skysight-inc/HackerNews huggingface dataset:
Two can play that game, leaving the second there is a better offer is a just way to reward companies that are taking advantage of the current climate.

If you don't have a safety net though, the companies are right, it is better to be underpaid than unemployed (assuming the payment is still higher than any unemployment benefits you can get).
Did inserting the Huawei E353 dongle attach a virtual CD-ROM drive that you manually installed drivers from? I know for a fact similar devices (eg, ZTE MF910) offer drivers this way. In my experience with such devices, the USB drivers that are built into Linux works fine (just like Android USB tethering), so there isn't any need to run the Huawei or ZTE driver installation.

It's worth mentioning these USB On-The-Go devices (including Android phones and 4G modems) have relatively powerful processors and run a wide variety of network services, including a web server that will never receive security patches (for the end-user web configuration interface), have your high-precision location information. The devices have a high bandwidth internet side-channel (the 4G connection itself) while also having the ability to act as any USB client device (including keyboards to send keystrokes to your computer to eg, open a command prompt and run software).

They are incredibly powerful platforms for targeted cyberattacks and I imagine state actors are using them very often.
I'm interested, though primarily because i'm duplicating the work you're describing - hah.

I'm interested in writing two main components:

1. Information storage, with retention / etc. My initial feature scope is likely going to focus on retention (spaced rep) and storage (archiving sources), long term i want to dog food a general purpose knowledge base.

2. Data storage. Unfortunately every time i start working on the schemas for the information storage i end up reinventing so many features of general purpose data storage, like versioning, data deduplication, etc - i end up with a clone of Git :(

So i'd love to hear some words of wisdom on this subject. I imagine you - sanely - focus more on #1, but that's not an area i've obsessed about yet too much.

This whole topic does interest me though - part of the reason i'm writing the data layer is because i want a git-like behavior to be able to slice other sources of information up with the ease and safety of git. So the idea of information source interop is close to my hear - but the idea of IO with external formats has not been big on my radar.

As i make progress with the information side of things, i'll have to keep that in mind. My model embraced self-hosting and i really want to avoid information hostage. So this convo has already been valuable :)
I have to be blunt - many of my weakest candidates came with these certs. Im impressed when you are already amazing at these things, and then show the discipline to get the cert anyway.

Im passing on your candidacy when you have the cert, but put me to sleep with the practical application. I'm less interested if you can study, and more interested if you can LEARN.
Dr. Longo's research and books have been very informative on fasting. I have no ties to the for profit side of his research but I've tried a few rounds of ProLon, which is a fasting mimicking diet founded from his research. I've experienced great short and more sustained results from using it. I generally approach the work week at a split of 18/6 for IF and don't eat after 8:00P anymore. It will be great to see more research into IF for longer term studies.
Wow. All he did was install USB drivers and bam!

I would expect it from Huawei, but not exclusive to them.
A browser plugin for Unity
This is fancy...
Haha, oh the Wumaodangs...
Wow, I wonder if they spoke about it publicly after the fact. There aren't a lot of stories like this. Did they remember the experience? Was it really a coma or some out of body experience? It would be interesting to see how differently their lives went versus their peers.
I'm sure that helped, but as a Spectrum owner, I'd be breaking code - decades old as it might be - to suggest that anything positive could arise from the existence of that machine.

.

Looking back now, the C64 was clearly a better machine than the Speccie, haha.
> CyberSecurity, the domain that doesn't recruit yet has a shortage.

Yes, they are 100% lying about this. Any time you see an article about skills shortage, it's complete bullshit. It is cheap for them to create the illusion of a skills shortage via articles and blog spam. What they really want is people to spend their own money on training vs. them training their own talent. Then, once you've spent your money on training, you'll still run similar gauntlets in interviews that developers like to complain about.

This is why some of the certs are kind of useless at getting a job despite industry advice to get them. Some places will see something like OSCP and then still give you a time-limited CTF to do before they'll even talk to you about an entry-level position. Other larger companies will praise you for your certs, saying certs + programming skills is what they look for with new people, then just ghost you.

The interviewing process in pentesting is just as bad, if not worse, than development.

Plus, despite most pentesting gigs being more difficult day-to-day than regular web development jobs, they pay much, MUCH less, sometimes as much as $40k less (80k vs. 120k in a large metro area).

All of this is kind of countered by the fact that you can really do bug bounties on your own now, so you may not really need a traditional job. IMHO, you're better off being a developer first before going down that route.
Zenith – htop with charts for CPU, GPU, network
Good point. I'm not sure how much we pay for these as they're not commissioned by me. But knowing the company it's not going to be too much :)
Expanding consumes energy. Shrinking releases energy. When object is pooled to another object by gravitation, energy is released, so these objects must shrink to obey law of energy conservation!
Yeah, a lazy developer introducing a dirty hack is state-sponsored hacking. Give me a break...
Where does this "Hauwei Autorun" come from? The findings you show could have been made by anything/anyone
This question doesn't follow.

