skysight-inc/HackerNews huggingface dataset:
There is no inherent accuracy with FPGA. Just like with software emulators, FPGAs must be worked on extensively in order to achieve the desired accuracy. I don't know why this myth keeps coming up. Lack of understanding that just gets repeated over and over again, eventually being accepted as fact, I guess.

The accuracy you see with the Analogue products and with MiSTer are the result of hard work towards the goal of accuracy, and not an inherent feature of using an FPGA.

When connected to a CRT, an FPGA solution can provide much better end-to-end latency than a software solution running on an operating system, that's certainly true, but again that's not inherent to running on an FPGA; it's inherent to running without an operating system that does display composition.
As long as banks have no incentive or are forced to provide API's, I doubt this will change...
On the Verge of Web 3.0: Next Generation Blockchain-Browsers
Not most cases, no - but I imagine they are deeply involved in cases where someone has brought to light illegal actions and atrocities by the US government and the CIA itself.
It works like a charm indeed, I run the WireGuard client on all my devices (laptop, phone, tablet) in on-demand activation mode (VPN activates whenever I leave my home WiFi), and configured them them to use the PiHole server as DNS, so I have ad-blocking on all my devices, all the time. I don't perceive any kind of negative effect on network performance (it helps to have fiber with symmetric up/down speeds for this setup)
I like the hands-on tutorial. I have a couple of comments.

> teleportation might be a reality ;).

Please say "quantum teleportation" instead of "teleportation" so readers don't confuse https://en.wikipedia.org/wiki/Quantum_teleportation with https://en.wikipedia.org/wiki/Teleportation. They are completely different concepts.

> That notion of both “dead and alive” is exactly what superposition is.

No, this is not what superposition is. The cat example was Schrödinger’s method of illustrating how counter-intuitive quantum superposition is. Please refer to the superposition principle (https://en.wikipedia.org/wiki/Superposition_principle) instead.

> But what if you could entangle them together so both would always guarantee to yield the same outcome? That’s what entanglement is all about.

This is not what entanglement is all about. You say "both their wave functions will yield the same outcome." It's the same wave-function when they are entangled, not different ones.
Almost useless as it doesn't sync the settings and containers as part of Firefox sync. Setting these up on all the devices is a pain!
I think it’s worth mentioning that these CMs have been on staff for almost 10 years and users for even longer than that [1] (Shog9’s user ID is only three digits). They have an impeccable track record of listening to the community and making very good decisions, and as a result they have earned a ton of respect and trust from the community. There should have been a ”thank you/farewell/tribute“ blog post celebrating their legacy.

In light of all the recent turmoil, they were among the very few SO employees that anyone still trusts, which is what makes their firing such a big deal and yet another indicator of the culture shift within the company.

[1]: https://stackoverflow.blog/2011/03/25/welcome-valued-associa...
Wonder when the last current root certificate in a common OS (Windows, OS X, mozilla ca-certificates, etc.) expires.
Critical Vulnerabilities in Microsoft Windows Operating Systems
Charging ports are often replaceable. I don't know about the Nexus but I paid €25 to have the charging port replaced on my Huawei phone, within an hour.
Cheers. Right now a11y support is a bit like IE11 support: it should work, but it's tested only sporadically since it's rather time-consuming, and as a solo dev time is rather precious. I'm also not blind myself or even a a11y expert so there will probably be some issues I'm just unaware of. I would really appreciate feedback on it, so do get in touch if you have issues.

Also, a11y support isn't just for "blind" or "disabled" users; it tends to make the page better for all users. This applies to everything really; for example while being able to tell coins apart by touch is critical for you, it's also pretty convenient for me at times, so this kind of coin design is better for everyone.
Most people's interpretation of Occam's Razor would probably disagree with you.

But more importantly- the distinction you are making does not explain anything. Regardless of whether inorganic matter has experiences, there aren't any observable phenomena that have outcomes that are effected. You can make a claim one way or the other, and the world behaves the same regardless. I tend to fall toward the stance of logical positivism on this one.

https://en.wikipedia.org/wiki/Logical_positivism
Have you tried Adafruit's make code? https://makecode.adafruit.com/ Visual programming for javascript with options to interact with their Circuit Playground hardware.

