skysight-inc/HackerNews huggingface dataset:
Given the attitude of "the researchers" and an earlier paper [1] so far, somehow I doubt they will act in good faith this time.

For instance:

"D. Feedback of the Linux Community. We summarized our findings and suggestions, and reported them to the Linux community. Here we briefly present their feedback. First, the Linux community mentioned that they will not accept preventive patches and will fix code only when it goes wrong. They hope kernel hardening features like KASLR can mitigate impacts from unfixed vulnerabilities. Second, they believed that the great Linux community is built upon trust. That is, they aim to treat everyone equally and would not assume that some contributors might be malicious. Third, they mentioned that bug-introducing patches is a known problem in the community. They also admitted that the patch review is largely manual and may make mistakes. However, they would do their best to review the patches. Forth, they stated that Linux and many companies are continually running bug-finding tools to prevent security bugs from hurting the world. Last, they mentioned that raising the awareness of the risks would be hard because the community is too large."

[1] https://raw.githubusercontent.com/QiushiWu/qiushiwu.github.i...
From the docs:

> While the underscore (_) attribute is where the hyperscript runtime looks for hyperscript on an element by default, you may also use script or data-script attribute, or configure a different attribute name if you don't like any of those.
So far the comments here lack much context. The film here is what I believe is a student project of Gus Van Sant who went on to be a professional movie director. The narration is from William Burroughs, who's most famous for "Naked Lunch".

One interesting fact about Burroughs is that he was a chronic drug abuser and managed to shoot his wife during some sort of drug fueled accident. The message in this little piece can be easily interpreted as Burroughs trying to analyzing his own mistakes that lead to her death.

This is really just scratching the surface of how odd and complex Burroughs' life and psyche are. If you are a fan of surrealism, the beatnik movement or other larger than life writers like Hunter S Thomson, it's worth giving his work a chance.
Daily Mail can fuck themselves. They published an article a complaint I filed with the Oklahoma coroners office in 2012 because it was taking 12+ months to get results when my 5yo son died. They also spun it as parents in "outrage" to get clicks and refuse to take the article down even now that there is no way it is producing revenue for them.
Apparently when the fetch fails, it triggers an `fetch:error` event[1], which can (probably) be handled somewhere. No idea about formatting the response, though.

I think it's quite natural for there to be large gaps in functionality provided: it looks like a rather young and unpopular project, so the additional code needed to handle more situations from within the language still needs to get written. jQuery also didn't have a whole universe of plugins from day 1, but was useful enough anyway. Not saying this project has a chance to become another jquery, just that it too can be useful even in a far-from-complete state.

[1] https://github.com/bigskysoftware/_hyperscript/blob/master/s...
submitting a patch for review to test the strength of the review process is not equivalent to inducing PTSD in people without consent or breaking in to the Whitehouse.
You're being ridiculous.
Linux runs many of the worlds financial, medical, etc etc... institutions and they have exposed how easy it is to introduce a backdoor.

If this was Facebook and not Linux everyone would look upon this very differently.
I used to be amazed that anyone found it appealing back when it was $20,000!

https://blog.ycombinator.com/a-new-standard-deal/

Even if you're eating ramen, that's like 3-6 months of expenses at best. For anyone that isn't like fresh out of college, you'd think they'd have access to that kind of capital through savings, family/friends, or even credit cards.

I guess it rather strengthens your point about it being all about the brand name rather than the capital.
> GDP in Ukraine is ~3,5k$ per year.

I don’t know what to make of this comment; it’s certainly wrong by a wide margin. The entire country’s GDP cannot be less than I take home per paycheck. I thought maybe it was per-capita GDP, but the 2021 IMF estimate is $13k—almost 4x your figure. https://en.m.wikipedia.org/wiki/List_of_countries_by_GDP_(PP...
This, in of itself, is a finding. The researchers will justify their research with "we were banned which is a possible outcome of this kind of research..." I find this disingenuous. When a community of open source contributors is partially built on trust, then violators can and will be banned.

