skysight-inc/HackerNews huggingface dataset:
Also if you take 1 generation step back into the 2600 or intelivision there was a very simple API they did use that was built in. It was usually little more than fill out some memory in a particular way and flick an interrupt or particular instruction and it would either run something in bios or hardware. Also many did not need much in the way of an OS as they usually just either memory mapped themselves into the address space or copied themselves there. At that point if you keep your memory in order you do not need much and can toggle the registers yourself or call into bios routines yourself.

The newer machines use APIs to abstract. Where companies used to conform to particular HW standards (VGA,EGA,etc) with extensions. Now HW companies see their drivers as a differentiator. While the programmer writes to the abstraction API. Technically you could still write bare metal but few companies want to say what their real API looks like. So you are stuck with the OS or if you are lucky what someone else has noodled out.
In my opinion it doesn't worth the ransom price at all. I don't see anything unusual in the schematics - it just looks like one of those laptop schematics online that would definitely leak from the OEM within a year after the machine is released and it would be used by all repair technicians all over the world.
No. I looked into this pretty extensively a few years ago. Ideally you could use semi-passive RFID, which only broadcasts a signal when its identifying signal is detected. But these still need a power source, and batteries are not cheap, only get so small, and don't hold a charge forever, so I don't think you can get the cost per tag for comsumers in such a system much below $10.

At that point, I think making them $25 and having them broadcast every 30 seconds so that they can be found anywhere in the world if someone walks by them with an iPhone is an obviously better solution.

Of course there are wacky solutions, such as using autonomous drones as mobile base stations to find fully passive RFID tags as a home inventory solution. But that introduces a whole host of issues.
Sorry, related articles:

TechCrunch https://news.ycombinator.com/item?id=26883082

MacRumors https://news.ycombinator.com/item?id=26880987
Calling the Revolutions of 1989 a "Western coup" seems wrong. And blindly stating it's better to be a puppet of the West than Russia is not really backed up by history and ignores the turmoil of any transition period.
I can only assume that you guys have not worked for big private companies.

What you are saying is typical of almost any big organization, public or private.
Which will come first fusion or the James Webb Telescope? ...
Cryptocurrency exposure is at an all-time high right now, compared to past years. Many people, including some mainstream companies, started to plunge their capital into the internet magic money. I wouldn't be surprised if your barber knows about Bitcoin and Dogecoin.
> 1. The experiment is not on live, deployed, versions of the kernel.

The patches were merged and the email thread discusses that the patches made it to the stable tree. Some (many?) distributions of Linux have and run from stable.

> 2. There are mechanisms in place for preventing actual merging of the faulty patches.

Those mechanisms failed.

> 3. Even if a patch is merged by mistake, it can be easily backed out or replaced with another patch, and the updates pushed anywhere relevant.

Arguably. But I think this is a weak argument.
It can also share, at minimum, URLs.
Ferrari Is Finally Embracing Electric Cars
Chemical reaction can burn a hole in your esophagus.
Nothing, but that didn't stop Putin from his past military misadventures.
At present, the Commission leaves crypto entrepreneurs few good options: a) create a functioning platform with a native currency and wait for a dreaded SEC inquiry; b) go through a costly registration or qualification process with perpetual reporting obligations and annual six-to-seven-figure compliance costs; or c.) move to a different jurisdiction and don’t sell tokens to U.S. citizens.

https://cei.org/blog/lbry-cryptocurrency-prosecution-shows-s...

Not using YouTube is an act of political revolution against the United States government. People need to stop lightly crossing the ADL and SPLC's censorship regime and thinking they can get away with it without removing the corrupt oligarchs currently in power in the United States.
Exactly! And for the same reason, they don't spend much time scanning apps in their app store either.

https://www.forbes.com/sites/kateoflahertyuk/2019/01/07/thes...
How much Bitcoin comes from dirty coal?
I have no idea what this means either. Sounds like a bunch of buzzwords about nothing.
This is less likely to happen these days as BGP routes are now validated through an open registry like RPKI https://www.arin.net/resources/manage/rpki/

I am not aware how popular and which company are using it, but I doubt that youtube is today as vulnerable as it was in 2008. BGP securities has a lot of tractions these days and is an interesting topic to follow.
EOS and Steemit are delegated Proof-of-Stake, people elect "grand stakers" that will do everything, and this lead to briberies.
The Fort Bragg Murders: String of Deaths at U.S. Military Base
You can now pay businesses via WhatsApp in South Africa
This only is a risk when you open the share pane close to your attacker.

Your email and phone number may be less secret than these folks claim .

But aside from this overhype interesting work.
I think it is more of a message than a solution
The professor is going to give a ted talk in about a year talking about how he got banned from open source development and the five things he learned from it.
> means it's possible for it to lose out horribly.

