skysight-inc/HackerNews huggingface dataset:
It wouldn't be difficult at all if the optimal running technique was known before hand; I think the goal of many of these RL exercises is to either i) find a better solution than what we may have imagined or ii) confirm that our knowledge was indeed the best possible solution!
I heard someone from Purism talk about designing their own mainboard against ME, but it seems like they found a better and more complete solution by now which uses Coreboot:

https://news.ycombinator.com/item?id=15510428
Ask HN: How secure are private Git repositories?
Would you use them to version sensitive data?

Would Gitlab/Github have access to the underlying content/history?

I wouldn’t use them to store passwords or banking-related information, though how about medical/income/taxation documents or information?
You've been saying recently that HN is like a water cooler.

I feel like disabled people talking about how frustrating they find it when a well funded company makes accessibility mistakes are a useful part of that water cooler conversation.

I know some people find this meta discussion about website accessibility tedious, but perhaps those people should try to show a bit of insight into just how tedious disabled people find it to have to keep making this point, year after year.

(FWIW, I did stop making comments about the accessibility of sites after you said this 5 years ago: https://news.ycombinator.com/item?id=9238739 )
I think the market for enthusiast machines shrinking might just help make the case for lower but still meaningful volume of RISC-V machines. That said, I do think it’s unclear how there would ever be a pathway for them to go from hobbyist machines to competing with AMD and Intel.
Not really in the way you're describing. But S3 supports (and most S3-compatible alternatives as well) signing URLs with the secret key, and with a user-set expiry.

The problem is that it means the requests can't really be cached, so for static assets it's not ideal. S3 supports etags though but I've never touched that so I don't know how well it all works; I personally don't use signed URLs for stuff I want cacheable.
Post-June-2007, but yeah I guess that would round up:

https://en.m.wikipedia.org/wiki/IPhone_(1st_generation)
Settled with https://picturepan2.github.io/spectre/ (After having tried close to 50 frameworks)
and closely related: the "digital graveyard", there's this Wired article of a guy who recorded his father and trained a voice model on his written communication [0]. A place to go if we want to be reminded of the voice, handwriting, face or attitude of a loved one. Faraway stone plates on crowded graveyards don't seem appealing to me in a world where families are often dispersed over the globe.

[0] https://www.wired.com/story/a-sons-race-to-give-his-dying-fa...
Thats what you pay in a private setting when you do it by yourself.

I can do from bare metal to frontend everything. That still doesn't mean that if i need to pay someone doing that, its 10$/month.

When you grow from 'i do that in my time with my ressources and i'm not paying myself anything' to 'i now have an employee and that person actually needs real money every month' you pay more then 10$/month.
Microsoft Patent WO 2020 060606
We’re integrating with Salesforce and other CRM (coming later) not only to give the number of votes, but also to give their worth. We believe that there’s a big difference in these cases: you see X votes with $0, or simply put trials or prospects, X votes and $5K and the last case: same X votes but $75K. On the first case it might be a showstopper to acquire those prospects and convert trials to users. In the second case you’re helping those who might grow over time. In the third case, you’re maximizing revenue retention by making sure those big customers won’t churn out. More visibility on what to prioritize.
It's the Quake 1 physics, not QW. I haven't looked at the QW physics in detail, but I think the main difference is that there's a single frame of ground friction applied between every jump, which ends up making a difference to the optimal techniques.
Ask HN: Will you pay me for this?
Consider the following scenario:

a) You tell me something you desperately want to be good at and make a commitment
b) I follow up with you on a regular basis (email/phone/video), track your progress and send you reports occasionally
> There's already been enough instances of various hardware vendors using very nefarious means to extend the capabilities of their devices and peripheral device drivers.

Sadly enough I think this is a good point. You could say it's the same as saying closed source software and operating systems would be better for that reason, which I wouldn't agree with at all, but this would feel somewhat different.

