skysight-inc/HackerNews huggingface dataset:
>> Can an attacker actually exploit the vulnerabilities to do bad things? The answer for almost all of these CVEs is "no".

Yes this is so true, almost all of the time, the vulnerability is only a vulnerability under certain very specific scenarios which are not relevant to the project. For example, it might only be a vulnerability if you pass user input to the function but for all other possible use cases, it's not a vulnerability at all... In fact your system may not even be using that function at all. Snyk will still mark all dependent modules as being vulnerable; but it's a lie; I feel that they are intentionally overzealous just to grab people's attention to their platform... Much like this post "Top ten most popular docker images each contain at least 30 vulnerabilities" - It's attention grabbing but it's not true. The real title should be "Top ten most popular docker images each contain at least 30 possible vulnerabilities none of which are actual vulnerabilities"

I think that Snyk has been very useful for the Node.js ecosystem in terms of encouraging module authors to get rid of unnecessary dependencies but it doesn't change the fact that Snyk is a liar and that we should be cautious with it (some misinformation can be a catalyst for positive change, but too much can be dangerous).

The bad thing about Snyk is that they can only publicly shame open source projects; not commercial solutions (which are usually far worse). They should definitely try to make a distinction between 'vulnerability' and 'possible vulnerability' because it's becoming downright deceptive and it's going to start hurting open source as a whole.

Either they should fix their platform to have fewer false positives, or they should fix their communication around it so that they're not blatantly lying to people and harming the reputation of open source developers who are producing high quality, secure code.
Yes, it's important to measure and control the effects of things like topology/affinity, which can have factors of several effects on HPC program efficiency. You shouldn't suffer much variance on single-node compute, but it's different when you're subject to effects on/of the network fabric and filesystem.
Also bills for things that didn't used to exist: Internet, Cellphone, Cable/satellite tv, etc.

Not that those aren't luxuries, but for the most part they are considered to be part and parcel of modern living. California has free cellphones for poor people because it's considered a necessity.
Elon Musk steps down as Tesla chairman
>s that 'material information to investors'"?

The guy went onto national television, implied he would not follow the court order, said he does not respect the SEC, then went ahead and broke the order. How is this even debatable?

And let's not pretend that Tesla isn't already under scrutiny for absurd forecasts (under the guise of uncertainty) that they do not reach.
dont forget the enterprise processes (in software for example it would be Agile/Scrum/Lean/Six Sigma/etc.) and the enterprise people deformed by them. Archaeologically speaking it is a whole culture layer :)
Swarming cleans house, sort of. They swarm to similar spots or old empty and potentially diseased ones. If you want to find a swarm, so where you last found one. Bees love going into old comb and it’s not a good habit.
They use them less and regen primarily alleviates the need for brakes to perform speed modulation when cruising. They're still used for stopping and a bad driver or rapid deceleration will still put excessive wear on brakes.
New material holds promise for more secure computing
Aaaah, scott! So much information! It's a long read, and I have work to do, but ... is there a summary?
You have access to all the non-concentrated orange juice you could want, but somehow it's a problem that there's from-concentrate orange juice on the shelf. You also have to have access to orange juice from your friend's tree once a year, so somehow even the non-concentrated orange juice is also a problem because something even better exists in limited quantities.

This is snobbery, plain and simple. You're couching your complaints in terms of concern for better food for everyone, but you're actually dismissive of everything that isn't a luxury. Good for you that you can get orange juice from your friend's tree and buy $250 bottles of traditional balsamic vinegar. But these are not attainable for most people, and banning "fake" balsamic and bottled orange juice wouldn't fix that.
The video of the bolded part is even more unbelievable: https://www.youtube.com/watch?v=cRNypdYQoWk&t=69
Musk strikes me as a pitchman more than anything else; good at outlining a vision to laypersons and investors, but usually absent from the kitchen. The problems you've listed don't seem to be things Musk could meaningfully contribute to.

Musk is quite clearly a "like"-addict (public adulation addict, really), and those problems sound like long stretches of boring work that doesn't put cameras in his face or likes on his tweets.
One thing to bear in mind when evaluating the significance of vulnerable libraries is that there are different degrees of owned-ness.

* The ability to get a containerized app to promote you to an in-app admin

* Getting RCE as the application user

* Escalating from the application user to the container's root

* Going from container root to attacking the host

Each of these represents, broadly, an increase in threat. Each attack can be aided by outdated and vulnerable versions of libraries or utilities. It's not always obvious what in your container can be attacked or used to escalate, and how a developer intends a container to be used isn't always a good guide.

