skysight-inc/HackerNews huggingface dataset:
The only difference is that the Guardian/NYT's lies are accepted enough to be dangerous.

See: russiagate; russian bounties for american soldiers; the lack of representation of blacks and minorities in initial Covid coverage, leading many to assume it did not affect them; etc.
Yup, it's basically stating the obvious: that any system based on an assumption of good faith is vulnerable to bad faith actors. The kernel devs are probably on the lookout for someone trying to introduce backdoors, but simply introducing a bug for the sake of introducing a bug (without knowing if it can be exploited), which is obviously much easier to do stealthily - why would anyone do that? Except for "academic research" of course...
> In my experience, eSIMs provide "voip" numbers and not actual "mobile" numbers

Are you conflating eSIMs (which are just equivalent to physical SIMs) with "burner phone" apps? I guess it's possible that the MVNO uses voip numbers rather than "real" phone numbers, but several large mobile providers (eg t-mobile) use eSims.

> This is an important distinction since most 2FA verifications[1] come not from a phone number, but from a "short code"[2] and voip numbers cannot receive SMS from a short code

jmp.chat is a voip service and supports short codes just fine.

https://jmp.chat/sp1a/faq/
Unlike the rest, the Mail continues to be owned by the same family.

Interestingly, the writer of the article in The Mirror that supported Hitler was one Lord Harmsworth - great grandfather of the current owner of the Mail.

Harmsworth also used to own the Mirror before it was sold and changed its political orientation.
Podcast on Research, Knowledge, and Decay with Geoff Anders
Seems like the anti-stalking thing could take at least a couple days? In that case, I'd still love to hide one of these things on my bike. If my bike gets stolen, I'll know about it very quickly.
TSLint is deprecated in favour of ESLint. See https://palantir.github.io/tslint/.
Hey! I'm the guy behind this design!

Couple thoughts:

1. I approached this project with the goal of making good espresso as cheaply as possible. EC50 uses pressurized portafilter baskets which are mostly used as crutches for preground "espresso" coffee which is too course. The basket that's being used in my project comes from a manual machine that a lot of people like and works really well. It's easier to take good parts and work backwards than trying to upgrade a cheap machine to work well imo

2. This allows me to dial in preinfusion and extraction pressures manually which is why some people like manual espresso. More control.

3. Most electric machines use vibe pumps which some die hard espresso nerds think disturbs the coffee puck too much. Manual machines like the one I designed are much gentler on the puck which (allegedly) leads to less channeling and more consistent shots.

No answer for the steam wand though!
The fact that both of the researchers seem to be of Chinese origin should definitely raise some questions. Not the first time things like this have been tried.
Start exploring in areas you love; maybe if you love creating websites, start learning front-end. After practicing and creating numerous projects, try to make a back-end for it. Do this for your other interests; you'll become comfortable over time. Don't pressure yourself and enjoy the journey.
Wait.. what? You find the DM a home for "sensible reaction" to cultural issues? That's horrifying.
This is the unfortunate attitude that leads to bad research and reduces trust in science. If you think IRB has contributed to deaths you should make a case, because right now you sound like a blowhard.
I wouldn't implement this in any larger projects. Reading through the syntax it seems to fluctuate between choppy flow and fluent English.

Possibly for smaller personal projects, but maybe that is what the library is for.
What do you think of senior citizens who don't think they should have to pay school taxes?
That looks like a different person from the name in the article.
It's me! You can find more of my projects on my website at www.fourbardesign.com
Thanks for this, very helpful.

Could they have submitted patches to fix the problems based on same tooling or was that not possible (I am not close to kernel development flow)?
> Update the processes and tools to try and catch such malicious infiltrators.

How?
Maybe one of these two will work:

https://outline.com/SeEEHt

https://archive.is/D05nu

For the future, you can usually create these for yourself by going to top of the sites that I linked.
Sounds like the words of a man on the receiving end of said suck
> The foundation should sue the responsible profs personally and seek criminal prosecution.

