skysight-inc/HackerNews huggingface dataset:
The 4 exploits they got paid for don't seem like the biggest ones though.

I would expect Apple to pay $500k - $1M for this session in the end, and it would be in the best interest of all parties if this happened. Apple would encourage responsible disclosure (and attract more white-hat bug hunters) this way. The amount of vulnerabilities found is a proof by itself that team work does pay off, if the team is strong. Also, this is a drop in the bucket for Apple. It would probably cost them much more to have them on the payroll for the same amount of time.
I've tried that with people with limited success, though it could be that I've explained it badly.

When you put the games in terms of "you and a friend playing the game simultaneously", most people get it.

You and a friend are playing the game simultaneously; you both decide ahead of time to:
a. always pick the same initial door
b. no matter what Monty does, you ALWAYS switch, your friend NEVER does.

The possible outcomes before the reveal are:
* Monty wins, because he shows you the car. We agree ahead of time that this never happens.

Now, since you know one of you is going to win, since Monty didn't, who has the better chance? Your friend started with a 1/3 chance, and he hasn't switched; does his chance suddenly change because Monty opened a door? Most people (not all!) will agree that it has not.

Since one of you MUST win, and friend has 1/3 chance, what's left?
Well, and there is also kinda sorta support foir generics on top of it:

https://github.com/vasilevp/aboriginal

There is no engineering challenge that can't be overcome by ingenious thought!
> Servo is improving

I thought it's unmaintained since the recent Mozilla layoffs?
Can enforcing “kindness” work on social media?
Show HN: Sassbook AI Summarizer–Summarize text like a human with AI
Tools I use in Ruby: Thor.

https://github.com/erikhuda/thor

Because it's great that you have a library to parse args... but that's only about half of what you actually want when you're building a snazzy CLI tool.
I thought this was fascinating. "Emergent" inductors based solely on magnetic spin potential. No coil needed. Wish Nikola Tesla was alive today to see this ;)
Absolutely.

The initial motivation for building intercooler.js (and then htmx) was because I found that slamming a large html table rendered on the server into the DOM directly was orders of magnitude faster than running the JSON equivalent through a local template engine.
DuckDuckGo Now Has Driving and Walking Directions
Double gunshot wound to the back... Clearly it must be a suicide. That tends to be the preferred way for whistle-blowers to commit suicide; that is what previous case records indicate. There is a clear correlation in the data.

This conclusion is supported by the most highly paid experts including Bill Gates, his wife Melinda and Mr Fuzzballs; their trusted family cat. The evidence is absolutely overwhelming and undeniable.

It should also be pointed out that self-strangulation inside a prison cell using a piece of clothing which bears no trace of DNA and resulting in 2 broken neck bones while the security cameras are off and all the guards are asleep just as you're about to testify in an important high-profile case is the preferred suicide method for would-be whistle-blowers.
AI in Testing
Smoking was already generally in decline in most countries, including the US, who introduced public bans. It was a big part of what made the bans politically feasible in the first place.
The Middle East to Become the World’s Leading AI Hub
I find it mostly fine as long as you avoid political threads or threads with "Rust" in the title that have many comments. I outright just hide the former now. Moderation does good at removing outright trolls, but there is a particular, very sneaky class of trolls that do very here.
Helpful inputs, thanks! The degrading quality problem is one of the top-priorities on my list. I could imagine a timeline where you can see when products were launched and how they were rated over time.
$6k for an internal perimiter SSRF that led to source code access? What a joke.
Ask HN: Teaching Programming to Kids with ADHD
Any parents here have success teaching their kids with ADHD to code? My son is very interested in learning, and I’d love to help him, but his ADHD makes it very hard for him to pick it up. He eight years old, but I believe he’s totally capable of learning if he can stay focused and not get frustrated constantly.

