skysight-inc/HackerNews huggingface dataset:
Show HN: Track Abuse of Browser APIs with Kill Switch
By learning what was possible with GC enabled systems programming languages in 1990's hardware is how we can move beyond the unsafe layers of our current IT stacks.
It is supported and still in common use in some circles. For reasons I don't fully understand this is called "oracle style".
This is such a confusing take on human nature.

Do you think the implied-but-never-actualized threat of physical violence is the thing that makes in-person customer service succeed?

I think it's exactly the opposite.

In-person service is typically better because communication is higher-fidelity, and people are much more empathetic when their counterpart is physically present.

When communication and empathy fail, the threat of physical violence is still not a motivator because (in my little corner of the world), there is basically no threat. The shopkeeper isn't going to jump over the counter and throttle the customer, nor vice versa. Because society built laws and norms that prevent that from being a viable solution, and guarantee that choosing that path will lead to much more serious problems.

It's entirely rational, and we don't need a vague passive-aggressive quasi-threat of a punch in the nose to make it work. No system works all the time, and there are always Poor Impulse Control people who leave the store and come back with a shotgun. But I'd argue that those extremely rare cases are further proof that the in-person "threat of physical violence" does not play a part in making customer service work well.
I taught myself SQL on a need-to-know basis. One thing that blew my mind and really helped making certain non-trivial queries more manageable was when I realized I could join subqueries. It never occurred to me to try, until one day I did and it worked.

A contrived example for illustration:

select oh.oid, oh.order_ref, ol.num_lines, ol.total_value
from order_head oh
join (
select oid, count() as num_lines, sum(value) as total_value
from order_lines
where status = 'ready'
group by oid
) ol on ol.oid = oh.oid
where total_value > 500

For certain queries this has led to huge speed-ups, by allowing rows to be filtered sooner rather than post-massive-join. For others it makes it easier to integrate with libraries, as aggregate fields like in the example can be filtered using the main where clause rather than in a having clause.
Hoping for a progressive result in the UK supreme court next week.

https://elancane.livejournal.com
All the white population was massacred, actually [1]

[1] https://en.wikipedia.org/wiki/1804_Haiti_massacre

Edit: Thank you for being so mature and for going through my comment history to downvote all the comments you can. Way to go, really. Probably why the previous thread was flagged...
Fab. This always struck me as archaic and unnecessary for things like passports (and driver's licenses). Maybe it made sense before photos and biometrics. But these days it adds nothing to a border guard's ability to decide if they have the right document for the person in front of them.
To be honest, I’m not sure what the purpose of having such information in a passport is in the first place.
But that’s the point - the child may want to spend their money spontaneously or even to buy something private.
Nature didn't give us anything. Our DNA evolved to take from Nature.

No buffalo walks up to a lion and gives itself up, the lion evolved to take, brutally and with often needless cruelty.
IT is an open question if Mexico will remain like that. They have been reforming, if those reforms stick and continue they are no longer a failed state. There are many who don't want the reforms to stick (it is better for them personally even though it is worse for the country as a whole), if they win the country is still a failed state. Your guess is as good as mine as to what the future will hold.
In Switzerland the President has is just one of the 7 chief ministers who are in control of departments like military, justice, finance, The Federal Council.

The person who is president get 2x the vote in case a vote is tied (abstention is permitted). Also the high honer of being the first to shake hands with foreign presidents when they arrive.

The Federal Council is both head of state and head of government.

Seems to be a pretty good system, the idea is to actually share this between different parties at all times. It always seems strange to me when in countries like the US there is the constant massive power shift back and forth every couple years.
I mean that modern cpus have already a fast instruction to compute that. The apollo code does not seem to be ultra-optimized, but it is a natural implementation of the polynomial approximation.
Because children need to learn to both test boundaries and respect them.
Having a printing subsystem installed on a directory server just seems nuts to me. The server running my blog doesn't even have CUPs installed.
Totally unnecessary and I think will lead to confusion and fraud.
Right to repair movement gains power in US and Europe
It's a tricky problem to solve.

Ideally you'd want to show only relevant alerts, but... how? You'd need to know which kind of errors are relevant for a particular project, but that'd require solving the halting problem. This is made much worse by that it's JS.

Some libraries have an enormous complexity and attack surface. Take a database interface -- there probably is a vulnerability in some obscure corner the typical person may not even know exists.

I think though at the very least some improvement could be made by better priorization and categorization. DoS by exploiting a regex parser isn't that big of a deal if your project is just getting started, but an exploit allowing arbitrary code execution would still be.
Dominican republic is rooted in Spanish colonialism, Haiti in French.
China's 'midnight patrol' cracks down on young gamers
Thanks very much for that info. If those think pads can run Linux smoothly, that's almost tempting to leave the mac laptop world.
Hmm, I’m looking at the Forster paper and I don’t see where they wrote that the origin might not be Wuhan.

