skysight-inc/HackerNews huggingface dataset:
I'm not the person you're asking, but imagine looking through dark sunglasses through a little window at a faded image sitting on the table in front of you.

For me the illusion of it sitting on the table didn't even feel like it was really on the table because of how dark the glasses were and how faded the image was.

VR was like being in a different place with a real sense of perspective and your hands in VR felt like a part of you. Sure it was low resolution, moving was strange, and the sides were letter boxed a bit but it was an impressive thing.
Maybe we should take an evolutionary perspective on this? Some ideas may be good in any environment and I expect they would be harder to find over time. Other ideas are probably good or bad depending on their environment.

If the environment is fairly stable then we would expect good ideas to get harder to find (evolution slows down), but when there is a big change, I expect it would be a lot easier to find new ideas that only made sense recently.

Which is to say, I think the answer to this question is probably "no" in the short term, and we should see more ways that creative thinking pays off.
They cannot as the President put immigration on halt.
This is why I'm skeptical of the suggestion to prefer a natural primary key like a username. It works fine... until they day the business asks for changeable usernames because BigClient is now LargeClient and can't stand anything to still have their old brand identity.
I could be wrong but it seems to me that she is confusing not storing state with Idempotent calls to the db. Everything you store in the db is some form of state.
Show HN: Made an App Stop Workplace Insults, Abuse, Flirting Get Early Access
I don't even think that was the health related comment by Cuban I was thinking of... but man what a cluster of a scene that sounds like.
The opposite. Sweden has counted 50 or 60 extra cases as COVID than can be accounted for simply by excess mortality. That sounds impossible, but the difference can come from a few places:

1) Excess mortality is only an estimate. There could be other reasons why non-covid mortality is lower/higher than previous years (e.g. less serious flu season)

2) The tests can have some false positives.

3) If the way you count deaths is "anyone who died and tested positive for Covid", it's possible that the people you're counting didn't die from Covid but happened to have the virus in their system (or would've died even if they didn't catch Covid).

All this is saying is: in past years, X people died in Sweden during this period on average. This year, Y people died. (Y - X) are the "extra deaths", so to speak, and so this is comparing extra deaths to reported Covid-19 deaths.
It's a policy choice to allow all of the reaction to work through the private sector instead of just deploying a national response strategy. In the U.S., the CDC tried to take the lead on testing (good) and essentially banned any other testing infrastructure (bad) and fell on its face with contamination issues (very bad), and pivoting to opening the testing infrastructure was a good policy choice. But the real answer has always been: DO BOTH. The CDC could be doing a million tests a day right now. Why don't they? It's madness.
Work is mixed with life. Already. We live dual lives.
I know some may consider this unethical, but in the name of curiosity, copy-left, whatever, here's a link:

https://mega.nz/file/iUN33aBZ#4SsjlU_qixrRp0ifhkw0YTQjMAJhv7...

password: leak

I'll remove this shortly.

Taken from a random forum, so i offer no guarantees.
Hi! Super cool project you've embarked on. I know everyone I work with (those who write Elixir, anyway) is very interested in its progress.

> I'll update the documentation to make this clearer.

Thanks! Much appreciated.
I'm in the same boat. After having played with all the other vendor libraries, I think I like ac_datatypes the most. It's been really fast and the Catapult is a pretty good engine. Can I ask what industry you're in? I'm in telecom.
Dokku Maintainer here.

Herokuish defers a lot of this work to the buildpacks.

- Language autodetection performs the bin/detect script for each buildpack in order. Last one wins, unless you have a .buildpacks file, in which case we use the multi-buildpack executor. Not sure how it can be more... scrutable, but happy to hear suggestions (my github email in my HN profile has an email for contact)

- Besides bundling Heroku's official buildpacks (as it's meant to provide a compatibility layer with Heroku), herokuish doesn't have any opinions on your source code structure. If the official Heroku buildpack doesn't do what you think it should, you can definitely fork it and change the behavior (or even pull request it so others can benefit).

