skysight-inc/HackerNews huggingface dataset:
Of course everyone knows bugs make it in software. That’s not the point and I find it a little concerning that there’s a camp of people who are only interested in the zzz I already knew software had bugs assessment. Yes the academics abused their goodwill. And in doing so they raised awareness around around something that sure many people know is possible. The point is demonstrating the vuln and forcing people to confront reality.

I strive for a high trust society too. Totally agree. And acknowledging that people can exploit trust and use it to push poor code through review does not dismantle a high trust operation or perspective. Trust systems fail when people abuse trust so the reality is that there must be safeguards built in both technically and socially in order to achieve a suitable level of resilience to keep things sustainable.

Just look at TLS, data validation, cryptographic identity, etc. None of this would need to exist in a high trust society. We could just tell people who we are, trust other not to steal our network traffic, never worry about intentionally invalid input. Nobody would overdraft their accounts at the ATM, etc. I find it hard to argue for absolute removal of the verify step from a trust but verify mentality. This incident demonstrated a failure in the verify step for kernel code review. Cool.
I remember a true story (forget by whom) where the narrator set up a simple website for some local community activity. A stranger hacked and defaced the website, admitted to doing so without revealing his identity. His position in contacting the author of the website was, "I did you a favor (by revealing how vulnerable it was)." The person telling the story reacted, "yes, but... you were the threat you're warning me of." It didn't result in the author recreating the site on a more secure platform, it only resulted in him deciding it was not worth the trouble to provide this free service any longer.
Google owns YouTube.
>What sort of lawsuit might they bring against a university whose researchers deliberately inserted malicious code into software that literally runs a good portion of the world?

I am also not a lawyer, but aside from any civil action, the conduct looks like it might be considered criminal under the Computer Fraud and Abuse Act:

"Whoever knowingly causes the transmission of a program, information, code, or command, and as a result of such conduct, intentionally causes damage without authorization, to a protected computer;"

https://www.law.cornell.edu/uscode/text/18/1030#a_5
For anyone unfamiliar with this reference:

https://old.reddit.com/r/gaming/comments/p1ssv/dear_internet...
I worked as a SWE at Google and also at Google cloud. I both disagree with this and find it a very perplexing angle.

I think the issue is a mis-aligned (financial) incentive structure.
With the right incentive structure, challenges in either monorepo or federated repo can be overcome.
With the wrong incentive structure, problems will grow in both monorepo and federated repo.

The choice of repo simply manifests the way in which thorns of the incentive structure arise, but its the
incentive structure which is the root cause.
I've had a similar experience. Godot is a fantastic 2D engine, and a capable 3D engine. If your goal is shipping a fully featured 3D game I'd still recommend Unity or Unreal over Godot, unless you're comfortable with it not being an industry leader. For 2D however, I'd recommend Godot above anything.

Godot 4.0 still has a long way to go before it's ready for everyday use fortunately, not even in alpha state yet so I wouldn't judge it too prematurely.
Researchers Tried to Add Vulnerabilities to Linux Kernel
Well definitely don't share it with DDOS secrets, news outlets or any other major company that would potentially report on it. That would be very bad press for Cellebrite, and if they connected it to you they could be very annoying - though again, they would need pretty good evidence connecting it to you and things like TOR and proper privacy practices would make that very difficult. So definitely don't do that, or use something like tails to post it to multiple SecureDrop outlets.
Tech in Asia is carbon neutral
Godot is a really good engine but there's one thing which I cannot get to work properly: UI font rendering. The interface font is blurry across platforms. I hope they introduce a fix for it.
You clearly don't have children, so stop pretending that being a parent is as easy as writing some sentences describing what needs to be done. It's like someone pretending to be a doctor explaining how easy it is to work in medicine to a group of actual trained professionals, it looks silly.

