skysight-inc/HackerNews huggingface dataset:
I agree with your point I think, however all of the Gettier cases that I know of seem to be examples of a particular choosing of the fact. In the cow example, he had a justified true belief that there was a cow in the field, but if you had phrased it more naturally as 'I know that that black and white shape I see in that field is a cow', that would not have been true.

I suppose the point is just that having a justified true belief purely by chance, almost certainly depends on the justification itself being a false belief, even in true Gettier cases.

Anyway, I find the whole thing fairly unmysterious - I just take 'know' to be a particularly emphatic form of 'believe', and I like your conclusion.
Data Profiling with one single command
Ya wtf!!
I have a Grand Cherokee that receives OTA updates and has an LTE connection as do the new Wranglers. I can even use it for a hotspot. My parents Lexus can also receive OTA updates.

Your statement is untrue about OTA updates. Tesla might have been the first to do it in 2012 but most companies are doing it already or plan to.

GM and Ford plan it for 2020 and Mercedes and BMW have announced it in the past year. The Japanese makers are usually more reluctant to adopt new tech.
Having switched from Evernote about 6 months ago, here are some of the biggest positives and negatives to me -

Biggest positive: The variety of formats & integrations. I use “toggles” and tables a ton. This was the main reason I switched and it’s enough of a differentiator to keep me around.

Biggest negative: Notion doesn’t handle a large volume of notes well. There is no easily accessible metadata, no tagging, no way to see a table of notes sorted by create date as far as I can tell.

Other observations:

It’s terrifyingly easy to delete a note and not realize it. Notes show up as a line item in their parent note; a simple press of the delete button and a note is gone with no warning

Sharing is also a little funny. Shared notes show up in a separate workspace and are easy to forget about.

Also, no offline support at all... if you aren’t connected, you can’t do anything on the desktop or iOS app.
While I understand your point of view, I think the plausible deniability network owners get frees them from much risk and burocracy.
California’s Monarch Butterfly Population Hits Record Low
I don't but I know some people are delighted at the sound of some sport cars.

I don't disagree. But in context.

On track day at the local race track? Sure. At a professional sporting event? Great. Going down a residential street when people are trying to sleep? No way.
Exit nodes aren't the killer feature of Tor anymore, everyone blocks those easily, it's hidden services.
I think Apple and Google products as they are the simplest without dark patterns.
Right... but then how do the Gettier exceptions fit into that not-so-original insight?
(Disclaimer: I acknowledge that I was raised in a pretty liberal state) I was surprised to hear that the singular “they” was controversial. I had been using “they” to refer to hypothetical individuals of unknown gender pretty much my whole life. Extending this to specific people of unknown gender doesn’t seem like a far leap.

It seems more like manufactured outrage, committed in varying degrees by both sides of the issue. Not everything in life needs to be a crisis of conscience.
I always thought it was related to older terms that linked hate with fear, like "yellow peril". Older racist beliefs like this often played into fear, and I can't help but wonder if historical hatred of LGBT+ people was also based on fear.
https://m.youtube.com/watch?v=cdPymLgfXSY
I think the Zelda 3 (NES) prototype is largely considered a hoax, as far as I can tell, but this page does reference a Zelda 3 for the SNES that was scrapped and some of its ideas were repurposed for Link to the Past.

https://zelda.gamepedia.com/Community:Zelda_III_Cartridge_Ho...
> Man-in-the-Middle attack does require the victim to accept the wrong host fingerprint.

This should be a WONTFIX.

The idea that it could be not only a man-in-the-middle attack but simply a "malicious scp server" is completely ridiculous.

No secure login or transfer method can protect you from the actions of a malicious server, which could be anything.

If I have the root privs to install malicious software on the server, why would I muck around perpetrating a scp exploit on remote users.
I've had the opposite experience. I lived in downtown SF. The noise of a loud motorcycle going by is substantively different from the ordinary background noise of city life. Unlike every other noise, you can't e.g. talk while it's going by.

