skysight-inc/HackerNews huggingface dataset:
The original exploit was probably somewhat difficult to find, but the blog post gives a fair amount of detail on how one might go about exploiting this bug. That being said, I don't think the heap overflow is enough to actually get code execution; you'd probably need a leak due to ASLR as well (although on iOS ASLR isn't the best…) Your average script kiddie isn't going to pull this off, but the knowledge required is likely far from nation-state level.
There are tons of different banks and credit unions as perfectly good options. There is a healthy and competitive market. The current system is a great way to create jobs and keep product offerings competitive, which means efficiency for the consumer. Banking is an extremely important industry to society, so it makes sense that they would have a lot of power, and a lot of oversight.
Even if you can’t read a single packet, noting a surge in bandwidth utilisation is a signal in and of itself. But you probably can read the headers.
I was mistaken, Firefox is the one that uses OS controls for webpage elements. At least on Linux.
Here is one nice example: https://sivers.org/pg
You can't have it both ways. If some site can choose not to host some content, then so can some server provider, some DNS provider, some colocation operator, some payment processor, and so on. It's the same deal.

And the above platforms DO exist, people CAN use them, and by God there's no shortage of porn on the internet.

(ccbill for NSFW billing, btw)
Well, the only thing I trust is my RAIDed ZFS with weekly scrubbing. However, that's not a backup solution. Spinning rust doesn't degrade materially over time when powered off but Flash certainly does.

If tape was cheaper I'd consider that.
RTFA: it's not talking about side projects.

Side dish = product built on a platform the customer already uses. Example: Streak (a side dish) is a CRM that lives inside Gmail (the main dish).
That was the point. Everybody knows who the mother of a baby is; fathers have plausible deniability.
Having worked in a factory before, I can tell you that the factory was calling the electricity company before shutting down or turning on the factory. It is consuming a noticeable chunks out of what the whole surrounding city is consuming.

Given how much electricity a datacenter consumes. Google surely must have a direct support contact within the electricity provider and they better start working both ways, if they don't already.

Quick math. A datacenter is 60 000 servers, so 6 MW consumption at 100 W per server (moderate load). That is 1% of the peak output of a nuclear reactor. You bet the electric company wants to know when they need to adjust their reactors.
It's possible to do it without, so no.
From what I've seen the thinking about permanent change is more that, massive changes are being made now, and inertia will mean those changes will stay in place, because they'll actually turn out to be better anyway. It's just that the cost of implementing or even considering those changes was too high before, but it's necessary now.
Radioactive WW2 night vision test (1941)
An alarming point:

> Q: Since when iOS is vulnerable to these bugs?

> A: iOS is vulnerable to these bugs at least since iOS 6 (Sept’ 2012). We haven’t checked earlier versions.
@petulla we've reached the thread depth limit so I can't reply to your last question, but typically MSMarco is used for SOTA testing of deep learning for search: https://microsoft.github.io/msmarco/
they allegedly had an insane demo for investors only, before around 2016 (at least that's when I heard of it) you needed to sign an NDA to even get in the room to see it.

The consumer product is quite lacking compared to what people said was a demonstration of game changing technology.
Sure, but that’s not accounting for rhythm, different instruments, etc.
I use my Raspberry PI 4 for compiling and testing my ARM code to run on various screen-less embedded devices. It's surprisingly fast and convenient and I do not have to bother with a cross-compiler.
If your goal is financial independence, and not just "get rich", then put as much energy into simplifying your life and having a small personal "run rate" as you do into your income.
To the extent that you run OCI images somewhere and care about (1) what's in them and (2) rapidly updating what's in them.
Show HN: Automate Software Documentation
I've been writing code for close to 10 years now and I see this and feel like what a beginner would feel trying to understand assembly code. Or someone hearing a similar but new language.

Looks to me hours of work and learning got abstracted as under the hood "magic".

It's like saying: Oh, so I've been weight training for the last 17 years and I should tell you Olympic silver is not too hard, see?

Am I right in my thinking? or is learning to be this proficient with the framework not as time taking for a novice developer as I think it to be?
Do you guys ever get tired of posting this exact comment?
Speaking of C, if you missed last week's thread with C Committee members, it was rather amazing: https://news.ycombinator.com/item?id=22865357.

Click 'More' at the bottom to page through it; it just keeps going.
Counter example:

https://www.youtube.com/watch?v=99Op1TaXmCw

https://www.youtube.com/watch?v=xqW-Hfk0FN0 (an electro swing remix)

Timbre and genre are very important things. The remix doesn't need to be as good as the original since it's way better suited to be mixed in an electro swing DJ set. The different context creates an entirely new niche in which the original has no place.

