skysight-inc/HackerNews huggingface dataset:
> all logging and runtime data written only to a RAM disk, system and user data on entirely separate partitions, etc.

I suspect "we can fix it in a software update" lowers the priority of actually shipping this design.

and then add in "autopilot this year" and "model y coming soon", you get indefinite postponement.
I see search as a particular kind of problem that would be defined in a library, not a language. Unless it's a language built specifically to solve constraints (i.e., a logic programming language), which Erlang is not.

Can you point out where within Erlang you feel backtracking should be supported by the core library? It sounds to me like you want the language to be something it fundamentally isn't; i.e., more Prolog-like, and I'm uncertain as to why.
Huawei will commit to ‘no-spy agreements’ to win government contracts
I am a US citizen and I've traveled to 20+ countries. By far the most intensive and invasive border crossings have been entering Canada followed by entering the US.
Anyone know why this is so popular and getting upvoted?
Important:

> The memo released on Tuesday, which was dated April 16, has no long-term value as a precedent and can be reversed by a future general counsel. Its immediate consequence is to render moot three formal accusations, filed in different parts of the country, that Uber had violated federal labor law. The memo instructs the board’s regional offices to dismiss the charges if the people who made them do not withdraw them first.
Amazon’s Antitrust Paradox (2017)
This is a bit of a red herring, there's still cameras on everything, including previously banned "red light cameras".
They'll end up calling it "biometric something" to get around the ban anyways.
This seems like a common policy, and any connection to employee advocacy, or anything else going on at Google seem like speculation.
> any benchmark inherently correlates with every use case

Oh. That's what you thought I said? Right. I didn't mean to say that, and if somehow I did say that I withdraw. Benchmarks are valuable if you know how to use them, but of course I agree with you, a benchmark isn't always relevant to every use case.

Side note, quoting many small portions of a person's comment and replying exclusively to the quoted bits is inferior to replying to them with full sentences/paragraphs. I've only ever seen what you're doing done by folks who are super interested in arguing and completely uninterested in having a conversation.

It definitely comes across like you do have a problem, which you have repeatedly stated you do not (and I believe you)! It just muddies the water, what you're doing here.
It could be a very lucrative business. Some companies pay up to a million dollars for a WhatsApp bug https://zerodium.com/program.html

There is also a black-market that can be even more lucrative. A bug could be jackpot for criminals.

See also https://en.m.wikipedia.org/wiki/Market_for_zero-day_exploits

So yes, I'm pretty sure that there are various teams, including white-hats such as Google, black-hats, nation-states such as China / Russia, analyzing each and every update.

There was also an interesting article on hackernews a while back demonstrating the technique, there are some nice tools for this. Sorry, can't find the link now.
Bullshit, So far most vulnerabilities only affected Intel. Because of their choices in their design. AMD is way better, so far.
I sure hope the mods don't change it, because the title is accurate.
I use ubo and I've never, ever had that happen to me. My two cents.
Either the questions depend highly on your travel destination or I don't look very suspicious. Traveling to/from US EU the most I ever get is "is this for business or personal?".

I've even got a few friendly "welcome back" when returning to the states after longer trips
Horrifying. I don't think I could stand working for such a company.
They also selling bonds, after a $20B stock buyback.
It doesn't require projection to make that observation. A formerly religious person could make that observation and be talking about themselves. In fact, it would be kind of strange for a non-religious person to think that a higher power is the reason for the good aspects of religion.
This is a pretty egregiously editorialized title; what we know is that there's apparently an SSH keypair authorized on these devices, for which the private key is available on the device. That's a terrible, ugly vulnerability, but it's as likely due to stupidity as to malice.

The right title is something like: CVS-2019-1804: Cisco Nexus 9000 Switches Allow SSH As Root.
Tesla still has to meet vehicle safety regulations. It's a friggin' car not the Windows Insider Program. No one dies if my PC crashes.
IMO this is pure FUD, no actual correspondence with Tesla to back it up.

