skysight-inc/HackerNews huggingface dataset:
At the time, FB said it didn't believe the bug had been exploited: In this instance there is no reason to believe users were impacted. [0] The alleged hack of Bezos happened in May 2018, about 18 months after the Nov 2019 bug fix. I wonder if FB's statement was just boilerplate PR or if they really did substantial forensics to have "no reason to believe users were impacted".

[0] https://nakedsecurity.sophos.com/2019/11/20/update-whatsapp-...
Good thing I stoped using google search last year :)

Actually I’ve stopping using google for EVERYTHING, except one old legacy throwaway gmail account. I must say, it feels really good!
The blog post by Sonos themselves: https://blog.sonos.com/en/end-of-software-updates-for-legacy...

Some comments: https://news.ycombinator.com/item?id=22109891
The financial side of things is probably the bigger driver - the German government is notoriously unwilling to issue debt, so domestic German savers have a huge shortfall in safe assets that they must purchase abroad to acquire. These foreign financial assets, on net, can only be bought by sales receipts of exports.
Something that's kind of related is that I feel I'm seeing more and more spam websites and straight up malicious websites on google. They are often duplicated across many domains.

By malicious I mean websites that destroy the back history, create alerts, beeps the computer (not sure how that works) and other nonsense about virus infections.
I oppose CloudFlare's decision because, culturally, it's un-American—and they are an American company. I expect all Americans, and especially the most prosperous and successful Americans—like the CEO of CloudFlare—to uphold those values.

I would 100% support legislation requiring anyone providing a platform or infrastructure, such as CloudFlare, to have a 100% neutral policy as to who they provide service to. It's a civil rights issue to me.

Corporations have rights, but with those rights come responsibilities.
Your comment might be a duplicate of one made two months ago in a post about photographing cabbages in Sri Lanka.
If you own a domain through Gandi (possibly others) you get email included for free. This is what I use. I don’t know why I don’t see this recommended more often?
OK, understood. And yes, in my experience AWK is less good at that, cut would definitely be the right tool.

It doesn't detract from the point at hand - which is perfectly valid - but it's worth noting that there's a confusion here with regards the terminology: "fields" vs "columns". I thought they were referring to "columns of characters" whereas the added explanations[0] are about "columns of fields". That makes a difference.

But as I say, yes, I agree that to select a range of columns of fields, especially several fields from each line, is definitely better with cut.

[0] https://news.ycombinator.com/item?id=22109551
Thanks for reporting. Yes, detecting cheat is one of those numerous cat-and-mouse games. Whatever you do to detect, will deter more cheaters yet with diminishing returns.

Squadeasy already deals with a number of scenarios, though not exactly this one. Thank you for your concise yet insightful report. I keep these ideas: cheating with multiple uploads of time-shifted TCX, transparency in third party trackers helped.

I just opened an issue in the internal tracking system with your text and a few lines. The team will notice it tomorrow morning (it's 10:30pm here in Paris), yet we have quite a backlog already so don't hold your breath.

To answer your last sentence and Typescript, the freelancer or new hire will be working on both front (user profile web-app) and back (bugfix, toolset migration, API evolution). Any contact welcome.
The efficient market hypothesis implies that P==NP. There's a LOT of reason to believe it's false.
Most crypto day traders wont have to pay any tax.
Yes, that is what I said.
Most comments: https://news.ycombinator.com/item?id=22108223
It sounds like they did relent? It doesn't say anything about them refusing to relent after evidence was presented.

It seems like they made a mistake in this case, clearly, but I don't know if you can extrapolate from that that they acted in bad faith.
Do you have a MacBook Pro by chance?
Chinese City Uses Facial Recognition to Shame Pajama Wearers
Do Face Masks Keep You Healthy?
You're not the only one. It seems like G itself thinks that, hence all the desperate attempts to diversify - which I see as an attempt to parley a short-term cash and talent surplus into something, anything, that will have value in the long run.

It will be interesting to see what a desperate Goog might do with access to everyone's email, calendars, and docs.
> There's nothing new there, and some things are missing.