We are actively looking for them, employing them whenever possible[0].

[0]: I lost two female candidates I tried to hire, one because she wasn't fluent in a language that a majority of our customers use and one because HR didn't react in time and when she interviewed with us she was also on the way to her second interview at another company.

Both landed well-paying jobs shortly afterwards. I guess we are not the only company trying to look diverse.

There are so few black people around here that I guess the reason I don't see more black coders is just statistics.
A package of equipment, a database of customers, already set up supplier relationships, etc.

And barely profitable includes businesses that would have spent a ton on capital expenditures. If those expenditures can be had for cheap, profits can increase.
And while we’re at it, we can strip the account number of its powers as a payment / deposit authorization. It supremely sucks that once someone has it and your routing number, it can never be rescinded without changing account numbers (i.e. closing and reopening the account, re-establishing direct debits / deposits, etc.)
Is there even any significant amount of inflation occurring…?
Previous discussion on this made it seem pretty obvious that the UFO unit existing was largely (if not only) due to nepotism and they're not releasing anything if substance - just more speculation for more funding.
I also live in Germany! We're in Berlin and we only moved here in 2013 so we dont really care about the family/friends angle (we have no other relatives in Berlin & all of our friends here we've made in the last 7 years, so we could probably make new friends elsewhere easy enough).

You also don't have to go rural, there are plenty of mid sized towns with cheap housing prices (and often a university and/or other cultural institutes, like Halle or Cottbus).

My main concern is that while we don't really standout in Berlin, in a smaller town we will be considered more "exotic" & especially for our kids I'm afraid it will translate to mobbing in school.
How to Use YouTube Ads to Stay Productive
Creditors want their money back, so they might accept an offer.
LSD treats cluster headaches, for some people permanently:

https://www.sciencemag.org/news/2011/06/lsd-alleviates-suici...
The HTML of the frontend is messed up (<head> is duplicated)
If a job is the only thing holding your diet, habits, and exercise in place what will happen when you retire?
the first sentence says it came with a USB stick
GekkePrutser:
> Good!! That's the right approach. I also think these certifications are forcing students to think in the direction intended by the underlying company, whereas hacking is about looking for the unexpected. It's about mastery of technology, not about ticking some boxes and knowing command-line parameters of common tools by heart.

CEH is box ticking. OSCP is breaking into stuff. That hacking is about "mastery of technology" I don't agree with. The latest major vulnerabilities identified this month were very low hanging fruits, and I bet you there's still way too many unpatched instances of BIG-IP, NetScaler and Windows DNS out there right this moment.
...two of which have available POCs online for any scriptkiddie to get their hands on. If not all three... the researchers who found the Windows DNS vulnerability have agreed to hold their horses for a while, letting admins patch their systems before releasing all details.

Latteral movement in an Active Directory environment is trickier than looking up a version number and trying your luck with a POC, sure, but you give too much credit to hackers, man. :P
some quick googling suggests that "autorun" appears to be some sort of usb wifi dongle driver or something, not "state sponsored hacking". Talk about jumping to conclusions
I think even small contributions make a lot of sense, especially if you gradually increase them over time. This is not to gain fame, it's to contribute and support sustainable development. My contributions are spread thin and the amounts sometimes look silly ($5 or $10 per month for a developer), but I believe they do make a difference and I intend to slowly increase them all as finances allow.

I'd suggest looking at Clojurists Together, Github Sponsors and direct sponsorships through PayPal subscriptions.

I look at it as an R&D expenditure (and it goes into my financials as such).
Im less interested in someone else telling me you can do it, and more into you demonstrating you can do it in a situation I care about.

See my earlier comment regarding the relative strength of candidates with OSCP.
I recognize this sounds completely insane -

What if aliens are more of a psychiatric phenomena? Aliens have the ability to cross galaxies and stay undetectable to most of our instruments. They manipulate our senses to stay hidden to us, and have the ability to wipe our memory, which only gets better over time as they interact and experiment on us more. The amount of technology that an alien civilization amongst us has would be incomprehensible to us, using aspects of physics that we have no idea exist. Probably they are observing us now in detail, waiting to reveal at the correct moment - or more likely, they are revealed when we discover far more advanced technology and we learn how to see them.

OK, thanks for reading.
I would suggest OP to take a look at Dedekind's construction of reals using his namesake "cuts". Definitely worth enjoying if this article is any indication in that direction.
> The NY Times has devolved into a political pamphlet and as such has - at least in my eyes - lost nearly all credibility. This is a shame, the paper used to represent the best of what journalism had to offer, "all the news that's fit to print" and all.

