skysight-inc/HackerNews huggingface dataset:
Semantics aside I hope the point I was making is clear. By "irresponsible" I meant the regular definition of the word: reckless, or careless. Not following any best practices.

Out of personal curiosity, how is "coordinated" mitigating the issue you mentioned? It eliminates the vagueness of "responsible" but seems a lot more strict for the researchers:

> The primary tenet of coordinated disclosure is that nobody should be informed about a vulnerability until the software vendor gives their permission
Well..no one has to switch to React/Vue/etc.
You can still deliver well-behaved websites using plain HTML5 (CSS3 + jQuery), without all the bloat taken thanks to npm/yarn.
You can try to use SaSS or LeSS, to make your CSS files look neat and avoiding to DRY, but all the rest is pure bloat.

To all the people saying that you want a native-app look, then go for the native way. The web-apps will _NEVER_ be as fast as the native ones, just because, the native ones will be faster and faster as the hardware specs are going up.
I personally hate to go through web-development, even if it's a desktop client: stop wrapping around web views.
As soon as a word has three (or more) meanings you can suddenly create silly long sentences with one word in dutch:

Als in bergen bergen bergen bergen, dan bergen bergen bergen in bergen.

If mountains hide mountains in bergen (a place name) then mountains hide mountains in bergen.

And similarly:

Als zeven zeven zeven zeven, dan zeven zeven zeven zeven

If seven sieves sieve sieves, then seven sieves sieve sieves. (this one works surprisingly well in english too)
I have exactly that problem:

- Motorcycle to work: 15 - 20 minutes door to door (driving generally ~30 minutes, but 40 minutes or so during busy periods)

- Bus to work: > 60 minutes (7 minute walk, 5 minute wait, 45 minute average bus journey, 7 minute walk)

Cycling would, I reckon, take me about 45 - 50 minutes door to door until I got fitter, but that would be fine because I'd be getting loads of exercise, so the trade-off becomes worthwhile even though it takes longer. (The reason I don't cycle is there's no safe route.)
I would like to have very explicit typing.

I'm not sure, that any language has this, but i would also like to add (optional) units to a language...
The python package "pint" is an example of a pretty nice implementation: https://pint.readthedocs.io/en/0.9/

Like pseudo code:

int i=1;

i.unit = Unit.KG;
In most places it's usually completely dependent on the contract, if you are a big leaser (such as WeWork) you can leverage a lot of terms just by having money and paying upfront.
Well yes, but until that happens we need to keep FOSS afloat somehow.
Boost Your Startup Growth with OKRs
I do hope that next time when we have large protests looming, you are ok with allowing them only in a corn field in central Iowa, somewhere where they cannot make a significant impact.
Churn Analysis in Python
We've heard a lot about OKRs, but how do we effectively implement the methodology into our company's culture? To get the method working correctly as it did for Google, you must do it right.

1. Communicate about OKRs
2. Choose a tool
3. Organize OKRs
4. Set company OKRs
5. Set team OKRs
6. Set individual OKRs
7. Edit and improve all OKRs
8. Evaluation
9. Mistakes to avoid.
Only if it's a vector image that's not for a website. The chart assumes only websites know how to handle SVG.
Sentiment patterns from left-and right-wing YouTube news channels
every forum pretty much. If you have been interested in getting one, and following along with the launch this is not a controversial statement. It's not 100% sure its the chips fault though, bios issues are still running rampant nearly 5 weeks later, and each new bios is changing performance significantly. It will take a while before everyone knows exactly where they stand.
Galaxy hunters spot hidden giants in the early universe
This might be stupid - but why are these credit ratings agencies allowed to exist in a comparatively free market? Surely a function like the one they provide is better handled by a Not-For-Profit governmental body?

Without this - or incredibly tightly policed regulation of the existing private agencies, I don't see how an outcome like the one described here isn't mathematically guaranteed?
Anatomy of a Posit Number
In some ways, perhaps RMS is who led us here? Or maybe it was Eric Raymond (and "open source") who led us astray?

