skysight-inc/HackerNews huggingface dataset:
> “The system wasn’t capable of doing what the attacker wanted,” said Joe Weiss, managing partner at Applied Control Solutions, a consultancy for the control systems industry.

The UI will be designed for people who know 11,100 ppm is a stupid level, so it's probably light on fancy error messages.

You might as well ask why Google has a setting where I can type "' SELECT * FROM NSA_SECRETS;--" into the search box.
Well... Yes, that's one very valid cause of action. It might not be the only way forward, it depends on a lot of things.

There's absolutely nothing standing in the way of PornHub introducing a phone, because they want to adult apps to be allowed.

Want to sell adult content on Instagram, but you're not allowed? Go build onlyfans.com.
In my country "IT" is all engineering, and what USA means by IT is called "IT support". Was surprised when I read about this on Reddit, also in some discussion when some developer complained about being called IT.
I would have no preference.

It's the same thing.

The only difference maybe, is regarding friction. IE, maybe it is a bit more difficult to immediately sell the Amazon stock at a store.

But transaction friction is different than the deflation argument.
As a mere mortal with limited Working Memory, the bottleneck is getting sketch-thoughts out of my head where I can see them and edit them.

Others' needs are different.
I am glad humans now have a money which cannot be manipulated by the energy production of any single country.
Well, that what happens if you strive for adding "syntactic sugar" and other meaningless features to your language instead of performance.
My experience (16 years selling desktop software as an Indie) is that the guy with the @aol.com email who paid $30 can be a significantly higher support burden than the organization that bought $3k of licenses.
The important question is: does it come with an ISO layout?
> an excuse

Whenever I see this word, I see a trust or communication problem.
I thought "every police is a piano" is clearly wrong, and based on that thought, I further refer to it as the misuse of deductive reasoning -- confusing subsets with supersets.

Take an example -- if we could agree on that -- it is well known that police will kill bad people when the bad people are doing really bad things -- with the precondition that the bad people must be alive to do really bad things, and to be killed.
With the same faulty deduction rules, one could say that it is well known that police kill people whenever people are alive.

Sorry if that caused confusion.

> sit down and exchange information

For one.

I am a Chinese citizen. I know many people, including close friends, relatives, studying abroad.
I am not aware of any cases that their relatives are held hostage by the government.
I am aware that police go after bad people (of course, the definition of "bad people" may vary nation-wise, but please take a little break on that and assume it normal), even if the bad people are relative to one entity studying abroad.

For two, about Cixin Liu's case.

This is the part I genuinely don't understand -- why would he seek asylum outside China? Did he do anything illegal?
This whole thread is about an English version of the postscript in his work. I have read both native and translated version, and can confirm that the same postscript is attached in both versions, and the translation is quite precise.
And then people start to discuss about "seeking for help abroad", "HK protest" etc. -- do these people think the postscript is so offensive that the government will go after him?

I don't think the text is offensive by any means.
I don't think the government will go after him.

If that's not the case, what are they talking about? Am I missing something?
The idea is that bitcoin is something you prefer over fiat currency in your bank account. The same idea that gold bugs have.

If that's the case, then bitcoin owners will only dump their holdings if a) they fear that the bitcoin network is about to collapse for some reason or b) they need to put the value stored in those bitcoins to use.
Someone on HN mentioned the book 'Titanosaur: Discovering the World's Largest Dinosaur' written by the two paleontologists who led the discovery - José Luis Carballido and Diego Pol. It's illustrated and seems to have very good reviews.

https://kids.scholastic.com/kids/book/titanosaur-by-jose-lui...

