skysight-inc/HackerNews huggingface dataset:
attacker.invalid is good.

So are <anything>.invalid, <anything>.test, or <anything>.example. They're all reserved and don't route.
Pacified consensus: how to retrofit leaderlessness into a Paxos or Raft
I've waited 10 years for this.
The 256-bit vector instructions do trigger a downclock, but not as severe as the AVX512 downclock.
Scramble Puzzle Solver in Python
Not exactly true. Ubuntu 20.04 supports this out of the box and lots of VMs therefore also do.
Fridge that moves heat outside in hot climates
In a comment to an old thread about solar fidges, Scoundreller remarked "What would really make sense is a fridge that moves heat outside in hot climates.". It would not not only make cents but millions of dollars!
I side with @bgroat a bit, the unit economics seem a bit steep. I like the idea of filtering internet content in general for 100% completion. I think there is something there.

I'm not sure if the incentive for creators is there, e.i. why would a creator share revenue for fully read articles?

I think you found a value-add for the demand-side of the market but not the supply-side. That's something I'd iterate on :).
Here are some facts: https://nces.ed.gov/naal/kf_demographics.asp#3 , about 14% of adults in the US in 2003 had little to no reading skills.
Thanks KDE for the great collaboration. Your pragmatism and patience are greatly appreciate. Glad we could make this partnership work well.
Russia's industrial power before WW I was larger than a lot of people remember.
> It doesn't force companies at all, only those that are comfortable shipping source libraries end up adopting such languages.

Yes, and the others are left behind and don't get to participate in (and infect) the ecosystem. Sounds like a win to me.

> I used to work for a company that shipped encrypted Tcl source code and provided the necessary interpreter hooks to access the code in its encrypted form.

Surely.. if the interpreter can decrypt the code then so can the user? Minification and obfuscation are of course still possible, but the whole encryption thing seems pointless.
Yes that was a very odd thing about moving to SF: people using credit cards on <$5 transactions and merchants actually allowing it.
Does raft work when people are trying to attack it? My understanding of it in its normal application is fuzzy enough.
Again I must be missing something since I thought the wikipedia page addressed this. Perhaps you looked only at a few people on that list. This party has had a successful candidate in Minnesota:

https://en.wikipedia.org/wiki/Reform_Party_of_the_United_Sta...

As for what the two parties, they are pretty entrenched, but not 100 percent given the examples I noted. But also note that both are broad coalitions, not under any small group or individual's control. Rather than having completely separate parties that operate together as a coalition in parliamentary systems. It amounts to basically the same effect. The Democratic party is a coalition of Liberals, progressives, certain immigrant and minority groups, unions, and centrists. The Republicans are a smaller coalition of conservative christians, neocons, moderates. There's some other factions in both. Neocons for example, are essentially a group that switched parties, considered liberals who side with conservatives on foreign policy. In any given election some faction might gain the advantage and win with their nominee. Meanwhile a large chunk of the country identifies as "independent" of these parties. Also note that primaries are essentially democratic too, with the nominee having to win votes to gain the nomination. Not smoke-filled backroom meetings or something. In some states, anyone can vote in a party's primary.

If it was a one-party system, then clearly not democratic, sure. But a two-party system isn't such a clear problem to me. More of a process difference.
Data storage using 2D materials instead of silicon chips
School kids: Digital divide to digital partition
I missed the music! This is awesome
Vouching is for things that are [dead]. It’s marked [flagged] because enough users have clicked the flag link.
Are these Satoshi's Bitcoins?
I think that is one of the major hurdles to being an independent developer, TBH. Developer relations is a real thing and is a position that is worth the money. I have the majority of the skills to make a game from scratch, but I couldn't get it published with any real competency.
I think in reality, SW development done right is nothing like that.

I would argue that it's more correct to say something like "Not all software development done right is like that." Or in other words, some software development is closer to that model.

Some teams are doing work that involves real "invention", things that require using cutting edge C.S. research, implementing algorithms from papers, or using just-released open source libraries, etc. Other teams are building the nth iteration of some CRUD application that amounts to a database, some REST API's built using Spring Boot, and a UI built in React, where today's work isn't (usually) that different from yesteday's work.

Depending on which end of that spectrum your project falls on, it would make sense that the details of the methodology you use would need to vary.

I've also long thought that the details of your development methodology need to vary throughout the lifecycle of the project. Early on, there may be less clarity, and more "unknown unknowns", so it makes sense to focus more on experimentation and learning. Later on you (hopefully) start to converge towards a deep understanding of what you're doing, and can move more into the "gradual refinement" mode of work.

