skysight-inc/HackerNews huggingface dataset:
Are these parsing exploits connected to JPEGs? I don't know for sure, but I can understand how this could be a can of worms.

The JPEG core format is complicated, but JPEGs in circulation today are simply nightmarish. They can include XMP, EXIF, and ICC data, plus a good dozen of other extensions that may actually affect how the JPEG is displayed. For example, knowing if a JPEG contains CMYK data depends on an Adobe extension with is about twenty years old. These extensions are in use today in images published in the web. So, just to display an image, one needs a parser for the image format, a parser for ICC, a parser for XMP, a parser for that obscure Adobe extension from twenty years ago, and so on. Often, each of them has its own library and represents decades of developer time. It's a lot of space for bugs and exploits.
Is this a ShowHN ?

It looks nice, but I don't feel safe using untrusted pickle weights of pretrained models, as they can allow for arbitrary code execution.
Interesting how one group (children in school) are trying to fake a positive result while at the same time another group (club and party goers) are faking negative tests.
There are because proving innocence is very hard... That is why more pressure needs to put on the Legal System to only convict on an actual "beyond reasonable doubt" standard, unfortunately today some juries seem to operate on more of a preponderance of the evidence or worse "ehh he did something wrong" standard

Personally I believe the 4.1% estimate to be pretty low, and it one of the reasons I strongly oppose capital punishment, I simply do not trust our legal system enough to give them the power and authority to kill people
> Nicholas - We had this family doctor came around and we knew pretty well actually what they were. I mean, we looked in the book the very next morning when Alastair started feeling ill and Charlotte was already ill. It was so clear from the photograph that what we had eaten, it wasn't a cep. It was themushroom called cortinarius speciosissimus which some people call the deadly webcap apparently. It had a rather comforting skull and cross bones underneath it, with a little caption, deadly poisonous.

https://www.thenakedscientists.com/articles/interviews/nicho...

I feel bad for the guy -- really, so, so bad -- but you have to be really confused to mix up a bolete with a webcap.

Webcap:
https://www.first-nature.com/fungi/images/cortinariales/cort...

Porcino:
https://lovelygreens.com/wp-content/uploads/2014/09/cep-porc...

Porcini don't have gills! This is like mushrooms 101.

Doesn't this kind of prove the rule? I feel like most of the cases of people getting sick from mushrooms are cases like this.
This has the potential to be one of the most attacked IPOs of the century. It will be interesting to see what happens.
Why would you start criminal deals if you had a robust case? That is a direct contradiction fully aside from the fact that the "institution responsible for upholding the law" directly bend the rules here.

Sorry? Can you elaborate here? Do you think a justice department should use falsified evidence? This needs explanation because your country and party will be made responsible for such reactions and it might lead to people voting someone you couldn't imagine being president.
This essay and your last point really resonate with me. I've been surprised at the extent to which raising reasonable concerns, as a preventative or cautionary exercise, becomes equated with sabotage by some. I can think of projects initiated by colleagues that I would not have started because of obvious issues, but that I was nevertheless supportive of because I felt they were worth trying ("I wouldn't do this because of X but if A wants to try I'm on board and will help because if it works it would be good"), that failed, and then I ended up salvaging and cleaning up, but then was accused of sabotaging it from the start.

In my those situations, it was accompanied by many other operational and management problems. Specifically, failures of communication and certain persons' perspectives being allowed to drown out all others the further you went up the administrative hierarchy.
It looks like that doesn't happen for me any longer on Android or Web UI.

Maybe I'll reevaluate switching again, thanks!
I think there is a difference in what the post you replied to was implying. "Leased but offered for sublet" means the leaseholder is actively trying to offload that space, but there is a ton of additional space that is currently way underutilized because many people are still at home, but the company hasn't reached the point of trying to get rid of their space yet.
Model View Controller doesn't really mean anything in 2021. It might have meant something when the term was first coined, but everyone has such different ideas on what it means it's not a useful term anymore.
"I don't think lazy devs that create buggy software should be charged with a felony"

Does that apply to developers of an airplane's autopilot, insulin pumps, and other stuff that gets people killed?
About Food Allergies
People are missing out on a very enjoyable past time because of fear mongering.

It's subjective that people would find it enjoyable. Even
of all the past times one can do, there are similar ones, like birding, hiking, gardening, etc. We're not short on past times that, even in the worst case, won't even leave you vomiting.
I haven't heard that, despite reading Craig Murray's reporting of the case daily. Murray said the MSM turned up on the first day, didn't bother to write it up, and he never saw them again.

Can you substatiate that "forbidden access" claim?
Here is the uk version:

https://www.gov.uk/government/news/uk-and-allies-hold-chines...

