skysight-inc/HackerNews huggingface dataset:
That particular niche probably won't be conquered until hardware encoders come to GPU. In the meantime you might be able to get hardware accelerated VP9 encoding on some devices if patents are important.

It's a slightly unfortunate situation that VP9 got overshadowed by AV1. If Apple had got on board with it at the time we'd already have a royalty free codec utopia.

But no point crying over spilt milk, hopefully they follow through on AV1 as they are rumored/expected to.
Starshot, the audacious plan to shoot tiny ships to Alpha Centauri
This company is completely new to me, but they appear to be in North America only. Also, is it normal to call yourself 'posh' over there? If someone did it in the UK it would be in the same category as someone with a business called "Honest John's Used Cars".
> it looked like a conspiracy to me

Not a conspiracy ; ). It has to do with the exponentiation. Most fast math libraries exponentiate quickly by squaring and multiplying: if you want to compute, say, x^23, you can either multiply x by itself 23 times, or you can compute: ((((x^2)^2)x)^2)x^2)x: four squaring operations and four multiplications for a savings of 15 operations. You can do this factoring easily based on the binary representation of the exponent - in this case, 23 is 10111. So I’m going to square x 5 times (since the bit length of the representation is 5 bits long) and additionally multiply x by the result every time I encounter a one bit. Now, if I want to speed this up, it’s in my best interest to choose an exponent with the fewest one bits possible - preferably with a one at the beginning and a one at the end, so now I only have to square _n_ times and multiply twice. As it turns out, numbers whose binary representation have a one at the beginning and a one at the end turn out to be Fermat primes: 2^n+1.
Not only does Eric S Raymond believe blacks are stupid and violent, but he also virulently agrees with Russ Nelson's infamous article entitled "Blacks are Lazy", and calls people who found that objectionable "fools and thugs". (And as we all know, "thugs" is a dog-whistle for the n-word.)

https://en.wikipedia.org/wiki/Talk:Russ_Nelson#Blacks_are_la...

Eric S Raymond threw down the gauntlet and defended Russ Nelson's infamous "Blacks are Lazy" article by calling everyone who wanted him to resign his position as president of OSI "fools and thugs", and demanded OSI spend their precious time and resources fighting critics of racism and defending Russ Nelson's racist beliefs which ESR shares, instead of promoting open source software.

http://www.eweek.com/servers/new-osi-president-steps-down

>“Abetting somebody elses witch hunt is no less disgusting than starting your own.” “Personally, I wanted to fight this on principle,” Raymond said. “Russ resigned the presidency rather than get OSI into that fight, and the board quite properly respected his wishes in the matter. That sacrifice makes me angrier at the fools and thugs who pulled him down.”
Ah yeah i agree there. Honestly the only way for this to be properly addressed is for a toolkit to commit to API and ABI stability (meaning C++ and any other language without a stable ABI is out of the picture), then people can build on top of it with other languages and focus on actually making the entire framework stable instead of rewriting everything every 4-5 years.
i am not sure it's appropriate to name names here. it doesn't really help the discussion. (is there a way to alert moderators (dang)) to have the names edited out, or is downvoting the only option?
Well, exactly the point. So this link doesn't say anything about whether it's free.
How is Uber a “bs service?” If I need to get somewhere and I don’t have my car, Uber is minutes away. It’s great. Try calling an actual taxi in a town like Houston — their response times in the days before Uber could be between 30 minutes and never.
In all fairness Linus often makes pretty detailed comments with a lot of patience. He only blows up from time to time. There aren’t many tech leaders who have the capacity to understand issues and then explain them.
How to Enter TXT Values in Google Cloud DNS
That's almost similar to what I'm aiming for. But it (nextdoor) seem very keen to validate an exact person's house address. Not sure how I feel about that. I started signing up and kind of got turned off by the house address confirmation stuff.

Guess it's double-edged though, if you don't confirm a person's exact residence then anyone could read the locality's discussions ... tricky.

