skysight-inc/HackerNews huggingface dataset:
Roughly 10 years ago, I knew a guy who sold various exfil/border-extraction products to state actors including FireWire dongles similar to Inception (they may even be effectively the same thing, IDK). He specialized in memory dumping attacks on several platforms including Windows, FreeBSD, Linux and macOS.

The core problem is that buses should be authenticated, authorized, encrypted, and selective-/least-privileged channels. Exposing a memory and expansion bus to the outside world in the name of "convenience" is insane. A trusted set of components in the OS and in hardware should:

0. Be able to do a HwIDS checksumming of all firmwares to detect tampering.

1. Limit devices' ability to connect unless they are authorized by the user, much like a "hardware firewall" UI.. vaguely similar to say VMware Workstation/Fusion's dialog when plugging in a new USB device mixed with something like Little Snitch'es dialog for a process wanting to connect to a particular port.

2. Authenticate devices with public/private key certs that are burned in, a function where the device can answer challenge requests, and Signal protocol-like construction properly modified for PKI. Then, and only then, can a host talk securely to a device over an encrypted channel.
Somewhat related, I have a couple of tapes from the 80s that contained software for the ZX Spectrum (mostly my first attempts at writing code). They were written in a custom format by a custom device I no longer have, and of which I have very little information (I managed to track down one of the engineers who designed the thing some 30 years ago).

I have raw audio files of these tapes. I have managed to convert some other tapes in standard ZX Spectrum format to readable files I can load in an emulator. However, for the special tapes, there's no tooling available - all I have is a waveform.

If I had an array of bits, I could start trying to figure out the format of this thing. However, I have no idea how to go from a raw waveform to the zeros and ones it encodes. My best idea so far is to write a small program that looks for zero crossings, and depending on the timing output zeros or ones, but I suspect there might exist some software that does this already? I have next to no knowledge of signal processing.

Any suggestions on how to go about this?
Show HN: NestDrop – realtime VJ engine using Milkdrop
tech is such a double-edged sword for trans folks. i feel like it both affords opportunity to be recognized for skills but also carries a very heavy potential cost of rejection and ignorance from peers.
You could... but it's really not necessary after a quick glance at the still image and the brief instruction text. I think this is fine as it is.
Horses lose four of their toes in the womb
Cash App Probably Has Surpassed 30M Monthly Active Users
Both screen and tmux do this, and if you’ve never tried either of them please do!

Much easier to deal with “tabs” in a single terminal session, plus you can detach a session and reattach it later. Screen also has a nice feature that lets you essentially share a terminal session by reattaching it multiple times without disconnecting the other sessions (screen -x).
There was a wave of trashcan bombers in Paris in the 90's that's also why you have transparent or simple plastic trashcans now.
> He crashed into a barrier he had had problems with before.

This keeps getting repeated and is complete misdirection. The barrier isn't intended to save lives from a headon crash, its to improve the slim odds of survival. Had the vehicle not accelerated toward it, chances would have still been grim.

Imo, noone should be operating a vehicle in this mode at high speeds.
Note: Doreen also writes www.pocketputer.com, which I enjoyed reading.
Cars kill people. It's sad but welcome to reality.

Autopilot has killed no one. They were driving a car and taking on all of the responsibility that that requires and were involved in unfortunate accidents that happen literally every second of every day. Whether they were distracted by a bird that flew by or by their false assumption they could just stop driving the car entirely doesn't really make a difference.
> People incorrectly interpreting a word is their own fault and are in need of education.

Do you honestly think Tesla called it "auto pilot" with your pedantic, "technically correct" definition in mind? Or do you think they intentionally called it "auto pilot" to invoke a sense of "hey, this thing can drive itself!". I mean, in some of their marketing they even have a whimsical blurb about how "the driver is only present to make the lawyers happy".

Let's be honest here. Product naming is marketing designed to invoke certain emotions. Calling it "auto pilot" instead of "driver assist" or whatever most other manufacturers call it was very intentionally done.
Nowadays almost every garbage can has its own CCTV. Even single suitcases or bags without an owner are found quickly. Lockers are much more difficult to monitor.
Local governments and utilities can vary in competence. Best to still have some water storage and alternative heating methods. A good camp stove is handy to have regardless.
Maybe there's a hormonal aspect to this? Do you think that's possible, as you're getting to be - please forgive my noting this - past reproductive age [menopause and/or lower testosterone levels come around this age AFAIK].
An EPYC trip to Rome: AMD is Cloudflare's 10th-generation Edge server CPU
I've found this harder and harder over the years. My usual MOD was installing and configuring the caching-nameserver BIND package in rpm-based RHEL-downstream distros and MaraDNS in everything else. I've just kind of given up because reasons but I'm still very supportive of any of these kinds of efforts.
The fundamental problem with Tesla's driver assistance system is straightforward - it won't brake for anything other than a car rear end. So far, Teslas on autopilot have hit at speed at least two semitrailers, a fire truck, a street sweeper, and various other objects partly obstructing a lane. The NTSB has pictures of most of these.[1] In most cases there's no braking at all - the thing just plows into the obstacle at full speed.