Disclaimer: I googled for something random and sifted a bit through the results - not a fan of dubstep remixes, so I chose electro swing instead :)
Daily Multi Vitamins and Minerals 500 Tablets Kirkland Signature
SaveMeASeat – network with colleagues while in quarantine
Hello Hacker News! We're Kesava and Dmitry from Digital Brain [digitalbrain.app]

We're building a platform to automate processes when you're doing software documentation.

We live in a hacker house and we're surrounded by some world-class engineers working on cutting edge startups, but one of the biggest bottlenecks is software documentation. So we built Digital Brain to help solve this problem.

Digital Brain auto-generates your source code documentation and then provides a beautiful Notion-like interface to finish up with the documentation process — streamlining and recommending what to document when.

Here's a quick demo if you'd like to see it in action before trying us out:(https://bit.ly/3eGwCdG)

We're really happy we get to show this to you all, thank you for reading about it! Please let us know your thoughts and questions in the comments.
AFAIK the last machine in widespread production that handled multi-length integers was the PDP-10/20 and its clones which essentially died around 1984. I say "around" because though DEC canceled the 20 line, some clones remained (that was Cisco's original business plan, for example)
Sometimes I'll highlight things but I'm a terrible note taker I think. Do you know of any good resources for taking notes while reading?
so this is cool release, and no objection on that
but if your pipeline has automated testing, security scans and more then you are not actually deploying in 10s

more technical details would be good but I guess either I missed it or they look at it as IP
I am honestly curious what "Threat detection" from the second screenshot is supposed to do.
This was done for a logistical reason so companies could get money in days/weeks not months. Stimulus checks just go blindly out. Tax refunds have a system that has been in place for years. Making random payments to random people/companies has no parallel. The government doesn't have staff to look at payroll receipts, etc. to determine how much a company should get. Banks do this all the time and have the systems to handle it. Also, people already have LOCs and other relationships with their banks. Banks weren't lending because the loans would be risky so the government said will cover any losses up to X and people started getting money that week.

In the future, we'll have better systems for this kind of thing but we don't have them today. The bank plan was the most expedient one.
> The banks have a preexisting relationship with these businesses and know what they would need / qualify for. Plus provide boots on the ground for vetting.

Seems to me that the government has a comparable relationship with business. Companies report to the IRS same as individuals, and corporations are required to file annual reports with their state. You’re telling me they cant maybe slice up the market due to higher or lower risk (restaurants probably taking a way bigger hit than tech, for instance) and qualify companies according to trends in their tax filings and other data points?
I'd like to see a version of this article and headline that figures out the effort required by the banks to administer a program like this.

Quick read looks like 2.8% off the top, for 0 risk (10/349).

Total businesses receiving loans was 1.6M
(https://www.pymnts.com/loans/2020/sba-lenders-approval-ppp-l...)

Average money a bank made per loan was 10,000,000,000/1,600,000 (assuming all banks made an equal distribution of loans)

Or $6250 per loan. Given that all loans ran out about 1 week after the program was started.

I imagine the person effort per loan was pretty variable, but that's some pretty crazy capture by the banks.

(Banking sector employs almost 1.5M people), So even if every employee working at all banks, was allocated to work on one loan each for a week. (HINT THIS DIDN'T HAPPEN) the annualized salary for each of these people would have to be 6250*52, or 325K, which it's not).

I guess my question, is how was the decision made to offer banks such a big kicker for administrating loans with nonzero, but practically 0 risk?

(of note, theoretically banks are going to need to do some serving of the loan over it's lifetime, and deal with this loan forgiveness program, etc.. so if that's the case and it's more like 2-3 weeks of person work per loan, you still get some pretty big numbers, but they feel a bit more sane)
"The fastest way to access to a row in a database is by its primary key. If you have better ways to identify records, sequential IDs may make the most significant column in tables a meaningless value. Please pick a globally unique natural primary key (e.g. a username) where possible."

Has anyone had a problem due to surrogate keys?
Hundreds of people volunteer to be infected with coronavirus
> They're exploring a sale valued at $10B, but it's doubtful who would have the appetite to buy it at this valuation.

One of the sentences in the article that leapt out at me from the article was
"Magic Leap is one of the most well-capitalized consumer hardware startups ever, having raised more than $2.6 billion from investors":

* "most well-capitalized" sounds very awkward.

* How much they raised is hardly indicative of how well-capitalized they are at the moment (in the sense of runway), without knowing how much of it they spent already.

* The article makes it sound like huge investments are all upside. But they carry a significant downside as well, because all those investors wanting to see a return will significantly increase the price tag if the company wants to sell itself.
"Side dish" is not another way of saying "side project" (in the context of this article.