Is there something inherently wrong with a random person signing up to a particular neighbourhood's group chat? These aren't exactly going to be super-private conversations if they're with everyone on your street ... and I want to encourage community building ... not necessarily GATED-community building. The end goal is world harmony, not several billion factions.
There's also a very nice property of 60 hz: Your clocks don't lose their time very often since they have a very predictable source of truth built right in.
I have my gmail accounts forward to fastmail (And then filter). I've had this setup for years now, not sure exactly but easily 5+ years, and I'm super happy with it.

I do really wish I could find a better email client though, but Thunderbird is "good enough" for now. I don't get a warm fuzzy feeling using it, but I also don't rage at it not working constantly.
Could it be the placement of the 'please' in the example? I always include a 'please' when making a request, but I've also had similar thoughts about the mid-sentence 'please' in the past.

If you put it at the end it reads (to me, at least!) more like a polite request:

"Could you align these variable definitions so they're easier to read please?"
No it takes a certain personality to be a bootlicker for HR. You are probably just fine with interviews and probably better ethically.
> Nvidia's drivers are the only ones with a good Vulkan / OpenGL implementation

On the contrary, Nvidia drivers have bad reputation of violating OpenGL spec left and right. Mesa is a lot more strict about OpenGL compliance.

And they don't have Vulkan advantage either. Don't use Windows if you need good quality OpenGL.
>Is there some reason why we need to rehash it again,

My guess is that the repetition of submissions on HN is usually unintentional because the web form[0] doesn't check for dupes before the user hits the submit button.

[0] https://news.ycombinator.com/submit
Don't forget perforated by shotguns.

And stickered.

And those ones you sometimes find in malls, apartment complexes, or office parks that are an architectural standard sign with the traffic control sign symbol painted on one side, so you can't identify what the sign is from other angles. I hate those.
Banking as a sector does this as a rule so that staffing doesn't interrupt business.

Hire 3 people for any one role because clients are paying the fees and that way you can tolerate a vacation or a firing.
Well it isn't just nowadays, as i said it was like that from the early 2000s - at least in my experience. But then it might just be coincidence with the IRC becoming less popular in general.
If you need on-prem and LDAP but don't want to pay, check Zulip. We evaluated Mattermost, but its LDAP is not free.
> I think Clojure is uniquely positioned here in its ability to fuse these JS<->JVM technologies using a single language

Why? Aren't there a lot of other languages that do the same? What is different about Clojure? Genuinely interested!
I haven't settled on my next phone yet. Aiming at either one of the more secure and clean phones, something I can flash with Linux (like Librem 5 or some Android device that has high compatibility with PostmarketOS, might be too premature though) or a Pixel 3 with https://github.com/dan-v/rattlesnakeos-stack.
>They're drawing a significant amount of money from the system and transferring it to their governments' general accounts. Is that the best use of that money? Should some of that money be used to help address infosec problems?

Well the point of these fines is to say to organisations "put your money into infosec, or when you have a breach it'll probably be your fault and we'll take that money as a punishment".

>Should some of that money be used to help address infosec problems? To fund training for citizens, legislators, and governments? To step up law enforcement efforts against cybercreeps? To publicly fund independent security researchers (white-hat hackers) to help detect this stuff and nip it in the bud? To help subsidize the significant expense of comprehensive infosec audits for municipal governments, ngos, and small firms?

The NCSC[0], GCHQ's defensive side, publishes advice for the public, companies, charities, schools, government departments etc.

[0] https://www.ncsc.gov.uk/
I can't remember if Macs came standard with things like sound cards back then. They were an option on a PC.

Playing a game in 1992 like Wolf3D or Duke Nukem II was a very, very different experience using the bleeps and bloops of the PC speaker compared to even an 8-bit sound card, much less the great music you could get on a 16-bit card with wavetable synth.

