skysight-inc/HackerNews huggingface dataset:
"ECLYPSIUM Discovers Multiple Vulnerabilities Affecting 129 Dell Models"

https://eclypsium.com/wp-content/uploads/2021/06/Eclypsium-D...

"DSA-2021-106: Dell Client Platform Security Update for Multiple Vulnerabilities in the BIOSConnect and HTTPS Boot
features as part of the Dell Client BIOS"

https://www.dell.com/support/kbdoc/nl-nl/000188682/dsa-2021-...
> It’s hard to know the truth here though when nation state interests are at play.

Not really and not after they faked witness reports. It is completely in line with what was published and there was no alternative in acquiring this information, which there certainly being enough public interest.
Also: trust.

It takes time and investment for other engineers to get to know you and feel comfortable explaining their thought process, including parts of the design they are afraid need extra testing.

You can't outsource the essential give and take of a correctly functioning cross-domain team.
Less than what they currently hit because of the underdog/indie take.
> Even English has no defined ordering for all characters. What is the ordering of punctuation marks? Do upper case or lower case letters go first? How do you deal with white space characters?

This isn't really true; there are well-defined, standardized answers to all of those:

- For purposes of alphabetizing, punctuation marks are completely ignored, as if they weren't present. "Stop me!" and "Stop, me!" are identical strings.

- Case is also ignored. "AAAAAGH" and "aaaAagh" are identical strings.

- Spaces are not ignored. Sort order is determined by the text before the first space. Shorter sorts before longer. "A bird", "a cat", and "a deer" all sort under "a" and above "ab".

Note that these are rules for English, not rules for arbitrary sequences of binary data. They look the way they do because they model the data as a sequence of English words.
What happened here is Cancel Culture. It's on the other side. But it's the same.

The left have driven people to suicide, the left attack people for past posts, the left attack employees and friends.

And the left should know better, it's hard to know how to move forward while the left, which for so long had the higher ground, also do this. And by left I mean the people who don't condemn lynch mobs when they think it's doing something they agree with. If you think racists deserve it, you're the same as KiwiFarms.
His solution would just zap at random moments.
CompCert's main theorem is that the compiled code maintains or improves the behavior of the source code, as in, it can only maintain or remove erroneous behaviors. So, it can remove a division by zero, for instance, but it will never add one.

Otherwise, the compiler does not guarantee the absence of UB; for that, you need Verasco (http://compcert.inria.fr/verasco/), a static analyzer that tries to prove that a given code is UB-free. If it succeeds, then combined with CompCert's semantic guarantee, you get a compiled code that is as UB-free as the source code.

Verasco was a research project and it's not clear it's still being developed.
> Almost every new housing unit in this world should use triple glazing

I agree that it "should". The added costs don't justify it, that's why it usually doesn't. In my region, ROI on triple glazing is in hundreds of years.
> This is safe because whoever has access to the more private data would also have access to the public one.

I think in real world scenarios, this would not be true of most stakeholder requirements.

That's what actually confused me here, because I don't see the use case in having levels of privacy.

I can see value in a boolean private/not private, for security, where private data you'd expect to always be access logged, stored securely (encrypted), transfered over secure channels, etc. And you wouldn't ever want this data to accidentally be leaked and end up stored/exchanged in a non-secure place (like unencrypted app logs).

But for privacy, I feel that you'd want to tie the data to some permission control of some sort, and levels don't make sense for it. You'd want something like "user making request", and I don't know if you can embed that in types and check things statically, since it very much seems like a runtime thing.
If it's a web saas, we're building Saasform [1] with your use case in mind.

One relevant example is launching your MVP as a serverless API (e.g. on Firebase) + react/vue front end. Just iterate on your core product and features, we handle home page, registration and payments.

For mobile apps I'd recommend Expo [2] and, if you can, stay with their managed flow. If you want to iterate fast, you need to take into account the time to release to the stores and Expo can help with that. Similarly as for the web, I'd look into a serverless API model to start.

For email notifications I'd go with Sendgrid.

