skysight-inc/HackerNews huggingface dataset:
I want to know how TF the PC at the IEEE conference decided this was acceptable?
so basically they demonstrated that the oss security model, as it operates today, is not working as it had been previously hoped.

it's good work and i'm glad they've done it, but that's depressing.

now what?
Putin was elected because Yeltsin had ruined the country beforethen and he was the only credible alternative as it was clear the US would never allow the Communists or Socialists to take power. So the only choices left were Yeltsin Yeltsin 2, and Putin. People understandanly chose Putin as Yeltsin's policies were just done ruining millions of lives.

It has nothing to do with hate. It has to do with the fact that Russia was in ruins, and that Putin was the only option that wasn't going to be interfered against again. So people voted for Putin. You probably would have done the same.
Remember when Piers was caught in the phone-hacking scandal and f*ked off to the US in shame? Why'd he ever come back..
> compromised

Power brick is now external.
I'm not familiar with any of this stuff other than surface level reading.

Can you expand on use cases? Just interested
I'm not going to bash this or anything, I see why people dislike the sponsor segments, it's advertising after all, but as someone who honestly could not afford to donate to every single channel I enjoy watching, I'm glad content creators have a way to make money while still providing content essentially for free. I'd rather sit and watch a silly ad than just not have access to the content because I couldn't afford to donate that month or something.
They claim they got the IRB to say it's IRB-exempt.
>psychologically safe in a world with climate change, cancer, random attacks of violence, earthquakes, etc?

Obviously, "total" in this context means in the workplace. Also, psychological safety essentially means "ability to express yourself and make mistakes without the fear of negative consequences" - it has nothing to do with shielding yourself from cancer, climate change etc. Ironically, the Buddha, who was quoted in the OP grew up with "total psychological safety" as you defined it, and you know where that led him.

> just like it's possible to have a reasonable level of physical safety while driving a car

Again, this is not a comparable analogy at all. If you're unable to in no uncertain terms say "this project is going to hurt users" out of fear of getting fired/looking like not a team player, that is not even a "reasonable level" of psychological safety.
NASA's Perseverance Mars Rover Extracts First Oxygen from Red Planet
Covid Is Surging in Chile
It's always useful to search for, and upvote, a reasonable alternative opinion. Thank you for posting it.

There are a lot of people reading these discussions who aren't taking 'sides' but trying to think about the subject. Looking at different angles helps with thinking.
Well...don't they usually go behind a desk? Or behind some furniture? There are solutions to this problem.
This is a great statement, they confirm they're aware of the issue, they acknowledge the concerns and they set out their intention to gather the full facts whilst suspending the operation of the research in the meantime. They also acknowledge the systematic way the need to deal with this.

I hope their follow up is as thorough but I want to applaud this, it's a good approach.
How is it possible that you have a PhD in filesystems but you don't know how to write an acceptable patch for the Linux kernel? That's what I call a scam PhD.
basically the response I expected & hoped for. hopefully an eventual follow-up statement will detail what their investigation finds & what actions they took as a result
brew is nice. I have a rule for myself, though, that if I'm picking up something I'm likely to deploy on an environment that's not my mac, I don't use brew to install it. That can make some things harder up front, but I have my eyes open from the start and get fewer surprises between beta and deployment.

On the other hand, having added `--locked` to the cargo invocation, it works for me now too, so apparently (a) I should look into what that means and (b) I should consider using brew for hints even in situations where I don't intend to rely on it. Thanks!

(On the other other hand, even finding the way through this issue reinforces the point about a certain complexity/opacity to tooling that's supposed to make things easier.)
It was a good idea to ban the uni entirely, cause that way they had to respond.
> The IRB of University of Minnesota reviewed the procedures of the experiment and determined that this is not human research. We obtained a formal IRB-exempt letter.

Is there anyone on hand who could explain how what looks very much like a social engineering attack is not "human research"?
I'm saying that if you ever have the choice to support ethical options or abstain completely, don't feel bad about supporting.

