skysight-inc/HackerNews huggingface dataset:
> So how do we guard against this type of attack? How do we know this hasn't already happened to some of us? What is the potential fallout from this hack, it seems quite significant.

Verified builds. That means deterministic builds (roughly, from a given git commit the same binaries should result no matter who compiles them. It requires compiler support and sometimes changes to the code) plus trusted build infrastructure.

To verify that you haven't been compromised do a verified build from two independent roots of trust and compare the resulting binaries. Add more roots of trust to reduce the probability that all of them are compromised.

Establishing a trusted root build environment is tricky because very little software has deterministic builds yet. Once they do it'll be much easier.

Here's my best shot at it:

Get a bunch of fresh openbsd machines. Don't network them together. Add some windows machines if you're planning to use VS.

Pick 3 or more C compilers. Grab the source, verify with pgp on a few machines using a few different clients. For each one, compile it as much as possible with the others. This won't be possible in whole due to some extensions only available in a particular compiler used in its source, but is the best we can do at this point. Build all your compilers with each of these stage-2 compilers. Repeat until you have N-choose-N stage-N compilers. At this point any deterministic builds by a particular compiler (gcc, llvm, VS) should exactly match despite the compilers themselves being compiled in different orders by different compilers. This partially addresses Ken Thompson's paper "reflections on trusting trust" by requiring any persistent compiler backdoors to be mutually compatible across many different compilers otherwise it'll be detected as mismatched output from some compiler build ancestries but not others. Now you have some trusted compiler binaries.

Git repository hashes can be the root of trust for remaining software. Using a few different github client implementations verify all the hashes match on the entire merkle tree. Build them with trusted compilers of your choice on multiple machines and verify the results match where possible.

At this point you should have compilers, kernels, and system libraries that are most likely true to the verified source code.

Make a couple build farms and keep them administratively separate. No common passwords, ssh keys, update servers, etc. Make sure builds on both farms match before trusting the binaries.

The good news is that most of this can be done by the open source community; if everyone starts sharing the hashes of their git trees before builds and the hashes of the resulting binaries we could start making a global consensus of what software can currently be built deterministically and out of those which are very likely to be true translations from source code.

EDIT: https://wiki.debian.org/ReproducibleBuilds is Debian's attempt at this.
Maybe what is covered in the article isn't the full story. Now that this story is public, I wonder if Github will go public with their explanation about it or they try to explain it internally.

At least form outside it seems like they pay some attention to "inclusion" and "diversity". So it shouldn't be that simple. https://github.com/about/diversity

I would give them the benefit of the doubt until they get the chance to explain it.
Floppy disc controllers were high-complexity parts circa 1979; e.g. the Woz disk controller that made the Apple ][ disk drive affordable.
Sharding is a great way to scale, but comes with costs. One cost is that you need a separate transaction layer "on top of" the shards if you want to offer transactions. If you want to offer strong isolation (such as snapshot or serializability), good performance, and fault tolerance, that transaction layer can be quite complex. Scaling a single RSM is much cleaner conceptually, and (depending on the model) can offer very strong semantics (strict serializability would be typical). Having a single system image (rather than trying to simulate one through distributed transaction protocols) also removes complexity in other areas, such as making it easier to do large read queries MVCC-style.

I don't think that being able to scale an RSM up makes anything possible that wasn't possible before, but it is convenient in all kinds of ways.
They certainly aren't infallible, and were wrong on those rulings. But until someone with standing brings a new case, that is the law as it stands.
They decided to.
Tourists have been banned since March I believe.

This was international arrivals at LAX August 11 (the worlds third busiest airport):

https://imgur.com/a/fFsVSXf
Very little. The announcement here is not a new draft, it is starting the formal proposal process for adding type parameters to the language.
> From what I understand, Parler was bankrolled and designed to do exactly what it was ultimately shutdown for. That is, be a concentrated anger-machine-echo-chamber.

How is/was Parler different from Facebook in this regard? Facebook makes money on ads, so the longer you stay on their site, the more money they make. One way to get people to stay longer is by encouraging the sorts of posts that gets people riled up.

I'm not accusing Facebook of being complicit in the events of last week, but from personal observation, I see a lot more low-effort, angry posts on Facebook than I do on Twitter or Reddit.
In Germany, we have two different institutions: Universities (identical to US university I guess) and something called Fachhochschule (I don't know if there even is a correct translation for that, lets call it FH).

University is focused on covering the theoretical aspect of computers with a lesser focus on practical applications - although they are thought to some extent - while FH is more focused on building applications and real-life systems with a smaller focus on theoretical aspects.

