skysight-inc/HackerNews huggingface dataset:
You can make a OTC/private deal and you can buy puts and sell calls. I'll be spectating the book on day one, the underwriters might have to defend, really defend, not just touch the number like FB.
This has to be the most outrageously transparent and simple $6M scam to ever work
Obligatory mention of early attempt to really understand and address subversion as a threat plus a follow-up by pioneers that built on that:

http://seclab.cs.ucdavis.edu/projects/history/papers/myer80....

https://apps.dtic.mil/dtic/tr/fulltext/u2/a435312.pdf

The current state-of-the-art in both formal methods, automated analyses, and test generators can get us pretty close to their goals with such designs, too. Way less cost-prohibitive than it used to be. Although, high-assurance security today has moved far away from security kernels they advocated to focus on securing hardware/software and distributed systems in ways that allow expressing more flexible and useful policies. The design and assurance methods of the past still work, though. Stuff like Rust, SPARK Ada, RV-Match, Why3, and CompCert handle more code-level problems than older methods, too.
I don't necessarily agree or disagree, but the author is comparing religion to free market capitalism, not to DRM directly.
The NFL's slow embrace of sports betting
Amazon is a business that has classic technology-heavy segments that involve every type of engineer/programmer/developer and it has retail segments (retail customer service, retail warehousing, retail logistics, etc.), among countless others (HR, accounting, legal, marketing). It does both traditional retail and sells technology products & services (Kindle, smart speakers, tablets, AWS, et al.). At this point they're even doing custom chips; and of course they're increasingly into the media and advertising businesses.

For a monster like Amazon it particularly doesn't make sense to call it a technology company or an ecommerce company (or a media company or an ad company). It's a company - really a conglomerate - and it does/sells x y z. AWS is as much a critial part of what Amazon is today as its retail business (on a value basis, AWS is drastically more valuable, and will be even more so in the future). One day they may be split apart, however that is likely a decade into the future or more.
Literally the first line of the abstract.
I'd say this is more the result of the early 2000 reforms. IPOs happen much later.
> Educators don't usually consider fun to be important for learning.

That's quite unfortunate. I think fun is absolutely crucial to truly learn something.
Flash and Java allowed you to run the code in the browser, but still debug using the source code and not the VM bytecode.
It might be worth pointing out that this presentation comes with speaker notes (keyboard shortcut: S, or click on the gear icon at the bottom and find the link). They contain much more content (and context) than the slides alone.
The only real differences I can see are:

1. The numbers are a magnitude larger, instead of 100's of millions we're talking billions for the individual players.

* Today's villains are far more disingenuous about their motives. In the 80's they unapologetically embraced greed for greed's sake, none of this false "making the world a better place" BS.
GMO can involve genes from a totally different species, like fish genes + plant genes. "Cross-pollination" refers to within a species.

Do you 2 pro-GMO people have any reason you think it's "FUD, plain and simple"? Is that the argument, that it's no different to what nature does? Just repeating "FUD" like that doesn't make it so.

It's very reminiscent of the blanket dismissals of nuclear power/waste "fears" one reads on here, suggesting there are only bad, emotional-based reasons to have issues with it. Since there are no actual reasons, they must be just fears. Simple. "FUD, plain and simple".

But there is rational uncertainty about GMO safety–how could there not be.
Isn't that what both stories were aiming for (converging)? I seem to remember a lot of hints dropped in both.
This alone is not a backdoor but it might lead to one.

This assumes a scenario where an attacker is in full control of "num".

For example: A lot of protocols have a structure like "<SIZE><PAYLOAD>"
where the sending side (the attacker) specifies SIZE and the receiving
side allocates a buffer of that size).

The code calling that function assumes it will never create a buffer
that is larger then 256 bytes, so perhaps it is doing something like
this:

char buf[256];
strcpy (buf, allocatebufs (ATTACKER_SIZE))

If the limit-check fails and the supplied size is in a valid range for
malloc, it would be a typical buffer overflow.
I'm with you except I'm not so sure those .15% of players wouldn't blow their money on something different. In my state, casinos are the sole purview of Native tribes, and those whales pay for a lot of tribal services for people in need.

