skysight-inc/HackerNews huggingface dataset:
The Weather Underground planned one of its bombings to take place at night to minimise casualties, although they ended up killing some poor grad student who was working late.
The insider perspective on the npm “event-stream” compromise with Dominic Tarr
Sam Melville?

https://en.wikipedia.org/wiki/Sam_Melville#Bombings

The IRA also phoned about many of their bombs. The Omagh bombing is mostly notable because their phone-call didn't accurately identify where the bomb would detonate, and so got people killed.

Plenty of terrorist groups have recognized that killing innocent bystanders isn't good PR.
Because they can login with their user id and password or their email address and password.
I personally think the reward system related current human evolution punishes blunt liars, but reward "Lie Lie" teller.

A "Lie" is something that is easy to falsify with consensus.

A "Lie Lie" is not a lie but a statement intend to mislead people, difficult to get caught, easy to find a lot of lie believer to defend, eventually make a technical evidence based debate into a religious belief based debate. It's a lie about lie or a decoration upon a "lie" so the "lie" can not be categorized as a lie.

There are signatures of "Lie Lie"：

* Claim there's a proof instead of provide the proof. actually any claimed proof often is not a proof but just claimers' belief.

* The claims are mixed topics some legitimate and defendable possibility along with some thing that really happened. In simple words mix truth with lie so later the can defend truth topics.

* When they give proof, they will provide the one that there are less controversial topics but not the needed ones.

* Shift the focus to defendable topics so the undefendable part(i.e. belief based part)

* Usually attached with moral high grounded good cause such as "raised the public awareness of threat from an oppressive regime" just as an example, so the "Lie Lie" teller can convince themselves and their friends, coworkers the claimers are decent people.

*The claimers themselves believe the claims so they can claim they are not lying but they don't think they are using deceptive narratives to sell their beliefs.

Most activists are "Lie Lie" tellers. The problem of our society is a lot of journalists become activists involved into ideological fight but pretend they are providing truth.
You need to know the principles of virtualization, and then just look at the ARMv8 manual.
"The average driver files a claim for collision once every 17.9 years"

That leaves open the question of how much damage that driver is at fault for on average.
The issues are definitely related.

That the government is in the middle of one of it's biggest negotiations in history, with it's largest trading partner - and there have been twice in that last few months indications of 'Chinese government spying' - would imply that they are quite related wether we want them to be or not.

The first story was bizarre and didn't seem to have credibility, making one wonder how it came to be.

This story comes at an even more sensitive time, and so more clarity, more information is better.

Even the arrest of the Huawei rep. a few days ago - though maybe part of a separate investigation - will ultimately be viewed by 'the other side' as a tactic, ergo, it's part of the discussion wether we want it to be or not.

FYI - just today, a few days after Huawei VP is nabbed in Canada, the Chinese have 'dissapeared' a former Canadian diplomat in China working for an NGO. [1]

... which is exactly the kind of thing that many predicted would happen.

[1] https://nationalpost.com/news/canada/former-canadian-diploma...
It's linked from above - putting it here for anyone else looking for videos.

I found more content at https://sites.google.com/site/grasp2vec/

And this video

https://drive.google.com/file/d/1Z1q7zSQERrm_tgboGGoG8MHewj1...
>hose popular disruptive startups dump plenty of externalities on everyone around them. Don't think for a moment that anyone there is increasing efficiency for the sake of increasing efficiency globally

Pretty lame analysis. There are lots of companies that are in it to do good or actually improve society.

I'd even argue that society is net better off with Lyft (not sure about Uber) even though working there as an employee isn't great. Taxis were awful.
Seriously though, your tutorials are probably the reason most people I know have used DO. You guys do an amazing job with those!
poetic
Spinning the boards is of limited use. The attacker now has a specific target to aim for.

It might be useful if nobody knows your doing it, but other than that it’s mostly pointless especially if you compromise every sample.
Well sure, because there are fewer dollars. They're being decreased and hence it takes less dollars to purchase bitcoin. Yes indeed re: diversification.
64L 3D NAND flash is about 4.40Gb/mm^2. 16TB = 131,072Gb. 29,789mm^2.

