skysight-inc/HackerNews huggingface dataset:
I agree with you that there is no need to be rude or offensive in these threads, and I do try not to flame individuals, but when there's a fire to be put out and we are told not to go anywhere near the fire because it bothers the people who started the fire, what's to be done?

Is there a thread on HN which provides a good example for how to discuss these issues without incurring your wrath?

I think this whitewashing on HN, and the constant censorship of those who would raise the alarm in the context of relevant threads ("Russian meddling" is okay to discus - "American War Crimes", not so much), is a travesty.

If there is a way to discuss this without incurring your ban hammer, I'm all ears. Or is criticism of American wars, because it hurts Americans feelings, simply off limits?

Perhaps its also time to discuss whether or not having a multi-national team of moderators would be a better way to redress this issue on HN.

As it stands, I think you work hard and provide a valuable service, but its clear you've reached your limit when it comes time to think critically about what America is doing to the world, especially when it seems perfectly acceptable to highlight Russia's negative influence. This doesn't seem right.
Nouveau drivers are pretty terrible (performance-wise) and didn't support the card that I am using last time I could find any real info about it (admittedly more than a year ago, I use a GTX 1070). This uncertainty is a fact of your life if you use nouveau, which is precisely not what I'm looking for on my main workhorse machine.

This is leaving aside all of the trouble that you have with running Nvidia's ML stuff when you don't use their own driver (impossible, AFAICT).

Both of those things are blocking issues for me, which in turn means that using anything that doesn't support regular nvidia drivers is a no go.
Whew, what would've been the punishment if they did find it?
Talkyard deals with spam by 1) letting you configure manual review of the first N comments, say first 3 comments, by a new user. If someone posts 3 on-topic comments, then likely s/he is not a spammer and no need to review, thereafter, unless flagged. And 2) Akismet + Google Safe Browsing, optionally. (I'm developing Talkyard, https://www.talkyard.io/blog-comments )

For high traffic websites, simply the task to review new comments by new users, can be too much work. So needs to be combined with something automatic like Akismet. Based on what I've heard.
I gladly exchange empty blah-blah time about yesterday evening/weekend/whatever for a workout session during lunch. Eating by the desk if very much fine by me, it matters more to me what is on the plate (ie veggies, salads and avoiding junkfood generally). And its a great time to turn off the brain and focus just on exercise.
Some people do things for other merits besides money.
Swedish Solar Telescope: Solar Closeups
i'd like to thank you for years of selfless service to the community. (i am not a perl user, so this means the FOSS community as a whole)

we all benefit from work like yours, even if only indirectly. it is people like you that make the FOSS community what it is.

thank you, and all the best on your further endeavors.
To be honest, if you can get clients to reliably use SRI, that's probably better protection than either of our products.

Yeah, our product could be classed a scanner, but there's no (little) risk of cloaking, as the network request or JS loaded to work out whether we're a real user is enough by itself to raise the alarm. To pull it off, the attacker would have to compromise the host of a trusted resource, determine that we were a scanner from our network request alone, and serve to us the original resource. There's a few ways to help ensure that our network requests aren't easily recognised, which is part of our "secret sauce".

Our approach does protect against the case where an attacker gets access to the client company's server and makes changes to the resources served, which can allow them to work around / selectively serve embedded snippets.

The second problem you mention isn't an issue, as we don't trust hosts, only the hash of resources (the same idea as SRI).
Controller allows using almost any zoom/focus/iris lens with your USB camera
I googled for those X Terminals: https://en.wikipedia.org/wiki/HP_X-Terminals

We probably had the 19i because I'm sure it was 1 bit per pixel, so it was 1280x1024.
That's how the old saying goes: "no one ever got fired for hiring IBM".
Umm, there's a lot more Latin in medicine, though?
I hope you don't code the way you talk ;)

Seriously though, it's bad writing. Not a crime as bad as starting an off-topic subthread, but still...
Trouble? Or just a scary letter?
or splitting up the seasons in the UI like Amazon does it (the amazon UX is quite dismal anyway)
That is a very recent and not yet a very strong phenomenon, but yes, we're heading that way.
Medium give free content until you are logged in
I just want to rant about medium monetization policy.

When you are not logged in, you are just being nag by popup to register as member but you are still able to access full content.

After sign up, you are given free trial articles to read. After finish your free trial articles, you are nag again to subscribe to premium to access all article and prevent you from reading the articles.

It seems perfectly ok to give out all the bread to unknown user but limited bread to all the user register with you.
> I'm trying to collect data for learning languages, especially Chinese

Viki has a lot of subtitled Chinese shows. They generally don't offer Chinese subtitles for the Chinese shows though.

