skysight-inc/HackerNews huggingface dataset:
No material difference from a defense perspective. Offensive prowess does not result in defensive prowess. Just look at the Android bug bounty program [1], only $250K for an remote kernel arbitrary code execution, or Apple [2], $250K for a one-click kernel arbitrary code execution. To be fair though, that is on the high end of security, you could probably totally compromise any Fortune 500 company for less than that. And no, I am not joking or exaggerating that is actually a serious statement.

Really all these audits do is validate your security. If they find something at a price point then you are probably vulnerable at that price point. Think of it like a live-fire test of a bulletproof vest against a gun. If a bullet goes through then you probably can not protect against that. If it does not go through, you still can not be certain that it actually does provide comprehensive defense against that gun and bullet, but it is at least not totally ineffective. In the current state of the industry, any competent audit will find multiple critical vulnerabilities at these price points. It is like shooting an airsoft pellet at a "bulletproof vest" and seeing it pierce through. It is so fundamentally flawed that testing against a real gun (better offensive specialist) is kind of meaningless since to actually solve the problems you already need to completely redesign everything. Unfortunately, most companies who get such audits done think the takeaway is that the places the airsoft pellet went through must be the only problems, so if they just patch them up then everything else must be good because nothing pierced those other pieces instead of realizing that observable quality defects in one place probably means there are many unobserved quality defects in other places.

[1] https://www.google.com/about/appsecurity/android-rewards/

[2] https://developer.apple.com/security-bounty/
Well I’d say the video you posted shows something quite different from the ‘Mexican slaughterhouse’ described by the parent.

Are you saying doxxing and random retaliatory violence equates to ‘accountability’?
Is that your company, Bobby Tables?
Don't forget the matrix exponential which might certainly blow the mind of a lot of people here. Matrices as exponent - who would have thought that possible!

https://en.wikipedia.org/wiki/Matrix_exponential
> The other side of that is that in America you have the opportunity to do quite well for yourself if you aren’t in one of the aristocratic elite families. That isn’t really the case in many of these European social democracies. Not only is there a safety net below you, but there is also a net above you as well.

Hasn't this been thoroughly debunked by economic mobility studies? The US regularly ranks below many European countries by this metric, and the nordic countries tend to dominate in this regard.
I've always found the bipartite graph conceptualization of matrix multiplication the most intuitive, and especially so if you're familiar with neural networks: https://www.math3ma.com/blog/matrices-probability-graphs
Yep, I don't disagree.
OP's point is that corporate taxes don't work like that. As a business owner, you can avoid taxes by reinvesting in your business, capturing the positive outcome by way of valuation. If corporate taxes are lower, owners are incentivized to extract profits rather than reinvesting them.
Arm Spinout Reveals Non-volatile Memory Plans
Ohh wow, what a way to describe this, and COVID ain't making this any better...

> The world is terrifying. To say the least, Becker’s account of nature has little in common with Walt Disney. Mother Nature is a brutal bitch, red in tooth and claw, who destroys what she creates. We live, he says, in a creation in which the routine activity for organisms is “tearing others apart with teeth of all types—biting, grinding flesh, plant stalks, bones between molars, pushing the pulp greedily down the gullet with delight, incorporating its essence into one’s own organization, and then excreting with foul stench and gasses the residue.
Which McDonald’s Ice Cream Machines Are Broken?
Facebook came after google, and managed to compete in ad business, got orkut and google+ discarded pretty quickly. Playing devil's advocate here, but doesnt that prove that no matter how big/powerful you are, some random kid could still take you down. Look at Big 3 and Tesla...etc
Competitive benchmarks conspicuously absent. I would expect a vendor who controls both the hardware and the application build to easily show that graviton2+rds is beating the pants off percona builds on x86, but I don't see any claims here.
You need to track every single taxpayer continuously just to know if that cutoff was reached.
Then you just end up pronouncing things wrong.

No, then you get used to applying the pronunciations of word fragments from one word to another. Reading doesn't make you pronounce things wrong. Not reading does. It's why so many people on YouTube embarrass themselves by confidently getting certain words hilariously wrong.

