skysight-inc/HackerNews huggingface dataset:
Basically you're right for crystals -- the planes of fragmentation will be self-similar to the molecular structure. But most of the crust is not diamond and beryl, so this study is looking at the average structure of much larger conglomerates of stone and ice and mud -- not as much long-range symmetry there!

Quoting the paper to give an idea of the formation being modeled:

These patterns have been reproduced in experiments of mud and corn-starch cracks, model 2D fragmentation systems, where the following have been observed: Fast drying produces strong tension that drives the formation of primary (global) cracks that criss-cross the sample and make “X” junctions; slow drying allows the formation of secondary cracks that terminate at “T” junctions; and “T” junctions rearrange into “Y” junctions to either maximize energy release as cracks penetrate the bulk or during reopening–healing cycles from wetting/drying
not OP but ...

John Kelly: The Great Mortality

An Intimate History of the Black Death

Robert S Gottfried: The Black Death - Natural and Human Disaster in Medieval Europe

Samuel K. Cohn, Jr.: Cultures of Plague: Medical Thought At the End of the Renaissance

Philip Ziegler: The Black Death

Giovanni Boccaccio: The Decameron

there are some fictional works that I enjoyed such as Ken Follet World Without End (should be read after Pillars of the Earth IMO) and it's probably not enough on-topic for what you're asking.
"...further suppose these shapes are all convex, with no indentations."

Math; not geology.
You could try https://onegraph.com. It won't allow you to get rid of all your backend code, but you can definitely get further!
Make sense for security.

However, if just to login in some application, it would be awful UX if going to the login step in an application triggers an unwanted load of 3 desktops full of 20 browser windows and a few hundred tabs, and some minutes delay while they all start up.

So if I'm not already running the "full browser" required for auth, ideally for authentication I'm going to want it to launch an "alternate profile" instance of my full browser which doesn't include all the other tabs or normal user info.

I.e. the browser should somehow be able to load just one special window for this application, and remember that it hasn't actually loaded my regular profile and saved state yet.

Clicking on any links for info that is logically "outside the application", that's what should probably lead to a regular full browser being started.

In the end, this ideal browser behaviour in response to an application requesting Google auth is much the same as using an embedded web view - except running separately from the application for security purposes so that it's UI isn't subject to application interference.

Given that's just a web view with security properties, why not instead allow auth to launch a "security instance" version of an embedded web view, one that is subject to guarantees from the OS/GUI security systems that it is running independently from the application which triggered its launch?
That's way too complicated for the average registrant. There are lots of practical options that could strengthen the process for the average registrant.

Half the battle is for registrars to quit accepting the equivalent of cold calls from registrants. How hard is it to make a call back to the registrant when they're asking for NS, MX, etc. changes?

If the registrant phone number hasn't changed since registration, it's pretty safe to call them back and trust them IMO. If the registrant phone number was changed 5 days ago and someone is calling in asking for changes, that's an easy red flag and could be coupled with a technical restriction that requires escalation for important domain changes.

Another option similar to yours but easier would be to set a pin during registration and to require it for making over the phone domain changes. I guarantee those will get lost / forgotten by the average registrant though.

You'd be shocked at the number of small businesses that don't know where there domain is registered, who registered it, when it expires, etc..

If a domain is making money use a registry lock. If it's a high value domain making tons of money, pay MarkMonitor or similar to manage it.
> The browser must identify itself clearly in the User-Agent.

I wonder what they'd think of my proxy which I have setup to (among other privacy respecting features) rewrite the User-Agent to "By allowing me access, you waive all rights and policies regarding my access." This is basically my form of EULA.

> The browser must not provide automation features.

LOL. This was obviously written by some tech illiterate law type, perhaps a first year law student? I fear to think what incompetent engineer working at google of all places would have come up with that verbiage . . .
It has everything to do with security: securing Google's control.

Google wants to take over the Internet. We should not let it use these "less secure" excuses to sway the public opinion.
Yes but how would you even know as a user. Or how would you know that you are on the real google page.
Such as:

- I have a script that downloads my liked videos (in case they get deleted, which I’ve found out happens a fair bit)

- I also have a script to download my watch later videos (for sync to devices without YouTube Premium/Red/whatever)
Frankly, this is just wrong. Maybe for some circumstances, but in Google's case, they provide email.

When it comes to things like email, your account being compromised doesn't just affect you. Google let people send out emails from those accounts, so if a compromised account is used for spam, it hurts them reputationally as they are actively facilitating harm.

You might not care if that account is compromised, but they should.
Even if you don't care if someone hacks your Google account, the rest of care when we start getting deluged with spam from that Gmail address.
> For example, try git cloning a large project onto a Glusterfs mount with >20ms ping between nodes. It's brutal.

