skysight-inc/HackerNews huggingface dataset:
The paper linked from the question "What is the theory behind this" in the FAQ section can be found via doi:10.1117/12.478434 if someone is curious (the paper is fully available in HTML form on the webpage but I just like my PDFs).

While I am at it, the paper called "A mechanically generated hologram?" is doi:10.1364/ao.31.006585.
Consent!

Usually when an organization is pen-tested it consented to being pen-tested (likely even requesting it).

Here there were no contact with the Linux foundation to gain consent for the experiment.
Literally wrote one of the most famous evidence-based papers in the world about why most interventions don’t work.
But Gibbon1 said he’s not a credible source because he doesn’t like his conclusions even though he works with the WHO to publish global SARS/2 IFR research. Got it, I’ll perform a bayesian update with this new info.

...Hmm, weird, my posteriors didn’t change at all.
I'm sure this is just a mistake, an algorithmic mishap. It probably flagged the content as possibly racist. Alphabet's interests have always been in supporting social justice, BLM, etc, and censoring the other side. That's not likely to change soon.
Asking for links is just fine for a comment that vague.

Even for non-vague comments, it's often much better for one person to post links than to make 50 people repeat the same search.
I am not just repeating what my colleague said, her hypothesis is on the verge of becoming what she said (God forbid)
I have no idea at which point of Dunning Kruger they are. For example have they digested all of the technical material available on MMO:s available publicly? If they have and have fair software engineering savvy that puts them already way ahead.

Past failures by third party actors should not be taken as discouragement for startups.

To take a blunt example, before Elon Musk started SpaceX there were failed rocket companies started by millionaires all of whom dreamed of commoditizing space...

Sure, their success is improbable. But in this context longshots and improbable bets are the whole point.
Ask HN: How do I find interesting stuff to work on?
I really want to tackle a challenging problem or find a pursuit about which I can be passionate, but I struggle to find anything. Does anyone have nay suggestions for how one can discover things that interest them?
Usually "behave morally" means "behave in a way the system ruling over you deems best to indoctrinate into you so you perpetuate it". No, seriously, that's all there is to morality once you invent agriculture.
Good selection of tips, like Normille I didn't know $! even though I have read Bash's man page through more than once.

Note that many of these are not just for Bash. pushd/popd is near universal among shells and CDPATH is standard among SYSV shells.

The idea of a shortcut for cd .. and its repetitions is good, but I'd prefer alias p='cd ..', pp='cd ../..' and so on, since I balk at the idea of having to distinguish, e.g., ..... and ...., but I find pppp and ppp are easier to discriminate by eyeball.

The shells I use most often are bash and the Emacs eshell, and over the years I appreciate eshell more and more. It has a few footguns, but the availability of the various selection-narrowing libraries, dired and tramp are huge pluses. zsh can pretty much do anything bash can do and more, and it's default on Macos and Arch Linux.
That still wraps access to this cloud-services, albeit adding some more functionality. My main question was: is it a cloud service itself or can you use it standalone (as a classic API)?
As per GP comment's context - it's trivial to detect system DLLs replacement, which is a common way to inject code without the use of trainers, loaders or exe patching.
With respect to your experience, the impact of promotion chasing was heavily felt by product teams and I wouldn't expect it to be that visible to people on the promo committees. I watched multiple fellow Googlers rush project work and cut corners in order to be able to "ship" and put the project in their promo package (and be frustrated when they missed promo). In some cases I got to watch them abandon the project and move on to something else even though it badly needed additional maintenance and cleanup due to all the corner-cutting. In one specific case, all the corner cutting led to multiple significant exploit chains (one of them delivered persistent root on Chromebooks)

Maybe it was just way worse in my org (Chrome).
I think LBRY/Odysee[0] is an interesting one to watch.

[0]https://lbry.com/
Humour me, why must there be such a threshold?