Yea, as with any risk, it's possible for the risky bet you are taking to end up being.....risky...that's why it provide asymmetric returns.

Obviously the appetite for risk is an extremely personal preference. The way I see it, this is a once in a life time opportunity to get in as institutional money is pouring in and its legitimacy is still being debated. Because once it becomes legitimized there won't be any real opportunity. It will become boring and very predictable.

Also in some countries there's literally no choice. It's either the local bank which forces you to save in the local currency and your savings become discounted every year, or this, which, while risky, seems to solve two problems (retain and grow your nest egg).
These positions are sometimes called "patronage" jobs.

The Vice President launched her career with a position like this, which she received from her married boyfriend, Willie Brown.

https://www.washingtonexaminer.com/politics/kamala-harris-la...

> Granlund said the appointment seemed brazen at the time because of the relationship between Harris and Brown. “Screwing the speaker has its rewards,” he said. “Stevie Wonder could have seen through that play.”
My team experimented with Prisma, and we ended up deciding to continue using raw SQL. Each of us has 10-20 years of experience writing SQL for PostgreSQL, so it wasn't a surprise that we decided against using an ORM yet again. But Prisma is probably the best ORM for Node.js that we've tried.

For anyone who uses PostgreSQL and is interested in Prisma, check out the following message, which has a section that includes a list of features that were deemed out-of-scope (e.g., bulk upserts):

https://github.com/prisma/prisma/issues/4998#issuecomment-76...
Good points. Worth noting that PPC -> x86 was a 64 bit to 32 bit transition.

I assume we will soon see ARMv8 -> ARMv9, but that will hardly be noticeable.

I owned the first MacBook Pro but it died before the architecture became an issue :(

Overall Apple should be good at architecture transitions by now as they've done enough of them!
For most people this is not a big issue
> And they never let anybody knew that they had introduced security vulnerabilities on the kernel on purpose...

Yes, that's the whole point! The real malicious actors aren't going to notify anyone that they're injecting vulnerabilities either. They may be plants at reputable companies, and they'll make it look like an "honest mistake".

Had this not been caught, it would've exposed a major flaw in the process.

> ...until they got caught and people started reverting all the patches from their university and banned the whole university.

Either these patches are valid fixes, in which case they should remain, or they are intentional vulnerabilities, in which case they should've already been reviewed and rejected.

Reverting and reviewing them "at a later date" just makes me question the process. If they haven't been reviewed properly yet, it's better to do it now instead of messing around with reverts.
I suspect the reply was snide, masked by a smiley face, but here ya go anyhow. First result on Google for "deno vs node" https://www.imaginarycloud.com/blog/deno-vs-node/#:~:text=Wh...) that covers the basics of all three asked points.
Linux maintainers should log a complaint with the University's ethics board. You can't just experiment on people without consent.
According to Wikipedia https://en.wikipedia.org/wiki/Button_cell#Accidental_ingesti...
the battery's anode creates an electric current with the digestive tract's fluids that produces caustic soda which can burn through the oesophagus in as little as 2 hours.
As a counterpoint, quite often when there's an algorithm that lets the uninteresting stuff fade to the background, the really interesting stuff that's incomprehensible to most people but at the edge of a few interested people's cognitive ability gets caught up in the filter.

I have no firsthand experience of Clubhouse, but what I understand is that it's a 'follower' model, in which you have to decide how willing you are to miss out on what Celebrity X has to say. That would make for a pretty good approimation of a bayesian algorithm in which everyone decides for themselves how important everyone else's opinion is, which could actually work better than a lot of the competing algos.
And people are somehow meant to only monitor a single server?

There's a reason timeseries databases are trying to get downsampling right.
Not today Spammy McSpammerson!
I just want you to know that this is extremely unethical to create a paper where you attempt to discredit others by just using your university's reputation to try to create vulnerabilities on purpose.

I back your decision and fuck these people. I will additionally be sending a strongly worded email to this person, their advisor and their whoever's in charge of this joke of a computer science school. Sometimes I wish we had the ABA equivalent for computer science.
Microsoft don't control the whole ecosystem unfortunately. They have a much harder time making that architectural shift than Apple does (although they could have done it better). There's all sorts of backwards compatibility guarantees with Windows that Apple doesn't have to care about.

Rosetta is the key piece here to 'fill in the gaps'. IMO, Rosetta only really works because of Apple's silicon and so how insanely fast the machine is compared to the Intel equivalent. The M1 has such a performance advantage over Intel that you can use it up in translation and your options become "x86 version of program running at roughly the speed it always used to" or "ARM version that is lightning quick".