I can't speak to any specific Cloud-Native Buildpack (CNB) builder such as paketo, but Dokku should have support for CNB fairly soon (it's one of my top-priorities re: new development), at which point users will be able to switch between CNB and Herokuish (rather than force folks to migrate immediately). It will become the default at some point.

For Gitlab, I believe they are or are planning on providing experimental support for CNB. You can probably already use it today if you use pack directly in your pipeline.

As far as how these systems all compare, I wrote a fairly lengthy blog post comparing the usage of herokuish vs the Cloud Foundry and Heroku builder systems that might be interesting to read: http://dokku.github.io/technology/comparing-buildpack-v3-to-...
SQL (at least in Postgres) is already type safe.
The leak also includes most of something called F-STOP, a cancelled Portal project, that apparently looks like Superliminal: https://www.reddit.com/r/Games/comments/eebagv/gameplay_of_a...
Creator of Slash Packaging here — it's a tool I am launching today (Earth Day) to help people find brands that care about sustainable packaging and have a /packaging page on their site.

This was a really fun project to build. You can search for any brand in the world and get a screenshot of their current /packaging page
I think he goes further than that: even young people have outdated knowledge in accordance with some predictable biases. We rely on the information because it fits some narrative we believe about the world, not because we learnt it when it was correct 30 years ago.
> But if I told even most of my fellow HNers that "they're cheap" and "everyone should have this" they'd think I fell on my head one too many times. :)

Ssshh. If too many people find out buying fairly modern hardware on eBay is affordable and easy it will stop being so :)

Seriously though, in the US there’s been a recent flood of 12th gen Dell servers hitting the market with Sandy/Ivy Bridge chips in them. Sure, it’s not gonna perform as well as newer systems, but at $200-300 with power usage that even somebody in California can stomach (a fairly well specced system can consume around 100W at idle/low load) - homelabs are fun and not outrageously expensive hobbies for those that want in.
What is up with the strange sensationalist claims in the article on and Twitter? Source code availability is not a prerequisite to people finding vulnerabilities or RCE exploits in games, there are many established games with open source game clients. Security researchers routinely reverse engineer proprietary software.

Bizarre.
I think a strong cryptographic communications platform would offer the option of using either multi-party-shared-key or p2p key pairs depending on the use-case. Similar to how Slack has both private and public channels within an org.
It's a bit of a tangent, but is downvoting or flagging on a site like HN a threat to free speech? Maybe it restricts speech on HN, specifically, but then we would be separating the more traditional understanding of "free speech" (linked specifically with government intervention) from another one (like the happenings in a private forum such as HN).
> To execute the hack, Avraham said victims would be sent an apparently blank email message through the Mail app forcing a crash and reset. The crash opened the door for hackers to steal other data on the device, such as photos and contact details.

Oh wow.
This is certainly also true of mathematics and many other areas that have over a century of modern research work done on them.
That interviewed person is from a local party in a small municipality. Very fringe.

Of course the US right tries to score points from the lack of a hard lockdown here. But I wonder how well that would have worked without universal healthcare and salaries partly (80%?) paid by government for the time being.
That was the norm before everyone had WiFi and wired lecture halls.
If I write a C program, especially with the appropriate compiler warnings enabled, or some filesystem code, there is a high chance that it will work across platforms with no further coding necessary. Anecdotally, the same cannot be said for CSS or SQL.

It doesn't matter much for SQL, because I always know what database I'm using, but for CSS, it's a massive pain.
"Planning"? Apple released the iPod Nano the same day the Rockr was announced. Mid-level candy bar phone with not much capacity to store said "tunes", or a cute little music player with 2-4 times what the Rockr would hold? The Rockr seemed to me to be one of those products that was only released because of inertia. Or released because Apple blind-sided Motorola with that announcement and, "well, the ad spend is already spent, so..."
> Does the compiler guarantee constant time? If not, it's still useless for cryptography.