The "Cloud" is certainly a clever means to extract value from GPLv2 software stacks that many of the services are built upon, frequently without having to give much of anything back.

How many "cloudy" services run on Linux and other GPLv2 software?

I sometimes wonder what the world would look like had more free licenses (such as MIT/BSD) been just a bit more popular during critical points in history, or had less free options like GPLv3 or AGPL come a bit sooner as viable options.

Would we have to pay for more software, and if so, would the privacy equation have turned out differently? Would software simply not have advanced as quickly as it did? Would the direction tech is moving still be a web-centric one, or would it be a bit more of a desktop/local centric world with more shrink-wrapped software?
It's hard to tell whether or not the claims are credible or not as he links to no sources for any of the figures. Given the article's author I'd want to validate any such claims.
If this catches on there will be exciting new security problems.
I was thinking phone-over-WiFi would be interesting to explore as well.
I understood a completely different point from the article.

The old mediaeval city was destroyed to essentially disenfranchise the working poor. No longer would they have strong defensive positions in small winding streets during revolution, they were also displaced from the city centre to make space for the wealthy and elite.

Money and power weren't working towards a pro-civilisation agenda. They were working in their own self interest against the struggling masses.
> a lot to lose to lawsuits if they store or leak your password.

This has been demonstrated to be wrong (see: every time there's malware on an ad network).
And I’m not disputing that at all. None of my statements say anything about any particular self-driving technology as I’m not an expert in the various technologies. My point is that what’s “acceptable” is a fundamentally a moral stance, and stated the minimum bar I believe all drivers (automated or not) need to meet.

This is simply a constraint that any system needs to work within, and it’s entirely possible that precludes the commercial viability of LIDAR-based systems. It’s also possible that there’s some niche market that fair-weather-only systems can be successful in long before the general problem is solved, and we shouldn’t artificially throw those out as “unacceptable” when there’s a reasonable framework for them to operate under.
The real metric of quality is does it do what you expected. PHP is a gun that sometimes shoots backwards with no sensible reason where as rust has a gyroscope that can work out when the gun is pointing at your face and requires that you turn off the safety first.

Entire classes of bugs simply don't exist in better languages.
One click, one global position. City Scale Augmented reality localization
Great feedback! Making a note of it and adding to my list :) Thanks!
Done!!!
Well said. Keep up!
I guess the standard argument is that a governmental credit rating body would slow things down. If fintech startups needed some new feature from the credit rating agency, they might not be able to get it in a reasonable amount of time. Is that slowdown worth the tradeoff of occasional crises like this? I guess society has made its choice.
Or we just eat the stupid ones!
World hunger: solved!
I agree that Family Sharing could be less restrictive but it's not quite as bad as you describe. You're already limited to the number of "Family" accounts on a single system, and I believe also to the number of systems where a given account can be "Family enabled". I also hasten to point out that it's arguably the least restrictive sharing system of any digital storefront on PC or any console.

Also, you can buy licenses for a game on more than one account. If sharing is enabled for accounts A, B, and C on a set of computers, C can use a license from A or B, if both own the game. The trick is that it tries to use the license of the person who enabled sharing most recently. So if A enables sharing, then B, but B is currently playing a game, it won't let C play a game that both A and B own. You can log in as B and disable sharing, then it will work. Alternately, there are tools to fix this automatically by editing config files -- and in retrospect, they probably work because of the security flaws mentioned in an earlier thread...
The authentication happens on a different site (the Google login site) then, and you only get back a token. The worst the ad could do is steal your token then, which will only be valid for a little while.
Everything I'm not personally an expert in (which I can't verify myself with my own understanding, other than by trust), I assume is somehow deception and largely ignore (until I'm smarter and more well informed). Taking anything from an article like this is only going to muddle up your understanding of the world (which you'll eventually have to work to disentangle).
A seat-belt is a really bad comparison because there's almost zero cost to enabling it.