I personally never used no-code solutions but different people recommended Bubbles [3].

[1] https://saasform.dev

[2] https://expo.io

[3] https://www.bubbles.io
The more rational take is that the FCA is acting to protect UK citizens from potentially dangerous financial products from an unauthorized organisation.
I was specifically talking about these abstractions as monads and functors not abstraction in general. Enumerable is a lot less abstract than both monads and functors.

I personally don't think Haskell stand at the right level of abstraction but that's a personal opinion.
> "Windows as a service"

A computer able to run only a RDP client able to connect only to a Windows VM licensed to you, running on Azure with every autoupdate turned on /s
We will look back at this summer is still kinda blissfully coolish.
The people who text & drive wouldn’t voluntarily use any solution to prevent them from doing exactly that.

The solution would be some feature in cars which are either mandatory, or would give you enough benefits to be worth considering even if you are an inconsiderate person who texts & drives.

And the punishment / reward could come after the ride:
- you texted? Well it’s your third time this month, from now on you’ll get a ticket each time you do it.
- you installed the feature, so you get a bonus check from your insurance company every month.

The tech exists already:
- a new mercedes have precise realtime eye tracking that makes the hud projected on the windshield look to be exactly in the same place no matter how you move your head around.
- there are devices which track your driving habits (are you speeding, driving erratically, etc..), this helps you when you have to deal with an insurance case.
Bloomberg article with existing discussion: https://news.ycombinator.com/item?id=27651730
I guess the problem here is the ambiguity of not responding -- it could mean you're not interested, but it could also mean you are too busy to reply. Without additional information, the salesman doesn't know which case it is.

From his perspective though, he doesn't lose anything by sending the follow up, and if it is the second case, may gain a sale.
The next phase of Clojurists Together
"Sriracha" couldn't be trademarked because it is the name of the sauce. It's like someone trying to trademark "Kansas City style Barbeque Sauce" -- can't be done.
Yeah, failing to comply with the FCA is a bold move for sure.
This might require a few treaties to give enforcement power to non-island nations on behalf of island nations. Not a bad idea though. For example, Chinese boats are turning off their location transponders when they poach.
Accept it, close it, banish the discussion. Smart move.
Really? I read that mmproxy can't be applied to general 3rd party websites.
Disco Files for IPO, Claims $42BN Market Opportunity
BGP Looking Glass Database
Same boat here. Since sales are a big part of my job, I occasionally read them to gauge how effective they might be (if I were the target audience). I used to reply to the more well-crafted ones with a polite “thanks, not interested” but in almost every case where I engaged, it seemed to lead to an attempt to reach someone in my org who might be interested. Now I just delete them.
Leibniz 375: Computer Science Dad, Binary Machine, First Memory, Boolean Algebra
It would be really good to see RFC 5233 local-part filtering characters (e.g. '+') being permitted in the validation for email addresses on this list. It's much less of a problem these days, but the number of times a sign up form has flat out refused to accept these as valid - or worse the sign up process accepted it, but the login simply doesn't work!
It's weaker than SPF and would require engineering hours to substitute.
ah good old nanny state,

Although knowing the city of London its probably a protection racket!!!
If you can "feel" climate change happening, then we have left the realm of science and entered the world of spiritual emotionalism. It sounds a lot like Evangelical Christians who can "feel" the Holy Spirit entering them, etc.
Hangul and Hiragana are not so dissimilar AFAIK? But the point of saying "CJK" is the other direction: codepoints subject to Han unification may represent Hanzi, Kanji or Hanja.
I believe we should accept mass surveillance in our lives as a public utility and heavely regulate/democratize it. Mass surveillance is too tempting for any organization to be fought effectively. In the case of youth education i see a strong case of publicly streaming kindegarten activities delayed of few second with a software that obscure facial traits and personal names in the audio (unfiltered version can be requested by police). This is a cheap way to keep accountable child carer while protecting childs privacy
True. Gov must encourage remote work to solve centralization but it seems that it's not well adopted even in this pandemic situation, especially for SMEs.
Just put your phone in the glove compartment when you get into the car. Then you can’t play with it while driving. I don’t understand what is so important that you can’t wait until you get to your destination to text or browse Instagram. This is compulsive behavior that people probably ought to seek help for.
Yeah, I can see where you're coming from. It is definitely easy to abuse these models for unscrupulous purposes, and I don't claim otherwise. I only suggest, it can be a useful tool for understanding self and others, so some nuance is required when criticising it.
This will end well.

