skysight-inc/HackerNews huggingface dataset:
It's not hard to match up a certificate hash to the issuer, because most issuers will likely only have a couple of certificates to simplify internal PKI.

These are Apple certificates; they have nothing to do with a company's internal PKI.

It's something that can be solved with a rainbow table, there aren't even salts involved.

1. Certificates change; probably yearly, knowing Apple.

2. The OCSP check get cached; the certificate lookup doesn't happen every time you launch an app.

3. You can block the OCSP lookup if you're all bent out of shape about it or strip the developer's signature and sign it using a different certificate.

4. The new protocol for checking will be encrypted and there will be UI for opting out of these checks.
'Magic Wands' revive memories of the smart home dream
Are you implying that poor people commit more petty crimes? Are you racist? /s
Actually multi-point Bluetooth devices work just like that. They remain connected to 2 or more devices on the A2DP profile and switch to the source that's currently playing.
"The reality is that certain types of people are in fact more important than others. POTUS gets secret service protection -- something that most citizens won't get."

I'm not talking about that - and I have no problem if judges (or anyone else) have extra bodyguards or special limousines.

I can say anything I like about the president. The same is true for these judges. The equal protection I am speaking of is not what kind of armor their car has, but what I am, and am not, allowed to say to or about them.
> My hot Word tip is to use Styles.

Wow. That was my hot tip for Word 1.0 too. I felt they did a rather too good job of hiding them subsequently.
Notably reposted by the President of El Salvador: https://www.instagram.com/p/CEu5daVg0Ko/.
I'm a bit confused here, but aren't morons citizens too?

Don't they vote, pay taxes, run their own affairs just like everyone else?

Are morons a separate well defined class of citizens?
DoorDash reportedly valued at $39B in IPO
Myspace has come to GitHub.
This is very interesting. I thought Berkeley's BOOM is way more advanced implementation of RISCV than VexRiscV and it is written in Chisel3. Though I have not played with BOOM yet, cannot say how deeply can it be configured. But you seem right, BOOM does not look like most effective in terms of LUTs utilisation core. Another thing I also disliked in Chisel3 is dependancy on new intermediate representation of hardware (FIRRTL) which adds one more layer of abstraction and compilation.
Because nobody will sign up for that and they'll get zero.

People don't sign up to Spotify for the mentioned 80%, and if you include the mainstream music then you have the exact same problem with different branding
Ya, I've gone the fork-and-customize route (but I typically just `helm fetch`-d into my repo), or pinned to the version I needed.

I agree with you about an addon manager, but then something has to be the source of truth for that, and the "KubeApps" type apps were all using Helm under the hood anyways.

I played around with Kustomize for a bit at one point, but honestly had a bit of difficulty understanding how it loaded and applied the different "layers". I've been looking more recently at it as a "make some quick customizations to this rendered helm chart" tool as of late.
They don't support the mic over wired connection which is unfortunate, as even apple products are limited to pretty bad mic audio quality over bluetooth.

I realized this issue when I replaced a set of wire/bluetooth headphones with a new pair, and noticed the mic quality was way worse, even when wired. It turns out my old ones had a wired connection for the mic, and my new ones always use bluetooth for the mic.

After googling a bit, I found there's still no high quality microphone audio profile inside bluetooth, even after all these years.
supported are 3 minor releases with (1.18) 9months and newer minors 1year updates.
you should always upgrade to one version behind the last major in self managed scenarios. i.e. my company is on 1.18 and goes to 1.19 now. basically if something breaks it's most often not the end of the world, especially not if you do backups with velero.
While these guys are claiming credit for all the monoliths around the world, this is just a clever exploitation in order to promote their show.

The Utah monolith was most likely installed back in 2015 and went undiscovered for 5 years (according to historical Google Maps satellite data). The Netflix show they are trying to promote had most likely not even been conceived yet by this time.

The subsequent monoliths have popped up with increased frequency since the discovery of the Utah monolith. None of the monoliths seem to be made by the same people or with the same techniques.