If you were a parent you would know that time is not available to you, that you cant sit and stare at the kids from morning to night. Rent/mortgages need to be paid, cleaning done, food prepared all the things that any person who is a parent is already well aware of. You do your best to protect them, but you are not innately gifted with the ability to see every perceived threat like some robot on the day a child is born.

The fact that it's a recurring problem should be clearly evident that it is not common knowledge, that the warnings are not there to inform parents. People on this thread who I can assume are reasonably smart and don't neglect their children didn't know the danger. So enough already, you're out of your depth on this topic.
Machine Zone is relatively successful. They also funded Mino Games https://minogames.com/en/, which might not be "successful" on your terms, but they've stayed in business for 10+ years which is better than many game studios
I don’t know what kind of secret sauce they’ve got that attracted investors, but I’m really skeptical based on what I’ve seen so far.
Resistance Is Futile: The Myth of Tech Inevitability
You honestly believe "cops shouldn't kill black people" and "the tax code makes it hard for black people to build wealth" are on the same level? I find that hard to believe.
I'll also add in the Godot recipes by Kids can Code, don't let the name fool you they have great miniature tutorials for implementing all sorts of common things in Godot https://kidscancode.org/godot_recipes/
This crowd also harshly criticized the Coinbase founder / Bitcoin when we he was looking for a co-founder, and now his share of Coinbase is worth $10 billion or so.
This isn't true. Prisma currently only supports batching of findUnique queries:
https://www.prisma.io/docs/guides/performance-and-optimizati...

There's an issue open for findMany as well, but it hasn't moved in over a year:
https://github.com/prisma/prisma/issues/1477
The incessant snide comments expressing nothing but dislike for Bitcoin really don’t belong on HN. Not liking Bitcoin is fine, but if you don’t have anything to add just don’t comment. Every thread about Bitcoin on HN does not a dozen comments that it’s a waste of time and energy.
Among the arguments for decriminalization of prostitution is that women should have the right to this path to make money. I don't know the argument against regulation, but I imagine it would still remove that path as an option for many. If you can't comply with regulation, then you're still doing something illegal. There's still people in power who are controlling your options.
To be fair and for what it's worth, xfinity mobile is pretty great. It's on the verizon network and most months I pay $12 for the single gig plan. unlimited is 45, then again you just read another ad for Comcast. sorry i guess
In case anyone is wondering, the way to interpet the rules is as follows.

* The state of the system is a black-white assignment of colors to the grid.

* The rules tell you how to compute the next state of the system.

* To update the state at a certain cell x, you look at the colors of x-1, x and x+1. (left, self, and right).
Then use use the table of rules to determine the new color of the middle cell.
For instance, the first rule tells you that if you see three black cells in a row, then in the next time step the middle cell is white.

* This update is done simultaneously over all cells, so you compute all the new cell colors and then update them all at once.
The main difference was/is that at Google your immediate manager, director, PM, peers and everyone else in your product unit (who you work with every day) have almost zero say in whether you get promoted or not. You have to essentially summarize everything you did in bullet points and send it over to an anonymous committee who don't know who you are. They will base their decision on this piece of paper without any additional background or context.

This does help in various ways – the process is more objective, there is less bias, less departmental/managerial politics etc. The drawback is that a lot gets lost in translation. There is too much burden on you as an engineer to pick and choose what you spend your time on so it looks good to the committee.

In other companies I have worked at getting promoted was a byproduct of doing a good job. At Google getting promoted is the job.
Hopefully it’s slower so we can all be waiting for Godot
Why? Linux is not the state. There is no entitlement to rights or presumption of innocence.

Linux is set up to benefit the linux development community. If UMinn has basically no positive contributions, a bunch of neutral ones and some negative ones banning seems the right call.

Its not about fairness, its about if the hurts outweigh the benefits.
Ah, forgot about Machine Zone, that's fair.

