skysight-inc/HackerNews huggingface dataset:
> Here’s my threat model: attacker gets physical access to the key for five minutes.

That threat is so far off the typical path that it can't even see civilization anymore.

However, simply encasing the key in acrylic would solve your use case.

These keys are meant to solve the typical remote attacks like phishing--and they do that extremely well.

They also are quite good at stopping the: "Someone stole my laptop and now has access to everything." If the key is on your keychain, that scenario is stopped cold.

These keys are not really meant to solve one-to-one attacks by determined adversaries. And, to be fair, such an adversary is going to compromise your OpSec LONG before he tries to compromise your key.
Honestly I feel like if Scala would pick a less insane build tool, it would have much better adoption.
Yes wirecutter exist because of affiliate links but they do offer detailed reviews. I use/trust them often for purchases and amazon affiliates do not cost the user anything extra.
yeah, this is a low tweet. He is smart enough to know it is ugly sexism, yet continues to defend it.
Thank you for taking the time to reply. Checking your course
As someone who casually bought a bunch of BTC in late 2013 just for fun and never really did anything with it since then, I think the salt mine of btc hater blog posts that come out every time there is a new spike in value are the comedy gold.
And the few rare actually sane humans we have alive on the planet today are mostly smart enough to stay silent about it to avoid getting crucified or burned at the stake. ;)
That is basically what photogrammetry is all about. It's not easy, but it can work really well when done well.
2006. I never worked on Ceph myself, but I did work with a lot of Ceph folks. As far as I can tell, this particular idea was the little seed from which the rest of Ceph as we know it eventually grew, and the thing that most distinguishes it from other similar efforts.
It sounds like that's exactly how another processor worked: https://news.ycombinator.com/item?id=25623763
Would you mind offering a bit more detail about the "toggle"? Which browser, what's the name of the extension, etc. I would love something like that but don't really want to go through the effort of setting up a whitelist right now.
Small nit, the PRO version of Ryzen APUs do support ECC[0], also ASRock has been quoted saying that all of their AM4 motherboards support ECC, even the low end offerings with the A320 chipset.

[0] https://www.asrock.com/mb/amd/a320m-hdv%20r4.0/index.asp#Spe...
What's the point of this?

I mean, "fixing climate change" is like going on a diet. We pretty much know what we need to do, we just don't want to because it sucks.

It's not like we need a 0.01% change in emissions here, so what can $1000 a month do?

Consider 2020, where transportation took a major downturn over large parts of the world. Sure it made us emit a bit less CO2, but nowhere near what's required. And it's not like anyone wants that to continue.
> Also I wondered from the headline why keithp is into XCode

Yeah, dismissed it first thinking it was about appleIDE, really glad it dawned on me it's about X, good article.
Ok good, it wasn't just me being overly negative (because I usually am). I am not a stats grad, my math is weak, but it didn't look good to me, and I tried to get my employer to bring a stats specialist in to analyze. That got a cold response.
*more desperate every year
Nope, no plug-ins.
Me! I'm an app developer who wanted to get my mobile app reviews in Slack and Microsoft Teams as soon as they were posted.

I built AppReviewBot (https://appreviewbot.com/) to scratch my own itch and I'll be working away on that this year!
I feel like that is the lowest of low hanging fruit in immigration policy, to let people who we subsidize their schooling stay in the US. (Most schools have a variety of government subsidies).
Yes, Bitcoin is excellent for money laundering.
Got a link to that subreddit for us plebs not in the know?
Because 50% of advertising spend is wasted, but it's hard to figure out which 50%.

If you're doing an $XY,000 ad campaign, it's a waste of your time and money to figure out which 50% it is.

If you're doing a $XY,000,000 ad campaign, you employ people whose job it is to figure out which 50% it is. The thing is, you usually don't go ahead and pay them to blog about it.
You're not sure I was joking around?
Really?
one theory I've seen on tether inflation involves loaning tether via margin to people to buy bitcoin, which then pushes up the price of bitcoin, which then allows the tether loaner (that also holds bitcoin) to loan more tether as it's now backed by more valuable assets
Why do url shorteners even exist? They literally add no benefit whatsoever.
So REPL may make people less likely to document the code?

