skysight-inc/HackerNews huggingface dataset:
> Look at the attacks on various human rights activists

I believe all these begin with browser or existing-app based exploits.

None of them seem to rely on tricking the user into installing a new app. That would be too suspicious for the user, and would entail the attacker uploading their exploit code to apple, and giving apple a full list of users who they exploited...
A comment on the side,

>JavaScript Date is broken in ways that cannot be fixed without breaking the web.

I really dislike the arrogant tone that many "new" people employ when talking about some "old" thing they are trying to "improve". (Quotes are there to indicate sarcasm).

Date is not 'broken', it may just not do whatever the author wishes it did; it is not 'broken' in the sense of failing to perform its intended function adequately.

I hope people could change their ways and be a bit more decent in general.

Aside from that, I welcome the new API as I think it would be an improvement over what we have now.
Are there any examples of projects in Idris that do something non-trivial and non-academic?

E.g, websites, video games, etc.
Tool is saving universities millions of dollars in journal subscriptions
"Unlawful acts, performed long enough and with sufficient vigor, are never enough to amend the law. To hold otherwise would be to elevate the most brazen and longstanding injustices over the law, both rewarding wrong and failing those in the right."
Courts need to apply the above to Article 1, Section 10 of the US Constitution, as well as the 10th and 2nd amendment.
I had no idea that SVG even supported filters!

https://yoksel.github.io/svg-filters
I do wish there are Consumer NAS that has all these built in and does it automatically. Btrfs is not available on All Synology Model. And I am waiting for QNAP's ZFS based OS.

It is god damn annoying.
Promising application of BERT and psychology to get emotions from Marketing Copy
I don't think he was saying this is an example of squatters rights. He is saying that squatters rights is an example of a principle where an unlawful act done long enough becomes a lawful act.
Data Companies Are Watching Me
It doesn't help that people keep broadening the definition of terms to be basically all-encompassing. I wanted to write a comment about industrial interface design as an example of a concrete and useful discipline, but I can't find any useful information now. It's hard now to find information on human-machine interfacing vs. computer user interfaces, but as I recall those were once separate disciplines. A quick search for HMI had an article about social distancing of all things.
Anyone who interacted with her got called out by name as racist.
Without the high voltages, static buildup, failing power supplies, missing low end (ok, 200 Hz in this case) and so on. The main similarity is the driver surfaces are both flat.
Very interesting links, thanks for sharing.

So the trend isn't changing we still need bigger models to make progress in NLP and CV, while the algorithmic effeciencies are promising but they aren't giving anywhere near the same improvements as larger models.

I'm curious how long this trend will continue and if there's anything promising that can reverse this trend
Being archived is all advantages. Users don't generally go to the internet archive instead of the source, so it isn't really competing with you for users. People trust it as an independent party, so if you want to be able to claim that you said something a year ago, it allows you to point to it there and prove that you didn't just put it on your website yesterday and post-date it. If you blow up your website by accident, they've backed up the content for free. People like the idea of what they wrote being preserved for posterity.

The percentage of websites that actually opt out of being in the archive rounds to zero. Compare this to the much larger percentage of internet users who opt out of ads by installing ad blocking software, despite many websites whinging at you or refusing to display content if you do.
This is confirmed by K8s/Borg devs on blogs and Twitter. k8s shares not one line of code with Borg. One easy way to tell is every line of Borg is in C++ and every line of k8s is Go.

This thread is a pretty good explanation of how k8s is derived from the need to be compatible with some Borg concepts, while not deriving from Borg itself.

https://twitter.com/bgrant0607/status/1131202013411176448
In this case, it looks like there is a point to it:

> My goal in trying to identify the bug used by unc0ver was to demonstrate that obfuscation does not block attackers from quickly weaponizing the exploited vulnerability.
> Then again, maybe it’s my western sense of morality that tells me the perpetrator should feel guilt. Perhaps they don’t...

