their own perception).

https://news.ycombinator.com/newsguidelines.html
Good point, I agree with that thinking. But the actual execution of such a hardware-based attack would surely be discovered at some point anyway, and risk the same negative outcome. So then that would leave the only possible conclusion that the story just isn't true at all. In the end, none of it makes clear sense...
Well I wasn’t going to go there, but yah. The timing does smell a little.
The site is currently presenting a Let's Encrypt certificate issued just under 24 hours ago. There have historically always (for reasonable definitions of always) been valid certs for this site, although of course I can't tell from here that they were always properly installed.

Likely explanations for your experience:

1. Your clock is wrong. If your system currently thinks this is Thursday 11 October for example, that's a problem, 'cos this is Friday 12 October.

2. There's some subtle configuration error on their server (seems unlikely as it looks to be just a generic AWS setup) that results in the wrong certificate being presented.

3. Your OS or browser trust store lacks the root CA "DST Root CA X3" operated by IdenTrust. If you didn't deliberately choose to do this, you should investigate as most likely you aren't getting important security updates.

All three causes can often by diagnosed by closely examining the detailed error reported in a browser e.g. SEC_ERROR_EXPIRED_CERTIFICATE
Interesting, and here I thought vending machines are not that prone to hacking but of course, this is a newer model from what I see
I feel like this article reflects some significant technical confusion. The BMC is supposed to be on a trusted network inaccessible from the outside. I've always viewed authentication on the BMC as being like the numeric lock on luggage--it's designed to keep honest people honest, not for real security. Being able to bypass the BMC security is really not a big deal. What the Bloomberg article says about the hardware exploit is much worse:

> > The rogue instructions, Bloomberg reported, caused the BMCs to download malicious code from attacker-controlled computers and have it executed by the server’s operating system.

It's using the fact that the BMC has unfettered access to the rest of the machine to compromise the code running on the server itself. That's valuable even if the BMC itself is on a private network inaccessible to the attacker.
HTML and PDF are used for different purposes.

PDF is file format presenting fixed-layout documents application independent manner. You don't want to lose universal standard for that.

HTML is markup for presenting documents application dependent manner.
Yes, I'm well aware of all this, and thinking about it a lot. I don't think the 20th century "jobs" model will work for much longer. But I don't like the "We can't do anything, everyone is doomed" attitude, either. The transition from a farming economy to an industrial one wasn't just about new jobs. Our standard of living changed massively. We've gone from a world where 90% were illiterate and living in extreme poverty to one where 9% are illiterate and living in extreme poverty. We live in a world now where "not actually in poverty" represents near-universal access to wealth that didn't even exist for the richest people on earth - cars and planes, the internet, etc.

The next step, I think, is cheap universal energy, solar/wind + storage creating an energy supply that is cheaper and doesn't cause geopolitical resource conflicts. Near-free energy and near-free information is an extraordinary combination that makes amazing things possible.
Hmm, I'm not sure about that. Apple has shown in the past that they aren't too worried about the sunk cost fallacy. If there's a new manufacturing method that adds enough value to be worthwhile, they will jump in on it whole hog.
No black scientist has ever won a Nobel Prize – bad for science and society
The paths that you unveil(2) can be hardcoded, set from a command line flag, or parsed in from a config file. What can't be done, however, is arbitrary file access at runtime, as there would be no point at which you could lock unveil or drop the equivalent pledge promise.

For the chrome case, you can currently only access ~/Downloads. This involves changing our habits as /users/. If you need to access files from outside this directory, you need to open a terminal and copy/move files there yourself.

That said, for now.. the chromium package does actually have a external unveil policy in /etc/chromium/unveil.* for each process type (main, gpu, renderer, etc). But that won't necessarily always be there.
This is explored in Seveneves by Neal Stephenson.
It's always funny to see people wishing death to companies that they've probably invested parts of their 401ks in unknowingly, or had their insurance payouts come out investiture in.

Our economy is less like a cabal of fat cats twirling mustaches and puffing cigars at the thought of how they can further disenfranchise the poor, and more like an ecosystem.

