skysight-inc/HackerNews huggingface dataset:
Thanks, I didn't know about this project and will definitely look at the implementation.

Their documentation says they use TCP, which usually means that it won't handle low latencies on Wi-Fi due to packet losses.

On the other hand, they have service discovery, remote control, and multi-room synchronization. All three features are planned but not yet supported in Roc. We'll add the first two in upcoming releases, but the multi-room support requires a serious research.

Their documentation also says the client can correct time deviations by playing faster or slower. We use resampling for that instead. I'm wondering how they can avoid glitches without using a resampler.

One more difference is that they use their own protocols (both for streaming and control) while Roc relies on standard RFCs.
That argument applies to pretty much every single unit test ever written. A function running on a single long can take 2^64 possible values. Impossible to test by your logic. Yet they're tested without issues constantly.

What you do is put together a long list of sample functions and sample arguments that covers the expected edge cases and then test those for equivalence. Hardly impossible. Just takes time. Not bulletproof but better than nothing.
I believe our brains value physical proximity more than anything else. A bit hyperbolic, and you can sometimes have a super strong connection with someone far away through letter etc, but someone you can sit next too and feel ok/happy/safe will quickly imprint your brain as someone important for you.
My guess is that at 5min resolution (288 data points per day), you're probably just better off going stock SQL. My understanding is that time series DBs start getting useful at higher write loads that standard SQL DBs aren't necessarily optimized for, and where you might want things like data to coalesce into larger timeframes to save storage, etc. I'm not an expert though, just what I've seen from my somewhat limited experience.
Doesn't work for me (latest FF on MacOS). I get TypeError: Componets.utils is undefined
We keep bees at our farm Guatemala. Once every couple months our hives are raided. We've set up motion-activated lights and other deterrents but the fact that hives are generally further removed from where people live makes them a very easy target.
> Too little too late, and I highly doubt that (5-year-old) Valhalla will deliver even one of the promised features (value types) in the next 3 years

I never understood the purpose of Valhalla. They should just introduce a 128-bit scalar type and call it a day. Nobody actually cares about automagically storing value types in HashMap — all interested parties (HFT, computing) have already written dedicated collection libraries for working with primitives, and those libraries have little in common with object-based ones.

> LLVM and webassembly are eating JVM's cake

pffft, hahahaha, no they don't.

JVM and LLVM don't even share same market niche — one is a feature-complete runtime, another is a "make-your-own-language" build kit. Webassembly? What webassembly?
On Android, the NoteLynx outliner app allows an item to have multiple parents. It's good for cross-linking notes in multiple contexts.

https://play.google.com/store/apps/details?id=com.astrodean....
I'm not a security expert by any means, but row hammer has always struck me as one of the most ingenious hacks ever. I mean if you can flip bits by sending electric current repeatedly through a channel then what can't you do? Nothing is sacred. There is no God
Jupiter's not always visible from Earth (sometimes it's behind the Sun). Earth is always visible from a geo sat (provided the satellite is working).
Yeah, a guy I worked with was known for crazy outbursts as well. Really mean behaviour, that sort of thing. After he got married and had a kid it mellowed a lot. And that's despite his frustrations with work being the same.
Would anyone mind sharing what time series DB they use in production, and what for? I'm assuming most are used for metrics in addition to a standard SQL database, but interested to find out if that's accurate. Thanks!
Because (stable) users are dumb, are easily manipulated and can't be trusted. Thus the mothership has to be in control for the greater good.
They also argue that enduser computers are already effectively "compromised" from a mozilla perspective because adware runs installers with admin privs and thus could insert things into the program folders. Thus anything the user can do adware could do too and therefore they can't give them any choice.

They put it in nicer words though.

To their credit, you can opt out but only if you switch to dev edition, nightly or custom builds, which either is a one-way road since downgrades corrupt profiles or tedious because you don't receive auto-updates.

But what they should really have done is allowing additional signing roots. Even secure boot does that.
Well, it was fun whilst it lasted Firefox. Sorry, but this is a deal-breaker for me.

