skysight-inc/HackerNews huggingface dataset:
[1] suggests he still got the fun host-versus-graft-disease, so it seems like he might still have had that nasty rollercoaster, unless you meant some other nearly-killed-the-patient.

[1] - https://www.theguardian.com/society/2019/mar/05/london-patie...
Multiple Vulnerabilities in RubyGems
How not to design a wire protocol
People are joining Spotify for the "cool" kid factor - they want to differentiate themselves. Much like buying iPhones in my mind.
> What (optimized) market requires for a raw source to change hands 13 times before it is a final product (mind that we are talking small business here).

That is how many things work. One company sells saplings, another operates a tree farm, another logs the trees and transports them to the sawmill, another operates the sawmill, another distributes the bulk lumber to wholesalers in different cities, another operates warehouses and wholesales the lumber to local businesses, another shapes the lumber into custom forms, another assembles the custom lumber into unfinished furniture, another finishes and paints the furniture, another wholesales the finished furniture, another packages the furniture into prepackaged furniture sets, another retails the furniture sets, and then finally the end customer buys it.

This is not inefficiency, it's specialization. Operating a sawmill is not the same skill set as retailing prepackaged furniture sets.

> The revenue tax would force the market to optimize and become more competitive.

It would force the market to vertically integrate and become less competitive.

> And even if megacorps would grow vertically - that's OK, since this would force them to grow locally, take parts of the market and optimize it.

Megacorps don't have to grow vertically, they already are. It's why the tax gives them an advantage over local businesses that aren't.

And they wouldn't to do so locally. They could just show up with an imported finished product and retail it directly themselves.

> I also don't think DBCFT would work in an OPEN market like EU.

DBCFT is basically VAT. The primary difference is that local wages are deductible. It does not seem like a real problem to allow for "local wages" to mean anywhere within the EU rather than only in the sale destination country. Or to just use VAT instead if you like, though the wage deduction from VAT does seem like a good idea in general (since wages are already taxed to the employee and double taxing employment is undesirable).

> The EU rules and tax system is completely different to US and it cannot be compared.

If you're designing new tax rules, you can compare the new rules to whatever you want. The EU could implement the US system verbatim or vice versa if they wanted to and had the votes.
I'd like to be also a user for 1.60$/Month instead of 9.99€
This caused me to go on a deep dive of Emojicode, which, to my surprise, is very well documented with a formal syntax definition in BNF.

I'm not sure what this madness is, but I like it.
Now do it for tensorflow. Let's say I want to generate AI faces on a small ARM processor.
Had the exact same experience with C= 64 and the guidebook that came with it.

Never thought I was doing something silly peek/poke'ing memory and using data segments to represent sprites on screen. I was adding numbers to represent pixels on a 16 bit row as soon as I learned how addition worked at school.

Later on, I was using sin/cos to represent motion as soon as I learned how trigonometry worked at school. Along with some bresenham algorithms book I found at a university to draw lines and circles more correctly and effectively.

Some time later, I was visualizing prime numbers and geometric primitives in ways I could only imagine.

Later, I was using derivatives to represent optimal solutions to targeting problems as soon as I learned how differential equations worked.

Later, I was using field equations to represent gravitational pull in n-body simulations as soon as I learned about them.

Then things became more abstract, like visualizing finite automata and abstracting logic circuits.

Until that time, I did not need to leave the editor or download someone's libraries. It was all there. My age of discovery was a continuous experience that spanned over 10-13 years and defined my abilities as a programmer today.

I was never ashamed of "putting two pixels together" or envious of kids that "could make a game in two weeks using stolen assets and unity" - a program that places sprites on screen using easing algorithms and accelerated graphics. More power to them.
Crypto Exchange Cryptopia Back Online
> First of all, Rome did not unite neighboring groups in Italy as a culture

This is simply false. Please learn about the pre-Roman history of Italy.
This is relevant. But Google is also held to a higher standard. Not necessarily by the user base at large, but by the (tech) media. When I saw articles describing Amazons and Microsofts continued support for military and government contracts (Hololens, Pentagon Cloud contract, Jeff Bezos tweets, GovCloud) there is some push back in the comments. But many commenters were actually praising their steadfast commitment of "not giving in to public pressure", and "if they don't do it, China will win". In that way, they kind of got away with it and Google is now at competitive disadvantage. It's weird, because I don't believe MS or AMZN's personell is any more fine with it than Google's is.