And it still goes further than C sanitizers (except the glaring missing piece of use-after-free, which I'm sure will be addressed).

> Rust is nowhere near as complex as C++

It's hard to quantify this, but I think few people would point at any language (in real use) other than Scala, C++ and Ada as being as or more complex than Rust, so it's at the very top. Some people are perfectly OK with that and even prefer such languages. Rust is well beyond my language complexity comfort level (even C# is too complex for my taste, and, as a high-level language it offer much better abstraction than Rust, or any low-level language). So if C++ is at 500 and Rust is at 300, that doesn't mean much if I want to be at 50 or 100.

> Zig and Rust both improve over C and C++'s complexity and readability

I don't see it this way. I find it hard to put C and Zig in the same category as Rust.

> so far only Rust does anything different to address memory safety.

I disagree with that, too. Rust is the only one that addresses memory safety using sound guarantees. If you run tests on a Zig program out of the box you won't have array overflows; that's not what you get in C and C++. Zig's "big idea" or "doing anything different" is how it does partial evaluation with a single construct (comptime) that is drastically simpler than anything I've seen. In other words, as far as simplifying languages with tough requirements for low-level programming, it's rather revolutionary. That's my preferred direction for programming languages.
To all the haters out there.

I self taught myself PHP almost 15 years ago, and I've completely developed over the years, from the ground up and from scratch by my self, a complete network of businesses: RadioReference.com and Broadcastify, that does

Public and Private APIs in SOAP, JSON and XML. Complete user authentication and session for millions of users.
Integration with third-party best of breed apps like MediaWiki and Xenforo. Database, Ticketing, Location, Admin, User, Payments management. Provisioning, Scripting, Web Services consumption etc

The code is ugly, barely any OOP except for some reusable internal classes. Tons of copy paste from Stackoverflow. I'm still using mysql_query() in a lot of places. Did we hit some security issues, sure!

But it works, it generates millions of dollars in revenue, and it's all managed and developed by one person.

So, to all the PHP haters out there. See above.
Well, it's not unreadable at all, though a bit ambiguous, for me. I think people who's native languages only have Cyrillic letters don't struggle with it as much as some people who's languages have two official alphabets - i.e. my native Serbian, which has Cyrillic and Latin alphabets, that are equally taugh in schools, accepted by the government and un-prejudiced (well, other than extreme right people who force Cyrillic as the only "true" alphabet [sigh]).

However, it's extremely rare to see Cyrillic mixed with Latin letters in a word or sentence and have it intentionally mean both, so my mind doesn't interpret it like that. That's why P is not R to me or C is not S...
On the other hand, preventing acquisitions reduces available exits and might discourage future innovation (which in turn might promote more trusts).
> While many of the arguments against PHP still stand today, there's also a bright side: you can write clean and maintainable, fast and reliable applications in PHP.

You can write clean, and maintainable, fast and reliable applications in Perl. Just because you can, doesn't mean you should. I'd rather not attract the PHP dev crowd that gives it the reputation to any project I'm working on.
Dude, Brazil wasn't an English colony. They don't even have juries, much less jury nullification.
I have fallen over on the ground after 20 miles of running in both legs my quads and hamstrings were cramping. I got up and ran another 10 miles. Didn't have any choice, either run 5 miles back to the check-in table or 10 miles to finish the race.
Wearing an N95 mask and washing your hands properly will prevent the overwhelming majority of transmission. Could someone still sneeze in your eye? Sure. Could you wear your mask improperly because you haven't been fit tested, yeah. But you sure can reduce your risk a lot.
How does it compare to a control? If the pollution stops (eg you stop cooking) the particulates will settle on their own. You'd expect the count to go back down to normal over time. How much faster does the air purifier cause the particulate count to decrease?
The max 8 doesn't have an inherently unstable design. This meme now only lives in the minds of the most ignorant out-of-the-loop individuals who wilfully consume FUD and ignore expert evidence.

If the airframe is truly unsafe, then it'll never fly again. But everyone knows it will. Because it isn't.

