skysight-inc/HackerNews huggingface dataset:
Isn't mold handled most effectively with a dehumidifier, rather than a heater?
> Do not write functions that do nothing but multiply 2 numbers.

Maybe I'm missing something, but doesn't Java already have a function that multiplies 2 numbers, as well as a fancy infix notation for calling said function?
thin font is very difficult to read.
http://archive.is/hBtjp

I'm sorry but there is no sane reason why you need to enable javascript to read a site that is 100% static content of text and images.
I'm not a doctor but as I said in my earlier comment, I think the literature supports that most of this is just damage from the directly infected cells (lung, organ, nerve) that the body will eventually mostly repair given appropriate nutrition and time. But certainly for some people certainly there may be permanent damage.

A better way to state my point was to say that other diseases can cause exactly the same types of cell damage, and having, say, reduced lung function or some neuropathy going forward after a COVID infection are not themselves new and novel medical problems.

I have had COVID despite my best attempts to do everything possible not to contract it. For complete transparency here, I have a strongly vested interest in knowing the truth of this matter. I agree that there is not a strong consensus yet. Sorry I do not have great references at hand to share right now either.
The StopHS2 Anti high speed rail group says that the 530km HS2 line (and tons of stations) will generate 1.5 million tons of co2, for 18,000 seats an hour 12 hours a day in each direction.

400k seats a day, or 150 million a year, for an average 10kg co2 per seat in construction costs over the first year.

456km London to Paris is is about 100kg co2 each way per seat.

So construction emissions isn’t even a dent in the first year.
An an absolute monster!

Edit: non native speaker. I meant to say „what an absolute unit!“ to praise his skill. Be gentle to the ignorant please.
>Different ARM chips aren't "somewhat compatible" anymore than Intel/AMD x86 chips. It's a standard instruction set.

Can you create a single build for all ARM chips for the same OS? If not, its all the same. At work we're using binaries built for XP that work without modification on W10. No doubt, its a testament to the massive backwards compat. effort by MS, but also from Intel. This is a massive, massive benefit to actual customers who just want to keep running software that they purchased/developed/commissioned on the replacement hardware when their current hardware fails. ARM/M1 brings a lot of benefits too, but as always, each person has to decide what they're willing to give up.

>The M1 has been out for a month and we already have hundreds/thousands of natively compiled binaries—and Windows and Linux are up and running.

Assuming the vendor is still in business, you have to rely on the good faith of the vendor to gift you the new version for free.

The OP raises very valid points, I don't know what is 'utter nonsense' about it. It's only tech, not a tribal war :)
Chrome has new warnings for “Form is not Secure” even if back end is HTTPS
Glad someone got it, I always found it ironic that their nag popups say we "deserve the best" when I would have thought "the best" was an optimized mobile site like i.reddit.com
I would love to read YouTube’s big reveal on how they are targeting children. It does not take an expert to see it. Just search up any kids shows and wait for the ads to come in. Should kids be targeted by any ads? I don’t know but feel probably they shouldn’t. But even if they should be shown ads I highly question the type of ads I have seen while watching shows with my kids. Honestly I can’t think of a single example ad off the top of my head but while watching clearly kids shows have seen enough that I have often thought “what the hell youtube”. A part of me believes they want the ads to be offensive to the parent so they consider the premium account.
>filling out a TPS report