Hello Chromium again...
I plan to learn Spanish by staying in Peru for a 2 months. I would duolingo spanish before that and put everything together and accelerate when i am in Peru.

Thats the plan for now anyways :D.
I learned Spanish 12 years ago by studying in Antigua, Guatemala then continuing to backpack through South America. I never felt that I learned Spanish until after about a month in Colombia where I had to use Spanish almost daily for the entire day.

I’ve tried DuoLingo for French and I’ve built several language apps myself. I think we’ll eventually get to the point where we can learn new languages from our phones but it will require a lot more content and interaction.

i haven’t updated my core apps in 4 years:

http://appstore.com/h4labs

At the moment I’m merely trying to assist the learning process with simple games:

Word Search:

- https://itunes.apple.com/us/app/h4labs-word-search/id1311744...

Matching Games:

- https://itunes.apple.com/us/app/pictures-and-words/id1459560...
- https://itunes.apple.com/sk/app/language-pairs/id1438817614?...

I’m looking for other ideas to build. At the moment, I’m working on a Verb Conjugation Game.

I’m also building Spanish verb rule database on Github:

https://github.com/melling/Spanish_Verbs/blob/master/Conjuga...
Well, it's the Guardian after all, what did you expect?

Establishment press was bad in the 60s already, which was why there was a flourishing counter-movement, from the early Rolling Stone to underground press.

In due time, the Rolling Stone turned to the content-less rag that it is today, and e.g. the once revolutionary Liberation turned into a centre-left more of the same, similar fate awaited most of the once alternative press.

Nowadays with the web as equalizer, alternative sources also directly compete for viewers with any established outlet (they're just another URL away). So they are far more fierce with them, presenting any opposing viewpoint as beyond the pale (even if shared by a great chunk of the population, or even the majority), and cheering for their de-platforming.
The one that is remotely done for you, without any action on your part.

Typically, a user has to click the installer or use package manager or something to get the update, it’s their decision they make locally. If a setting is in place where this decision can be made somewhere else, it’s now a remote thing, a remote update. Quite useful thing in some cases and one of the things that make SaaS possible in the first place.
Architects Suggest Notre Dame Cathedral Reconstruction Designs
And thank you for assuring me I wasn’t alone in worrying about that!
Compiling to eBPF is hard! The compiler must:
- avoid loops (backwards jumps) - unroll everything
- inline everything - no function calls

Basically, it's impossible to use clang to generate eBPF without -O2. Sorry.
(At least for public repos) Isn’t this almost a compliment? (Having another person host your code and use it?) xD
That is not Enterprise Software. It is less the language and the frameworks which are making it Enterprise but the requirements placed on them and the software development lifecycles.

Imagine you do a medical product and the regulations needed for FDA approval require you to check for vulnerabilities in your product and build infrastructure. Have you ever checked all packages in a npm dependency tree for vulnerabilities?
“Defending the Public Sphere Itself Is a Challenge in Journalism” (2018)
It sounds pretty impossible to me. I don't think I've had a 500 day streak of anything that isn't a biological function in my life. In the last 2 years I've not even maintained a streak of eating food every day.
>what does balanced mean to people who comment on the lack of balance in the news? giving equal weight and time to all viewpoints?

Covering all _major_ viewpoints with decency, and not demonizing the ones they disagree with.

Here's a trick impartial outlets use all the time, for example:

a favorite politician is presented in nice flattering photographs,

a politician they don't like is presented in unflattering photographs, selected to make them look evil, etc.

(Now extend this to coverage of their actions inside the articles).
Oracle Security Alert Advisory – CVE-2019-2725 WebLogic RCE
While it seems to have been used indiscriminately, I guess this is really targeted at private repos.

Yes, you'll likely have several copies of the code on dev machines, but you won't want the source to be made public.
I get the ostensible justification, but attacking this way requires the user to dig into the obscure dev settings and load an xpi from outside the browser[1]. Is there even one case of a user compromised that way?