The researchers should have approached the maintainers got get buy in, and setup a methodology where a maintainer would not interfere until a code merge was immanent, and just play referee in the mean time.
Ethereum may be a distributed virtual machine but currently it lacks access to data from the outside world. Naturally this places constraints on the applications that can be built: they always concern Ethereum itself.

People invented Chainlink to solve this problem: provide real world data such as "package has arrived to its destination" to smart contract software. I don't think it has delivered on its promise yet.
I think that was kind of the point of the research: submitting broken patches to the kernel represents a feasible attack surface which is difficult to mitigate, precisely because kernel maintainers already have such a hard job.
Although there's nothing to suggest that this professor is in any way supported by the Chinese state, I don't think it's completely unreasonable to wonder.

The UK government has already said that China is targeting the UK via academics and students. China is a very aggressive threat with a ton of resources. It's certainly a real scenario to consider.

Just as this "research" has burnt the trust between the kernel maintainers and the UMN, if China intentionally installs spies into western academia, at some point you have to call into question the background of any Chinese student. It's not fair, but currently China is relying on the fact that we care about fairness and due process.
New Outlook is being written with a web UI, using WebView2 on Windows. MAUI lets you do something similar (embed a web view, do your UI in that with Blazor or any other web tech).
>Home prices and rents have gone up way more than incomes over the last 10 years

Home prices, maybe. But rents (aka housing)? AFAIK it's kept pretty consistent: https://www.aei.org/wp-content/uploads/2020/01/cpi2020-875x1...
Increasing interest rates.

I don't know enough to estimate the likelihood of that happening but it seems like the obvious danger.
Lit Launch Event – (New Web Component Framework from Google)
What I don't understand is how this is ethical, but the sokol hoax was deemed unethical. I assume it's because I'm sokol's case, academia was humiliated, whereas here the target is outside academia
I'm surprised that the IRB determined this to be not human subjects research.

When I fill out the NIH's "is this human research" tool with my understanding of what the study did, it tells me it IS human subjects research, and is not exempt. There was an interaction with humans for the collection of data (observation of behavior), and the subjects haven't prospectively agreed to the intervention, and none of the other very narrow exceptions apply.

https://grants.nih.gov/policy/humansubjects/hs-decision.htm
Curious, does anyone actually care about the actual number primarily? I thought pretty much everyone who clicks on an article with that title would do so because they are interested in the insights gathered when getting to that number.
I'd also be curious to discover how many distinct x86 instructions gcc can even emit? I expect the answer is "a lot less than all of them."
Stop using Google, it's a bad company with bad practices and it's search engine is becoming increasingly worse at providing good results. There are other options that are just as good now.

Our worthless government needs to do their job and break them up.
Unsurprising given the current open sores model of software
Pentesting has wide accepted standards and protocols.

You don't test a bank or Fortune 500 security system without buy-in of leadership ahead of time.
One very good security practice is that if you find that you have a malicious contributor, you fire that contributor. The "misdeeds" were committed by the UMN researchers, not by the Linux maintainers.
That's interesting. Perhaps using a trusted third party podcast app would be preferable? Again, not sure. I certainly understand having some analytics around non-identifiable data, such as downloads, listens, etc.
You can use Microsoft Remote Desktop Beta to skip the VM/Intel MBA.
Looks like vandalism masquerading as “research”.

Greg’s response is totally right.
Charter Cities Can Create Better Refugee Responses
Like, non-celebrity-related events?
> Look at real estate listings in many smaller Midwest cities and you’ll see large inventories of very nice, very affordable homes. Older people are moving out but no one is there to buy them.

Not in my small Midwest city. Many houses are being sold in hours. Most of the time I see a new realtor, it is already sale pending. I have little doubt houses are being sold without being put on the market. There are realtors asking around my neighborhood if anyone is looking to sell because they have buyers interested in the area.
I don't know of any comedy podcasts that are more like comedy albums - recommendations would be appreciated!