Personally, when I was a teen, the first 3 Jurassic Park films whirled my brain and had nice vivid dreams about the island and dinos.
This gets explained a lot; what doesn't get explained as much is how folks can continue to make money for their work in the "libre" world. It's certainly possible - dual licensing, services, premium editions, physical books, etc., and it's not a bad thing. But my guess is that a "libre" version of this guy's book would rapidly turn into a "gratis" version of it too - a "good enough" PDF would get passed around and ultimately be the main way most people would see his stuff.
Swell – The most powerful headless ecommerce platform
The position taken in that post is an even more severe indictment of "postmodernism" than anything Chomsky (or even anyone in this thread) wrote: it is saying, basically, that postmodernists intentionally adopt a dialect and "styles of discourse" to turn off people like Chomsky and drive them away from its circles.

If true, this is even worse than simply being obscure, wrong, muddle-headed, nonsensical, or whatever. By default my assumption when encountering stuff I don't understand is that there's something meaningful and useful being attempted to be communicated, and if I just work harder I may be able to get something of value out of it. But if the claim here is true (would most postmodernists agree, BTW? have they said something to that effect?)—namely that, let alone failing to be clear, they're not even trying (worse, actively trying not to be clear to everyone)—then I can just ignore them completely, as they're not even operating in good faith. Being wrong is just an intellectual failure that can happen to all of us; being intentionally unclear is almost a moral failure. (Or at least, it's diametrically opposed to my values, and while I can recognize the possibility of other systems of values, I have no wish to engage with a community rejecting this value.)

(BTW, the link in that 2012 post to Chomsky's post is broken, but it's saved here: https://web.archive.org/web/20120711000559/http://cscs.umich... — it's not quite that, as the post claims, Chomsky threw out everything "on the basis of dialect alone", but what he asks in that post is for examples of all that "theory" throwing up some practical conclusion that wasn't already well-known. He also points out that in say, physics or mathematics, where too he may not understand everything, "I can ask friends who work in these areas to explain it to me at a level that I can understand, and they can do so, without particular difficulty" — but this is not true of (what is/was called) "[critical] theory".)
>I could imagine a malicious defect in Tesla firmware that would cause all Tesla vehicles on the road to make an aggressive manoeuvre that would most likely result in a crash at the same time. So I think the potential scale for death and injury With remotely updatable vehicle firmware is large.

It's pretty low risk AFAIK, generally cars infotainment and CAN bus are isolated, and I understand Tesla vehicles can't update while driving. Who knows, I'm not familiar with their architecture, but I'm not too worried about it.

There are attacks but IIRC they rely on GPS spoofing, or tricking machine vision to cause the vehicle to swerve or accelerate, you can't just drive someone off a cliff over 4G (at least without implanting hardware into the car).

>Can you recommend any VPNs that are up to the required standard for critical infrastructure?

Approved devices vary by country, but this list is a decent example: https://www.ia.nato.int/niapc/Category/IP-Encryption_25

Unfortunately it's hard to provide info when these kinds of products are not generally available for purchase outside of the defence community, and the user manuals and related documentation are themselves restricted. But generally speaking if it's acceptable for use with classified info then it should be adequate protection for critical infrastructure.

>Although since the power plants I work on would struggle to kill even one person and damaging them would only cause financial hardship for the owner or an insignificant exceedanve of environmental regulations, so they must not be critical.

They might be relatively harmless in isolation, but it could be really harmful if an attacker could compromise a dozen of these small plants and disable or destroy them at the same time so there's less reserve capacity in the grid to pick up the slack when you launch your main attack. You don't even need to have that big of an impact on industry or what have you, just causing a blackout on a hot day and killing a bunch of elderly people via heatstroke would whip people into a panic.

Or perhaps an attacker would compromise one plant and use it as a vector to attack someone like you next time you connect, gain a pivot point via your workstation to set up a persistent backdoor and steal confidential documents and email so they know your schedules and organisational weaknesses, steal your VPN credentials and attack multiple power plants at once when it suits them, etc.
Adding to my comment after a good night's sleep: To create a loop back to the first image is a bit tricky. You need to put in the zoomed-out previous image as before, but also a ring-shaped part of the zoomed-in first image.