[1] or at least they could have allowed that as a compromise
China also harvests organs from prisoners, including political prisoners. They claim that prisoner harvesting ended in 2015 and the system is 100% voluntary now. That's a blatant lie based on the numbers. They are marketing "halal" organs to Saudis, guess what groups those are coming from? This is a much deeper hole of darkness and depravity than the US prison system ever dreamed of being. It's evil.
Customer Segmentation with Python
And? If ads were ads and not malware trackers I wouldn't care. Calling these franken-programs ads stretches the word past its breaking point.

No one can stop actual ads - this comment was brought to you by Pepsi, Pepsi for the love of it. See? Everyone had to read the last sentence even if they had adblock on.
I used to believe that. And I see just too much negatives about it. You're half connected for tiny thing that may be important for you at one point but may not be, at the same time you're cut off from people sharing your place.

I guess cities today are so fluid people don't make connections, but to me that is a long term bomb ticking.

Oh and I was incapable of social bonding before, so I was pro-internet at first. In a way it's a mediocre medicine for the wrong diagnostic.
> These languages are not "formerly dynamically typed." These languages are fully dynamically typed. Dynamic typing does not mean the absence of static types!

No, dynamically typed means the program has only one type: the universal value.

> They enable testing for the presence of features at runtime, and conditionally invoking code that otherwise could not type check. [...] You can't write this in languages without dynamic types.

That's incorrect. Extensible idioms don't look the same as they do in dynamically typed languages, but looking the same is immaterial. The same sort of behavioral extensibility is achievable with static typing without reflection, for instance, as found in the Yi editor [1]. Once again, it's about protocols and interfaces.

> Example [1] - notice how this statically typed code is making a dynamic type query, illustrating that these concepts are completely compatible.

That is merely one way to do it

> My computer's programs rely on dynamic types. That's how they retain compatibility across different versions, and it's how the OS vendor keeps the programs working across system updates.

That's not dynamic typing, compatibility is the advantage of standardized protocols and interfaces.

[1] https://yi-editor.github.io/
I don't get the ransom thing: users of a git repository have a clone of the repo that contains the whole history, no? So isn't it trivial to recreate the repository?
At that rate each of your series will occupy << 1MB of space per year. I wonder why specialized tools would be needed for such a tiny problem.
Spotify Shareholder Letter Q1 2019 [pdf]
Huh? Not sure what you’re trying to say, but privilege isn’t something to shame someone over.

In my mind, understanding my privilege simply means that if I want to live in accordance with my own values, I have to recognize the biases that come with my privilege and try to move past them.

Social justice shouldn’t be enforced by the law — it should be a personal, moral imperative rather than a legally enforced one. That doesn’t mean there are no social consequences for being a selfish jerk, but anyone calling for the “pronoun police” is in a very small minority.
> Learning a language without interesting books/movies/tv shows behind it will most probably be a chore.

What language doesn't have interesting items of culture behind it?
Then you're arguing against your original point because they don't support free markets, they just think they do.

For example, Paul Joseph Watson in this tweet[1] says he's for free markets, limited government, and against monopolies. I'm pretty sure a quick search will show similar results for the others.

[1]
https://twitter.com/PrisonPlanet/status/1012108095286317058
Security isn't rendered in absolutes. We have to assume some sheepish new employee somewhere is scared of approaching management about a mistake they made committing a secret, so they reverse the commit and pretend nothing ever happened.

We have to try and mitigate damage from lapses in communication and protocol like that.
Great Employees Are Raised, Not Hired
Leading Security Experts Endorse Right to Repair
I had mine disabled. So let's think about this for a second. If I disable a security hole that you can drive a semi-truck through, I remain foobar'd. If I run my "secure" firefox configuration, with the security hole enabled, then they un-foobar me first. Before anyone else. So I could effectively get rewarded, for always keeping a security hole open. But I didn't keep it open, so... yeah... they'll get around to me sometime.

