skysight-inc/HackerNews huggingface dataset:
> If Wayland had a standard compositor interface like X has, this wouldn't be a problem at all, would it?

It does. It's called Wayland.

I suspect you might instead be thinking of a standard window manager interface to plug into a compositor, rather than the other way around.

The Wayland approach has been to just make it easier to write a compositor, instead of porting X's complexities and odd design choices.

However, nothing stops you from making a compositor with such an interface. It won't be part of Wayland, but it would be its own spec.

However, this suggestion would be a case of symptomatic treatment. The root cause of complexity is NVIDIA.

> It's only because of Wayland's design

This is not true. It just because Wayland is not X, and NVIDIA only has support for X.

Under X, every driver had its own integration, which was a pain to make, maintain and use.

For Wayland, the community got together to make a generic API that had nothing to do with Wayland, allowing applications (be it a wayland compositor or something else) to not have to think about what they're running on.

NVIDIA, however, is just trying to throw more duct-tape, taking us back to the X era.

You may ask "Why don't everyone just implement EGLStream?" - that is because EGLStream has no merit, and is just the implementation that would be easiest for NVIDIA to implement. Why would we make everything else worse, spending significant time and effort redesigning everything else, all to save NVIDIA a few bucks?

If they have actual concerns, we can solve it as a community, but considering that everyone invested significant time in this project, we are not going to throw it all away and pick a vastly inferior model just so that NVIDIA doesn't have to do anything. NVIDIA is just one GPU manufacturer out of many, and on Linux, a small one.

As for EGLStream problems: Performance and stability are the big ones. Ironically, EGLStream is bad for gaming, as we cannot do direct scanout with it (an optimization where full-screen content gets thrown directly to screen instead of going through compositing).
Although I am not HR I work at BlaBlaCar and the Visa has been sponsored by them. Besides, no remote work outside France is available formally.
I'm not going to comment on Apple's software security standards (and Microsoft deserves more kudos for their focus on security after the bad old days of XP), I'm just pointing out that summing up CVEs is not a valid way to compare.

> Considering the fact that Microsoft has much bigger market share and therefore security research attention

The OS X bug numbers also include a bunch of bugs for open source projects that are bundled with OS X (Perl, Ruby, Python, SQLite, PHP etc) which increases the security research attention.
> Would you contribute to e.g. a Kickstarter for X Windows?

If that's what it takes to keep i3, sure.
How would SRI and CSP help in this case? Wasn’t the compromised script served from their own infrastructure? And if hackers had access to that, why wouldn’t they they be able to change the SRI and CSP too?
part of the issue is technology makes being a criminal more sophisticated too.

If police were limited to 1965 tech, you could see any police car coming miles away due to radar and radio detectors.
Oil giant Total's chief announces new unit to invest in forests
I used to be involved in a UK based startup (as a developer) where we would create a bank account for our customers as a part of the product.

The AML/KYC process was outsourced. The customer would go through the registration form, provide their details, and then we would hit up the third party AML/KYC API, which would come back with details on the additional information required.

We would then have to chase up the customer for this information (usually a picture of their passport/utility bill, that sort of thing) and provide this back to the third party handling AML/KYC, who would then give authorization to another third party to create the actual bank account.

The whole thing seemed ripe for abuse. After a bank account was created, at no point was the customer contacted by the third party to tell them a bank account had been created in their name. If I was malicious and knew somebodies address history, DOB and had a picture of their passport, I could create a bank account for them with a couple of API calls, and they wouldn't have a clue.

It used to be that to get a bank account you would have to physically go to the bank and meet a human being first, but we’ve moved away from that.

We were closely watched by, and regularly in touch with, the FCA who didn't have any problem with what we were doing.
In the same space: https://utteranc.es/

A lightweight comments widget built on GitHub issues.
I guess they can use TPUs with GCE.
Auto Setup: A simple bash script to setup necessary tools for bug bounty recon
One (arguable) difference is that the weaker African economies can't really borrow in their own currencies and therefore can't inflate currency to deal with debt burden. Thats what Greece couldn't do, because of the euro.