The only problem is that FH has long been considered second class and everyone wants to attend university. but in my opinion and based on my experience, many people would be a better fit for FH.

For someone deciding whether to attend Uni or FH, it is often not easy because you cannot guess what you are going to do in your work-life and whether you might enjoy research or you would rather go into industry directly.

Aside from that though, I think it is great that we have different institutions for different audiences with differing goals. Does something like that exist in the United States or somewhere else in the world?
There is no legal process of an "acquisition". When somebody says acquisition they really mean reverse triangular merger.

See https://witnesseth.typepad.com/blog/reverse-triangular-merge...
Yes this is mostly my feeling to. A central part of libertarianism seems to be insisting the governments give up power, which is all well and good until someone worse steps in to pick it up.
To be fair, Visa would’ve had the partnerships with banks to really push for standard API access to various banks. Plaid works by giving them your username and password in most flows (although some banks like Chase finally have an authorization flow without MITM).
At least in Germany it's quite normal that people totally loose all their driving skills on the first day of snow in the winter.

Somehow they get them back quickly within days. Or those with difficulties driving in the snow stay at home, not sure what it is.

Years ago my average commute in the evening was 25min or so, with the first snow of the season, this was upped to 3.5h.
Dobot Robotic Arm
This is so stupid. Silicon Valley is not a company or a federation, so the charge of "monopolistic force" is false. It's just a hub of innovation. Parler is a terrorist network.
> So is it possible that someone might test negative but then is actually asymptomatic?

No, with PCR, the opposite is true. It is most likely that someone who is "positive" but asymptomatic has such a miniscule amount of virus in their system that they're not infectious.
1) The only places that were completely glaciated during the LGM were Canada and a few bits of Northern Europe, which aren't the kinds of places you'd really expect to see a precursor "civilization".

2) You can still find stuff in previously glaciated areas, under reasonable conditions. I've found artifacts in probable pre-LGM deposits myself.

3) It's very difficult / borderline impossible for human hands to erase entire cultures. North Americans spent centuries eliminating as much native culture as they could, and it's still visible almost everywhere. We'd expect lots of indications to survive, from faunal population estimates, to sophisticated material culture, to simply drawings and other creative works, not to mention houses and infrastructure. These are all things we find for upper pleistocene groups, but not for hypothetical industrial precursors.
I disagree, what if you were just mulling around the building? Sure, that's trespassing but that's on an entirely different level from active insurrection.
I think it is a bit reductionist to say (2) can "do a business IT degree or something". Taught CS today - at least at UK universities - is a mix of discrete mathematics, electrical engineering, and software engineering.

I think it comes down to the age old debate as to whether a degree is supposed to prepare a student to roll into an industry job or whether it is supposed to be an introduction to academia. An academic purist might argue that these should all be separate degrees because they are different intellectual pursuits, while a company would likely much prefer to take on a graduate with some understanding of all of the above.
The advantage of text-based accounting is that files can be version controlled, just like software. I am using git and commit whenever I have a consistent state, as verified by (lots of) balance assertions.

In some sense, git commits are "meta transactions" for my personal journal, leading from one consistent state to another consistent state.
You can’t write intersection, union, difference, subset (contains all), or powerset as reusable functions for any element type. The idiomatic thing for now is to rewrite them as loops over and over, but that’s error prone, hard to read, and not a good use of time.
I haven't started redoing my home network in 10Gbps yet but after scanning forums for a few weeks (back in the summer), I've seen many people say that Mikrotik switches work without any issue with several non-Mikrotik DACs (not sure I'm remembering the abbreviation well but it's a small device that converts from SFP+ to 10Gbase-T Ethernet cable).
Ledger has some built in: https://www.ledger-cli.org/3.0/doc/ledger3.html#Time-Keeping

There's also Timewarrior from the Taskwarrior people: https://timewarrior.net/
I agree that they were wrong. But that is how things stand now.

And they do have a cause to detain you -- you might be carrying a deadly virus. Until you can prove otherwise, they can detain you.
If you turn up the brightness to max when your eyes hurt the text is legible.
Hmm, it looks from this article all three are used:

https://en.wikipedia.org/wiki/Solid-state_drive

>sometimes called a solid-state device or a solid-state disk
It's also worth remembering that redhat itself is repackaging other people's programs into a distribution.
Nobody can be so vulnerable to the words of other people that they will do obviously bad things, unless they are stupid.

