skysight-inc/HackerNews huggingface dataset:
> I'm giving you the benefit of the doubt that you're not one of his racist sycophants.

Much appreciated, but the way you word this implies that if some one disagrees with you, he is a racist sycophant.

> Every one of his racist sycophants I've ever encountered have been men.

But I've usually heard "man splaining" defined as a man explaining "at" a woman. Have all the targets of his "racist sycophants" been women? You are making sex an issue where it does not need to be one.

> Many how have an extremely simplistic, distorted understanding of what racism is. That doesn't make them right.

You can't just claim every one who disagrees with your point of view on this has a "simplistic, distorted understanding" without supporting that. My understanding is pretty simple: racism is deliberately treating people differently because of race. I guess you could take that as simple, but I view it as a stark moral wrong and so don't see the need for a more complex one. If you disagree, please feel free to discuss why.

> criticizing their political beliefs by associating them with Eric Raymond's racist beliefs

No reason to try to draw a baseless association between other stuff and bad stuff some one has said.

> objective facts.

Any thing you didn't provide a link for I consider subjective. You can't declare your opinions "the objective fact".

> If they don't have a problem with the hostile political messages that ESR adulterates all of his arguments with, then they should be able to tolerate mine too.

I don't like the political message with which he adulterates his beliefs, nor did I say I did. I opened my above reply by criticizing him. However, I see no reason why I cannot criticize you for adding unnecessary political opinions to a discussion.

> Perhaps they should read ESR's Sex Tips for Geeks

This whole "writing" seems to be contemptible. I'm not defending it.

In summary, I'm not defending this guy; I don't like him either. I just don't like the way you stated your objection.
For RingCentral or Zoom? Could be because I have both on my machine.
I think the previous poster meant learning should be incentivised with rewards; rather than a behaviour forced because the alternative is punishment.
I discovered the hard way that a library I was using would parse an IP address in a URL like 192.168.000.077 as 192.168.0.63. Yeah... it treated leading zeros as octal in individual components of the IP. Lots of fun to track down.
Thank You Fast AI- I am indebted.
the company doesn't need to understand good or bad, just profit. so, regulate them. disincentivise the negative externalities of greenhouse gas pollution through a carbon tax.

then the next question would be "how do we get our government to install a carbon tax? (and not revoke it after a few years)" and "how do we negotiate trade deals with other governments that haven't signed up to a similar carbon tax, to pressure them to establish one as well?"
Apple discontinued the last MacBook Pro with a function row
European Net Neutrality Is Under Attack
Give this a try:

https://www.objective-see.com/products/blockblock.html
Could you explain the problem in words, please? Not in a position to watch a video right now.
What about licenses?
> the Zoom client starts up. It'd be hard to miss

They already have you on video at that point. The summary above is very fair, there's no point trying to throw more PR at this problem. Ignoring other issues and focusing on the main point: They need to increase security by a huge amount by implementing a simple dialog with "Yes" not selected as default. They also need to communicate why they did this to their users and be honest.
Only it's a bit easier and cheaper (en masse) to go to the New World instead of space which will likely be quite exclusive.
S.w.o.r.d. (Comics)
Yes, this is confirmed by study after study after study.

People perform better at tasks requiring deep thought and creativity when doing them for their own sake, instead of based on extrinsic rewards/punishments.
IF you want to get every possible date for Easter, you'll need many, many more.
”This behavior might not be IEEE defined, but even as IEEE undefined (and implementation dependent), it still qualifies those IEEE compliant implementations as non-deterministic.”

Although IEEE is non-deterministic for other reasons (the transcendental example below is a good illustration) this argument is incorrect.

Performing operations on a non-IEEE 80-bit representation and then using a non-IEEE comparison is not a valid argument about non-determinism in IEEE.
Code complete speaks about subroutines if I understood correctly.
I think that in functions, or even objects, the results would be very different.
I usually find the shortest functions more powerful and clear.
For example the pipe operator in F# that is nothing more than:

let (|>) f g = g f

While it has huge benefits in the overall readability of the language.
They definitely are, but I'm replying to the idea that the drop in life expectancy is because of inefficiencies - the us system has always been pretty inefficient and nothing there has changed in a way that would trigger a decrease in expectancy as far as I know. This current decrease in life expectancy seems to be linked to the ongoing opiod crisis, not a sudden decrease in health delivery efficiency
> could have