Whereas the Windows ARM machines weren't a performance leap over Intel so even if you had translation it would be "x86 version that is very sluggish" or "ARM version that is just about OK".
Well, they had it coming. They abused the community's trust once in order to gain data for their research, and now it's understandable GKH has very little regard for them. Any action has consequences.
This is a pretty extensive list! Are all of these points are full blockers for you or are there individual points that you care more about while others might be rather "nice to have"? If most of them are real blockers, you probably shouldn't use Prisma [1], and that's ok :)

Prisma certainly is not perfect and whether you should use it depends on your project and individual requirements. What I can tell you is that we are shipping releases [2] with new features and improvements every two weeks. We are also very eager to learn about more use cases that people want to accomplish with Prisma. The best way to bring these to our attention is by commenting on existing GitHub issues and creating new ones if the one for your use case doesn't exist yet. This helps us prioritze and implement these new features. We also have a roadmap [3] where you can see all the features that we are currently working on.

Hope that helps for now!

[1] https://www.prisma.io/docs/concepts/overview/should-you-use-...

[2] https://github.com/prisma/prisma/releases

[3] http://pris.ly/roadmap
> Even still, there is always a chance that the computer will randomly malfunction and do something unexpected at any time. Unlikely, but possible. So you can never say for sure that an operation of 2 + 2 will result in 4.

Your point?

> If it's accurate enough then it's useful for making predictions. You know, science and stuff.

If there is a counterexample to a scientific hypothesis, it's considered falsified. Not "useful for making predictions", but simply wrong.
I have a 49-inch LG Ultrawide (Split into 3440 X 1440, 1680 X 1440), and a 4K monitor that I use for presentations and classes (so it is not on all the time).

I have become addicted to the vast real estate of this big honker. I did have it set up, once, using the whole screen width (5120 X 1440), but that was too wide for me (also, Apple does not yet natively support that resolution. I had to use a third-party screen res tool).
It's not just the mob - even "legit" businesses like consumer product mfgs. have 2 sets of books, don't pay taxes, etc. in Italy and Greece.

Greece has literally never been financially viable in modern times since founding (ie. the last century) largely due to tax evasion. Western European countries have declared war on Greece in the past to make it pay bonds. Currently the CCP controls Greek UN votes via ownership of their largest port and loans (aka debt trap.)

https://www.reuters.com/article/us-eu-un-rights/greece-block...
BTC Touched $50K, Crypto Market Collapsed 13% in Minutes: What Do We Know So Far
Automating Infrastructure with EKS and Pulumi to Deploy New Enterprise Web Apps
Handshake name .p/ sold for a record-breaking $230k USD
yes. if you are only going to be working with CSV files then this is overkill
Is this also why the Youtube AppleTV app went from twelve thumbnails on a screen to three full ones, some cut-off ones, and a whole bunch of gray space? I'd say my YouTube usage is down 90% with that change, and will be cancelling Premium this billing cycle as a result. What were they thinking!?
Yes, and robbing a bank to show that the security is lax is totally fine because the real criminals don't notify you before they rob a bank.

Do you understand how dumb that sounds?
Man sues Apple for terminating Apple ID with $24K worth of content
Not reverse engineered. Most laptop schematics, including MacBook ones are definitely leaked original schematics from the OEM. Many have the OEM logo, internal part numbers and engineering notes written on it.
Welcome to government work.
Thus moving from merely unethical to actually fraudulent? Although from the email exchanges it seems they are already making fraudulent statements...

At least it might prompt the University to take action against the researchers.
You still have to cool a combustion engine - hence why car's have radiators.

Combustion engine's are also limited by Carnot cycle engine efficiency - about 64% theoretically, no more then 50% in the real world. So you're still going to wind up having to dump progressively more heat from a fixed surface area.
TL;DR: If you're using an Apple device with AirDrop, and have the share sheet open for something that would be shareable with AirDrop, a malicious device within ~30ft of you could start attempting to brute-force the hashes of contacts your device exposes to determine whether the other device is a contact.

(The contact exposure is in support of a setting for AirDrop to work with Everyone, Contacts Only, or No one.)

While it's certainly a bit concerning, it's pretty unlikely to be a practical attack, particularly since all it does is get you the user's contact list. It doesn't sound like there's any way of using it to exfiltrate other information, and though the article doesn't touch on this (that I saw) I'd be surprised if the attack was fast enough to just gulp down all your contacts in the couple of seconds most people have their share sheets open.
At least my coworker's former 16GB MBP (until he got a new one now) basically halted when the emulators were running, and he had to close lots of programs. Not strictly appdev, though, so he was then running and developing our backends locally, running some other needed services in docker, and then working on the android and ios app at the same time to match and test the changes in the backend. So basically all of my examples above, but at the same time.

So not strictly necessary, but when you're used to it going back to having to work around the limitations is burdensome. People not having lots of ram seldom complain, but they don't know how much time they're wasting on an inefficient workflow.
The ban is aimed more at the UMN dept overseeing the reserach than at preventing continued "experiments." I imagine it would also make continued experiments even more unethical.
If it's optimizing with figuring the calls in a single tick out, one can probably still optimize further by using db specific features, like postgres supports json_agg which let's you not only break n+1 in a way, but also prevents cartesian product explosion with joins
>Consider an alternate possibility: “sales of Apple’s new ARM macs outpaced by older models”.

