skysight-inc/HackerNews huggingface dataset:
this game has a bunch of randomness which stops us from knowing where we're going to end up if we make decisions. it'd be like if super mario 64 had a bunch of jumps in it where there was a 1/10 chance you died on screen transition and you couldn't tell where you were meant to jump ahead of time. if you replay or check the seed ahead of time you can find out and stop dying to those things, but in practical play there's no obscure mechanic that stops you from dying because you only had the ability to prepare properly for two elite fights but ended up fighting the third, or because you were presented two options for synergistic scaling for the endgame fights but didn't get offered any more of the one you chose.

they can all get above 50% and watcher can definitely get way higher than that, but 99% is unthinkable because not enough of the ways you can die are solvable with the information available in a run.
Take a look on this one.
https://www.youtube.com/watch?v=vV6t1nv2Fjc
Agreed! I'm also an LWN subscriber, even when I'm checking LWN just occasionally. I support their high quality content, which is so much missing on the internet of today.

Ben, just wanted to say that I especially liked your articles and it pushed me to resubscribe to LWN again. I like the topics you write about, because they really interest me. Good job! I really like AWK, Lua, Go and everything around it, so I'm looking forward to more articles from you.
laptops are very different since they have two gpus, one internal panel, possible external monitors, and any permutation of wiring of gpus to panel/monitors, battery and thermal constraints, screen tearing issues, etc. Stay away.
This is exactly one of the things Terraform would catch and correct in a snap. I rather think Twilio was so confident before they had everything understood and smooth running that they didn't need other tools like Terraform. Infrastructure as code emerged as a thing EXACTLY because cloud's hundreds of consoles and checkboxes and whatnot, although each one simple and logical, spinned out of our mind's capacity to hold.
If you were selling bogus report results for clients you'd still include a non-major thing or two. Gives a better impression of legitimacy than full marks across the board.
Sigh.

The main points I look at a laptop by are keyboard, trackpoint, then display quality, then the rest. I couldn't care less about the Ryzen part; the keyboard looks abysmal.
More paranoid sites may ask when they notice unexpected login sources from geolocation not matching up. I have had that a few times with imprecise addresses and getting warnings from gmail about a DC login attempt while attempting a login from another location.

Not certain about what is legally expected however.
I'm just looking for a helpful, actionable response. All I've seen so far is "X is bad" (not actionable) and "Let's ban X" (not helpful).

What good will it do you that there's an international ban on DNA databases when corporations use the impossible-to-stop one anyway to discriminate against and target you or the police use it anyway to throw you in prison.

The most helpful course of action imo is to learn how best to cope with this new reality. How should we set our expectations when our DNA is public and searchable? Are there behaviors that would once be safe but will not be in the future? I think those are the more relevant questions.
> I actually never used the Instacart app and I can care less.

What is the meaning you are trying to convey here? Genuinely confused by this sentence.
1-10 are of same type..

https://1secondpainting.com/wp-content/uploads/2020/07/1.png

https://1secondpainting.com/wp-content/uploads/2020/07/3.png

https://1secondpainting.com/wp-content/uploads/2020/07/7.png
Perfect, so I, a hypothetical nation state can build targeted and tuned viral RNA for phenotypes and people I know will definitely cause me the most trouble on the battlefield, diplomats, engineering floors, and economy? Oh, corona has among the largest kilobase count? Hmmmmmm. What a fucking coincidence!
Nice ! I would appreciate the category Music Making (=DAW) amongst the four on the top.
Musicians struggle with Apple’s prices and monopoly.
Either sidestepped (the Netherlands), or temporarily overruled (most countries of Europe).

Constitutions provide freedom of movement/association/gathering, usually, putting a fine on being close to others or gathering is messing with the constitution.

It's okay to do so, but only in real crazy events. A virus with a 99+ survival rate is not such event IMHO. We need to make our constitutions virus-proof.
A virtual machine does not imply virtualization, and can use an emulated CPU.
That argument is so bad and is so inefficient that it does more harm than good. People sacrifice their privacy as a trade-off to get something. What do they get by simply releasing all their finances?