The show itself often will, but those subtitles are just part of the video, not even an overlay.
I've been using something similar and I've found it decreased my anxiety with the things I want to get done. I've found that splitting things based on the GTD philosophy helped me reach the right state of mind.
Screen sharing is quite important in my workflow. Fellow developers and customers will send me buying Windows or a Mac if all screen sharing applications on Linux stop working. I'm using Slack and Meet. Skype is almost abandoned among my customers.
> Who gets the money are the people who create laws. The more crimes commited, the safer there jobs are.

Hu? Of course the jobs of people working at ICO etc are slightly safer if more criminal activity happens, but office workers at ICO do not get that money. It goes to the treasury and hence, by extension, the British public.

> The people who had there data stolen, are now on a register sold to the insurance industry, and the insurance industry decides they are a greater risk to insure, so the costs to the consumer go up. Strange how crime really drives the economy.

The fine punishing a criminal activity nearly nowhere goes to the actual victim of the crime, the victim is instead compensated in a second payment. Of course it would be nice if in addition to this fine, some kind of blanket compensation mechanism (e.g. 1000€ per datum per person) would be installed.
Well done on the clarity of the article and the time you take to hand-hold any less technical readers who may be nervous about making changes like this to their phone. I'm sure they appreciate it.
“It is accepted as democratic when public offices are allocated by lot; and as oligarchic when they are filled by election.” Aristotle

The solution is https://en.m.wikipedia.org/wiki/Sortition
Please let me know when China has demolished a sovereign state, at the same order of magnitude as America has in the last 20 years.

China isn't great, and has its low scores in many ways, but America is far, far worse in terms of its sheer destruction of sovereign states.

Just because the iron fist is wrapped in a velvet glove doesn't make it any better for those being smashed in the face by it, and there is a huge, huge pile of dead bodies behind the American smashing...
Q# no idea how to program anything in this “quantum” language though!
https://www.reddit.com/r/jailbreak/comments/c9616j/release_b...
Unsplash Clone in React
This is nothing to do with AI. It's to do with Deutsche's shady accounting and refusal to take government money during the global financial crisis.
I think "language X is needed in country Z" does not indicate that X is a global language. It just means that because of national/cultural pride, overall ignorance, or many other reasons, language X is needed there (because nothing else will be listened or understood).
Concrete actionable tasks which can easily be delegated
> The fact that a random process can no longer read all of your keystrokes seems like a plus

It is a plus, unless you write software that allows for global keyboard/mouse shortcuts (which I have done). In which case it is just a huge pain in the ass to not have it, and then hearing from some developers that you can just "add a shortcut to your window manager" is incredibly frustrating. It's not like you can trust an average end-user to actually do so, even the ones that do run linux. Then you will get complained at for not having functionality that existed at some point in the past.
How much of their userbase do you think uses

- Linux Desktop
- 21:9 monitor

? If you guys are cracking one 10th of a percentile I would be surprised. I also use netflix on linux desktop (regular monitor though) but I cannot pretend that they should have to care about such a tiny portion of their overall userbase.
I’ve somewhat researched iMessage handling on iOS for a jailbreak tweak called TypeStatus, and I find this bug odd. In iOS 7, SpringBoard was restricted at the sandbox (kernel) level from any access to the Messages database. I had to adapt my code to instead run inside imagent, which is responsible for keeping a push socket open with iMessage among other Messages housekeeping things (this also exists on macOS).

There was a trend since iOS 6 to move backend/non-UI responsibilities away from SpringBoard. But in iOS 11 or 12 or so, more responsibilities started creeping back into SpringBoard. Maybe because of performance or memory consumption concerns, maybe it’s laziness avoiding having to set up a new daemon with appropriate dependencies and sandbox profile when the code can easily be plopped into SpringBoard, it’s not clear. As Natalie says in the report, on macOS this bug only causes DoS on a daemon. Worst case, iMessage stops working and your battery dies quicker. Being totally locked out of the device because SpringBoard is “boot looping” due to an existing fail-safe being excluded from the design seems awful.

On the subject, my Android phone stopped even presenting a keyboard on the lock screen or anywhere else, because the default keyboard is Gboard, and Gboard relies on Play Services, which was crashing inside Gboard. Like this iOS bug, the only known solution is to wipe the device and start over. At least I was still able to get into the device by connecting a USB keyboard. Sucks to know most would have no idea how to diagnose such an issue though, needlessly wiping their photos and all.
I've used for developing on a community mesh network - you can boot OpenWrt with a fake wifi driver module and you can plug in in networking as you will and run multiple processes. It's far simpler to configure and does not need compatibily fixes for running in containers.
No, that's not how online ads work or why Google makes money.