Anyway. I can't say I'm surprised by this. I'm just hoping we manage to overcome nationalistic behavior in time. Global problems (AI regulation, climate change, human augmentation) will require global cooperation on a level that will allow no self-serving behavior. And unfortunately evolution has ill prepared us for this.
"most of the software being built today"

"web applications/web sites/microservices"

The world is bigger than you think it is. There could be more code in making a single AAA videogame than in the entire Amazon infrastructure.
I can’t believe I am saying this but pendulum has swung so far in the wrong direction that something needs to give. Until some sort of universal safety net is established that at least guarantees the simple living, we will keep on seeing lack of pushback on these moral issues
Thanks for sharing your setup & experience!
I've worked in kitchens where hairnets over beards was mandatory though.
By the obvious way, I'm guessing you would just have a single type 'entity' and put all entities in an array?

While that may be obvious to you, it's not obvious to a lot of programmers (myself included) who grew up learning about object orientation, abstractions and modelling behaviour on the real world. ECS's for all their added complexity come with the breath of fresh air that is classical imperative programming where all the data is just available.

There are scant few sources for learning this, Handmade Hero being a notable exception.
> Clearly you still need client-side javascript, distributed by the mediator, to ensure that the impression is actually delivered and the click is actually registered.

There's no point to client-side JavaScript: The baddies just write JavaScript that rewrites basic objects using Object.defineProperty so that document.visibilityState always says so (and so on), or that lie to the visibility sensor. Or they just make a whole fake web browser that runs on a Server. You are in an arms-race, and verification companies simply can't/don't do a very good job.

> Otherwise, obviously, the server could just maliciously record impressions/clicks.

I offer ads† to publishers server-side via XML or JSON, and they can stitch them into the page however they want, and I've been doing this for years.

My publishers often get paid by click, but some of the more valuable ads are paid on referral. Occasionally I see a CPM/CPD deal go through, but it's usually to a larger publisher that I can understand how they get their traffic. I won't help anyone do a CPM/CPD deal unless I understand their traffic.

You're right that it's much too easy to buy traffic from e.g. Google and spray it at my impression and click trackers, which is why I don't rely on them: Adblock and uBlock can remove the trackers all they want, but their users still get ads from my platform, and my publishers will still get paid.

†: Strictly speaking: I offer a platform for publishers, and often help my customers get introductions/recommendations/connections to advertisers who believe in data-driven online sponsorship.

> Embedding the ad into the video is more akin to a native ad, which is generally understood by the advertiser to not have measurable conversion

Server-side stitching can be done in realtime, bespoke, and with standard VAST tags. Not everyone is doing this, because dash/HLS are simpler and still "good enough".

> and to be strictly context (as opposed to user) targeted.

I've worked with several (big) brands who have done completers and demo-guaranteed video campaigns. There is absolutely user-targeting in video.
Just because not all succeed, that does not mean that success is random.

Taking entrepreneurial risk is a choice, and some people do succeed and build huge businesses employing thousands of people that way. Also those that succeed tend to be very smart and hard working, so the choices they made clearly contributed to their success, otherwise being smart and choosing to work hard would not have made a difference.

Conversely I have generally taken the safe road in my career, while still being willing to move on when the time was right. This strategy has served me well. I've seen others takes risks I would not have, for some it worked out well but for others it was disastrous. For example a friend had catastrophic health problems, but he was working as a contractor so it was financially disastrous too. If the same had happened to me, I was on a very generous benefits package and I and my family would have been well looked after.

