skysight-inc/HackerNews huggingface dataset:
It seems you missed an opportunity (BTW, is that what they call "content marketing"?).

Had you left your VM running a little while longer, you might've noticed something else in your Netflow data: yet another service calling home to Canonical twice a day.

I wish I were joking about this but... the (likely) "primary" reason for this is so that they can show ads to users when they log in -- ads for things like TV shows or software for other operating systems or, sometimes, just a "fun fact".

I can't really say it's the only reason, however. With all of the system information they're getting off of each host, there's now several different things they can use it for and, of course, that provides them with even more motivation to keep doing it!

This isn't a new thing, though. In fact, people have been expressing their "unhappiness" about it to Canonical for a few years now [0,1,2].

Unfortunately:

- it's still installed by default

- it's still enabled by default

- they've actually increased the amount of system info that they're collecting [3]

- it's installed as part of the "base-files" package -- an "essential" package which cannot be removed!

- "it's a 'feature', not a bug" (so we absolutely should not expect it to get removed)

- apparently, a 42 line MOTD [4] is perfectly acceptable

I suppose there's one "positive" thing I can say about it: at least they're using TLS to encrypt the data over the wire. :/

--

If you want to disable this spyware on your Ubuntu hosts, change "ENABLED" to "0" in /etc/default/motd-news:

$ sudo sed -i -e '/^ENABLED=1$/s/1/0/' /etc/default/motd-news

When executed, /etc/update-motd.d/50-motd-news checks if "ENABLED" is set to "1". If not, it exits without calling home.

50-motd-news gets launched by motd-news.service which itself is activated -- twice per day -- by motd-news.timer. Since I like to be thorough, I recommend running a few more commands (as it's impossible to know that Canonical won't change any of this in the future!):

$ sudo systemctl mask --now motd-news.service
$ sudo systemctl mask --now motd-news.timer
$ sudo systemctl clean --what=state motd-news.timer
$ sudo rm -f /var/cache/motd-news

That should do it. If you're rather not have to worry about something like this in the future, you may want to consider replacing Ubuntu Linux with Debian GNU/Linux.

--

[0]: https://news.ycombinator.com/item?id=14662088

[1]: https://old.reddit.com/r/linux/comments/98ctgu/ubuntu_server...

[2]: https://dev.to/fivnex/open-letter-to-canonical-ltd-a1k

[3]: https://bugs.launchpad.net/ubuntu/+source/base-files/+bug/18...

[4]: https://joe.schafer.dev/chatty-ubuntu-motd/
Charging the individual Europeans / middle eastern people involved, or the nations?

In the latter case, we can probably start collecting our reparations for the Barbary slave trades from the Arabs, and probably even make money! (Reparation arbitrage).

I accept petrol or petrodollars. Check my bio for the paypal link.
Everybody seems to agree it is an LLVM bug, but "UB" is overloaded. There is no "C/C++ UB" in the original program, but the optimizers can introduce "LLVM UB" in IR form, which then results in something substantially equivalent to what the mock transformed source codes shown for illustration would probably be compiled to. And introducing UB when there was none in the source code means there is a compiler bug.

On your remark about char*, it is an universal type alias, but I don't think it is an universal provenance alias, sadly I don't think such a thing even exist de-facto, and it will not even exist more formally when considering the PVNI-ae-ud model that is being cooked. Probably unwise to lean as usual on the aggressive optimisations side without even proving that the perf impact is that much interesting, evaluating the security / quality and education impact, if you ask me. And even more problematic without even providing an escape hatch (1). But I know very well that state of mind has just won for now and I have to cope with it. Even more C programs will be retroactively declared completely incorrect (and not even just not-portable) because the compilers went too agressive at one point and the standard just standardized their aggressiveness instead of telling implementers to just stop being crazy.

