skysight-inc/HackerNews huggingface dataset:
Working on a JavaScript form validation library that supports the native HTML5 validation attributes and input types and allows adding your own custom validators, the goal of this work is to practice JavaScript knowledge and try to make clean code and respect best practices, also share the code with others and receive feedback and improvements.
The library uses only the ES5 syntax and for some ES6 functions that may be used, we make polyfills on our own.
I'm very open to your suggestions and ideas, thank you.
Fluid change in DSG? There’s only oil and that’s supposed to be changed at 40k, I paid it around 150 EUR.

But yeah, your story is unfortunately a usual ordeal at dealerships.
Do all Jews want to live in their historic homeland?
Decentralized derivatives exchange launching on Ethereum Layer 2 Arbitrum
PR speak at it's best
Such an arrow view for someone. From what you see I take that you see no value in ensuring everyone has a fair shot at a job.
‘I Had Never Faced the Reality of Death’: A Surgeon Becomes a Patient
The US very much decides who, where, and what can be bought or sold in USD. Worldwide.
In Praise of Small Menus
> The US only constitutes 15% of global GDP. There's no reason to think that US investors represent an outsized position in crypto holdings.

Holdings would seem to be more reasonably assumed to be proportional to wealth [0], not GDP. The US has a significantly larger share of global wealth than it does of GDP.

[0] or maybe more-than-linearly related, since less-wealthy people will have more of their wealth in directly-used assets like tools, vehicles, and homes.
It depends on the the physical property you're measuring.

For power/intensity ratio, 10dB is 10x; for amplitude ratio, 20dB is 10x.

Loudness is typically measured by "sound pressure level" (dB SPL), which uses the latter (amplitude ratio).

Also, it's worth pointing out that while sound perception (like almost all the perceptions people have, Stevens's power law [1]) is logarithmic, its base isn't exactly 10 or 100. [2] claims that every 20dB (10x) in SPL, the perceived loudness is 4x.

[1] https://en.wikipedia.org/wiki/Stevens%27s_power_law

[2] http://www.sengpielaudio.com/calculator-levelchange.htm
If encryption was illegal, all these corporate secrets would be even more out in the open, not sure how that's better.
The irony of this post on a VC hosted forum. If you believe this, couldn’t/shouldn’t you pitch it get funding and live the Silicon Valley dream and “make the world a better place”?
You can check out Teslabjørn on Youtube, he is testing pretty much all EVs and publishing his test results, including a 1000KM "high speed run".

His reference ICE car is a Kia Ceed hybrid, which completed the run in 9h25m.
The fastest EV: 9h35m - Yes, that was an expensive Audi.
The fastest Tesla: Model S Long Range - 9h50m

All data found here:
https://docs.google.com/spreadsheets/d/1V6ucyFGKWuSQzvI8lMzv...

... and the relevant videos from each test can be found on his Youtube channel: https://www.youtube.com/user/bjornnyland
Everyone brings something to the table, regardless of their gender or ethnicity. It seems that you prefer to discriminate against certain people.
Tofu Content Marketplace – Order Quality Content in 5 Minutes
Idk about certifications, in my experience looking for jobs as both red team and blue team, it seems there's no general standard, but there are some that come as a have to have bare minimum, like Comptia's Security+, and some that come as higher-ranking achievements, like the OSCP. A quick search of jobs that you would want to have will reveal what hirers are looking for generally speaking.

As to Finding vulnerabilities or bugs, The only advice I feel as though I'm qualified to give is just have a perpetual pursuit for knowing how things work. Whenever I come across a technology or application, the first thing on my mind is normally how is it doing what it's doing. As you get experience diving into various types of applications, you begin to notice the common functionalities and parameters in which they work, you pick up valuable insights and knowledge about the various idiosyncrasies of whatever. I often find when I'm tracing through my process of realization of a specific vulnerability , a lot of the steps have no correlation, and had I not been curious about how something worked, just lacking that small piece of background knowledge would've meant never being able to get to all the other stages which required other background knowledge. Wether it be web development, database architecture, cryptography, network protocols, psychology etc. You need all the pieces to put together the puzzle, so knowing how technologies work and work together, is really the largest advantage I've had.

