skysight-inc/HackerNews huggingface dataset:
Personal data of ~273K buyers of hardware crypto wallets exposed in public leak
I love my Zojirushi fuzzy logic rice cooker, mainly for the keep-warm. I can put several cups into the cooker and eat off it for several days.
Also, yes my cooker has a Scorch setting.
> To reduce coupling, you increase batching. Instead of one event per interaction, do ten, or fifty.

If you can do that it makes your previous argument, caring that an interaction takes 50 cycles, basically irrelevant.
The issue here is that insurance doesn't actually solve the problem. Auto insurance doesn't get people to drive better, because a car accident can kill you, which means that all the people driving like idiots are doing it because they already don't think they're going to get into a collision. And you'll notice that they all still drive like idiots even with insurance, possibly more so because of the moral hazard.

All auto insurance really does is make it so that when some idiot with no money hits you with their car, there will be somebody to pay for the damages.

The problem with doing this for computer security is that if you don't put the liability on the company then there is nothing for the insurance to cover, but if you did then it would bankrupt the insurance company.

Imagine one of the vendor's clients is a pharmaceutical company and the attackers get access to their pre-publication research files. That could be ten billion dollars in damages. For one client. Imagine five of the clients are pharmaceutical companies. The other clients could be financial institutions, cloud providers (who would in turn have their own affected clients), movie studios (and now all of the next year's movies are on The Pirate Bay prior to release), etc. All at the same time, for a single security incident.

And how do you put a price on the sort of national security threat it poses when foreign governments gain access to US government systems? Who do you even compensate for that?

This isn't the sort of problem insurance can fix.

Maybe what we need is something like publicly-funded security audits of popular software.
>Requiring that we deal with every single one of those problems simultaneously else we shouldn't bother with any of them doesn't seem productive.

Then deal with the domestic ones first, the ones we have the most control over. People only care about these issues when the solution is "punish the country," a solution that likely causes more suffering than it stops.
I'm not sure I want the internet to be as widespread as it is today. I certainly don't want it as commercialized and as centralized as it is today.

I also take issue with this whole dumbing down of technology that's been happening over at least the last 10 years and shows no signs of stopping. It's understandable that there are certain business entities that would prefer to be in possession of as much money as technically possible, and to achieve that, they need to give their products into as many hands as possible, which means said products have to be "easy to use", aka don't require reading manuals and understanding what the damn thing is actually doing.

Computers and other computer-like devices like smartphones are, ultimately, tools. As are the programs they run. And tools are meant to serve and empower their end user. 99% of the IT industry, unfortunately, would rather like them not, because that clashes with their own interests they for some reason are allowed by the society to have. That's all I have to say.
have you made money?
Yeah the "optimize for years" part is interesting... Supposedly the derivatives technique (re-popularized by a 2009 paper) will build a more optimal DFA directly, rather than building the NFA first, converting to DFA, and then optimizing the DFA.

I put a bunch of links and quotes about that here, including nascent implementations:

http://www.oilshell.org/blog/2020/07/ideas-questions.html

Also related: http://www.oilshell.org/blog/2020/07/eggex-theory.html

About Unicode, this derivatives project (with video linked in the post) appears to be motivated by Unicode support (though I don't recall exactly why, something about derivatives makes it easier?).

https://github.com/MichaelPaddon/epsilon

https://github.com/MichaelPaddon/epsilon/blob/master/epsilon...

If anyone wants to write a glob engine for https://www.oilshell.org/ let me know :) Right now we use libc but there are a couple reasons why we might have our own (globstar and extended globs)

Trivia: extended globs in bash give globs the power of regular expressions, e.g.