Recall that AdWords is a money tree because online advertising by and large does not work but targeted search ads - emphasis on targeted - do. But targeted to what? They only work if they're targeted to commercial queries and basically are useful. Google has lots of systems in place to boost useful ads, defined as someone clicked it and didn't come back to keep searching or an ad that triggered a conversion action. It also demotes non useful ads, e.g. ads that aren't properly targeted.

Ad campaigns thus don't "manipulate searcher's behaviours": if that were true, there'd be no need for Google to do anything about low quality or irrelevant ads as the mere act of seeing an ad would automatically make it relevant. People start doing commercial searches already knowing what they want, and ads are in a way a solution to the problem that the best organic PageRanked result for a query like 'flowers' might be a Wikipedia page on flowers, whereas almost certainly what the user actually wanted was a hyper-local result for a flower delivery service. Such services don't tend to accumulate much PageRank anyway, so need to be ranked some other way like via an auction.

The rest of online advertising is no more able to manipulate people than billboards are. They raise awareness, if they're clever and memorable. That's about it. Brands that people know about do better than brands that people don't, unless that brand is good enough to spread via word of mouth, in which case they can win without advertising entirely. Which is how Google itself grew for most of its history.
Is that a fork of openPGP or some other product that is based on the same specs? I could not find anything meaningful for openGPG.
It looked old and smelled funky thirty years ago. So unless you're extending the definition of "young" well into middle age, not really.
I could certainly deposit checks in any bank branch 12 years ago in the UK. Your experience there seems weird. Even 12 years ago, no-one in the UK really used checks, so that might have something to do with it.

Opening an account is indeed unnecessarily difficult for immigrants, and UK landlords can get away with anything due to an almost total absence of regulation.
I would daily compare the file running on the website that I deployed matched the file on the server verbatim. I think this would have been enough with BA.
Secondly I would run a daily test in production which verifies the requests the browser makes match those expected. This would only need doing on the pages which capture payment information.
Neither solution is particularly difficult. BA clearly did nothing. Hence the negligence and huge fine.
Great work!

I am trying to run this on the latest Ubuntu but getting the below error:

root@kit:~/uml/furry-happiness# docker run --rm -it xena/docker-uml
[WARN tini (7)] Tini is not running as PID 1 and isn't registered as a child subreaper.
Zombie processes will not be re-parented to Tini, so zombie reaping won't work.
To fix the problem, use the -s option or set the environment variable TINI_SUBREAPER to register Tini as a child subreaper, or run Tini as PID 1.
Core dump limits :
soft - NONE
hard - NONE
Checking that ptrace can change system call numbers...ptrace: Operation not permitted
check_ptrace : expected SIGSTOP, got status = 9
This might be the HN thread you remembered https://news.ycombinator.com/item?id=20364523
Heatmap Calculation Tutorial Using Kernel Density Estimation (KDE) Algorithm
FLV stream might be an option.

https://github.com/Bilibili/flv.js/
Top cheapest dedicated server hosting Uk – Start $20
Ikea's “Gerton” tabletop (90€ / $100. 155×75cm = 61×29.5”) is really, really nice — it uses ≈5cm-wide beech hardwood strips glued together and reinforced across the width with some metal . It works with Bekant legs (if you have a 10mm wood bit and some masking tape handy), which are also available as sit/stand legs (that's 430€ / $350, though. the non-adjustable ones are a lot cheaper.)
Not really. Visa and the banks do take a cut. But there is Revolut now if you want to give them the middle finger. They will be forced to adapt and offer similar services or at least non-ripoff exchange rates. I always prefer a free market solution to an EU buceaucratic solution. Such as EU mandated zero transaction fees in order to convert the bulk of the transactions to cashless, be able to track them and "prevent money laundering", which of course isn't true (eg. Danske bank scandal).
Publishing it like this will make them more likely to be aware of it. They may not read Hacker News but it spreads to Facebook user groups etc.

The bad guys (many enough of them) will anyway figure it out right away after the patches have been published, because with every patch, people will (and should) ask "why".
It's exactly the same thing that I wrote, isn't it?

The thing that kills my soul is the need for the "vs" function. Why aren't the symbols [] not enough ?
This is never going to exist the same way it did in X, which was a hack around the X display model.
> If the Linux desktop market would grow

You can think of any number of fantasy scenarios that would make one of the biggest GPU vendors care about your standards, but sadly that is not the world we live in. The world we live in is one where Nvidia has the best game support on the market (far, far better than AMD - let's not even think about Intel here) and therefore anyone who still plays games on a PC will own one of them unless they are some sort of AMD advocate.

