skysight-inc/HackerNews huggingface dataset:
Exactly correct. In theory, GitHub's app marketplace offers developers a separate option for "unverified listings", which have "no minimum install or user count requirements", but requires your app to be free.

However, when I submitted a new app as an unverified listing last year, I received a rejection email stating they were only "looking for apps with at least 25 installs". I attempted to appeal (based on their marketplace system's text directly stating there was no minimum user count), but I received no response, and none of the ~dozen engineers I personally know at GitHub were able to help.

I can still make my app available, and implement a third-party billing system, but without a marketplace listing it's much harder to gain exposure and users.

All in all, developing a GitHub app was an extremely frustrating experience, especially since GitHub extensively makes internal use of my open source project upon which my GitHub app was based.
Facebook's Civil Rights Audit – Final Report [pdf]
Observation of the Quantum Spin Liquid State in Novel Material
Intel Thunderbolt controller as used in Mac's is a separate chip from the PCH ... perhaps that will be rolled into an Apple T3 for future ARM Mac's.
What about Intel?
Yes and No.

Nero had a very "peculiar" sexual life, but was also, of course, very powerful, which made him an enemy of the Senate that was very conservative about the image of Roman as soldiers.

So it is possible that the stories were true and they used them to dethrone him and later on the propaganda depicted him as a monster.

There were rumors in history, today believed untrue, that he killed his wife Poppea kicking her in the belly, also killing the baby she was caring.

There are rumors of him killing his mother Agrippina (we don't know if it's true or not).

The story says that Nero after losing the wife married his lover Statilia Messalina, but she was too different from Poppea so he started a search throughout the Empire for a woman looking exactly like his dead wife.

He also decided that the sex of the person wasn't important, so when they found Sporo, Nero castrated him and married him in Greece. Story says Sporo was dressed as an empress, but probably he never wanted that life and the castration was forced upon him.

The marriage with Sporo came after the one with Pitagora, when Nero played the role of the wife.

If all of this is propaganda, Svetonio had a great imagination, or, maybe, as the historians think today, most of it is the truth, romanticized, but mostly true.
GCC Compiler Lands Mitigation for Arm's Straight Line Speculation Vulnerability
In the middle of a pandemic, that's simply not true.

Otherwise, sure, you just go get the food yourself in your ca--oh wait, ride hailing. In a taxi? On a bike? Within walking distance? But yes, just go to the restaurant, unless there's a global pandemic that requires many people to not leave their homes.
My first thought was that B&N was paying for them as well, the B&N app is/was pretty bad.
Do they really specifically say 'Restaurant X charges $10 for a burger'? Or do they just say 'the burger costs $10'?

Like when you shop on Amazon - they say 'the TV is $x and our delivery fee is $y' - really the manufacturer charged them < $y but they mark up and then also charge a delivery fee, don't they?

Nobody looses their mind at this.
No! Absolutely do not do this! Do not listen to this idea! Regulation is the wrong solution here! Warning! Jaguars will eat you if you do this!

Prosecute the dumb startups for breaking the law. Don't force everyone to comply with some stupid pricing regulations and fill out a trillion forms when they're not doing anything wrong. Legislators should legislate, law enforcement should enforce laws. Regulators will just be captured by private equity and forced to set rules to that make the regulatory burden higher and higher for new companies, unless they have "friends" who can "cut" the "red tape", which means being financed by these predators.

Regulation is the lazy answer for politicians who want to have no understanding of the issues of business responsibility, and just pay some unaccountable "experts" to decide what is acceptable.
AWS Is Using Customer’s “AI Data” and Storing It Outside Users’ Selected Regions
Not sure that sort of low level access is possible while the app is backgrounded. However, automatic sleep trackers have been available without official API since what, watchOS 2? So maybe.

You can also try to convince Apple to add that workout type. https://support.apple.com/en-us/HT207934

Look forward to WWDC 2021, introducing the favorite workout type of billions of people.
Fidel Castro was at the heart of Middle East politics
> People run linux because they want visibility and control into what is happening on their systems.