Unless it’s peer-reviewed and published, I’m not going to count it as evidence. As far as I can see, you’re citing one dude’s speculations. Unless somebody’s followed up on those speculations in the past year, I’m not sure there’s a case here.
Well as of now the traffic egresses with Cloudflare in Zürich or Bern with the IP 104.28.19.67 :-)
I always say my ideal fitness wearable would have no screen, simply track and relay to my phone.

Kind of like the whoop minus the 30/month subscription...
The maximal lockdown is way too minimal.
There is, but in all seriousness outside of events that will probably also happen in a republican state (like tension between the prime minister and the leader of the opposition) the Government-General takes a hands-off approach, so effectively (de facto, in practice) the prime minister is the head of state.
There are only two genders in science. Politically, they are infinite.
The Haitian revolution ravaged the new nation's economy. The machinery used to process raw materials for Haiti's valuable export products, in particular sugar and coffee, were mostly destroyed in slave uprisings, and they could not be produced locally. Haiti also lacked the natural resources necessary to develop an independent industrial base, and even if plantation outputs increased again (as many tried to make happen), luxury goods like sugar and coffee are only valuable as trade goods.

Simply put, Haiti was highly dependent on international trade for the resources it needed, which meant that the embargoes from major powers crippled the nation.

Mike Duncan has an excellent series on the Haitian revolution in his Revolutions podcast series, which includes a final episode that summarizes the history of the nation up to the mid-20th century.
What works for me is trying to think like a stoic. What I like about stoicism is it is phenomenally objective and practical. Will being upset improve my situation? Will being short-tempered back to a person that was short with you be helpful in any way? If yes, then by all means be upset. If no, then you know it is an irrational emotional response and it is best just pretend it did not happen. Learn a lesson from it, but do not let it impact your mood.
>Just upgrade it to be on the safe side.

A big part of the problem is there is no reliably way to "just upgrade it" today in npm:

- `npm audit fix --force`, which is supposed to do that, is buggy and doesn't work

- There is no way to override a transitive dependency with npm (there is with Yarn though, so hopefully this feature will come to npm soon)

- Sometimes the fix in transitive dependency _also_ includes breaking changes (e.g. because it wasn't backported), and so updating it subtly breaks the logic

>Asking vulnerability databases to judge whether vulnerabilities are safe in devDependencies or not is a ridiculous idea

I don't think databases can do it, but what I'd like to be able to do is to be able to provide advisory that the way _my package_ uses a concrete transitive dependency is not affected by that vulnerability. Because as the package owner I _do_ have that context. I understand there may be significant issues with this approach though!
Japan's giant 3D 'Shinjuku cat' has taken over one of Tokyo's biggest billboards
Ways of reading without the influence of community
> When we asked the NYPD about the purpose of the truck spectacular, how many they’ve stationed, when, and where, they replied: “We anticipate releasing information in the near future.”

That's it folks, we've officially transitioned into a parallel universe written by Terry Pratchett.
This looks like Vivaldi supporting a recommendation made by a consumer advocacy group in Norway (Norwegian Consumer Council / Forbrukerradet), and boosting their report. You can read the original report at: https://www.forbrukerradet.no/wp-content/uploads/2021/06/202...
Yes. Or Instagram, or any other Facebook-owned property as far as I know, and I do check.

It's also why, last time I heard from a Facebook recruiter, I told him to make sure the next one to cold-call me had their general counsel's contact info handy so I'd know where to have my own attorney send the cease-and-desist. Seems to have had the intended effect, so far at least.
Comic book store files comic-book lawsuit
> No matter how you get around it, as long as you have property you are doomed to live a subordinate life unless you're very lucky.

I would be curious to hear an elaboration this point.
It sounds like npm needs a mitigated and irrelevant flag, these flags should include an explanation field.
Security teams would also have to accept this as a solved/fix status.

For projects you own you'd have to flag each dependency path though, because for example, one dependency may not have the input for the regex exposed to the end user, while another dependency could.

Maintainers of libraries should also flag the security issues, and an issue with these two statuses on them wouldn't be raised by default. Options should be available to list them though for auditing.

For more security critical teams/projects, a per project setting to alert about any issues the maintainers have flagged irrelevant or mitigated and you'd have to accept them before it it would stop alerting about them.
It's pretty unclear what the alternative to using AD is supposed to be if you need to run a Microsoft application stack.
I’m not sure if this is a stupid idea, but I think of all the energy people spend in places like LA to heat their pools even in the very warm months, while blasting AC inside. This seems like a pretty good opportunity for using a heat pump to take the cold pool water and use that as a heat sink for the hot indoor air. Or is there something about this setup I’m missing?
Capitalism requires advertising because it needs an accelerant of consumption. If consumption stagnates, a capitalist economy enters a financial crisis that can result in the system's overthrow.