We had an IBM Aptiva at school that cost $3500 (ours was free from Campbell's soup labels), it had a 640x480x256 screen, 2X CD-ROM, and a sound card with speakers. It had a few kid-oriented games where you basically pointed/clicked at stuff, our teacher wouldn't let us install any 'cool' games.
And I like "Could you align these variable definitions so they’re easier to read?" better than "align these variable definitions so they’re easier to read.", or worse, "align these variable definitions".
> the lower 5% has to work 2 full time jobs to make it work.

https://www.politifact.com/truth-o-meter/statements/2018/jul...
Moixa Technology | Software Developer (Senior, Mid, Junior) | ON-SITE | LONDON, UK | FULL-TIME | 35-75K gbp | FUNCTIONAL PROGRAMMING, RUST, HASKELL, TYPESCRIPT, AWS Distributed smart energy technology.

We are a clean energy company. We build our own batteries and aggregate them and other third party energy storage devices to optimise their aggregated behaviour and maximise savings for the end customer. In doing so we act as a virtual power plant that provides the flexibility that the Grid needs in order to maximise the usage of renewable energy and to unlock mass adoption of EV technology. Our mission is to manage the world's batteries.

You will be joining a small, focused and collaborative team of talented developers that act autonomously to provide the features that the company needs to succeed in its mission. Those include any subset of:

- Solving complex optimisation problems, using machine learning and other often bespoke algorithms.
- Building the required platform infrastructure to ingest and process big streams of data in real time, using AWS primitives.
- Designing and implementing the business logic to expose our functionality via APIs and UI interfaces, using functional programming and serverless computing.
- Developing the firmware for our hardware devices including optimisation on the edge and integrations with third party energy storage devices, using embedded Linux and Rust.

You will be encouraged to work and grow your knowledge on multiple parts of the stack according to your personal interests and abilities. Our team has a strong tradition of using functional programming and type systems to build pragmatic and flexible systems to satisfy business requirements.

Open positions: https://www.moixa.com/recruitment/ Recruitment email: careers@moixa.com
Poshmark is apparently the "#1 way to buy and sell fashion," presumably a competitor to StitchFix, RentTheRunway, among a few others in the space.
Don't freelance your own kex protocol. Don't use multiplicative group DH. Don't use the NIST p-curves to implement ECDH, which will require you also to implement point validation to avoid invalid curve attacks. You want something like Curve25519 DH, but depending on your application, you probably also want an authenticated key exchange, which a naive Curve25519 protocol isn't going to give you.
I don’t think it’s strange to “love” something just because you can point out its flaws. It’s not like the alternative is perfect, and depending on your point of view, it might have flaws that are more fundamental or hard to fix.
Revenue Disparity Explains Pay Disparity Between Soccer World Cups Men and Women
I think that is per month? But not sure.
Ask HN: What small habit(s) I can do daily to help me get into pentesting?
I'm a back end dev looking to make the jump into security with the main focus being pentesting.

My goal is to pass the OSCP by this time next year.

Aside from hitting the lab and go through the course, what small habit(s) can I do daily to help me with the jump?

Long time lurker first time posting so please excuse me for anything I might overlooked.
"Normal breaker connected outlets used in US houses" are already connected to ground on one side. If you grab the neutral side, you will (ideally) get no shock. If you grab the phase side then you'll complete the path to the other side, through ground.

An isolating transformer is a 1:1 transformer where the input can be referenced one way and the output another.
The output is not connected to ground on either side so when you grab one of the sides, that's the first time it gets referenced to ground. ...and then the explanation continues as per my previous post.
Tolerance for and expectation of "please" can be cultural. OS code may receive contributions from global contributors.

