skysight-inc/HackerNews huggingface dataset:
The entire article is a guy doing a serial port hello world on a slightly more "advanced" arduino. This, like a good chunk of security research, is designed to generate press first and foremost, but isn't really an educational or useful piece unless you didn't know what a serial port was or that soldering was possible.

I mean, this quote is a pretty stellar example:

"Elkins says with a bit more reverse engineering, it would also be possible to reprogram the firmware of the firewall to make it into a more full-featured foothold for spying on the victim's network, though he didn't go that far in his proof of concept."

With a bit more effort, the researcher could make the chip wireless, very difficult to find, could enable it to reflash the bootloader, and could also include an embedded microphone!

But they didn't. (because that would actually be hard)
> There's no bins on the street because

Many were removed as a security measure after the 1995 sarin gas attack on the Tokyo subway.
For years and years and years, there was a scrappy little newspaper in San Francisco that warned (very much obnoxiously at times) about PG&E’s continuing private control of energy and power in the Bay Area and Northern California.

That newspaper no longer exists. During my three years as a reporter there, I carefully avoided ever having to write PG&E stories, which were a near-fetish for the publisher, Bruce Brugmann.

But maybe he was right about giving public ownership a real shot in the Bay Area, even if he was annoying as shit about it at times. (It should also be noted that he was from a heartland state where public power is common.)
Because PG&E funds campaigns so politicians who get elected will craft legislation that makes it impossible to start a competitor to PG&E.

Since PG&E has no competitors, and new competitors cannot form, PG&E has no reason to invest further in its infrastructure.
I have been experimenting with the preference-learning code for writing poetry, and it does seem to work: I've already noticed improvements in the generated poetry in increasing the amounts of rhymes, avoiding undesirable text genres like Greek/Latin/Spanish/English-prose, and decreasing the amount of repetition. (One of the most irritating and longstanding failure modes in neural text generation is that it often degenerates into repeating the same phrase many times, so it's pleasing to see that penalizing this in ratings does seem to then cause the generator to learn to avoid it.) Unfortunately, model-free RL training using PPO is extremely slow. Fortunately, I can't see any reason that it has to be PPO or model-free RL at all, since the reward model ought to be fully differentiable and allow calculation of true gradients / model-based RL, so OOM speedups ought to be possible quite easily.
I'm curious about why you're using lxd. Is it just that you wanted to try something different from Docker and its rivals? Or is there a reason you think lxd is better for your setup? For a service per container, I figured minimal, immutable containers, rather than containers running full distros, would be better.
I think this is rather "the internet via a browser and the internet via individual applications"
Speaking of 1 week: That's how long it took to repair this big sinkhole in front of Hakata main railway station in 2016, underground utilities and all. https://www.theguardian.com/world/2016/nov/15/japan-fixes-va...
New Microeconomics: How Evolution Explains Resource Distribution
Intel hardware has SGX, the concept of a secure enclave for sensitive data ... which is also vulnerable to the same class of speculative execution exploits on hardware generations prior to Cascade Lake

Specifically it was a trio of vulnerabilities colloquially known as 'Foreshadow / L1TF': CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646,

https://en.wikipedia.org/wiki/Foreshadow_(security_vulnerabi...
Tapdesk CRM – an AI-powered sales management tool
A genuine question. How come command line options are passed like so:

python my_app.py db.driver=mysql db.user=omry

No intention to criticize. Just wondering if there is any reason you did not choose the more standard way:

python my_app.py --db-driver=mysql

Wouldn't it be nice if all CLI applications could agree on a way to pass parameters? :S
Interestingly, I saw people using rakes to clean up as opposed to noisy blowers. We've got tons of people 'cleaning' in the US but show me a decent sized city than can compare with the cleanliness in Tokyo.
YouTube's Compression 1000x [video]
It's not like Spotify has some insurmountable specs to run or is only available on iOS. I have it running in Manjaro, and its catalog is far more extensive than what I could have found on SoulSeek or DC++ back in the day.
Scientists simplify lithium-sulfur battery production for future energy storage
good luck trying to land a job using ml with only ‘superficial understanding’
For a better reading experience and for those using Cloudflare's DNS: https://outline.com/yU64Cu
Given the paper already appears to have a correction for something minor, one more would seem appropriate, yes - it’s a pretty jarring error.

