skysight-inc/HackerNews huggingface dataset:
https://en.wikipedia.org/wiki/Bare_machine

> In computer science, bare machine (or bare metal) refers to a computer executing instructions directly on logic hardware without an intervening operating system.
You appear to have totally misunderstood what happened. This case is about NSO using a vulnerability in WhatsApp's client application, to do nasty things client-side. It is not about anything stored in server side databases.
#1 is actually another issue in itself. You should never blindly accept X-Forwarded-For. Why would you let the client modify its own IP address? X-Forwarded-For is used to allow proxies (such as nginx) to forward the client’s IP so that the application server uses the client IP and not the intermediate proxy IP. For example, with NodeJS Express, by default it only accepts X-Forwarded-For from local requests. You can add additional IPs or ranges so you can “trust” the header from your load balancer as well, or make it trust X number of hops. I’m sure other web servers have something similar.
A single government can easily block it in country — nobody needs or wants Bitcoin, they want to buy things and that can be attacked by targeting whoever participates in the network. Bitcoin is designed to make this extremely easy since that public ledger means they can go after ever transaction you’ve ever made at any point in the future, not just at the time of transaction. Unless the government is incredibly corrupt and powerless nobody is basing a black market on a system which giftwraps your transaction logs for prosecutors.

A government which participates in international banking coalitions or treaty groups can use those relationships to go after transactions internationally, too. Think about how drug cartels have secret bank accounts frozen, and then about how Bitcoin is designed to make that easier by giving the authorities a full list of your activities which is trivially extended to every partner. Once you’re on that list, everyone you know will be getting pressure to turn on you.

Now think about a major government: they can not only use normal law enforcement but also control the exchanges themselves with things like anti-money laundering laws. Someone might choose to blow off demands from a small country or a pariah state like Iran but if the US or EU decided to act everyone involved is now facing things like not being able to fly internationally or do business with most major companies. Since they have no upside to resisting and it’s trivial to block Bitcoin transactions, anyone in those jurisdictions is unlikely to risk that protecting a stranger in a different country.
Think if your phone had a rocket thruster. You could use it with a skate board or roller blades.
> Our current habit of disposing of crap sight unseen in ways that flush all those essential nutrients into the oceans

Is that the standard way of handling sewage?

I have only toured one sewage-processing plant, and I am sure that there are many different types, but that one had huge (as I recall, building-sized) machines pulling all of the solids out of the sewage; this sludge was then loaded on trucks. I do not remember, now, if it was carted to landfills or composted, but of course it could be composted.

Before using it for agriculture one would want to consider whether the medications and other contaminants are a problem.

One cool thing about that plant I remember is that the water it produced was well within drinking-water standards: it could be connected straight to the water system.
Tracking is different than historical data, for tracking can be a live, forwarded feed. And even with that, you'd need a court order to force compulsion.

Historical data, if it doesn't exist, cannot be revealed. And so far, there is no legislation forcing web activity to be stored for, well, months and years, like some of these jokers do.
Lost all my money; the company was sold at a low enough value that all the higher-priority shares went before mine. Never thought I had much of a chance, though, so it wasn't very surprising. Startup stock options are always a long shot.
How to Customize KDE Plasma with the Style of Cyberpunk
Sorry but this has no sense at all. From 20 years on I work only with Apple based desktops/laptops. And I am a pixel peeper. Scaling is not a problem even on MacBook Pro from 2013. If you want to rationalise a purchase of new Apple Display XDR there are more factual reasons for this. Don't get me wrong - the new displays are very competitive for grading middle market, but most professionals are using separate proofing displays for testing.

I am talking about good quality display with bearable price.
Not display for $6,299.00
Example:
https://www.amazon.de/EV3285-BK-Monitor-DisplayPort-Reaktion...
They are mixing up a stimulus bill with all sorts of other things they want like military foreign aid and freedom of speech. The public thinks this is about stimulus. Not at all and the politicians know this.
Section 230 is going to die one way or another. Tech companies want you to believe it's an Internet apocalypse, but realistically, it means when someone sues a tech company, they are going to have to defend themselves on the merits of the case instead of using a "get out of jail free" card. Facebook, Google, and Twitter will need slightly more lawyers, and the rest of the Internet will get along just fine with "doing the best we can".