There is very good reason to treat it differently from the usual honks and airbrakes.
What's the point of using Typescript if everything is typed as any or provides no types at all (as demonstrated in the article)?
That was really cool to read and I appreciate the links. Can you talk more about your setup on DO? Why are both icecast and shoutcast servers needed? And did you transfer all of your music to DO? Thanks!
Of the two options, I'd have to go with "crazy". There's zero chance it would get past regulators, particularly in the EU, and the industry wouldn't like it either because there would be nobody left to hold Intel and nVidia's feet to the fire.
And if you don't have caves you can just pile dirt on top of your habitats. Dirt is one potential export from a lunar settlement. Everywhere outside the Van Allen Belt needs radiation shielding and dirt doesn't mind being violently accelerated in a mass driver.
Maybe? All I can say is that last couple of times I transited through LAX, I had to go all the way out through security and passport control - I could have walked out the front doors of the airport - and then all the way back through. It was the same flight number, and the same physical plane that I was getting back on!

I then decided that was too much of a pain, and flew through Dubai instead, which has a vastly superior transit experience!
RealPlayer
New Method for Compressing Neural Networks Better Preserves Accuracy
> In Denmark, we've had 'cinnamon patrols' go from bakery to bakery to verify that only the allowed amount of cinnamon was sprinkled on buns.

Is this for real? I know it's anecdotal but I find it hilarious

> I could write a list much longer, but in general I think the Unix approach works: Many small things that each do one thing well. The EU is the opposite: One giant thing which does nothing well

Well...I'm sure many could point out somethings that the EU has done well...I guess at the heart of regulating cinnamon buns is the issue of standards...that specific instance is probably an overkill but having a common standard of electrical equipment produced/imported to the EU makes sense...at the very least you could argue that some member states have benefited considerably although that may not necessarily be attributable to EU policy
This tool is awesome.

Total side note and blatant plug but if people are interested in open source checklists and lessons on digital and physical security (from how to send a secure email to how to detect physical surveillance) checkout Umbrella Security, a free open source app we built. It’s on Google Play and you can find out a bit more at https://www.secfirst.org. iOS and totally new version due out in Feb!
Urban planning is a factor too. Someone decided that trees dropping fruit everywhere was messy, so urban planners made a blanket recommendation to only plant male trees. https://blogs.scientificamerican.com/guest-blog/botanical-se...
A few more recent airports have been built to make this change possible should policy ever shift. IAH was specifically designed to allow future sterile transits without major construction.
Indeed, it all breaks down because of the Taylorist approach. True agility would recognize that most of the time software is implementing a "business process", and that there are real benefits to being able to change the process outside of the software. There is also usually a chunk of "tacit knowledge" - how the workers actually implement the process differs from the official manual in ways that are not usually written down and that management don't know about (indeed usually insist that they are kept hidden, by punishing deviation from the written process while ignoring feedback).

Implementing a process in software overwrites the tacit knowledge that may have been keeping an unworkable process running.
> 2. CWE-20: scp client missing received object name validation [CVE-2019-6111]

> Due to the scp implementation being derived from 1983 rcp [1], the server chooses which files/directories are sent to the client. However, scp client only perform cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example overwrite .ssh/authorized_keys).

I don't understand why this is considered a vulnerability. The user provides scp server-side shell code to describe the files it wants. How's it supposed to verify object names then? Am I the only one that likes to do things like the following?[1]:

scp server:'$(ls -t | head -1)' .

or

scp server:'*.pdf' .

An argument could be made to have scp implement a glob pattern matcher, but that wouldn't be shell agnostic (I doubt we'd get support for zsh-style `*.pdf(oc[1,5])`) and it wouldn't include support for process substitution or any other way the user might want to specify files.

scp already describes the files it's writing to stdout. I don't see what more it can do without sacrificing usability.

The possibility of a compromised server writing things that have nothing to do with what I asked just seems like an acceptable consequence for the power scp provides.

