skysight-inc/HackerNews huggingface dataset:
Yes and no. The format of numbers is important to how you end up manipulating them. The way we do long division with 3 or more digit numbers cannot translate to roman numerals. A different method is required. This is part of my point. No one goes into how to do complex maths with Roman numerals, Cunieform or anything else. They're just "look at how you can display a count". Once you learn to add, substract, multiply or divide 2 digit numbers on paper with Arabic-Hindu numerals, 30 digit numbers are trivial, only time consuming. Having a system that uses entirely different characters to represent hundreds, five-hundreds, thousands and more, that changes the math system.

There was a British show I watched as a kid that played in the US which made a light hearted joke regarding this. I think it was called How 2 or something like that. But it was a Welsh woman that showed how 12/2 can equal 7. XII, when you erase the bottom half, it gives you VII. While a joke, it always bothered me that no one ever talked about how the Roman ACTUALLY did math with their number system. How in the hell do you XII/II on paper by showing your work? Because our 12/2 long division method can translate easily to 1212/2. How do you do the same with MCCXII/II? I find it hard to believe there isn't one. Just, no one talks about it.
Not to downplay this bug, but how many people use xterm instead of gnome-terminal or Konsole? Or are those somehow affected too?
I think the analogy an earlier poster made with folk dances was more accurate. school classes might mention it in passing as a subculture, and people who want to know will have resources to explore it further.
Seems like that kind of person wouldn’t qualify for financing anyway then? Isn’t it safe to assume a homeowner with less than $1,000 in savings would also have a very difficult time paying back a $5,000 (or more) loan?
Looks like decent progress being made on cooking up modern replacements for some of the custom chips, too. The prospect of being able to make fully-populated logic boards from off the shelf parts is exciting!
SIM swiped from slain stork's GPS tracker used to rack up $2,700 phone bill
I'd love to fully switch to Telegram - it's snappy and has a nice UI. However, video calls are low quality at the moment, and that's the one thing holding me back.
> Error establishing a database connection

Archived: https://web.archive.org/web/20210319083317/http://john.ankar...
It's been a pretty standard procedure for chip companies to sell CPUs locked from doing specific tasks, whether that's binning, burning fuses to disable functionality etc. It's much cheaper to make 1 design that does everything and segment your market using arbitrary restrictions than to design lots of chips. It's only the totally bone-headed way Nvidia decided to target this that is new.
Low travel distance can give a low effort typing experience. I'd like to try these out, they might make a good desktop keyboard.
At the time of writing the answer appears to be "Error establishing a database connection" which tickled me as, well, accessing my childhood 8 bit computers never involved database errors!
Do not worry , some European companies do this via backstabbing and hiding behind "procedures" and hr behaves like a banana republic court, or wannabe junta.

They try to make sure as little as possible is spilled to the public.

If they do and if you can, have them fire you and then send the corresponding tribunal after them.

Also make sure to post a candid review on glassdoor. Perhaps google and LinkedIn.

Do not forget to hit back, do not be their punching bag. You will find out that bullies crumble very fast when facing resistance.

This is one of the reasons why I will always support unions, as long the employers and managements cannot get their egos in order.
Indeed, however given that 70% of exploits are caused by memory corruption bugs, like in this case, the IT world would be much safer if we only had to deal with the remaing 30%.
Agreed. I had no idea what that scam was -- and I immediately rushed to make sure my more vulnerable (read: clueless) relatives learned about it.
Repost: https://news.ycombinator.com/item?id=26506812
> An attack vector might look like:

You skipped over the step actually writing an exploit for this.

This is some typical memory corruption. Exploiting these on any modern-day system isn't as straightforward as it was in the past. With ASLR and other mitigations you usually need some form of memory leak to find out about addresses. But even if you have that you need some way for your exploit to know about the leaked address. Most exploits that do this involve some form of scripting (the most common being browser-based exploits written in javascript).

