skysight-inc/HackerNews huggingface dataset:
Listening to her talk about her experience ( https://www.youtube.com/watch?v=p_OjhG5hFhc )

- she may or may not be generally paranoid, I would not be surprised either way

- she called the police because she felt surveilled and pursued

- her initial treatment by the police is really inappropriate if it happened as she describes (being cuffed behind her back on the ground, being pushed onto the floor in the psychiatric clinic headfirst) and I still would not be surprised if it happened that way

- I would not be surprised if this is unfortunately 'normal' for police encountering who they think of as a 'confused' person

- Aside from the way she described being treated by the police her experience might(!) be reasonable treatment for a person suspected of being paranoid with potential future self-harm. I do not know how this diagnosis is determined and whether it is accurate in this case.

- she seems very focused on herself and a conspiracy, talking about how 'of course' each of the police and the doctor/psychiatrists and everyone in Germany and everyone in the world knows her (I did not know of her for one), and that the receiving doctor/psychiatrist took ten minutes to arrive as he/she still had to receive orders 'from the top'

- the strongest indicator for being paranoid is that she states that the people in Germany and this world should wake up to this fake pandemic, which is orchestrated and that not a single person has died yet in Germany. The sincerity with which she states this reminds me of other conspiracy theorists on the far right.
A productivity expert says coffee naps – 'nappuccinos' – changed his life
Let me add to the list:

- Trying to test isolated components with a mock Redux store

- Figuring our how to set up tests for ‘connected’ components

- The long walks I go on after looking at an actions file that I need to work with

- The long walks Redux has made me go on
Covid-19 has led to billions of people facing enhanced monitoring
Attempts to criticize China are just like attempts to criticize Israel. No matter how precise you are with your language (ex: people have issue with the government apparatus of CCP and not the Chinese people) you get called a bigot/racist. Same way you get called an anti-semite if you speak out specifically against the actions of the government in Tel Aviv and not the Jewish people.

The really interesting question is whom does such deflection benefit? Are there really a lot of racists pretending to care about a Muslim minority to criticize China and thus indulge in their disgusting views? Occam’s razor tells us that the answer is likely: “no”.
I've been looking at this for awhile and it's super cool! As a person who's used Terraform extensively and has ran into a lot of issues with it's declarative, non-scriptability (at least before 0.12), pulumi seems great. And it's also great its able to wrap any Terraform-compatible provider out of the box.

One question I have for anyone who's used it or the team if they're here is how they convinced their company to use it? Last time I checked pulumi was a small company with only 20M in funding versus hashicorp which was more established. What happens if the pulumi team runs out of money and we've moved all our infra onto pulumi?
Rising between-workplace inequalities in high-income countries
http://lukecall.net/e-9223372036854587400.html

It is generated from my own extensive notes, using a tool linked from the homepage: http://lukecall.net

General discussion welcome if you like. I especially appreciate feedback (see site footer for example) on the usefulness and/or navigability & skimmability of the way the content is presented. (Font is the html default, so can be configured in the browser to suit one's general preference. Putting things all in one document would make it huge, and it would be unclear at any given time what should be included vs. omitted as the links go deep in many directions.)

Thanks.

(edit: Is there a link visble to you in my profile? I am of course happy to put it here also, but was only curious if that works as I thought :) All the best to you.)
Since I do almost all my software development in a Unix environment, usually I check the toolbox to see if there is already a program that has nearly the functionality I want, and if so then I cobble together a shell script. Sometimes (as with the Sudoku solver) it will be necessary to build a new component, and for that I usually use C since I am comfortable and experienced with it. (Also, if coded in Standard C, odds are that I can install it on whatever platform I need, with little or no adaptation.)
Wait steam client does not even use https??
How does office culture help middle management more than online work? It seems to me like removing in-person interactions would only increase the ability to gatekeep.
If you are referring to the idea that children need to spend their precious school hours only on "useful subjects", then you ought to consider that many young people these days mainly learn English through osmosis while watching television programs etc. at home. So, whether time during their school day is spent focusing on aspects of their native language or not doesn’t make a difference for their ability to communicate internationally.