>sitting in mind-numbing status update meeting

Technically yeah, we are "WORKING" when we do these things, but we distinguish the types of above-quoted trivialities from "real work" because it's useful to distinguish them. Why is it useful? For one, as a kind of relaxant or a release; a release from working myself too hard, and from not feeling like something's wrong with me when I'm unable wrap my head around some code after writing for the last 12 hours straight. We'll hear from time to time about someone "WORKING" 80-hour weeks and that will lead us to think that maybe we could be "WORKING" longer, harder. Except "WORKING" to that 80-hour-a-week guy is a lot of business lunches & dinners, social media, golf, or other busywork, while "WORKING" to another guy is high-intensity focus and creative output. By qualifying their hours worked with what constitutes "WORKING", we find comfort knowing that no - something is not wrong with us if we can't engage in a 14th hour of intense-focus creative output.
In future, the caricature of our time will be people blindly stumbling around while pressing small hunks of metal and plastic against their faces.
I guess it probably varies by user then. Some of the features I used everyday were gone so I finally decided to have a serious look at reddit. I had never taken it seriously before because it looked awful by comparison. But, once you got past the poor design aesthetic, it was a much better community. So, as much as I like old.reddit, I don't blame them for improving the design, it is a turnoff for anyone who is design savvy.
I know it doesn't solve all the aspects of how broken this documentation is: but here's a pull request that somewhat tries to address it.

The Pull Request:

https://github.com/amzn/selling-partner-api-docs/pull/209

The Deployed Docs:

https://docs.contour.so/amzn/selling-partner-api-docs

Lots of bugs still to fix but hopefully it's helpful to anyone. Super open to any feedback!

----
Edit:
To make it clear, the docs are built on a web app I built while on break from school. Sorry if that wasn't clear before!
Real life is not like the movies, in which a floppy disk of info is exchanged for a suitcase of money in a dark alley or in a boardroom. Blackhats typically find that there is little market for their info, especially before the advent of bitcoin being popular. yeah, you cracked a bunch of selfie pics. What can you do with it. not much.
If we all stay home without any accidents then sure.
I remember the time when I was a kid and travelling with my brother and parents that there were 6 people sleeping in a cabin, so two other adults we didn't know.
Last time when we took a car/sleeptrain from Dusseldorf to Austria I used an over the earmuff or an overear sony nois ecancellation combined with earplugs. Works well
Back in the 1980's I think there were a lot of interesting schemes.

The solution was to just get an updated version of copy2pc or copywrite and they would have a fix.

But I remember a few schemes that were interesting workarounds.

One was the hole in the disk, one was a laser-burned dot on the disk.

I recall with the hole in the disk - the software would try to read and if it succeeded it was a copy.

The second one was slightly different and I believe the software would write to it, and read it back, and if it could read it back it was a copy.

However the best of all was either the scratch-n-sniff card from Leather Godesses of Phobos, or the Age Verification of Leisure Suit Larry.

example:

"Gone With The Wind" is about
a. outer space.
b. a bank robbery.
c. four hours long.
d. dust.

or

President Ford prescribed _____ for dealing with economic problems.
a. tranquilizers
b. employment
c. that everyone wear a WIN button
d. that everyone should have a nice day
Matplotlib...
If this happened while America was awake, it would have blown up on HN. I’m surprised telegram didn’t go down from all the people complaining YouTube and gmail didn’t work (myself included)
I noticed the YouTube monkey (first time I'eve seen it). Trying in Incognito, I could still watch the video. I wanted to tell a friend using Hangouts, oops, the web app also returned a 500 error. Google searches still worked, but here I don't remember if I was logged in or not.
That's fair, though my comment was more about the double standards generally on that issue - masks/distancing whatever (I just used the example given); the point remains that there was a definite light touch from the media wrt covid safety for the "good" guys vs the "bad" guys.
If you enjoyed learning about pointer provenance (called "safely-derived pointer" in C++ [1]), you might find the recent addition of std::launder() [2] interesting.

[1] https://en.cppreference.com/w/cpp/memory/gc/pointer_safety

[2] https://en.cppreference.com/w/cpp/utility/launder
Signal has considered this by adding an additional client-side "encrypted my messages" locally. So I'm curious if this is what they are referring to.

Post-physical unlocked HD access to the device, aka digital forensics.
A bully will use anything that seems likely to hurt and provoke, he doesn’t really care what.
Can you tell us what this giant asm macro program was?
> Companies always say they will investigate the full impact of a vulnerability when you follow the protocol they urge of "as soon as you find something, report it and don't try to escalate". But this is nearly impossible to do even if you're trying in good faith.