It's not like CEOs will even suffer, they'll probably get a fat comp bonus to try and keep them from jumping ship in the middle of bankruptcy proceeding.
No, it's an entirely separate new product they introduced back in 2015 [1], Little Snitch is still far and away their main and most important offering. Micro Snitch does fit in with their overall company focus of monitoring application background transmissions of your data, but it's a lot more minimal in focus (and in turn very cheap). I'm not sure why it's getting an HN post now, it hasn't recently received any significant upgrades beyond some basic Mojave compatibility/Dark Mode.

Actually Mojave introduced some significant new per-application protections and permission requirements for privacy related equipment, including camera and microphone [2], so I'm not sure it's as relevant now as it was at launch. I suppose that even if you grant something permission it could still be useful to have more active monitoring of usage as well, it might get compromised or look legit but then do things you don't expect.

----

1: https://blog.obdev.at/introducing-micro-snitch/

2: This can actually "break" old software in some cases, because it'll try to access something and fail but the OS permission dialog will be hidden by some other window or not show up properly. Sometimes you can work around this manually in the Privacy pane of the Security & Privacy preference panel, where it'll list software that recently tried to access a resource but couldn't and you can check it off to allow it in the future.
The open source reference is this phrase: "Picovoice's speech to text repository ranks among top 10 open source machine learning projects."

It's apparently only talking about their benchmarking tool: https://github.com/Picovoice/stt-benchmark

The engine itself is called Cheetah, and appears to be a closed source, "inquire for pricing/licensing" product.
>even Verizon acknowledged that the limited network they were rolling out would not scale up and would not resemble the 5G it intended to have in the years to come.

I dont use Verizon, but this article seems to be riding the Verizon hate bandwagon despite numerous mentions that this is essentially a prototype.

I'll applaud innovation and new tech, even if the first year or so requires some re-work.
Likewise Taiwan formally does not recognise the People's Republic. Both sides see themselves as the rightful Chinese government (especially [only?] when the Kuomintang is in power in Taipei).

What happens is both sides have special procedures to deal with each others which allow to control and enable travel and trade without recognising the other side's claims while recognising people as Chinese, not foreigners.
anyone here good with the stock market and would know how to leverage this list?
I would really prefer all I/O devices, including touchscreens and antennas, have physical on/off switches. 1 for in and 1 for out where possible. Even if I have to open the device to flip them. I'd like to be able to turn a phone into receive-only device without worrying about what it's broadcasting. That's probably a lot more complicated than I'm imagining, but I'd like it if lines between what's a sender and what's a receiver were more clear, instead of everything being both.
The goal of the project is to improve CSV :-) - it's in the title e.g. CSV Evolved and in the version 1.1 (that is, it's not version 2.0). It's about not breaking things - it's about small changes (mostly) for humble humans (not machines).

It's NOT about one universal csv format and the ultimate specification to settle the matter until the end of history etc.

Thanks for the detailed suggestions. I see your points. I appreciate your helpfulness.
Both examples that you give are sound, and I would support regulations that enforced these basic security guidelines. The question is whether these are the types of regulations we would get. I expect there would be rather a lot of useless and silly regulations that do nothing but drive up costs.
1. Most central bank economists have abandoned the standard of price stability, and now target a specific CPI number. The Fed targets 2%, for example.

2. A 50 car pileup will employ EMS personnel, hospital staff, tow truck drivers, road cleanup crews, etc. Then later, new car assembly, transportation, DMV workers, and car salesmen.

https://en.wikipedia.org/wiki/Parable_of_the_broken_window
Twitter profiles categorized
They have a detailed comparison with other tools (including Tabula) in the wiki:

https://github.com/socialcopsdev/camelot/wiki/Comparison-wit...
SageMath plugin for GNU TeXmacs
I think the jokish tone was evident, but since it's not, let me help you:

/s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s /s
If you don't mind paying, LispWorks has an iOS runtime: http://www.lispworks.com/products/lw4mr.html. I'm not sure of the perf part on iOS, but on x64 it's pretty good.
There's a good chance these sorts of things are whizzing past us all the time, and we're just not detecting them.

I mean, we just discovered ten new moons of Jupiter this year: http://earthsky.org/space/10-new-moons-discovered-jupiter-1-...
> At least in the use scenarios publicly known

This is key. The shuttle was a military project. It's usefulness and congress' appetite for continuing to fund it ended once alternatives[1] were put into service.

