skysight-inc/HackerNews huggingface dataset:
> Abdine has come up with a plausible theory—that one hacker first exploited CVE-2018-18472 and a rival hacker later exploited the other vulnerability in an attempt to wrest control of those already compromised devices.

Excluding straight vandalism, I can't really come up with another reason for the reported sequence of events. Presumably the first attacker wanted to build a botnet (which is actually something they can draw profit from), and a competitor wanted to prevent them from doing that.

Otherwise — again, excluding straight vandalism — what is the benefit of wiping the devices? Having your preexisting botnet target/scan and exploit these devices isn't free. What else could they have been trying to gain?
You're right! Seems like I skimmed over that part. My point still stands, though.
I think this 3 year old topic needs to be revisted considering the improvements that Concurrent mode will provide.
For me, trying to make sense of how React's reconciler matches hook invocations to component instances is pure cognitive overhead. Other people don't seem to have this problem. But trying to accomplish anything in React is arduous for me, particularly with function components and hooks. Class components seem a little more obvious.
fuck completion percentage, it is more than just that. consider the QUALITY of completion.

e.g. Did you show up 30% of the time? yer a graduate!
CM-1/2 is not exactly computer, it is more of a massively parallel SIMD computation accelerator. While AFAIK the CM-1 microsequencer has some limited ability to handle control flow it is there mostly in order to futher compress the instruction stream coming from the front-end workstation (which came over two wonderfully thick 50-pair ECL cables) and most of the actual programmed controlflow is done in software on the front-end side. It's architecture is somewhat reminiscent of FPGA. But while you can freely program the individual macrocells in FPGA, all of the CM "CPUs" have the same configuration, but this configuration can change each clock cycle (see Fig 4.1 in the dissertation and take note that the ALU is essentially an freely configurable 8x2 LUT).
The type of "incremental advances" you see in recent Nobels are the exception in history, not the norm. Stuff like CRISPR is what the Nobel is designed for.
A Content Marketing Planning Tool to Improve Conversion Rates and Drive Sales
The Dangers And Rewards Of Speculative Fiction
This blog says what I've always thought - that to keep a large web application performant, you need to eliminate all redundant calls and operations, even in to pure JavaScript code - not just DOM calls. If your pure JS code already is designed to eliminate redundant calls, then you already get the minimal DOM calls from JavaScript too. That's the best case, and VDOM can only be slower as it adds diffing overhead on top.

There might be other good reasons to use a VDOM (including cases like using the DOM in a web worker). But I don't think performance is one of them.
The automatic host numbering feature in the IPV6 standard (modified EUI-64,RFC 4291) was a big mistake. But I thought that worked the other way? that the MAC was part of the IP, not the IP part of the MAC.
The web stack, from tunneling thru HTTP to the JavaScript language itself, is a very interesting case study.

I think that many decisions, like creating a virtual DOM, make a lot of sense in isolation. But, if you look at the complete ecosystem, no sane human being would have ever designed anything like that.

Maybe, the Virtual DOM is pure overhead if you look at the complete system, but:

1. It was reasonable at the time
2. Some other patch to the Web Ecosystem will fix this

The more systems are interconnected, the more difficult is to change anything radically and only incremental changes are possible.
LinkedIn breach reportedly exposes data of 92% of users, inferred salaries
What Is IPFS?
While this may have been true previously, React’s new concurrent mode can leverage a Virtual DOM to split actual DOM updates over animation frames, to achieve perceptual improvements over synchronous DOM updates. Svelte’s AOT compilation approach, I believe, is limited in these kinds of time-spanning deferrals, though I’d love to be proven wrong! https://reactjs.org/docs/concurrent-mode-intro.html
Yes, steel is required. In the design of concrete structure, concrete is assumed to have zero (0) tensile strength.
I think even without metadata server replacement this attack would still be painful. The ability to reconfigure network on a victim sounds painful
Compare the design of Featherstitch [1], in contrast to BSD's soft updates.