Musk's decision not to use LIDAR is paid for in blood.

[1] https://www.ntsb.gov/news/events/Pages/2020-HWY18FH011-BMG.a...
I imagine it's because these are almost always public companies that need to show earnings growth. They are always trying to improve margins and their stock price. That's much easier than actually figuring out a great marketing plan to acquire new customers. And also far cheaper, too.
Something I started as a "Scratching itch" thing:

- new way to personalize a smartphone with Wallpaper which plays animation aka Greets you! at Unlock: see example videos at wakeanimation.org

Seeking validation of the idea, I posted on Reddit at /r/androidapps which routinely gets 700-800 people hanging out at any time. Only 3 replied actually, which I interpreted as lackluster interest, although comments were strong positives.

Since then I built this little page explaining the concept, but had difficulty getting more definite hands up- or hands down- signal.

The app would take a bit more work and testing before it's ready for release. So I really would like to get better handle if this can get traction.

Looking at monetization figures on SensorTower, the Android Personalization category is not anywhere near the Games; only one/two apps really make decent sales.

Appreciate any pointers or thoughts, if anyone have experience and ideas to try.
`tmux` is directly intended to replace `screen`.
Non-Monotonic Logic
I have a problem with it malfunctioning catastrophically at high velocity.
To a teenager with only a passing experience with electronics, operating a soldering iron is much easier than learning to flash an EEPROM :-)

And I only had one working, locked laptop and a broken one. The whole endeavour was mostly to inherit my father's laptop than to recover any data. What I did with my father's data is probably a story for another time.
Yeah, it's tough. But I think there are answers if we get creative.

I'd happily donate to a homeless person who was actively cleaning the street, for example. But for some reason people seem to prefer deciding who to blame rather than proposing solutions.
BART (Bay Area (San Francisco) Rapid Transit) removed trash cans in all underground BART stations for "security reasons" after 9/11.
How to brainstorm great business ideas
An interesting read, but the article comes across as an unhinged attack piece brimming with silliness. Better to get a take from a proper scientist with more balanced views.

Point number one of his list of 'egregious' errors is the idea that shorter sleep does not imply shorter life span, but all of the recently published meta-analyses make that connection convincingly (for the population sleeping <6 hrs). Anyone can look up these studies. And Walker does not advise people to sleep 9+ hrs (which is also thought to be a risk group on a population level). The author of the piece from the outset is quite evidently arguing in bad faith.

There is criticism to be had on Walker, he overstimulates his readers with fear-inducing statements which can definitely backfire.
Many of these places also have transparent bag-only trash cans, and people are sent to investigate suspicious abandoned packages.
Tesla gets more attention because they market "self driving" and other car makers don't.
> Realistically, Whirlpool just isn't going to be able to field that team to make their laundry machine resilient to malware attacks or a bricking update.

I think you're just using Whirlpool as an example, but they're not a great one. They have a fairly large IoT group that spans their entire ecosystem. (I'm a vendor in said ecosystem, and work with them on a weekly basis).

Your point is well taken, though: I work with many smaller companies on their IoT products, and they aren't in a position to manage their IoT projects.
> Godoc is broken because of it

That was resolved a while ago. Godoc supports modules[1]:

For those who are following this issue because you are waiting for module support in the godoc command (golang.org/x/tools/cmd/godoc), please note that it has been implemented in the latest version. See issue #33655.

[1] https://github.com/golang/go/issues/26827#issuecomment-55194...
Gates and Allen 1995 interview with Fortune magazine (1995)
No point comparing aircraft taxing to cars. The taxiway is a very well defined environment with the tower controlling all movements.

The only reason it isn't automated is because there's no monetary gain in doing so, the people you are paying is still sitting around for the same amount of time.
DNS over TSL (DoT) is a much better alternative to DoH, at least when it comes to the ability to be tracked.

For example, because it’s not using HTTP, there are no cookies or SNI to worry about.

More at https://news.ycombinator.com/item?id=22418005.
This is a great example of tax dollars at work. The Smithsonian is part of the United States government.
Fatuous Fanatics
Any Go developers with past experience in "heavier" frameworks have thoughts on giving it a try?