Any tips on methods or suggestions on tooling?
Just like lisp!
It's the story of science! Unlike lawyers or debaters, scientists are delighted when their hypotheses are clearly disproven; this is at the crux of the scientific method, and is essential for discovery of the truth. Assert something falsifiable, then experiment. The truth wins.
This is not the most impressive piece. Two of the main complaints about "Lisp" are that it's not really a functional language and that there aren't enough libraries/the standard library isn't what it should be. These are specific to Common Lisp. Clojure gives you a functional-first Lisp, access to all Java libraries, and a decent standard library. The Common Lisp standard is very old, even if you look at the date it was finalized (1994), but most components are from a much earlier period than 1994.
I mean it's not like their reasoning is secret.... you're obviously free to respond to the substance of their analysis if you disagree.
Some would say that blender 2.5 changed so much that users had to relearn tons of things. A lot of users postponed updating to 2.5 at the time because of this.
Apple requests Telegram to shut down 3 Belarusian pro-democracy channels
Imagine that you are a politician in that area and you have a crisis with the water supply, you aren't going to win votes by promising to first fix the water supply problems somewhere else that's not in your electorate. Even if things are broken there's always pressure to campaign on addressing local needs first in order to get (re)elected, hence the phrase "all politics is local".
Prepared cannabis can't be taken across state lines legally yet, in general. However, you certainly can imbibe many milligrams of edible oil and be extremely stoned on Amtrak. (This isn't legal advice.)
Are the "BS work rules" that unions might introduce really that much worse than what gets imposed on the average software shop these days? Scrum ceremony, planning by committee, etc, at times is the kind of bureaucracy that brings productivity down.
Ah no ps5 and xbox both have been designed for fast loading of game textures. Even the new nvidia and amd cards support the same so current games might be okay with slower drives but texture loading has been a bottleneck for 4k gaming which this solves.
This is at the heart of why so many people find this unintuitive. People who know the right answer are assuming that this is a repeated game, where every time Monty Hall does the same thing.

Every instance given in the linked article includes the assumption that you will always have a choice. If you encounter this situation, how can you possibly know whether you would be offered the choice had you picked the wrong one?
I guess I always assumed Hacker "News" means it's something semi news worthy.

Interesting. I never though the "News" part meant much at all. A substantial portion of the links that get highly upvoted here, and attract active discussion, are actually quite old.

To my mind, the main "thing" is that submissions be interesting (for some definition of "interesting"), not that they be "news".

I guess it just goes to show how different people can look at the exact same thing and interpret it differently.
Ask HN: What skills should a programmer periodically brush up on?
I've learnt plenty of things in an academic setting that I haven't ever used practically. Some of that is normal, but I'm also wondering if there are things that would make more sense to revisit now having >10 years of practical experience?
> Yet doctors and lawyers and pilots have strong unions in all but name. What do you suppose they know that we don’t?

Isn't it protection from patients/clients/passengers, not employers, because of how visible they are as individuals and how directly they affect lives?
Awesome!
I finally understood what the fuss about eBPF is all about :p

Thanks for pointing this out!
I’ve always been interested in this round of thing, but have no idea how or where to get started
Please optimize your website in that way that it works if tracking protection in Firefox is enabled.
I also recommend you to build a website that doesn't depend on any third party services if possible.
Simple solutions:

* Block all political ads all the time.

* Require all political parties, and their PACS, to register as a known Advertiser account within the system. Any time an ad runs, and regardless of the source, the associated party will be heavily penalized with a removal of their non-paid content.

There needs to be ramifications for their abuse of the platform. Being that Facebook can't charge them a fine, penalizing their organic exposure is the only thing that they can hold against them.

Multiple offenses will result in longer and longer periods of their content being "muted".
If it will be as expensive as Concorde, it won't work exactly as Concorde didn't. It's got to be a lot cheaper - at least 2x cheaper - to have any chance of working. And then, everyone who can afford a first class ticket, will be able to afford that.

