skysight-inc/HackerNews huggingface dataset:
Uff da! I really do hope the administrators at University of Minnesota truly understand the gravity of this F* up. I doubt they will though.
> Hasn't this pandemic pretty well proved that when people aren't at the office they want a little more space?

Yea, and they want a pool and a free pony too. Given that people can't all get the housing they want, how do we solve for the housing problems we've run headlong into?
Building more housing is absolutely a meaningful way to attack the problem, and zoning reform is a part of that.

> Do people actually want to live in highrises in megacities? Or do they just do it so they can land a decent job?

Of course jobs are the driver here, but that means that incidentally, yes they do want to live in high-rises in megacities. There's no real sign of large cities releasing their hold on productivity and good paying jobs, the current remote work in a pandemic thing not withstanding.

> The zoning reform people only ever look at one side of that equation.

As someone who has faced the SF Bay Area housing crisis over the last ten years, I'd be fine with people moving out. But it's not a realistic solution, given that the good jobs are still here. Not to mention, there's not much we can do to reverse the economic incentives that bring people to places like San Francisco, but there is something we can do about local zoning rules. So it's entirely rational that people focus on building housing in these cities rather than trying to convince people not to move here in the first place.
Ask HN: How do people stay in touch with others, once an online event is over?
Would be interested in hearing what database and query language you think are better?
This points to a serious disconnect between research communities and development communities.

I would have reacted the same way Greg did - I don't care what credentials someone has or what their hidden purpose is, if you are intentionally submitting malicious code, I would ban you and shame you.

If particular researchers continue to use methods like this, I think they will find their post-graduate careers limited by the reputation they're already establishing for themselves.
The law you're thinking of is CFAA, and it's not clear that this violates the CFAA. The requisite element is "accesses [...] without authorization or exceeds authorized access."

Given the general enthusiasm of blockchain proponents to believe that "the code is law", it's a pretty easy argument to make that taking advantage of poorly-written code is well within the user's authorized capabilities. Will it win in court? shrug
notes on machine learning papers
That can't be right. That would mean that all forms of hacking are legal, since after all, the remote server permitted you to run your shell code.
The real problem is all the pages that could be static HTML with some JS on top, but are instead SPAs with a dozen layers of abstraction taking half a gig of RAM and five seconds to render.
Citation needed. The state is far less organized and competent than you think if the US is any indication. Planes were flown into skyscrapers and government facilities and we had zero defenses in place. A global pandemic occurred and we had no plan, PPE or ventilator supply and could not mobilize our infrastructure to respond. Thousands descended on the Capitol building and took selfies during a violent overthrow attempt and the FBI has no idea who the majority of them were, depending on internet tips to identify them.
I almost think of anomaly detection as a UI/UX type tool to help users navigate the data/systems. So use ML to find "interesting" or "novel" periods of time in your architecture (in the sense that the ML thinks they look novel based on some model), and then enable a user who is ultimately best placed to decide if it's actually of real interest to them or more like a false positive that they can just ignore and move on.

So doing it in a way where you can quickly scan such events i think could be useful even if only 1 in 20 actually turn out to be some potential problem that might have been missed by your alarms or maybe could even be a precursor to some impact on SLO's etc.

The aim would also be "this collection of graphs look funny at the same time" as opposed to "the individual graph looks funny" as if you have an anomaly score for every chart for sure at any given moment some individual charts would be randomly firing. But when you pool the information across charts and hosts and systems the hope is that then you can use anomaly detection as another way to explore your system and catch when things change unexpectedly.
Open source runs on trust, of both individuals and institutions. There’s no alternative. Processes like code review can supplement but not replace it.
In the thread you're in, the assumption is that the patches are never actually submitted.
Last time I wrote assembly, and it was a long while ago, it was way faster. But let's be honest, 95% of it was doing manual buffering on top of OS api's rather than use C stdlib. And the other 5% were by skipping itoa calls, by doing arithmetic directly on the string representation.

I think this is why assembler can be faster many times. Not because I'm better than a compiler. But because the structure of the language nudges you into faster approaches.
Details are nice. Sure, I'll take your statement that AirDrop hashes aren't as robust as they should be at face value, but I'm going to need you to provide more information. Of course, the PDFs have this, but the article would do well to better summarize.

If a brute-force requires multiple 500 watt GPUs in order to brute force in real time, I'd like to know. This is vastly different than if it can be done on a laptop's GPU.