How many American children grew up reading Harry Potter pronouncing Hermione as "Hermi-Own" until the movies came out?

Is this common? I can't say that I know a lot of children, but the ones I do know had no problem with it. I know because one named a stuffed animal after her, and another asked her mother if she could change her own name to Herminoe.
Here is my screenshot: https://imgur.com/17OxohL

It is as if the whole Web 2.0 era forgot about it, all those icons on the left side.

The main part takes only like 30% of the screen estate.

On the other hand, reddit looks good, Google+ looked good. HN looks better.
If they close your account, which they can do at any time for any reason, they do not have to refund you your balance. They're not a bank but they can functionally act like one if you don't transfer your balance(s) out of your account(s).
100 miles in 10 minutes ... with a 350kW charger, which really aren't something you can find on every block.

HVDC chargers are mostly used for roadtrips, not daily charges.
Google is deprecating APIs left and right. For example, Google Music users were migrated over to YouTube Music as Google Music was deprecated. Google Music had an API you could develop against, YouTube Music lacks any such API, leaving people like me in the lurch.
I implemented flood fill for Adobe as an adapter on top of BFS (from the BGL), which was, itself, an adapter on top of BLAS (written in FORTRAN). It was somewhat faster than the handcoded assembly BFS they were using at the time. The compile times were killer, though.
Would a movie studio work if it moved to san francisco and just tried to make it work. This was people thinking something really difficult and risky was really easy and safe. Its not.
Concluded our case study on Debt Collection using Machine Learning
It’s a fairly boring use case, but at QuasarDB we also target ARM (some of our customers run our database on embedded devices), and AWS’ graviton processors are a godsend for CI: we can just use on-demand EC2 instances as we do with all the other architectures and OS’es.
Because the stock may still appreciate at 6% annually.

And, depending on what is actually done with the money that Congress has decided to appropriate, it may be redistributed to consumers who will buy more of whatever that publicly traded company produces, or pay off the national debt, or do other things that can increase the health and growth of the economy. (Or not.)
A bit of history on the matter.

https://web.archive.org/web/20130116102852/http://hueniverse...
Good example. I know people frown on memorization, but personally I would say the following are useful to know deeply:

- Log laws

- Exponent laws

- Derivative rules

- Probability laws

- Combinations/Permutations

- Matrix algebra

- more?

When you're reading through math derivations, or trying to work one out yourself, you absolutely need to have some basic literacy in these rules.
There is always going to be someone who will buy your business so they can sell your trucks and equipment and real estate.
My understanding was that large cache was mostly a cost tradeoff, and that there's no technical reason why x86 processors couldn't do this too. I believe Apple's A-series chips already have a huge cache which is a big part of why they are so fast.
Or the surrogates thereof.
We can't survive in a society where min/maxing benefit is the sole form by which we determine whether something is the correct action or not.

I am sure you would agree that gender-based abortion, deforestation, and infinite copyright periods could be seen as "rational" to people in certain societies and certain economic situations. It doesn't mean that we should let such actions go without comment.
Tesla full self driving footage compilation
How to extract structured data from invoices
While humorous, this seems actively malicious and I don't think McDonalds will look at it very favorably…
Sorry, missing /s
That’s a terrible reductionist argument, and you know it. It’s also avoiding the point.
I think the main argument is that the French billionaires are much more mobile - they were able to simply relocate a few hours away to a nearby French-speaking country.

Any sensible wealth tax proposal in the U.S. would probably have to pair it with a similar tax on the transfer of assets abroad.
From creator[1]: “I reverse engineered mcdonald's internal api and I'm currently placing an order worth $18,752 every minute at every mcdonald's in the US to figure out which locations have a broken ice cream machine”

[1] https://twitter.com/rashiq/status/1319346264992026624
Fired? If Yelp has any sense, they’ll add this as a feature. “Ice Cream Available” status on all McDonalds Yelp pages.
Probably iOS, IMO
What's illegal for you and me is not necessarily illegal for Them, apparently. It is illegal to lie to Congress, yet there goes James Clapper with no repercussions.

