skysight-inc/HackerNews huggingface dataset:
Seems it was tried by Postmates, and it didn't go very well: https://www.restaurantdive.com/news/uber-eats-launches-group...
> How do you not see that businesses are run by people too? If their business suffers (rental or otherwise) they suffer just like you would if you were laid off.

So are dictatorships. The fact that Kim Jong Un is a person is not enough to make me sympathetic to his troubles. A lot more context is required to figure out if one should be sympathetic or not to a businessman's situation.

But, as a rule of thumb, I'd say business owners are due less sympathy than your typical working man. At a minimum they have far more capital than a typical person has, which usually means they have far more income, too.
Does anyone have any theories as to how Nanite actually works? I've never heard of virtualized micropolygon geometry before and it sounds a bit buzzwordy. Do we think they are just loading the full model into GPU memory, or are they baking down various LODs and normal maps at compile time through some automatic process? Either way, it's a huge workflow improvement. It's just unclear what's actually happening...
Well, yes, I should have said “popular OO” instead of traditional. I did mean the Java’s and C#’s, Ruby’s and Python’s of the world, not the Smalltalks.

> So the point being that all major languages embrace both paradigms.

Sure, nowadays, most languages are very much multi-paradigm, but typically there is a dominant paradigm and the others are somewhat second-class. For example, in recent years, Java has gained a lot of functional programming feature too, but its not in the same ballpark as Haskell.
It seems to make compound words just like humans do

gigafactory

nonplayable

waterboy

pepperjack

unreimbursed

interop

nonalloyed

backdoored
I edited it to clarify I meant that as a lower bound. Even if it were somehow achievable, 3 bytes per triangle times hundreds (plural, so at least 200) of billions of triangles is at least 600 billion bytes: 600 gigabytes.
Can you take the words as input and generate the definitions?
> This may also result in the suspension of related Google services
associated with your Google account.

Get all your emails off gmail ASAP, pushbullet developers. It may be more than your extension that gets nuked.
Lots of local pizza and Chinese food places have done delivery profitably for years without intermediaries. Also, not local, but Jimmy Johns does delivery as well and makes it work.

On whole, these places don't rely on sub-minimum wage help any more than other small businesses do.
I wish I could read the article as the headline sounds interesting. Alas, paywall...
We never use plaintext http so that is a reasonable thing to remove for our first-part domain (pushbullet.com).

We use localhost to communicate with our desktop application. An example is preventing both our extension and desktop apps from showing notifications on the same computer (our apps are all about notifications so this would get unacceptable very fast). Maybe if we limit it to just the local port we use? Seems like it can't hurt to try that too.
So do "Deep Work"? Kind of what it sounds like based on what you've outlined
> Oracle and SAP are so dominant that even Microsoft uses SAP instead of their own ERP offering, Microsoft Dynamics.

This is insane. If it's hard for a company like Microsoft to move away from SAP and shift to their own solution (hence saving face in addition to the $$$), I can't imagine anyone switches software in the ERP world
You're lying. This is obviously a white supremacist site. See:

One section is titled “toll paid,” and it lists women who have been in interracial relationships, and had something horrible happen to them, like death or injury.
This white-label service would be B2B rather than B2C (like doordash), which wouldn't get the same buzz or VC valuation.

Great idea though. If I'm buying from a restaurant, I want them in control of the experience. Even for pizza.
> Now the RSA signature verification scheme they use to verify the firmware does suffer from some weaknesses but afaik doesn't lead to arbitrary code execution (on any of the Ridge ARC processors).

Hi, I'm the author of Thunderspy. I'll restrict myself to answering your first point.