[1] https://en.wikipedia.org/wiki/Boeing_X-37
Serious question: what do you consider "any other enterprise" in this context?

Because the obvious comparison would be Amazon, Walmart's chief competitor, and I don't know how they could match that seeing how they don't have anywhere near the kind of expertise, experience, and investment that Amazon had for over two decades.

To me, it actually makes perfect sense for them to buy an Indian firm to become their tech lab. They don't have the knowledge or resources to even enter the field to compete for talent to build up their tech in the US - let alone win it.
There's an app that might help you do that: https://news.ycombinator.com/item?id=18193349
Good point. You're not the first one (even in this thread). To repost:

See the CSVJSON format - http://csvjson.org - Love it. I will add a new variant called CSV <3 JSON shortly to the CSV 1.1 repo and csvreader etc. too.
> this involves changing our habits as users.

In other words: We have to do what the software requires of us, not the other way round.
7 Tips to Test Your Idea as a Part-Time Entrepreneur
> There are actual flying prototypes that have gotten at least within a factor of two of electric cars

Linky?

> People tend to overestimate how much energy flight takes

But underestimate how much energy convenient VTOL takes.
Using Ruby's minitest to regression-test your Jekyll static site
It's heavily used over VPNs. I have seen SMB over the internet by [ill-advised] companies but the various waves of exploits have probably put an end to that.

The main point was just that something like SMB or NFS is not a good fit for a network which is not extremely fast and highly reliable because too many programs do blocking I/O. Dropbox works really well in that situation because it's asynchronous and that advantage was huge when they came out because everything was even worse back in 2007.
Wouldn’t LittleSnitch be ideal in this situation to assist in checking if MicroSnitch is phoning home?
DuckDuckGo searches increase by 50% in a year
Governments are not neutral parties. They have interest in mass surveillance. Moreover, I don't believe a neutral party is possible. Organized groups with enough motivation and resources will find a way to influence neutral parties. Just take a look at journalism, or even education, today. Both of those groups were intended to be neutral, but they are not because they are heavily influenced from outside. I know education in regulated, but it shouldn't be. I don't believe the original intention was for heavy handed political parties to use education to meld young influential minds to their liking.

On a side note: companies and governments alike believe that a single security audit before each release is sufficient (many don't even do that much). They are wrong. Instead, they should be hiring a team of full-time penetration testers that work in parallel with standard quality control testers.

Now back to my original train of thought. I believe the solution is exactly what we have -- natural selection. When the financial loss exceeds the executives tolerance threshold they will either fold, or adapt. The organizations that are better at adapting will survive. It will take time, but as long as the losses are great enough natural selection will affect the course of things to come.
I thought this had been explained by how this setup maximizes the efficiency of the respiratory system.

This was discussed in a great book I read called Scale:

https://www.amazon.com/Scale-Universal-Growth-Organisms-Comp...

the human vascular system follows the same rule iirc.
> Say for example they do in fact mandate 2FA for all banks. But then all banks rush out various implementations to meet the requirements. Some provide SMS-based solutions which have known security risks, some provide codes that don't lock out, some do everything right but now people who can't get a 2FA app (those who don't have smartphones for example) can't access online banking any more. There are accessibility concerns.

I'm not qualified to speak on this subject, but these are excellent points. Could you expand on any other implementations that sound like a great idea on the surface, but would have limitations? It sounds like accessibility is just one of many concerns. I'm itching to hear more.
This is far too generic, but here are some types of competencies-

>For Full Stack

Being a database expert, being a data expert, and API usages.

>For Embedded

Electrical Engineering(Primary) and Mechanical Engineering(as needed)

>For Automation

I'd simply recommend to prove yourself on Automation. When others are dazzled, you made it.

---

Any of these would be something that co-workers will be coming to ask you questions about.
Could Blockchain Put an End to Stolen Art Sales?
Kid Rock? This Congress? Whatever they are doing is fucked, and you can bet on that.
Ha!

https://www.zdnet.com/article/a-mysterious-grey-hat-is-patch...
Well... https://epson.com/ecotank-super-tank-printers Epson sells printers that are explicitly marketed as "easy to refill".
https://outline.com/yqTM7J
I'm in favor of abolishing the concept of race entirely. I used to think that we had a fair chance at achieving a post-racial society, until the left decided that's not what they want, Stephen Colbert mocked the idea, and activists demanded more and more attention be paid to race.
I used Oboe (and its predecessor, Howie) to make a self-balancing robot on Android. We were able to use the headphone jack (RIP) as a low-latency output to send serial data to an Arduino[0].

