skysight-inc/HackerNews huggingface dataset:
The attacker will then inspect itself to see if network loggers are being used, or if it's running in a test environment (network location, machine fingerprint, et.al.) then adapt its behavior accordingly to avoid setting off any warnings.
Distant Future Warnings: The challenges of communicating with eternity (2017)
"Radioactive waste and toxic mining byproducts will remain deadly for thousands of years – maybe forever. Generations in the distant future will need to know about the places this stuff is buried, and to stay away. Deep in the arsenic-contaminated underground at Giant Mine near Yellowknife, contributor Garth Mullins wonders how we can warn the distant future. Is it even possible to send messages that can outlast governments, languages, cultures, nations – maybe even humans?"
> How long will it take for OSM changes to make it into Apple Maps?

Never, I think. Apple Maps doesn't import from OSM.

Also you're pretty lucky if your suggestions to Google or Apple are taken into account quickly. Most times they can linger for months or even years, and even get randomly refused or ignored. At least in OSM you can fix the map directly.
One must note * across Europe. No bullfighting in Italy.
Edited and added:

People underestimate the value of good analysis. When an article has been vetted by thousands of intelligent actors from diverse fields, veracity and insights can be far superior than what any AI can offer. It is like having a consortium of peer reviewed articles evaluated by crowdsourced geniuses, with a punishment/reward system that keeps the shortcomings of human bias and greed in check. Compare this with Google, where the wisdom of the crowd is often influenced by popularity or profit, with AI augmenting the darkest parts of human nature.
Looks like a really great start! Just gave the app a quick test and the basics seem to be working fine.

Apart from automatic cropping and perspective distortion correction others have mentioned already, the white margins of the exported PDFs are IMHO quite a bit too large. In fact, as the app is a document scanner, I'd not expect any border at all.
I think there are at least two cases where JVM interoperability is relevant. The first is when a company is already using the JVM and so knows how to deploy and monitor it; in that case, it’s easy to choose because it presumably imposes limited burdens on the company’s operations people. The second case is when you want access to some mature environment, so that all kinds of packages and services are available to support it, but don’t have a commitment to any one in particular yet, and Clojure qualifies because of the JVM; in that case, a non-JVM language like Python, PHP, or Ruby might also work.
Performance/watt matters. You can just set TDP to what you want with throttling choices.

If you want a 45W TDP from the 3700X, you can just pop into Ryzen Master and ask for a 45W TDP. Boom, you're running in that envelope.

I think shopping based on TDP is not the best, because it's not comparable between manufacturers and because it's something you can effectively "choose".
I think you’re right that Superhuman is a luxury product. The luxury segment is pretty underexplored in software.

LVMH’s market cap is north of 300B.

There’s plenty of scale in the price insensitive audience!
Minifying usually doesn't touch string literals. If you have a function like connectToSite, and tell it to connect to "https://mysite.com/", then minification will rename connectToSite to just the letter "a", but the site URL stays the same and will be easy to search for in the code. If you want to connect to www.evil.com and make it not clear, you'd have to do stuff that results in longer code, like split it up into individual characters, add number values to them to get different characters, and string cat a bunch of them together to get the final URL string.
What browser did you use? It's interesting because the M1 is so new and I wonder about JS engine optimizations on various browsers.
Thanks, it is very helpful and I never knew companies charge so much for SSO, Now we have also decided to raise the price of SSO plan. Thanks for sharing this
So can a bug.
Clojure is fast or similar in comparison to main stream dynamic languages.

REPL development is what I miss so much from other languages. You typically don’t add dependencies as frequently for startup being an issue.
Show HN: DashingDev – a card deck that guides programmers
This sounds like a obvious question, but when do you log the data? Do you set a timer every 15 minutes? What about the time spent logging data every 15 minutes? Any complementary apps?
Wowsers! That was a long read, I skimmed through a bit of it.

