skysight-inc/HackerNews huggingface dataset:
> that people expect of a consumer electronic device

Consumers are way too entitled. Look at aeronautic applications where it just has to work for a few hours until you have to reboot everything.

But anyway, even if development costs amortize with giant quantities, it still requires complex machinery and a trained workforce for manufacturing.

It is evidently possible, but the result is still amazing.

Development for the chips is costly, but in many applications the same principle seems to apply.

Porting to another processor can happen if a chip becomes available that is a few cent cheaper. I have often seen that, even though porting isn't trivial and in many cases pretty error prone in my opinion. (compiler change, specs just completely different...)

> Anyways, how much do you pay for a few hundred milligrams of acetaminophen? Is that also completely insane?

Honestly it seems that it is. I got the impression that something about the price is wrong. That is why I often have the thought that pharma might rip off their patients and chip manufacturers concentrate on exploitation of workers instead. Pharma might not have this option to that degree because counterfeiting is easier to accomplish in that domain.

Not that I want to complain about cheap and powerful hardware too loudly...
Miss Thompson wins the Darwin Award for black hats. Seriously, she did a horrible job. Clearly a supremely over-confident script kiddie who went around talking about being such a 1337 h4x0r... until the cops showed up.

Serves her right, any way. You've got to be a pretty bad person to put the information of that many people at risk.
Thanks for the link, really interesting. I haven't got the stats maths to get fully into it, but the bits I got are really interesting.

I kinda stand by my statement though. 1000 people who might have been affected. "Millions" more globally (so a tenth of a percent of the population then?). Lots of uncertainty in the previous paper. But a headline that implies that this is happening to "the human body" and we're all at risk. I'm not blaming the scientists, or questioning the science, but the reporting of it is (still, even after reading more into it) sensationalist crap.
Except it's google leaking vulnerabilities that effect their direct competitors.

They have way too much skin in the game.
A Wikipedia Spoiler War Created a Fake Ending for Once Upon a Time in Hollywood
This is great ? Does it support all major browsers for feedback and metadata ?
> But you're saying disclosure when a prompt patch IS provided motivates patches further, and that's not even just a guess? How…?

1. because the policy is "mandatory disclosure", it's way harder to criticise it if it's a blanket, universal policy

2. disclosure is important for users (in general though mostly corporate) because if the issue is not publicly disclosed they might not update their systems (assuming issues are minor or irrelevant)
The appealing thing about not having a build pipeline is not having it. Not having another thing to maintain and update/upgrade/debug. I've gone through grunt, gulp, webpack and parcel. Somewhere along the way I realized that with es6 imports and css variables I don't really need it.

I've talked with frontend devs who only worked on projects with build steps about this and they often seem perplexed and surprised by just how simple it can be if you don't make it complex.
Famed Yale computer science professor quits believing Darwin’s theories
But it's not non-negotiable. https://bugs.chromium.org/p/project-zero/issues/list?can=1&q...
Hmm interesting, what if you had database snapshots that could be driven by ML workflows? The primitive behind Dotscience can support lightweight database snapshots quite easily...
Correct. Some gists were still up yesterday when I looked (her github was down, though), and it seems she had a habit of posting logs of stuff, text snippets, etc. there.
> While federal agents were sweeping the three-bedroom house where Thompson lives they discovered 20 firearms — both assault-style rifles and handguns — as well as firearm accessories, including bumpstocks, scopes, grips and ammunition, in another bedroom, according to a separate complaint filed against the homeowner, 66-year-old Park Quan.

> Quan, who was convicted of being a felon in possession of explosives in 1983 and being a felon in possession of an unregistered machine gun in 1991, was arrested and charged Monday with being a felon in possession of a firearm, federal court records show.

> In the 1983 criminal case, Quan and two co-conspirators were linked to a failed contract killing using a truck bomb made of dynamite, according to court records and news reports. The bomb, which the would-be victim found attached to the underside of his pickup in Ocean Shores, Grays Harbor County, had malfunctioned, The Seattle Times reported at the time.

There are no words...
Its funny and makes some good points but I don't think the distinction is between good and bad teams but whether or not you're 1 team or more.

If one team has one application that is split across multiple repositories it can be a productivity boost and a simplification to unite them into a single repo with some single tools and norms.

If you have two teams working primarily on two sets of repos and two different systems or applications, by all means split them into two (or more) repos. Just be cause its called a "monorepo" doesn't mean you can't have more than one!

It may be simpler to have one, it may be simpler to have many. Do whats simpler for you! I happen to think that it primarily depends on how your teams are organized more than on who is in the teams or their "badness" levels.
“If the computer does not work, it will become a mere ornament,”

I own some old kit that I like to keep working mainly some Amiga and Atari ST machines and he's 100% right. Unless people see what they are doing they literally assume they are some sort of keyboard.
I would say food / nutrition. It's crazy how simple (not easy) it is to eat right, and how far, as a society, we are from eating right.