(1) beyond, for some potential programs that would be otherwise impossible to express in C/C++, exposing all the pointers. Well exposing all the pointers would be cute but the result would not be that much different from not having that kind of "opti". Plus you would have to actually expose all your target pointers, so it is not really source compatible with unmodified existing codebases. So a per-access or at least per-pointer-doing-the-accesses universal provenance alias is needed to get a serious escape hatch.
I'm also not extremely sure we can actually implement a memory allocator in C or C++ today (with whatever the modern compiler are "optimizing" with their partly informal provenance rules), nor that we will be able to with PVNI-ae-ud (broadly same thing except slightly debugged). (Or maybe it will merely constrain the implementation? not sure anyway)
What year is the correct cutoff year where the effects of slavery should be ignored?
Chalk it up to difficulty of producing the desired outcome + second-order effects ^_^
Critical Golang vulnerabilities revealed;SAML authentication bypass possible
> In this Part 2 of our two-part Apple privacy series, we share a breakdown of iOS14’s privacy features.
iOS14 addresses various privacy pain points, including but not limited to notice, consent, and data minimization. We’ve summarized some of them below for startups to take inspiration from in designing their own apps and other products.

Part 2 is at: https://medium.com/privacy-technology/ios14s-privacy-labels-...
Does LinkedIn have some children among its users? Sure.

Is LinkedIn targeting those users with its product? No.

Does LinkedIn have a business strategy surrounding those users? Probably not.

Is the way that LinkedIn interacts with these users going to be illustrative of larger industry trends? I doubt it.
Sounds like a third party might be able to improve the situation by providing escrow.

With their first bugs, researchers are entirely unknown quantities to the company. Stating, "I have a critical zero-day, but I won't tell you what it is until you pay me $BUCKS," clearly won't work.

A reliable escrow service, to whom the researcher can provide the exploit and the company can provide $BUCKS, offers insurance to both parties. If the exploit is not as described, the researcher loses the exploit entirely and gets no $BUCKS, but if the exploit is as described, the company cannot renege on the deal.

(Edit, addressing the direct question more-clearly: perhaps what is necessary to avoid the perception (and reality) of extortion is the emergence of accepted professional understanding for assessing the value of exploits. Without such a system, there will always be a strong incentive pushing people in the direction of blackhat work.)
>sites I try to avoid (malware, etc.)

Is it still a thing? What malware can a pornsite contain that cannot be uploaded to or linked to from a regular smaller niche or bigger broader site? Do you download and run hotgirls.exe dialers or what?
>> I'm pretty sure what's going to happen is the law will make it clear that porn generated from your likeness and distributed without your consent is as illegal as revenge porn. Then a bunch of people who did it anyway will go to jail and that will put a strong chilling effect on the whole thing. In most cases, the people with the motive an ability to make machine-generated porn of a particular person will be relatively easy to find.

> I just find this incredibly difficult to believe, unless this "ban on user content" extends to a ban on general computing. And maybe that's where we'll end up, but I think that's a much more malicious result than generated porn. Or maybe anonymity will disappear online, which I find fairly scary, but is another clear thrust we're seeing.

You're not thinking about this clearly, and are veering off into overreaction and catastrophizing.

Machine-generated porn of celebrities is far harder to police, because they're celebrities. There are thousands, maybe millions, of people who have the desire and technical means to make porn of them.

For regular people, the story is different. For the most part, no one's going to want to make porn of some random person they don't know. The only people with an interest in making or consuming machine-generated porn of a particular normal person are people who have some connection to them, which is a far smaller group. That makes enforcement possible with regular investigative tools. Enforcement doesn't even need to be 100% to be effective at creating a chilling effect, just make examples of some bitter and angry exes and creepy stalkers.

Celebrities are also a pretty rarefied group. Once this problem starts affecting everyday people, there will be more electoral pressure for dealing with it legislatively, just like with revenge porn. At least some cases of "leaked celebrity sex tapes" would probably count as illegal revenge porn today.
That is kind of weird, since Debian has already fixed this issue, with public patches, for all the affected versions:

https://security-tracker.debian.org/tracker/CVE-2020-1971
That's not an ideal comparison. Chess is 90% tactics, whereas development job isn't 90% competitive programming.
I'm pretty disappointed with the way this has unfolded.

