skysight-inc/HackerNews huggingface dataset:
Improving AI's ability to identify students who need help
macOS provides an API called Hypervisor.framework for virtual machine managers like Virtualbox. It means they don't need kernel modules anymore. QEMU also uses it for acceleration.
Is this the end of any form of fuse style fs on macOS? (whether osxfuse, or an open source fork of an earlier version of it)

They say that future OS releases will no longer load deprecated KPIs, but they do not note the VFS KPIs as deprecated in their list.
Pretty sure this already exists
I don't understand this argument.

A man and a woman can decide that whats best for them is that he not take leave, but for the benefit other people he should take parental leave.

Even if he enjoys working, even if the mother has decided she wants to stay home, even if they need opportunity that work brings (such as the opportunity to get promotions). Even if there are a hundred reasons for a man to not want to take leave, even if taking leave is worse for him, his partner and child, he must take leave so that other people who he may never meet have an advantage.

Yes, encouraging a few weeks off work is good for the family, but forcing someone to take 7 months off of work is massively disruptive. Not even to speak of the disruption on small businesses, that may not be able to accommodate a person leaving for that period of time. If you run a business of 10 people, a single person is 10% of your workforce, and just due to the size you may not have staff to cover the missing expertise.

Forced long-term paternity leave is a system, that explicitly harms the outcomes of one group (working fathers) to provide benefits to others (working mothers, and non-working people in general).
Here's a text transcript from the WWDC 2019 session that gave an overview.

>A System Extension is part of your app that extends the functionality of the operating system in ways similar to a Kernel Extension but running in user space outside the kernel.

https://asciiwwdc.com/2019/sessions/702
I can't wait until I can uninstall University-mandated AV. I'm still waiting for Jumpshot to respond to my CCPA inquiry.
Standard ML uses the keyword fun to declare a function, so it didn't seem unusual to me.
6 months since the announcement of the entirely new not-seen-before thing with next to zero documentation to understand, develop an alternative (if it's at all possible) and distribute it to users.

How is that enough time?
>Anyone affected by this should be suing twitter for even collecting this information! My friend can give away my phone number because of this data collection.

If you made some agreement as to how your friend could use your phone number and 'sharing with Twitter' is a violation then you could sue them I suppose. Annoying as this data collection is, labeling information about you as only yours is incorrect, it's your friends and Twitters's (and Google/FB/AMZ/etc.) information too.
What if I need to format a FAT32 flash drive?
The peer review process has reached a point where it's more harmful than helpful.

What I want has following properties:

* Version control, I can contribute to other people's papers

* I can link to a sentence in another paper at some point in time so that when I read another paper, I can go to the location immediately

* Open, like arxiv (anyone can publish anything), however arxiv discourages uploading personal or class projects, which is a terrible idea, the best part about GitHub is finding someone's abandoned project that does something

* Full-text search

I think that most academic publishing startups approach the problem by indexing already published papers. I think that starting clean slate is achievable.
Caps leak a lot. Take it into account. I would probably use something like a very simple buck boost dc to dc converter to constantly charge a battery to provide buffer that will be enough to accommodate spikes.
And if you install by the usual method of "just keep pressing enter" you opt out of popcon. You have to make an effort to enable it.
Here is a sarcastic view that has elements of truth.

The old sales is model is consumers owned houses. The could then buy an 'appliance' to last many years for goodly-portion-of-monthly-or-annual-wage, on the promise it will 'save you time' and 'improve quality of life'.

The new model is consumers rent forever. They buy an 'experience' to last a second for ripoff-price-but-compares-well-to-drinking-or-theater-tickets, on the premise it will keep them unfocused and temporarily fulfil their deeply vacuous lives, thus staving off an expensive shrink or a higher does prescription of antidepressants.