When you realize that a LOT of problems originate with food, it's becoming mind blowing. Probably more than half of deaths and health expenditures could be fixed with 'eating right'.

I'm thinking more and more about this.
They are paid for when they're needed. They've been scheduled for 15 studies.
Z is an interesting approach.

https://dev.to/kayis/pattern-match-your-javascript-with-z-nf...
We're big fans!
The tech is pretty grown up at this point... If you open up snapchat and hold down on your face while the selfie camera is active, a lot of masks will show up that change your face in real-time. One of these swaps your gender (and does a pretty good job of it to be honest). And this is just running on a phone (including android where there's no AI chip like in iphones), I'm sure with a computer you can do much better!
I feel like you missed the point. The choices are: give Apple 30%, or do not even so much as hint to the users that they can subscribe on the website. Either option cripples the service compared to Apple’s service.
No criteria. I think the problem is with the low number of seats available. A similar quality of education can be made available at a much larger scale if the country is so motivated. It's understandable that not all branches of engineering at other universities can acquire the kind of funding that IITs have. Apart from some specialized lab equipment, there is no technical reason all universities can't offer a comparable quality of education all over India. There are only bureaucratic reasons.
Unless you have to optimize for the PS4 and PS4 Pro. But, what does ease of development have to do with one being more of a computer than the other?
I will take a look at that and whether we can integrate with it, thanks for the tip! What do you like about it?
Project Zero regularly exposes flaws in Google products, as well as non-competitor's products (e.g. AV, Tavis Ormandy's AV rants are always enjoyable).

I'm not a fan of Google at all and don't use their products unless I absolutely have to, but everything I've seen so far about P0 has been stellar technically and ethically.
Hacker IDd as former Amazon employee steals data of 106M from Capital One
Assuming you are talking about extrasolar planets: Outer space is far less hospitable than mars, and the timeframes involved in getting to even very close stars means living aboard the ships traveling there for an extended period of time.
Looks pretty good. But I don’t understand why they don’t do string interpolation like C# and others do.

“I= {I}”

Is much better and less error prone than

“I= {}”, I

Or am I missing something?
Dr. Mary Lou Jepsen did an intriguing talk at the Long Now Foundation a while back on her work at Open Ocean. She presented a fascinating - if feasible - technology vision to not only ‘read’ what people are thinking for the purpose of controlling digital devices, but also ‘write’ to allow users to - for instance - experience the memories of others. Obvious abuse potential, but interesting.

https://www.openwater.cc/technology

http://longnow.org/seminars/02018/oct/29/toward-practical-te...
Ask HN: How to Design a University Course?
I will be teaching an undergraduate course next semester (on computer graphics if it matters). Are there any tips/tools/books/resources on how to design and teach a course?
Project Zero has found, and disclosed, over 100 vulnerabilities for Google products.

You're just going out of your way, trying to find things to dislike, and it shows.
> we are made in the image and likeness of God. We are all little images of God, and if we truly understand that we have inherent dignity, then nobody can take that from us, no matter how poor or ugly or uneducated we are.

That's pretty easy when you invent a God. Rhetorical non-sense aside, fact is that appearance matters to people a lot... as does age. Making up rhetoric does not fix any of this, and only makes people's biases more subconscious. The best way to overcome their biases is technology, rather than words... as you can not subvert what you are seeing, as seeing is believing, where can easily subvert what you claim you believe.
> There is zero chance that I would send personal info or payment data to some no-name app and even most of the other well known apps.

Then don't...

It never stopped me from giving my credit card number to Amazon. I gained quite a bit from that and never had to give 30% to Apple to gain from it. I did have to give 2.5% to Visa though, but they did provide a pretty good service to justify that 2.5%.
There is an unusual (ab)use of ping that I hope no-one here needs but just in case; I and a tech was doing some dos scripting (in windows) at a client and we needed short delays. We couldn't find anything in dos, but a web search suggested an obscure but natty trick - pinging localhost.

ping -n <seconds> 127.0.0.1

It worked (edit: I couldn't stop laughing). To be fair, I've used it and its big brother traceroute (very useful!) for its designed purpose.
My god. That machine is beautiful.
This was the kick in the pants I needed to finally subscribe. Thanks.
As I said, the normal human failings/thoughts/emotions are not the same thing as this articles premise. I also do not accept that everyone has moments of cruelty. Cruel thoughts are not the same thing. We all think things and choosing how we react is the difference. I feel that trying to claim even the best people are secretly hiding evils is an attempt to feel better about one's own feelings or actions. I am confident in the examples I look up to be sure I "know" their true natures.
I really like both Apple and Google both of the companies make amazing products and come with different strengths and weaknesses.