Individual choices really do matter. Sure you can still be hit by a bus, but most of the things that happen in our lives are tractable to mitigation strategies. Conversely luck certainly can be a factor in success, but even when it is you still need the sense to recognise it and take advantage of it, and that can often involve taking calculated risks.
Spoiler: Speculative Load Hazards Boost Rowhammer and Cache Attacks
Dan Geer: For Good Measure – When Opinion Is Data [pdf]
That is definitly true for your first game. My first game was written in processing, which is a wonderfully visual way of learning to program. Obviously I had a huge loop with a myriad of nested if statements.

Next thing I did was in Pyglet, this time I used Scene objectes that represented a statemachine that could switch arbitraily between other scene objects. Was much more comfortable to work with but slightly more complex. But where the real difference showed up was when I tried to extend: in the first thing I basically had to have all the code in my head, in the second I could just inherit from the Scene Class and make a new one with completely new rules.

If I were to do something now I would give a ECS a go, especially in Rust which really lends itself to ECS. I don’t think a ECS is any more complicated than relying on Object orientation. The problems you will have to solve with OOP will get incredibly hairy incredibly fast and I say that as someone who came to Rust from a OOP background.

Of course you can just use my first approach and write a huge loop with a lot of if else clauses and deal with every new thing in a new way.

This is the way I’d recommend it to a real beginner, who cares about pixels on the screen and doesn’t mind if they have to rewrite half of the code if they want to change or add a tiny detail.
There are three major music publishers (UMG, Sony, Warner). As long as you have contracts with them, you'll have nearly everything.

Spotify's not the only competing service that has almost everything. Tidal, Google Play Music, Apple Music, they've all managed to get a deal with those publishers. Smaller players like Deezer even manage to offer the same service to 180+ countries (compared to Spotify's 20).

Netflix and others would also have nearly everything if the majority of the movies was produced by three publishers.
How does that mean the requirements are wrong? Larger than 8 byte serials are allowed in the certificates, as is mentioned in that thread. I don't see how the requirements of the CA forum and the certificate representation can be taken as inherently contradictory instead of simply requiring a larger than 8 byte serial.
Digital Heroin
I don't want to be that guy, but why is this silly article from a pay-walled site on the front page? Time for some sort of algo update?
You don't need a malicious server.

You can use Google to do this and you'll get a google/branded domain name for your object-hijacking javascript. The number of times I've seen something like document.visibilityState='visible' in peoples ads (or ad wrappers) is astounding.
There's no problem what name the school has you on the books for. There's no reason what they have on file/police checks is the same name presented on office doors, emails and to parents.

We do this all the time for students that can't/won't use their legal names in school for a number of reasons.
Cloud Robotics – A 10k Foot View
I bet this changes fast when NEOM opens up with its shiny new Alphabet HQ.
How do you know it's a bug? The article says "problem". Presumably it was something huge, I would presume company-threatening.
Then people transfer their wealth just before they die?
You should check out Nim's gdb support. It will demangle these identifiers for you.
Does anyone know of a similar idea for neural networks? As far as I can tell, you need the entire framework (which requires a heavy, 1.5 GB docker image) to apply a trained model, even though in theory you only need matrix multiplication and a few activation functions.

Related: https://onnx.ai/
Make Spotify family account and share it with friends or use VPN and make Premium Philippines account.
Is that covered by insurance? In the UK, some people are expecting the NHS to pay for it.
Razor makes nice high end PC laptops -- I like mine, anyway. Plus, they actually ship with nice zippy internal graphics cards
More likely. Or they're listening to the Indian equivalents :)

OP, mainstream music is just that, mainstream, it's watered down precisely because most people like watered down music ;)
Kotlin dependency injection (almost) without a framework
It's easy to set up just intonation digitally.

The problem is that most classical music modulates to other keys. So why not just set up some switches or programmed changes?

Because as you modulate there's a grey area in which you're not fully in one key or the other. If you interpolate the intervals as you go through this area, it sounds wrong. If you switch to a new tuning when you land in the new key, that sounds wrong too.