My bet is somewhere like $4000 roundtrip trans-Atlantic ticket or $3000 cross-country ticket in U.S. is about the maximum the market will bear.
Entrepreneur Sold Three Companies and Raised $35M to Create a Crypto Bank
It's both, you can search for products or brands.
The biggest driver of behaviour change is increasing the price. Cigarettes are considerably more expensive (even when adjusting for inflation) than they used to be.

https://247wallst.com/special-report/2019/06/19/price-of-a-p...

Other things (bans on ads, bans on smoking in venues, health information) do help, but they're a smaller part of the picture.
Sassbook AI Summarizer uses state-of-the-art AI to generate automatic summaries of text documents. The default mode is "Abstractive" which is equivalent to how humans summarize.

There is also the more traditional "Extractive" mode where key sentences from the original form the summary.

There are three categories of summary sizes as well.

In addition, for very short text, a highly abstractive "one-liner" may be produced (warning: wild!).

Thanks for trying and providing feedback!

Sassbook AI
What the Heck Is Continuous Integration (CI), Delivery (CD), Deployment (CDP)?
Aluminum is by far the most recyclable. It takes ENORMOUSLY less energy to produce an aluminum can by melting one down than from ore.

Paper and glass also make economic sense to recycle. However, paper recycling is limited to making egg cartons, paper shopping bags, pizza boxes, and other low quality items. A lot of glass that gets recycled is actually crushed and used for fill, though most is actually recycled.

Plastic recycling largely meant putting it in container ships with other garbage and sending it off to Asia where it gets buried or burned. Once Asian countries said STOP DOING THIS a year or two ago, plastic "recycling" no longer made any sense.
> Apple surely was aware of this, yet wanted to go their own way.

Mantle was a proprietary API promised to work on AMD cards only. The work on it started in 2013.

Apple released version 1 of metal in June 2014. So, they'd already spent at least a year working on it. So why would they want to somehow go ahead with something proprietary that AMD was developing at the same time?

Khronos groups announced they were going to work on the next generation graphics API in July 2014 (a full month after the release of Metal v1).

AMD donated Mantle to Khronos in 2015, a full year after Metal v1.

---

There are reasons why Apple went with Metal, and they make a lot of sense: OpenGL was a disaster. Any improvements to it would require immense effort, and fighting against Khronos committees. OpenGL ES was only marginally better and only marginally better suited for mobile devices. So why would not Apple develop their own low-level graphics API for their own devices?
I find earplugs help me sleep better by not having external noise distract me, and hearing only the tinnitus. By not viewing tinnitus as a threat and facing it helps massively.
Play Board Games at Work
Can we just call it "The Hackening"?

Pretty Please?
Screego is screen sharing for developers
I see, thanks for the clarification and my apologies for assuming the worst - maybe I've come to expect the kind of hubris I thought you were displaying because, all too often, programmers actually do display it. Just the other day I had one comparing himself to a doctor in an emergency ward, heroically saving bleeding victims, because he deigns to contribute to open source. This justifies treating the writers of bug reports with disdain, of course.

Nice to know it's not endemic!
Bravo! This explanation wins in every way.
> and unicode support would also be a good idea. strings are not just ASCII anymore.

GNU grep does have some Unicode support when using the UTF-8 locale. Things like \b and \w are Unicode-aware, for example.

> it uses a very old and outdated substring search algorithm. even ripgrep does not use the state of the art EPSM substring search.

Boyer-Moore is still quite serviceable. So is Two-Way. And neither of them require platform specific vector instructions, so there will be a place for them for a while yet. And as for EPSM, I don't know of any place where that's used in practice. I don't even think Hyperscan implements it. It's hard to beat a well place memchr or a simpler prefilter SIMD approach[1].

> extended pattern matching is not jitted. in 2020 there's no excuse for that.

It's not the case that a JIT is always faster than a DFA (or a lazy DFA in GNU grep's case). So, umm, yeah, there are plenty of excuses for it.

