skysight-inc/HackerNews huggingface dataset:
I suspect the reason this stands out is that we normally think of problems in the other direction: someone is able to access something you did not share. In this case, it's being able to access something someone else shared, which AFAIK would often be unsolicited anyway, so the scenario is more like spam than anything related to security.
Most safety standards that address software's contribution to hazards use some notion of "controllability" to determine risk. For example, ISO 26262 explicitly calls it controllability [1], and it directly contributes to how rigorously the software functionality has to be tested.

MIL-STD 882E uses "Software control categories" that determine the risk introduced by software [2, page 15-17]. Since those definitions are hard to track, they also provide a table near the end that tries to be a little more specific [2, page 96].

In other words, the safety community already takes into account the need for human or mechanical intervention when it comes to risks introduced by software.

[1] https://neweagle.net/how-iso-26262-2018-update-affects-you/
[2] https://www.dau.edu/cop/armyesoh/DAU%20Sponsored%20Documents...
The autopilot is still at the control of the pilots, and usually enabled only at higher altitude. Landing/takeoff are still manually flown by pilots most of the time.

I don't have issues with a computers ability to maintain altitude, climb, or turn to a heading. I have a problem with a computer's ability to respond to the unexpected while in the air. For instance, comms failure is a scenario pilots train for and can deal with. I imagine autopilot might have some issues with that.
> This does not have any career benefit whatsoever; it’s done so as to be worthy of our patients’ trust.

"I do it for my patients, not for my paycheck." If you have a problem with that, then by all means, I'm sure you can find another physician that would suit you better.
You might want to use encodings other than Unicode (or need to store strings containing invalid Unicode for some reason). For implementations which support this, I suggest a \x escape to escape a single byte; the \u escape would encode the data as UTF-8. Even when Unicode is used, you might want a separate escape for astral characters, rather than using surrogates (which are mostly only relevant for UTF-16 anyways, not UTF-8; it says that unpaired surrogates are not allowed, but surrogates should not be used at all in Unicode text encoded as UTF-8). This would be application-specific. Additionally, in order to simplify the implementation, you may wish to disallow non-ASCII characters entirely when outside of quoted strings, verbatim strings, and comments; the fact that Unicode characters that look similar are disallowed is the problem, and can be solved by disallowing all of them in contexts where any of them are disallowed. Also, comments should not be required to be valid UTF-8 (although null bytes should still be disallowed). Furthermore, uppercase hexadecimal should be allowed. Additionally, I believe the abbreviation for local time is supposed to be "J" and not "L". Years should perhaps use astronomical year numbering; zero represents 1 BC. And, another thing, is that in some programming languages, the string "2000" might clash with the number 2000 as a key, while in others it might not (actually, the same is true with integer vs float), so I believe it is worth noting that. Some implementations might treat UUIDs as URIs (I suppose any one that does will need to convert it back to UUID when writing it out). Additionally, it says that the programming language must match a name from the Linquist languages list; however, some people may use programming languages not listed there, and although PostScript is listed, it is listed as "markup" rather than "programming", even though it is actually a programming language too (and not a markup language). Other than that, I think that it look like good to me.
I'm not sure what leads you to believe that the forum feedback isn't taken in consideration. My guess is that it is, but that there are about two dozen other things of similar importance and the team can only knock so many of them off.
? The irony is the other way around. FB is free, users provide information, FB doesn't sell it or share it, they use it to place ads. The EU government is concerned about 'privacy' while asking a private, foreign company to hand over arbitrary private data.

Imagine the police pulling you over and asking you to show any emails which included the terms 'deal' or 'partying' or 'the green stuff'.

The investigators are probably barking up the wrong tree.
‎Brave New Workforce: Viva La Revolucion: Remote Work Is Here to Stay
The PDX protests have been relatively peaceful.

Despite that, federal agents were dispatched to quell them.

So "Moms" came out in support to protect the protestors.

Followed by "Dads."

And now US Military Veterans.
> Chris DiBona is paid to care about exactly this issue.

Right, which doesn't really address the point being made above, which is that Chris DiBona is paid to care about the issue, has a position on it, and now has a reason to claim that AGPL code is not useful.
Sorry, this isn't really the case. The AGPL can be used in a predatory fashion. Projects that are AGPL'd are often dual licensed, with a commercial license for commercial applications and AGPL for experiments. I once negotiated for a couple of weeks to pay for an open source package that was dual licensed under the AGPL. I wanted to make small modifications to the source. The commercial terms were available on request, and I requested and got sort of tangential answers until finally the company's lawyer told me that I'd be liable for 15% of all revenue connected to the library in any way. If I had used the library first and asked for the terms later, I could have been in a very serious situation.
This shows the generation and technically challenged politicians that came up with this nonsense request. Agree on an API that is practical and fair and pay for the data transfer
Intel ousts its chief engineer, shakes up technical group after delays
The Arrow project contains implementations in multiple languages. Some of these languages contain code that can evaluate expressions against Arrow data, or even execute full queries. The C++ and Rust implementations contain query capabilities, and the Java implementation contains the Gandiva library that can delegate to C++ via JNI to evalulate expressions, for example.
ftp folder for each.
The first and only Air Force pilot to shoot down a satellite
https://gitern.com/#downloads now provides a posix shell script ~2.8KB for those that prefer it
Feyn, a Quantum Puzzle Game
> Since most people use several devices (desktop/notebook/tablet/phone) throughout the day, you require some way to keep them in sync.