There appears to be a misunderstanding. The first vulnerability we found is 'Inadequate firmware verification schemes'. We do not claim a general ability to run arbitrary code on the Thunderbolt controller. Rather, we found that the signature does not cover the data in the SPI flash essential for Thunderbolt security. We've released tools that allow you to modify the SPI flash contents without changing the parts of the firmware covered by the signature (see [1], exploitation scenario 3.2.1 in the report [2], and the PoC video [3] that matches the latter scenario). This is how it is possible to read and modify device strings, uuid, and secret values. The steps for doing specifically the latter are detailed in exploitation scenarios 3.1.1, 3.1.2 and 3.1.3. Please let me know where you got stuck.

[1] https://github.com/BjornRuytenberg/tcfp
[2] https://thunderspy.io/assets/reports/breaking-thunderbolt-se...
[3] https://www.youtube.com/watch?v=7uvSZA1F9os
Does FreshDirect have a nice map mode that tracks the driver and does it let the driver contact you and stuff?

When you have to intercept them downstairs because you're in a restricted-entry tower, that's crucial. D:
Clojure does hot code reloading as a built in. You essentially send code to a running system and you change it. It’s enabled by a dynamic class loader. I wouldn’t say it’s common outside of Clojure though, the whole language and ecosystem is built around this concept.

To be clear: JVM enables the feature, so “technically” JVM allows hot code reload. Not sure how useful this is in practice for non-Clojure JVM users.
Anyone knows which stack they are actually using?
Ask HN: What's your quarantine side project?
For those who are still under lockdown, what are you working on / building / learning?

I've been making excessive amounts of bread.
"For a lot of people, who have more expenses than savings and are not in highly demanded jobs, quitting puts them at great risk. They have a metaphorical gun to their heads. They might not die the moment they quit, but by quitting they are endangering themselves and those that depend on them. Their relationship with employment is inherently coercive."

With all of that said: whose responsibility is it to avoid this type of situation? Is it anyone (or anything) but the individual them-self?

And should one unfortunately find themselves in this situation described above, whose responsibility is it to figure out a solution? Is it their friends and family who is responsible? Their neighbors? The government? Are you responsible?
I have seen this a few times. In fact one place I've worked had it so bad that this was entire MO for a "director's pet" engineer. it would not even be a fully functional product but just a proof-of-conceptish hacked together design that demos basic feature with a bunch of shortcuts. this would be just credible enough to take credit of the design and move on. I have even seen him create a bunch of confluence pages with half baked info just so that the claim could be staked.

usually this is accompanied by technically clueless management.
That's a lot of good faith you're giving these automated systems...
The Go rewrite is in progress: http://engineering.khanacademy.org/posts/goliath.htm
Maybe, but photogrammetry is a waaaay cheaper way of producing assets, and being able to directly ingest high res models from a scan could actually drop the art costs of games a great deal.
Oakland has shotspotter and my understanding is that it's been considered a failure
Good on you for doing takeout instead. It's safe with a mask, gloves, and care. It nets you a nice break from the house, and it directly supports the restaurant staff.

Also, IME, the order accuracy is vastly superior. In fact, a few people ordered lunch to our workplace yesterday, and they didn't have one of the non-meat items I ordered (intentionally), so they replaced it with a meat item, without even trying to contact us first. Just insane to think someone thought that was an acceptable substitute, let alone without even confirming.
I was going off of this:

> Thus, when vertices are shared, the total amortized storage required per triangle will be 12 bytes of memory for the offsets (at 4 bytes for three 32-bit integer offsets) plus half of the storage for one vertex—6 bytes, assuming three 4-byte floats are used to store the vertex position—for a total of 18 bytes per triangle.

From here: http://www.pbr-book.org/3ed-2018/Shapes/Triangle_Meshes.html

And I they said hundreds of billions of triangle, not just billions (timestamp 6:29), but another commenter made a point that's obvious in retrospect that it's a ton of reused assets, not hundreds of billions of totally independent triangles.
The latter acts indignant when you call them a racist, while the former owns it.
If I understand the geometry images paper correctly, you don't have to ship the original assets. The technique uses fancy topology to encode a mesh as an image --- x, y, z of each vertex being the r, g, and b channels of the image --- and pages the images into the GPU on demand. You can downsample the images as much as you want
Surely exclusivity/not sharing the route is a USP for the taxi service for this offering?
yea I like this idea... tech should be empowering people to cut out the middle man, not create services that rob them with 30% cuts of the profits on delivery
> In fact, this change is meant to give developers a way to create safer and more performant ad blockers.