(I wonder what happened to Featherstitch.)

[1]: https://lwn.net/Articles/354861/

It's a common pattern that you have a list of items of work to be done which in principle you could know ahead of time, but in practice it's better to track at runtime (even though it means the computer ends up repeating the same calculation again and again).
Those parked cars generally bring the people providing that tax revenue, or they bring the people working in the shop to have it be open in the first place.
The type of article like this is in the U.K. often at the moment - presented liberal with an awful lot of ‘here’s my wonderful argument that sounds liberal and intellectual but if you dig and think about it for about half a second you realise it’s a huge distraction.’

It happens a lot with comment pieces in the U.K (and when I say U.K. I really mean England here) in national magazines and newspapers. Like, never mind that he’s completely ignoring non-western modern philosophers and thinkers, not to mention left and human rights groups in those countries who are doing their own thing without having to do this kinda gross comparison, but this seems like it was also co-ordinated with the Spectator (which is a right wing magazine) which also had a weird animal sex article in it recently.
Why 'payment' in Bitcoin is 'countertrade' payment in dollars
Svelte is so 2020, the new hotness is SolidJS. https://dev.to/ryansolid/solidjs-official-release-the-long-r...
My lord, how many times has this happened to LinkedIn? Fuckin ridiculous. Need some public policy to hold these companies more accountable when this happens, so it will happen less.
Quite possibly, but progress isn't linear. Apple managed to leapfrog ARM and Qualcomm this generation, but there is nothing to say that some manufacturer won't be able to leapfrog Apple in the next. No doubt, they've had teams carefully dissecting the M1 and drawing inspiration for future generations.

However, yes I suspect Apple will retain dominance for at least the next few years. Thankfully for incumbents though, Apple doesn't want to be an OEM, else they'd be in some real trouble!
Don’t be acting like Denny’s is a Waffle House.
That's a massive over-simplification, if not actually completely false.

A lot of the benefits of the Thorium reactors that are being envisaged are because they are a molten salt design, not because they use Thorium. Molten salt reactors can't cause a meltdown, simply because they are already molten. Traditional reactors have the potential to explode because they are cooled by superheated pressurised water, not because they use Uranium. You can run standard Uranium through a molten salt reactor and get the safety benefits, and you can burn Thorium in more traditional reactors. Likewise, you can make self-regulating reactors that aren't molten salt reactors - it's just that molten salt reactors have one particular really neat mechanism for self-shutdown.

Thorium does have some inherent advantages, two of which are plentiful supply and proliferation resistance.
This. I haven't read the guide carefully and I had no idea I was supposed to experience auditory hallucinations, and I didn't hear any. I wonder if the visual hallucinations (which I did see) were caused by my prior expectations.
That's not a surprising or controversial statement though - physics for the last hundred years (since Einstein) has increasingly moved towards accepting that matter and energy are for all intents and purposes the same thing. I don't think that changes the tenets of materialism, just refines them.
No.

The green cap meant that beautiful Huy Fong Sriracha, which has no mayo, but it's so distinctive that other manufacturers copied it, presumably to fool gullible people like myself
Concrete production represents 4-8% of all worldwide CO2 production. It's a significant percentage. There's talk on sequestering CO2 in concrete itself but I'm not sure how far it has gotten. I do remember some plants in France or Germany having facilities to process clinker byproducts. I wonder how more efficient is that.
A year ago it was generally believed that fomites passed by contact was or could be a significant path for spread of the covid-19 virus. This turns out not to be the case - but that hasn't stopped a huge number of organizations from demanding high levels of surface cleansing.

If you're just unusually fastidious, I guess that's your right. But when you're claiming (or at least implying) that everyone must conform to those same levels to avoid covid-19 transmission - which is what we're still seeing quite a bit of - then that's hygiene theater.
> What are the odds you actually land that 1/250 that has a great exit? Less than one in a thousand.