The obvious solution, rather than syncing the certificates, would be to allow more than one client certificate per account. Each device would have its own certificate. If one device is compromised you need only revoke that particular certificate; other devices could still access the account.

To avoid the need to manually register multiple certificates for each account you could cross-sign the per-device certificates; i.e. if key A is registered, and key B is signed by key A, then key B can also be used to sign in, perhaps with a warning sent to the owner of the account about a login from a new device.
Did you get my copy of draft-propsal-final-joe(bob3)-2020-05-01.2020-01-05(5).PDF.final.txt.zip in the last email thread? You know. The one that has a different subject than this email.
Active Exploration, Artificial Curiosity and What's Interesting
It’s not like the software industry was a bastion of societal morality in the first place. It was created chiefly to win wars and delabourize industry.

Kraft 1977 is my favourite Marxist analysis of the software industry.

https://www.amazon.com/Programmers-Managers-Routinization-Pr...

That being said there is an ethics of the software industry. It does not necessarily encompass an ethics of marketing but there is an ethics of privacy, security, authentication, authorization, identity, and decision making.

It would seem that extending the domain of computer science ethics into the ethics of its subject domains would be an overreach. Does it make sense for computer science to apply the idea in Kraft that should overpower all other industries and thereby decide the ethics of pharmaceutical marketing, simply because it controls the means of production?

It is a Marxist analysis like I said that computer scientists should properly have this power.

However it is not wrong that if you are working on a project and don’t agree with its ethics that you should speak up and work to improve it. Everyone has that responsibility.

It isn’t about computer science or software engineering. It’s about professionalism.
Emulating a persons voice is easy. CORS is hard. :)
Yeah it’s so cool how Microsoft Teams hasn’t implemented custom emojis. Had to write a script to pull all our Slack ones down since we’re being mandated to switch over.
California is investigating concerns about Covid-19 safety at Amazon centers
That was the first thing I saw that was wrong.

All account balances should normally be positive. Depending on what side of the balance sheet they are, a debit or credit could increase or decrease an accounts balance.
And if it works in one of the places in the world where people can carry open alcohol, it's pretty foolproof? :)

Love the part about not getting off the monorail. I'm tempted to try that myself someday!
> Is it better for you to invest resources into incremental improvements to polish the final 2% or try again and maybe make a breakthrough.

I would argue that maybe they should try Option 1, instead of sunsetting their Nth chat app, or migrating everyone from Google Music (which would very much benefit from some polish) onto Google Youtube Music (which I don't understand the value of for me as a listener.)
Legislation? International treaties?

An AI-risk maximalist would believe AI is a near-term existential threat, with the prospect of total human extinction. In that scenario, the final backstop measure to a rogue country engaging in AI research is using nuclear weapons.

This... obviously... would be very bad. If it escalated to a full nuclear war, it would kill billions of people. But it would leave survivors, who wouldn't be interested in, or be able to, pursuing AI for decades or centuries. Better than the alternative.
Can’t tell whether it’s intentional as part of this slightly modified approach, but under classic accounting the contribution in the first example would be equity not income.

I’m glad more accounting software is out there but tbh as accountant I can’t see myself using this. The whole debit always decreases thing kills a core part of the mental framework I use to reason through more complicated scenarios. I guess that doesn’t particularly matter though for the target audience coming at it with no prior knowledge.

>accountants don’t like negative numbers.

That’s the first I hear of that
https://gitern.com/#downloads now provides a posix shell script for those that prefer it
Googler here promoted twice by taking over a team/project, simplifying it, and making it hum.

This is a common narrative about Google. There is some truth to it but the blanket "nobody gives a shit about anything other than launches" claim is bogus.
> It's used not just by spammers, but by sales reps, too.

Not sure there's a distinction there.
I don't think that there are any. Simply writing a program that outputs sounds that resemble someone's voice can't be illegal, right? You can use it in illegal ways, sure, but I don't think there are any laws concerning software like this.
You just reminded me why I decoupled my google calendar from my iPhone calendar a few years ago. Just the other day I was thinking I’d like them up, but something made me feel like I shouldn’t...
I fail to see why you need a computer for this; you can just connect a camera and microphone directly to the TV set (or VCR, if you want to record it, I suppose) in the other room, and then just do that both ways.
Nice idea! Some of the folks from the middle east came out very well.

