skysight-inc/HackerNews huggingface dataset:
> They wade in to a discussion on something technically complex, yet completely out of their wheelhouse, clutching a few cherry-picked academic or pseudo-academic citations, which they then use to argue definitive conclusions on certain points they believe.

I've heard that phenomenon referred to as the "engineer's disease."

I can't easily find any great sources about the term or concept, but these will do:

https://ask.metafilter.com/297591/Origin-of-the-term-Enginee...

> November 2003 comment on Crooked Timber (by MeFi's own Martin Wisse?): Engineer’s disease: where just because someone is a (self-proclaimed) expert in field, they think this makes them automatic experts on anything else. Usually people intelligent enough to see through “lies-to-children” [explanations], but not intelligent enough to understand there’s more to their new area of expertise than that. For [some] reason, engineers are particularly susceptible to it.

https://www.metafilter.com/160644/Treating-the-world-as-soft...

https://idlewords.com/talks/sase_panel.htm:

> As computer programmers, our formative intellectual experience is working with deterministic systems that have been designed by other human beings. These can be very complex, but the complexity is not the kind we find in the natural world. It is ultimately always tractable. Find the right abstractions, and the puzzle box opens before you.

> The feeling of competence, control and delight in discovering a clever twist that solves a difficult problem is what makes being a computer programmer sometimes enjoyable.

> But as anyone who's worked with tech people knows, this intellectual background can also lead to arrogance. People who excel at software design become convinced that they have a unique ability to understand any kind of system at all, from first principles, without prior training, thanks to their superior powers of analysis. Success in the artificially constructed world of software design promotes a dangerous confidence.
Let me try to cure you of that!

So I've used Pi's in various hackathon projects, and they're great for building wearable tech things that involve audio, electronics and require internet connectivity. One time, we tried to connect one up with a Leap Motion* to create a wearable device that would turn sign language into audio speech.

But even if that's not your bag, there are plenty of other "home appliance" uses for a Raspberry Pi. Other people have mentioned PiHole, which is awesome. There's also a way to set one up (in combination with an external USB drive and powered USB hub) to act as a Time Machine backup server (there's a sort of open source version of Apple's Time Capsule software floating around). Finally, if streaming services are getting you down and you feel like flying the Jolly Roger like back in the 2000's... you can set up a Plex Server (which will work with the Plex Mobile app and many Smart TV's and Smart TV devices like Chromecast) and set up a BitTorrent app with a web front-end that you can access via local WiFi. Then you just need to write some scripts to listen for completed downloads, clean up file names and put them in the right folders for the Plex Server to find them.

*Leap Motion doesn't have arm64 drivers, but we were able to connect the device to a laptop via a long Ethernet cable and forward the USB port over that cable, then send the results back to the Pi.
There is a type of regex called a "pathological" regex which can be used to make certain regex implementations have exponential time complexity. If you exposed this in your application, someone could DoS you. Some libraries might have accidentally pathological regular expressions, and so some user input might be able to trigger the pathological case (Atom had a bug a few years ago where certain source files would cause the editor to lock up, and it was caused by a bad regex they used for parsing to figure out the auto indentation[1]).

Russ Cox wrote an article about this in 2007[2], and the situation is still the same. Go doesn't have this problem since Russ Cox is one of the lead authors of Go, and wrote Go's regex library.

[1]: http://davidvgalbraith.com/how-i-fixed-atom/
[2]: https://swtch.com/~rsc/regexp/regexp1.html
> but the burden of proof should be on the person making the claim.

I think the burden of proof should be on whomever is making the less collectively accepted claim. If I claim the earth is round and you are a flat earther, I don't have to prove anything to you despite your demands. However, if people everywhere generally accept that the earth is flat, then indeed the burden of proof is on me to prove that the earth is actually round.