I mean, not really? Or rather, that's not the only reason, or the main reason for many users.

Many people just want to use a FOSS OS, for the reason that any buggy component can be forked, fixed, and PRed, which—if you're an IT organization yourself—often means far less turnaround time than waiting for the appropriate vendor to fix the problem for you.

Honestly, I'd be fine using Windows Server or some other "cathedral" OS, if I could fork/fix/PR its components. I want a stable operational substrate for my app that's quick to fix in an emergency; I don't care whether it's made out of tiny shell-scripts or huge C libraries, as long as it gives me that property.

In that perspective, snap seems fine (you can still fork/fix/PR a snap) just like Docker images are fine, or systemd is fine.

Maybe, in the end, I'm more of a BSD person than a Linux person. I mostly favor Linux installs for the hardware compatibility and performance, not because it really fits my philosophy.
> The administration of everything is a nightmare.

That's possible, I wouldn't know. I was writing about my experience as an user.
Indeed it is a programming bug - but programming bugs happen. In my experience writing programs as if bugs will not happen is typically a bad idea :)

Throwing an exception here is basically free (just another switch case) and gives the user a semi-descriptive error message. When they then report that error message I can immediately find out what went wrong. Contrasting with a report about a segfault (with maybe a stacktrace), the former is significantly easier to debug and reason about.

assert_always would provide a similar report, of course. However, as we are writing a library, crashing is much worse than throwing an internal error. At worst an internal error means our library is no longer usable, whereas a crash means the host program goes down with it.
Yeah, it takes a careful, charitable reading to not interpret it as "don't bother with understanding or finding new methods, just throw more FLOPS at it".
The interface on our object (O) that you are describing is:

O -> int

Your unit test is concerned with narrowing the interface above to:

O -> int // of specific value based on dependencies

If Os only dependencies are A and C, this can be rewritten to:

A -> C -> int // of specific value

Of course if we assume both A and C, themselves, have dependencies we can recursively rewrite the above until we have a very long interface, but instead you have opted to mock (M) them:

M(A) -> M(C) -> int // of specific value

You then take it a step further and mock the method calls on each to return a specific value:

M(A) -> int
M(B) -> int

becomes:

M(A) -> 3
M(B) -> 5

Okay. Now we can rewrite our interface to:

3 -> 5 -> int // of specific number

and our test to:

3 -> 5 -> 8

and make our assertion that the result is indeed the sum of the inputs (not to mention the ridiculous assertions that specific methods were called within the implementation). Yikes... No wonder OOP gets a bad wrap. All that for what amounts to a `sum` function.

The designer of the above monstrosity could learn a lot from the phrase "imperative shell, functional core". It sounds like dogma until you are knee deep in trying to test the middle of a large object graph!
Attack?

1. your browser opens image from external server (in this step the server gets your IP and potentially user agent as that's how browsers communicate with servers)

2. there is no step 2
I use this url(https://hnrss.org/frontpage?points=95&comments=20) to get decent output in RSS feed but it's still not as good as the feeds that show up in the hackernewslive(https://t.me/hackernewslive) telegram channel.

I have been trying to figure out the filter whoever created the channel is using but no close to figuring it out. :(

It would be really awesome if people can share a filter they believe works better. :) I am trying to reduce the number of meh quality posts from HN in my freshrss(rss.ishanjain.me) instance.
Since this always comes up, here's an overview I made several weeks ago about where Project Zero focuses their efforts:

All counts are rough numbers.
Project zero posts:

Google: 24

Apple: 28

Microsoft: 36

I was curious, so I poked around the project zero bug tracker to try to find ground truth about their bug reporting: https://bugs.chromium.org/p/project-zero/issues/list For all issues, including closed:

product=Android returns 81 results

product=iOS returns 58

vendor=Apple returns 380

vendor=Google returns 145 (bugs in Samsung's Android kernel,etc. are tracked separately)

vendor=Linux return 54

To be fair, a huge number of things make this not an even comparison, including the underlying bug rate, different products and downstream Android vendors being tracked separately. Also, # bugs found != which ones they choose to write about.
Emphasis on the singular form of hand, with the occasional switch. cough