The posters are a nice touch. I would prefer high quality/resolution downloads of the faces to build my own gallery, however. BTW, would be nice to include a few more famous faces, e.g. Julius Caesar, Cicero, etc.
I'm inclined to take the realistic approach: It's in their best interest to fight any anti-trust investigation, regardless on whether their denial is legitimate or not. A successful anti-trust suit could cost FB billions of dollars, which is well worth some overtime for a few lawyers to delay-delay-delay.

It's their lawyer's role to make every step of the legal process as painfully slow as possible.
Bernstein and Schwabe wrote Tweetnacl for verifiability. You did not write Monocypher for verifiability, as the track record shows. Libsodium has been repeatedly audited; it is one of the most heavily targeted libraries in the industry. You shipped an EdDSA that accepted all-zeroes input as valid; if you want to snipe at libsodium, let me ask: what's the comparably catastrophic vulnerability there?
I think it's possible have "Google has concerns about the AGPL for itself" and "Google would like you to not use the AGPL by making you afraid of it".
I made the move anyway. We'll see how it works out long-term.

I'm enjoying being back home, especially since "home" is in a country that has their shit together a lot more than the US does right now. That means I can go to the gym, visit parks, and have a basically normal social life. I do miss my friends in the (US) city I normally work in.

If my employer forcibly recalls everyone to the office, I might decide to take a slightly lower-paid job in my home city, especially if the US is still inundated with COVID cases.
I might be older than you and I might have medical history that complicates the matter, who knows. Statistically, covid can kill across the entire range of the human population. Its really going to come down to how many dates you can get and how many involve something less than social distancing.

I'm married and don't have any electronic helpers that I converse with, it doesn't really apply to me.
Similar thing happens with spam calendar invites although I think Google have addressed that now.
Average parent is at least predisposed to giving a shit about their progeny. And what constitutes an "average parent" is not a constant. If we could make good parenting feasible (which it currently absolutely isn't) and bad parenting socially unacceptable (which, in contrast, is almost expected, at least in the US), the quality of parenting would improve quickly.
Vulkan Synchronization
Under ideal conditions pure gold is not toxic because the human GI tract does not chemically react with pure gold. Pure gold become reactive to human GI tract under a variety of conditions from certain food/drug combinations that alter GI tract chemical sensitivity, certain microbial interference, and reactive impurities in the metal. Once gold becomes poisonous it is extremely toxic due to its density and persistence in the body where gold poisoning is similar to lead poisoning but substantial more severe.

There was even a HouseMD show episode where a woman was poisoning her husband with trace amounts of gold. The show is complete fiction but the chemistry is accurate.

Why take that risk? If you want to knowingly eat poison I recommend cyanide. It has a wonderfully sweet and nutty flavor profile and is incredibly cheap and common. The most common nutritive source is peach and apricot nuts. Furthermore, the human body requires trace amounts of cyanide for microbial interactions to form vitamin B12. Gold has no nutritional value.
I'm hard-pressed to believe that Apple Maps may have something Google Maps doesn't, but I was able to choose between between a "faster" (by 5 minutes over nearly 5 hours) and "simpler" route for the drive I took from AZ to Utah 2 days ago.
Hmmm. Wonder what's up with Pompeo??
Not on a mobile device
I have never had a problem, although I use the ISP's server for sending, and my own computer for receiving; when setting up Exim you can select the "smart host" option which does this.
I like reading Q&A on Amazon listings, because lots of people answer "I have no idea" or similar. I've only received a few of the email prompts for these things, but as I recall they almost make it sound like some potential shopper has decided to ask YOU, specifically YOU, about a particular product feature.
One of the best developer-oriented explanations of accounting I've read is "Accounting for Computer Scientists" by Martin Kleppmann.[0] He explains double-entry accounting visually in terms of graph theory. Even though I'm not very good at graph theory, I found the diagrams and explanations extremely intuitive.

[0] https://martin.kleppmann.com/2011/03/07/accounting-for-compu...
First, the simple optimization for Linux systems: double-click on the commit hash, q, git show, middle-click to paste. That's a simpler copy-paste. I do that surprisingly often, when browsing repositories.

But for a repository I do regular development in, vim with the "fugitive" mode works very well. You can just use :Glog, and browse, hitting enter on a commit to show the full commit, or on a tree to show the tree, or on a file within a tree to show the file (at that version).

