skysight-inc/HackerNews huggingface dataset:
That's the interesting thing about the approach used to find this bug (automatic variant analysis): whilst there are no doubt more bugs to find in XNU, there aren't any more bugs like this.

The article says that the problem was found by codifying the mistake that led to a previous CVE as a query in a logic language called QL, and then running that query over XNU, so if there were any more they would have been found at the same time.

(edit: corrected typography)
I didn't make any claims, but the comment I replied to did.
Apparently, several types exist. The high-end ones are the blue/black I was describing (Staedtler Mars Lumograph), while the black/yellow ones (Staedtler Noris) are the most common ones.
Ai not available for purchase in my country. Thanks anyway, I've found heaps of contemporary translated novels from Japan but for some reason the only Chinese stuff I find is very expatty (apart from the classics).
Visualizing the Global Transition to Green Energy
Except this is new tech, and your only argument is that the old tech doesn't work, which I agree with.
Don't know how long it has been that you've left, but this is no longer an issue. There's a discovery mechanism now that keeps track of all service to service interactions.

Also, that's a strange suggestion, couldn't you have just looked at request count metrics?
I wonder what its cost function is. I sure hope it's better than "get people to say inconsistent things", as I'd expect that to produce a system that is optimized to trip people up.
The creator certainly has all those rights. On the other hand, it's definitely a goal here to have people use the software - that is, after all, a somewhat necessary precondition to making money off it. Given the difficulties with legally complying here, I'm not sure anyone who comes across this whole thing will want to touch MongoDB with 30ft pole, let alone make it a core component of their project.

From a company perspective, the current legal answer to "What happens if I use this under SSPL for <insert side project website here>?" appears to be "the entire site might have to be under SSPL - we don't know". So much for that, I'll use something else.

From an OSS perspective - it's generally considered that to maximise OSS, you want to allow supporting software (compilers, DBs, etc) to be used in commercial/proprietary systems. This can't be, not with a license like this.
Probably https://news.ycombinator.com/item?id=18321062
I understand what you're saying and it makes sense. I think in my mind it's the fact that javascript has the potential to do so many things, not that it's being used that way today.

To use a bad car analogy, the in-car entertainment used to be just a dumb radio. Now that it's a computer connected to the main car network, it has a lot more potential to do things, whether it's a feature, bug, or an exploit.
Your snark aside, clocks are not perfect, and a malfunctioning clock might speed up or slow down.

Also, speeding up the clock is a technique already used in testing enviroments [1].

[1]: https://github.com/majek/fluxcapacitor
If you are behind a NAT, you won't receive ping from the Internet, so you are safe. And you can enable the firewall and "stealth mode" to make it ignore local pings.

Your 2011 iMac can be update to 10.13, so I would update, a iMac 2011 with enough ram and a ssd works very well even on 10.13.
Thanks for the tutorial, it's really what i was looking to give to some friends.
Thanks for wanting to understand, here's another go.

The effect of smoking pot lasts longer than the action of smoking pot. The effect of listening to music often is limited to the action of listening to music.

Pot affects people over time. So you might smoke a joint then be quite content being in the world doing whatever. If you didn't smoke the joint and did the same whatever things you would feel bored.

You generally don't feel bored and are ok with it on pot, you feel ok doing the same activities you would feel bored doing if you were not high.

I hope that improves the understanding.
AI can never be better than the training data you feed it. If videos of your interviews where used to train on how a 'liar' might behave, it will make the same mistakes as the human interviewers.
>1. Preventing interception of passwords on the wire

Isn't this solved by https? I have no idea, but I hope at least that https protects my passwords.

>2. Allowing a tunable "difficulty" parameter which makes brute-force attacks cost ineffective

I don't want to wait for a login more than a second. Actually, I don't want to wait at all.

>3. ... or rewrite their brute-forcer each time the JS-driven network communication channel is altered

How is this different from altered HTML/CSS? An attacker has to adapt to the altered login page. It is not an argument for javascript.