But they didn't, that's a detail you can't just conveniently drop to argue in the abstract.
This has always been interesting to me. It's been awhile since I read about it last, though, and I remember reading some criticisms or concerns that posits (or unums? what's the difference?) would end up being slower for some reason. I don't remember the arguments though, or where I saw them; I think the idea was that there were some edge cases that were common enough in practice that overall it would slow things down. It would be nice to see a balanced discussion of the ideas (pros and cons).
I think the parent is saying that Nadella led the charge into the cloud inside MS under Ballmer, which is a big reason he was considered for the CEO position after Ballmer.
cicada> echo -e '#!/bin/sh\necho works' > /bin/1
cicada> chmod +x /bin/1
cicada> 1
1

bash> 1
works

cicada> touch a b; echo "$(echo "$(echo "$(ls)")")"
$(echo $(echo a
b

bash> echo "$(echo "$(echo "$(ls)")")"
a
b
>Initially there was hope that non-technical business users would be able to use the GUI to configure the application, but that turned out to be a false hope

Entire companies, products, and developers encapsulated in one beatiful sentence.
Related?

https://medium.com/@jonathan.leitschuh/zoom-zero-day-4-milli...
Even today Twitch chat is full of "Hold CTRL and type "WTF" for ℱ𝓪𝓷𝓬𝔂 𝓦𝓣ℱ" and people end up pressing ctrl+w, which closes the tab.
foliate seems a great thing, but

/usr/bin/com.github.johnfactotum.Foliate

.. come on
Social Physics – Behaviour in Bulk More Predictable Than We Like to Imagine
He will keep failing to replace IEEE floating point as long as he insists on making NEGATIVE infinity the same as POSITIVE infinity.

Also, IEEE 754 floating point standard guarantees the results of addition, subtraction, multiplication, division, and square root to be the exact correctly rounded value, ie a deterministic result, contrary to what he says.
Perhaps we’re talking past each other? When I go to https://github.com/docker-library/official-images/blob/maste...

It only is showing the newest version of node 8.16 listed in the manifest file. In other words, if I had an image based off node 8.15, it isn’t going to be updated ever.

So it’s not a matter of just rebuilding regularly, if you aren’t updating your dockerfiles to use newer language versions, you also aren’t going to get system updates.

Edit: I think i do see your point which is that if you are completely up to date on language versions, clearing the build cache every once in a while may still help get a system update if an upstream image is changed in between the release of a new language tag.
> But insisting Zoom change the software because it's possible some doofus might be duped into joining a meeting with someone is kinda ridiculous, IMO.

In my experience (the energy sector), most of the people I interact with on Zoom would definitely fall for joining some random meeting that popped up. They are incredibly good at their field of expertise, but certainly doofuses when it comes to knowing how to click on things in zoom.
Note the first comment there shows that their EGLStreams implementation shipped with vsync broken. EGLStreams seems attractive to NVIDIA because it was easy to implement (incorrectly). The features they talk about enabling on Tegra are not impossible with GBM, it just may involve adding a feature.
From what I've read, Nokia had some issues where certain departments wanted to stick with Symbian, and others were working in a new OS. The Nokia N9 was the last phone they released with the new OS (Meego).

I believe they would have been fine if they focused on the European and Asian markets instead of the US.
What happens when you close the lid is a configurable option:
https://youtu.be/OFfDSEoneok
> All first-time Zoom users, upon joining their first meeting from a given device, are asked whether they would like their video to be turned OFF. For subsequent meetings, users can configure their client video settings to turn OFF video when joining a meeting.
> Additionally, system administrators can pre-configure video settings for supported devices at the time of install or change the configuration at anytime.

TBH, they're not as dismissive as you're sounding them to be
That's a bit of a shame.
Let's change the world.
While I understand the desire to have Instagram, and others, police their sites to prevent bullying, I also think it's pointless to a large extend.

The head of Instagrams public policy is very correct when she states: Teens are exceptionally creative. Assholes and bullies have always existed, 25 years ago at least you had a respite at home after school, but now social media makes victims available 24-7.

Not to sound defeatist, but I don't think social media can exist while preventing bullying. For the victims it's binary, either they're being bullied or they're not, so social media needs to prevent 100% for bullying and that is not going to happen, people will always find a way to be assholes.

In my mind the effort is misplaced, at least for teenagers who often know the bully. It's the schools and parents that need to take action, not some random faceless US corporation.

For 100% online bullying... I don't think there's away around that. You can try to reduce the amount, but you won't be able to eliminate it.
John Chiarello
I believe you can also represent an ipv4 address in base 10, by doing something like

a.b.c.d, (a * 2^24) + (b * 2^16) + (c * 2^8) + (d * 2^0)

(the first time i did this was the first time I understood raising a constant to zero was one, so I left it there for myself)

The resultant number should be somewhere between 0 and (2^32)-1. It's a neat toy. I'm not sure what value it has in practice.