Every time I've used it they just laugh it off with "why would I do that?" and think I'm ridiculous.
From an engineering perspective, it's a crappy, rendered-from-js-exclusively page.

(That has nothing to do with the detailed, and very nice content.)
For how many visitors?
It looks like the 10 first ones are mangas.
I wonder if there is a pool of pictures the AI gets inspiration from
As you may have noticed, many states have attempted to end the shutdown, and then quickly reinstated it when death tolls increased dramatically.
Deep work calms the mind. And a calm mind compounds intelligence
hi guys.
my hot photos are here...
http://69chat.club
my nick anna1
As interesting as it is, I'm really curious how this list was compiled. Was it just a manual process, or was it done with some FFT?

As a side note, I'm glad Madonna didn't make the list.
I’ve been using spamex for years. You can generate completely random email addresses.
Next time, use the topic "Looking for your DPO for a GDPR concern"... trust me, someone will read that....
https://1secondpainting.com/wp-content/uploads/2020/07/1878.... looks really like cave painting
The case raise dramatically but not the death tolls.
Ask HN: Who is searching for a co-founder?
Who's searching for opportunities to build and need help?
That's not actually true, but I've seen this talking point often enough that I know it's not really worth engaging in this discussion.
Adobe Premiere now supports AMD hardware acceleration
that qr tab sharing, I've never had a problem going into history > tabs on other devices. even picks up YouTube videos where I left off.
> You started with “most relevantly” and my initial reaction to this follow up is “how is that relevant at all”?

It's relevant to whether the rates are based on competition, or to put it the other way, whether competition affects the rate they can charge.

If Google charged a lower rate, would it change the calculation for porting to iOS, so that Apple might have to lower their rate too? No, because you can't reach iOS customers via Google Play, so if you want to sell to them you still have to pay whatever Apple demands:

> If iOS was profitable before it still is, if it wasn't it still isn't.
I saw BBC article having title "How the Black Death made the rich richer"
https://www.bbc.com/worklife/article/20200701-how-the-black-...

But what I remember from economic history and what the article actually says is mostly opposite.

>Before the plague erupted, several centuries of population growth had produced a labour surplus, which was abruptly replaced with a labour shortage when many serfs and free peasants died. Historians have argued that this labour shortage allowed those peasants that survived the pandemic to demand better pay or to seek employment elsewhere. Despite government resistance, serfdom and the feudal system itself were ultimately eroded.

This was the main effect of the plague. The wealth concentration BBC talks about affected much fewer people.

This time the same is not going to happens because covid just increases demand for automation.
> ...therefore they must be thorough.

I wonder if that's the case here. I don't work in that space but the issues they found seem like they might be low hanging fruit. I've pasted them below for anyone that's curious.

> The Cross Origin Resource Sharing (CORS) configuration on Bitwarden server APIs allows for any clientorigin to access its endpoints.

> The Content Security Policy (CSP) configuration on the Bitwarden web vault application allows for'unsafe-inline' CSS styles to execute.
Devin Townsend?
Floor Jansen?
What does it cost to hire somebody reputable to perform an audit like this? Its something I want to look into for one of my own projects, but I have no frame of reference for what is a reasonable price for a simple full stack app (way simpler than bitwarden for sure)
TIL about "X-Ta Si, X-Ta No". (and, in a cousin thread, that "mall pop" is a genre name. Does it mean music played in malls, or music performed in malls? Do malls even still exist?)

Maybe HN'ers with young children should try and convince them that the world really was low-rez back then and only achieved current resolution this century?

https://i.imgur.com/4rPGp.jpg
This sounds more impressive than it is. I kept an auto-translation going for quite a while from C# to Go just by creating some bash scripts. These languages are so similar, that while not idiomatic, you can be up and running with quite few rules and some simplifications to the original code.