A good place to start would literally be just taking whatever technology you use well currently, and typing it into google followed by vulnerabilities, and learn how each works. This will stem out into other realms and before you know it you'll possess an incredible diverse knowledge set.
Letters for digits in UK telephone numbers
>Actually helping people with housing and healthcare would be a way more efficient usage of public funds than wasting it on police that is using it for power trips against the powerless.

In Australia there is usually somewhat good access to housing/welfare. Certainly leaps and bounds ahead of the US. The problem is that your options are either a homeless shelter which prohibits drugs, or the welfare system which requires you to apply for jobs and attend checkups. To some people, neither of these options is desirable so they choose to live on the street.

The system in Australia isn't perfect but it is fair to say that it's almost impossible to be involuntarily homeless for an extended period.
I want you to look at some other languages beside javascript. Take a look at Swift or Ruby. Compared to them it feels like 60% of js code is boilerplate. 200 lines of js can be fit in 60 lines of Swift. All because js stdlib is just sucks. I’m tired of this silly ‘someArray.length ? someArray[someArray.length - 1] : null’, I want just ‘someArray.last()’
Jobs's reply in this case, however, was characteristically asshole-ish, not merely curt.
Right, security is definitely not a box you can check but American business have decided that if they run Qualys to get that PCI-DSS everything is good. Nobody is out there seriously talking about the fact that the Linux kernel is written in fucking C. Well it's 2% faster than if we wrote it in an actual language with, I don't know, bounds checking, and we'd rather use the 2% for dividends, thanks very much. We need some economic and regulatory incentives here so the public endpoints of your critical oil pipeline are running applications written in safer languages on seL4 platforms with hardware roots of trust, instead of god-damned DOS.

The software industry should be ten times bigger than it is, but the economic incentive has been to make it cost less, rather than to make it safer.
The times I had a peek behind the curtain, he didn't expect to stop with the first version, even though it'd be good.

(Maybe those Advent of Code solutions are the first working draft, I don't know.)
You bitcoin guys are hilarious with your narratives. "If it crashes it's just going to be an opportunity for the rest to get in"...

Bitcoin market swings on Elon Musks tweets, a full scale ban in the US would obliterate it.
Actually, POWER9 RHEL7 has Linux 4.x, where x depends on the minor release -- unfortunately not the latest on the system I use. I think aarch64 is similar, but I'd have to look for rpm to check. They need similar attention, of course.

Anyway, RHEL kernels have various features backported to the vanilla version on which it was originally based, not just security patches, which probably makes the job harder. It is a major effort.
Given that Andrew Lee has shown a history of abusing his power over open source properties in the context of an open-source-focused organization that he donated to, and subsequently assumed functional control over,

I would be interested in what assurances, governance-wise, legally-speaking, and technically-speaking, FOSSHost can give that Andrew Lee, having donated now to this next open-source-focused organization, will, and can, exercise absolutely no functional control over it, ever.
> most people that know something about statistics don't exactly know what a statistical space is (and it is a very precisely defined concept, embedded in the set theory). And that's fine, that's for the "pure" nerds. How to use it can be taught without defining the roots and proving theorems from the ground up.

It's a popular theory, but then one day you read every recent biology paper and notice that only 2% of them are able to do statistics in a way that isn't total nonsense.

The only way for "learn how to use it, but not how it works" to work is if you get feedback whenever you make a mistake. That is not true when you use statistics.
You mean a very simple algorithm to detect eyes using the OpenCV (https://en.wikipedia.org/wiki/OpenCV) written on a RaspberryPi that has a tiny camera which connects to your desired computer via network (be it WiFi or cable) and sends a shutdown command once it no longer detects them? I am pretty sure you can find on SlackOverflow (pun intended) / RaspberryPi forums desired bits of software and make do in maximum one day.
Since the new management never offered to restore my trust by going back on the original promise, they are complicit.
i had couple tries on this topic, latest "finished" product is https://insightrend.com/?page=term-trending

so far didnt "make it", but i think i may return to it eventually, i didnt try everything with it yet.