I enjoy working with "batteries included" frameworks currently, and value the approach of "Here's an ORM... here's a template language... here's an auth system... use or remove them as you see fit"

I've been told that the Go standard library is fully-featured enough that it can be considered a framework in its own right, but I haven't heard how converts from the Django/Rails world feel about the completeness of that "framework"
I think baseball is an extremely uninteresting sport. The pace of the game is very slow, as every batter is swinging for the fences, stepping out of the box, and there is usually no action for over 3 hours of "playing" time. What is the game today? On a time-basis, baseball is 99% players standing around waiting for something to occur.

Gone are the days of defensive brilliance and working players around the bases methodically with short hits, speed, and finesse. I won't miss baseball in the Olympics and I think it's rightfully falling to other much more interesting and engaging sports. The idea it is our "national pastime" is just laughable to me.

What's more, where I live, we had the Pawtucket PawSox try to extort Providence and RI for massive tax breaks and a premium parcel of downtown Providence land. Thankfully, Rhode Islanders called their bluff and let them move to Worcester. I'm glad my state acknowledged baseball is an incredibly slow-paced and yawn-inducing sport and we didn't want to pay through the nose for a stadium that hardly any of us would enjoy having.
I dunno man. Adaptive cruise control with "stop and go" functionally is pretty fucking nice when you are in traffic. Just because something is "muscle memory" doesn't mean it is zero cost. Adaptive cruise control really makes stop & go a hell of a lot nicer to drive in 'cause you aren't constantly shuffling between two pedals.

As others have stated, it makes you quite a bit less irritable when the drive is over. That shit wears you out.

Next time you rent a car, get one with adaptive cruise control and give it a try. It is very handy!
Log Anomaly Detection as a Foundation of Autonomous Monitoring
and what has the result of this been?
Came here to plug VCV rack!

That is so sad about Emilie, she's a genius and has produced some wonderful stuff. Her physical modules on the second hand market are hard to come by and command a high price, they are so renowned.
I was interested to read about the lockers. That definitely seems like a tractable problem, of the kind "This is something needed that could be built."

This website [1] has locker systems which could go outdoors for between 6-20k from what I can tell. Certainly seems like a raisable amount.

I'd imagine you would need an area to set it up, the support of local government and possibly a local business or shelter to get the space for the installation. Then you need to raise the 20k. Then you need to work with the management software to make sure it supports this use case. Then you'd need to do the work of maintaining it, which would probably be non-trivial...

Are there existing charities that setup locker systems like these? Is there a way to do it profitably? Charities could make a limited number of lockers work, whereas profit could make many more.

1 - https://www.luxerone.com/market/residential/
> Prison is a terrible environment by its nature and by design.

Usually, yes. But not necessarily.

A prison could be more like a residential college or a boarding school.

https://en.wikipedia.org/wiki/Halden_Prison
partisanship has got to be at all time highs. My comment is likely seen as me defending trump and therefore anyone who dislikes trump just automatically downvotes it regardless of context. 2020 is awesome
We've had fun digging into Milkdrop and making it a tool for VJ-ing.

NestDrop allows you to perform with high-resolution high-fps visuals which react in realtime to the music and then broadcasts the video via Spout. Since the Milkdrop engine is at the core you can easily bring in your own Milkdrop presets. Use any audio source to drive the visuals, even live audio.

I also curated a best-of collection of 9,795 presets which are organized into categories & subcategories.
https://thefulldomeblog.com/2020/02/21/nestdrop-presets-coll...
When I said "mostly gotten rid of monarchies", I include constitutional monarchies in that. The monarchs in at least most of those countries have approximately zero power compared with their historical antecedents.

If anything, they're a fine example of the kind of dealing realistically with our heritage I'm talking about. Actual monarchies have a track record I would generously call mixed, and perhaps more properly call horrific. But being half-evolved primates, humans seem to like having an officially recognized big monkey to rally around. So we keep the Queen of England around as something akin to a hood ornament on the car of that nation. It works, even if it's not particularly rational. But then, neither are we.
> Key part of this being "persistent or recurrent".

The key part is that it's related to the circadian rhythm and time keeping. That it's persistent and recurrent doesn't in itself distinguish it from other sleep disorders that may cause delayed sleep schedule, such as sleep-onset insomnia, or "bad habits" as you call it.

> Adding a distinction could help. Perhaps "voluntary night owl" vs "involuntary night owl".

If you want to address people affected by e.g. DSPD, and not "night owls" in general, it is perhaps just better to simply address them as such.
No, though people have contributed R and Python bindings already. So one may hope :) though Go is fairly unfriendly to binding from other languages (because of the runtime overhead).

We ourselves mainly work on the command line interface and concentrate on it.
How do they plan on doing that if they've downsized the group recently?
Why does that bother you? Putting this instance aside, I am not aware of a single person who believes legality defines morality in 100% of cases. Furthermore I have not met a single person who does not believe at least some illegal events were morally justified, for example most americans believe the american revolution was justified.

