skysight-inc/HackerNews huggingface dataset:
> > Google will not be required to charge Australians for the use of its free services

> Google did not state this.

Google did say that this legislation would:

> put the free services you use at risk in Australia.

That's implying that either the services would go, or they would no longer be free.
Hiding your malware in some other file is a good idea, although sticking it in an executable file format is only going to invite more attention and relies on your target only using security tools that assume Windows signed == safe.

It strikes me that the primary use for this would be attacking a target that (1) has some level of system lockdown/scanning such that signing is required, (2) has Java installed on computers and uses it (not just a program that bundles in its own JRE), (3) has scanners vulnerable to the signature validation bug that assume signature OK == safe, (4) has some sort of network scanning IPS/IDS such that the "run malware" trigger needs to be small to avoid detection.

If (1) isn't the case, then there are probably easier ways to sneak your malware into position. If (2) isn't the case, your malware can't run. If (3) isn't the case, your attack risks getting detected in advance and burning any chance of using it. If (4) isn't the case, you'd probably be better off delivering the full malware via the browser sandbox escape/whatever network exploit you're using to avoid needing 1-3 in place first.

I would venture the guess that this has been used for (1) opportunistic malware intended for wide distribution with a low probability of any given target being compromised due to requiring the user to run the malicious JAR and (2) very targeted attacks on specific institutions that meet the 1-4 criteria.
Easily ? You don't, with the most common azerty keyboard you have to use : Ctrl+Alt+7 Shift+A. That's why there is a new standard for azerty keyboard the "NF Z 71-300" that is better with accent and stuff like æ,œ,Æ,Œ,«» etc.
Need suggestions on how to proceed with my AI career
Please excuse me, if I am raving. I came to HN as my last resort.

A little background, I have a CS Undegraduate degree. I decided to pursue AI, when I was in third year of UG. which was two years ago. In the meantime, I have secured 2 internships and 2 full time jobs, all of them are from very prominent companies with very good pay.

Still, I very much want to work on R&D side of AI. Therefore my intermediate goal was to pursue Masters in A.I, which would give me good Academic understanding of A.I and also give me opportunity for research.

With that decided, I am currently in a tuff spot, Even though I have good Industry experience and good GRE score (168Q, 164V), my UG GPA is under the bridge with 2.7 GPA, which might very well rob me of pursuing MS in top universities.

Therefore I thought i can improve my chances of getting into good MS programs by pursing stanford AI graduate certificate. This is very expensive to me, therefore I have to take a decision on whether this is necessary or not. My motive was to pursue this and write good AI papers to increase my chance of getting into top universities.

You might ask, 'why not start writing papers now?' I have completed Deeplearning.ai 5 part specilisation, Udacity NLP Nanodegree and have taken MIT OCW on Mathematics. I am very much skilled in building and tweaking models with frameworks and also on understanding how architectures work in detail but I am still a novice on full blown mathematical side of it, which I dearly want to learn, I am hoping that stanford graduate course would be rigorous in that way, to help me be proficient in A.I

I have also looked at omscs from GT, but as my goal was to indirectly pursue research, I ruled this out.

Any suggestions or inputs on this would be quite helpful to me.
>Almost everybody I know that moved out had no problem affording housing (high earners / home owners / rent controlled).

How are we supposed to reconcile this is all the insanely wealthy people saying they will move out of California because of a wealth tax they can easily afford without even noticing it?
Why wouldn't a security service care about the ability to hide malicious executable payloads in files that are presented as having a higher-than-normal level of trustworthiness?
Meticore Reviews {Weight Loss} Ingredients List – Is It Safe and 100% Natural?
What is Meticore?