I don't see the correlation.
FYI the clip they use as an example contains a significant spoiler for season 2.

I know the show was on nearly 20 years ago but I only watched it 2 months ago for the first time :)
This is a very American point of view but you forgot that Japanese and other cars are sold all over the world and usually sold as cheap middle class type of car. Still, their reputation is the same all over the world where people don't maintain them more than they maintain a ford and certainly not maintained as premium European brands bought by upper middle class like BMW or Mercedes.

You touched the subject of design and this is also part of the reason, Toyota sells the largest number of cars in the world and have huge amount of data which they use to perfect the design and fix weak points, this helps a lot to make their cars last longer than other vehicles in the same price range and category.
That's nice! But do you think is it a better source of income as I am looking for income throughout the year? Thank you!
I've never been a huge fan of lispy syntax, but I've never been a big hater, either. Personally, I find the square brackets and curly braces to be just enough additional texture to make the code plenty readable, as long as you're using a good autoformatter. (Letting people make their own decisions about code formatting in any lisp seems to be a very quick route to a very bad time.) What I find, though, which makes me sad, is that many people knee-jerk reject any non-ALGOL syntax (Lisp, but also Smalltalk, ML, Prolog, whatever). To the point that I fear that not being able to understand the syntax becomes a point of pride. It reminds me a bit of the sort of asymmetrical intelligibility of Metropolitan French and any of the Canadian dialects, a situation where I also get the impression that the difficulty in understanding is more than a little bit deliberate.

So there's that. But I also do find that Clojurists have not been immune to some of the snootiness that seems to infect most functional language communities. And I wonder if some of the reaction comes from that, combined with Clojure maybe bumping into the rest of the world more often due to its identity as a JVM language.
Then you can rebuild it elsewhere or visit it in video games. Once you destroy a ruin, it’s gone. Doing it for the sake of entertainment sounds selfish, particularly when we have other ways of experiencing it.
not everything supports HTML, like calendar invites and SMS messages, and some of these things have character limits.
It would, if you’re ok waiting 20 minutes to receive your burrito..
It would have just been noted as a really bad fLu season.
I am quite baffled too.

Finding out how little focused work I do, even on the days that feel productive, was one of the biggest surprises of analysing my data. It turns out that a typical working day (9-17) would usually only give around 5-6 hours of actual work,

I'd be more than happy to get 5-6 hours of productivity in a day. I think even 2-3 hours of good focused work is really good for me.

PhD education is mostly real hard work so I wouldn't equate it to like reading emails etc. So yeah, this is super solid 5-6 hours of focused work solving some deep technical problems. Every day. This is no joke and nothing to feel bad about.
For anyone super interested in this topic (and the potential ramifications for Big Tech and society), Tim Hwang (former global public policy lead for artificial intelligence and machine learning at Google) wrote a wonderfully in-depth book about this. See the link below:
https://us.macmillan.com/books/9780374538651
Not rebuilding does not mean letting the ruins crumble. The aim is to keep them in the state they’re in.
I am curious about that Pareto's law as I never heard of that before...

Thank you by the way!
> Google works fine without javascript. Stunningly fast.

Until they block you for "suspicious behavior" after a few minutes of using it like that.
I did see one such study that looked at emotional expressions/body language rated on a Joy-Sadness Display Scale by 5 trained observers in addition to self-reported measures: https://www.researchgate.net/publication/233265431_Experienc...