[[ abcXabcXXabcabc == +(abc|X) ]] ; echo $?
0

where +(abc|X) is equivalent to (abc|X)+ in "normal" regex syntax, and == is very confusingly the fnmatch() operator.
I cannot comment about MSG in Chinese food but I can provide my own experience with MSG. As a kid in Bangalore I used to eat a lot of instant noodles that had MSG in the seasoning packets. One time I got a very bad case of food poisoning and ended up in the hospital for 5 days. At the time, the doctors said the food poisoning was due to MSG. The circumstances being what they were, I doubt the doctors were influenced by American systemic racism or racism exported from America. (They could well be just plain home-grown racist against the Chinese since Indians are generally not very friendly towards Chinese, but again, I didn't eat at a Chinese restaurant and the instant noodles were an Indian brand so...)

All in all, I am inclined to believe that MSG does actually have negative effects. However, I think one can build a tolerance to it, because I regularly eat it at restaurants and I haven't had any problems with it since that time as a kid.
I’d really like to see something similar, but with a second voicing added. Although I have no idea if syncing two balls is possible, so they’d have to build the second voice into the boards themselves.
We can start with ourselves by not sending military aid to Israel.
Not that I know of, it just seems like one of those frameworks that exists and there is some online chatter mentioning it but I have no idea who actually uses it. If it turns out to be good you should let people about it!
> The best DSP coprocessors generally use a VLIW instruction set and no amount of extensions will turn RISC-V into that.

Please check P extension.

> The best graphics coprocessors use a SIMT instruction set and no extension will make RISC-V into that.

Please check V extension.

> Hardware design doesn't have such nice abstraction layers and while IP blocks exist designing one has a certain irreducable cost which won't be reduced that much by using a RISC-V design.

RISC-V is still in its early stage, but all these concerns have been considered seriously. The foundation hosts many different Task Group to tackle all possible needs.

> But the performance penalties of trying to use a general purpose ISA, even one with extensions, are very real and won't be enough to make the savings worthwhile.

Only time will tell.
Not necessarily. But panics could be an indicator of failed exploits.
Would you say that the comparison to the A13 from this article is fair? https://www.notebookcheck.net/HiSilicon-Kirin-9000-Processor...
It looks like what you wished your high school experience should have been. It should be run by adults whose goal is to foster positive interaction and educational content. Limit the grandstanding, social peacocking, cliques, information empty calories, and echo chambers. It should have a purpose greater than ad clicks or building a subscriber base so you can be an internet celebrity.
I forgot to add on my hypothetical that the Somalian government was protecting me. In which case it would be valid for people to be calling for sanctions let alone revocation of state aid.

Iirc, hacking team dissolved or greatly downsized after their leak. I do not recall any cases against them for their export license to be revoked. I'm sure if the Italian courts rejected the case baselessly then there would be consequences (maybe further legal action/sanctions on specific individuals) as Italy does not operate with the same unique impunity that Israel does.

The difference with Italy is that it does not receive state aid from the Americans. I'm sure if they were then people would be calling for cuts in a similar situation.
Sorry, trouble parsing, are you saying the Solarwinds breach is not the work of one of those adversaries?
A lot of the programmers I think are "on the spectrum" seem to have a real blind spot for the possibility that other people lack the knowledge they have.

If they know something, they just assume I do too.
> We work to make money to eat to have energy to have leisure time to play.

So what do you think about the idea expressed in the article, that play is fundamental to survival? You stated a thesis that seemingly argues the opposite. The article spends thousands of words to support its reasoning, now I’m curious to know yours.
Rather bizarre celebration.
It’s not clear if this was involved in the exploits mentioned here.
> maybe they could work a day job (stereotypically waiting tables) and still make enough money for a studio in a bad part of town.

I respect this; they decided what's important to them, and I think this is a fair situation to be in.

> It doesn't seem like that's the case today

While I agree, at least in the Bay Area, I'm not super sympathetic to this because, and I'm guessing here, I bet a lot of the people who got priced-out or evicted in the last decade+ voted for supervisors in favor preservation and anti-landlord policies. There weren't artists saying "build new luxury condos so I'm not competing with engineers for a run-down studio."
iPhone backup: a case of software incompetence
https://github.com/vijishmadhavan/ArtLine
I think dtrace has the same problem, i.e. it's pretty tightly coupled to the exact functions / trace points in the kernel. A different kernel can break a dtrace script, although I think their code changes a lot less than Linux does.

