skysight-inc/HackerNews huggingface dataset:
context from the start used the pdftex engine and lua was a first class citizen. havent used it in a while but it's quite different from latex, it's much closer to original tex.

while latex needs plugins for many extra features from all kinds of sources, and these plugins sometimes fight between themselves, context is more like bsd or django: comes with batteries included and i found it a much nicer experience.
You can usually define force and background colors in the Terminal, so you could force black on white. But then again someone can redefine the colors in their terminal.
Some terminal emulators also support rgb; so a smart QR code program should be able to do it.
> repos are mirrored, come with signing keys and any successful attacks are detected sooner or later and become public knowledge.

1. Not all package managers come with signing keys or actually check them.

2. "Sooner or later" - weasel words. Some of these breaches have been discovered years after the fact. Who really cares if they get discovered after 3 years? By that point all the harm has been done plus the attacker could have taken control of the systems in more varied ways so even removing the initial entry point won't save you.
It's actually one of the few cases where there is a functional difference between using cat and the alternative. Using less instead wouldn't execute the escape sequences.
L'avenir DU PASSÉ – Mercredi 9 Décembre 2020
Etsy: Alibaba with a lipstick™
Elementary OS Officially on the Raspberry Pi
Just wondering could Google docs be useful in your case? It’s free plan may already be sufficient for a small group/team
Right, this is also important info. They did, early this year, ask the murderer for a voluntary DNA sample, and they had received a tip that placed the murderer on the police radar. It's possible they would have solved it eventually, but it's unlikely the police would have been allowed to forcibly collect DNA based on a vague tip that amounted to "he owned a similar hat and had discussed violence in his teens".

To forcibly collect someone's DNA, the authorities need to establish the person as a reasonable suspect (skäligen misstänkt), which requires a preponderance of evidence and isn't that easy to establish. In this case, the police would have definitely needed more than the person fitting the same vague profile as thousands of others, and it was definitely hard to obtain any extra evidence given that the murderer indeed lacked any connection to the victims or to the crime scene.
No one buys Apple because they are cheap. They make great quality stuff. If you don’t want to buy it, don’t
Batocera 29 Announced with Support for RPCS3, CEMU, WineHQ, Khadas VIM3, RG351P
Hi! I'm Clemens Wenger, the artist / composer who commissioned physicsofbeauty.art
We just saw that someone posted this here, and we really love that people draw interest! So if you have any questions you want to discuss, I´d be happy to answer!
Best from Vienna, Austria
Clemens
It works for simple cases. Things that make it complicated are:

- Only executable code should be translated, data shouldn't be. Sometimes (like with jump tables) they are ambiguous.

- Different CPUs have different memory consistency models for parallel threads, leading to race conditions when translating

- Special instruction sets like AVX can be hard to translate

- Anything with a JIT compiler (including most web browsers) needs special handling.

That said, qemu works for the great majority of emulated & host CPUs.
Do vegans eat lab-grown meat?
The Ethics of Perfection (2007)
When the pandemic is over, there is going to be a lot of pent-up demand for live entertainment.
That’s exactly why you would need Facebook or Google or your mobile network operator or all of them to serve as proof of your alibi.

If the finger is pointed at you with a deep fake, you can then counter with proof from large corporations which presumably haven’t all been compromised.

You might also be able to use proof of your location in other settings, such as civil suits or domestic disputes.

Lots of people are using dash cams in a similar fashion. Proof to protect themselves from being named the liable party in a collision.

Same with forcing communications over email so you can prove what was actually communicated in the event a legal or public relations matter arises.
Yeah, it's one of the most fun puzzle games ever. But it's not a mobile-style quick play game like this where you solve a series of puzzles. It's more of a world you walk around where you find the puzzles sitting around in the world waiting to be solved. But without spoiling anything, there's a lot more to The Witness than just the obvious puzzles in the world.
It took me a few attempts to parse this sentence:

> The decision paves the way for San Francisco-based startup Eat Just to sell lab-grown chicken meat.