But it’s just disingenuous to say it affects (let alone “invalidates”) the actual study.
And shouldn’t a proper pedant spot that the top pin isn’t even where Lübeck is - that’s Rostock.
Spectacle.app is no longer maintained
I think they meant casting a wide net in search of the small percentage of machines where the mitigation’s are turned off. An 0.01% success rate is okay if you hit ten million systems.
I don't know if "exotic" is the right word, but they are scarce; there aren't many good marrow bones compared to the amount of meat on a cow. I have good relationships with a couple Chicago butchers (I was an investor) and I'd have to ask far ahead for the marrow bones. Since there's so little of it to sell, they're more likely to make a product that stretches them, like marrow butter or bone marrow burgers, than to simply sell the bones.
While I no longer post as frequently as I did in the past, I like to think of my karma score as X other people thought that a story I shared or, to a much lesser degree, a comment that I wrote had a tiny unit of value or interest to them.

I lurked for many, many months before I started contributing, and I encourage all of you out there to share what you like and what you know.

I’d also be lying if I said secretly knowing my karma score was high when the topic of HN came up didn’t cause me to smile mentally. Even if if the topic revolved around how “HN is toxic, brogrammers” etc because I felt that these people can’t see beyond their own biases to see the real community that dang and scbt actively take no small part in taking care of.

Being a tiny part of the HN community is something I am thankful and grateful for. I wrote about it earlier this year: https://news.ycombinator.com/item?id=18509717
> Why didn’t they prioritize fixing equipment in a dry forest adjacent to a populated area?

They spend billions of dollars on maintenance each year, so obviously they prioritized fixing whatever all the equipment that they did actually fix that year.

PG&E knows about tens of billions of dollars of infrastructure which is past its useful life. Towers built in 1910s and 1920s which are so old it’s hard to even get up on them to patch them. Towers they don’t even know what year they were even built.

Rates are set in a political environment and those rates pay for supply, maintenance, clean energy enhancements, and dividends.

Why weren’t rates set higher? What percent of rate revenue was spent on shifts to renewables? Why not go after that spending as well as dividends? Dividends were 1/15th of the revenue, to put it in perspective.

As to your bridge analogy;

> The U.S. has been underfunding its highway system for years, resulting in a $836 billion backlog of highway and bridge capital needs. The bulk of the backlog ($420 billion) is in repairing existing highways, while $123 billion is needed for bridge repair, $167 billion for system expansion, and $126 for system enhancement (which includes safety enhancements, operational improvements, and environmental projects).

https://www.infrastructurereportcard.org/roads/funding-futur...
Reminds me of Sarah Taber's thread about how people whose ancestors were in the Salem witch trials are interested in it in direct proportion to which side they were on.

https://twitter.com/SarahTaber_bww/status/118304392158632755...
One Quarter of the way through this playlist now. It's very good!

I'm having to learn this framework for a course assignment, and I feel a lot better about it now than I did after going through the OP.

Thanks for sharing!
Aneuploidy
I love python. I just really wish there was a typed equivalent of python like Typescript. The python3 types are very weak compared to TS.
Get Shit Done: How to Become More Productive and Less Lazy
Perhaps one day we can store stuff directly into a transactional database. I'd actually love to see an OS based on this principle.
Ask HN: How to create a framework than an end product
"Stop thinking about creating the perfect end product and create a framework under which the right systems can emerge and continue to grow as we learn more."

Not sure where I read this but found it while reading about software architecture. It kinda stuck with me. Any other resources which helps gain more understanding on this approach and implementing it. Any products out there which does this better.
>But the OP clearly didn't ask about doing it as a challenge or to understand how it works (which is what cryptopals is about), but actual usage.