Anecdotally, in my team which spans individuals from each continent except Africa and the poles, US english speakers are the least likely to use 'please', whereas our APAC (asia-pacific) contributors use it liberally.
It only ever got traction twice. Once four years ago and once 24 days ago. That's hardly "discussed to death." OP probably just thought it was a relevant thing to share and all the upvoters seem to agree. Not everyone checks HN constantly.
Microsoft (employees) has repeatedly argued that 90d can be unreasonable for Windows due to the development and testing cycle, which also has to align with “patch Tuesday”. I haven’t heard the complaints recently so maybe they’ve streamlined part of the process.
This is far from being a new development in Europe. Regulators have never been a strict rule interpretor
> unless of course that anticipated disclosure date was decided together with the vendor

Does anybody know if it was? How does Project Zero make these decisions? Do they consider the install base already patched?
A very different sort of beast... https://iopscience.iop.org/article/10.1088/1361-6404/aa5a87
I even find the "Could you" condescending.

[I think] variable definitions should be aligned so they're easier to read.
Splitting a 750 line file is not a readability improvement, if all the logic is related to and part of a single task.

Splitting code across multiple files when there's no actual reusability or abstraction driving the split makes it harder to follow the flow of logic. In particular, 750 lines is not so much that there's obviously a missing abstraction lurking there.
When the reviewer can't understand why the complexity is needed, I add a comment explaining it. This is a very frequent response by me: "Yeah, it's not obvious why the simple approach doesn't work. I've added a comment."
Part of functioning well in groups is understanding that not everyone shares your specific quirks - everyone has their own weird shit.

Of course, trying to accommodate everyone's unique perspective and behaviors would never scale, so instead we fabricate social norms that represent a sort of common denominator of human behavior. Part of these social norms are manners and polite behavior. These act as a sort of protocol for human interaction.

This all a long way of saying that even though you may think saying "please" is condescending or implies a favor, you are almost certainly in a vanishingly small minority and this will not serve you well socially.

I am trying to give you some insight into why you struggle with social interactions and often rub people the wrong way without intending to or even realizing it. My strong recommendation is you be polite even when you think you don't need to be.
The Deutsche Bank was mainly an industrial bank doing classic credits business in Germany. At a certain moment, the bank was critical to Germany as the car industry was. Then they got crazy and wanted to be a Wall Street investment bank. That failed.

I think their current goal is to refocus on that.
To note for other people: This is about digital modes, not the recent arguments about that french company trying to take the 2 meter band.
Perfectly legal (but not smart) to do conveyancing yourself.
The Pi chips are probably surplus. This is how many SBC vendors are able to sell their boards so cheaply. It's a good repurposing as well, lots of these chips were going to sit in warehouses until the end of time.
Oh, you did, and you linked to Cryptopals! Sorry. Not a good nitpick.
The Kingrow does this: https://www.indiegogo.com/projects/kingrow-k1-the-healthy-ph...

It's still crowdfunding, but it seems they started mass production already and it will be for real.
My biggest problem with code reviews isn't so much the phrasing(although it is definitely important), but the fact that they almost never has a "done" criterion.

In my opinion, if new code has nothing objectively wrong with it(no security flaws, no unacceptable design patterns, no foreseen bugs, etc.), then the author has the prerogative to merge the code. Reviews shouldn't go on in perpetuity because different reviewers would all have written something differently than the author submitting the code. I've experienced this phenomenon at every company I've worked for at one point or another, and it's basically a way for Waterfall to sneak its way back in to an Agile process. (not that I'm an advocate of Agile) It doesn't happen too often, but I find it more frustrating than just about anything else.

Beyond some reasonable adjustments to be made in the first wave or 2 of review comments, any other non-critical changes should be separated into tickets for the next sprint or simply be labeled as DIY or "do it yourself". If you want something done, but there's no actual standard for doing it on your team, then ordering people to write things your way via code review is really just a form of backseat coding.

My code is never perfect, but that doesn't mean I want to change variable names, swap out libraries, or use different approaches merely because someone else prefers them that way. You think the variables should have different names? Wonderful! Go do it yourself. I'm not trying to be rude, but I've got other shit to do, and the software already works beautifully.
It probably happens unconsciously a lot too, with no specific ill intent ... officer just has a "bad feeling" about a person and the dog detects the tension. Dogs are very sensitive to shifts in human emotion.
So...we can all ignore how a popular ruby gem was hijacked and used to infect production webservers with malware because (to paraphrase) "it wasn't that popular"?