As for "Efficient communication is probably the most important factor in peace", that kind of idealism doesn't hold in practice. The peoples of Yugoslavia could efficiently communicate with each other because they shared essentially the same language, but it still didn't stop them from descending into brutal warfare. Even today, peoples of two antagonistic countries can often communicate with one another in English, but they go on despising each other nevertheless.
It's impossible to extrapolate what is best for everyone. Working from home is a great thing for me especially if they set core hours where everyone should be available for 4 to 5 hours a day. Trying to track down Morning Bob and Nighttime Nancy is a drag for us people who like 10am-6pm days :)
Technical Overview of Secure Execution for Linux on IBM Z – IBM Developer
BSD sockets are weird in that the first struct's (sockaddr) size wasn't big enough, so APIs all take a nominal pointer to sockaddr but may require larger storage (sockaddr_storage) depending on the actual address.

/*
* Structure used by kernel to store most
* addresses.
*/
struct sockaddr {
unsigned char sa_len; /* total length */
sa_family_t sa_family; /* address family */
char sa_data[14]; /* actually longer; address value */
};

/*
* RFC 2553: protocol-independent placeholder for socket addresses
*/
#define _SS_MAXSIZE 128U
#define _SS_ALIGNSIZE (sizeof(__int64_t))
#define _SS_PAD1SIZE (_SS_ALIGNSIZE - sizeof(unsigned char) - \
sizeof(sa_family_t))
#define _SS_PAD2SIZE (_SS_MAXSIZE - sizeof(unsigned char) - \
sizeof(sa_family_t) - _SS_PAD1SIZE - _SS_ALIGNSIZE)

struct sockaddr_storage {
unsigned char ss_len; /* address length */
sa_family_t ss_family; /* address family */
char __ss_pad1[_SS_PAD1SIZE];
__int64_t __ss_align; /* force desired struct alignment */
char __ss_pad2[_SS_PAD2SIZE];
};
I've always liked Weird Al's music but feel like most of his biggest hits were made during an era of "monoculture". As sources of entertainment continue to grow, it seems like it will be increasingly difficult to create a parody that resonates with as many people simply because people's entertainment preferences are so much more varied than they have been at any point in history. That said he's very talented and I'm sure he could be successful creating something other than parodies if he wanted to.
A similar plan was abandoned after it was launched in 1994. Government documents and media have been available in both versions since 2011.

So presumably this new announcement is actually banning the modern alphabet? The article isn't clear but that's implied as apparently supporting both will end in 2024. Adding an option is a very different proposition to removing all other options in my option but maybe the government are just announcing a plan to keep both and doing a really bad job at communicating that?

https://web.archive.org/web/20111101013639/http://ubpost.mon...

Per wikipedia, the script is not well supported. This is partly because letters have different forms depending on their position in a word. So "academia" would need to use 3 different symbols for all those "a"s. It has 26 actual letters but a lot more symbols to learn to allow for that.
And (like a lot of alphabets) it's actually based on Egyptian hieroglyphs. So it's an import too!

https://en.wikipedia.org/wiki/Mongolian_script

Per the article, 3m (of Mongolia's 3.17m) people use the modern alphabet. So this will be a huge disruption for 95% of the population of Mongolia.

There is no current way to translate (transliterate?) names directly from one to the other. So that will make ID documents either insecure or useless if they're in different languages, which they will have to be since we are talking about documents already printed...

Plus the time and effort to learn the new alphabet is time and effort spent NOT learning useful skills in a modern economy.

The only advantage seems to be to communicate with Mongolian Ethnicity people in China who are more likely to still use the old alphabet. Oh and something about throwing off the USSR?

