skysight-inc/HackerNews huggingface dataset:
Ask HN: Is there S/W that exploited Meltdown/Spectre before it was published?
Have there been identified that exploited vulnerabilities like Meltdown/Spectre before researchers discovered and disclosed it through proper channels? Just trying to understand the impact & lifecycle of dealing with vulnerabilities (esp. in h/w)
Worked on this problem 10 years ago, power distribution companies were sleepy enterprise environments with workforces who were just not equipped to respond to internet technologies, let alone threats. Even the lightweight requirements of NERC/CIP were treated as alien. The best security was in the smart meter infrastructure, which was designed around redundancy and combating fraud, but certainly not national security.

I don't think this is something we fix, it's something we evolve and move on from. My impression was the only real future relative to a grid security crisis is in storage and renewables, with more localized generation. The alternative is basically nationalization.
It is poor decision making putting power systems on the internet.

All power companies have end to end land access and already have scada etc physical links between all switchyards and can run their own microwave links where necessary so no need for ANY infrustructure to be accecible from the internet.

Its lazy cheap decision making.
“They want to get in a fight with you.”

They want to explain themselves. There is a difference. What you consider an argument or fight is just a Hail Mary, almost an involuntary recovery attempt, for some.

Accepting feedback without trying to dig your way out of a hole or justify your actions is a sign of maturity.
Whats this? I see that it was last updated in 2014..
How do you achieve this goal? Could you clarify it?
Deep learning isn’t hard anymore
I thought this law specified the requirement for a standard, but didn't enforce a specific one. Meaning that industry simply needs to come together to define a common connector, and they can over time develop and adopt new standards through consensus.
> Can't avoid Chrome on a Chromebook

It is deeply psychologically jarring, but Firefox runs through the Android and I think Linux compat layers on a Chromebook just fine. I have no idea how much this actually buys you when the OS is by Google for running Chrome, but it does work.
Neither do pacemakers. God forbid RMS ever needs an arrhythmia corrected...
- hire into your weaknesses
- hire people smarter than you
Jokes are great if they make people laugh, think you've overthought that part!
Call a spade a spade. Was it Blizzard? They're known in my parts for similar behavior. To the point that I've cautioned local and especially junior folks not to take their take homes too seriously. Even when/if they do pull you in after "passing" a take home, it's not like they take any effort to then talk to you about the literal work you just did for them.
One of the nice things that Angular has you don't see in the post is... very polite and courteous maintainers! https://github.com/angular/angular/pull/33717#issuecomment-5...

This was a fast release cycle. It was back in November 2019 we were talking about 3.7, and now it's in.

I'm not even thinking about Ivy. But it's nice to have all the nice comforts of typescript ready and working out of the box. (I mainly work in React, but dabble with angular/vue to stay up to date)

And what a smooth update process (abbreviated):

ng update @angular/cli @angular/core
** Executing migrations of package '@angular/cli' **
** Executing migrations of package '@angular/core' **
Your project has been updated to Angular version 9!
For more info, please see: https://v9.angular.io/guide/updating-to-version-9
> I sometimes render 50mb PNGs. The execution of decoder is insignificant compared to everything else.

Fair point but you have to admit that is a very niche use case.

Have you compared the execution to native performance? Even decoding a 50MB JPEG in Chrome with turbojpeg is going to be a hard pill to swallow.
> Private business has trouble seeing beyond this quarter's financials... especially when said business is publicly traded.

I know that's the snarky cliche, but where is the empirical evidence?

I see major public corporations staying competitive for decade after decade.

It's hard to understand how organizations that bet everything on the 2020 Q1 results while ignoring 2020 Q2 accomplish that.

> This is a matter of necessity, not far-term vision.

I'd say the far-term vision is a necessity to flourish far-term. therefore surviving companies have it.
Sorry if I wasn't clear, but the goal of the migration wasn't for scale, it was for HA.