Designing for safety means designing for safe failure. Designing for security means designing for being pwned and minimizing the blast radius. The common term of art is "defense in depth".
> Inter­nation­ali­zation is not a feature, it’s an architecture... It’s not something extra. It doesn’t take longer. It doesn’t require additional engineers.

That feels like the wrong way to convince people. Having worked with i18n and l10n before, it absolutely is extra, takes longer, and on a very large team can absolutely bump up to an additional engineer.

Producing dynamic strings becomes much more involved and requires more testing. Handling RTL languages and layouts is another layer of things to worry about and test. Giving the translators sufficient context for each string is plenty of work, as is adjusting the design to fit strings that are longer than you'd expected. Etc. etc.

That isn't to say don't do it. It's just yet another cost-benefit calculation taking into account ease-of-use and market size. But pretending the cost isn't there doesn't fool anyone -- it just makes them think you're bad at producing realistic estimates and makes them less likely to trust you generally.
Perhaps because the link is broken (missing the final "l" of "html" as someone pointed out)
> To date, machine learning has boosted the value of our wind energy by roughly 20 percent, compared to the baseline scenario of no time-based commitments to the grid.

This is a fantastic first result. I wonder why we aren’t seeing that many ML being applied to large energy industries yet. It makes perfect sense from every angle. You can get measurably better results and thus it should be an easy sell for dev teams.

Other similar industries ML is being applied right now?
Slight of hand magicians and pickpockets spend their entire career sneaking information past people and they do that by either intentionally drawing their concentration in one direction, or waiting for it to happen some other way.
I'm a little appalled at the general attitude here. "These issues are probably nothing," is just not a good approach to security. "My app only exposes port 80 so I don't care about local exploits," is not a good approach to security. "Docker images always have a bunch of junk installed that you don't actually use," is not a good approach to security.

Am I crazy?

What does this tell us about Docker as an ecosystem? It's amazing tech, to be sure, but I feel like a lot of projects are leaning on, "just install the docker image," to avoid the hassles of making flexible, compatible, installable, readable software. If people out in the world can't install your software because it's not compatible with a library they have updated to patch a security vulnerability, they you will hear about it, and maybe get a patch. If people just install your docker image... eh, it works, why bother looking behind the curtain and see how? That's a ecosystem where I would expect to see a lot of bloat and security vulnerabilities creeping in and getting worse over time.
derangedHorse has a good reply to this (not that these are new arguments, eg "can the foot say because I am not the eye I am not part of the body?")

I was not referring to the subconscious as autopilot. To stretch this already tenuous analogy further the subconscious would be the flight control software.

I'm saying during our waking supposedly conscious experience our conscious selves (pilot) is actually rarely in control. Most of our choices are automatic (autopilot) and the conscious mind retroactively invents rational explanations for them when we bother to notice them at all.

Free will (if it exists) is probably almost entirely contained within the ability of the pilot to repeatedly tweak the autopilot settings, which is entirely indirect and a far smaller degree of control than we like to suppose.

If you consider evolution this isn't so surprising. Intelligence is just one strategy for adaptation and evolution repurposes and builds on top of existing structures. Why wouldn't the rational conscious mind evolve as a tweak on top of an unconscious intelligence, which itself is a tweak on top of subconscious/instinctual behavior? If animal studies are proving anything it's that intelligence is a spectrum and many supposedly human behaviors (concept of self, tool use, et al) are present in other species.
Would be a cool use for a cool animal, but the effect of pseudoscorpions was not signifiant in this article. Groups Untreated and with Chelifers having almost the same Varroa counts at the end. No effect in reduction of Varroa is the first conclusion of the article.
Yes, I can find it in the grocery store. I also have bought it from specialty shops (which aren't exactly rare).

My grocery store also sells fresh squeezed orange and grapefruit juice they juice every morning and fresh mozzarella they make every day in the store and probably some other fancy stuff I'm not aware of.

I know people who buy the low quality oil because they prefer it. My grandmother preferred corn fed beef to grass fed beef.

But its pointless, because you'll just tell me I'm wrong and your olive oil is so much better than mine because all your posts here are just "my tastes in food are so much more sophisticated than all the peons."
I don't think he's doing anything that a large scale bakery wouldn't also do, just on a smaller scale. I mean, some outfit that ships baked goods to retail stores all over a metropolitan area. They need to control parameters of the production process to ensure consistency at scale, plus handle all the logistics of scheduling all the processes and delivery.
Why would a model trained on English texts see "a lot" of PHP code? What was the prompt used for generating this code?
Thus far the fake noise is closer to crickets than an engine. I have no doubt though that we'll see EVs that make noise for the sake of being seen (i.e. Harleys and Trucks)
Social media cultivates poor quality relationships, and distress causes many to spend more time on social media in seek of "connection".