Previously, their debt would ha e been in local currency. In times of debt crises the value of the currency would have (even without explicit government action) declined (inflation). This makes the debts smaller, both formal national debts and private debts. It also (this get more Keynesian & controversial) creates a way to lower sticky prices (especially salaries).

Say you charge £100 per month for software and inflation eats 25% of this, the contract is still for £100. It is also tricky to "raise" prices while the economy is in trouble and people/businesses are cutting costs. The biggest place where this applies is salaries. Inflation cuts salaries, which in practical terms is near impossible to do otherwise.

But, if local currency is very weak, debt tends to be denominated in foreign currency anyway... even salaries. The only prices denominated in local currency are flexible anyway (eg carrots at the market).
My site isn't actually a static site. The code is in https://github.com/Xe/site
He used a precompiled set to query so the cost wasn't that high.
> The reason is that I'm trying to collect data for learning languages, especially Chinese.

Subtitles sites (opensubtitles, podnapisi, etc.) have similar data and simple alignment algorithms will work for unaligned subtitles.

> Do the pirates really OCR the subtitles for their MKV files?

OCR is really simple for text. No reason why they wouldn't do it. There were free programs decades ago for OCR when you were ripping DVDs and they worked mostly on character patterns (you would start with an empty database and then just tag the pattern, after a minute you'd have the whole subtitle OCR-ed).
> You mean MS historically has 100% more security issues.

For an OS used 1000% as often[0], yes.

I have no skin in this game, BTW, as I use neither. But given the number of security issues Apple has, I really bothers me that they still sell those products as somehow more secure.

[0] = https://en.wikipedia.org/wiki/Usage_share_of_operating_syste...
Message me, I'm game to help
> it is getting increasingly difficult to break DRM

Do you have real examples of where this is the case? Outside of a vanishing minority of titles, DRM-stripped releases appear in a timely manner just as they have always done.
What host OS do you run? I got this working on both Ubuntu and Alpine.
Native windows / mac app development, even well funded company like Slack / Discord want to save development cost by sacrificing battery life / performance of the user's computer.
Mozilla’s Latest Research Grants: Prioritizing Research for the Internet
So would this mean you need a partner such as HSBC to overcome the KYC?

Curious how this sort of high level crime can continue in the UK even after all these articles and investigations...
It's a challenge to circumvent DRM, so people with the skills to do so will attempt it. I expect that for many it will also be a matter of fighting back against something that is inherently a threat to (digital) civic freedoms.

And because DRM is fundamentally broken (i.e., there is always the analogue hole at the end of the spectrum) it will never prevent piracy on its own.
How I automated my Instagram account using Machine Learning and Python
Do they get along just fine?

My experience of quite a lot of jobs has been that people, even managers, struggle to articulate what exactly they do, let alone what is required to do it well. If you can't clearly articulate that it's pretty meaningless to have any sort of rigorous hiring process to begin with.

Maybe that sounds over cynical, but I've watched as people from outside the tech industry encountered the concept of asking people to actually do a work sample in an interview for the first time. They thought it was the most crazy demanding and professional thing they ever heard of and immediately came to regard the team that was hired through that process as incredibly elite. Very few professions really challenge candidates in any meaningful way.
I don't use this app, but I'm a big Kanban fan. For me the motivation to close items comes through WIP limits. For my personal Kanban setup, I have a WIP limit of 3 for active tasks, and three for "pending" tasks, by which I mean things that are blocked waiting for somebody else.

If I have 3 active tasks, that means I have to pick from among them to work on something. For me, that usually results in finishing what I've started in reasonably quick order. I also aim to favor closing an open task before pulling a new one from the backlog, which helps further.