Normal people are vulnerable to lies only in the sense that when presented with deliberately false information that they cannot verify immediately, they may trust the liar and make a wrong decision to do something that they cannot know yet whether it is right or wrong, e.g. buying something cheap for a high price or being the victim for another kind of fraud.

Only someone stupid will beat someone or burn a house because of some false accusations.

All the arguments for these deplatforming actions were that the people, who would have heard the propaganda of those to whom the access is denied now, would have been easily convinced to do stupid things.
I had used Meet in a Gapps context pre-pandemic, and perhaps due to the confusion you describe was unable to create a meeting in my GMail account and get a link for people to click on to join— the closest I could do was send them a calendar invite, and that was unacceptable.

Later on, it became possible to just go to meet.google.com and click "Start a Meeting".
It’s the first time in 20 years those elevated areas have reached these temps.

The average low is around -3.5c for January.

You might be giving the BBC an overly hard time here. This does appear to be a significant (1 in 20 year) deviation.
How do you figure? Mexico and the US's populations only differ by a factor of ~2, and Mexico is the smaller one.
My guess is that the Democrats will be unlikely to make radical changes needed to fix all the things that need to be fixed.

I see the left side of politics generally as weak and unable to take strong action.

The left likes to listen - an admirable trait, but listening and collaborating too much dilutes outcomes.
Vulkan & Metal both have equivalents, at least for Linux & MacOS. As do most modern consoles.

Mobile is an issue, yes. Though curiously sphere impostors were first proposed for use with and implemented using GLES 2.0 for a significant performance and quality improvement in drawing thousands of spheres for molecular rendering. It all depends on what your use case is.

Also hardware with Shader Model 5.0 support came out >10 years ago now. There aren't a lot of desktop computers still using hardware that don't support it.
That's not altogether true. They've been footnoting his posts where there's been a mismatch with reality.
And who will do the protecting if we are all susceptible? You?
I don't think there was any claim that the download was legal.
:facepalm:

Of course, it's not the first time Jack has been a hypocrite. Remember when he donated millions to Kaep right after Kaep glorified and encouraged rioting and violence (via tweets)? Ah, those were the days.
The rank-and-file employees that work for companies like this have other goals, like buying houses and saving for retirement, it's not a single dimension. Yes, they want to help the world but not at the expense of themselves and their own financial future.
Well, for one, democratic countries are supposed to be governed by representatives elected by people, not by corporate boards.

Ability to selectively enable or disable people from being able to access voters is tantamount to having a huge influence on election results.

While in the past you could avoid using social media, today this is THE way to reach most of voters. Most people no longer pay substantial attention to what happens on television, forgot what radio is (it is a little bit of noise your car gives so that it is not quiet) and don't read printed papers.

Now, this time it happened for Trump and we can discuss whether this was or was not a good decision, but the question is who is going to wield the power like that in the future and whether it is even permissible do to something like that.

On one side you have the idea of free speech, but then added to social media you have inevitable disinformation as anybody can get amplified and amount of information is such that it is not possible to verify and vet it.

In the past you would have handful of news-generating organizations and it was easy to spot and call false information. But this is forever gone, there seems to be a need to find out some kind of new equilibrium that will allow detect and filter misinformation without anybody having power to singlehandedly "vanish" people from public life.
Cloudflare Year In Review – Internet traffic patterns throughout 2020
Study of flowers with two types of anthers solves mystery that baffled Darwin
the duration of the animation is configurable via flipDurationMs (can also be set to zero).
I don't notice any issue with ffx on my machine. the library lets svelte animate almost everything. pls create an issue with more details if you can (which example you used, which machine etc).
I started writing a reply with an explanation for Arabic script when I found that wikipedia does a better and more complete job of it than I could:
https://en.m.wikipedia.org/wiki/Arabic_alphabet#Vowels
That's cool and all, but I'm pretty sure what we really want to see is

"The expert described what had happened, in the form of a Haiku:"
You'd think even without a mandate, banks would be motivated to implement secure auth instead of this insanity?
Well, the equivalent for Fachhochschule in the United States are called Trade Schools. But trade schools typically teach things like Aircraft mechanic, train engineer, welding, etc. While I'm sure there are some trade schools that teach programming, typically you would go to a more dedicated place like a coding bootcamp.

Often universities will have separate computer science and software engineering degrees. The first is more academically oriented (for those who want to get a PhD in computer science) and the other for people who want a job as a developer.
I fully agree that these decisions have to be done by democratic institutions. They also have to be very liberal and very careful and erring on the side of not taking things down.

My biggest problem however is the EU commission acting like they are a democratic institution.