192 x 2^24 + 168 x 2^16 + 0 x 2^8 + 1 x 2^0 == 3232235521

ping 3232235521
PING 3232235521 (192.168.0.1): 56 data bytes
Request timeout for icmp_seq 0
^C
You could get away with 7 if you're willing to switch calendars in the middle of the year. Buy one leap year calendar for each day of the week. If it's a leap year, use as normal. If it's not, on March 1, just switch to the calendar with the correct March 1 day.
note the last part where the directory is removed (~/.zoomus) and touch creates a file ~/.zoomus. I am assuming a re-install will fail because it cannot create a directory again when there is already an existing file.

My guess is that if sometime in the future you want to use zoom again, the install will fail until you remove the file ~/.zoom
It’s All about Perspective
Yep, they have lost my trust too, especially with their terrible response on the blog. And I don't trust that they simply won't remove my mitigations if I have that app on my system again.
5% detection rate means: If I get shot 20 times, I won't be happy if my bulletproof vest stopped one of the bullets, and that happening 5000 times won't make me happier.
This telemetry thing is surprisingly overlooked in these discussions. I've disabled tracking and reporting on at least 4 separate occasions since windows auto updated my laptop from Windows 7 to windows 10 without user permission. They just keep adding auto-enabled features that override the previously disabled features doing the same thing.

"We heard you when you said you didn't want cameras automatically monitoring you. So we added this new feature where you can disable cameras based on DAY OF THE WEEK and turned every day on for your convenience"

Microsoft knows it lost the online tracking game, so it's playing dumb and putting in privacy-invading features and overriding user selections yearly. Why rely on a browser when you control the OS?

The paranoid part of me thinks windows is giving away windows 10 for free because it's making money selling the user data and access to intelligence agencies.

I know apple has received some flak for updates slowing their computers, but windows is no better. My 4 year old laptop is basically unusable at this point because every action takes 10-15s.
>Customer support expectations are low in the cloud (AWS provides minimal support, so MS can too).

What.

Last I checked anyone with any substantial cloud deployment pays at least the 7%-3% of the bill for AWS support tier.

Which is excellent support usually.
The 400 year rule is already accounted for by taking the year mod 400. 2000, 2400, 2800, etc. will all use the same calendar.
I do NOT appear to have the web server running, but I did have the ~/.zoomus folder and the ZoomOpener app there.

Is this because I'm scrupulous about killing LaunchAgents and LaunchDaemons?
Can I ask you to ask a question that's not about their apps?

"I understand many if not all of your employees, and even your interns, are technically capable of accessing at least some data from any user, should they decide to do so against Facebook's will. I also understand the repercussion for this is that they would get fired and potentially sued. However, this is not accepted practice in every company that handle such sensitive data on users' personal lives. Moreover, it is easy to imagine adversaries and targets for which the risk of getting fired and/or sued is easily worth the benefit of obtaining a particular user's private data. How, then, do your security experts, who take security seriously and who surely understand the notion of 'defense in depth', justify that the proper safeguard is an employment/legal threat, and that there should not be a technical barrier preventing interns or other normal employees from accessing any user data?"

Bonus points if you can get them to talk such occurrences, which they almost certainly won't tell you, and why users should trust that they're handling this properly when they're unwilling to report sufficiently precise information on such incidents.
It appears that two of Zoom's competitors, Blue Jeans and Webex, also use web servers on localhost:

https://twitter.com/anthonypjshaw/status/1148470933901864960
I work on the assumption that everything I do on Facebook platforms including WhatsApp is secure from random hackers but not secure from the Five Eyes.

Years ago in the Snowden docs there was a diagram of a link into Google's infrastructure where they could take the SSL off and put it back on again, fooling people into thinking everything said about SSL and HTTPS implied actual privacy.

Since this is a taboo, 'not this again' type of question, can you think of ways to ask this in such a way they can only lie?

For instance, what guarantees can Facebook offer to their users that their messages are not being mass intercepted by Five Eyes?

I am fine with police with a job to do getting someone's texts, e.g. if someone is in a road traffic accident when they were texting on WhatsApp, I would gladly have the police get access to that person's data. However, the mass surveillance and the chilling effects that go with it are not good for society. It is a breach of privacy. If the government do such things it is still illegal. Even if they write laws that say it is okay, it is not. So rather than sweep this topic under the rug, I would like the answer from Facebook as to what they are doing and what they would do if their customers were subject to mass surveillance from Five Eyes.

I don't think it is unreasonable to ask this.
They see easy money, they get easy money, poor people get f.
Looks like the tmux integration is in the works https://bugs.launchpad.net/terminator/+bug/1301605
Looks like they are doubling down on the Touch Bar... still not convinced. There are times when it is quite neat but an equal amount of times where it is inferior to real keys. Using it outdoors is one example, can hardly read it if it’s bright.
Thinkpads are growing increasingly appealing to me. I just feel less and less at home with Apple Computing products.
Between 00:15 and 01:30 it’s just waiting, so you might want to skip that section if you’re only interested in seeing it happen.
These meeting apps feel like the browser plugins of the 2000's. There are so many that do almost the same thing they now resort to seriously insecure methods to make sure you have theirs installed and never remove it.