70,686mm^2/std 300mm wafer.

Roughly 2 dies/wafer, with exceptional packing, and don't account for defect rates.

Average $0.74/in^2

109.56in^2/std 300mm wafer

81$/std 300mm wafer

roughly 40$ in materials BEFORE you even start talking about the processes to build up 64 layers, and everything else.
Sorry, why wouldn't you use invoice factoring to solve this problem? Unless margins are so low that the factoring fees would put him into a loss. You'd get very competitive rates against someone like Walmart.
I doubt turning China into the next North Korea will help it develop into a modern democracy.
I have had this thought before. I think cereal & milk is a cold, often sweet soup with a simple dairy broth (milk).
Work on bigger problems that are a lot harder to solve. You cant mitigate for reality, but what you can do is offset its shittyness but taking on a project/task that yields results that are big and great enough to justify dealing with shitty systems/ heuristics to begin with.

Just my 2 cents!
> Ultimately the article strikes me as an article written by someone who has a beef with Marriott, and he ends noting that it's possible that the breach occurred not due to issues with design, but due to the layoffs of Starwood's technical staff.

I agree with your first several points, but a lay-off beef is unlikely since the author hasn’t worked for Starwood in over a decade.
Deploy Custom Fonts to Client Computers via Script
Trump says would intervene in arrest of Chinese executive
I just read by the Nike founder and he describes how for many years they had massive problems keeping the business afloat despite growing like crazy.
https://qntm.org/hatetris
Oh good, so now they're bringing in another Chrome feature. Or should I say, an Opera feature that Chrome stole and wasn't necessary in Firefox.
Indeed, the only time that "impossible" should be used when it comes to computer security is when stating that true security is impossible.
My mom always told me that once I've fallen off horses one hundred times, I will never fall off again.

(I filed a request for a bike in my early life, so never got to that 100).
Perhaps AV1 will in the loooong term, but as of today h265 is what every 4K Blu-Ray uses and just about every modern device has a hardware decoder. So that’s gotta count for something.
Yes, that's the first half of the article (and the primary motivation). The "Please Stop Arguing About Attribution Without Expertise In It" is the section I was pointing to.

This is to say nothing about this particular case. I have no idea how solid the attribution is here. But the same comments to dismiss the whole idea of attribution out of hand come up every time, and they don't get it.

We shouldn't take it on blind faith that some attribution is accurate because it appears in the press. But we also should not interject with uninformed speculation about how we think attribution works, and then attack that straw man so they can cast aspersions on the motives of those making said attributions.
Galcon like game with upgrades
Hmm.. if only you had a tiny unmanned shuttle...
Thanks for this. I've struggled with the effective-vs-true question, even to the point of panicking that I had read too much about the placebo effect for it to work on me. I like your #3 - I'll give it a real shot.
Apologies for the week late reply. Apple has classified this extension as one which might slow your browsing down (of course it does, though the impact is imperceptible to me). Because of that, it’s not only unlisted but also will show a warning banner in Preferences after install, and will occasionally be disabled by Safari updates.
In other news: The march toward Firefox becoming another Chrome knockoff continues unabated.
Crispr Scandal: How Do You Publish a Scientific Villain's Data?
Some of the Ubuntu flavors are really nice. My current favorite is Xubuntu, though I have Lubuntu on an old laptop and I like it too.
Mine still tells me I should avoid eggs because they will raise my cholesterol. I wouldn't call him an idiot, just not quite up to date on the latest nutritional studies. Not a big deal since our understanding of nutrition seems really weak and changes pretty often.

In any case, there is this:
https://www.acsh.org/news/2018/08/10/spoonful-salt-makes-blo...

Which suggests that salt intake does raise blood pressure slightly, but it's a very small effect and does not measurably impact actual cardiovascular outcomes.
Perhaps, but our stipends were determined by NIH training grants.
The subjectivity of design has always baffled me. I looked at the example and immediately thought "wow, the one on the right looks so much better". I truly don't understand how the one on the left could be preferred.