UK and allies hold Chinese state responsible for a pervasive pattern of hacking

UK joins likeminded partners to confirm Chinese state-backed actors were responsible for gaining access to computer networks via Microsoft Exchange servers.
I love the solarpunk aesthetic, but hasn't Roger Dean been doing this since the 1970s?

https://duckduckgo.com/?q=Roger+Dean+art&iar=images
In the US, we might not even need to tax sugar. We could try just ending the massive subsidies for it (and corn).
Outlawing the the theft (and publication) of classified information in the public interest puts investigative journalists in a difficult place. One could say it's a 'keystone' of free press and, hence, democracy.
It's not one 2 hour interview though, it's usually a 5 stage process if not more
Firefox sends an easily identifiable user-agent string with every request.

If businesses want to operate on bad data (analytics that depend on JS), that's their fault.
Is rust cross-compilation really is straightforward as just installing the target triple and then it "just works" (including linking and C FFI compilation)?

My understanding was that most people were using "cross" docker images for "cross-compilation", because setting up native actual cross-compilation was quite involved.
The article says it was a temporary drivers permit. This is what you get in the US while you're learning to drive but before you have a full license. It's usually just a piece of paper, and you can't drive alone in the car with it.
We just opened signups for Cuttle, our browser-based 2D CAD project. Our beta community has made some cool designs for laser cutting, vinyl cutters (Cricut), pen plotters, and CNC.

The 4 points on the homepage are what set us apart from existing design software: live modifiers, reusable components, parametric design, and scripting. And being able to compose those elements non-destructively.
I agree, I think most photorealistic art lost most of its appeal when color photography came out.

Maybe there's a brief moment of "I'm impressed with how much work you put into this" but for that to happen, you kind of have to see the work being done.

I think that's why impressionism has such staying power, impressionists realized that your brain doesn't need photorealism. They were panned by their contemporaries who were focused on photorealism, but time has proven they were onto something.

Even now the impressionist-style neural nets don't get it right.
WILDS: A Benchmark of in-the-Wild Distribution Shifts
Honestly, if you're going to put out a manifesto as a PDF, at least take some time "layouting" your design. The one advantage of that format is that you control the aspect ratio. Every font is permissible, everything is absolutely positioned. Using a generator to create it is cringey. Show the art that's possible. Really sell the format.

FWIW I deliver PDFs daily as an art director; not ideal, but they work in most cases. There's certainly nothing rebellious or non-commercial about them.
Really underrates how significantly more nicely simplex tiles than Perlin. With Perlin you have to use MUCH larger maps to get patterns that do not look repetitive.

The continuous gradient function is also extremely important for 3d graphics. The surface may look fine, but the normal of Perlin noise has giant discontinuities between tiles.
Grew up in a country where no coca-cola was available. The sweets were given to kids only on special occasions.

Now as an adult I am happily consuming great amount of Coca Cola, however never developed a taste for Americanized supermarket style sweet treats (Oreos, etc. )
One other very similar path is to start with domain modeling. Figure out what all of the facts, types and relations are in abstract terms before you write a single line of code. Excel is exceedingly capable at this type of design work.

I see abstract domain modeling combined with practical engineering constraint solving as the foundations of the discipline. Being able to simultaneously operate in abstract academic terms (e.g. database normalization) while also considering things like cache lines and latency between networked participants is how the magic is done.
For me all my readers (I have multiple on my phone) all can't open the file for some reason.
I was once in this position, but decided to continue through with the "right" answer anyway. Even though the interviewer was adamant that he was right (as, of course, was I), we briefly stopped the interview and made some Google searches to get to the truth.

I could ostensibly argue that I got the job not by telling the interviewer what he wanted to hear, but by doubling down on the right answer and showing that I had the capacity to prove it.
YAY! Excited to launch on HN. Happy to answer any questions from the marketing side of things. :)
A window on a 1000 ft tall building is definitively not a fire escape. Large buildings like this, whether residential or commercial, have purpose built interior fire escape paths. I couldn't say whether the commercial version of this is 1:1 substitutable for the residential one, but come on, the fire plan for any modern building over ~10 floors does not rely on windows.

Edit: Also, the fact that a non-operable window, or even a window too small for a person to fit through, will usually suffice to meet the bedroom/window requirement gives the lie to this "fire escape" idea.

Edit 2: Correcting myself here, for residences without automatic sprinkler systems, two means of egress (could be a window or doorway to the outside, could be a doorway to another part of house) is a requirement for a bedroom in the International Residential Code. There is a separate requirement for certain levels of light (natural or artificial) that can be satisfied by an inoperable/small window, which is what I was thinking about. In any case, all the commercial buildings in question would have automatic sprinkler systems, these fire escape requirements just wouldn't apply.
Brief investigation suggests reflow is a super-clumsy, ultra-coarse-grained view mode that is implemented by few clients, is not easy to access, is not well known, and is vastly inferior to what you can get on the web, especially as it’s basically text-only.