In this new model, robots will not be owned by consumers, but will be public service infrastructure. This is because the consumers have nowhere to put them (don't own a home), move too often to justify purchase, and cannot afford a substantial outlay anyway.
You'd suspect right :) I've had a huge number of bounties from this as a result of finding the pattern first on Reverb.
Potentially, although OSXFUSE only works on old macOS versions now.
This big point and the big point that you can also be there for you partner. And the big point that you might, as a father, develop a tighter bond with the kid then you would otherwise.
Yes this is the thing everyone should be talking about. Think of any of the bigger Twitter posters on Hong Kong. If anyone of the ring leaders didn't decouple their twitter handle from everything else they will have a giant bullseye painted on them by CCP
I've only used FB events among friends for big events (Lets all go to Vegas!) and even then most of the coordination happens in a chat group.
Funny how libertarians and conservatives are all in favor of big government when it defends their particular private interests. Socialism for the rich, capitalism for everyone else as the common meme goes.
"If you go look at an airplane cockpit, where actual research was done into how to optimize user interfaces so that the pilot will not be confused under stress, you will see that there is a separate button for everything. There is no "shift key", no different modes. If you need to use it, there is a button for it. To someone who has not learned how to use that UI, it appears alien and unfriendly. But the the trained pilot it is the pinnacle of perfection. "

My design professor used cockpits as a example of bad UI. Grown over the years and understood only by repetive drill and not at all intuitive.

So there might have been research to better it, but I doubt there was a major redesign, or was there?
When you see how small some of these devices are it makes you realize how easy it would be for a malicious actor to bug just about anything you own. A simple cell phone charger becomes a listening device that could have an LTE modem hiding in it.

People are worried when they find a raspberry pi sitting in the network rack - and rightfully so - but fail to realize that you can achieve pretty much the same thing by hiding in plain sight.

Imagine how much you could fit into a 6-port commodity surge protector.
Security experts also decompiled the app: https://www.vice.com/en_us/article/3a8ajj/an-off-the-shelf-s...
I thought this was going to be a service to schedule robocalls to your phone:

Robocaller: "Hello is this $FIRST_NAME $LAST_NAME?"

Happy customer acting surprised: "Why yes it is. May I ask who is calling at such an hour? I'm hanging out with my friends."

Robocaller: "Yes this is $AUTHORITY. We need you to do $MANDATORY_TASK immediately.

Happy customer acting surprised: "Oh my! Okay, I'll be there soon."

Happy customer to friends: "Guys, this is so crazy, but I've got to run!"

Then you leave the party or whatever. Side-effects: you can't sleep at night because you're thinking about how weird you are.
Ian Lance Taylor – Linkers Part I
Someone else also commented that it won't save you if the wave is big enough. I'm not contesting that. I'm just saying that gives you your best chance.
Indeed. In my experience and other researchers I know, often rival groups will try to block your research from getting published in Nature or Science by asking for unreasonable follow-up experiments. It's sadly very political. Hopefully this will improve things.

I personally know the current Nature chief editor and she totally agrees with my points above. In contrast, I have always found math & CS journal reviews way more fair and rigorous.
Yes and no. It's a cost-benefit deal. Just because they _can_ (and they surely can), doesn't mean it is cost beneficial to do so now. It takes CPU time (and therefore money) for each encode they do. If one takes much more resources to do, it may not be beneficial to do so yet. I originally posted my comment wondering if there had been some encoder breakthrough that I had missed that had made AV1 a viable option finally. Looks like there was, but it's still not nearly as good as it needs to be fore widespread adoption (looks like it's still 30x slower than a comparable HEVC or VP9 encode). So I guess it comes down to: are they saving enough on downstream bandwidth to balance out the CPU time for the encode? Releasing it would suggest yes, or they see some benefit to pushing the standard into the mainstream now rather than in six months regardless of the cost to them.
Learn a foreign language such as Spanish or Mandarin, or whichever language you fancy and stick with it until you're conversational. Learning a new language opens you up to other ideas and cultures. Being bilingual should be a prerequisite -- our culture would be more accepting of other cultures instead of becoming a xenophobe.
He raised awareness, though. That's better than all the governments and news media organizations of the world ignoring it. If he should comp people for his actions, what about them?
There's a whole slew of lessons to learn from this. Leaving dead code in your system and then deciding to repurpose it. Manually deploying with no verification. No checks in place to disable a system during crazy behaviour. No real alerting system. No procedures in place for when a system goes wrong. No audit log to refer to when rolling back.