I find it difficult to setup PostgreSQL without having a single point of failure and introducing downtime for things such as upgrades.

We aren't doing life changing stuff, true, but a downtime in our system can result in employees (often at the bottom of the economic ladder) not being able to get to work. That gnaws at me. I guess the better alternative is to go for a hosted approach, but that isn't without its own complications and challenges.
Ripgrep-All
Designing a RESTful API Framework
Regarding reliability of your failover process: test it regularly and have it monitored so you get alerted at the first sign of trouble.
So here's the thing: if you're correct, or even if you're not and you've simply picked up on personality traits you don't like, you've already shown great progress in recognizing this and having the self awareness and introspection to have this insight.

I don't have the silver bullet, but I imagine that fixing a good amount of it can be done simply by maintaining this awareness and habitually thinking outside of the instinctual responses you might have.

I'm not sure there's a quick fix to make you enjoy listening to other people, but the rest is readily done by consciously seeking a wider perspective on any given situation, keeping your own ego in perspective, etc. I know, much easier said than done. But if you're looking for something more formal to help you on your way, one possible option is Cognitive Behavioral Therapy.
Just minified. Gzipped size is now 225 KB.
Don't fix it, own it. It's human to think the world revolves around you because in your life it does. Try to change and you'll wind up like all these fake people whose words project humility but whose actions show they only care about themselves. I'm ok with it, I assume everyone thinks that way.
What right does someone have to sue before they’ve been hired, anyways, unless it’s on a discrimination basis (in which this case, it is clearly not)?

Here in Texas, at least, that sort of thing does not seem like something that would ever be a real legal risk. This is a right-to-work state; I figured it’s pretty hard to get sued here.
Definitely.

At a very large company, I was involved in hiring something like programmers for a particular niche department. Over years we developed a good set of battle-tested questions, and had a clear process for evaluating candidates.

But all of this feedback was just an input for management and HR. Regardless of how much we liked a candidate, only HR was trusted to communicate and negotiate with them.

We later found out that candidates were routinely ghosted if the company had chosen not to hire them. We raised a stink about this, but ain't nobody got time to fight that fight.

Anyway, the TLDR: especially with big organizations, never attribute to malice what can be explained by incompetence.
It's already hard mustering up the courage and desire to go to therapy. Then I spend hours filling out forms, making cold-calls, completely blind -- reading Yelp reviews on therapists, man. Then I don't get callbacks and am told doctors aren't taking new patients. OK.

But everyone is happy recommending therapy. Oooh, it's sooo great! Yeah. Only if I could find some.

I'm assuming therapists designed their funnel this way, somehow, there's something about me that puts me in this category of people that can't get over the initial barrier of finding them.
I'm not sure it's that simple, and my physics knowledge isn't so strong but if it's a gradient, the force of the push can't exist without being the same thing as the force of the pull. They seem to be one in the same, the force isn't onna particular side, it's the effect of the delta between points on the gradient.
So what's the benefit of more complex ones like react's?
Just wanted to add something. Narcisists are not socially inept or weakly wired. They like to be at the center of attention, that’s how the narcisistic supply is obtained.
I've never noticed a problem with alpha in PNG, how did they botch it?
Without wanting to endorse it: I live in a Southeast Asian country where people run red lights all the time. As in, I see it happen probably a half dozen times every time I drive.

I've never seen an accident arise from running a red light.

Which isn't to say that I think running a red light is "safe" but I think the context in which one runs a red light is probably a bigger factor than blanket denunciations imply.

In America, running a red light usually means something like "while driving a 4,000 pound car at 40 miles per hour [6.4 million mv^2], the driver blows through the red light due to complete unawareness of the signal."