In Adobe Acrobat (and I’m guessing Adobe Reader): Choose View → Zoom → Reflow, and it turns everything into one column of nigh-unformatted text.

(Word looks like it may support it, but that could be more that it’s converted it to a Word document in some way and reflow-like functionality falls out of that naturally, though I imagine the tagging would help with the conversion; and someone in this thread mentions something called “Book Reader” supporting it.)
Most municipalities and or HOA's will have limits and restrictions on tanks. If they are portable tanks then it will likely be covered under whatever rules for grills already exist, but larger installs will have a different set of requirements.
Heck, even PDFs produced by Word (or comparable FOSS editors) are so much better (except if you've done it incorrectly by "printing" it) than this particular one.
> The ideological left, ideological right, and the people who are more interested in reasoning through difficult problems.

This is a gross simplification that ironically lacks logical rigor. As long as you live in a society and have opinions about how it should work, you have politics. The two dimensional left/right spectrum is less than helpful. The quadrant model that includes authoritarian->libertarian is slightly more useful. The “politic free” group you’re speaking about are presumably the classic center-right libertarians. It’s definitely an ideology.
For completeness with regard to unspoofing, it should be demonstrated that post-test application of the buffer does not reverse a truly positive test.
If we are adding comedies, surely Life Of Brian deserves to be on the list? Highlighting the absurdeties of dogmatism in both religious and secular contexts.
I sent the MMM guys/gals an email according to https://wiki.openstreetmap.org/wiki/Lacking_proper_attributi...
> After covid, most people in tech simply refused to go back to being forced in an office full time, and would simply quit their current job in favor of one that accepts remote

“Most people” is a huge exaggeration. The numbers support a very slight increase in job churn from around 1% to 2%, but that includes people who simply took higher paying jobs and moved on to something else. The number of workers who “simply refused to go back” is extremely small. It wasn’t a huge movement like some headlines claimed.
Agree on both scores!

The thing that stood out for me in The Mission was its dramatic depiction of the power of repentance (i.e. a genuine change of heart) which we saw when Mendoza (de Niro) finally put down his burden at the intervention of the very people he'd persecuted.

In A Man for all Seasons it would have to be the Thomas More's famous replies following Roper's “So, now you give the Devil the benefit of law!”

https://www.goodreads.com/quotes/7515521-william-roper-so-no...

Funny, though, we still think goodness can be manufactured by the passing of laws instead of by changes of hearts.
And Microsoft ACTIVELY went against Android manufacturers to get licensing fees a decade or so back, so those that didn't want to pay are much more likely to have a hard ban on exfat in place that will take time to overcome even after Microsoft opens it
At least in talking to friends in the US, we generally say "gas", "electric coil", "Electric flat top", and "Induction" if it was important to draw a distinction. I haven't encountered anyone who said "Electric" and meant "induction". Granted, induction hasn't really caught on here yet. Lots of older people I talk to don't even know what I'm talking about. My friends who are in a position to buy a stove are generally buying induction, though.
> In my time working with PDFs, I've found that generating them in ways that can be read with the most popular PDF readers is cryptic and difficult, and even parsing the ones made from the most popular creators is hard.

Both pdf readers on my phone can't read the pdf, so this is definitely an issue.
It's also extremely slow.
"Vboxsf fixes for 5.14.1"?
> The same job with Google pays 2-3 times less than in the US..

Is that the case? (a) How does Google justify that internally? (b) Doesn't it cause a huge amount of ill-feeling internally? (c) If that is so why are there people elsewhere in this thread saying that FAANG jobs pay very well in London?
If this catches on, there will be "JS in PDF" in no time.
You think the government is what is keeping you from being able to afford a house? Is the government responsible for most of the job opportunities accumulating in metro areas causing people to move to cities, driving up demand and therefore value? Is the government responsible for the sky high salaries of FAANG and Silicon Valley unicorns that are also driving up prices in most cities? Or the fact that salaries haven't kept up with increases in cost of living? If you think the government and taxes are responsible for the weakening of the middle class, you are sorely mistaken.

The government is far from efficient, but you have roads right? And fire departments and public utilities and basic protections like the fact that a company can't pay you by giving your coupons that can only be used at stores they own.

> hey have zero accountability for spending
Zero accountability, really? And you think bitcoin, the cryptocurrency that has had wild swings in price caused by a few unknown actors, has better accountability?
WeWork has always been propped up by a large flow of investment money.
Investing in NFT Blue-Chips
The point of it is to be a self-contained package. You still need hardware to read it, but not a server. In theory at least, once you have it, it's yours. (of course the commerical ebook vendors are trying to spoil that.)
Find someone to play chess with in Los Angeles
I was quoting your 2 hour claim, but the fact remains: You need to propose better alternatives if you want progress. It’s not enough to simply complain. Companies can’t just not interview candidates or hire people based on whoever claims the most experience on their resume.
This has been true for a long time. Does it mount it r/w or read only?
> That’s my boring story of entitlement.