The only thing that'll happen is the max 8 will probably require a new type rating which will hurt airline economy a bit. Other than that, you'll be flying in it a year from now and have forgotten all about this.
Looked at the screenshots, native apps are nice, congrats on the launch. How's it compare to Trello's free tier?
You are making the argument for the haters.

You can build a house out of kindling coated in gasoline too.

Doesn't mean it's a good idea.
Ok I’ll look into this, the techs said the SSD is soldered onto the logic board and is not removable.
I'm just reporting on the gist of what was said, that our current leadership is not up to the challenge of something really serious.

I mean... it's hard to disagree. This is the guy who rants about windmill cancer, stared directly at the sun during the eclipse and thinks Article II of the constitution allows him to do "whatever he wants".
Agreed. Once a company goes public, it is obliged to maximize its profits. The investors can literally sue you if you don't. So, anything considered legal is on the table.
Bayesian Blues
I wear one everytime I fly (which is 8-10 times a month on average) and I just don‘t care about the reactions.
Also, keep your bare hands the hell away from your eyes and nose.
I know its not the point of the quote, but I can't believe I'm the only one who feels less comfortable in a made bed. Tightly tucked sheets feel so constricting.
Fair, and someone mentioned that Kayak does display that, but I think you will probably have to move to a different airline to get a different aircraft type (airlines use one common type for most flights on a given route) and the price differences are often steep and/or there are other sacrifices to be made (frequent flyer miles, more expensive bag checkins, etc).
At least for me, there's an "X" in the upper-right corner that dismisses the popup. I can also click anywhere outside the popup to dismiss it. Is that not the case for you?

https://i.imgur.com/B7WFCcS.png
Safety is a good brand differentiator.
60FPS ~= 16.67ms/frame. So if you don't want to drop frames on a 60Hz monitor, your frame time budget is 16ms. If you want input to appear on the next frame, you've got at most 16ms. If you're targeting a 120Hz monitor then you've got 8ms. Etc.
Heterogeneous collections and no inheritance/polymorphism seems like a bad combination.
I see what you're saying but im not sure that's a problem - how many people are building CDNs in their garages that need to be certified?

Also, everything I say on HN reflects my own opinion and not any organization, which is what my profile states. I do not hide behind an anonymous username precisely for this reason. Poisoning the well by doxxing me doesn't change how the AMP standard works for CDNs either, and only serves to derail the conversation.
The Bezos's are responsible for their actions, and their decision to divorce, but yes, the leak could have been via saudis...
My understanding is that the Google culture has shifted dramatically from engineering-driven to money-driven.

It reminded me of the story that got posted about Boeing: https://qz.com/1776080/how-the-mcdonnell-douglas-boeing-merg...

I don't know if people will necessarily die, like it did with the 737 Max. But I wouldn't be surprised if the key underpinnings of a participatory democracy gets compromised.
Wikihow is gold mine of often hilariously bizarre tracings of stock or staged photos.

What surprises me is that there is no Wikihow filter for photoshop and instagram. So consider this my free gift to any enterprising HN reader who wants to make a small fortune with a wikihowification mobile app.
not just rapid prototyping. Often times, when i write unit tests and the like, i use closures. In the system i work in, asserting an exception requires spawning a new thread and then watching it burn, which is most easily accomplished with a closure. But also writing one-off tasks to be run in a new thread (even in prod) can take closures.
Ask HN: What's your experience with Oculus quest/ring fit?
I'm curious about user retention. Did you put them on the shelf after the first few weeks?

Are they viable for serious indoor exercise ?
/subscribe

We've packaged a number of models in OpenFaaS and publish the containers in our function store. You can check for nudes, colorise images, do OCR and ImageNet is also available (called inception). I'd welcome contributions, Tensorflow models are very easy to serve.

https://github.com/openfaas/store
https://www.facebook.com/security/advisories/cve-2019-11931
This is the correct answer, not the other answers below. We call it branded search, or brand protection placements.

This is the sort of practice that will get Google in trouble with Congress.
FL Studio works great for me under wine. No problems in over ten years!
> while going through the whole post-grad thing.