I really hope this is just a badly translated announcement that no action will be taken...
It's amazing what a few blankets and a USB microphone will do for audio quality.
OnePlus 8 Pro review–The best flagship of 2020, even if it is more expensive
> Having seen rights being eroded, trampled, mocked, I have realized that we do not have any effective rights. They are a privilege bestowed by those in power.

I think this is a perspective encouraged by those in power. I think that a slightly different, but truer analysis is that our rights are always there, but often violated.
Ask HN: If things have to occupy time to exist, nothing existed until it did?
One of the big problems is the reports are bad. Like some person just shotgunning the output of an automated script to every company in there without really understanding. Or we get a lot of “I can squat an s3 bucket with the company name in it and make it public” - no way! So filtering through to the good ones takes too many hands, and often times they’re like this one where it’s like...yea technically true but an acceptable enough risk.

But occasionally the “oh f#%^” report comes in...
My productivity is up by at least 50% because I have less meetings and less people dropping by my desk unexpectedly
> Say you'll be disclosing in 90 days if $company doesn't issue a reply publicly.

That's blackmail. An expedient way of getting your door breached.
So What Is Protein Folding, Anyway?
it's going to be tough to top the original soundtrack by Toto... see https://www.amazon.com/Dune-Original-Soundtrack-Recording-To...
ELF is very much not part of the C standard.
This was true when it was first released, but they now allow you to bring your own backend store.

https://www.pulumi.com/docs/intro/concepts/state/
I was recently hospitalized for a suicide attempt due to years of chronic pain and depression as a result. I was not allowed to die. I get no help to live after being dumped back out when "stable" medically. I was not allowed any visitors due to the virus and it was very detrimental to my mental health. Now I am here alone trying to piece together a future. Nobody revolted...and I am powerless to. Frustrates me so much there wasn't help to live...but I am told I have to. Trapped in a room with no doors or windows and on fire. I don't see this "help" everyone says there is to get. Just people wanting thousands of dollars from me that I cannot pay for nonsense.
How do viruses cross over from animals to humans?
That makes sense. I can't assess your argument given my lack of understanding. In my own experience though, deriving things from first principles, even if they've been re-invented countless other times, is a good way to build up the intellectual super structures necessary to think new thoughts.

I think we should separate:

- Wolfram acting as though he thought of the ideas first

- Wolfram being underinformed so as to undermine his own progress

People typically get bent out of shape on the former, which is in evidence, and is a problem of politics. The latter, we can't prove or disprove unless you see him drawing significant conclusions that are falsifiable via current understanding. If that is the case, then I'll yield. But I suspect Wolfram may be more well read than he lets on, but for whatever reason, has a dysfunctional personality trait where he sees his own wrangling with ideas already put forth as a form of authorship, when he incorporates it into his long chain of analysis that he's been doing for decades. A potential analogy is one of "re-branding" - but in this case it's re-branding as part of an internal narrative, one where in the final chapter, Wolfram sees himself as the grand author of the unified theory. In that mental model, each idea he draws from is not one he cobbles together into a unified form, but instead, ideas he incorporates and reinterprets in his own bespoke system and methods, leading him to forget that the core ideas are not his own. (I'm definitely reaching here, but trying to to highlight how the two things above could be in fact very materially divergent and consistent with the evidence.)
I think an OCP is rather something that you couldn't possibly have expected. I'm not sure that this is the case here.
I'd say the source of any research is an interesting data point without assuming additional intent
Scala build tool. Build files are a mix of scala code and dsl
SaaS for Lawyers
It is 2020. You are looking at a series of projects your company has teed up. All are greenfield efforts - no legacy. What would be the attributes of a project that would have you recommend C as the programming language?
When the acknowledgement packet suddenly comes from a new IP address, referencing an existing connection ID.
> the idea that voters are "adults" does not hold water

