skysight-inc/HackerNews huggingface dataset:
And Google Project Zero won't get them.

https://twitter.com/benhawkes/status/1286021329246801921

> It looks like we won't be able to use the Apple "Security Research Device" due to the vulnerability disclosure restrictions, which seem specifically designed to exclude Project Zero and other researchers who use a 90 day policy.
For what it's worth, I wear a Garmin Vivoactive 4 and it has the following:

- an app store, third party apps, third party watch faces, and a developer ecosystem

- always on screen that doesn't require a button press or specific arm gesture, and works in bright, normally lit conditions

- physical buttons instead of tiny buttons on a tiny screen barely larger than the finger pressing it

- week long battery life

Also has GPS, Music storage/playback, actionable notifications, and a ton of health and fitness stuff.
Not sure if this is common for everyone but I find whenever I get assigned for a review for a monster change, I spend over an hour just working out what the change does and if it seems like it will work. There is no way I could spot tiny potential security exploits in 3000 lines of changed code.
The Lost Japanese Generation
Federation is also super useful if you're a multinational, since each geographic location could still operate autonomously in the face of an inability to route to the broader Internet. And with a protocol like Matrix, you're able to recover gracefully when federation is restored.
Lot of discussion over on /r/rust https://www.reddit.com/r/rust/comments/k4jdvw/why_scientists...
GitLab | Remote only | Full time

As one of the world’s largest all-remote companies, GitLab has embraced remote work from our founding year. This is a place where you can contribute from almost anywhere. We're an ambitious, productive team that embraces a set of shared values in everything we do. We’re proud to have recently been named one of Fortune’s 100 Best Small & Medium Workplaces for 2020!

As our team continues to grow, we’re taking a unique, outbound approach to hiring. If you're interested in current or future roles at GitLab, share your information with our team by joining our Talent Community: https://grnh.se/8490b7772us
That sounds like quite the dodge there. I wonder if that Googler was a weatherman in a past life.

At least put up a "We aren't sure what you mean; here is the closest factoid that we think is relevant".

TL;dr - stop presenting everything, including "guesses", as authoritative answers.

Context matters and Google isn't presenting any. There is an implied precision here that is completely unwarranted.
Things I Learned in 2020
Much of the discussion, both in the article and in the comments, seems to hinge on having a good definition of legal justice. May I suggest the following: "Legal justice occurs when all individual persons are treated equally and fairly under the law, and when no person is allowed to wrongfully take advantage of another."

As others have mentioned, I think this philosophy's weakness is that it leads to the very opposite of legal justice. There ought to be an objective legal standard that doesn't change based on who appears on the docket, the judge's unconscious bias/prejudice, how the judge is feeling about the case, his/her sense of how society is faring, or what he/she had for lunch. That's why legislators write law and judges interpret law, and why "legislating from the bench" is an aspersion and not something to which good judges aspire.

Legal subjectivism is just a big invitation to injustice -- which indeed can and does happen when the judge and legislator are the same person. (Hopefully he/she is not also the executioner.)
I can kinda understand that one since Venmo's chat feature is useful and I wouldn't want that stuff mixed with my regular messages.
Wearable Thermoelectrics for Personalized Thermoregulation
Spline: A design tool for 3D (Preview Release)
I've been learning Rust and find it not hard to learn, I think because I already know C/C++ and understand the concepts of pointers, references, stack and heap allocations.
I mean, you can't really disable notifications that exist for a feature and then complain that you're not notified when somebody messages you using that feature...

If it's truly async then just close slack until you're ready to talk, then open it back up and go through all of the red badges / white channels.

If you absolutely need to keep all notifications off and still want to read any thread replies, the very top channel in the slack app is called "Threads" and will show threads you've participated in or subscribed to, listed in chronological order based on most recent replies.

I have a lot of problems with slack (namely, performance and lack of solid video/audio calling), but threads are fine.
I didn't meant to discourage from playing CTFs, I just became jaded by seeing the same kind of heap feng shui tasks over and over and over again :). You know, the note-management linked list task with a simple CLI menu. Not to mention the proliferation of 0/1day tasks, which are IMO just lazy.