Which just struck me as a perfect point for your argument. So I guess I'm smelling what you're cooking.
AFAIK, Scrivener is a single-player app. I want mine to be server-client by default, with stories accessible and editable by multiple people.
They are rights. Their rights. You have no rights. They can afford to buy legislation to ensure this. E.g.,

https://en.wikipedia.org/wiki/Copyright_Term_Extension_Act
Your statement equates not using exceptions with no error handling at all. Are exceptions the only way C++ can handle errors? Or can it do things like return codes used in C or advanced constructs via its metaprogramming?
I wrote a (straightforward) dancing links implementation that solves 17.000 puzzles/sec/core. It also validates uniqueness of the found solution.

How much faster does it get? I'm genuinely curious
Web often seems to me like the least overwhelming field. There are so many people doing it well that there are tools to make everything pretty easy. All of my biggest problems are people/org problems.

Maybe your problem is that doing something professionally will always force you to spend time on parts you find uninteresting?

I agree mobile is awful. You might find 2D game dev to be fun, if you hyper-focus on a single platform.
They aren't asking how a player felt about Portal or Luminosity. It looks like they did some standardized tests after they played the respective games.
So carefully selected video games are the real brain training. Who would have thought..

The following finding also continues to be interesting:
“More remarkably, we found that playing an action video game can virtually eliminate this gender difference in spatial attention and simultaneously decrease the gender disparity in mental rotation ability, a higher-level process in spatial cognition.”
https://www.ncbi.nlm.nih.gov/m/pubmed/17894600/
Why?

There are fewer pests to deal with in the desert in general. From what I've seen driving past area farms the main investment is canopies presumably to help retain a more humid environment and reduce the amount of sunlight.

As an individual I can easily have a little greenhouse outside, I certainly have enough space.

It's something I intend to do eventually, but it's pretty far down the priority list at this time.
TL;DR: the car battery was dead
> So that's it, blame the user and caveat emptor?

If I sell you a loaf of bread and you complain that it's not a sandwich, is it anything else?

> Many (all?) of these services tightly couple you to Amazon, so avoiding them is a very reasonable decision.

That's just a cop-out: checking the “multi-AZ” box in RDS completely avoided this problem with zero lock-in. If you're deploying containers, you have multiple options which are portable and avoid this completely. If you're deploying EC2 instances, again you have options with very limited lock-in (e.g. auto-scaling with multiple AZs).

More importantly, that's also a business decision: if you're that worried about lock-in you are accepting responsibility to operate the alternatives. For example, following industry-standard practice might suggest that you run everything in Kubernetes in multiple AZs, regions, or providers but it would never support running everything in a single AZ.
It's hypothetical, but other code may expect a bigger buffer than was actually allocated.

Suppose we're on a 32 bit platform and num is 0xF0000001. When multiplied by 64 (0x40), we'll end up allocating a 64 (0x40) byte buffer. But other code converting num to unsigned may be expecting a buffer large enough for 0xF0000001 64 byte records. After all, that was probably the reason for multiplying by 64.
So within a few hours, a primary source describing "Push Pages" - a concept easily grokkable with light skimming - has been processed into understanding-destroying moron-appealing not-even-wrong clickbait of "Google has secret webpages".

Some "journalist" was directly responsible for this vile transmutation. What the fuck is wrong with them?

The larger analysis is that much modern news is being reported directly on blogs, making repetition by traditional "news organizations" like CNET simply unnecessary. But like so much of our post-scarcity society, rather than pivoting to focus on accomplishing something useful, they insist on sticking around to make things worse for everyone.
You get a buffer that's too small for whatever data gets written there. That data (presumably controllable by the attacker) overwrites whatever other data is right after the allocated (too small) buffer; in many cases this can be leveraged to gain control of the program in ways that will depend the rest of the code around that backdoor.

That code doesn't need to be buggy - simple, correct code that traverses e.g. a linked list can be abused to gain arbitrary memory writes and reads if you can overwrite the pointers in that linked list with values under your control; and these arbitrary memory writes can be abused to gain arbitrary code execution.