A better comparison is a car that will only go to 100 km/h on a 120 km/h road. It's safer, less accident prone and more energy efficient and you will never need to brake because of hitting the speed limit, but you're not making full use of the car.
Actually, there is a critically bad interaction between the way that garbage collection algorithms work and the LRU heuristic for swap. Tracing garbage collection algorithms work by doing a graph traversal that traces all the live pointers starting from the "root set" (ie, pointers in registers and on the stack) to find all the live objects.

Now, note that (a) the root set are the hottest objects in memory, and (b) they are the ones that gc algorithms touch first. As a result, when you are doing a gc, the LRU (least-recently-used) heuristic for managing swap ends up putting all the hottest data in the program onto disk. This is pretty much the pessimal thing for the kernel to do, and can tank performance by triple-digit factors.

However, this is entirely fixable!

The gc and the kernel need to cooperate to figure out what is okay to push to disk or not. Matthew Hertz, Yi Feng and Emery Berger have a really nice PLDI 2005 paper, Garbage Collection without Paging, which shows how you can make gc performance hundreds of times better with just a little kernel assistance.

However, because kernel developers do not program in garbage collected languages (they program in C, because that's what the kernel is written in), they don't understand garbage collection and are hostile to kernel changes to support it. Emery Berger told me they tried and failed to get the Linux kernel to support their changes, and people who worked on .NET told me they had similar experiences with the Windows kernel team.
If you're new to Serverless and want to deploy a web app to it, read this first
hi there,need apple enterprise account
Big investors do it. They contract independent firms to double-check their own traders' thinking and decisions.

It's usually not proactive though. (PE firms get valuation checks before investment, but that's different than bonds.)
Were German yields inverted 18 months ago?

The inverted US yield curve is supposed to predict a US recession.

It doesn’t say anything about the rest of the world.
Wow, "we don't know what went wrong but we're certain we fixed it!" That's nice and convincing...
I would exercise caution as this is linked to the CATO institute. I find their method of inquiry and reporting to be disingenuous.
Why Build a Custom Content Recommendation Engine?
> If you can build an unhackable system you literally can get whatever salary you want.

Does it have to be useful?

On a more serious note, similarly to being able to break RSA in ‘little’ time, having that kind of skill would not result in financial wealth but a huge risk to your physical and mental/emotional well-being. Imagine who would come knocking on your door (assuming they won’t straight out abduct you), and trying to tell them no.
Map of a tech support scam network
Please tell me where you can read more about the idea that "the entire "fracking revolution " has been funded by loses from bondholders"
Ironic if there's a mass Exodus to Oregon/Washington just before the next Cascadia earthquake/tsunami wipes off half the two states. Guess that would be nature's way of enforcing population control.
Bond rating is literally a speculation. Government body would need deterministic definitive rules to assign bond rating which would immediately be gamed. The idea of having private firm do speculation instead is that if they are not good at it then people will stop using them and strongest would eventually survive. Unfortunately, they are well enough "protected" to go away.
Github is annoying. Some pages are SSR some aren't. The js is quite resource hungry so I tend to keep js off for github until I get to a page that needs it.
This is pretty much delusional. Most people are dependent on ride sharing in SF for even menial tasks.
But the mandate is that because of budget cuts, the FAA must depend on the manufacturers themselves to be the SMEs. Thus, they are asking Boeing to judge Boeing's own systems.

If B says, "It's all good", and B is the SME, then FAA must agree and pass.
I'm not a free speech absolutist. If you cause certain established categories of harm, you should be held liable for the damages you cause.

Specific example: https://mobile.twitter.com/alexstamos/status/115839279568757...

BitMitigate has a case for tortious interference over this tweet, IMO. Alex knew of contracts between BitMitigate and 8chan (or Voxility), used his influence to induce Voxility to make it impossible for BitMitigate to fulfill their 8chan contract (or for the breach of their voxility contract), Alex was not privileged to interfere, and there were economic damages suffered. That's all the elements necessary for a tortious interference with contract claim.

>IANAL, but the first amendment provides strong protections against tortious interference claims.