Once I do this consistently, it generates motivation (or perhaps decreases the sapping of my natural motivation) in that I'm in the habit of getting things flowing through the system and minimizing WIP.
there will always be vestiges just as we still have nation-states held over from nationalism
Yet, although Microsoft security now advises for C#, Rust and constrained C++, they went ahead and are using C++ for React Native and WinUI 3.0, removing the dependecy on .NET Native.

Apparently because that is the only way to sell MFC/ATL holdouts to WinUI, and allow WinUI to be called from classical Win32 without too much overhead, and also because .NET Native ideas will be migrated to .NET 5.
What about eastern EU?
So, you need to lower all prices - i.e. as an exporter you ask your workers to take wage cuts, they must ask their landlords to reduce their rents, shopkeepers to reduce prices etc. This is a slow process (especially because many contracts run for a fixed period so cannot be changed until the next contract is signed).

Internal devaluation can be done, it is just a slow and painful process (usually including higher unemployment).
We’re Building a Better Internet
I think you misunderstand the purpose of the classification.

It's not to determine the date from the season or the season from the date.

It's to be able to say "Sparrows were late this year - the last three times that happened there was an insect problem, let's keep an eye out for that."
Why does everything have to be about money? Some people do things because it is fun and rewarding. I'd go so far as to say that if you are capable enough to consistently pirate things you are capable enough to hold a well-paying full-time job.
whats to stop it being closed without effort to release the eth?
Hi all!

i'm a senior backend dev who loves JS and loves music. i've done a lot of things in my career, QA, mobile apps, managed people, but i've found out that my true love is backend developing.

I'm looking for a remote job as a backend dev, preferably for a company that develops his own products but i'm open to all remote positions.

Location: Milan, IT
Remote: YES!
Willing to relocate: no
Skills: Backend engineering, average frontend skills, sound engineering, netsec enthusiast
Technologies: Nodejs, Python, NoSQL, React, Angular, Arduino/Raspberry, Processing/p5js, Threejs, Webaudio, ARKit,
Résumé/CV: http://sixonesixo.com/cv.pdf
Email: marco@sixonesixo.com
This thread is getting a lot longer and more involved than I anticipated. Apologies but for the sake of my own free time and sanity I may have to slow down and make more use of citations. The main point I was trying to get across was that QBism does say these things about quantum theory, regardless of whether or not you find it tenable.

As I say the mathematics is invariant across interpretations, therefore the Born rule and POVMs have a use to an Everettian just as they do a QBist. The difference is what they think of the physical meaning of such a thing. [0][1]

Interpreting quantum theory with a radical, personalist Bayesian perspective of the quantum state is novel, although it has historical precedents starting with Bohr and continuing with Jaynes, Wheeler. [2]

QBists broadly speaking tend to assume a pragmatist view of realism, at least in relation to quantum theory. Fuchs describes it as "participatory realism". There is a physical reality but we are ourselves entwined with it and cannot assume that the models we construct are objective and observer-independent. I think Fuchs has argued that the measurement problem, Wigner's friend, Bell's theorem and Kochen-Specker all point us irrevocably towards a radical Bayesian perspective of the quantum state. The task remaining is to disentangle the subjective from the objective:

> The professed goal is to strip away all those elements of quantum theory that can be interpreted in subjective, agent-dependent terms. The hope is that whatever remains will hint at something essential and objective about nature. [3]

[0] https://arxiv.org/pdf/quant-ph/0104088.pdf

[1] https://arxiv.org/pdf/quant-ph/0205039.pdf

[2] https://arxiv.org/pdf/1705.03483.pdf

[3] https://arxiv.org/pdf/1405.2390.pdf
A Fake Set of Amazon Web Services
Me and my friends have our own little streaming website and manage to get 1~2 seconds delay.... It's nothing fancy, NGINX with the RTMP plugin from which we get the streams, it only passes them trough, once we added encoding we had a noticeable delay. This is flash tech that can be run as html 5 now, but I didn't see this within your list so perhaps you haven't looked at it.
Maybe it still has to be fixed in the betas?
Why does an airline even need to show advertising on their page in the first place. You'd think they would be most concerned about selling their own product.
Are there no partnership ventures or collaboration opportunities you can hitch your cart to? Team up with another company that is gaining traction.
Did you get explicit feedback stating those reasons?