Exploiting a heap overflow is not as straightforward as a stack overflow, but certainly possible, there are many real world code execution vulnerabilities that arise from a buffer overflow in heap.
1. Most Republicans don't understand DRM

2. Most Republicans favor DRM because the Chamber of Commerce favors it.

3. The primary proponents of DRM in the Chamber of Commerce are groups the Republicans hate: the RIAA, MPAA and a few others.

4. Republicans sign on for things like DRM and copyright extension because they think they're "good for business".

5. Point 3 says Republicans could have an interest in weakening some kinds of intellectual property protection. They are prevented from doing this by their ideology (Point 4).

6. All that said, writing a whole piece that will encourage republicans to double down on that ideology [1] is not doing the world a favor.

[1] Doubling down on ideology is what people do when you make fun of their ideas. They just yell louder. This has been the heat source for every flame war that has ever been.
No, GDPR does not apply between 2 persons.
Isn't every company that uses technology extensively in their day-day work a tech company. I hired a contractor to upgrade the kitchen/bathroom. The guy was using Salesforce and other project management software and would keep me appraised of regular project updates and scheduling. For the kitchen design - their guy showed up with a laptop where he designed the kitchen using a 3D-design software. Not only that they got it finished in 5 weeks, granted I paid 5% more, but it was well-worth it.
If even 10% of all McDonald's offered high speed wifi, accessible power outlets, and maybe some nice desks, I feel they would destroy this company.
Someone should do a zero-day privacy bug (feature?) blog. End result is the same, breach of data and trust but some are mistakes and the others are coded on purpose.
This is certainly well done. But, I don't get the point of complex TUIs. Granted - text consoles are useful because they allow programs to get input, output, and job control, and even text selection with very little effort. It can't get simpler than printf() and friends.

With more complex TUIs these points don't really apply. There is a lot of effort involved to get the layout right, so why not make it nice? Text selection isn't possible with windows (I guess? Do text terminals support this stuff?).

Font support is awful (only 1 font size, limited font styles), text is harder to read, and so on.

Terminal interfaces have an ergonomic advantage over traditional GUIs in that they are not painfully context dependent: dealing with keyboard focus is annoying and slows the user down. But, it's just a cultural thing and it's easy to make graphical applications with a TUI-like input model.

The only arguments in favor of TUI that I can see is that they are really fast to load up (compared to ~1 sec that it takes to create an OpenGL window) and that you can easily use them over an SSH connection.

A last argument might be that many window managers suck at switching between windows. What bash or tmux do might be more ergonomic for some people.
Common Lisp + Qt + PostgreSQL so far. I haven't seen your tool yet, but it does look similar to what I've been thinking of.
Spills are a normal and expected occurrence in the course of life. I've spilled coffee on myself before, but I've never needed 8 days in the hospital as a result.

It is also worth noting that the court in this case did not assign full responsibility to McDonald's; your point was certainly considered in this case.
Of course distribution isn't free, but it can be made very efficient. So it follows that people will shop around.
if these titles were more like

Advertisers buy mental-health information

the accent would fall more on the problem
grumpy cat face good
It’s more of an unfortunate misinterpretation IMO. The translation is quite literal, but does not imply the same concept in Chinese as in English.

The 人肉 part originally means human as in “the human calculator” or similar expressions. A “human search engine” (or more colloquially here in Taiwan, a human Google) is someone super good at finding information most can’t, and that expression is then turned into the verb.
This depends, obviously, on the code calling allocatebufs. The implication is that the calling code will most likely assume that a buffer of the right size (i.e. "num" elements) has been allocated, while the real underlying buffer can be of any size depending on the low bits of "num".