Do play CTFs. Just pick the fun challenges. pwnable.kr used to have some good stuff if you want to level up.
I went to order a book recently. At the bottom of the shopping cart it reads: "Note: We have been deplatformed by our credit card processor. To complete your order, please print or otherwise make a copy of the information on this page and mail it with your cash, check, or money order to:" and then their address.

I don't live in a third world country, but I do think cryptocurrency would help in this situation.
The right and wrong way to set Python 3 as default on a Mac
I checked and airplane mode seems to disable wifi and 4g but not bluetooth. Airdrop refuses to work without wifi. Not sure to what extent wireless is actually turned off for airplane mode now though.
My spouse does this for the exact same reason (we have a 3 year old). I feel like a bag of shit when I don't sleep so I just don't have personal free time.
I bought your book and it's been helpful. Thanks!
The thing I like about Teams is the way you can have collaboratively-editable documents localised to a particular channel by way of the Files tab, which is great for organisations that don't yet have an ingrained online Office 365 or Google Sheets culture.

Apart from that, I find it clunky, unwieldy, and it has that unfortunate soullessness that permeates many 'productivity' applications (exemplified by the sterile selection of reaction emoji).

For me: Slack has character, and works well.
Around the age of 10 as well, a parent asked me if I was excited about the new PlayStation and if I wanted one for Christmas.

I made it painfully clear that I would still much prefer a SNES, and wasn't so bothered about a PlayStation.

It turned out that they had already bought a PlayStation before asking me (I'm sure they were sold out everywhere when I was asked), and so I got a PlayStation for Christmas.

Which was great! In theory.

But, overall I felt such a desperate disappointment that I hadn't been listened to.
Or unusual bread supplies could be cool. Like flour made from ancient grains and/or ground with a traditional stone mill, etc.

For knives, a nice grind stone or knife oil could be useful.

I think splurge hobby consumables is a great way to go.
It's not that federation per se is a downside for any particular customer. It's more that federation makes it a lot harder to make changes to your product, and it doesn't usually come with enough business upside to justify that cost.
A good coarse stone makes all the difference. I have a 220/320 grit diamond plate for flattening my water stones, but it does wonders for making sharpening knives non-onerous.

Woodworkers might be interested in the Norton water stone starter set of 2 combo stones 220/1000 and 4000/8000. The 220 wears out of flat so quickly it's useless, but I have the diamond plate anyhow. The 1000 and 8000 are great. The 4000 is a little soft, and you'll replace it before the others. Personally, I'll be replacing it with the Shapton equivalent in another year or two.
Both Wi-Fi and Bluetooth are usually turned off by default when you turn on airplane mode, but you can turn on both without turning off airplane mode, at least in my experience.
With comment about in-depth book about bread I remembered this: https://modernistcuisine.com/books/modernist-bread/ 25 kilos, about 2600 pages of book...

What happens if person isn't that interested on the subject after all... Maybe a book might be a good one, but still total overkill. And maybe even harmful if subject isn't ready to invest even more...
I had forgotten that they bought Heroku. As far as I know, Heroku is still as cool as when I used to frequently use it. Time will tell how it goes with the Slack acquisition.
This is very interesting and something I've been playing around with in my head. I keep "chasing the dragon" when it comes to note taking apps/approaches. I've played with everything from NvAlt+SimpleNote (for iOS), Evernote, Notion, Drafts, Editorial, Obsidian, and more. Most recently when I was experimenting with the Zettelkasten notes system (in Obsidian) I got the idea that I would want to do exactly what you talk about and have a "note" per person where I could store trivia, gift ideas, birthdates, etc.

Unfortunately I either don't fully understand Zettelkasten or I am paralyzed by indecision on where I split my notes and how I organize them. I guess I'll just continue using Drafts as my "brain dump"/"all text starts here" until I can find something better that is lightweight and works across iOS/macOS.
Hi, I am Mark, co-creator of Amundsen and co-founder of Stemma. Would love to hear if the problem that Amundsen tries to solve resonates with you all.
Fewer vendors, unified billing/support/contract negotiations. These non-technical things are still integrations in a sense, that enterprises can benefit from.