Why would you hamstring your own startup by giving it such a terrible name?
At some point the decision to not act on a problem becomes an active choice in favour of the problem, though.
If they won't ask you to drink a verification can to proceed.
Right now we're in a transitional phase where DNA data is integrated with traditional police work, where there may be a priori reasons to suspect someone before invoking DNA data to strengthen the case. Even this raises serious questions about privacy (the BTK killer even moreso than this case: they found him using his daughter's pap smear).
What is more worrying is the incentive to go straight to DNA in the future, entangling lots of innocent people in DNA dragnets because of the birthday problem at scale.
I've read dozens of books and started writing about them. If you'd like you could check out some reviews here: https://productive.fish/blog/mindfulness-books/
A fair point, but I would imagine there are a lot of businesses you could say this about.
21500 men were (voluntarily) tested in the death case of Nicky Verstappen [1]. Case remained unsolved for 20 years, until a cold case team was put on it and the police decided to have one ultimate go at solving the case. Via a massive DNA harvest on all men who were age 12 and older at the time the crime was committed and who lived in the area of the crime (hence 21500 men). I was one of them who volunteered (though I feel reluctant about massive DNA harvesting). Because one male could discredit the entire male family tree this allowed the police to narrow down on a suspect who fled the area around the time the massive DNA harvest was announced. The suspect, Jos B., got sentenced to 12,5 years imprisonment a few weeks ago. It was sufficiently proven he raped the victim, and also he got convicted for owning child pornography. Given the impact the case had on the community (myself included, in various ways, such as being afraid to be near the vicinity of the crime scene due to being stalked there as teenager), I'm very glad it got solved. One of the heights of 2020 for me. Unfortunately prosecution and defense want to go to a higher court, and he did not get TBS (forced psychiatric treatment) [2]

[1] https://en.wikipedia.org/wiki/Death_of_Nicky_Verstappen#DNA_...

[2] https://en.wiktionary.org/wiki/terbeschikkingstelling#Noun
The Soviet Unions abandoned nuclear lighthouses
You forgot the biggest bully.
No, since all the issues with cholesterol, salt and blood pressure would be the same (for now).
I use inotify-wait + tectonic + a PDF viewer instead of a TeX editing tool.

Simple and I can use my own editor.
Turn a Tesla into a mapping vehicle with Mapillary
Could you recommend any fiction books?
I liked it, thank you
Tell HN: Most recent Docker release breaks Docker-machine create
We use docker-machine at browserless.io for a lot of dev stuff, and noticed that new create calls weren’t working. It appears that docker version 20.10.0 has some kind of issue when docker-machine copies over configuration to the daemon.

Workaround is to use a custom engine URL, eg https://releases.rancher.com/install-docker/19.03.9.sh

GH issue: https://github.com/docker/machine/issues/4858
> I really don't get this fascination with 10 year LTS. Why is it so hard to upgrade in half a decade ?

The ideal situation is never having to upgrade: you buy your computer, install the operating system, and it works the same until you retire it. If your computer has a 5 year warranty, you expect to use it for at least 5 years before retiring it.

A 5 year LTS is only 5 years if you install the moment it's released, but that's not usually the case; for instance, there's a new Ubuntu LTS release every 2 years, so in the worst case your LTS installation will last only 3 years. Now consider the "10 year" RHEL LTS: in the worst case (you installed RHEL 7 just before RHEL 8 was released), your LTS installation will last 5 years, perfectly matching the warranty period.
Honeycomb Software
Honeycomb Software is an innovative software company that develops digital products for startups and online businesses. We are experts at understanding the client’s vision and needs, be it in application development and/or UX/UI design. We know how to listen, analyse and build appealingly clean and highly functionable products. Our systematic and professional approach allows us to create a wide range of digital products. We excel both in building brand-new systems and taking care of the code developed by others. Our services cover the full product life-cycle (functional analysis, UX, design, architecture, development, manual and automated testing, devops and maintenance).
In fact the only bluetooth issue I've had with my Sennheisers is that the bluetooth driver in my mac will crash most days. Requiring a restart.
I bought AIAIAI headphones decades ago, they work with all tech I use: I just plug them in, and they just work. No need to pair them with bluetooth, no nothing.