> it cannot do unorm, thus fails to find some unicode patterns. debian shipped for a while with the unorm patches, but this caused huge performance regressions on UTF-8 locales. a lot of work is still ahead.

I don't know of any search tool that does Unicode normalization, probably exactly because of the performance overhead. Unicode normalization negates most if not all of the "clever" optimizations used by GNU grep. It would certainly render the choice of substring algorithm or JIT mostly useless, for example.

[1] - http://0x80.pl/articles/simd-strfind.html#algorithm-1-generi...
After hiring all these people, has even more value been delivered to customers?

If you can point to all the new features delivered by dev, supported by ops, and analyzed by data science... and you can say that these features brought in new business and invigorated old business, then yes all the negatives are worth it.

However if you can't, then it's all dead weight and standards need to be enforced, otherwise you are paying your employees to make your code worse.

I would say this happens all the time at big corps, but if it happens at a 50 person startup then it will be a big risk factor.
Why don't you just exclusively subscribe to the subreddits that interest you?
If you know the list can't be empty, can't you prove that to the compiler by using a non-empty list type?
I use click[1] for things that don't need the complexity/features of argparse, personally, which ends up saving a lot of time.

[1] https://click.palletsprojects.com/en/7.x/
How do we make a good taxonomy of legal problems?
> EDIT: can we incinerate trash instead of burning oil? It is a controversial topic.

In many parts of the world even the question of incinerating trash instead of coal is still meaningful and that one should be far less controversial.
" Scientists are aware that most of the cells in your body are not human"

I guess that depends on the definition.
How do you define a cell in the body as human and another cell as not human, when both are necessary for the human as a whole?
> So when they don’t switch each one has probability 1/3 of getting the car?

Yes.

> Where does the car go if no one gets it?

I don't understand your question. What does this have to do with probabilities?

> And if they switch both have probability 2/3 of getting the car?

Yes. Remember, because both can pick the same door, this is effectively two independent games running simultaneously.

They each have a 2/3 probability of getting the car because, when they first chose, they had each 1/3 of getting it right. Each contestant's choice and corresponding probability of winning is independent of the other's.

> Is this some form of car sharing?

That's what I asked :) Car sharing makes little sense, prize-wise, which is why this makes no sense as a contest. But in regards to probabilities, it makes no difference: yes, both contestants should switch.

> Maybe you should try to play with three cards and one ace.

There are only 3 doors, so you should only use 3 cards.

> Now, do you prefer card #2 to card #1 and simultaneously prefer card #1 to card #2?

I don't understand your question. Probabilities are computed independently for each contestant. There's no "simultaneous preference".
App Stats Are Impressive
The tool that transformed wine tasting
Adblock Plus itself has trackers in it. They also accept money to whitelist every major ad company and trackers meaning you gain nothing privacy wise and just waste CPU resources.

uBlock Origin is many times better (and faster)
Every custom extension and configuration you change makes your browser unique in its own way. See https://amiunique.org/

At the most extreme using Tor Browser and its defaults maximises privacy for any general loginless browsing.

If you're logging into services with accounts then a mix Firefox containers, uBlockOrigin, ClearUrls and Smart Referer provides pretty decent privacy.
Catalog of PHP apps running on .NET
DDG privacy essentials is domain based blocking.

I recommend uBlock Origin. Remove everything else.
https://archive.vn/YcKWn

Wine Aroma Wheel website: https://www.winearomawheel.com/
I also noticed it contains names like "carpenterjr" in the surnames list, which is almost certainly a data collection error.
Understanding Declare
Notably, car manufacturers work like this currently, but before Japanese manufacturing methods took over, US-made cars were notorious for shipping with all kinds of flaws, with the classic anecdotes about people receiving cars with beer cans rattling inside of doors.
> How do you define a cell in the body as human and another cell as not human ...

by their genomes?
You can approximate the effect of a new Influenza without vaccines if you look at the numbers for the year 1918. That definitely made headlines (In this special case that is an interesting story by itself). But the effect influenza had in 1918 is not comparable to the normal flu.