I hope they continue to grow, that more people become more conscientious, and that regulations improve.
Why has this loophole not been closed? It seems really easy to ban exchanging personal SIMs.

Mexico already tried something like this in 2008 IIRC, and it was aborted because the database was leaked and sold for like 20-30 USD a copy. That database empowered fraudsters then, and I fear this new one, having recent biometric data, would be even worse if passed, as our government is an even less capable digital steward now. If this law gets enforced, an loophole like the one DigitalCourage uses would be closed quickly.
Institutional review boards are notorious for making sure that all of the i's are dotted and the t's are crossed on the myriad of forms they require, but without actually understanding the nature of the research they are approving.
I also thought of this, but from the movie "WarGames".
That was quick. I'm glad they will look into this and I hope we don't see this kind of research in the future.

This story reminded me of facebook experimenting on their users to control their emotional state (but they said users were volunteers because "terms of service"...)
Online communities pose risk for young people; also important sources of support
Automation for growing chili’s?
100% agree. ERC20 have matured to the point where some valuable projects actually exists. There is probably some shady business around NTFs today and the non-shady business portion of the market is very small.

imho, NFTs have lots of potential to facilitate purchase and sell of real world items (buy a car with a USDC transaction to a smart contract). This is the NFT "killer app" to me
Did they? You can rely on your reader to know that you're referring to Xinjiang.
I think lots of people would just hop around between companies, getting the free year of salary. Not too often, every 2-3 years maybe. 3 years of salary for 2 years of work.
Surely the NSA already has all this data, whether legal or not?

Do people think things have fundamentally changed after Snowden?
When monopolies exist. Do we let the government tell them what to do (beyond the laws applicable to all businesses)? Or do we just break them up?

Let's say I accept your claim about Google being a monopoly. Should the government force them to rank sites the way the government wants? Or do we just break up Google?
SQL Server by design grabs as much RAM as it can, as aggressively and preemptively as it can, because it assumes it's the most important process running on the machine. Which is almost always the case in production environments, and a reasonable default behaviour as a result. If that's not the case, you can easily set resource limits at the application, container, and/or VM level.

(This comment coming from someone who used to have to support running small backup MSSQL instances on Windows 8 tablets.)
The Thorny Problem of Tallying Every T. Rex to Ever Live
Wether a case is deemed baseless is not cold and dry facts, there is a judgement of merit and intention of the filing side.

Also taking into account the surroundings of a case, including who’s involved and their history is not preconception (or then everything becomes preconception).

It’s not the same if you’re a CEO filing a suit against a grandma who shouted insanities at you when you fired their son, and if you’re a worker subject to verbal abuse from your boss.
Well sure it depends on who you ask, but though it’s just anecdotal, both you are examples that “obsolescence” may not be that big a driver.
Same for build tools, esbuild is multiple orders of magnitude faster than babel.
You're right, sorry about the lack of precision
You can compile for windows, on windows, without the pain of setting up a compilation environment on windows.
> unlocked phone

Well, mostly yes, that's considering Cellebrite doesn't have 0-days or other exploits which can send a SMS to the device or similar things. Using Cellebrite's software you can also send silent SMS, so it's not far off either.

A german Cellebrite ambassador showed me and colleagues the mentioned tools of the blog post and told us he participates at Law Enforcement raids. At 6 in the morning they raid the houses of the suspects, detain them and immediately ask for PINs and passwords. He said that surprisingly often it works and no further decryption tries have to be performed.
Will ROCm or Pytorch GPU work on Ryzen processors with this new update?
'Mario Kart Tour' Exceeds $200M in Lifetime Revenue
It looks like most of the time is from converting the Microsoft format into something Pages can handle. The Tweet itself is misleading, as we are led to think that it's a plain text file (which I can assure you, takes nearly no time at all).
My managers are all abusing WFH, I'm probably putting more hours in than they are. Still, it's hard to stay at it when you have a blocker and it takes 3 hours to get a response.
Leafac/SQLite: The best way to use SQLite in Node.js
I have nothing to discuss with someone who thinks they have some sort of collectivist claim on other people's genitals.
In the California Sierra Nevada mountains almost all of the land was harvested for timber in the last 150 years. These forests contained mostly trees that were many hundreds to thousands of years old. So if we plant the right trees and let these harvested forests keep growing, instead of harvesting them again, we will get a thousand years of increasing carbon capture. I'm not sure about other forest ecosystems, but "short term" could be hundreds to thousands of years. A quite useful timescale for a large carbon sink as we try to get to a more normal atmospheric carbon dioxide level in the future.
I'm glad we agree on the merits of dang.