The lesson from this article is kind of funny

>It is not enough to build great software and test it; you also have to ensure it is delivered to market correctly so that your customers get the value you are delivering

While true, I don't see any indication this was great software or that it was properly tested.

>Had Knight implemented an automated deployment system – complete with configuration, deployment and test automation – the error that cause the Knightmare would have been avoided.

Or to put it another way - had Knight implemented a higher quality deployment system than the quality of any of their other systems, they might have avoided this issue.

These stories are never about a single thing gone wrong. The whole point about critical systems is that you should need dozens of things to go wrong for them to fail, and then you should fail safe.
We need an indexed and searchable startup graveyard to prevent this problem in the future.
Hey, really specific question regarding your deployment. A teammate of mine reported difficulties with the .net SqlServer database driver establishing connection from a linux client (container instance based on the public .net core image) to a SqlServer instance (on windows) . Are you familiar with this problem?
I think moving our systems over to .NET Core on linux is the future, but this one experience has somewhat soured the idea for some decision makers and the team managing our db.
Or you have a small business. Not every company is a 10,000 headcount multinational. Over 90% of small business employ fewer than 20 people and small businesses make up 30% of the economy.

Realistically, 1 person missing from a small business can mean 10% of their workforce is gone - and due to the size of the company they may not have people to cover the missing staff.
Was wondering the same thing. I'm guessing you'll always be able to install them as long as System Integrity Protection is disabled.
Depends a lot on the compiler and target arch. You'll miss out on a lot of stack accesses, or add too many. You don't get around looking at the final executable if you want good results. And for more complex targets, in the end you need to know what the pipeline does and how the caches behave if you want a good bound on the cycle count. Of course assuming you're on anything more complex than an atmega, for which op counting might be enough. I work in the domain; lots of people do measurements, which only give a ballpark but are bad since you might miss the worst case (which is important for safety critical systems, where that latency spike in the wrong moment might be fatal). Pure op counting is bad since the results grossly overestimate (eg you always need to assume cache misses if you don't know the cache state, or pipeline stall, or DRAM, or...). Look at the complexity of PowerPC, this should give you a rough idea what we're usually dealing with (and yeah, I'm talking embedded here).

To me that "sometimes" feels like "I can wrestle some bears with my bare hands, e.g.a Teddy bear" ;-)
It started out as an interesting history lesson told in a narrative style, but then it went off the rails and started talking about why "we" chose some random documentation platform. I'm confused
God that website is terrible. It is so incredibly redundant about the value of infinite power, as if anyone would need an explanation as to why infinite energy would be useful, but gives so little detail or explanation about what the device actually is.
That has never required a kernel extension.
I'm pretty sure no one can force you away from your laptop and colleagues, but also, no one can force you to work. It's a protection. I like it.
Not really, they're still proportional to the average wave height. So while you could always be at risk for rogue waves, the sea has to be quite rough before a large vessel need be worried about them.
I wonder what the solution to this sort of thing is. Open source hardware maybe? Force publication of firmware for all hardware sold?
Glade plug-ins are innocuous, roomy inside, and have convenient constant 120v.

Take a peek next time you're in a semi-public space if there's any that are suspiciously not-smelly.
I'm a little bit confused. My understanding (from General Relativity) is that time does not exist and the universe (or reality) is a 4D construct; and that our perception of the arrow of time is coming from our consciousness?
Why is the title sensationalised. There is no "injects backdoor into their chips".