Since they are modular, they also have been a breeze to upgrade and repair. Need different cables? Better microphone? Its 20$ to upgrade that part of the headphone. Want to add bluetooth support? Can do that as well.

People buying and gifting pair of > 200$ headphones every year as if speakers are some kind of tech that gets outdated.

If you really care about audio quality and the environment, just buy a good pair of upgradeable headphones. They'll last you your whole life.
Especially as the much bigger Just Eat already exists.
Yes veganism is about not harming animals and not about the diet
You can. PowerShell already has a 15-year precedent of signed scripts - you generate a signature and embed it in the script in a specific way, and the shell can be configured to only run scripts if their signature is valid.

(PowerShell script signing is based on standard Windows codesigning certificates, but of course this hypothetical bash script signature verifier can use GPG keys instead.)
Very interesting but only on/off stimulation is possible, there is no spatial resolution.
git allows rewriting history. It doesn't seem unlikley one could come up with an attack which gives a malicious git clone to one user, and then rewrites history so all other users later don't see the maliciousness.
> 1. Not all package managers come with signing keys or actually check them.

Seems like a very big problem with those package manager...
Ubuntu as far as I'm aware does proper signing. (as any sane distro and hell, microsoft too)

I would not be using those package managers.

> 2. "Sooner or later" - weasel words.

What's your point?, I trust Ubuntu/Red Hat to keep their keys safe. I trust that google project zero and others would notice anything spooky.

I do not trust a random distro with only a few users to keep their keys safe and I do not use that.

It's also hard to do a proper attack when you have:

ubuntu -> (n) mirrors -> me

Ubuntu can't push a malicious package directed at me (I go via mirrors which can be picked at random)

Mirrors can't push a malicious package directed at me (they would need ubuntu signing keys, and someone would need to own all of them or be very lucky)

And if someone does compromise Ubuntu's keys, they're not going to go after me and risk getting detected that way.

There is a lot more security built into package managers then what I said compared to 0 you get on curl|bash.
I would put the language-specific package managers in the same category as curl|bash because anyone can push code without anyone else checking it, but there is a real difference with your distribution: it acts as an independent third-party. In that sense they act somewhat similarly to Certification Authorities, in that I as a user will not blindly trust a self-signed certificate but will trust a certificate that was vetted by this third-party.

In practice when you install something from AUR with a helper, it's not that far from doing a curl|bash (except the helpers will nag you to inspect the content, but allow you to skip doing it by default). The difference is who you curl it from.

Edit: as a precision, I do differentiate official repos and "third-party" repos; the latter are definitely a more integrated curl|bash, the same precautions apply
Listening habits has always shaped how music is made.

David Byrne explains that quite well in "How Music Works", his take on the history of how music is made and how it sounds being correlated how it was usually played is quite interesting. Tribal music could be more beat/drum focused as those are played in open air, where the bass sounds can propagate without room interference. Going from there to the point where he talks about concert halls and how different architectures (from cathedrals to halls designed for orchestras) shaped how music was made to sound in that kind of room. And later on how recordings have changed all of that.

So music has been shaped and will continuously be shaped by how people listen to it. Nowadays music is a very personal experience, listening at home, on our headphones, we experience it outside of the context it's existed for millenia before good recordings were possible. Where the experience of listening live music was always attached to the place it was played. Now we listen to it completely devoid of space, this shapes the kind of music made, how it sounds and so on.
One can also run `curl | pv > tmp.sh` to spot this pattern.
Making Sense of Klarna
needs to be reposted and made a dupe 39 more times, brb
Ask HN: How you pay out your sellers, authors, freelancers, vendors e.c?
hi HN,

What do you use? yourself solution or some SaaS service or some API?