If version B is modified from version A as a derivative work (therefore licensed as A) and version C is modified from version B as a derivative work of B, then would C not still be licensed same as B, and therefore A?

It seems it depends on how you view the accumulation of differences. If your only comparison is always against version A, then yes, eventually there must be enough accumulation of differences that one could claim a work is no longer derivative. But if you consider all versions between A and yours, then suddenly its just a series of gradual changes, none of which individually cause the work to become non-derivative. The Ship of Theseus parable seems to also fit this latter interpretation more -- it is after all about replacing items one at a time.

I agree with you from a practical legal point though. My argument above seems to imply that there's only been derived work since the first cell split in two. In practice this would be a nightmare; There should be a threshold whereupon a work can qualify on its own merits.
Security research has its own standards of ethics, and these researchers violated those standards.

1. You don't conduct a penetration test without permission to do so, or without rules of engagement laying out what kinds of actions and targets are permitted. The researchers did not seek permission or request RoE; they tried to ask forgiveness instead.

2. You disclose the vulnerabilities immediately to the software's developers, and wait a certain period before revealing the vulns to the public. While the researchers did immediately notify the kernel dev team in 3 cases, there's apparently another vulnerable commit that the researchers didn't mention in their paper and did not tell the kernel dev team about, which was still in the kernel as of the paper's publish date.

Apparently the IRB team that reviewed this project decided that no permission was needed because the experiment was on software, not people--even though the whole thing hinged on human code review practices. It's evident that the IRB doesn't know how infosec research should be conducted, how software is developed, or how code review works, but it's also evident that the researchers themselves either didn't know or didn't care about best practices in infosec.
Didn't YC say they were going to do a percentage of randomly selected applicants to see their success rate vs random? Could this be part of that decision?
Philosophy of Bitcoin from First Principles, Robert Breedlove with Lex Fridman
Ok, so why do they need to store my parking locations anyway? They say it wasn't leaked so I guess it's there. I'm in the EU and they have no business storing that information longer than needed (which would be until I stop the parking action.)

If they are using it for their marketing: I was never notified of that.
True, but in most countries every year hospitals get overloaded around this time of year (2018 was also very bad world wide).

I believe testing works but only to see how many people came in contact with covid-19. It is not possible to tell how many people got sick from covid because the symptoms are the same.

I am not saying people don't get sick from covid. It's clear a new virus is going around the world. But it's a fact that we are unsure how many people really get sick from covid (alone).

And about the massive surge in India: my guess is that bad air quality in the big cities is not helping.
Thanks for the response. I agree that bitcoin cannot fill exactly the same niche as gold and I think it's foolish to try to shoehorn it into that role.

I mostly wanted to address the concept that bitcoins merely represent used resources. Bitcoins are in fact a novel good that are produced using no physical resources which intrinsically gives it interesting and potentially promising properties. When you buy a plastic toy and it breaks you don't usually melt it down for its valuable plastic, you just throw it away. You mostly paid for the time and the energy to make it, but the physical substrate was valueless. That type of good currently dominates the marketplace and seems subpar to bitcoin from a manufacturing perspective.
I don't quite agree with this reduction. A good reference textbook is specifically designed to convey a clean linear story of the otherwise ugly conceptual development of research ideas. Notes are personal. Textbooks are a deliberate transform of those notes meant to convey structure in ideas to the average person in the target audience.

I find it funny that someone would go through the pain of undertaking an endeavor as large as writing a textbook, just for themselves. For that, they already have their notes. If you are hinting that writing textbooks (good or bad) has professional consequences, sure. Are they wrong in doing so? I don't see why they shouldn't bear the fruit of good exposition.

Stretching the argument further, you might as well explain almost every action as "people do X for themselves". Kevin Simpler explores this theme in detail [1].