Speak for yourself.
GitHub is now free for teams
Ejercicio Para La Uni
A turing machine cannot produce randomness, non-determinism.
The software is vulnerable to a MITM attack. There's no reason it should be.
Universal Single-Key Accenting
“Injustice anywhere is a threat to justice everywhere. We are caught in an inescapable network of mutuality, tied in a single garment of destiny. Whatever affects one directly, affects all indirectly.” ― Martin Luther King Jr., Letter from the Birmingham Jail, 1963

Pretty apt for our global society, too.
I'm pretty sure that this would violate Bell's theorem, and I'd love an explanation of why it wouldn't. It looks to me like a system of local, hidden variables, unless there's some sense in which changes in the hypergraph can propagate faster than the speed of light.
Ejercicio para la uni 2
cositas varias
> Imagine walking into Home Depot and discovering there are about 100 'standard' styles of sinks, faucets, fixtures, pipes, fittings, etc. all with varying degrees of support from none to complete for interoperability

[severe emotional trauma flashbacks to previous contracts]

I've seen some heroically constructed Gaudi-esque crystal cathedrals of systems and every one of them could have been replaced by a toolshed and done the same job.
I would say that there is a lot of concern in the committee about how compilers are optimizing based on pointer providence. There has been a study group looking at this. It now appears that they are likely to publish their proposal as a Technical Report.
UCS-2 is a bad choice -- it fails to represent most unicode characters. If you meant UTF-16, that's also a bad choice, because UTF-16 is also a variable width encoding, forcing programmers to use a some for of "extra-wide char".

I'm of the opinion that wchar_t should become an alias for char32_t.
I'm sorry but you are reducing a career to a mere interest.

Changing hobbies is not the same as trying to change what you did for a living for the past decade.
It's really not the same things - in some lights that story makes the CCP look good. Not in a good-vs-evil way, but it makes it look like they have far-reaching powers, and are an entity to be feared and respected.

A story about CCP leaders becoming filthy rich off the backs of the oppressed majority though, that just make the CCP look bad.
The point of uintptr_t is that it's an integer type to which any pointer type can be cast. If you introduce a new class of pointers which are not compatible with uintptr_t, then suddenly you have pointers which are not pointers.
The vulnerability, on the high level, is that the Steam app doesn't verify that the store page comes from Valve, meaning that if you own a Wifi hotspot you can potentially scam and cheat the users of the Steam app. This wouldn't have been possible with basic use of SSL by the app.

That's what makes this bizarre – the negligence of developers, the triviality of the fix and the complete lack of understanding from people who are supposed to be reviewing security issues.
I think Valve and HackerOne handled this poorly, but I think the author is partially at fault for repeatedly failing to communicate the issue clearly.

I worked as a penetration tester for a while, and I had trouble understanding what the author was saying. The headline should have been that the steam mobile app makes requests to the plaintext HTTP URL (http://store.steampowered.com) instead of the TLS-authenticated URL (https://store.steampowered.com). Without TLS, an attacker can impersonate the Steam store server and steal credit cards or trick users into installing malicious apps.

The author reported this as:

>The vulnerability is that an attacker can perform a man in the middle attack by spoofing an HTTP request pretending to be from store.steampowered.com. While the client does check for an eventual HTTPS redirect, it can redirect to an HTTPS URL.

There's so much ambiguity and missing information in that writeup:

* Who does the attacker send an HTTP request to? I think the author meant to say an HTTP response.

* In "it can redirect," does the word "it" refer to the "the client" or
"redirect?"

* I think "it can redirect to an HTTPS URL" was supposed to be "any HTTPS URL."

* Why is the client vulnerable? What should they be doing instead?

