skysight-inc/HackerNews huggingface dataset:
The tricky bit I imagine is the gap between step 4 and step 5 in your attack scenario. To get this to trigger you need to get the JRE to invoke on the MSI file. The JRE isn't typically associated with MSIs so you would need a secondary step to trigger the JRE to look at that file and load the malicious JAR tacked on to the end of the MSI.
Comparing specs of upcoming Linux phones
This is a pretty decent debugging checklist, but nothing more. I was hoping for something different when I clicked. Maybe this should be retitled "How to solve hard (debugging) problems"?
Commercial real estate prices are coming down.
So the bottom of the linked article says 2016, which made me immediately think 'old!'

It makes complete sense for the manifesto to be timestamped, but the surprise was that I didn't realise I was reading the manifesto rather than this actually being the normal landing page... there's no title or anything and HN usually links to homepages.

But a quick glance at the forum and the homepage shows there's activity there still!

Clicking around, this seems really interesting :)
If you're seriously suggesting that a Google search for "restaurant" is going to get you a marketing-free, accurate picture of the world around you, I'm not sure what to do with that.
seeing something explained through an analogy, and such a complex analogy, makes me rage (interogations, cross examination, wtf)
To hell with "them"? Are you saying Australians should cut off their nose to spite their face?

I think you missed the whole point of this letter. Let me clarify:

"Oi mate, the government wants to force us to fuck you royally. We don't want to. Please help stop yourself getting fucked.
Cheers, cunt."
Our institution runs multiple HPC clusters for all kinds of scientific use cases. I remember reading about the head of the HPC department making the switch from INTEL/AMD to IBM because it had a much larger memory / storage (I can't remember which) bandwidth in some astronomy application. This made the project feasible without having to invest in custom hardware.

It's good to see that POWER still excels in important use cases.
Free WordPress Plugins
Don't forget commented on by bots. I'm sure there are already people working on HN comment bots powered by GPT-3 for a laugh, but I'm not sure the result will be funny.
> Include <structopt/app.hpp> and you're good to go.

I haven't touched C++ for almost a decade but I assume there's (still?) no obvious way that always works to include a dependency package in your build?

For you C++ devs, does this instruction make it obvious how to install this thing into your project?
One of the many core business of samsung is fabbing on request. They are not doing this only for their smartphones and a few exceptions.
GitQlient 1.2.0 – multi-platform Git client
My previous response was probably a bit snarky. My point was that if this is something that you worked on and you realise that your revenue doubled, then it's probably very easy to justify that to oneself that this is indeed what the users want. After all, you don't hear any negative points, which is what a filter bubble is.
No, the former. The file is renamed it .jar by the attacker and executed by the java runtime. The msi part is ignored - it only serves to cloak the jar from the scanner - it recognizes the file as msi and ignores signed msi files.
With the microphone bias floating, what prevents some digital signal processing form recovering faint and fuzzy audio? I'm sure the microphone loses at least several dB of gain with the bias floating, but isn't it much safer to either disconnect the bias and tie it to ground, or else pull up/down the the digital output of the ADC?

I understand that with the bias floating, the microphone output will be a combination of radio and quantum thermal noise, but won't that noise still be slightly modulated by the microphone? Or is it that the noise being modulated will be below detectable by the ADC and the digital output will always be exactly 0?
Interesting. While this website is well-promoted at Wikipedia "Hello World" articles, let me link

* https://en.wikibooks.org/wiki/Computer_Programming/Hello_wor...

* http://rosettacode.org/wiki/Hello_world

as two canonical example sites which also try to collect "Hello worlds" from as many programming languages as possible :-)
It's not physically impossible to cover 2-4% of the land with solar panels and wind turbines, replace ICE vehicles with electrics and home heating systems with heat pumps. It just costs money. And as the COVID response shows, when we want to, trillions suddenly become available.
Um, I go to bars to hang out with my friends while someone else makes tasty cocktails I'm too lazy to make for myself. News flash: most people who go to bars aren't there just to look at or hit on women. Yes, there are some who do, but that's not what bars are for.
I think that this applies to all modifying operations - INSERTs, UPDATEs, DELETEs.