I also use :Gdiff to give a vimdiff of changes, to stage the changes I want to commit, and then :Gcommit to commit them.
Having worked for a software producer who all but owns one segment of the industry, while they do discuss with their potential clients modifications to the contract, it is fair to say that the terms discussed all relate to fees. There are certain things with respect to IP that are totally not up for discussion.

Additionally, every use or purchase of software undergoes strict legal review, and there are some licenses that are flat not accepted.

This is not propaganda, and it is not in particular motivated to do anything economic to the FLOSS commmunity.
Italics are generally not used for Japanese text and maybe for other languages like Chinese. Bold looks like more general
Some companies I'd put on the list:

1) Okta – Single Sign-On as a service

2) Snowflake – Cloud-native data warehouse as a service

3) Crowdstrike – Cloud-native security as a service
I once worked on a system with small modular pieces of hardware. But the hardware was expensive, so there was a plan that you could buy less hardware but pay more for software that would cover for the hardware. So we literally wrote more software so that we could get paid less.
How do these things work with work from home? Activity at one's home or anywhere outside the offices is private, even if it's work-related. Could remote employees block such requests on the ground of personal privacy?
This move frustrated me to no end. Makes backing up my Google Photos that much more of a PITA because you have to use Takeout, which isn't straightforward - if you have a large library, you manually have to download 50+ zip files and "auto download" extensions don't seem to work with the Takeout interface last time I tried.
I once used Mint, which is single entry. One day I logged into my account and noticed my net worth is a bit off. Looking at my monthly expense and income, I didn't see anything out of ordinary, so I just shrugged it off.

A couple of months later I finally realized I opened new savings account to take advantage of a promotion and forgot about it. The opening deposit was deducted from my checking account. Since it's classified as a "Transfer" it doesn't show up in expenses. I linked the account, and now I am a few thousand dollars richer than I previously thought.

This kind of mistake will never happen in a double entry accounting system.

It was then I began migrating my personal accounting to a double entry system I developed myself. Hopefully I can make it available to the public soon :)
That sounds kind of unethical. Or is the reasoning, you could have found it on Google anyway, so you might as well do it the easy way?
Depending on the area, many summer day camps are subsidized for low income families.
Love that the only way to get support from Google in 2020 is to post to HN.
Apple's discussion boards are useless, but at least they have actual phone and email channels to get an answer from an employee (usually). And Apple doesn't generally charge for the phone call itself (they will charge for out-of-warranty hardware work, but generally don't for software support even out of warranty).

With Google, more often than not, community "support" through their forums is the only option. Where official phone and email channels exist to get support, they're generally restricted to paying customers only, on the business side of their business only-- users of their general consumers services have no options.
Same situation for me so I acted quickly and moved across Germany closer to my family and old friends. Idk how the situation is in the US regarding moving and getting a new location going but I think it's still so early that moving makes sense.

Definitely such a big mental improvement, it's crazy
How to be a Roman emperor
So... a human crontab?
If it is irrelevant to the Commission, then it is irrelevant to Facebook. If the data is highly sensitive, then it is relevant information for the Commission!
If my parents didn't live in an economic and cultural backwater with few opportunities and rampant political corruption, I'd be neighbors with them in a heartbeat. Sadly, they seem stuck where they are, and so am I.
I keep getting hit with the rate limiter so I wasn't able to try it :(

> There was an error and I still haven't implemented retry to make it invisible. You can absolutely submit your request again a few times; this is a self-healing Kubernetes cluster. Some models (voices) get more load than others and/or are scaled to fewer or more pods. There's also a rate limiter, but there aren't error messages yet.
The only thing I found out a bit off about the comment was the “equal protection” rationale, which is a bad joke in the US.

The rest seemed spot on: This law is almost exclusively broken by rich folks, so it will never be an enforcement priority.
The Coronavirus Cryptocurrency Craze: Who’s Behind the Bitcoin Buying Binge?
This is awesome. We need more human centered navigation strategies. What I've always wanted in car navigation are:

- navigate via the least busy paths, even if it takes longer

- navigate via the least risky paths, for e.g. avoid right turns (in LHD countries) or left turns in RHD countries. Avoid u-turns.
If someone created AGI that ran on 1KW you would deem it a rank failure by that metric (by a factor of 50x!).
The problem is that most of the regulations only cover vehicles used on public roadways (at least in the US). Most of these parts will say that they are for "off-road use only", which make it hard to go after the manufacturer or installer.

We would need to change the laws to say that the requirements apply to any vehicle manufactured for use on public roadways. Some of the requirements need to be changed from just applying during design/manufacturing to at all times so the majority of the loopholes currently used can be closed.
Often what will happen in a large company is that security practices are strengthened in the short term, then people looking for cost cutting measures undo the changes a couple of years later, and the manager responsible might even get a bonus for improving the ops margin (hopefully transferring to another position before the next attack hits).
ahah yes! that's the gist of it.