skysight-inc/HackerNews huggingface dataset:
Excellent post! It was a really pleasant read. It encouraged me to do precisely that today, and I really enjoyed it.
They never did that. “Breaking” implies it was ever there to begin with.
The point is that they want further assurances that the "curl https://totally-not-evil.example.com/install.sh" part won't, in certain environments, screw up some pointer arithmetic and write the buffer into executable memory, or cause some other heartbleed-esque bug which can be exploited.

Piping it to "sudo bash" is perfectly acceptable in the eyes of the system. It's doing the instructions the user has asked it to, they've explicitly been configured as sudoers, and usually have been prompted to enter their password.
Serious question, why should we be so concerned that they were wrong the first time?

You say

> admitting they don't know (which is the only acceptable scientific answer when you can't back up a claim with reproducible experiments).

But what kind of response is that really, when there's an infectious disease and the center for disease control tells the public "We have no clue what the appropriate response is, we're going to tell you in a couple months after we've done some reproducible experiments"?

On the contrary, the ONLY ethical way for the CDC to act in the face of an emerging (potential) crisis is recommendations based on the current beliefs of the organization (which may be incorrect as they are, as you say, "based on their guts") and updating them the moment more evidence comes available (Which they did. Repeatedly.)

So in fact, I would not say I've had a loss of trust but a gain of trust by an institution acting in a very rational manner throughout the pandemic.
> your best bet is to emigrate to the west if that is at all possible

And THAT is the problem in any non-western country. The extent of brain drain by more flourishing economies are the prime reasons why certain countries are plagued by lack of education, lack of opportunity, spread of corruption, and spread of gang-like entities.
Lead poisoning?
Amazon has competition from online stores like ebay, AliExpress, Wayfair, and Overstock. Traditional retailers like Walmart, Target, and Best buy also have online presence challenging Amazon. It's pretty trivial to cut them out of your life. They don't have much that you can't get elsewhere
> Ng Security Industries Semi-Autonomous Guard Unit #A-367 lives in a pleasant black-and-white Metaverse where porterhouse steaks grow on trees, dangling at head level from low branches, and blood-drenched Frisbees fly through the crisp, cool air for no reason at all, until you catch them.

/Snow Crash, Neal Stephenson/
Except that isn't what's happening at Coinbase. Coinbase is still making the same product it made six months ago. It's the activists who want Coinbase to start working on something else.
GPT will also code for you.
Not everything is a technical system, and technology does not exist in a void. I'd think the field that coined the term social engineering would understand that.

The tech world is in for a rude awakening as technology becomes less a field of nothing but specialists, and actually gets infiltrated by a greater and greater number of tech-savvy, yet industry independent stakeholders.

We've had a social blank check to work from for the better part of half a century. You now have people writing children's intros to k8's. If you don't think that at some points technical problems don't start getting solved via social/legislative/legal means, you're in for a bit of a rough time.
In a sense, those are the breaks.

Companies don't exist to be fair, and fairness isn't built into promotion/advancement necessarily. This might just be another one of those insider edges that you may or may not have. Companies are already full of these.
Don't fight the universe, common lisp is too old for the mainstream to care, you can argue the same for es6, python, php .. it was all ridiculously bad and evolved by adding old ideas.

If you want to make CL exist in a commercial driven world.. make a successful CL business, that's the only thing this soil understands.
There are very real reasons to consider Facebook a threat that have nothing to do with projections of "it just isn't for me."

Facebook embraced Q Anon and turned it into a gold mine for engagement. Facebook is directly responsible for the growth of that conspiracy and made the United States much worse as a result.

Facebook did this by feeding a culture of fear, suspicion and bigotry in the guise of belonging, community and group 'fun' via memes and 'trendy garbage.'

Facebook is crack cocaine and the pipe has already blown up in our faces. The United States is on fire like Richard Pryor.
Well yes, but it's not there to stop you, it's there to stop people who are smart enough to use masscan, but not smart enough to compile it. And I guess, much like locking your front door, there's also an element of keeping honest people honest.
Of course. The list isn't even used by default, users of the tool must specify it.