If hashes can be cracked later offline with 100% certainty, I'd like to know, since a malicious device can just collect hashes simply by traveling around a city.

But if the brute forced hashes need to be confirmed with the other AirDrop device in real time, else you don't know which of dozens, hundreds, or thousands of results you might get, then this is mostly a non-issue.
> tree planting == good

In which cases is it not?
Other than short term carbon sink we get more trees, wild life gets more trees allowing it to flourish, we get wood for building material, dead trees become soil.
“Gun” isn’t one single tech; you start with a canon that’s hard to move, dangerous to the user, and with a smooth barrel and ball that doesn’t have good accuracy.

Industry to make gunpowder cheaply and reliably rather than as one-offs for anti-castle siege weapons, and metallurgy and tooling to make the weapons hand-held and not prone to exploding in the operator’s hand, are what I have to assume old Asia lacked.
All of those usages are permitted and ordinary uses of the device. Nothing prevents you from doing that.

As far as I can tell from reading the article, all it does is say, "Hey, did you know you've been carrying around a tracker that's not yours?" Your cat or your luggage don't care if you attach a tracker to them. Your ex does.
Memes used as ads to sell products.
One of these: https://www.amazon.com/HiLetgo-USBTiny-USBtinyISP-Programmer...

It allows you to burn the FlashForth bootloader on an Arduino, or to re-burn the Arduino bootloader if you'd like to program your Arduino with C/C++ instead of Forth.

This blog has a good walkthrough of burning the FlashForth bootloader:

https://rickcarlino.com/2017/05/26/up-and-running-with-flash...
"I suggested this was an attack on critical infrastructure using a university as cover and that this was a criminal/counter-intellgence matter"

There is absolutely zero evidence of this. None. In my opinion it's baseless speculation.

It's far more likely that they are upset over being called out, and are out of touch with regards as to what is ethical testing.
> Many python packages will take longer to install I imagine (if there are no wheels for the M1 mac, not sure if that's an issue) and I suspect some won't build at all. I also have some concerns over our Docker environment building.

Just use an x86-emulated terminal and you don’t have to worry about this. The only limitation is x86 docker images, which I can’t get to run on my M1. Everything else works as it did on my 2015 MBP (when executed in an x86 terminal).
Kinda a silly example, but several subreddits that started out with the aim of making fun of some subject (i.e. r/prequelmemes and the Star Wars prequels, or r/the_donald and then Presidential candidate Donald Trump) were quickly turned into communities earnestly supporting the initial subject of parody.
We need more data on what prices really are. things like the big mac index, that measure prices independently and actually report just the prices, without quality adjustments. This will give us a good upper bound on what inflation actually is, instead of having to rely on the CPI's questionable "adjustments"
I agree with you, but one thing that I have learned, is that non-nerds tend to hate "computers."

By "computers," they mean things with screens, mice and keyboards that don't have a simple, fixed user interface. I know that some of the iPad Pros are starting to look a lot like "computers."

Me? I love "computers." But I'm a nerd. We're supposed to love them.

I am really looking forward to getting my grubby little mitts on a new laptop, when they come out.
Not Leicester, as far as I know.
The Middling Culture Social Status Calculator
If the US had relegation from baseball and football it would improve the sport.

At the moment there is no penalty for coming last in the AFL or NFL :-) oh and next year you have first pick of the best new players
I maintain a similar project, load any CSV, manipulate and get stats, detect sensitive data, etc

https://github.com/capitalone/DataProfiler

My question, how do you do header detection? That's a _very_ difficult problem.
The University can presumably not in fact do this.
> Or in other words: we are playing flirting dangerously with real, scary inflation, it's just happening in our homes so we think it's all good.

Home prices have gone up way more than incomes over the last 10 years. Economists don't seem to want to call it inflation until incomes are rising. I'm glad I bought a house for $180K in 2011 that's worth $360K now 10 years later, but I really wonder how folks who are entering the market now are able to deal with the much higher monthly payment. That's going to divert spending away from other parts of the economy for quite a while.
> They answer to this objection as well. Same section:

Not sure how that passage justifies wasting the time of these people working on the kernel. Because the issues they pretend to fix are real issues and once their research is done, they also submit the fixes? What about the patches they submitted (like https://lore.kernel.org/linux-nfs/20210407001658.2208535-1-p...) that didn't make any sense and didn't actually change anything?