?

>:-(

Grrr.

I'm just getting old and curmudgeonly maybe? I've decided though, I'm starting an animated security blog to show people the ludicrousness of all this kind of stuff in plain language. I'll be Statler, and I just need someone to be Waldorf. Because this stuff really is getting Statler and Waldorf level ridiculous.
Au contraire, you should be eating a modest dose of nuts to avoid the development of peanut allergy: https://well.blogs.nytimes.com/2013/12/24/eating-nuts-in-pre...
Don't confuse dynamic typing with metaprogramming or fexpr. These are all orthogonal. Tooling for dynamically typed languages as a whole only have access to the AST, although some with the above features may have access to more.
London girl could be first to have “air pollution” listed as cause of death
I was curious if monkey babies also cry (I really thought they don't due to deadly consequences) but found this:

https://www.livescience.com/7778-crying-baby-monkeys-nerves....

There is an interesting quote:

> mothers appear to pay attention to who's around when their young cry. Semple's team observed that when dominant bystanders were nearby, mothers acquiesced to their babies' demands about twice as often as when they were alone or in the company of close relatives, which are more forgiving of tantrums.

> The study shows for the first time that, much like people, monkeys are aware of the social consequences of not only their own actions, but those of their babies, too.
Can we stop now blaming and smearing the pilots, who propably tried just about everything to try to control a plane that was completely out of control?

This, to me, is the most galling part in Boeing's current pr blitz.
Qakbot upgrade includes new obfuscation technique
How’s that a loophole? That’s literally how unanimous works, if EU wanted to be ruled by majority, they should have decided on that instead.
Someone named Shawn Zhang tweeted that an 800 year old mosque was demolished in Xinjiang. It was cited in thousands of news articles. He just made it it up. Retracted it after all the articles were published.

This all looks like a coordinated campaign by the US and corporate media to make China look Islamophobic.
I don't dispute that there is something that can be seen in the google maps. I also don't dispute that the "camps" have some numbers of people in them.

What I am claiming is that we should be very careful in evaluating what exactly among all the claims is true.

E.g:

- what is meant by "concentration camps"? Is the naming correct or a pure propaganda? I.e. are they comparable to those made by Nazis in WW II? Or,

- Are they comparable to the concentration camps in which the U.S. put the people of Japanese origin living in the U.S. during the same war? Or,

- Are they comparable to the U.S. prisons?

- How many "minority Muslims" are put in the camps? The title itself can be claimed to be "correct" even if the most of the people in the camps aren't minority Muslims and only a few "minority Muslims" are put there. And again, is that the best name for that "camp" etc.

- Did the "minority Muslims" in the "camps" perform some subversive activities before, i.e. does some legal ground exist?

- What is the treatment of the people in these camps?

- How many people are total in these camps and other prisons in China? China has almost 5 times more people than the U.S. so if the total is under 10 million of people, they have still less people in the prisons per citizen than the U.S. has(!)

- How can we be sure not to act like we acted after the "WMD" claims or "Nayirah testimony"? Before the discovery much later, you could have also responded that for what was claimed there's "vast evidence."
Would you feel the same if 'white' was replaced with 'Jewish'? It correlates even more with success, e.g. they are over-represented at Harvard by a factor of ~5 [1].

[1] https://www.hillel.org/college-guide/list/record/harvard-uni...
tl;dr https://storage.googleapis.com/pr-newsroom-wp/1/2019/04/EA_Q...
Monetyzer: The world is your oyster, it's about time you start collecting pearls.
Thanks. I wasn't aware of the distinction between the levels as I'm running them all up to five since Japanese is so completely foreign to me.