Unfortunately, I have found that few shops take either of these factors into account.
The developer claims otherwise, that you can do the same with any app: https://twitter.com/lapcatsoftware/status/127794139284581171...
As a redis user for more than 8 years, i just want to say thank you. I had embedded redis 2.8 on small IoT system with 200mhz/64Mb of ram to huge cluster as a message bus (redis-as-kafka pattern).
Want a shared memory with a type system? Use redis. Want a queue? Use redis. Want something easy to mock, with an API in all major ecosystems? Use redis.

Thanks for your work :)
also

curl findip.win
I really don't see what the problem is here. Stallman himself is OK with using proprietary software if it runs on someone else's machine. For example, here https://stallman.org/stallman-computing.html, he states he uses DuckDuckGo and ixquick, which are not clearly free software. (Though, they might be free software; their server code isn't distributed to the user, so even under the GPL they would not have to also distribute the source).

So what if GitHub is proprietary? So long as you don't run their JavaScript on your machine, your computing can still be fully free. And, if the problem is that Microsoft will prevent some project from being developed there, they can take their local Git (GPLv2 licensed) repositories and push them somewhere else.

This all seems like a win from the FSF's perspective. Their projects are easier to discover and to contribute to, the developer's computing can remain fully free and the FSF does not need to pay for hosting.

Flex being BSD licensed is a slight problem for copyleft, though.
SEPA transfers are free :)
> Someone's interpretation of their own sexuality or gender affects no one but themselves.

This section was already covered by another user, but I'd like to provide an example too:

So, you fall in love with someone, and marry them. You have children with them and you have a nice family. Everything is going great until one day ... they confess to you that they have always felt like they were the opposite gender. This was not disclosed to you before you said your vows.

You want to support them because you love them so you encourage them to treat their dysphoria. You think it will be fine.

But then it turns out that when they begin to transition hormonally, you're no longer attracted to them. This is no fault of your own, sexuality is what it is, but you kinda feel like the person you were in love with has died. Your marriage falls apart. You're hurt. You feel vaguely betrayed even though you weren't really.

Whenever you try to talk to someone about what happened, just to vent, they all take your ex-spouse's side.

This is the content that was in a lot of the posts on GenderCritical. People who were hurting who wanted a place to vent about something a SPECIFIC person in their life did without automatically being labeled transphobic for working through their feelings.

Additionally, all the posters there were cis women. Men and trans women were asked to go somewhere else. Occasionally they would make exceptions and allow trans men to post, but for the most part it was cis women.

People who don't know better think of GenderCritical as aligned with the alt-right, but basically they are a despised part of the left. They would vote in the interest of women, being feminists, which meant NOT voting with the alt-right.

One of the main reasons they asked men to go elsewhere was because more often than not, those posters WOULD be aligned with the alt-right, and they would not have the best interests of women in mind when discussing things. Alt-right men would just see a subreddit that seemed to be for bashing trans people and be like "Sweet! This is my new home." and all the radical feminists would be like "nuh uh, out."

Source: I starting doing a deep dive into this community about a year ago to attempt to understand them.
No, Safari is just an easy way to exploit this bug.

In principle, it works with any app that can be convinced to run arbitrary code by changing its resources. What Safari is doing isn't wrong and wouldn't cause an issue if TCC would check the entire app, including resources.

It's true that you can't use this to copy the privileges of _any_ app, only of those that have this property.
Trusting them to protect your arbitrary data is a completely different scenario; there’s just more concentrated risk (i.e. your identity is just gone when Apple gets taken).
It might be better titled "Microsoft is bleeding into the GNU Project". Honestly, I'm not super bothered by GNU using github, because everybody uses github. I mean, it's the hub for git repos! At the risk of making more bad puns... well, I can't think of anything worse than the last one, but my point stands that github won this war, and while GNU might feasibly use gitlab or similar, github is where everybody is at, and it's very quickly becoming the place people search for code. It's almost like, "your code isn't open source because it's not on github." Github is code google.