[1]: The Elephant in the Brain: Hidden Motives in Everyday Life (https://www.librarything.com/work/19982533/book/195649617)
I can't remember the name of it but there was another one a year or maybe a few years ago where they were it was going to be an MMO that's an alternate earth where you can be anything. AAA photorealistic graphics, lots of IRL jobs exist in detail. It could be an action game but for example cars would have all of their IRL systems modeled realistically and would require maintenance.

They launched with a trailer that looked so cool everyone knew it was a scam and everyone called it out immediately so it got pulled.
I would argue, that the last 100 years had about the same amount of human history as millions years before them.
DNSCurve requires online decryption as the authoritative server needs to be able to unwrap incoming queries using its private key. Similarly, the server has to generate a whole response from scratch every query, whereas DNS was originally designed so that you can just echo the query header and tack on a cached answer.

Contrast that with DNSSEC, where you can sign zones offline. Not only is this more secure as hacking the server doesn't expose your private key, but you can also keep serving the same immutable data. It really doesn't matter how fast Curve25519 and Salsa20 are, they're significantly more work than just spitting out the same answer to everybody.

These benefits are easy to dismiss for leaf zones, but mean everything when you're serving the root or top-level zones in an increasingly hostile environment.
Monero is pretty much infinitely better, that's why gov hates it.
So very remote places that managed to close off contact with the outside world early.
I love that your dishonest sophistry evades mod and AI bad faith detection.

Keep it up.
Unfortunately that culture of protecting free speech for all, a classically liberal value, has been dying out. The ACLU used to be seen as the most staunch protector of free speech principles, but even they've changed (leadership, ideology) and now they don't value free speech either. See https://reason.com/podcast/2020/10/14/ira-glasser-would-toda... or https://reason.com/2018/06/21/aclu-leaked-memo-free-speech/ for more details on that. But when even the most trusted defenders of free speech are wavering, I'm not surprised to see pervasive censorship elsewhere, like on platforms owned by big tech companies.
I don't think there are many antivaxxers in india. The group who are in Ayurveda are more likely to take the vaccine and continue using Ayurveda thats from my experience.
Well done, impressive features, I like the data edit capability, appears to be way better than other clients.
I’ll give it a try - gotta be better than PgAdmin!
The main issue is that the researchers are now untrustworthy because they conducted this experiment without permission. Essentially, the kernel dev team can no longer trust that any given patch from U of M isn't the same research team using a different email address to submit more malicious patches.
Why look at global market share when safari is only available on one segment of devices?

The world isn't obsessed with safari because they don't have apple products.
Typing Esc then . does the trick too.
It's not quite universal to say inflation robs from the poor. Some poor people like your fixed-income grandma example are hit hard by inflation. Some are hardly affected since they live paycheck to paycheck and don't keep savings. Others benefit from it -- in particular, those who have more debt than savings. Inflation is good for debtors and bad for creditors.

Anyway, I'm hardly opposed to keeping inflation low. I would be fine with 0 inflation, for that matter.
By 0 inflation, I don't mean a fixed money supply. I mean $X pays for about the same amount of goods 10 years from now as it does today.

Accepting limitless deflation via a fixed monetary supply is just as absurd as accepting limitless inflation.

It does not make sense to base a monetary system on a token that represents "1/k of all the wealth", where k is a constant. So just by stuffing the token under your mattress, contributing to zero economic activity, you reap the rewards of all economic growth that added wealth to the world.

Here's how I see it:

The US M2 money supply grew from $286B in 1959 to $19,670B in 2021.

With that came inflation: a dollar in 1959 could buy roughly what $9.13 buys today, according to the BLS.

But that level of inflation is not even close to 1:1 with the money supply increase.

The money supply grew to almost 69x its 1959 size, but the dollar is worth 1/9th what it used to be, not 1/69th. That's because the whole pile of dollars put together are representing more real world wealth than existed back then. The economy has grown, more people are participating in it, and it's making more stuff people value.

Maybe the correct level of growth in the money supply would've been 9x smaller, for no inflation. So the dollar today would buy roughly what it did back in 1959. I suppose that would be OK. But that's still a money supply increase from $286B to $2,193B.