It's perfectly ok to write to sqlite from different processes in the same time, but to achieve good results it's better to:

* use WAL mode - so the readers and writers do not block (you can turn on it with `PRAGMA journal_mode=WAL;` in CLI, and it's better to add `PRAGMA main.synchronous=NORMAL;` also).

* all concurrent writes will be queued by sqlite3 lib and done in sequential manner, and if any write attempt will wait longer that BUSY_TIMEOUT ( see https://www.sqlite.org/pragma.html#pragma_busy_timeout ) , it will return error.

Snippet

# setting things up...
itroot@l7490:/tmp$ grep -i pragma ~/.sqliterc
PRAGMA journal_mode=WAL;
PRAGMA main.synchronous=NORMAL;
PRAGMA busy_timeout=1000;
itroot@l7490:/tmp$ sqlite3 test.sqlite 'CREATE TABLE records (id INTEGER PRIMARY KEY, record TEXT);' > /dev/null 2>&1

# running 10 parallel processes that inserts numbers from 1 to 1000...
itroot@l7490:/tmp$ echo {1..1000} | xargs -n1 -d' ' -P 10 -i% sqlite3 test.sqlite 'INSERT INTO records (record) VALUES (%);' >/dev/null 2>&1

# getting number of records
itroot@l7490:/tmp$ sqlite3 test.sqlite 'SELECT count(*) FROM records;'
count(*) = 1000
I wish things like this could be used to break free from mobile app stores.

Download a virtual machine via the app store and then run any app written in any languages and compiled only once.

Almost like JAVA..
However, from the description, it would not execute the payload as an msi either - the appended garbage would just be ignored from the installers perspective.
As a learner, is it possible to self learn more about Gene Editing and these things, and can these things can be learned in a hacker way without going through a formal academic route ?
Okay, first of all the fact that people cannot explain their experience does not invalidate their experience. Second of all, that is totally possible to explain if you know about the map-territory distinction and how it plays out psychologically.

Basically, humans are meat robots whose brain contains a symbolic-experiential map of their surroundings, meaning it (among many other things) associates symbolic concepts with sensations. Since humans self-model as part of their social behavior, the map contains a representation of themselves. The map also contains a sensory input and associated symbolic representation for its own operation; the meat robot calls "the meat robot sensing in the map that the meat robot is modelling itself" consciousness or "being itself". Separately, it calls the concept it associates with itself "I" and the sensory input of operating the map "being".
Well I guess the actual payloads would all be fairly individualized, so that makes sense.
> or, follow me on this. i just walk out onto the street, type "restaurant" into google, and pick something with 4 star and up reviews. no marketing or presentations involved

Heh.

Reliance on numerical ratings in online reviews isn't particularly different than reliance on marketing with a specific demographic targeting and, yeah, surprisingly enough it does tend to lead you to the more instagram-ready establishments.
Here is my Blindsight inspired hypothesis, that consciousness has been an accidental application to ourselves of mechanisms that are useful for predicting the behaviour of others:
https://news.ycombinator.com/item?id=23475069

In breakfast terms: if it has been fitness-increasing in the past to note that all the other animals go down to the water hole at similar times (thereby freeing up some desirable carcasses for scavenging? or at least making it easier to cross over to far away trees while the predators are busy elsewhere?) we may start to model mealtimes. Once we notice that others have a morning feed that affect our actions ("breakfast" is followed by "rush hour"), it isn't that big a jump for our grey cells to experience our own morning feed in the same category, as breakfast.
I'll give you the Michelin star restaurants, but cheap or mid-range restaurants are disappointing (understandable given the astronomical cost to open and maintain a restaurant here), the bars and nightlife are similar to what you'll find in other cities, and museums in DC, Chicago, and LA blow SF out of the water.
I believe he's referring to the absurdity of this statement, especially in relation to SpinningUp (it doesn't have any UI as it's a RL library, and the docs site are generated using standard Sphinx doc generator)
Here's a good resource that I find useful:-
http://everyspec.com/USAF/USAF-SMC/SMC-S-012_16JAN2015_52130...
Croatia is open right now to Americans, which is decent and beautiful.