The Japanese course seems to be hated by the reddit crowd for learning the language, but it's been very beneficial to me. At least one reason is that if I stuck to writing the language in a workbook my progress on the language would be glacial. I would physically be able to write the characters better but would know a lot less of the language.
Sounds great! What about encryption? If that is used in any environment not in complete control of the user that should be mandatory. E.g. in an open wifi, a shared wifi, or directly over the internet. As the protocol is using RTP anyway, it should be easy to slap on SRTP or DTLS? For the beginning, it may even be sufficient to use a static symmetric key. Or directly use WebRTC which has that already included, but what about the FEC then?
> Heard of no-script?

Yes. I have friends that use it. They rarely run it on the entire web; they use it by default on unknown sites but they allow sites they use regularly to run unaudited JS so they can get things done. (The whole point of using NoScript instead of the config option to disable JavaScript is so that you can run some scripts.) This seems equivalent to not running random applications but letting trusted vendors ship you automatic updates.

> Heard of application sandboxing?

Yes. I even briefly worked on it in grad school before I left to join a company that was selling sandboxing for corporate desktops. But you were worried about "HW, electricity bills and connectivity," none of which application sandboxing helps: sandboxing helps which APIs you call but not how much resources you use, and application-level controls don't affect what an individual website uses. Regular ulimit-style limits work for limiting CPU usage. That was why I asked whether you have resource limits on requests from individual websites.

> Do you actually understand WHY we run web via HTML, JS and CSS and not as actual compiled applications randomly downloaded from internet?

I do—but again, that's about the API surface available to applications, not about the CPU or bandwidth resources available to applications, which is what you said you care about.

I am 100% sure of what I'm talking about. That's why I'm asking whether you are. I'm not being manipulative, just trying to figure out if you have a coherent threat model or not.
I think the previous poster makes a good point touting sculpting and design apps as better applications as they don’t need such force feedback devices.

These VR devices are already as expensive as game consoles and all you get is a single player experience that a companion can’t even watch as you play. The force feedback devices may improve individual experience but wouldn’t help the price point.
OEM Presentation Platform Vulnerabilities
Mind you, not officially!

However, the endemic corruption could be the real reason.
I appreciate your insights into Congo, but I doubt that the fear of disease and therefore of strangers, is a suistainable base for all peace.
Rather the opposite. One reason more to fear and hate the neighbours.
Dogs replaced kids
src: https://www.heise.de/newsticker/meldung/WLAN-Presenter-Syste...
In the desktop web app you can at least always take a test to skip a level or four. On mobile you have to spend credits to skip.
I have a genetic disorder that wasn't diagnosed until my kids were 11 and 13. The child in question has the same genetic disorder that wasn't diagnosed until a few weeks after I was diagnosed because they tested both my kids after I was diagnosed.

He and I both have found we continue to need to limit our consumption of peanuts because they are pro-inflammatory, having nothing whatsoever to do with allergy per se.

One size does not fit all.
Weird aside question: I notice the article says "at approximately 10:00pm GMT". Can someone explain why GMT might be chosen as a reference point here? Is there something I'm missing about the usage of GMT (and not UTC). It just seems particularly odd given that GMT is not (to my knowledge) actually being used as a concrete time-zone at the minute (BST is in effect for daylight savings).
Sounds like how party coalitions work in the US.
This smells of ageism.
Garbage Collection Semantics in Go
Update: I just discovered SRTP in the advanced features list. Awesome!
"Any" types do not imply dynamic typing. Languages like Haskell are purely statically typed yet do not require explicit, concrete types for everything. Type inference is the feature which bridges this gap.
You can do this on their mobile web app as well which is why I use that over the mobile application. The mobile web app experience is actually quite nice.
Thank you very much for the material!
Does the fix reach tor browser as well? Is Normandy available in tor browser?
> Firefox, it turns out, has a built-in telemetry system that defaults to enable exactly the same behavior: changing your system, to suit their desires.

An example of the typical use of this system: say Mozilla wants to enable video hardware acceleration in Firefox but they don't know if bugs in video drivers or in Firefox will make crashing more frequent. So they enable hardware acceleration for 1% of users instead of 100% and compare the reported crash rate between the two to determine if it's ready to be pushed out universally.