Each monolith also seems to be placed in increasingly more public and accessible locations.

Basically, I don't buy for a second that these monoliths are all made by the same people or even coordinated with a single group.
A few days ago there was a "passive income" AskHn[1], with links to similar threads from previous years, and this year there were a lot of "stock market" answers.

My scientific ctrl-f survey has the string "stock" appearing 48 times in 166 comments this year, three times in 84 comments last year, once in 163 comments in 2018, and 6 times in 90 comments in 2017.

And this year they were talking about leverage.

1: https://news.ycombinator.com/item?id=25316912
I love LaTeX for writing math-heavy documents, but as soon as it involves figures, images or pseudo-code it is quite horrible compared to Word.

For me, the ideal solution would be something WordPerfect but with ability to type LaTeX equations.

I want to be able to manipulate the "code" of the document but with a nice UI with real-time preview that helps me placing and formatting figures, text boxes for pseudo-code etc.
The services and products companies have been delivering during the pandemic were developed largely before the pandemic. Owners can see this. It’s not just low level managers, rather it’s about middle managements perspective in general.

Management and cross organizational relations rely on rapport and relationships amongst baby boomers and Gen X people who greatly prefer in person interaction. Maybe engineers won’t come back to the office, but they sure will be.
Then covering you too would be an approximately zero cost to that law. Yet it would cover retired judges, nearly-judges, people who aren't judges but have similar problems we haven't thought of yet, and have the moral advantage of treating everyone the same.
IMHO I feel like adding a periscope would keep your pricey phone or tablet closer to the ground and less likely to be destroyed if the platform tips over.
Yeah, I was just riffing in that paragraph.

To riff further-- writing a modulation is a subset of writing a piece. If we were to quantize modulation "styles" to match, say, a set of DAW operations in a dropdown list, we've made the work of writing a piece easier.

We extend that ease for each aspect of music-writing that gets a similar dropdown menu in the UI. That ease accelerates the production of music.

I find it fitting on HN to insist the common practice period was comparatively unproductive and inefficient. :)
I think this story might be the case study I use to open a discussion about news bias with my 66 year old father. We live in FL and I had a brief discussion with him sometime during the summer about our state's pandemic response. He mentioned something about the governor trying to hide data, and I was like “...huh?” and after hearing this story today I connected the dots.
Just setup a bijection between XML and s-expressions and XSLT becomes a Lisp.
You mean besides the RFCs (the most recent RFC 8446 describes TLS 1.3) ?

https://tools.ietf.org/html/rfc8446

If you aren't interested in why this works just the Introduction to the RFC explains the intent, specifically what we care about here is that TLS delivers:

"Integrity: Data sent over the channel after establishment cannot be modified by attackers without detection."

And further notes "These properties should be true even in the face of an attacker who has complete control of the network".
The article describes the costs as "Buying the dish and other gear needed for the Starlink service costs $649, plus tax. Rekounas said he paid $820 in total. Users are expected to install the kit themselves. Then, it's $129 per month for the service."

I have a few questions about this.
1) does every house need it's own dish? For some reason I was thinking community dishes and then other service to the home
2) the cost of $129 per month is the direct cost to SpaceX, but it doesn't say what they currently pay. I believe the current cost is subsidized by the gov't for providing rural service. I wonder what SpaceLink's cost would work out to if similar subsidies were provided. Or are they?
Well they could pretty easily demonstrate that only a state actor could pull off an attack like this in an objective manner. If it takes state-level resources to breach their systems, then they can just announce and put out an open prize for anybody who can breach their systems that pays out less than state-level resources. If it actually takes state-level resources to breach their systems, but pays out less than that, then it would be unprofitable for people to claim their prize and provide pretty good evidence for their security. However, if somebody does claim the prize, then we can reasonably assume that their security level is less than the prize as it is profitable for somebody to claim the prize despite the unknown level of risk involved in a blind uncontracted penetration test.