In my product, I use Stripe Connect but I think it doesn’t work on All world.
I know some companies, they built it ourselves. it took too much time and money.
Especially software engineering is one side technical knowledge about programming, and the other side the ability to understand new problem domains from scratch so you understand what is needed.
So, concerning privacy:
>How can you guarantee that you protect privacy?
For our offline version (Offline Privacy Keyboard), you can find in the Google Play Store that we do not require permissions to access the internet. (https://play.google.com/store/apps/details?id=ch.icoaching.w...). Our iOS version does not require "full access" for either version, online or offline. This way Apple makes sure no one (not even us) has access to what you type. Other keyboards (such as Google) require "Full access" or allow it be enabled at the explicit permission of the user (e.g. Swiftkey). Typewise does not even have this option. There is no other guarantee. Even a certification of a provider would not help, because they would have to check every update.
> Also, is the layout and key shape patented or is it an open standard?
Yes, the layout and key shape are patented internationally.
Faster JSON with node-oracledb 5.1 and Oracle Database 21c
> That's why in order to write Rust, you'll likely need rustup

It seems that way, which is a big disincentive to use Rust at all.
I’m astonished it’s that high. I’d be interested in seeing a source for your data point.

To be clear, i believe they deserve a high level of compensation it’s just that they’re usually treated badly compared to the societal benefit they provide.

Certainly in the uk the median annual salary is about £26k. The above figures would mean US nurses are earning ~12x more.
To make you a suspect?

https://www.nbcnews.com/news/us-news/google-tracked-his-bike...
do you own a smart tv in your house?
FWIW, I'm no fan of giving my email either, so I tried to load the transformer on my own system. Would you mind to put a bit more, eg an example, than just following three lines there?

from transformers import AutoTokenizer, AutoModelWithLMHead
tokenizer = AutoTokenizer.from_pretrained("mbien/recipenlg")
model = AutoModelWithLMHead.from_pretrained("mbien/recipenlg")

FYI, I got this from running above lines:

...AutoModelWithLMHead is deprecated and will be removed in a future version...

FYI2, I just entered on your huggingface page "Get salt, apples and sugar and you get" and got "Get salt, apples and sugar and you get a soft, sticky mess. Then add water, add a lemon or lime and add a 1/8 teaspoon vanilla. Add a pinch of cinnamon and a dash of nutmeg. When you are ready", where is the recipe, what is this?? A bit more docs would be nice...
Bad SEO aside I don't think Just Eat serves the US?
i don't install anything that comes in shellscript download,
this speaks volumes on security of the 'software' itself.
English is not my native language, so I see nothing wrong with the name. I know that 'just' is a crazy word which could mean anything you like, but nevertheless (I'm just curious) what did you read in "eat just" from your first attempt?
Depends on the motivation for being vegan. I think vegans who used to eat meat but stopped for environmental/ethical reasons would. Whereas people who never ate meat (e.g. religious reasons) would probably avoid it since they have no motivation to eat meat and it seems too similar (uncanny valley) to something they've always avoided.
Shape perception via 1000 channel neuroprosthesis in monkey visual cortex
> There is no reason in principle why a shell could not implement digital signatures.

They currently don't, though, which is the point :)

The reason in principle this might not work is that different distros and os's trust different keys. Fedora trusts different keys than Ubuntu, than Arch, than macOS, etc.

> Ideally, the code signing is done offline, so an attacker that compromises the HTTPS server gets the HTTPS private key but not the code signing private key.

I don't think this is necessarily the case. Even if you gain access to the server, HTTPS keys are usually stored in such a way that only root can read them, right? So if you only compromised a non-root account, you wouldn't necessarily be able to read them (I might be wrong about this, I don't do this kind of thing professionally).

Also, you could imagine that the script is not stored as a file, but in a database or something, and then you could compromise it with SQL injection or a similar technique. That would allow you to change the script without any access to HTTPS keys.

> However, I suspect that ideal often isn't actually obtained; offline code signing can be a pain for CI.

You're probably right about this, but this is a great example of why you shouldn't use the same key for both code signing and HTTPS.
Ah I never used the macros, just the standard commands and using pre styled layouts.