And from there you can get into Schengen if you aspire for that. Its not an Schengen wide policy so I wont say more. There are a lot of relationships in Europe.

Ukraine is probably cheaper but its up to you.
I am a self taught programmer (python). I learned things because they required to solve some problem. You face problem and then you find solution. I used to solve puzzles in childhood for competative exams. But now as adult, it is very difficult to connect with imaginary problems which you never deal in day to day life. It makes me feel empty - learning something to just get a job. Recently I picked up interest in OS because I started to notice my limit with application programming. I learn to write comments and importance of git, after working in startup where you keep wearning thousdands of hats daily and forgot what code last week. And I feel this is very organic approach to learn.

Being on both sides of table, whenever I conduct interview I just ask simple programs to do (mostly fizbuz) and try to gauge candidate passion by understanding projects s/he worked and problems faced. If candidate passes fizbuz, I believe s/he has basic understanding of logic. Other things can be thought easily if candidate has passion.

I have friends in university who only talks about algos but can't write single line of code (I am not blaming them, it is just their field doesn't require intense coding. What i am trying to say here is, writing good code is like craft. You need to write actual code to excel in craft. Solving leetcode problem successfully doesn't imply you can write good code automatically). Last time when I switched jobs, I studied couple of algos and now I forgot them. I am again switching and thinking to start with leetcode. The biggest problem in industry is hype. These days even small stupid IT shops are asking for hackerrank test with full stack developer. Lot of focus is still on memorization and hype.
I doubt it's been stalled because the government still wanted to exploit it. I think it's rather them not wanting past use to be detected.

You can't always stop using a 0 day. If the binary is deployed somewhere on a air gapped host computer that still receives updates, it's out of your hands. How can you be sure the update will get there while the binary is still on the computer? You risk detection which is very very bad when you run an APT. The tiny part of the campaign can make an entire country or even group of countries adopt stricter policies.

The government probably knows about enough holes to fix their malware promptly, but even if it does, it needs to "deploy" the fix all around the world otherwise it risks being noticed.
This is separate from anything an AV might do, so forget the scanner part. A virus scanner with a signature for this malicious JAR will still catch it. What this is avoiding is the prompt and extra scrutiny Windows throws up if you try and run an executable from the Internet.

Think of the legitimate MSI and malicious JAR files as separate short stories in the same book. The 'book' comes to your computer claiming to be one thing (the legitimately signed MSI) but the second chapter is something completely different (the malicious jar file). When your computer reads the book (calculates and verifies the signature) it only does it off the first chapter. That lets the second part slide under the additional scrutiny Windows applies to files downloaded from the Internet.
AngularJS to Angular App Migration
Are we to take this as an endorsement for psychedelics? :)

Although I do observe kids having superpowers when it comes to learning stuff, especially language, I find that the primary learning barrier for me is, as ever, time and interest.
Well there's https://cli2.rtfd.io
Related discussion: https://news.ycombinator.com/item?id=24184478
Oops, I should have quoted this part, from the summary:

Knocking out TDO in squid embryos efficiently eliminated pigmentation. By precisely timing CRISPR-Cas9 delivery during early development, the degree of pigmentation could be finely controlled.
I know it's not a common opinion, but I believe that other than the rational argument you presented (which I agree with) I do think it's also a matter of values and mentality.

Yes Google is a big org, their business is problematic, and they do crap at times. But I think their mentality is much more less Machiavellian than Facebook.

I believe the "do no evil" as a compass, they might not always adhere to that as you or me may perceive it (after all, it is rather subjective), but it does seem to somewhat guide their actions.
I expect the solution to turn out to be so simple that nobody will take it seriously.
This is not true. Federal senators are elected on a state wide basis with the top N candidates past the post (N depending on size of the state). This can result in Senators being elected with a very small % of the overall votes.

For the lower house, we've had many years of the balance of power in the hands of a small number of independents who get an outsized voice.

