skysight-inc/HackerNews huggingface dataset:
Nay, nay, nay.

I don't like text that looks differently for everyone depending on the platform they're on.

Emojis have shown us already that vendors are willing to change their appearance depending on current trends or political climate. Gun becomes water gun, salad becomes vegan salad. One day, if caterpillar becomes a butterfly because of some mundane idea, is it still going to be instantly recognizable as a bug?

We write code in formal languages rather than natural ones to stay away from ambiguity. Emojis are a straight downgrade.
Thanks for your comment. Yeah, my manager "caught" me tinkering with an AWS thing and some tutorial open, but probably assumed it was important. It's even weirder because my old manager person went away on parental leave, so my new person doesn't really know what I'm supposed to be doing, but I have some freedom and I'm going to try to use it productively.
As a non-american, what makes me curious is why do black students borrow twice as much money as other groups. Do they choose more expensive degrees?
I don't understand the language in the video, but you mean like this one? https://www.youtube.com/watch?v=v2sZoMgtEXY

EDIT: so I guess it's only obsolete in some parts of the world.
How to use ZKP to prove set membership without exposing the set or the member
Are you open sourcing this?
Intel SGX is an enclave, or a hardware supported mechanism to store keys/do protected operations (most often implemented as essentially a co-processor). For example, if you want to run some AES operation, you would send it off into the enclave.

More on faults-- A "fault attack" (I like to call them active attacks) is an attack where someone actively tampers with a device to "force" it into an "unreachable" state. An example of an "unreachable" state might be, for a single cycle, cutting off the voltage to a flip-flop to prevent a bit from being written. Contrived example, but enough to get the idea of "fault" in your head hopefully.

Intel SGX is heavily advertised as being fault-resistant (although in recent years, time and time again it has shown to not be the case!). This is especially crucial because some crypto algorithms (e.g. RSA-CRT and AES in general) heavily rely on zero/minimal faults due to the nature of how these algorithms are constructed. RSA-CRT, for example, only needs a single fault in its algorithm for the private key to be compromised.

CPU design today will also typically employ frequency or voltage scaling based on workload as a power saving metric-- say, if the CPU is idle. They will also make this ability software-visible, as it's quite handy for general uses as a whole.

The researchers here exploit this ability to "cut the voltage" from software in the CPU to directly affect SGX as well, resulting in faults in the underlying operations.

While fault attacks (especially timing ones) on SGX are nothing new, the shocker frankly is how they did the fault attack. Typically, in my experience, whenever someone says "power fault attack" you might envision someone with physical access to the chip "glitching" the clock or VCC to bypass some verification step, maybe in a lab or using a ChipWhisperer. This is obviously not the case here-- this is the first case of software power glitching I've seen (note that software clock glitching was done a few years back, but not on Intel machines I believe).

I feel the need to point out that this isn't a fault (pun intended) of Intel's design-- OK maybe it is a little bit since this does fall under the SGX-type threat model, but I feel like this would more be an industry wide issue for any system with an actual hardware enclave (looking at you Apple), so Intel is unlikely alone in the blame, in the same way that speculative execution was (and still is, in my opinion!).
I'm Swedish and we almost never dub entertainment, unless it's for kids. It just drives me insane when I go abroad and listen to the dialogue being completely butchered on TV. Imagine being the director of the movie and seeing this, remembering all the hours you put into directing the actors to give your vision life, and now your work is being mangled.

And then politicians in these countries wonder why they're so bad at English...
You can get a new account for that price.

There are businesses going bust all time, willing to sell their ad account.

Also, he talks about spending millions, not making millions.

On campaigns there is an ROI, he could be making 100K on 1mil spend, how can he afford to pay you half of it?

In this case, you won't close a deal. He closed the deal, made money, lived fast and enjoyed.
When Google pays Apple $10B a year to be the default search engine on iOS it's "business".

But when a no-name Chinese company redirects searches to Bing suddenly its "fraud" and "search hijacking" and a "national security threat".

All this really shows is the ridiculous amount of revenue search has that such a simple scheme is making 100M+
Show HN: The First Quantum Algorithm
Daily Horoscopes for Wednesday, Dec 11th, 2019 – Alwayswomen.com
You'd be forking 2 year old code, he hasn't updated the repo in the last 2 years, knowing that the next OS release would leave commercial users at his mercy. Apple also doesn't just hand out kernel extension signing certificates to everyone that signs up for a developer account, you'd have to be someone with some reputation.