Imagine anyone actually believing Google is trying to help ad blockers. What a dumb thing for them to even say.
What's more is that chat history is broken, I can't see tons of messages on the web interface.

You can still access some on the web.

But your best option is to do a GDPR request to export you all your data.
If Fortran has been around for this long without a standard library, then what do people use now? Does each compiler have its own? Are they very different? Is there much of a need for this since it hasn't existed for 60+ years?
There is a very big difference between a system that can localize gunshot sounds and surveillance drones.

Assuming, of course, that the gunshot detectors are in fact special gunshot detectors and not a giant array of normal microphones with some algorithms applied to them.
I'm curious how much of this comes from working with unskilled labor (hope that's the right term).

I once worked in fast food right out of high school. 80-90% of the employees were one or more of untrustworthy, unreliable, whiny, always making excuses or trying get out of work. My point being if you start there you might just assume that that's the way it always is for all employees no matter what type of job and therefore feel like you need to surveil.

Most of my tech jobs didn't have this issue AFAIK (though one did) but just as one stat from a random search

https://www.cnbc.com/2017/09/12/workplace-crime-costs-us-bus...
Vanta (YC W18) is hiring as we build simple security and compliance for startups
I'm not saying that's why they turned them off, just another sign that Google is not investing time/money/resources into the Chrome Web store.
why does everyone say Grubhub is not profitable?
There are all sorts of weird (temporal?) artifacts in the demo, I think especially visible in the climbing scene. Look at this cropped capture for example:

https://ibb.co/PrYT6pq

The region below her arm is much sharper/detailed (missing dof/motion blur?) than surrounding area. It seems to be somehow related how stuff is revealed, as her arm was moving up in this bit, so the overly sharp region was covered in previous frames.

Also the shadow (e.g. her fingers) has very sharp pixelated edges which can contribute to the feeling of oversharpness. There are some other lesser artifacts also abound, so yeah, its obvious that the engine cuts corners. But of course that is to be expected, realtime graphics is all about compromises.
strillation
stril·la·tion
the action or process of boiling (a subject, typically an
animal) at room temperature

I have to say this is pretty hilarious
ClassLoader [1] in the small, and OSGi [2] in the large, are good starting points for comparison.

[1] https://docs.oracle.com/javase/7/docs/api/java/lang/ClassLoa...

[2] https://en.wikipedia.org/wiki/OSGi
About a year ago, I started in on trying to establish myself as a Trial-to-Paid expert, since it was a thing I had a fair amount of experience with, wasn't especially well understood or appreciated, and had _significant_ benefits.

Professional and personal life obstructed this, and I've since moved on, but I'm glad to see _someone_ preaching that signup optimization isn't the holy grail.
I'm very happy with Cloudflare's workers so far.

You can store stuff in workers KV (sessions, images, complete static sites, etc) even interact with their global cache with an API.
Millions of Americans do not have health insurance.
I'd stress the "get your own domain" part. This is a _requirement_, or you're going to be going through the same pain again in a few years.

Also, make sure you take backups of your old emails every once in a while. Google Checkout should be able to provide those.
Never said it was easy, I've been there myself, one of the hardest things ever actually...but I did get to decide and we all do!
> Trivial counter-example: Iceland.

Iceland actually has Vitamin D deficiency levels comparable to a country such as Greece [1][2]. Supplements such as fish oil liver are in widespread use.

[1] https://www.careacross.com/blog/are-you-getting-enough-vitam...

[2] https://academic.oup.com/ajcn/article/103/4/1033/4662891
No Chrome, no Google search and no Gmail as default email here.