It's nice to be able to get your email (Exchange), identity (Active Directory), productivity/office apps (Office), and underlying infrastructure (Azure), and even business intelligence/analytics (Dynamics) all from one place.
But lots of Slack users are captive as well (e.g., when CIO licenses Slack for <$FORTUNE_500_CO> )
dirtyCoW was a linux kernel bug. The reason the news and drama was all in the android scene was every desktop/server linux installation would be patched long before a malicious binary would be run on the machine (I think it was patched before the news even broke). Android would be left with the exploit until all of the older devices made it to e-waste. It also meant the rooting efforts would be helped somewhat.
Interesting point.... sometimes it’s a benefit, sometimes a deficit.

I’ve had the experience searching google maps for bagels, and it returns donut shops. Yes, they are both bakeries, but I wanted bagels, not donuts. In this case I don’t want google to ‘guess’ what I’m searching for; I gave it a pretty specific search term (bagels) in context (google maps), yet the results were imho too smart for their own good.
Certainly an opportunity for Discord, but I wonder how big of an opportunity. Their target audience is more casual whereas Slack's has shifted to more work/Enterprise-focused. So their audiences don't overlap as much as they used to.

It will be interesting how this impacts Mattermost [1] though - an open source developer collaboration tool for Enterprises, a closer competitor to Slack.

[1] http://mattermost.com/
If you want to compare two things that are different in a ton of ways, don't be mad when someone points it out.
It's possible, but my impression is that no MMU makes it difficult. Here is an example [1] of Linux on a Cortex M4 (a very boring STM32F4XX)

[1] https://elinux.org/STM32
> I also overheard a number of stories about pre-med students intentionally sabotaging other students by misleading them to think that private group tutoring sessions (to study for the MCAT) had been canceled.

These aren't rumors.

Pre-meds hate other pre-meds and are conditioned to play a zero sum game against one another.

We then expect them to completely flip their attitude and become teams players. Collaborate with other medical professionals (former pre-meds), nurses and social workers.

No wonder healthcare is so dysfunctional.
> or possibly a usenet hierarchy or IMAP folder tree depending on how you squint

Very good
This may not necessarily be good advice.

I do a lot of photography. I know exactly what I want, I'm damn picky about it, and I don't want anyone buying gear for me. I know other photography enthusiasts and they have things they want, and it's not the same stuff that I want.

In general I'd steer clear of the other person's hobbies unless they have at some point stated exactly what precise product they want.
Retro Gaming Mechanics Explained is a Youtube channel that covers these sorts of things. He did a great visual deep-dive into this topic a few months back:

https://youtu.be/ataGotQ7ir8
> there is an ideal we reach for that our rules should treat every individual equally regardless of their place in life. Giving judges and juries even more latitude than they have already would completely shatter that.

Such a claim might be valid for crimes such as murder, where we would indeed expect sentencing to fit the crime and not to be adjusted for certain individuals because of factors irrelevant to the crime.

But most cases aren't like that. Most cases involve civil disputes between parties based on non-repeatable individual circumstances that don't lend themselves to one-size-fits-all, bright-line rules the way criminal prosecutions usually do. In cases like that, if there's going to be fairness at all, it has to involve judges and juries exercising non-repeatable individual judgment based on the non-repeatable individual circumstances of the case. Yes, there will be legal principles involved that could apply to many cases, but there will always be unique aspects to the facts of an individual case that can only be assessed by human judgment.
Agreed 100%.

Federation is actually pretty hard. It's real that federation makes it harder/slower to make changes or add new features -- but on top of that spending time on federation (even on open source projects) necessarily takes time you could be spending on the non-federation UX.