Indeed it does. Generally, merely sharing truthful information does not provide a basis for tortious interference. The problem I have isn't that these sorts of statements are false, but that they come attached with a threat of an active negative PR campaign. The format of twitter makes this particularly salient, since it makes it easy to get viral traction and hard to communicate extensive information. And the tweet I linked earlier didn't tell Voxility anything it didn't already know, it simply publicized things and used the author's influence coercively.
They were asking about any test at all. The answer kind of muddies the problem by implying it is harder than it seems, except the current situation is nothing exists at all. The stated problem was not at all that it wasn't qualitatively adequate.
Top Benefits of Using Marketing Automation in Business
If the alternative requires the construction of a colossal bureaucracy that empowers bad actors in a way that causes even more harm.
> Being local admin on the workstation doesn't really give you any more ability to do damage than just a regular user account

That's dangerously untrue. On all the Windows systems at home, everybody else is a non-privileged user and I set sane file permissions so they can get to shared movies, etc, but not read my bank details and tax records. Privilege escalation means that they could trivially change those permissions. The same is true of a corporate environment -- just because you can't also make changes to AD doesn't mean the threat of accessing local files under other users' accounts is trivial.

ETA: I just read a bunch of this user's other posts in this thread and I'm beginning to suspect they're trolling, so I'll disengage.
I forget which car it was, but I watched a car review video recently where the presenter fussed about taking the (otherwise great) car to a track. Some of the assists couldn't be disabled, so going around the track he would occasionally have to fight the steering wheel when it would try to turn him a certain way to stay within a "lane".
Good point. noted !
Plain JS is the same. How often do you search something and find the 2012 way includes copying a 20 line util function and the latest way has it built in to the language.
I'm studying cyber security in Germany. It's the single best decision I've made so far. The work opportunities seem endless and I love working in the industry.

Most of my fellow students simply decided to go into this field because of the high monetary compensation and expect salaries starting from 60k€ upwards with a Bachelors.
For a vast majority of people, obesity is a problem of eating too many kcal. There is no chicken/egg problem for them. The remainder might have some sort of metabolic problem which they should go to the doctor for. There is still no chicken/egg problem there.

Am I missing a group of people who eat exactly the kcal they require, get the nutrients they need and don't have a metabolic problem, but still materialise fat for some reason?
MS office 2010 on windows 7 still runs OK in a VM.
It's effectively a very early version of what we would do with "shaders" today - a massively repeated operation across an entire bitmap. Targeting the 16-bit single-processor era of 4MHz machines with 1MB RAM.

A more modern version might be some sort of AVX filter-instruction generator. Although these days we try to avoid letting the CPU dirty its hands with bitmaps and leave them to the GPU.

The Windows documentation for BitBlt dates it to Windows 2000, which is definitely wrong. I wonder if anyone has a 3.0 or even 1.0 API reference lying around?
I'm not sure about this particular sensor but Xiaomi doesn't have a good track record when it comes to accuracy when it comes to air particulates [0]. Also they claim to use a combined Sensirion TVOC + CO2 sensor, however the only TVOC + CO2 sensors Sensirion offers (SVM30, SGP30) [1] merely estimate CO2 concentration based on H2 levels, they don't actually measure it directly. These sensors tend to be wildly inaccurate. The spec sheet even says typical accuracy is 15%, which is pretty bad.

0: https://smartairfilters.com/en/blog/xiaomi-particle-counter-...

1: https://www.sensirion.com/en/environmental-sensors/gas-senso...
Intellectually interesting is not an objective thing to pursue. I believe if you look closely all modern day architecture is an intellectual marvel. Architects of today have an attention to detail that you wouldn't find in the olden days. As for SF, I would never choose to live there. A wooden old looking house for a very very high rent ? I don't see any data to support living there.
Climate Change Threatens the World’s Food Supply, United Nations Warns
I kind of agree in a tragedy of the commons kind of way, but you take it entirely too far.

FOSS projects that tend to be volunteer led, are that way because the developer is scratching their own itch. Maybe I could make money with one of hobbies, but its a risk, and I don't want to spoil something I enjoy so I just develop X in my spare time. I enjoy it, it's something I wouldn't normally get to do and yes as a bonus I can put it on a CV.