Clarifying for a friend.
iOS 14 Smart Stack
Indeed. Small powers.
There's some information asymmetry. A $24 pizza with free delivery might look to a consumer like a better deal than a $15 pizza with $9 delivery because the consumer can't tell that it's the same pizza. The $24 pizza might be more expensive because they use better ingredients, and the delivery might be free because of a loss leader. Or at least it might look that way to the consumer.
Microsoft’s solution to Zoom fatigue is to trick your brain
I meant in terms of coming up with cash for operating costs in the beginning of the year. Just because you own 100 acres doesn’t mean that you have quarter million liquid cash to get the farm season going until harvest and sales can cover it. Most farm operations run on credit. And uncertainty.

The uncertainty of labour and it’s lack is one more nail on the coffin.

Fun fact: insurance companies and pension funds routinely invest in farmland. This is a risk and speculative game at this point.
> My browser caches downloaded CDN libraries, doesn't that protect my privacy?

> Sadly, no. Even if the file in question is stored inside of your cache, your browser might still contact the referenced Content Delivery Network to check if the resource has been modified.

https://git.synz.io/Synzvato/decentraleyes/-/wikis/Frequentl...
"enterprise class" is a standing term in HDDs for more expensive and more reliable drives, and literally what WD labels those drives. It doesn't mean "small companies never have workloads that need those" (although many might want to wait for cheaper disks of the same size), and the parent didn't suggest so. It seems a bit weird to complain that they worded their answer to restrictively for your liking, instead of just expanding with your experience with specific examples.
Dates and Times in JavaScript – A New API for Dates from TC39
I haven't noticed a difference, but Spotify has like 5 different levels of quality for streaming in the settings. Were you using the equalizer in Play Music?
Meanwhile the cost of monitoring the free fruit situation will cost more than the couple of crates of apple savings
I picked up programming as a hobby and was lucky to get a job making an inventory system for a jewelry store in the mall using dBase II on a Xerox CP/M machine. That was nice.

When my dad and uncle wanted an inventory system for their computer store in the same mall, I thought I could make one from scratch on the Atari 8-bit. It was written in BASIC with 6502 assembly routines. Things went pretty well but disk (as in 5 1/4" floppy) access was slow and tried to fit the stock into memory which didn't fit. Got a bank switching 128 KB memory extender (up from the base 48K). It was fun writing the data compression, search, and sort routines in assembly. The sort was a combination quick + merge sort because bank switching meant that only 1+1 of N banks were addressable at a time. I think it also disabled display DMA for a 30% speed boost during full sorting. I'm also remembering it had a partial index that fit in main+bank0 memory for searches. It did more than inventory, serving as the POS with receipt printer and dot-matrix printed reports. That thing ran for years and years until Atari started making PC clones and something else was used as 'business machine' promotional demo.
Why would you want to broadcast that to the whole world?
I find localcdn to be a better option, it's a fork of Decentraleyes.

Make sure to read the directions, though, to integrate properly with uBO/uMatrix.

https://add0n.com/local-cdn.html
> Yet I don't know no language which would explicitly provide any control over those things.

CUDA provides your explicit cache control through "__shared__" memory.

C commonly has low-level attributes. In particular, you have the "register" keyword in C if you really want to go that route, but compilers have a nice greedy algorithm that is damn near optimal, so its best to let the compiler perform its own analysis for register allocation.

SIMD instructions are easily provided through intrinsics: https://software.intel.com/sites/landingpage/IntrinsicsGuide...

-------

There's plenty of low level languages that provide the control you desire. The main reason for __shared__ memory is that compilers can't optimize memory across threads yet, so we still require the programmer to tile memory manually and think about the optimizations across the many, many threads a CUDA multiprocessor supports.