Project Zero is a great marketing effort that produces a genuine public good. But when you are the brains around the security dumpster fire that is Android, it's understandable to eyeroll the big PR splashes (ie. distractions) that that project generates.

But hey, that's that market -- it is a valid strategy, and at the end of the day the world gets to learn and fix problems that they didn't know existed.
Ubuntu 18.04 and Nginx and pgadmin4 (server mode and reverse proxy)
> Or take leftpad.

Leftpad was a problem with a particular package management system, not with code reuse. It's true that avoiding code reuse is a way to avoid package management problems, but it's kind of like the way decapitation is a way of avoiding mental health problems.
Ask HN: How do I train myself to be more ready to work at a company?
I'm a self taught developer, so I've never had to do things like unit tests, git repo management (dreaded merge conflicts!), code reviews, etc.

Aside from writing good clean code, what are some processes or topics that I should be competent at before trying to join a team?
I don't believe serious vulnerabilities, patched or not, would stay secret for long even if you tried. Disclosing motivates vendors to build systems to ensure users update their devices as quickly as possible.
No, the parent poster said that Spotify and Netflix had to give Apple a cut. Not only do they not have to, they don’t anymore. The parent post stated something that was factually incorrect.

Seeing that Spotify still grew steadily after not allowing in app subscriptions. It doesn’t seem like their growth was harmed.
What was the use of ICMP Echo packets when there was no ping?
A security company doing this (disclosing apple/ms vulnerabilities) wouldn't be going after their competitors.

> you're being biased solely because its Google and not someone you like.

We should be biased against Google, in everything.
It looks like this bill is targeted towards social media apps, which would be an OK line, at least IMO.
Check out the Google Cloud product lineup for a great one-stop shop. You could use firebase or assemble the pieces yourself (cheaper in the long run). Running everything on a single VM yourself is another option.

You will likely see performance issues by using separate providers. You at least want the server and database close together. Image storage won't be noticed as much.
It makes them tons of money, their problem is that other things make even more money. Sadly their organizational structure is such that walking and gum-chewing is almost impossible for them, so even colossally profitable and beloved products can wither away from neglect.
Not to go too far off-topic, but if you haven't tried them -

I've found that the steam link apps for other platforms (ios/android) work very well. I'm not sure Valve needs dedicated hardware for this anymore.

I have a steamlink in the closet, but being able to do it in software is nice.
There's bias for good looks. And cosmetic/health industry spends billions of dollars on marketing to re-enforce and further strengthen the bias. So is it any surprise people would want to game it to get a better chance of success.
Congrats on the launch, I look forward to trying it out!
> Regarding transpilation surely it's not as standard as you make it out to be?

The impression I got from working on various projects over the past couple of years was that if the build doesn't include Babel/Webpack/Packet/etc then you're not doing a 'professional' job.

> ... handwritten javascript is not that rare nowadays, is it?

I love handwriting vanilla javascript, though I only really get the opportunity to do it in my personal projects.

When I made the decision earlier this year to rewrite my canvas library from scratch, I made a deliberate choice to drop support for IE/Edge/legacy browsers. (I can do this because nobody, as far as I know, uses my library for production sites). Being able to use ES6+ features in the code - promises, fat arrows, const/let, etc - has been a liberation and a joy and made me fall in love with Javascript all over again. Especially as the library has zero dependencies so when I'm working on it, it really does feel like working in uncharted territory where reinventing a wheel means getting to reinvent it better than before.

I wish paid work could be such fun.
mislead is a very loaded word here. Those men have no special entitlement to a woman on the internet being sexually available to them. The idea that they should have such a thing reminds me of https://en.wikipedia.org/wiki/Perfect_Blue
Except google has good reason to want iPhone customers to feel unsafe, to have apple blamed for issues, etc...
Thanks. That was indeed helpful. A part of the problem is that I'm most familiar with barriers used in GC algorithms, and in sandboxing. So seeing the term "memory fence" was confusing. (I should've just read the Wikipedia page!)
Detailed knowledge of a system gives you all kinds of knowledge about how to exploit it. You don't need special access if you know X% of users misconfigure feature Y.
To be clear, that primitive is dotmesh and ZFS - see https://dotscience.com/technology/
Confluera: Real time Attack Interception and Defense Platform
> logically one would think the logic would be "never disclose unless you can provide a compelling reason for doing so".