I wonder what forms of social unrest will erupt globally when it all unwinds. For reference: "The Albanian Civil War was precipitated by multiple Ponzi schemes" And this speculative bubble seems to have the potential to be worse, or at least more widespread.

https://en.wikipedia.org/wiki/Pyramid_schemes_in_Albania
It seems like a euphemism akin to "it fell off the back of a truck".
For those not into hacking I use a Shelly 1 to control the garage door and aqara ZigBee contact sensor, controlled by home assistant.
Unicode is overly complex, but sorting is not the reason.

Unicode is overly complex at grapheme cluster level.
Software Engineer Day in the Life - Pinpoint (UK Startup)
No, Coinbase did. Sorry for the confusion.
For exercise, I started running 1mi/day almost 4y ago now. Having a clear tracking helps me with consistency and pushing when I'm behind.

For coffee and wine I'm certainly on the "addicted" spectrum if you were to measure. From time to time I test staying without one or the other for a month or so (for coffee for example I used the "excuse" of whitening my teeth), but tbh I've never seen any of the acclaimed benefits of reducing consumption. So I enjoy them.

Working on my communication style. If/when I crack the code, I'll be happy to share.
If I think about the wave nature of light, then a material's refractive index is sort of the "density" of the medium. Light travels more slowly through materials with higher refractive index. As you know, this is actually due to the absorption and retransmission of photons from atom to atom, somewhat analogous to your marbles illustration of sound. Both models support wave-like behavior in aggregate.

Thus, when light moves from a "faster" medium to a "slower" one, refractions and reflections result that are similar in character to acoustic reflections.

That's how I think of it anyway.
No comments yet pointing out what I think is the important point: Siracha is the established brand.

If anyone wants to compete with Siracha they would be best served by using marketing. That Siracha gets to skip spending on marketing after having developed a green field market just speaks to their competitive moat. They produce a high quality product at reasonable prices, if anything there isn't room to compete if not on marketing.
Can you describe how these financial products are “dangerous”? Because they could be rug pulls?

I disagree that citizens need to be “protected” from speculation. Governments should monitor markets and go after scammers when they act, not shut down the markets entirely.
The emirates first class on the A380 is a really special experience. It’s not the most polished F product out there anymore, but the shower is hard to beat.

Book the shower right before landing and step off the plane feeling nice and fresh. It’s always easy to spot the F pax from the unwashed masses.
discord has terrible audio and ((non paid) video).
I still use teamspeak3 these days with some of my friends being on ts5.

I always get angry when companies use it for commentary on esports because its just that damn awful
PayMaya raises $167M to launch digital bank in the Philippines
... to clear the room for competitors
> This means that people in the UK are not allowed to use Binance's services to speculate, or bet

What will happen to the people that already bought such assets?
"An occupied building partially collapsed, killing multiple residents. But on the other hand, the report about its systemic structural issues was long and kind of a boring read"

Are you for real?
Sriracha is really interesting to me. I don't know when exactly it became what it is today but I remember always getting it at the takeout Chinese places in the late 90s, referring to it as rooster sauce (occasionally cock sauce, for those excessively juvenile times).

Everyone I knew already knew what it was and nearly everyone liked it but, for reasons completely unknown to me, one day it made it's way out of those cheap Chinese restaurants and into the mainstream. It's still a mystery to me.