Hopefully, many others will follow.
> trypigeon [dot] co

Unrelated, but you got multiple ids with value 'feature-1' on your landing page.
You have it right now in the browser Web Audio API, for free[1]

[1]: https://developer.mozilla.org/en-US/docs/Web/API/ConvolverNo...
my acid-test for the code is 'what if we have to add a conceptually incremental feature to this?', apply this and see many of these clever concoctions fall apart.
Thing is, for a teenager / college student, it made sense as a side job. Bang around in a shitty car, make friends you work with, get a discount on pizza for yourself, get tips under the table with no tax, and enjoy that phase in your life.

With these services, it's like as though people somehow expect gig-work - already much less certain than being an employed drivers - to be a career. License and insurance requirements, PPE, and the sheer scale of the middleman operation involved in running a huge app like this - it's nuts to think that it could be done for the same price as the conventional delivery model.
Let's have an app that provides a directory of restaurants in the area, and provides the menu and order form for a selected restaurant.

And we remove all the delivery driver handling crap. Let the restaurant handle that. Sounds like a plan to me.
How to Scale an Application Security Program – Part One
People’s Republic of China Targeting of Covid-19 Research Organizations [pdf]
The business model for HTML/HTTP was and is advertising.

People initially tried subscription models for HTML content but it didn't work so everyone went to advertising based models. Observationally, subscription HTML content models have continued to not work (yes, Netflix, but Netflix is more about video content than HTML content).
airpods
air·pods
a large pair of wings and wings of a bird or other flying
animal, typically used as a guide for a figure skater and
paraglider
"a pair of airpods"
Yup, press the "Generate your own button" on the site. If you want to go the other direction (definition to made-up word) you can hit up my twitter bot @robo_define: https://twitter.com/robo_define
Yep, the three clicks it takes to disable that really drives me nuts.
Code examples are provided at https://github.com/interference-project/interference-test, as indicated in the readme.
However, you are right, this is not obvious and I will fix it.
Documentation in pdf - all that is at the moment, we are working to improve it.

Thank you for your attention.
Save Yesterday’s Restaurant Industry–Or “Let It Die”?
We spend a quite a bit on Google Ads yet they seem to refuse devoting even a few minutes of a knowledgable support staff’s time to our account—even when we’re trying to figure out how to give them more money. For 1-2 years our product shopping ads never displayed and we couldn’t get anyone to tell us why. One day, it just started working by itself (perhaps some engineer pushed a fix).

Contrast this with their sales strategy of aggressively making a human call me every quarter to try to up my budgets. I’m not sure why they are so against helping people succeed with their products...

It’s like they are allergic to manual human processes (unless it’s sales).
Skungpoomery
There are several other Tesla factories that were already open and SpaceX never closed. Their claim that manufacturing is relatively low risk seems credible.
I wanted to like Edge but...

> The browser also sends unique hardware identifiers to Microsoft, which is a "strong and enduring identifier" that cannot be easily changed or deleted.

https://www.bleepingcomputer.com/news/microsoft/research-fin...
One thing I don't understand with these "fake markets" (ride-sharing and food delivery) is what's the end game? It seems like there is no path to profitability.
> With taxis you don't share delivery routes. It is inherently more expensive.

For large parts over here in Germany I don't see route sharing in food delivery as well. Some delivery drivers I can observe via GPS (could be faked, but looks plausible) and many are delivering via bike (Pedelec etc.) or scooter and have limited space to transport also when observing restaurants they often pass a single order ober as well.

This of course can be different in areas with other order frequency and other amount of restaurants offering delivery and other distances. (Don't think many orders go further than 2km here)
I'm British so I don't think I've ever tipped in a bar in my life. We do tip in restaurants but it's not expected like in the US.

It's not just the conversation, I just generally like the vibe in country pubs.
interesting - is it because of the implication that, since they can easily recognize the package, they could also easily "lose" the package? Are people tipping as a sort of implied form of racketeering, or is it just genuine gratefulness for delivering an important item?
This is perfect to name startups / products. Very well done.
Is it just me or does water still look terrible?