Disclaimer: I was a Security Engineer on the FB Security Team until last month and regularly attended the payout meetings :-)

I've seen plenty of bug bounty programs making such claims, but the Facebook program keeps up to this promise the most. Every bug is root caused to the line that caused the issue and assessed on maximal potential impact.

Sometimes that leads to cases where low impact vulnerabilities got paid out tens of thousands of dollars. The big bounty often came as a big surprise to the reporter :-)

Just a recent example: a bug bounty hunter reported unexpired CDN links. After internal research, FB figured out to chain this into a Remote Code Execution and paid out 80k USD (https://www.facebook.com/BugBounty/posts/approaching-the-10t...)

Facebook has big pockets. As a bug bounty hunter, I'd not worry about being screwed by them. It's by far one of the best paying bounty programs.

There are many reasons to criticize Facebook or Instagram. But the handling of its application security should not be in the top 10 :-)
It still might come: https://www.youtube.com/watch?v=zqE-ultsWt0
My point is that you know at the end of the while loop, it's going to test the loop variable you wrote at the beginning, no matter what's in the loop body. The fact that other things could change the variable isn't relevant. With defer, you don't know what will happen at the end of a block without looking through the whole thing.
According to reddit (1), it was part of an exercise and there was a mistake with accidentally issuing a non-exercise alert.

(1) https://www.reddit.com/r/AirForce/comments/kblzkx/only_at_ra...
World Bank Approves $60M
Safeguarding the World from Solarburst and Future Supply Chain Attacks
Hololive does, one Hololive's mainstay, Zatsudan (Free Talk) is basically radio talk show with the interviewer being (you) the live audience. And I admit I use some Vtuber streams as replacement for impossible-to-do physical hangout in this year of pandemic.
> Further, I would argue that pointer provenance is a meta-language (or meta-computational) concept (which the Rust docs hint at), and logically speaking, might be intractable in the general case (I'd have to think about this more).

Unless we define provenance to only work within certain easy-to-calculate boundaries. But for the general case, sure, just don't optimize when there's uncertainty.
I should mention that this also allows me to do things like hire a programmer that is better than I am to refactor portions of the system.

I am not an expert at server tech. There's a good chance that we'll be hiring contractors to work on the server, once we get a bit more spending dosh.
New Atari Lynx Homebrew – Santa's Empty Sack
Yes please.

I’d like to add: no targeting of any kind for political ads - you wanna say something? You have to say it to everyone.
Why not rent the car at the destination?

I can think of not having to move luggage (and/or child seats) and feel more "at home" but I can't justify that over not moving a ton of metal over hundreds of miles...
Last year I did Berlin -> Paris and Hendaye (French-Spanish border)-> Lisbon.

The Berlin -> Paris connection was amazing and actually part of the Moscow-Paris connection that runs once per week. The food on board was nice (Polish catering wagon).

The Train to Lisbon though was really old and the food well eh. But arriving at sunrise in Lisbon was well worth it.

I am happy that the sleeper trains come back to existence, more eco friendly, more relaxed traveling, more cargo and less restrictions than with air travel (e.g. > 100ml liquids)
The example you give seems to be an ad that wasn't sufficiently personalized. Was that also "offensive and unwelcome"?

Everyone should just use uBlock Origin and be done with it.
I hope he learns his lesson cheaply and does not end up going to normal school with student debt.
On the other hand, why FB and Whatsapp separately when it's the same company?
> Biometric feedback for health is a simple but effective way to extend lifespans and make people happier.

There's a current TikTok meme which approximates to: people linking Wii Fit calling them obese on a daily basis to their disordered eating and disordered relationship with exercise.

It's not sure that notifying people that they have low cardio health will have any meaningful benefit to them.
> He died at a hospital in Seattle. His wife, Cindy Engstrom, said he had injured one of his feet in October, accidentally took too much Tylenol for pain relief and suffered liver damage.

As sad as it is to lose a person at age 55, it's even harder to digest the tylenol induced liver failure part until you experience foot injury/pain. I spent last December in excruciating foot pain that came out of nowhere and the thought of wanting to guzzle down entire bottle of Advil/Tylenol touched my mind at least couple times.

