skysight-inc/HackerNews huggingface dataset:
This will always be a cat and mouse game. There are some anti-cheat software more intrusive than others. Even Valve Anti-Cheat (VAC) which is considered by many to not be very intrusive, used to intercept DNS queries to detect communication with paid cheats DRM.

Most anti-cheats also scan all processeses memory and even files to detect know cheat signatures. They tend to run with high privileges and some take in-game screenshots for analysis. Basically they have permissions to do anything and receive silent updates.

I wonder if statistical methods to detect cheaters result in too many false positives.
To my knowledge radar cheaters are now dealt with by not sending information about enemy positions if they are behind walls. It's not a perfect solution ofc but it seems like it works reasonably well.
Plans are useless but indispensable. They are definitely worth doing, they give your manager and ultimately the rest of the company insight on product development. This could inform marketing, sales, customer success. Is that feature likely to come next week? Should we start writing a blog post now or can it wait? Are we fixing a major issue for an important customer?

Part of your job as a professional engineer is to both communicate and manage uncertainty. A properly scoped story shouldn’t be a month long project. It could be a few hours, or it could be a few days.

Helpful advice is to give your estimates using an appropriate dimension of time that reflects the uncertainty. If you think it’s going to take 2-3 hours, call it a half day.

If you think it’ll be 8 business days call it about two weeks.

Sometimes you don’t have an estimate. That’s where scoping comes in. It’s perfectly acceptable to say I’m not sure but if I spend the next 30 mins scoping it out, I can get back to you with a better idea.

I find managers are perfectly understanding that the world is a fuzzy place and no one has all the answers. Get comfortable with admitting that to yourself and to others and estimating gets a lot easier.
What happened to their canary file?
>we wouldn’t work here if we didn’t deeply care about player trust and privacy

Bold message from a chinese company. People freak out about Huawei but Tencent is 1000% worse. And here they are installing a kernel driver on your PC.
I think a Riot employee stated that cheaters would try to start cheats before the anticheat starts, so the anticheat running at all times is trying to prevent this.

CS:GO has a lot more hackers than games with more intrusive anticheats like Overwatch in my experience. Only solution is an invasive anticheat, machine learning, and trust factor systems.
Weird, since Raku has `loop { }` that means exactly that. I guess the author was not aware of it (or just doesn't like it).

EDIT: Oh, that's in the Perl (5) code. Nevermind then.

In C-like it kind of makes sense – it's 1 character shorter, and on some ancient crappy compilers it may actually run faster than while(1) since it doesn't have to check the condition every time ;)
Well, I will point you to fluffything’s response

> Arch was the best distro I could find that used the latest kernel by default. Audio worked there.

That mirrors the experiences I’ve had. Most distros ship with broken old software and custom patches that make troubleshooting a nightmare. They also don’t have the resources to support the wide variety of hardware out there. Microsoft spends billions on Windows and vendors spend billions of their own to make sure hardware is mostly plug and play.

In Linux land, the mainstream distros ship with fragile duct-taped components that work if you’re lucky but are a complete pain to troubleshoot and are a bigger pain as time goes on and you have major upgrades.

Arch is the only sane distro with wide adoption and it’s a joy to use. I get the latest kernel with its bug fixes and hardware support. Packages are updated on a rolling basis so there are a few instances every year where I need to manually intervene, but not major breakages every 2 years.

Granted, it’s not for everyone. You have to recreate the fragile duct-taped components you get in other distros, which is an investment of time. You will know how and why your computer works though and will not have to resort to the Ubuntu stack exchange (or their other communities) for the magic formula that will fix your issues.

I’m hoping we can change hearts one by one with this message: Arch is not scary; it might solve the problems you’ve been having :D
The problem is all large organizations strive for power. One can be more easily changed than the other, at least in democratic republics. Corporations are more like autocracies, their leadership can't be changed. One can say that corporations derive power from customers, but this is not necessarily so. As they grow larger, they can necessarily control user habits through psychological means. The government can too but it has a lesser incentive, as power is more distributed, again in a democratic republic. Money however is a much better fitness function than power, as it can be quantified, so it is unsurprising that corporations gain power.
Hackers in standard CSGO games are rampant from what I understand.