Android Studio has also finally improved NDK support enough that writing large chunks of your app in C++ isn't painful anymore.

[0]: https://davidawehr.com/blog/audioserial/
The cross-platform audio app library JUCE has a benchmark on mobile audio quality published for a lot of phones. Basically only the Pixel and Nexus phones are even close to Apple devices, and for most android phones, the situation is abysmal.

https://juce.com/maq
I wonder how this compares to snips[1]. I recently connected snips to my lights and it works pretty flawlessly. Picovoice does look like its easier to integrate into an app though.

[1] http://snips.ai/
I think it's plausible there's a disinformation campaign behind this strange story and that Bloomberg were the eager dupes.

But unnamed sources are known to the reporters and as "senior national security officials" they should be easy to verify and difficult to fake.

My guess is it's a subgroup of one of the agencies running a relatively independent operation to boost distrust of China. A rather inexperienced or at least incompetent group, based on how awkwardly it's gone over.

(Not that I've come to any conclusions... I think there's more info to come on this.)
I really misunderstand my relativity then.
If you’re going to rebalance your BTC-cash portfolio every time the price doubles you should probably use Kelly bets, right?
> It's always funny to see people wishing death to companies that they've probably invested parts of their 401ks in unknowingly...

It's always funny to see people thinking their personal profits should come first over preventing widespread harm.
Who knows if LittleSnitch is not a "social hack" by itself ?
This Old House visited a converted lighthouse in Season 36 Episode 7. They went over all the things you need to do to convert it to a livable space. Long story short, it's expensive and requires a lot of work.

Sadly it doesn't look like that episode is easily accessible.

https://www.thisoldhouse.com/watch/old-house-tv?season=36&pr...

https://www.youtube.com/watch?v=TYJxhkv4Pl8
I hope not to see any moral policing here for selling out. It is difficult to walk away from that kind of money.

Hope not to see indifference caused by false equivalencies.

False equivalencies suck out oxygen and leave no room for nuances or discussions.

I am encouraging my social network to switch from Whatsapp to Signal, but I'll go cold turkey whether they switch or not.
Show HN: Upcado–Super easy to use Messenger Marketing tool to grow your business
Thanks for the response, I will think more on it and see if I can apply something(some things may not work for my personality or my local.country politics)

What I mean by major things you will find out about it is that usually there is nothing that happens n one day and you will miss it by not reading the news that day, laws get debated a lot, ton of noise is happening and here in Romania large protests happen (though not major changes actually come from those)

I admit that I am a cynic and I see all the parties as the same level of corruption and incompetence due to my observation that only some type of personality can go up the ladder.

The point about trying to convince your friends or relatives, does it ever work? I never seen someone let be convinced by arguments, they always watch same TV channels, read same papers you can't produce a change in a heated debate.

I am curious if you think that is any issue in getting informed at the end of the week, what could have happened that you getting informed with a few days delay mattered ?
If is important you would hear about it on the non political channels/papers or from other places.
Will you consider offering community editions for SQream in the future? It‘s a considerable differentiator for BlazingDB and PG Strom I guess
Lessons Learned from Georgia Tech's Online MOOC-Based Master Program
Show HN: CSS Grid Playground in Webflow
How I wish we could buy opensource printers and other devices. There is a so-so opensource home router and a few stabs at opensource phones/tablets, but not much more.
Got any recommendations?
> blind glorification of activities whose main selling point is revenue generation

Not inherently. Only in the cases where it's a true choice between something revenue generating, and something people are doing for social good.

Your perception of social good (people dedicating their time to intellectual puzzles you deem worthy vs people wasting their time on these meaningless displays of skill), is different to someone else's.

My point was perhaps too broad - but deigning to tell someone their pursuit isn't as worthy as one you think they should be pursuing is, frankly, pointless.
Looking to avoid the existing printer hegemony, regardless of what products they sell.
Is it worth building a customer sentiment analysis tool for support?