This is overkill and uncalled for.
> The defendant prefers that its users get information that a) maximises the defendant's ad revenue and b) advances the defendant's preferred narratives.

FTFY
I completely forgot about the Core Duo Mac Mini!

We had purchased one, when 10.5 released. And it died shortly after to be replaced by the Core 2 Duo Mac Mini. The x86 era was so short I barely remembered it.
As a product design engineer, that's always in the back of my mind but at the end of the day, this is a niche within a niche and even with previous side businesses, I've realized that most chinese cloners don't bother unless there's real money in it.
Oh it's absolutely a hack for the better-than-having nothing scenario :)

My main issue was remembering to charge the old phone every few days as I'm not in need of this regularly, so more of an occasional thing like to an unfamiliar place/country, or on a trip to Disney.
Here's the research article linked there, for those interested: https://github.com/QiushiWu/QiushiWu.github.io/blob/main/pap...
That depends on what you mean by information and density.

There's a concept of perceptual qualia-density which has nothing to do with semantic density in the linguistic/narrative sense.
It's meaningless to compare platforms based on just one implementation pre-rewrite and post-rewrite. If they re-wrote it into the same stack with performance as a goal, they'd get significantly less compute resource usage, too.
Don't harass people.
It's sms that is way behind the needs of chat :)
Apple finally supports CEC, I can choose to not use the apple TV remote.
Williams Completes Flight Test Burning 100% Sustainable Fuel
For GP’s comment, what happens to vaccine components that are “broken down”? It’s not just the mRNA in there right? There are other compounds to aid in delivering and stabilizing the dose. A serious side effect known only in the future may not specifically arise from the broken down mRNA. So does the body flush out (pardon my informality/ignorance on the right terminology) all the components of the vaccine somehow?
My M1 MBA lasts around 6 hours if I do a lot of Google Meet calls.
I understand where this is coming from, and empathize with this but also empathize with the Kernel.org folx here. I think I'm okay with this because it isn't some government actor.

It is not always easy to identify who works for who at a university in regards to someone's research. The faculty member who seems to be directing this is identifiable, obviously. But it is not so easy to identify anyone acting on his behalf - universities don't maintain public lists of grad or undergrad students working for an individual faculty member. Ad in that there seems to be a pattern of obfuscating these patches through different submission accounts specifically to hide the role of the faculty advisor (my interpretation of what I'm reading).

Putting the onus on others is unfair...but from the perspective of Kernel.org, they do not know who from the population is bad actors and who isn't. The goal isn't to penalize the good folks, the goal is to prevent continued bad behavior under someone elses name. Its more akin to flagging email from a certain server as spam. The goal of the policy isn't to get people to effect change, its to stop a pattern of introducing security holes in critical software.

It is perfectly possible that this was IRB approved, but that doesn't necessarily mean the IRB really understood the implications. There are specific processes for research involving deception and getting IRB approval for deception. but there is no guarantee that IRB members have the knowledge or experience with CS or Open Source communities to understand what is happening. The backgrounds of IRB members vary enormously...
This is one of the commits that went live with "built-in bug" according to Leon:

https://github.com/torvalds/linux/commit/8e949363f017
I understand the point that you are making, but you have to look at it from the optics of the maintainer. The email made it clear that they submitted an official complaint to the ethics board and they didn't do anything. In that spirit it effectively means that any patch coming from that university could be vulnerability injection misrepresented as legitimate patches.

The Linux kernel has limited resources and if one university lack of oversight is causing the whole process to be stretched tinner than it already is then a ban seems like a valid solution.
I think its unfortunate that Prisma is only server-side due to its Rust-based native DB module.

I think we can achieve a huge simplification in the industry if we develop a universal state-management solution that runs in the frontend and backend.

Without a consistent model, we are forced to write so much additional code to manage caching, optimistic UI updates, and offline capabilities.

