skysight-inc/HackerNews huggingface dataset:
Incorrect, I was responding to this comment about a Chinese attack on Taiwan or a Russian attack on the Baltics:

https://news.ycombinator.com/item?id=27346478

> In other wargames:
> You might remember that the Ronald Reagan was sunk by a Swedish stealth submarine in 2005 [1] and that there is little hope to save the Baltic and Taiwan if Russia and China decide to occupy them [2].

> [1] https://nationalinterest.org/blog/buzz/war-games-swedish-ste...

> [2] https://breakingdefense.com/2019/03/us-gets-its-ass-handed-t...
I think he's referencing how some of the chips on the boards are unlikely to be US sourced given Librems low volumes, but seem to be consolidated as USA because they were soldered on a PCB in the US.

For example, from Librem's spec sheet at the bottom of that page lists 2 components from STMicroelectronics:

Accelerometer (LSM9DS1) Country of Origin is listed as Malta https://www.st.com/en/mems-and-sensors/lsm9ds1.html#sample-b...

GPS (TESEO LIV3) Country of Origin is listed as South Korea https://www.st.com/en/positioning/teseo-liv3f.html#sample-bu...
Ten essential tips how I saved time (and money) developing my first Shopify app
> Human senses could not notice such small changes over the course of a lifetime or even over the lifespan of an empire.

I don't disagree in this case. But I am continually amazed at how resourceful and technical past civilizations could be.

For instance early polynesian navigators ("wayfinders") could look at patterns in wave refraction across the ocean surface, to locate islands over the horizon [1].

They also memorized the setting and rising positions of hundreds of stars. [1]

Unfortunately, much of this knowledge was lost, as the polynesians did not have a written system of language.

1 - https://manoa.hawaii.edu/exploringourfluidearth/physical/nav...
It suggests it is a difficult problem to stop. As I understand it, attackers now frequently perform an initial compromise and then manually escalate privileges before launching a ransomware attack for greater impact. Alternatively, the attacker will sell privileged access to a ransomware group. This isn't someone from HR opening a malicious attachment and getting the whole company owned via eternal blue.
The claim that Chrome was not updated on the unstable branch for weeks is wrong.

The two releases in question are:

88.0.4324.96 on Jan 19: https://chromereleases.googleblog.com/2021/01/stable-channel...

88.0.4324.146 on Feb 2: https://chromereleases.googleblog.com/2021/02/stable-channel...

The commits updating them in nixpkgs are:

https://github.com/NixOS/nixpkgs/commit/5b6d3c4b13e50540d044...

https://github.com/NixOS/nixpkgs/commit/4fe69d33aeb6dac647e4...

The first landed in master on Jan 19 (the same day), the second landed in master on Feb 3 (one day late).

The way nix works, the CI has to build and verify a large chunk of packages before it gets promoted to unstable. So when did they hit nixos-unstable? It's not possible to tell from git alone, but the history of the channel is archived here: https://channels.nix.gsc.io/

I did the search and the first release hit nixos-unstable on Jan 21 18:20:45 (UTC), and the second on Feb 6 08:30:17 (UTC). So around two days and four days.

The backports to nixos-20.09 hit that branch on Jan 26 16:55:17 and Feb 6 13:45:20, so seven days and four days.

I'm not sure what the parent commentor was doing that led to them missing these updates.

To be clear, this is not a great record. I was running nixos-20.09 and I updated my system ahead of the channels (which is fairly easy, not at all difficult as the parent comment implies). But it's not "weeks", and it's not that bad for a volunteer project.
Truffle Mal
Israel sees probable link between Pfizer vaccine and myocarditis cases
there are standards and operating procedures that can be used. it’s not that hard.

it comes down to training and cost cutting. If the penalty for failing miserably is 0 you won’t see any change. I would hold the companies responsible for things like this liable to the point they would be put out of business after an event like this. If the cost of being sloppy is that you no longer have a business people will start paying attention really quickly.
Most people just use the templates provided in their Wordpress theme these days.
as someone with no prior opinion or interest in speed-running, this is a surprisingly good watch!

some thoughts

- given the timeline of progress, i guess we might see THE perfect run in the next 12 months or so

- how did they figure out the theoretical best time in the first place?