I have no idea how you would pull that off in a README file.
I've been using Telegram for a few years now, but I wish they allowed you to use it without phone number.
An Antonov AN-124 just landed this week at ABIA with parts for the Tesla factory. They are apparently from Tiancheng Coating, who makes robotic coating systems for the automotive industry.

https://www.reddit.com/r/Austin/comments/m8opqh/fun_time_wor...
Right, but the page itself is very sparse on details, and there's no way for me to find out that this phone is "hacker friendly". That's really what I was trying to get at. It would have made more sense to link to somewhere on the site itself, rather than a preorder page. This just came off as something using HN as a vector for marketing.
Regarding the general sentiment at the time. For the most part, if the average person never watched the news, they wouldn't know who was president at a given time. Hell, in the past 2 months, following CNN, it's hard to tell if Trump isn't still president. They talk about him so much and spin it that he still has so much influence, I have to consciously remember Biden is president.
SubX: A minimalist assembly language for a subset of the x86 ISA (2019)
Considering the very top safest vehicles are all Teslas, I don't think they skipped safety on this one.
Why Isn't Rent in Tokyo Out of Control? (2016)
I think it needs a bit more documentation
What mechanism do you propose causes Switzerland, which is 100% sovereign (and even isn't part of the EU, despite all their neighbors being such), to become "less and less sovereign over time"? Who rules them? How? Why?
Show HN: An online game I've been working on (eolsh) and its server architecture
And ravioli/tortellini are no longer filled, but grown whole.
I understand what you’re saying and generally agree. We get incoming bug bounty reports like “drop everything, here’s a 9.8 you need to fix right now!” that turns out be a misunderstanding.

But in the case where multiple vendors have scores like:

- Amazon: Important (https://alas.aws.amazon.com/AL2/ALAS-2021-1619.html)

- Ubuntu: 9.8 (https://ubuntu.com/security/CVE-2021-27135)

- Red Hat: 9.6 (https://access.redhat.com/security/cve/CVE-2021-27135)

…it starts to look like there’s consensus that not only is there an RCE, but it’s really easy to exploit. I think that’s where CVSS starts to come in handy. An RCE is bad, but one that’s trivial to actually use is extra bad. And yes, CVSS absolutely has some Ouija properties, but it’s the most commonly used metric I’ve seen for communicating how bad a vulnerability actually is. In this case, it wasn’t just the reporter who said it was bad but all the affected vendors agreeing with them.
Lots. Xterm is everywhere. It's like using vim or emacs or bash. It's pretty much always there and always behaves the same.
Don’t get me wrong, I love complete e2e!

I am choosing iMessage with complete e2e every time I can, but iMessage is iOS only and telegram is many years ahead in user convenience even from it.

You might as well continue pushing for pgp for secure email.

User convenience is not optional.
In Germany, yes.[0]

Aside from that, in Germany it's a common practice to get an Arbeitszeugniss. It's essentially a transcript from your employer stating how you performed while on the job. By law it's has to be formulated to be positive about the employee. Because of this, you often have to read between the lines to understand the actual meaning of the transcript.

[0] http://legaldb.freemedia.at/legal-database/germany/
As an italian, poor condition of agricultural workers it's a well known problem, especially in south Italy well they "hire" african aliens, sometimes working for 2 or 3€/hour
Understatement
That might be the exact reason they wouldn't put it in writing, but there are many "reputable" businesses in Europe and elsewhere with horrible conduct towards employees, with limited options to defend themselves for the employee without risking being worse off for the next career steps.
Sandy Munro has covered this.

There are some bars in the front of the front casting. If those were damaged, you would just cut them away and weld replacements in place.

If the main part of the casting gets bent, it will have been a very severe accident that you are lucky to walk away from. Repairing the car will be the least of your concerns.
Because we don't think it's fair that sick people can't access the care they need because they have the wrong phone or tablet.
https://invisible-island.net/xterm/xterm.log.html#xterm_366

Specifically, the overflow is in the upper limit of the text selection buffer when characters are combined in UTF-8.
Doesn’t the stochastic nature and absence of central coordination give it higher validity than censorship in USSR or China? At least if enough people change their minds, this may work because no one will roll tanks on them.