>It seems to me that having a client-and-server protocol beyond just "POST this data here" can be more secure than sending a password to the server for verification...

You say it: a protocol! not a piece of javascript.
> Clojure has the java ecosystem, but it was very tedious (more cognitive load) investing lots of time doing interop instead of just focusing on the problem at hand.

I suspect you have no JVM/Java experience? Because I do, and I don't in NodeJS, and I find the reverse to be true in my case.
The ever-shrinking API
Jin Yong used plenty of 'deus ex machina' in his stories, and some of them are notably worse for it.
If it's of any use to you, they did announce that they will integrate soon with Xero and FreeAgent. https://twitter.com/starlingbank/status/999915241843511297?l... (you need to scroll down a bit for the Xero reference)
‘Red Dead Redemption 2’ Earns Record-Breaking $725M Opening Weekend
JY escaped China. His father was executed by the communist party, and well, if you were alive at the time you were well aware of what the risks were of staying or leaving. He chose to leave.

Chinese oppression in the time pre-the Internet is very different from what it is now. One could argue that the lack of a centralized Internet and single "firewall" creates opportunities for JY's newsletter to spread underground. Regardless of his ban, he was already a famous author in Hong Kong, and his work spread.

In the 1980s Deng Xiaoping, Mao's successor met with JY as he was a massive fan of JY's work. Together they instrumented a lot of political change in China in a desire to make it more open. This meeting later resulted in the ban being lifted.
After I started building my own audio gear, I am no longer impressed by what you can buy in the consumer market, no longer how much "audiophile" these systems claim to be. Usually, it's just a simple 2-way boombox sold for $xxx - $xxxx. I started my project after being disappointed with the sound quality of the Apple Homepod. So, I built my own version with inbuilt basic voice command integration. And I couldn't be happier. Funny, that I just finished building mine this week[1][2].

It's also based on Tubes, and the sound is very, very satisfying. Will be happy to share a detailed guide, if anyone's interested.

[1] https://www.instagram.com/p/Bpl71mUHLbm/?taken-by=discovery....

[2] https://www.instagram.com/p/BplhIIqHNhl/?taken-by=discovery....
That depends on the democracy. You mentioned Scotland already (and there's nothing particularly unique about it). Then there's Canada, where the Supreme Court has specifically outlined the rules for Quebec (or any other province) to secede - but acknowledged that there is a basic right to do so. One could argue that ability to handle peaceful secession is simply the next stage in evolution of liberal democracy, and those that allow for it are more advanced than those that do not.
I believe some US banks have been doing this for a while.
Caused by Apple copy pasting networking BSD code, missing a crucial bounds check in the process (as noted by another reply ITT).

Here: https://news.ycombinator.com/item?id=18351533
You can drag images from Photos directly into the terminal and they will drop as a path to the image you dragged. If you drag a thumbnail, you get a path to the thumbnail; if you drag a full-resolution image, you get a path to that.

That's pretty much how I would expect an app like this to work on a Mac!
It doesn’t make sense to me that something which emanates outward can in any way cause things to move inward. It just seems to violate logic itself. I find it more likely that there’s some fundamental aspect of space itself we are missing which is a purely inward phenomenon. I suppose that force itself too could be described as a wave but more in the way that you can describe pulling on an elastic rope that’s tied to something can be described as a wave. Also if we did live in a holographic universe, there could exist forces which are simply there and are completely unexplainable from within the hologram.
security through obscurity may be no security at all, but security without obscurity is probably not as good as security with obscurity for many security scenarios that one can imagine.
I'm a little surprised that these haven't gained any sort of meaning over the years. For example, the Japanese version of Prince could change his name to 彁 and people would have to refer to him as "The artist formerly known as 王子"
Touch typing is one of the most underappreciated skills for tech workers. Few of my colleagues are true touch typists. So yes, you can survive without touch typing. But it is one of those skills, where a few weeks up to months of thorough practise early one give you a life-long benefit, as you save valuable work time and screen attention with every single word you type. As a touch typist you can not only type faster, but also can concentrate more on what you are typing as your attention never leaves the screen and the typing itself doesn't require any concious typing effort any more.
My typing breakthrough came from EverQuest, as did learning a lot of archaic and interesting words as a young child (grotesque, diadem, sepulchre... etc!). Being forced to type to party members or to auction items whipped me into shape as a typist pretty fast.
Show HN: A digital “look in the mirror”
Glassdoor is a good starting point but it would be nice to know of a community-gathered data source. Any pointers to specific expat forums?
Not to detract from your work there, but there's actually some great research papers about how Botguard itself is easy to bypass and google cookies provide most of the heavy lifting when it comes to bot detection.