EDIT: It should be obvious that github being "code google" is not great for freedom. It's brilliant on the part of Microsoft, in the same way that securing a monopoly on OS's 20 years ago was brilliant. With the cloud-backend->web-frontend being our new defacto operating system, Microsoft is set to achieve this once again. Azure and GitHub synergize really well together. At this rate, the default way to deploy open source code will be VS Code -> .NET 5 -> Github -> Azure, and we will be at Microsoft's monopolistic mercies once again, enthralled to the cloud instead of running our own software that we own (even if we don't understand) on our own hardware that we own (even if we don't understand), and maintaining some semblance of ownership over our own computing and communication with one another via these computers.
Very nice. Was a bit confused by the jump to splines and fitting splines to butterflies, more explanation would be appreciated
Antirez is an inspiration, for me at least.
Not only because of what he achieved, Redis is a very nice piece of tech, but also because of his programming style.
How could I know are my card credit or debit from system's point of view?
I have two cards in my bank, both are exactly same MC cards, embossed, and all (not some Maestro variation). One card is linked with my current account — I have real money at this account, my employer pays my salary by transfer to this account and such. I can not pay if thus account is depleted.
Second card is linked with credit account, where I have some limit, and I need to pay off in 28 days after end of each month or I'll pay draconian interest.
But cards are exactly the same, with very similar numbers.
And I never had any problems with any if these cards, like one works and other doesn't.
Is one of my cards debit and other is credit or they are credit both?
Again, there is nothing special about a "system call", it's one of MANY entry points into the kernel. Counting them in isolation means nothing. And, again, Linux has historically been very careful to resist arbitrary subsystem-specific bloat in syscall variety. Almost all of its new kernel-exposed functionality uses other mechanisms (e.g. sysfs, new filesystems like cgroup, etc...) which are more auditable and amenable to userspace-managed authorization via stuff like filesystem permissions, chroot and containers.

And of course, as with everything else, virtually all this new functionality is modular. Don't want the system call (or whatever)? Don't put it in your kernel.

Basically: you're wrong here. Cite the specific functionality you think is being shipped in an insecure way.
They fulfill a task, if you want the short answer.
No idea how to define 'task' here
> The key difference is that the USA has a reputation to protect. It has so many allies, both military and economic, that if it sells out one of them for purely transactional gain, it weakens it's relationships with all it's other partners.

You do know about the industrial espionage by Echelon, right? On that front that pretty much puts US in the same bucket as China.

Only 1 example of many:

"In 1999, Enercon, a German company and leading manufacturer of wind energy equipment, developed a breakthrough generator for wind turbines. After applying for a US patent, it had learned that Kenetech, an American rival, had submitted an almost identical patent application shortly before. By the statement of a former NSA employee, it was later discovered that the NSA had secretly intercepted and monitored Enercon's data communications and conference calls and passed information regarding the new generator to Kenetech.[71] As German intelligence services are forbidden from engaging in industrial or economic espionage, German companies are frequently complaining that this leaves them defenceless against industrial espionage from the United States."

https://en.wikipedia.org/wiki/ECHELON#Examples_of_industrial...
Calling bitchute fringe seems to be very kind. I just took a look at their front page and they are promoting videos about Holocaust denial and 2 of the first 10 videos are blatantly antisemitic.

Parker requires an account, which I'm not willing to make, but if it's similar to the last conservative Twitter alternative Gab, it's all just racist drivel with barely any 'normal' conversations.

While alternatives to the big corporate social media are obviously needed, they very often attract the most toxic members of society, which most sane people won't be comfortable associating with.
That's a good point, I haven't tried it but I think you're right, which is another great benefit of using hardware tokens.
I can think of few other programmers who have contributed so much, and ever fewer who have signed off in a way that was so filled with dignity. What a guy.
Thank you for such a great piece of software, Antirez. Redis has been an integral piece of my stack for years now.

I, too, am leaving the company I founded soon and have mixed emotions about it. I certainly don’t enjoy the monotonous nature of maintaining software and yearn for those early creative days.

Best of luck to you in the future! Looking forward to seeing what you create next.
Terrarium TV APK Download – Terrarium TV App for Android
Thank you. Redis has been the nervous system of my main project for the last eight years.
Email, Telegram, WhatsApp, etc, etc. Lots of them.
I have suffered through those sprint sessions of hell.

What has worked for me is the following:

- let the most sr tech person ("the architect ") refine the stories maybe with the PM. Then, the same person will point the stories.
- The sprint planning is only for presenting the stories to devs and giving some minor adjustments to the points if necessary
- The architect may deep dive with a dev for a certain task while pointing it.
- That way we have a standard complexity measure. We know different devs will perform different amount of points per sprint . We dont lose time in pointless neverending discussions
- it also works well in Mexico where people are not so vocal so the standard poker planning doesn't go well
Shouldn't 'Safari.app/Contents/Resources/HTMLViewController.js' be codesigned? Why does Safari launch at all if this file was modified?
Personally I will believe it when I see it, at least for Pro line. Apple has the resources to pull it off (although they will be remembered by their keyboard issues for some time), the question is what is Apple's ultimate goal?
You can’t talk about credit cards in isolation without considering the rest of the consumer finance sector in the US.

A big part of the reasons credit cards rose to such prominence is that the banking and payment rails are so incredibly stupidly designed. The check system and ACH which is the highest volume way that money is sent between people with different banks requires you to give out the secret key every time you make a payment. Plus it takes at least 1-2 days to clear which makes fraud more difficult to deal with.