WaPo broke incredible, historic stories in its day. Today it's settling a $250M lawsuit against a teenager that they _aggressively_ defamed... for the crime of wearing a MAGA hat and an awkward smile. CNN already paid this kid and his family $25M...

These publications are rags today and I'm glad to have had the foresight to cancel my subscriptions when RussiaGate made it undeniably clear what direction they were moving.
I will never understand how people in the US are okay with this. Don't people care about justice at all over there?
And distraction from other events.
Because the patent is probably meaningless, just like 99% of patents filed these days. But it costs so little to patent stuff so they just throw literally everything at the wall. There's endless patents on technology that doesn't exist or can't exist or makes no sense.
Who is maintaining the ledger exactly? On what terms? Who has access to that account? What controls are they entitled to place on it? Is it maintained by the government?

If yes, then you have a whole new set of problems. Now you have all your funds in one basket. (Remember, you've implemented the indirection mechanism, so it doesn't matter which bank you do business with, it's this weird government one all the time).

Politically, I don't see it happening. Or if it does, it"'ll completely change the color of the financial sector most likely, as most regular people stick with this weird government account, but anyone more financially entrenched (or who have trust issues, and do not desire to let the G-man sit on their financial transaction history) flee to more "discrete" financial institutions.

Fintech is one of those that rarely makes anything fundamentally "better"; just more expensive with more opportunities for fee extraction, and the capability to exploit those economies of scale like nobodies business.

Maybe it is the way to go for a government maintained version. Might make the IRS's job that much easier. Maybe they can get away from only going after the small fry and actually concentrating on nailing down more complicated forms of tax evasion.
unable to read from EU. Had to resort to a US proxy
The difference being that the US is a democracy with the rule of law, and Hong Kong is being denied democracy and the rule of law.

Five demands, not one less:

Full withdrawal of the extradition bill from the legislative process

Retraction of the characterisation of the 12 June 2019 protests as "riots"

Release and exoneration of arrested protesters

Establishment of an independent commission of inquiry into police behaviour

Universal suffrage for the Legislative Council and the chief executive elections

Pretty reasonable. Very relatable for anyone I'd say.
It was big, but now it shrunk.
Considering China is a communist dictatorship, the company is the state, in a way.

Now my biggest guess is that xhost + is being used to allow a process running as root to launch a window into the existing xserver no matter what (probably a graphical client).

It's a very bad practice though. How comes that devices can autorun software nowadays?
Been there, magical place.
There are likely gravitational and electromagnetic anomalies where fault lines meet.
Oh, that's awesome, thanks!
I don't know what you'd consider "credible evidence". You can find tens of thousands of anecdotal accounts, but you're probably looking for something more formal.

It's likely a futile search: Research into these topics is difficult to get approval for, even when it's more "tangible" things like effects on depression or PTSD. In my opinion, we'll probably need another few decades to get there (though there has been some encouraging societal progress in some places recently).

We won't get anywhere in this conversation because we're on two different sides of a fence, and I certainly can't describe what being on this side is like and can only invite people to come over here. It'd be like asking you to describe what the colour green looks like to you.

Which path around, or over, the fence they choose is up to them ...
Mostly, yes. It's a simple but neat game.

There is however some strategy involved in planning ahead. In the early game you might want to place buildings less optimally, to leave room for later game buildings that are worth more points, or set up large bonuses from other buildings.
Would this be done to permit a driver to create windows on the desktop from some place where it couldn't use :0 like normal? E.g. it can't use a Unix socket and needs to use TCP?

I'm very inexpert with X11, but have run remote apps on a local X11 server. But are there any scenarios locally (e.g. chroot) that could be blocking the Unix socket approach for a driver?
(I do not see that line in the article) but that is the point; who made this? Who says this is legit? Perhaps bought off Aliexpress? Or rebadged by the provider?

The "USB Stick" you refer to is the "E353 HSPA+ 3G USB stick" being the device itself; also called the "Surf stick". Google it.
This seems to be in a similar spirit to https://patchbay.pub/.

I love these small services, but I still don't have an idea how they can be scaled up: If you want to use them for anything serious you probably have to prevent abuse and comply to all kinds of regulations.
I think a lot of the issue is that the model of banking has changed. Once upon a time, the business model was that the customer deposits savings, then the bank loans out that money, and the interest they collect is the profit.

But with unlimited free money from the fed, why bother? The fact is that they don’t actually want your money any more. It’s just a hassle to keep track of. They get a lot more money by charging overdraft fees than by loaning your money out anyway. So why should they be eager to compete for savings deposits?
This is true, but there's nothing that prevents you from having a second bank for savings only. This is what I've always done, open a savings account at whatever bank has the best rates, typically an online-only bank. Savings is useful for liquidity in an emergency and I'd be crazy to not try to get a few points on it in exchange for a few clicks.
New SRS tools are great but I am yet to see anything that Anki and Polar doesn't provide.