So, what do we all think would be a level of resources that only a state could support? I think we can just start somewhere pretty low like $1,000,000,000. Fortune 500 companies and many criminal organizations could reasonably afford that, but the total number of organizations is still pretty limited, so it is probably a good lower bound. I do not think we can go much lower because if we drop down to $100,000,000 then even FireEye, which is not a Fortune 500 company, could theoretically fund such a venture with its revenue of $890,000,000.

Okay, so starting with "only a state" resource level of $1,000,000,000, we should probably divide it by 10 to make it highly unlikely people will do it just to prove they can even if it is unprofitable to get the prize. That leaves us with a simple open prize of $100,000,000 for the first person to demonstrate that they can breach their systems. If nobody claims the prize, then it is highly likely that this attack would take a state-level actor. If somebody does claim the prize, then it is probably doable by somebody who is not a state-level actor. This would provide an unbiased answer about the truth of their implications. If they think such a prize is too high, then they can just set it to a lower X that will give us an unbiased answer to the question: "Does it take more than X resources to breach their systems?"
Chernobyl fungus could shield astronauts from cosmic radiation
I had always assumed (without really verifying it) the reason for this was because for a large company that would be capable and interested in re-selling these services, they would NEED to make some changes to integrate it with their rest of their systems. And those changes would be very sensitive and specific to their own infrastructure and system.

At least in my limited experience with extremely large companies (which are the companies that would be capable/interested in reselling these services) they rarely run open source software exactly as is, even for their internal usage. They usually patch it themselves or contract out patches either to fit within their systems, or for specific features the want/need.
I would have never guessed that he wrote this theme, sounds more like something Danny Elfman would write. Very cool!
Hipsterism 3.0
Love it!
Since Fuschia seems to be a replacement for Android, why would you think it isn’t a way for Google to exert control over the market?

As for forking, that option only becomes practical if the community version can muster adequate resources versus the Google controlled version.
That's just a reason why you aren't supporting the protections for everyone. What's your reason for opposing it being applied to everyone?

Just because you feel there is no risk of a disgruntled person targeting you, doesn't mean that there are other people who don't have risk in other jobs (like doctors or managers).
The freedom for the user that comes with using Linux as a result of it being GPL-licensed is that entities have to contribute any changes they make to the kernel back to the community if they intend to distribute their modified, potentially improved kernel. This results in a better end-result as the kernel can integrate changes that others wrote if they provide a better experience in some way.
Because your premise is all wrong.

Their life is more important to protect from particular threats than everyone else's, because they're in a position where we expect them to make rulings based on their expertise and judgment rather than their fear or concern for popularity, and because they are more frequently in a position to garner someone's resentment or hatred than most of us are.

Just because we're all equal in the eyes of God doesn't mean our society should pretend the world isn't complex.
ReCaptcha vs. Geetest
A comparison of recaptcha and geetest.
I love this!

You could use this to syndicate blog posts, sort of like RSS, except each entry is JSON and could be viewed as it's own page rendered by it's own renderer (carried by a CDN and cached by the browser), or by the renderer of the users choice.
> One of the great things about Latex (or raw tex) is that you can simply type it into a buffer. No need to mouse around to select text or anything like that. Hard to find anything really more usable than that.

More usable for you perhaps, but certainly not for me.
This can go a very long way. Using Ansible and Packer to provision AMIs, and then Terraform to spin up what's needed, goes a long way, without introducing a new layer of technology.
Reminds me of working at Boring Company where when a client came into our office magically we all had masks on but then when they left masks were back off (sociopathic)
Emacs Survey 2020 Results
This is under ADA, the Americans with Disabilities Act. You can find more information here: https://www.eeoc.gov/publications/ada-your-employment-rights...
Online Masters in Computer Science at Georgia Tech University in Still $7000
I meant famous among FOSS community, of course.
If you go back to the web as a bunch of file servers, where every URL ended in the extension type of the document you wanted, this is what you get. Then MVC frameworks said "hey, if the URL represents some semantic aspect of the View, we can show off the power of MVC by letting users swap out the view by changing the extension!" And voila, some.com/url.html for HTML and some.com/url.xml for XML and, later, some.com/url.json for JSON