What if the money supply was fixed? So instead of roughly 9.1x inflation, we'd have roughly 7.7x deflation: the dollar today would buy 7.7x the stuff it bought back in 1959. How is that fair? Grandpa's pay for a day's work back in '59, which he put in a safe and forgot about, is worth what I get for a week and a half of work in 2021? Talk about oppressing the poor, you're never going to beat "old money" in this system. The longer the family has been wealthy the more unattainable their savings will be in terms of present-day wages and earnings.

And that's all assuming the best case scenario, which is that the 7.7x economic growth still happens with this deflationary currency. I could easily see it being lower given that there's less incentive for anybody to invest in businesses.
> No one talks about their GCE VMs with years of uptime.

This is literally what you sell. It's like a restaurant owner complaining about the bad reviews, saying "nobody talks about all the people that we fed and never got food poisoning!". Yeah, I only need to hear about a few of those to be concerned about going there, I don't care it's less than 1% of your customers that get food poisoning.
There's nothing wrong with inline styles
> What, they're not mentioning "Metaverse" and "NFT", and they don't have a blockchain?

They did talk about NFT twice, in the kickstarter comment section. This project is now officially a scam.

[1] https://i.imgur.com/cjPCcrI.png
Google beats AWS; as AWS does not let you build truly isolated components. Unlike Google, who has projects.
In terms of numbers, your logic is slightly off because of the distortions of tax law, which means in fact, the bulk of the S&P's distributions in any given year are often buybacks. It makes the net yield of the S&P500 closer to 5% over the last decade: https://www.yardeni.com/pub/buybackdiv.pdf

People rationally buy 5% perpetual yields to cream the asset, not HODLing in the hopes some other buyer will come.

Absolutely I would make a case about the net present value of future distributions - the clearing IRR is currently around 4%, having been around 5% last year.

Similarly real estate pays rent or owners equivalent rent (the value the owner derives from living in it rather than paying market rents). Here, the market seems to clear around 2-3% net of maintenance, having previously cleared around 6% when interest rates were higher.

Bonds pay interest, albeit at this time the clearing yield level is very very low.

What is the clearing yield of bitcoin? Undefined, because it has no expected future intrinsic cashflow payable to the owner.

Bitcoin hodlers have only one possible way to collect a future cashflow, sale to another person for either fiat or goods/services.
Whats sad is that there is clearly a commercial value to the feature, but that commercial value is captured by proprietary implementations of it (e.g. Synology's btrfs-on-mdraid)
This would have been amazing 30 years ago. Now, it will be 2050 or later before that target is hit, and we all better find a good way to remove all these GHG from atmosphere.

And that good news is not counting imports and offshore manufacturing.
I'm not saying they're right, but given we know games can lose the core game play loop and succeed, maybe starting without it isn't a terrible idea. Secondlife is still around without one. Roblox doesn't really have one. Kids can spend hours in Scratch creating their own.
The GDP is very high versus what most poor people have to spend, so I can't imagine this inflation is much of an issue.

There's more than enough stuff for people to be buying
What do you mean by “took antiviral” during the first surge? What antiviral was available in india back then? Tamiflu?
I have eaten street food in India. It may not look especially hygienic, but most of it is deep fried and that is going to kill off most pathogens pretty effectivley. Steamed (as opposed to fried) momos in Northern India seemed to be the thing that gave most people a bad stomach form anecdotal reports.
Can I have an entire stand-alone app (not a module to be published on npm) as a module in package.json? I understand it can no longer use require() anywhere, that's ok.
Mino Games is YC backed, as their job ads pop up on here occasionally. Interestingly they seem to have shut down their older larger scale Mino Monsters games and are focusing on (what i assume to be) smaller scale collecting games.
> There's absolutely no need for this layer 2 stuff

If XMR usage got big enough it would very much need layer 2 even more, the developers themselves acknowledge this and are upfront about it. These very basic computing problems that have been repeated ad nauseam for a decade now do not magically go away and are actually a lot worse for monero due to ring transactions being much heavier.