It would be silly for Tesla to argue that it's driver's fault because "beta".
Every other car manufacturer will say it's driver's responsibility when using autopark, full stop.
"We have incurred net losses in all periods since our inception, and we may not achieve or maintain profitability in the future. We experienced net losses of $91.3 million, $135.5 million, $140.1 million for fiscal 2017, fiscal 2018, and fiscal 2019, respectively. As of January 31, 2019, we had an accumulated deficit of $519.1 million."

Wow, I knew that they had great revenues and growth but this nugget is now becoming a common theme for all tech companies going IPO these days.
Erm, check out Wikipedia https://en.wikipedia.org/wiki/Meltdown_(security_vulnerabili... and follow the links? Meltdown is CVE-2017-5754, see: https://developer.arm.com/support/arm-security-updates/specu... where as I recall ARM initially described the Cortex-A75 as having a "variant", but now just lumps it in with the CVE. And the IBM info is also there, POWER7+ through POWER9, and per Red Hat, mainframe/System Z.
I agree they have better things to be doing but there's nothing wrong with them saying "we see where this road is going and we're not going down it". It's not like doing that costs money.
Err...that's the exact basis of the original google search algorithm, and what made it so good. You should read up on it, you might learn something.
It's a filing for CrowdStrike to go public. They open their books for the public to view.

HN is a very entrepreneurial board and we applaud any Silicon Valley company going public.
I experienced the same thing too until I disabled the Promotions tab.
Web Browser: firefox

Email Client: mu4e on emacs

Terminal: urxvt

IDE: vim and shell

File manager: shell

Basic Text Editor: vim

IRC/Messaging Client: weechat

PDF Reader: evince though I rarely use it

Office Suite: libreoffice though I rarely use it

Calendar: org-mode on emacs

Video Player: mpv

Music Player: mpv

Photo Viewer: viewnior

Screen recording: simplescreenrecorder though I rarely use it
There's a business that does this for ascribing blame for dog feces; shouldn't be hard to apply to waste, no matter the source.

https://www.cnbc.com/2018/12/19/pooprints-brings-in-millions...

(As with many social ills, it's likely a very small number of repeat offenders – so identifying & appropriate addressing them in a prioritized manner is the best way to a solution.)
I think they may be confounding pattern matching with unification.
Because it's yet another very unprofitable company's IPO... with a potential "profit window" in 10 centuries, when flying cars are a reality, robots take over the earth etc.

And all of this doesn't matter because the US has injected so much money with QE and so on the economy that even an American kid's 10 year old lemonade shop is worth a few billions.
Sky CREDIT SOLUTION, A legit credit repair company
There is this credit repair company that saved me early this year, I had a low credit of 405, and few hard inquiries, I google searched and found out about SKY CREDIT SOLUTION, they were apt and easy to access. They increased my FICO and cleared the inquiries. I would leave their contact here for you just in case you need it Email: SKYCREDITSOLUTION247@GMAIL.COM TEL: (620) 399 6316. I want you to have zero doubts about this, they are good at what they do.
> It isn't wrong.

In what was is it not wrong?

He estimated 1/3 commercials which was wrong. He estimated 2.2 hours of TV, which is wrong regardless of whether that includes commercials and regardless of whether the commercial ratio is 1/3 or 1/4. He also went back and edited it[1] to say 2-3 hours which is still wrong, because 3.3 is not between 2 and 3.

And for the record, commercials are still TV so scaling down to 3.3 is a really bizarre choice on your part.

[1] Actually rewrote essentially the entire comment removing almost everything I responded to.
What's the logic behind linking from HN to twitter?

I would've though it'd be easier to write on HN (and I know for a fact that it's painful for me to read on Twitter).

This is a genuine question by the way. I followed the link, then couldn't be bothered to try and make sense of it and got to wondering why you would do that.
> git doesn't verify its integrity recursively

Yes it does. On clone the entire history is recursively hashed, and incrementally on fetch.

There isn't even any place in the protocol to transfer pre-hashed content, it must be hashed to make it addressable.
I don't think you have the issue mentioned in the article.

If they could pull your logs, your emmc did not fail.