And it's not just enterprise customers for whom in the end federation isn't nearly as prioritized as a good UX in other places.
I work in hci research and have never played with/ heard of Rust being used. Was quickly checking for visualisation libraries and found
https://lib.rs/visualization

Loved the Color scheme and font ... lol.
Anyways, will be using Rust for a small side project (short paper for augmented Humans ( https://augmented-humans.org/ deadline in 2 weeks :) let’s see how quickly I can learn it).

Any tutorial recommendations go using Rust for statistics/data plotting?
https://lib.rs/crates/plotlib
Or the gnuplot Wrapper looks up for the task for me.
The problem with that is that you're throwing out the one that is more directly valuable to your customers.
Perhaps a dumb question, but why don't things like signed pointers prevent this? Are they just not that good of a security measure?
There's Provisioned Concurrency for Lambda which keeps an amount of Lambdas warm at a price, so you don't have to keep pinging your function yourself to pre-heat.
The self-learning robot driver
> It's more for hobbyists and hacker types.

That's been the most disorienting part of joining Element. We have kind of a bimodal distribution of constituencies with peaks both on the enthusiast side and the boring bureaucratic government side. The mass market in the middle won't know what hit 'em! ;)
I honestly consider myself a techno-skeptic even though I work in tech. I like working with tech because it's fun, but I have few delusions about its ability to truly improve society, at least in recent years.
Imagine this engine but reverse who it's for.

I would like my social network to make me feel:

Happy, excited, inspired,
Hi, I work in the AWS Serverless Team. Just to say, the performance of running a container image is pretty much the same as a function packaged as a zip function. We cache the container images near where the function runs so startup time isn't any worse than ZIP.
Irc over ssh would solve that and add encryption as a bonus.
I'm kind of hopeful an interesting community will develop around the PineTime Watch.

https://lupyuen.github.io/pinetime-rust-mynewt/articles/watc...
Yes, but what about these huge legacy codebases like the iOS kernel? I assume we will have to deal with this type of vulnerability for years to come...
When I was a teenager I used Heathkit's to build my entire ham radio station. Still own that equipment, lot of nostalgia that those techies under fifty will not understand.
Location: San Luis Obispo, CA
Remote: Yes (Preferred)
Willing to relocate: No
Technologies: Java, C++, C#, Unreal, Unity, Jenkins, JavaScript
Résumé/CV: https://www.linkedin.com/in/ryan-hartzell
Email: me at ryanhartzell dot com
> This is not intended as a desktop part.

And I never said otherwise. Maybe "workbech" or "garage" instead of "desk" would be the more apt term :)
Hewlett Packard Enterprise Leaves Silicon Valley for Texas
Pretty much all their Symbian S60 phones ran a version of Python called PyS60. Fun times, I used to play with it a lot.
I don't see how Ethereum or any "digital currency" solve the real world problems that will still exist. Sure, the big players in the recording industry can treat artists badly. But a service is provided, which is doing all business and marking side of things that most artists don't want to bother about.

The idea of recording companies will still exist. Maybe somehow the big incumbents get caught out by the change to a "digital economy", but all that will happen is new ones will appear, and will end up doing exactly the same as the old ones.

Digital distribution was supposed to free artists from record companies. Now it is consolidated to a few large companies like Spotify and Apple because musicians don't want to run and market their own digital store front.
Is it a real degree or some type of bootcamp?
Orbit (https://orbit.love/) is hiring software engineers to build tools for developer advocates, community organizers and open source maintainers. Companies like Apollo, Nuxt, Typeform, and CircleCI use us to understand & grow their communities. Team is 3 today, 2 engineers. We have 4-5 roles open and are excited to build lots of product and APIs in 2021. Our tech stack is Ruby, Rails, React, Alpine.js, Tailwind CSS, and lots of other goodies. We're pragmatists who care a lot about making an excellent product and learning fast.

To learn more about who we are, our engineering culture, and whether this is the right place for you, read our Key Values profile: https://www.keyvalues.com/orbit. Cheers & good luck with your search.
I think there are two main ways to give a good gift:

1) give the person something that they know they want but that they will not buy themselves

2) give the person something they they don't even know that they want.