Mino Games was the one I was thinking about, although that website appears to be out of date but yes their games are still active.
Yes, my realtor asked me to write a letter pre-COVID when housing was less of a seller's market, and we refused. We're a gay couple and didn't want that biasing our seller.
A defense team would need to show that the report had indeed been spoiled with such an exploit as demonstrated by the Signal team. Just because the possibility exists doesn't mean it happened. If there is a significant evidence report from a cellebrite pull, it almost always means that it either successfully unlocked the device or acquired a full physical image or both.

A report doesn't have to be generated by PA. A forensic examiner is free to use other methods to examine the binary. So long as the examiner can explain all the actions and any artifacts that would be left behind.
In my experience Godot is a significantly more coherent 2d engine. In Unity a 2d game is running in its 3d engine, and useful functions will often be limited to operating on different pairs of dimensions ((x,y) (x,z) (y,z)).
If the pattern matches the top three tiles, then the tile below is defined by the bottom tile in the rules. This is done top down, row by row for each 3-tile section of a row. You're totally right though.
The record points to this guy:

https://twitter.com/Argentop/status/1385062114113556480
Saw, maybe. Smelled? There's not really forgetting that.

The name is really, really well earned. It's not just like rotting meat. Recently dead things smell worse than just rotting meat, and that is exactly what it stinks like. Like feces, and rotting meat, and a mix of all of that.
If one of these "assassins" has an actual conviction in the US before they were deported, I'm sure you can name one and find some proof of this, otherwise it's just accusing people without evidence. ICE have no right to declare someone an assassin.
To be fair, this vulnerability disclosure is worthless, because it wasn’t actually disclosed—the true vulnerability is purported to be in the file that Signal uses to execute arbitrary code, of which the details are not shared. We are relying on pure trust that the video demonstration of the purported vulnerability is not a forgery.

Additionally, I see from the video that the purported vulnerability is present in UFED version 7.40.0.229. There is nothing stopping Cellebrite from patching this purported vulnerability, and shipping trustworthy versions of UFED going forward.

If there is a concern that the purported vulnerability still exists, the burden of proof will be with the person claiming the vulnerability exists, for each new version of UFED. Cellebrite doesn’t even need to implement actual code, but merely increment the UFED version number. It will be an endless cat and mouse game driven by baseless claims from both sides.

Since this vulnerability has not been reproduced by third parties, it could be equally likely that Signal is using a psyop rather than exploiting a genuine vulnerability. In either scenario, it casts doubt on Cellebrite; the damage is done by convincing you, the reader.
Why does trying to break into the NT 3.1 kernel reboot my 486DX4 machine?
> For most of human history, having children without a family around to invest in them was setting up for disaster

Do you have ample evidence to believe that is no longer the case?

I mean that's a pretty huge claim to just gloss over as a "cultural hangover". Because so far what limited studies were made indicate benefits to children from stable 2-parent households.

And even if that were the case, what does it have to do with prostitution?
Many vulnerabilities are disclosed without simultaneous disclosure of the PoC. That doesn't make it worthless.

Also, not disclosing specifics is reasonable here, given that the vendor is themselves known for using, hoarding, and selling access to 0days.

There is no obligation for a researcher to share their research with such a corrupt vendor.
Sorry, doesn't look this one is loading either. I'll check afterwards i guess when the traffic is less.
What about all the data they gobble up for free from its users during the time its active?
Google has never been free, its bread and butter is the data we give it. We were it's product.
The fact this made it past ANY cursory inspection at YC is kind of... hilarious?

There's a good video[1] breaking down just how ridiculous this entire venture is. They have absolutely ZERO background in game development, yet are claiming to be making the biggest MMO ever attempted (with a team of 2), using a revolutionary peer-to-peer meshed (infinite!) game world, with every single game genre merged together.

It's probably the single most blatant gaming-related fundraiser scam I've personally come across... but they got YC backing.

All their videos are just assets from the store, thrown together using open world youtube tutorials, and long-winded posts filled with every buzz-word and game-dev fantasy you can think of. The video is really worth a watch if you want to see just how ridiculous this is, especially the latter half breaking down their technical claims.