Ye. I was going to be smug about 1/1000 being less then 1/250, but then I realized that start-ups with great outlock are probably harder to get into.
In fact, the concrete MUST crack in the tension zone in order for the steel to take effect and provide tensile capacity to the member.
SQLite mentions NFS as problematic because SQLite makes a lot of use of advisory locking. Which is supposed to work on NFS, but apparently is often buggy.
This really feels like the end of an era. I got my start going through the MITx computer science and probability courses. I wouldn't be a data scientist today if I didn't have those resources available.

I now understand how to self-learn difficult subjects with textbooks and online lectures but I really appreciated MITx's commitment to making rigorous courses freely available.
Xbox Cloud Gaming
It is an allusion to an old joke. Here is the original source: https://youtu.be/w8d0GwzY6cA?t=2210
It's not really catering to disable a feature. You can call it "audit" mode and offer no credential.
I’ll repeat the see and eye doctor bit because it’s important but I’ve also found they seem worse if I’m dehydrated and drinking more water seems to make a noticeable difference.
Yeah, I'd say it's about as polished as it can get, but it conceptually is just not going to be useful for any serious learning. It's been my experience over the years that the more enjoyable a language learning technique is to do, the worse it actually works. And duolingo is to their credit very enjoyable.
Really didn’t take us long to get back to our first world problems did it?

As with most tech things the QR menus work well when they’re implemented well and poorly when they’re implanted poorly. Multi-language support (without having to print menus in lots of languages that might not get used) is something I’ve seen in a few places. There is also the opportunity to make them a more accessible option if done right. It allows restaurants to make updates to menu items more frequently and more when something isn’t available.
Rockefeller and standard oil was a big problem, and required large-scale government anti-trust actions to be fixed.

Do you see similar things happening now?
Declarative state-driven UI is great, but personally, I really prefer the way e.g. knockout does it over react. It uses observables and publish/subscribe to issue updates to DOM elements directly where they're needed. You may not like knockout, but it shows how virtual DOM isn't a requirement for declarative state-driven UI.
no real information on the landing page, only hype. I guess it is for vc folks not users...
We need more electric tri/quad-cycles like the Better Bikes PEDL and the Organic Transit ELF. They provide shelter from sun, rain and snow, and have enough battery to not require pedaling. They are also small enough to go on bike lanes and paths yet large enough to been seen by drivers of ICE vehicles.
Then perhaps this reply comes closest to the truth:

> Y because the letter Y has one stem which splits in two, just like what the function does. That’s probably the reason, or at least that’s how I look at it.
> My suspicion is that people who claim they can visualize images perfectly won't be able to do this

Note: I do not "claim" to visualize, I can do it, like many others. Remember that aphantasia is the uncommon condition.

I cannot see vertical or diagonal words and in fact have trouble focusing on the words. I can see one at a time clearly, but if I focus on the others the rest become blurry. I can see the checkered board though. I suspect this is because your example is too artificial and analytical.

My visual mind doesn't work analytically like this. I can see the face of my friends and family with lots of details (I can see them with different hair cuts for example), even hear their voices. I can remember scenes from my last vacation clearly, in full color.

But I cannot do a crossword puzzle visually, sorry.

I can see equations floating in my mind, but only if I focus on a narrow section; and I obviously cannot do serious math with them.
And there is far more going on than what you see on a daily basis. It isn't "obvious", yes the banner thing is shit, but GDPR is a complex legislation and has many great benefits for personal privacy that go far beyond annoying banners on web pages.
If I understand correctly, the attack can be mitigated with the appropriate level of firewall rules. Both ingress and egress traffic should be blocked by default and selectively allowed based on need. In this case, DHCP traffic would only be allowed to 169.254.169.254.

You still have somebody in your network though, so there's that.
>“The Army’s mobile reactor program, which was never requested by the Pentagon but rather by nuclear industry cheerleaders in Congress, is precisely how disasters happen,” he said in the report, which was released in April.

