skysight-inc/HackerNews huggingface dataset:
To further clarify:

> You make two documents A and B, A is an ordinary seeming true statement which you can get certified, while B is something outrageous nobody would certify,

This does imply that the attacker only has limited choice with respect to A and B. They can’t just be random bytes: A has to be not only a syntactically valid X.509 certificate, but one that a legitimate CA will generate (based on the attacker’s inputs in a Certificate Signing Request) and sign, while B has to be a syntactically valid certificate which is useful to the attacker to have a signature for. However, in practice, collision attacks tend to let the attacker arbitrarily pick parts of both messages, while other parts are chosen by the algorithm and do look like a large amount of random binary gunk. In this case, most of the fields of an X.509 certificate are not adequately controllable and/or not large enough to stick the gunk into, but there’s one exception: the public key field, which just happens to be a large blob of binary data that’s chosen by the attacker and expected to look random. So that’s what was used, in the famous proof-of-concept MD5 certificate forgery from 2006 that resulted in the random serial number requirement being added. More details:

https://blog.cloudflare.com/why-its-harder-to-forge-a-sha-1-...
24th Dec 2018 Getting Started with Web Performance: 2019 Beginner’s Guide
If you're going to hold that against them, LastPass is just as bad:

> During a workflow to derive the decryption key, the master password is leaked into a string buffer in memory and never scrubbed, even when LastPass is placed into a locked state.
While you have every right to be upset at that dick, you could act more mature by not feeding the troll. There is no victory there to be had. Either way I don’t find this a big deal. The legal assistant email is just asking for it. I’ve dealt with a few of these but some from actual lawyers, you can have some fun with those if you know the law.
Honestly not sure what to say, I see it constantly in Manhattan, as a pedestrian.
I'd say so. I think especially "management" (we're mostly a flat company, so management including founders is more of a counsel) are big proponents of using Asana.
Recently a patch was contributed to gcc that converts mmx intrinsics to sse. Also the gcc power target supports x86 vector intrinsics, converting them to the power equivalents.

It's not as ambitious as your approach though, more like a 1:1 translation and thus cannot take advantage of wider vectors.
For Samsung owners I've heard good things about SABS: https://www.androidsage.com/2018/03/29/download-install-sabs...
I’m not sure how many people would agree with the characterization of brain waves as a signal propagating force.

I think you’re probably right that they are, but there’s still an on-going and fairly contentious debate over the extent to which the LFP reflects vs. changes transsynaptic currents.
What's with this trend of not having issues on GitHub?

Do I really have make a PR first to discuss any bugs that I found?

(I say trend, because I'm noticing it more and more on open source projects.)
It looks pretty interesting, the only thing that's turning me off is that it's the first time hearing about some of those technologies, so I'm not sure how safe of a choice they are compared to more established solutions like Sequelize.

Also, knex.js is not really an ORM layer, just a query builder?
I agree. It worries me that public conversation gets policed by companies whose main goal is to sell ads to the highest bidder. By definition they will have to prefer information that makes them money over information that doesn’t make them money. They are also very vulnerable to pressure from governments.

In addition you have no real recourse if the big machine doesn’t like what you posted.
New Collaborative Text Editor in Aha
As I understood it, and as far as I can remember, the Mill AOT compiler has an easier job than that. The generic image already contains the parallelized instructions, the AOT just has to split those who are too wide for the given CPU.

Been a while since I saw the AOT talk tho. And as mentioned, so far it's all talk anyway.
Great start, if you keep at it i'd love to see more of the advanced stuff. I feel like we're all hitting problems like skew and it would be cool to have a reference for dealing with those.
Interesting, so their augment is essentially that the memory-safety provided by the use of a memory-managed language is more valuable to them from a security standpoint than the memory scrubbing capabilities afforded by a lower-level language?
"Success in the movie industry relies on a studio’s ability to attract moviegoers—but that’s sometimes easier said than done"

No it isn't. Just make a good movie. Forrest Gump didn't need any machine learning.

