skysight-inc/HackerNews huggingface dataset:
3D objects are drawn using 3D triangles projected and interpolated on to the 2D screen (2D array of colors).

Classically, you draw the whole triangle, start to finish in one go. Interpolate the triangle, look up any colors from textures, do the lighting math, write it all out. Simple and straightforward.

For complicated reasons, it often actually works out better for current games on current hardware (games/hardware of the past decade) to defer the lighting math and do it in a separate pass. So, interpolate the triangle, look up the textures, write all of the inputs to the lighting math (other than the lights themselves) to a multi-layer 2D array of parameters (surface color, normal, roughness, etc...). Then later determine which lights affect which pixels and accumulate the lighting using only the 2D parameter arrays --without needing the triangle information.

The multi-layer 2D arrays of material parameters is called the "G-Buffer". I think it originally stood for "Geometry Buffer". But, the name has taken on a life of it's own.
Some links are not displaying properly.

https://www.newsy.co

Example sites using Newsy

https://www.dataloco.com

https://www.heystartup.com

https://www.getinfosec.news
EU and US are diverging on how to rein in Big Tech
Also, if you give zstd binary delta a try, we would be super interested in hearing the results you get! Especially around the tradeoff between compressed size, compression time, and decompression time. Opening an issue would be the best way to communicate it.
They're selling your data to everyone else. If authorities pay enough, sure.
Yup, I use React professionally for four years now with some really big applications (10ks LOC) and I would always opt for class components.

The hooks API not only suffer from weird wording (how is useEffect more expressive than componentDidMount) but it introduced some concepts like dependency declarations (again useEffect) and a new meta syntax.

It could have been a good development if the published preview would have been a real request for comments with the possibility of changing something. But instead it was introduced as stable in basically the same form.
Agreed! Innovation via excess wealth seems like one of the most inefficient possible means of innovation. It happens, but it is by no means necessary.
Everything we have today is open source. However, in the future, we plan to monetize features that would be required by enterprises. At that point, we'd be an open core company where a large part of the software would be open source but a few features would be proprietary.
Does anyone recommend a simpler alternative to airflow for simple multi step workflows that isolate task dependencies?
We also greatly benefit from the enormous public R&D spending on these products over several decades, a lot of it for military purposes.

The super rich can contribute to public R&D through taxes.
As far as I know if you only use the logs for DDoS protection and not for e.g. statistics and only store it as long as you need it for it and then delete it, it _I_ think should be legal without a popup banner, through maybe only if you don't give it to 3rd parties for DDoS protection? I have to look into this again.

The problem is the "only" part(s) ;=)

Oh, and you must reasonable convey that DDoS protection is essential for your service etc. Which if you ever had any (non super small) DDoS attack should be reasonable easy.

But I'm no lawyer and a bit of time passed since I last looked into it, so if I now would need to do a cooperate decision I would look it up again.
This has nothing to do with reviews.
Once you start looking at the actual numbers it becomes pretty clear that most of these arbitrage sellers could give every customer $20 and still make money.

For example, the top search result for “webcam” on Amazon.com right now usually sells for $35[0]. Its wholesale price on Alibaba for 5k units is $3.84[1] + $2.04 shipping per unit. Plug those numbers into Amazon’s FBA profitability calculator[2] and you’ll find that the seller only needs to sell 67 units per month to break even, after giving every buyer $20, because the seller’s net margin at this volume is nearly 60%.

[0] https://camelcamelcamel.com/product/B087NN41JH

[1] https://www.alibaba.com/product-detail/China-Factory-Wholesa...

[2] https://sellercentral.amazon.com/hz/fba/profitabilitycalcula...
I'm with you here. I've often tried to update my minimum price to something that cuts out the crap, and half the results are the exact same thing under a slightly different listing.

I've come to the conclusion that the only way to shop for things is to check out suggestions on Reddit (which are starting to feel more astroturf-y) and then search for that exact item.
Doesn’t this represent a gross failure of the NSA?

