skysight-inc/HackerNews huggingface dataset:
Sure, the "package managers" on Linux, Windows, and macOS all behavior in pretty similar fashions. A manifest of files that the installer knew at time of install. That doesn't stop a program from installing anything else at run time, or even in the installer (since they can define what to remove in a lot of cases). This wasn't an "accident," it was purposely left behind with the intention of being used to onboard users easily even after they removed the client. This would have pretty much been an issue on every platform (had it been implemented on other platforms). And please, don't tell me "but Docker!" Docker, at present, isn't really usable with GUI applications yet.
For personal use it should fall into the fair use category, so you should be fine.
Well, one of the reasons for washing and drying ones hands is to reduce the amount of bacteria exposure. I don't have the same expectation when shaking a dozen peoples' hands at a party.
A few years ago I even saw an Ad[1] from Apple itself showing a lot of Macbooks with different stickers their owners have pasted on it, depicting something on the line of : " the Macbooks are so much loved that people just can't resist to personalize them."

And I still miss the previous work Macbook that I put Portal video game sticker on. :)

[1] https://www.youtube.com/watch?v=ZT4ZbwgIK3w
> The CORS header will definitively block the request to an AJAX REST API from going through, because it will be a POST request with an `application/json` Content-Type, which will trigger a preflight request.

Then you should edit your article to say that, or at least put a caveat saying it's more complicated than you imply in your article and to go look up the details elsewhere.

If I wanted to design an API that was prone to security issues - I would design something like CORS. While I understand why some requests require pre-flights and others don't, looking at it without considering web history: it is absolutely insane that changing what appears to be a non-security related parameter (Content-Type), drastically changes how the request is executed. Making it worse, is that its super easy to ignore the Content-Type header on the server side and just assume a that the body will be whats expected. Making it even worse, is that if a request is not pre-flighted, it will be sent to the server to be executed and only the reading of the response will be blocked by a non-matching Access-Control-Allow-Origin header - which is not intuitive at all.
>As far as I can tell, getting a PhD, getting hired as a professor, and getting tenure seem to filter out people who would challenge the system.

Reminds me of Noam Chomsky's comment to Andrew Marr while being interviewed - https://www.youtube.com/watch?v=Y2EPgix5_5w
I've used two primarily:

Alpine MusicSafe Pro

Etymotic Research ER20

I'd say both are comparable. Though the Alpines come with three filters allowing you to select the level of attenuation.

The Etymotics are bit longer so stick out your ear a bit funny looking, but they're more cone shaped and are easier to put into your ear.

The Alpines come with a little tool that helps inserting it into your ear.

To be honest they're both quite cheap so try both and not break the bank.

If you want to go higher end you can get ones where you can get a custom mold to your ear canal. But I don't have a recommendation there.
Have you ever written a Rust macro? They aren't properly an example of beauty versus C and C++ ones.

Cargo has gotten definitely better, but lack of support for binary libraries is a pain point.
The Boston Tea Party Was a Protest Against Monopoly
Also, is it legal in California?

https://leginfo.legislature.ca.gov/faces/billTextClient.xhtm...

I'm not a lawyer, but it sounds like they're probably okay as long as the bot doesn't advertise anything or incite people to vote.
Wonderful idea! My friends drew some brilliant illustrations on my Macbook Pros ( https://i.imgur.com/O4mGZqZ.jpg ) using marker, directly on the case. Not soon afterward, the anti-reflective coating went bad and I tried to took it to Apple Store and was predictably told it's not possible to repair the screen without swapping out the entire screen. So 4 years later I am still using a never paired machine. I wish I knew about this kind of wrapping earlier.
What if this entire universe is an organism?
The "formula" has changed a lot in recent years. You need to revisit Bollywood! Some of the biggest hits this year which I have seen do not follow that at all.

Uri
Gully Boy
Kesari
(I don't watch that many movies it seems!)