It's a debug console on a busybox build. One would have to be on the same lan to exploit it.
I'm assuming this is an app with a GUI. I wish there were screenshots showing what it looks like.
Are you offering a free stress test? :)
> Redemption is to just try not to be a jerk.

Motte and Bailey.

Telling people you aren't a racist and didn't mean the thing they consider to be racist in a racist way is in no way denying the other party's feelings are valid.
it's known as a "bare metal hypervisor" and is the most commonly used hypervisor. If you look into things like vmware ESXi you'll see it in action.

https://www.vmware.com/products/esxi-and-esx.html
> Likewise with books, which also carry with them a 30-50 dollar investment if I can't find them elsewhere.

Not sure if you're aware, but a yearly membership to acm.org (Association of Computing Machinery) includes a subscription to O'Reilly's library of programming books. It doesn't have EVERY programming book written, but it contains quite a bit.
This is yet another reason to move away from MacOS. The blocking of 32-bit apps, a requirement to have Apple notarize every application, and now the removal of kexts.

If Apple still made great software and even better hardware then I wouldn't care, but that hasn't been the case for years.
This is Part I of a series of articles on linkers, by Ian Lance Taylor, the author of Google's 'gold' linker.

https://en.wikipedia.org/wiki/Gold_(linker)
Kernel extensions being deprecated is not news (it was announced at WWDC). The only real new info in this post is that 10.15.4 will pop up warning dialogs when loading the certain types of kexts that have replacement APIs available.
Is this Bloomberg and SuperMicro all over again?
PHP Past and Future
Isn't this just telnet? Like last time people claimed huawei "injected back doors", nothing is being injected by them, and these are not backdoors, they are front doors, standard festures etc? But dressed up in a way to make it look scarey to someone non-technical? Sorry if I'm missing something here...
Without ruining the main use case - is there some way to sterilize or nuke things like a basic cell phone charger when it should have no radio-frequency capability?
Hells yes.
I want to be wherever you are! Here, you make up a plausible-sounding excuse, and it's up to the other person to guess whether you're just being polite or not, based on whether you've made so many excuses that it's statistically improbable that they are the truth.
Though, "on the same LAN" becomes much more of a problem when you consider insecure 'smart' lightbulbs and appliances everywhere.
Am I the only one who just doesn’t understand what there is to be reverent about? As I see it, time is simply an imperative, without it there wouldn’t even be a reality for nothing to exist in as existence itself is dependent upon the arrow of time. I dunno what I’m missing, but I feel similarly about this as I do when people try to explain things like spirit/spirituality. I just don’t get it. Am I missing something?
I know I am probably too forgiving (and generous and honest https://www.pinterest.co.uk/pin/439593613603376622/) but dumb companies have left backdoors in everything from heart monitors to factory equipment.

I understood that the Huawei threat is not "dumb shit" but "clever shit we don't notice until the cyber portion of the combined arms full scale attack is launched"

If we cannot trust one hardware company we cannot trust any of them. Open source hardware seems like the Nash Equilibrium for this problem - everyone finds a way to make sure everyone can verify the hardware in their network...
If you've been unhappy with hardware and software for years, why haven't you moved to another platform? At least your OS if you didn't want to buy new hardware.
Depends on how you go about it.

In the 1800s, Chicago was lifted up from nearly being at the same level as Lake Michigan: https://en.m.wikipedia.org/wiki/Raising_of_Chicago
Thank you for clarifying! I know quite a lot has supposedly shifted. Will update my original comment.
This paper (2013) might be of interest
"We demonstrate in practice how hackers can take control of navigation systems and, in the case of a wide distribution of floating car data, can actively control the traffic flow."

https://media.blackhat.com/eu-13/briefings/Jeske/bh-eu-13-fl...
Have not yet read the article, as Facebook is blocked at work, but I would guess that this is mostly the application of steganographic techniques, to hide known patterns, in datasets that are likely to be stolen/borrowed for training.