Rather than seeing half-baked closed source apps like this I would just prefer more devs contributing to Anki.
"Juice detox" is already established enough to not be a new fad, I think.
It would be cool if it was possible to read the data not just by the ID, but also by the hash of the ID.

That would let us serve stuff like version information and links to the latest version, without the fear that somebody is going to reverse engineer our app and replace the data with something malicious.

We, as the app author, would have the full key, so we could read and write, whereas users would have nothing but the hash.
They can't, he probably installed whatever software that came with the hardware.
> In a multiuser environment this could actually be a problem, but I doubt there are many multiuser environments running this driver.

Laptops travel to coffee shops and share their network.
Building your first micro-SaaS app on Shopify
What was happening between 1920 and 1940? The universities were taking power. In 1900, the idea of a professor telling the government what to do was borderline absurd. By 1940, it was normal. By 1960, it was universal—all “public policy” in future would be determined by “science."

And, because the Ring works like that, power was taking them—with its favorite toy, money.

This letter is great, actually.
>Yes, a process running as another user could mess with your X11 session. But if you get compromised somehow that process will almost certainly be running as your current user or root.

This means that any daemon with a remote code execution exploit (even if running as its own, compartmentalized user) can now be chained with this to get complete access to your X11 session.
Personal theory: UFOs are not aliens "like people" but are somehow related to information/energy/consciousness.
Don't be a slave of your own mind – An inquiry into the nature of mind
At this time, it was denser and heavier than any black hole. Why it didn't collapse back then?
> Without any additional tricks...

Yes, the question is about which "additional tricks" are legal according to the C standard. That is, what are the limits of what is technically allowed if you are wearing nothing but your language lawyer hat? Is the rule that anything goes as long as you don't segfault, or something more stringent? For that matter, is a segfault actually evidence that you have broken the rules? Note that this is different the rules for "undefined" behavior, as that pertains to the C source code rather than the generated assembly.

My impression is that the C standard assumes a hypothetical virtual machine that does not specify details like page sizes. I think this means that according to the standard, over-reads must be legal or illegal for a conforming compiler regardless of whether they cause a segfault on a particular real-world architecture. Or maybe the C standard doesn't make any claims as to whether the generated code will actually run on any particularly architecture?

> or simply breaking the rules

Which rule? My conclusion right now is that maybe there isn't one, and that the standard doesn't actually guarantee that a conforming compiler will generate code that runs to completion without segfault in the real world. There are simply too many differences in actual CPU's to make any firm guarantees. It's obviously fair to consider a compiler "buggy" if it does this, but I'm not sure it's noncompliant.
Well, it certainly wasn't a bunch of guys with spears living in huts that put men on the moon - - go figure. Those with superior brains deserve the recognition and the spoils.
The photos of Machu Picchu from above are pretty iconic, but yes, you can wander around the ruins too. We went around 10 years ago and the atmosphere in the ruins was amazing, you could almost feel the history of the place. Also, there were lots of alpacas roaming the ruins too - someone mentioned they helped keep the grass short!
DragonBox Pyra handheld computer inches closer to release
IMO, Go is never a good example in static vs dynamic type system discussions (I mean, for this case: parametric polymorphism has been around since the 70s...).

The language developers themselves have repeatedly stated that its type system being very limited is intentional.

See e.g. here:
https://github.com/golang/go/issues/29649#issuecomment-45482...

TBH, sometimes I wonder why they bothered with static typing at all...
Have you heard of the concept of falsifiability? Replace "aliens" with "leprechauns" and attempt to dispute this alternative hypothesis.
LSD use is actually higher than it has ever been in the US. i apologize for lacking a source, but this was something i saw about a week ago, in the context of highlighting its relative popularity with young, college-educated americans.

that said, it’s hardly a cash cow in the way meth and fentanyl are; and as someone said elsewhere on this thread, one person could probably suppy the whole country.
Yes good point. The ones I know come across as "box tickers". They're from a very high profile IT company but that doesn't say much. I assumed they were all like that but I admit that was an assumption.
Show HN: Open-source bar chart race generator
I would think aliens are far more likely to occur in the universe than leprechauns. I would say its a certainty there is other life, whereas leprechauns are certainly non-existent.
The former Pink Floyd band member Syd Barret fried his brains from LSD but it is not clear whether he ODed or did too much of it over a long period of time. Once the initial paranoia subsided he became a complete recluse.

Having said that, I think LSD is a fantastic drug but that is not for everyone. I’ve got a friend who did it constantly for over 2 years and he is a completely sane person. He claims it was one of the experiences that put an end to his alcoholist tendency which might as well be genetic. His dad died due to alcoholism.