Kudos for dedicating time and effort to high quality long form articles - this is something that online needs to revert to.

That said, can you give us a TL;DR if you have a moment :D
> it's not true that ECC is supported well on AMD.

That's an extreme claim. Why do you say so?
> The problem is-- you can't compare the TDP nor even the system cooling design guidelines between AMD and Intel.

Doesn't matter for me since I'm not interested in comparing them.

> Both are optimistic lies, but-- if you look at the documents it looks like currently AMD needs more cooling, but actually dissipates less power in most cases and definitely has higher performance/watt.

I'm aware of the situation, and I always inflate the numbers 10-15% to increase headroom in my systems. The code I'm running is not a most case code. A FPU heavy, "I will abuse all your cores and memory bandwidth" type, heavily optimized scientific software. I can sometimes hear that my system is swearing at me for repeatedly running for tests.

I don't like to add this paragraph but, I'm one of the administrators of one of the biggest HPC clusters in my country. I know how a system can surpass its TDP or how can CPU manufacturers skew this TDP numbers to fit in envelopes. We make these servers blow flames from their exhausts.
What does it turn into?
I’m just curious to know can you make calls using Apple Watch
How much does it take CPU wise on the client? I use arq which does need an app on the server side, but it's bog slow in scanning your client and uploading new chunks, taking up a significant amount of CPU. While something like carbon copy cloner is orders of magnitude faster.

I'm upgrading to an M1 mac soon although, so that might not be as much of an issue anymore.
A related open source library for iOS.
https://github.com/wetransfer/wescan
Why do people watch sports, reality TV, or Jeopardy? It's a zero-risk, low-effort way to participate in something interesting or the community surrounding it.
On your single-user dev laptop it’s very likely that you are user 1000 and probably put yourself in the docker group so you wouldn’t have to sudo to run docker ps.

So then running your containers as that UID without user namespacing (docker’s default) opens you up to more attack surface than if it was uid 1001.
sed -Ei 's/foo|bar/foobar/g' ?
dyn just requires the object to be behind some kind of pointer. The vast majority of the time, that pointer is a Box or an Rc/Arc, but any form of indirection can work.
SARS-CoV-2 escape in vitro from a neutralizing Covid-19 convalescent plasma [pdf]
Yes and the GIMP devs are still hard at work trying to make GIMP use GTK 3... (beta recently released)
Because presumably you'd be downloading it from your bank's website?
Backups can't fix what was already corrupted when it was written to disk.
My experience in the US is that week numbering is used principally by finance to keep track of weekly operations, which is usually only payroll. So it makes perfect sense to me that the week containing Jan. 1 should always be week 1 - in fact otherwise is rather unintuitive. This results in some confusion around the new year but this is kind of an intrinsic problem with weekly payroll and is one of the reasons that payroll closing tends to be a specific and somewhat complex process, as the year totals are calculated more or less independently from the pay schedule.

Outside of payroll, I have seen very little use of week numbers for any purpose in the US. Far more common to write "the week of Jan. 18" where the date given is typically, but not always, the Sunday or Monday in that week. Week numbers are not displayed on most calendars to most people would be pretty frustrated if you told them a week number.
Can you provide any source at all that Trump was even aware of this provision? Any comments he made on disliking it? I’d accept anything at all that even gave the slightest credence to your assertion.

Because otherwise... it’s just projecting a fault where there is no evidence of one as revenge for some hurt feelings you have, after all, any think bad directed at a bad man is a good thing right?

So what if you are making it up, it’s “always ok to punch a Nazi”, right?
According to Google's old paper on the subject, about 1% of their machines suffered from an uncorrectable (i.e. multi-bit) error in a year.
Thanks, it is true, until now we have given all our users very good customer service, but going forward we cannot do this for all, we want to focus on the paying users more then the free ones.
Yah-- one should look at performance within a given power envelope. Being able to dissipate more and then either end up with the fan running or the processor throttling back somewhat is good, IMO.