AFAIK the compelling reason is that history shows us that vendors won’t take vulnerabilities seriously enough until they get threatened.
Just a heads up but if you click on the video with the pop up overlay & play it, then exit/close the modal, the video will continue playing in the background.
Exactly, they each have a maintenance cost which isn't shared when they're all separated.
Nacho Analytics just shut down after slurping all full URLs from 2 million extension installs for over six months.
Why wouldn't a team of vulnerability researchers... research vulnerabilities?
Don't know about others but i support this
Thanks, you answered the one question I had after reading this. I thought most people unable to speak would know sign language, but that's clearly false. I take pride in the fact that our office is really accessible. Once they shut down one of the elevator for "walking week", increasing the load on all the others. One of my co-workers in a wheelchair had to wait multiple elevators multiple times since they were so packed. So I cold mailed the head of services to get him access to the service elevator and they happily obliged.
The point is not that these problems have been fixed. The point is that there seems to be some affinity or tendency in us to want to believe that we're all going to die at any time (or that we're in the "end times" for the religious folks).

Climate Change being real or not is not the point here. The point is that we have yet another generation of people believing that we're all screwed before we get old. Maybe that's it: it's actually easier for young people to believe that they don't have to make long-term decisions because they won't live that long.
What I said should have conveyed no opinion. Why would you change the words?
I’m not a C++ dev. I took one class of it in college and even then it was 90% C and only hit pointers and classes on the final unit.

But holy smokes this is not your grandmother’s C++, is it just me or is the language trying to be all things to all people? It’s getting too big, no? I mean how long do you have to be writing C++ code to fully master the language? Or can you be a high level dev without ever touching the new features? I’m assuming production codebases are likely still stuck on older versions of the language and might never move on.

I hope golang doesn’t grow this large over time.
Bad Copyright Bill Moves Forward with No Serious Understanding of Its Dangers
I'm far more afraid of google.
What mortgage interest?
I am born in 1991 and my brother in 1981. We share the same values and were raised much the same way in a very similar environment.

At work, my team is composed mostly of individuals born in the 80's and we are only a handful of 90's. We share the same workplace attitudes.

The person I am dating was born in 1985. We see the world in a very similar way and share a lot of the same hobbies.

I did not come up with the date range. Look anywhere and that's what you will see.
Preeclampsia Increases Risk of Developing Kidney Disorders Later in Life
Show HN: Cusp – ephemeral, anonymous group SMS that you can paywall
It's not a violation of GDPR. However, is somebody makes a GDPR request to retrieve all of their personal data, or to delete their personal data, then they must comply within 30 days. They have to organize their datasets to make these operations easy.
> mislead is a very loaded word here. Those men have no special entitlement to a woman on the internet being sexually available to them.

And she has no entitlement to their money. She is misleading them to get money, and whether they are entitled to her being sexually available is, actually, entirely irrelevant to the truth of that description, and nothing about such an entitlement is implied by describing her deception as misleading.
> Apple software quality is not what it should be, and hasn't been for quite some time.

It has never been. Been using Apple devices since Tiger if not Panther, their software has always had more teething issues than their hardware, and 10 years back you didn't buy hardware rev1 unless you got every device. Major OS updates usually took a few point release to get solid, and some were just terrible to and through (Lion stands to mind, lots of shiny new stuff, lots of shitty new stuff).
This could be useful for validating conf.d structure or for config bundles for microservices.
This was "never disclose after a patch was provided". How would they not take it seriously if disclosures still happened when patches weren't provided?
I agree: there is no such thing as "the perfect crime" and the use of end-to-end encryption does not make it so. What there is a however is a lack of good, old-fashioned police-work in criminal cases where the police run up against end-to-end encryption.
I built the first version of Cusp about a year ago. It was a tool to help people host fasts (as in not eating).

Quickly I came to the conclusion that ephemeral micro-communities are bigger than just the fasting use-case.

Cusp is exploring ephemerality in communities. Can we have more meaningful real-time connections when the experience is ephemeral by design? Can we have hyper-granular topics when the experience is ephemeral by design?

I also wanted to explore the thesis that micro-community curators/hosts should be able to get compensated for the value they provide. Thus you can optionally charge people to join groups.

Hope y'all enjoy and let me know what you think.
Of course not, that's usernames I'm talking about.

We'd say "Oh, go log in as 'CoolUser69'. The password is 'hunter2'. We are sharing this account together, chip in a few bucks a month if you can" or "oh, I have a curated playlist of [XYZ category]. Look up 'CoolUser69' on [KinkySite.xxx]".

The age range is 26-31 years. Both males and females. Anything from owners of small web development agencies to university students or government office workers. I attempt to keep a diverse social group.

I am female and currently in a stable relationship. There has never been a person I have been in a relationship with that didn't know my kinks and turn-ons. I am not sure how that would work exactly.
yes, they are programs. They, like most of the truly important software, don't have a UI, but they run none the less.
Probably these: https://gist.github.com/paigeadelethompson?direction=desc&so...