It's from Microsoft, with flavors for Mincraft and Legostorm too, https://www.microsoft.com/en-us/makecode .

It's, of course, not an entire ecosystem for everything, but they do a lot of visual things that may be worth evaluating. I like the colors/shapes of the code pieces, and the ability to switch between the visual code editor and the plain js.
Nothing, but a GPL-licensed framework is one that is difficult to use commercially, because this is a case where GPL "infects" the user. This use case was the reason for creating the LGPL.
Depending on the state, you must inform a police officer that you are carrying a gun at the beginning of the stop. It could be a trap or a pretense to search your car.
I imagine most modern users of tar are using GNU Tar or libarchive bsdtar. Are there any current tar implementations that can be directly traced to the original?
> Would this throttle me to 200Mbps?

RPi4 is plenty fast for full gigabit VPN performance. Its ethernet interface should also easily reach 950 Mbps. Although it's a different matter whether current VPN software can take full advantage of it. My guess is not.

There's some handicap due to lack of useful crypto HW in RPi4. But if multiple cores are used, it should easily reach 1 Gbit speeds. VideoCore VI could theoretically also be used for crypto acceleration, although I haven't heard anyone doing it — yet.

Edit: Just tried "openssl speed -multi 4 aes-256-cbc" on RPi4.

aes-256 cbc 224787.70k 243743.77k 250572.29k 251253.42k 253684.39k 252919.81k

In other words, 2 Gbit/s CPU based AES-256 performance.
Next Gen of Human-Drone Partnerships: Co-Designing an Emergency Response System
And then it all falls apart when Plaid gets hacked and millions of people's _actual bank account usernames and password_ get stolen. That is not a safe premise to start a business (or to acquire one).
Hi! YC companies are looking for a variety of roles; if you want to share a profile, feel free to email it to me and I can float around our community.

Thanks!
So why don't they increase the cost of the motherboard by 2 cents and make serious profit?
Their mission also explicitly includes information assurance:

Mission Statement
The National Security Agency/Central Security Service (NSA/CSS) leads the U.S. Government in cryptology that encompasses both signals intelligence (SIGINT) and information assurance (now referred to as cybersecurity) products and services, and enables computer network operations (CNO) in order to gain a decision advantage for the Nation and our allies under all circumstances.
Do any browsers use CryptoAPI for TLS certificate validation?
Proper API design is software engineering, not computer science. And it does come with experience, but it's not necessary to start from zero.

Schools are coming around to the necessity of software engineering principles, and they're including an awful lot of solid software engineering content in their CS programs even at the undergraduate level nowadays.
Let me tell you as someone that was there, man, when USB came out. Everything else that plugged into my computer had a non-symmetrical shape. Serial ports, VGA, DVI, SCSI, even PS/2 which had a flat spot that told which way was up.

Now imagine someone showed me a new connector that looks like it could go either way, but only one way would work. They had a clean slate, and that's what they came up with? From my perspective at the time, that was the dumbest fucking thing I'd seen in a long while.
Perhaps less well known are the well-meaning explorations into why isn't Lisp more popular. The absence of a 500 Lisp developers on one project is itself the datapoint being discussed.
> Within the next 10 or 20 years, we'll have the technology to connect brains to computers, and eventually join brains together and separate them

what?
That humans are simply animals with highly evolved brains, living in a very complex web of social interaction.
It's a great technical decision that may hopefully drive sites towards web standards, but technical decisions don't exist in a vacuum and can't be analyzed in them.

The world's biggest advertisement provider's browser arm isn't going to turn off a source of fingerprinting data unless they simply don't need it anymore. It's far more likely that Google is pulling the ladder up behind them: they can identify users without that fingerprinting data, so it's beneficial to deny it to their competitors.