I always found it super hard to market my products (or there are other problems with me lol )
The second question is puzzling. Are you offering to train new hires on Clojure?
I forget which Apple engineer posted this anecdote, but Steve Jobs threatened to fire him and he agonized over a detailed response email.

But he ultimately just sent something like “Steve, you know how I feel. But you’re the boss. Let me know tomorrow if I’m fired or not”. He never heard back and just kept working at Apple.

Now I personally think the engineer’s like-kind response is probably what let him keep his job. But there’s something elegant about straightforwardness like this.
> Still, I want to avoid hosting a service where I have to be on-call.

For sure it sucks being on call but usually because you're dealing with someone else's crap. But as the big Kahuna, aren't you in a position to make things reliable enough that on call is not a burden?

To me, needing someone on call is a good sign - means you've got a vital product.
Volume for p2p bitcoin exchanges in July 2019 was 20million a month: https://www.coindesk.com/bitcoin-adoption-venezuela-research
Finally a solution to the NI brexit mess!
If Boeing can't make the Max work without crashes, what makes you think a completely new supersonic aircraft can use a fork of Ardupilot with a few minor extras for supersonic flight?

Supersonic flight has much less overlap with subsonic flight than you might think. There are compression and twisting forces on the fuselage and flight surfaces which have no analog in conventional airliners.

And you can't just take the flight characteristics of one shape/size of aircraft and tweak them a little for your new design.
I'm surprised at how dismissive the comments are. We need many angles of defense against these criminals. Dismissing this because companies should do better security is like dismissing doctors because people should get more exercise. That's silly. We need preventative care and treatment.

I'm not surprised by this announcement because the way that the pipeline-company ransomware hackers beat a hasty retreat was noticeably unusual, and already seemed to telegraph that the state was getting involved more...actively. Good.
This is a totally solved problem in Australia and NZ. It's just that in the US it would require either country wide action or very strict border patrol/checks.
The car handled this just fine, though. (Though obviously AP wasn't engaged so we don't know exactly what it would have done). The bug report here is that the correctly-detected signs, in the correctly-detected state (i.e. off) were presented to the user in a confusing way in the UI visualization.

UI bugs aren't blockers for mythical SAE Level 5 Autonomy. You just... fix them.
That's one good reason to be a lawyer. However, if you speak with actual attorneys, they all have a hundred reasons to not become a lawyer. I have yet to find one that recommends it as a career path.
That's completely different. Apple could protect users with an awesome curated app store, but still allow sideloading if desired. In fact, maybe with slightly lower volume they could have human reviewers actually spend more than 30 seconds per app.
> But clearly there is a difference between setting the Authorization header and setting the User-Agent header.

No. If you falsify information indicating that you have authorization to access the site, it doesn't matter what header it's in. Conversely, if you falsify information that has no bearing on whether you have authorization to access the site, it also doesn't matter what header it's in.

You are either authorized to access the site (or URL, or whatever) or you are not. What tools you use to do so are only relevant if they cause you to generate accesses (eg network requests) that you are not authorized to make. By construction, configuring one tool to generate accesses as they would have been generated by another tool does not produce unauthorized accesses unless that other tool's normal accesses would be themselves be unauthorized.
I'm not sure this is that important for understanding biological neural systems. But it might enable mass parallelism!
This is true in the USA too, although you'll often have to search through the tiny legal text to find how to enter without purchase.
Is "kpatch" there actually the same thing as RHEL's kpatch? I thought Kernelcare used something proprietary.
They charged Swartz under many more things than just the Computer Fraud and Abuse Act. Just check out the list here: https://en.wikipedia.org/wiki/Aaron_Swartz#Arrest_and_prosec...