If somehow it were hard-coded into the tool, well, the source is available, as is the ability to port scan any one of a number of other ways.
You can use a rifle to defend yourself (which is how Kyle Rittenhouse wasn't murdered by the angry mob), you can't use a destructive device to defend yourself, just to cause destruction.
Because Egypt was conquered by the Mamluks and Andalusia by the Spanish at the same time. There was no area under Muslim control that was not ruled by barbarians whose idea of hygiene was washing their posterior every time they crossed a river.

The Mongol invasion was a unique event in Eurasian history. They make every other invasion and conquest seem tame by comparison. If you have a choice of facing Macedon, Rome, Napoleon, Nazi Germany, the USSR or the Mongols never choose the Mongols.

It was the first and only time a single power could have destroyed all other civilizations and came very close to it. To the point where they managed to destroy both the Polish, Hungarian and Romanian crusader armies within days of each other, with minimum casualties and would have continued depopulating Europe to the English Channel if the Khan had not died and the majority of the army returned home for a civil war.

The reason Europeans aren't riding horses fighting a rear-guard action against the Aztec conquistadors is because the Mongol court liked silks and perfumes enough to not raze every city they conquered.
Feels like that quote is muddling two different problems in the security of DNS. DoT and DoH provide session privacy by hiding the queries from unwanted sniffing. DNSSEC provides authenticated records back to the origin. They have separate use cases.
> Their newer MacBooks are going to be ARM based, which, I think, is mostly so that they have more people to develop apps for their phones and iPads.

I think it's oversimplifying the situation to say "Apple wants ARM just for mobile", though. While that's certainly a benefit of having a single architecture to support in their product ecosystem, there have been plenty of threads on HN about how Intel's rate of chip improvements have been stagnating. The much-touted scaleup of their 10-nm chips ended up being delayed by 2 years, and their 7-nm chips aren't arriving until 2023, by their own (likely optimistic) estimate[1]. The more likely narrative is that relying on Intel became untenable both cost- and performance-wise.

1: https://www.theverge.com/circuitbreaker/2020/7/23/21336356/i...
It's another R, something that seems like progress, but will end up stopping further progress.
But those actually made a product. Werner Herzog was great on that show and I'm sure Morgan did great too. Chief futurist since 2014 on what seems to have been a multi-billion dollar scam at this point is not a good look.
‘No-Code’ Startup Unqork Hits $2B Valuation with New Fundraise
If the Coinbase guys were lobbying for "libertarian and anarchist philosophy," broadly construed, you'd have a point. But they're not. They're pushing for narrow financial regulation. There's no principled reason to think they're doing this in furtherance of their personal politics, as opposed to, say, making their customers' lives easier.

As such, I don't see the hypocrisy. Now, I'd be more inclined to agree if the "politics ban" covered activism around crypto policy issues. But of course, then management's position is very easy to see. They hired developers to implement their vision, not to fight it.
But unlike Lisp, the Julia language is not homoiconic, so its ASTs don't look like the parent language.
Really? My only experience with Julia was porting a simulation from Python and the speedup was incredible.

The bang-for-your-buck of adding Numba to existing Python code is why we passed on Julia. Give it a try.
Fraud is substantially harder because you always need to authenticate payments (above a tiny amount) with a PIN, even when buying online. It's been 2-factor authenticated for 2 decades now.
Yes. I suppose, though, it's a win-win situation for both parties because the author can claim to have addressed complaints and hollow threats while allowing anyone to do as they desire and, may we say irresponsibly, remove it.
Mind elaborating on why you think so?
Sometimes the other choice is unemployment without hope for education.
Microsoft only appears to play the nice guy if you assume large swaths of the computing market are a natural monopoly. Enterprise level desktop software and the Office suite are still locked into a single vendor.
Is Eigen slow at multiplying small matrices?
I don't know why you're downvoted.