Most of the big MVC frameworks offered this out of the box at some point, which made life easier before dedicated RESTful APIs became a thing.
Didn't both Soros and Taleb move from "well-off" to "squillionaire" by going short?
Show HN: react-spring-bottom-sheet – For the web, without compromising a11y
This is a very peculiar thought experiment.
Resolving nested queries in GraphQL on the server-side
Yeah you're very clearly in the third category, further described under the second point.
Greenspun's 11th law: Any sufficiently stateful program contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of SQL / relational databases.
In regards to the character encoding issue, I wonder if they could just move the #render to the top of the object by inserting it as the first property.
> Rent-seeking is when a third party uses force to claim profit from an agreement they're not actually party to.

The agreement is between you and the law in most countries, which says that typefaces are exempt from copyright. The third party are foundries who license fonts to you and charge you more based on how popular your website is.
Working for a government agency that had bought into MarkLogic in 2004, we built an entire analytical site that used XML from the document server, queried via XPath, and rendered it into web pages via XSLT. The web page was defined entirely in the XSLT transform. Worked great and if you were already righting your data queries in XPath, writing the UI in XSLT kinda made sense.
Yeah, but in those days we did that because there wasn't any other option. It's not like the colour scheme of the monochrome terminal was chosen for ergonomic reasons.

If anything, amber terminals were easier on the eyes. Or the white on black ones. Those were nice.
Or just make it like a quarter of its current volume. I don’t think there’s been a single time that fucking notification went off where it didn’t make me physically jolt in my chair.
Yes, let’s start a new conspiracy theory with an unfalsifiable conjecture!
U.S. physicists rally around plan to build fusion power plant
Green letters doesn't seem eye friendly at least to my eye. My eye much prefers white on dark grey for emissive screens (LCD, LED) or black on white for reflective screens (e-Ink).

I had the impression that pre-1980's screens were green for chemical reasons not for eye-strain optimization (?)
Go ahead and say anything you like about them. Your political opinions are entitled to the highest order of protection under the 1st Amendment.

There's little reason to say that "X judge lives at Y address" is equivalently deserving of protection. We might choose to protect your saying so out of an abundance of caution, to avoid a slippery slope whereby we restrict too much speech. But the idea they're equivalently valuable things to protect in their own right needs a serious defense.
I learned XSLT twice. The first in the very early 2000s when I was creating a large and mostly static website for a magazine with a lot of content, and mostly just hacked it together. It was ok but mostly I was using it as a simple templating language. The second time was about five years ago, as a module in my MSc, by which time I was well-versed in functional programming — this time it was easy to do all sorts of weird and wonderful stuff, including a TAP-outputting assertion library for templates written in XSLT itself and a library for doing depth-first searches over graphs of nodes.
When I stopped using q-tips, I stopped getting tinnitus and requiring the doctor to clean out my ears.
The title seems pretty unkind to the project and I almost skipped it. “Bleh bleh yet another hex editor”.

But this has some nice features! For example, it can parse the executables, and show structures:

Disassembler supporting many different architectures
ARM32 (ARM, Thumb, Cortex-M, aarch32)
ARM64
MIPS (MIPS32, MIPS64, MIPS32R6, Micro)
x86 (16 bit, 32 bit, 64 bit)

Just to start, along with a ton of other file parsing, etc.