It does seem like you're arguing against the "usability", which I think is a stretch. The hover state provides interactivity, the right has far less going on (minimal), the drop shadow does nothing either way and more compact does not mean more functional, I would argue the exact opposite actually.
> Edit: witness the downvotes - my point exactly.

It doesn't take much.
This is correct :)
That’s a popular SV cliche, but it’s not true.

For example, without the DMCA, neither Twitter nor YouTube would exist.
> $(document).ready(function(){ if('ontouchstart' in document.documentElement) alert("..."); });

This worked in 2012 I swear! Oh the shame now however :'(

Thank you! The timing of EVERYTHING was by far the hardest part, as evidenced by your comments, there's something intrinsically familiar about the Tetris (or Breakout or Galaga or etc...) version you are used to. I modeled this one to be closest to the first I played, the 80s GameBoy version.

That said- I've noticed these myself in some form or another. 2 & 3 are related- I need to delay more as the block sits atop a collision. 1 I thought was off but just couldn't justify the time to prove it.

Thanks for the feedback!
Not going to be a popular opinion on HN, but what are the odds that what we see as an AI being racist is actually an unbiased, un-pc system acknowledging patterns?
Yeah, as I was building out some apps over the past year it was a game of ‘which account limit will I hit next’. Most of them require a support ticket to be raised, and justification.
how are the optimized encoders coming along? last i remember it was 1000x slower to encode than typical.
I came here to mention Welltris too, which I was surprised wasn't mentioned in the 3D section as it was an official Tetris sequel by the original developer. There are lots of screenshots of it on different platforms (mostly 8-bit) here:

https://www.mobygames.com/game/welltris/screenshots
"We shouldn't have to do that."

I don't know about that. I know most managers in embedded software go cheap on engineers and software assurance on purpose to get bonuses and such. The hardware side makes me think you haven't studied deep, sub-micron hardware much. I started looking into it a few years ago or so, just reading the slides on lots of stuff even though not understanding much of it. They helpfully put a lot in lay terms, though, with lots of comparisons. To say the stuff gets harder every time you shrink to a smaller node is an understatement, esp for solid state.

If anything, the modern flash should probably be considered broken right as they ship out of the factory. If not, the process nodes after 90nm or so just keep having more and more ways for individual components to screw up or change behavior across same wafer. Some happen instantly by design. Some happen later with aging. The memory technologies are closer to that analog level of things than most with harder verification. The high-density flash on newer nodes uses less-reliable tech than most just to operate at that low cost. So, they add all kinds of firmware and hardware tricks to try to make it work for a period of time like it's a whole, functional unit of storage despite pieces of it misbehaving all throughout.

It's a nice, man-made miracle these techs even work at all. Those that last longer like you mentioned still exist. I'll add a comment with links to one type so you can compare price/storage/performance to these broken-by-design SSD's you use. I'll throw in another two that mention shrinking challenges so you can see what they face every time they have to upgrade or just deploy new designs in mixed-signal.

https://news.ycombinator.com/item?id=18528023

https://www.electronicdesign.com/digital-ics/understanding-2...

https://anysilicon.com/ic-design-impact-in-moving-from-28nm-...
He said 'almost impossible'. Big difference.
From reading that blog and it's sister post about "flaky SMART data" on those same Crucial MX500 drives, reminds me that not all SSDs are created equal.

Just like not all hard drives are created equal. My previous job involved a decade running 10 cabinets of servers an hour away with very little manpower: we eventually came to find that IBM/HGST drives were a lot more reliable than others.

We also evaluated some early SSDs, and they were terribly unreliable. We eventually settled on the Intel drives and they were superb. My new job we've been using mostly Intel and Samsung Pro drives, they work great. But Dell sent us a server with some "enterprise SSDs" in it, that we eventually found were Plextor drives. Those things were terrible. We replaced them immediately with Intel, but used some of the Plextor drives and had all of them fail within a year. I'd put the Intel 64GB SLC drives from our 7 year old database server in a system before I'd put one of those brand new "enterprise" Plextor drives in.

