skysight-inc/HackerNews huggingface dataset:
> I'm not even sure it's at all possible to encode AV1 in realtime without hardware acceleration

On large PCs it's been possible for a while, through SVT-AV1. On phones I think less so right now, if you're talking about using AV1 to get noticeably better rates than VP9.

That said, it's possible that they have a reduced set of tools/passess that can run in realtime on a phone, and it looks like the rate is extremely low, which also improves encoding complexity. Even software VP9 encoding has been rare on phones though up to this point, so I'm not sure exactly what is meant by this change.
> Mouse movements are not a first or last name, physical or email address, [or one of a dozen other obvious examples]

You misunderstand what personally identifiable information is. Each individual letter of my name is also not identifiable, the letters of the alphabet are not PII, but when stored in in the same database row, the separate letters do form PII no matter that you stored them separately or even hashed or encrypted them. My phone number is also not something that just anyone could trace to my name, but since my carrier stores my personal data together with the number (not to mention the CIOT database where law enforcement can look it up at will), there exists a way to link the number to my person, making it PII. Everything about me is PII, unless you make it no longer about me.

Mouse movements may not be PII if you don't link it to a session ID, but then it would be useless in fraud detection because you don't know whose transaction you should be blocking or allowing since it's no longer traceable to a person.

Another example[1] mentioned on a website that the Dutch DPA links to (from [2]) is location data. Coordinates that point to somewhere in a forest aren't personal data, but if you store them with a user ID...

[1] (English) https://www.privacy-regulation.eu/en/4.htm

[2] (Dutch) https://autoriteitpersoonsgegevens.nl/nl/over-privacy/persoo...
This is a question of the artifacts distributed as part of Arch Linux, the tar.xz packages. The idea is to be able to reproducibly build a package from source (where "source", yes, may include binary assets and blobs), and check that the copy you built matches what Arch distributes, byte for byte. This way, you know the packager hasn't introduced unexpected changes.

Since end users build AUR packages themselves, there is nothing distributed, and nothing to verify.
I don't see anything in that link that addresses dick pics. Is it just the fact that this "feature" only works with contacts?
The Georgia Tech OMSCS program is very good and affordable (10K or less). It's also the 7th ranked CS program in the world. And, you can and do interact with professors, not just TAs. I'm an OMSCS grad. I would do it again and strongly recommend it. I think programs like it are the future of higher education.
What did it say, the tweets been deleted.
Why would you do something with several scrolling columns? Scrolling elements inside scrolling elements (such as a page) are an anti-pattern
I already spent 5 minutes explaining my wife how it's neither Hangouts nor Meet, even if it uses the same Google login.

At some point clear marketing becomes a user facing feature.
Very high. I only stop when I start getting the jitters. although, back when I smoked, I was never one that had to have a cigarette and coffee together, but I hear it's very common.
If it runs on 16.04 you could put it in a snap package. I really like it for installing older software. I created a snap package for Scratch For Arduino (S4A), which is a pain to get working natively, but in the snap I can mess with multilib and weird dependencies without it affecting my main install.

I think the advantage of snaps is that you can get easy access to the host system using interfaces. S4A requires access to the USB Serial devices of the host. In snap the snap I just added the `serial` interface but I'm not sure if Docker has an elegant way to do that.
SpectX: Log Parser for DFIR
Myers’ Diff Algorithm [pdf]
Just curious, are you saying there is obvious malware within the Arch official repositories? Are you referring to instead the user repositories (AUR)?

I know Arch has: https://wiki.archlinux.org/index.php/Arch_Security_Team

but I'd be really interested to hear that the official packages have obvious malware.
The problem is that the efforts tends to just instantly become a crappier version of the English-speaking original that most people are going to use instead.
So having medical insurance or not determines whether or not a country is a failed state?

By that logic the US was a failed state before the epidemic. But all you need to do is think about it a bit to realize that's ridiculous.
On the other hand, the bias in the results means they're somewhat incorrect: there is more than one demographic of person, showing only one in response to a query that doesn't ask for a particular one is incorrect.

If you were unfamiliar with them and searched "widgets" to find out more and got widgets of a single colour and form, it would not be an unreasonable assumption that widgets are mostly (if not entirely) that shape and colour, especially if there was nothing to indicate that this was a subset of potential widgets.

It's not so much "demand for diversity" as it is "more accurate and correct representation".
You have every right to profit according to German law. You have to be compensated appropriately for your employer to be allowed to use what you hold the copyright for. Usually this is ensured by your monthly salary. However, if what you did and hold the copyright for becomes a surprise success you have to be compensated appropriately in addition to your salary. In practical terms, if your code makes a billion bucks and you only get a regular average salary you could sue the employer and would probably win.
Oh he had torture in his pocket. 110%. Sorry I meant to write "he would be questioned with the use of enhanced interrogation techniques".