For those now familiar with ReScript, ReScript started as "reason" an alternative syntax for Ocaml. Recently ReScript was created with a sytnax more similar to TypeScript than "Reason". In addition, there is a fork of OCaml for compiling to javascript that used to be branded as "Bucklescript", but now it is called "ReScript" as well.

So now as of 12/14/2020 there are three Ocaml syntax versions in use:

Ocaml,
Reason (Reason 3.6, last version available for native code)
ReScript, (~Reason 4, only available for javascript compiler fork, some sytax present in Ocaml/Reason has actually been removed with no equivilant in the grammar)

I am not sure who benefits from this, Ocaml is a serious language that will never be as simple as a dynamically typed language. I am not sure who this is supposed to be helping. It seems to me that things were more clear a year ago when there were just two syntaxes available. In addition, it now takes a relative subject matter expert to disipher what is going on, which i think is the exact outcome ReScript was trying to avoid.
ITT: Lots of folks misunderstanding correlation. =)
Would allow you to make an app that steals all your info and release it as if it was the latest app from instagram.
The video was a livestream of the house as multiple people changed colors / settings of the lights. Maybe HN broke the Atari server though.

Here’s what it looked like: https://twitter.com/humanclock/status/1337926809166331905
> Western Design Center (WDC, no relation to WD) who supposedly owns the rights to produce them.

The founder of WDC, Bill Mensch [0], was one of engineers from the original 6502 team at MOS Technology.

[0] https://en.wikipedia.org/wiki/Bill_Mensch
Maybe it was a proxy for IQ back when leetcode type interview questions (and websites to help you prepare for them) were less popular. Now that they are so common, its just another specific skill that candidates can grind, so it measures preparation as much/more than IQ.
From 2011.

“... suggests that it is possible to determine the self-expressed political attitude of individuals, at least for the self-report measure we used, based on structural MRI scans.”

Seems big, if true. Has this been replicated?
In the linked video, Peter Norvig attaches a big caveat which is that this analysis was done on people who were hired and therefore met Google's various other hiring criteria. So the context isn't random people off the street, but rather that among people who are already (presumably) competent at what they do, winning coding competitions correlates inversely with job performance for some reason.
Computer gaming is the media-driven art form unique to our generations - Boomers, +. TV was the WWII generation, radio and movies before that, music and literature way way before that. I hope people start recognizing that. The humanities are moribund in part because the humanities are ignoring facts like this. Computer games are at the preIliad and Odyssey stage of development as an art form. So much to see and do...
There are all kinds of rights that have nothing to do with what people can do on their own property. Read almost every amendment - many have to do with rights we have places outside our own personal property. The entire point of this discussion is about what we are allowed to do in places nobody "owns" - i.e. places the govt owns - because the govt's purpose is to serve the people after all. Your argument is hopelessly broken here. What if the government told you you didn't have the right to leave your property - even to get food for yourself. Too bad for you - you are only free to get food on your own property. You probably wouldn't like that I suspect.
It makes you wonder what AI's purposes are worked on to be. Nothing good if this is the standard.

However, I expect professional companies to allow employees to take down inappropriate content. It's tough to navigate stupid though, because they tend to drag everyone down. Social media giving voice to evil, is cause for concern.
From the order "Identify each Social Media and Video Streaming Service provided or sold by the Company". It doesn't seem to be limited to only Social Media sites, it also includes any "Video Streaming Service". The broadest interpretation I could come up with from this statement also include the cloud video streaming/transcoding offerings Amazon provides.
> The latter though, I think it's too early to tell, especially since we've seen recently how certain hackers have explicitly started putting bait signs from other nation-states to misdirect.