Side-channel resistant algorithms are only required when you are handling sensitive data. This is often not the case when you are verifying signatures, verifying proofs or generating succinct proofs of computation without a zero-knowledge requirement.
you'll have to explain for that to mean anything. The associated web page doesn't give any information. Also what do you mean by removing statements.
Interestingly enough, people really good at understanding the complexity in systems are also people that seem to fall prey to, as you said, cultivating a false impression of understanding. Taleb is one that I think deserves criticism in that regard.
I finished my BA (teaching). Went on to a different city to get an MA. Due to costs, I felt like I had to find a part-time job. Applied to a fortune 500 tech company to be a receptionist. Had pretty much 0 programming knowledge at the time.

I quickly realized being surrounded by amazingly smart people with passion for programming is way more beneficial than my masters. I stopped my masters, and started on a never-ending quest of computer science self education.

Every day, 1-2 hours after work, every weekend, 3-6 hours, I spend time on Coursera, EdX, math texbooks... Learning compilers, networking, iOS apps, JS, Java... whatever you give me, I'll learn.

7 years later, I have an "architect" in my title, my salary rose more than 3x. Still probably underpaid, but the pace of learning and opportunities I get far outweigh the salary (e.g. got certifications and trainings worth hundreds of thousands of dollars at this point).

I am also finishing a CS undergrad for fun in the evenings, but my resolve on that is waning. I can do the same for free on my own, minus the degree. I do like the math classes, which are far more rigorous than I'd be on my own. Other than that, it's been kind of meh.
I love a good old database
> It's completely relevant. People run more than one application on their desktop computers.

That's great, so that must mean you'll be happy to hear that right now I have two instances of vscodium open, each one running half a dozen plugins, and their total memory footprint is less than 300MB.

Do you have anything relevant to say regarding how much resources are used? Or are we supposed to keep debating if being able to run 40x instances of a text editor is not enough room to work with, or if whether having only 7.8GB of RAM free to run other programs is too restrictive?
If you already have pairwise E2E encryption working, you can use it to distribute a shared key. It's the first part that's hard.
One of the things I’ve wanted to do since my iPhone started showing weird behavior is the equivalent of a nuke and rebuilt from a verifiable source just to make sure any malware was removed. But I couldn’t find way to do this, it seems you can only do a factory reset but this just resets using the software on the phone so how does it remove potential malware? Is there a way to do this?
"The first conversation is with investor and philanthropist Sam Altman. He has been one of the leading Silicon Valley figures helping the entire biotech industry make a complete pivot to working on solutions: vaccines, therapies, and eventually a cure."

Ok, no disrespect to Sam Altman, but come on.
Servers can distribute custom maps and assets to players so there's a mechanism to download files to a users computer.

As for uploads, players used to be able to set custom models in quake 2 which were distributed to other players on the server. Though I am not sure if that was done by server admins in special cases for clan payers or members or if there was an actual upload mechanism in the game engine.
Source code availability makes it a lot easier to find vulnerabilities. Open source code is much more likely to already have been audited better. Closed source code often depends more heavily on security by obscurity, and unexpected source release can definitely make vulnerabilities immediately apparent that weren't known prior.
I remember working with an individual that stated in a public mailing list that an OS X version was going to gold master. This person was subsequently fired for releasing that information. How things have changed.
NASA isn't a private corporation. In that scenario, compensation is a practical reality, but there isn't any profound reason to not be invested in your job.

In the private sector your job is nothing more than making profit for your boss. If, for some reason, you did something on your own initiative that made the world a better place and your boss didn't profit from it, they should be mad at you for skipping a chance for them to make money.