I love Crucial, I buy a lot of RAM from them, but I'm skeptical of switching to other brands of SSDs. The more experience I have, the more conservative I get with systems that matter.
It depends on the target bitrate, but from what I've seen at high quality, the difference between HEIF and JPEG is comparable to the difference between H.265 and H.264.

I think your second point is more important though. There are basically two main cases for images. On the one hand, you have images which are an input to some process, like editing or publishing, where people are unwilling to sacrifice any information, lest the errors accumulate. On the other hand, you have images intended for final consumption. By modern standards, those images are already so small that saving 50% isn't usually worth either losing compatibility, or putting in extra effort to offer a fallback.

There are some in between niches of course. Apple has bet on one in iOS with phone photography. That makes sense because many people will have a large volume of images, but they're not professional photographers who need perfect fidelity. I don't know if that's actually worthwhile to most users, though, since they too have to deal with the compatibility issue.
"Less than two years after inauguration" is a very bizarre definition of "lame duck".
"The average driver" isn't our cutoff for allowing people to drive. Once the self-driving cars are safer than the most dangerous drivers that we allow, there's theoretically an advantage moving those people to self-driving cars.
That and as a user of 12 different LowEndBox-style providers, DigitalOcean is only marginally more expensive, with way less downtime, faster support response, an easy to use API, integrations with everything, and even planned maintenance windows which are clearly communicated.

Most of the lower priced options are run on a more shoestring budget and get uptime measured in the 98s. Also, I find a lot more noisy neighbors with many LEB-style providers.
"The fact is, if we accept Marriott’s statement that the breach began in 2014, the system would already have been operating securely for five years.

It is difficult to imagine how an architectural or platform vulnerability would not have been discovered or exploited sooner."

Not really. There's been vulnerabilities that have been out in the wild for quite some time and took years to be found. Sometimes it just comes down to luck/what people are trying to exploit.
Another source, with a softer paywall:

https://www.thestar.com/business/markets/2018/12/10/harvard-...
You’re gonna defend Trump on taxes? Is your brain infected with worms, Peter?
Nope. Since a long time, tracks are virtual (array of raw track IDs as a function of sector ID when the arm is held "constant" and averaged for X thousand RPMs as part of the per-drive firmware Calibration at the factory).
I agree, the problem is not the high tech equipment but faulty watchstanding practice. Whoever is driving the ship should not be looking at the high tech gear, they should be looking where the ship is going. Other watchstanders can feed that person information from the high tech gear if needed.
I agree with you on this. Ultimately I think there's an element of pride ("I don't get taken in by scams!") that I would do well to shed. But looking at the vague list of attributes:

- celebrity doctor
- passionate followers
- findings not accepted by mainstream medicine
- touts a worldview I want to be true

I have trouble seeing what's qualitatively different from your average daytime TV doctor selling supplements. The big distinction is almost certainly that people who seem smart recommend it, which as I mentioned to the poster above, may now be enough.
The article he wrote about Marriott's choice to continue using its z/TPF based platform over migrating to Starwood is also telling.

https://www.linkedin.com/pulse/marriottstarwood-back-future-...

See this quote "To better understand the resulting Starwood’s technology compared to industry legacy systems, think Tesla Model S versus a gas-guzzling 1975 Buick Electra.

Then along came Marriott . . .

When Marriott announced its interest in acquiring Starwood, one would have believed that they factored in a $500 million Starwood IP technology value within their $13.6 Billion offer, and that they would have been salivating at the prospect of having their hands on the fruits of the multi-year transformation experience this IP represented. After all, while stable as a rock, Marriott’s own system today centers around 1970’s Mainframe TPF technology (MARSHA) suitably kept current via the judicious use of the scotch-tape and wires represented by a cornucopia of front-end gateways and the labor intense support of inflexible legacy code, eclectic data bases, hard-coded interfaces, and a veritable zoo of different property management systems crying for better integration. "

It reads as sour-grapes to me.