While I believe this is a good arena for algorithms to provide solution, I'm sceptical that ML in its current incarnations is the right tool. The problem is the variations in the problem space: generic programs, need for idiomatic code, renewed design and lack of human insight and ownership. Sure for an easy and specialized solution, this will work and may be helpful as a one-off. That is, if one just wants a straight port and test alot.
I often imagine long lost realities with a twist. E.g. what if the Mayans had electricity? What would the lamps look like?
Which is in itself kind of a problem. What's the endgame here - what are all these lockdowns helping to push us towards? We can't just lock down forever, it's fundamentally unsustainable and the damage compounds over time, and it doesn't look like there's a way out that doesn't involve a large death toll. Nor is there much prospect of salvation from (say) vaccination or treatment any time soon.
Given that hypervisors are essentially 4th generation microkernels plus some hardware emulation slow-path code to handle the cases where the OS kernel isn't paravirtualized to use upcalls, it would be interesting to see RISC-V boards that shipped that boot directly to seL4 from ROM as their firmware. All OS kernels for the platform would be paravirtualized.

L4 provides a pretty minimal and stable interface as a paravirtualization target. If a software ecosystem arose where a hypervisor was always present, you could get away with never implementing all of that attack surface/potentially buggy code in the hardware emulation portions of the hypervisor. The Alpha AXP showed that this sort of arrangement can be very high performance. Hopefully the RISC-V virtualization extensions would provide features (like shadow registers / separate register bank) for very light-weight transitions into and out of hypervisor mode.

In a sense, the Alpha AXP's firmware (PALCode) was a minimalist hypervisor that only supported a single guest OS. The PALCode always handled the lowest-level details, such as lowest-level interrupt handling, exception handling, and TLB / cache management. All OS kernels for Alphas (VMS, Windows NT, Tru64, Linux, etc.) were in a sense paravirtualized for the PALCode, although there were different versions of the PALCode for running VMS and Tru64 / other POSIX-y kernels. My guess is that Windows NT for Alpha AXP ran on the VMS PALCode, given Dave Cutler's role in both the NT and VMS kernels.

RISC-V booting directly to seL4 would look something like UNSW's L4/Alpha project. L4/Aplha was a port of L4 at least partially ran as Alpha AXP PALCode, replacing the normal firmware. Of course, you couldn't run VMS, Tru64, etc. on top of L4/Alpha, but L4Linux is a port of Linux to run on top of L4.
Facebook as a company do not believe in ever rewriting large code bases. You can view lots of their open source/technical achievements as out growths of this belief:
- 2004, write PHP as it's fastest for now

- 2008: PHP is too slow, compile it to C++

- 2011: C++ is too slow, write a VM and compile to assesmbly

- 2012: PHP's type system sucks, write a better typer in OCaml (Hack)

- They have done much the same for Javascript and Python (look at all the typing tools provided by Instagram).

This stuff is just an outgrowth of their deep deep belief in writing code to handle the crazy amount of code they already have.
We have some real scientific insight here.

I’m also sure you are a super successful entrepreneur and so definitely know it’s 90% luck.
Also the response time is probably better with a shorter nerve length between sense organs and the brain.
It says a lot about the value of this list that Katy Perry is there but Devin Townsend isn't.... /shrug
Regarding the article:

Interesting read. I remember having to write a RISC-V implementation in BSV as class project Junior year in college. What a ride that was. It truly is a simple design though, implementing x86 would take more than an an undergrad.
is it the http header?

content-type: text/html;charset=ISO-8859-1

I suspect the developer used utf8 on his system but has no control over the response headers
It kind of does:

class SQL(str):
...

query = SQL("""
select * from table
""")
“As a result of this breach, all user permissions were reset, making all profiles visible to all users”

This seems like the opposite of how a sensible permissioning data model should work.
I sometimes think the same is happening in software.
I wonder, would there be somebody brave enough to go for resolder.
So, why not a KVM ?
Their implementation of time protection is presented here: "Prevention of Microarchitectural Covert Channels on an Open-Source 64-bit RISC-V Core". https://arxiv.org/abs/2005.02193

They use cache partitioning, but that's not the whole story. Temporal fence instruction, fence.t, is introduced.