You would have to force GPL like sharing of modified firmware, but it seems much more involved to verify this on a vendor to vendor basis than say, finding that Lenovo ships some nefarious Windows software preinstalled. As an enthusiast you can just reflash after purchase to be sure, but the average consumer might suffer.

It sucks but the only real solution I see is to just remove these things altogether again.
IKEA LADDA AA and AAA batteries are some of the best I've ever bought and for the price are very hard to beat.

There are some reports and writeups that suggest that LADDA 2450 AA/900 AAA rechargeable batteries are the same as Panasonic Eneloop due to extremely similar characteristics and the fact that they very likely come from the same factory in japan because only one makes Ni-MH low discharge.
For $6.99 per 4 batteries I have yet to find any that can beat these and I have been using some for years without any noticeable drop in capacity yet.

https://www.slrlounge.com/panasonic-eneloop-vs-ikea-ladda-ar...
The Phenomenologically Distributed Human Parasite M0 (1998)
You may be right, but people leaving the site isn't really the key metric here. The key metrics are ad and subscriber revenue: in this case particularly ad revenue.

If the reason they're leaving makes it's more likely they'll come back again in future this may lead to an increase in ad revenue due to more sessions even though average session duration falls.

Obviously I don't know, and unfortunately I've learned not to trust that higher-ups in certain organisations have done their homework on revenue-affecting decisions, but you'd at least hope that they had some data to back up the thinking.
True, but on that point xe was correct because it's the one part of systemd that is neither PID1 nor optional; I was assuming session manager referred to systemd-logind.
And, didn't accounting rules change recently for how you report that on your P&L? He now has to report swings not just value created/lost when he enters/exits a position.

I remember reading something about that in the last year.
5 eyes are more of client states than partners at this point. That's not to say they have no utility, far from it, I think they are very potent. It's just that 'partner' is not the right word to describe them. I say this mainly because they don't seem to have opinions about foreign policy other than the one set by the USA. A better example of a partner in my opinion would be Germany, or France. As for NATO, The only countries that need it are the USA, UK and the Eastern European countries. For western and southern Europe, NATO seems like a gym membership they haven't gotten to canceling. That's not to say member states are not partners or friends of USA, just that they know they can create something better for the current reality. Change was always inevitable, but GWB and Trump might have accelerated it to reckless speeds.
I immediately dismiss as gauche and lacking credibility anyone who even hints at a prescriptivist rule, so my acceptance goes against prescriptivism. These rules make writing unclear, stolid, dull and uninteresting for no real benefit.

In my opinion, parroting prohibitions against split infinitives, ending with a preposition, "snuck is not a word", "'they' is only plural", etc etc not only shows a profound lack of education, this shows an inability to learn, since these so-called "rules" are widely and easily known to be made up whole cloth. To my mind, this is a person who absorbed Elements of Style (perhaps even second-hand from a misinformed high school teacher) and called it a day, believing they understand how English is properly written.

Serious red flag for me.
https://t2sde.org/
While I agree that testing someone on concepts is more favorable than testing someone on tool specifics, I absolutely think there's merit to (tool) proficiency.

If there's one thing I've noticed among the "10x" coders, then it is that they know their environments and tools like their back pockets.
I like this. One of the things that has always bugged me about CSS is that after a few iterations you get non-obvious interactions between rules.

In fact, I’d love to have a CLI tool that would take a website (or a set of CSS files and a sample HTML layout) and spat out the minimally effective CSS required for it — an optimizing compiler, if you would.
The premise of this article is a bit dicey. Sure nobody can sustain oil below $40, but it will be back there within a year.
I use to-do list app and a little notebook
What a weird and disconnected response. Why divert attention to China when the US is being discussed? Feels like whataboutism.
It's easy to learn new languages, hard/slow to learn the ecosystem...

We should get better at creating mixed-ecosystems and cross-language libraries... the JVM was a step in the right direction but most new development completely forgot about that!
What if Google locks you out?
A fish which finds the ocean not habitable, either moves to different waters or evolves to filter out the surrounding.