For example, suppose the code was parsing user input as follows (a fairly common pattern):

unsigned int count = read_int();
struct buf *bufs = allocatebufs(count);
if(!bufs) goto fail;
for(unsigned int i=0; i<count; i++) {
bufs[i] = read_buf();
if(!bufs[i]) break;
}

This code isn't really safe because it passes an unsigned int to allocatebufs, but by default you won't see a warning for this. In the previous version of the code it would work fine - reject anything above 256. In the new "fixed" code, if count = 0x20000001 (for example) this will allocate 64 bytes and proceed to read up to 34 GB of data into the buffer. (A clever attacker can probably cause read_buf to fail early to avoid running off the end of the heap).
You can of course run WebDAV on Apache. But not every server's webmaster is willing to turn it on.
If all that passes, it can still destroy your liver.

The critical word here is survival - it's better than dying from starvation.

Which is also why a lot of training will tell you to straight up avoid mushrooms. There's very little caloric value, and there are much safer ways to get nutrients.
He's a genius in the same way Ponzi was a genius. I don't find this type of "Genius" particularly commendable.
I don't think that Craigslist declined exactly, but nextdoor and facebook marketplace took a chunk of the local used market.
> Advertising is unquestionably here to stay

No, no I do not think so. I am sure many people thought that way about smoking, yes I can still opt into smoking if I choose to but I am no longer chronically exposed to second hand smoke, and everyone knows it is harmful and pushed by greedy sociopaths taking advantage of our biological quirks.
Cassava is also bitter as hell to start. Most things that reduce that bitterness also reduce the toxicity.

As long as it doesn't become a primary foodstuff such that it will build up in your system, you don't need to get all the hydrogen cyanide.

However, any group that can get all the HCN out, will also be much better off when the famine comes. They will survive; the other groups will not. That's a powerful force.
What if you just consider it cheating if you know the outcome in advance?
more similar to HN than I expected. Thanks, I'll check it out!
I've bumped into some homesteaders and permaculturists who love the word 'medicinal'. They don't seem to get that 'medicinal' means "the disease is worse than the cure", not "make salads out of this and enjoy!".

If it were just edible it would be labeled edible in the literature. If you consume it in a way or quantity that isn't recommended, well, there's a reason you don't see this stuff in the grocery store.
Oh awesome. So does that mean we can finally do away with the gigantic money sink that is HIPAA? Because if we're gonna have our health information leaked, then there's no reason to keep up this charade.
> Why would it matter that the bidders are able to match up the IDs with each other, aren't they all receiving the same profile anyway?

I would guess that yes, they're all receiving – _from Google_ – the "same profile" but they also are collecting additional info that they can then share with each other and, because they can match profiles exactly, they can access each other's info about specific people.

> Wouldn't privacy advocates consider the sending of the profiles at all an issue?

I'd imagine that the profile Google has and shares is by itself fairly anodyne, but I could be (very) wrong about that. The problem seems to be more (if not entirely) that different advertisers can share info using a common profile ID.

I'd imagine that even a single advertiser would be able to perform a similar 'attack' by, e.g. running multiple different campaigns, but I may be misunderstanding exactly what info is being shared. It's possible advertisers are able to match the Google profiles to specific unique identities and thus are sharing much more than just the info they're collecting directly from their ads.
A database of Facebook users’ phone numbers found online
Are they maybe only receiving a partial profile, with info relevant to that ad buy? And by compiling that data with the unique identifier, they can match it with other partial data from other ad buys?
But people are "forced" to work anyway, free stuff or not.
Spark Streaming, Kinesis, and EMR: Overcoming Pain Points
Canada is one example of a country that did not need a revolution to gain its independence.
More to the point, memory-safe languages cannot have these types of vulnerabilities regardless of other aspects of the type system.
Say you have to grab a bunch of files a few times a day and zip them up and drop them on and endpoint somewhere. But the endpoint has a max file size for a single upload.

If you have a table of metadata about your files (zipped_size and location, for example) you can window on the sum of the zipped_size to collect some number of files you can get that will be under the file size limit.
Definitely worthwhile, thanks. I had viewed this presentation before but didn't know about the Speaker notes.
Do you have a source for more of these stories?
Whereas -- and this was implicit in my comment -- playing pissant games like this almost certainly hurts the stock price.