If you want to explicitly control the cache on x86 systems, use the _mm_prefetch() intrinsic. In practice though, it is pretty rare for prefetching to be useful on modern systems. (Auto-prefetchers will optimize most sequential traversals, and those that fail prefetching can still be out-of-order executed at decent speeds)
I think this only works out for google due to their business model and scale. Like if Google was a subscription service, would people pay 5x more for the long tail? I'm guessing not. I think the reason that the long tail is viable at google is that the higher value searches happen infrequently. You buy cars, houses, insurance, less often than furniture or toothbrushes and the ads are priced accordingly. So in essence you need a problem where the value and the frequency are inversely related.
New Cybersecurity ABC Books for Red and Blue Teams
Some tips:

- Decide first what type of role would you be interested in ? And this is not always driven from your current experience but most likely, your current experience will be the most relevant. You said you are a Principal Software Engineer with at least 7 years of experience ? Do you want to be ready for a similar job or are you interested in a different role that you know you are capable of.

- based on your determination from above, you then need to work on your Resume and online presence. Do you need a github ? Not really. There are lot of github profiles out there that are basically just a fork/clone of other projects without any new work being done. Instead, create a 1-2 page website about you with your Resume on it. Make it easy to learn about who you are and if you are worth a second look on paper. Focus on "accomplishments" instead of technologies especially as you become more senior over the years. I couldn't care less if you are a Python or PHP developer if your Resume talks about solving real problems at work that are similar to your prospective employer.

- I highly suggest starting a blog. It is hard I know. It is difficult to write. But talk about things you have learned. Not only tech but general stuff. Things that gives a prospective employer indication about the type of work you like to do. For the right employers, it will help. No one knows who you are until you show. This is an old saying "Show, Don't Tell". Figure out what works for you to show who you are and then let people find you hopefully.

- Ageism is absolutely a thing. But there are plenty of good companies/hiring teams that look for experience and value it. Because they need it. Find those teams. Ageism becomes a bigger issue when you are that guy with 1 year of experience 7 times instead of actual 7 years worth of experience. Which one are you ? Challenge yourself and find out.
Part of the "M is for Malware" series!
Some restaurants just raise their prices to compensate for delivery fees.

One extreme example is a burger restaurant in SW Seattle that charges $6.80 for a burger if you buy it in the restaurant and $12.00 if you order it on a delivery app.
Show HN: Perf Track – Analyze performance of sites that use frameworks
I would also disagree in general that these require no commitment. I've done a handful of MOOCs, mostly for fun, but I stopped on most of them because I realized they were really time-consuming. In particular exercises with deadlines instead of considering that most people doing these classes work full-time and might therefore prefer to complete at a slower pace.

On the other hand, apart from niche areas indeed nobody seems to care about certifications.
And written by Vince Gilligan! He also wrote my single favorite X-Files episode "Bad Blood"
We only use first names and last initials along with cities for social proof to show that people are winning, and we only show when a ticket has won a notable amount so there's a fair amount of randomness to who shows up (currently >$10)

We also allow you to be completely anonymous from the privacy settings within the app.
> If a delivery company charges me 70 dollars to deliver a flat screen tv that's fine, but if they charge me 70 dollars but also markup the price of the TV 25% I'd consider that pretty dishonest and would at least want to know that I have the option to save 25% by managing delivery on my own.

...but this is exactly how other industries already work and everyone's fine with it!

When you buy a TV from Amazon they both mark it up and also charge you delivery!

And they didn't give you the option to save by managing delivery on your own!

Why don't you get mad at Amazon for marking up products as well as charging delivery?
It might be false but it's not logically impossible, for example if you were breathing through a tiny but non-filtered hole the aerodynamics could make it very difficult to breathe while allowing aerosol droplets through in small quantities. In fact, there is a good lesson buried in the insanity, which is that having something over your face, even if it is making it harder to breathe, might not be perfect protection.
Showmax launched a new video streaming service in Kenya and Nigeria
I'm sorry but this article is garbage.