Yes, if someone in a trusted position of authority is caught doing something illegal they should be removed from that position and then charged with what ever crime it was they committed. Just like you and I would have done to us. Why is that even a question on your part?
Thanks for your link. Very helpful.
I saw it here: https://aws.amazon.com/rds/pricing/

Pricing was available for Postgres, but I didn't check other database types
>It's aimless, but still good for the mind.

It's because it's aimless that it's good for the mind.
Or rather, good for you (because you are not the mind), because you get a break from your "crazy monkey mind"[1].

"You" meaning anyone who does it, not literally you, of course.

[1]
https://en.m.wikipedia.org/wiki/Monkey_mind

Also see YouTube videos by Tibetan Buddhist monk Mingyur Rinpoche such as "Calming the Mind".

In that video he shares a great insight right near the start, which proves that everyone has awareness, even if they think they don't.

Watch "Mingyur Rinpoche ~ Calming the Mind: The Practice of Awareness Meditation" on YouTube:

https://youtu.be/dG5ywz8OGqo
I'd pay for that. His treatment of subjects is so exhaustive and well researched that it puts any paid encyclopedia to shame.
There were working SPIR-V+WebGPU prototypes quite a while ago, and plenty of people would've been happy with SPIR-V+WebGPU. But a particular big company's petty fights with Khronos derailed that.
I just realized I left out the "c" in "Henckels." My bad...
Ironically, nickel was the name of the Google-internal, ill-fated replacement for GCL. I think it just lives on in blueprint files.

I also miss GCL, as quirky as it was. YAML composes poorly.
Ok, that's a valid point. Naively I think a user could also expect the {{items}} to be expanded in the package module but someone who has used Ansible would probably be familiar with the "with_items" idiom.

Also I was confused by your claim that your second version was sped up dramatically although it is still using "with_items". Is this due to the use of facts instead of tags?
Consider the following:

If a firm eyeballs a project that is likely to have a good return, they will pursue it regardless of the corporation tax rate at present. Meaning that whether the corporate tax is high, low, or nonexistent, it's better to make money than not make money.

Given this, if a firm cannot see any good opportunities to pursue, incentivizing mass investment in zero or negative return projects, while coincidentally incentivizing lower government revenue is unlikely be a net good for society. That seems to me to be a encouraging massive destruction of wealth and also encourage enormous mis-allocation of capital.
Not sure if you're referring to a particular spec or something, but we used client certificates as a 2nd factor to control access to an extranet web app, almost 15 years ago, long before OAuth, and when 2FA was only just beginning to come into existence.

From a security standpoint, it's pretty great. But the reality of generating keys and signing and distributing certificates was horrible, and our users were confused and hated it.

How would you solve key generation even now - assuming the client generates the key, is it locked to that browser on that machine? How do you generate a CSR (certificate signing request)? How do you send the signed certificate to the user? How does the user install the certificate? Again, does that mean the user can only access your app from the machine they installed the certificate to?

PKI is hard, mainly because of the distribution problem.
I think someone at McDonalds may lose their job because of this.
Neat :-) does that print diffs if there are discrepancies? Including diffs of templates config files?
Does accountability mean retaliation to you?
If you look at quintile based measurements sure. But there’s far less difference between the European quintiles than the American ones. So it’s a misleading measure
> They’d feel like they had arrived at great epiphanies or accomplished something impressive after solving trivial or obvious problems.

I can totally relate to this. Simply going to the store on LSD to buy snacks can become like some kind of deeply symbolic adventure. I remember going “ghost hunting” on a high dose of mushrooms with my buddies which consisted of us marching around in the snow with beers in the middle of the night through downtown urban parks laughing our asses of at “no ghosts here. We’ll get em next time” etc. I once ate a perfectly ripe orange bell pepper and it was the sensory equivalent of an actual religious experience. I’ve balled my eyes out crying like a bitch on acid while watching a very cheesy and manipulative infomercial about supporting a kid in Africa for only one dollar a day.