I am for banning advertising on its merits, to slow the growth of consumption for environmental reasons, and because I believe capitalism is a harmful system that should be replaced.
I hope this issue is the motivator Microsoft needs to finally do something about their awful printing stack. Aside from taking it out of SYSTEM scope(!), the whole thing needs and has needed substantial modernization for a long time now (and hiding parts of it using the new Settings app is a very weak abstraction).

Microsoft like a lot of big techs needs to start rewarding people for maintaining/updating legacy stuff, rather than promoting/rewarding people for new shinies while the technical debt grows out of control. The printer stack which has barely received an update since Windows XP is a perfect example.
I've thought "X" would make a not-terrible gender neutral pronoun for English, or at least not as terrible as other ones. As an engineer, X is a good generic variable anyway, and "Bob went to the store and x bought some beer and pretzels" reads ok. Maybe this passport thing will make that a reality. Although it depends if X on the passport means trans/intersex or if it means "prefer not to say".
I agree with the author. Just like them, I only write code without any bugs that can be affected by the "vulnerabilities". I also never commit to upstream so others won't be able to edit my code. All my projects only run on my machine (which is of course also absolutely exploit-free and it's not connected to the internet).
The planet might not be unlivable, but the standard of living for any remaining humans might regress back several centuries or more. In addition, bootstrapping a new civilization will be hard given we've used up most of the most easily accessible energy sources.
A very well-travelled photoblogger I used to read once remarked that no country in the world loves posting paragraphs of fine-print regulations and signs telling you what you can't do, all over every wall, sidewalk, curb, and business entrance like the US does—IIRC only a couple others (I wanna say Australia?) even came close. Most have, comparatively, practically none, democracies and authoritarians states alike. After having that pointed out, I can't un-see it. We really do love it.
Note that `npm audit` runs _during every install_ so people who use it don't necessarily consciously understand what's happening. Many of them are beginners and have never used a security tool before (or even want to use it).
That is my favourite language version, although the original was fun to use, I never liked Wirth's quest for language minimalism.
Most meditation apps seem to assume the user is already motivated to learn meditation. What if you instead focus on convincing them that meditation can benefit them, and then guide them once they are onboard with the idea of meditation itself?

Motivation is the biggest barrier. Most people might wait until there are “problems” and turn to meditation (even then it might be hard to convince them), but if you crack the motivation problem, you could be on to something.
Why do you assume humanity will be able to maintain the current level of technology?
The original article pointed out that the Chinese were sercretive about SARS also, referncing this NYTimes article [0].

It seems like an interesting leap to assume the lab leak is the most likely cause, when there is so much precedent for natural spillover, even antibody sampling which seem to indicate that millions of people per year may be catching various coronaviruses from bats [1], let alone other mammals like civits, pangolins, etc.

[0] https://www.nytimes.com/2003/04/13/weekinreview/china-discov...

[1] https://www.vox.com/2020/4/23/21226484/wuhan-lab-coronavirus...
Doesn't Walmart do something similar when they open a store in a new area?
I'm not saying it's not evil, I'm just saying that if A enslaved B and B's family, it's perfectly normal for B to kill A and A's family. Is it legal? Is it good? I mean do you really think slaves care about laws or moral? It's brutal reality that we better avoid in one way or another in the future.
Replying to the GP here, because his comment is flagged/dead now.

> Scientifically I want to ask, is there gender fluidity? I spent a few hours last weekend reading scientific papers on this topic because someone here posted confidently Male and Female don't depend on organs.

Honestly, the terminology in that space is a mess. For awhile I think people were drawing a distinction between "gender" and "sex," where "gender" was more ideological (man/woman) and sex biological (male/female), but it sounds like the person you were talking about was conflating those things (which may or may not have been intentional).

But frankly, I don't think "is there gender fluidity" is a scientific question. It's an ideological/cultural question, even if you have scientific authorities using their authority to shape the discussion.
It doesn't necessarily solve RoAS tracking either. If you only have information on some % of your purchasers* and you optimize against that small, self-selecting sample, you may entirely miss other groups of higher spenders who just don't want to be tracked.

It might help answer the question "which campaigns are performing better relative to each other" as long as we assume that no campaigns are more likely to affect opt-in rates than others. It may even be an improvement over up-front consent seeking, if the theory is that a better checkout UX with less upfront annoyances results in better opt-in rates later on. But it doesn't really answer the bigger question of "is this the best place to spend my marketing dollars" vs, say, investing in campaigns/platforms that may have greater reach but less transparent funnels (comparing a Google Ad to a Superbowl TV ad, for example).