Preventing this kind of thing seems like their entire purpose.
Are you hiring software developers in the Ottawa area?
It would be much easier for authorities to track down participants in that marketplace. It requires them caring and following through. When it comes to antiquities these things can be resold often, so even if there is a case for seizure when found, the liability isn't always there to pursue someone.
There are two types of rendering now in common use for games.

In forward rendering you allocate one RGB color buffer for the screen, then rasterize triangles to this buffer, directly producing final RGB color values at each pixel.

In deferred rendering instead of one RGB color buffer you allocate a set of screen-sized buffers to hold various attributes of your choosing for each pixel, which can include colors but also things like the surface normal, material type, roughness, velocity, etc. These buffers are collectively referred to as the G-buffer. When you rasterize triangles you fill in all the attributes for each pixel instead of just a final color. Then in a second full screen pass, for each pixel you read all the surface attributes you wrote earlier and combine them with other data such as the positions of nearby lights, do some calculations and output the final color.

By deferring lighting calculations and separating them from the geometry rasterization, deferred rendering can offer more flexibility and performance in some cases. However it is tough to use with MSAA and/or transparent objects, and can be a memory bandwidth hog. Modern rendering is all about tradeoffs.
The problem with avoiding alarms is that perpetually sleeping in will shift forward your circadian rhythm.
Except if you provide a useful service people want to exchange money for then you made society better off even if you don't pay any taxes ever.
This is obvious yet so often missed by the "rich people evil" rhetoric.

If you think people are enriching themselves unjustly focus on fixing those mechanism instead of punishing those who make the world a better place for everyone around them.
You can't steal shares the way you can cryptocurrency, it's an entirely different thing.

A brokerage might be the "custodian" of your shares, but you still have control over them, and there's a massive paper trail to prove that. Borderline impossible to steal.

Crypto is a different story.
The way to solve TAX is to tap into the spending more than the earning.
Can only triage the TAX system and at least raise the threshold before paying TAX and tap into the expenditure with the taxes upon the niceties in life that the rich gravitate towards.

Also trickle down thinking just needs to see how water trickles down when the rich have their own underground pipe network to catch it all.

Tree economics would be a more apt term for what we have as like a large tree, you have a root system holding that up and yet nobody see's the roots until the tree has fallen. Bit like the fallout when some large company goes bust, same with small ones at scale.

TAX cuts via rate changes should really of taken a back seat and raising TAX thresholds would of been the better approach. Raise the bar and do tax cuts that way.
I wrote a negative review for a projector recently. The projector was so bad and had such good reviews I questioned this directly in my review. I later got a direct email (not an amazon message) from the seller asking if I would take down the review if they refunded me and let me keep the projector.
Serious question: can it be done without disturbing the dust at the site?

For Apollo 11, at least, it feels like the site should be preserved as the very first footsteps of humanity on another body. Maybe it's too much to ask for all of the sites, but Apollo 11 is a really big historical deal.

Eh, maybe it's not thinking about. As soon as space travel becomes touristy, tourists are going to start tromping around the site -- and probably grabbing souvenirs, unless guards are positioned 24/7 before tourists get there. That first footprint is going to be gone long before Fry gets to it in the year 3000.
I know at least four quite different examples. But they share one trait: They're quiet, softspoken, avoid controversy on internet forums. I won't name any of them.

One uses low pricing, is likable, and provides a fine list of enterprise features. The HN crowd will realise that these features are really different ways of describing a very small amount of code. But if you want to spend your employer's money and don't care to spoil that by telling your managers too much, the list is fine. Engineers who like the likable make money be spent.

One writes per-customer code on top of largely the same body of code, and charges very high prices, largely because they clearly know how to get stuff done using that code. They have the references to prove it, and they wrote the code, and the customers accept that they invoice customers for improvements to the free base too.

