skysight-inc/HackerNews huggingface dataset:
They were made aware of their woefully insecure FTP server last year (November 2019). This FTP server had access to (or was used as) the update server for SolarWinds products.

In my opinion, they likely started looking at their security practices at that time.

https://www.theregister.com/2020/12/16/solarwinds_github_pas...
GTK 4.0 Is Out
Interesting idea - is there a technological reason why this design is possible now, or did the designers of the orignal rotary engine just not consider this layout?
NSFW warning would have been appreciated, looks like zombie makeup.
For sure there is need for programming language research. Language designers benefit greatly from the work done by the academia - for example in the area of type systems. But, OTOH, scientific community is not very tuned in the everyday problems programmers have. That is why some of the popular languages are basically hobby projects spawned from some lone programmer's personal itch.

I think we should have the best of both worlds; people enjoying the mathematical rigor should do PL research. And hobbyist language designers should pursue whatever ideas they might have. But both camps should acknowledge that the other side is equally important.
Mac OS is the evolution of NeXTSTEP, so that is easily done anyway.

Windows, well Microsoft did a big mistake of never managing the POSIX subsystem in a proper way.

Linux took off thanks to GPL, BSD ongoing legal problems at the time, and Microsoft just doing the basic regarding POSIX support on Windows.
My Micro:bit is also more powerful than my first DOS PC:

* It has an ARM Cortex m4 processor (Nordic Semiconductor nRF52833), which is about as fast as my first Windows 95 computer.

* It has 512MB flash, which is better than my 5.25" floppy.

* It has 128kb of RAM, which is the same as my PC Jr.

* It has its own custom radio and Bluetooth, which is better than dialing into BBSes over my 2400 baud modem

... and so on. It's actually a rather capable device, in a kid-friendly form factor.

It's not quite up to the ESP32, but what you lose on capability, you gain on ecosystem. The ESP32 is more a device for people who don't need an Adafruit "How to Choose a Microntroller" manual. It seems like the sorts of people who need an intro guide are better suited to a device with more of a beginner-friendly ecosystem.
This will be a game changer if they flesh it out. Imagine Linux apps right alongside your windows apps with their own icons and everything.

Windows Terminal + Visual Studio Code + WSL2 is the bee's knees.
Dibs on haunted pencil Reese-Morgan's face.
I experimented with my own OSM tile server a few months ago.

I used this tutorial https://www.linuxbabe.com/ubuntu/openstreetmap-tile-server-u...

If like me you have basic Linux skills it's not that hard, just time consuming.

However the resources needed are quite consequent: I managed to load all Europe tiles on a Core i7 3770k / 32 GB ram / 1 TB SSD workstation.

I think it took 2+ days to load data into Postgres and many more days to render tiles zoom 0 to 18 for France. I estimate that to run a world tile server you would need as many core as possible, at least 64 GB of ram and 2 TB of disk (SSD is mandatory here).

I didn't experiment with updating the DB with new OSM data but it looks quite a chore.
This is cool tech and there are new players entering this field with even better capability. The Clinton era laws of optical resolution restrictions seems silly now with this tech in the commercial marketplace.
> BTW, languages like Lisp actually evolved over time too. S expressions were not intended to be definitive, and you were not supposed to interpret code in code itself. McCarthy was just interested in the mathematical proof of creating a Lisp machine different from a Turing one. The practical side of that was of no interest for him and other people added this fucntionality.

Actually McCarthy was working on a new research domain called 'Artificial Intelligence'. For that he and his team needed a programming language. They did early experiments with list processing added to Fortran. Eventually they developed their own programming language. It was designed and implemented over short time frame of a few years for an IBM computer they had.

McCarthy and his team were very much interested in the practical side how to implement Lisp and they learned a lot while doing so. During the first design and implementation phase 'it became clear that this combination of ideas made an elegant mathematical system as well as a practical programming language' (McCarthy, History of Lisp, 1979).

