skysight-inc/HackerNews huggingface dataset:
Actually, this sort of superficial fix can be a result of (overzealous) TDD.
After grad school I got some very good advice from a mathematician:
If you are good at math, don't go where they are good at math.

He convinced me (and a few other phd physicists) to help him tackle the problem of industrial controls for heavy industry (think large refrigerated warehouses, steel refineries, food processing, etc.). We we're all graduating so we decided to give the startup route a try. Since then we've been designing/deploying cloud-based control software to regulate the energy of these huge power consumers.
https://www.crossnokaye.com/

In the day-to-day its more data science/computer science than physics but the core models we design are physics based so our white boards always have some derivations on them.
It's also about not browsing porn at work... :P

You would think people would know better but if you ever get bored and decided to browse clearance rejection decisions you see dozens of people losing their clearance each year because they looked at porn on their work computer.
If a majority of miners (hash power) decide to mint more, there will be more. The code change is a simple one. The politics and economics are, as always, much more complex.
That "spotlight is the best disinfectant" is a very convenient narrative. I do realize in the end we all want to believe in whatever is convenient for us (notably including anti vaxxers). But is there actual scientific evidence supporting that particular narrative to work?

Through all of mankind we had strong mechanisms to form consensus, including social repercussions. Those don't work anymore, since what would have become outcasts in earlier generations can now easily (for example on facebook) find like-minded communities and fulfill their social needs/get approval/etc. It'll be interesting in how different realities people can believe in before society breaks apart. I'd prefer we wont let that happen.

The question is what actually works. Censoring them might reinforce their believe, but I can accept giving up on some if it does effectively stops the spread.
Hmmmm, I think there is more to gendered speech than pitch or frequency. It's about subject and delivery. Anyone a fan of The Venture Bros.? Dr Girlfriend is a female character voiced by a male actor (Doc Hammer) Although the given voice is that of a woman with an incredibly exaggerated smokers voice; think patty and selma from Simpsons multiplied by each other. The characters voice is obviously male but the delivery is effeminate which is why it works so well. At least I always heard it as a very exaggerated voice of a woman who smoked heavily.

My take on the voice? Sorry, to me it's an effeminate male voice. I hear a british woman overlaid with Fez from that seventies show. In fact I was on a flight yesterday with a very obvious gay male flight attendant who sounded very similar to this. Think man's voice with a little helium in the air.
so GFW and censorship is not working as the media said.
> It just makes it fester somewhere else that isn't as visible.

That's a win in this case. It already festers somewhere else. White nationalists would like to spread their ideology outside of their normal bubble. They often talk about "redpilling normies." It's harder for them to do that if "normal" people have to explicitly seek out that kind of speech.
They've censored the entire website in the past: https://en.wikipedia.org/wiki/Censorship_of_GitHub#China
There are better solutions available than hanging functionality on unreliable vestigial bits and pieces that shouldn't be there anyway which, because others abuse the functionality, you can't trust to be correct for debugging purposes.
They help you figure out if a user agent wants a mobile view of a page without Javascript... which is pretty useful.
I believe most devices implemented now 11 years old RFC 3514. So evil packets and non-evil packets can be easily distinguished.
"White nationalism" is an overloaded term and until tonight I'd never heard the official definition of white nationalism until GPs comments.

I've just assumed it was a vague insult aimed at non-nominal conservatives.
Bridge downgrades your security to sidechain validator set, when a payment channel keeps it on the level of your root chain. If a sidechain is compromised their validators can double spend, and some users lose assets. Cant happen to channels by design.
Firms aren’t trying to survive the startup phase. That’s just it. A minuscule number of startups ever survive as an ongoing independent entity especially if they are venture backed. Their main goal is to get acquired. Look no further than YC funded companies. Only one has ever gone public.

I used to be idealistic about software development and architecture and wanted to do things “right”. When I realized that venture capital backed companies wanted me to just apply enough duck tape to get customers to survive until they got their next round of funding or got acquired, I stopped thinking long term.
> to penetrate sophisticated enemy air defenses and find and disable threats—requires what the fifth-generation jet offers: stealth and a stunning array of passive and active sensors

> U.S. forces first took these capabilities into combat last September, when Marine F-35Bs struck the Taliban in Afghanistan

against disorganized rebel forces less well armed than the average suburban American, with no air force and no surface to air missiles. and the U.S. still can't win that war.
Well the article said that customers were charged ‘up to $300’. Let’s be conservative and say customers were charged $150 on average. $35 million/$150 = 233,333. So the question is, did they scam more than 233,333 people? I’d bet so.
I don't claim it was perfect, and Ballmer wasn't the right fit to lead that type of organization. The culture came from BillG himself, his favourite line being "That's the stupidest fucking thing I've ever heard in my life". But BillG would listen to you if you were right, you just had to fight back. The company modeled its culture on that example.