The only reason someone might use this is when your strategy is "spray and pray", create crappy movies that insult everyone's intelligence and you need to figure out is it worth launching at all.
Cynically, it's a recruitment expense -- there's a pretty good probability of getting a good hire from posting this widely.

It's not, to my mind, an actual corporate handbook -- it's missing boring important things like "here's our password and security policy, please remember we have people's super-personal health data in our apps, so it's really important". I guess that's probably in the company Wiki or similar.
The Angular Conversion Part 4: What We Couldn’t Automate
Robots That Can Adapt to Any Environment
There will still be bike-bike collisions, also exclusive roads for bicycles are usually of low quality not up to engineering standards for roads, they will be full of dirt, unmaintained, with potholes. Most bicycle accidents are not even collisions with cars. The truth is, it is more convenient for motorists to remove cyclists from the road so they have them all exclusively for them, that is just not fair nor safer.
>how many layers of abstraction can you add to an ecosystem before it is unusable?

Isn't this even more true when speaking about serverless and all the surrounding technologies?
In the end they will always go for more money despite all the talk about values.
I have 50+ entries in my password manager. Even if I use passphrases, I couldn't remember them all.

There's no such thing as perfect security, and IMO a good middle ground is memorizing a long, strong passphrase to unlock a password manager full of random PWs for individual sites.

I guess you could write them down instead, but personally I'm much more worried about someone stealing a physical notebook than getting malicious software onto my computer.

(For example, what happens when you cross a border and an enterprising young border officer photographs the contents of your passwords notebook? This would be perfectly legal in most countries.)

I would assume if that were the case they can intercept the password from the paste buffer anyways.
Runc “Breakout” Vulnerability Mitigated on Flatcar Linux
All else being equal, I'd agree. The low standard might at least filter out some of the false results.

But all else is not equal. The pressure to publish something interesting, even if false, greatly outweighs the incentive to be accurate, and overwhelms whatever filter the low standard might provide.

Even the author of this article acknowledges the problem:

> When I write a paper, I have to deal with co-authors who push for putting in false or misleading material that makes the paper look good and my ability to push back against this has been fairly limited.

To their credit, the author makes some effort to point out the flaws in this study, and acknowledges that this is just "a preliminary result that is, at best, weak evidence."

That's a start, but obviously not as good as actually putting in the work to correct those flaws.
I have between 1-2% battery usage.
Controversial GMO Mosquito Experiment to Fight Malaria Kicks Off
I hadn't heard of Safecast before. Very interesting! Nice data sets there, too.
I'd guess in the classification of the authors, SVE would qualify as a "real" vector ISA. SVE resembles the risc-v vector extension quite a lot.
You have `CSharp` in the list, but it's not returning any results.
probably true to some extent, but then driving experience of some older car (many of which still work perfectly fine) should cover this possibility
uber fills that niche already.

Uber doesn't fill that niche. I'm talking about a long-term rental whereby the car is guaranteed to be available to me during specific time windows. Uber is only for one-off trips, not a long-term replacement for my commuter car.
The tech crowd are their first customers. There's no downside to listing the microphone, so why not do it?
Curious, is cat more complex object than human's face for ML to be trained and produced?
Absolutely, there's a sort of double-speak going on here.
If we define toxic as they did "harmful to the org" then HR, or even the CEO can be toxic (i.e. not good for the company). Heck, by this definition, even unions might be "toxic."

But in practice, 9/10 times when somebody says "toxic" they really mean rebellious (i.e. disagreeing with management decisions, calling out dishonest messaging, asking for transparency over management mistakes, sharing frustrations).

The article uses a loaded term to create a false-equivalence between "harmful to company" and "rebellious."
You can see more photos in section below on Indiegogo.

Also, we prepared secret -42% offer for you and your wife:
https://www.indiegogo.com/projects/2467160/x/20395365?secret...