It seems somewhat unavoidable, if the goal is to introspect the kernel at a very intimate level ...
Gnome 3 went the wrong way, pushing for apple aesthetics without apple functionality.

I mean on apple, I can launch a console and through every upgrade still get the "same" console back, usually with some scrollback for context. That was lost entirely after gnome 2.
I mean that's a "minor" thing but as a developer that cost me wanting to do any further development, which I'd been working on getting into. And then there was needing to run master versions of everything and not distribution versions, which made things amazingly disruptive to work on a computer that also had to do other tasks (eg : job work).
This has since gotten reachable if you have really giant hard drives, but that's budget too...
anyway the walls were so high then I walked away, and nothing has suggested they've gotten any easier or any more worth climbing.

Rule 1 for any UI design team is don't copy Apple. (or if you do, justify it. "because Apple" isn't good enough. Even Apple isn't sticking to this).
Bill Gates, Warren Buffett, Charlie Munger on Bitcoin (2018)
> However, I think one can build a tolerance to it, because I regularly eat it at restaurants and I haven't had any problems with it since that time as a kid.

It is much more likely that:

1. You haven't had any problems with MSG ever, including that time as a kid, just as every experiment ever done on MSG would suggest;

2. Your doctors were influenced by coverage of MSG in the medical press outside India.

Stupidity doesn't have to originate in racism.
I'm biased but it's pretty good and actually has a community behind it.
It was awesome when Facebook deleted NSO group employees personal profiles. And then they whined about it. The silver lining of Facebook owning WhatsApp.

I hope more organizations do this.

https://arstechnica.com/information-technology/2019/10/faceb...
Do you ever use the phrase "long time no see"? It is treated as innocuous today but it is rooted in a mocking jest at broken English spoken by Chinese immigrants. The funny part is that I know Asian Americans who say it without knowing where it came from. You can be misinformed about something that is fundamentally racist.

The twisted MSG belief system is just a less overtly racist version of "Chinese restaurants serve cat and dog". i.e. This ethnic food is not trustworthy and worthy of derision, as are the people by extension.
Yeah, not seeing it either. The article says this:

"In my current fuzzy-logic cooker, however, I tell the machine what kind of rice I’m using and how long it has been soaking. It takes that information and decides what temperature it should reach, and for how long. Generally using what are essentially if/then statements, it can fine-tune the process. For example, it can take into account the surrounding air temperature and turn the heating element up or down to compensate."

At best, that's a rules engine. Nothing fuzzy.
SecurId as implemented is sadly TOTP done right for the most sensitive accounts of very large organizations which are the cash cows to financials.

They don't want cloning by copying a QR code. Each employee must have something they would have to physically share or it's not better than a longer password.
They don't care if one employee is locked out for a week.

I think U2F solves all the problems if the bank sends the pre-registered key, but standard TOTP isn't going to work.
Do What You Know
For anyone curious in what sense ncmmcm's ring buffers aren't lockfree data structures, we had some discussion about their specific details earlier in https://news.ycombinator.com/item?id=25264023
> We were unable to retrieve these binaries from flash memory, as we did not have access to a jailbreak for iPhone 11 running iOS 13.5.1.

It’s ironic that the exploit is able to plant arbitrary code on an up-to-date device and yet the owner of the phone can’t introspect their phone to see it themselves because they don’t know how to bypass the protections :/
There is/was a trope that an average Apple user only uses Safari so there's no need for this or that feature (starting from when Jobs was against having an appstore for the first iPhone), that's the only way I can think of that this statement is correct.