- is machine learning being applied to this problem yet? might be able to discover some more time saves
Dane-Geld (Poem)
Yes, everyone has the right to privacy from facial recognition software, including criminals.
Speaking of old Windows and CDs, Windows had some crazy trick to turn CD-R (not CD-RW) into rewriteable medium. I'm guessing they simulated a regular file system on top of an append-only representation. I never dug into the details back in the day, because I never used this feature. Unfortunately, IIRC, this trickery was enabled by default when copying files to CDs - which was a problem, because nothing else could read it. This caused me an unending stream of calls from friends and relatives, who all tried to burn some family/vacation photos onto a CD-R, in order to view them on their TVs, but the CD readers for TVs couldn't parse the format.
I would say AlexNet [1], rather than VGG, was the landmark paper that got the computer vision community to pay attention to deep learning, specifically by winning the 2012 imagenet competition by a large margin. Not that there weren't successes before (specifically, deep nets had also been getting traction in speech processing), and of course deep learning itself is much older than alexnet. But I think most people, specially in vision, would say the 2012 imagenet competition was the watershed moment for DL. By current standards it's not very deep, but at the time it was definitely "deeper"than the popular models at the time (which were mostly not neural networks).

VGG is also super influential of course -- it reinforced the trend towards ever deeper networks, which ResNet also took to another level.

[1] https://papers.nips.cc/paper/4824-imagenet-classification-wi...
Facial recognition isn't very accurate. Based on some of the research I've seen, it's borderline worthless under many circumstances.

I wouldn't want to use it in such a situation because of the likelihood that the person who committed a crime is going to go free while an innocent person might take the fall for it.
Sounds like you are aware of many alternatives to Paypal. Why not register a company and use Stripe?
Why is bankruptcy not an option? The government would never allow a chapter 7 (liquidation), but a chapter 11 (reorganization) bankruptcy should not significantly disrupt operations.
As mentioned in another comment, I am planning to add a C/C++ interpreter and I have put GNUstep in there, so that people can easily build their sprite editors and other game dev tools :-)
Many stories how PayPal kills FLOSS projects: https://web.archive.org/web/20191011190010/https://minifree....
I wonder what BigTechs excuse is going to be now that 'gain of function research' is being uncovered?

Its painful to realize the web has turned into a giant propaganda network.
That's neat! I forgot to mention VCV Rack [1] which is a great way to get started with Eurorack for free.

[1] https://vcvrack.com/
The linked source is a Sinclair News outlet. They are probably the worst media conglomerate in America honestly. Their news is constant fear and I view anything by them as poisonous information because it is just as likely meant to mislead as it is to inform. Sure, KOMO publishes some real news. They also publish lies and wildly misleading stuff.

https://www.youtube.com/watch?v=_fHfgU8oMSo

https://www.youtube.com/watch?v=GvtNyOzGogc
You can analyze the dust spend in transactions to deanonymize Monero users. You need to be processing a lot of transactions to do this, or have the ability to spy on the processing of a lot of transactions.
So is consanguinity. Tradition != good in all cases.
The problem with your rebuttal is that there is ZERO liability in asking Bitcoin to be moved into an anonymous wallet. And when you include the whole world into your scenario, you need to realize there are a whole lot of countries that can't give a flying fuck about America, or Japan, or basically any other country than theirs, especially when for example the target country is dropping bombs on their heads, or crippling their economy with sanctions.

You think we're all good guys and we'll get along, see? But actually, Bitcoin has enabled a new type of international warfare. And thinking positive thoughts will do nothing to prevent that.
> Another "favourite" issue that shows up often when you use strace like this is e.g. excessive include paths - running strace on MRI Ruby with rubygems enables and lots of gems pulled in is a good way of seeing that in action - like this zip problem it's an example that seems totally reasonable when the number of gems is small, and that first becomes apparent when you test with lots of gems, and look at what's actually happening under the hood.