[1] https://www.youtube.com/watch?v=FGQZfAbsQ6I
I agree, because it's expensive. But a modest American home was never that expensive for most adults, hence "house warming parties", and thus I'm fairly sure was socially acceptable.
Godot wasn't intended to be used for 3D at all, it started as purely 2D engine.

The 3D it can do is kinda... "shoved" into it. It works but it wasn't designed from the ground up like other native 3D engines are.

Last I checked the editor has no advanced 3D scene editing features, and the engine itself has no basic capabilities that are needed for large open world 3D games, like being able to load tons of stuff on the fly as the player moves in a way the player doesn't notice.
Fast throughput rendering yields in-GPU larger datasets, which are useful for ML pretraining.
You’re missing the point - how do you think people find marriage partners there? Often at other people’s weddings.
That's precisely what parallel construction is: a lie told by investigators to the court to sidestep the poison tree, bolstered by real evidence specifically gathered to lie outside of the branches of same.

It's a method that crooked law enforcement uses to deceive courts. It's so common as to have its own name now.
EFF sues Proctorio on behalf of student falsely DMCA'd
Just so I understand; some tile on row n in column m would depend on three tiles in row n-1 where those three would be in columns m-1, m, and m+1?

How does that work for edges and for the first tile? Also is the pattern just implicitly started with a single tile?

Thanks for the explanation :)
It is a local story, of no interest, if it doesn't validate your worldview. If it props up your side, and make the other side look dumb, then it is of international importance.

https://www.nytimes.com/2021/04/14/us/slave-trade-auction-sn...

https://www.nytimes.com/2021/03/07/us/texas-chivalry-assignm...
Yes Microsoft does have an incentive to make a POSIX dev env available on their OS and also make the experience of using it not suck.

I'm curious as to why they didn't just purchase https://x410.dev/ and integrate that into WSLv2 as it has hidpi support already too. Also If Microsoft is able to get GPU compute working with native performance I would absolutely switch back from M1 mac.
> “There was no wave from March to August—like [2020], none—and we’re quite certain about that ..."

It's pretty obvious the writer had a narrative they were pushing:

1) Why would there be a "wave" in the first few months?

2) Wait another year until most of the small-business owners who rented storefronts and restaurants figure out their capital stake was wiped out, and their options dwindle to applying as a cashier at Target.
It's been a lot of years since I read the book, but my vague recollection is that Dolores French argued that the problem currently is that abusive men -- pimps -- control the bodies and lives of most female sex workers, very much to the detriment of the women in question, and if you impose regulation, the state more or less takes over that role.

In her view, if you valued the rights of the sex workers, decriminalization was the only thing that made sense.

She made a compelling argument, in part because she had first-hand experience with both sex work and politics. She had been some kind of political campaign worker, I think, and hated it but was good at it and when she was something like 27 years old, after nearly dying in some accident, she decided to live a little around that time some friend of her asked her to turn a trick in her place because she couldn't make the appointment for some reason.

She said the guy paid her with a smile on her face and it was the most money she had ever made for an hour of work. It was the best working experience she ever had, so she began doing that as her profession.

She always paid her taxes. She listed herself as an entertainer on her tax returns and she eventually married a lawyer and continued to do sex work. I believe she was arrested at least once and talked in the book about how traumatizing that was and how awful many police officers are to sex workers.

It's a great read and I highly recommend it.
https://xkcd.com/1390
The problem seems to have the same flavor as the Collatz conjecture. Simple dynamical system - very difficult to tell what happens in the long run.

Perhaps these things are too hard for (human) mathematics. I wonder if anyone has proved any theorems that make this precise. E.g. "Most cellular automata rules cannot be analyzed efficiently".