One uses a technique I don't understand at all. It's different from the other three, and it works. I mention it to say that the other three aren't an exhaustive list.

The fourth targets nontechnical customers and sell SaaS, I don't know the price level. You can git-clone the code and selfhost if you want, they'll be friendly but not helpful. If you make a PR on github they'll at least look at it.
Is it crazy if I think that first example is the most readable of the three?

In fairness, I've done a lot of work in TS and exactly none in Rust, so this is totally biased, but at the very least, it seems like all you're getting in the next examples is two fewer lines of code, in return for assuming that the reader is familiar with 1) `Option<x>` 2) `.ok\_or` 3) the syntax of the third block which I don't remotely get.

Genuine question, how comparable are these things to understanding "File | null" in TS, which I would consider day 1 learning?
>We'd have Linux on the desktop in 2020 if any of those projects had some Torvalds-like figure ranting on a mailing list about why the user is always right, shame on you on redesigning the menubar yet again breaking any UI convention for no real purpose, and no, Canonical/Red Hat/whoever, we will not accept this patch that undermines the goals of this project.

I think if you followed things more closely you would see that this is not true. There is no shortage of highly opinionated people making angry rants and throwing out patches. That's not going to help with the ridiculous amount of edge cases it takes to keep a desktop working.

Using the Linux kernel as an example, there has been a meme there for quite a long time from overworked maintainers complaining about how the BDFL model scales poorly. (Recent writing here: https://lwn.net/Articles/703005/)
This.

We used CentOS as dev environments, and RHEL as production. It gave us the best of both worlds; an unsupported but compatible and stable dev environment we could bring up and throw away as much as we wanted _Without_ licensing BS. And when the devs were happy with it, the move of a project to RHEL was easy and uneventful.

And don't even get me started on the 'free' dev version of RHEL. It's a PITA to use, we've tried. It's also why we've halted our RH purchasing for the moment. Sure, it's caused our RHEL reps no end of consternation and stress but too bad. I've been honest with them, and told them that they are probably lying through their teeth (without knowing it) when they parrot the line that RH will have some magic answer for "expanded" and/or "reduced cost" Streams usage in "1st half of 21". That trust died when RH management axed CentOS8 like they did.
The title is quite timely for me (though I acknowledge that the message of the article doesn't quite match it). I have spent hundreds of hours, over the course of ~3 years, tweaking and tuning an NFS server on a RPi4 (1Gb RAM, 4x1.5GHz processor) to stream my media to various devices on Kodi on home network - with passable-at-best performance, but usually lots of pixellation, lag, buffering, audio mismatch, etc.

Last night I finally gave up on trying to do it the FOSS way, set up a Samba share on a 6-year-old mid-range PC (8Gb RAM, 3.5GHz processor), and got flawless playback on each of my troublesome media entities with less than ten minutes of effort. On a whim, I also tried setting up Plex (a semi-paid service), and got similarly smooth and flawless service. My idealistic 13-year-old self would be horrified to hear me say "I regret all that time I spent messing around with Linux, when I could have just used a Microsoft product, or a different paid product, that Just Work".

(And yes, I'm kind-of intentionally invoking Cunningham's Law, here, in the hopes that someone can suggest a way of tweaking a RPi4 to be an effective media server - I'd much rather use that than have my PC always-on, but if that's what it takes to get decent playback, I will)
Yeah, it seems like a reasonable policy, IMO.

The sellers can change even if the product doesn't, so don't pollute the reviews with that information. Report it to Amazon and let them deal with it.
Yes, we do not recommend storing tokens in localstorage. This is also recommended by other security bodies such as OWASP and NIST. We've written a blog post on this topic as well, that you can read here:

https://supertokens.io/blog/cookies-vs-localstorage-for-sess...
> The SolarWinds Orion supply chain compromise is not the only initial infection vector this APT actor leveraged.