This can be simultaneously a great technical decision and a decision that entrenches Google.
Why the Plaid acquisition is a tailwind for SynapseFi and others
I'm guessing startup time just isn't an important goal for cython then? I've know they refused to implements some optimization that would significantly increase complexity but this seem like low hanging fruit?
Note that I'm not the one who posted the parent comment.

Anyway, the Milton Friedman talk linked explicitly mentions the same beta-blockers example as my link discusses and cites it as causing tens of thousands of deaths. He says it's been a disaster over "the last 20 years" - the talk was in 1978, so this is roughly the 1962-1978 period. And the "governmental supervision for health care" mentioned is broader than the FDA.
I totally agree with consciousness being an emergent property.

But can a bigger system have consciousness when individual parts of it are already conscious? I don't see why this should necessary follow. I'm sure there are somewhat similar and interesting emergent properties, but we'd probably call it something different. Probably closer to the kind of group identities we already have with lots of humans interacting. Though obviously we'll know what it feels like, just like none of my neurons will ever feel like i do.
I have trouble accepting that existence of something that appears so high-level as consciousness could depend on implementation details.

We don't experience minutiae of activations of billions of neurons, or the work of glia. We experience "executive summaries" of them. So it's natural to assume that those summaries can be represented in another physical form.

Why physical representation of those "summaries" are there? Because it's a way our brains do high level decision making.

This leaves out the question why we experience anything at all. And I have trouble imagining that there are physical processes (quantum or not), which create a mysterious consumer for "executive summaries". If it was so, we would have decision-making pathway and useless subjective experience pathway. It's hard to explain from evolutionary standpoint.

I prefer to think that "executive summaries" abstracted from physical representation just exist without any need for mysterious consumers. Not unlike how natural numbers exist according to mathematical platonists.
Presumably the grandparent is thinking of organisms like Pando [0].

[0] https://en.wikipedia.org/wiki/Pando_(tree)
None of these links describe how the exploit works.

I found this: https://media.defense.gov/2020/Jan/14/2002234275/-1/-1/0/CSA...

So based on my limited understanding:

1. The certificates have a place for defining curve parameters.

2. The attacker specifies their own parameters so that they match the start of a standard curve but choose the rest of the parameters themselves. With the right ECC math they are able to generate a valid signature for the certificate even though they don't own the private key corresponding to the original curve.

3. The old crypto API -didn't- check that certificates were signed from a fixed set of valid parameters. It would just check for sig validity allowing for spoofing of the cert.

Interesting stuff. So you might be able to cryptographically prove if there was ever any attacks in the wild from this at a given time (if we assume dates are checked at least)?

I wonder what happens at the Microsoft Security Response Center when a big vuln hits like this? Does it tie up all their resources just working on the one vuln?
Likewise here; I rarely experience the "catch" that would make me think I have the connector upside-down. The trick is to approach at an angle, giving a lot more room for the connector to fit.
already running Ubuntu here :P
> the argument that a CS degree makes one more likely to understand big O

This is 101-level content at most institutions. If you manage to graduate without understanding it, you are a magician or some kind of con man savant.
European Lawmakers Want to Force All Smartphones to Have Same Charging Port
> There is no inherent accuracy with FPGA. Just like with software emulators, FPGAs must be worked on extensively in order to achieve the desired accuracy.

Very much true, and sorry if I didn't make it clear enough. However, there's inherent potential for the ultimate accuracy without performance penalty. That's what I meant by saying it's getting better every day. You couldn't say that about a perfectly accurate system.

> FPGA solution can provide much better end-to-end latency than a software solution running on an operating system

CPU based emulators can actually reach very low latency with modern beam racing techniques. See https://www.blurbusters.com/blur-busters-lagless-raster-foll....
I noticed there are internship positions listed on the "Open Positions" page. Specifically, are you still recruiting for the full stack software engineer intern position?
This seems really similar to the Facebook container (made by Mozilla, https://addons.mozilla.org/en-US/firefox/addon/facebook-cont...) and the Google container (a fork of the previous, https://addons.mozilla.org/en-US/firefox/addon/google-contai...)