It is true nowadays, there seems to be more originality in Bollywood than Hollywood

( I don't see that many!
This can be used to A/B test online courses to perfection.
Nintendo Switch Lite Price in Malaysia and Singapore – Where to Buy Cheap
It is often more than clickbait, it's entirely misleading to the point where if you click (for science) it's nothing like what is shown.

At least that was true when I checked it out years ago when Slashdot started running them. Which is also around the time I stopped visiting that site.
The main difference is that you can easily drag n drop line result anywhere inside the document with Soulver for more complex computations. With Numi you are forced to make up variable names, which is silly.

I have written to Numi author about this a few months ago and he replied he wants to add this feature to Numi but I haven’t heard any news about that since. I am not following Numi closely, though.
The elephant in the room: Nobody actually likes Facebook.
The difference is the rate of the measurements and the data collected. Usually you would measure the results (average of sums). This is more like a Fourier transformation, where each movement is measured and the entire state is measured. Sum of averages.
> he majority of the decline of threads in both legacy and Core .NET is from the move to async everything, which really obviates most of the need the casual developer has for dealing with concurrency primitives

I would argue that async/await in languages like C# (and Kotlin - and even Rust!) makes things even harder for the casual developer. Since async functions are scheduled between a variety of threads developers must now keep track of 2 different concurrency units: Tasks and Threads. Depending on where continuations are called (which is quite complex in C#s world of SynchronizationContexts and TaskSchedulers) the rules are slightly different. And misusing synchronization can have the effect of anything between race conditions (as in normal threaded systems) and starved systems (because the programmer blocks the whole scheduler - which is unfortunately a quite common issue in async/await code).

In my opinion the simple languages are the ones which don't offer 2 worlds. Singlethreaded models (like in Javascript and Dart) are the simplest, since they offer only one model since the cooperative runtime prevents lots of races right from the start. The slightly less simple thing is only offering a good threaded model, which is what Go does with a lot of success. Here we at least only have to learn the old fashioned synchronization primitives, plus some new ones (Channels). Multithreaded languages with support for async/await are absolutely awesome tools! But I think mastering them requires more understanding compared to languages without those features.
Regardless of the research, I think what’s not discussed is how the choices around these devices are typically made by a single owner of a business. As the population continues to increase, and people generally become more educated and these types of experiences have more value, how could we come up with either solutions to the core issue, or solutions to give more funds to a business owner who would gladly install a better solution if those funds were available?

Taking a sample of a hundred random people, especially in a larger city, their values (however ranked) are wildly different, yet one person likely made the decision on the dryer, dependent still on the strengths of the local paper (janitorial supplies) company’s salesperson.

Currently, there isn’t a micro donation or registry (wedding registry) type framework where people can influence these decisions. Something similar could be in store?

Even Kickstarter, while it allows popular ideas to move forward, doesn’t allow these types of decisions to be influenced.
a.) is this someone I could enjoy working with: personality, openness, intellectual honesty, work ethic, passion for work, etc.

b.) is this person higher on give or take: seemingly very interested in contractual benefits they will receive, seemingly uninterested in value they can add

c.) technical culture: e.g., are you walking into a “move fast and break things” company with a “six-nines-reliability” mentality, or vice-versa?
I missed the part of the article which mentions getting matched against deepMind is opt-in in the first go through. So everything should be fine.
That was just an example of someone who legitimately got busted. It could be any crime (depending on the timeout). Heck if the timeout is too short perhaps you were on retraite or vacation or something.
i read it being more about changes or obstacles that the artists could not possibly have forseen, yet they get chastised for failing because of something that was beyond their control.
Seems likely. Rather, they stated that 'fact' without anything more than anecdotal evidence.

This paper investigates a far more likely method of action:
http://zero.sci-hub.tw/673/f8d7a6469e96789d8c958eb3c4efdc46/...
Sure, but blasting a large volume of it at my wet hands I imagine would concentrate a lot more of the contents of the air on the surface of my hands than I am breathing.
> The important job was done much earlier then that. Before .NET 1.1 MS decided the fundamental IO class, Stream, needs async API, exposed BeginRead/EndRead, and the rest of them.