In GP's example, the statement "as long as there are criminal opportunities, some percentage of baseline humans will want to exploit them" is a collectively accepted claim. Therefore the burden of proof is on anyone claiming something to the contrary.
It might be more valuable for blacks to focus on ways to lower the actual crime rate than the perceived crime rate.

Oh definitely this is needed. Poor city black culture has some very negative aspects to it that this community needs to address. This fact coupled with the environment of political correctness makes it hard to have honest discussions about race.
http://cellularinsights.com/iphone7/

AFAIK there is still a sensitivity and LTE capability gap between Qualcomm and Intel.

Kind of sad Apple doesn't think that's worth the extra ~$10 or so on a $1000 phone.
I have thought that for a long time, too. It's natural that, on a global scale, developed-economy wages would appear to "stagnate" if developing-economy wages are increasing while competing for the same jobs.
Wish there were a FUSE for windows... I mostly format external drives as NTFS as it's easier to get support on mac and linux than anything else in windows.
> the US incarcerates a greater proportion of its population than any other country

A large part of this is ridiculously long sentences. You called out California's three strikes law in you comment. One example of this I heard on the excellent Ear Hustle podcast was somebody who was sentenced to 50 years to life for stealing $40 (unarmed) after having two prior convictions. I don't see how this is good for anybody.
Even re-iterating guidance that you issued a month ago is a material, as the government describes at length in the court filing.
Clojure for Java Developers [slides]
If you're an amateur beekeeper chances are high you're in a populated area, and it's irresponsible to let your hives swarm repeatedly.

I'm also not convinced this works; hives generally swarm in the spring, and most beekeepers also do a round of treatment in the fall to knock down levels for the winter. Harvesting drone brood is a common way to achieve the same thing you're trying to do, and can be done any time of year.
100% Agree.

This is why these boards are so cheap, and the board makers are putting very little of their budget towards software support.

The N2 looks like it will be a great board. And Odroid is the best in the game in terms of providing software support.

I imagine over the next few months, RK3399 software support will become more mature since there's so many of them on the market currently.

Also found this wiki page about chip maker openness: https://linux-sunxi.org/Comparison_of_chip_maker_openness
“The Marketing Flywheel” method that generates customers 24/7
My father worked for Aerojet General in the early 60's. I have clear memories as a child of hearing thunderous booms while the northern California sky was a cloudless deep blue. I remember the sound as loud but by no means intolerable. I do not know how far the flights were occurring from where our house was in Sacramento.
My #1 rule for existing codebases: Just because you wouldn't have done it the way they did doesn't mean they did it wrong.

I think it's developer nature to look at a huge pile of code that someone else wrote and immediately think: "This is a pile of crap. I can do better, so the first thing to do is rewrite all of this, my way (which just so happens to be _The Right Way_)."

Figure out what you're trying to do, and what is keeping you from doing it. Take an iterative approach to get things done. Realize that after 3 years, they have hopefully fixed a lot of bugs and got to a solution that is somewhat mature and better than you can do in a week.
What CO2 sensors are you using? (I understand that the cheaper ones infer CO2 levels from measuring other things, but interested all the same).
1, there are demos of avatars created in real time for VR and AR, even back in the days where all we had was Kinect. all in real time. the avatars show in that presentation were pretty crappy compared to the ones demoed in more recent VR devices that track eyes and lips.

2. its a demo, that was most likely staged so that 3d models would appear, they may be searching inside their own DAM/MAN system that already has the assets.

3. black colors can be reproduced in transparent screens. magic leap does it why not the hololense?
In my experience these are often configured wrong, because browsers are guessing settings based on the locales used by the operating system, and because users don't know how to configure it because it is really hidden away.

For the cases I see it is technical minded people that speak another language than Danish, that buy (or inherit) a laptop with Windows on Danish, so the browser infers its settings from the operating system, and now you can no longer trust this header.