After reviewing the thread I don't see any of what you are asking, here, upstream. I don't seem dang coming out on the same side as people sending out malware, and I don't really see that question present. I wish I had something more concrete to say, but I think your take here (and only here) is wrong and that you might have just entered this one on the wrong foot?
> The vibe was “very piratey,” Dr. Weber said.

Hehe
> WPF also lacks High DPI

WPF is system-DPI aware but it's not aware of per-monitor DPI as that feature didn't exist at all when WPF was conceived. I guess these days Microsoft doesn't consider that good enough to be called High DPI aware.

> I've just been looking at the charts like that, and my ultimate answer is "???"

I don't know -- I guess find it much less difficult than picking a web framework. The problem is that GUI frameworks (in any platform) are a complex mix of trade-offs. .NET and Windows is not the unique in this regard.

> The high rate of churn in the MS ecosystem can be blamed on MS.

I'm not sure you can call frameworks that have been around for multiple-decades a high rate of churn. The problems that Microsoft have is no different any of other platforms you've discussed. Yes, it's one organization but the problems are all the same. New developments require new framework but developers have lots of existing code. The fact that Winforms still exists is the same reason jQuery still exists.

Microsoft wanted everyone to move over to UWP -- this is kind of exactly what you're suggesting -- but developers just weren't interested. So they had to go back and take a more broad approach. But UWP is/was supposed to be the future.

> it's quite clearly a result of constantly changing vision of how the .NET ecosystem should look like

Not just the .NET ecosystem but the broader software industry as well. Many of the changes that Microsoft is making to .NET relate to changes made in mobile and on the web. As the world changes, .NET changes, and thus Microsoft maybe adds a new GUI framework to fit that world. Without that sort of change, we'd all still be using Winforms.

But I don't disagree. Microsoft has been in a long transition period to .NET core and they're finally started to come out the other side. With that done, there will be renewed effort to bring everything else together as well. I suspect in another couple of years this mess will be a lot more cleaned up. But I expect, unlike with other platforms, that most of my code written today will still work with whatever Microsoft comes up with in the future.
Didn't get deep enough to need to test those limits, but I assume they would need to be hand rolled.
> Along with his colleagues, Marlinspike analyzed the device and found that it included several vulnerabilities that could allow an attacker to include an "otherwise innocuous file in an app" that when it gets scanned by a Cellebrite device exploits it and tampers with the device and the data it can access.

> Marlinspike published details about the exploits outside of normal "responsible disclosure" guidelines and suggested that he is willing to share details of the vulnerabilities as long as Cellebrite does the same with all the bugs the company uses to unlock phones, "now and in the future."

Pretty sure Cellebrite isn't going to do that because of their business model.

> In their analysis of the device, Signal researchers also found that it contained packages signed by Apple, and likely extracted from the Windows installer for iTunes version 12.9.0.167. According to Marlinspike, this could be a copyright violation.

I like to know how Apple will react to this!
% nix-shell -p deno
these paths will be fetched (18.39 MiB download, 57.83 MiB unpacked):
/nix/store/vr6lw60nav6kd0qjkb61lbb78mpx4pry-deno-1.8.2
copying path '/nix/store/vr6lw60nav6kd0qjkb61lbb78mpx4pry-deno-1.8.2' from 'https://cache.nixos.org'...
[nix-shell:~]$ deno --version
deno 1.8.2 (release, x86_64-apple-darwin)
v8 9.0.257.3
typescript 4.2.2
This is starting to snowball. Industry news sites are picking up the story.[1] Hasn't hit the mainstream press yet.