[1] - Please, discussions about parsing ls output are besides the point, right now. Heuristics are useful too, at times, for ad-hoc portable practices.
And the "fix" for people who bought the car before then was adding an option to disable the automatic unlock (so you have to press a button) and/or require entering a PIN to actually drive the car.
Frustratingly these landscapes are often seen as natural in places where they've been around for a long time, a problem of shifting baselines. I was going to point out that this is a huge problem in Ireland, where the landscape is sheepwrecked, but the article uses it as an example:

"The land would resemble a feature in Ireland called the Burren—an expanse of rundkarren produced by overgrazing and logging, marked by fissures that hint at the fathomless void beneath. "

The burren's OK, but it would be nicer as forest.
Not at all - when flying through Miami on a way to Bolivia in June last year, we had to get a full US visa (which caused us tons of problems due to company issuing them for wrong country, making them invalid).

Maybe it depends on airport design, but in Miami there is nothing stopping you from leaving the airport. In fact, we also experienced various issues with flights, and had to literally get out to check in area and chase airlines to take us (it is a long story, full of drama and missed flights due to external errors/issues).

US is special in this, now we heed the advice of many - don't travel through US in any way, potential troubles are not worth it.
Honestly, a google home or something similar seems to be the right way to go - while it's not "secure", it's incredibly intuitive, can't be misplaced, and has most of the functionality you'll need, and I imagine as time passes it'll develop a lot of the rest.
I couldn't quite follow what the article was saying about "anaytical paths", but I think they're talking about spurious correlations.

I worked on a stats app. We referred to the problem of finding correlations from data as "the green jelly beans problem" after https://xkcd.com/882/ . There are techniques to deal with it like https://en.wikipedia.org/wiki/Bonferroni_correction .
That's funny, I really thought that I just coined the word. I guess that rule 34 really applies!
Reading the article and looking at SLD Laser's website leads you to believe that they are shooting lasers out the front of the emitter. They also both implicate the BMW 5 series. BMW demoed a laser headlight system to Jalopnik and it doesn't work that way at all.

The lasers are fired into a phosphorous element to excite it into emitting light which is then reflected down field. The advantages of this over LED and other tech is that it uses less power and produces less heat.

https://jalopnik.com/how-bmws-new-laser-headlights-will-work...
> over such distance and given such cost

The moon is just a few days away.

The costs are not a given. With new better tech, then can come waay down.

Also note that the freight ships need not be manned.
Yes, this was my gut reaction to the Gettier exceptions as well. But you picked out the specific detail that seems to clinch it for me: the framing of the "fact" under question matters greatly.
Or you'll be demanding that the toaster tells you the weather.
The introductory paragraph mentions that the specific lottery was discontinued.
It requires four heads to cover even "20/365" (half the night "closed") and four is, in fact, short for true 24/7/365 = 8760 hrs, while a person works 2,000 hr/yr x 4 = 8,000.

If you try it with less, you're lying to yourself and everyone else.

(me: worked rotating shifts in a 24/7 operation for years)
> I've thought this too but then you are leaving the future to those who breed more irresponsibly.

The movie "Idiocracy" addresses this very issue. It's a comedy, and I really enjoyed it.
It's not international territory in any way, it's US territory. International airports being ports of entry is a bit of a legal fiction, because it's not feasible to conduct immigration and customs inspection immediately when the airplane enters US airspace. That doesn't mean that it's not US territory in any way.

Aliens (with certain exceptions) need either a US visa or an ESTA to transit through the United States. Technically speaking, the Immigration and Nationality Act permits transiting through the United States without a visa if certain conditions are met, but in practice this is not allowed anymore.
But I feel this logic completely ignores "inbreeding" even if it's to the 5th, 10th or 20th degree.