Thank you. Main() team
Evolution does not always keep only the positive mutations, it keeps mutations that are also useless because there is no pressure to remove them (some mutations could be useful for future generations) and some bad mutations are kept around if the impact is not significant.
Nasa's New Mars InSight Weather Station Detects Bizarre Infrasound
If it’s convenient for motorists that I get a segregated cycle lane, I’d be very happy to go along with it. Are there cyclists who don’t like cycle lanes and prefer to share with cars?
"You end up with a big graph of actors" - you are almost certainly doing something wrong, the actor graph shouldn't need to be "big", and the supervisor hierarchy almost never deeper than 2-3 levels.
A typical mistake when doing actor-based system design is to think that actors are replacements for modules or classes (or taken to the extreme: function calls), which is not the case.
> These repeated accusations of dishonesty don't contribute to a real debate.

Neither do all the fallacies. I'll stop pointing them out when you stop throwing them in.

> I see capital's potential to improve returns as limited only by human creativity and the capital (physical and intellectual) available. Labor's productivity is largely determined by the capital applied. This is why modern workers produce so much more than stone age workers - they have the resources, techniques, and equipment needed to produce more than our ancestors could.

You see wrong, then. Did it ever occur to you that people might be more productive because of advances in knowledge, which are independent of capital? Because of markets in which people can exchange the fruits of their specialized labor, even if little or no capital was involved? Physical capital certainly can improve productivity in many industries, but there's way too much financial capital out there that's not really tied to the physical kind. There's no reason arbitrage, rent seeking, and flat-out betting should be taxed more favorably than making stuff.

> Like when FDR banned Ford

Yeah, like decades after Ford had already become a tycoon, and had no effect on whether he remained one. Exactly like that, except not at all.
Can you confirm that it's not rewriting the URL to https://yc.dev first before issuing a request to the network? It's possible that Safari has suffered some kind of regression. This definitely used to work at some point.

I can confirm here in Chrome and Firefox that the URL is rewritten internally to https://yc.dev (which then redirects to https://ycombinator.dev), so no unencrypted traffic is ever sent over the network.
C# Generics and When We Use Them
I certainly hope not, the first "cat" I was shown had a human face.
You’re confusing economic systems with governmental systems. It’s entirely possible to have capitalist monarchies, for example.
Might be that there is a difference between the quality and quantity of the training sets.
If you are a tech company you should know that require an email adress for a download link is a bad design. Because only marketing people do that...
Please don't try to hide the fact that you DID want to harvest valuable email adress from HN. It's too late.
Neither pedestrians nor drivers follow traffic laws in NYC. "Go when you can, don't hit anyone" seems to be the only "rule" anyone follows. I'm continuously surprised at how well it works.

In a year of walking around midtown, I've only seen one person hit by a car and it was very much the pedestrians fault fault. They walked out from behind a hot dog stand into the street, not at a crosswalk.
https://thatssoft.com/macsome-itunes-converter-crack/
The threat model used for this assessment pretty much never happens in reality. If you're arbitrarily reading memory using software, then you can also install a keylogger or steal clipboard contents, which the authors themselves concede no password managers can protect against. So what's really being evaluated is how well password managers can withstand physical attacks (DMA/coldboot), which isn't a concern for 99.999% of people. Furthermore, if your attackers had physical access, they could very well install a physical keylogger to steal your passwords, bypassing your password manager's countermeasures entirely.
Yeah, I was worried it was the thermostat too. Hopefully that day will NOT come when they tell us all their products have microphones in them.
Cute idea, but about half of these have given me very weird/unrealistic results. For instance this[1] one which, while amusing as hell, isn't exactly convincing.

https://i.imgur.com/g5bHmH6.png
That doesn't really explain why even the license plates remain clean, does it?
I bet this is one example of many on how they use ML. This is probably their least capable predictor- but a good example to signal that 20th Century Fox has entered the 21st Century.
https://www.hortmag.com/plants/fruits-veggies/vegetable-crop...

Seems to indicate most of our food would be fine without pollinators. We would lose tree fruits, berries (but not grapes), and melons. Nightshades would become more work, and everything else is pollinator optional.