Side dish = product built on a platform the customer already uses. Example: Streak (a side dish) is a CRM that lives inside Gmail (the main dish).
But you can outsource those (build server, CMS) to e.g. Netlify and Contentful.

But if you don't want that, there's a billion alternatives; the CMS market is one of the most saturated ones out there.
Money (in the form of buying power) can't be created from nothing, so whenever a bad idea/execution is funded, it takes away buying power from companies that have better execution, but less access to cheap loans.

As an example I personally know a CEO who had a great idea, great exececution, but a new competitor startup was funded with millions of dollars of cash that threatened to sue him in the US. He didn't have money for lawyers, so he became in a bad position very fast, even if he was quite certain that the competitor didn't have any case against him.

Another example is cheap loans driving up ad prices and rent in SF, which I have seen often talked about here.
Content can come from text files. Operational complexity ought to be neutral (or even negative) if that content compilation step replaces your CI pipeline.
No clue!
I intend to do a proper writeup for this, in the meantime I published a short blog[1] with the program along with some background information.

[1] https://blog.phazon.xyz/answer-set-programming/2020/04/22/mu...
Might turn out to be about as silly as believing in and investing in General Magic.

They may have failed but their impact is felt everywhere.
On your computer, this exploit would likely be able to grab your children's pictures too.
Are the US regulations more strict those of the EU countries?
> It's as good as anything else on the market.

I've owned and extensively tested nearly every AR device that's been on the market in the last 10 years. I can conclusively say: the Magic Leap is garbage for anything more than short-term entertainment. Between the extremely dim visuals, the horrible rainbow effects on every bit of text you display, and the awful resolution, it's not just bad for anything other than games; it's nigh unusable.

If I could go back and stop myself from spending the money on an ML1, I absolutely, without question would do so.
I Need Homepage Feedback
This is an uninformed opinion yeah. Facebook is recruiting HEAVILY and appears to have the published state-of-the-art research in the field. They also recently acquired a hot startup in the field, Scape based in London, and kickstarted Facebook Reality Labs in London which is hiring. They are also hiring in Seattle.

If someone wants to look how Microsoft is also doing from a engineering PoV, watch this cool video from Marc Pollefys from ETH Zurich/Microsoft. It was made for a technical-minded scene and shows the behind-the-scene, some potential issues (privacy) and where it is going next https://vimeo.com/380218937
These concepts -- at the level of detail described in the article -- are well within the grasp of a bright six year old.
In which language is it obvious not to put money into a float? In which language is it obvious if I want a synchronizedSortedMap or an arrayList?

There are simply things you have to learn to use a technology. If you want to write Java, you need to know what a variable is, what a for loop is and what Inheritance/Interfaces are. Likewise, in the case of SQL, it means you need to know concepts like normalization, ACID and joins. Just poking around until the code works won't do it.
Isn't this just increasing the branching factor? How hard will it be to find new melodies a million years from now? Easier than today, the same, or harder?
10, 11 year timeline to what?

You should be constantly learning everything about the whole stack so that you can actually build functional, reliable, manageable and maintainable systems.

I expect a competent developer to be able to build a modern multi-page web application, with a HTML/JS front end, relational database back end, appropriately configured certificates and DNS/CNAME/URL, build basic uptime and application monitoring and do a basic SQL ETL data retrieval process.

That seems like a reasonable bar, and while the specific tools have changed over the years, that stack is basically the same as it's been since the 90s.
Am over Vendors That Are Not Transparent in Pricing
Apple makes these claims:

https://www.apple.com/business/docs/site/AAW_Platform_Securi...
> 7) Use countdown timers

> A timer can be very handy for your landing page design. This element encourages users to take action faster. This technique is called scarcity. It’s a sort of inducement when there are only two products left in stock, for instance. So timers create the so-called urgency effect, which motivates users to choose and decide faster than they usually do.

I've seldom encountered this, and had no idea this was like... a thing people are doing now. But it's really bad and has caused me to just stop considering whatever product I was looking at.
These sort of articles are very effective, if you nail at least one thing in your checklist the reader does not know or is confident about, it often encourages them to continue reading further. I know I did.
Is low employment meaningful in a low wage environment?
which library?
The fantastic Reddit API wrapper for gophers
HBO and Cinemax have had apps on the App Store for about a decade, serving up adult content the entire time, sometimes with prominent editorial placements. The answer is, as always, "app review is a crapshoot".

One thing I thought was interesting: Apple sells access to HBO & Cinemax through their TV app, but that access does not appear to include the adult content (or at least it does not display without an active subscription).
So as someone who worked in Erlang (and is familiar with Elixir), I can answer that a little bit.

They hit a sweet spot. Enough rigor, enough limitation, at the language level, to force you to do things "the right way" for a broad swath of problems (there are certain problems they're poorly suited for), but enough simplicity and freedom to keep a minimal learning curve, and minimal runtime complexity to figure out issues.