No word from DHS Cybersecurity yet.

[1] https://www.google.com/search?channel=fs&q=university+of+min...
It seems like this library was built to address the edge cases the author is familiar with, and for the more complicated actions it starts leaning closer towards a traditional language. For example, the debounce function referenced in the JS comparison isn't even a properly implemented debounce, which means his built-in language function for debounce is incorrect. I've had to build or use a debounce function maybe 10 times in 12 years personally.
Cosmos.network,since 2019. I am amazed so few people are aware of Cosmos SDK and ecosystem
MIT vs. Unlicense – why do you pick one vs. the other?
Hey all -- Cockroach Labs blog editor here. Based in part on the feedback we received from this community, we have retracted the post. The blog post link above will take you the retraction, where we share what we've learned from this experience.
A lot of this also had to do with the Chinese going all in with their lockdown effort, which made it look like the situation was significantly worse than it actually was (it was bad, but some of the rumors going around at the time made it sound apocalyptic).
Good? Are you kidding? Google results nowadays are a funfest of SEO abusers and quality is VERY LOW.
I know well connected people in Delhi who are advisors to the Health ministry and they are unable to find beds for their relatives. Things are truly fucked.
I also think it's a good response but I think an apology would be in order - perhaps left out because it can be considered an admission of guilt.

The way their statement stands they can investigate themselves and determine they did nothing wrong, we'll have to see what they say down the road.
What else do you expect? The incentive structure in academia pushes students to do this.

Immigrant graduate students with uncertain future if they fail? Check.

Vulnerable students whose livelihood is at mercy of their advisor? Check.

Advisor whose career depends on a large number of publication bullet points in their CV? Check.

Students who cheat their way through to publish? Duh.
It's been a while (4 years) since I used Ava. Back then, it was impossibly slow - something about running tests in parallel even though they don't have any blocking operations being a significant overhead. Any idea if that's changed?
Depth of field isn't really an issue with wide angle lenses for smaller format sensors. The EFL is shorter which boosts the depth of field. The bigger problem is field curvature if the page is closer than ~6" - most of these lenses weren't designed for short object distances.

For example, this 1.8mm F/2.8 low distortion lens has a hyperfocal distance of 0.2m (~8") on the Pi HQ: https://commonlands.com/products/low-distortion-m12-lens
and easily covers 6"-25" depth of field.
I don’t read any emotion in that statement whatsoever.
https://twitter.com/UMNComputerSci/status/138496371833373082...

"The University of Minnesota Department of Computer Science & Engineering takes this situation extremely seriously. We have immediately suspended this line of research."
I run an IoT company where we do customer management without any special RDBMS system at all, I just built an HTML interface into the JSON API which in turn is mostly exposing a key-value store.

Not sure if this would qualify as a full blown customer management system though, although it does covers concepts like Customer, Gateway, Device, Payment, Notifications / Alarms, Support incidents.

Currently this has almost only a single-company use, but I would love to see other use the same concepts.

See https://bitbucket.org/BjornErlingFloetten/ARCore for more details. See http://arnorthwind.agorapide.com/ for an easy to grasp demonstration.
I don't think GNOME adding SSD would really help, considering a lot of Electron apps tend to use CSD to integrate with the target platform [0] [1] [2] [3]. Likely those apps should be fixed to correctly use CSD when applicable on all platforms, including GNOME.