Whereas where I live it is more like "a guy on a scooter (360 pounds net), slows down (somewhat), sees a gap in the traffic and zips through at 15-18mph." [116,000 mv^2; the car is 55x worse]
A Bug in Adventure’s Endgame
Eastern Europe Sees More Fiat Options for Trading Crypto
> I was pretty close to burnout by the end of that year if I’m honest with myself though and my own career progression has without doubt stalled due to it

Sounds like you had a tough time but empowered the team to succeed. Maybe with some personal cost to yourself.

How would you approach the situation knowing what you know now? What would you do differently?
I would assume angular outputs minified code, but not gzipped.

That being said, 973kb seems like large-sized rather than mid-sized to me.
What helped me the most was reading the book "How to Win Friends and Influence People" and following the instructions. It's cheesy, it's old school, it's a classic, it's outdated but darn it the (outdated) advice in that book really does work, and it really did help me turn my personality around and even improved my outlook on life/humanity. I didn't really take an interest in others that much beforehand, but once I started being more extroverted and chatting with others, more people became my friend and I feel more engrossed in my community- I even know my bank teller and sandwich guys names now and realized I'm downright cheerful at times. I take more of an interest in others and keep getting promoted at work due to what seems solely on my personality... I mean, my quality of work is good, too. For example, a recent award I won cited, "your positive energy is contagious and especially welcome tackling tough projects."

But yeah... that book brought me from a depressed cynic to someone who takes an interest in others and basically the whole world is my friend- even people I haven't met yet, they are just friends I don't know yet.
Mastercard Leaves Facebook Libra
Reading fiction might help, well, certain fiction. My first thoughts are to Tolstoy's War and Peace. It seems like it would be hard to come out of a sincere reading of this book and still be entirely self-centered.

If not War and Peace I'd avoid genre fiction here and go for literary greats with real depth honestly trying to plumb the human experience. You'll understand why I'd tend to suggest books in the third person with multiple protagonists, full and round characters.

By the way if you choose War and Peace, avoid the Pevear and Volokhonsky translation (wooden) and choose instead either Briggs (more modern and flexible) or the Maude translation (precision at the risk of being overly-grammatical).

An interesting point about Tolstoy is that all of his characters are unique, even the most minor ones, and at the same time they are all branched in to human, cultural and historical experience and moment.
iPhone locked out of Google Advanced Account Protection
Maybe I'm performance sensitive and haven't noticed anything like the claimed improvement and wondering what I did wrong and how I can fix things?
Nighttime photovoltaic cells for electrical power generation
DevOps Pipeline Sprawling
In my opinion, Aurelia has always been the less complicated and lighter option of the two. Aurelia 1 had some design choices that made it harder to tree shake down, but Aurelia 2 is around the corner with AOT and numerous optimisations that looks like will put it at the top of the benchmarks again.
The Experiential Effects
Hand-counting certainly is possible, and there are places in the US where it is still the regular process. However, besides the high cost of bringing on a sufficient number of temp employees (additionally complicated by the typical requirements that ballots be counted under supervision of both major parties), it's a real concern on the mind of election officials that hand counting is appreciably less accurate than automated tabulation. It's possible to multiply count ballots (e.g. count each batch twice and average results) but the general attitude is that ballot counts must be absolutely correct and any discrepancy prompts a complete recount. This results in a need to have each ballot individually entered by two people and compared one-for-one... the process is quite time consuming even for the relatively small number of ballots that are hand-counted in this jurisdiction due to damage that prevents the tabulators accepting them.

Finally, there is the simple problem that the voter is not able to see their ballot tabulated "before their eyes," which is standard enough in most US jurisdictions that voters can get frustrated or worried if it isn't the case (e.g. due to a provisional ballot where the registration must be investigated before it can be tabulated, something that is thankfully becoming uncommon due to same-day voter registration). Once you're used to casting your ballot and "waiting for the ding and green light," it's a bit worrying to see it just stuffed in a canvas pouch.