Of course, this wouldn't really work for a longitudinal study.
I don't think this is really true, because spammers call numbers at random (or perhaps, in sequence). They are not working through the published phone book.
Explore Mental Models
Old joke: Advertising exec says: "I know I'm wasting 50% of my ad budget. I just don't know which half."
It’s not about what the API provider can physically support, it’s just about being a polite client. They probably can support 6 concurrent requests without it causing a problem. The point is that if they use offset or page number pagination with a maximum limit of 100, that’s probably a clue that you shouldn’t preemptively grab the first 100 pages in parallel.
A system to advertise how good FB's ad system is, built by FB who we know have fudged their numbers before? That isn't proof of anything.
Why don't you eat the eggs? I have ducks as pets and I love the eggs.
its classic can you separate the art from the artist comment.
If you think the artist has done something bad/is bad can you still fully enjoy the art.

Extreme example might be Cosby and Cosby Show.
If anyone with you as a contact uses Facebook then Facebook probably knows it anyway
The other thing that C++ and Rust have for collections and algorithms is that they follow a standard pattern.

Because of that, it is usually pretty easy to substitute an optimized algorithm or a container for another one with minimal code changes. In C, because there is no standard for how to do containers and algorithms, it is likely that every library does something a little different in terms of conventions making it harder to swap in implementations.
Digital Security, the Basics
I hate that we use twitter to report on stuff...it feels like the worst medium to talk about meaningful issues and the easiest way to get things twisted.
> It's really not possible to make an open-ended high bandwidth low latency interface to a huge chunk of FPGA silicon part of the regular CPU core's tightly-optimized pipeline

That's what's interesting about the article, because that's what the patent is about: "implementing as part of a processor pipeline a reprogrammable execution unit capable of executing specialized instructions".
Can't you just say that a password reset email has been sent? That is what we did when I worked in banking as a way to prevent this.

Whether or not you have an account, the system says a reset email has been sent.
There's nothing illegal about referencing somebody else's trademark as long as you're using it to talk about their product.

Having a trademark doesn't forbid your competitors from talking about you.
I saw Dialpad
What I found really impacts "time to recall" is the language or framework used.

For example, Go, not hard to recall, due to how rigid the language is with gofmt etc.

On the other hand, Perl, forget even trying to understand what drug you were on that day when you wrote this.

Then there is the extinct, like opening an old app made in cakePHP or backbone...

That's why I'm a proponent of ESLint, Gofmt, etc.

Pain today, pleasure later, hopefully.
Could this be a camera app on the latest iPhones with the built in lidar like technology? You’d snap an image and a mesh, right?
Ask HN: I'm addicted to YouTube, what to do?
I don't know what to do anymore. I'm addicted to youtube, just spent ~6 hours watching an assortment of videos, starting with reactions and ending with people scamming scammers. Having to work remotely has made my job even harder, now I can watch youtube without someone noticing. Every morning at the standup call I have to think of new excuses and invent things that I haven't actually done.

I have tried leechblock, but then I just install a new browser. I have a firefox, chomimum and and the latest addition Brave.

Is there a way I could make watching youtube harder for myself. Nothing seems to work. And it al starts with: "I will just watch this one videos..." and few hours later I'm so frustrated that I will just continue watching because I don't want to face the consequences.
When Google used to show organic results front and center and made advertising conspicuous, this was reasonable. Now that there is a pile of undifferentiated advertising on top of organic results, it's borderline fraud.
In the future you could train a model to predict the correct mesh for a given image. Then things get interesting!
These were state of the art 13 years ago. It’s not safe to extrapolate from this paper that they aren’t using servers having significantly more memory today. Thirteen years is more than 2 full depreciation intervals.
How fast can an FPGA be reprogrammed? If I close my FPGA accelerated machine learning training algorithm, and then open a PC game, would it be feasible to load the new gaming-oriented instructions in ~10-30" that a PC game takes to open?
Chinese billionaire Jack Ma suspected missing
Plex disappearing would be the best thing to happen to Jellyfin tbh. It would force a huge amount of new users their way and with those eyeballs would come progress.