Has there been any indication at all that it was Russia in particular? A lot of people believe it was a state-level attacker based on the sophistication of the attack, but even conceding that doesn't make Russia the only alternative.
> benificiaries are identified, damages are calculated, and assets change hands

The assets changing hands will be the federal government paying descendants some sum of money taken from its tax base. And federal taxes are paid by everyone, even those of us whose families arrived after slavery and Jim Crow was abolished.

This is why some people are adamantly against reparations.
Software Engineering Daily is a good place to start.
I don't think I believe that. Firstly, in order for that strategy to be effective, Tylenol's deadliness would have to be widely known, which I don't think it is. Secondly, the "punishment" is that you kill someone.
I think one of the biggest challenges with modern social media is the ability for anyone to immediately engage in "broadcast" communications.

Absent the centralised media of old, broadcast simply wasn't an option in the past - at best you could try to multicast by shouting in the corner of a bar at as many friends as you could muster, or stand in the street and talk to groups of people.

Unicast was scalable and easily accessible - just pick up the phone, or write a letter. But the average person probably couldn't gain access to a significant multicast group without first gaining the "backing" of their group. And they could then attempt to grow from there. Clearly that's far from perfect as echo chambers are an issue today as well! But it does feel to me like the lack of friction, coupled with nearly instant access to a global, un-namespaced platform, and the ability to broadcast, has just removed a little too much friction. I guess the big challenge is working out how to add enough appropriate friction to improve the situation. Or do we need to revert to a more namespaced internet again?
Talk to you doctor before trying this, but it is usually OK to take both acetaminophen (Tylenol) and ibuprofen (Advil) at the same time.

They work in different ways, so using them together can let you stay well away from a harmful dose of either and still get better pain relief that taking a maximum dose of just one.

I somehow injured my rotator cuff, an injury normally associated with athletes but that I somehow got while sleeping?! With my doctor's permission, I did 1000 mg of acetaminophen every 8 hours and 400 mg of ibuprofen every 4 hours. The later was originally going to be 800 mg every 8 hours, but I asked if I could do it 400 mg every 4.
IC masks are protected as of 1984 (mask work is essentially copyright for the die), but the 6502 predates that.

...and the copyrights for masks are much shorter than traditional copyright - only 10 years in the US: https://en.wikipedia.org/wiki/Integrated_circuit_layout_desi...
That's pretty similar to the arguments of why you should not have to pay part of your taxes because you don't agree with part of how it's spent. It might not have been "your" fault, but we all live in a society that bears the fault.
They are notable for being good (or lucky) stock pickers bullish on trendy futuristic tech.

They also have mounted an unprecedented marketing campaign that breaks away from typical Wall st old boy's club or stodgy retirement advisor style to masquerade as a tech company. Just compare: https://www.berkshirehathaway.com, https://www.youtube.com/c/Arkinvest2015/videos
"The Supremes" have long since failed the People of the United States and have proven all of Jefferson's fears about what the court would become to be true.

"The Supreme's" can not be trusted to protect the constitution, and because of their failure the constitution has more exemptions, and holes than swiss cheese
Yeah, I’ve noticed that too. Which is good cause SwiftUI has tons of potential.
More fun at -40 (the one time Canada agrees with the US): the snow on the ground squeaks when you step on it - and there's rarely any wind. And your car better have a tank-heater - plugged in at least 2 hours before you plan to leave.

I'm now in a milder climate, but still wear the thin hat all winter (e.g.right now). Alas, the thick wool lumberjack socks are missing from the stores.
> direct reparations are the best approach to resolving the continuing racism in America

This conflates two separate issues. One is about a financial debt owed to people. This is owed for forced labor and land thefts which continued into the 20th century. Like the OP said, for the most part this is well documented. Debts are repaid in cash or like goods.

Racism is a separate topic, which I agree should be approached differently.

Conflating the two issues is not helpful for understanding best approaches.