> And, coming to ethics:

So it seems that they didn't even just mislead the developers of the kernel, but they also misled the IRB board, as they would never approve it without getting consent from the developers since they are experimenting on humans and that requires consent.

Even in the section you put above, they even confess they need to interact with the developers ("this experiment will take certain time of maintainers in reviewing the patches"), so how can they be IRB-exempt?

The closer you look, the more sour this whole thing smells.
Don't you leave out the thickening of trunks, and most importantly, carbon storage from fallen leaves of deciduous trees? Imho, the humus is also a compartment of the forest that stores carbon (even if it will be slowly transformed).

Also, the decay of fallen trees is very slow, and is not 100% into carbon dioxide (the carbon will remain a very long time in the body of numerous plant and animal species), whereas the combustion for human use is complete and on a much smaller scale of time.
Show HN: Wiggleface, a silly game engine for my students
I don't think it is satirical.

https://www.vice.com/en/article/9aa3vy/do-easy-william-s-bur...
In what way does a hypocrite commit differ from a commit which unintentionally has the same effect?
Is AWS Killing Linux?
This is more about avoiding having a digital identity. I recently created a second Twitter account to create some separation between personal and business interests, conversations, etc.

Not that I want to have two identities, but I would like to be able to distinguish between them. It was not difficult, but required some effort to create separation (I didn't want twitter suggesting my "business" account to my friends I already followed on my personal account).

Facebook was another story. I have never had a Facebook account until a couple of weeks ago. I took on a new hobby recently, and the most active community around this topic is exclusively on Facebook. I joined and immediately disabled the ability to be seen to the extent I saw possible. But then Facebook disabled my account within 24 hours – the irony! They allowed a review process, which required a selfie (they clearly know my identity through facial recognition, despite having never supplied a picture myself). They let me back in fairly quickly. But I hate having to "support" the ecosystem. And it turns out I cannot friend anybody without allowing their friends to view my account.
Very nice. I especially like the structure (What?, Why?, How?, And?) which is shared for every note. Though it has fallen out of popularity, RSS will be useful. Overall the concept kinda reminds me [the morning paper](https://blog.acolyer.org). I wonder if there're similar attempts for other fields (math, physics, ...).
Quasi Solid-State Lithium Sulfur Aviation Batteries with 450Wh/Kg
There are ways to perform 3rd party assessment without directly exposing intellectual property to interested parties.
TIL that opensource project maintainers aren't humans.
I believe that 74% and 95% are efficacy values. The actual effective values would be lower.
> our free-forever SaaS offering that complements the open-source agent

How do you make or plan to make money?
> I have a real itch to one day see a crypto being widely adapted as an actual currency.

Monero is closest to achieving the original cryptocurrency dream. Private and anonymous transactions, good speeds, low fees, ASIC and GPU resistance, committed developers that are actually improving the coin over time, open source wallets even on mobile.

> I think dogecoin is the only one in our current crypto eco-system that has even a fraction of a chance in filling that space.

Why do you say that?
I like GMail a lot. It has a fantastically good spam filter, a feature that I feel doesn't get enough appreciation.
plonk

Aaaaand into the kill file they go.

Been a while since I last saw a proper plonk.
See also: preact, mithril.js, etc

I mentioned this before[0] but it seems the author is committed to the name, despite the potential confusion downsides </shrug>

[0] https://news.ycombinator.com/item?id=26744932
Why should the public be given access to that information? Google should be under no obligation to provide any of that unless we "nationalize" the idea of search engines and declare them a human right. Until then, it's a voluntary service to be consumed.
I just hope their killer variants dont make it across borders
While the video certainly contains absurdist elements (the duchess scene gets me every time), I've always seen it as being sincere in tone. It feels a bit like a fable or a parable, in that it contains deliberately unrealistic parts to get the point across, but remains in good faith nonetheless.
Again IANAL, but I think there's more to it than "the code is law." If we accept that hacking is illegal, then we must also accept that the law recognizes a difference between what the code does and what the code intended to do. I would think that this means that the courts would recognize a faulty but good-faith attempt at an authorization check on token movements to be evidence of the developer's intent to prevent tokens from being moved without authorization. If so, then they would further conclude that token movement that doesn't follow the intended authorization code paths is a violation of the CFAA.
> The kernel team literally already does this by the very nature of reviewing code submission. What do you think they do if not examining the incoming code to determine what, exactly, it does?

Maybe that's what they claim to do, but how do you know for sure? How do you test for it?