Current RDBMS' are not ideal (most data is better represented as a graph), but because the relational model is so widely used in the backend, they are a good candidate for a universal data store on frontend and backend. And it is possible to represent graph-like structures in RDBMS' too, but it makes SQL querying very unfriendly.

GraphQL is an ideal language for declaratively specifying what data you need for the UI layer. If you doubt this, play around with the [Github GraphQL API][1]. It's an incredible experience to be able to explore and pluck exactly what you need. SQL and REST don't come close to this experience.

But GraphQL is essentially providing us a nicer way to write SQL compared to using JOINs, and to output it in a nested format for convenient rendering with nice typing. But it lacks a huge amount of flexibility.

So we should keep GraphQL as our API, but we should implement it client-side against a data model similar to what we use in our cloud db: SQL, and then do real-time syncing or use it as the model for our server-cache.

An added benefit is we don't have to worry anymore about what is local-state and what is server-persisted, or worry about choosing a good state management solution client-side.

The necessary pieces to make this happen don't exist at the moment, but I would have liked to use Prisma as the DB API for in-browser SQLite in the beginning.

I think there is then the opportunity to go full-stack and offer developers a client-side GraphQL library that talks to an in-browser SQL DB and to end the constant turnover in state-management libraries. I think every frontend developer is overwhelmed at this point by the proliferation of these libraries, and the simplicity they go seeking in things like "just use React.Context api", don't offer them what they will eventually need which is optimistic UI updates, offline modes, real-time collaboration, local-first experiences, etc.

I think we are all still in search of the right state management solution and it would be cool if Prisma did it!

[1]: https://docs.github.com/en/graphql/overview/explorer
That nonsense leads to people dying.
You can have free SSL certification with Let's Encrypt! Highly recommended, good job on the site :)
>Nobody uses Signal in France [from the 5000 sample]

If one would've come to HN and read the last few months worth of posts you'd come to think that a lot of people from around the world moved to Signal. But then again this is a reminder about how little HN represents compared to the general population's tech choices.
Except in the US you can't sue on just intent, the letter of the law still needs to agree. So if the smart contract permits something, by not forbidding it, that something is entirely legal.
> Like how stackoverflow is lost to rule zealots there for the game not for the purpose.

Like?
The kernel that runs on mars now and on home/work desktops.
Thank you for responding. What about the case where Grafana is embedded into an application, potentially even with a custom Grafana data source. That might be more of a problematic case?
Well, just a small fire which you promise to extinguish yourself if they dont show up on time. Of course nobody can blame you if you didnt manage to extinguish it...

Also the buildings are not random, but safety critical infrastructure, but this is good, you can advise later:'put a "please do not ignite" sign on the building'.
From my understanding - no, actually. We learnt a bit, on the very extreme scale of things, but most of the "experiments" were not conducted in any kind of way that would yield usable data.
I'm not harassing anyone... I'm politely reminding this person that ethics are a real thing.
Feds Track Down Capitol Rioter with Facial Recognition Hit on His GF’s Instagram
All comments so far seem not to realize this is satirizing mindfulness
You’re looking for words, not actions?
Solution Stacks
I’m still going strong off a pack of non rechargeable AAs that have been in the cupboard for years.
What's the harm exactly? Greg becomes upset? Is there evidence that any intentional exploits made it into the kernel? The process worked, as far I can see.

What's the benefit? You raise trust in the process behind one of the most critical pieces of software.
Well the numbers are all over, depending on what you look at. The number you quoted, which references EU report that I believe quotes CO2 emissions due to direct fossil fuel emission, and doesn't account for product use (which the US outsources to other countries, primarily China) and indirect emissions.