Pornhub will survive 2020. And it's an example of what removing Section 230 protection can do, absolutely, since SESTA/FOSTA exempted child sexual exploitation from 230 protection. Pornhub now only accepting verified uploads from professional studios and performers will not end porn. And in fact, without the ability for anonymous uploaders to post pirated premium porn, adult performers are going to make more money than they ever have before. Piracy has been hurting pornography just as much as it's hurt every other type of content, perhaps even moreso.

Yeah, the wild west of the Internet is over. Governments know how it works and how it can impact them. Businesses have massive influence over how it operates and evolves. And the Internet isn't just "out in space", it exists as real equipment in real sovereign countries, and that will continue to apply more to how the Internet works over time.

I don't think that's bad for the Internet. With regulation comes protection for people who might be otherwise harmed by others online. And it highlights the need to continue to push for global individual freedom: As we push towards open communication and human rights, the Internet as a whole will reflect that.
If companies such as these do not exist or are killed then the employees you mention will have a hard existing. Sure there are self taught people but a lot learn on the job.

If companies are killed off then investments will be harder to come by and the tech to do the hacks will be harder to get to.

Those employees if they decide to collaborate with Iran/NK/Russia vs the US will find US can easily arrest them once they set foot anywhere in the western world.
NextMind Shipping Dev Kit for Mind Controlled Computing
It is more “sanitize” than “validate” then. Saying that you need to sanitize disabled or normal fields in “crypto websites” is like saying that you need to put handrails on 7th floor of a red building to prevent falling down. But in reality you may fall from any height that has no handrails, and 7th floor and a red decoration aren’t specific requirements for falling.

I’m not trying to nitpick here, my confusion was genuine. These sorts of statements are hugely misleading even for seasoned folks (“what if I missed something in disabled inputs? why crypto suffers from that?”), and in novice developers it creates magic recipe thinking instead of generic awareness that you never want to execute(user_input).
Russia’s space chief hits out at latest US restrictions
That doesn’t solve any problem that I have (or anyone has) encountered.
Lytro failed, I assume, for the same reasons that companies like Apple makes winners out of failed ideas. When it came out, I nerded out and wanted one so badly. Luckily I couldn't afford one.

From what I read was that the software was slow, and it was a pain in the butt to go back and re-frame or refocus a shot. People don't do post-processing for mere white balance [1], why would they bother for focus, focal length, depth of field, pan, and perspective?

On the other hand, it means that high end gear is done. Once a well executed light field camera comes to market professionals will flock to it. They have to do post-processing anyway so they'll adopt the camera that is smaller, lighter, single insanely fast lens. Most importantly perhaps, a camera where they don't have to wrestle the bloody auto-focus (the kid! focus of the running kid on the edge of the shot!).

Better sensors and faster CPUs and digital cameras as we know them are dead.

[1] That's why I like film, preferably B&W. Take the time to do the right shot. Accept the results.
Core Data traces its roots over 25 years with NeXT's Enterprise Objects Framework (EOF) [1]:

> Many of the core concepts of EOF re-emerged as part of Core Data, which further abstracts the underlying data formats to allow it to be based on non-SQL stores.

Apple also released CloudKit which synchronizes with FoundationDB’s Record Layer making Core Data an alternative to Google Firebase and Amazon’s GraphQL based AppSync.

It is an object oriented approach to data access which many developers prefer while others dislike. SQLDelight [2] is a YeSQL-like alternative for the anti-ORM and anti-Vendor-Lock-In folks but it relies on Multiplatform Kotlin to support both Apple and Android ecosystems.

Engineering is about managing trade-offs given a set of constraints. Core Data is sometimes a fine choice.