Again it was a different time, place, and culture. Its not the right thing for Microsoft right now. But I do dislike when people talk as though it as pure abrasiveness for abrasiveness sake. People talked that way because they cared and were invested. It was a nice time and I remember it fondly.
The Smithsonian Institution is administered by the US federal government. The grain of salt you should take with this is mountain-sized. Even if it weren't direct propaganda (which it likely is), these pilots would be ill-advised to say anything bad about the F-35 in a government-run publication.
There's a hardware band for any Apple watch that you can buy from AliveCor called KardiaBand.
Sounds like Willem Dafoe doing the voiceover.
The analysis of the social construction of gender is not derived from "feelings."

This technology is actually quite inconsistent with gender studies, which is why I find it quite baffling. Gender as an identity would imply that a female could have a deep gravelly voice and that a man could also have a higher pitched softer voice, as ones gender identity need not be dictated by their born sex or physical attributes.

This is quite fundamental to gender studies, making this tech not just useless, but completely counter intuitive to that project.
> I've heard and observed that the Ph.D teaches you one crucial skill - how to take a vaguely defined research problem that nobody has done before, where you're not even sure that a solution exists, and make tangible, rigorous progress on it. Your actual doctoral topic as a Ph.D student will probably be useless.

Pretty accurate. I was asked in a job interview once "what practical applications does your research have that would benefit us?" - they were surprised when I said my research results weren't useful to them at all, but the skills and broader knowledge I gained doing the research would be.

It's very uncommon you go seeking a company where you can directly apply what you did your thesis on. Your thesis topic pretty much has to be niche and obscure if it's on the edge of current knowledge.
Isn't arbitration now a standard part of employment contracts? So all employers would like the option to screw you if they can get away with it.
Not sure i buy this.

Life is not about accumulating the most amount of wealth.

Its about building meaningful relationships that last a life time.

Why would someone "job hob" if they really like the team/company? Yes you may make "more" at the next Co. but chances are your team/management will suck big time.

Find what you love/who you love and stick with it.
I am not laughing one bit let me tell you. Honesty in user agents is one of the last few defenses we have against hackers running rampant on the internet and turning it into some lawless wasteland where people don't even answer truthfully about their A/S/L.
There's a couple problems with that. Not all sites get their password forms detected correctly. And sites may change their design, causing the old form to stop being cached correctly. It would be hard to tell if changes were just design updates or phishing, and I think the layman would be hard-pressed to make that determination.

Really I think we need something akin to app shortcuts. If you want to log in to your bank, you should be able to go to your browser's Home page and find some kind of signed login link that was created the first time you logged in. It's like a bookmark, but following a particular standard, and can be pushed by the site and accepted by the user one time, with warnings and instructions to keep users from accepting it from phishers. The intent would be to add a process that would be hard to dupe users into following by accident, and giving them easy access to sensitive sites. Then the site could tell users "never follow a link in an e-mail from us, always use your Home screen shortcut" or similar.

Browsers could even vet these via a kind of "app store for logins" to remove anything that looks like phishing. Maybe that's been explored before, though?
I imagine that the government would begin at the executive level and ask "who else needs to know" and then work down the list to compel individuals or teams as required.

Similar processes already exist for other legal/police requests. If this legislation is used, companies like Telstra will have dedicated teams to comply with requests.

If your new Australian Citizen hire can build back doors into your software you've got bigger issues than hiring. Though I could see real risk associated with an Australian-based team for a global company or an Australian-based supplier.
Blegh, the worst is coming in here and reading people criticizing and outright banning the use of sarcasm, or implying that they know your friend better than you and that she definitely literally meant what she said.

This is the end of freedom and, along with Europe decisions recently, the beginning of all the worst dystopias we have already listened/read/watched about.
And in return he was going to toss you a bone somewhere along the way to something nobody’s done (because he’s the only one with this exact setup).
So developer discusses with his boss. Developer A adds back door. Developer B then patches back door. Boss fires developer A. Developer A then uses this TAR crap to sue government for forcing him to do something and lose his job.