The only explanation I really have is that I grew up in the LA metro area and, I'm pretty sure, it's manufactured there. Perhaps it was ubiquitous locally and the popularity has to do with them expanding their footprint.
See the FAQ "Can I post a job ad?", it's a sort of ad reserved to YC companies. https://news.ycombinator.com/newsfaq.html
Good question. Assuming you're US based - Why not write a letter to your representatives, asking them why the police ignore and dismiss online harassment, and why a single US citizen continues to be allowed to operate what is solely a hate site?

If legal pressure isn't enough, why not try political pressure?
And despite it not tasting like the original Thai Sriracha sauce.

Edit: the Thai version is thinner, tangier and a toucher sweeter, and made from spur chillies, not jalapeños. [1] [2] [3]

[1] https://shesimmers.com/2010/03/homemade-sriracha-how-to-make...

[2] https://www.npr.org/sections/thesalt/2019/01/16/681944292/in...

[3] https://www.thrillist.com/eat/nation/what-is-sriracha-sauce

Not saying the Tran sauce is bad; just different.
Ignoring regulations did not seem to hurt AirBnb, Uber or Facebook...
This same article was submitted about one hour before this submission and is currently #1
https://news.ycombinator.com/item?id=27658145
What type of muscle spasms were you having? My spouse has high anxiety, some depression, and a persistent issue of localized muscle spasms or twitches in her arm when their anxiety is extra high.
Designing like a joint cognitive system
What's really weird is the Stockholm syndrome of the Oracle users: They are proud of these limitations. I've heard all of these:

* Boolean: You don't really need it, just use 0/1 or Y/N (or J/N or O/N or whatever NLS equivalent of Y/N you want). You might have to implement a few different mappers for the same data type, so what?

* Strings: Semantically, a null string and an empty string are the same. You should be grateful the database works this way. All other DBs are wrong (you hear this a lot in Oracle land).

* Dates: Oh, just ignore the time if you don't want it. What do you mean, time zones? Add the correct offset in your software, you lazy XXX. BTW, we migrated to a server with another time zone, hope this doesn't impact you?

Now there are things that oracle is good at, mainly being trustworthy and scalable with your data, especially in clustered environments. But postgress is slowly but surely eating Oracle's niche here, and mysql has demonstrated customers will tolerate anything for lower costs. So their main value proposition today is that they are Enterprise Class, and all the big boys run Oracle so either join the club or get laughed at by the big boys.
> The guideline to avoid conceptually putting multiple pieces of data into a single field cannot have a formal definition, since it depends on business requirements what constitute a piece of data. For example a phone number has multiple segments like country code, area code, line code etc depending on country. Should a phone number be treated as one piece of data or multiple pieces of data? Depends on what you need to do with the phone number.

A phone number is what you dial to call someone; it's the value you need to use a telephone, which is what telephone numbers are for. A comma-delimited list of telephone numbers isn't.

> According to Date's definition, a table is in first normal form if and only if it is "isomorphic to some relation", which means, specifically, that it satisfies the following five conditions:

> ...

> 4. Every row-and-column intersection contains exactly one value from the applicable domain (and nothing else). -- https://en.wikipedia.org/wiki/Database_normalization , quoting Date, C. J. (2007). What First Normal Form Really Means. Date on Database: Writings 2000–2006. Apress. pp. 127–128. ISBN 978-1-4842-2029-0.

Surely "exactly one value" from the applicable domain of telephone numbers is a telephone number, not a comma-delimited list of telephone numbers.
Sure, but that's not an affordance. If it were vertical instead of horizontal lines for example, it'd be like a grip horizontal pulling.
Not quite. Sriracha is probably the most marketed sauce in existence... just not advertised directly from the "original" manufacturer.

Fast food chains, chip companies, beef jerky, almonds, other seasonings and more all spend a considerable amount advertising their products include Sriracha.

Sriracha's popularity mostly began when these companies started to introduce products with it to everyday people. It's not like Sriracha didn't exist prior to 2010...