I'm sure the numbers vary depending on what middle ground you choose. Here's another number that's higher than yours or mine - 48t CO2/yr: http://css.umich.edu/factsheets/carbon-footprint-factsheet

Atleast the different numbers I see are off by much less than the GP's claim.
Trafford is 20 minutes walk from the centre of Manchester. Bolton (or Horwich as it now) will take you a couple of hours. Also Trafford has been Manchester for as long as the club has been there (and it was Manchester when it was Newton Heath).
Jetbrains releases Code With Me collaborative development
What else do you suggest? Analysis of cell phone movements + drones has been tried in other environments and success record is mixed. It does scare people but hardly fixes things.
I wonder how come IRB (Institutional Review Board) approved this paper in regards with etical concerns. This is obviously a research on humans and they didn't give their approval for that.
(fix: formatting)
Plonk is a Usenet jargon term for adding a particular poster to one's kill file so that poster's future postings are completely ignored.

Link: https://en.wikipedia.org/wiki/Plonk_(Usenet)
Somebody should have told them that since microsoft is now pro-open source this wouldnt land any of them a cushy position after the blowup at uni.
Academic reputation has always mattered, but I can't recall the last time I've seen an example as stark as "I attend a university that is forbidden from submitting patches to the Linux kernel."
In this case, the cost is justified. The potential cost of kernel vulnerabilities is extremely high, and in some cases cause irrecoverable harm.
Gene therapy shows promise in initial trial for childhood blindness
One may wonder whether the repetitive attacks against Linus on the tone he’s using, until he had to take a break, isn’t a way to cut down Linux’ ability to perform by cutting its head, which would be absolutely excellent for closed-source companies and Amazon.

Imagine: If Linux loses its agility, we may have to either “Use Windows because it has continued upgrades” or “purchase Amazon’s version of Linux” which would be the only ones properly maintained and thus certified for, say, government purpose or GDPR purpose.

(I’m paying Debian but I’m afraid that might not be enough).
Two common rules I like to enforce are no nested ternaries and no unused variables.
Though say for argument's sake that Google were to rank results higher for those who spend more on ads but put a disclaimer to say so. What law would that break?
"Is it ethical to A/B test humans on web pages?"
Decompiling FlatBuffers case study: Facebook's GraphQL schema (2020)
The docs seem to show the return of the SD card slot on the 13 inch macbook pro as well as a new charging port--likely the return of MagSafe.
Most of the POS terminals I see are mounted. Presumably that would be the first thing you cover.
I do not understand what this statement means.
My anecdata but, my friend in France does and has been forever. That's how her and I keep in contact and video chat. Perhaps their sample wasn't representative.
Please correct me if I'm wrong. So he (PhD student) was introducing bad code as part of research? And publishes a paper to show how he successfully introduced bad code.
That's a worse death sentence than SMU's for paying players. Even the NCAA didn't kill the school, just the guilty sport program. You're asking the state to pull entire university's charter for a rogue department? Sure, pull the CS department, but I'm sure the other schools at the university had absolutely zero culpibility.
Honestly WTF would a "newbie and non-expert" have to do with sending KERNEL PATCHES.
Just a note that this isn't true anymore. All the official C# tutorials default to VSCode + dotnet CLI. The Web framework tutorials also let you switch instructions depending on what editor you're using.
> in a higher-interest environment you certainly could

Maybe, maybe not - it's possible for interest rates to be high and inflation to be even higher (stagflation).
Remember, the university of Minnesota was number 8 for top .edu addresses dumped in the Ashley Madison hack.

Scum of the earth.
Elon Musk Says Autopilot Wasn't Enabled in Tesla Crash with No One Driving
I wonder if they can be sued (by the Linux Foundation, maybe) for that...
To me it depends on whether they lied to the ethics board or not. If they truly framed their research as "sending emails" then the individual is 100% at fault. If they clearly defined what they were trying to do and no one raised an issue then it is absolutely the university's fault.
Not for fiction. For non-literary (i.e. non-household name, tech-oriented) non-fiction - definitely.

It's a production line, and it's rare for authors to do more than one or two books.

