skysight-inc/HackerNews huggingface dataset:
NPM Package Steals Passwords via Chrome’s Account-Recovery Tool
This is a mind-bending revelation.
That's lovely from the perspective of a historian 200 years in the future. But it does not nothing to alleviate the pain of people living in the present. People whose prospective employers comb over their embarrassing past. Or bullies. Or any other number of evildoers whose life is made easier by unfettered access to indelible information.
So, how do I write a Kotlin Symbol Processor (KSP)?
>Let me ask you this, if you are going over the speed limit or drunk driving and crash into someone else is that an accident or intentional?

An accident. Accidents can occur from reckless or negligent behavior. That is not the same as intentionally hitting another car and the legal concept of “criminal negligence”[1] covers this exact distinction.

> Most crimes involve intentional conduct. For example, in some states, the offense of assault can be committed by the defendant intentionally using or attempting to use force against someone, as with a punch or kick…some crimes involve reckless or negligent, rather than intentional, conduct. The term "reckless" essentially describes a defendant's simultaneous understanding and disregard of a substantial risk of harm. An example is a defendant having previous DUI convictions and understanding that driving drunk can harm or kill people, but nevertheless getting behind the wheel while intoxicated and causing a fatal accident.

So in both a legal and common sense understanding of intentionality, it clearly is not.

> And why is it that everyone here is defending using the term "accident" by suggesting that car crash or wreck is not a correct description?

No one is saying crash or wreck are not also accurate. If you want to call it a crash, go right ahead, but you are objectively wrong to say that me calling it an accident is not a correct description.

> In drunk driving for example, you intently operated the vehicle impaired and caused a crash. If you drive over the speed limit you are intently operating the vehicle recklessly. We do on occasion use the term vehicular homicide when describing these actions...My point of contention is that "accident" assumes no intent or reckless behavior.

Once again, you are confusing intentional recklessness and intentional outcome. “Vehicular homicide, also known as vehicular manslaughter, is the reckless or negligent killing of another through the use of a vehicle.” [3] The resulting accident is still unintentional by both legal and common sense standards. The word “accident” does not assume no reckless behavior, and it does not assume that there were no intentional decisions that contributed to it.

[1] https://www.nolo.com/legal-encyclopedia/what-criminal-neglig...

[2] https://www.justia.com/criminal/offenses/homicide/vehicular-...

[3] https://www.justia.com/criminal/offenses/homicide/vehicular-...
This doesn't apply to CA, but in general it is a good idea for most of the world.

The vegetation there has been on natural cycles for years of burning hot every few years. Sure power lines start the file, but they will start anyway: large hot fires have always been part of the life cycle of that area. This is very different from the low brush fires that are a natural part of most other forests.
Yes. Greek is what I need to know support for.
True. Pricey but can be cheaper than having to rewire everything.
This is not an answer to the question.
Oh no, it certainly helps grandmas and the one-per-classroom public computers (China, 2008-). You get all the USB sticks coming in and out, and before you know it you get that one obnoxious virus that hides all folders and replaces them with a .exe of the same name.

And yeah they do boot from a readonly C: with some magic to make it appear writable per session. But re-infection is quick, especially when you have extra writable data partitions.
My understanding from the OPs comment was that IBMs failure to cannabalize it's AS/400 market led to the failure of it's PC business. IBM chose to stifle it's own product to keep a more profitable product alive and as a result IBM's PC business failed. That sounds like exactly how things should work in ideal free market capitalism. The idea isn't that every business will choose to make better products to deal with competitive pressure, but that those who don't will die.
> Only 6% of the energy output will be neutron radiation,

Then you still have few megawatts of neutrons! More than in the most power dense fission reactors, but without water to protect the reactor parts.

> which will mostly be the lower-energy neutrons of D-D reactions.

2.45 MeV. Which may be better, or worse from the capture, and transmutation side.

On the bonus side, it's just enough to fission U238! It may make sense to just to run it to burn U238, or possibly Th232.
University of Utah costs 23k per year in-state with a total cost of 27k per year including indirect costs. Out of state is 43k/yr excluding indirect costs.