That may be true but also is due to applications often having very sequential IO patterns even when they don't need to be.

I hope we'll get some convenience wrappers around io_uring that make batching of many small IO calls in a synchronous manner simple and easy for cases where you don't want to deal with async runtimes. E.g. bulk_statx() or fsync_many() would be prime candidates for batching.
Loads fine on my iPhone on iOS 13.7 and iPad on 14.1, perhaps the article has been fixed?
SLAX has similar goals with little bit bigger base...

Fun facts:
- SLAX was Slackware based, but it switched to Debian base (apt)
- The first 'linux-live-kit' was from Slax's author.
- It used layered filesystem (overlayfs) long before Docker & containers were a thing.
- It had 'persistence' while running off the usb, via 'file' or partition. (Then Ubuntu did similar thing with casper-rw <- term for squashfs+overlay persistence in ubuntu)

Link: http://slax.org
> In years gone past, whatever the crisis, America would step up and lead.

Many would argue that America was the one who created many of those crises in the first place.

American capitalism has led the world to the brink of destruction by climate change, so a loss in status is absolutely warranted.

> The really terrifying things don’t get much in the way of discourse. How can this possibly be in the same league as the terrifying stuff we’re a bit scared to talk about because there aren’t really any great answers and there’s no way to predict when so we have an easy way to ignore it all.

A super volcano eruption is beyond our control, so there's no point getting worked up about that. Nothing else pales in comparison to the destruction that's coming as a direct result of USA turning a blind eye to climate change.
Yup. Use a system like Redis/DynamoDB or even a traditional database to store the metadata and use random UUID for actual file storage.

And tag the files for expiration/clean up. S3 is not a file system and people should stop treating it like one - only to get bitten by these assumptions around it being a FS.
POWER9 CPUs Need to Flush L1 Cache Between Privilege Boundaries Due to New Bug
Or just have them use ssh. Every popular OS besides android (that's OSX, windows, GNU/Linux, iOS, all the BSDs) ship with an ssh client (almost always openssh.)

It would be nice if they all came with a VTE that worked over bluetooth. Windows used to come with it's own VTE for dialing modems so obviously users can handle it.
And, OAuth tokens can be revoked meaning scripts will just suddenly fail.
Not really, but you can try it out on https://hopsworks.ai

It's conceptually similar to EMR in the way it works. You connect your AWS account and we'll deploy a cluster there. HopsFS will run on top a S3 bucket in your organization.
You get a fully featured Spark environment (With metrics and logging included - no need for cloudwatch). UI with Jupyter notebooks, the Hopsworks feature store and ML capabilities that EMR does not provide.
I know an, objectively, 500x engineer.

This was measurable because of a joint venture between Siemens and Ericsson, in the '90s. Each sent 500 engineers. They had six months to produce a deliverable, that could not be late: the classic Death March project.

This engineer was responsible for assigning tasks to the others, and to himself. Each engineer got two-week tasks. Come 2nd Friday, if somebody's task wasn't done yet, he did it himself, over the weekend.

At project end, fully half the code committed to the delivered product was his.

The project was unusual in other ways. Stress is objectively measurable given blood samples, which they took. His were the only that did not show rising stress. They took samples again months after the project ended. Stress levels (in the others) had not declined.

Death March projects are really, really harmful: physically harmful to engineers, but also to companies that hope to get something from those engineers afterward.

He knew someone else who coded 10x faster than he did, wearing out 2 keyboards a year. So, he wasn't proud. 500x was enough for him.
The funny thing is this looks to me like a realistic picture of the inside of the McMansion. IE, a room whose contents are more or less "fake" things. Plastic "wood grained" floor (Pergo or whatever), Plastic "wood grained" table (fiberboard, etc), Brand-new polyester mid-tier couch (room never actually used), Pre-made pseudo-fancy gallery/bay windows, higher grade fake ferns...
Trial design and trial data are shared with the FDA underway during an ordinary drug or device trial. But applications subject to FDA Fast-Track authorization processes also undergo "rolling review" where portions of the new drug application are reviewed as they are partially complete. This has narrowed the set of action items that remain.

I'm sure a lot of people are staying up late as the EUA applications come in, and skimming the documents and working to identify remaining weaknesses that can be proactively addressed. But sometime in this, they need to get a good night's sleep, and begin meticulously going through the document and make sure the remaining, necessary (i.e. not waived) conditions for emergency use approval are met.
BitCoinLib a Python crypto library added to PythonStacks
> It seems like that'd be difficult without somehow dealing with Apple first, maybe by getting the government to force them to allow Chrome. Which could happen.

But that would also imply they'd have to allow Firefox, and Brave, and Tor Browser. Which would certainly be worth the "cost" of allowing Chrome.