I wonder how they reached this conclusion
I mean... you understand why it's not consensual here, right? It's not because they're trying to use your data for marketing purposes, it's because they need it to address public health. When you send your kids to school (if you have any, or hypothetically) and they ask for the immunization records, do you refuse to tell them and decide to home-school instead, because you don't like mandatory things? Does the context not matter at all?
Sober Grid App – The largest mobile sober community
Sounds like a phase-conjugate mirror.
My 8yr-old just hacked his way around iOS Guided Access
In his words..

Daddy! I tried a few passcodes I thought would work because they worked last time for me (he can read finger placements), but then it kept telling me to wait more and more..I guess you changed it to something new huh?

So I just waited a few more seconds like it told me (120), and a little more, until your phone would die of power, and then when I rebooted it.. no more guided access!!!
Chalant is the present participle of the (disused) verb "chaloir", which means "to matter to someone", "to be important (to someone)".

It's only used anymore in the words "nonchalant" (someone to which things don't matter much) and the expression "peu me chaut" (it matters little to me).

But although "nonchalant" has a clear meaning, the meaning of "chalant" wouldn't be as obvious, since while it's easy to not care about things generally, "generally caring about things" is just the normal state of a person. It's the same reason you don't often hear about a stoppable force or a wieldy tool.
It goes far deeper than that. The last time I trusted amazon, I ended up getting a counterfeit book and having to fight tooth and nail to get a refund. This set me down a path of trying to find out how the reviews lied to me and how widespread the issue is. I would see items that had been listed for years suddenly balloon to thousands of 5-star reviews, then disappear. I would see old reviews of a product that were reviewing a completely different product. There is no oversight. Amazon is the house in a a casino where the only rule is that the house always wins.

The solution: stop using amazon.
It’s the opposite of “couldn't make heads or/nor tails of”, and the logical opposite of NOR is is OR.

“But then, all at once, for some apparent reason…” might be the opposite of “little by little, for no apparent reason…”
I wish they'd add their Vulkan renderer from Stadia to the Windows version and make a desktop Linux version too.
Not legally theft, but conceptually the same thing. If I pass a law that says you and only you get taxed at a 100% rate, technically it's not theft because it's legal (I just passed it as a law), but conceptually it is theft because I take every dollar you earn against your will.

Also aren't you essentially saying: "People that have hundreds of millions or billions can keep their wealth, but starting now we don't really want anyone in the rising generations to have a net worth much more than ~$25MM"?
Hm true ToS checkmark is not enough, you need to make the opt-in part clear. But it should be enough to do so when creating a account and for every change. At least if you put a reasonable findable setting page in which allows you to review/change such settings.

But I still believe you can do it once on account creation and then never again if people are logged in and nothing changed.
for a non-native english speaker, there's a lot of new words in this article. very rich vocabulary
I imagine the only thing wrong with it is that it's not nearly as well known as Docker.
What kind of twisted logic leads you to believe this? The whole point of reviews is that you can read them and use them to influence your purchasing decision.
Broadly speaking it's not bad if your null or undefined value has a different type than the shadowed type. The two examples in statically typed languages I can think of is rust and zig; in dynamically typed languages I think of elixir (which assigns it to an atom, and is a crash-fast language), and ruby (nil is it's own class)

Of the languages I have experience with, it's a major problem in C, java, and javascript.

For javascript specifically there is also the issue of falsey discipline; there are a ton of falsey values so you could get tripped up in ways you forgot about when doing a null check.
> CISA is investigating incidents that exhibit adversary TTPs consistent with this activity, including some where victims either do not leverage SolarWinds Orion or where SolarWinds Orion was present but where there was no SolarWinds exploitation activity observed.

Ah
I wrote this in 2002 in PHP and the world didn't care, it thought PHP nuke was the thing. I got two good jobs out of it so it was good.
I built a web UI on top of ripgrep a few weeks ago - just a few dozen lines of Python - and it's fantastically useful.