This definitely isn't a problem that can't be overcome, but I think to some extent comes down to the culture of election administration, which is that everything must be absolutely correct to the individual ballot, and as much as possible should be done directly in the polling place (since that's where most of the independent observers/challengers/scrutineers are located).
I was once asked in a web development interview how to asynchronously fetch a resource. I answered something to the effect of "you just add a `true` parameter in the xhr.open() call somewhere, probably the second or third parameter" without being too specific about it since I did not have it memorized.

The interviewer did not accept this response and after every rebuttal of mine he just responded with "no" each time without elaboration or clarification. He eventually gave up trying to coax me toward his accepted answer, apparently thinking he had outwitted me, and revealed to me that the correct answer he was looking for was to use "dollar q". I asked for a clarification on what he meant by "dollar q" but he was unable to clarify.

It was only after the interview was over that I realized he was referencing angularjs and its built-in "$q" service that handles asynchronous fetching. I had not used angularjs before this interview (still haven't) and nowhere during the interview was angularjs mentioned by name. The question was also in no way leading to an answer assuming usage of angularjs either.

I'm left to conclude that he thought angularjs was synonymous with web development and that "dollar q" was the one and only way to fetch resources asynchronously.

TL;DR: how confident are we in these interviewer evaluation scores? Do we always presume superior competency of interviewers over interviewees?
Best Place to Get Up to 8% Off Wow Classic Gold for Macros in Wow Vanilla Making
WOW Classic Macros play an important role in WOW Vanilla, which some classes rely on them. Follow this short article, you will find out the what the world of warcraft classic macros is, and what can we do with them & how to get world of warcraft classic gold them.

What exactly is a Macro in World of Warcraft Classic?

A macro is a specific in-game command that’s inserted into the chatbox and it always starts with a forward slash (/). The forward slash is necessary because this is what separates macros from just typing a regular piece of text in the chatbox. For example, if you’d like to whisper to another player you can type “/w” in the chat. However, more advanced forms of macros are even used to enhance your gameplay by binding them to action buttons.

Something like the following:
·/say (/s)
·/whisper (/w, /talk, /t)
·/emote (/e, /em, /me)
·/dance
With macros, these commands can be used from action buttons, and many of them can be used at once. Each unique command goes on its own line and is written exactly as it would be typed it in the chat box.

That is the guide about WOW Classic Macros on WOWclassicgp.com, if you need to buy cheap WOW Classic Gold with the discount price, we also here to provide help for you.
Welcome to Join 2020 Valentine’s Day Promo on WOWclassicgp.com:Up to 8% off WOW Classic gold,WOW Classic Powerleveling and More for you Feb.10-Feb.19!
8% off Code WAT8 to buy from https://www.wowclassicgp.com/!

Long-Term Code:Up to 6% off Code WAP6 to buy wow classic gold AnyTime!
Repost from: https://news.ycombinator.com/item?id=20630279

Semiconductor industry is a very reliable canary for the long term economic situation.
Semi industry employs top economists. It is critically important for them to have extremely thorough economics research when they decide on their financials. Fabs cost billions, and whole fab complexes close to $10B. They take many years to construct and make running.

Financing plans for them have to be done impeccably, and account for way more than capital forecasts.

The financial outlook for a fab changes dramatically depending on how the world changes during its construction. The few fragments of such report done for TSMC I saw included everything down to political, cultural, and technological black swan events.

One of the most bizarre one that they actually managed to predict was the current regulatory and sociocultural "dotcom backlash".

For example, they see big server chip buyers like Facebook, Amazon, Google greatly scaling down their ambitions, and therefore they did not include the option for big reticle sizes in their lithography equipment buy list.
Next-generation of Image Formats for the Internet
https://youtu.be/RYJf7kelYQQ?t=692
It is not the same. I don't think there's a need to spend billions at all. The market exists. The technology exists. Drivers are already driving. I think it could be pretty easy to switch them to something that's a better deal for them.
However when you read it, you find that the writer talks not at all about their own accomplishments.
I think saying the system didn't fail relies an overly tight notion of the MCAS system boundary.
Popularity.