But the parent of the comment I was replying to clearly had the former in mind, as a subsequent comment showed.[0]

[0] https://news.ycombinator.com/item?id=21240429
I built a setup called TinyDataCenter on a RasPi and run it hybrid with AWS and S3FS for unlimited media storage. On it I built iSpooge Live to host and syndicate my livestreams to YouTube and Twitch, and built some ffmpeg scripts to turn videos into HLS and playback with adaptive rate via VidroJS. Also on it is my portfolio site and in progress are imported copies of all my social media archives like Twitter and IG. Auth happens via JWTs from Auth0 but I’ve an email magic link system to bolt in soon. There’s an xmpp server that isn’t integrated yet. Email is hosted 3rd party but I may try email in a box. The theme is decentralized with syndication. This has been going on and live streamed to regularly for about 2 years. All mybdcripts are open source, same username on GitHub.
Human intelligence: have we reached the limit of knowledge?
Controversial, I realize, but perhaps we should talk seriously about nationalizing the grid. Hold a competition between the best engineering schools. Design a grid that can distribute zero carbon energy, and intelligently cut power in emergency situations.
I believe it. I work in an environment that many people would consider stress inducing; I engage in amateur combat sports; however, when my six month old loses it, I absolutely get an immediate pulse raising stress reaction.
It says clearly it was a Python script
I have also not seen "spoke-shave" in modern English texts. I'm not sure how that relates to the crowds I run with. I'm an amateur wood-worker but I prefer building to finishing so I don't do much planing. Likely my neighbor and a close friend knows what that tool is, but it never came up in conversation.

So that is to say that your comment is informative, but it could do without the "wrong crowd" comment. But I'll give you the benefit of the doubt that you meant it in jest!
I mean, for a lot people, I imagine there isn't a difference. I'm going to remain an organ donor. It is said that Diogenes, when asked how he wished to be buried, left instructions to be thrown outside the city wall so wild animals could feast on his body. When asked if he minded this, he said, "Not at all, as long as you provide me with a stick to chase the creatures away!" When asked how he could use the stick since he would lack awareness, he replied "If I lack awareness, then why should I care what happens to me when I am dead?" At the end, Diogenes made fun of people's excessive concern with the "proper" treatment of the dead.
Can’t Hurt Me by David Goggins

Here's a summary if you don't want to read the whole thing: https://durmonski.com/book-summaries/cant-hurt-me/
Every meeting room in our office building has a little meter in it which rotates through displaying three different measurements: temperature, relative humidity and CO2 ppm. Most of my colleagues are surprised when I point this out to them.

The floors of our office that I sit in has two sizes of meeting rooms: one for eight/nine people and one for three people. Free meeting rooms are scarce during regular hours, so sometimes we cram in to three-person room.

It's fun watching the CO2 measurement climb from 800 to 1400. Supposedly 400 ppm is outdoors, 800 ppm is indoors and anything higher is a little unusual. I have fun pointing out the reason why we are all feeling sleepy and docile towards the end of a meeting is because of the CO2!

See also: https://www.nytimes.com/2019/05/06/health/conference-room-ai...
It's intentional: https://news.ycombinator.com/item?id=21227974
Author here. I'm going through the process of getting back into writing, so posting some of my own material sometimes to try to get an audience -- which I know is a bit awkward, but oh well. Hopefully it can be interesting for HN.

Please let me know if you have any questions or comments!
Looks like though this is the future. It's Capitalism where you love a product, say freedom of speech or democracy, but the company that supplies it gets bought out. And now you can't get that product anymore because it's not a part of the new company's corporate strategy. It's the same thing really. All these companies get bought out by the Chinese. Same thing goes for natural resources and the environment. They are just being bought out. Get things you need while supplies last.

It would be interesting to see Trump pass a law prohibiting any US company from doing this... from stiffing freedom of speech to support China.
Multiplexing Changes Your HTTP APIs
Why does it seem like there are popularly presented the following two options:

1. A single government-mandated monopoly provider everywhere with no competition.

2. Government provider.
Very good way of phrasing it. I surmise this is also a big part of the reason why there isn't as much of a mass panic as the spectre of nuclear apocalypse has caused.