When you add e.g. Python's standard library as a ZIP to the Python search path, the thing will open/read/read/read/close that file approximately a gazillion times on startup. That's OK on Linux/Unix, where that is fairly cheap. Guess which OS doesn't like that pattern at all?
At least it suggests that the current standards and auditing practices are not sufficient, and apparently formulating testable requirements is difficult.
Zerodium is an ethics-free company.
Don't miss the full poem: https://en.wikisource.org/wiki/Dane-geld

Which is very good; I submitted the Wikipedia article because it too is interesting, and the poem is linked there, but the reverse is not true.

This came up in https://news.ycombinator.com/item?id=27373637 , under the topic of paying ransomware ransoms, and I found the comment/reference by mannerheim quite interesting.
https://sg.finance.yahoo.com/news/microsoft-corp-msft-q1-201...

"In fact, this morning, I was reading a news article in Hacker News, which is a community where we have been working hard to make sure that Azure is growing in popularity and I was pleasantly surprised to see that we have made a lot of progress..."
> We do give away a lot of welfare to people who are doing poorly. It might be more effective to stop giving people money and use it instead to create programs to provide better jobs and skill training.

Giving people money gives them better jobs by increasing their negotiating power. Also, it lets them be your customer, which is important if you want to sell things to them!

"Skill training" doesn't work, it was bad economics from the people who mismanaged the 2010 recession recovery. They just claimed people "didn't have skills" as the reason we didn't recover fast enough and unemployment was too high.
> Perhaps a pentester or security person can help answer this

Not one of those but since they are [apparently] inadequate anyway...

I read an analogy that pinning this on "cyber security" is like accusing a mugging victim of having a lack of personal security guards. That's just not how civil society works.

Minimum safety standards: laws and ability to enforce them.

This is a short-term win for the bad actors. Just wait until the next "great firewall." Well gain safety, but we'll lose access to those low cost eastern European dev talent. That's more likely than every single US business being forced to hire private security just to operate.
Because twenty years ago computer security was an absolute and utter shambles. Exploiting a vulnerability today is orders of magnitude harder than it was twenty years ago. Massive strides have been made.
You can also specify paths to local sources, of course! Instead of src = fetchgit... or whatever, you can just write

src = ./some-source-dir;

or

src = ./.;

or whatever
Foxbox Digital it´s growing very fast!
Foxbox Digital is always looking to work with individuals who value building products that change the world from the ground up--people who want to play a significant role in product development.
We build software for our clients using the latest software development and project management practices, and we love what we do. We're a remote-first company based in Chicago, and we'd love to have you on our team.

These are our current open positions:

- Mobile Architect (USA and Latin America): https://www.foxbox.com/jobs/mobile-architect

- Director of engineering (USA): https://www.foxbox.com/jobs/director-of-engineering

- Product consultant (USA): https://www.foxbox.com/jobs/product-manager

- Agile Project Manager (USA): https://www.foxbox.com/jobs/project-manager

- Automation QA Engineer (Latin America): https://www.foxbox.com/jobs/qa-engineer

- Web Software Engineer (Latin America): https://www.foxbox.com/jobs/software-engineer-web

- Backend Software Engineer (Latin America): https://www.foxbox.com/jobs/software-engineer-backend

- Mobile Software Engineer (Latin America): https://www.foxbox.com/jobs/software-engineer-mobile

You can also check our website to get to know more about us: https://www.foxbox.com/.
We are happy to get to know you!
Same thing I did last time: buy Bitcoin & Monero
Yes, everybody has a different starting point. That is life. Some families have the benefit of their ancestors working their asses off to pass something on to their heirs. That doesn't mean you cry foul and try to destroy the track or rig the race in your favor. You do the same as those people's ancestors. You work your ass off to pass something on to your heirs.

Everybody can do this. That is equal opportunity.