It's awkward to explain. One problem to wrap your head around is that the series of images you create by zooming out previous images has to played in reverse.

I could imagine programming a shallow random-generated fractal generator creating series of images and then the infinite zoom would be really infinite, and this would be even easier than the loop.
How can I scrape the best seller’s product data from Amazon?
Why is In-Cabin Sensing seeing a sudden demand?
PhD Call: Combat Disinformation in Complex Social Systems
"Does expertise from experience (whether compressed into a few years or a lot) qualify as reverse ageism? Is anyone being excluded or denigrated?"

No, of course not - isn't it silly that we have to ask if that is "reverse ageism" to say that people who spend time at something are generally better at it? That's universally true of every single human endeavor, isn't it?

"It seems plausible (but not exclusively) that the more time and effort you apply to something, the better you will probably get at it." - Why does it sound like you're shying away from stating something that should be immediately obvious to every single person? Is it because you're afraid of the charge of reverse ageism if you agree? If so...isn't that silly?

"It seems plausible (but not exclusively) that the more time and effort you apply to something, the better you will probably get at it. Time alone isn’t a measure of experience and expertise but it doesn’t hurt." - I agree wholeheartedly - again, I thought that was obvious.
> I'm not experienced with Ruby but it sounds like Ruby doesn't do any of those

Modern ruby can do any of those, though in 1.8 or earlier it could do fewer, and less well.
This is nonsense, there is boatloads of frameworks and CMSes which can easily run into the 10s or 100s of milliseconds for the main request ( WP for example ).

Serving only 20 users only has to do with how many workers were assigned.

I actually implemented a high traffic RoR payment provider on minimal infra ( 1 small VPS ), and benchmarked a couple of Python CMSes and compared them to WP.
Can we keep the original title please?

> "FreeBSD 13 BETA Benchmarks - Performance Is Much Better"
If you want to be productive in life and cooperate with people you need at least some level of trust. For example if you are meeting up with someone, do you distrust that they will not show up and not go at all or do you demand they send their GPS location every minute of their way to know that you are not wasting an hour of your time going to the meeting?

This is just one minor example. There's several other things that you have to trust that work. In any exchange or trade you are providing some level of trust. If you didn't trust at all you wouldn't do the trade. You trust that whoever you are meeting up with won't kill you.

So you can't really say that you "distrust everything". That's a meaningless statement. Even you who says that they distrust everything has some level of trust in some items.

If you are in a relationship do you go there with complete distrust, once again demanding to see their messages and location at all times because otherwise you distrust them not to cheat on you?

If you are living in a house you trust that whoever built the house built it well enough for it to not collapse on you randomly.
> I wish I didn't have to use Google Maps, but in Switzerland Apple Maps is terrible.

What about openstreetmap?
This sort of non-compliance compliance infuriates me.
Any ships with dual tanks should be banned from western waters.
What's in Store for the Automotive Industry?
These bricks could fill a portion of space within another substance - concrete? to reduce the amount of the latter required.
If you have the diode like:

plant < diode < internet

you could control it but not get any feedback. I meant

plant > diode > internet

so you could monitor it but not control it from the internet.
To rephrase:
Different engineers and different problems have different needs. When you ignore this, you'll get something that someone new can pick up, read the docs, and work with... but you can end up with a slight mismatch between tool, task, and user.

In some contexts, that slight mismatch can escalate to become quite wide.

A deeper examination of Django would yield rich examples of this.