The new programming language was thought to be used to implement software like the proposed 'Advice Talker' (McCarthy, 1959).

http://www-formal.stanford.edu/jmc/mcc59.pdf

> For production you need standards that are simplified

Quasi standards for Lisp were early the Lisp 1.5 language (the language description was published as a book). Then actual work started on a new language standard, supposed to be Lisp 2. That work failed eventually. In the 80s/90s Common Lisp was defined as a standard. Further standards of Lisp languages were IEEE Scheme and ISLisp (an ISO standard).

> For production you need standards that are simplified

See the extensive standards of Ada, C++ and Java EE, ...

C++ is a very complex language standard, even with meta-programming features: https://en.wikipedia.org/wiki/Template_metaprogramming
Hey, i'm an avid user of your site and it's amazing! I love killing time by taking a look at offices and dreaming of when i'll set up mine one day if my startup succeeds :)
This approach (legislation) to resource distribution is often the wrong one. It’s better to simply make the item in question become a commodity, so much so that it’s universally accessible to even the poorest members of society.

Think of something like paper. Originally it was exceptionally expensive and only available to the wealthy or particular tradesmen. Scraps of already-used paper were reused because the material was so valuable.

Today, paper is basically free. In fact, we’ve gone to far in the opposite direction: people waste paper constantly and it’s an environmental problem.

If, in the early stages of paper, we had said “We need to mandate paper for everyone,” I’m skeptical that it would have been commodified. It seems to me that whatever method we use to make internet access easier and cheaper, it probably isn’t going to come from ISPs.
Thanks for your work on this. I expect a % of the people were encouraged to look deeper into the tech and now thank you profusely for pointing them in the right direction.
Trying to find a list of phe2 enhancers or
inhibitors.
I’ve take quite a few things for nerve pain, all with horrific side effects. So topic is interesting.
Agreed, I just happen to be more found of the ESP32 form factor.
Taking musical training as an adult ruined pop music for me as well. Whether we've become educated or merely adopted a critical framework is a bit grey, but I would say I can still appreciate some modern music through the lens of competence. Although most of it is cloying and pandering.
They don't have a dvd iso for Springdale 8 but there is a boot.iso download and a package repo[1]

1. https://springdale.math.ias.edu/data/puias/8/
Couldn't the process in the article also explain why that's in the bible?
Zstandard v1.4.7
Christ. What is this nonsense, and how did it get into the front page.

If by any chance you reading this and want to learn C, do obtain and read The C Programming Language 2nd edition instead.
> if the java web app also has some privilege escalation

If.
How conversational AI chatbots are helping healthcare companies?
> All of the things mentioned are already being done without VR headsets. People can go through their entire lives not realizing they've been stereoblind.

This comments sounds like what people would've been saying of smartphones: "I've gone my while life without a smartphone, why do I need one now?"

I said the same thing about smartphones, big screen TVs, good office chairs and a few other things. You either learn from your mistakes, or you don't.
Though this is NOT a requested solution described in my comment above :(
I've more or less driven frontend development with React at several companies over the last 4 years. While some of the complaints are exaggerated I don't think the overarching premise should be dismissed as "a meme."

> No idea what this promise chaining thing is that you're talking about.

If you have any asynchronous things going on in `useEffect`, you'll have to do something similar to that `await(0)` song and dance in tests. This specifically affects tests if you do things like update the UI by toggling loading spinners on await.

> Redux

s/Redux/higher order components. One of the motivations for hooks was that as a mechanism for logic composition, HOCs just felt awful to use. (So did render props, which everyone suddenly used for everything in a brief moment of collective insanity.)

> Only a superficial understanding of React

I think there's something in this. The fact is that good or bad, 1) hooks aren't intuitive, 2) hooks have basically doubled React's API surface area. Previously, React was so simple that a backend engineer could pick it up and get productive with it in half a week. That's much less the case these days. I've been onboarding devs to React for years, and these days there's a lot more "yeah, that's magic, you don't need to know how that works for now."
What? I smell bs.