Meticicore is a veggie lover container comprised of detoxifying fixings in explicit amounts intended to deliver into your framework for the duration of the day and thusly address the underlying driver of moderate digestion by terminating it up to work once more. It's said to dissolve the hazardous fat around your organs.

http://wintersupplement.com/meticore/
https://specialoffer4health.wordpress.com/2020/08/17/meticore-reviews/
https://canvas.pbsteacherline.org/eportfolios/7036/Home/Meticore_Reviews__Is_Meticore_Work_Benefits
https://dillard.instructure.com/eportfolios/2428/Home/Meticore__Pills_Reviews_Scam_or_Legit_Price_Benefits
https://angel.co/company/meticore-2?ref=add_people_bio_updated
https://mndepted.instructure.com/eportfolios/2065/Home/Meticore__Meticore_Reviews__Pills_Price_Benefits_Side_Effects
https://www.smore.com/gchbr-meticore-reviews
https://my.bankstreet.edu/ICS/Campus_Life/Campus_Groups/America_Reads/Public_Page.jnz?portlet=%5bICS%5d_BookmarkPortlet&screen=MainView&screenType=next
https://gumroad.com/betyowan/p/5-tips-for-using-meticore-pills-price-to-buy-side-effects
https://youtu.be/_mKu4T1uLs8
The problem with Ignalina was not that it was nuclear, it was that it used a horrible old design that both can and have blown up in catastrophic ways. Note that Sweden is also slowly decommissioning our old bad plants.
Here's the fundamental difference between iOS and Android, and it's related to memory management:

On iOS, you pay for memory management in small installments, which make your code slower overall (reference counting in ObjC/Swift), but predictably so.

On Android, you pay almost nothing for memory management until at some random point the garbage collector shows up and stops your program to clean up your mess. Your program is going to be janky.

Apple deliberately ships devices with little RAM and kills applications that use too much of it. As a developer you better pay attention, or you will be flooded with bad reviews.

Google leaves RAM up to vendors. The secret to good performance with GC is to make the heap twice as large as the data which it contains. Low-end Android devices feel low-end, not just because of slower CPUs, but also because of too little RAM.

It has nothing to do with the "JVM abstraction layer". Java code on a good JIT easily runs faster than Swift or ObjC if there's a lot of allocations involved, but the GC behavior must be accounted for to give a good experience.
Tennis for Two [pdf]
> It doesn't really matter how good the model is, it's an impossible task politically. There will always be some people aggrieved by the new process and they will always have plausible ways to spin it as racist or classist or whatever else is necessary to fuel the outrage machine. As if the previous setup was some kind of examplar of egalitarianism.

So just because every system has flaws, we should throw in the towel and give up? Taking that line of thinking all the way means we can just replace university allocations with a lottery.

That's not how society works.

Even if every system have flaws, even if the current suffers from racism and classism, we have to strive towards making it better. The system the UK invented here does not even try. It very clearly favors people with nice postcodes.

Maybe we should replace it with a lottery, it would be equal. But I'm pretty sure the people with nice postcodes would like it much, and that's the people propping up the UK gov. Etonians, Oxford, silver spoon etc.

I for one believe there must be _some way_ to fix the situation and is better than what they came up with.
(shameless plug)

I gave a talk, about a year ago, covering history of the problem statements from which WASM was born and the various forms it is taking.

https://labs.imaginea.com/talk-the-nuts-and-bolts-of-webasse...

Welcome thoughts/comments/corrections/additions.
Well when you are largely being held at gunpoint in one country by totalitarian impositions on your personal freedom, you don't really have much choice.

The romantic view of nordic bliss is also absurd. It is incredibly common to take "stay-cations" in the UK, France, Germany, despite the UK, Germany also having the largest spend abroad & mobile economies in Europe.
Sounds like an opportunity to create something new tbh.
And migration to the next proposed size of 450mm may never happen, as the economics are not favorable:

https://en.wikipedia.org/wiki/Wafer_(electronics)#Proposed_4...
Yeah it really looks like the eye pigments are not the same.
> They said "the free services you use may be at risk".

This sounds more like a threat. "If you don't give us whatever data we want, for free, then we will cut you off from some of our online services as punishment.

> Given the context, I took that to mean the quality of the service would tank if they had to share their algorithm changes.