It's the perfect feedback loop for "increasing engagement".
> This would only require changes to servers, not clients, and would look just like the secure version of TLS 1.3.

If a TLS 1.3 client will happily connect to an ETS server that isn't playing by the rules, doesn't that indicate a flaw in 1.3?
I've had and seen the coolest desktops on Linux and other unicies. If you're knowledgeable, you have available to you some amazing things.

Linux did lag in performance, but features like virtual desktops, notifications, transparency, and other things were easily a decade ahead of OSX and Windows.

I remember in 2008 in class, playing World of Warcraft via Wine in a window, while also taking notes, tailing logs, streaming music, and writing code, on a pentium III with 2G of ram. If I wanted full attention for WoW, I could go fullscreen, while xchat would still display my IRC messages along the top of the screen.

This simply was not possible on a Windows machine.

I loved to see people's faces light up and have them say "How did you do that??". Oh, I'm using Linux.
Sliding windows, multiple terminals bound to hotkeys, and graphics that were not bound by some UX gatekeepers that are afraid to overwhelm people's senses.

I think it is good to play to your strengths. Linux will never be Windows or OSX.
I'd like to think I fall in the "reasonable vegan" category. I know it's impossible for humans to prevent all possible animal deaths.

But there's a massive gap between hunting and not killing and eating animals for food at all. Of course I'd prefer if factory farming was replaced with hunting, but I'd prefer even more if synthetic meat were the norm and raising or killing animals for food just wasn't even part of the equation anymore (as PG, and others, are predicting).

As a human animal, I'd certainly rather live ~50% of my expected natural life in the wild and have it end in an instant from a weapon than be born in crammed captivity and force-fed horrible anti-biotic-laden meal for years for some higher-intelligence extraterrestrial species to consume, sure. But even though it's preferable, I still don't want to be shot and killed, even if I knew with certainty that my death was going to be short and painless.

Similar to PG, I predict killing animals for sport or for food will be considered very taboo within a century. At least in Western countries.
Odd number bad, unless you number 1!
Article seems to be missing what the Justice Department's arguments were about how this merger is anticompetitive and/or violates antitrust law?
Google’s new AI grammar checker are now live in Google Docs
Zero configuration... read "We made choices for you, just trust us. Read our documentation to see what your missing. Oh, also since you didn't configure it we'll change (the defaults) on our next release".
The echo dot is an essential part of the bakery. Multiple overlapping named timers, fired off without having to touch anything? Get in!

Once I start the mixes, everything runs from paper though.

Maybe somewhere a long way down the line I’ll make an Alexa skill, but it’s not a priority.
Do you have source? I don't doubt you but it's way too easy to simply throw out accusations when it's blatantly known that chinese tech is used to infiltrate other country's communication[0]. It's not an apples to apples comparison.

[0]:https://www.cnn.com/2018/01/30/africa/china-denies-spying-au...
Never underestimate the value of a good network. A lot of opportunities will show up outside a work environment first, as a passing comment or an invitation for coffee or dinner. This is a segment where first mover advantage is very significant.

Lower level jobs can be more objectively assigned because you have a much higher number of matches and mismatches to draw conclusions from. The higher up you go, the more subjective factors play a role. There has been a lot of progress in measuring ability at the top tiers, but relatively few companies hire professional psychometric assessment.
Anonymous survey shows Tesla& SpaceX employees are still confident in Elon Musk
the first time I heard him say his own name in an interview it was difficult to accept the pronunciation.
My pet peeve is when I have an application crash and the error message has been translated. Now googling it is extra fun, not to mention bug reporting.

Fortunatly with Linux, I usually can get the proper message with "LC_ALL=en_US.UTF8" if I can, and desire, repeat the exact same error.

Now I understand that this is done for openess and diversity. But technical terms should not be translated. I'm french, and I accept that english has won as the business language, and the IT language. Let's move on.

Honestly, we are wasting humanity potential for not having a common language. I really, really wish we would all learn english as the second language, and that all laws, forms, labels and signs would be translated to english everywhere (as an addition to the local lang, not a replacement). It's an imperfect language, but it won half of the world, and the other half will have an easier time learning it that us learning theirs. Plus it has a very simple alphabet, and is already used for science, business and international politics.