How do they run em better?
I'm not making an argument. I'm trying to get y'all into the headspace of the MPAA, congresspeople, and judges so you can see what we're up against. As usual in American law, right or wrong don't really matter; it's who has the resources and the drive to fight and win.
There was a different licensing issue around backups, where only the paid version had a reasonable way to back up and restore your data. Has that improved?
> "Implemented and executed a revolutionary vertical & dynamic cyber and security strategy at SolarWinds saving the business $xxx"

That's pretty much on every dev's resume as well, despite their buggy project getting hated by everyone and shut down.
When an image gives the wrong first impression/is misleading, indeed they are.

When doing with good intent, they're not. Since the US and China are rivals at this point and neither side wants to chill, and given the history of troll farms by many countries to manipulate discourse, I'd be wary of discussion that contributes to a solution.
I dont think this is only because you have seen a lot of movies already. There appears to be a whole movement of youtubers doing movie critics who pretty much agree that modern productions have very bad story telling. Some of these are indeed a bit older, and that might be a reason why "we" agree.

But when I add my personal experience to the analysis, I can only say that I basically stopped watching TV a few years ago because I couldn't stand it anymore. Action filled stuff is so needlessly loud and over the top, and the story telling indeed feels very shallow to me. In a sense, I miss the times when technology wasn't so advanced and movie makers actually had to make up for that by a good story and nice pacing.
I think Interstellar was the last movie I enjoyed watching. The industry basically lost me as a consumer.
Work in Programming [audio]
Just ran into this yesterday. What a great solution! I now have WSL2 running graphical linux apps and got a nested VM running with Mojave so I can run osx with macOS-Simple-KVM. I can finally cross compile in a way no one should.
Most people who advocate for a healthier diet actually intend for a vast majority of the population to adopt their recommendation - vegetarians and vegans and people who recommend the food pyramid or the balanced plate and so on intend for, ideally, the entire population to follow this recommendation.

So if someone comes and recommends an all-meat diet as being healthier for almost everyone than the current plant+meat based diet; and someone else points out that it would be an environmental disaster; and you talk about how local farming can mean that meat eating is not necessarily that bad for the environment - then your argument is only relevant if it is still true when a significant proportion of the population follows this new diet. Hence my extrapolation to ~7B people following said recommendation.

To call a diet sustainable or unsustainable, it only makes sense to talk about its impact IF it caught on for a significant proportion of the population for whom it is recommended. There is no unsustainable diet if we're only thinking of a few people following it. I could recommend an all-Saffron diet and you could call it sustainable if only 10 people have to follow it.

So again, an all-meat diet, even if it were actually healthy , would be an unsustainable recommendation to make for the general population. It may well be a very good recommendation for people with specific conditions, and it could be made sustainable if those people were a tiny minority of the population. For the general population, the only possible diet that doesn't bleed the earth dry is one that is mostly vegetarian, with some amount of meat maybe once a week or even more rarely.
Call It Sour Grapes
Thousands of dollars of expended electricity and computing time per bitcoin makes it more intrinsically valuable than cheap paper+ink fiat/USD.
With first class support (C++/WinRT, VCL, .NET) writing COM components is no different from ordinary C++ classes.

Yes, C is clunky and primitive, it was my opinion in 1992 coming from Turbo Pascal 6, and it hasn't changed since.
I leave a book in the bathroom and never bring my phone with me into the bathroom. It's not a very fast way of reading but I do finish a book every few weeks. I prefer paper books because I underline important points which I then summarize into notes.
You may say it is VM but given it is under hypervisor, it is a different sort of “VM” as the layer under is very thin.
> That's how I do it- mostly to run urxvt.

> Off-Topic: I'm setting up a new machine, and wondering whether I should use WSL 1 or 2 (or both?). Is there a clear path forward for these systems? WSL 1 has served me pretty well. Most of the inter-filesystem interaction amounts to using rsync to back up directories. Otherwise it's just sshing into servers. I use virtualbox for off-line development.