In their first try, they cleared L1, TLB, branch history, and flushed pipeline. They discovered this is not enough, and covert timing channel persisted.

In their second try, in addition to first try, they cleared cache replacement state, cache arbitration state, and TLB replacement state. This eliminated the channel, achieving Shannon channel capacity of zero.
>Known as “original gangster” or “OG” accounts

Krebs sounds pretty lost. Precisely nobody calls these "original gangster" accounts besides some boomers from the media struggling to understand the community.
Indian Doodle Illustrations (Free)
For “slow” moving object like human body, does synchronised shutter matters that much and if so , is there any tricks to compensate it if synchronisation is not possible?
I'm happy to get my annual Joscha Bach fix seeing that CCC is probably cancelled this year.

His talks are always a firehose of fresh ideas and new combinations of known concepts.

All of his previous talks can be found at

https://media.ccc.de/search?p=Joscha
Why do you find him expressing sadness about him not being able to pass on his genetics, perplexing? Its a primal evolutionary imperative. While possible the rate of child having is very low in same sex relationships in comparrison to the hetro relationships is higher.
If you enjoyed that, make sure to check out https://www.youtube.com/c/KitbogaShow where the guy wastes scammers’ time in creative ways.
Including wearing drag so he can video chat with them.
> I don’t know an easy way to go public without showing the proof, which is another person’s private information.

It might be worth sharing with a journalist; potentially the author of the linked article?
> "All the tools would need to be thrown out"

> Totally and absolutely false. Because an extended Ipv4 would have the same underlying concepts you could modify the tools and continue to use them.

Exactly. ARP64 and DHCP64 etc would be minor modifications and much easier to pick up.
I agree. What made me use macbook for years is their touchpad.

Do you have recommandation of linux compatible laptop with good keyboard and touchpad ?
It would be good to see where Camille comes on there: https://www.youtube.com/watch?v=2H3iix0CMJU
Yes, but that changed very quickly to "lockdowns reduce total deaths" once it became clear that the predictions of hospital overload were wrong.

Now you have places like New Zealand that appear to be trying to keep themselves COVID-free forever, without any clearly articulated path out of the restrictions.
French Post website is down
This sounds like a general description of life at a big company.

At least your company isn't as dysfunctional as this: https://sites.google.com/site/forgottenemployee/

:)
Review: The superfast Ryzen-powered KDE Slimbook
In which country for a long time after ww2 in the UK you where only allowed to take I think £50 out of the country.
In both the Netherlands and Norway that happened because there were limited-time incentives that ran out, so Tesla shipped disproportionate amounts of cars for the last few quarters when they were still available.

Both the "n% of new cars are Teslas" and the "instant n% drop in Tesla sales" news stories are red herrings. They were both artificially caused by where Tesla allocated their production.

The only signal you can extract from this data is basically that the demand for Teslas well exceeds the company's capability to manufacture them, as whichever country or region they allocate more of their production towards will see a corresponding sales spike. This is mildly positive, but given how long it takes to expand production, I still don't think you can justify the share price on this. Right now, if Tesla had much more cars available, they'd be able to sell them. However, by the time they have ramped up production to match the demand, competitors might have something that matches them.
> with each network cultivating its own rules and reward function (criteria for what content is reshared or upvoted).

Yeah, that sounds like trying to evolve even more addicting social networks. Those networks which are more rewarding will have more users, regardless if they are good or bad in long term.
Why software building has become so complex and how Unification may help
How to make console.log() output colorful and stylish in browser
Quality of life. Additionally "our neighbours are doing something wrong and bad so we should too" is not a justification.

Lockdowns cannot stop COVID deaths and in the beginning nobody claimed they could. The idea that Sweden has performed worse than Norway is a massive goalpost shift that is rightly being called out as nonsense. Especially because it's clear how much corruption there is in these figures. Did the UK really do so badly compared to its neighbours, or is that a result of the health body defining a COVID death as anyone who ever tested positive and then died at any later point, of anything at all (i.e. all COVID infections are fatal according to UK stats).
Youch, that's out of our price range for sure. Was that an upfront advertised cost or did you end up getting strung along to it?
Yes your DNA is a secret, just like your fingerprint is a secret.