It’s interesting how nuclear gets an alliance between green groups and fossil fuel interests. It always makes me wonder how much criticism is in good faith. Nuclear can wipe out natural gas and coal and perhaps even oil with the rise of cheap storage. Fossil fuel interests have an economic interest in defeating nuclear with fear and regulatory red tape.
I'd love to know about some of the serious successes of the Connection Machines, but I strongly suspect they are national secrets.
Military strategy is ultimately about delivering your bullets to the enemy and putting a hard barrier between their bullets and your troops.
They note right after that:

> it turns out that we can achieve a similar programming model without using virtual DOM — and that's where Svelte comes in

The abstraction is valuable, but its cost need not be so high. I do wish they'd elaborate on what Svelte does differently though, or link to another post which elaborates.
If your client wants a low-code CMS where they maintain their own content... why are you building a custom site in the first place?

Without some solid requirements that dictate the need for custom code, I'd just point them at Wordpress and call it good.
Man I've been waiting for this for so long.
I doubt Svelte will take over. Although I really like Svelte, and worked with it before React, the tooling with React is simply superior. Besides, React already mentioned in one of their introduction tutorials that they are considering taking Svelte's approach at one point. Developers choose the tools that makes them productive and that are enjoyable, not the ones that are most efficient (otherwise we'd all be writing assembly code)
Isn't this just data that people choose to make public on linkedin?
Coach:
“What’s the real challenge here for you?”
“What do you need to get to an estimate?”

Offer help:
“What do you need to get unblocked?”
“Let’s sit down together and see if we can figure this out.”

Hold them accountable:
“I understand, but we need to be keeping our partners up to date.”
“Can you give me a date for a date?”

Teach:
“Here’s what I recommend…”

Etc. You as a manager should be actively helping your employee work through the issue - whether it’s external or internal (growth for them).
I’ve been doing the same. The potential downside risk of having LinkedIn/Facebook/Instagram profiles just keeps growing and growing. I’m a complete ghost on the Internet. I have Google alerts set up for my names and email addresses, and I regularly attempt to docs myself to find any leaks. I also can’t understand why anyone in the public eye doesn’t completely sanitise their social media profiles. The amount of people brought down by 10 year old stupid tweets is insane.
edX has been my go-to recommendation for people in my side of the world (I live in Sri Lanka) to get quality education at no cost. This is the end of that - they might have some protections but its no longer going to be focused on quality content delivered in a highly learnable manner.
Hi Bruce - great to have you here : )

I'm a big fan of these larger constructions with ply, LVL, and similar. I'd guess local timber varieties and production quality plays a big part? I'm in AU - 33S 135E, 150km from the coast, and we have some local timbers (eg Black Cypress or Callitris endlicheri) that are spectacularly well suited for construction, so long as they're protected from weathering. That particular species is termite resistant, fast growing and hardy, easy to work with as lumber but seems to get harder/stronger over time.

Are you looking to customise your design and manufacturing practices, or partner with locals with specialised skills, with/to the prevalent regional timbers available?
Replying to myself, now narcissistic...

> Molten salt reactors in general can't cause a meltdown because they are designed to passively moderate in the event of a problem.

At least one design I've seen has a plug in the main salt loop that is made of lead or something with a relatively low melting point. It is actively cooled to keep it solid. If there is a total power failure, and nothing is running, the cooling system shuts off, the plug melts, and the main loop drains out into a containment pool.

The MSR is just running at atmospheric pressure, not super-high pressure like a pressurized water reactor (hence the name). You can crack a pipe, and that's bad, but then the loop will drain out to the containment pool below the reactor. [1]

Unlike a PWR, where cracking a pipe may well lead to a steam explosion. Even if initially contained, this is super bad.

It is unfortunate that many of the reactor designs out there in operation now are not 100% passively safe. Having one or two backup systems (like a Fukushima Daiichi) sometimes just isn't enough.