Damn straight. Call me a soulless corporate drone but I completely understand AT&T here. Sometimes you need to drop old and unprofitable services.

With millions of customers, you can't afford to cater to everyone who wants to be treated as a special case. There are genuine special cases that need the attention, and "but I like my phone" is just an example of a modern Karen in the wild.

Times change and we must change with them.
This is a good lesson in why LC style interviews are so popular. There are generally only one or two correct/optimal answers that an individual could code in 20 minutes. There is limited ambiguity as to the task to be solved for both the interviewer and the interviewee. There is easy calibration across multiple interviewers as a set of boolean progressions points - did they solve the problem? did they need hints? did they present an optimal/correct solution? The edge cases/traps are likewise known to the interviewers for quick calibration.

The alternatives I've see boil down to these trivia style interviews which come down to simply memorizing answers the interviewer deemed important/correct. The most rediculous cases include obscura such as "what would you do if [X debugging tool] stalled [Y application process?" or "what would you do if you saw a server with high IO time?"

There are many versions of correct answer to these, but odds are your interviewer has a specific one in mind. In a real discussion of these events there would likely be back and forth on root cause/severity/solution, but you simply can't have back and forth in an interview situation. The starting impression will always devolve towards "this person doesn't know what they are talking about".
got to learn*
Look, you could be right in... usual case.

But we speaking freaking NATO here !!!!! Do you attach string to hand granade and hand other side to your adversary ? And then argue that someone pulled it ??

Microsoft Windows and Microsoft Exchange is SYNONYM to "security HOLE" ! So tell me - why customer NATO _choose_ to use this ?
^ This

I am going to make a weird, but IMHO apt, comparison to Type 1 Diabetes. T1D is an attritional disease caused by the pancreas's inability to produce enough/any insulin and the list of complications is long and deadly. As someone who has lived with the disease for decades what makes the disease particularly insidious is immediate effort versus delayed impact. The disease affects everything...every single part of every single day. Eating, sleeping, exercising, traveling, finances...everything. And to be on top of everything is extremely effortful. However the impact of not taking enough insulin, of not checking blood sugars frequently enough, or living with high blood sugars, is delayed. Today's transgressions may not be punished for decades. It is no shock to read about poor therapy adherence when the effort is immediate (and constant) and the effect is delayed (and therefore hypothetical). I see the same issue - immediate and constant effort coupled with long term hypothetical effect - with protecting one's privacy. Obviously one should do the right thing. But many won't.
At least it looks more beautiful than terminal-only Gemini sites.

https://en.m.wikipedia.org/wiki/Gemini_%28protocol%29
Everybody happy! I bet you would get mighty popular.
That constant push to always update everything, not going to help here. Hacks are updated in step with ios. $hell on earth...
"Error establishing a database connection"

XML now needs a database.
Oddly, I don't see 3 years from 20y+ ago as History, as I've still got nameserver IP addresses and domains in my head from back then that are still up, but it's giving me the sense of how a lot of what we think of as history are minor events used as synecdoche (when a part is used to represent a whole) to represent an era.

I took for granted that a 3 day concert in a field gets called the Woodstock Era and that the ideas attached to it were somehow important, and now 2 years of post cyberpunk bubble riding is being used as some kind of a foundation for meaning. That certainly puts that in perspective. :)

It was an inflection point of some kind, sort of marking pre/post-internet in the culture. The story of doing what we were all doing without a sense of the impact it would have would be entertaining. I worked at one of the early ISPs as a teenager in about '95 and was in my early 20s when the dotcom boom happened, all after spending a few years playing in industrial bands and after raves went commercial, and y2k created a sense that if you were going to do anything, you needed to do it now.

What can we learn from it? To me it was a story of co-opting and gentrification, where you had a small community of hackers scaling their bbs and fidonet services into ISPs, the last years of subcultures (as a thing at all) throwing their final parties before they got absorbed and homogenized into the internet. It was the beginning of a new abstraction, where I think culture became unmoored from physical relationships and (as predicted by po-mo theorists) is mostly simulacra.

To use that era as a reference waypoint, I'd say we've reached peak credulity in regard to virtual, simulated culture that originates on the internet, and I'm optimistic the pendulum will swing back.
> if an ID card isn't considered valid for voting

If you showed up to vote with a learners permit, you would get some funny looks and then be shown to the voting machine. Nobody asks you for ID at all. That's what the current political controversy is about – whether to even require any ID.

It's also a total non-sequitur from this thread.
Just like Co-pilot is the end of the GPL-ed code?