I agree with your take in the first sentence so much unfortunately.
This a flawed way to measure ad spend and roi.

eBay tried what you did and noticed that revenue increase didn’t warrant the ad spending costs required to do so.
The downside of PCIe is PCIe is very complex. And the tools make interfacing with it bewildering. I really want a PCIe FPGA that looks to me like data magically appears on an AXI bus.
Awesome! I'm not sure if the version on the store has the tab backup feature enabled or not but there is a backup feature that is under the options area. It just dumps a json file with all your tabs and a restore feature where it opens up all those tabs again but that is really slow if you have a lot of tabs.

Interesting idea on the popup; I'll give that some thought.
Notre-Dame never made it to ruins, though. It is a building that was still in use and still has a function to fulfil. And the people rebuilding it have a good idea of how it was before.

It’s quite different from patching up however we can something that was left to rot for centuries.
In most cases attackers can use the signup flow to see if an email is registered so as long as it isn’t less protected (with a captcha etc) it isn’t any more of a privacy leak in that regard.
>A typical Windows laptop is unusable after two, three years

This shows that you are just spreading FUD. A Windows machine is no slower after 10 years than it is the day you bought it. Sure you might have added so much software-crap that the software runs slow (which is easily fixed) but the hardware is exactly as fast after 10 years as Apple hardware is. Do you think Apple builds their hardware out of magic and unicorns?
> > We were testing an AI that could show some basic emotions about internet content, and turns out it was very precise at getting “annoyed” by ads and “unsolicited” third party connections…

Holy shit that's such bullshit.

They are basically claiming they invented a artificial general intelligence, with feelings, that happens to feel the same way about ads as us. It's basically sentient instead of publishing research papers, they turned it into an ad blocker.
I think a relevant point is that UPenn has been publicizing their past affiliation with her and her research, in order to bask in some reflected glory for developing the vaccine technology.

If not for that, it would indeed be decades-old egg on their face. I think they’ve done a fair job of freshening up that egg, though.
No, more is not usually better. Especially with a garbage ""AI-generated"" (not) list with untrustworthy maintainers like this one. It's better to add a low number of lists with trusted maintainers, who actively curate their lists and respond to false positives. That means no "mega-list" abominations like oisd.nl.

I suggest:
https://www.github.developerdan.com/hosts/

https://gitlab.com/curben/urlhaus-filter/raw/master/urlhaus-...

https://raw.githubusercontent.com/notracking/hosts-blocklist...

https://raw.githubusercontent.com/anudeepND/blacklist/master...
How do you reduce inflation by printing more money?
That shows that 1) people are different or 2) you are a fan of Apple hardware. It doesn't show that Thinkpads are bad. IMO they are light-years ahead of anything Apple sells.

Source: Me.
American unions encourage that in a number of ways. I don't know why unions don't like good people going into management but they do
Both this and the previous article

https://adalytics.io/blog/tens-of-thousands-of-news-articles...

are more interesting than the domain and page design would imply. They seem to be developing a browser extension for "personal ad analytics."
Could this issue of expressing the journey be addressed by leaving code/markdown breadcrumbs in Juptyer notebook like cells?
Out of curiosity, how do use it without bumping the trackpad while typing?
The most likely explanation for a pretty bad “flu” near the usual peak of flu season is that you don't need quotes around “flu”.
Having formed a new remote music collaboration during the pandemic, this is highly interesting to me. I can’t tell from the teaser: is this for premise loops or is this for midi bits or is this for recorded audio or something else?

PS: Looks like you use a Mac, judging by the teaser. How much effort to port to AudioUnit (I’m on Logic)?

No matter what, awesome concept!
Genuine question- has that happened to you?
Looks like https://old.reddit.com/r/TargetedShirts/
I mean, we basically had a test run with SARS.

Only through good fortune did SARS flame out.
Anyone interested in this needs to check out
Fyodor Serzhenko's work: https://www.linkedin.com/company/fastvideo/

Doing the same thing but on CUDA cores. I am evaluating it for our needs and the quality of the whole SDK is outstanding. Great doco and testing, and performance is amazing. And thats not over 12 cores, it's over hundreds or thousands.
If I had to pick one single advantage of F# over Haskell, it would be the general lack of partial functions. F# also does some really neat things with pattern matching. (See, for example, active patterns.)