[0] https://code.visualstudio.com/assets/home/home-screenshot-wi... [1] https://a.slack-edge.com/a084c/marketing/img/downloads/scree... [2] https://pureinfotech.com/wp-content/uploads/2019/12/microsof... [3] https://www.chip.de/ii/1/1/4/4/7/3/5/4/0/ea621fe64b8418e9.jp...
there seem to be only 2 "simple" choices. And Unlicense seems to have this big advantage of "public domain". But why do so many devs still pick MIT?
I found these statements by the associate department head interesting:
https://twitter.com/lorenterveen/status/1384955467051454466

> I do work in Social Computing, and this situation is directly analogous to a number of incidents on Wikipedia quite awhile ago that led to that community and researchers reaching an understanding on research methods that are and are not acceptable.

and https://twitter.com/lorenterveen/status/1384966202301337603

> Yes! This was an IRB 'failure'. Again, in my area of Social Computing, it's been clear for awhile that IRBs often do not understand the issues and the potential risks/harms of doing research in online communities / social media.

An interesting question is IMHO who people actually tried to contact in the first round of this getting publicity (and I guess how many did so at all), and if leadership should thus have been aware earlier that there was controversy worth looking into.
The progression of deaths [0] is patently nothing like a Gompertz curve. It is bounded, of course, which is probably your point, but we are currently in a growth phase that is well modelled by an exponential curve. The Gompertz adds nothing at this stage, and does not accurately represent the periods of slowing that have already been experienced, nor the subsequent accelerations.

That the population is finite is, I think we can all agree, well understood. It is, however, important to be clear about the dangers of exponential disease growth when only ~1% of a population currently has that disease and the CFR is ~1%. For any sizeable fraction of 1.3 billion that translates to a large number of people.

[0] https://ourworldindata.org/explorers/coronavirus-data-explor...
If you want a GUI in WSL1, VcXsrv still works.
I find that hard to believe, but I'm willing to be wrong. My Apple TV HD is in a cabinet with solid sides and doors (3/4" MDF). The television is wall mounted above it, outside the cabinet, and maybe 12" behind the Apple TV. And yet the Siri Remote controls the volume on the TV. I'm pretty sure it's using IR from the remote to the television to control the television's volume. I guess there's some small chance the volume is being controlled with HDMI ARC, although I've never been able to get my iPhone to control the volume on the television.

Unfortunately I can't find any definitive source on the internet to confirm exactly what's going on.
Or i860 & i960?
The United States? No, there are no mandatory subjects for majors.

My CS curriculum didn't have any "learn this language" classes, you were just expected to know the language that the class was taught in, with the exception of one of the classes that spent some time reviewing OCaml concepts.

Mostly it was C/C++ and Python for the scientific/numeric classes.
I generally agree that practically, focusing on the heavy weight technologies will be the most useful in the long run. In defense of DSLs, I do love them. It's the magic of doing a task specifically as the most intuitive magical incantation. A beginner can pick the DSL up easily and get excited about learning the underlying fundamentals. An expert can code complex scenarios more efficiently.

Still, there's a pretty steep curve to developing them, and that generally translates into a shorter lifetime unless they take off in popularity. For example, tooling support, for things like autocomplete, highlighting, debugging will need to be implemented. There's also a lack of community answering questions, making it difficult to pick up for beginners (no stack overflow, etc).
the cellebrite ambassador we talked to (as private company) basically bragged they were the ones that unlocked the San Bernadirno iPhone. I'm sure towards government officials and Law Enforcement they brag even more.
Anyone saying that it was a bad idea to ban the entire University isn't looking at the big picture. I look at it from a very philosophical standpoint:

The entire idea of an academic (research) institution can be summarized as "an entity representing a group of trusted people who act in good faith of that institution". The moment one of your researchers acts in bad faith, or shows that they cannot be trusted, it's clear that the institute cannot be trusted until the institute takes decisive restorative action. By banning the University, you are saying "we no longer trust you in your authority as an institution until it can be made clear that this isn't a systemic problem."... you are not saying "every single person at the University is terrible" as it was framed by some commenters in the other thread.

This is why, in any broad case, it's so upsetting when an institution of any variety doesn't take clear responsibility for the behavior and actions of its members or representatives (take for example the police, or the federal government). When that is true, the behavior of any member of that institution should be subject to scrutiny and distrust. It's not a complicated social phenomena.
Why would the color of their skin have anything to do with it?