The worst bit is, AMD and Intel define TDP differently-- neither is the maximum power the processor can draw-- though Intel is far more optimistic.
I just started doing this, but using 30-minute blocks, and fewer categories. "Keep it simple." The goal is to make sure certain activities receive at least a minimum of attention, and others don't exceed a maximum. The rest, you don't need to schedule or track. A flexible system. Freedom alongside order. Open prairie just outside the city grid. Dreams amid plans.
A surprising number of consumer GPS receivers use WAAS - it's pretty inexpensive to add since the WAAS corrections are downlinked as part of a GPS datastream you need to decode anyway for ephemeris.
If any of y'all need a CLI tool to check your DNS propagation check out dug!

Repo: https://git.kaijucode.com/matt/dug
HN Post about dug: https://news.ycombinator.com/item?id=25618012
For which bit flips are even more relevant: EdDSA has this nasty tendency of leaking the private key if the wrong bits are flipped (there are papers on fault injection attacks). People who sign lots of stuff all the time, say Let's Encrypt, could conceivably gain some piece of mind with ECC.

(Note: EdDSA is still much much better than ECDSA, most notably because it's easier to implement correctly.)
All activities? anyone know what the limits were?
I've seen a few posts on similar topics related to "creep" and I think the bottom line is that as humans we tend to be obtuse to the little things that change over extended periods of time. I started out in consulting and there it was scope creep, we tend to let lifestyle creep inflate our expenses, and concept creep looks to be no different.

We are often the frog in the boiling water and by the time we realize what's happened it's too late.
Methods to Use Default Parameter in JavaScript Function
Have Meetings, Only When Necessary, Mostly One-on-One
Maybe I'm missing something, but Bitcoin seems more and more like selling tulip bulbs to me.

Good for the people who timed the market right. I often think back to ~2010 when I first learned about bitcoin and thought "maybe I'll buy 1000 of those for kicks".

But at the same time, buying into that market now seems like a bad idea.
I think the limitation that no-one has managed to solve is that visual programming paradigm approaches tend to focus on solving a specific type of problem (drag and drop GUI builders are a perfect example), and this means their usage is narrow and they're never been widely adopted. Building a generic visual programming tool that can be used to solve any type of business problem across any business domain is very difficult if not dare I say it impossible.
Especially since, if week numbering isn't common in the US, you might only be looking it up when you're trying to collaborate with someone in Europe!
No, I’m saying modify the source of the extension so that the extension can only make requests to a whitelist of urls. The extension might be able to disable malicious functionality or something, but you can be certain that it’s not making malicious requests.
> it's not true that ECC is supported well on AMD

ECC is supported on most Ryzen models[1], as long as the motherboard supports it. In fact, ASUS and ASRock (possibly others) have Ryzen motherboards designed for workstation/server use where ECC support is specifically advertised.

[1] The only exception is the Ryzen CPUs with integrated graphics.
Looking at this chain of middlemen between the buyer and seller, it's a bit nauseating. No wonder products cost so much.
You won't find one because it doesn't exist.

As a person who's made a living the last few years working in the guts of Android on embedded devices, there are so many holes in this way too common myth that phones are listening all the time.

You don't even need to dive into the technical aspect of it, what on earth is the risk reward here?!

Risk: Forever break the trust people have in your devices, this isn't some grey area intrusive tracking that would just get swept under the rug...

Reward: Get noisy info about people's interests when you literally own the device that contains more information about than their own short term memory does!

It's nonsensical, and there's no way that Google could do this that wouldn't already have been caught.

I mean is the theory that all Google devices do it and somehow no OEM has realized their microphone is getting accessed? (Because even with the lowest level access on the device, modern microphones are not so unsophisticated, there's no universal way to access it in a way a manufacturer wouldn't catch onto sooner or later

Or Google did this but only on phones they own or something?