I can’t see the government being able to defend itself. We elect the government to serve the people and the decisions of the government are negatively impacting the people no matter which way you spin it.

My 2cents.
We don't need user agents for that. There's an easy way to tell whether a visitor wants a cleaner view of a page, without Javascript: Yes.
The real defense is the attacker needs to access and authenticate with the router's web interface. A more honest patch would be to legitimize the bug as a new feature since it must be too amateur-hour over there to actually address any webshit security issues. "Dear Admin, here's a textarea to run arbitrary commands as root, don't hurt yourself!"
This is the biggest nothing burger in the entire world. Why is this on hacker news?
If this is the cost, let them have it. It's not worth that human cost just to be ahead.
Good read, thnx for posting ;)
CLR sandbox should not be considered a meaningful security boundary at this point. CAS and partial trust are both officially obsolete.

The problem is always complexity. It can be difficult to reason about safety with so many features on bytecode level. There have been exploits using dynamically-generated methods, exception filters, and vararg handling - note the near-lack of any common patterns here other than they're all obscure features of the platform, the security impact of which wasn't fully analyzed.

For example, a long time ago, I reported the vararg exploit, which boiled down to the fact that you can have ArgIterator over an argument list containing another ArgIterator, allowing the latter to be mutated via the former. Thus, you can stash away an ArgIterator to the arguments of a function call that has already returned. This is basically the same as having a managed reference to a managed reference, and it's exactly why CLR prohibits this - but they forgot that ArgIterator is also a kind of a managed reference.
If duke can do this level of fraud, more universities will follow. Lets see which university will be next.
> I think it is more likely that those that already have that skill are the ones that pursue the Ph.D path

You might have a bit of that skill to start with but a PhD lets you practice and hone that skill, which you wouldn't be doing in a standard coding position.
A rogue’s gallery of bad actors is exploiting that critical WinRAR flaw
You just need to support economic majority, not everyone who lives on $2 a day. The channels can be closed in a reasonable time.

Big blockers are new flat earthers.
Maybe because they see that Amazon (and other companies) paid nothing in federal taxes last year despite federal taxes being a percentage tax.
I vote we change all user agents to just "curl".
Did you actually read that? It's not saying that was any generation's slogan but a bunch of reporters...
I think being a great scientist or artist revolves around doing repetitive tasks that aren't not fun or enjoyable. I believe people want to do difficult jobs, as long as they're meaningful.
That might be true, although you don't list the solutions, but it doesn't refute my point in any case.
Speaking of filtering, the diff between the two exploits is:

-"common_name=a'\$(ping -c 4 192.168.1.2)'b"
+"common_name='a\$(ping -c 4 192.168.1.2)'b"

and POST instead of GET (and kurl as the UA, of course).

Does their fix specifically check for injection starting with `a'` ? And only works for GET requests? Mind-boggling...

Edit: The new exploit also targets https instead of http. I would've said that surely that would not make a difference, but given what's already happened I'm not sure.
Exactly, once they roll out the patch with a boolean OR in the conditional as '$http_user_agent ~* "wget"', it'll pretty much be hack proof!
No. They grounded it because for a large portion of the fleet, there was no indicator for pilots that would inform them of abnormal behavior by a safety critical sensor.

Ergo. Grounded until fixed.
To those asking: the problem with gendered voice assistants is that they are almost always female. The argument is that this trains people to think of women as subservient, or things to be ordered around.

I love the idea behind this, although I don't necessarily agree that they have achieved their goal, but perhaps that says something about me more than it does about the service itself. To me, this still sounds like a female voice, just pitch-shifted.
The weird thing about Scala is it's so nice and pure except all of the Object methods from Java, which sort of break the whole FP thing with it. I really want to love Scala, but it always feels 9/10ths of the thing.
I said "mobile", not "cleaner". Sizes and aspect ratios are different on phones than PCs.
Overwatch Gameplay Architecture and Netcode
You're conflating C++/CLI with the MSVC /clr compiler switch. They're distinct.

With /clr:pure (which produces CIL only, although it is allowed to use memory-unsafe features like pointers), the entirety of ISO C90 is supported on CLR, with the sole exception of setjmp/longjmp.