Anyway, RIP. Old interview with him - https://www.youtube.com/watch?v=rjZWUweIIEU
https://gizmodo.com/u-s-schools-are-buying-phone-hacking-tec...
Given the size of the "Keyboard", "Video", and "Hi-Res Video" chips, I'd wager a guess that they're ATmega microcontrollers with sticky labels on them.

The kit looks like it's taken some other shortcuts as well. The original system used an array of DRAMs, for example, not the single SRAM in this kit (which didn't exist when the Apple I was made).

The original Apple II was almost entirely discrete logic -- no PALs. It'd actually be a great target for reproduction.
I've always thought that their algorithms are the biggest problems - when someone else gets to choose what you see. (That's also why I think it's far to go after their common carrier status if they do this.)

It would be better to be able to manage your own feed, things like chronological order, filtering, etc.
Well, there's two things here. One, typically executable code is packaged in a file along with other content, otherwise, the OS doesn't know that the contents are intended to be executed.

The broader problem is, if you could somehow work around that... what are you going to _do_? You need OS-specific code to read and write files, to display things, to get input from the keyboard/mouse, to talk to the network. It's not like Ye Olden Days where you can just write directly to the display memory and have things show up, the OS controls your access to all of the hardware. An OS-agnostic executable can't accomplish much on a modern PC.
I've spent long periods in the zero-tourism parts of some developing nations, and from an olfactory perspective (among others) the countryside is always infinitely preferable to big cities.
I'd suggest you not minimize, disregard, and reinterpret criticism, especially if it's repeated and widespread. It's better to learn from criticism than to try to twist it into something else (into something you think you already know and can control). The latter comes across as disingenuous and only makes the (already obvious to everyone else) problem worse.
Comes standard with Rust
IMO a lot of the problem is simply that powerful players (eg. Intel) had a vested interest in tying things to the platform, and the megaliths we've built on top all assume this construction, so even if there are clear ways in which things can be done better (there are), you'd have to reinvent the world to do them. Fundamental innovation is really difficult, and OoO CPUs avoid the need for it.
I'm the maintainer of one of the affected SAML libraries.

People need to stop using SAML. This needs to be a priority. A little background, for those who haven't had the displeasure of working with it:

When a user wants to log into an application (the "Service Provider"), and is required to SSO against an "Identity Provider", the Identity Provider basically generates an XML document with information about the user, then signs that document using a thing known as an XML Digital Signature, or XMLDSIG.

When you think of "signing" a document, normally you would serialize that document out to bytes, apply your signature scheme over the bytes, then send along both the bytes and the signature. But for reasons which are irrelevant to modern implementations, XMLDSIG prefers to stuff the signature metadata back inside the XML document that was just signed. Obviously this invalidates the signature, so you also inject some metadata instructing receivers on how to put the document back how it was. There are several algorithms available for this. Then you ship around that XML document. Basically means that when the Identity Provider receives one of these documents it needs to:

1. Parse the XML document (which cannot yet be trusted)
2. Find the signature inside the document
3. Find the metadata about what algorithm(s) to use to restore the document
4. Run the document through whatever transforms are described in that metadata (keep in mind that up to this point the document might well have been supplied by an attacker)
5. Serialize the transformed document back out to bytes, being careful not to touch any whitespace, etc
6. Verify the signature over the re-serialized document

If all of this succeeds and was implemented perfectly, you can trust the output of step 5. Ideally you should re-parse it. A common failure mode is trusting the original input instead, so be careful about that.

Obviously this is a crazy approach to one of the most security-critical parts of an application on the internet, and it breaks all the time.

Unfortunately people persist in using this fundamentally broken protocol, so huge thank you to the team at Mattermost for their research in this area.
A deep dive into the fluids that are revolutionizing the data center industry
The other thing this scheme gives you is a unique image per customer, so you could use it to trace illegal copies.