The president of the commission didn't even run in the election. We were promised that the candidate of the winning party would become president of the commission, but then he didn't and they gave us von der Leyen instead, who never really accomplished anything but hiring consultants. And even that she couldn't do right.

The whole storming the caption hill thing is also funny in that regard. Now we suddenly defend that place as this important symbolic institution of democracy, and how dare they! But in reality, we all know that the people in there spend most of their time sucking up to their donors to stay in power. And we know that they very, very, very often make decision that favour their donors to the detriment of the ... voters.
A corporation is an abstraction, an artificial person created to pool resources and do business at scale. It's a good, useful abstraction --- but like all abstractions, it's leaky, and sometimes the abstraction does more harm than good. Governments are run for the benefit of natural people, not artificial ones, and when the latter behave in ways detrimental to the interests of the former, there's nothing wrong with setting rules.
GreyNoise Intelligence | https://greynoise.io/ | https://twitter.com/GreyNoiseIO | Washington, D.C. | Onsite or Remote

There are hundreds of cybersecurity companies telling their users what to worry about. GreyNoise is the only cybersecurity company telling users what not to worry about. We are an early-stage cybersecurity product company trusted by security teams all over the world.

Our thousands of free users and dozens of enterprise customers use our products to:

1) Understand the Internet
2) Reduce drag in the security operations center (SOC)
3) Provide insights on opportunistic threats

Every day any given SOC has hundreds or thousands of alerts to investigate. GreyNoise takes a data-driven approach to making the SOC team more efficient from within the products they are already using. (https://developer.greynoise.io/docs/3rd-party-integrations)

We operate a large network of passive collector sensors in hundreds of data centers geographically distributed all around the world. These sensors collect and analyze “Internet Background Noise” which is converted into useful insights and made accessible to our web interface and integrations. In other words, GreyNoise is like noise canceling headphones for security teams; we tell our customers what not to worry about by eliminating pointless alerts generated by devices all around the Internet. (https://viz.greynoise.io/query/?gnql=last_seen%3A1d)

Team - $5M+ in seed funding and a team hailing from NCC Group, Endgame (Elastic), the US Dept. of Defense, Accenture, Battelle, and Sophos, among others

Currently in the market for: (apply here: https://rb.gy/pymbl6)

* Senior Software Engineer
* Senior Data Engineer
* Software Engineer
* Senior Data Scientist
* Researcher

Main Tech Stack - Go, Python, AWS, Terraform, Postgres, Elastic, Docker

For any questions, please feel free to reach out at hiring@greynoise.io
Musk told followers to ‘use Signal,’ leading to 1,100% surge in unrelated stock
May I propose a corollary: we all suck at security when confronted by a well sourced adversary.
But there is no tourism in the U.S. right now. ESTAs and Visas haven't been approved since April.
It blows me away our legal system can prevent this but not a tech social media plutocracy?
Verizon, UPS Partner on Drone Delivery
> The only success stories with this strategy are Australia and New Zealand, which are island nations completely isolated from anywhere else.

Taiwan is another such success story (7 deaths total, zero domestic cases for over 200 days) and it's not exactly that isolated from, well, the place where the pandemic started.
> With Python & golang getting more traction.

Does pip not have the same issues?
The elevation of Madrid is 667 meters according to Wikipedia. So we are not talking about the temperature of an isolated mountain top, even if they report the most extreme temperature.
related blog post: https://news.ycombinator.com/item?id=25749630
source:

https://news.ycombinator.com/item?id=25731121
Plaid has ~500 employees with normal lives and financial goals. There are start-ups out there with a real chance to change the world, but I think it gets over played as a form of recruiting and media strategy.
> No tourist would be interested in coming over to stay two weeks on their own dime locked in a hotel, only then to be able to do some actual traveling.

Depending on where they're coming from they'll have to do that on the way home, so they're not interested in coming anyway.
You're actually in Uganda?
I mean, maybe it sounds like an over step for a country that has day to day violent rebel problems - but honestly... sounds based.
It's rather infantile to think forcing millions of people you disapprove of off a platform would make them magically disappear.

Does closing your eyes make the monsters under your bed go away?
> asymptomatic has such a miniscule amount of virus in their system that they're not infectious.

https://www.advisory.com/daily-briefing/2021/01/11/asymptoma...

60% doesn't seem miniscule
While I fully agree about the need to record reasoning, my approach is to summarize and put it in either wiki or a ticket. Future me doesn't want to read a long chat or email thread (whether it was one I was involved with or not), and I assume no one else does either.