Some bigger publishers really do have spreadsheet models of likely sales, and they base their acceptable advance offers on them.
Honestly the luck that JWT has had kind of makes me think it'll just detonate on the launchpad just to prove maybe God does play dice after all
It doesn't matter. I think this is totally appropriate. A group of students are submitting purposely buggy patches? It isn't the kernels team to sift through and distinguish they come down and nuke the entire university. This sends a message to any other University thinking of a similar stunt you try this bull hockey you and your entire university are going to get caught in the blast radius.

In short "f** around, find out"
So this appears to require brute-forcing through every possible hash to see which ones match.

How long would this take?

I mean, is the person's iPhone going to respond to all 10 billion possible domestic US phone numbers in the, what, 3-10 seconds they have their share sheet open? Not to mention the far larger space of e-mail addresses, ultimately limited by whatever the hash length is?

Unless the AirDrop protocol is permitting the validation of many millions of hashes per second (presumably requiring 100mbps+ speed), this doesn't appear to be even remotely a viable attack method in practice, no?
> having the gall to brag about it is a new low

Even worse: They bragged about it, then sent a new wave of buggy patches to see if the "test subjects" fall for it once again, and then tried to push the blame on the kernel maintainers for being "intimidating to newbies".

This is thinly veiled and potentially dangerous bullying.
Can you share that research? Seems interesting
Is it possible that they have funding from other sources - investors, founders, sales, etc?
Super Mario 64 on web
We should let linters written javascript die IMO. ESLint is soooo slow. My hope is that the ecosystem will slowly shift to deno, and we just gonna use `deno lint` (https://deno.land/manual/tools/linter, based on swc, written in rust) for linting from then on. What tslint does in 6 seconds, `deno lint` does in 0.2 seconds.
The first example is already bizarre: use CSS and a transition listener on the JS side, why would you still implement it with a 1998 onclick, and a setTimeout? This isn't modern "vanilla JS", this is "ancient nonsense" =/

Add a CSS class "hide-animated" tied to your transition, add a transition end listener on the document (not once, perpemtual), with evt => evt.target.remove()

(That's right, ".remove()", not "element.parentNode.removeChild(element)". Actually looking up modern JS is a good idea if you're going to knock it).

And then the only other JS thing you need for your element is a click listener that adds "classList.add(`hide-animated`)".

Is "addEventListener(`click`, evt => evt.target.remove())" overly verbose and cumbersome? Sure is, I have no love for it, but if you want to show that your library is better than vanilla JS, show vanilla JS, not code from 20 years ago.
Academic research, cyberwarfare, a rival operating system architecture attempting to diminish the quality of an alternative to the system they're developing, the lulz of knowing one has damaged something... The reasons for bad-faith action are myriad, as diverse as human creativity.
This could be a good workaround
asdfadsfsdfd
I don't know if it even sounds neat at first. It's just layers of nonsense.
I did not want to have to sift through a hefty article to get answers to the questions. Anyone can google search, but I see the points of the comments to share condensed information not just to "link" to google.

Here's what I discovered as what I presume andrew_'s reasoning for why its not a node replacement (from the article)

"Node has been under development for over a decade, which makes it more stable and battle-tested, making it the de facto standard for server-side JavaScript. Deno has only been under development for just two years and continues to be improved. Among other things, Deno is an excellent replacement for utility scripts that are usually written with bash or python."
Most everything boils down to trust at some point. That human society exists is proof that people are, or act, mostly, "good", over the long term.
Life support machinery was developed with methods like cutting dog heads, plugging them in and see how long it shows signs of life.
The bio of the assistant professor, Kangjie Lu, is here: https://www-users.cs.umn.edu/~kjlu/

It probably IS from being out of touch, or perhaps desperation to become tenured. However, he is also an alumnus of Chongqing University: http://www.cse.cqu.edu.cn/info/2095/5360.htm