If you ask, many Black families will tell you about these thefts, which again are in the public record as title transfers.

Here's an example from the 20th: https://en.wikipedia.org/wiki/Bruce%27s_Beach . Events like this were common for decades in the 20th century. Even if you just limited to quasi-legal property theft via eminent domain, there's billions of documentable dollars owed and easily tracked. There's absolutely no reason not to give the land back to those families, or a cash payment for its fair market value.
You have accused me of arguing in bad faith twice in one post. This is insulting, not to mention against the HN rules ("assume good faith").

Clearly we disagree on whether a syntax change is minor. But first let me repeat the point I made that you ignored in between your accusations: it really is just syntax. Of the four examples in the second part of your post, if we assume defer is implemented like attribute cleanup and fix up the compile errors, your first and fourth example compile to the identical assembly code:

https://godbolt.org/z/n14z5q

https://godbolt.org/z/Ksq1rj

I would argue that the best solution is one you didn't present: move the "business logic" into a separate function, one that takes the necessary resources as arguments. This way you're no longer mixing up resource acquisition error handling with business logic, and the function that acquires the resources can use the nested if statement style (or any other style) with no downsides. No surprises here, it again compiles to the identical assembly code:

https://godbolt.org/z/b375E9

In my opinion the nested if style is better than using defer because it's completely linear with no backward jumps. But even if you disagree you can hardly complain about cleanup code being far from init code because the whole resource handling function is less than 20 lines of code regardless of what cleanup style you chose. It doesn't matter, which is why I argue that it's a minor syntax change not worthy of addition to C.
Biggest thing you need to do if you want to be able to transition in the future: Get your own domain and point it at your mail provider. Then you don't have to change your address when you change providers.
I see two problems with the solving animation - it is fast, and also you can't tell what the intermediate goals are. To your point about giving visual hints - I've toyed with the idea of highlighting the cubie that is being moved and the position it is being moved to. (One problem with this is when you are trying to re-orient a cubie that is already in its correct position.) Also, perhaps add pauses to delineate sub-goals. I think the best thing to do would be your slider suggestion, perhaps with markers along the slider indicating waypoints toward the solution. And, of course, make the slider bi-directional so that users can go forward and backward. As far as slider - I'm debating whether to use an HTML native slider, or create a cool custom 3D one using THREE.
Focus on coding competitions has negatively impacted my software engineering journey.

The only benefit is you are better at interviewing and they are fun to do but the cons far outweigh the pros.
"visit their homeland" - good luck marketing that. Would this go any better than if any American visited?
And Spotify.
Nx, Nest, Prisma, GraphQL Single Data Model Definition
> and made sure things were right.

Every coding competition I’ve participated in required correctness as a first criteria for basic acceptance, and then speed as a secondary scoring criteria.
Given that companies regularly struggle to evaluate performance well or even accurately, an equally valid conclusion could be “Coding and playing politics to be well-ranked by peers are negatively correlated”. Now the question becomes is coding or playing politics what you value more organizationally.
Knowledge does not equal wisdom. It's as simple as that.
"Chess is 90% tactics" is a pretty subjective statement
Disk, because Disc is for optical mediums
In my hiring for software engineers and architects I always consider coding/design skill to be merely a necessary condition - something you just briefly test for, mostly to detect b*llshit on the resume.

What I found is far more important are social skills.
Can the person work as member of a team? How do they respond to feedback? Or when something is hard? When they get stuck? How do they communicate a design? Rally a team around them? Deal with disputes? React to changing situations? Can they take the initiative or need to be told what to do? Etc, etc.

Together with actual coding/design skills - and with proper management - these are the necessary conditions. All my humble opinion, of course.
I already told you that's just a fantasy. There is clearly a strong opposition to that, to the point where it would never make it through congress. A real investigation is needed to separate beneficiaries from those who were uninvolved.
He’s not the CTO of Spotify, he worked at Spotify and he’s the CEO of a company called Better.