I've snooped around a bit myself and it doesn't seem like botguard does anything much more advanced than other fingerprinting solutions.

I just don't buy that this is all about detecting more bots; every sophisticated bot I've seen in the ad world runs javascript as it's better to pose as a normal user, and only a tiny fraction of users would have javascript disabled.

To be honest, I also don't think requiring javascript is a bad thing either.
Without Tolkien, there would be no Robert Jordan, Anne McCaffrey, or Raymond Feist. Tolkien invented nearly all of the tropes of modern high fantasy. Without Tolkien there would be no D&D. Heck, there might still be role-playing games but they would bear no resemblance to what we have now.
Doesn't a field emanate outwards from a point, but may draw things inwards? Both the gravitational and electric fields can attract. Of course the fields don't work as waves but they is emanation restricted to waves?
> "In my opinion, his characters tended to ask morally difficult questions more often than Tolkein's."

Some of Tolkien's characters find themselves in some morally complex situations. For example, Niënor who finds herself pregnant after an incestuous relationship with her own brother Turambar, due to a spell of forgetfulness cast by the dragon Glaurung. It's not all hobbits worrying about second breakfast :-)
"There is obvious, pure good and pure evil, and in a way the Universe intervenes to make sure that pure good will win out in the end."

There is no such thing in either the Silmarillion or the Lord of the Rings: in the Silmarillion, Melkor is taken beyond into a different dimension, yet there is so much damage that this is hardly more than partial damage control; and stopping The Enemy causes an even greater tragedy, that of everything wrought with the Three Rings to fail and fade, resulting in elves having to once again leave Middleearth, that place where they awoke and hold so dear. Hardly can this be called "good versus evil" or either side winning, and if so, it's a phyrric victory for both. Nobody wins in the end; the inevitable is just prolonged yet again through the rise of men at the expense of everyone else. The way Melkor set the stage, Ainur played it, and Sauron finished it, there could never be any victor, good or evil. It was a perfectly balanced system. It was never about Black-White and especially it isn't about good winning in the end, since the victory causes even more tragedy.
Thanks Mike,

so the way I understand it, roughly it works like this: JS tries to gather some set of information about browser's environment (capabilities, network access, reaction to edge-cases, …) sends it to google and google decides if they should allow user to continue authentication (by providing crypto signature of request+nonce or smth.like that… or just by flipping key in session)
> They want them to learn Chinese and acknowledge they live in China. Of course.

Why "of course"? Those people aren't Chinese culturally. They were conquered.

> Interesting that you suggested the Yugoslavian "solution" which required a bloody war, in case you'd forgotten

It only required a bloody war because the (by then dominated by Serbian nationalists) central government insisted on there being one. In all the Yugoslav republics, secession was peaceful once Belgrade left them in peace. The only exception was Bosnia, and even there it's not a given that it would have blown up the way it did, if Serbia and Croatia weren't already fighting elsewhere.
> When a system call is invoked, until it finishes, it is true that the caller goroutine will be parked with a system thread, however, the thread will detach itself from a P, so that the P can assign other goroutines (G) to other threads. So there is no CPU under-utilization.