If you looked at this 5-10 years ago your numbers were probably right. But interest rates are low and borrowers can borrow far too much money.
How long have you worked there, and how long has it been this way?

The company has been under investigation for a long time and known it. Of course you've been subject to an oversized response: the company wants to portray that clearly they've always been ""woke"".

They know that a single new incident right now, during this lawsuit, will cost them dearly.
OpenAI Abandons Robotics Research
In my experience, raising prices might have a small short-term effect, but if the product is good, sometimes you'll think it was overdue !!!

It has happened to my own fees, and I still should raise them (so I totally understand the fear behind it).

Plus, the United States has significant inflation now, which you aren't used to, but in other countries it's TOTALLY NORMAL to raise prices every year.
For Good Science, You Need Engaged Citizens
Everyone dies, that's life. I'm willing to bet that lockdowns kill more people through secondary effects than this stupid chest cold coronavirus and we just haven't seen all the data yet

And they destroy lives, and are a major human rights violation

The way the West has given in to this totalitarian strategy promoted by the CCP-controlled WHO is truly chilling
WebKit for Linux
That still doesn't help. Unless you 100% tow the party line in whatever sub you're on you will get inundated with hate.

Try telling any car sub that Toyotas can break or that Germany's automotive regulations are even slightly over-bearing and see where that gets you. No matter how narrowly you scope your dissent from the local norms the platform rewards everyone dog-piling onto the dissenter. There is simply no room for conversation on that platform and that drives out anyone who doesn't extremely align with whatever the local opinion on a given sub is so eventually all subs become filter bubbles almost completely dominated by one set of views and you basically can't have any meaningful exchange unless it's ten levels of comments deep where the masses won't see it and crap on it.
This is very valuable information if true, can you provide some sort of references?
they will generate this much before the payment is even processed.
Indeed! We really like the idea of making the employer pay for it. We think it makes it a better benefit if the employee doesn’t have to pay.
This is the classical squeeze of the employees, between management and vendors, neither of which have incentives for improvements of software due to costs. So it is in many cases up to each customer to discover all bugs, and often even specify(!) technical solutions to a vendor that maybe even forgotten the domain, mix and misplaces their branches (yay, new bugs!) and require handholding and escalations to get through to. In management's eyes, this is of course all problems with employee laziness: That employees aren't fighting enough of their windmills. Documentations of testresults and bug statistics go to /dev/null. If you're really unlucky, you are expected to lobby for others' targets, but not your own. Good times.
I think you use an opening switch to divert the current in the magnet into an external load. And yes all the conductors in the magnet experience strong forces; some 60% of the mass of ARC is the stainless steel support needed to resist JxB forces.
Robot Therapists? Not so fast, says Talkspace CEO
ImmuniWeb Discovery Summer Update
I also go without restaring the repl for weeks, but there are plenty of situations where you need to restart the repl:
adding libraries, servers binding to ports, making sure you have no temporary edits, etc, etc.

The whole 'reloaded workflow' is a workaround to the slow restart IMGO. It works well, but there is a learning curve, especially coming from languages with fast edit-compile-run cycles such as go.

I've also worked with scheme, and having a repl up and running in milliseconds is really nice.
This is where the maxim of open source being 'free as in puppies not free as in beer/lunch' comes from.

I started my career in open source and still strongly believe in FOSS tenets, but enterprises are looking more to de-risk their projects and platforms.

Risk is reduced when you have a vendor you can hold accountable for issues in the product, hence making proprietary solutions (and sometimes open source but wrapped in enterprise support solutions) the only viable choice for a business.
Shaping the restaurant industry with the help of technology – Popmenu
But they are hired by and paid by politicians who know smokey the bear and don't care at all about the modern science of forests. Not to mention courts regularly block their attempts to control the forest (ironically often by lawsuits brought on by environmental organizations) As such they often are not allowed to do the right thing for the forest even though they know what to do.
Not unique to K8s - you can get the same with Ansible and VMs, Terraform and Nomad, etc.
OP was talking about someone making the argument, not that it would be affirmed. That's what I was referencing, fwiw
You need to remember the context when this study supposedly took place. "Production" used to have a literal meaning -- producing physical media. 100x was a reasonable number to believe in that case even without extreme situations like a mission to Pluto.