I already find myself using it a lot - recent example search: ehttps://ripgrep.datasette.io/-/ripgrep?pattern=changelog&ign...

More about that project here: https://simonwillison.net/2020/Nov/28/datasette-ripgrep/
Isn't this code rather leaky?

What if, for instance, the file DOES exist but the current user doesn't have read permission.
Great! Pleased to see this :)
> "non essential" (whatever that means)

I am quite interested at finding out whatever exactly this means.

(It was pretty clear to me that the GDPR would eventually rid us of the most flagrant of the abuses like the ones that you mention, via the stick of fines.)
A review review site, then.
To expand, since we agree.

Diffs are "natural" objects for users of source control.

Diffs are not natural objects for storing anything since that's not the job of the users, it's the job of the version control system. It can use ponies to store the "controlled versions" for all I (and probably other users) care.
So how it feels now, Mr. Apple apologist? Joke aside, I really hope Apple Developers to wake up and move away to other platforms. Apple is lost his touch and the only vision is summarised with one word: Control.
I agree! At the very least, the `map` operator/monad/whatever is very much required when you have to go beyond optional chaining (with the safe navigation operator). I very much miss it in TypeScript. It's never going to happen, sadly.
Even if Amazon orders one of every product, it's easy to beat that system.

I make two fake companies selling the same product. Each of them asks buyers to write a fake review 50% of the time. One of the companies should pass the Amazon inspection.

Well, then you say Amazon can place more than one order for each product. I just keep tweaking the numbers. I'll have 2% of customers for each of my fake companies get asked to write a review. One of them will not get flagged and the fake reviews will help them rise to the top.
SuperRT – an expansion chip for realtime raytracing on the SNES
Yeah, git cherry-pick is basically just git diff | git apply. And rebase is just cherry-picking many commits.
This is great fun. I have lost a couple hours poking at these tools. Fun stuff!

Big fan of this result with the Art Personalization tool.

https://i.imgur.com/JUiVZBB.png

Photo of chickens on my back porch. Styled The Persistence of Memory
I'm a lot less concerned with adding a version number and much more concerned with the additional complexity of having to fetch a dictionary.
I don't see where justice comes in. That's between friends. Companies expand and governments adjust them.

Banana republics are born from broken governments, which brings negative outcomes to the people. Governments that close off to the corporate world lack capital growth.

Companies don't spread values into other countries anymore than invading armies of yesteryear. The life and death that comes with corporate money is what it is. They may reveal underlying values and profit off them. Corps may discover certain business is not desired, but corporation values won't change the country.

The only values companies need to care about is the ones that will get them kicked out of their host country, or are shared worldwide.
The rendering engineers on Cyberpunk are definitely career experts. But, hobbyists can get impressive results in their spare time. IMHO, a good target to shoot for is to write your own https://www.khronos.org/gltf/ viewer. It's a scalable goal that you can take as far as you like.

Start with https://github.com/jkuhlmann/cgltf to handle loading the data. Check the sidebar of https://www.reddit.com/r/opengl/ for tutorials.
That doesn't sound like good news for the hackintosh community.
softwareupdate can download updates without installing them. Does anyone know if they can be extracted?
They refer to the actor as APT, but this sounds like a highly sophisticated attack. That the malware knows it is in a sandbox and shuts down is not simple code.

This does not sound like a script kiddie

What type of actor would have the time and resources for this type of attack?
This reminds me of https://en.wikipedia.org/wiki/Draft:Effects_of_the_2007-2008...
The former code is more equivalent to:

let file = match file {
Some(file) => file,
None => panic!("file was null");
};
You forgot the big one - regulation. Supply side is about making it easier for people to produce. You won’t find many free market types supporting QE and subsidies.

Would you rather live in a world where there’s only 1 large firm because over regulation has created a high barrier to entry and little incentive to risk starting a competitor, or a world with many firms where it’s easy for people to compete and they’re incentivised to do so?
Why IBKR over, say Schwab or Vanguard?