[1] https://en.wikipedia.org/wiki/Enterprise_Objects_Framework

[2] https://github.com/cashapp/sqldelight
Novid is a contact tracing application with Pre-Exposure Notifications
I would hopes so but definitely wouldn’t bank on that.
OnePlus had funny one: "Designed by OnePlus. Assembled in China."

...as it somehow tries to imply that it is not designed in China (but it is).
Science vs. Engineering
The server should only accept the header from trusted proxies (like nginx, your load balancer, etc). If #1 is possible, you have a bigger problem of letting the client send any arbitrary IP.
The monitor has a fan? That would be a huge negative to me
Global food industry on course to drive rapid habitat loss – research
I doubt the sort of tracking government agencies push or request from them is nearly as detailed as what they're currently collecting for advertising.

It's not that such agencies that spy on their own citizens don't want such information, its likely that they don't know just what derived information products are available to even make the requests.

Technology is making anonymity nearly impossible in all facets of life and I don't think that's healthy for human development. Sometimes you need to assume an identity know one else knows so you can try things, fail, and develop socially as a person without fear of harming your identity. People need to be able to experiment and fail without fear of repercussion (obviously within legal bounds of what they're doing). I need to be able to walk in a bar, get drunk, and "sing" karaoke embarrassingly poorly and not have everyone at work the next day ostracize that behavior and have video evidence of it (just an example). Anonymity often grants failure and adventure without criticism and the direction we're headed is going to stiffle people's ability to explore themselves and life.
I’m no mathematician, but I reckon that the library is the type system for those who write numerically heavy code. In this sense the core is type-safe by definition, and the periphery isn’t hurt by lacking strong types for amounts to I/O and other infrastructure.
It sounded great, so I opened a demo page to try it out. Copied the contents of my personal savings note, and wanted to paste it into the NoteCalc to see what magic it would do. Pressed Cmd+V but it didn't paste. It just typed v intstead.
My experience says hobby subs on Reddit are amazing though, and plenty of 30 or older generation. Used to visit leathercraft and bicycling sub daily, until real life forced me to forgo both hobbies.
Apéry's Constant
That’s really the best formulation, in addition, of course, to “start from the inside“.
There have been a bunch of those but none of them caught on, because their target market already has a smartphone.

The idea I really liked was Sony that made "smart lenses" that was basically a decent sensor and a decent lens that you clipped onto your phone and connected via Bluetooth/WiFi and used the phone as a display and storage
Great but I hope they are prepared to show some backbone should the lawsuit fail.
Don't both these companies allow the US government unfettered access to this data? Pot meet kettle, kettle meet pot.
The only truly difficult declarations I've encountered dealing with real-world C code is mixing pointers, const, and arrays. Pointer to const str, easy:

const char *str;

array of pointers to const strs, also fairly easy:

const char *strs[4];

const array of pointers to const strs... umm...

const char *const strs[4];

I think? Which const does what?

This is a dummy example, but real-world examples can be a bit less obvious, as you sometimes have to elide the array length:

const char* const* enabledExtensionNames;

From: https://www.khronos.org/registry/OpenXR/specs/1.0/man/html/o...

What is this, again?
ironically that concept is wielded by the israelis in a rather unfortunate context

https://m.jpost.com/opinion/columnists/mowing-the-grass-in-g...
And we still haven't won
Fine grained human expression analysis using deep learning
I always forget which are the actual free software guys and which are the businesses that use linux guys... I think FSF are still the good ones right?

Though that thing about the FSFE office in Germany yesterday... Hopefully it's just a dude and the office he runs rather than the organization as a whole.
They say these are common issues - but don't actually link to any websites which have these issues.

Disabled input fields are fine - so long as they are ignored on the backend - and there's nothing in this article saying they aren't.

Nothing here seems specific to "crypto" websites.
Consumer choice only means anything if the consumers can choose something they know about.