I think 2) is much better than 1), but it's also much harder to pull off.
I see the satire in this. Things like the "Can we make people more sad or happy by being selective on the feed" experiment facebook did is just one of the many reasons we wanted as pure a social feed as possible. People you know ordered by who's posted most recently and a way to traverse their posts if you wanna know a little more. I don't think a "Top" algorithm has a place on a social feed, or you end up with satire but in real life.
Generally I give and enjoy receiving edible gifts. They don't take up space, they don't end up stashed away for years, they don't clash with my artistic side, and it's much harder to go wrong. Tea leaves, desserts, those sorts of things are all good gifts IMO. Homemade edibles, even better, even if it's not perfect I value homemade things and as a friend I very much value the fact that you tried.

What I really hate (inside) is when people try to buy things related to my interests and hobbies, including electronics and outdoor gear. I'm most picky about those things and there are very specific things I look for in hobby gear that most people outside the hobby wouldn't understand. Also I don't like when people buy household things like silverware and decorations. I have matching sets of those things and if the "intruding" gift doesn't match it will basically sit in a box and never get used.
Agreed, I've seen lots of posts about the learning curve so I went in expecting a lot of pain. I've been pleasantly surprised so far.
Does the solution to an equation exist before one stated the equation? Does a particular phrase exist before one has written it? Does it continue to exist after all its copies were erased? And even if one answers positively to such questions based on a belief (it is not provable), like "yes, they always exist", one has to define what "always" means.
The problem with ads is you start optimizing for engagement which is basically the big issue with FB.
The article explains bypassing exactly this (PA/PAC).

> Vulnerability discovery remains a fairly linear function of time invested. Defeating mitigations remains a matter of building a sufficiently powerful weird machine. Concretely, Pointer Authentication Codes (PAC) meant I could no longer take the popular direct shortcut to a very powerful weird machine via trivial program counter control and ROP or JOP. Instead I built a remote arbitrary memory read and write primitive which in practise is just as powerful and something which the current implementation of PAC, which focuses almost exclusively on restricting control-flow, wasn't designed to mitigate.

Signed pointers are just a mitigation. With enough time to find other primitives/constructs (from less severe but more common bugs) you will work around them.
the biggest thing in the cloud is storage and managed databases. replacing a dead server with s3 is super easy. managing a database server can be challening aswell.

if you have one node you still need to do backups and s3 is just way easier. also when you abstract your storage your application has a way better structure. I already refactored tons of applications where System.IO or java.io were all over the place. with object storage from the start, you barely run into that problem.
You know why I like Rust as a programmer? It's community feels a lot like how the Perl community did at the height of Perl's popularity.

This is in contrast to Python's (has a friendly community, but tends to have bikeshedding), Node's (outright toxic npm-based warfare), or Java's (corporations shit out awful code when they're done with it, ie, everything donated to Eclipse or Apache, or all the dumpster fire code Google has released, and its up to you to judge how awful it really is).

Perl's CPAN? Lots of really nice code that follows a pretty good UNIX "does one thing, and does it well" philosophy, with lots of friendly folks.

As long as Rust doesn't have a Perl 6 moment, we're good.
what? how does that work?
> There ought to be an objective legal standard

There can't be, because there is irremovable subjectivity in your definition of legal justice: "equally and fairly" are subjective, and so is "wrongfully take advantage". There is no way to write an objective rule that will handle every case. You have to apply human judgment to each individual case, and human judgment will always be subjective. Written laws attempt to set down objective rules, but such attempts will never completely succeed.
Given that
- Microsoft considered an $8B acquisition early 2016
- Salesforce does a $28B acquisition late 2020

That's only about 3x growth in almost 5 years. Don't get me wrong, this is a massive acquisition, but I still say "only" given the hypergrowth experienced by many adjacent tech companies.

So I think Microsoft may be quite happy they decided not to acquire Slack at such a high tag price nearly 5 years ago.
Decred co-founder explains rationale behind Bitcoin bull and bear cycles
SalesForce also has been slowly killing Heroku for years (including layoffs recently).