I would recommend wsl2 for sure.
Another reason to give anonymously: You will avoid the flood of marketing materials soliciting more donations.

If you make a significant donation to any nonprofit that's big enough to have fundraising staff, you will continue to get mail from them for years. What's worse, some nonprofits share their mailing list with other organizations, so you may also start to get marketing material from other organizations as well.

[US-specific]: If you regularly make any non-trivial donations, it's worth considering setting up a donor-advised fund[1]. Among other benefits, it allows you to make donations anonymously, or to provide only your name, and no contact information.

[1] https://en.wikipedia.org/wiki/Donor-advised_fund
We got the 7 seater transit after we were pregnant with our fourth, then exchanged it for the sub 7ft height 15 seater after we had 5.
Of course it's expensive, but when you get for example 10+ billions USD every year just to allow Google to be your default search engine, it's not like you have any money problems!
> At what point do they begin to secure all this?

When the cost of fraud handling exceeds that of redoing their security, I guess. It'd have to be a 10x or more factor though, because companies seem to be quite accepting of existing / recurring costs.

That said, my banks have had 2FA for a long time. The one started off 20 years ago with a device where you'd punch in the numbers on screen, it would give you some numbers back. The second version required you to insert your bank card, PIN, and the number on screen, while the website asked for your account number and card number. The third version that I'm using nowadays is pretty much the same, but instead of punching a code it has a camera that scans a color-QR code on screen.

The other bank used to send printed lists of one-time codes, where the website would say 'type the code at index xyz'. Later they went for SMS-based 2FA, I think they're still on that nowadays.

Both have mobile apps, and use PIN codes or Face ID for quick access. They know it's a higher risk than their 2FA solutions, so they limit the maximum amount that can be transferred (thus limiting their own damage). The limit has slowly increased over time as their security proved itself. In essence it's like an insurance policy, whose price changes depending on risks and track record.
No one uses COM via C boilerplate unless they are masochists.

WinRT is no mess, and I look forward to the day everyone has to put up with them, now that both application models are being merged anyway.
I believe WSL2 was made for those that wanted a somewhat seamless linux experience non Windows without the incompatibilities WSL1 brought
One key difference between hooks and functions is that hooks tap into some hidden global component registry (I'm being handwavey here but this is more or less what happens). This allows side effects to be persisted and tracked between function calls.

You can probably build all this infrastructure yourself without hooks and only with plain functions. It'll involve some global store and some subscription mechanism. You'll end up with something really similar to Redux.
Back in the 90s when computers were well under 1ghz, I found that I could crank up the sound card with no music playing and listen to the bus. Sometimes this could actually be useful in debugging. You could hear the difference between an infinite loop and the CPU actually doing useful work.
Terminal Shortcuts with iTerm2
All the few seconds here and there really matter as we continuously engage in highly repetitive task. These shortcuts are a lifesaver for me. They might help you too.
Honestly Virtual Reality has only just begun. The entire Vive PC VR era was a complete false start and had no chance of ever becoming mainstream. Every time I demoed it to people who were totally floored they completely lost interest in buying it the second I told them it needed a tower PC.

Oculus Quest (just looking at the hardware) may as well by the first VR headset because it’s the first that is both feature complete with full head and hand presence and doesn’t have to be tethered to another bulky system and doesn’t cost $1000+ to get started.

First time I demoed quest to a friend he had ordered one off Amazon 2 minutes seconds after taking it off and him demoing it to his family and friends sold 4 more.
I agree centralisation is bad - the model of “government ensures everybody has a certain minimum level of service (eg set themselves up as a free 4G ISP offering just enough speed to fill in HTML forms etc); anybody who wants good service can pay a private company for it” seems like it would be the best of both?
Chinese BosonSampling: The gloves are off
Nuclear watchdog gives green light for restart of Olkiluoto reactor
In critical applications, much more than you'd imagine. Lots of defence and critical component suppliers still maintain a significant amount of hand work for low volume and critical areas.