> But what are they?

The language's semantics are such that by default, you get memory safe code. This is checked at compile time. While many languages are memory safe, they often require a significant amount of runtime checking, with things like a garbage collector. Rust moves the vast majority of these kinds of checks to compile time, and so has the performance profile of C or C++, while still retaining memory safety.

> How does it compare with modern C++?

One way to look at Rust is "modern C++, but enforced, and by default." But that ignores some significant differences. For example, Rust's Box<T> and std::uniq_ptr are similar, but the latter can still be null, whereas Rust's can't. C++ cannot be checked statically for memory safety, even if modern C++ helps improve things, it doesn't go as far as Rust does.
It's strange that there's little of comparison of an API to a standard. (Think like ISO standards) as API is not a program itself, it's a rule-set how two programms can interoperate.

Patenting API's imo is like patenting a rule set for a game (say like football). Imagine someone patenting rules for a football and afterwards it's allowed only to play the game if you are "licensed" by the patent holder.

anyways- the Googles defense team seems bland. Not sure whether they really understand the idea of what API is and what's it's purpose and that API's textual representation is absolutely non-essential.
What would true progress look like to you? Specifically regarding Julia's main use case of interactive yet performant programming?
In my opinion, yes, this would certainly be better. It will also remove the risk associated with you deciding to shut down the service for whatever reason.

You can still have a service component to this (and charge monthly for it) - to allow sharing the data between multiple devices, presumably passing it through your server in an encrypted form.

You can also generate recurrent revenue from a desktop app itself by providing only X months of free updates to newer versions. Ask for a small fee after that for another year of updates.
Bret is a Roman/medieval historian, so most likely not.
> Sunnis embraced al-Ghazali as the winner of the debate with the Hellenistic rationalists

Let's assume it is true and Sunnis followed Ghazali and stopped thinking, pondering and doing research work but what about Shias and other factions of it? Why did not they produce something amazing in science? One can't blame Ghazali for all the mess, especially when he was not followed by all Islamic sects. I will not blame Islam or Quran either. It is something else, probably some kind of excuse or laziness. I wanted to say that the "Hunger for Heaven" might have made them not to use brains but then I see non practising and liberal/modernist Muslims, they did not do anything remarkable either.

I guess it is a culture, some kind of viral disease like thought that propagated in entire Muslim world and it affected regardless of someone is practising Muslim or not. Being a Pakistani muslim I observe that people have no interest of asking questions, they never ask questions. They accept things as it is which is quite irritating. They just accept things as a "gift of God" and prefer to move on rather than finding out WHY is it around.
I don’t think so. Demotivated people are troubled by the situation. They do not seek the situation that put them there. They want to be productive, but the system undermines them. Slackers just don’t give a care either way. They just wanna slack. They make a million excuses. It’s really not the same in any way.
There's a psychological paradox at play. Many idealistic lispers want a lot of things but they don't play the current game, they (I can include myself partially) care more about the tool than the product and it just dies a quick death.

For this to happen they have to turn their view of lisp from beauty to an effective tool to win on pragmatic points: time to develop, number of bugs, ease of adaptability. CL has a hammer for all this points but you have to see the field that way and produce things.. well basically 'less is more' vs 'perfectionism'
your brain does lots of preprocessing to create a stable view of "reality", glossing over blind spots, retinal blood flow, etc. in a way we are always hallucinating, and it seems natural that computers should learn what we are actually paying attention to in video, and focus on that
Not to beat a dead horse, but to crystallize my point..it's not just about waiting until we find out if the guy is guilty or not to make a judgment. "Catching criminals" is an outcome/end. It's not really an action we can take. It's a future state that may or may not come into existence after we undertake certain means. "This particular application" is a means to an end. That is a key difference. I'm questioning whether the means always justify the ends.
FTA they created an abstraction layer that makes the abstracted simulated environment closely resemble the abstracted real world environment, which increased the transferability of the model.
Yes that would be terrible, but the death rate is trending down in most areas (even those with minimal pandemic control measures) so I predict the final death toll will be under 500,000. For comparison purposes we lose about 600,000 per year to each of cancer and heart disease. The pandemic is bad and needs to be taken seriously but it's certainly not the end of our civilization.