A nuclear war is a much more concentrated and immediate event. It could start at the press of a button and be over in days/weeks (in terms of immediate damage). There is something visceral and terrifying about it's rapidity.

A climate catastrophe is fundamentally slower, and even if the damage would be far greater, it feels less of a threat (very subjectively). It's easier to handwave it away. "People will think of something" is easier to say when a process happens over decades than when it happens in days.

One can conveniently live in the phantasy that "I'll be climate conscious from tomorrow/next week/next year" for the time being, because the effects are still not terrible (for the 1st world).
Sadly, we'll never have this in the US. (Many) people don't think of it as their bus, their street, their town, their country. (Many) people don't follow the rules and aren't aware or don't care about how their actions affect others.

To be clear, this isn't just a US problem, pretty much all countries that I've visited (just a sampling to be sure) are like this including other Asian countries. Japan really stands out as being different in this respect. I hope it can stay that way.
Confirmation that fire in south of California is electrical related. Electricity was not turned off in south. https://www.latimes.com/california/story/2019-10-13/saddleri...
Cities Tackle the Affordable Housing Crisis
Right, that's what I meant by code review in the first paragraph: internal review within the research group.

Agreed also that they should use version control and other standard practices, etc.
Not quite. One is Internet on your desk and the other is Internet in your pocket. It makes certain things possible that would previously make little sense. You would not tweet a video from a protest rally; you would not message or listen to podcasts or read something or do trading while commuting; online banking wouldn't be that safe and secure; you wouldn't have an interactive map in your palm while in a new city; and a thousand more things that today exist only on mobile - thanks to the compact touch interfaces and the Internet of course.
How cities don't tackle the crisis, or ignore it, would be a more accurate title.
Safari sends some user IP addresses to Chinese conglomerate Tencent by default
bat (just a better cat)

nl

pigz

parallel

bc

paste

ministat

httpie

nc

GUI: stellarium, conky

There are definitely more. These are what I could remember now.
I did something similar a few years back with that 22gb displacement map, although much more accurately and easily: it's a piece of cake to directly ray trace a displaced sphere: you basically intersect two spheres (the outer and inner radius), which gives you a ray interval that you can "march" through. At each step while marching, you look at the surface height at the current point, compare it to your point's radius, and if it's greater then you've intersected the surface since the last step (and can perform bisection method to refine the intersection distance to machine precision).
CVSS is worthless; the only way to misuse it is to use it at all.
The pachinko parlors are particularly quiet and serene.
When IE had a huge market share I would use and build with chrome then test and correct in IE. It’s possible to support clients while not personally supporting this.
Most of the comments on here talking about repeatability, but I'm concerned about correctness too. It's $40 to have 48-hour access to the paper, and I'm not going to do that right now, but hear me out. The order in which the operating system listed the files made a difference. So just having it be the same everywhere doesn't necessarily fix the problem. What if it's the same everywhere, but still isn't the correct order for what the researcher intended? Everyone gets the same error, and that error isn't necessarily 0.
Sorry, I'm experimenting with ways to contact. In the past I had a contact form, but I suspect people typed their own e-mail incorrectly in the form. I want to avoid using external sites such as Facebook or Twitter. I also use Disqus for comments on some pages. Do you have other ideas?
Yeah, low level and rare isn't the same as "bizarrely ripped from the design of another language"
Very cool, a similar site I use is: https://onetsp.com.
If you take a broader lens, having a private vehicle is an expensive hobby for the rich.