But I don't think they would go ahead and imprison-->torture-->execute his family, his fiancée/wife, his extended family, his neighbours.

I China, NK they would without even spending one minute to think about it. And then they would "delete them from history" (yes I have watched too much Star Trek).

I don't think USA imprisons en masse because people believe in God-A instead of God-B. That happens in other countries.

Again we go back to secrets = lies and US gov has plenty on its back violating rights left right and centre and all over the world. But it's not Saudi Arabia.
We had an "open-ended" project in an undergraduate Computer Security course to discover a 0-day in Firefox. The professor (a researcher, not lecturer, by trade) didn't really have a curriculum, and said this artifact accounted for 70-80% of our grade.

Trying to compile Firefox was already a challenge. That, and each compile took an hour. IIRC, Firefox is built on some esoteric architecture / design pattern that's definitely beyond the scope of design patterns undergraduate students are familiar with.

By the end of the term, no one discovered a 0-day, unsurprising considering half the class didn't even try. There were 90 students in the class, and I ended up being the only person to produce a JS payload that would crash Firefox in one of the newer HTML5 libraries. It's neither a zero-day or exciting or profitable vulnerability though.

Realizing everyone in the class would fail, the professor changed the grade of this project to only account for 30% of the grade. I spent most of my time on this project while disregarding the rest of the busy work for the class. In the end, I got a C grade while my peers who didn't even attempt to tackle this project received higher grades.
I think of the AUR packages as more like ebuilds with fewer safety catches 8)
Right, but isn't there capital costs associated with being able to run them?
Neat. Reduces attacks to conspiracies.
Even people with little human social interaction need to get groceries from somewhere...
In what company does HR have that kind of power to have any voice in who becomes director or executive director?
There's a lot of assuming there. As a conservative of course I care about the environment, and of course I love nature.

There is such a thing as over regulation though and the "green" issues get convoluted with political agendas on both sides.

I disagree with your assumption that conservatives need convincing to conserve nature. Texas is a great examples of green policies done in a practical way. Our wind energy will outpace coal soon.

The problem is people like to put people in a prison of two ideas. Either you believe in science/climate or you don't, which is ridiculously simplified, furthers no discussion, and usually results in insults.
That seems like quite a big assumption. Younger generations today think nothing of spending $xx/month on their phone/data plans and another $x/month on each of Netflix/Spotify/etc. It's not hard to imagine the same people paying real money for social networking sites they value. Search could obviously still do advertising even without any personal data mining, since it knows exactly what you're interested in at that particular moment. Useful informational sites could run ads without the privacy invasion and tracking as well, since they also are aimed at specific target audiences. Plenty more sites would continue to run without a (direct) goal of revenue generation anyway; I see no ads on the free-to-use discussion forum that we're all reading right now.

This idea that the only viable business model on the web is spyware-backed advertising is baloney, and it always has been. There is little reason to assume the Web is a better place because the likes of Google and Facebook have led us down this path, nor that anything of value would be lost if they were prohibited from continuing in the same way.
That makes no sense as a class design - are there so many zero days in firefox that are so easy to find that you can expect undergrads to casually find enough that you can base 70% of the class grade on it?
When I first moved to New Mexico, I was puzzled by the billboards which featured a stern cop and the word "ENDWI". What the hell's an endwi? Eventually I realized it was just the (weird) slogan from the state anti-drunk driving (Driving While Intoxicated) campaign.
Yeah, from what I can tell the U.S. currently has fewer COVID-19 deaths per capita than Belgium, Spain, Italy, France, the U.K., the Netherlands, Sweden, Switzerland, or Ireland. Of course, part of the reason for this might be the timing of when COVID-19 hit the U.S. as opposed to when it hit those countries. But it certainly doesn't seem to me that the U.S. has been doing wildly worse, at least when it comes to the death toll, than most wealthy Western European countries. Germany is a big outlier, with about half the deaths per capita so far when compared both to the U.S. and to most of its wealthy Western European neighbors.

It could also be argued that, even if the U.S. ends up having a COVID-19 deaths per capita rate that is similar to that of Western Europe, people in the U.S. will have a harder time dealing with the economic aftermath of the crisis due to weaker social safety nets. Probably a lot will depend on how efficient the U.S. emergency stimulus measures end up being.

The author of the article tries to connect the COVID-19 crisis to the U.S.'s political divisions and to the failures of the Trump administration, but I am not sure that he succeeds. There are many nations that have less political bickering than the U.S. does and have more technically competent and less divisive people in charge of their governments than the U.S. does, but have nonetheless been suffering from the crisis as much as the U.S. has been suffering.