I see this argument from them all the time and honestly, I see very little evidence of it. I use DDG exclusively now but I used Google and DDG side by side for a while as I was transitioning over, and during that time I didn't see much variation in the quality of results. If anything, being in a filter bubble made it harder to find new information.
That doesn't mean that the law explicitly requires that.

Just that Google thinks running the service for free might not be viable.
I think Flipflop Solitaire is supposed to be always solvable. It's also very well made.
I wonder which comment is more useless. This one or yours?
I agree with you totally, these IOT frameworks mostly have clients that do not really work properly on the "edge". Als IOT frameworks based on "runtimes" always have way too much overhead that does not scale.

I have seen some technology that is amazing though, for example DDS, Zenoh, OPC UA.

I for once look at the side of, reliability and quality of the signals. Most IOT frameworks don't care about when or how the data arrives. What about QoS ?? What about Jitter of the signal?

If people use Managed languages in IOT, for example the hobby stuff like micropython on microcontrollers. It's fun for hobby. But nothing else. Waisting alot of resources etc.

A good IOT frameworks consists out of a Tweakable QoS for the data from hard-realtime with (TSN time sensitive networking) up to soft to no-realtime data. Network will balance things out regarding the QoS.

What if i need an IOT platform/framework and need hard-realtime data between a sensor somewhere and a robot with a control loop?

Reliability, scalability , adjustable QoS of signals, and also low on resources that can run on Microcontrollers with TCP stack that enables TSN.(Therefore an RTOS is best solution, but rather no RTOS if possible) (And two NIC's to make reliable hardware, when you have hardware failure)
What are some issues with LLVM?
From google’s open letter

> Under this law, Google has to tell news media businesses “how they can gain access” to data about your use of our products. There’s no way of knowing if any data handed over would be protected, or how it might be used by news media businesses.

That seems to pretty clearly suggest Google will be forced to hand over personal data.
“How you can gain access to [SECRET THING]: you can’t.”

“How you can gain access to [SECRET THING]: court order.”

Given that (2)(a) says “whether or not it shares the data”, it would be bizarre for (2)(e) to mean: “oh by the way, remember that thing from clause (a) that you don’t share (and that we were totally fine with you not sharing)? You’ve got to share it now”.
Zip files have the index at the end of the file so that new files can be added to the archive without rewriting the whole thing.

Zips can also be read from front to back, reading the header of each entry and skipping the compressed data to the next header, which is most of what zip repair utilities do (or did, not sure anyone repairs zips any more). But it's faster to read the index.

And to be clear, jars are zip files.
> I am not sure why you are saying this when every word I cited is literally copied and pasted from the draft legislation?

With plenty of ellipses between them, sure!

> You have cited section 52M(b) as if that is the only clause in that section, ignoring 52M(a) which I have exactly quoted from. Why are you ignoring that subsection?

There is no section 52M(b) or (a). What are you talking about?
No, it's nonsense to suggest that 5 year olds are being given hormones to trans them.
Quantitative types would have caught so many of my bugs over the years. I can't wait for this to become mainstream!
IT Security and resources to practice hacking
Who said anything about "only" protection? Besides you, I mean. Real-world attacks tend to involve simultaneous exploitation of multiple vulnerabilities, like this real iOS Safari watering-hole/drive-by attack maliciously using the same exploit chains as my favorite iOS jailbreak tool: https://googleprojectzero.blogspot.com/2019/08/a-very-deep-d...
It's wider. Depends on your font and it's support though.
> Bruce's take can be summarized like this: with a blockchain, you're choosing to trust code and cryptography instead of a person. And when immutable code does the wrong thing, you can't trust them to fix it like you could a person.

Maybe Bruce hasn't heard of the Ethernum DAO fork [0], or the two subsequent forks. The immutable block chain seals a bad decision, then suddenly it wasn't so immutable any more. Just like someone paying you via direct bank transfer is irreversible, right up the money they are transferring was stolen from the bank - then it turns out it's real easy to reverse.