It does not try to change nature of the ocean.
I'd say there's two main justifications:

1. Lower Risk - based on 40+ year old proven rockets. NASA can't have failures if it wants to get future funding.

2. Jobs, Jobs, Jobs! - spreading out jobs means politicians are more likely to approve funding
Correct, it wouldn't be hard to take the best known strategy and implement it perfectly. Aside from the two points you mention, it also serves as a precursor to applying RL to real levels in which we may not be so sure about the optimal strategy.
If they start mating with bats and pangolins, we're really screwed.
Alixander, thank you for this feedback, we will work on our messaging and what we showcase.
I’d be happy to walk you through the service and make sure we show you how it can serve your business best.
Upd: please shoot me an email to anton@prodcamp.com and we can schedule it.
System76 sells coreboot and ME-disabled computers at quite a mark-up. Yay free market.
I'm 90% confident I saw one of these hornets in upstate NY a couple years ago.

It was active at night, I thought I heard an electric short somewhere on my porch and that's when I looked up and saw it flying between beams.

A few weeks later we find a dead mouse on the back porch. I was about to go remove it when its head slowly lifted up, then back down. So I thought maybe it was still alive but as I watched it more, it appeared something was actually inside the mouse, eating it from the inside out.

A couple days later I find the large hornet on the front steps, dead. I wish I would have taken a picture in hindsight.

A few weeks later I was pretty sure I saw another during daytime flying past me in the yard. Could have been a cicada killer wasp though, as the cicadas were out at this time too.
I actually don't know the exact details, I don't work with finance but that's one of the problems we identified when looking into it.

I think it has do do with how bug bounties generally work. Since bug hunters aren't sending an invoice from a registered company you have to pay employer tax or similar. But as I mentioned, I'm not entirely sure since I don't work with that part. It might also differ depending on where the company is registered.
They would probably be less angry if the adsense bans were not completely random & unjustified.
Maybe look at F# for something .net compatible. Personally its use in some contexts, particularly those using the F# type providers has served me well.

I also prefer to use FSX scripts over CSX in contexts where that is useful. I find my deeper knowledge of the .net infrastructure easier to leverage than having to learn powershell but FSX syntax also cleaner for scripting.
This happened to me. I managed to log in to my childhood Email account (or rather, have it recreated since my dad owned the domain) and open the link from a password recovery email and google still refused to let me in even though I had been logged in on the same computer just minutes ago.

So because their authentication used some stupid heuristic combined with the “no reusing old passwords” thing I was forcibly deplatformed. I’m not making another account, I already wasn’t happy with google and that was enough to make me give them up.
> I don't think that there is a good solution to it.

There is. Put it on a piece of paper in a safe place.
This is precisely what I did. You just said it betterer
I have one account in this situation and no there's no solution at all.
Can the Fed really save them all?

So much for being a self-proclaimed “free market”. We might as well call this the United Socialist States of America.
I like the init system (admittedly, I have not been using Linux long enough to remember a time before systemd), but components like networkd and resolved are a pain to work with in general. I've had the networkd DHCP client fail in situations that dhcpcd and dhclient handled with grace. It is not clear to me what benefit said systemd components provide over the more traditional solutions.
> Or is there some info I didn't get?

You did read the linked article about how the Intel ME essentially makes an open firmware impossible unless/until Intel decides to help us out, right?
> what if you forget safe combination?

Safes with electronic locks typically have (backup) keys too, which you'd need to hide or put in another safe, in case the battery dies.
I'm coming from a place of good faith here so bear with me. My understanding is that any vulnerability here would also exist in accessing any HTTPS website. I'm assuming you wouldn't choose to browse the web without SSL/TLS, so I'm assuming the difference here is that it's the CPU management chip instead of your browser?

I suppose that if you broke SSL/TLS you could commandeer arbitrary AWS/GCP/Azure instances.

For that matter, do you trust SSL/TLS significantly less than SSH?