But it might be just as wrong as guessing language based on IP-location, so there are not really a good out-of-the-box solution, so every website will have to build their own selector maybe with input both from the browser headers and from the IP-geolocation.
How Fair Is My D20? (2015)
Qualcomm sells discrete modems as well.
(Apple used to be their major customer for them).

https://www.qualcomm.com/products/modems
Although vulnerability scanners can be a useful tool, I find it very troublesome that you can utter the sentence "this package contains XX vulnerabilities, and that package contains YY vulnerabilities" and then stop talking. You've provided barely any useful information!

The quantity of vulnerabilities in an image is not really all that useful information. A large amount of vulnerabilities in a Docker image does not necessarily imply that there's anything insecure going on. Many people don't realize that a vulnerability is usually defined as "has a CVE security advisory", and that CVEs get assigned based on a worst-case evaluation of the bug. As a result, having a CVE in your container barely tells you anything about your actual vulnerability position. In fact, most of the time you will find that having a CVE in some random utility doesn't matter. Most CVEs in system packages don't apply to most of your containers' threat models.

Why not? Because an attacker is very unlikely to be able to use vulnerabilities in these system libraries or utilities. Those utilities are usually not in active use in the first place. Even if they are used, you are not usually in a position to exploit these vulnerabilities as an attacker.

Just as an example, a hypothetical outdated version of grep in one of these containers can hypothetically contain many CVEs. But if your Docker service doesn't use grep, then you would need to manually run grep to be vulnerable. And an attacker that is able to run grep in your Docker container has already owned you - it doesn't make a difference that your grep is vulnerable! This hypothetical vulnerable version of grep therefore makes no difference in the security of your container, despite containing many CVEs.

It's the quality of these vulnerabilities that matters. Can an attacker actually exploit the vulnerabilities to do bad things? The answer for almost all of these CVEs is "no". But that's not really the product that Snyk sells - Snyk sells a product to show you as many vulnerabilities as possible. Any vulnerability scanner company thinks it can provide most business value (and make the most money) by reporting as many vulnerabilities as it can. For sure it can help you to pinpoint those few vulnerabilities that are exploitable, but that's where your own analysis comes in.

I'm not saying there's not a lot to improve in terms of container security. There's a whole bunch to improve there. But focusing on quantities like "amount of CVEs in an image" is not the solution - it's marketing.
The excuses seem to go straight from "too new" to "too old" without passing through "working fine".
You make it sound so easy. It really isn't. We foster, so we deal with "the system" daily. These poor parents, trying to get things back together are working a system that simply isn't always set up to help them. To get those coupons you speak of, they have to go stand in line during work hours. But they can't miss work because they'll not be able to pay rent. Do they eat? Or do they pay rent? This is an almost daily decision these people have to make. It's not just food coupons, it's meeting requirements[0] that they have to meet to get their family back together, it's all during normal business hours.

And before anyone gets to the argument about why they're in that situation, it often is cyclical. Go read up on trauma and trauma informed care (you can start with ACE scores).

[0] Counseling, court appearances, etc...
Long time ExpressVPN user here too, switched from BoxVPN which was slow and unreliable. ExpressVPN on the other hand has been well worth the cost. As mentioned by others, their software is A+ and stays out of the way for the most part. I don't use it to stream netflix while traveling, so that's never been a problem for me. I'm on a gigabit network at home and have found that the throughput speed is pretty good...beyond satisfactory for sure. I don't plan on switching.
And if you hold down on the reader icon, it gives you the choice to always go straight to reader mode when on [insert site].
Yes and no. Catholic social doctrine is dictated by the Gospels as interpreted by the Church. The Pope and other church authorities can (and do) clarify and further elucidate this teaching, but they cannot change it.

For instance, the Bible does mention how to deal with issues of bioethics, modern financial and economic systems, and many other topics because they simply didn't exist at the time.

So we need Church authorities to apply and interpret these teachings to modern issues. The Pope can and should and does tell us how to apply Catholic teaching in modern situations, but he might communicate poorly (this is a real problem with Pope Francis), or even make mistakes.