- two state charges of breaking and entering with intent to commit a felony

- wire fraud, computer fraud, unlawfully obtaining information from a protected computer, and recklessly damaging a protected computer

- breaking and entering with intent, grand larceny, and unauthorized access to a computer network

- federal prosecutors filed a superseding indictment adding nine more felony counts, which increased Swartz's maximum criminal exposure to 50 years of imprisonment and $1 million in fines
> Instead of buying the hardware from me, they simply built their own devices. And because the software has a permissive open-source license, they were free to use it in their company without paying me anything.

> This is an extremely common problem in open-source. An open license helps people discover your product and encourages them to use it, but it also allows big corporations to profit from your work while offering nothing in return.

in the same way you do not contribute back to https://pikvm.org but you make profit from it

> It is my code… sort of. The freelancers who work on TinyPilot sign a contract saying that I own the intellectual property of code they contribute, but I also have accepted a handful of contributions from volunteer developers. My understanding is that developers who contributed free code technically co-own the copyright to TinyPilot’s code with me.

> I released TinyPilot under the MIT license because it gives me flexibility as well. I think I can “fork” the code myself into a different license and just say that it also uses MIT-licensed code, but I’m not totally sure how that works.

again, not true. Your code is based on someone else code, https://pikvm.org and you are making profit from it without contributing.
Hardware engineer here who has spent a good chunk of his career building embedded Linux machines.

I see two options vis a vis near term profitability:
1) charging more, or
2) designing some custom hardware.

I would imagine the first route is the way to go. The second opens your business up to a shedload of risk by directly exposing you to the chip market (here be dragons - now more than ever).

However, at some point, it will likely start to make sense to design your own custom hardware - especially as you add PoE to this. That might be a sensible point to step away from open sourcing the software as well. It's an opportunity to port to a new chipset (Broadcom is a nightmare to work with for anyone who's not at a BigCo), make a clean break with your old codebase, and maybe add some saucy new features.

I would estimate the volume at which this makes economic sense for you on a unit basis is around 10k units. You will likely need to lever up some bucks to cover that production cost, but I conservatively estimate that could trim $10 out of your bill of materials cost.

Two bits from an almost purely hardware engineer's perspective.

(With <3 from Eastern Massachusetts.)
So if I give 10$ cash to buy something, the US government is right above my right shoulder approving that transaction? You realize that doesn't make any sense right.
I went on a road trip recently and charged near a Denny's. I hadn't been to a Denny's in forever (for good reason, I was reminded) but I did this time. A quick meal is great timing for a charge.
AirTags aren't meant to recover stolen items, since they make noise to indicate they're not around their owner. The thief also gets a notification on their phone that they're carrying an unknown airtag with them
What exactly do you expect the NSA to do? This is entirely preventable. Something as simple as an offsite tape backup completely thwarts the attack.

Do you want the NSA to send agents out to every Fortune 500 with a blank check so taxpayers can pay for a sane backup strategy to stop a problem we solved 30 years ago?
And the threat of a Topol-M nuclear missile with a yield of 800 KT detonating over New York is a pretty good incentive not to launch tomahawk missiles at office buildings located in nuclear-armed countries. If you ever wonder why unfriendly countries have nuclear ambitions, rhetoric like this is part of it.

How many people are you ready to kill over ransomware?

And weren't we just splitting hairs the other day over whether or not Belarus forcing an airplane flying over Belarus to land is excessive use of force? Apparently, ballistic missiles targeted at office buildings aren't?
In the places that the parent is describing, the police aren't your allies. The more dangerous the area, the more aggressive and hostile the police (at least to some degree by necessity), and the stronger the "presumed guilty" takes hold, and the more hostile the population itself is to the police.