There is no promise in the rights granted to you that you will have 18 houses, a private jet, a yacht, and maybe an island or two. You are promised the ability to do as you wish to try to achieve your goals in life.

Yes, we should fix economic issues so people do not get destroyed by an accident. That is a separate issue and has no bearing on equality of opportunity.
The CA ban includes the police using facial recognition services from private companies as well
Well said. Especially during the early years, I always found the signal/noise ratio of SO to be head and shoulders above anything on the web.

In part, due to a lot of their subtle UI and reputation choices. Really well designed.

Massive scale may at one point break that, but another cause may be found in the change of tone by the team behind SO. They're on the "inclusive" train now.

Don't get me wrong, being inclusive is good, but there's a difference between somebody being a beginner or not proficient in English, and somebody being plain lazy.

This "softening" I do not consider a good development. I prefer the tough love approach that weeds out garbage from good stuff. If that mechanism is compromised, its unique value is lost.
I sure hope this goes better after the sale to a private equity firm than FogBugz did.

I'd hate to see my investment of time turn to smoke.
Or you can pump it, promise lots of new technology and "synergies" and profits and then dump it for a huge sum to VC or Big 10 company while it's still promising but you're pretty sure it's time to dump.
I'm estimating that the marginal value add of SO is order of magnitude 1T, on no particular basis.
‘One of the worst jobs I ever had’: former Citizen employees describe their work
I've looked at the 'people reached' metric and wondered: does this mean that, objectively speaking, the greatest impact I'll have on the world will turn out to have been a few stackoverflow answers?
By the way, here is a video demonstration of all this. It's not very polished and VSYNC does not work, but it works pretty much how I describe here.

https://youtu.be/KhRnGbVhejk
RPA is a financial services buzzword right now. I’ve worked on an RPA library that manipulates a web application…which the company already provided full API access to.

The RPA library requires those working with it to examine the page HTML in order to hook into it, since it’s highly dynamic: you have to see what form fields are available and their internal IDs in order to interact with them. Meanwhile, the API layer gives access to all the same CRUD, and maybe with better documentation (I have not seen it).

If you don’t have a human user, just use the APIs! That’s what they are there for!
There are definitely strategies that significantly reduce the cost of such an attack - one being append-only backups of a sufficient frequency and with a fast enough restore time. We have the tech to do this cheaply (mount user shares via ZFS-backed NFS, for example) but I’m not sure many places have the organizational competence to implement something so simple and effective. They need to spend 100x more money on something 10% as useful.

It’s also possible to eliminate these attacks entirely, but it probably requires corporate tech infra that looks totally different from what most orgs now. If it were my job to set up some sort of hardened corporate setup, my first step would probably be to restrict most employees to iPads. There’s not really any reason a shift manager at a meat packing plant or whatever needs or benefits from a Windows box.
20th century consensus: centralized stupidity is a threat, we must decentralize

21st century consensus: decentralized stupidity is worse, turns out
My only gripe with bringing desktop Linux to phones is that desktop Linux is a security nightmare. Someone with more experience please chime in, but the whole thing is C, no usable sandbox (a bug in firejail will make the untrusted code run root..) and the old xkcd comic is still true: the only thing a malicious actor can’t do is install a video driver. That is, your user account with all the important data is basically left completely open. Compared to the iphone, and android (especially graphene os) it is laughable.

And while basically noone uses pinephone/librem 5, there are plenty of people running desktop linux (myself included), but I don’t sleep well knowing how unsecure the whole thing is, and seemingly it is not a priority to anyone. Is my paranoia based on facts?
The UGT2A1/UGT2A2 locus is associated with Covid-19-related anosmia
Empyrial, Python library for portfolio risk and performance analysis
Guix has this, and they call it grafts. I'm not aware of Nix having anything similar just yet
Yep like the stock market and the idea of money.
These two statements contradict

> They end up with a 30 year old house that has been rented. There is a lot of cost in the upkeep of a rented house.

> you then have to pay the taxes on it when you sell the place.