There are plenty of good reasons to criticize U.S. political partisanship and to criticize the Trump administration, but this article strikes me more as intellectually shallow anti-Trump complaining or propaganda, not as a serious and unbiased analysis of the political state of the U.S. and how that state relates to the COVID-19 crisis.
I really enjoyed Electrical & Computer Engineering, and took CS classes as electives. Felt the math and engineering courses grew my brain, and the CS courses were enough to get me into software. The CS majors I knew seemed to enjoy their choice less!
I'm sorry that your professor treated their instruction as an open-ended research project.
Oh sure, you'd need to do some research. But for sites that openly use http or old TLS, it would be obvious. I wonder what the top 1M would look like.
Amazon seems to start taking legal action every year or so over non-competes, makes a splash in the tech press, and then comes to an agreement. I'm at least half convinced it's just to ensure the non-compete can't be argued to be null and void via failure to enforce.

IIRC the non-compete is pretty wide ranging from Amazon. Makes it almost impossible to get another tech job, depending on how you interpret certain phrases. Fun stuff.
> Trivially, Apple has an engineering presence in various European countries, it wouldn’t make sense to have this clause in their employment contract if it wasn’t applicable everywhere

Usually, multinational employers have a seperate standard employment contract for each country they operate in, written with input from local lawyers. So I wouldn’t assume the IP provisions in Apple’s employment contracts are exactly the same in every country, although they would all be attempting to implement Apple’s global policies to the extent that each country’s legal system allows it.

(I have never seen an Apple employment contract, so this is informed speculation.)
Trump to halt most green cards, with notable exceptions
This is such a great idea! I hope you will succeed
Build cutting-edge applications easily: Liteflow Framework
This 'feature' is especially irritating when one uses grep on some text files with legacy (non UTF-8) encoding, but has locale with UTF-8 encoding. The grep decides that regular text file is binary just because there are byte sequences that are not valid UTF-8 sequences.
You mean on a touchscreen device, or because of a physical disability? Because the latter case seems exceptional enough that I'm not sure how that would legally work (do you have to think of all possible edge cases? What if someone uses dictation because they can't type, does that mean you'd potentially capture social security numbers if you use the microphone for gunshot detection and process the sound server-side?) and in the former case I'm pretty sure taps on a keyboard are not registered as a mouse movement in JavaScript.
Updating the TOS on the Stripe site doesn't really apply when the site executing the script is the site that consumes the API. The user of the consumer site never sees the Stripe TOS.
This is such a great idea love it! I hope you will succeed and can as much people as possible
I was surprised after hearing all the negativity about it on here and other places that I actually like it. I don't see any major flaws - what problems do you have with it?

We used slack before and teams definitely feels like a step up.
Originally, we tried to bring the existing antibody tests that can only be sold to medical practitioners. During that process, we engaged in conversations with the FDA to get approval and we asked them what their concerns are with at-home antibody test kits. Once they explained us, we went back to the drawing board and worked on a solution that would allow us to mitigate the FDA’s concerns.

We then proceeded to present our solution to the FDA. They were positive so we filed for our pre-EUA and now we are working with an FDA reviewer.

I’m not going to pretend that our solution will end being approved. I have no idea since none of us (the three founders) have medical device experience. Nonetheless, we are willing to take a huge risk in terms of money and time, and at least know at the end that we gave it our best shot.
Your life experience seems quite different from mine. When you describe someone as "doing only exactly what he wants to do in that moment", I'd imagine something quite different. A heroin addict. Someone excessively overweight. A kid never doing house-/homework. Or, well, someone playing video games excessive amounts of time.

The thing I wouldn't picture is moderation. Or awareness of long term consequences.

Again, most things that feel good are fine, as long as done in moderation. What you describe doesn't sound excessive at all, so sure, play more. Sounds like you've got the foresight to understand the trade-offs and hopefully have the willpower to not let it get out of control.

Since once it's out of control and you spend 14h/day on games and media for years straight, getting yourself back to normal can be quite hard and require external help.

> I'm pretty sure I won't regret wasted potential, because I know how unique it is to realize it in any spectacular manner.

"spectacular manner"? I feel you're overestimate my standards. It's more a case of "I justified that excessively expensive GPU in 2008 not with gaming, but wanting to do more GPU programming. So why is the best thing I've got to show for the last decade a (nearly finished) CS bachelor?".

I understand to have many years ahead of me. And all of that might leads me to a great path with a happy ending. But right now I'm certain having played less would have made such a path more likely.
Forgive, Director-General of the WHO Says
For what it's worth, I have had 5x Seagate ST3000NV000 drives in a Synology NAS since mid-2014 with zero failures. It's a different model drive (thankfully), but I wanted to put it out there that not all their drives are/have been terrible in my very anecdotal experience.
Even the disambiguation page is missing Google Buzz which existed for a brief time somewhere in there.
Sorry I wasn't clear nothing happens if your application doesn't change, but if you do sooner or later you'll be forced to upgrade your dependencies (could be a bug that you just found, maybe a bug, or maybe a performance improvement) if the updated version won't work on your python it will be tough. You'll have choice to either migrate your app to python 3 or fork the library and backport fixes.