[1] Now note that recovering from such an emergency reactor shutdown on a MSR is no fun process, and will take a while to do cleanup and get things back up and running. A normal shutdown will not drain into the pool, as I understand it. (Edit: this is wrong, see reply.)
Yeah, I find it very very sad. I am so isolated after 15 months of lockdowns that I literally go to a restaurant for a tiny bit of social interaction, just smalltalk with a waiter. Just about 4 out of 5 times they insist on ordering online. It gets me quite angry, I can just as well stay home if I have to look at the screens even more after looking at the screen the whole day.
@dang please add the (2018) suffix to this article.
Careful, we're on about our 5th generation of reactors that cannot meltdown. The last 4 melted down at various points.
System *Things
Tamiko Thiel herself is selling CM T-shirts on spreadshirt. It is my understanding that the original TMC T-shirts also had print on the back, the spreadshirt ones only have the cube of brainy cubes design on the front.
I don’t think you can have one and not the other. I may be too pessimistic but I would guess other nations will steal this technology and not be so encumbered by their concerns for the environment.
Watching the world burn. There are plenty of examples of worms/viruses that bring no benefit to the creator. I know you said "excluding", but it's popular.

Alternatively, some misguided "white knight" idea. Maybe the factory reset turns off the "open to the internet" setting.
A long time ago I had a bet with someone who claimed that he could influence the outcome of a die roll. So we set up an experiment to see if he could roll a 6 more often than expected. He would do the rolls and I did the scoring. Statistics predict that with a fair die one in six rolls would give a positive result. We did 300 rolls and it turned out that exactly 50 of them were sixes. After some thinking I found this extremely suspicious, because it is far too close to the expected result. I am certain that I had not been consciously manipulating the results, because I was pretty certain about the outcome. But during the experiment we did intermediate counts so I knew if there were too many or too few positive results. So I guess I am not a very reliable observer.
Can someone explain why someone who isn't Zuckerberg would argue that Facebook isn't a monopoly?
Perhaps give native compilation a try? Not sure how well does it work with Clojure, but that might shrink the app size a bit as well?
And as someone just mentioned to me just now - Unherd is funded by the same people who do GBNews, who are trying to set up a Fox News style service in the U.K.

Also might be related to the Mumford who resigned from the Sons recently as well, it sounds like his Dad funds it.
When charging is as fast and simple and universal as filling your tank with gas, it will start to make sense. I can go on a long trip, with brief interruptions for refueling/refreshments/etc. and expect to reach my destination in a reasonable amount of time. With an EV, I’m inevitably going to be stuck somewhere, having completed the other tasks, but waiting for the vehicle to refuel enough to continue onward. Worse, if I reach the destination and there’s no easy way to immediately recharge for the trip back, then the vehicle is effectively useless, except as shelter.

Until the EV infrastructure is as universal and simple as gas-power, it’s not an option.
Right, I'm familiar with the hack. My point is Target almost certainly didn't decide that the HVAC firm could be trusted to have access to the credit terminals - the fact that they had access was the result of poor security design, not Target's threat model.
At my company, we don't really solve problems. The business creates their business system/flow, then we implement it. They handle the strategy, be just obey. We might hit technical problems, but that's not really the same as solving the business problem. Usually it would make sense technically and from a business standpoint to tweak the business system to solve the problem, but that's never an option.
I do that the instant they don't have physical menus. Saves a lot of stress.
Ease of use is definitely important - but 9/10 programmers not familiar with either Svelte or React, learning either for the first time, would prefer Svelte.

There's many good reasons to use React - mainly the React ecosystem - but simplicity is not one of them.
> What are the odds you actually land that 1/250 that has a great exit? Less than one in a thousand.

I’m sorry, but assuming you land in a random startup the odds of landing in the 1/250 would be one out of two hundred and fifty. There are other factors, but saying the odds are <1/1000 requires more justification.
It compiles the code into vanilla JS that directly updates the DOM on state changes.