The politicization of anything to do with public health is inevitable. Science can provide useful inputs, but ultimately the decisions have to be made by elected politicians. We live in a republic, not a technocracy.
My unpopular opinion is that H2 is an overall very poor solution to our current problems. It replies poorly to the electricity storage problem, because the production chain efficiency is really low, as low as 15-20% : electrolysis has a ~45% efficiency, then compressing the H2 to 700 bars consumes 30% of the stored energy, then you must add distribution and transport (and mostly can't use the huge, existing gas transportation infrastructure). While batteries have an efficiency over 90%, ditto (already existing) HT network.

Also H2 isn't great as a dense power storage for vehicles either; the H2 plane is but a pipe dream, because it requires entirely new ways to store energy aboard, therefore probably requires entirely new planes with new architectures (like flying wings), huge new airports infrastructures...

All in all, methane would be a saner, simpler target : you can create methane from water, CO2 and electricity; we already have all the infrastructure to transport, store and distribute methane; and using methane in vehicles of any kind is a no-brainer and requires no breakthrough or radical change.

I don't believe a word of all the H2 hype.
Discussing the long arc of discovery with a new Nobelist
Free Email Templates for Developers
If you were to look at stuff coming out of North Korea, you'd see the veneer of wealth and plenty as well.

So the simple answer is "We lie about this, therefore, they must also be lying about this."
Automatically Pixelate Faces on iOS Using Face Detection with Native Swift Code
It could be bad for telemedicine, since the NN may gloss over some "weird" pathological features not found in its training set. The current setup involving an initial image and keypoints should be fine though, as long as the initial image (keyframe?) is not messed with and is transmitted frequently enough.
Such a waster of tax payer dollars. I would rather have health care.
In general, yes, although there is a somewhat loose association of "subjects" to particular desktops.
if having a warehouse in germany is so unattractive that it's better to put them in poland and ship everything across the border, isn't that more of a problem with germany than amazon?

edit: okay, that was a bit glib. but isn't complaining about this sort of thing at odds with the idea of an integrated european economy?
It's nice that you can write Julia in a more Lispy way, but if you did that you'd probably be one of the only Julia users did so, and your code would not be readily understandable or accpetable to the rest of Julia's users and if you wanted to integrate other Julia code in to your own you'd be stuck with having to use the more Python-like syntax that the vast majority of Julia code is written in.

In short, the Julia ecosystem is not a Lisp ecosystem.

If you wanted Lisp, you'd be far better off using a real Lisp to begin with, so you can unreservedly participate in an entire Lisp ecosystem, instead of using a language that hides its Lispyness behind a Python-like syntax.
At low paying jobs sure but when you're talking about $100k+ tech employees it does not cost 50% of base compensation for the physical workspace.
The geopay stuff seems unstable as a norm... if that's the way we're going.

It makes sense atm, maybe, for tech companies.

The tech companies, currently, are extremely flush with cash. They don't need to be all that ruthless. This takes off a lot of pressure. But as things go on, "geopay" is going to become an optimizable cost structure. There will be uncomfortable conversations as people move to higher geopay places. False addresses. Optimisations on all sides.

Maybe I'm wrong, but this seems like a mess, as the games play out.
Isn't it interesting that I know nothing about you or where you worked but I can predict with near 100% certainty which unsubstantiated, contentious opinions your company permitted and which ones weren't allowed no matter how well-researched?
... we have overdeveloped the material aspects of existence at the expense of the deeper emotional and spiritual aspects, and we are paying the price for that error.

- Mindfulness in Plain English
I feel we're on decline, because "science, bitch" is used to harass people into doing something they don't want or not ready. And people generally don't like to be harassed, they begin to resist no matter how reasonable things you're talking about are.