In the worst of those areas, the gangs themselves take on the role of the police (offering services such as protection, policy enforcement, loans, etc).
Already discussed in https://news.ycombinator.com/item?id=26697892.
This might not be a constructive observation for me to post this comment, but I can just see the IBM mainframe designers sitting back with a refreshing beverage, while we talk about identifying and handling hardware faults during runtime.

https://www.ibm.com/support/pages/ibm-power-systems™-reliabi...
I tried to get Clojure jobs once, was turned away everywhere for lack of experience despite having used Lisp and variants fairly regularly since uni.
If under "proper security" the author means something that is impenetrable then such thing does not and will never exist in general. We can approach some reasonable level but with the current explosion of software, its complexity, insane degree of dependency, every button of your shirt becoming "smart" gizmo connected to Amazon and whatnot I believe the situation for now will only get worse.
And you're able to install f-droid because Android allows sideloading, which has nothing to do with the awful way Google has managed the play store!
Would that work if you try to use the ascii record separator character with the sep pragma?
These cyberattacks are all but literally boiler rooms full of bored Russian men wearing balaklavas and holding flashlights under their chins while they type.

https://www.google.com/search?q=holland+russian+hackers
I understand the appeal of emulating physical space in terms of people's ability to understand it, but what I don't get is:

1. Couldn't everything be expressed more easily in 2D

2. Would living in this for long time feel like a simulacrum that gets depressing after a while?

There are so many videos out there mocking the WFH experience and the loneliness and dehumanizing elements that literally making your entire work experience from a virtual physical world further and further distance ourselves to being overly siloed and non-social creatures? Even if features make remote work better (I haven't actually used it), it seems to me to be missing the point when going in this direction at all.
The killer quote:

> Axboe pointed out that read and write operations are not audited when they are initiated through the older asynchronous I/O system calls. "In the past two decades, I take it that hasn't been a concern?"

And then there are the 20 years of Linux kernel history that show "audit features" being ineffective, wasteful and little more than a checklist feature.
> But I believe there is unique institutional racism specifically directed towards poor rural white people in particular.

I don't know what to tell you, man. I pointed out that the incarceration rate of blacks is dramatically higher in the US state that likely has the greatest concentration of poor white people.

> derision uniquely directed towards them in particular (and towards no other group) from all cultural institutions.

Sure, Hollywood makes fun of them, but I don't think that has a particularly significant material effect on the quality of their lives. (Though it does make them really angry and more politically active.)

> Hindus do better than Whites in general. Is the system pro-Hindu? Nigerians immigrants do well. Is the system pro-Nigerian?

There is significant selection bias here in that immigrants are not a uniform sample from their ethnicities.
When I am in a video chat, glances reports teams taking between 120% and 140% of the CPU. that's when I'm passive participant not even sharing my camera.
What CEOs have ever been fired for security breaches? If the "free market" doesn't care, why would any "I told you so" from the gov't make any difference. He'll have already taken his golden parachute and some poor CSO will take the fall.
Great list! Stanford CS has been very open about putting its resources online.

But the curriculum I've been increasing into lately is that offered by the Design Group. And that seems to be a carefully shrouded secret ;)
i use https://github.com/Aris-t2/CustomCSSforFx to "freeze" my preferred firefox look
Backup Act of 2021
We have tried nothing and have run out of ideas!
It's more like saying "if McDonald's burgers are so good they should be able to withstand competing restaurants in the same town."

The users buy the phone, not Apple. It's amazing this is even contraversial.
It just means there's a physical artefact - the value becomes attached the piece of paper with the instructions on, as that can then be used to manifest "legitimate" performances/installations of the work (eg in a museum, or wherever)
The apparent disconnect for me:

1. Apps, as a rule, absolutely add value to the iOS ecosystem, and are a necessity.

2. But any single specific application doesn't.

iOS needs podcasting apps, but if Overcast disappeared, something else would just take its place. "Developers" as a whole are important for Apple to keep happy, but no specific developer matters all that much to them.
Cited this article in another response: https://www.coindesk.com/bitcoin-adoption-venezuela-research bitcoin adoption in Venezuela is more than theoretical and is being used to send money into the country.