Papal infallibility is very specifically and narrowly defined and is rarely applicable. It has only been invoked twice in the last 150 years, both times for doctrinal statements relating to Mariology (i.e., Mary the Mother of God, not the monkey-fighting plumber guy, although I find that idea amusing).

In both cases, Pope Pius IX and Pius XII were establishing as doctrine teachings that had been believed and taught for centuries, and which refined, but did not fundamentally change anything.

Popes sometimes refer to an infallible statement, but this is merely a reiteration of existing doctrine (e.g., When Pope John-Paul II invoked infallibility in the restatement that the Church does not have the authority to ordain women, but he wasn't saying anything new).

The Pope's authority is valid only in as much as he is consistent with the teachings passed down from the Apostles, and when he is making statements that are consistent with Catholic teaching and in communion with the bishops and traditions of the Church.

As an example, Pope Francis' claims that capital punishment is always wrong contradicts traditional Catholic teaching. Now the application of capital punishment in a modern society may be unacceptable for reasons of the protection of rights of the accused (e.g., overturning a wrongful conviction doesn't any good if the no-longer-a-convict is dead), maintaining safety (e.g., life imprisonment keeps society safe from people who are too dangerous to be in society), and the process is just too unwieldy to be exercised in an efficient and just way (e.g., people being on death row for decades through endless appeals).

But this does not mean that capital punishment is inherently wrong, and this is what the Church has always taught. Francis is expressing an opinion here, one that is worth considering, but he is not changing Church teaching because he can't.

For the record, I don't support capital punishment, but for reasons stated above, not because it's inherently wrong, but because it is not necessary. If I were living in a small community on an isolated island, or in many other situations, my opinion might be different.
Not certain, but perhaps:

https://www.w3.org/2007/02/japanese-layout/docs/aligned/japa...
But due to its decentralized system, subscribing to a block list from IWF is just that. Its the equivalent of a spamblock list.
News stories often have little else in them other than their headline. Like, for instance, this one. 90% of the value of this is the headline itself.
>Do people still teach about the Maginot Line in schools?

No.

There are plenty of other opportunities to teach the value of making your adversary (be that adversary man made or natural) work every step of the way and they are missed too. Nobody (for large values of "nobody") gets taught about the value of layered or redundant systems until college and those that do get taught it in college usually only touch on it in their mandatory ethics elective.

FWIW I named the last firewall I configured "Little Maginot".
US prisons do far more than restrict movement. they infringe on prisoners liberties in dozens of ways unfelated to public safety, from reading material to phone calls to lifestyle within prison and more
Humans who are concentrating are acting with general intelligence. Humans who are not concentrating are acting with lesser kinds of intelligence. The title is pointing out that human intelligence is not always the 'general intelligence' that is supposedly unique to humans. It is grammatically correct, but you have to understand that "general intelligence" is a term of art.
The main sticking point for Raspberry Pi (at least for me) is the community, and the constant optimization and stability improvements on the software/kernel side for the sub-par hardware. Of course you can buy a device that would run circles around the latest Pi models, but that's missing the point, imo.
It's rare to the point that I suspect that you could house the number of violent criminals with untreatable Antisocial Personality Disorder in a single prison.

California has at least 4 state mental institutions devoted solely to housing violent mentally disordered offenders.
One major reason that I didn't touch on in my comment was that there was no "MySQL of object databases" at that pivotal time when the web took off. And so they missed their moment.

The industry tends to spiral back constantly, with "worse is better" winning in the short run, but with old technologies slowly creeping back in new forms. So Postgres is finally able to supplant MySQL, despite being better all along. gRPC is basically CORBA/COM retrofitted for the web. Go is the new Turbo Pascal. MongoDB + JSON is the new (but not better) object database. And so on.
I don't think the main reason for banning cars from city centers was to reduce noise and improve air quality, it was to reduce congestion. Noise and air quality improvements were a nice side benefit.
The hard part will be coming up with portable API's that can do the things that native apps can do.