True. But major page fault doesn't invoke syscall. Go program just accesses regular memory inside mmap'ed region while running on logical processor (P). Go runtime doesn't know anything about the hard page fault, so cannot add an additional OS thread like in the syscall case.
What steps to take to hire an excellent developer?
Throwaway accounts for example, I might not want my employer linking my user with a given story that I post
After re-reading the Process/ProcessScheduler chapter you are right, it explicitly mentions one VM per CPU.

So from that point I stand corrected, however I would say it was an implementation detail, as the ProcessScheduler could easily have other policies.
AR could mean the death of the selfie
Does it play the sound from Hearthstone? That would be fun!

https://youtu.be/bBCB0y9Mgns
Show HN: Vue Dark Mode – A Minimalist Dark Design System for Vue.js
You've just lost 95% of your users.
I am sensing rudeness from your comment but I don't actually understand why, given that we've said quite similar things about Tolkein. But to clarify the original intent of "morals" in my comment, I was referring to morals in context of the written universe, not in ours. JY characters regularly confront situations where they are forced to question their own personal code. In a more trivial example, the moral code of a wuxia martial artist is to treat your teacher as a god-like being who is also family. One of his books deals with a student and teacher who are in love with each other and their moral conflictions between doing what is right by their moral code, and what is right by them. JY does not offer a moral lesson here, he simply explores characters in morally complex situations.

eta: this is not to say that Tolkein does not do the same. I offered my opinion about which author did it in a way that was more interesting and compelling to me.
Nitpick: I think "please enlighten me" cheapens your otherwise fine comment, makes it personally combative where the tone of the rest of it is more factual. Just erasing the first sentence of the last paragraph would I think improve its tone. Just my opinion.
why do you keep re-interviewing? Is it for different roles?
I keep hearing this, but I've never had even the faintest idea what's wrong with it. Are there obvious deficiencies I'm just… totally missing?
Jin Yong fled to Hong Kong likely to escape the Chinese Civil War, WW2 or the Communists. No enough info here.

Censorship was there in mainland China but books were still easy to carry around and read.

From the wikia:
"Despite Jinyong's popularity, some of his novels were banned outside Hong Kong due to political reasons. A number of them were outlawed in the People's Republic of China in the 1970s as they were thought to be satires of Mao Zedong and the Cultural Revolution; others were banned in the Republic of China on Taiwan as they were thought to be in support of the Communist Party of China. None of these bans exists today, and Jinyong's complete collection has been published multiple times in Hong Kong, Taiwan, and Mainland China. Many politicians on both sides of the Straits are known to be readers of his works; Deng Xiaoping, for example, was himself an avowed fan."
PoW ought to make a better defense. It also require JS. oh wait...
Everyone else is talking about Apple, but I thought you were talking about Windows, because I had the same problem: the Metro Photos app likes to store things in AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe (!)
so you want a non-commercial use license. these aren't seen as open source by most people, but perhaps they'll be accepted by users.

calling it open source is harming actual open source projects by making people fear adopting them.
This isn't new tech, it's going to use micro-gestures which is a questionable science. AI does not mean anything, you need inputs.
> The only substantive change is an explicit condition that any organization attempting to exploit MongoDB as a service must open source the software that it uses to offer such service

If you're building for example an ecommerce that uses MongoDB as database, you're not selling MongoDB as a service, so you don't need to license your software with this new SSPL.

If you're building an ecommerce as a service with a MongoDB database, again you're not selling MongoDB as a service, so you're safe again.

IANAL + usual disclaimers.
> Humanity doesn't need wilderness to survive and grow

It is a very egoistic perspective (at the species level) that we can destroy species of plants and animals (and entire ecosystems) just because they don't serve us.
I find the idea of detecting someone's trying to bust your login page with some kind of automated system and deciding to serve them a ridiculously aggressive Bitcoin miner rather amusing.
It would be on your home LAN, so presumably you know what else is using it. I stream video from my computer to a Roku box over ethernet, video consumes far more bandwidth than audio, and it works fine.