I wish society could pick its battles more carefully.
My T14 running Ubuntu 20.04 with the mainline kernel is connected via USB-C to a 3840x1600 screen and there is no lag at all.
Every nation copied others work. It's called wisdom of crowd or knowledge transfer. The West then had copied the work of Arabs.
"And then, when you look at the headers, most of the messages turn out to be junk along the lines of "MAKE $$$ WITH NO EFFORT WHATSOEVER!" (where the sender neglects to mention that you will be making the $$$ for them) or "Visit my XXX Website" (where the XXX turns out to stand for "total waste of time") or "Medical Breakthrough" (where the sender is selling something banned throughout the world [apart from one sleepy little village in Kwang-ju])? "

Interesting that it's old enough they didn't just say "spam" (and in fact don't refer to it as spam, though that word was already in use by 2000....)
Interesting to contrast with curl is C: https://daniel.haxx.se/blog/2017/03/27/curl-is-c

Looks like they've figured out a good way to allow bringing in safety while avoiding the risks any change will bring
While the physician salaries in the U.S. are indeed much higher than in Germany, I believe the time to become a fully accredited doctor is roughly the same.

In the U.S. it's 8 years of school plus a 3- to 7-year residency program, versus 6.5 years of school plus a 5- to 6-year residency program in Germany.
(Also, I believe all normal browsers allow disabling javascript in the devtool settings — my adblocker doesn’t because it’s just /etc/hosts.)
The problem with Numba is that it only really works in small, limited usecases. Good for e.g. Numpy arrays, but can it provide these massive speedups with custom classes? Arrays of strings? Sets?
Probably not, since both Julia and Numba relies on inferring the data types of all objects, and on them being stored efficiently in memory. The Julia type system allows easy type inference, and all custom structs are stored efficiently in memory. In Python, neither of those are true.
I had the same response. In fact, I assumed that there must be some kind of client-side secret wrapping with a customer-managed key or similar (i.e. you end up managing one secret, rather than n). I still need to secure access to the Doppler API key in any case.

Then I looked at the API documentation and it seems, no, you're being encouraged to send your secrets verbatim over the Internet.

I understand how this invites comparisons with the CSP secrets management products (e.g. AWS Secrets Manager), but it seems strictly worse from a number of perspectives:

* blast radius: if I'm a multi-cloud, or hybrid-cloud, property then compromise of one environment doesn't necessarily lead to compromise of the others; if I have all my eggs in one basket, like Doppler, then it seems like it does.

* Internet traversal: if I'm using something like AWS Secrets Manager from within AWS, I can entirely avoid having to traverse the Internet for my secrets by using VPC endpoints. Having to cross the Internet just means I'm exposed to more bad actors, an increased variety of attacks and also operational risk factors unrelated to security.

* (probable/possible?) segregation of duties concerns: the design of products like AWS Secrets Manager means that some kind of active collusion across product teams within AWS is required to create inappropriate disclosures and to conceal that disclosure. If secrets management is the only product line, that seems less likely to be sustainable.
At the time that was given, Egypt and Israel had been formally in a state of war for over 30 years, and just a few years previously there had been a war in which thousands had died. It's not really a comparable situation.

Also, it was, quite reasonably, given to Sadat and Begin, not Carter.
I actually agree with you. My comment was provocative in the sense that I would surely immediately become engaged politically if I was out of this comfort zone.
How much free time do you think people have on their hands?
Not to mention pushy/disingenuous military recruitment tactics.
If you read these comments organizations are threatening legal action and reports to law enforcement.

https://github.com/robertdavidgraham/masscan/blob/master/dat...
> -I would really love a weekly Matt Levine podcast. But sadly I don't think we'll ever get that.

I don't know that you do. I've found him to be a much better writer than speaker - the content was similar (brilliant, funny, interesting, etc) but his spoken delivery simply isn't very good, and where do you put a footnote in a podcast?
A Quick Introduction to Dplyr in R