(not that they are handling other issues well)
I can think of 49 states that feel this way about your senators. Oh the irony.
Forgive me, if I'm being dense, but doesn't either of these cases depend on how the composed objects are being used?

In your functional example A is an input to B (or vice versa?), how do you propose testing one of the modules without first instantiating the other one?
I can understand that viewpoint. But if we look at the track record of how authorities actually use surveillance technology, it is aggressively used to squash dissent, rather than prevent/investigate crimes.

Yes, facial recognition could help cops identify a robber more quickly and yes surveillance has been used to expedite investigations, but what we've seen is that cops across the board will disproportionately abuse this sort of technology to track and monitor (and sometimes later harass) protesters, activists, ethnic/religious minorities and the undocumented.

Here's one instance at the federal level, but abuse happens at the state and local level constantly.

https://www.theguardian.com/us-news/2017/feb/10/standing-roc...
San Francisco Bans Agency Use of Facial Recognition Tech
I think it's because 30 supposedly sounds/looks better than 32. 32 is 4x8 after all, so I imagine many "30h jobs" would turn out to be 32h.

Example: https://wildbit.com/blog/2017/10/19/4-day-work-week-update (also found a job offer by this company on the board).
I don't think this legislation bans use of face-recognition by individuals & private entities in public. Only by the city agencies themselves.
Just to add, the relative lack of comments here is related to the density of information presented here relative to the age of the submission (so people haven't gotten through it yet).
Why not? Afaik outside of the store is a public property, and anyone can set up a camera there and record with zero issues, since recording anything on public property is a fair game.
If someone wants to leverage speculative-execution vulnerabilities to get that sort of information off of my PC, it's not a problem that can be solved by yet another security patch. Don't reduce my PC's performance for the sake of somebody else's security concern.

At the end of the day the only secure computer is one that's turned off and locked up in a supply closet.
It does, because a tag pointing to the malicious content wouldn't hash with sha1collisiondetection's modified SHA-1, just like you can't add the SHAttered PDFs to git.
Depending on the place name and how obnoxious the popup is, it may be yet another thing for someone to be reading at a bad time, which could cause a collision.

With road signs and billboards, the road is still in your peripheral vision, but with many car/cupholder mounts you have to look down enough to where you can't really react to a car coming at you from the left or right.
>The board’s general counsel, an appointee of President Trump

ah!
If your kids are avoiding 400 hours of commercials a year, they are watching way too fucking much Netflix.
Are such IPOs any indicator of economic downturn to come?
There's a generalized factor that makes it easier to both climb the corporate ladder and make interpersonal connections. On the other hand, it takes more and more effort to win at higher and higher levels of the org-chart tournament, leaving less time for outside hobbies that can foster a sense of belonging.
Tegile Intelliflash – Password Disclosure
HN has quite a few infosec professionals who have obtained a fair bit of swag and gotten reasonably drunk on CrowdStrike investors' dime at various security conference booths/events/parties.

The SG&A line item in their financials is relevant to their interests. Specifically, their sales/swag/booze operation cost over twice as much as their R&D operations ( $172MM vs $84MM in 2018 ). Or, to put it another way, getting CISOs sauced outside the Moscone is twice as important to them as actually producing the software for their blinky boxes.

If they can pull another $300MM from retail in an IPO, our blood alcohol content will be secured at cons for another two years, assuming they continue to burn $140MM annually.
I went looking because I believe it does, and found a Consumerist article, "People Love Their Cars Because They're Lonely", discussing a journal article, "Truly, Madly, Deeply: Consumers in the Throes of Material Possession Love".

I believe it does because the greater distance cars allow you to travel mean the areas you spend your time in are less likely to coincide with the areas others spend time in, so unlike the small town I grew up in, people don't become familiar, then friendships don't form. The car also allows shopping in large supermarkets, which result in the local shops closing down, and chance to become familiar with faces of the staff and fellow customers is lost.