> Some of the "antitrust" stuff getting tossed around is already starting to get exploited by entities like advertisers, and not just big ones like Facebook, there were those EU ones recently.

All political coalitions work like this. If you're against DMCA 1201 then commercial pirates will be on your side. That doesn't mean they're your friends. They're not, and in fact are costing your side goodwill, even if your side is right in the end.

> Like all power, Apple's focusing of its user's collective power can be used not just for bad stuff but for very good stuff as well. But that nuance doesn't seem to be present in a lot of the last year's discussions

Because it's true of anything. Dictatorships are a wonderful thing if you're the dictator's friends, but that's hardly making a strong case for dictatorship.
This is an incredibly weird take.

The process has been incredibly dramatically shortened, but without actually rushing. All of the data required for an EUA is still required. Some timelines have been permitted to be shortened in exchange for dramatically increasing the number of people involved in trials, but they haven't been allowed to be shortened beyond what we know about biological response times. People at press conferences may use general terms like "in a few days," but that's not because they're treating this casually, it's because humans communicate in human ways when talking to other humans. If you're on the FDA, you know the timeline to a T, but if you're part of the general public, "December" and "April" are all you really need.

The FDA has been heavily involved in every step of the trials, which is how things have moved as quickly as they have.

These are the fastest any vaccine has ever been created or approved, by more than four years!
Who says you should tax directly based on wear anyway? The bigger scarcity is often traffic in any case. Some roads have higher costs than others. etc.

Maybe we want to lower transport costs by charging trucks less. Maybe we want to encourage electric car viability by charging them less. I mean, tax policies have outcomes. Doesn't it make sense to target outcomes we want?

Obviously the road needs to be paid for and fuel taxes won't work if people don't buy fuel. That said, I think it's inevitable that whatever comes next is a policy... encourage some stuff, discourage other stuff, benefit certain people/sectors and such. ATM, encouraging electric vehicle adoption with a fuel tax exemption doesn't seem crazy.

It does create a regressive dynamic, where new electrics are subsidized by legacy ICE. By the time that represents more than a rounding error the fuel tax deficit will be big enough that the tax system will be changing anyway.

A better approach is probably a time-of-purchase tax. =
Facts:

* One litre of petrol creates 2.3kg of CO².

* A going market price for an offset is $25-50 per metric ton

So the tax per litre to offset the CO² is 6 to 12 cents.
Which would still be fine. The only thing that'd be blocked is obtaining those OAuth tokens by passing your Google username/password to a browser automation tool.
So the theory is this has nothing to do with security, but is only used to break private video downloading of youtube-dl?
1 min glance and I came to the conclusion that I should not use it - thanks cowboy
1. Many uses are not computer experts and don’t realize they’re at risk. They won’t adopt extra security measures unless they need to.

2. No company wants to announce that a bunch of accounts were hacked. The excuse that “our users don’t care” would be widely criticized.

3. Well yes, of course companies want to reduce customer support costs, but guess who else benefits from not needing customer support? The customers. It’s better to avoid a problem in the first place than to have great mechanisms for resolving it.
https://sqitch.org/ Is a popular migration tool or you can use whatever your used to from your framework of choice (Rails or what have you)
Author here.

What's kind of unique about the distributed functions feature in Citus that's described in the blog post is that you can scale stored procedures horizontally if procedure calls query co-located shards, but it doesn't restrict you from doing queries and transactions across all shards.