This story would be "man bites dog", the linked story is "dog bites man", that's why people are reacting this way.
Precisely this! Not having any insurance in my late 20s, I voted for him thinking ACA was for the good of people. Then I got married, had 2 kids, business flourished, and purchased a house only to realize that ACA accounts for half of my mortgage. Currently paying $1k per month with all healthy members and without any pre-existing conditions!
A UBI restricted to those that can land government gigs is not very universal.
Yes. (And that's what every LISP I know does.)
Any data collected from such "research" would be unpublishable and therefore worthless.
TL/DR:

"As an attacker, it is possible to learn the phone numbers and email addresses of AirDrop users – even as a complete stranger. All they require is a Wi-Fi-capable device and physical proximity to a target that initiates the discovery process by opening the sharing pane on an iOS or macOS device."
You misunderstood me. I said the ones who tried to "see if the bugs would be detected or not in new submitted patches" are the lazy ones who instead of analyzing the existing code and existing bugs, attempted to submit new ones. Actually working on analyzing existing data would require more work than they were willing to do for their paper.
> How is such a ban going to be effective?

It trashes University of Minnesota in the press. What is going to happen is that the president of the university now is going to hear about it, so will the provost and so will people in charge of doling money. That will rapidly fix the professor problem.

While people may think that tenure professors get to do what they want, they never win in a war with a president and a provost. That professor is toast. And so are his researchers
> never really actionable ... only of interest for a short period ... you know where and when the problem is.

I'm not a sysadmin of a large shop (I did that for a short bit, but prior to this existing), so I can only speak as a guy who runs a few big linux servers/virtuals. I've had netdata installed on my home severs for quite some time. And yes, the graphs were really cool, at first, and kinda went into the background.

Here's the thing: when something isn't right with those boxes, that's become the first place I visit. Since I had some franken-boxes with a bunch of storage, it's often related to the array, or btrfs. When I hop in there I'll notice an alert or two, gooble it, alter something and never see it again. It helped me solve some network issues.

I don't know, short of it being a more busy process than I wish it were on my server (only a little and I'm running a few plug-ins on the one that I'm unhappy with), it's been helpful.
Developing an h-index for OSS developers
That’s true of POW, no? Is there any cryptocurrency where it isn’t?
The people who are effected by the rule or discouraged by it cannot do so.
They shouldn’t have called it a “challenge” there. It’s not a challenge; it’s just executing the verification function. Chalk up another one for harmfully incorrect terminology. (Admittedly “verification” is also an overloaded term, as it gives you a token which your backend subsequently needs to verify.)

(As they confirm near the start of the document, “reCAPTCHA v3 will never interrupt your users, so you can run it whenever you like without affecting conversion.”)
I’m all for IDE integration but feel duty bound to point out tsc does this as well.
> The only social media I would have is a nym twitter account

What is nym in this context? That's a new word for me.
Yes, India still uses BCG.
There is nothing on this list inherent to OOP. I’m fairly sure C++ is an OOP language (okay, multi paradigm), and their use is “zero-cost” abstraction. Vtables are only necessary for virtual functions, and you similarly have to decide another function implementation if the business logic requires that. Indirection, cache misses do happen with some managed OOP language, but that is due to objects being pointers to heaps instead of stack-allocated.

And slow data structures have yet again has nothing to do with it at all. I guess you mean datastructure containing pointers to objects, which is not always the case, and an implementation detail.
They obtained an "IRB-exempt letter" because their IRB found that this was not human research. It's quite likely that the IRB made this finding based on a misrepresentation of the research during that initial stage; once they had an exemption letter the IRB wouldn't be looking any closer.
When you are online anyone can check it. There is no option to hide the online status. Using an easy script anyone can then spy and understand pretty much everything of a person, or a group. This is easy cyber stalking and dangerous. Especially because normal people do not understand this and think that hiding last seen is useful to avoid being stalked…
Show HN: Shipped Brain – Share and try serverless machine learning models
I agree in this case the driver of the behavior seems to be the professor, but graduate researchers are informed about ethical research and there many ways students alone can cause harm through research potentially beyond the supervision of the university and even professor. It's usually much more neglible than this, but everyone has a responsibility in abiding by ethical norms.
I assume the meant Albany - as in everyone in NYC thinks they know how to fix the state government. Or maybe there is a huge mob presence in Bufallo?
It's useful if you have a custom eslint ruleset you want to apply to your ts projects. Some of those rules aren't always available on tslint.

Mostly helpful to keep a shared ruleset across projects.