But yeah, like then, some people are now acting out of fear (or the dreaded value signalling) and self-censoring, which is a sad similarity.
Tech team at Article is expanding, checkout Software Engineer position
Spring seems like the best time to celebrate the new year.
I just wanted to have a casual, nerdy discussion of math god damn it. That's all. How did this turn to a politically correct issue already?
lol, this is such a vacuous comment.

"device made specifically for gaming is not useful for people uninterested in gaming"
Doesn't fix the problem though in case you have a bad manager. They will just be more subtle with their message.
"mass manufacturing of N95 masks"

How? The shortage in March was one of the reasons why they did not recommend masks. Besides, the point made was tailored toward the negative attitude towards science in emarging crisis scenario - "The “science” [..] rarely resembles the centuries-old process of making informed guesses, testing hypotheses"

Did we have any superior alternatives?
There is a certain... willful blindness... that you can easily see also in socialists today. Not sure I can describe it well in a short comment, but it's a principled unwillingness or inability to distinguish between good intentions and good outcomes. (To keep this simple, let's ignore the question whether the intentions really qualify as good; just suppose they do.)

It's as if good intentions automatically lead to good strategies that automatically lead to good outcomes. Therefore, if you start a revolution with pure heart, a perfect future is guaranteed. And if it does not happen, it is only because someone with bad intentions prevented it -- you need to find the asshole and execute him, before he can cause more harm.

There is no such thing as legitimate criticism. You can't say e.g. "hey guys, I agree with your goal of feeding more people, but your methods are based on pseudoscience and are not going to work; how about trying some actual science instead?". What they hear is "he opposes our attempts to feed the people, he must want them to starve, what an asshole"; and if they have the power, that might mean prison time for you.

It is extremely frustrating to debate with a person who believes that if you don't 100% agree with them about something, the only possible explanation is that you are the bad guy who wants bad things to happen. But it becomes much worse when such person has the power to send you and your entire family to a death camp.
My layman’s understand is you need a neutron trigger to destabilize it rapidly, as well as a shell to contain it to get a stable chain reaction going. I think you typically need to be at the center of a an exploding star to see that happen just from pressure.
Yes, but despite vim being there on tons of systems, nobody except vim users ever run it.

Same for xterm. It's terrible and almost nobody uses it.
When navigating, I of course pay close attention to where my cursor is. When I scroll to read through lots of text, I'm not moving the mouse cursor randomly around the screen, but I'm also not paying attention to where it is because scrolling up/down behaves the same regardless of where the cursor happens to be. On a site like Wikipedia, this means that my cursor can happen to trigger a preview hover that covers the very text I'm trying to read. Even if it's in a different spot, the movement is enough to be annoyingly distracting and often means I lose my place.
Cognitive behavioral therapy can help.

The intellectual pursuit of empathy often results in individuals who know what empathy should look like and are good at faking it.

Real empathy requires you to recognize and process your emotions differently. This can be learned over time but usually not by directly attacking the problem.

This is just based on my own experiences.

But I can imagine this is frustrating for you and it seems like you’re already doing the hard work of recognizing there’s an issue. Good luck to you.
I'm humbled by the effort required to create good UI that works well everywhere. That is why I decided to use stock bootstrap with minimal changes. The designer tried to customize it (causing flaws on certain screen sizes). I had them roll it all back to strict use of bootstrap classes. I'm okay with the limitations imposed. Atleast it is functional everywhere.
> There's surely no excuse for this

The "excuse" is greppability since static has three completely different meanings in C and the desire to clearly denote global variables is fairly common. The same reasoning goes for the cast define as well.