I don't know enough complexity theory/set theory to formulate this precisely.
A family member of mine played Game of War (owned by Machine Zone) and made friends with some of the highest ranked players. The biggest whales were dropping $5-10k a day on power-ups.
If someone is legally in the US, why would they fear having their life uprooted by having to show their papers?
That's all well and good - but ICE doesn't just pursue border-crossers -- they regularly arrest and deport people here on Visa overstays..

Many of the people that OPs friend is complaining about receiving aid from San Francisco "activist lawyers" are from Asia, who obviously didn't enter the country illegally, hence, non-criminals.
Non-profit legal entity for Mastodon being registered in Germany
At least the WSL apps share resources.
Yes, that's correct.

There are no edges, it's an infinite grid. You start with 1 black cell and all the other cells are white.

Because the triple-white configuration does not produce a black cell, you can compute up the any finite time step with finite computational power.

(Actually, later in the article he talks about finite grids with periodic boundary conditions. That means that, if you're on the edge, you 'wrap around' to the other side of the grid).
> People who obsess over, and push mindfulness and vulnerability and such are usually those that are over-thinkers and with psychological problems that led them there in the first place.

A maxim worthy of framing on wall.

> The problem is that the people in power don't realize that they actually can't handle to hear a lot of the honesty they are asking of people.

This too!
The Kitchen Bladesmith: On Knifemaker Bob Kramer
This definitely isn't a trap.
Only the code examples look long. The command to run are actually less and simpler than it seems at first glance.
What robots want? Hearing the inner voice of a robot
Yes absolutely. It's part of the docs you sign so the bank has no liability.
Amazon One’s palm-scanning payments are coming to Whole Foods
This is a beautiful article, and thank you who tintinnabula for posting it.

> Gioia writes: ‘Each major shift in technology changes the way people sing.’ More importantly perhaps, he prophesies that, if authorities don’t interfere, ‘music tends to expand personal autonomy and human freedom’.

I'm not sure I even care if any of this is true. It feels like it's true, but one way or the other I think this is a church I might feel ok worshipping at, so to speak.
Thanks for great explanation.

Possibly lookup for google.com isn't completely innocent action depending on the Country, especially on this topic
I may have over-matched what you were saying to what others have said. My mistake.

I was thinking of when others have suggested that the electricity use is like the gold or something.
It was a little of both, but it's not really a valid complaint any more. When Godot first open sourced, it didn't have features like culling meshes that the player couldn't see, and the lighting implementation was pretty basic. The default language in the engine is basically python, so it could cause a performance bottleneck. Now it has a lot of the 3D performance features it was missing, and it has first-class C# support if the default language is causing a bottleneck.
You can also write C++ game (module) using GDNative
Gotcha. Thanks for taking the time :)
Eurova Marketing – Video Editing Service and SEO Service
Can we please just invest more heavily in nuclear? My preference is thorium reactors given they are far, far less dangerous in all regards.

Given ARKs time horizon, it would be a prescient investment. There's no way in hell were going to get stable power from solar and batteries alone. The bitcoin power problem is also solved.
Well we get to look at the real results of this in realtime, as they get there whole organization banned from the kernel.
Indeed, this is incorrect. He didn't die in prison but his death was likely precipitated by the conditions of his imprisonment.

From Wikipedia[1]:

> In March 2005, in Orsha prison, Marynich suffered a cerebral stroke. The stroke was provoked by the prison administration when Marynich was denied access to his medicines after a very hard transportation in unheated train wagons from Minsk to Orsha. [...] Marynich died on 17 October 2014, at the age of 74. His death was officially ruled a homicide, caused by the stroke he received in prison 9 years earlier.

[1] https://en.wikipedia.org/wiki/Mikhail_Marynich
Don't confuse the thing where a company has to defend its trademarks to keep them with copyrights (which do not require active defense to maintain).

This, if Apple does pursue it, is a copyright matter, not trademark.
The civil case has likely just begun.
"The role of the artist became validated as an essential part of the economy and community, as opposed to a frivolous hobbyist."

I'm holding out for 'validation' of fly fishing...