Don't have a source unfortunately other than personal experience working as an engineer.
Yes, off-device 2FA like a yubikey or the stuff I described in another comment. Anything that involves using your bank card and a secret that only you know (like a PIN code), separate from your account details.
Great work! This looks very promising. Blackmagic Design has a green screen keyer and it costs $10,000.00 USD https://www.blackmagicdesign.com/products/ultimatte

Your project from first glance looks as good or even better than this overly expensive component. Even factoring in the cost of an RTX 2080 and entire gaming rig is less expensive.
Indent HTML Code in vs Code
Because Safari users don't have ads personalised to them.

I.e. cheaper, less relevant, less likely to convert.
Instruction unclear: on the host running the X server, I get

PS C:\Users\user> _
How about Udemy courses?
Maybe people should stop living in the past, naming after nazi doesn't necessarily mean supporting nazi.
The way you target niche markets is by paying niche publishers who target those niche markets. The only reason this argument seems reasonable is that we're accepting that Facebook is the omnipublisher who is responsible for all information.

Supporting small publishers is at least as important as supporting small businesses. It would be nice if your small town news site got ads for local florists, they might be able to pay for a journalist without begging for direct payments. Paying directly to read journalism is stupid and will never work - people read things they hate and do not want to support, people don't know how to value the site that they read one story a week from (or how to pay that tiny amount), forcing people to pay limits the reach of your reporting when the reason you write is to convince or inform - ideally, you'd pay people to read what you write; a coupon for a local florist or the information that a restaurant is opening in your neighborhood is a nice micro-compensation.

Advertising, patronage by the wealthy, and/or ideological propagation are the only natural models for journalism, and SV giants sucking up all the advertising is destroying that. Now we're supposed to care about their problems while they pretend to care about ours.
I tried to push guix with a group where reproducibility really does matter and has been an issue and it's typically been met with "wha but Docker..."
A JS based exploit that hijacks the X Window System Core Protocol running on your localhost to inject key presses into your X server or steal screenshots? I mean it's possible, but it seems quite far-fetched except maybe if someone specifically targets you.
So many comments to yours are all sceptical and saying "never" a lot. Maybe in 20 years you'll be vindicated. I'm with you.

It's surprising how much imagination people lack.

It's like people who told me "humans will never fall I'm love with an artificial human". Lo and behold, that Chinese AI has 600M users. Now the discussion have moved to " they shouldn't " and then it will change to "I want one too".

The same will happen with VR and AR.
Is it a good ebook reader if you're not a prolific note taker?
naa, the reason mickey is not as public as he was when he came out is because he became boring and he was overtaken by donald etc. I've followed the game devolopement of Epic Mickey where Warren Specter (producer/director, also of deus ex-fame) had a lot to say about the history of mickey and his take was that in the beginning Mickey was very mischievous but somehow that changed over the years and he basically became boring and all the interesting traits - in the sense of storytelling or character development - where found in other characters (and once mickey had found his boring persona, writers weren't quite allowed to give him back his mischievousness). Mickey became nothing more than an icon.
Political parties attract to their tops sophists who can manipulate and form personal alliances - it does not select for who can provide the greatest value at the lowest price.
I demand to have a free ip! just let us have an ip to share anything we [ as persons ] want to share! actually its free, there is almost no cost at all to make this happen but they won't let it. I don't know who they are of course.
New 5G Vulnerabilities Allow Denial-of-Service and Man-in-the-Middle Attacks
There are only two plots: a man goes on a journey, or a stranger comes to town.

Although if you really think about it, there's only one plot, because a man who goes on a journey is a stranger who comes to town in another town.
Yes. Good thing we have big tech and a whole party to keep us safe from other viewpoints.

Why I bet soon we can even have free Red-education for misguided souls.
And that is slow as hell, laggy scrolling etc. Hope the MS implementation works better.
Reminds of pink trombone