The focus on fault tolerance also means once you learn to use the app structure, with supervisors, you mostly have just one concern for reliability ("how do I start this into a known, good, consistent state?"), rather than hundreds ("what happens if -this- fails? Or that? Or that other thing?").

Haskell and Scala both have a huge surface area to learn before you're productive, let alone anything approaching fault tolerant, and even after years of use, there's still a lot of hidden gotchas with them. I've seen teams take Erlang, and their very first project just...worked. None of their lessons learned caused production issues, and no weirdness; the three issues that made it to prod I can even think of were, variously, one that wasn't user facing (just a log entry indicating something wasn't handled right; supervisor took care of it), one where performance started to slow (and it was due to having written an O(N^2) algorithm accidentally, and not testing at higher loads than production), and one where a low level C driver made an unnecessary reverse DNS lookup that, when the caches flushed, caused things to hang, which became an issue when load increased, and which should have been circuit broken (but which instead caused a failover to another node).

I've never had that experience with another language. The ramp up time to productivity was longer, the production issues caused by us missing something about the language were more frequent, the production issues caused by us failing to expect or handle a failure condition were more frequent, etc.

That said, Elixir and Phoenix do raise the bar a little. Elixir has a larger surface than Erlang (only a few concepts, but a lot of ramifications when it comes to macros if you haven't used them in other languages), and Phoenix is reliant on a fair bit of magic so you need to read the docs and it may take a little bit of work to feel happy with things. But even when I knew nothing about it, picking it was easy because of the experience I had with Erlang.
I have ~6 years experience working in rails and ~3 years working with Phoenix. The only downsides I can think of are lack of official clients for APIs, and some missing packages. For example, if I wanted to do some PDF work I would really miss the prawn library. I don't miss anything from rails, Phoenix IMO is a superior web framework.
You'll be surprised. You can actually use Google earth to explore these regions. Even in what seems at first to be empty space you will find little towns, military installations, vacation lodges. Yes, there are still a few remote regions that are truly untouched by humans, but they are quite rare. Extreme latitudes (Antarctica, Siberia, northern Canada) and the Amazon are probably about it. Numbers are hard to come by but I'd be surprised if more than 20% of the earth's land area was more than a day's walk from civilization.
Ise-ji: Walk With Me
> Don't understand how people are happy to listen to the same old stuff - it must get so dull.

It feels like being force-fed doughnuts.
PyTorch 1.5 Released: New APIs, Updated C++ Front End and More
Well, it's not lost in C itself. But in the practice of modern C programming, it's often sacrificed in favor of using integers of exact sizes (uintN_t), and many programs perform bitwise operation by assuming an exact size of integer. By C99, they are guaranteed to have the same number N of bits across all implementations, and they are included only if the implementation supports it. So the programs using them is standard C, but not 100% portable, there is no requirement in C to implement exact-width integers.

Although modification of most programs shouldn't be difficult (there is uint_leastN_t), also, C compilers can be modified to treat extra bits as if they don't exist to allow existing programs to work again.
Despite our industry's habit of treating mathy whiteboard things as indicative of one's "programming talent", real application of type, set, and graph theory are not tested nearly as much as they end up being in practice, and I think that developers' reticence to get deep into SQL is symptomatic of the weaknesses there.
Nvidia “RTX Voice” noise cancellation works just fine on older GTX cards
You must be an uninteresting target then.
Are there any good tutorials to get started? What major sites are currently using Elixir?
Rebranding a branding agency: Plato Design (YC S18) is now Aesthetic
> it's being downvoted fairly

what's to say that downvoters aren't also misinformed in their decision to downvote?
> It's partly because I'm not a DevOps expert and even if I wanted to be one, that would also take time, patience and energy.

It's this exact divergence that creates the disconnect. If someone doesn't understand and doesn't have to care about the whole experience, they're going to focus on their side and stop when their side is good enough.

On the other hand, if that same someone is going to be regularly developing the application, making changes to the database, and triggering deployments, they will find a way to make the process flow. They'll make it adaptable enough that it's not a day-long pain any time they need to run a migration or spin up a test DB.

The whole toolkit can and should be available because every piece of the stack opens up new possibilities. You want, and at least at some level, can have, people who know this well enough to make good use of it. Nitpicking over "not my specialization" is the antithesis of a smooth engineering process.
The use of recur in Clojure is by design. It would have been quite trivial to optimize this type of self recursion, but since it doesn't do general tail call optimization, they introduced the recur keyword. See also [1]. By the way, you don't need to use loop in Clojure either, it also works with functions.

[1]. https://clojure.org/about/functional_programming#_recursive_...