The podcasts I listen to from comedians is more along the lines of interviews, like WTF, or a few people spitballing on various topics. Not well formed jokes.
That's associated with a big travel purchase so you can cut that possibility out pretty quickly.
How to Blitzscale Solutions for Diversity in VC Funding
And the way that the UK shares is by setting up production in other countries, which makes more sense than producing in the UK and shipping everywhere. But it makes it look like the UK is tight-fisted because the vaccines don't get exported.
Shadowstats tracks the inflation numbers using the government's old formulas (pre-gaming)

http://www.shadowstats.com/alternate_data/inflation-charts
As also mentioned on Twitter, I think I'm taking the criticism of this article much harder than usual. I have a response to your comment, but it's a bit "sideways" from the actual discussion. Ping me on email/twitter DM?
Are you assuming that the set of certificates that is given as input is the complete search space? It isn't; the server might have failed to send some certificate that, if present, would have fixed the "unknown issuer" problem. Also, we fail fast on errors; as soon as we find a problem, we stop the search on that path. Because of these reasons, identifying a single error would be, potentially, misleading.

In some cases, e.g. the end-entity certificate is signed with an algorithm that isn't supported, or an RSA key that is too small, we could add special logic to diagnose that problem. However, all this special diagnostic logic would probably approach the size of the rest of the path building logic itself. It doesn't seem appropriate for something in the core of the TLB of the system. Perhaps at some point in the not-too-distant future we can provide some mode with more diagnostic logic, and find a way to clearly separate this diagnostic logic from the actual validation logic to ensure that the diagnostic logic doesn't influence the result.
Yeah that has nothing to do with the issue at hand. What Google is doing has larger implications than your personal vendetta against Daily Mail.
Why don't you tell us an alternative rather than just shooting down without solving the problem?
This is a known practice in some Eastern European countries as well.
I think the Mail is going to have a real tough time proving Google is doing anything nefarious because the algorithm used by Google is closed source.
Leicester was bought by Thai billionaires a few years before winning the league.
Using aliases have existed for like ever. So I guess you’re trying to use extern aliases which are super rare to ever need so still don’t know what you’re struggling with.

In terms of building a real world application. What are you struggling with? The code is no different regardless of IDE you use. VSCode, Visual Studio, and Rider all have a debugger and can step through code.

Right now it sounds like you’re just trying to make .net sound bad.
im also super curious of this, i wanted to do a DIY angle of arrival necklace some time ago and last time i checked you required a whole mini antenna to achieve that!
The daily mail is trash. I'm glad google is filtering out such low quality blog spam.
The important thing about drone warfare campaigns is that they are only successful if the enemy is unwilling to challenge your air supremacy over your own territory.

This is the case in Ukraine right now and in the Nagorno-Karabakh conflict. Russia is unwilling, right now, to challenge all of Ukrainian airspace, and Armenia/Russia was unwilling to challenge Azerbaijani airspace.

The moment this change is when the drone strategy is no longer effective. Drones only work when you have air supremacy over at least a staging area. When you do not, then there is not much to do.

Also, Russia has it's own drones, which they are not using because they are in the defensive position right now.

If there is a prompt for a Russian advancement or if the line becomes untenable, the drone-based strategies will collapse and the conflict will turn unless Ukraine can muster up something else. Simply put, Ukraine has no hope at all of contesting air supremacy with Russia. It's air force is incomparably worse, and drones have no anti-air capacity.

But we are not there. Russia is nowhere near attempting a full-scale invasion and hasn't, they limited themselves to taking the Donbass and Crimea and defending it strictly, more or less.

As for Russia in Armenia, there was not really any cake-on-the-face. Russia's policy was to stand-by unless Azerbaijan was threatening Armenia proper. Maybe Armenia could have negotiated another arrangement had their orientation been different, but as it stood Russia was unwilling to do much at all in the NK conflict.