My laptops serve 2 purposes - first, the actual laptop that I use for travel with no monitor, and can use for work, photo processing, movie watching, gaming or whatever with some compromises. For that, 11" is utterly useless; it might have been acceptable in 2005 for checking something online, reading or sending an email, but these days a phone can do that so there are literally 0 uses cases for an 11" laptop imo.

The other use case is a portable desktop that I always plug into a (27-38") monitor for serious work or gaming; for that MBA is woefully underpowered. I used to work for a company where you could choose if you get an MBA (mostly salespeople/PMs/etc.) or an MBP (mostly engineers); there were always jokes about how you could immediately tell who never actually does any work ;)
What were your expectations that have been unmet? Which projects were you excited about that have been untouched?

I'm extremely impressed with the progress that IPFS has made - I'm an active (daily) user, and have implemented archiving systems with their tools. Clusters and pinset management in particular have improved substantially, browser support for ipfs:// natively has started to roll out - to name two things I've worked with recently. The libp2p project itself is another example.
My father would play Vince Guaraldi's soundtrack for ACBC every fall and winter°, on his big tower speakers that were older than I was, loud enough to be heard around whatever house we happened to be living in at the time. Subsequently, I cannot imagine the holiday season without Charlie Brown (or at least the music). My first year out of college, I didn't have a tree and there was no family home anymore, but I was able to pull this up on YouTube and feel the spirit for a moment.

°The title is a misnomer as it includes a couple of tracks from the Halloween and Thanksgiving specials, including the wistful, haunting Great Pumpkin Waltz
> Are we also being racist? (Against whom?)

I mean, it wouldn't be at all surprising for Koreans to be racist against Chinese, unless you take a specific American perspective in which Koreans and Chinese are the same thing.
Exposed? We knew NSO was selling exploits to authoritarian governments for years. Pegasus is nothing new.
It seems worth mentioning that the code actually executing in the kernel, when it is running your eBPF, is native machine code, ahead-of-time compiled from the bytecode program you gave to the kernel.
Nah, that means adding unnecessary adornment. "Gilding" is explicitly about form. It would be a stretch to use that for a change that worsens something's substance.
Yeah, but you can’t put an end to violence, and violence serves an incredible biological purpose. Racism will never cease to exist, nor should society try to force it away, since that will only make things worse. Perhaps racism even serves some meritable biological purpose.

Come to think of it, racism is like a social heuristic. Antivirus software uses heuristic analysis to quickly group certain classes of malware based on code similarity. In the same vein, humans do it to categorize people, based on slightly fuzzier logic.
If you program on Windows you should check out Event Tracing for Windows(ETW). Similar to eBPF, ETW is a logging framework inside Windows kernal. Microsoft.Diagnostics.Tracing.TraceEvent[0] is a nice nuget package for logging and analyzing ETL files.

[0]https://github.com/microsoft/perfview/blob/master/documentat...
I've been using Shadow for the past few months as I've been on the road and didn't want to drag my gaming PC with me. Overall it's been a great experience. The biggest downside for my use case is that it's very sensitive to internet quality- internet that's totally fine for streaming video, browsing, etc will cause games to be unplayable on shadow since you need such consistent throughput and latency. Related to this, I haven't gotten USB passthrough (or the joystick forwarding) to work at all really, and I'm guessing that's also a connection quality issue.

For your use case where you're using it at home to downsize I think you'd avoid all of these problems, assuming you have good internet at home.
A more plausible alternative explanation is that that way the city doesn't have to continue to pay maintenance for the network.
I'm a little astounded that on an article talking about the hoax pejoration of MSG, you describe a lifetime of eating MSG that includes a single instance of getting food poisoning and therefore promote the notion that 'MSG actually does have negative effects'.