Serious players pay extra to queue up in a dedicated service for high tickrate servers and anti-cheats which I believe are rootkits as well.. not sure about any of this though.
Qt, because it has reasonably mature bindings in most languages you'd want to use. The bindings for Python seem the most mature though I have used the Golang bindings with reasonable success as well.
> Does anyone know why judges are so deferential to the US security apparatus?

Kompromat?
Try sites like HackerOne where you will get a framework for ethically looking for vulnerabilities in public software.
Since you seem to know the lingo and top issues on the web, try to find your first XSS on a website. The first one will take some time, but once you find one you will feel the rush of accomplishment. The second one will be easier to find and you will start noticing patterns in what to look for for.
Not at all... .ORG has always been defined the same way, and that’s always included individuals, families, informal projects, just as much as formally-chartered charities, NGOs, and IGOs.

No change is being proposed here. Instead, a formalization and locking-in of existing rights, is being proposed.
It's a very weird angle, indeed.

My home ISP hasn't deployed IPv6 yet. Though, if they cited COVID-19 as a contributing factor when asked about it, I wouldn't be stunned...
My next gaming PC will run a Linux hypervisors and use PCI passthru to run Windows as a full-performance guest. Then if I need to use a web browser, I can switch to a Linux guest without interrupting the game.
Check this thread[1] from a few weeks ago. The Dream Machine is a great book that goes into great detail from the very beginning, and how we got here.

[1]https://news.ycombinator.com/item?id=22692281
Let's clarify Twitter request first: Twitter requested permission to reveal exact number of requests.

Companies are allowed to reveal gagged legal process in ranges of 1000, starting at 0, for six-month periods. Combined FISC and NSL requests can be revealed in ranges of 250.

This just shows that Twitter is fighting all the way, as I mentioned in my other comment.
Anybody who doesn't use a dev VM these days is asking for trouble. It's too easy for attackers to run malicious code on your machine with techniques like this.
Valve also put a significant amount of work into this system. Asking every game developer to build that system for their game seems like alot to ask- Especially when they can just drop in a few lines of code // third party software package and have cheating 'handled'.

'Not invented here' is a blessing and a curse.
Well. It's a generation of programmers brought up on Javascript. They are in charge now, and we are paying the price for that.
I have a 9 inch scar down my leg where my then-kitten fell off my lap and used his claw like a cutlass-wielding pirate rappelling down an unfurled sail. Pirate cat won the duel.
The same is true for unregulated business.
Technical inspection of Rekordbox 6 and its new internals
Humans can learn/be taught echolocation. https://en.wikipedia.org/wiki/Human_echolocation
I agree with xbkingx, "There's no way 3 rubber bands turns a surgical mask into an N95 mask."

These are two different 'commercial products'. I think everyone here is a reasonably good consumer and understands the 'context' of DIY. If I have a problem with this video, it's the super-seriousness which undermines it's _DIY_, _best I can do with what I got_, context.

To the larger question some of us are asking ourselves: "Amid Ongoing COVID-19 Pandemic, Governor Cuomo Issues Executive Order Requiring All People in New York to Wear Masks or Face Coverings in Public"[1]. Is a surgical mask and rubber bands going to be a better solution than a hanky?

From my ongoing research I want to share one interesting site I found: SmartAirFilters, founded by an associate professor at University of Chicago: "...Smart Air, a social enterprise that makes low-cost DIY air purifiers to help people protect themselves from air pollution." [2]

Can Masks Capture Coronavirus Particles? [3]

Can DIY Masks Protect Us from Coronavirus? [4]

Here's a quote from one of the articles written by a university student which makes my point (to be true the author is talking about particulate pollution and not coronavirus, but in the current context of needing to wear a mask it conveys the tradeoff):

"Should You Wear A Surgical Mask? Now let me be clear. I’m not recommending that everyone use surgical masks. I wear N95 and N99 masks because tests show they fit better and capture more particles. But if professional masks are unaffordable or it’s a bad air day and you forgot your normal mask at home, or even if you’re caught out with a wildfire, ducking into a pharmacy and spending 1RMB on a mask will significantly reduce your exposure to particulate pollution." [5]

Now, let's talk about those rubber bands around your ear...
"Canadian Scout Makes 3D Printed Ear Guards That Relieve the Pain of Wearing Surgical Masks All Day"[6].