That would explain it :-)

But I guess it’s not easy to save work in latex when in macro mode?
Yep, that doesn't counter my main point though.

We all know there's a dark matter of enterprise programmers, out of which a good portion is perfectly capable, but just doing it as work 9-5. But that's not what we expect to see on HN/Reddit/open source projects.

You seem to not like that dev tools are not a sustainable business today. That was kind of inevitable. Using paid dev tools alienates contributors in open source development, and students/3rd world can't afford them, and lot of paid tools are specialized to some domains (think SAP). Doesn't help that proprietary vendors try to lock down stuff and lot of rent seeking behavior (Oracle, qt company)..

Atlassian made some steps in lowering this barrier of entry, and built a pretty good business IMO, though not much developer specific.

If there's anything to learn, unless there's an app store like low barrier to entry platform for dev tools with student discounts, free trials etc.. people may learn paying for high quality developer tools.
The difference between a malicious and a legit bash script can be just a couple of characters. Eg. the script can have a deliberate injection vulnerability in a variable expansion...

If people commonly inspected bash scripts they downloaded, attackers would just write the script more carefully to make sure 15 minutes reading the script wouldn't find anything bad going on.
I stand in awe with the amount you've read. Which ones have you gotten the most benefit from?
We Collated all the things happened in the KubeCon NA 2020
Any VPN other than TOR just moves the problem somewhere else and likely makes it worse.
just having 2 apple id's (work vs home) completely breaks most services and devices for me. i wish it "just worked" though.
when she was asked to omit references to the [..] names of genetic relatives to the killer

That's a stretch. What possible journalistic purpose could it serve to publish the names of the (distant) relatives of a murderer?
This is cool and iOS camera is able to scan the code even without the CSS that squashes the squares together if scanned from a large enough distance (about 30 cm).
GitHub Dark Mode in public beta
A cool feature would be privacy-preserving geolocation. Scan the WiFi networks from the client, pass it to your server and call the geolocation API from there. That way the upstream geo service provider wouldn't know which client it belongs to.

Otherwise you are just using the google/apple geo service. Granted this approach would work best in urban areas and wouldn't work at all in unpopulated areas. You'd need to fall back to GPS or the OS location service in some cases.

I don't know if this is practical, just an idea from a privacy conscious individual.
I haven't exactly read many this year, but I really liked "An Answer to the Bose-Nelson Sorting Problem for 11 and 12 Channels" [1]. It describes many interesting algorithmic tricks to establish a lower bound for an easy to understand problem. Not exactly immediately practical, but still very interesting.

Note that it has been published on arXiv just yesterday; I helped review an earlier draft.

[1]: https://arxiv.org/abs/2012.04400
Lab/grown meat is still a cell from an animal.

I'm vegan and sway towards of not wanting to eat anything from an animal. So as curious as I am, it's still a no for me.

But I approve for that it would be nice to see less slaughter caused by those who do eat meat.
>We lucked out that this guy was more into his own schtick than actually being part of deliberate cohort with an agenda.

Everyone I know that voted for him liked him for this particular reason.
A Browser That Finally Puts Privacy First
The "just" Eat Just means morally upright or good surely?
Here some news for you, check the names of the companies that put money on the table for Python and C++.

IBM, Microsoft, Google, Apple, Oracle, Amazon, Sony, Nintendo

So much better.
We have a GO server handling requests and responses etc. Under the hood we are using imagemagick.
Perhaps it is Marsh gas or Peculiar Cloud Formation.
Show HN: DroidGraph, test GraphQL API from your phone
Not sure about the plural thing? In my own field a paper using singular forms would really stand out. Why remind readers and reviewers that you are working alone in every single sentence? Genuinely interested to hear your reasons! This is an issue for the paper I am currently working on. Naturally I would prefer to use the singular where it is accurate, and if I were better established I would.
What a great observation by everyone in this thread. You can even make out his fist on the left side of the balloon.
Being vegan is about animal suffering and consent though
What ideals?

It's open source, end of story. You get the source, you can edit it, fork it, etc.

No ideals come into play.