We wonder why it's so hard to counter the anti-vaxxer movement despite the initial studies that started them being disproven; this is such a perfect parallel.
I don't know about these precise numbers, but ~57% of autistic people have an <85 IQ (cf. 16% in general population), and somewhere between 25% to 50% are nonverbal. So 90% may be too high, but it seems very likely that a solid majority has profound difficulties in life.

edit: my source is the CDC(https://www.cdc.gov/ncbddd/autism/data.html) for IQ and this paper https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3727194/ for proportion of nonverbal autism.
Ballmer let old WinMo hang around too long, was too arrogant to take Apple seriously, and thought MS could just bully their way into consumers' hands like they did PC makers. By the time WinPhone came around, it was too late, iOS and Android had too much of a head start.
Of course, the people writing the Memoji code and the people doing security work on the app are frequently different people…
This looks great.

Do you have plans to support selling dynamic content, like this?:

1. User clicks "buy now" and pays.
2. Flurly sends a request to an API on the seller's server with the user's info and an auth key.
3. API responds with a file or text.
4. The file or text is given to the user.

I would like to use this flow to sell license keys for a minimalist SaaS product I built. I would want Flurly to connect to my webhook URL to generate a new license key for the customer.

This process could also be used to deliver personalized, watermarked ebooks.
Probably only a few user that require sustained high speed transmission will want to do this.

The equipment ISP provided isn't very powerful and will likely overheat and degrade the connection if you use it so violently.

In most case I guess people just plug their own router after the GPON and don't bother what is the GPON doing.
That is teenage social media nonsense, some combination of laziness and a desire for attention. If you aren’t willing to hire an attorney you aren’t taking the problem seriously.
Chargeback is significantly an issue due to scummy business practices in use by enough of the websites. $1 trials that auto-renew at $100 per year and other such predatory credit card pricing tactics. There’s a significant percentage of the industry that is reliant on these tactics to survive and it results in the huge difference in credit card chargebacks compared to other industries.

That said this is a situation that is slowly improving thanks to competition. However this is likely going to be a stain on the porn industry for decades after the problem is mostly gone due to the way the financial industry does risk analysis.
This is kind of cool. Does it work with webflow?
> There is also the issue of continuous monitoring and upkeep. Not to mention someone has to worry about servers going down, hard drives going bad, backups.

Monitoring and backups you configure once and then they're automated. Disk failures happen maybe a couple times a year and take five minutes to stick in another disk. None of this is particularly labor intensive.

> Would any one person know how to configure and maintain everything above?

It has long been a fact of life in companies small enough to have a single-person IT department.
Stop projecting american experience with racism towards other nations, please.
Hanging around on Reddit's /r/fantasy, I see a surprising number of people talking positively about self-published fantasy books. The coupled I tried reading—stellar Goodreads ratings aside—were utter garbage, but I bet there are some that are much better. Seems like some of these books (including the ones I disliked) are enough to earn the authors a living. Fantasy is a genre well-suited for series, so once you have an initial audience, you can rely on some level of recurring revenue for each subsequent book.

Publishing a book like this seems way more attainable than getting even a low level of success through traditional publishing a couple decades back.
The NSA just released the preview version of the Ghidra Debugger
Maybe he means cases where a lock free queue can't implement batching easily. Batching by making the messages themselves contain batches of messages makes them variable sized which can cause less efficient allocations etc., whereas with a lock you can hold the lock, insert N same-sized messages, release the lock.

If it is done as a linked list there may be good multiple insert options, but then you have a linked list and all the extra jumping around memory that involves compared to a ring buffer.
Killing off Symbian in a speech while shipping more phones than any company on earth was, generously, not part of any strategy but a horrific blunder, less generously, it was sabotage. I've got no love for Symbian, but when you're selling that many phones, you phase it out, you don't announce to the world that there's no reason to buy the phones you're still trying to sell.

Porting Symbian UI to Qt meant that they could at least merge surface-level stuff and have core apps that ran on both Maemo/Meego and Symbian, then retire Symbian when no one would care or notice.
I don’t. I’m not a psychologist.
Meaningfully voting requires more than just access to information though.

More information with less analysis of it will make less meaningful votes

There was lots of information about Brexit for example but a good portion of it was made up
Congress passes another stimulus bill