------------

The above is really a message for myself as an engineer who loves python and has an emotionally visceral distaste for PHP. I offer it to y'all in case you also find it useful insight.
It might not be a great analogy but its hilarious.
Because your arm is at an angle to the rows of the keys (with a non-split keyboard), so when you extend a finger, it doesn't go straight up. With staggered keys, you can reach the key on a row up by only extending your finger (i.e, moving it in line with the direction of your underarm), without having to move any other fingers aside.
Thanks, you just gave me a reason why some peope may not like numpads on their keyboards. As a left-handed person I never realised that the numpad is where you would want to have your mouse :D
Gmail iOS App Has Out of Date Warning. Months of No Updates Since Privacy Labels
Looks like awesome technology, looks like it's easy to build simple CRUD apps without the need for the overhead of webapps
Screenshot or it didn’t happen
So does knowledge of your stack. Rails default settings are for development on one box, it expects you to look over the settings at least once before you push to prod. I can't blame Rails for not having "client demo for 20 people" as the default settings (and I also can't really blame GP for not thinking about Rails configuration too deeply as a junior engineer, that is on the more senior engineers on that team who apparently completely forgot to verify it worked before doing the demo).
There is an Aussie lady called Anne Osborne. She is known to go on fruit mono meal diets for long times (weeks and months). She only ate melons for 6 months, oranges for a few months (I don't remember the exact time) and so on.

There are also people who cured long time illnesses with mono meal diets. It makes sense to eat meals with less ingredients than more - most of us have no clue on how to combine foods correctly anyway. Plus it is less taxing on our digestive system.
Lalboard – A 3D-printed keyboard inspired by the DataHand
> Of course, that doesn't mean for a second that the solution to the world's problems somehow involves population control in developing countries.

Why not? A lot of people on the left are saying that having children is bad for the environment, why shouldn't this be true in poor countries?
I can't see a single keyboard on their website with a Mac layout.
I'd argue there's probably a lot of really good reasons for that... primarily, most people did not get the announcement from the horse's mouth.

https://youtu.be/LE0g2TUsJ4U?t=3242

If you watch that for 5 minutes, Matz makes it clear that a) it's a goal, not a promise, and b) he's basing this on ruby 2.0

I don't know how you can set expectations any clearer than that (other than maybe not to announce any goals ever, or chase down the 3rd parties reporting on your goals with a torch and pitchfork, demanding that they fix their lazy reporting)
If this article was about the WTFs in PHP there would already be hundreds of comments saying how much it sucks.

You get less criticism about other languages although they also have bad design decisions (which is totally fine since nothing is perfect).

I wish these things weren't so biased by the emotional investment people put in working tools, which is all a language is.
> And if the maximum daily number of transactions is more or less fixed, and the total energy spend is also relatively stable, then it’s very easy to calculate the energy cost per transaction.

You don't understand how transactions work.

A transaction can have arbitrary value, an arbitrary number of inputs, and an arbitrary number of outputs.

Therefore Bitcoin has infinite throughout and 1 hour confirmation/finality latency.

An example:

My company has 100 engineers each paid USD10k in bitcoin per month. We generate 1 transaction worth USD1M with 100 outputs.

Similarly when paying numerous suppliers for hardware, machinery, logistics, transportation, catering. 1 transaction of high value with numerous heterogeneous outputs.

Transaction count is not the correct way to measure the throughout of the Bitcoin network at a given block height or over several retargets.[0]

[0]: https://medium.com/@hasufly/an-analysis-of-batching-in-bitco...
Share Text between browsers in real time using shareTXT
Share text between your browser windows in real time such as long urls or meeting links across your devices and stay in flow while working online.

Simple open the website on both devices and paste your text to share.

http://sharetxt.live
This would still fail to preclude an on-device attack.
> Why are you so against this?

Why should the people of Austin, Texas gift millions of dollars to a company that made a profit of over $8 billions in the last quarter alone?
for linux ZFS ? im specifically asking about zfs-on-linux
> the southern "bastions of Free Speech"

Historically, southern states were bastions of democratic party: https://en.wikipedia.org/wiki/Third_Party_System
I know this won't help you right now, but for anyone worried about this sort of outcome in the future: there are companies that provide liquidity financing

E.g. https://www.secfi.com/products/liquidity

Basically they send you money while the company is still private, and you pay it back (+ a fee) after the company has exited.