I wouldn't say it's your western sense of morality but your personal values. Many westerners sleep very well at night and yet are guilty of the same behavior.
I prefer to pick up the food myself, so that I can be reasonably assured that it's hot when I sit down to eat it. I've gone so far as to buy an insulated pizza delivery bag so we can eat hot pizza at home.

For me, the prospect of lukewarm food kills the delivery experience for me, even if delivery were "free" (not itemized to me).
Well in theory that's what elections are for. But majority of the population doesn't seem to bother that much about those things and elects conservatives again and again. Need to raise awareness on these topics ... but unfortunately our opposition is split between crazy wannabe populists, a green party trying hard not to loose momentum by bringing up "critical" topics and a weak liberal party with a leader who's mostly there for being joked about. (Yeah, yeah, ignorant and simplified classification)
Has the Shift Toward Neuro-Productivity Already Begun?
The Power ISA is open source and well supported by a variety of software isn't it? That's what I'd go with if I were in their shoes.
Epixel MLM and affiliate management plugin
Though RISCs are considered language agnostic, they tend to be optimized for C. One side effect of that is the elimination of rotation instructions which C doesn't have (though GCC can generate them as a special case).

RISCs also don't help with lexically scoped variables which languages like Pascal have but C doesn't.

A processor that was specifically designed for C was called CRISP (and was briefly sold as the AT&T Hobbit):

https://en.wikipedia.org/wiki/AT%26T_Hobbit
Another, probably cleaner way around this information asymmetry is the reviews that already exist on these apps. If you order a $24 pizza and something the quality of Domino's arrives at your door, you're not going to enjoy that place and you're not going to rate it very highly. There are plenty of problems with review systems, but there are problems with price caps too.
Or you have a leak! :)
That is likely true, but slipping in a call to list_lio would be really easy to do. Even if they had a check for the syscall instruction in this case, you could just ROP your way to libc…
Doordash seems to have higher menu prices than the restaurants' own websites, so unless I'm missing something, it seems the restaurant has the ability to choose to recoup those fees from the customer if they want to.

What gets me is that Doordash is triple dipping here. There's the fee to the restaurant, which may or may not translate to higher menu item prices. There's the fixed $2-5 delivery fee which is pretty obvious. And then there's the percentage-based fee in addition to that, 10 or 11% I believe, that's kind of hidden along with the taxes.

I mean come on. Sometimes I am willing to pay a rather high price to have my food delivered. I'm not willing to have to fire up Wolfram Alpha just to determine exactly how much higher, though.
If you remove the need for a jailbreak in order to allow arbitrary code to run on any device, you're allowing arbitrary malware to run on any device.
In the US, it puts the charge on your phone bill and makes it near impossible to contest or get a refund when things go wrong, because dealing with phone companies is usually way more painful than dealing with a credit card company or even a bank.

In the US, you shouldn't ever use this - you should just use a credit card instead.

In the UK everyone uses debit cards, so I'm not sure if this recommendation is still valid. In the US, using a debit card is possibly the only thing you could do that's worse than "bill my mobile carrier."
That reminds me early stage startup’s betting big on Kubernetes
The western sense of morality didn’t stop the admissions scandals to all top western universities like Harvard Stanford and so on.

Chinese universities as far as I know don’t have things like institutionalized legacy admissions.

I’d like people to reconsider the view that western societies are somehow inherently purer or less corrupt. Often it takes different forms.

This can be seen in the way sanctions are imposed for companies using slave labor in Xinjiang but there is not nearly as much reflection on the vast amounts of prison labor in the US mostly of people unjustly given heavy sentences. In fact the number of people in American prisons rivals the number of people in Soviet gulags. Yet there is no shortage of sanctimony or moral rectitude.

Anything wrong with western society is an unfortunate flaw in an otherwise just system but anything wrong outside the west is a civilizational failing that can only be fixed by adopting some theoretical enlightenment values which the west itself struggles to practice without hypocrisy.