Yes, if you live in an non-swing electorate, that is strongly held by the incumbent, then you could argue that your vote doesn't matter, but only because there are more people voting for something else. Isn't that how things are meant to work?
36% of Supercomputer 500 list use IBM power CPUs, including top two supercomputers.

https://www.top500.org/
It's in the first sentence of the article: "...the first use of CRISPR in cephalopods, a class of marine invertebrates."
Most suburbs don't have what you describe at all, I'm not sure why you're getting so defensive. I grew up in the suburbs myself, one with 250K people (arguably a small city), and it had nothing close to that density outside of the main street and waterfront area that accounted for maybe 10 blocks. Your claims just don't track.
Masdar City in Abu Dhabi is probably the closest modern equivalent to Epcot’s original vision, though it's debatable how much of the master plan will actually be built. Songdo (near Seoul) is less sci-fi-ish but much farther along in development.

As an aside, Niemeyer's buildings in Brasilia - particularly the cathedral and the palace - are phenomenal pieces of civc architecture.
Oh, it really would be. :D I meant more that if one did have it, I would not be afraid to get spammed with notifications, any more than i already am (and turn them off...) for any other game or app I install.
Well, in your case, researching about competitors makes sense :)
For the their most advanced process, too?

I wonder because NVIDIA, AMD and others requiring that process all seem to land at TSMC. Qualcomm, too, but that's hardly surprising.
Franken-CRISPR
All the blogs posted by e.g. this user [0] were generated by GPT-3. [1] Some of those reached the top of HN.

That comment indeed looks a lot like it is generated. It has correlated a bunch of words, but it did not understand that the link between UI and AI is tenuous. It is probably one of the few comments where it is so glaringly obvious. There are likely a lot more comments around which are generated but which went unnoticed.

This comment is not generated, as the links below are dated after the GPT-3 dataset was scraped.

[0] https://news.ycombinator.com/submitted?id=adolos

[1] https://adolos.substack.com/p/what-i-would-do-with-gpt-3-if-...
I'd also include Los Angeles (Getty and LACMA), Chicago (Art Institute), and Boston (MFA, beating SF by default because it doesn't even really compete in this category).
What about the inverse? It's dark outside, but it's 7pm and I'm not about to sleep.
For most goods and services there are desirable properties to intermediaries in terms of fraud detection, refunds, etc. But it is ultimately reliant on the ultimate source of trust deriving from governments and banks.

If you are a bank or government you have to look out for yourself, and so a fair amount of blockchain hype specifically addresses the low-trust transactions they encounter. There is some quiet adoption happening globally, and mostly invisibly to consumers.

The side effect, of course, is that it's easy for anyone to do bank-like things with the tech, including ransomware.
Grokking this doesn't make me okay with being a pawn in it by way of my choice of operating system :)
Japan's Fugaku with Fujitsu Spark CPUs has just taken the crown.

IBM Power CPUs are now 2nd and 3rd.

https://www.top500.org/lists/top500/list/2020/06/

https://en.wikipedia.org/wiki/Fujitsu_A64FX
Interesting. I don't understand everything so I have a question to the experts here: It seems that a small part of Kosovo stopped paying for electricity, so the electricity producers stopped producing for the parts. However this didn't work out, electricity still flowed to the nonpayants, because it seems that nobody cut the wires. This created an inbalance distorting the grid frequency, such that clocks in Europe ran a bit late (6 minutes). Sort of an Europe-wide soft brown-out. It's not told in the article, but I think the voltage was also a bit lower than it should be.

Did I understand this correctly?
Show HN: How to build your own URL Shortener with FaunaDB
That's octopodes; squid are much less intelligent.

They're moving on next to much smaller (and hence even less intelligent) hummingbird bobtail squid.
> Can you handle the insane complexity of Kubernetes at a reasonable cost?

For me, this point is akin to asking "Can you handle the insane complexity of Linux at a reasonable cost?"

And what I mean by that is: If noone exists on your company who can administer it, then you shouldn't do it.
Reactors don’t top out in efficiency at 4. I went from a 2x2 to a 2x7. My 2x4 power plant was buffered and would create flow problems when half of my buffers drained before the other half. When I scaled to 2x7, I dropped all but one tank to let me monitor when my reactors were above 500C.