Also, if you plug your audio components into its own switch, it should not get interference from the rest of your LAN.
Oceans 'soaking up more heat than estimated'
Have been using Clojure for three years on a dev team of around 10 people. We haven't had any issue with maintenance and extensibility of the code base over time. I'd say it is as easy to maintain and extend as it was in the beginning.

That said, we have a micro-service architecture. Thus the overall system grows horizontally, in that more and more components are built and developed. So individual components don't really grow that large. This would be different say to building a giant monolith like a AAA game, or a massive application like Photoshop. So I can't speak to how such a code base would scale.

Also, this might sound strange, but I don't think we've ever had to refactor the code base in those three years. The paradigms of Clojure (data driven/functional/immutable/meta), combined with our architecture, it just doesn't really need you to refactor things to add features.

Most adding of features tend to be... Write functions for it. Plug the functions inside the outer orchestration chains of function composition which dictates code flow. Add some more keys to our data-structures. Write tests. Release. Where as in Java, we used to have to shuffle all the Class/Interface arrangements around all the time to make room for new features.
Should they ask for the immediate termination of all past abusers and how high they should they go in the company?
Thanks for this. This is very useful for a beginner.
And that is why BSDs will never be as big as Linux, companies don't like to give free beer back to the tap.

Also why all new open source OSes done companies are all based on BSD/MIT licenses like Zephyr, RTOS, Fuchsia, ...

When we get back to PD, Shareware world, don't start complaining companies don't contribute back.
Brazil’s LGBT community dreads looming Bolsonaro presidency
Can someone explain why a netblock owned by Facebook would have a 20ms response time in China? Does Facebook have Chinese servers?
Thank you for avoiding them! I do the same.

If the site is important to you, you should contact the owners with an alternative (such as an open source captcha, or spam filtering).

The only way to topple the monopoly of Google is to erode it site by site.
> Heap buffer overflow in the network stack allowed for sending ICMP packets that would crash devices.

It's not receiving an ICMP packet that causes the crash, it's when sending an ICMP error response packet. ICMP error packets can be generated in response to any type of IP packet, for example "host unreachable" when using UDP. These packets copy the original header of the packet which generated the error, which is where the out-of-bounds copy is.

I understand why the author doesn't want to give full details, but in this case it leads to a lot of misunderstandings on how it works.
Show HN: Conduit for C++: Lazy Sequences Using the Coroutine TS
Guitar amps are very different beasts. If you want to build something simple there is "1 watt guitar amp" project[1] with many different variations.

[1] https://www.electrosmash.com/1wamp
Makes sense! Thanks.
https://arxiv.org/pdf/1810.04805 works now
Quite apart from your well made point, just about everyone that "makes it" wants a home in the country with some land, probably some old forest. It's the location for so many leisure activities and holidays. Few want to retire in a city.

We conveniently don't notice the decline of soils, of insects or other species. The arrogance that we can just keep on until humanity is in battery hutches everywhere and everything else divided up between agriculture and industry astounds me. Who knows how many miracle drugs and biotech has been lost in those unknown bacteria and species.

Even if it turns out to be a process that can continue our collective psyche will lose something it apparently desires or needs. So at what cost?
The Rise of the Skeleton King, the '80s Bone Dealer Who Changed Halloween
The Play store if you're on Android
Of course :) I do not at all mean to discredit Tolkein's moral complexity. I have simply personally found JY's more interesting and more compelling. That is just a personal opinion, and could be simply explained by the fact that I'm a Chinese person who knows all too well the Cultural Revolution and it's impact on my society, and find that the questions JY asks relevant. The original intent of my comment, after all, was to question what it meant for Tolkein to be more "creative" than JY.
"One could see this change as being just another company trying to go proprietary without actually looking proprietary." -- I think this is the key, they have a right to do what they want and monetize as they want (and I think it is good to monetize), but it somewhat of a misnomer to call them "open source" in the sense of code-sharing freely according to some philosophies.