Interestingly the credit card system also suffers from the first part, your number is printed right there on your card. But they’ve managed to find and/or strong arm ways to reduce fraud on their network, and as a consumer I’m not liable for paying it which is a huge benefit.

The author really lost me at the end though, I don’t see how regulation magically solves everything and they didn’t explain it at all. There is already a ton of regulation in the payment industry. And this comically flimsy underlying system could easily be improved by existing regulators, how about starting with small steps and seeing how that goes? Instead of advocating for throwing out the entire payment system all at once under the very flimsy assumption that the government will do it better.
No. Satoshi's coins are scattered over hundreds or thousands addresses.
Same here, and I just absolutely love how well it works. Now if Android SSH apps add support for it, my SSH life will be complete.
How is it different from flux?
Porting SSE to AVX code (with equivalent instruction and proper vzeropper) will increase performance in most case (the only case where it can be slower, on top of my head, is on Sandy Bridge). The same is not true for AVX to AVX512.
The moment a useful discussion starts the scrum “master” will tell you to schedule a separate meeting to discuss it.

Have you considered that if this didn't happen, it would be one of your co-workers on this thread, instead of you, and they'd be complaining that:

"Our scrum standups are supposed to be 15 minutes long, but they always take an hour or more, because people start going down some rabbit hole that doesn't concern half the team, and the scrum master won't politely interrupt and ask them to schedule a separate meeting. So much time has been wasted by this that it's unbelievable."

I have never scheduled a separate meeting to continue the discussion.

Why not?
JSX evaluates to code that looks like that anyway. Not sure why we’d want to go backward on this front.
I love hyperapp! It has very few concepts to learn, and the source code is less than 500 lines. Sadly its ecosystem is non-existant.
I've skimmed the paper, and I'm not sure what to make of it. Definitely you need tools, but even basic profiling is a good start and quite rare. Suggesting changing source code because of the behaviour of a particular compiler version's optimizer is a bad idea generally, especially without checking the optimization reports and investigating tuning the available parameters, like cost models. Optimizers can be quite unstable for good reasons.

The paper isn't concentrating on what are probably the two most important performance governors these days, vectorization and fitting the memory hierarchy, which can make a factor of several difference. ("Your mileage may vary", of course.) Then it isn't obvious whether comparing different generations of compilers was even sufficiently controlled; their default tuning may be for different micro-architectures which were considered the most relevant at the time. GCC performance regressions are monitored by maintainers, but I wonder what real optimization bugs uncovered in a maintained version have been reported as such from this sort of work.

In large scale scientific code, such compiler optimizations may be relatively unimportant anyway compared with time spent in libraries of various sorts: numerical (like BLAS, FFT), MPI communication, and filesystem i/o. Or not: you must measure and understand the measurements, which is what users need to be told over and over.
Am I missing something? The commands for resident and non-resident appear to be identical.

Edit: They fixed it.
> My personal opinion is that macOS privacy protections are mainly security theater and only harm legitimate Mac developers while allowing malware apps to bypass them through many existing holes such as the one I'm disclosing, and that other security researchers have also found. I feel that if you already have a hostile non-sandboxed app running on your Mac, then you're in big trouble regardless, so these privacy protections won't save you. The best security is to be selective about which software you install, to be careful to avoid ever installing malware on your Mac in the first place. There's a reason that my security research has focused on macOS privacy protections: my goal is to show that Apple's debilitating lockdown of the Mac is not justified by alleged privacy and security benefits. In that respect, I think I've proved my point, over and over again. In any case, you have the right to know that the systems you rely on for protection are not actually protecting you.

Substitute "security" for "privacy" and you immediately see why the argument is flawed. "Other people and I have found bugs that bypass security features, ergo security features are security theater and only harm legitimate developers. Better have a free-for-all OS and be mindful of what you install." (Yes, you should be mindful of what you install, regardless.)
> "underground programming world"

it's where you program in a basement.
$30K over 13 years, and 98% of that funding was the lead developer and his wife (plus 10% from another developer) giving their own money to another developer.

It looks more like "wealthy Googlers helping out a friend with a short term gig" than "financing a professional product".

Perhaps you could donate your time as a UX specialist to help these folks who are more versed in backend systems and libraries.
I'd expect the underground programming world to index from zero.
Another problem with this demonstration is that by exfiltrating the data via HTTP, even if it ends up in /dev/null on the other side, the user’s ISP and anyone else in a position to sniff packets along the route can now know the user’s top sites.
RV refrigerator units already do this. They kinda suck.