I guess I'm still having trouble wrapping my head around the idea of not using SSL/TLS.
three thing just killed it for me right away

1) the grid doesn't have gaps between columns. look at the form example, see how the two form field are right next to each other with no gap between them... that will cause a lot of headaches trying to layout even a slightly more complex form.

2) the naming of the colors in the util is inconsistent... they follow bootstrap with info, error, success, but then go with black, white, gray??? wtf is that. what about just sticking with the bootstrap naming and using dark, light, and default like they do. why switch when you already copied 80% of bootstrap's naming convention? makes no sense.

3) back to the grid. there are no viewpoint or reordering classes. do you know how much of a life saver it is to change the column order between devices with a simple order-md-2 in bootstrap. my god... if you ever had to do css trickery to move an element on mobile you see that the reordering in the grid is a god send.

https://getbootstrap.com/docs/4.0/layout/grid/#reordering

i'm sorry, but i personally see these micro frameworks as traps. bootstrap is very easy to recompile and strip out what you don't need to roll your own essentially.
The "I am not saying it is not truth but" is precisely what a paid troll from a Russian farm would use. The goal is not to persuade but to sow distrust and ambiguity.
Libreboot is blob-free.
What we have right now is the public roadmap module. You can also “Bring your own feedback”. We’re working on adding feedback from an email sent to our system. And later we’ll work on embeddable modules to collect feedback and/or NPS, or pushing feedback via the API or integrations with Zapier and other similar services.
I wonder if we will eventually have laws regarding the most essential online services and Service guarantees in the same way we eventually got gdpr

Right now I can think of email and password managers, although email could be further split into the mailing service and the mailing address

If your bank collapses your money is insured to an amount of X.

If your password manager or mailing service collapses you are relying on their goodwill to announce early.

I don’t know but is there a legal basis to inherit email addresses? I doubt it except if you also own the domain

I would also appreciate some kind of officially vetted recommendation for what to do to keep risk low. Something easy to read that can be forwarded to friends and Family.

Internet Service Access has become such an important part of the economy and yet we rely on blogs or the occasional newspaper article telling us what to do.

One day something big might break and it will hurt the unprepared
Most people I speak to about the adsense bans claim their ban was totally unjustified, but then later reveal that they might have clicked on ads on their own webpage "just once or twice to test it"...
> My biggest problem learning a second language is that it's so much less useful than the first.

Your IDE should work with you to make it more useful. For sure your knowledge of another language isn't going to be as great as your first language, but I've personally always relied on tooling around that language to tell me where I'm wrong, then I can go find out why it is that my IDE is complaining and I'll then decide whether the IDEs error makes sense or not.
> The government is not going to let the airlines fail.

Just because a company won't fail doesn't mean it's a good investment to hold on to. Maybe Buffett thinks that it will take years for the airlines to become profitable again, or even that they'll never be profitable again and will be subsidized by the government forever.
These are interview questions first and foremost, so always going to be in an artificial context. But for real-world work I would use SQL plus the relevant amount of aggregation/joining to pull rows into memory, then do the remaining manipulation in the higher-level lang. "The relevant amount of aggregation/joining" is obviously a moveable judgement call based on experience, but one thing I have found is that the more complex yr SQL becomes the easier it is for cardinality errors to creep in, and of course in general you can't easily see the intermediate results, so dropping into a high-level language can also be safer and less error-prone.
Wasn’t Clojure the first language to make use of immutable array mapped tries? I’d say that’s a pretty significant contribution to the realm of immutable data structures.
Any big corporation with security competence is going to seriously care about the security of their corporate and production fleet; the stakes for securing systems only ever increases over time, and threats are only getting more sophisticated. So you don’t necessarily need to believe in the altruism of a corporation to see why their interest in secure computing at lower levels of the stack may actually line up with user’s interests more or less.