One of the powers of psychedelics are their ability to transform basic tasks and cliches into meaningful experiences. Opening you mind to the wonders of the universe, of being alive briefly somehow and here. A bazooka joe bubblegum comic can become charged with more meaning than Finnegans Wake.

But I don’t see the value of microdosing. I actually find the practice a little repugnant? maybe that’s too strong of a word or not strong enough but I feel like the whole point of something like LSD is to enrich, deepen, unravel, perplex, and push forward that little spark of awareness inside. It’s not a performance enhancing drug like a creativity steroid for like power working at the office.
I'm not sure I want my name or anyone I know to be involved in something that can be used for domestic terrorism.

Why must we use facial recognition and doxx cops? What does this actually improve besides just getting the badge number and reporting it? The data makes it so anyone can anonymously threaten law enforcement even if law enforcement was acting entirely within the law.

This place is turning into a reddit pigstie. People from around the country and world claiming to know the "best way to enforce the law" unilaterally. Every state has their own way of doing it. If a cop makes a mistake they're fearing for their literal life because some social justice terrorist somewhere in the country, under a different set of laws, has it out for the officer and can go and threaten or firebomb their house or family (this isn't a strawman).

I think this hatred is so misplaced on cops, it needs to be on the politicians who wrote the law not the ones enforcing the law. Did it occur to anyone that the politicians are the ones vilifying them, the same ones who wrote the laws that the cops use to enforce said laws?
New Google Chrome version fixes actively exploited zero-day bug
Why do you care what your co-worker says?
Sure, but to a general at HQ, 1 dead soldier is better than 10. The policy is devastating to that 1 soldier (and family), but that's not enough reason to adopt an opposing policy that would save the 1 but kill the 10.

Similarly, I can appreciate the logic in making American companies less likely to be targeted by ransom hackers, even if it means some companies are hit harder in the short term.
Federal receipts as a percentage of GDP haven't meaningfully changed since WWII. (Which means that they've only gone up in real dollars per capita, because GDP per capita has increased.)
I wish trials didn't require me signing up for a subscription. I have a bad habit of doing a trial and then life happens and suddenly I'm charged for something I forgot to cancel and can't get a refund. I might give this a go for a trial but I'm always so hesitant.
Where does one buy the LSD for these studies?
Banning ransom payments won't magically fix the underlying vulnerabilities that allow these gangs to deploy their ransomware.

If ransoms weren't being paid, criminals would find other ways to monetize the data. "Honest" ransomware is actually good for the public in the sense that should the ransom be paid, the data is indeed destroyed by the gang. Make ransoms impossible and they will start selling the data or monetizing it in other ways (identity theft, card fraud, etc), at the expense of the public.

Given that we can't eradicate this kind of crime entirely by improving security, I think ransomware is the least bad option in the sense that it punishes the offending company while minimizing the risk of the data being leaked which would hurt the data subjects themselves (the public).
Pairing is the solution to this. I worked for four years doing trunk-based development, and pair programming is basically live code reviews.
From the article: By turning the nut to the right or left the movable jaw may be moved either toward or away from the fixed jaw, as may be desirable. The inner face of the movable jaw is formed at a right angle to its shank, and is also provided with a series of teeth, which pitch or rake on its fellow jaw...

This misses the key feature of a pipe wrench. The movable jaw has some swing such that it will tightly hold the pipe when moved in one direction, but will release the pipe when moved in the other direction. This provides the equivalent of a ratchet.

This is what distinguishes a pipe wrench from an ordinary adjustable wrench. It's that small amount of swing motion that gives it the ability to grab round things tightly. There are other forms of pipe wrenches which have a chain or a strap[1]. They do not have a jaw adjustment nut but do have the ability to grab round things and a grab/release ratchet-like action.

The actual patent language (Stillson, 1869): "The lower part of the frame c extends forward of the shank A, and is recessed out, so as to permit said lower part to swing to the rear a sufficient distance only to bring said jaws nearly or quite parallel with each other." There's the swing part. Note another key part of the invention. The jaws won't close beyond parallel, so if you pull hard on the wrench, you rotate the pipe but don't crush it.