It was a well-executed fake punt, he'll get people to pay; Catalina is out now and if you want to pick it up from the fork it would take a long time to get it right. That said, I would imagine organizations like Google will make the effort after paying the toll this time because the price will only go up.
Sure. Kind of hard to know why you aren't being invited to an interview though.
Nobody tows lines at all.
I appreciate the idea. You've definitely got something going there. Did you really deal with it for two years? It's hard to imagine anyone with senior in their title stuck with empty hands. I imagine my situation is linked with me only being exposed to about ~1% of this whole EHR transition project I'm a part of.
It may be useful, but only if you implement it consistently in the workflow. However, what will happen when someone new in the team comes along? I personally prefer to prefix my commit message with the issue number if useful.

In the example given on their website (the PR example), it makes no sense to me. It does not improve the quality of the titles. Did they remove animation, did they add it? Replacing the emoji with 'add' or 'remove', the title describes what happened inside that Pull Request.

Something does not have to be beautiful to be useful and readable.
Bill has been referred to joint select committee of both houses of the Parliament.

Unlikely to pass in this session but could be taken up in the budget session in February-March.
A list of the best Termux hacking tools
Yes? They're completely different scenarios. One is setting the default search engine, the other is actively subverting the user's intention.
Its 99% Typescript and we don't use any premade js frameworks, everything was written from scratch (except for some font loader and zip), ui, rendering, webgl filters etc etc.

All the knowledge of how Photo Editing works came out of building the original products back in the day, there is more information about the field today to be found written online but much is still secrets kept at a few companies.

The browsers is really a shitty environment to be writing this kind of apps in, performances is a struggle in every step :)
One does get to make that complaint.

Disagreeing with someone is no excuse for saying their freedom to exercise the rights of an open source license should be restricted, nor for declaring they have no right to speak their mind openly. Open source grants them this freedom, unpalatable as it may be to you.

There is no legal reason preventing their complaint from being made. It may not be well-received by those who demand unlimited reuse without compensation. Regardless, that does not restrict one’s right to make that complaint and take that action.
Good for him.

I hope we see more of this in the future: developers realising that the work they do has value and that they’re not required to spend their lives giving it away for free. So they take control of their work product and start capturing some of that value for themselves.

It’s a shame that the article is written in this tone, as it mirrors the dominant sentiment among open source folks. There is still a lot of entitlement to be seen, even here in the comments from people who are likely to end up in the same boat as the software author referenced in the article.

I think it’ll take a while to get there.
Mount both filesystems at the same place as an overlay - if a file exists in both, I don't care which I see.
Facebook is not a public utility.
Problem is that the 2017 version, the last version that's open source, won't run on Catalina (or Mojave or High Sierra for that matter). The amount of fixes and compatibility patches that the author did is quite extensive. Replicating his work would be quite an undertaking and wouldn't be trivial.
There's a quasi exception though:
French dub of Japanese anime.

For some reason, the French language's intonations work really well to accurately portray and convey the original tones in Japanese anime. e.g. Lupin III (the anime) works really well in French dub.

English dubs usually fail to do the same. It's as though English just doesn't work for the genre.
http://avherald.com/h?article=4b8fda93&opt=0
Uh no. There’s nothing that says Apple only allows 1 kext developer. The article only says that getting the dev cert is such a significant pain in the ass that only one has ever gone through the effort. Anyone motivated enough to fork MacFuse can apply.

On a tangent: wouldn’t it be nice if all packages were signed? It would do the community a great service if an organization like Brew negotiated an agreement and implementation with Apple (and something that no one could unilaterally retract).
ITT, some Atrix7 is available for sub 200$.
This is a topic with very scant literature. I'm curious if there's an account of global sand reserves. Unlike oil/shale, other mineral resources, it seems like available construction sand is basically all discovered by virtue of being on the surface. I'm wondering if there are predictions for peak sand, what current sand reserves translates to in total tons of future concrete production etc. Otherwise it seems like the kind of resource that need to managed properly, seeing how land reclamation projects will be increasingly necessary with raising water levels. Engineered timbre can replace some building needs, but I can't think of an alternative to concrete for other critical infrastructure like roads.
It's possible to make the first point without leaping directly to the second.
VLC is on Apple’s “must not break list” and gets special checkfixes in the OS, FWIW.
Ask HN: Rust or Go – Fight
To be honest, I'm pro Go. That being said... fight!
It is a moral dilemma exactly because your statement is not true.

For any individual person it is easy to see and say they individually have little or no influence on future ransomware. From any individual person it seems the question is only whether the asked amount is less than the worth of encrypted files.
It's been better part of a year for two people team (me and my brother) to build this product. We released one product first we called x with a subset of features to get code out the door.
How to Earn Passive Income by Working Smarter
Haven't heard this either, but I assume it refers to "generation Z"
Having an agenda simply means wanting something. If you do not want anything, then you do not have an agenda. If you do, you have one. By your own admission, you want something, and if you did not, you would not be discussing in this thread.