It's like seeing a human as the root of its ancestors tree, and saying that this tree is well balanced all the way to the nodes at depth 100 or so. But surely it's not a well balanced tree, more like a directed graph with many sideways connections. There could be multiple clusters, lineages, more or less narrow, coming from the bottom and reaching the top.
Philosophy major here. Didn't read the article, but will point out:

The significance of Gettier problems as we investigated it is the exposure of an entirely _wrong_ mode of philosophy: philosophizing by intuition. Ultimately, the reason Gettier problems are significant is because for philosophers, the textbook Gettier problem works because _for philosophers_ the problem captures their intuitions of knowledge, and then proves the case of knowledge fails.

Most normal people (i.e., not philosophers) do not have the same intuitions.

After Gettier analytical philosophers spent decades trying to construct a definition for knowledge that revolved around capturing their intuitions for it. Two examples are [The Coherence Theory of Knowledge][0] and [The Causal Theory of Knowldege][1]. Ultimately nearly all of them were susceptible to Gettier-like problems. The process could be likened (probably) to Goedel's Incompleteness proof. They could not construct a complete definition of knowledge for which there did not exist a gettier-like problem.

Eventually, more [Pragmatic][2] and [Experimental][3] philosophers decided to call the Analytical philosophers bluff: [they investigated if the typical philosopher's intuition about knowledge holds true across cultures][4]. The answer turned out to be: most certainly not.

More pragmatic epistemology cashes out the implicit intuition and just asks: what is knowledge to us, how useful is the idea, etc. etc. There's also a whole field studying folk epistemology now.

[0]: http://www.oxfordscholarship.com/view/10.1093/acprof:oso/978...

[1]: https://en.wikipedia.org/wiki/A_Causal_Theory_of_Knowing

[2]: https://en.wikipedia.org/wiki/Pragmatism

[3]: https://en.wikipedia.org/wiki/Experimental_philosophy

[4]: https://en.wikipedia.org/wiki/Experimental_philosophy#Episte...
> We are talking about a company that made electrical vehicules economically realistic in a oil-addidcted world.

When did that occur? They're still selling $40K+ cars while their competitors are selling cars in the $20K range; Tesla cars continue not to make financial sense, they're a luxury good.

Dollar per dollar the best bang for your buck is still likely hybrid vehicles followed by the cheapest electric vehicle you can find.
> ...4 year gap...

I don't think it was open in the first place, was it?
JS is the most popular language. Thus most software is wasting orders of magnitude more energy than it should. The same functionality would require less than a tenth of processing power (and thus energy and physical hardware) if it were implemented properly.
Show HN: Code to Graph: Visualize JavaScript code as a network diagram
It will by then.
I share your worry about not being able to inspect communications for various apps and devices purely from a privacy advocacy perspective.

If you own a device, and said device is transmitting data from your environment, you should be able to know what information this device is communicating. It is not enough to trust a company privacy policy.
XUL and Rust are also absolutely not used in the same place. AFAIK there's no Rust code in the mozilla codebase which actually layout widgets in random UI forms.
Antispam Measures
(I'm from the FDB team and work on the Record Layer.) As ryanworl's excellent answer suggests, the FoundationDB key value does not support secondary indexing on its own. It is strictly an ordered store mapping byte-array keys to byte-array values.

Secondary indexing is a core feature of the Record Layer, though! It includes a variety of secondary index types. The simplest are implemented using essentially the same strategy as ryanworl outlines (with more details on how that index works available in the key-value store documentation: https://apple.github.io/foundationdb/simple-indexes.html). And index updates are all entirely transactional (i.e., as the index update happens in the same transaction as record insertion, they are always consistent and up-to-date). However, all of that happens behind the scenes. The API presented to the user only asks for what record to save (update or insert), and then the Record Layer updates the appropriate indexes using a user-provided schema. Importantly, the Record Layer also supports handling the various stages of index maintenance (e.g., deleting an index's data after removing it from the schema or filling in data from existing records after an index is added). More can be found within the Record Layer overview: https://foundationdb.github.io/fdb-record-layer/Overview.htm...
Of course it is. You can immediately and permanently eliminate all of your CO2 production going forward. That's a big help to the world, not very useful for yourself though.