If you wanna read more about MARSHA - this seems to be a good source: http://ibmsystemsmag.com/mainframe/casestudies/miscellaneous...
> It is almost impossible to imagine a scenario in which an external hacker is able to gain access to the primary encryption keys.

I worked some place where lots data was encrypted with a key. The key hadn't changed in months - at least 6 months by the time I found it. I was told this same key would be used to encrypt web session data in a cookie. There were more than a dozen people who I knew had access to the key, and another 5 had come and gone (and had had access to the same key) in the previous 6 months.

I know not all companies are run like that, but I suspect it's closer to the norm. Even in places where they want to be more secure, enforcing security policies often becomes an after thought to more important tasks (in places I've seen/worked).
Approaching that:

https://youtube.com/watch?v=SObnO6jnAD8

https://youtube.com/watch?v=PUwmA3Q0_OE
This in itself is a red flag: you should not be changing the watch during transit of a heavy traffic area. You do that well before you get into the heavy traffic area, and you put your highest skilled watchstanders on the bridge, so they have both the experience to handle heavy traffic and the time to build proper situational awareness before the heavy traffic builds up.
Web Application Security Challanges
He said almost impossible to imagine. It really was an extremely hyperbolic statement. I've never done security work but I've helped develop plans for when primary and secondary keys are stolen. It's something that should have been imagined, not "almost impossible to imagine".
Send an email (multiple over weeks/months) to their account "you've requested deletion, if this is incorrect click here". If you can't verify they want you to keep there data then you probably shouldn't keep it.
See, I really detest this argument because it's pretty low-level.

Yes, there is equally horrible shit going on with both sides. But that is absolutely no justification for accepting it.
I was surprised that there is no common file standard for interchanging dimensional data. As far is I can see netCDF and Zarr only store values/arrays and not the metadata? I will check if there is an easy way to import one of them.
You cannot port a Window Manager to Wayland. You rewrite a WM for Wayland.

(disclaimer: Co maintainer of AwesomeWM here, we are doing it by merging with the Way-Cooler project)
Wolfenstein 3D's FizzleFade
Use the generic singular "they" for persons of unknown gender?

> there is a good chance of of the other person's programming beliefs may play a big role in their thinking

Check.

Use the male pronoun for hypothetical person in detailed example who needs to be more flexible in his/her thinking?

> this social circumstance may necessitate that he adopt a new viewpoint

Where the female pronoun would sound awkwardly coercive and uninviting?

> this social circumstance may necessitate that she adopt a new viewpoint

Check.

I believe ilaksh has their bases covered.
Do you think that the majority of users feel the same way? I don't.
And the west isn't like this whatsoever? Do people actually believe this about china and think that the liberal west doesn't have state power seeping through every nook and cranny?
That’s actually not funny. If those activities were coordinated its a chilling message.
Does Australia's access and assistance law impact 1Password?
Why/what benefit?
Those "experts" were not experts in attribution, and the consensus is that they were wrong.

One is from Norse, a widely discredited and now defunct security firm, ironically infamous for their false attributions.

Two are journalists. Enough said.

One is Seth Rogen the actor. Enough said.

One is Sabu from LulzSec, a script kid turned FBI snitch, who is way out of his league commenting on this.

One is Marc Rogers, who I don't know personally, but I doubt he maintains his skepticism today. In any case, a security expert to be certain, but not an expert in attribution and not privy to the evidence (only some of which has ever been made public). Worth noting that he published followup blog posts to the wikipedia-linked citation that walked back his skepticism quite a bit (http://marcrogers.org/2015/01/24/wrapping-up-the-whole-sony-... - "In my eyes, the preponderance of evidence definitely suggests North Korean involvement or someone trying very hard to make it look like North Korean involvement."). He basically settled on it being plausible, but concerning, and acknowledged that he wasn't privy to the evidence.
2018 technology trends that'll matter a decade from now
gave firefox a try but what is up with the bookmarks? 4 clicks to get to them and the UI looks like something out of the 90s? am i missing something obvious?