Equal temperament solves the problem by being a good-enough compromise. All the intervals are slightly off, but they're off by a consistent amount, so - paradoxically - key changes become smoother.
"Stop Aids, love life" in switzerland was (and still is) a kind of funny
https://www.lovelife.ch/en/campaign/archive/2004-1987/
> If your powertrain is > 1.0, the tax you pay when buying cars has a sudden increase.

What do you mean? Engine displacement>1L? Transmission overdrive? Something else?
For airspace it doesn't matter too much. Allowable Mode-C accuracy is something more than 100 feet (I think) to allow for poor sensors, and controllers simply add a buffer.
I could even see a tax system where you get the choice: pipe your money through the income tax function or leave it in the "tax free now, taxed to oblivion upon death" account, your choice. The "tax free now" account can be used for expenses that would otherwise be deductible, paperwork avoided.
It's kind of incredible how big a pain in the ass the SW license and PDM servers are. Definitely requires full time IT support and small riots are likely to form when they try to upgrade them during a busy period, especially if someone suggests using an SP1 version.
I've seen many many hacks with huge salaries and many many talented people toiling for peanuts.
[1] suggests this was also true here, but AFAICT the other patients they've tried this on to see if it was just graft versus host all wound up relapsing (I swear there was another study of this negative outcome with n>2, but I'm not turning it up, so maybe I'm full of it). [2]

Though [3] claims another set of experiments with this resulted in 5 cured/undetectable patients and one remission who was allegedly an odd duck out in terms of treatment (cord blood versus bone marrow),

[1] - https://www.theguardian.com/society/2019/mar/05/london-patie...

[2] - https://www.nature.com/news/hopes-of-hiv-cure-in-boston-pati...

[3] - https://annals.org/aim/article-abstract/2707334/mechanisms-c...
And right now we live in bliss?
SQRL is a half measure, like SMS-TOTP it barely raises the bar because it doesn't solve a key real problem we actually see happening in the wild and so that would just happen more.

If site A is protected by SQRL, and I'm a bad guy, I can just live phish sign-ins for site A using SQRL from my phishing site, site B. The users all believe (as with other phishing attacks) that they're being asked for credentials by a legitimate site and so they provide them with SQRL, and I'm in.

This (very common and fully automatable) trick doens't work on WebAuthn, completely defeating phishing. This is because the fundamental idea in phishing is "Humans are idiots, fool the human into mistaking site A for site B". In WebAuthn the credentials are mechanically derived from the site you're on, so for site A they will always be site A credentials, and for site B, site B credentials. Convincing page design, an urgent email "from the boss", clever use of IDNs to fake the URL, those fool the human but not the machine, and the human is taken out of the "what site is this?" decision by WebAuthn.

But the human is left _in_ the loop in another way that leverages our strengths. WebAuthn requires a physical interaction, typically a button press by the human. So a hypothetical attack that takes say, 50 million authentications, cannot work because the human will not press the button 50 million times while you do the attack. They'll get sick of it and go on Twitter to moan instead.
> The lands and tribes they conquered simply used Latin for trade and as a lingua franca. It never became the mother tongue for any of those people.

And yet, there are 800 million native speakers of Romance languages ("the modern languages that evolved from Vulgar Latin between the third and eighth centuries") in the world [0].

[0] https://en.wikipedia.org/wiki/Romance_languages
Cursewords: Graphical CLI program for solving crossword puzzles in the terminal
> I don't know about others, but I don't dare to buy Apple products anymore. My 2012 MacBook Pro is still going strong, but newer MacBooks don't have anywhere near the same build quality and durability.