I have heard that orange groves have humans pollinating them in many cases, so we might not lose all tree fruits either.
I'm curious about this too.

There still seems to be interest in the project. The forum gets new topics posted every few days [1] and Anarki, a community ran fork of Arc, shows recent commits [2].

[1] http://arclanguage.org/forum

[2] https://github.com/arclanguage/anarki
Overall this article has some really good advice. But I have come to realize that a violent stance--"fighting" to "kill" a "toxic ego"--reinforces a separate, negative part of yourself, and it becomes stronger, subtler, and can eventually become another kind of ego on its own. Ego is all about division and separation, and to truly diminish its hold, we have to take another approach: to embrace it (but not to indulge it), to understand it, to invite it to tea.

In today's egotistic world, we need to cultivate a healthy ego, so that we don't sacrifice ourselves to unworthy causes. Ego is an important psychological tool that, when wielded wisely (with intention and awareness, as the article points out), can be very powerful and positive. We just need to make sure that we're in the driver's seat and that we don't let it take over. And especially that we don't come to believe that our collection of ideas about ourselves IS ourselves; as long as we remember that it's just a game--a mask, or a shield that can be dropped at a moment's notice--then we'll be okay.
We Don’t Need Private Health Insurance
I'm using Pi-Hole on an Ubiquiti router together with WireGuard and DNSSEC. My Synology NAS is backup (with regards to the DNS-based Pi-Hole blocking) taking the adblocking load off the router (there's no redundancy for WireGuard endpoint though). I don't (need) to use a RPi anymore. It works extremely well for me, and all my clients also get to connect to Nextcloud running on the Synology.

My setup does far more than just blocking ads, and works transparent as long as the client is connected through WireGuard (which works seamlessly over LTE and public WiFi).

That being said, I really like how Blokada and DNS66 are available in F-Droid [1] [2], and require minimal technical knowledge to set up. The more [ad blocking], the merrier.

As a backup measure I use Firefox with uBlock. The only machine I don't use uBlock is on Kali because I want to see the website exactly as it is being served.

[1] https://f-droid.org/packages/org.blokada.alarm/

[2] https://f-droid.org/en/packages/org.jak_linux.dns66/
ThisCarDoesNotExist or ThisDressDoesNotExist would be fun. Can see them monetized nicely.
Itanium had a lot of instructions like that IIRC. But has been awhile since I read anything about that.
I’ve made the same basic comment before, but we need to ban the residential use of herbicides and pesticides. I spoke to a beekeeper who had two hives wiped out by Mosquito Squad spraying on an adjacent property.

I recently came across a 1997 paper called: "Producing and Consuming Chemicals: The Moral Economy of the American Lawn". They cite a higher per hectare usage for residential over agriculture. We need to get rid of our lawns they are literally destroying the planet and they are greenhouse gas emitters when you factor in gas powered mowers and leaf blowers. Fertilizer emits nitrogen oxides that are potent greenhouse gases.

The paper is interesting as it talks about how lawns are marketed. Unfortunately lawns are a multibillion dollar industry. If we are going to fight climate change and environmental degradation, we need to seriously rethink letting business needs take priority over the environment and not just for lawns.

We need to allow people to have native plant yards. I've seen great results with insects. Unfortunately it's illegal where I live and probably most non-rural places. In order to allow this would mean changing state and local ordinances across the US. I honestly don’t think that will happen until it’s too late. By then lawns will be the last thing we will care about.
Ack. Almost every other made me say “I should hope not!”. A lot of deformed kitties there, algorithm needs work.
Psychiatry, psychology etc aren't doing a great job with that.

I'm not sure that's a fair criticism. They're certainly not doing a perfect job but the number of people who have a higher quality of life than a century ago is a real success.

There are people who are living fulfilling lives who would have been housed in mental institutions or who would have long since killed themselves, given the state of mental health care 50 or 60 years ago.
> The conclusion of the article is that even though we don't have conclusive research, the early signs are worrying and the risks are far too high to wait for better data to act.
>
> This is the problem with things like climate change and ecological collapse.