This was caught because the author diligently checked their dependencies line by line. How many ruby devs do that?

How many other gems are already hijacked but haven't been discovered because no-one has audited them? That number is almost certainly non-zero.

This is on Rubygems.org. They have enough information to warn devs that the gem might be infected (months since the maintainer logged in, gem version release without github repo changes, maintainer email on haveIbeenpwned and no password change since that date, etc).
My rule for pike place is to get there as early as possible to avoid the crowds and I never go there after 11 AM because it gets too crowded.
When a medical doctor prescribes you a treatment plan and drugs, do you claim it's all due to marketing wanketeering, and this is the problem of why healthcare is difficult? When they say something that doesn't make sense to you, do you argue with them from a position of ignorance?

Same goes with crypto. It's fine to learn the concepts of how to use a trusted library, but you really aren't likely going to understand the underlying tradeoffs and mathematics.

People here aren't just saying "just use product X", they're saying, "learn the concepts of product X and use that". That's about as good as it's going to get for any specialized, complicated domain.
>Also, I dispute the idea that simpler societies have lower absolute quality of life in every way.

I didn't argue this. I only argued that our ancestors didn't live as long on average as we did.

Nor did I argue that the way things currently are is the best it could possibly be.

I think there is a way for us to improve incrementally, and in some cases that means simplification. But if that simplification does not respect the root causes for the initial complexity, the resulting system will be just as flawed as the current system. That is my point. Complexity is a symptom of the underlying system, and to try to address complexity on it's own without the underlying causes for that complexity will just lead to more pain in the future.
The halting problem's existence means that there's no input validation that is guaranteed to work absolutely 100% of the time though, for sufficiently large inputs.
I think this is a valid observation but the reason isn't necessarily that the Ruby language can't be used in a similar way, it's more so a death by 1000 cuts where Ruby encourages very small costs to be paid everywhere in return for a nicer programming experience.

The issue becomes hard to fix because all of these small costs add up but none will show as up a single bottleneck in practice, making profiling a blunt tool for this kind of performance problem. Elixir isn't immune to this either but the functional aspects of design do help keep some of these choices local to the code that chooses to trade some time or memory away for other conveniences.

An example I saw recently of this sort of adoption is map access, which is entirely okay if the trade-off is understood. I put in some time to show that much of the understanding of performance profile of the Access behavior gets colored by these expectations that the small things don't matter: https://lobste.rs/s/bctcke/performance_elixir_s_access_behav...
Or whoever reviews your code is in a different city.
Same as a flood plain, an area that has seasonal conditions that are likely to endanger the area.
Example: The recent Santa rosa fires which took out Fountaingrove. An identical fire happened same time of year and wind conditions in 1968 when the area was mostly grassland. They are already rebuilding huge houses there after the recent fire.
Not being facetious, but could the joy resemble the fun I associate with developing with Ruby?
Ditto. I got into VB because of this "exploit," and that kicked off my inadvertent career choice. Punters were all the rage.

By the time AOL 3.0 rolled around, it wasn't bluescreening the machine, rather just ending the AOL process and disconnecting.
My Journey from Free Market Ideologue, Part 3: What Is Infrastructure?
We are finally getting a viable alternative to the x86 ecosystem. It's about time. Thank you to everyone putting in the work on this.
Recover Partitions and Files with TestDisk
There's supposed to be a delay in the Hayes protocol to prevent this kind of thing, but many "Hayes compatible" implementations didn't implement that part (through ignorance? working around a patent?), so this trick would work pretty well . . .
It’s clearly a dupe according to the guidelines/FAQs, so you can just flag it, and if necessary, email the mods. No need for rage comments like this.
I believe you have an old (and broken) copy of the Lucida Grande font installed for some reason.

See https://bugzilla.mozilla.org/show_bug.cgi?id=1542644.