Also, the author's exploit scenario is to just make the Steam app load his portfolio page, which might have further muddled things. It sounds inconsequential that an attacker can trick Steam users into visiting a developer's portfolio page. It might have been a clearer report if the proof-of-concept redirected to a website that looked like the Steam store but had a warning saying, "I'm an evil copy of the Steam store that will steal your credit card number."
Show HN: Thousand – keep track of your home workout
> $10k/y seems very high. Are parking fees $5k/year or something

At $10/work-day parking ($2,600/year), the remainder is under 13k miles at the IRS standard mileage rate, which is presumably a reasonable actual total expense rate.
They will make more $ as tourist destinations and cottage ag industry. Modern olive groves are planted for mechanization of harvests. Olive trees can go on for a hundred years even and a tree that old is no longer profitable. esp for the demand we have and for cost of labour involved. Automation will at least secure local production profitably.
With work from home and gyms closed, I found it hard to stay motivated and get in a good workout. I started doing the Thousand workout (1000 total reps of 9 bodyweight exercises) and thought I could learn some mobile development by building an app to keep track of my reps throughout the day.

Happy to get any feedback about how I can make the app more useful and hope it gets you motivated to stay active!
I get 1ms to both.

NextDNS will hopefully keep rolling out new sites.
Backspace-cut-lookup next variant-paste is all it is.
Anyone want to hack keyboard drivers for other OSs?
This is a common misconception (or poor way of phrasing it, sorry). Compiler implementers don't go looking for instances of undefined behavior in a program with the goal of optimizing it in some way. There is little value in optimizing invalid code. The opposite is the case.

But we must write code that relies on the same rules and requirements that programs are held to (and vice versa). When either party breaks those rules, either accidentally or deliberately, bad things happen.

What sometimes happens is that code written years or decades ago relies on the absence of an explicit guarantee in the language suddenly stops working because a compiler change depends on the assumption that code doesn't rely on the absence of the guarantee. That can happen as a result of improving optimizations, which is often but not not necessarily always motivated by improving the efficiency of programs. Better analysis can also help find bugs in code or avoid issuing warnings for safe code.
https://bitbucket.org/knight666/utf8rewind/src/default/
While I was primarily referring to things with a backend, trying to redesign these "everything but the kitchen sink" apps is actually an interesting task.

First of all, Photoshop isn't a toolbox. It's a tool, but with plugins. The real-world analogy would be a KitchenAid kitchen machine, where you can attach awkward tumors like a spaghetti machine or entire food processor to their power take off. The kind of accessories that, after purchase, make you look long and hard in the mirror, trying to figure out just when it happened that your life fell apart.

A toolbox, on the other hand, is just a vehicle for making tools easily available. That, and being a blunt weapon in emergencies.

If I were to imagine a universal image toolbox, I'd imagine it as system that can visualize a stack of buffers. Then, it would be able to launch other applications, providing access an API to access and manipulate the buffer stack. That's all.

These applications can provide your usual floating toolbox UI's just fine, and nothing should stop it from having the same UX as Photoshop, but plugin-less. Depending on things, these tools may use usable standalone, for bulk use, command-line use, from different toolboxes, whatever. You'd be able to swap out features that are otherwise Photoshop built-ins, as they're just another application here.

This distinction between plugins (i.e. extendable tool) vs. toolbox (isolated tools) is important: Instead of awkward tools designed entirely around their ability to attach awkwardly to a KitchenAid, you get a tool designed around doing its job right.

(That KitchenAid accessory metaphor works a lot better than I initially anticipated—the PTO is the annoyingly limited hooks you have to work around, and the results are as awkward as any plugin system.)
The CCP buys the people it can by offering or denying them access to a huge market. See how Bloomberg LP wanted to keep selling terminal licenses in China.

The CCP silences people it can by labeling them as racists for speaking out against its government apparatus. It uses misguided westerners and, I’m sure, it’s own agitprop machine for this purpose.

Finally the CCP kills people within its borders that can neither be bought nor silenced with shame. Everyone from political dissidents to the doctor who first publicly raised the alarm bell on Corona (he was forced to confess to crimes of inciting panic) to the Uighur minority.

The world does not oppose the CCP because it’s either greedy, scared for their reputation, uncaring or dead.