Are you really going to store a 2 TB blockchain that needs days of compute to initially confirm so you can transact with your friends privately? The first layer has insane amounts of PoW security baked in at this point, it's not for general consumption anymore.
More likely: "We have concluded that since this is research on the coffee urn handling process it is not subject to review for compliance with our policies on research on human subjects."
Thanks for sharing this insight, it makes a lot more sense to me now, saving this (in my brain) for the counter argument to TypeORM.

> I’m just scratching the surface, it’s telling that there are 1500+ unresolved issues on the repo and 200+ unmerged PRs.

So just a side note on this, I judge repositories based on teh ratio of closed to unresolved (and whether they have a bot that auto-closes issues). 200+ unmerged PRs is bad -- that maintainer needs help. I've interacted with the main maintainer before a long time ago and I had a good impression, but they probably weren't ready for how big their project got (how can anyone be) and they clearly didn't charge enough to make it a joy to work on their project. Money isn't the main motivator for everyone, but it would enable hiring people, or taking vacations as appropriate, etc.
For Mac users, thread_create: https://developer.apple.com/documentation/kernel/1538152-thr...
I guess one difference is that real estate and stocks are more functional. With real estate you're providing a service for yourself or someone else. With stocks you're giving a company to continue business.
>> Being in the hospital is not a blanket consent to anything the doctor wants to do

No, in this case, you willfully signed up for a surgery and decided to skip reading the T&C.

>> user has specifically indicated that they want that to happen

You did this by installing the software without opting-out.

You sound entitled and spoiled. And by incessantly accusing netdata of being spyware, it feels like you are not willing to have a constructive discussion.
This folks is why you keep location history turned on on your phone and why you audio record everything.

When the police try to frame you for something you didn't do, you won't have to spend 21 years behind bars.
> The unclear part seems to be how strong the evidence needs to be that the device is yours and that the evidence is on there.

The 5th amendment protects you from having to testify against yourself, but it doesn't protect you from having to turn over incriminating evidence against yourself. The 4th amendment protects your stuff, but only up to the point of requiring probable cause for a warrant.

At issue in these sorts of encrypted storage scenarios is whether you would be incriminating yourself by demonstrating that you know the password. Knowing the password for an encrypted device basically proves that it's your device, so forcing you to decrypt a device would amount to forcing you to testify against yourself in the event that there is doubt about whether the device is yours.

So to force you to decrypt a device there needs to be a warrant for the contents, and it needs to be no doubt about the fact that it is indeed your device. So it needs to be a foregone conclusion that the device is yours, but only requires probable cause to believe that something specific and illegal is stored on the device.
Europe Proposes Strict Rules for Artificial Intelligence
That's Russian propaganda.

There is no independent TV in Russian Federation for 20 years. State controlled media spreads all possible lies. Everything to distract from internal problems. Right now state breaks down peaceful protests, 1600 detained, each is fined by about $200, that's almost half of the average wage ($500). Opposition leader in jail by fabricated claim, requires medical help, poisoned previous year. Income is falling, retirement age increased. State leaders are corrupt beyond possible.
Only if you have more than one copy of the data
I have read some peer reviewed research that suggested that exposure to other coronaviruses (including SARS from 2003) do give some level of immunity to Covid 19
I do agree that the process of comitting, pushing, and opening a PR can be a bit clunky. But I also think PRs are super valuable because they encapsulate code and discussion in one place that's easy to reference in the future.

If I find a line of code that confused me, finding the PR where it happened is often the solution.

That said I think GitHub's code review tools are lacking and hold us back from doing our best.

I'm building something better at codeapprove.com, if you or your team is interested please email me: sam@habosa.com