This looks pretty cool. Compiling it needs a C++20 compiler and no small list of dependencies...but it’s cool.
Tons of retailers use USPS, they are quite competitive especially for whatever fits into an envelope (First Class Mail). You don't seem to have a grasp of the industry, might be better not to make stuff up.
Tacos Bell
Wait, where did the keyboard and mouse go?
I'm talking about the original definition of accessibility, not the one the "community" decided to pervert for its own interests:

https://en.wiktionary.org/wiki/accessibility

The quality of being accessible, or of admitting approach; receptiveness

As another link posted elsewhere in here shows, it seems accessibility has turned from striving to make sites more accessible to everyone, to doing the bare minimum legally required by disability laws.
Don't forget Jo Cox.
here's the man himself:
https://www.youtube.com/watch?v=FLQSjzt3vnY
Boosting your content marketing to the next level
And no one has mentioned gradient
These kind of projects are just “open washing” at that point. The source is available, but outsiders can’t meaningfully contribute stuff outside of the preordained roadmap nor is the project beholden to community consensus.

As an open source contributor, it’s very unfulfilling and disappointing to find out you’re essentially an unpaid contributor to a company project.
Fire sale on Fire Eye.
Nice - tested a bunch of the ones we were benchmarking against and they all worked well!

We will keep you in mind as our usage grows or if we have another project. Your tiered pricing doesn't make sense for us as we launch.
Why build hacking tools when you can steal them?

Or at least get an idea of what tools your target company was red teamed with.
Does a story like this negativity impact FireEye's security credibility?
> Or how often do you watch movie with headphones?

Probably most people in the world.

I've rarely lived alone and always have roommates 25-35 and I'm amazed how much HNers lose touch when they get older, stop having roommates, live in a house, don't see how other people relax.

Maybe I'm coming off as mean, I don't want to. But also consider the new culture of permanently-worn earbuds. I know headphones used to be a hassle when I was growing up. But now you will notice people who never even remove them all day. So it's not extra leap to watch a movie on their phone with earbuds, something all of my roommates do.
For anyone who thinks that the author here (D. J. Bernstein) is biased in favour of LaTeX, he has elsewhere written one of the most stinging criticisms I've seen: https://cr.yp.to/writing/visual.html (LaTeX haters, enjoy!)

The point of this blog post here (the OP) is just that the study by Knauff and Nejasmic is really awful, for the reasons it mentions: studies the wrong metric, etc. (Of course typing "see [41]" would be more efficient than typing "see \cite{multiplication-survey}" for instance.) Far from the authors' claim of a “highly realistic working conditions”.

(Also this blog post is titled “part 1” so I imagine there will be future blog posts either on this specific topic, or on measuring the wrong metric, in general?)

Edit: Some of the comments here seemed odd to me, until I noticed that this HN submission is titled “Measuring "efficiency" in document prepration [sic]: Microsoft Word vs. LaTex [sic]”, while the actual blog post is titled “Optimizing for the wrong metric, part 1: Microsoft Word” and has the subtitle “Review of "An Efficiency Comparison of Document Preparation Systems Used in Academic Research and Development" by Knauff and Nejasmic.” From the HN submission title, I can imagine that before clicking one may expect the link to contain a measurement or comparison, rather than a review of some paper. Titles of articles are already (in general) a poor indicator of their contents, but please don't editorialize titles to make them less representative!
They aren’t really. Safari is based on WebKit, which is very much open. Chromium is based on blink which is a fork of WebKit.
Because the government has decided that the existence and viability of rural communities is a policy goal in and of itself; and that basic telecommunications services are necessary for public safety and good government in such communities.

See also USPS's Universal Service Obligation, which requires it to have a minimum level of service to every single address/user in the US.

This is common in developed countries (e.g. the EU requires all its member states to have universal service for both post and telecommunications). China isn't there yet, but is working towards that goal.
This isn’t worth my time except to say so.
How about OrangeCrab ? It is Lattice ECP5 based (24k LUTs) with DDR3 and USB directly connected to FPGA. The price was $138 last time I checked.
The ACID system can guarantee nobody is billed for an item that you can't deliver. If you want a more user-friendly guarantee, you can reserve it when it's added to the cart.
The Second Amendment is explicitly framed as resisting tyranny, not self-defense from criminals.