As it stands the balance of power is still overwhelmingly in the favor of Russia and it is not close.
> they have an "engine-core" package that downloads a binary server behind the scenes and runs it on a free port in the background

O_____O
Given its ubiquity in so many industries, tampering with Linux kernel security sounds an awful lot like criminal sabotage under US law.

Getting banned from contributing is a light penalty.
Can you point to this please? From my reading, it appears that their earlier patches were merged, but there is no mention of them being actual vulnerabilities. The lkml thread does mention they want to revert these patches, just in case.
They will, however, be using kerosene, not liquid Hydrogen. It cannot provide cryogenic temperatures.
>> Unless it loses 50%+ of value suddenly. Then it may take you 10+ years to return back to profit.

You didn't understand what I said. It doesn't matter about short term fluctuations of market value. If you are pulling in rent (or not paying rent because you are using the house) then it doesn't matter what the market price is right this minute. Flipping assets in a hot market is a zero sum game, and is more akin to gambling than capitalism. Traditionally capital generates profit by producing real value, in this case by providing shelter to you, or to someone paying you. Ownership of a company is the same thing (that's what a stock is). It produces value or provides a service.

This is a thread about bitcoin. Which is a virtual (read intangible), currency whose value is determined entirely by other people's belief that it is worth something. It can't be used for anything except as an incredibly unstable store of value. It can't provide shelter, people won't give you real value to temporarily hold it. Bitcoin as an algorithm is unkillable. As an investment it is, very, very fragile.
I think we all appreciate the links but unless I'm missing something, no, it doesn't help -- what's the plan to make money? That blog post doesn't mention anything along those lines at all.
Spotify is creating a monopoly in the podcast industry; it is only a matter of time before all the big names will flock to the platform because of its users and profits. It also helps the podcast to be discoverable by new users.
Now one of the problems with research in general is that negative results don't get published. While in this case it probably resolved itself automatically, if they have any ethical standards then they'll write a paper about how it ended. Something like "our assumption was that it's relatively easy to deliberately sneak in bugs into the Linux kernel but it turns out we were wrong. We managed to get our whole university banned and all former patches from all contributors from our university, including from those outside of your our research team, reversed."

Also, while their assumption is interesting, there sure had to be an ethical and safe way to conduct this. Especially without allowing their bugs to slip into release.
His department presumably allowed this to proceed
I agree with your last paragraph, although I can totally understand how somebody who doesn’t know much about programming or open source would see otherwise.
It happens once every 30 years and it is one of those improbable events that somewhat, someway happen, and after the event we get back to normal real quick (top teams aka those with more money in the Premier League winning, Milan, Juve, Inter in Italy, and Real or Barca in Spain, and of course Bayern in Germany).
Then, there are some minor (in terms of fans, history) teams that get to the top echelon of their respective championships. But here is the catch: they go up there because they spend like crazy, like Parma, Roma, Lazio in Italy in the late 90s, early 2000s, Leipzig with the Red Bull money, and how can we forget the Real Betis and Deportivo La Coruña?

This fans reaction to the proposed ESL is ridiculous. Football is of and for the fans? How laughable. Players making millions and millions, oil money and money from suspicious financing changing teams from minor characters in the national stage to top teams (see Chelsea, ManCity, PSG). How can true fans support Chelsea when the money from Abramovich change the dimension, the spirit of the team? Or Manchester City, with working-class fans that are now supporting a team that in one week is spending more than an Onassis in a year?

My football, the "romantic" football, ended in the 80s. Certainly a time in which players were already paid handsomely, but also a time in which you could see players play for the "shirt", in which teams had an identifiable "culture" and "spirit" that was shared among players and fans. A sport, not just a pastime. I cannot stand watching a game now.
Have you tried some of the type info based rules in typescript-eslint? They're fantastic.