> This implies that this is the only or main way security is achieved.

It doesn't, there are many facets of security, social engineering being one of them. Maybe it's controversial to test something that requires misleading people, but realistically the only alternative is to ignore the problem. I prefer not to do that.

> Plenty of organizations agree to probing/intrusion attempts; there is no reason to secretly do this.

Yes there is: Suppose you use some company's service and they refuse to cooperate in regards to pentesting: The "goody two-shoes" type of person just gives up. The "hacker type" puts on their grey hat and plays some golf. Is that unethical? What if they expose some massive flaw that affects millions of unwitting people?

> I don't believe in the ends justify the means argument.

Not all ends justify all means, but some ends do justify some means. In fact, if it's a justification to some means, it's almost certainly an end.

> I do agree that the way the current laws regarding "hacking" are badly worded and very punitive, but crimes are crimes.

Tautologically speaking, crimes are indeed crimes, but what are you trying to say here? Just because it's a crime doesn't mean it is unethical. Sometimes, not performing a crime is unethical.

> You don't randomly walk up to your local business with a lock picking kit to "test their security".

Yes, but only because that's illegal, not because it is unethical.

> You don't randomly steal someone's wallet to "test their security".

Again, there's nothing morally wrong with "stealing" someone's wallet and then giving it back to them. Better I do it than some pickpocket. I have been tempted on numerous occasions to do exactly that, but it's rather hard explaining yourself in such a situation...

> Why is the digital space any different?

Because the risk of running into a physical altercation is quite low, as is the risk of getting arrested.
At least one human, GKH, disagrees.
Woodworking Project Plan Wireless Speaker Box
For me the article was well worth it; where else but in ISA discussions can you find gems like the following?

> Does a non-instruction that is non-defined and unofficially guaranteed to non-execute exactly as if it had never been in the instruction set to begin with count as an x86 instruction? For that matter, does UD2 itself, the defined undefined instruction, count as an instruction?
Yes, but bacteria action continues in that soil and continues releasing CO2 for a long time to come. Some of it will feed new plants (anything taken from the soil is not being taken from the air). The question is how much of that soil carbon truly becomes permanently sequestered? Some of it may be there for a long time, but the humus layer will not become infinitely thick. Once we are talking about an old growth forest, the forest will have reached a somewhat steady state. I am not saying it cannot continue to act as a carbon sink, just that I suspect it to become less effective over time, and that it will not work in all conditions. A number of research papers have pretty much shown this lately, not just this one.
The covert lifestyle can be mentally taxing, and you will make mistakes (if you're not consistently careful).

Catch the flu or a cold, get shorted on sleep for one or more nights or have one distracted moment for any random reason and that can make the whole thing fall apart. People seem to vastly underestimate this reality.

Also: In practice, people who are in earnest on the run are often identified based on things like subscribing to their favorite magazines related to their hobby.

I think for most people that's the harder thing to address: How do you just stop being yourself and develop entirely new interests?

Trying to just not do X because it's closely associated with who you are is amazingly hard and can rapidly start making people actually crazy. This is much harder to do than breaking a bad habit which is infamously hard for most people under the best of circumstances.
So the NSF funded some wholly unethical research that does nothing other than prove as stated in the conclusion that the openness of open source means it’s doomed to be forever insecure. What a horrible moment.
And many of these issues are same for many bigger players, "thousands of fake 5-star reviews", "scams" and "recurring subscriptions".

Situation won't get better without legislative changes.
Living optics Is Hiring looking a proven Software Engineer
We are looking for a Software Engineer to help us build a scalable, deep tech architecture to allow us to rapidly develop and grow.

Job below:

https://uk.indeed.com/job/software-architect-b6e8a2f3df569d1a
Not really. Leicester in particular winning was an extreme event, but any small club winning in any league, much less extreme. Remember Chapicoense?
your answer doesn’t make any sense in this context. this is a standard whatsapp feature that can not be turned off. you can disable networking and open whatsapp and that flag will not be sent, but also your conversations won’t get updated. jailbreaking doesn’t change any of this.
To be fair, there's also Albanians (Kosovo). Still, not sure if 'racial' applies though.
I wonder what would it take to send a pair of optical telescopes on lunar landers (unmanned?) and attempt to do it using vacuum instead of optical fiber as a medium to join them.

A lot of the things that make it complicated on Earth just aren't there on the Moon. Plus, we have a great excuse to keep a couple astronomers and engineers around to service the telescopes.