OT, but what is the whole "post-grad thing"? You earned a PhD?
My understanding is almost all PHP dev is done because it’s improving a legacy system or it’s integrating into a legacy system, or the first engineer could just move faster in PHP because of personal reasons.
WiFinger: Leveraging commodity WiFi for finger gesture recognition (2016) [pdf]
The first half of the article contains a huge amount of gloating about the size and reach of Stack Overflow. Then the second half of the article has gems like

> in order to continue to fuel our growth

Why does it have to be this way? SO is an immensely useful resource and a sustainable business. Why does every company need to continue to grow until they lose the essence of what made them good? Why can't companies be satisfied with making a decent chunk of change, paying their employees a fair wage and delivering value to their customer base?
The big difference is that the acm spends a few million of that on politicians to keep it that way, but Arxiv doesn't have the money to do that.
The usual "to big to fail" suspects. If anything goes wrong they'll get another government bailout.
No I haven't varied my position at all.

I said don't have the primary store of your content to be on your phone and don't backup your phone.

The reason for this is that if you lose your phone, everything is lost since you last backed up.

Instead, store have the primary store of your content to be in the cloud and backup your cloud.

The reason for this is that if you lose your phone, it's irrelevant, just get a new phone and re-install your cloud apps. Now you don't need to worry about backing up your phone ever.

The only failure mode is if your phone has not had a signal to upload new content to the cloud in the last few minutes. Well guess what you probably also haven't backed up your phone in that time either if that's what you were doing.

See?
This is publicly available data, published quarterly in the financial statement... I don't recall ever hearing about that kind of a drop.
I really wish discussions would better distinguish between tracking, advertising, and camouflaged advertising.

I actually like advertising as one avenue of finding stuff.

I just hate when tracking is bundled with advertising. And I hate when advertising is camouflaged.

In practical terms:

When I’m searching for guitars, I like seeing both: third party results and ads that are not camouflaged.

I also like seeing guitar ads on a guitar related website.

But I hate seeing guitar ads on an unrelated website, just because I looked at a guitar website a few days ago. And I hate when a guitar ad is camouflaged as an independent review.

An advertising company that doesn’t track or camouflage gets my support. And I just hope that StartPage is and remains that kind of company.
Its a stable design.

The force MCAS is correcting is a lightening of control forces near a stall. This is not allowed per FARs, so they added MCAS to force some extra force.

It will fly just fine with the computers turned off.
I think you are indeed missing a few pros. Off the top of my head,

1. Having Google/Apple Maps has helped me find new restaurants and kept me from ever getting lost in foreign cities,

2. Tinder and other dating apps have enabled me to date people that I would never have met in my day-to-day life,

3. Lyft and Uber have come in handy more times than I can count,

and the list goes on. My use-case is different than yours, I’m sure, but there is a reason that smartphones are ubiquitous: we as a society have roughly evaluated the cost-benefit analysis of owning one and tend to side with the ‘benefit’.
I don’t know of any residencies/colonies that are specifically oriented towards programmers. Many (like VCCA & McDowell, mentioned in the article) are focused towards fine art, and often aren’t interested in technological projects. However, there are several hundred residencies just in the US, and definitely some that are more progressive towards welcoming artists working in new media, including programming.

I ran a small-scale residency (in West Virginia) for four years. I had a couple of more technically-oriented artists attend, including a music composer who was developing an interactive/generative system to be installed in NYC’s Highline park. She’d built a custom Arduino controller that interfaced with light sensors, and spent much of her three weeks at my place programming the algorithms (in Cycling74’s Max and C++, as I recall). We tested the installation one night in my woods with a bunch of friends exploring with flashlights.

Years before, I did a residency in San Diego (at a site now closed) where I spent a week developing some network software. I had to make some effort to explain to the folks running the residency why a programmer could use this sort of time, but it was definitely worth it.

One of my favorite tech-oriented residencies is Wave Farm, which encourages ‘new transmission works (artist works made with, about, and for the airwaves).’