I think the reasoning for this goes back even further. Windows NT already offered a set of comprehensive async APIs in term of IO completion ports and overlapped operations. The .NET APIs are merely wrappers of those. They are too good to omit them.
Wrong. A painted bike lane provides no sense of security, and is for the most part completely ignored by car drivers. You can use temporary solid barriers, concrete or those water fillable plastic ones, or bolted posts instead. Anything that atleast damages a car on impact really. However, a switch to cycling needs to be systemic and can take a fairly long time, so I'm not sure how a limited and 'one street' experiment would fit unless you are just incrementing on an already well established cycle lane network.
There won't be much innovation going on in a +4° degree world. People will be busy fighting over food and water.
The users who really know what they're doing are going to refuse to disable system integrity protection. I paid a shitload of money for the T2 chip, secure signed boots, a virus-free environment and complete peace of mind from malware. No way I'm turning that off on a work machine.

I have a Raspberry Pi for hacking, I'm happy to root the hobby computers, not the work ones.
Each player has to opt-in to the possibility of being matched with the anonymous AI player.
Yeah, yeah, Bitcoin valuation makes no sense. But it is a beautiful realisation of the Cyberpunk dreams of freedom.
And it highlights a problem with using a game like StarCraft to measure AI - there isn't overwhelming evidence that the humans are winning by being better decision makers. If DeepMind wants a computer to win at StarCraft they can trivially make a computer win at StarCraft. The research seems to be in 'how do we handicap an AI so that it doesn't win easily by leveraging its more reliable sensors' and they are adding handicaps in a semi-random manner. That is nearly pointless; they need a different deterministic game where hidden information plays a bigger role and fast reaction times don't matter.

Ignoring APM - what if it turns out that the better of two players isn't the one who makes better strategic decisions, but the one who can issue more effective tactical commands in a short burst? We can't measure that as it isn't APM but it is likely to be a huge factor. StarCraft AI have historically been handicapped by being unable to model tight tactical situations - if machine learning can come up with any model at all that works (and we now know it can) computers are simply so much better at making quick decisions that there is little left to see that is interesting. There isn't much left to prove.
Superb piece, really well written, and a great underlying story about personal change. Brilliant.
For example between easily upgradeable environment-friendly product and a box of glued components with no-user replaceable parts so that they need to buy a new item in the line sooner.
That's why if find postings like this dangerous. If an author is asking someone to run a command, they really need to explain what the command does and what the tradeoffs are.
How do they determine what failure is, and how many times do they get to fail before they stop getting funded?

I think everyone would like some money to pursue their passion, especially if it didn’t come with any accountability! The premise seems to be failure can lead to success. Yeah, maybe, but it could also just lead to more failure. You’re asking institutions and people to keep the money flowing “just cuz”
It is apparent to me that someone at HN is putting a thumb on the scale, probably dang, who as I recall has a degree in the liberal arts. I am totally fine with these bonus posts, many of which I ignore. I really love the curation of Hacker News.
I keep an EFF bumper sticker on my laptop for that very reason — advertising for non-profits or causes. I’ve had a surprising (or not?) number of people ask “what’s this EFF thing?”, and in turn had many good conversations with folks about privacy, encryption, Etc. I know of at least one person who dug deeper after our chat and ended up donating to the EFF.
Strava ends integration with Relive due to API terms violation
From what I hear from people in the ad business, safari is still 100% trackable even without those cookies; it's just a bit harder to set up.
It’s opt-in, and also it doesn’t even come close to matching the descriptions in the bill.