I've been at parties and been recognised ~"I see you cycling along xxx", which I can't imagine happens to people who drive, both due to the enclosed nature of cars and the speed.

https://consumerist.com/2011/07/22/study-people-love-their-c...

https://www.jstor.org/stable/10.1086/658338
Actually, every control in the model 3 is used for multiple functions (for example drive selector also controls autopilot, scroll wheel controls many functions, etc)

I guess you'll just have to drive with your phone.
One of the symptoms of our current political paralysis is the over-reliance on executive agencies to set policy instead of Congress debating and passing laws. Instead of trying to get net neutrality through law, we depend on the FCC trying to shoe-horn ISP into an old law designed for phone companies. Instead of explicitly talking about what protections people who sign up for the "gig" economy should get, we try to shoe-horn them into either employees or contractors when in reality they are in a gray zone and we don't have the political will to conduct a debate on what we should do.

The downside is instead of having an open debate about the pros/cons and having a law with some staying power, the situation changes depending on the whims of whoever is President and who they appoint to various administrative positions.
Does Tesla's system already show ads in place discovery/search results? I would imagine they have a "no ads" contract with Google.
Balancing out a missing team member 12 times a year for one day vs. once a year for up to 16 days (12 days + 2 weekends with 2 days each) is much more justifiable for the employer.
I'm not really sure what the question is supposed to be. You could discover an Intel vulnerability and give them a 90 day timeline, or, for that matter, do what the Metasploit founders would have done and just immediately code up an exploit and publish it with no warning. All of these are viable options and all have precedent; it's up to the people discovering the flaws to make their own decisions.

It's particularly weird in this case to suggest that the embargo didn't help anyone, since (1) nobody appears to have leaked these flaws and (2) the cloud providers all seem to have fixes queued up.

Intel claims to have discovered some of these flaws internally, and this is a bug class we've known about (for realsies) for a little bit over a year now, in a class of products for which development cycles are themselves denominated in multiple years, so I'd cut them a bit of slack.
> Why would I ever tell a coworker private information about myself?

Because you've spent most of your waking hours with them every day for a third of your life and we're social creatures.

If I didn't make friends with my coworkers, I wouldn't have friends.
would if we could. that genie's been long out of the bottle, but facial recognition hasn't been adopted to the same extent, yet, because the technology is so nascent.
Seems like no one fell for this though. https://www.blockchain.com/btc/address/1ES14c7qLb5CYhLMUekct...
Woot woot Harry, Tom and Team!
I’d rather call it internet “cash” rather than just internet money. We can use money online (credit card, paypal), but there’s so much consumer protection stuff that goes along with it that makes it hard to use like paper cash—irreversible, untraceable.m, unsanctioned usage.

Perfect for things governments hate: illegal stuff like extortion and drugs.
That's a space Cafés Philosophiques fill in secular society in some places, but I don't want to go to one in America. It'll probably be full of weirdos. "Third places" like this need to be absent of tension.

Anyway, I fixed that by having a key set of friends who always hang out, usually at a specific friend's home. We play board games guaranteed every two weeks, are on a shared Slack instance, and hang out practically every week. Feels good.

Back in the UK, it was the pub. Same folks at the pub. You can count on them for help. Quite a family.
Yes, it was probably another vast multi-decade inter-company conspiracy entirely orchestrated & executed in secret by THIS lone, junior engineer, hired last January. Amazing how systemic this kind of problem is.
When Adobe moved Photoshop to this kind of licence, every user should have been complained and refused to upgrade. But seemingly most of them did upgrade and therefore this is the new "normal". So, good luck with that. I'm not going to fight the war of someone who charges 6000€ for a logo.
It's a non-custodial wallet. Per recent FinCEN guidance, non-custodial wallets are not regulated as money transmitters.
Disabling it temporarily always fixes the problem, so I have assumed it is due to UBO blocking something which if YT sees has been blocked enough times for a specific visitor, they will prevent video from loading, but maybe my hypothesis is incorrect. This only happens when I’m watching a lot of YouTube videos one after the other.
Maybe because Intel has shipped a thousand more SKUs and millions more CPUs with Meltdown than ARM, for which the Cortex-A75 was a new design, and IBM, which doesn't ship huge numbers of either POWER or mainframe CPUs??
Crowdstrike seems very well-connected politically. The DNC chose to have them forensically examine their hacked servers to the exclusion of the FBI.
I remember a leak about a call to become "more agile" like some ARM designers, implying less time spent on verification.
I'm not sure on its academic validity, but Hallucinogens and Culture by Peter T. Furst is an interesting look into the use of hallucinogens by different peoples around the world and the role of these plants in forming our religions and cultures.
Too bad this software failure can't be blamed on Indian H1Bs for the lack of quality work of an American corp. If there was a way, Indian H1Bs would have got the blame for sure.
Have all your team members work 30h and the "not pulling their weight" argument is gone.