Expectations beyond that are unreasonable? You don't have any right to make money from that, any more than a commercial company has a right to make a profit.

And say everyone did what you suggest, its not immediately clear the world would be a better place anyway, maybe google and Facebook only exist because of the existence of Open source....
Open Dataset of Phishing and Tor Hidden Services Screen-Captures
Plus Security Expert is incredibly vague. Like what do you do? Are you a pen tester? SIEM analyst? Compliance? Do you work in SecDevOps? Or are just a firewall/IDS guy? Or maybe you walk around the office and hit your accountants every time they click on a phishing link with a wiffel ball bat.

The world of info sec is so massive that saying you are a expert in 'Security' is useless.
Yeah. My personal theory is that mathematics is a language, which happens to be useful in the description of scientific phenomena.
Once a company gets big enough, the quantitative difference in scale creates a qualitative difference. We don't let electricity providers deny service based on politics; we have a whole legal class called 'public utilities' for this. Public utility laws infringe on the freedom of utility companies, anyway.

The question is when a website/service should be classed a public utility.
It's popular to set up a Raspberry Pi or similar to act as a bridge between Bluetooth and wifi.
The market is at about the same level as Jan 2018.

We could just as easily be up or down 20% a year from now.
Yes, I'm fully aware of what C++ is. I'm talking about Qt skills specifically.

My point is that in Electron development, the Electron specific skills is very small part of development. Most of the skills and tools used are also widely used elsewhere in industry. This is not the case for Qt work.
Chase Bank forgiving all debt owed by its Canadian credit card customers
No, I cannot. Everything got better with time. Except maybe air quality. I cannot imagine spending a day in 18th century. I would either die of disease or kill myself. It only looks great in paintings and pictures and what not.
You could obtain water elsewhere, or build a distribution network for yourself.
Building Shared Access Shopping Cart with Angular and Firebase
One of these? http://2.bp.blogspot.com/-hoi46KPfaMk/Uu6k-6CP5lI/AAAAAAAAC8...

The coffee tastes good, they are cheap (assuming you get a cheap one, which works just as well as an expensive one), they last for a long time and you can find them everywhere
Lenovo is all over Ryzen since Zen+ too.
Heckers Earn Extra Revenue from Collecting Secure Data
I built a SPA and found making the API and linking everything up to be needless overhead. The way I find works best is using rails templates to simply insert a div with all the data needed in the attributes and then having react render everything.
$64 on AliExpress. Pandacheck is a good tool for price comparison although it doesn't help deal with listings with multiple prices
https://www.aliexpress.com/item/32970668564.html
https://en.pandacheck.com
InstaREC | C++/QT Software Developer | Stuttgart, DE | Full-Time or Contractor/Freelance | Remote or Onsite

At InstaReconstruct (InstaREC), we’re currently working towards the release of our next-generation photogrammetry and scan processing solution. Like our sister company, InstaLOD, we’re enabling enterprise and entertainment companies to create magical 3D experiences in a faster, automated, and scalable way. From military companies building next-generation simulations and data analysis to leading automotive and game developers — our tech plays a vital part in delivering their project.

InstaREC is a newly established startup, that we’ve introduced for the first time at SIGGRAPH 2019 with fantastic reception from all key players in the industry. Everybody is looking forward to getting their hands onto our new tech.

We're not just looking for coworkers but for
stakeholders and adventurers – driven product owners
that want to make a difference through their work.
We’re looking for passionate C++ software developers
experienced with experience in photogrammetry, point-
cloud rendering and/or mesh-reconstructions. Ideally,
you’ve used the Qt framework in past-projects.

Because everything is still being built, we don’t have a career website, so it’s an excellent opportunity to be part of something new and rapidly growing. All parts of our startup are still moving and you’ll be able to drive and influence the direction of our company.

Please provide an up-to-date resume including sample code of previous work that you can share to Michael@theabstract.co.