We can criticize others and ourselves without essentializing or casting ourselves as inherently moral.
The Cherokee Nation doesn't impose a blood quantum test, you just need to have an ancestor listed on the Dawes rolls.

https://cherokeeregistry.com/blood-quantum/
I think they are both interesting in being both product focused and having a deep understanding of the technology - which is a fairly unusual and a very powerful combination.
> It's also interesting that you choose the word "theft" as though the natives even had a concept for land ownership

There were many tribes living without telecommunications across the Americas with all their varying climates causing different socioeconomic structures to emerge

https://mises.org/wire/did-indians-understand-concept-privat...
This post reminded me of the generator (English, Danish and pirate-english is supported) that I used to write cover letters when hunting for jobs. I sent the same CV for each job.

I was usually called in for an interview for 2 out of 5 times. The CV just lists the different places that I worked and what I worked on. At the end I have a table with the tech that I know. Listed most recent first. I have a picture in the CV and some bullshit about what I do in my spare time. I have kids .. so no spare time of importance.
There are anecdotal reports of doctors/nurses able to pick up certain typical "illness smells" from their patients. Not sure if it's ever been studied more in depth.
Will it allow for using TAI?
ap testing is a lot shorter, clearly not as comprehensive, and graded very leniently in comparison
> It is a useful, buzzword-y term to say: "I care about how users interact with this". Or: "The UX in this part needs improvement".

This. I like the term "UX bug" a lot, ex.

>We have a lot of support issues with doing X.

"Hmm, that's not a bug; users are just doing X wrong."

>Ok, then maybe it's a UX bug.
I love the concept!
I don't think it's actually that important that every language deals with them the exact same way. I interpret that to mean they all translate the APIs as literally as possible between them, using the same method names, same types of arguments, etc. Different languages all have their own quirks and patterns and it's also useful that the library be idiomatic within the language.

Most of the problems I have seen in dealing with time, across various languages, arise from allowing types to be way too ambiguous. A lot of code uses interchangeably things like "UTC -0700" and "America/Los_Angeles" which are actually very different (one incorporates daylight savings and one doesn't). The important fix is that languages start using reasonable abstractions and are stricter about requiring explicit conversions between types rather than trying to implicitly guess an interpretation.

The first library I've seen get this right was Joda in Java, and it later got included into the standard library for Java. It's been copied other languages, and I've used it on the frontend a bit as JSJoda, but the literal translation makes it a bit awkward in JS and I found it was hard to get other JS developers to prefer it over the more popular moment or date-fns. Temporal looks great, it actually seems to borrow heavily from Joda but doesn't literally copy all of the names or methods so hopefully it will be the best of both worlds.
I feel like that's a little unfair; it's a first step, an MVP, no?
I was interested enough in the etymology to do some googling; terrific has its roots in ‘terror’, much like horror/horrific. It was used as a generic intensifier, often hyperbolically, which became common enough that it lost its negative connotation.

https://www.mentalfloss.com/article/56865/why-does-terrible-...
Software Configurations in a Developer's Life
A variety of pedestrian reasons:

- they don’t have the appropriate packaging, ie don’t actually do delivery

- it’s inconvenient for their order pipeline / system

- they can’t vouch for the carrier handling, is the food going to arrive still hot? A shaken mess?

- is the carrier going to add or remove something before it reaches the customer?

Any of those can be damaging for the restaurant, losing a customer, or even downright dangerous in the case of incorrect handling.
And unfortunately some doctors cannot make a proper diagnostic even after visiting them several times, and having a rather uncommon, but not rare, condition. First hand experience.

Well that's life.
Early .NET also copied liberally from VCL. The entire System.Windows.Forms namespace, with base classes like Component and Control, feels very familiar to anybody who made GUI apps in Delphi before.
So proud to have reverse engineered an 0day. Ok, move on. Nothing to see.
> Instead, it is evidence that there is bipartisan support for educational spending, but with uneven beneficiaries.