C++/CLI adds language extensions that allow one to interact with the CLR object model from C++ code. It is only needed if you need to call into the .NET standard library, or other managed libraries - i.e. if your C code is not portable to begin with.
What's wrong and what's right? Who defines it? When? And why?
Should we kill cats and rats to stop extinctions?
>how a team of well-paid comfortable engineers got together and decided this patch was a good idea

Test-driven development
> "A/S/L"

I have not seen that in a long time.
So...will the censors risk blocking all of GitHub for this?
That's because it's like being a doctor trying to eradicate cancer that is spread throughout the patient's body in minute amounts. You can do a precision strike against one small area, but how do you eradicate all the cancer without killing healthy cells (also in this analogy killing any healthy cells makes you a murderer).

The only way to win is to convince the patient's immune system (the host country's civilians) to kill its own cancer.
Is the F-35 meant to be a true replacement for the A-10?
The idea, I think, is that it matters that/if we gender our digital servants—that as we use them more it will affect our sense of gender rolls. That Siri and Alexa are both female by default puts them in the stereotypical female-secretary roll.

I have Waze speak as a British male, of course then he sounds like a stereotypical butler. It would be fun if I could set it to be Batman or HAL9000, but it would probably get old.
Some racists are more kill-y than others.
That doesn't mean the process depends on a sim card. You can send the code to any number which can receive texts. (including landlines in many cases)
Not sure how you reached the conclusion that white nationalism doesn't have a real meaning. Googling "white nationalism" gives plenty of results that indicate "white nationalism" is an ideology that promotes white supremacy and/or a whites-only nation/racial segregation.

To quote Merriam Webster:

"one of a group of militant whites who espouse white supremacy and advocate enforced racial segregation"
New Amazon S3 Storage Class – Glacier Deep Archive
Oh, and it's probably worth noting that you need not even be an Australian citizen to be covered, you simply need to have users in Australia. Of course, whether Australia can enforce these laws against non-citizens is another matter.

However, this legislation was specifically put together with co-operation of all members of the five eyes, so there's a reasonable possibility of extradition. The Department of Home Affairs even made a public statement confirming as much. It seems to have since been pulled from their website, but is available at:

https://cryptome.org/2018/11/5-Eyes-Crypto.pdf

Five Eyes just wanted this legislation pushed through somewhere and targeted Australia because we:

- lack a bill of rights

- are constantly distracted by politicians backstabbing each other, and

- there's a strong 'think of the children' sentiment in Australia that can be (and has been) used to push through all sorts of egregious bills.
the could be accomplished just by having User-Agent: mobile, all the other data in the user-agent are useless for this purpose.
Poker is much harder now and it's hard to find tables that will happily pay off nitty play ad infinitum. I'd make a list of concepts you should learn about, but I think it'll be easier for me to make a list of books you should read:

The Mathematics of Poker (Chen and Ankenman)

Applications of No-Limit Poker (Janda)

Expert Heads up No-Limit Hold 'em (Tipton, this one is nice as the author is a Computer Scientist and also has a course on building a solver.)

Professional No Limit-Hold 'em (Flynn, Miller, Mehta)

Finally, you should get a membership to something like Upswing or RIO to help synthesize the information into a useful framework for play. Also, you'll want access to something like PIO or Pokersnowie for analysis of your hands.
> A mall is just one subset of the shops in a town.

As is Facebook a subset of social networks on the Internet.

> That's like telling the part of the population you don't like they don't need cars and mass transit, they can still just walk.

We do that. License suspensions are a thing.

> No, that's not winning in the marketplace of ideas.

Sure it is. The idea that "Nazis are harmful" has won a bit of a battle here. May it continue to.
It's an example of the magnitude of the defect and the urgency it cause. It is not advocating a course of action. The source article directly points out that using trim toggle would extend the time beyond 40 seconds.

Steering wheel is not analogous to a trim toggle, but rather the yoke. There's no appropriate analog for trim on a car.
I guess American Sign Language isn't as widespread as it used to be, now that everyone just texts all day anyway.
I also started programming in 65C02 assembly in the 80s on an Apple //e and have been a professional developer since 1996. During that time, I’ve only been anything close to management (the dev lead for a medium size company) for 2 years. I hated every minute of the lead part.

I left the company to work for a small startup and negotiated not to be a team lead. I reiterated that at my last review. I’m much more effective just being a member of different teams and guiding the teams through just mentoring, advising and demonstrating.

If at all possible, I plan to be here at least another 4 or 5 years, but this will be my last software development full time salaried job hopefully. I’ll be 50.

I personally haven’t heard ageism being that much of an issue from other developers who are also 40+ who have kept their skills and their network current - ie we hardly ever get rejected from jobs we apply for. But, I definitely plan on contracting or consulting after I leave my current job.
“I consider these keyboards the worst products in Apple history.“