Woot! Scouts!

[1]: https://www.governor.ny.gov/news/amid-ongoing-covid-19-pande...

[2]: https://ceas.uchicago.edu/directory/thomas-talhelm

[3]: https://smartairfilters.com/en/blog/coronavirus-pollution-ma...

[4]: https://smartairfilters.com/en/blog/diy-homemade-mask-protec...

[5]: https://smartairfilters.com/en/blog/surgical-masks-surprisin...

[6]: https://laughingsquid.com/scout-makes-3d-printed-mask-ear-gu...
Depends, there are many methods of doing it. Many games let you hear gunshots/grenades/etc.. that are far away. You can use those sounds to show a radar spot.
Everyone else you mentioned runs a non trivial business that interacts with the government significantly.
I know trump get's a lot of action on twitter but the next guy won't be using it for the main means of comms.

It's great that twitter took a stand, but if that company failed everyone would easily replace it. Twitter is toy.
Exactly.

If any of you want to suggest language that you feel better conveys the goal, please propose it. We’d like to make the charter as clear and unambiguous as possible.
History of Programming Languages conferences — HOPL II and HOPL III proceedings are temporarily free online. https://dl.acm.org/doi/proceedings/10.1145/154766 https://dl.acm.org/doi/proceedings/10.1145/1238844

And of course many ‘primary source’ classic papers published by ACM are temporarily free.
> same developer experience as go

You can't say that when Python shoves Pip/Poetry/VirtualEnv/Black/Flake and what not into people. In contrast, Go has built-in package management and gofmt. Python is essentially gate-keeping new devs.
I wanna try this but PCI pass through seems hard. And with KVM win7 guest, I get too many cert invalid error during accessing https, which is annoying.
Your proposed use-case won't overcome their business model. Their business model (theoretically) makes their company more valuable the more users they get (users that cave).
Wait that doesn't make sense, was generators in the language before Promises, actually isn't await based on generators? How is that a new paradigm?
To be fair, Linux kernel devs have been working hard to solve the problem for years, with progress coming in every new kernel version. The works required at the kernel upstream is almost completed [0]. Now the ball moves to libc, and the progress is optimistic.

Indeed, what happens to those already deployed legacy systems and programs are another story.

[0] https://lwn.net/Articles/776435/
That heavy lifting wasnt done by myself so I unfortunately dont have a answer for you. This was around a decade ago however, so I would not be surprised if the traffic was unencrypted.
Doing something like this would probably be illegal if you want to connect to Valorant servers or distribute it, would be easy for Riot to detect and ban users of, and if it worked well it would be a haven for cheaters to ruin Riot games from.
This was my exact plan for my (current) computer a few years ago. But after learning about all the real-world complications I became lazy and abandoned the idea. Is this in a realm of "easily achievable out-of-the-box on a standard Linux installation" now?
Cloudflare's BGP activism isn't exactly a new thing, so critiquing their exact timing here seems misplaced perhaps?
Yup, sorry it clearly didn't work. Hope it is not broken.
http://webcache.googleusercontent.com/search?q=cache:https:/...
See https://www.descript.com/lyrebird-ai for another one with an on-site demo.
Ringelmann Effect
If what you mean is why do most of the judges tend to rule the same way in this area, it's due to precedent, they don't really have a choice. The balance (or lack of one) you note was mostly established by higher courts years ago.
I’m not so sure.