I first learned this in QA training. It's been decades so I don't remember if 100x was mentioned. They listed all the people required to fix a bug once it had gone to production. Off the top of my head that included:

- Customer support handling calls from customers -- possibly thousands of times. This isn't necessarily part of the cost of fixing the bug, but it's part of discovering a bug in production.

- Some combination of managers and product managers prioritizing the bug and scheduling programmers to fix it.

- Programmers finding and fixing the bug.

- QA validating the fix.

- Writing an installer for the fix.

- QA validating the installer.

- Producing the fix.

- Shipping the fix to effected customers -- which may be all customers.

We were being trained to do QA, so we compared that to the cost involved when QA discovers a bug. That was essentially just the cost of us writing a bug report and programmers fixing the bug.
Interesting observation! There are 100+ startups in the world trying to help with on-demand pay! Most of them have a very similar UX/UI.
> The problem is, is supposedly, upvote = adds to the conversation, downvote = detracts from conversation.

>

> In reality, upvote = I agree, downvote = I disagree.

Maybe Twitter should go all the way back to the Slashdot model, and let people vote up and down on "insightful", "funny", "normal", "offtopic", "redundant", "interesting", or "troll", etc.
"Guns don't kill people. People kill people."

"Spyware doesn't spy on you. [Other] People spy on you."

Guns are a much better analogy than cars.
One of my minor disappointments with Go, considering the time it came out and the UNIX heritage that it descended from, was that it didn't prioritize the *at() functions. It's difficult, if not virtually impossible, to write secure code with the "traditional" path-based system because every time you do one thing, then some other thing to a path that has some sort of security implication, you've written a TOCTOU problem if somebody can wedge between those two things to change some critical aspect of the file.

It's hard for me to blame programmers for not using these functions more when hardly any language properly exposes them. But since nobody exposes them, nobody's aware they should use them.... chicken & egg strike again.
Dunno. Will John Berryman or Randall Jarrell, or Anne Sexton, or Breece D'J Pancake?

Given that more readers are likely to have heard of Plath than of the four just mentioned, I'd say, No, not really. There's a reason that we remember Plath and Stevie Smith better, and that is their poetry.
Implementing ICMP in Rust
I really like the poetry of Sylvia Plath, the powerful, but sometimes cryptic imagery and how she plays with language, the use of alliterations.... Sorry, that's very generic things to say about poet, but there's something in her poems that resonates with me - not necessarily on the level of content, but in how she writes - and right now I can't express better what it is.

Maybe a bit off topic, but can anyone recommend other poets, which someone who loves Plath might like?
> We should recolor the pieces with neutral colors

If only! Clearly we need different chess skin colors so that everyone can identify with their chess pieces. I think five skin tones [0] should cover everyone.

[0] https://emojipedia.org/emoji-modifier-sequence/
Indian-American: An American citizen whose family came from India.

American Indian: same as Native American.
I admit I opened this comment page looking for the comment "and then there is Toxicity - SOAD <YouTube link>"
I'm not sure I understand your point. Yes, HashSet uses HashMap internally. But that's an implementation detail. I could have a Set<Foo> without knowing what the implementation is. If it's a TreeSet, things will work fine (as those use Comparators internally, and those don't usually rely on hashcode). If it's a HashMap, you can be boned without ever knowing why.

IMO people are aware of the "mutable hashcode" issue when using maps, because you have to think about what the key of a map is when you're defining it, which is a good opportunity to remember that Foo is mutable. When you're using a Set, there's no key, only a value, which can sometimes be used as a key as an implementation detail, but there's no mental trigger.
What were your personal experiences?
What?? I've never met anyone who thinks that. Personally I think it's a very hard standard to beat. I rarely see a document with a non standard font that wouldn't look better in computer modern. Especially for math.
I've been looking into this a little. It's cheaper if your not using batteries and are tied into the grid. This might be necessary anyways depending on home layout and appliances. Your existing electric panel should need minimal alteration since they typically put a power management switching box in (forget the real term) similar to some generator setups, plus other things like an inverter. That will determine what sends power to your main panel and if any electricity is sent out to the grid.