When you say things like I can’t understand why you would not think X, when in reality it’s very understandable why someone would think X, you come off as just trying to use a logical fallacy to argue that everyone should bend their morals to yours.
Socialeads – Discover the power of your networks
I disbelieve.

A complex application written with CLOS will generally not be portable to Emacs Lisp. An application written in Emacs Lisp that takes advantage of dynamic scope won't be easy to port to Clojure. A library in Clojure that wraps something in the JVM ecosystem won't work in Racket. And something written in Racket using continuations or Pict generally won't be easy to port to Common Lisp.

And even with closer Lisps than that, I have enough experience of "that should be easy to port" then blowing up over minor details to be suspicious. Sometimes it will be 10 minutes.
Sometimes it will be several weeks and incomplete even then.
The latter happens often enough that, the developer's confidence notwithstanding, the average is waaaay longer than the estimated 10 minutes. (The phenomena of tasks being rarely faster than we thought, but roadblocks can be unlimited in extent is generally true in programming. This is one of the reasons why our time estimates tend to be systemically low.)
Funnily enough, the risk of terrorism is why bins (trash cans) were removed from places like the London underground due to the IRA.

[1] https://en.wikipedia.org/wiki/Attacks_on_the_London_Undergro...
[2] https://www.citylab.com/transportation/2012/09/throwing-it-a...
Is there a comprehensive list of all such large collections that have been made available. I recall the Metropolitan Museum of Art released hundreds of thousands of images a while back.
> > Dict union will violate the Only One Way koan from the Zen.

> There is no such koan. "Only One Way" is a calumny about Python originating long ago from the Perl community.
If I were doing the above a lot, I'd write compose as a macro (or better yet a compiler macro). In that case, the only thing above that needs to be changed is the setq, which would have to be written as

(setf (fdefinition g) (compose f f))

Still different from Scheme, but some of the differences can be papered over with macros.
A babe in a bay window would be less shitty.

https://www.urbandictionary.com/define.php?term=Bae

Also, leave it to the viral memeverse that people will be soon randomly shouting "bae!" in comments instead of "first!," winning them equally-useless nothingburgers. SMH.
The xerox scanners had a setting to disable compression as well. People are lazy and don't enable the compressions. Although they are highly skilled, radiologists don't have time to inspect each image, so why bother looking at the raw originals?

The question is rather: does this feature improve diagnoses? Sure, the images look nicer now. But that's not why they are being created. MRI images are made for inspection by trained radiologists who are already filtering out artifacts. So is this tool better at this job, or does it actually worsen the ability of the radiologists to read the images like those xerox scans?

Maybe I'm a bit paranoid, idk. After all, diffusion MRI is already being used for surgical planning even though it has several shortcomings. But in that instance there are probably no good alternatives, while here the alternative is the trained eye of a radiologist.
Yes, you can run apache spark as a single node really easily. Then once its running you can fire up the Scala or Python shell that it comes with. After that, it is just a matter of issuing the statements to setup the data set then issues queries against it.
Whats sad to me is, if we knew that homeless people could get help and be taken care of, we'd know not to give things to people like this. But since society has decided to not put resources towards it, we can't make assumptions like that.
Petnet goes offline for a week, can’t answer customers at all
Ah, OK. I had originally parsed your sentence as it sucks to feel that you're underperforming and your clock is messed up as two separate clauses. On re-reading it, I can see that it can be interpreted as “it sucks to feel that you're underperforming b/c your clock is messed up”. Thanks for the clarification. I had upvoted your comment because I found the rest to be thoughtful and insightful.
Fair enough.

I think time is the big decider here. Swift is new and given Apple's relatively slow update cycle (annually versus quarterly or more often for open source projects), it'll be a few years before SwiftUI really matures and (hopefully) a community builds up around it.

This year's Apple Dev Conference (If it happens) should push things forward and hopefully increase the quality and quantity of documentation at the least.
HTTPS: //www.eurekalert.org/pub_releases/2020-02/afot-tau022520.php
I like to think of this as "attention arbitrage".

Bank fees are a good example. To you and I, an extra $3 bank fee is annoying but not worth allocating enough of our attention to avoid it. We aren't in the business of spending our whole damn day minimizing random bank fees.

But bank administrators are in that business. They spend their whole day trying to figure out how to maximize thieir profit and when they roll out a fee they can apply to millions of customers. There are enough customers hit by this they could summon enough total attention to push back, but the attention is divided among all those people and easily conquered. Meanwhile, the bank's effort to apply that fee is concentrated among a small number of people whose very job it is to do stuff like this.

So banks and other businesses discover cases like this where the quantity of attention they are willing to devote to something is larger than what any individual customer is, and that's where they squeeze.
And, also, drug enforcement.