Apparently one less click is a competitive advantage, whatever the cost.
>From what I’ve seen, it’s working: Google simply doesn’t have the kind of relationships in the enterprise IT world that Microsoft does.

Is this anecdotal or is there some data on this? I'm kind of amazed how little attention G-Suite seems to get when there is such a huge gap in functionality between their office suite and Microsoft's. It seems like Google could be growing it by leaps and bounds if they wanted to.
> A basic windows license, sql server express, and iis should work fine though.

The point is that the partner was incentivized to not do something simple like this. I think many would, but many did not especially in the mid- and enterprise spaces where this stuff eventually caught up.
Sorry, I'm not sure what you're asking...? My comments were merely trying to clarify your question about the Riot client/app.
It's ridiculous to install a constantly running web service that uses tricks to circumvent CORS protection and to get around Safari's protections, which were both rightly created to improve user's security.

It's not a "so-called vulnerability". As the article describes, this could be used in concert with another vulnerability to achieve RCE. Combining vulnerabilities is often how RCE is attained.

These actions undo the thoughtful work of information security professionals to protect users. It's astonishing to me that people can't see what's wrong here.
> I'd add that restarting an unchanged executable with an altered config file is going to be considerably faster than recompiling it.

Why should it be? We presumably have a VCS tag corresponding to the current version such that it would be very easy to check out the corresponding version and change only one file. Then an incremental rebuild with just that one file change should not take a significant amount of time. The business already needs to be able to fix code bugs quickly - hoping that any given issue could be resolved by a config change rather than a code change is not a sound strategy. So you need to have a process for deploying code fixes fast, and then you can just reuse that process.

For large systems compilation time is not actually the bottleneck for deploying a change - rather it's the testing (particularly integration testing). But actually a config change is just as dangerous as a code change, and the same level of testing is usually appropriate. In my experience many - perhaps most - production outages tend to be caused by "config changes".

> If that's not a config file, then what are you suggesting?

At some point an application does need to have dynamic behaviour in response to some form of input. But I'd argue that we're quite good at dealing with the things we see as first-class input - we know the importance of validating input before processing it, testing different input-handling code paths, and so on. "Config" tends to not be treated the same way - all too often the testers see it as part of the code and don't test config changes like other user input changes, but the coders don't test them like code changes either. It's a dangerous ambiguity; the system is made more robust by forcing everything to be one or the other.
> The problem with cash is that it prohibits sensible monetary policy in certain situations

This is a feature not a bug.
If you skip the PR, you'll notice that they killed the non-TB Macbook Pro. Really a shame to see them double down on a failed design. I am still hopeful that the next generation will kill the TB off.
You can reasonably expect that without any of this nonsense since it is so rare that things like that happen.
Or primorials, which generally have lots of divisors compared to their size. Primorials go 123251723111... Basically just include the 'new' prime factors in your factorial. But even these aren't necessarily "the best" for getting lots of divisors for their size since, well, for example you multiple by 11 maybe you should multiply by a another 2 instead - does the reduced size more than compensate from the reduced divisors?

https://en.wikipedia.org/wiki/Primorial
Can confirm, CORS (Origin: ramdomsite.tld to localhost) works just fine in Chrome.

If you have a CORS enable server on localhost you can make requests to it from http://www.test-cors.org
Jonathan pointed out something important on the chat last night. In many cases, the auto-join is a vulnerability it itself even if the video doesn't turn on.

It allows the attacker to potentially unmask your identity if you are logged into Zoom. When you join the call, you will show up in the participants list.

This is definitely something that you would not want to happen on various parts of the web. It kills your ability to browse privately.
> Calibre: Failed to open

Perhaps this says more about Arch than it does Calibre.
But that's a really weird way of looking at the problem, unless you're Instagram.

Continuously closing accounts, blocking content and reporting bullying isn't fixing anything. In some cases I get the feeling that it will make the problem worse.

We want to stop the bullying, not simply remove the evidence of it. Instagram can't prevent bullying, they can only hide parts of it.
> But they didn't

Because there was a more convenient option. I think they'll just run their own alternative, especially as domains are cheap. Also, what about that namecoin thing? Seems like a workaround.
Thats awesome. Reminded me of the Russian Beluga story https://www.livescience.com/65359-beluga-whale-russian-spy.h...
Interesting to me that this would be your CTO’s decision.