The internet community (I.e. routing guys/Nanog/ietf etc) is fairly open. I’ve not heard much of such approaches being used. It is a very interesting idea.... I guess you gotta weight delaying inserting an update with potentially blackholing a destination until you do.
There are far more effective ways of stealing (or scamming) bitcoin.

The point is the attacker could put any kind of malicious payload in here.
rampant years ago. It took a long time to get where it is now. There are still cheaters here and there, but that is to be expected, and relatively rare in my experience.
> Vanguard does not collect or process any personal information beyond what the current League of Legends anti-cheat solution does.

They are tiptoeing quite carefully there.

I wonder if a lot of "collect or process" can be blocked by users, but with a kernel module actually prevents opt-out attempts and identifies everyone.
+1 to Listary. I have to add that Listary is definitely underrated.
Indeed, thanks for the correction.
It won't really work for laptops, at least without a lot of research and fiddling. You need a desktop with at least one GPU, for the guest. If you want to run the host as GUI, instead of headless, then you need a GPU for the host as well. You can shut down each guest and boot up another one but generally you'll need a GPU for each guest you want to run with a GUI, if you want proper hardware acceleration and if you want to run them simultaneously. I run on a 4 GPU system for example, one for the host and 3 for each OS.

However, for certain Intel systems, there is something called GVT-g which allows sharing one GPU with both the host and guest, as you mentioned. You can try that and see if it works, I'm not sure if it does on a laptop. Or if you don't really need GPU acceleration, just make a VM as you normally would. I suspect since you don't say whether the notebook has a dedicated GPU that you don't game and thus wouldn't necessarily need GPU acceleration.
You are right. I tried it here, for others: https://codesandbox.io/s/crazy-bush-cg2i0?file=/src/App.js
It never was the model, even from day one? The service is not free, even if the code is. You can do it yourself fine. If you need somebody else effort not related to source, you should pay for it.
They're just completely different models. gevent is green threads, asyncio is explicit coroutines. In gevent, you don't use an "async" or "await" syntax. You just spawn greenlets (green threads), which run in the background, and if you want, you can have them block until they return a result. And they're efficient, so you can spawn thousands without a problem.
This page is a real bummer. Of all the products I looked at they all collect your data by default. Thats creepy, and yet merely having a privacy policy, not having a good one, earns the product a little award wreath. This is utter nonsense and has not highlighted privacy-respecting products. It's simply false. So dissapointed that this is mozilla.
No judge wants to be responsible for a future terrorist attack or degrading intelligence capabilities against other foreign adversaries, regardless of whether the threats are real, perceived, and/or imagined. In this case, releasing the numbers might shine light into their capacity for investigations. In other words, sometimes security/capability gains more from perception than reality.
My imaginary units library would have been like

Unit(float, unit_as_string)

The free text version is pretty cool though
What's so bad about video conferencing?
All software that you install on the main desktop operating systems is given the "keys to their computer kingdom": there is no privilege separation or sandboxing, except for the "user vs root" division, which can be trivially bypassed in countless ways (and anyway, most installers require root privileges).

And yes, obviously you need to have a dedicated gaming PC and certainly not install any games or any software that isn't strictly necessary on the systems/VMs with important data.
Google to waive ad fees as part of journalism relief effort
Can you? By all accounts, you can’t stop Facebook. They’ll keep using you.
Public relations for a startup like this would be hard to manage. I can already see the front page Reddit post with 4,000 upvotes on the game's subreddit asking why they lost $400 worth of items because one of the outsourced employees being paid $3/hour illegitimately banned them. Easy target to blame a company like this.

Cheater effort and quantity scales roughly with game revenue and popularity. So the first tier of games, the most popular and long-term ones, like League of Legends, CS:GO, Overwatch, maybe Valorant, Apex Legends, Fortnite, can afford machine learning. The next tier down can afford to implement community review programs, where players earn in-game rewards and the satisfaction of improving game experience.
People who want to run Windows software? If all you're doing is Linux and X then yeah, just run Linux.
There aren't many/any instances of single corporations causing >10M deaths, or oppressing millions of people.