It's nonsense.
> it uses offsets for pagination... understood to be bad practice by today’s standards. Although convenient to use, offsets are difficult to keep performant in the backend

This is funny. Using offsets is known to be bad practice because.... it’s hard to do.

Look I’m just a UI guy so what do I know. But this argument gets old because I’m sorry, but people want a paginated list and to know how many pages are in the list. Clicking “next page” 10 times instead of clicking to page 10 is bullshit, and users know it.
Out of an abundance of paranoia, I always open all financial and secretive websites in Incognito mode, and I always disallow all extensions in Incognito mode.

We should really have separate dedicated browsers just for doing transactions.
Philly scientist behind COVID vaccine tech was demoted by UPenn
If that is our definition for a building being impressive, sure, modern office buildings will not hold the test of time without maintainance as well as the Colosseum...
And in Switzerland this is Swiss Cow fighting (combat de Reines)
it will be published in govt's library, to which you login using Aadhar linked creds
You'd be surprised how many GPS devices never cold start. I've worked with multiple serial GPS receivers that stored the last solution in nonvolatile memory as a start point.

A quick way to check: buy a brand new one, plug it in, and see if it starts offering (low-quality) fixes for Shenzhen or wherever it was QAd. Unfortunately some receivers won't actually provide NMEA sentences until the quality flag goes on, so it's not quite this obvious, but I just recently bought an industrial cellular modem with onboard GPS and experienced a 30 minute or so wait before the quality flag came on and I started getting NMEA sentences. Presumably it was busy discovering it wasn't in Kansas any more.
This has happened in the UK and Europe already, I believe. The UK definitely - research only counts if it is open access and deposited within a certain number of days of being accepted. Otherwise it doesn't "count" towards evaluation of research output when reviewed.
(1) Practical. Many people look at git repos. No one audits with crxcavator.

(2) Traceability. git has secure hashes, and things can't change when you're not looking.

My experience is that Google cares deeply about its own security, but not much about the security of its users. This sort of change is reasonable, but completely outside of Google's psyche. Google will

(1) Silently disable Android updates, leaving many running exploitable phones

(2) Hold back security tools for Google Apps without a premium subscription. If your account was compromised, you have no way to do audits to understand what happened without $$$, which leads to many more attackers.

(3) Expires Chromebooks rather quickly. Fortunately, unlike Android, it lets users know, but given the target market, many can't afford to upgrade.

(4) Runs appstores full of malware. When malware is discovered, users have no way to know what it did. They're just notified malware existed.

(5) Doesn't allow any sort of reasonable sandboxing of Android apps. If an app asks for filesystem, maps, and other permissions, you need to agree to run the app. I can't have Android give a dummy location or otherwise

Given that the bulk of Google's business model is built on mass surveillance for advertising, with users-as-statistics, this isn't too surprising, but it's something to be aware of if you use Google.

I firmly believe in civil liability for software companies which ship insecure products. They shouldn't be able to externalize costs like this. Follow good security practices, or your insurance premiums go up.
How to build a landing page quickly by copy-paste as a developer
> Yet cities don't build houses, everyone seems to want them magically to be built in someone else's city.

California high-speed rail was pitched as a solution to address housing costs at the estimated cost of $80.3 bln https://www.latimes.com/california/story/2020-02-12/californ...

The problems you mentioned are are only becoming obvious since the high-speed rail project been so mismanaged.
This laundry list of features still does not tell me why I should be using clojure over any other language.
With the fall of the western empire, Rome's population collapsed from over a million to only tens of thousands. It wouldn't cross 100,000 again until the 18th century. It just didn't have the wealth or population necessary to hold such shows.
Sure, its just more useful when your languages syntax revolves around parentheses.
You're right, but it's not even really an "attitude", and it's not necessarily malicious or even stemming from a power relationship.