I'd see it rather as evidence that most educational spending happens at the state and local level, not the federal level.

https://www.usgovernmentspending.com/education_spending
That link doesn't open.
Yes, it's significantly faster because it doesn't require rebuilding indexes (among other reasons probably). Downside is it consumes more disk space.

Stellar is a tool that wraps the template mechanism, and has some benchmarks: https://github.com/fastmonkeys/stellar
I don't see how your explanation shows Microsoft creating the incentive. Your argument seems to amount to "Microsoft is not creating a sufficient disincentive." The problem with creating a sufficient disincentive is that you draw a lot of attention and still run the risk of being outbid when a vulnerability is discovered.
It seems like any harassment complaint would have to be raised by the victims directly rather than by us, the service provider. In practice they just leave the site and never come back.

So what would the recourse be in this case for a bad actor? How about for one who generates dozens of accounts every day and spams others?
For many things there isn't really need to get the payload. Get the IP addresses, DNS lookups and TLS SNI information and correlate to information gathered from elsewhere and you can derive a lot.
AFAICT, the ruling is based on the US' own agreement made after that purchase.
No, it doesn't. Previously, when delivery services got an order for a $10 burger, they charged a $2 fee to the restaurant and a $4 delivery fee to the customer for a total charge to the customer of $14 and $6 of revenue for the delivery service. Now, they're capped at charging the restaurant a $1 fee so they will need to charge a $5 fee to the customer ($15 total) to get the same $6 of revenue.

This is really just an attempt to shift wealth from consumers to restaurants. Now consumers will have to pay one dollar more which goes mostly to the restaurant.
It certainly does look that way for certain classes of problems, as witnessed by the evolution of GPT language models, where the model gets better through sheer use of compute resources.

For many combinatorial problems however, improvements in algorithms can often produce bigger strides than just throwing brute force compute at the problem. Take Mixed Integer Programs (MIPs) -- roughly the optimization-equivalent of SATs -- used for airline scheduling, optimal assignment problems and such. In slide 12 [1] (there are other sources that corroborate), the author notes that MIP solver performance between 1988-2017 had improved 2,527,768,000x.

17,120x was due to machine improvements (single core). 147,650x was due to algorithmic improvements. Multiple cores can also provide a performance boost up to a point, before saturating due to coordination costs. The author notes that "A typical MIP that would have taken 124 years to solve in 1988 will solve in 1 second now".

The biggest improvements in MIP algorithm performance have been due to improvements in solver heuristics (!), because the fastest computations are those that don't have to be performed at all -- i.e. that are eliminated via heuristics.

[1] http://www.focapo-cpc.org/pdf/Linderoth.pdf
> No, no. The biggest question in the field is not one that is answered by "a deeper search". The biggest question is "how can we do that without a search"?

My guess is that we're doing pattern recognision, where we recognize taht a current game state is similar to a situation that we've been in before (in some previous game), and recall the strategy we took and the outcomes it had lead to. With large enough body of experience, you can to remember lots of past attempted strategies for every kind of game state (of course, within some similarity distance).
quite frankly, yes, but that is an entirely different conversation. :)
On a similar note: in "Prehistorik Road Trip", paleontologist Eileen Grogan remarks that shark fossils have a very characteristic smell. That's a human nose, talking about 323 million year old fossils.

Dogs being able to detect much more recent things does not surprise me at all

[0] https://www.pbs.org/video/welcome-to-fossil-country-mpoq6h/ (around the 18:50 mark)
Is this relevant since nearly everything is https these days?
I'm actively exploring/implementing this, which has shaped my thoughts on the topic.

1. I'd have the browser recommend apps to install to open otherwise unsupported MIMEtypes & URI schemes. I think most desktops support this now (certainly FreeDesktop.Org-compatible Linux & BSD ones do via "AppStream"), it'll free webdevs from compatibility worries, & allow low-cohesian features like videoconferencing & (like brimstedt & osrec discussed) apps to be entirely independant codepaths.