Owners only pay taxes if the gain is greater than the depreciated loss; (and if owner doesn't 1031 exchange it for another property to lose money on) so, the premise that a rented house has lost value shouldn't really intersect with a capital gain.
You can paint the outside of your house any color you want, but there's still cracks in the foundation.
> you're essentially exploring a fractal overlaid on all possible audible frequencies, modulated by time.

Another way to think of it is that every knob on the synth gives you a new dimension and each patch is a single point in that n-dimensional space. Sound design means exploring that volume by changing coordinates.

I look at synth usability (which is very similar to how a lot of game designers talk about fun) as in part a question of how that space is arranged. How much of that volume produces sounds users will like versus ones they won't? How continuous is it? If I like a sound at point X, how likely am I to like sounds near X, or will moving even a small distance radically change the sound? Can I intuit what neighboring regions will sound like based on the current sound?

I think a big part of why subtractive synthesis has been so successful is that it works well in that model. Most parameter changes are continuous and intuitive. The space feels like it smoothly changes in useful and predictable ways as you navigate.

FM synthesis is really cool, but it feels a lot more like a chaotic universe where there are tiny islands of brilliant sounds separated by empty volumes of noise, or indistinguishable FM bloops.
> "Slippery slope" may be a fallacy in formal logic

It's not if the slope is, in fact, slippery. At least around here, one fallacy more common than slippery slope is the slippery slope fallacy fallacy - calling out real slippery slopes as fallacious.
They don't know the theoretical best time but they know what is possible using tool-assisted speedruns (TAS) using the current set of known tricks. So it's possible there are still tricks to discover that will improve the speed floor, but it's been a long time since anything new was found.
I was looking at the wrong article there was a clickbaity article in Washington Post that 12% of Americans were alcoholics which is based on a based on
National Epidemiologic Survey on Alcohol and Related Conditions-III (NESARC-III) which is about your entire life and I got my wires crossed.

1 in 12 being 6% seems fairly accurate and supportable
No way I'll use this. Why spend an afternoon learning Helix when I spent years learning Vim to accomplish the same things.

I don't want to acknowledge that.
I-phone manufacturing is already gradually shifting from China to South and Southeast Asian countries as wages rise in China. Gradually, it will shift to even poorer countries. Improving conditions in these factories should be a key priority. However, it's not as if these jobs haven't had their positive effects as well.
Implementing a sane back end in Node.js using NestJS, Part I: Architecture
The initial foothold exploits - where application whitelisting would help the most - generally are not "critical systems", they are the daily workstations of random employees. By the time the attackers reach your critical systems, they most likely can attack them with stolen credentials without running any exploits that whitelisting would prevent.

To protect your company, application whitelisting needs enough usability to be easily supportable for the workstations of your accountant, office receptionist, and the VP of Marketing (those three are all good examples of valuable entry points for targeted attacks), which all may get management approval to throw out application whitelisting if it inconveniences them enough - there's no reasonable tradeoff between security and usability, you must get both as usability is mandatory and usability deficiencies will result in security features getting removed in all but the most critical circumstances.
That isn't how a Ponzi scheme works, a Ponzi scheme directly uses fees taken from new members to pay out older ones, lying and saying it's from actual business activity.

Crypto doesn't behave any differently than the stock market (except the fundamentals are a little shakier, okay, a lot shakier).
Another click bait article. Beware. Facial recognition was banned by SF before in the US.

But it’s a technology evolving. And susceptible to manipulation as well. Watch the avantgarde comedy by the creators of South Park:

https://www.youtube.com/watch?v=9WfZuNceFDM
MetaSub: A world-wide DNA map of microbiomes found in public transports
by FAR
> I still correct the google maps voice when it tells me to take the third exit on the roundabout. It’s “roundabound”.

If it's saying "roundabout," I hope you're not correcting it to "roundabound," because "roundabout" is the correct word.

https://en.wikipedia.org/wiki/Roundabout
Comparison between signed and unsigned integer expression