But honestly, the best argument here is don’t trust anyone; In theory anyone can inspect the source code and binaries for Corebooted devices. It’s not perfect and there’s obviously cases where you can never be 100% sure there’s no tricks, but IMO it’s still a lot better than the alternative of having roughly the same drawbacks but no visibility.

I’m not sure where this fits in in the grand scheme of things though, because in all honesty trust in computing seems like it’s an unending rabbit hole ripe for abuse. Intel ME may even have been born with genuinely good intentions, but I do think it’s secretive, blackbox nature is the absolute worst part of it all.

(Obligatory disclaimer, I work for Google, all of these opinions are just my personal opinions.)
A context free grammar can handle this fine - as you can see from the EBNF - so no, it's not an example.
Scrolling up they recommend avoiding Purism hardware because

> In particular, the Intel Management Engine is a severe threat to privacy and security, not to mention freedom, since it is a remote backdoor that provides Intel remote access to a computer where it is present.

However, the Intel ME has been disabled in Purism hardware since 2017.

https://puri.sm/posts/purism-librem-laptops-completely-disab...
Last time one of these topics popped up, I got myself a protonmail account. I guess this time I'll start actually using it.
الدراسة+في+ماليزيا
الدراسة في ماليزيا وشروط القبول في الجامعات الماليزية , تجذب ماليزيا عدد كبير من الطلبة والطالبات سنويًا للدراسة بها نظرًا إلى أنها تضم جامعات مرموقة وبرامج دراسية متقدمة للماجستير والدكتوراه والبكالريوس أيضًا ، في هي شروط الالتحاق بجامعاتها؟ ..
Android apps don't trust user CA certificates by default (they only work with web browsers.) You have to explicitly enable this option in app manifest.

Rooting the device enables you to put custom certificates in system store, and bypass this check.
Their "Industry" is selling political agenda and influencing governments for corporate benefit. Seems successful.

> geopolitical disaster

"disasters" are profitable (for those able to benefit from corruption). And enable western/democratic governments to get away with violating their citizens. PATRIOT Act for instance. Read 1984 for background of how "fear of attack" and "security" is used to keep the masses in line.
> But to increase the adoption of EAP, what would be better is a super simple daemon, you point it at LDAP or a file, and it sets itself up for PEAP or EAP-TTLS and you just have to point your APs at it.

You mean like hostapd provides? :)

##### Integrated EAP server ###################################################

# Optionally, hostapd can be configured to use an integrated EAP server
# to process EAP authentication locally without need for an external RADIUS
# server. This functionality can be used both as a local authentication server
# for IEEE 802.1X/EAPOL and as a RADIUS server for other devices.

# Use integrated EAP server instead of external RADIUS authentication
# server. This is also needed if hostapd is configured to act as a RADIUS
# authentication server.
eap_server=0

# Path for EAP server user database
# If SQLite support is included, this can be set to "sqlite:/path/to/sqlite.db"
# to use SQLite database instead of a text file.
#eap_user_file=/etc/hostapd.eap_user

https://w1.fi/cgit/hostap/plain/hostapd/hostapd.conf
The problem was most likely that the image server had directory listing turned on!?

Another problem is if the random image id is leaked.
Not really true, it gets easier the more languages you learn.
I do know of developers who spent their whole working lives using only one language and they are very good at that one language. (I am thinking of MUMPS and the developers I met when working in the medical s/w field)
Should we just learn one language and do we gain by knowing many and why are there so many languages that do the same thing?
If there were to be one language what would it look like?
https://en.wikipedia.org/wiki/MUMPS
Responding to inflammation with firestarter is exactly the wrong thing to do. You should respond with flame retardant instead, or not at all. Do the site guidelines not make that clear? https://news.ycombinator.com/newsguidelines.html

Usually quotation marks in a title act as insulation. I can see how that wasn't the case here, but it's still your responsibility to be a good citizen of the community, rather than breaking the rules and pointing a finger.

If you were responding to the title, you shouldn't have hijacked the top comment by replying to it. I've detached it from https://news.ycombinator.com/item?id=23052700 now.