I would be surprised if Huy Fong Foods, the company behind the popular US variation, didn't have something to do with the initial deals that got all this going. Clever marketing, indeed.
I would say they fail to see the danger, because you have to expect that at some point your enemy will wield the reigns of power.
Is the sauce that I get in every Asian restaurant not the same Sriracha?

edit: clicked on the link, it seems to be that one, I think?
Jaw-Locking Tooth Locks as a Weight-Loss Panacea
there's not a lot the law can do, unfortunately. doxxing isn't illegal in the US, at least federally, except against people in certain positions [0]. there's a high standard for harassment to be considered illegal. bullying is not illegal. hate speech is not illegal. even if individuals on Kiwi Farms can be prosecuted, it wouldn't take the site down. and to be prosecuted, the prosecutors would have to care. there just aren't the laws..

I'm friends with a few people who have been targeted by Kiwi Farms. Near is far from the only person driven to suicide by overwhelming bullying. it's one reason I keep a low profile - I'm just too scared.

0. https://www.law.cornell.edu/uscode/text/18/119
Only 37 years old when he died and having only sold one painting, van Gogh sadly did not live long enough to see the extent of his legacy – which includes his works now being some of the most expensive in the world.
It's coronation disguised as regulation. Casinos and fruit machines are moral, but crypto is not?
Go look at Reliance stock since the protests started. Their trick to kill competition is well known now.

Are you not aware that Indians have been boycotting Jio nationwide, even going as far as to destroy their towers in some states ?

What world are you living in, trying to use the company as an example of progress?
I'm not sure about America, but in Europe there are many imitations that also use the Sriracha name, similar looking bottle, etc.
I have no problem with that either.

In this country, we have long made a product called "Cheddar Cheese". Unfortunately, cheddar is not covered by Protected Designation of Origin rules. So most of the cheddar in the shops is imported.

Real cheddar is now pretty hard to find. In my youth, I lived for a while in cheddar country; there was a cheese shop on the corner that sold the most amazing, nutty, crumbly cheddar. It's decades since I've eaten anything like it; even premium cheddar from top-class cheese shops doesn't match it (few Americans have ever eaten cheese like that).

That is: the competition from industrial cheese-makers has forced out the traditional makers, driven down the quality of the cheddar that's on the market, and made it much harder to find proper cheddar. The good stuff can only be found in specialist cheese shops, and even that is a shadow of what it used to be.

I approve of Protected Designation of Origin. More generally, I approve of regulated food labelling (GMOs? Growth-hormone beef? How can I exercise my market-power as a consumer, if I'm not allowed to know what's in the pack?)
Active Directory Pentest Cheatsheet
I guess your assumption is people know what they are doing. Looking at legal bank products with derivates and who got into other speculative products in the past decades most people didn't see they were being manipulated into buying a product for which the risks where greater than they could afford.

This is a different stance from the America libertarian view of "everyone is responsible for their own actions" mostly because the balance of power is greatly in favour of the companies.
Are you saying he would get a DMCA notice if sayed that he downloaded the game and bottom, but not for his script that he offers that alters the original game?
I think it is very reasonable idea, but time's gonna show how it'll affect maintainers when majority of schools start doing it

>The most common problems faced by the students over their assignment are the inability to build the project

sounds like somebody tried to build llvm
What does that do to the venison?!
Irvine is notable for it's sterility and being family friendly and clean. While it's safe (mostly) to walk around late at night, there's nowhere to walk. All of it is basically office park style landscaping mandated by HOA's and beige houses. The majority of businesses are chains. The selection of restaurants is not remarkable for california.
From personal memory at least 33 years old.

I was horrified how bad it was compared to Sybase back then.
I agree with this, although I would hate for someone's grades to suffer because they were hacking on open source. The next ACM article should be "Why Computing Professors Should Give Credit for Contributing to Open Source Software Projects".
This is a great resource, thanks for sharing.
Why not also show that your definition already exists elsewhere, together with with a warning? Or is it doing that too?
The distinction here is between buying and selling Bitcoin, and buying and selling contracts for difference or spread betting on Bitcoin’s price movements. The latter is more tightly regulated, as it can result in much larger gains or losses, including losses greater than the staked amount.