The annoying thing about your extension is that the end-user would need to know about and update the domains they want to keep isolated. It would be great if all these extensions/features were built into the original extension and there were updating isolation lists similar to the uBlock Origin lists (EasyList, Peter Lowe's list, etc.).
NSA has long had an explicit offensive and defensive mandate. They even recently created a cyber defense directorate:

https://www.washingtonpost.com/national-security/nsa-launche...
Case in point, buried in a series of menus that weren't obvious with a menu at the bottom and top right as well.
You are in your bubble indeed.

- Sure, my computer has 16GB. The computer I develop on, plus run a couple VMs, containers, etc. That is not the case for the common user, who has to make do with less. This is especially palpable on mobile, with less RAM, fewer cores and more throttling.

- And those 16 GB? Nope, I do not intend to squander them on your app, and neither do the users. We use the computers, y'know. Perhaps to run an IDE, perhaps to watch a movie, perhaps to make a spreadsheet, but most apps are an addition to the main task. This is the epitome of arrogance: "you have X of resource, AND IT'S ALL MINE!" And you have 30 such intents-to-munch competing.

- Most of the time, it's a massive overkill: case in point, Slack: 2 billion bytes of RAM to show a chatroom, i.e. a few thousand bytes of mostly text? EXCUSE ME?!

- Apart from that, and the overhead of bundling and running a separate browser for each app, with all the issues it entails, the theoretical idea of desktop-web apps is quite appealing, as opposed to its actual implementations. For prototypes, excellent; don't shove prototypes to production though, that passes the buck onto end users.

I have built a major app in HTA (way before Electron, similar in principle). 1*, would not build again: easy to build, and that's about it.
The Radiation Printer
IR35 is entirely to do with disguised employment and was designed to prevent employers making their employee redundant and hiring them back at what initially appears to be a much better wage, but with no employer NI liability, no holiday pay and no employment rights.

While this does impact the common-or-garden IT contractor, it protects the ‘self employed’ nursery worker as well.

Many companies, including the government, employ contractors when they ought to be employing employees on fixed contracts. Once you start factoring umbrella companies, limited companies and all the employer liability, unless you’re really expensive there’s not a great deal of benefit to be had these days.
A different way of thinking of abstraction or just a feeling of elegance or a feeling of power is not a sufficient explanation for why Haskell is so great.

People want definitive and theoretically correct answers not talking points for a philosophical debate on programming styles.

Why is typed functional programming measurably better than procedural? Why is it better than OOP? Definitive answers are in demand not exploratory experiences.
I learned at my first web dev job that no one outside the dev/marketing sphere knows just how much of their visit to e-commerce sites is tracked.

From technologies like Hotjar that record your mouse movements on a given webpage, to simple IP address logging (who visited this page on our site, from what referrer, etc.), people really have no clue how closely their actions are being monitored.

However, as with lots of data analysis, their personal information alone means almost nothing. Their data in the aggregate of all visitors' data is valuable for analyzing conversion rates, if and how their banners are working, etc.

I can't speak to the ethics of this, nor do I care to. I don't believe it's right to track so much interaction without duly notifying the customer it's happening, but I have very little aside from a sense of common courtesy to back that belief up.

The experience has given me a new appreciation for JavaScript blocker extensions, which before I had believed are no longer really needed. It's also given me an insight as to the value of an e-commerce page over a physical store location.

For example: Say I go to my local Target. If I'm looking at cameras, and the sales person asks if I need any help, or whatever, and I say no, they go away, and the interaction is over.

But lets say I go to their website. Immediately, a personal session with this page is created for me, even though I don't know it. I'm tracked from the home page, to their electronics sections, to the Camera subsection. My movements in figuring out the search filters is being tracked, my mouse movements over the available products is tracked, all adding data to create a "heatmap" of that webpage.