Whether you find value in these small abuses of the preprocessor depends on your coding habits, but I don't really see much reason to criticize them. If the author finds them helpful, what's the harm? There isn't much room for confusion and they're not forced on the users of the library.
Well if they wouldn't qualify for financing, then the contractor is informed the customer is unlikely to pay for work, so they know not to work for them. Similarly, if they are approved, the contractor knows they will get paid, as the money is held by Kanda upon the customer agreeing to the loan. It becomes a win-win situation for the contractor. Finally, they are completely de-risked - if there is a non-payment, it'll be the bank who has to follow up on the non-payment and recoup any costs. All this does is empower tradespeople to ensure they're paid fairly for their work
I was grateful for this context in the introduction, even if I was already familiar with Torvalds and Regehr's comments. The introduction is extremely light, but I don't think it amounts to "blogspam", and if the implication is that your direct link should be substituted, I disagree.

> For further reading try Linus Torvalds[1] (pre-nice) note, John Regehr’s paper[2] on alias and this proposal[3] for the C 2x standard.

[1] https://www.yodaiken.com/2018/06/07/torvalds-on-aliasing/

[2] https://blog.regehr.org/archives/1307

[3] http://www.open-std.org/jtc1/sc22/wg14/www/docs/n2577.pdf
I was about to post "This is the internet. Why would someone believe the letter is authentic?" when I saw your comment.

Really, just weigh the likelihood of a company taking the time to write such an over-the-top letter, against the insatiable desire of many people on social media for notoriety.
These guys presumably see present ambition and future riches as a net benefit to their dating lives. Also it is easy (if wrong) to take a similar mindset towards intense knowledge work as towards endurance sports: cultivation and display of manly virtue, stamina, prowess, etc. Once trapped in this mindset, it is normal working hours that will seem unhealthy: lazy, weak, entitled, etc.
This is the kind of feature that can burn servers :)
Especially at telegram scale
Depends how your salary is, but typically you won't do anything. I have witnessed a friend being bullied in such a way. She had to find about £5000 to pay for a solicitor to help her with employment tribunal case. Such money is out of reach to most employees. Yes, she tried "free" help that is available, but those people were useless, especially the union. Those people were not listening and were interested in checking the boxes and following templates and they made it worse in terms of mental health as my friend started losing hope. I helped her find a solicitor and paid first instalment, without my help she would go nowhere. In the end the employer settled - covered the solicitor costs, damages and gave good references so she could find a better job. The bullying employee continued to work there and was not sacked. Her ex-work friends kept struggling but had no means to do anything.
Injection casting is quite a bit newer than gravity casting, which dominated the industry until 197x-198x.

Gravity casting had problem with voids, and fine features, but otherwise much more economical.

Injection, or semisolid casting is much more expensive, both because of more expensive machinery, and mold expense.
> "..Certain chemicals travel from pregnant women to their children, which means these chemicals can be with us for generations."

> Many of the chemicals detected could be traced back to certain products such as cosmetics, pharmaceuticals, pesticides and flame retardants. However, a number of chemicals identified were relatively unknown, with no information as to what they are used for or how they could have contaminated a human body.
And per the link, it was revived in 2015.
`font-size: 16px` is also a continuous function. I've been using «Continuous Typography» since I started web dev!
We have plenty of science, hundreds if not thousands of years’ of scientific evidence, that solid objects stop particles. A mask in front of the face when there is an unknown disease is simply common sense, basic physics to be more precise. To say that you need hindsight to make this judgment is ludicrous. The only (legitimate) reason you would not want to encourage mask wearing is if there was some way the mask could actually make you more likely to catch the virus somehow, which there was no evidence of.
This is what I do (French company). I then do basically the same thing afterwards (coding and learning tech) but for my pleasure.

Then I have time to check with the kids, have dinner and watch a movie or go biking (well, the latter got complicated with our covid measures).

And the next day I am happy to be back at work.