This is absolutely not the problem with climate change. The problem is some people decided to believe a comforting fairytale instead of the scientific facts.
Surfshark is a paid VPN, I would never choose to use a free VPN. Furthermore, Surfshark has been audited by Cure53 to check their browser extension security and got a good review https://cure53.de/pentest-report_surfshark.pdf To put it short they earned my trust.

And I use several browsers, totally agree Chrome is a poor choice but I don't expect people stop using it, might as well use it as safely as possible :)
If you run WHOIS on yc.dev you'll see that it was created prior to the beginning of the early access period yesterday. Also see: https://newgtlds.icann.org/en/announcements-and-media/announ...
I don't think Ada has anything like the Rust borrow-checker! A feature-set comparable to SPARK will need to wait until a better characterization of Rust Unsafe code is achieved, but in the long term it is absolutely a goal to be able to write Rust code that carries "contracts" for its use of unsafe features, and/or "proofs" that the code meets some specification.
I mean, "mark as spam" is basically "burn before read," which is what I did to him. The difference, I guess, is that I told him I was doing it, because, like I said before, I think ghosting people is rude. YMMV.

Regarding quoting a ridiculously large number to add a requested feature, yes, sometimes I do that, and sometimes people even take me up on it and I end up both adding useful functionality to the software that everyone gets to benefit from, and making some money out of it as well. But I won't do that when the feature being requested isn't actually the right way to solve the problem. I've explained in another comment why it wasn't in this case. I'm not going to let someone pay me to make my software worse, and if you quote a price to scare someone off, sometimes they surprise you and say yes.
Reposting my comment from the previous submission:

From a Washington Post article on this study: "LastPass had me speak with its top technical executive -- but it also got [lead researcher] Bednarek banned on Bugcrowd, the site for researchers to report flaws, because he disclosed the bug to me."

https://www.washingtonpost.com/technology/2019/02/19/passwor...

More from CyberScoop:

https://www.cyberscoop.com/bugcrowd-adrian-bednarek-lastpass...
To be honest, we're currently not really thinking of growing the company much. But you're right.

However, this whole thing started out as a Onboarding Handbook for new team members. Then however we thought it's also a great book to share with the world. So we decided to remove certain items and have those in the internal wiki only.
A somewhat out-of-date Chromium (69). I should upgrade, but I'm surprised the change is that recent.
Good advice. Back when I ran a small ISP a customer asked to register gov.com and we got it! Soon after I wondered why my DNS server was bogging down. There were hundreds of requests per second to whitehouse.gov.com. We got the NSF to block that from ever happening again.
What does DNS66 offer over NetGuard? Near as I can tell, they both use the VPN functionality to work, both don't require root, and both are available on F-Droid.

Edit: I guess Blokada is another to consider, just heard of it from this thread.
Also https://newgtlds.icann.org/en/announcements-and-media/announ...
Anyone use this font as their daily driver (so to speak)? I'm skeptical of the readability and hour-to-hour fatigue.
Which filter lists do you use? I find a few ads still get through on the default settings.
So you're sending ALL your internet traffic through a VPN, that you know nothing about? Sounds like the craziest idea I've ever heard.

Who owns the VPN? What are they doing with your data?
I think that's a fair characterization of their response, yeah.

As someone in that thread pointed out, I would say that the onus should be on the OS SDK to provide memory management primitives specifically for the purpose of security that can be zeroed out after use.

They also point out that the threat profile is someone who can read your system memory when 1P is locked (serious compromise already), but is unable to read it when it's unlocked (otherwise why bother reading it when locked), which is a pretty small set of use cases.
Looks like taxidermy'd cats, lol.
Half, if not more, are nightmare fuel.
I don't think so, although as the sibling says there is hobby activity. Interestingly enough, though, reddit was originally written in arc, but they later rewrote it in python. Make of that what you will.
Looks like there were some memes with watermarks in the training data https://i.imgur.com/iMOSUog.jpg