It also screams that you ought to be closely auditing expenses from every member of the cxo team.
The problem is the increase power usage of the additional caches that are necessary - modern CPUs already need a bunch of physically local caches in addition to the large L1/2/3/n caches because of timing of flowing electrons from A to B. At some point the benefit of larger single die becomes minimal. The moment that happens you benefit from making separate chips because of increased yield.
SQL's got you covered here:

UPDATE sometable SET
foo = COALESCE(?, foo),
bar = COALESCE(?, bar),
baz = COALESCE(?, baz),
bam = COALESCE(?, bam),
bat = COALESCE(?, bat)
WHERE id = ?

And then you'd pass in NULLs for any columns not being updated at the moment.

Confirmed that this works exactly as expected in SQLite:

$ sqlite3 optional_column_test.db
sqlite> CREATE TABLE sometable (id INTEGER PRIMARY KEY, foo, bar, baz, bam, bat);
sqlite> INSERT INTO sometable (foo,bar,baz,bam,bat) VALUES ('You', 'are', 'a', 'bold', 'one');
sqlite> SELECT * FROM sometable;
1|You|are|a|bold|one
sqlite> UPDATE sometable SET
...> foo = COALESCE(NULL, foo),
...> bar = COALESCE('ain''t', bar),
...> baz = COALESCE(NULL, baz),
...> bam = COALESCE(NULL, bam),
...> bat = COALESCE(NULL, bat)
...> WHERE id = 1;
sqlite> SELECT * FROM sometable;
1|You|ain't|a|bold|one
Hong Kong leader Carrie Lam to withdraw extradition bill
9 dollar logos. There’s a market for shitty logos for sure but why not go to fiverr and save four bucks.
According to Wikipedia One WTC cost 3,9 billion USD to build. It's 325,279 m2 floor area, or 12 000 USD/m2.

WeWork claims 3,7 million m2 office space and a 47 billion USD "valuation", or 12 700 USD/m2.

So the valuation of WeWork per square metre they rent, is about the same as the cost of One WTC per square metre ...

https://www.sec.gov/Archives/edgar/data/1533523/000119312519...
Johns Hopkins Launches Center for Psychedelic Research
Thank you for those links! I was more concerned with Article 27 but that website also helped mediate my concerns with that. Much appreciated.
Maoists are not local, and liberal democrats are, (supposedly).

I wonder what kind of formal logic is this.
VCs who think they can then flip the whole mess onto the public markets.
How is it a bit of a stretch? If I setup a table outside an elementary school with a colorful sign that says "FREE RAINBOW SPRINKLE BROWNIES" that are unknowningly laced with drugs, and the parents get upset that I did this, I can just say the free brownies were not intended for children?

Youtube knows kids are watching videos. The only thing they don't know is, are the parents present. They could implement a captcha between videos the majority of kids would fail ("What is 25-11?" / "What is the engine of a train called?") but they chose not to do anything like that.
The DMCA had broad bipartisan support, and as far as I'm aware no political leaders are proposing to revoke DRM protections.
> As computer security expert Ben Laurie has stated, Sudoku is "a denial of service attack on human intellect". Several people I know (including my wife) were infected by the virus, and I thought maybe this would demonstrate that they didn't need to spend any more time on Sudoku.

That's hilarious! But what puzzles, or even activities wouldn't be classified by Ben as a DOS on humans?
Very helpful website. Thank you for sharing!
> I see so many delusional software "engineers" who care more about building technically excellent systems that are either delivered late or dont solve a/the real problem

That's a management failure not software engineers doing the wrong thing. Software engineers should care more about building technically excellent systems just like safety auditors should care most about safety. It's management's job to prioritize the wants of the business and the wants of the engineers and decide when they align and when they don't.
An oldie but a goodie.

The other day we were at a restaurant and they gave my four year old a kids menu. One of the activities was a modified sudoku that went up to 6. My first thought was that I'd never realized you could do sudokus with other values of N.

But the really cool part was that once I taught her the rules (the constraints) she was actually able to figure it out without much help at all!

Turns out sudoku is a good way to teach kids logic, even at four years old.