Usually when a job candidate is not selected they aren't given any information about why.
In this specific case the attackers seems to have compromised a CMS which for some reason was used to serve javascript libraries. It’s likely that they did not compromise the origin itself, only the CMS. Thus using SRI on the origin would have prevented or at least drastically complicated the attack. As a general pattern CSP and SRI are very effective protection against CDN compromises and XSS. With CSP and SRI the stack surface is reduced significantly.
It's the kind of stuff that drives you insane a bit. You have to hack together things from software last released in 2006. You have to dig through kernel source code to really understand what is going on in the user mode Linux drivers.
That's an extremely ungenerous interpretation of those events. He shouldn't have handed over control of the package to someone he barely knew, but from his perspective, it was that or let the package die. He volunteered his time, he had no kind of obligation to continue if he didn't want to. His actions were certainly not malicious, and he was clearly not "complicit" with the hacker, which is what you're implying.

That incident highlighted a broadly systemic problem with how these kinds of packages are maintained, it was not a case of "one bad maintainer".
This is Australia we're talking about. Seven Mile Beach, Great Barrier Reef, Great Sandy Desert, Granite Island... Calling things exactly what they are seems like a tradition.
ISO paper size?
3Shape: C# Backend Developer | Business Analyst, R&D management support | Software Build Tools (DevOps) engineer |Cph, Denmark | Full-time | Onsite: https://www.3shape.com/en/careers/vacancies

3Shape creates 3D scanning and CAD/CAM software solutions. Innovative technology that enable dental professionals to treat more people, more effectively and with improved care. In 3Shape, we believe in team autonomy and you will find a highly dynamic, informal work environment, skilled and passionate colleagues that will daily challenge and support you and that are looking forward to being challenged back. Together, we are going to build the future of digital dentistry and we’ll have fun in doing so!

- C# Backend Developer: https://3shape.easycruit.com/vacancy/2205649/111446
You will deliver small increments of high quality code, promote a culture of good programming practices, take an active role in DevOps, contribute to an effective and evolving development process, participate in ensuring that the product will meet the requirements of our orthodontic customers.

- Business Analyst in R&D Management Support: https://3shape.easycruit.com/vacancy/2331669/129961
Deelop and maintain data models and reporting tool in excel and PowerBI, develop and drive financial planning and reporting processes in R&D, build automated data processes whereever possible - integrating data across exisiting 3Shape and R&D systems.

- Software Build Tools (DevOps) Engineer: https://3shape.easycruit.com/vacancy/2221985/111446
The software build tools team aim to support this existing setup and develop it further while offering process guidance for other dev teams within 3Shape. The team is relatively new within 3Shape, and we are a healthy mix of people, both in terms of experience and skill sets. Our common denominator is an openness to new, fresh ideas and technical capability to challenge and make good ideas even better.

Get to know more about our teams and culture here, Innovation day 2019: https://www.youtube.com/watch?v=bN-YsuGNDco

And meet Jesper Lomborg Manigoff, Vice President for R&D Software Development, who explains how curiosity drives our development: https://youtu.be/R6d_s9NrLG4
Why would they give you a way to enter without? if you don't want to provide your info don't enter. Are you going to pay them for the work they have done? clean their house? why do you expect them to give you anything for free? Tracking the info is the cost, you don't like don't buy and don't pay.
I always wondered why aws-localstack was built in such a complex way when it's already understood that Docker containers should be built with a single responsibility principle in mind.

Yet here they are with their hulking container, bash scripts, makefiles, etc, etc.