If the choice is between "you can know about it" xor "you can buy it", there's no real choice.
Daryl Davis doesn't scale. Everybody likes to point at him but there is a reason why he is a unique case. Especially since it would be trivial for fascists to monopolize his time by just claiming to be open to discussion while actually not being interested in changing their views. This is why Davis holds his conversations in private. When done in public, his approach is exploitable to create a seemingly legitimate channel to spread fascist propaganda.
HTTP Caching
CEO Pay and Pay‐Performance Sensitivity in Indian Family Firms
Yeah, and I certainly don't want to hassle anyone who hasn't set up a perfect video studio for calls in their house. On the other hand, after 9 months I do sometimes feel a bit of frustration for the folks who are still perfectly backlit from a window rather than hanging some fabric over it.
CVE-2020-7468: Turning Imprisonment to Advantage in the FreeBSD ftpd chroot Jail
Thanks. I saw a reference to it in Kingsley Amis's novel The Old Devils, but was too idle to look it up.
Same bucket. Not "as severe as".
> I mean, it's simple, but brain-damaged?

Linking is not a hard problem at all. For the last 40 years with a sane language you'd say "I depend on A, B and C" (in any order) and often that would happen implicitly as part of writing your code rather than having to screw around with some abortion of a build system as in C or C++ land. Things would just work, and quickly at that; the fact that there was a linking step would hardly ever even enter your conscious awareness with Turbo Pascal for example.

By contrast, in C and C++ you get:

- Often horrendously slow linkage, so slow in fact that it can dominate build times.

- Massive complexity. Contrary to what you claim, linking with C isn't simple at all (although it ought to be, especially considering how stupid it is!). Have you ever looked at a C linker manpage or obj format description? Also, because linker performance of GNU ld is so abysmal, people have written several replacements (gold, lld) and there are all sorts of exciting issues associated with getting different compilers talk to different linkers on different platforms/toolchains as well. There is an enormous cottage industry of (mostly terrible) tools around linking in C. And this complexity is before we even try anything like LTO or cross-platform builds.

- Lots of exciting challenges for even the most trivial tasks ("I'd like a statically linked artifact, please", "I'd like to be able to debug this, please").

- You need to specify link order, and the order matters and can introduce obvious as well as more subtle failures.

- Lots of random weirdness (e.g. djb errno patches).

- Little gems like this:

> echo $'#include<stdio.h>\nvoid hello() {puts("hello world!");} int main() { hello();}' | gcc -xc - && ./a.out
hello world!

vs

> echo $'#include<stdio.h>\ninline void hello() {puts("hello world!");} int main() { hello();}' | gcc -xc - && ./a.out
/usr/bin/ld: /tmp/ccYdbjTB.o: in function `main':
:(.text+0xe): undefined reference to `hello'
collect2: error: ld returned 1 exit status

How is any of this not braindamaged? Have you never used (a possibly ancient) language which did not suffer from any of these problems?

> your English translation suffers the same problem as the code

Sorry, I wasn't very clear here: what I meant to convey is that C syntax for logical operations is bizarre and unreadable. Why the bogus parens after the if? Why replace "not" with a weird symbol that does not in any way traditionally relate to logical negation and is moreover super easy to overlook?

> Use the pre-processor that you complained about

If someone sets my leg on fire, am I supposed to feel grateful when he pisses on it?
Spam detection has been a feature of email clients for a long time. I'm sure even a rudimentary automated detection mechanism could prevent a significant portion of the dupes.
Their key light is also a good way to improve lighting.
It's misleading because you're stating something false. You adamantly say the article says one thing when it ain't there.

You: 'Its described in the article itself that microplastic attracts/collects toxins (heavy metals etc.)'
Article: 'Further studies need to be performed to assess if the presence of microplastics may trigger immune responses or may lead to the release of toxic contaminants'

Maybe and does is one difference. The absence of the mention of heavy metals which you state is from the article itself is another difference. I like the other stuff you said though.
US liberal is far the to the right of the majority of Western Europe.
Paired with that is that they simply don't care about small time uploaders of personal works. The system is designed to let major uploaders fight via a complicated process that they are familiar with and have somewhat automated participation in - ie Disney vs WB, etc...