Obviously if we eliminate humanity we also eliminate humanity's impact on the world. You can also get rid of all bugs in your code by deleting the code. That is the exact definition of throwing the baby out with the bathwater though. We're looking for ways to eliminate humanity's impact without eliminating humanity.
Yeah but wouldn't it be cool if when you spin the mouse wheel it takes ten revolutions and then the page scrolls over sideways, and then you spin it another ten times and it scrolls sideways to page three, etc?

True story. I forget where, but I assume they just didn't bother to test it on anything but a Macbook trackpad.
Often it's the same doctor who will refer you to themself in the NHS after an initial private consultation if they work out that the insurance company isn't going to pay enough for your treatment to make it worthwhile.
This is about risk assessment. Most vulnerabilities in browsers are either in JS or in media support. Pure-HTML+CSS exploits are rather rare these days. Therefore, disabling or limiting JS and media reduces risk drastically.
The implication here is that you can't trust the devices on your network. IMO that's itself a problem; rather than weakening encryption to enable network owners to analyze traffic on their network (which also harms dissidents who need secure network access), I would prefer a push for more trustworthy devices.

The devices we own should be acting in our own best interest; we shouldn't need to treat them as adversaries.
The actual author has been scrubbed, presumably as part of the declassification, but the organisation responsible is https://innovation.defense.gov/

I see Neil deGrasse Tyson and Eric Schmidt on there, but I very much doubt they've seen this document.
The Record Layer is written in Java as it was designed to fit in with an existing stack that was already primarily Java-based. You can read more about how CloudKit uses the Record Layer in the preprint of the Record Layer paper: https://www.foundationdb.org/files/record-layer-paper.pdf

Excellent question regarding the choice to use Protocol Buffers. Firstly, as mentioned in the paper released last year, CloudKit uses Protocol Buffers for client-server intercommunication. As a result, there was already expertise around protobuf, which is a good tie breaker when evaluating alternatives. (Here's that paper, by the way: http://www.vldb.org/pvldb/vol11/p540-shraer.pdf) Secondly, the Record Layer makes heavy use of Protocol Buffer descriptors, which specify the field types and names within protobuf schemata, and dynamic messages. Descriptors are used internally within the Record Layer to do things like schema validation. (For example, if an index is defined on a specific field, the descriptor can be checked to validate that that field exists in the given record type.) Likewise, dynamic messages make it possible for applications using the Record Layer to load their schema at run time by reading it from storage. The FDBMetaDataStore allows the user to do exactly that (while storing the schema persistently in FoundationDB): https://static.javadoc.io/org.foundationdb/fdb-record-layer-...

The Record Layer's data format is not compatible with the specification specified by Apache Arrow, no.
All it would take would be for Tesla to send out a verification check to get software signatures from all running that have phoned home anytime in the last 6 months. If something doesn't match, Tesla calls you up and tells you your car is fucked and to come get it serviced. If your car doesn't phone home yet still is pulling data from the internet, Tesla would know and suspect it's compromised.
How is it not a JTB?

Belief: The pull request broke the search field auto focus.

Truth: The pull request did break it. There was an additional reason beyond the pull request unknown to the author, but that's not important to the Truth portion here.

Justified: This is the only one you can really debate on, just as philosophers have for a long time. Was he justified in his belief that he broke autofocus? I think so based on the original JTB definition since there is clear evidence that the pull request directly led to the break rather than some other event.

I think that when claiming it's not a JTB you're choosing to focus on the underlying (hidden) issue(s) rather than what the author was focusing on, which is kind of the whole point of Gettier's original cases. For example Case I's whole point is that facts unknown to Smith invalidate his JTB. In this programming example, facts unknown to the author (that someone else introduced a bug in their framework update) invalidate his JTB as well.