Being biased is pretty much a part of the human condition since we are limited, finite beings. Do you have all the information? Are you certain you have all the information? Have you taken into account everyone's wishes, desires, needs, analyzed every possible scenario in existence according to some yet-unspecified objective reasoning system? Then you are biased. You are missing something, you are concluding something erroneously. (using the generic you as a stand-in for anyone)

Your agenda is to incorporate a pixel-level API into the web. And that's okay. Mine is to prevent the web into devolving into an opaque black box. That's okay too.

As to the topic at hand, I won't try dissecting comments word for word, because I think this is a loss of time and devolves into a lot of who-said-what, when we can sidestep it by concentrating on the most charitable explanation.

Reading through the thread again, I think the other poster's point was that there are many situations (not all) where designing things in the simplest and most direct way, using HTML as the semantic underpinning, leads to both less engineering effort and to a more accessible design.

Specifically, I do not think he was arguing doubling or tripling a movie budget in order to make another similar movie for blind people. But then again, we weren't talking about movies. We were talking about web sites, in which the loss of HTML would lead to a net loss compared to what we have now.
git gui is not the same thing as git add -p.

I'm sure magit is nice. It's just that everything you list as nice things about magit are in vanilla git as well. Maybe you prefer the presentation in magit, that's fine. The point is to be fully aware of the available options - which the author of the article doesn't seem to be, as they only compare against git add -p, not against git gui.

The one thing that's truly missing in vanilla git as far as I know is the ability to edit the index directly, without editing the checked out files. (Does magit allow that? It's not an advertised feature in the article as far as I can see...)
I can't stand them myself; they're rarely that uncrowded and many streets with cars/cycle traffic here also don't have setbacks while, at the same time, allowing private property to build high walls.

This results in a large number of blind turns where you can't tell if anyone's coming around the corner unless there are mirrors available, which aren't always a guarantee.
GCC static analysis branch now available on Compiler Explorer
Most cities have at least one cinema that shows current movies in English, perhaps only on some days of the week, though. Many also have cinemas that show independent or art films and those often show films in the original language as well.
Absolutely not. Seriously if it comes to that, just add gifs and youtube videos while you're at it.
They should probably map to DATETIME internally but it inefficient for storage.
Cisco TacOps comes to mind... is this what you’re thinking?

https://www.cisco.com/c/en/us/about/csr/stories/tactical-ope...
The original author left the company long ago, so I guess they never felt the need to continue updating it.
I believe the sand theft taking place is done as the sand is good for construction. Namely jagged enough for aggregate (hence why the can’t use smooth sand from the desert). The shape of the sand is primarily caused by the motion of the water.
It can still be useful for that kind of thing. When I notice an unexpected spike of traffic on one of our sites I'll often look at our analytics to see where it came from and then potentially drop in there to answer comments and such. Not to say that's worth the privacy trade-off though, unfortunately.
It's a way of segregating people by age, then acting derisively about various groups in response to that. You identify bad character traits, call them out with the relevant "generation" phrase, and then sneakily imply that they have that character trait because they're within that age range (even when they're not).
AoA vanes are usually very reliable and rarely fail in other types
The fact that some people leave many descendants while others do not does not necessarily imply the existence of strong selective pressure, particularly selective pressure for genetically heritable traits. For example, it could be mostly random, resulting in genetic drift that has essentially nothing to do with external environmental factors. By most definitions genetic drift is not natural selection, because it doesn't select for any particular attributes in the species, outside of preserving basic functional requirements (e.g. members of the species must be able to reproduce at a reasonable rate).

"Desire to have children" is a good example of something that does not obviously select for any particular genes. Many people who don't have children (or have only one) simply don't feel they can afford it, or (e.g. in China until recently) live somewhere where having extra children is a liability; while money is indeed heritable, selection against the poor or legally disadvantaged is not natural selection. Similarly, selecting for people who believe in a particular religion that encourages reproduction, etc. These things are not correlated with genetic markers to begin with so this "selective" process will just lead to more drift, or (if the population shrinks sufficiently) result in bottleneck events that lead to even more genetic homogeneity without selecting for any useful traits.

I'm not saying sexual selection isn't a thing, incidentally--but I am saying that there's very little evidence that sexual selection is the primary driver of whether humans reproduce.

This is qualitatively different from "real" natural selection, which requires a combination of any or all of: significant external stressors, significant untapped resources, a lot of generations, and a high population or mutation rate. We can see that humans are not under especially significant selective pressure when we consider that despite huge death tolls and a very strong negative effect on ability to reproduce, it will take a very long time (IIRC, on the order of 1000 years) before a large majority of people in any area of the world are naturally resistant to HIV.
> Let's all wait for BSD license apologists to insist true freedom is the freedom to blackmail your users.