The system isn't designed to allow John Smith to appeal successfully.
I don't know why more people don't understand this. Is it because they have no exposure or experience in military matters? I don't understand how so many people think the 2A is obsolete... it's just as effective today as it ever was.
I don't mean to be rude, but, isn't this all terribly obvious? "Make sure you have a mitigation if your stuff goes down" ........Yeah.......... "Make sure oncall has used your tools before" ........... Yeah........... It feels like telling a software developer "you should version-control your code". ........... Yeah ............
monolithic source code can be deployed across multiple servers.
(Russian) FSB Officer Inadvertently Confesses Murder Plot to Navalny
"There is still a problem, which is that you have to assign a physical sensor pixel to each point in a 4-d space (2 position and 2 direction coordinates), which means that you have to give up some of the spatial resolution of the sensor."

I agree, if I remember correctly Lytro had 1M pixles (??) during the 10Mpxl era. But as larger sensor appear (to my surprise - a sensor is a fixed area of Si!) to become cheaper to make I think this problem will go away.

Also, these are problems that companies like Apple excel at smashing. Apple disdains what the consumer thinks they want and they have a legion of fan boys to become early adopters and proselytize the masses. Incidentally, I think the founder of Lytro now works for Apple.
My apologies for taking your comment seriously.
At my workplace, I’ve had effectively zero video calls since the pandemic began. We’re just using audio (occasionally someone will leave their camera on, but it’s uncommon).

Are video calls in other companies mandatory? More common than audio-only calls? Even at my previous job at a small tech startup, where the entire company was remote from day one, video chats were rare.
Just a note for anyone else confused by the acronym TFS:

I looked it up on Urban Dictionary and it likely means "Thanks for sharing".
A true monolith is like a true function - it's absolutely useless because everything it does is pure and therefore it can't interact with reality at all.

In less metaphorical terms: you still need to sync external APIs, sync filesystem with the database, deploy to S3 as you don't want to saturate your web workers, or have conflicts in your parallel red-blue deployments.

If your monolith doesn't do anything I had just described then you probably aren't doing anything exciting anyway so it's quite unlikely that you've got a lot to say about software architecture.
Why I Use Linux
It is somewhat "newspeak", as bare metal has meant "without an OS" in the embedded space for a very long time. This is just a case of two different spaces using the same term for different ideas.
Your first sentence claims that there's going to be "a pull back in a few crypto currencies", but then the rest of your comment seems to be talking about ETHE, which looks like some sort of ETF for holding ethereum?
Because you’re out here propagandizing that robber barons aren’t that bad, they do some good things too!

You’re okay selling the company line in exchange for doing something you couldn’t elsewhere.

That’s the banality of evil.
Wasn't the problem that 5K displays(or maybe it's just this specific one?) are notoriously difficult to make it work on windows? Last time I looked into getting one I found out that it just wouldn't work without getting a thunderbolt card for my AMD based system, or a DP 1.4 compatible gpu.

On the other hand, HDMI 2.1 can now support 8K@60hz, so maybe this is not an issue anymore.
> My DSLR is the only lens I have that can produce a realistic photo nowadays and give me access to the raw sensor data.

Every iPhone currently for sale and I presume most high-end Androids support shooting in RAW, you just have to use a third-party app.
Another advantage of that approach is that if you make sure you always persist the serial number in the canonical format, and immediately parse the incoming value into the canonical form, then comparing 2 serial numbers is easy and consistent - including e.g. when constructing db queries.

I encountered a similar problem where an identity number could be represented in different formats, and the solution had been to store the string representation in all its glorious permutations. Doing db queries to find anything by that key was then impossible until the representation had been made consistent.

Then when e.g. creating reports for different systems we could format the output as per that systems expectation.