So if people insist that Covid-19 is just like the flu, agree with them and remind them of a new flu without vaccines, just like the Spanish Flu.
Sarcasm lacking a “/s” sarcasm tag is risky. On deeply divided issues, where both sides demonize the other and is willing to think the worst of anyone at a drop of a hat, unmarked sarcasm is in effect asking to be knocked down.
Is that not the "XML External Entity processing to Blind SSRF on Java Management API" SSRF? As that would make sense to match that payment. I really struggle to believe that the $6k is for the maven access one, that's a billion dollar vulnerability.
Time to write JSeBPF, the new web API allowing kernel-side javascript...
Mastering Atari with Discrete World Models
> See https://amiunique.org/

See also: https://panopticlick.eff.org
Of course you stick -- Monte obviously opened the other doors just to trick you into switching because he knows you got the right answer. Of course he can do this; you already know that 999 doors have goats, so whether or not you picked correctly he can open 998 doors to reveal goats.

If you had picked a goat door, he would have just opened the door you picked or opened the door that has the money to show you that you got the wrong answer.

The assumption that Monty Hall will always offer you a chance to switch is what is broken in the problem statement and the reason why so many people think that the correct answer is unintuitive.
Imagine how many thousands of exploits Apple has found and fixed internally, that weren’t found by outside researchers.

Bug bounty programs aren’t a replacement for internal security, and they have the potential to be very expensive compared to paying someone a salary.

Is it an enormous compromise of trust? Dunno. With an average fix time of a single business day, I’m inclined towards “no”: that’s an awfully rapid response for incompetence to deliver.
The same way the pandemic opened up the opportunity for remote work, I'd love to see Facebook _experiment_ with maybe 6 months of no political ads and see what emerges in its place.
Honestly, I've been quite shocked over the last 5 years or so at Zuck's take on political and politically adjacent politics. I get that they're of the "money at any cost" ethic, but a lot of decisions (or lack thereof) have been downright imprudent.

These last minute decisions are likely reactive to something, whether or not it's actually reactive to the debate comment that this writer thinks triggered it. My (uneducated) guess is that its more related to stuff happening on the platform itself.

In any case, the creepiness of fb just keeps rising. Maybe they'll end up exploding the whole thing.
I would like Privacy Badger to keep aggregating information from users who volunteer to do so.

I use the following extensions for browsing "security" (ha!):

Disable WebRTC

Canvas Blocker

Firefox Multi-Account Containers

LocalCDN

Privacy Badger

uBlock Origin
...I am not a very smart man, and after reading this - it still did not click why the correct choice is to switch.

So I went on youtube.. Watching the first 3 mins of this 5 min video made it click: https://www.youtube.com/watch?v=4Lb-6rxZxx0
Really? I honestly think it ranks pretty low on the scale Asimov's works. The 'big reveal' isn't very interesting or unexpected, and there aren't even any really interesting ideas explored in the work.

Then again, I'm apparently in the minority in my belief that the Foundation series isn't that good either and The God's Themselves is clearly his best work, so YMMV.
Personally, growing up in Appalachia in the 90s it was more likely my extended family was abusing drugs than not. Cracking down on pill mills and making Oxy less abusable has pushed more and more to heroin/meth/synthetics. The drug problem is still rampant in the area. People need help and the barrier to receiving help in this country is too high.

I had a friend begging for help with treatment and the only in patient place at the time for substance abuse in the area had an 8 week waiting list... and you had to pay your way so unless you had a family/friend with extra resources you were on your own.

We wonder why the drug problem still exists in this country where we punish those struggling instead of help them.
Building Battle-Tested Well-Architected Serverless Apps:Learnings from Real Life
I wish this blog were better optimized for mobile. I can't scroll back horizontally.
uBlock Origin should always be your first line of defense. Always.
Like discord, but user-owned and -operated.
What do you mean? Do you think I moved the goal posts?