2. For the sake of markettability & accessability (unlikely bedfellows) I like to target unusual human interface devices, e.g. voice, "smart" TVs. It should be a goal to work well absolutely anywhere!

3. I was kind of surprised to find that the next biggest simplification after dropping JavaScript is to move forms out-of-line from the webpage into their own codepaths. This allows me to better reuse OS code whilst simplifying hypertext event handling, avoid webdevs complaining that native widgets clash with their designs, & design a better UX for more devices.

4. There seems to be plenty of precedence suggesting it'd be a good idea to allow links to partially update a webpage, or open modal dialogs/popovers. hey.com is a prominant example.

5. The DOM needs to be replaced, it's an overengineered OO monster straight out of the 90's that can be largely replaced with about 10 lines of code in any language. It's expensive for the browser to construct, for JavaScript to optimize away, and for webdevs to deal with directly.

6. I've got almost no complaint against CSS (I found it easy enough to implement), but sometimes author styles actively make websites worse. So support for user & alternate styles should be emphasized to the user, and websites should still look good if they don't provide CSS.

7. Drop support for CSS `position:`, there's better alternatives now & it does more visual harm than good.

8. I prefer XHTML over HTML as it's easier to parse, but there's a better compromise to be reached between the two camps than the one WHATWG prescribes: handle self-closing tags and close any intermediate tags between the current one & the explicitly closed ones. This routine seems to work well enough on the modern Web, even if it'd break some CSS selectors.

That covers the main points, I'm curious to hear other thoughts?
> You should be teaching them rather than condescending them. From my experiences, most people's issues with computers come down to not understanding and finding it too overwhelming to begin to learn to understand. If you're patient and positive with people they can learn.

It's only condescending if you think it's bad to not wanting to learn about computers, which is an unreasonable position.

> ...Once they start to see they can do things for themselves, they get excited and try.

On the other hand, people may be trying to avoid learning how computers work, because they really don't care about computers and it costs time to learn about it. Getting excited about computers, in my experience, is far from universal. They'd rather be reliant on others than fixing their own computers.

And that's okay. No reasonable person would look down on them for the lack of interest.

That's not condescending, as I myself employ such an attitude to many things in life.

I would never fix a car myself, and would not bother to learn how to do it. And I protect myself from myself, by never messing with my car in any manner. Instead, I spend some extra money to buy vehicle renowned for needing less maintenance, buy 24/7 road side assistance, and to get professionals to fix and maintain it. They my "training wheels" and I'll keep them as long as I keep the car.

I don't do plumbing, I can't repair a shoe, I have zero knowledge about raising corps.

Does that mean a car engineer, a plumber, a shoe maker, or a farmer will condescend me for not wanting to learn? I don't think so. We have our specialties, and it's natural to not study everything.

You could say that I don't have autonomy; I'd say I have more freedom, because I only have a few decades left to live, and I'd rather spend time on things and with people that I genuinely care about.
They guy has already served 20 years for a crime which he originally plead guilty for. He was convited for raping a four year old girl.

Why he is challenging it now and by contesting the court's authority rather than his own guilt? Does he expect to be found not guilty under the Cree Nation?
OTOH, maybe the restaurant should get paid less for the food because the patron isn't tying up a table, isn't using the restroom, isn't consuming any water/ice, isn't creating any linen/silver/plates/glasses that need washing.
The whole reason for health insurance in the first place is for healthy, wealthy, or young people to pay for unhealthy, poor, or old people.

That’s the whole reason for any kind of insurance. It’s a mechanism for lucky people to pay the costs of unlucky people. And even lucky people pay for it it because you never know how your luck will change.

If you take your idea for a pricing model to the extreme, everybody pays pretty much what they need to cover their own costs, which could be extremely low or extremely high. This is no different than if nobody had insurance at all.
squatters rights don't amend the law, they amend ownership.

Squatters rights are explicitly codified in the low
oh - also, being able to filter by 'travel required' is nice.

And 'remote' doesn't mean '25%+ travel required' (looking at you AWS...)