> for the purpose of knowingly deceiving the person about the content of the communication in order to incentivize a purchase or sale of goods or services in a commercial transaction or to influence a vote in an election.
Microsoft security unit also thinks that way.

https://www.youtube.com/watch?v=PjbGojjnBZQ

https://github.com/microsoft/MSRC-Security-Research/tree/mas...

"Future development should be a mix of C#, Rust and constrained C++."

Which is also a reason why they aren't that bothered into keeping plain old C around on VC++, beyond ISO C++ requirements.
Hundreds of millions of refugees? Collapse of major ecosystems? Desertification? Flooding?
Germany is kind of a mixed bag here - situations are getting weird quickly if you search for Munich, Frankfurt, Hamburg or Stuttgart, they get somewhat acceptable when you consider Berlin (but listen to them complaining about rent!), and in some areas, living is almost free (most of the Ruhrgebiet).

Also consider that if you are reading HN, you are likely to work in IT, which gives you a skewed idea on average income levels.
Categories (Themes) for Naming Features on Planets and Satellites
> There is no meaningful difference between the JNI and the HotSpot VM and the Rust unsafe keyword

JNI: used rarely. Can opt out, the runtime will enforce the policy, disabling all unsafe code. Most third-party libraries don't use nor require it.

JVM: Identical prebuilt binaries are installed by millions of users. Developer is a for-profit company who's existence depends on the security of their product. Only small count of people can technically change the unsafe code. Can't opt out this will disable Java.

Rust unsafe: the unsafe code is used in half of the libraries, first and third party, i.e. authored by very large group of people. There's no single binary, potential bugs are spread across entire ecosystem. Test coverage varies greatly, Vec from stdlib is used by everyone and very likely fine, but a long tail of unsafe code not used in practice much, or at all. Can't opt out this will disable Rust.

The difference is quantitative, in my estimation of risks. I don't exclude someone has deliberately placed a security critical bug in a JVM using some real-life bug (blackmail, bribe, etc.) but other people are IMO much more likely to notice, than if similar security bug is in some obscure Rust crate. It's same with human errors.
Those python ports of dplyr and ggplot2 are cool, but the problem is that they're abandoned.
Do you mean the part where you can pull the Sim card out of the phone and reinsert it when you need to make a call?
You mean like using unsafe all over the place in many third party Rust libraries?

Also Android is a poster child that Google hiring practices don't lead to the best quality of code implementation.
OK - so basically, if you don't knowingly provide (or envisage providing) goods or services to EU customers.

This is a very different situation from your original statements based on size and maturity of a company - but I'll concede that the EU reach clearly only applies to EU interests .
Very interesting. Funnily enough, Wikipedia doesn't seem to know anything about quantum trajectory theory. It's always amusing to find something that isn't on Wikipedia.
I wish they made it more clear what part of the API usage policy has been abused by Relive, for other who depend on the Strava API (like me) to learn from the experience.
No, alternatively we radically change how we produce energy, how we transport goods and people and how we heat homes. Don't make it sound easy. Reducing consumption only buys time. We need an absolutely massive effort.
I'd expect to be able to fill my under-water-boat with water, the very thing it's designed to be submerged in, drain the water, and sail along. If something breaks from that, it's wrong. Shouldn't make a difference if the inside or the outside is exposed to it. Yes, that implies that everything inside the submarine is waterproof, and that things that need to be open to the inside environment must have ways of being drained.
> Various studies have found up to a two-fold increase in bacteria count on users' hands,

I take issue with the nature of that statistic.

What does a 'two-fold increase' actually mean? Is it two hundred bacteria, instead of one hundred, when pre-hand-wash, I have millions?

Is it double the bacteria after use, compared to before use? If so, how many bacteria do I even have, after washing my hands?

What is the quantifiable harm of this 'double'? Double times 'next to nothing' is still 'next to nothing'.