When I worked on some expensive emulator software 22 years ago, floppy protection wasn't appropriate but I suggested to the boss that we use the order of linker symbols in the main executable to encode the customer's serial number.

I guess it was a No because they wanted to use a standard duplicator, but also piracy was pretty well deterred by the 486 daughter board you needed to run it :)
> The fact that the U.S. government could so easily hobble the world’s largest smartphone maker and 5G infrastructure supplier in less than one year is indicative of the fragility of China’s highly centralized high tech sector. China’s electronics industry relies on U.S., Taiwanese, South Korean, and Japanese suppliers for many key components, but the most strategic of strategic technologies is the microprocessor. And despite years of strategic investment, China has (so far) been unable to master the production of these highly specialized but utterly ubiquitous computer chips....

> The only serious Chinese rival to these advanced U.S. chips is the HiSilicon Kirin 9000, designed by Huawei’s own in-house “fabless” chip-design subsidiary. In the arcane lingo of semiconductor manufacturing, a fabless chipmaker is one that lacks its own fabrication facilities, known as “fabs” or “foundries.” Until this year, Huawei’s HiSilicon chips were actually made by Taiwan Semiconductor Manufacturing Company, but tightening U.S. sanctions put an end to that. Broader U.S. export controls on chip design software and foundry machine tools mean that Huawei now has little chance of developing an advanced fabrication capability of its own. As a result, the Kirin 9000 is effectively stillborn.

I think the headline is misleading. It hasn't succeeded yet, but that doesn't mean it's failing. I mean, by this standard, the US is also failing in this exact area, because Intel and other US chipmakers have fallen behind TSMC. Also, I think articles like this might re-enforce dangerously overconfident attitudes in the West: focusing on your few remaining strengths is a great way to distract yourself from the need to reverse your own stagnation or even decline.

If anything, this is a wake up call for any nation that has allowed globalization to make it dependent on supplies from countries that are not politically aligned with it.
fyi, I am not sure why but you will get downvoted to oblivion for asking this very reasonable question.

Obviously it is a bad idea.

You as IT head: "Hi Managerial members! Can you approve my budget increase for CockroachDB?"

Them: "Um ... WTF?"

For whatever reason though, if you point out this obvious ramification of naming something meant for B2B a really stupid name, you will get attacked and downvoted.

IDK if it is just because people brought it up before, or CDB employees brigade it or what, but that is what happens.
As an aside, I used Amtrak to travel from Rochester, NY to NYC and it was totally weird when I asked people in Rochester (which has a population of about 200,000) for the train station. Most people literally didn't know where the train station of their city was! And it turned out to be as small as a regional rail or European sub-urb S-train stop. Only two platforms with no people on it.
I wish I knew all this earlier this year, so I'd be writting different thing as my thesis

Great explaination tho.
Yes, that’s true now, but that really got going after YouTube used the DMCA to beat some copyright lawsuits, most prominently by Viacom.

It became obvious to big copyright owners that they would get more if they played ball with Google instead of fighting them in court.
Covid of course has caused all sorts of issues but that’s an odd thing to find utterly painful compared with everything else. There’s always next year.
I’m working on exactly that: InstaRoom, an iOS and Mac app to do this; you can check out the landing page and leave your email for early access https://instaroom.me
Millions of videos purged from Pornhub amid crackdown on user content
Maybe they think Discord will provide an example of proper corporate behavior, so they'll have answers for the "but we have to make money somehow!" and "everybody's doing it!" canards.
The main reason we started maintaining this library of models is to capture that human judgement in a box easily accessed by others without the time or resources to develop it on their own. Some of them are goofy (like choosing stocks based on what r/wallstreetsbets likes), but most of them just seek to remove the need to rebalance, check indicators constantly, or code your own human judgement into an algorithm.

The value here we think is mainly the transferability of others skills and strategies, and removing the grunt work.

By getting in and out, do you mean in a physical sense (as in large institutions front-running sell orders, beating retail), or in a technical sense (identifying the ideal time to enter or exit a position)?