And most people actually do outsource their jobs. They are employees rather than working for themselves…
thanks for those links. I didn't know that so many other people thought the big tech companies' hiring processes were broken, too.
There is a general lack of understanding. OWASP is a shambolic volunteer project and its outputs are uneven at best. I would be particularly wary of OWASP when it comes to specialist topics, and cryptography is a great example of that.
I am unaware of any mainstream American news outlet that skews far enough left to be considered to have an Anarchist, Syndicalist, or Communist bias. Maybe Jacobin magazine, if you count it as "mainstream."
Vietnam-Gold.com Earn 18% Hourly for 6 Hours Minimum $1 – Booster Your Crypto
How to create JSON feed reader app with Kotlin Native
And most Conbinis have trashbins outside
> An honest question: can FP solve this in a cleaner fashion, with less accidental complexity?

I think the answer is yes, here's my earlier comment which I think is relevant: https://news.ycombinator.com/item?id=18661931
Publicly shared companies have a legal obligation to make money for their shareholders.

If a stakeholder in a major market can influence whether or not these companies can make their revenue forecast (and therefore making institutional investors' pensions solvent and individuals' mortgage payments payable) then yes, they can force such companies to capitulate to them.

The third forcing function to reckon with -- the moral duty to uphold Western countries' increasingly nebulous, compromised values -- has barely any leverage in this equation.

What is a responsible, law-abiding executive supposed to do?...
Wouldn't the solution be to allow the family to get payments when the donated body was used for cosmetic surgery? Couldn't laws state that the donated bodies must go first to those in need, second to medical schools and science, and lastly to cosmetic procedures?

Besides, a small portion of those procedures are for valid purposes. Accidents, birth defects, and so forth.
MVS is pretty much that.
I’ve never used it, but could you elaborate on why it’s worthless? And what alternatives do you use?
One of my greatest culture shocks in terms of technology was around 6 years ago when I received an iPad, having no experience with Apple products. After the initial setup, the first thing I wanted was to transfer some files - TV episodes and PDFs - to the device. My first attempt was to SSH into it, only to discover that's not an option, and would require a third-party app store and jailbreak. Then I just connected the iPad to my PC by cable, expecting to see a mass storage device. No luck. Likewise, no luck finding a file explorer on the iPad.

The iPad is strongly tied to the workflow that Apple suggests, and that's a workflow that removes files as a concept, abstracting them away. It's quite possibly a genius approach in terms of how accessible it is to non-tech people, even though it doesn't sit right with me.
American (US) in Tokyo for the first time here. About an hour ago (10:30 pm here) I saw two men with a bucket and washcloth scrubbing the floor right next to Shibuya Crossing ("the busiest crosswalk on the world"). Moments before that a man was sweeping a walkway between passer-bys). The clothing store withers swept each changing room in between guests. Though a block away was the smoking area, littered with thousands of cigarette butts (not sure what conclusion to draw about smokers).

I was in Osaka earlier in the week, and Kyoto after that. And these cities were also quite clean and orderly, with Osaka being the most orderly (and much more relaxed and slow paced, which makes order easier).

One of my favorite parts of Japan's cleanliness is their cars. They are all sparkling. Even the delivery trucks are shiny and splatter free! The gas/petrol station near me had at least two attendeds at each car, one to pump, and the other to clean the car's windows and paint!

Another fascinating thing is how escalators have two lanes, one for walking and one for standing. Why doesn't everyone so this?! It's so perfect!

Others in this thread don't speak too highly of Osaka, but it was definitely the most orderly and trash free of the three cities I've visited. Of course, these cities are quite huge, compared to cities in the US, so perhaps these conversations should be more fine grained, generalizing by prefecture rather than city.

I've found that I've been lining my things up neatly, and organizing my clothes and toiletries here in my in my hotel. It's been inspiring to see all the order here.
i see every country has its own florida
Wager Distribution, Risk Attitude, and Anomalous Diffusion
X-ray inspection is usually only looking for solder bridges and voids. You aren't really looking at dies unless you have a really good x-ray and actually are concerned about the integrity of the chip. Counterfeit parts end up in designs all the time. They could be knockoff versions that still work or just random parts relabeled. Even these are really only x-rayed as a last resort.
New Essential Phone 2 Smartphone, Gem Colorshift Material from Android's Founder