Crypto currencies are the tools of people, not the other way round. If we, or in the particular case the miners decide they want the block chain to be mutable, then that is what happens.

[0] https://en.wikipedia.org/wiki/Ethereum#The_DAO_event
My god that paper was hilarious
Completely agree. I've talked many times to some of the folks there and it seems to me the product is not for a developer or hobbyist, which is unfortunate. It is purely enterprise.
Thought this will open up a parallel ecosystem for certain applications but IBM does not seem to think that.
A common suggestion, also in this thread, for increased sleep quality is limiting screen time or any stimulating activity before bed time.

But what to do then? Talking to housemates might be ok, but what if you have none, or the conversations end up stimulating? Similar for books. The books Im usually interested in (non fiction) tend to be very stimulating. I remember fiction to be quite stimulating, too.

I guess the crux of the problem is, how do you stick to doing something that is boring on purpose? And is the improvement in sleep quality really worth it?
Haven't tried the software, from the description it looks nicely done.

A quick tip: for many people, it is an essential piece of information where your company is based, that means, in which country, not only, but also because of GDPR. Do not hide that information that much. It should be in reach of single click in the footer where a product comes from, where it is hosted, and what kind of entity I'm having a contract with.
"Payroll Tax" isn't a tax, it's a mechanism for paying taxes by witholding tax from a paycheck. Which payroll taxes are you referring to when you claim that the CA effective tax rate for someone making 250k USD is higher than the equivalent in France?

Personally, by far my largest tax is income tax (which is far lower in CA than France for my level of income). Everything else is basically meaningless in comparison.

"Healthcare" also isn't a particularly strong case for the scenario you're proposing. If you're making $250k, you've probably got pretty good employer sponsored health insurance. Personally I pay nothing for a fairly good plan with low deductibles and copays. Health insurance in the US sucks for the unemployed and for low-income workers, but it's not at all bad for high earners.

401k taxation is also much more nuanced than you're making it out to be: it's taxed on withdrawal, at the rate you're withdrawing it. If you're retired — which is when you'd withdraw — your other income is probably zero, so your 401k is taxed in a very low bracket since it's your only income, and you're only withdrawing as much as you need to spend — as opposed to income earlier in life, where you're trying to make much more than you spend in order to build up savings. So while it's not exactly tax-free, it's extremely low tax generally. Presumably any other money you're relying on at that point you'd structure as long-term capital gains, which are also taxed at a low rate.
Well, that's just, like, your opinion, man.
The answers won't be complete without mentioning the Maemo/Meego series of phones, including the Nokia N900 and N9.

The N900 keeps its appeal today because it's fully programmable (even if toolchains are woefully outdated), and the community is still (after 10 years!) vibrant.
It's also small, offers a hardware keyboard, has decent battery life, and has the usual gimmicks expected from a smart phone: camera, GPS, GUI package manager, etc.
It wasn't just about the exams; students missed out on months of teaching, which would have put them at a huge disadvantage if they were then expected to sit the originally-planned exams.

So we'd need exams tailored to just the part of the curriculum that the students have actually covered -- which would be different for each school, making any kind of standardisation impossible.

Another thing people don't seem to be considering is the knock-on effect on universities, which -- if students who didn't complete the A-level course are given a hypothetical grade, whether based on teachers' predictions or modified exams or "mocks" or whatever -- will get an intake of students who are less well prepared than normal, and will need some kind of remedial support if they're not going to flounder in their degree courses.

Just giving students generous grades now, to calm the current storm, means storing up trouble for the future when university teaching staff are faced with a cohort that includes students who shouldn't be there and can't cope -- but their teachers gave over-generous estimates -- or who in principle should be OK but arrived woefully under-prepared because they missed a bunch of key A-level content.
Impact of Social Media and Community in Your STO Project
I still shoot film, but I have to admit I always feel guilty when I dispose of the used chemicals. That, and not the cost, is the main reason I prepare a lot for each frame, and I tend to get much better shots.