Consider that browser standards include an enormous amount of functionality and new web API's are getting added all the time, and yet, many people claim that web apps can't compete with native apps on phones or desktop. Also, even if you just pick one of these, there have been many attempts to come up with a portable way to write apps for both iOS and Android, and it's getting better (see Flutter for example), but it's still a lot of work for the implementers.

Docker got around this by standardizing on Linux (including the filesystem), but the client side is much harder.

So I suspect that for a "universal" file format based on WebAssembly to get anywhere, it will have to succeed in some niche not served well by web browsers, Docker, or Unity.

WebAssembly itself is useful in the way a fast interpreter for a scripting language is useful - as an embedded component of some larger runtime. Its potential customers are teams that would otherwise need a scripting language and choose WebAssembly instead.
True. But I've always found cds awful from a UX point of view. Delicate, needed to be kept in their box and handled with care to avoid fingerprints. And it was sometimes tricky to get them out of their boxes, maybe with one hand while driving. While I used to have tapes scattered around the car, just push a button, eject it and throw it anywhere, pick another, push it in. Perfect format.
It's another data point in support of: don't go public if you want to do anything innovative.
I'd never trust a single 15TB device though, so would need to consider the cost of multiples of them in my VFM calculations.

Then again even 1Tb devices make me nervous due to the amount of time it can take to rebuild your redundancy level after replacing iffy units, and might insist on straight mirrors (R10) rather than something more space efficient like R5 to try keep rebuild time down as low as possible.
Thanks for the suggestion. But my intent was to create a 1TB flash storage device from a bunch of old flash I have lying around.
So cycle repeats, PHP reborn?
Mindless entertainment to you. Apply your rule to anything you like and it falls apart. What a weird comment.
That's one big problem on the web, IMO. Google in particular does a lot of things that are questionable UX-wisely, to put it charitably, and then a lot of web shops try to copy those things without giving them any critical thought.
Quiskit: Open-source quantum computing framework
I wonder if China has developed the mmWave in silicon that will be required for the beam steering front ends?
HN leans atheist in its subject matter, to put it mildly. Bordering on censoro.
I love the peppery teochew version.

Infact I'm going to have it for lunch tomorrow!!!
The problem is mostly one of data availability. China has plenty of data, but not all of it is credulous. That, and the fact that comparisons of any two nations will always be susceptible to the accusation that the data has been "cherry-picked" to show a favorable result.

But the global data on poverty is basically unassailable. Poverty has declined absolutely everywhere. The rising tide lifted at least the very poorest boats, whatever can be said for the American middle class notwithstanding.
The best thing for SpaceX would be for Musk to continue to have minimal operational involvement
Oh, never spotted this: https://github.com/remoteinterview/zero#running-on-cloud

Oops.

Couldn't see it on the main docs site (https://zeroserver.io/)
It's so old it's new.
Spying devices in our hospitals and medical centers is exactly what we need... Woohooo!!!

wtf
> the pope trying to dictate social doctrine

To be precise, social doctrine that is contradictory to what the Church previously taught would be a problem.

The Pope can and should and does dictate correct Catholic social doctrine.
Rotten Tomatoes Is Changing Its Rating System Because of Trolls
Apple devices (and a handful of android tablets) use separate baseband chips. Most android SoCs have the baseband on the same silicon as the arm cores.
Just an observation: 1mm pitch is awful.
The documentary "Merchants of Doubt" covers a few of these cases, all comparing them ultimately to climate change from CO2 pollution, and the oil industry's fervorous cover ups.
The original purpose was governments spying on their citizens, which is why a lot of software uses certificate pinning to block this intrusion. These MITM solution just let through the big players’ traffic so you don’t get too much of a fuss while still retaining the ability to ‘check for malware’.