If you use this in a vacuum without any statistical modeling thought, you end up optimizing against algorithmic limitations rather than real customers. At the end of the day you're drastically reducing your sample size, and not in a representative, random manner. Your opt-in users are behaviorally different from the majority of people, and it wouldn't be a good idea to make big decisions based on their actions alone. They are essentially a cheaper focus group, with all the pros and cons of such.

(*Probably a very low percentage, if the recent iOS tracking opt-in is any indication. One analysis says <15% of users opt-in: https://www.flurry.com/blog/ios-14-5-opt-in-rate-att-restric...)
Crypto Celeb #102 – Taylor Swift
Just to expand on this, it's the sort of thing that sounds like it shouldn't work, because the competition can just wait you out and raise prices down the road too. But it can, because relative advantage is stateful and path-dependent. If you lay off skilled workers, cancel contracts, close factories, lose customer mindshare, and so on, that damage can be very hard to reverse even when favourable conditions eventually reappear.
Ok, maybe I remembered wrong. This makes things even worse.
Designing Our Serverless Engine: From Kubernetes to Nomad, Firecracker, and Kuma
Yep, specially when always deleting cookies and living in Europe.
That's not what the article you linked says, actually:

"A contingent of Polish defectors were given amnesty and granted Haitian citizenship for their renouncement of French allegiance and support of Haitian independence."

Update: I generally agree with your revised point, but for the sake of history I believe it's important not to needlessly exaggerate historical events. Let the events themselves stand on their own. My country has an ongoing problem with propagating accurate history, so I am aware of the need to get things correct.
You don't have to go all out doing exhaustive dynamic analysis. Data flow analysis gets rid of 99% of the most popular bugs (injection, validation, defaults, etc.). GitHub CodeQL can do this, and produces much better results than any static analysis tool I've ever used. Feeding this data back into npm (owned by GH) is just the next step.
It didn't strike you as archaic. That's a lie. Its appealing to you. And you know full well that a border guard finds utility here. This is a comment in bad faith.
The nanosatellite gold rush demands new routes to space
For what it's worth, Server Core installs don't have Print Spooler installed, and that's what Microsoft currently recommends as a domain controller. But since it doesn't have a desktop UI, it's a bit less liked by smaller entities. And of course, not all Windows Server roles support being run that way.

It's safe to disable Print Spooler on servers that aren't print servers, so I expect that to be a standing recommendation in the future. The other thing though is this vulnerability works against desktop PCs, which need the Print Spooler to print... However, you can set a group policy to disable remote printing to a desktop PC, which should block the flaw. Desktop PCs probably shouldn't be acting as print servers, so this is mostly a good idea to implement too.

So the available mitigations/attack surface reductions available here are plentiful... and honestly probably should just be best practice now.
I think it's because it's too ambiguous. Forward slashes are very common in written language (similar to apostrophes/single quotes), so users would a lot of escaping to do.
I imagine very few people would be interested in smart contracts if it became a defacto legal standard in the US and Europe that these contracts are unenforceable.

Of course this doesn't address contracts being written out of Russia or traditional financial havens, but how valuable is a vehicle which can't be used to move assets into or within the US or Europe?

I think the question of enforcement is the wrong one.
Many many reasons; loss of trust with employer, no connection with colleagues, no fulfilment in work, want something new, not feeling valued....
Modifying ECU software is a reverse engineering problem. And a very challenging one at that.

You could start with basic reverse engineering topics and work your way up. Get a copy of your ROM, get it loaded in a disassembler, and start reverse engineering.

The number of people who do this worldwide is extremely small, and most of the good ones do it as a business. They’re not sharing their business secrets.
Hot dang, flagged by users.
Yeah, same. Here's my reply to that poster:

If you're going to be scientific about this (which a lot of people have if you want to read their work) you have to start with the biological and observational data and build up from there. Otherwise, you're just taking social categories learned in childhood and trying to fit data to them.

Statements like "males are males" are basically the "Pluto is a planet" of gender. It's not scientific conclusion, it's asserting a belief.
Yikes I asked a science based question and got flagged for it.

And I'm pro LGBT+.

HN being curated.
Now, if a press release from a top univ is so wrong on something that is easily checkable, how accurate are other forms of news?
Living Computer Museum had two XKL-2 running TOPS-20.
Sure, some men were allowed to live as well as every woman who agreed to marry black men, but thousands were still killed.
> But these days it adds nothing to a border guard's ability to decide if they have the right document for the person in front of them.

If the border officials are willing to perform a strip search, it cuts the number of people that could use a given fake ID roughly in half.
Sorry if my comment seemed negative about the guy. Sometimes videos that have very marked signs like this one tickle my semiotics senses.
It's a highly appealing video and I just wanted to pause and think why, and what other things it was transmitting.
Humans do not perceive reality, ever. We have evolved sensory organs which send whatever take on reality is evolutionary useful. It is not "real".