Consequently, the only rational thing is to give them as little value for as much compensation as possible.
Given the username and that it's a copy-paste of https://news.ycombinator.com/item?id=22949500, I'm guessing some form of deliberate mockery or harassment.
What does not checking a syscall error have to do with the language?
Note that would need another exploit to pull off. This only allows execution within the context of the mail parser.
> or it's own JIT compiler that uses the MULX, ADCX and ADOX instructions.

Does LLVM's bigint implementation use those instructions? Last I tried LLVM can not handle the required data-dependencies on individual carry bits, making it impossible to use ADCX/ADOX in LLVM without inline assembly.
DNA may not be life's instruction book
Nassim Taleb: The Merchandising of Virtue (Book Chapter)
Only if COVID-related deaths are counted the same way by each and every country, which is not the case now.

Some only count if the person died in a hospital, for instance. Did not New York's rate take a major jump when they started to count also non-hospital deaths, e.g. ones at retirement homes?
I’ve invested a lot of time into both Go and Elixir. I like both languages a lot.

My anecdotal view of the marketplace is that Elixir recruitment emails tend to come from startups looking for their 2nd or 3rd dev, usually full stack, and the salaries are nothing special. Go recruitment emails tend to come from bigger companies looking for backend devs, often hoping for kubernetes experience too, and the pay is higher.

I built an internal service with LiveView at work and I loved it. I gave a presentation about how it all works and was hoping it would catch on. It didn’t. The front end team would probably mutiny if we told them to give up React and level up their LiveView skills.

If I were running a web business as a solo founder I would 100% want to use LiveView. As a dev on a larger team that already has specialization it’s a tougher sell.
I'm always wary of "treat your employees well" talk from big names as I think that is as much about self promotion as it is anything else.

Much like the lifestyle type 'careers section' on a lot of company sites ;)
MySQL supports a insert/set statement:

INSERT INTO tbl SET a = 1, b = 2;
I found the approximate time frame in a few places, but never with any primary source. I also came across the claim that hard drives used to be more mechanically robust, and perhaps failed less often for such reasons. Again, I couldn't source it though.
That sounds pretty reasonable to assume for any game, even those that are singleplayer, if they access the network.

Game code is particularly known to be "spaghetti", "code cowoy"-style, where the result is more important than the form or correctness. I mean, that's art, after all, so that seems obvious.

And do you think a lot of companies update their games after they are out? Most often, the code is definitive, refactors are out of the question, etc. I've never seen a bug that fixes a security issue (CVE), let alone for old titles.

And that's when RCE is not by design. It is in Garry's mod, but that's for client-side mode scripted with lua, so theoretically sandboxed. Unreal Tournament 99 though, has plenty of servers that put some dlls for "anti-cheat" software on your computer before you join. That one probably sn't sandboxed.

While we talk about anti-cheat software, can we think a moment about everything that could go wrong with a piece of software that has a very deep access to the system, is sometimes in-house, and not necessarily audited, and whose functionality often includes:

* downloading challenges from servers, patch them into RAM and see what happens

* scan the RAM of the whole system, plus the filesystem, for known exploits

* upload parts of that RAM and filesystem to random servers for analysis

* take screenshots, log keypresses, monitor the system and upload all of this.

Takeaway: sandbox your games. There's a reason I run Steam in a flatpak, on Wayland... Convenience is part of it, but that's not the main one.
Well you could also have matchmaking servers and P2P gameplay without any dedicated servers, which is popular with console games.
I’m wondering the same thing. Is there any evidence of an RCE bug out in the wild? Or was it just wild speculation because the source code is now available?

Unless they specifically hardcoded a back door into the game, I’m dubious a leak would result in an RCE so quickly, if ever.
User dillonmckay is most likely using "demand" in the economic sense, sometimes referred to as effective demand. This refers not merely to whether people want things but how much they are willing—and able—to pay for them. Wants are effectively infinite, but demand is constrained by available resources.
> Should we put a tax on minutes playing video games?

Of course, if it was necessary?