You might be lucky and someone else might do that for you, but it will be harder and harder with time. Already according to JetBrains survey in 2019 (I believe) about 80% of people surveyed they already use python 3.

As for numpy I just checked[1] and the only wheels they are providing for the latest version are 3.5+ the package also says that it is 3 only.

[1] https://pypi.org/project/numpy/#files
2015–2016 New Zealand flag referendums
Are you saying that qbe does not generate any debug information, or just not DWARF format?
Maybe it was just kept in that room while you worked on it. Perhaps that's the room where they move equipment that needs servicing so they only have to secure one route and room for technicians to use.
> You're really stuck on this desire to expose my fraudulent underlying motivations for not wanting homeless people to die in the streets

What's fraudulent is your shameless promotion of taxing a direct competitor of your employer.

Many of your comments on this HN story have included a plug for the tax amazon pac, making all those comments basically political spam and spam has no place on HN.

> You'll be happy to learn far smarter people than you have taken a crack at this problem! Go read the first few sections of Industrial Society and its Future

Referencing the Unabomber? Really? Someone sending mail bombs and killing innocent people is your idea of "far smarter people than you have taken a crack at this problem"? In one breathe you say you don't want people dying in the street, and in the next you're quoting a serial murderer.

> your (frankly, extremely basic) idea that everyone must have a financial stake in policy to desire its realization.

People can desire the realization of whatever policy they want. However, if they have no skin in the game, that desire can be summarily dismissed by others, especially by those that do have skin in the game.
Wait, what?

(The pledge is one of those weird things that looks like it comes from a far more authoritarian-collectivist society than the US)
That’s a major part of why I left Apple for GitHub. Their OSS culture is horrible there.

The only OSS projects that get approved to contribute to are ones where they’ve already hired most of the people that work on it. Cassandra, Mesos, and some other infra stuff come to mine. And occasionally they just buy a whole OSS company for their own use (FoundationDB).

Submitting a patch to a small library you use? A multi-month process to be told no in the end 90% of the time or more. Have your own OSS projects? Not any more you don’t.

In my exit interview I made my reasoning clear, and pointed out that as they move more into services and away from pure hardware as revenue, it’s going to be a bigger issue. Whether they agree or will work to fix it, only time will tell.
> Anyway, unless the client end is really messed up, it shouldn't send both the ACK on the first SYN

This is a race condition; hypothetic sequence of events:

send SYN-0, wait for reply or timeout
timer interrupt fires
timeout to resend SYN(-1) is ready, start running that
packet interrupt fires (interrupts resend)
got SYN+ACK-0, construct and send ACK-0
iret
finish constructing SYN-1 and send it
iret again

This is clearly a bug, but it could easily work >99.99% of the time (especially if the timeout is high enough that normal RTTs never hit it, which is probably how the person setting the timeout would try to set it).
Also, don't forget what happened with H.265 where things were pretty far along with the MPEG LA patent pool and then the second HEVC Advance pool materialized demanding additional payments. Given how cut-throat the space is I am still afraid of that happening once it'd be hard to back away from AV1 — there's at least one company trying that now: https://www.cnet.com/news/patent-group-wants-a-new-toll-on-t...
Ctrl+F "union" 1 result

Of course next time tech unions come up, there will be 10 stories of how their uncle wasn't allowed to plug in a ventilator because he wasn't a union electrician or something.
This subject makes me sad. I've recently heard from a bunch of Apple employees who had asked for permission to contribute to my open source project and got denied.

Having worked there in the past myself, it's really weird to think back on how normal it seemed (to me) to allow an employer to put such extreme restrictions on my personal time.

I hope they change their attitude about this some day.
Well, I have, in fact, finally written the post I've been working on of late. Hopefully, this is a new beginning and I will be more consistent henceforth.

https://raisingfutureadults.blogspot.com/2020/04/the-beginni...
Today is the 184th anniversary of the Battle of San Jacinto, "the decisive battle of the Texas Revolution". Outnumbered Texians defeated the Mexican army in a lopsided slaughter and captured their general.

So a good day for a story with this headline even if it is about littering.

https://en.wikipedia.org/wiki/Battle_of_San_Jacinto
> copyright in German law is non-transferrable.
> I grant my employer an exclusive and irrevocable right to use the work

I am curious, what rights have you retained with your work then? What are the corner cases where you might you still want exercise your copyright?
Especially since, under California law, what you do with your personal time on personal hardware is yours, regardless of employment contract.
I studied the standard models, they are very limited. Causes and effects as DAGs, so there cannot be any cycles or feedback loops. And some assumptions fail when there are deterministic relationships.

I investigated adjustment sets and instrumental variables.