UE5 has better water than this, but not by much in my opinion (Halo 3, a 10 year old game): https://www.youtube.com/watch?v=T4eFg-lnpDM
You could embed a very-lightweight crypto-miner script into the page, with explicit UI acknowledgement (i.e. it starts when the user presses the "Verify" button, it displays that it's working and how hard it's working; and it runs until it produces exactly one target hash, at which point it clearly stops), and targeting an artificially-tuned difficulty such that a regular PC should be capable of completing in a minute or two (rather than trying to actually mine for any real blockchain network, which would require absurdly-high hash power.)

This is basically how "e-stamp" system proposals were supposed to work for email; but they never took off because email is an ossified system. The web is not ossified; individual websites are free to implement something like this.

If you're worried about spammers just throwing a GPU farm at the problem: the overlap between spammers and people who own crypto-mining operations is small; and the people who own crypto-mining operations have much-more-profitable things to point them at. So this should mostly stymie spammers—individuals will be okay with sitting around on the page for a couple minutes to complete the action, but it'll throttle spammers' actions way down, to the point where it's mostly not worth it to attack that site any more, vs. some other site (i.e. it'll have the same relative-deterrent effect that putting a club on your car does.)

You could even frontload the work, turning it from a proof-of-work system into a proof-of-stake system. Have the user "buy in" with a large hash workload during user registration; and then trust them from then on. (This is the better approach for a mobile app: direct them to register on the app's website on a PC, and then you can trust that user on the much-lower-powered mobile device, despite that device never generating a token.)

-----

An effectively strictly-equivalent approach is to just charge the user a dollar to complete certain actions.

One famous example of this is the SomethingAwful forums, where registrations cost $10. You can register as many times as you like—i.e. if your account gets banned, there's nothing stopping you from just coming right back again—but you'll need to pay another $10. Seems to work fine, in terms of making it too costly to keep doing anything the site bans people for.
Similar feeling but starting off with the initial leap. The animation of the interaction/grab with the cliff edge looked very off - climbing without the feet touching the rocks.

Creating a scenery with a lot of details depth is fine but it doesn't even come close to having proper animation/character models and especially realistic physics.
See: https://docs.oracle.com/javase/8/docs/technotes/guides/jpda/...
All this for sure looks amazing. But I do not think it will bring anything new to gameplay. There is no big gameplay changes in past 15 years. All shooters, all MMORPG, all strategy games and etc are based on the ideas of 2003-2005 years. Graphics are improving but most games have similar gameplay. I think the biggest next impact to gameplay and game industry will be engine that will be able to have huge zoom ability + ability to handle more than 30 000 players on the same map (of course that also depend on server software and not only game engine). Like traveling from space on ship to planet and after landing and play as a regular 1st person game but all of this with lots of players on the same world (more than 30 000). I think that is next big thing that will change game industry.
Game Devs: Is Unreal Engine the premiere game engine at this point? UE has been a popular engine for a long time and with the recent massive success of Epic Games, I have a hard time imagining Unity or even in-house engines are able to match the engineering that goes into this. That said, I am not familiar with this at all — which is why I’m asking.
The most important change you can make for your email is to own your own domain. Once you own your own domain, changing providers is much easier since it is transparent to the people that email you.

Even if you decide to keep Gmail, you should switch your email to your own domain.
The hotel or office.
lol.

We have the same problem, but on the Google Play Store.

We have an brand name app used by millions of people. We uploaded an update where the only change was a new Firebase library.

Google rejected the update for vague reasons (“violation of Google Play policies” but not telling us which one).

Appealing the rejection, the CSR just pasted the vague policy thing back at us. We asked for more information and they just closed the ticket.

So we took the exact build that was accepted, incremented the version number, and uploaded that. Rejected again.

And there’s no real human to talk to.

No idea what’s going on at Google.