Go here for a great directory of residencies: https://www.artistcommunities.org/residencies/directory

Most residencies are about making art in some way. That doesn’t mean you have to be a painter or writer, but it does mean that you need to be able to contextualize your work and consider how it might be socially useful or at least interesting. So if you decide to go this direction, spend some time understanding how other artists use this kind of experience, as well as what the residencies themselves are looking for.
Doesn't promoting a single page template breaking Google Adwords ToS? A few years ago when I did something like this Google disabled my ads.
How do you filter out the CSS etc for plaintext viewers? /txt/feed is a new one on me. Any docs on it?
DXVK is not intended to be merged into wine. It's written in c++, and prioritizes usability over accuracy.
For caching: Learn how to code. If your web page dies when there are only two visitors, then that's on you.

DDoS attack: If possible, the easiest solution is to just swallow the traffic. If that doesn't work you want to block all networks that allows IP spoofing. Then it's a wack-a-mole game. And if you have the resources, use any-cast and many co-locations. Or ask your ISP for help.

Hiding your server: Use onion address via TOR network.

SSL certificate: Use Letsencrypt

Edge SSL/DNS/CDN: Use a fast web server or proxy, like Nginx. With Cloudflare the connection to the Edge server might be faster, but time to first byte (on your site) often slower. So you get better bang for the buck by optimizing on your end.

Note that DNS by itself already have edge caching out of the box, for free! eg. if a user looks up your domain, it will be cached both at their ISP and LAN. So you don't need Cloudflare for DNS.
is it possible to someone to be charged by a prosecutor that NOT belongs to the same organization whose misbehavior he exposed? I understand that everyone in Brazil are charged by Ministerio Público.

What you are saying is: as Greenwald exposed supposed misbehaviour (are you a judge?) by some prosecutors them he can't be prosecuted anymore, which gives him immunity to commit all kind of crimes he wants to.

Unbelievable!!!
I wonder how often less high profile folks get hit with stuff like this?

On one hand, zero days are rare and expensive.

OTOH someone who isn't the CEO of a major company might not notice the malware, or if they do, not know they should forward it to an organization like Citizen Lab.
Learning from SARS: Preparing for the Next Disease Outbreak
I just googled N95: I have a bunch of those in my toolshed! They look ominous. :) But I have 12 flights in the next 5 weeks from US to Europe to Israel so I may have to risk looking like a weirdo.
Google's Recaptcha is a much bigger problem then Cloudflare's service for me currently, but it could change at any time.
The Playboy Was a Spy
Feminist Artist Ann Hirsch Claims Vimeo Deleted Her Work
Google hates strong SEO sites, because they won't make them any money. So that's a clever way of pushing them further down. I wondered when all results on the first page will be Ads only.
Attitude: The Orientation of an Object in Space
I always thought wearing hospital masks was for infected people, not the other way around.
I don't understand this devs don't understand ops nonsense.

> so you waste tons of time and disk space re-getting the same pages, re-looking up the same hostnames, etc. (And that's Ops knowledge...)

If it's my job to write a web scraper, it's absolutely my job to think about/solve this problem.

Is this a new trend thing?
Doubt he or any other president would do anything about it. When was the last time any administration gave the Saudi government more than a weak reprimand for their antics? Some of our "allies" can do no wrong.
PHP, LOL.
Migadu is great because they bill based on emails sent rather than billing by how many accounts or domains you have.
AAPL had a trading halt last January [0], pending a profit warning. Google will likely find dozens if not hundreds more halts in Dow components.

[0] https://thefly.com/landingPageNews.php?id=2842788
ReCaptcha is a necessary evil, but there's something that needs to change: the internet-wide rate limit. If I try to scrape a site and start getting captchas, when I go back and try to browse a completely different site, I'm suddenly trying to drag the points to outline a plane for ten minutes. Keep track of reputation on a site-specific basis.
It won't look bad, but you do have other things to consider. You got a quick raise -- that's good. The company sounds understaffed in IT and perhaps is less than competent. Crisis can become opportunity.