Still, I'd like to see a day when I could get the same results on digital as on film. The existing solutions like Silver Efex don't even come close.
That is an issue with the current system too, sure an extension isn't able to look at arbitrary files in your system, but it still is able to look at your bank site, passwords, etc and can still do a ton of damage.

Web extensions aren't safe by default, you shouldn't trust them any more than any arbitrary EXE file.
Yes, but self driving electric (tri)bicycles might be more practical, at least for urban commuting.
Honestly. It's so frustrating when people go on tangents and say in three paragraphs what you could say in two short sentences. An example: the rust book.
I agree with your other points, but it it seems like the intent of that clause it to require Google to disclose the nature of user data being collected, not the user data itself.

In particular, (a) distinguishes between user data that Google chooses to share and not to share. Technically it seems like one could read (e) as requiring access to both, but then the distinction in (a) wouldn't make sense, so I assume that's not the intent.
Specifically, the American Military-Industrial complex is a socialist welfare state hell-bent on owning all means of production in America, yes. It produces nothing of any value to society, and demands that it be fed from the coffers before anything else.

And yes, it is the American government doing this.
Calling that a zero day is a stretch since it requires a lot of user interaction and is local only.

It is not that scary of a bug.
Release v0.0.3: Deno WebSocket library
We've decided as a species to do nothing about climate change. So what is the point of discussing various proposals for climate change action? This is like me telling you about all the different diets and all their upsides\downsides while continuing to eat 3000 calories a day of junk food.
This is probably oversimplified, but it does make some sense.
Some people are happily trotting about in their objectively miserable lives.
Sit them down and let them think on it, and they just might realize how empty their lives are and how little control they have over their situation.

I've always been very "mindful" and depending on your inclination to cynicism, that inevitably means finding out that life is what it is.
I used to work overnight and trained myself to get better at sleep. It's more than just limiting screen time. I started sleeping better when I created an entire process that signaled to my body that it was time to sleep.
nothing in the definition of "zero day" requires a bug to be "scary".
> While AMP itself isn't a ranking factor, speed is a ranking factor for Google Search.

https://developers.google.com/search/docs/guides/about-amp

It's pretty blatantly the case that AMP provides a SEO boost. What hosting service could possibly compete with the speed at which Google can retrieve content from their _own_ servers?

That's the whole point of this legislation: to give news orgs means to stop Google from twisting their arm in this way.
Show HN: Video for kids – create a giant paper necklace with 1 paper piece
I am a scientist mum of twins. I created a series of videos with quick STEM educational activities for young kids (3-7 YO) I aim for:
-vibrant playful videos: so they are engaging for young kids
-easy to follow & quick preparations: so kids can prepare together with parents avoiding the long parental preparations
-accurate instructions: so it is easy to replicate at home
-household items only: for low cost

What do you think?

Thank you for your time and feedback.
They will have missed this cycle of admissions, and not all students have the luxury of taking a gap year. The students have also missed a term of tuition, and so have probably not covered the course material necessary to pass or do well in autumn.

Children/adults in care (people without families that can support them) might not be eligible for support for another year, and will often be expected to go out and work to support themselves. Poor families often rely on the extra financial support that ends with "finishing" education.

There are a lot of stories out there of children/young adults in exactly this situtation that should be off to skilled work training or university that might end up having their entire education wrecked over this despite being able academically. And this is all with the context that private school students often have not been subject to any "standardisation" process due to their small class sizes, or have had their awards upgraded above predicted grades.

We just need to give this year a free pass in much the same way as workers have been given a free pass with the furlough scheme. We can live with one year of inflated results.
In para.3 they say this is specifically about mindfulness meditation. And they provide experts who give reasons why the results could quantitatively be wrong in both directions.
Who would stand to gain from that and what would they stand to gain? UK education policy over the last couple of decades has been squarely set on getting as many state school students to university as possible so it would be strange for them to suddenly switch track on the sly.

I'm no fan of the UK government but I'm pretty sure this is a textbook example of Hanlon's razor