The big, big difference is that I am in France and cannot be forced to many things, this could just have an inpact on my career (which it does not and I could not care less anyway)
There is also thr voicy bot.
Ubuntu is just taking the score from NVD. Redhat has applied the first Ouija input to it, adjusting it to "user interaction required". That changed the score from a 9.8 --- 0.2 points from the maximum possible CVSS score --- all the way down to... 9.6.

I can't think of a better illustration of how bad CVSS is.

Once again: my point isn't that the vulnerability is unimportant (though: it's not nearly as important as it likely seems) or that it doesn't belong on the HN front page (it is a very, very funny vulnerability). It's simply that we should not be editorializing CVSS scores into titles, or taking CVSS scores seriously when they occur organically in titles.

CVSS is very, very bad. It is the CISSP of security metrics.
Other people have covered this at length already but I figured I could toss in my 2p.

The term black company is thrown around with varying levels of severity but "actual" black companies like the one being described here aren't just shitty companies to work for, they are straight up abusive.

With these types of companies you'll be expected to be at work before your boss arrives and leave work after your boss leaves. This applies for everyone including leadership all the way up to the top which results in ground level employees being forced to arrive very early and work until long after the end of the day all the while receiving no overtime.

In the cases where you do get off early, it's normally because of "mandatory fun" aka going to an izakaya (basically a bar with isolated or semi isolated rooms), pouring drinks for everyone senior to you, and drinking copious amounts of alcohol late into the night. Of course not drinking at pace with your seniors is varying levels of "disrespectful".

On top of this, the less senior you are, the more toxic BS you have to put up with.

Leadership (including more senior members who aren't actually your boss) can just push off work onto you and it's your fault if it doesn't get done.

The least senior woman will often be expected to act like a waitress and pour drinks at meetings largely regardless of their status.

On the worse end of things, these companies if you consider leaving have no qualms threatening to badmouth you/make you unhireable to the other companies in the industry in the area. Alternatively or even at the same time they often attempt to guilt you and turn your coworkers/friends against you with some variation of "you leaving is going to make your coworkers suffer" or "you are trying to destroy the company and you'll be responsible when your friends are unemployed". Of course this is varying levels of successful at preventing you from getting a job however it's near textbook abusive behaviour to keep you from leaving.

TLDR: Black company is used with varying levels of accuracy but true black companies are closer to a corporate personification of an abusive spouse than just being a shitty company to work for. They'll try to cut off lifelines (aka connections outside your work) and replace your identity with a dependency on your work by consuming all your time and forcing you to spend your little "free time" with your bosses and coworkers. From here any attempt to leave is met with standard abusive rhetoric.

Because of just how abusive these companies are, it's preferable to pay someone to resign for you so that they can't bully you into staying or even intimidate you into backing out from resigning before you actually enter the building. Once you hire them it's done and you can mentally mark the action as "complete" and prevent yourself from backing out.
Sorry, I thought I put marginal in there (that's why I mentioned brackets). There was lots of stuff I omitted like the SALT deduction. But I lumped all that stuff into "credits". For those reading, if you are paying 50% in tax in the US, you're probably doing something wrong even if all the marginal rates add up to that.
I think you are right. There are SO many small mini games inside of nearly all RTS games which AI has yet to actually conquer, I will give another simple example, given a random map (and resources) identify chokepoints. As a human this is a huge clue on how to go about a game strategy (policy) but I have yet to find an AI do this (or optimize that part). From what I gather most time is spent on actually optimizing random build orders and modifying them along the way.
In what universe is selecting text in a terminal an "idiosyncratic user interaction" ?
The term 'hacker' is agnostic to morals. Kind of like wizards. There are bad wizards, good wizards...green wizards. You need to know what the story of the wizard was to truly understand their intentions.
If this is ever for sale, I'm buying it.
EU has a total lack of vision when it comes to in-region manufacturing. Imagine if the Union decided that 50% of all goods would have to be made in the Union within 20 years...
I dunno, I use xterm. It's fast, feature-rich, and every minute detail is configurable.

I think gnome-terminal is based on vte, which wasn't affected.

I have no clue about Konsole.