Companies shouldn't be allowed to aggregate and resell that information. Hope the GDPR will give grounds to close shops doing that.

edit: typo DNS instead of DNA
In case you haven't already tried, I would contact their legal department. I would expect them to be far more invested and effective in fixing these breaches than anybody in the phone-based customer support chain.
UK is a rich country. They can get higher productivity by simply hiring laborers from Europe and not giving them same standards of work and life which EU demands from member states.

That's enough for UK manufacturing to bounce back again.
There's much more to life than working a job. Work-life balance can be tricky, especially if you seek fulfillment, it may take years/decades to find what you seek, be fulfilled and then contribute from your own source.

This is a healthy thing, and one would do well to pay attention and focus on what matters.
The tests/checks seem useful. Good job with that.

But I tried to check a subdomain and that did not work. It generated a report for the main domain instead.

I think you need to work on the overall style of the site. A clean design and a sans-serif font would improve the whole site a lot. Currently it looks unprofessional to me and not like something i would want to pay for.
Thanks.

> Generally, I'd look for a small shop in your local area and vet them.

How would you recommend to vet them to someone without a security background?
It works just fine with javascript disabled.
"So I'm not sure if our budget is going to be approved and that would mean we'd have to let some of you go. Anyway have a good long weekend and we'll get back to our project goals next week. Just keeping it real!"
#define GREATNESS MOST_ALBUMS_SOLD

While there are some amazing voices on the list, it is mostly commercially successful.
Thanks, this looks like a good place to start.
Obscurity as a primary security method is criticized when it exist as an alternative to being, you know, actually secure.

Like, I could have RCE's in my software and hide the source to hopefully slow you from finding them. ... or I could fix the bugs!

But for many things, being "actually secure" isn't cheap or even possible at all... and perhaps obscurity and other less strong tools are the best anyone can do.
I'm a full stack dev looking for a sales/marketing cofounder.

I've had indie projects fail because I built first and tested the market second. I'd like to reverse that process, and I need some help.

My email is in my profile. Always up for a chat/call.
Tangential question: What password manager do you guys use?
Figma Pitch Deck Template (12 Slide Free Version)
Hey Hacker News Community!

My name is Julian, and I'm an entrepreneur based in Germany. Over the past few years, I have been passionate about pitch decks as they are the one challenge every entrepreneur will face on his/her journey.

I recently started creating pitch decks in Figma because it allows my team and me to work simultaneously on the same project.

With the Figma Pitch Deck Template, it is my goal to help founders and entrepreneurs build their pitch deck fast, cost-effectively, and collaboratively.

Proven structure based on the analysis of the most successful pitch decks
100+ investor-ready slides
300+ pre-built elements
Easy & Fast to Edit

For all of you who are just getting started using Figma or want to try it out there is a free 12 slide version to download.

I hope you enjoy this resource and get some value! Let me know any feedback you may have!

Will love to work on the next version of it!

All the best, Julian
Not exactly, but I do often find myself trying to imagine how I would react to being the person who discovered that thing.
Is it valid to treat ethnicity as a confounder for vitamin D given that the belief is dark skin colour in northern climates results in lower vitamin D?
Apple Silicon Macs should not only have IOMMU but apparently each device should have its own. They talk about this in the "Explore the new system architecture of Apple Silicon Macs" video [0] (starting at ~9:14).

[0] https://developer.apple.com/videos/play/wwdc2020/10686
Afaik Soviet ‘estrada’ had lots of videos filmed like they're concert performances but made specifically for TV. With characteristic mannequin stage presence of the artists, the ‘singing hand’, and backing ‘bands’ wriggling incoherently, hands flopping around on the instruments. And no audience shown.

The only thing this mess could kill is my will to listen to anything until Western electronic and grunge stuff finally became widely available.