No floating promises, no bad templating, etc.
/r/ProgrammerHumor/ “Do you write SQL in upper case or lower case?”
In his defense though, the contract signed by his predecessor was an absolute sham and getting the state out from under it with as little additional costs as possible is the 100% right thing to do.
Tyrannosaurs may have hunted in packs like wolves, new research suggests
Vulnerabilities in OSS are fixed over time. They are fixed by people running the code and contributing back, by fuzzing efforts, by testing a release candidate.

The difference between OSS and closed source is not the number of reviewers for the initial commit, it's the number of reviewers over years of usage.
Or turn on airplane mode
Check out section 4.2 of the paper: 3D is very similar to 2D, using the same strategy of big regions -> small regions -> voxels.

(There's also a bit of extra logic to skip regions which are occluded in Z, plus a final pass to render normals using automatic differentiation)
In the old days they used to print giant books of these "phone numbers" and drop them on your neighbours porches. Odd how things that were common are now security risks.
I thought they meant a pile of paper notes you could use for machine learning OCR or something.
Should tools do smart things for us vs. make us smarter
I have been thinking a lot about the purpose of tools. Should they help us get smarter e.g help us with our logical thinking, or should they do the logical thinking for us?
The point is not to break a single conversation into multiple threads, it is to split a single conversation away from the other conversations happening simultaneously in your #help channel. Effectively creating a channel, without having to bug a mod to get a new channel for your 5min conversation.
I wouldn't for a war with Russia, but I'd sign up in heartbeat to take a gun to China. The CCP needs to be put down, and any price is worth it.

Out children and our children's children will view us the same way we view Chamberlin and his appeasement of Hitler if we don't do something about their genocide now.
Tranquilo amigo, relajate
That's assuming Putin is alive and it's not just the 5 doubles we see.
This was why I posted it -- I learned a lot more than the answer to the title.
Remaining anonymous in the physical world is much tougher--although, again, it depends on your threat model. I think you'd almost have to have a fake ID which you wouldn't want to use in circumstances where it might actually be checked against databases, such as driving.
I'd still have to VPN in to it though which blocks my internet except RDP.
Then you might as well include every major media organization there is since they all thrive on sensationalism. Google should not be in the business of deciding what's appropriate for us to see. I didn't vote them in as the arbiter of truth.
Fascinating that the research was judged not to involve human subjects....

As someone not part of academia, how could this research be judged to not involve people? It _seems_ obvious to me that the entire premise is based around tricking/deceiving the kernel maintainers.
Good. I don't know the details of this case, but they don't even matter.

Whether it's Facebook nuking all your Oculus Quest content because you were at a pro-democracy Hong Kong protest, or Apple remotely deleting all your music and apps because their fuzzy-logic automation incorrectly correlated the pattern of your network traffic with illegal activity, there has to be some recourse — and in the US, that recourse should obviously be the courts.
> I can't help but wonder how many lives this feature has ruined

I agree with your comment completely, but isn't this a bit a bit of an exaggeration?
So asking 'why?' in this situation is in some way unethical because the person in question is from China? Or is it that we have to limit the answers to our question because the person is from China? Please advise, and further clarify what thoughts are not permitted based on the nationality of the person in question.
This is not true in Texas and other red states. The Attorney General of Texas files political cases that have no basis in law or fact. He filed the election lawsuit which was soundly rejected by SCOTUS, for instance.
It's way easier to determine instruction length on ARM. It's usually fixed. That eliminates a lot of brute force thrashing that X86 decoders have to do. It doesn't impact transistor count all that much on a huge modern CPU but it saves a decent amount of power. It's one of the things that factors into why ARM is so power efficient.

ARM has also been willing to drop older optional legacy stuff like Java oriented instructions that almost nobody used and Thumb. X86 supports nearly all legacy opcodes, even things like MMX and other obsolete vector operations that modern programs never use.