I thought if I tried, I could do better. So here is my first attempt. It successfully mimics S3, DynamoDB, SNS, SQS. Although I'm sure that it doesn't fully support everything. It might support everything that people need to in order to test their systems against it.

Obviously, I didn't write the individual software myself. But I'm packaging them in such a way that might be useful to other people. I hope that somebody can help or advise on how to improve it. Or extra services that I might need.
Each process in the guest has its own host thread, but yeah the way I have it set up there's only one logical "CPU core" being exposed to the guest.
The company I work for explains it to our customers that we can't enable any tracking cookies, analytics, external chat scripts and other external scripts unless visitor opts in. I explain that it is against the law and they back down.

Sadly not many people in the industry realize it and they keep doing whatever they were doing for years.
> I find it hard to believe that a single button would cause you to jump ship.

Why is this hard to believe? The smartphone market is currently very saturated, with only very limited differences between high-end (or even low-end) models of different brands. If one brand has something stupid (especially to the tune of "annoys me every day", like the mentioned button) it seems to me that it's fairly obvious you would switch.
> that Europe will be a united country which is a major oversight

It might not look like an oversight in 1930s Germany…

> Sörgel's 1938 book Die Drei Grossen A has a quote from Hitler on the flyleaf, demonstrating that the concept was not inconsistent with Nazi ideology. (from the Wikipedia article)
> The stat is from a widely quoted Forrester study.

Then I think properly quoting that with a reference link to the report. People might not read it, but they'd at least know they could. As much as I don't like the 50 billion IoT by 2020 figure, a link would help me.

> Probably had 4 people reach out to us by the website in 4 months. its been kind of ignored till now.

The site is ignored because it hasn't been converting or is it not converting because it has been ignored?

I'd like videos that explain different ways I could use the products. Say I'm a shop owner, what exactly can it do for me. What's the problem it solves and how? You can get such a video for a few hundred bucks.

Resources on how to set things up.

An example application for developers.

One of the things we insist on in our own product: a dev must be able to extend the application in less than 5 minutes, a user can go through an example in one minute. All the products we shipped where we ignored this sold because they solved but sucked. We're shooting for self discoverable functionality next. It's painful to see a user struggle to accomplish something. Have you shown the site to shop owners and devs and observed them?

EDIT:

How would you take me from now to paying customer? How do I give you money?

Also, a counter on your front page on the amount of sales that went through your products would speak volumes and give you a nice KPI to track. Total dollar value, number of customers served, number of clients, average per client, average purchase amount.

A nice dashboard that tells you things, and help you guide this turning knobs (optimize for number of customers or average purchase price?)

If you can add endpoints for such stats for clients to tap into, generate reports, use with other BI tools, to help them steer their business.

Something to help them get an idea on their Net Promoter Score and then the backend to run language processing on messages and display what customers liked and disliked in a tree map. I.e: 60 percent of your customers are detractors, 40 % of these disliked the interface, etc.
Pay-to-Win: Incentive Attacks on Proof-of-Work Cryptocurrencies
Yes and no. Kanban's origin is in team practice, so most of the literature is about that. And I think there are substantive practical differences. A big one for me is that personal work items have a much greater variety in terms of topic, duration, complexity, place, and constraints. That means much less of a focus on standardized work and process improvement.

And since Personal Kanban is personal, I've had to find different hooks to hang the activities on. In a team context, I can use collective rituals like a daily stand-up to force grooming of the kanban and awareness of workflow hiccups. Personal kanban is harder for me to maintain unless I use something like calendar alerts.
Not directly addressing your question, but Amazon did a recall on their own chargers included with UK and Ireland Fire tablets, and recalled over quarter of a million portable AmazonBasics chargers.
Summarizing Long Texts with Seq2Seq Neural Networks
People behave better when they think they’re being watched
A Practical Introduction to Freer Monads (EFF)