Or if that is not sustainable/beneficial for other types of jobs than developer, only apply the 30h to your developer team. But do it consistent per team.

Another thought, I haven't seen this dynamic with part-time employees, so I don't think it applies to 30h employees either. Have you seen this with part-time employees?
heat exposure and air pollution

So, the solution to the burning building is obviously better air filters, insulation and air conditioning. That way, the superstructure can continue to burn, while the people happily continue to reside safely within the confines of their own home.

Translated according to the spirit of the metaphore, the fix for endemic loneliness shall be, what else?

More apps!
You’re joking right?

It’s “allow ssh as root with a publicly available ssh key”. Your version is making it sound mundane.
However, please do not project your feelings on religious people.

As a formerly very devoutly religious person, I have to say I agree with the parent comment that religion is the worst part of organized religion. I have been much happier (and to your point, "saner") since I stopped believing. One of the things I definitely understand but don't miss is the defensiveness that comes out when someone says they are better off without religious belief.

Returning to the main topic of loneliness/community, I think we can have a sense of shared purpose without needing a sense of higher purpose. I hope we can find a way as a society to rebuild the carrot of strong communities without needing the threat of loss of salvation as stick.
SF already has this: http://mobile311.sfgov.org/reports?utf8=%E2%9C%93&q=poop

Just report the poop on 311 and they go clean it up. Yes it works.
I sure the air port will continue gathering all the facial data it wants. As will every federal agency and state agency
Yes, and usually for a pretty straightforward reason: these companies are investing substantial sums of money into buying market share, and, when they (a) win themselves a defensible position in the market and (b) generate enough revenue to prove the market to investors, they can cut back on those expenses and take profits. Meanwhile, investors are looking for growth and, more generally, future profits; nobody's all that interested in taking a Crowdstrike dividend this year.

If a dollar in profits taken today is multiple dollars in future profits left on the table, you can see why a business would engineer its finances to plow every cent back into the business.

Obviously, this plan can always go spectacularly wrong, but you can't just point to the strategy itself as evidence that will happen. You need an actual argument to back it up.
Because they are the ones who blamed Russia for the DNC hack:

https://en.wikipedia.org/wiki/CrowdStrike#Russian_hacking_in...
Actually, that statement,

>"For flight-critical software, I don’t think you want us to rush, rush it faster.”

may come back to haunt them, given it doesn't line up with the paperwork they filed, or with anything about the way they tried to get the plane certified. The fact he said that before the investigation completed implies they knew how critical MCAS was.

Something tells me "that was just talk!", will not go over well.

EDIT: deparaphrased quote.
> In one case I didn't see the article and in the other it didn't cross my mind. But also, that topic isn't so highly charged, and I didn't see nationalistic flamewar getting in there.

They are right there, in light-gray color at the bottom of the respective articles. Now that you have been made aware for the problem, will you change those articles' titles? I don't understand how you can claim one title is "baitsy" while the other to examples are not.
Damning article for Boeing execs... just one quote:

“We don’t want to rush and do a crappy job of fixing the right things and we also don’t want to fix the wrong things,” Mr. Sinnett said, later adding, “For flight-critical software, I don’t think you want us to rush, rush it faster.”

Well Mr. Sinnett, that's exactly what you did in the development of the 737 Max.