There are lots of recorded occasions of single governments doing this.

Governments are seen as having authorities that corporations do not, and thus are to be viewed much more skeptically as a general policy. Companies can't raid your house with machine guns, or toss you in jail for publishing an integer on your website.

It's not that corporations are trusted more; it's that the maximum possible damage by corporate evil is much, much, much, much less than the maximum possible damage by government evil. IBM participated in the holocaust, but they didn't directly cause it. That needed governmental authority. It's prudent to maintain several orders of magnitude higher suspicion and/or skepticism of government activities; corporations are basically sandboxed (e.g. no armies, for the most part) in this model.
Nothing is smart yet. What people understand under automl is different but I’m referring to meta learning here, be it the architecture, the optimizer, the learning rate etc. Optimizing these things requires an outer loop in addition to training the architecture and for architecture search in particular this boils down to training lots of models and evaluating all of them. There are ways of making this search a bit better than random search with techniques such as regularized evolution (essentially evolution with a bias for younger individuals) or other tricks but all of them require huge compute resources.
Honestly, you're just risking getting banned then; some games already ban wine users and a hypervisoris basically the peak of hiding direct memory access so I imagine anticheat engines look for them.

Also, I did this around 3-4 years ago. It works, but once you have it set up its basically the same as if you had two computers effectively on your desk with a kvm switch in software. It also has a tendency to be unstable as all sin and some iommu isolated hardware may misbehave when assigned to a virtual machine.
thanks for your response!

I will try to implement what you said... Perhaps it comes down to

1) hiring better for communication and tech skills
2) getting more senior devs
3) Work on communication

I recently tried to clone myself by hiring a bright young guy to take over some stuff. It ended up as a 3 month disaster. A week to do 30 minutes of work. He worked well in the office but can't seem to handle virtual teams (corona).
The current one in Valorant is simple wallhack

https://www.youtube.com/watch?v=ATkpqYmWt8k&feature=youtu.be
Excellent idea and we'll surely be seeing something like this, there are AR apps that already map facial expressions to avatars.

Downside could be some uncanny valley if the models are not very high quality.

But if I had to make a prediction, I'd expect we'll get much more value from higher bandwidth, ultra high definition streaming and features like 3d cameras / virtual reality. I think we have a tendency to really underestimate how important high definition is for human communication.
Nothing. It’s relatively new and is getting more adoption all the time.

There are like 70,000 ASNs out there, so a lot of orgs need to implement. But you’re right, if all the Tier 1’s do it we’ll be in a good place.

The “problem” with it is it doesn’t solve the path validation problem, so while it helps it doesn’t fix BGP completely.
Very cool idea. The coding used in H264 is a variant of the DCT, so moving one layer of abstraction up from there basically moves from semi-analog to fully digital. I agree that it should only require a fraction of the bandwidth because you'd only be sending parametric data rather than full video.
"Honestly the problem with all software is people trying to “innovate” too much."

You are spot on, and your 'book analogy' is perfect. If it works perfectly don't change it — that is unless an innovation arrives that offers a significant improvement and that's just as easy to use.

Unfortunately, most so-called UI improvements over the last 20 or so years are not improvements at all, in fact many have been quite regressive. They've annoyed millions of users who've collectively wasted millions of hours relearning what they already knew (and in the end nothing was added by way of new productivity)—and that doesn't include the developer's 'lost' time developing these so-called improvements. It's time that would otherwise have been much better spent fixing bugs, providing security improvements and or developing software for altogether new applications that we've not seen before.

The question I keep asking over and over again is what exactly are the causes behind all this useless 'over innovation'. Why is it done on such a huge scale and with such utter predictability?

Is it marketing's wish for something new? Are developers deliberately trying to find work for themselves or to keep their jobs or what?

It seems to me that many a PhD could be earned researching the psychological underpinnings of why so many are prepared to waste so much money and human effort continuing to develop software that basically adds nothing to improve or advance the human condition.

In fact, it's such an enormous problem that it should be at the core of Computer Science research.