80% of US men for example are overweight, obese or extremely obese, all of which have substantial and known effects on health, with about half overweight and the other half (extremely) obese. Further, the trend is worsening. You also have a context in which one of the main reasons for caloric surplus is sugar which is priced in the food industry at 7700 calories per $1, way more expensive than many healthy choices, and is known to be addictive.

Then you have studies which show a gradually implemented sugar tax has beneficial policy outcomes, without destroying industries, saving many lives and reducing healthcare costs by orders of magnitude greater than the revenue losses (for which the food industry could be compensated, if you'd want), and improving the quality of life for many people who'd otherwise be diabetics, unhealthy, unhappy.

Now if you can show me statistics where 80% of your friends, colleagues, parents, teachers etc, have some kind of addiction to a particular niche of games, which have widely studied and known impacts on physical and/or mental health, and where a small gradual tax can be introduced to nudge people to other games, without destroying the gaming industry, and being able to compensate any losers in the market due to this policy change, then yes... absolutely I think we should put a tax on that.

> Should we reinstate prohibition?

No, we should not reinstate prohibition. We have no evidence that works. There's lots of evidence that a sugar tax works. As is there evidence that alcohol taxes work. All to a limit, introduced in balance.

I'll grant you that these are not trivial questions and we should not try to control people's lives. But I also think there are some policy decisions that make complete sense. Alcohol taxes by the way, are already quite widespread. This isn't some new big-government idea. It's science-based, experimental based, balanced policy making, that aims to give people a choice, but also incentivise the right choices. It's not treated as a moral judgement question, I love sugar, I keep consuming it, but it's also a public health problem and I'd really benefit from not being able to get a big coke for $1 with every meal, but rather for $4 every now and then. (That by the way, is a way more extreme example than any policy recommendations, which is typically 15%, e.g. $1 to $1.15, and works)
To dang, and the rest of the HN crew, I think this should be the link (perhaps merge with the other submission).
Looks like he stopped updating it in 2013, actually. Shame.
I've been hearing that an RCE for TF2 is confirmed but not for CS:GO or the other leaked code/clients.
What’s Different This Time
It's an interesting question and I'm definitely not qualified to answer it in a few minutes! But some ideas...

For a course, I'd start with how a computer works, something simple like a 6502 CPU with a memory mapping; how assembly represents those operations; how higher level languages abstract that; how computers represent different types of data; then move into some overview of languages in common use today; algorithms and complexity analysis; good code hygiene and development practices; common tools in the Unix and Windows worlds. Once you've got all those basics you can move into focuses like graphics, security, web apps, data storage, operating systems.
The h3 function is the default export, you can give it whatever name you want when you import it.
I don't know what this contains, but many times games cannot be open sourced because they use libraries that would have to be removed before they could open source it.
Git-Fingerprint: web fingerprinting tool that attempts to scan a target
Manually build your automated solution
For the bank or the applicants? And was it on top of work that the bank was already doing? Because as I argued, many of the bank's normal functions were effectively turned off so it's not extra work for the bank. It replaces the other work they'd be doing.
It also means that patents restrict the flow of new ideas by locking up the source material for invention.

The idea that invention is a isolated creative force that pops up without dependency on anything else has always been a myth without foundation.
>Unless they specifically hardcoded a back door into the game, I’m dubious a leak would result in an RCE so quickly, if ever.

AFAIK, parts of the source code have already been leaked since 2018 amongst certain circles outside Valve. It's only been in the past few days that this is now common knowledge.
Well then you would be based in Europe, thus ruling out the original qualifier.
Every statement you just made is speculation and not backed up by any meaningful data. While it’s obviously “easier” to find bugs when you can view the source code, making it one or the other doesn’t bestow any magical protections on the software.
What a horrible name for a project.
Why would you want it associated with child sacrifice? It's disgusting and distracts from any merits of the tech.
There's one problem with surrogate keys: they are not convenient to users (too long and not meaningful).

You shouldn't expose those keys to users though.