In the original patent, we see the "why", as well as the "what". The novelty of the invention is in the "why". This matters. If you made the tool described in the article, you'd have an adjustable wrench with teeth that would slip when you tried to tighten a pipe.

[1] https://www.homedepot.com/p/Crescent-12-in-Chain-Wrench-CW12...
This would be interesting if it could run on a raspberry pi.

I see it is only x86 right now.
I don't think it's gatekeepy to say that not everything has to be attractive to literally everyone. We are not robots, we are individuals with personal preferences and comforts. Those that grew up with mailing lists naturally find it more comfortable for them. I'm sure those who grew up with e.g Github feel the same way about that.
Ah, in my opinion, it's better to be able to build an object then serialize it, rather than have to jam object semantics into form parameters (and then serialize them).

Here's a grant request from the draft:

{
"resources": [
{
"type": "photo-api",
"actions": [
"read",
"write",
"dolphin"
],
"locations": [
"https://server.example.net/",
"https://resource.local/other"
],
"datatypes": [
"metadata",
"images"
]
},
"dolphin-metadata"
],
"client": {
"display": {
"name": "My Client Display Name",
"uri": "https://example.net/client"
},
"key": {
"proof": "jwsd",
"jwk": {
"kty": "RSA",
"e": "AQAB",
"kid": "xyz-1",
"alg": "RS256",
"n": "kOB5rR4Jv0GMeL...."
}
}
},
"interact": {
"redirect": true,
"callback": {
"method": "redirect",
"uri": "https://client.example.net/return/123455",
"nonce": "LKLTI25DK82FX4T4QFZC"
}
},
"capabilities": ["ext1", "ext2"],
"subject": {
"sub_ids": ["iss-sub", "email"],
"assertions": ["id_token"]
}
}

(Not all of the object keys are required, FYI). The ability to have resources be a rich object (as opposed to a string) and to support multiple resources in one grant request seems to me to be a good thing(tm).
Live Migrating Kubernetes Cluster Across VPCs Without Downtime
fascinating... at least you could still remove these from the list : )
Yes, it is refreshingly open compared to the walled gardens it seems like everyone else is trying to make.
> Changing labor markets via political mechanisms on the other hand is.

Theoretically, sure. You're going to do this in Belarus, the most openly totalitarian state currently? The problem is that politically changing the dynamics is nigh impossible until the existing power structure is neutralized.

I'll agree that losing a living wage is a large difficulty, but reducing totalitarian oppression to market dynamics is callous, or biased. The larger situation demands action beyond rational choices.
There's a link to a screenshot in the article, but then again, anyone could make a convincing one in a few minutes using the developer tools.
Both BeOS and Amiga took a lot of leaves out of the book of realtime and their schedulers were top notch. So 80% there I would say. But to be able to have user processes with real time guarantees makes so many applications easier to write. For instance video players, midi sequencers, real time audio processing and so on. Right now we rely on ridiculously long buffers to ensure that we never run out of data but on a real time OS you could do this with minimal latency.
I say, give it a few years :)
Good article, interesting concept. But it fails to answer 2 urgent questions:

1. There's an extinct group of crustaceans the Cyclida (https://en.wikipedia.org/wiki/Cyclida) that were apparently quite crab-like. This article doesn't address whether Cyclida were delicious when steamed, and muscle segments dunked in drawn butter. Really dropped the ball here.

2. If carcinization happened at least 5 times on Earth, has it occurred on other, extrasolar, planets? Science needs to get cracking on this.
Herman Miller Aeron with adjustable lumbar support add-on. If anything it's too comfortable: I can sit for hours and hours in it, which I know is unhealthy.
That’s the basic assumption for any HSR plan. You can’t mingle 160+MPH passenger trains with freight, so you need to buy a lot of land anyway. However, getting out of the urban center at 80+MPH isn’t a major issue and that let’s you avoid buying the most expensive inner city land. Getting off in the center of a city like Penn Station vs Laguardia Airport more than makes up for a few miles of slower speeds especially as these trains take a while to accelerate.