If the financing is 'non-recourse', you won't have to pay it back if there never is an exit, or if there is an exit but one in which you don't make any money (like in this case)

So taking liquidity (if it is non-recourse) de-risks you from these kinds of outcomes.

Full disclosure: I'm the CEO of Secfi.
> To recap, we were aware of the following at this stage:

> it is a popular chat/social media mobile app used in India

> it sets the User-Agent and Referer to '-'

> it fetches the image from Wikimedia Commons but does not display it

And then they identified which app it was, but it is not revealed
I see where you're coming from, but having to press back twice quickly to get back to the page I actually came from is very annoying. It's essentially impossible on mobile.

Perhaps browsers should disable redirection on pages that have been reached via the back button? That could add a lot of complexity.
He used what he is productive in though and there is nothing wrong with that. Obj-C and (to a lesser extent) Swift are pretty alien to a long-time .NET developer. The author of this app is very active in the Xamarin space and recently contributed enhancements for Catalyst support.
Many commenters offered reasons to like 60%, but as a TKL enthusiast myself, I'm inclined to think that it's mostly a supply issue, because I've seen many 75% and TKL group buys get a ton of demand. 60% is just easier to machine: the top is just a frame and thus doesn't need various holes for ESC, function groups, etc.
Elite Firm Cleary Gottlieb Invests in Legal Tech Startup 10BE5
Python: where relying on “lol magic” is acceptable thing to have in production code. At least “magic” in languages like Haskell has the dignity to be backed up by a type system with more consistency than a wet noodle.

Python can’t seem to decide whether it wants to be a production grade language or easy-for-beginners and keeps implementing pointless features (looking at you walrus operator and weird version or pattern matching) instead of fixing its actual problems like the tire-fire that is packaging and performance.

“But Python has never been about performance” someone will say, and that’s fine, but it’s increasingly becoming a language that isn’t any more ergonomic to use than its peers, with worse packaging and deployment, useful tools (type hunting) that the community seemingly refuses to adopt widespread and its slower on top of all that?

Why would you actually bother?
Presumably it lets things like notifications work.
hmm, the logs are valid point. what scenario are we addressing here then?

but the issuance time isn't relevant, they can easily backdate the cert
Those who really care that much about keyboards often want an efficient touch typing experience. Many people think that less keys are more efficient (easier to reach and easier to find without looking) and you just use layers. I tend to agree with that point of view, but I am not yet at 40% ;-)
My guess would be the arm, which has to move when moving the mouse pointer.
This proves Google doesn't have control over the big picture.

They got badly surprised by their own security warning.

They are lying about the situation while knowing we know they are lying.

No message control / (social) media control. Does Google even have a public relations teams? A press officer? Is anyone managing all of this? Hello? Is somebody home?

6 + 2 months without progress from a company with infinite money -what is going on at Google? Fits right in with what happened to Terraria.
> it is a popular chat/social media mobile app used in India

Indians of Hacker News, what are the likely candidates?
That's pretty much sabotage.

Did someone in this story report it to the company management? This sounds like a clear lawsuit (or at the very least, contract termination) waiting to happen, and one that would scare other vendors away from such "clever" workarounds.
Every time i have to use mouse heavy interface I just lose the motivation. It feels like in GUIs you just spend most time searching things, while with cli and plain text files you can easily search existing examples and documentation for reference while typing whatever you want to accomplish. Recently I had to work with Unity and it reminded me how I loathe monolith integrated workflows.
I have no idea who Peter Diamandis/Steven Kotler are but I doubt they had any large effects on the overpopulation of the world.

Regarding "religion": do you think "religions" came up with the concept of having a lot of children?

You don't think it's simply a natural instinct, like in all other animals? And that in a world where few make it to adulthood, people tried to have more children?
So, if it isn't finished, why do people not use pattern matching implemented as a macro, until things like scoping are ironed out?