It's just a fundamental cognitive blind spot that humans have about assuming that what's obvious to ourselves is obvious to everyone else. Every one of us who's jumped into a question about something they're working on and had the other person say "I don't understand the context" has done this.

The opposite is what makes great teachers, authors, and other communicators great: they recognize what the other person doesn't understand.
Patterns are nice, but dangerous to follow blindly in an immature and fast growing industry operating like a pop culture. As an example the book suggest to use YAGNI, a pattern/principle Jim Coplien suggest we fight. I’m inclined to agree. Plan ahead when you can. And btw pull in decisions to get early feedback in stead of delaying to the last responsible moment. Just some thoughts, but I like that patterns are collected for different contexts. It allows for discussion and learning.
Genuine question from someone from an entirely different world - why on earth do you have 10 billion log entries? What is in them and do you ever do anything with them that requires you to store so much data rather than just a representative subset?
Wait till you hear about Egypt.

Prices in Italy are balanced and not even that bad. The ticket to the colosseum is 16€ and includes the entire park nearby. 16€ for the main attraction in one of the most visited countries in the world is pretty reasonable.
If you are utilizing the JVM via Clojure, the situation is not that bad. A lot of Clojure's and Java stdlib's features are now available pre-compiled with GraalVM as a native executable via https://github.com/babashka/babashka, which provides you with instant process start

So the Java ecosystem is kinda living its renaissance now :)

But overall I very much share your sentiment.

Also worth noting that if you really want to slim a JVM runtime down, from a typical ~300MB size to ~50MB, it's not very complicated using `jlink`:
https://medium.com/de-bijenkorf-techblog/creating-the-smalle...

It's still 50 times more than what I consider sane, but still... ;)
How does that work? You open the app before you start every activity and labels it? Even mundane ones like changing clothes? Do you account for the time you spend logging things in this app? How can you keep sanity having to open an app every time you start a different activity?
Rust is now overall faster than C in benchmarks
I am really really grateful I am not this kind of person. Not everything needs to be quantified and analyzed. I'm glad OP had fun with the exercise but this drive to amass data will only lead to human suffering and oppression down the line
Actually recognizing when that statement is false is what pushes you further as a developer.

This statement tend to be true when you accumulated so much debt that you cannot fix it anymore, but if you end up there with the premise it's your startup, you failed as the tech lead
I Started Using ES6 Modules in Node JavaScript
This is the fundamental problem in security. You have no idea that there is a problem until after you get robbed.
FTA: "This post aimed to cover a scenario where the cost of compression, in both compute resource and time-to-build, was significantly outweighed by the savings it would make."
Budg – The tool you need to track your subscriptions
I dont know what the notification features are with the stock firmware and TBH it is a hit and miss affair with all devices and you have to do plenty of research before buying.
The device I quoted is ripe for hacking and currently the waspos firmware is a blank slate for anyone to create custom watch software.
I believe data export and/or backup should be a separate API, which is low priority and ensures consistency.

Here we just see regular APIs are being abused for data export. I'm rather surprised the author did not face rate limiting.
I actually don't want to get into the argument over which is better, but dynamic and static types do change everything, also with regard to how those features in the list feel in a language.
Yet another patent that should never have been granted.

SoC have been a thing for a long time. SoC = CPU + FPGA on a single chip.

Looking at the patent, the list of 20 claims is absurd. The title says it all "... PROGRAMMABLE INSTRUCTIONS IN COMPUTER SYSTEMS", they're trying to patent anything that can run or dispatch instructions.
Isn't at least part of that because an amphitheater, by the nature of its shape, is more likely to survive for millenia than an enclosed, rectangular office building?
To point out the obvious: generally API providers don’t particularly want you to pararelize your request (they even implement rate limiting to make it harder on purpose). If they wanted to make it easy to get all the results, they would allow you to access the data without pagination - just download all the data in one go.
The repo is archived. Last commit is 2 years ago. Is the project completed, or abandoned?