My biggest learning with nuclear is that if I’m producing too much power for my factory, I’d rather grow my factory to meet my power supply than to make a more sophisticated power plant. Your mileage may vary.
Meteorologists use a standard enclosure called a Stevenson screen[1] to ensure measurement consistency around the world.

Or at least they did until very recently. There might now be some active-airflow alternatives.

Anyway, if it isn't measured with a (calibrated) standard apparatus, it isn't an official measurement.

[1] https://en.wikipedia.org/wiki/Stevenson_screen
Do you mean that UDP capabilities are lacking on Kubernetes workloads? Serious question.
VP, Director, What?
I've got a Pinephone (the UBports CE, though I'm mainly running Mobian right now) Short term, the use cases are as hacker mobile Linux devices with most of the mobile hardware working (device drivers are still a WIP, Linux text/server software works flawlessly, GUI software is hit-or-miss right now) Long term, I'm expecting them to be perfectly serviceable basic mobile handsets. But they are still a ways off from being 'daily driver ready' (i.e. power management isn't in the same league as other mobile devices and quite a bit of flaky/missing functionality) Another area still needing work is that there are only a handful of desktop apps that have been reworked to have a scalable UI for mobile.

Generally things are still sluggish and battery life is not great yet, which is to be expected since no mobile devices really existed out in the wild for raw Linux until very recently. Now that they do exist, things are improving rapidly. For example: a month ago battery life was atrocious. Today it's merely bad (compared to what you're used to on iOS/Android)

So what does this feel like in terms of real world usage?

1) Want to use it to place/receive phone calls/text messages... it will work, to a degree... some/most (depending on distro) of the time.

2) Want to run a web server or open a terminal and ssh over to a server... pretty flawless.

3) Want to run a GUI app designed for or adapted to mobile... the list is growing weekly, if not daily.

4) Want to run a GUI app designed for desktops (i.e. no work has been done to adapt for mobile)... prepare to be disappointed, if you can use it at all.

5) Want to run your favorite iOS app? No.

6) Want to run your favorite Android app? If it's open source, probably will be possible soon-ish. Proprietary apps? Probably not if they rely on proprietary Android/Google services.
I hooked up a Raspberry Pi to some dev boards from Analog Devices to make a test rig with some analog and digital outputs and high precision ADCs. It was a lovely experience. Supervised Elixir genservers are a wonderful abstraction to wrap around hardware devices. Also, binary pattern-matching was a _dreamy_ way to work with registers over SPI. A Phoenix LiveView user interface on top was performant and convenient.

Would recommend.
I live in a place with -40-45°C (-40-50°F) winters. We've got lots of cyclists even in these conditions.
I cycled to work through an entire winter in Trondheim, Norway.
> The SFMoma & DeYoung are not first class museums. They have modern art.

These two statements aren't even related, and while the first is subjective, the second is misleading in regards DeYoung, which is not focussed on modern art.
No strings attached includes substance abuse and criminal activity. No strings. They get a roof over their head anyways.

I mean you'd think people would be excited about homeless people pooping in their free housing instead of on the sidewalk.
Why Microsoft's new Flight Simulator should make Google and Amazon nervous
I don't see any way it would be possible for such a file to be simultaneously executed by the system as a MSI and as a JAR (you can probably always invoke the JRE on a .msi file, just not through the system file associations).
I've recently watched House and I found this more uncomfy than I did the first time.

House (the character) is often being plainly racist and sexist. The fact that he presents it as sarcasm is a vehicle for him, used to make his racism more difficult to challenge.
Why does (5) occur.
Samsung, Glofo and IBM were members of the Common Platform. My ex-roommate used to work at IBM Upstate where they trained Samsung engineers.

Apple moved to TSMC in Taiwan not too long after Tim Cook appeared on CBS claiming that the engines of their mobile devices were made in US, almost 6-7 years ago. Apple's share of Samsung's production isn't probably much these days. But they are still #2 behind TSMC and Samsung also announced recently that they are investing $100B for next 10 years in logic business which includes their foundry.