Apple's history of design issues and ignoring them goes all the way back to the Powerbook G3 and G4 Cube. This isn't some sudden drop in quality. People just have short memories.
The number 64 is arbitrary, and was chosen because of potential birthday attacks on digest algorithms. Mozilla enforce the BR sometimes in extreme ways, and we derive security and trust from that enforcement. In many cases, the BR are confusing, unclear, or ambiguous. The confusion here arose from the BR requiring 64 bits of entropy from a CSPRNG and to always be positive, and ASN.1 integer fields using signed integers, so 1 bit is lost to the sign bit.

In this specific case, they have the option to use 160 bit fields for the serial number. They chose to use the minimum required of 64, apparently out of performance concerns for embedded devices with limited memory/compute.

The CA platform (EJBCA) they use defaulted to this behavior, and from what I was able to understand[0] are in the process of pushing out an update to all their customers to resolve the issue. It is very likely that someone will start going through the CT logs and we will see many reports of insufficient entropy in cert serial numbers.

[0]: https://groups.google.com/d/msg/mozilla.dev.security.policy/...
If you participate in a bug bounty program you already decided you will not sell it on The Market. As such you should be payed for your effort and time at least. Otherwise you sell it to whoever pays more (on The Market).

If you read how much effort is put into just reporting the bug, that will come close to a half month at least. Is $1000 half a security research's salary?
Samsung Galaxy S9 and Note 9 Users Warn of Major Problem with Android Pie Update
Guide on sending cold outreach emails with Mailshake
Love it when Americans make decisions for Chinese people and presume to know what they'd want. Maybe try asking them what they want. Or even just think about what you'd want if you lived in China. Living in China, you know your search engine will be censored. But still, wouldn't you want the best censored search engine that you can get?
Seriously?

Condoms break.
People enjoy sex. Telling people not to have sex is BS.
Monogamy is great if you can find the right person. Many don't, or don't find them for a long time.
If the spec is so complex even a relatively big and stable corp like Nintendo can't get it right, well, maybe the spec is (partly) to blame?
Web Authentication Is Now an Official Web Standard
I actually wrote a plugin that aims on solving similar kind of problem. It lets you name windows and has session persistence. No ability to save/reopen windows, but it's a neat idea. If you're interested it's Window Titler:
https://addons.mozilla.org/en-US/firefox/addon/window-titler...
A colleague remortgaged his house when prices went up and spent 30k on a new car and big holiday. A few years later the housing market crashed and he had to sell his house because he got a new job in another city, saddling him with crippling debt. Ouch.

I have relatives on one side of my family who are all on relatively low incomes, but they make terrible financial decisions. When my uncle retired he sold his house, moved into a bungalow and gave the difference in price to his sons. They all had mortgages and children, but instead of saving it they all spent big on new cars and big holidays. It seems to be a bit of a pattern. My wife and I are considerably better off, but in many ways we live far more careful and frugal lives.
This is an adaptation of Design Thinking which designers have used for years. It's found in Human centered Design, Design Sprints, Jobs To Be Done... and others.

I've seen lots of projects fail, cost way over budget, take years longer than projected (personal recorded: I paid a developer to write me - his estimate - a 6 week project. 8 years later he returned my money), and/or completely miss the target because Dev jumps right in and starts coding - not being concerned with the "soft" stuff like business, usability, experience design, etc...

If this helps dev teams join the holistic effort to success, I'm all for it. I entirely agree that coders need to be problem solvers but also solvers of relevant problems.
It is not a new phenomenon.

When I said "relatively new" I meant "in the past 300 years or so". When I said "any old philosophy book" I meant "one written 1500 years ago". I didn't make my frame of reference clear; that was obviously a mistake on my part. Saying things like "new" on a tech forum has a very different meaning compared to "new" in terms of history and philosophy. 300 years ago people were born in to a strata of society and couldn't work their way out even if they wanted to. Social mobility in the middle ages didn't exist (with a few notable exceptions like demonstrating valour in warfare.)

More recently (in the past 50 years) there have been some quite extensive studies of happiness, and envy is almost always found to be a confounding factor. Why that is seems to be the case is an interesting evolutionary question - https://www.frontiersin.org/articles/10.3389/fpsyg.2017.0161...