The C#-style object model is arguably an advantage for certain purposes. I always feel guilty doing it, but object oriented domain modeling really does feel more natural for certain classes of problem.

On the downside, F# lacks higher kinded types, and you're absolutely on your own when it comes to making sure things that should be pure are actually pure.
You shouldn't be so quick to jump to conclusions! To be clear, I'm about as far from "right wing" as one can get. I wasn't aware that standing up for the First Amendment rights of others was a partisan issue, though.

Now, I realize that -- in today's divided society -- I'm supposed to be completely on board with silencing those who hold different opinions or disagree with "our" beliefs ("canceling", I think it's called?) but, well, it just don't work like that.

See, I'm from the rural midwest (a self-proclaimed "country boy"), I drive a big 4WD truck, I ride a loud ass Harley-Davidson motorcycle, and there's three or four times as many guns in this house are there are people. My hometown, my family, my friends, and my acquaintances are all overwhelmingly Republicans -- including some of the people that I love and care for the most in this world -- yet, somehow, I've been a Democrat for my entire adult life.

Contrary to what some folks in "my" party seem to think, however, EVERYONE (still) has the right to their own beliefs and opinions -- and to express them -- no matter how ignorant, ill-informed, asinine, outright stupid, or batshit crazy they may be!

We have a saying around here in "my neck of the woods": I may not agree with what you say but I will fight for and defend to my death your absolute right to say it.

For the record, the only time I've even come close to attempting to "silence" someone or prevent them from exercising their rights has been at funerals -- as a (proud) member of the Patriot Guard Riders.
Planned Chinese Dam Along South Asian River Triggers Concern in India Bangladesh
Sure thing, I'll edit this reply with the extension in question when I get home. Won't be very long.

[edit] The extension is called Quick Javascript Switcher. https://chrome.google.com/webstore/detail/quick-javascript-s...

It works as advertised for being a Javascript toggle.
Change your local dns, either your machines host file or a Pi-hole, and redirect YouTube to your work ticket queue.

Give the password to your pi-hole to a friend, girlfriend, enemy, etc and have them set to something new.

Covenant Eyes is a web browsing accountability platform that can designate an accountability partner to review your browsing, if you want to take it that far.
You shouldn't make so many assumptions. If you're confused, ask a clarifying question instead of going off of incorrect assumptions.
There was some follow up work as well: http://blog.dinaburg.org/2013/09/bitsquatting-at-defcon21-an...

And I am beyond certain they were not typos; the requests were for long URLs that no one would be typing by hand. A few were for services that humans never enter urls into (like the Windows crash reporter).
It appeared 2 ads for me, the first one very big with 3 clickable links
Online advertising is fundamentally broken because it pegs dollar amounts to HTTP requests. Ad fraud steals billions from advertisers because it's so easy to fake being a publisher, impression, or click. Not to mention that you have to take the word of the upstream partner (ie Google) that the requests are valid without them providing you any actual request logs.
The early internet had bum fights !?
My UC (Santa Barbara) used MIPS in its computer architecture classes.
This must be the mindset it takes to work in the ad tech industry.

Ads are sort of like porn. There are lots of things you certainly know serve no other purpose than to advertise something and you can block them outright. Native advertising is certainly difficult though.
They probably know it in some database, but won't let you log in with it. So this password recovery thing won't work on dheera.
What prevents a group of chimpanzee to kill their Alfa leader?

Alfa leader could be the most powerful chimp but can he be stronger than 2 or 3 chimps attacking simultaneously?
Well, both Russian and Oxford vaccines seem very effective, even though they are using conventional technologies. Without BioNTech or Moderna, an effective vaccine would have been delayed by maybe 3-6 months, which isn't too bad.

But now that mRNA vaccines have been proven, they might be mass distributed in about 9 months in a future pandemic.
Network effects' power law nature, desire for a-political money, capital flowing into areas of least constraint & friction etc. seem to be just beginning.
The depths of his delusion are incomprehensible.