The ecosystem is bigger and there are more devs available.
I would suggest Google. There's a ton of discussion around California's AB5 that explains the issues.
A web browser doesn't need to "evaluate the efficacy" of an image codec. It either supports it or it doesn't, and in the former case it only needs to decode, which means it only needs to incorporate Apache 2.0 licensed code.
There is no free lunch with databases. I often argue the position that master-master is overrated, because you have to design your application around the constraints to see the benefits and avoid the pitfalls.

Same thing with CockroachDB Postgresql "wire protocol support". The fact that it only supports "serializable" isolation level when Postgresql utilizes Read Committed OTB should be a screaming red flag to just about anyone that you are in for some challenges on the performance front. Some well-worn modeling techniques are simply infeasible under typical workloads at that isolation level, for one.

Starting with bog-standard RDBMS you have to be deliberate to get great performance. Adding in extra, fancy scaling properties means even more considerations to take into account to maintain consistency while achieving gains.
Though honestly a web endpoint performing 1 select statement per request is a lot closer to reality than 10,000.

Does make it a little inconclusive though.
Yeah, the space of things I can do quickly on the spot from practice, and the space of things I can get really good at after a few hours of re-calibrating, research, and trial and error are worlds apart. If I were hiring, I'd 100% look for people who can self-teach above all other technical qualifications (above and beyond whatever the basic competency level for the position is).
How much do you need to be free? https://sivers.org/richand
There's a reason for that. It keeps you, as a cog, nicely oiled for the machine.
That's right. Sacrifice a little.
It is so so hard to give people a real grokking sense of scales of things. It's so easy to look at a satellite map and think, "wow look at that pollution!"

Until we get better at understanding scale, it'll always be so easy to exploit human fear.
I don't think paying for a podcast or newsletter is very common. Normally they make money with advertising or publishing job offers. Nevertheless, I would love to see more podcasts for learning languages (spoken languages), and newsletters with the latest news on the tech world such as acquisitions, new tool releases, lay-offs, growing companies, etc.
I give all the documents I receive from my bank, 401k, employers, etc etc to my accountant.
That's my point: what if USB-C, as a form factor, isn't suitable? And what if it would be a waste of space/materials as your connect was 10x smaller and more efficient physically too?

But you raise a good point: I'm forced to use the same physical interface (USB-C) so I can't innovate in the physical realm neither.

I can't innovate/test a new protocol if it requires a new connector and I can't keep the protocols in place but innovate on the physical aspects neither. Nice.
k m8
I don't understand what divorce has to do with my comment? I was talking about people who don't get along with their own parents and/or with their spouse's parents. Neither has any necessary connection to the topic of divorce. Plenty of people remain married despite the fact that they have a poor relationship with their own parents or with their spouse's parents.
Boeing's botched Starliner test flirted with 'catastrophic' failure: NASA panel
That kinda blows a hole in the argument from risk aversion, since they're the definition of risk aversion.
I noticed the bike thing when traveling to NYC recently. I assumed it had something to do with the city's utilization bill not applying to bikes.
Ah so just the fact that Boeing has been around for half a century doesn't absolve them from being subject to safety reviews? Nice to see some sense.
> I find it difficult to setup PostgreSQL without having a single point of failure and introducing downtime for things such as upgrades.

Amazon does this with RDS, and so can you.

This really isn't very tough to achieve with replicas. And for upgrades you just add a new replica with the latest version and promote it to master and replace the remaining nodes one at a time.
Interim List of Singapore Household Products for Disinfection of 2019-NCoV
I like how lieutenant sounds.

I think if I introduce myself as a lieutenant, people will think I am brave and action-oriented. But that would be silly because I am not a military/police officer. Words have meaning, just because engineer sounds cool you shouldn't call yourself an engineer unless you are and actual engineer.