(I despise hand-dryers, but I also take issue with these sorts of claims.)
That product quality, safety and price are all superior with Airbus right now is a bonus.
How many hours would it take to watch all of Doctor Who?
We have reasonably good estimates for the costs now, but nobody really knows whether reactive steps later are even possible.
Does not seem to work with Firefox...
The next era of human progress: what lies behind the global new cities epidemic?
As a passenger: Airbus planes tend to be more silent within the cabin (as compared to similar-sized Boeing ones), too.
I don't think scraping is illegal, unless you're hitting protected pages behind a login after agreeing to a Terms of Service, or hitting it so often you'd constitute a DOS attack.

An implied TOS notice on a separate page or footer is not considered enforceable last time I checked, likewise for robots.txt.
Yes, it's very clear, thank you.

On the other hand, I believe the very core of science is to use our imagination and creativity to look for things that don't fit any models, that are not accounted for by any of them, for higher-order structures that might explain the current models better and so on.

For example, our civilization is more or less built on energy, with the electric current as its main medium, so we are totally dependent on external energy sources - and that's currently the main problem of our civilization. It's not impossible other civilizations might exist (in other space-time environments) that somewhat learned to achieve similar results we do (transportation, healing, distant communication) without using external energy sources. This would at least account for lack of artefacts we currently identify an advanced civilization with.
> So, as far as password spray is concerned – your password doesn’t matter – as long as it isn’t in the “most common passwords” top 50 list!

That's a matter of point of view. Microsoft may not care that users have passwords in the top 1000 list because, say, only 99.9% of the attacks were made with passwords in the top 50 list, but this .01% of users is still at a higher risk of being victim of password spraying than others. I'm worried that this line could be misinterpreted : banning common passwords is still important (and not just the top 50).

Also, the line saying that password managers should be used "if you are really nervous" is very weird. Password managers are a good way to apply the given recommendations (except for MFA, of course), and on top of that, they allow you to not have to remember all of these unique passwords. It's even more weird since the major point of the article is that the complexity of the password doesn't matter as much as its uniqueness.
One of the joys of aging to me is being immune to these noises while still enjoying music to the fullest. When I was young it was often agony going into stores that had alarm systems employing these high-pitched hums. Neither of my girlfriend nor her family, with whom we spent a great deal of time, could hear them. They were patient but bemused at my reaction.
I like the idea, especially for highly-skilled knowledge workers (i.e. the people browsing HN) but I fail to see the broader applicability for other jobs.

Imagine one has a machine that produces 5X widgets in 5 days. We now want it to be on for only 4 days and as such it produces 4X widgets but at the price of a 5X widget machine ... that just makes it more expensive ...
There are JVMs written in Java, and in fact that is what Project Metropolis is all about, take code from GraalVM and increasingly replace that C++ in OpenJDK with more Java code instead, including defining a so called System Java subset to be AOT compiled by SubstrateVM.
This applies to a lot of things.

I actually feel like the constraints on supply in my childhood enabled me to experience a wider range of media than I otherwise might have. Sure, I read a lot of crappy books and terrible TV ( or good stuff that is outside my immediate interests) back then because there wasn't anything else but that in of itself was an experience.

That's lost when I can pick anything and just drop anything that doesn't have the right genre and is 5 star on whatever rating service I used.
> Someone could follow the advice in the article and still be vulnerable.

This applies to any advice that is not an actual reference implementation in code. There's only a state-changing GET handler because they chose to work around CORS and you can't POST for images. Implemented properly this CORS approach does protect against CSRF without the need for an explicit token. I've written more about this before, with concrete examples in Node for example: https://fosterelli.co/dangerous-use-of-express-body-parser
Loud machines are loud because loud is the easiest. It takes serious analysis and engineering to discover exactly where the noise comes from and/or is amplified and fix that. Sometimes you can cut a machine's noise level in half just by tightening a few screws or replacing some raster by a different material, but you don't know which one until you detect where the noise comes from.

Your Miele is less noisy because they (and their suppliers) invested lots of engineer hours in making it less noisy, both at the motor level and at the level of the entire vacuum cleaner.