Even if I don't buy a thing, I've given them little pieces of information to be used in analyzing their site. My visit will be considered a failure to their marketers, and the data surrounding my failure to buy will be used to retool their site in the hopes of getting people like me next time.
>What I did was almost 50 years ago and it's about 4,000 times easier today to con people than when I did it. To forge a cheque 50 years ago, you needed...

The thing is back in the day, if you put in the work, your con was all but guaranteed. I don't think you can make that same claim today.
Perhaps OP means "duplication of effort"?

In any case, I rather enjoy "rework" in the sense of fixing things. It's kind of fun changing a data structure and getting an important piece of software to run in minutes instead of weeks, or to add a bit of locking and get a flaky piece of software to become rock solid.

In some ways, I've become the mythical old guy that fixes things by turning a single screw. The trick, of course, is to know which one.
Wikipedia: "Micro-USB and USB-C receptacles are both designed for a minimum rated lifetime of 10,000 cycles of insertion and removal".

AFAIK an insertion cycles test is linear and extremely repetitive e.g. no bending forces and no foreign objects. It doesn't cover the wide range of real world stresses.
I like the way Wikipedia does it. Inline links to go to a new page but in page links to represent footnotes.
https://en.wikipedia.org/wiki/Jupiter
> Also, is stalking actually a crime now?

Stalking has a crime in all of the US states for 15 years, and has been a crime in most for longer than that.

If you are repeatedly contacting or surveilling someone, despite being told to stop, and are making them feel unsafe or intimidated, then you are probably violating the laws against stalking.
The Taycan out accelerates, out manoeuvres, and out performs the Model S on track. You don't need to believe me on that, just see the results:

https://www.thedrive.com/news/30467/watch-a-porsche-taycan-t...

The Taycan has a two speed gearbox to help with both phases of acceleration:

https://www.youtube.com/watch?v=Uum9nffLasQ

The Taycan is a performance sports car and the Model S isn't. The Taycan is doing what it is built to do. What do you think the Taycan is built to do?
Then the second part applies, that your VPN server needs to be reachable from the internet, which the author does not expand upon.
While you may not think you're senior or perform at a certain level, your manager may see otherwise and use/expect that performance while suppressing you from a promotion/raise.
According to https://portal.msrc.microsoft.com/en-US/security-guidance/ad..., it doesn't look like windows 8.1 received a patch either, and that's still in support. Maybe only windows 10 has ECC support, and therefore any previous versions are not affected?

Also, according to https://support.microsoft.com/help/4534310, it looks like Windows 7 got security patches for this month.
Commenters with a different ideology than you are not trolls. I don’t see good faith comments replying to bad faith comments or trolls.
Good find. This page should almost certainly be the headline article on HN, at least until someone does a full write-up of the vulnerability --- but the vulnerability here looks very simple (and gross): if you can define your own curve parameters and get CryptoAPI to honor them, you can sign anything.
The referrer header which is stored may contain a unique personal identifier.
What’s the difference between this and using...your email? I’m genuinely confused.
OP mentioned in a comment that this tool existed before the tweet: https://news.ycombinator.com/item?id=22045528
I replied in the [duplicate, triplicate?] post
https://news.ycombinator.com/item?id=21992736
> MiSTer's FPGA could probably beat hypothetical 10-50 GHz x86 CPU when absolute accuracy is desired.

You have clearly "drank the Kool-Aid" on this, and you are misinformed.

Accuracy is not inherent to FPGAs. Yes, full transistor level simulation of a CPU is very slow on a different CPU, that's true. If your goal is to have cycle accurate gate level emulation of video game hardware, which produces perfectly accurate gameplay, then yes, an FPGA is where you go.

If your goal is to play a perfectly accurate emulation of your game without worrying about emulated transistor state at every clock edge, then a CPU can do just fine, and it doesn't need to be some obscene clock speed to achieve that goal.
How do your friends read it then?

Isn't the point of a diary that nobody can read it but you? That's why they have locks on them.

If you want a diary that other people can read, that's called a blog.
Anyone got any news on Windows 7 seeing as it's still 25% market share approx according to statcounter?
Mailchimp has terminated Stefan Molyneux’s account