Then observe the outputs of said models to try to discern related patterns.
Let’s Quit Fetishizing the Single-Family Home
Nothing about Xnu leads me to believe they are pursuing a bona fide micro-kernel architecture. This doesn’t really indicate anything in that direction either. They’re just doing the typical Apple thing of enforcing a “one proprietary port, one licensed plug” policy.
No, there is proof of concept code.

from the article: https://github.com/Snawoot/hisilicon-dvr-telnet
Yes, anything related to the life on society and how we regulate it or not is "politics" and a particular political subject is pushed by any individual or group is a "political agenda item".
If we act like politics is a dirty word, only the worst of us will involve in politics.
I thought this was just going to be another humblebrag like all that cringeworthy impostor syndrome stuff last year, but this has some good advice. If it did something useful, then certainly someone else can learn from it and you can be proud of it, no matter how far it is from what you do nowadays.
Looks like I got it sorted out, may have been user error :)
Vietnam grapples with an unexpected surge in solar power
> Your line of conversation was spiraling towards the philosophical underpinning of knowledge.

Actually, this is a fundamental flaw of some counter-arguments to my line of argument. I'm pretty clearly undermining the idea that there exists an authority that can identify the social ill of "purity spirals". I'm not making any epistemological claim. But people like the commenter that "pushed me over a cliff" (lol) seem to quite often think "well, you're saying my claim that the left-wing is a cult has no objective basis, therefore you don't believe in any objective basis for anything! HA!"

The point I'm making by saying Quillette is a "cult" is that my claim it is a cult is as credible as Quillette's claim that purity spirals exist and are cults. Shove

> Appealing to the authority of Jacobin and Chomsky won't get you back.

Appealing to authority by linking Quillette articles is just as fruitless. My entire line of argument is that linking to these articles like they somehow identify an objective social malady is an appeal to authority, with no basis in actual authority.
And one could easily walk round many building just plugging them in. I mean how many people would remove a glade-plug-in just in case Dorothy from accounts likes the smell? Dorothy might just replenish the scent dispenser every six weeks.
I think more than 0.15% of people feel guilt/anxiety about wanting to cancel plans last minute. I don't have any data to back that up, but it is a fairly common emotion.

999/1000 people feel nothing when they have to renege on a social engagement?
That must be the magic of Windows in action. Software still running after 15 years.

I have to do some maintenance or decommissioning of very old apps in an old bank. I find anything Linux and C or C++ related is the worst, because the system libraries themselves are unstable. Applications fail because of .so dependencies breaking, both system libraries and application libraries (themselves forming a tree of dependencies). It can be extremely hard to rebuild and relink the software with the whole chain of dependencies for the current platform.

Linux executables die along major OS releases every few years, but Windows binaries can keep working for more than a decade easily.
Yep, how many people actually have a lan where every single device that ever connects is fully secure and trusted.
which is not so bad. your company was going to get eaten alive by the others that did pull it off, anyway.

for the same reason that an otherwise viable bootstrapped company gets sent to a miserable death by VC-funded competitors, your VC company that doesn’t perform at T2D3 will be outspent and eventually destroyed by the ones that do. If you’re in a competitive space, you need to spend enough to achieve T2D3 ... or else
> is there some way to sterilize or nuke things like a basic cell phone charger when it should have no radio-frequency capability?

If you want Fast Charging, short circuit protection or similar, then no, it has to have ICs and those could do a lot of things that are hard to detect.
The U.S. government is investing millions to turn DNA into living hard drives
All that is left is to go under the wave.
This "debug console" is on networked IP cameras (many of which are open to the web) and available through a hardcoded password. I don't see a convincing argument for malicious intent, more so a dangerous level of incompetence from a company who should know better.

Unfortunately Xiongmai is not an outlier for subpar security practices on IOT products, doesn't make it any less bad though