At the end of the day, nobody wants to be reading "we don't support this because they're not nice to us". That's going straight back to the linux dark ages of 15 years ago, where you needed to care about all sorts of weird and arcane details to get a functioning desktop system.
Taiwan’s Status Is a Geopolitical Absurdity
> At the time, BA said hackers had carried out a "sophisticated, malicious criminal attack" on its website.

Compromising a single JS resource that was being carelessly loaded on a payment page doesn’t qualify as sophisticated in my mind. It might not be uncommon in the industry, but tools like SRI and CSP stop these attacks dead in their tracks.

I believe we are about one huge attack[0] of this kind away from realising how dire the situation truly is.

As a victim of the earlier Ticketmaster attack I’m curious as to if the ICO is investigating that too.

0: https://hugotunius.se/2018/11/29/how-to-hack-half-the-web.ht...
There is a link for posting comments/feedback on the main arxiv page: https://docs.google.com/document/d/160G9OFcP5DWT8Stn7TxdVx83...
There are ~381 comments there already, please post yours: it looks like the authors are genuinely interested in listening to feedback and addressing them perhaps in future revisions of the book.
Yes, Proot is useful, but limited. It will be somewhat slow in some cases and not do the right thing in others, like interpret shebangs as expected, as namespaces will.
In most cases you can run HPC stuff by installing packages under proot and setting paths in the environment appropriately to use the resulting root. (I don't know if that's the case here, or if it means running under proot.)
No, you certainly can't run your own kernel that way.
Based on this, and the consistent theme that seems to run through the rest of your comments, it seems to me that all of these companies could stand to do more to assess the character of their interviewees. Reading this in the most charitable way I can still results in it coming across as arrogant, attention-seeking, and as you've made it to age 22 having experienced no hardship at all.
> Edit: Those who think I am speaking rubbish can refer this link. https://www.cvedetails.com/top-50-products.php

That listing groups together all OS X bugs back to 2002 under one heading, but splits up each Windows version into its own entity. So the numbers aren't really comparable.
HMRC are onto that one and are suing a lot of people over those scheames.
Off topic, but I wonder if Stallman regrets that the FSF team didn't develop a working kernel for GNU early in the history of the project, perhaps at the same time as the development of GCC? The existence of a GNU kernel would have obviated the bundling of Linux with GNU user space software.
>
I am continuously astounded that even on HN people are focusing on news cycle bullshit about inherent instability instead of the actual issues with Boeing/FAA that caused this situation.

How is it surprising that people are sceptical of claimed native flight characteristics after the way Boeing has handled communications after the crashes? I don't think that there are any independent facts around, even airline pilots who had been flying MAX from day one would not have much (if any) experience at the edges of the flight envelope. One data point we do know is that some people at Boeing were apparently very concerned about MCAS ever being off.
AliExpres ? EBay ?

https://www.aliexpress.com/item/32859117013.html
ICO fines BA £183m for 2018 data breach
Reduce Your WebAssembly Binaries 72% – From 56KB to 26KB to 16KB
Cyber-attacks on Kenyan organizations rise to 11.2M
The hollow ones are a bargain until you try to attach a clamp on monitor stand or lamp. The clamp crushes the table top as you tighten it.
While a monoid in abstract algebra is easy enough to understand from Wikipedia. Googling for monoids in the context of category theory could easily land you at nlab I.e https://ncatlab.org/nlab/show/monoid+in+a+monoidal+category I’m not sure that’s helpful to new a learner of the subject.

I recall that my personal experience of learning about CT was unnecessarily difficult due to being thrown into a bunch of definitions way to soon. (Which is understandable since there isn’t much else to it.) but I needed to un-learn my preconceptions about what information the theory encodes first, which was rally hard. Understanding that objects and morphisms are really _only_ about composability and _nothing else_ is challenging when your mind desperatly wants to see concrete thing like sets or numbers or what have you in those objects. Definition don’t help much until you can shed that urge. (To new learners I suggest to think of “objects” as the number of dots on domino tiles, or the poles of magnets, they describe where things may, or may not, compose, nothing more. category theory is just about naming patterns and rules of composition)

In particular even knowing the existence of monoidal categories is a distraction when getting to grips with how catgories as such generalize and abstracts monoids.
Yes, the regulators do take all things into consideration. A fine is the final measure.

In case of BA they ran third-party scripts on account and payment pages without users’ consent, did bot remove them even after being alerted to it, and then succumbing to a data breach because of that.