> That is, I believe that even if we were – by some impossible-to-imagine means – to produce a general AI tomorrow, we would still have 200-300 years of full employment for every human who wanted a job ahead of us.

The guy think that automation is far ahead. And people are needed for the economy to function.

> That money is mostly chasing the same goods that were available before the crisis (rent, groceries, and debt service) so it’s not crowding out other buyers and causing inflation

Which is the same as saying that all people quarantined are doing BS jobs. Since they can be without that work but the economy is functioning and supporting all of them. Which means, if I'm reading it correctly, that we are already past the automation stage.

Here is one job that we could do without: The OP job. He is writing BS articles that probably could be written by the next few iterations of GPT-X.

The irony.
Seems to be the way things go around here unfortunately.
Demystifying the Real-Time Linux Scheduling Latency
Decentraleyes already does this.

> What does it do to protect me when it has no choice but to allow a request?

> Even if a resource is not locally available, Decentraleyes offers improved protection by stripping optional headers from intercepted CDN-requests. This keeps specific data, such as what page you are on, from reaching delivery networks. Whitelisting a domain does not affect this measure.

https://git.synz.io/Synzvato/decentraleyes/-/wikis/Frequentl...
They never did solve the security issues around either one though, not to mention performance issues. I remember flash in particular had a lot of nasty security vulnerabilities, and I remember Java applets that we’re memory hogs. I use to play online chess through a Java applet via FICS, and it never did perform well at all
New Cloud CNO Development Projects
A typical GPU has a bunch of small microcontrollers on it, usually Cortex-M’s. Those need to be licensed. I wonder if Nvidia’s interest in RISC-V is just to replace those microcontrollers?
It looked like the spl levels at low frequencies were comparable to other IEMs, with a peak in the high frequencies surpassing the other IEMs, and at a lower THD. The peaks could easily be equalized within an active system. These seem ideal for optimizing small Bluetooth audio devices like the AirPod or hearing aids, so I don’t think any of your cons apply for this use case. I agree with the final statement, but it’s not clear that the first 3 are actually non issues in an AirPod scenario.
Su Hui's Star Gauge
I think you nailed it -that's why Amazon is a success..a culture where brilliant people working crazy hours for little reward (now).. obv that gets harder to translate when you have thousands of employees...
Buying individual drives to shave a few pennies is pretty foolish to begin with, so why stop there!

Make it an OEM problem.
Ask HN: Which companies allow employees to retain IP for side projects?
Most companies make you sign agreements which say all IP created during employment is owned by the company. A fair number of companies allow employees to retain IP related to side projects as long as they don't directly compete with the company's products.

Here's my short list : gitlab, stripe, github.
Another reason proxying requests to external images is important is that some browsers will display an HTTP Basic Auth dialog if the image request responds with the right kind of 401. It’s confusing and sort of disconcerting to see a basic auth dialog pop up from a random site if you’re just browsing Github.
Exactly what happened in SF. Uber Eats stopped delivering to Treasure Island as a result:

"The Order limits our ability to cover operation costs, so we have had to revise the areas Uber Eats can deliver to in the city. Unfortunately, this means we cannot continue to serve customers in Treasure Island. The Mayor’s Emergency Order limits the commissions we charge restaurants for access to our platform and delivery services."
For an even more extreme example, think of something like Wolfram|Alpha.
I've been doing research into how well sites that use popular JavaScript frameworks and libraries perform and built this to make it easier for anyone to see.

This probably goes without saying, but perf.track isn't an exercise to compare the performance of frameworks against each other. There are way too many variables that need to be considered before that can be done, and I built this to instead provide trends and insight to both framework authors and developers.
Show HN: SquadMap.app
open source graph viz tool built with svelte and cytoscape to map exposure risk of who you hang out with (especially for countries still in this mess...).
I'm open to feedback!
I think someone did the math and the effective interest factoring in the expected value of the prizes is just above 3%. That's significantly higher than what you can get with a regular savings account.

https://news.ycombinator.com/item?id=23781247