You assume that the author would have continued working on it if the code was GPLed. If you look at the list of contributors, you'll notice there's only 4 people (besides him) who have contributed any code [1]. That means that had he not continued working on it, the project would have died long ago. GPL doesn't somehow make code write itself. Unless there are incentives for programmers, all projects can perish regardless of what license they use.

In this case, you could also argue that the sole reason why OSXFuse still exists and is being updated is because it's BSD and the author continued releasing it because it was a binary-only release.

[1] https://github.com/osxfuse/osxfuse/graphs/contributors
A. Wow B. I don't want to put the creator in any way down, but always feel a little bit cheated by FPGA use.
FOSS developers leeching Qt developers will be the death of Qt.

It is hard to sustain a business out of donations and patreons, not everyone enjoys counting pennies every month.

Also Qt is doing pretty well, thanks to enterprises, which still seem to value paying for developer tooling.
Looking at
https://gitmoji.carloscuesta.me/

As the article says, I can see that the emojis align with the intended meaning,
but I'm pretty sure I'd not be able to guess the intended meaning from the emoji of many of these.

I'd think prefixing a commit message with [linux] or [hotfix] or [refector] provides the same at-a-glance benefit with less cognitive load when reading the commits.
Yes but good idea as you only have to do it once...
If the DB is split in logical and physical schemas and ownership and access is ring-fenced accordingly with each of the 18 applications getting their own access login, there shouldn't be issues.
You can disable Bluetooth by default and enable it only when used.
The user’s intention is to proxy the search results so it is anonymized. Based on their chrome extension description it seems to do that. It works not unlike duckduckgo.

Spinning it as some Anti-Chinese national security thing is probably unnecessary.
> That doesn't sound right. Average incomes in urban areas are higher. The economies are stronger.

Average incomes in urban areas are higher because it requires a higher income to afford to live there. What do you expect to happen if you increase the housing supply, allowing lower income people to be able to afford to move in?

> Then there's the economies of scale in providing infrastructure.

The biggest cost centers don't really have these -- it's why they're the biggest cost centers. If you want to add ten new classrooms full of students then you need ten new teachers. If you want to add twenty new classrooms then you need twenty new teachers. You don't need twenty new superintendents, but the cost of the superintendent was already a rounding error to begin with.
> ... do not make it explicitly clear that the final solution sends a hash-prefixed password

I'm not sure if you're actually talking about something else, but the paper says: "Post-canonicalization, the server calculates a computationally expensive hash of both the canonical username and credential password... This 2-byte prefix—while leaking some bits of password material—provides the client with k-anonymity over the universe of all username and password pairs."

IOW, the 3-byte hash prefix sent is of the username and password concatenated. (Note that Google seems to have added another byte to the prefix versus the paper).
It does, to an extent. Stafford and Perkins loans are direct from the government.

This article says 90% of student loans are from the gov't, so it appears it currently does exactly what you're suggesting. https://www.nationalreview.com/2017/02/student-loans-governm...
> Currently, there is no wide adoption of SGX in the production environments, mainly due to the attacks like this.

How long have these attacks been around? I only started hearing about them maybe like... in the past week or so? Nothing remotely close to explaining why these aren't used in production.
> It’s a shame that the article is written in this tone

The article seemed pretty neutral excluding the slightly shady stuff like not mentioning the license change properly, timely or even in expected locations

> the dominant sentiment among open source folks

The dominant sentiment of open source folks is that they want open source instead of proprietary software? That seems expected, it’s after all the whole point.

edit: positive -> neutral; shady -> slightly shady
Los Angeles wants to build a hydrogen-fueled power plant
‘Soulmates do not exist’: the surprising rise of wedding therapy
What I Didn’t Understand About VCs When I Still Was a Founder
So 7 million users equals a revenue of $250 million. Meaning 1 user is worth $35 on an annual basis. That’s insane! No wonder Google is so huge.
MacPorts does not distribute binary-only versions.
Government with what? Hahaha!
Is an automatic backup tool like CodeGuard worth spending money?
Nay! Emoji is slang that excludes a huge number of people, not just due to preference but also because the meaning keeps changing and can be confusing if not exhausting to keep up with. It skews young and/or Western and there's far more kinds of programmers than that.
Is your blocker an app? Is it possible that the OS can override hardware access reserved by apps?
You don't need that fancy tools. An RGB camera with simple linear filters will give you an rPPG signal if you are stationary. And then you can trigger a sound from each detected top.

You can also buy cheap ppg readers that are very easy to use.

However: one defect by using PPG is that you will have a delay between heartbeat and signal due to the time for the blood to move.

Or you could work on the fear...
>> without assets

and without an income
This is why there are checklists for everything. Even the best pilots omit things when checklists are not used.
PostgreSQL Replication
Physicists See Hints of X17, Potentially a New Force of Nature