At this stage, I would gladly agree for all the french books and movies being burned and lost forever if it means one language, any language really, becomes magically the main one for humanity. We have too many communication problems.

But since magic doesn't exist, what about getting off the ego train and just adopt the imperfect status quo and make something awesome with it for a change ?
Automate Your Workflow with Git Hooks
Have a look at other OA application methods. There are safer and less labour intensive ones than vapourisation. The science behind it well covered by Randy Oliver. http://scientificbeekeeping.com
>untreatable Antisocial Personality Disorder

I'm talking specifically about people you'd qualify as psychopaths/sociopaths as they're colloquially depicted. The "evil" emotionless/unreachable criminal is incredibly rare.

>California has at least 4 state mental institutions devoted solely to housing violent mentally disordered offenders.

This is unrelated, but keep in mind that often these institutions are treating a symptom and ignoring the disease. California probably wouldn't need 4 state institutions if they had reasonable access to mental health and stable housing.

They often have zero support system when they're released. They're temporarily put into group homes or halfway houses where they're surrounded by other people with mental disorders and various related issues like substance abuse (not to mention that abuse in general is rampant in this type of housing, including by staff). Some people know that this type of housing is problematic, and opt for homelessness instead.

They've got no permanent homes, finding work is incredibly difficult, and they're grouped together with other people with wide-ranging mental disorders and other problematic histories.

It's hard to imagine that anyone is _ever_ able to escape these cycles of institutionalization.
Off-topic, but what's wrong with being unable to drink as much coffee because you already have an equivalent effect? Are you that fond of the taste of coffee?
The very one. It's on the northwest side of the city. This is funny to longtime Houstonian nerds, because that's the area where Compaq was, and where Digital was, and which is now HP I think. (?)
Also popular, high-velocity projects have a lot of CVEs. That doesn't mean much.

How fast these images get updated? How widespread these vulnerable images are?
If the warrant canary is in the company's financial statements, is the judge going to now try to force the company to introduce inaccurate information into their public financial disclosures? The SEC might take a dim view of that.

The company can take the 'can neither confirm nor deny' posture, and simply remove the warrant canary from public financial statements. Or leave the most recent accurate and dated one unchanged.
Do you think Elon truly believed that full self driving capability would ever be enabled for the people who shelled out for the newer versions of the car (the one that added shitty cameras all around)? He knows it can’t be done safely without high FPS lidar and/or more compute on board. He doesn’t care. He’s pulling a Theranos.
React Native UI Component Using Native Code
> Instead of thinking of this as “Enterprise Transport Security,” which the creators say the acronym stands for, you should think of it as “Extra Terrible Security.”
Is this a substantial improvement over existing neural network models? I’ve seen models that were being used to trade renewables on PJM’s market that seemed at least as good as these. And, similar models are currently being used to manage DERs in micro-grids.

I don't mean to downplay these results. I’m not an expert. Just mentioning it in case someone at deepmind sees this and wants to reach out to PJM. I believe those models were created almost 10 years ago.
Why not reverse that and use a whitelist instead. It’s a lot easier to decide what folders and files should be served than to think of all the things that shouldn’t.
> Using a neural network trained on widely available weather forecasts and historical turbine data, we configured the DeepMind system to predict wind power output 36 hours ahead of actual generation.

Interesting. Something I've long wondered about:

- Many wind farms are located in very specific places that have measured high winds and are otherwise good places to locate a wind farm.

- Global climate change is changing local climates too. Are the studies that were done 10-20 years ago to discover ideal wind farm locations no longer as accurate as they used to be?

- How are wind farm locations decided today? Is there is skill in predicting where a wind farm might be optimally located in 5 years rather than where it should be located today? Or if not (since probably not) what are the right risk mitigation actions to take if you are planning a wind farm but unsure about location?

- Since Machine Learning is useful in improving the value of the existing wind power, could it also be useful in this endeavor, finding optimal wind power generation locations?

- Lastly, is this something a person could research at home with open data and code? Just curious. :)
Adding sugar to things makes them taste sweeter. Sweeter does not always mean tasting better.

However, in cases where sugar actually makes things taste better, I have no problem using it. If I were making sauce with overly acidic tomatoes, I'd probably add a bit of sugar. I'm not interested in creating "healthy food" that tastes terrible. The insistence on making "health food" bland is a major reason people go for junk food.