Happy to answer any questions or debate the merits/evils of stored procedures.
Glade Not Recommended – Chris's Design and Development
Here's a concrete example. Some of my spaced repetition is to translate between languages. When I do a translation, if it's different from the canonical answer, I write it in below. Over time I have a list of the different ways I translated, which helps me notice when I repeat mistakes or of what kind.
How does youtube-dl obtain the token today?
There are different ways to ship by truck. Maybe you want to encourage more axles and a slightly lighter max load, which could easily drop the damage by a factor of 10.
Orders fewer? Lets look at the Spanish flu in US - the US wasn't ravaged by WWI/revolutions/rebelions, didn't have systemic hunger, etc. and had time to and implemented some of those measures like quarantines/lockdowns/masks, so very reasonable to compare to today. Spanish flu killed 700K in US . Covid already 250K in US - even if we imagine that we're at the peak today, it still means end number like 500K.
They don't need anything other than firefox or safari. All new browsers could be blocked as they are unknown/untrusted.
You can't list objects by tag.
What are you talking about? Embedded browsers use the system webview, provided by Chrome, Firefox, or whatever is configured.
The api needs existing filesystems to have fdatasync_rangev functionality implemented. It is likely it would not avoid any complexity, just move it elsewhere.
Postgrest has joining (called resource embedding) and column renaming, right? Could you clarify what you mean?
the number one request of people with accessibility issues is to use larger font size.
It's OAuth. The application can launch a normal browser for the OAuth flow and have the user complete it.
https://www.caradvice.com.au/658919/australia-could-become-a... might explain some of it.
If you make it too expensive to change tires, people will drive for much longer with worn out tires, risking lives.
Well I guess my unofficial YouTube chat bot won't work anymore. The YouTube API is awful compared to the Twitch one for bot creation so it is easier to get the functionality you want using Selenium.
Thanks to Keith and everyone else who contributed!
You're not supposed to talk about that.
Eve is a special special game. I led/CEO’d a ~200 player Corp (WH/Null pirates) for a fair few years. We had a security division responsible for protecting our web services and communications, custom web and phone apps because we didn’t trust the publicly available ones, an intelligence division responsible for trying to break into enemy services and get info, a propaganda division for feeding false Intel “accidentally” via reddit/etc comments, PR department for managing recruits, and a strict chain of command with levels of management. The bigger corps went even way further than that. It was lots of fun, probably the most fun I’ve ever had in a video game in 35yrs of gaming, but eventually I needed to actually see sunlight again and have a life.
According to the analysis of the color of the smoke, the tire fires came later, after the explosion.
There are good programmers working with Electron, they're just in the minority.
Solar Power Stations in Space Could Be the Answer to Our Energy Needs
Now it's "Do the right thing (for corporate)"™.

How times have changed.
For plenty of applications the whole purpose is not to run "a normal browser" and possibly not even have it installed.
The problem is that you have to have an account on google to participate in a number of communities. Because of this they have social scaling problems that might be fundamentally unsolvable and in their attempt to find a solution they've done things like this.
The thing I love most about mechanized proofs is that my questions about the reasoning always have tangible answers, even if the answer is “we axiomatized this thing”.

The availability of the intermediate proof state as a part of the published object makes those answers that much easier to find. This is a really great project!
Google’s control...over the security of Google accounts?

If you are worried enough about Google’s dominance over the Internet to be upset by this particular practice, it is unlikely you have (or should maintain) a Google account.

I’m not a “Google stan” by any means, but to say that they want to take over the Internet is just not true.
I think use tax on infrastructure is a bad idea full stop. If you want to encourage more efficient cars or less driving do it with car tabs.

I don't need to drive my car on a road to derive value form it. In the same way that I don't have children but still benefit from schools.

Property taxes should be the source of funding for infrastructure projects.

Use taxes are regressive and result in underfunded infrastructure with the wealthy paying less and adding another barrier to the poor making ends meet.
40's picked up Tango Dancing, Sailing, and starting programming python since I got interested in visual machine learning.
Why would you want eMMC? I'd rather not have to deal with broken eMMC. And non-upgradeable storage.
Better based on what?
Pretty much. It also helps their ad business to combat fraud.
This is sad. Google capitulating to this law will now give leeway for further ridiculous highway robbery, since other jurisdictions see they won't fight it.

Way to throw us all under the bus, Google. Should have packed your bags and region-blocked France.
I agree with you, but the article puts in a polite request for filesystem changes already under "potential enhancements".

My argument is if there were to be some work on potential enhancements that require kernel filesystem changes and syscall changes, fdatasync_rangev would be a more useful choice of enhancement, and probably easier to implement than fbarrier.

Better for performance, user convenience (no more separate files), and more kinds of applications (e.g. VMs and other kinds of in-file data store).

It's not as big as it sounds. fsync_range is already in FreeBSD, NetBSD and AIX, and Linux nearly got it too (there was a patch). (Linux got sync_file_range instead, which is not useful for this unfortunately despite the similar name.)
Definitely agree that the vaccine development has been a huge success. Just wondering about (what appears to me to be) slack in the process that could be removed. Another commenter suggests that the drug companies and the FDA are already in close communication including trial data.
Vim: Help.txt
https://github.com/ytdl-org/youtube-dl#authentication-option...

Username, Password, 2FA, etc.
A large family creates many future taxpayers. The state has an interest in subsidizing or at least not discouraging the creation of large families
I miss working with Keith, he was a true professional, and always happy to show off what amazing new thing he had put together. I remember him proudly showing me x11 being sent from NT and including all audio, was quite amazing at the time.

really good to see that he still has the passion to continue after all these years!
Sometimes you need to enter access credentials in order to enable internet access for your router. How will you do that (outside of telnet/ssh) if it needs internet so that you can connect to it?
And? What if I want to automate my login flow?
Could you point me to any sort of reference on this? I'd love to update my post with this info.
Really good.

Schools are big parking place for people that are to young to work that you do not want to have hanging around the whole day.

a big parking place