For example, my 2 story house doesn't have enough roof space to fully run solar. This is in part due to the fact that everything is electric - heat pump, stove, water heater, etc. So it would make more sense to sell it back to the grid rather than use a battery since I need to be tied into the grid anyways.

Personally, I would want to own things that are a significant part of my house, but other people may feel differently. I decided not to do solar because there is not enough benefit to it in my situation. The grid is increasingly moving to renewables since they can bid the lowest. This will continue to push prices lower, thus reducing the incentive for private individuals to assume the purchase, installation, and maintenance costs (or lease costs).
> And the proposed solution doesn't fix that. Most of those people don't have a problem with unexpected expense once a year. They don't budget and are short on cash every month. So now imagine Bob needs money halfway through the month. He takes out 50% of his pay. He uses is for immediate needs and than has to live at 50% of his pay for the next 1.5 month.

I think the idea is that it helps people avoids predatory payday loans. If Bob needed 50% of his pay for an emergency, he could go to a payday loan and end up spending a whole paycheck or more just paying it back over time.

The solution is government regulation and societal safety nets, not this, but if one’s government doesn’t fix the problem, there’s not much you can do besides this.
A million times this. And it's true not just of Facebook, but all other companies that provide similar services. It's a mistake to treat such services as if they are in some way permanent or under your control.
You're missing Drupal, one of the largest open-source CMS' in the world.
Damn dude, relax. You on retainer for Nintendo or something?
Hey HN!

We recently launched SellApp and wanted to share it with the HN community.

SellApp is a simple way to sell digital products online. A digital goods seller can spin up a storefront in less than a minute and start selling instantly, while we automatically take care of all the difficult parts — delivery, checkout, payment methods, security, and more.

We built SellApp with a small (remote) team of 3, in a little less than 4 months from start to finish (happy to elaborate more on how)

What makes SellApp different from competitors:

1. Simplicity; Unlike competitors whose interfaces overwhelm first-time seller of digital products, we decided to keep our interface as minimal/simple as possible.

2. Payments; where other storefronts tend to custody funds and pay sellers out after 7-14 days, we enable sellers to receive earnings instantly.

3. Pricing: Alternatives either charge a high monthly recurring subscription to start, or take anywhere between 8% to 25%+ in commission per sale. It's completely free to start selling on SellApp, with no fees being taken (though we'll introduce a 3% fee per sale in a couple months)

Happy to answer any questions and go more in-depth on the technical side of things.
The article hadn't specifically discussed rng period but I see the linked code [1] uses an implementation [2] with a period of 2^128-1

[1] https://github.com/openjdk/jdk/blob/4927ee426aedbeea0f4119ba...

[2] https://en.wikipedia.org/wiki/Xorshift
I have heard this expression for a long time, at the time it was very logically true(ish, the number is inexact), no study needed.

Now with most update and delivery mechanisms it should be studied.
Walk to Brilliance
Homogenous user behavior leads to monopolistic situations,

i.e. Lots of people using a product that works for them..
If there isn't any "critical infrastructure" which can be damaged nearby the fire, smaller intentional burns can keep fuel accumulation low.
Win. Defender July Update-Will delete legitimate file from famous copyright case
It's not boy cry wolf because the victim made no claim. Someone committed fraud making a false claim and attributed it to him.
There is much redundancy in windows. But it's redundancy that things about edge cases like these. One could even edit it if one wanted to. It'd be nice if Microsoft had a nice and easy front end for it. https://thegeekpage.com/how-to-edit-right-click-new-menu-in-...
Are these fonts available for use outside LaTeX? Seems like they're spread all over the place instead of collected in one repository.
Illuminating the Dark Age of Blockchain: Algorand [pdf]
Indeed… We think it’s a better way to get paid and we hope that one day everyone will get paid on-demand (worldwide). Let’s make that happen! ;)
Arguably, the issue with these features isn't their existence, since it's not even that hard to add them to a kernel, relative to the generalized difficulty of adding things to a kernel in general. The problem has been the need for mass awareness and desire for the feature, and that's what's taken multiple decades to emerge. It does no good for a kernel to have a security feature that only a vanishing fraction of developers care about and use.

(And I say "vanishing fraction" relative to the pool of developers as a whole; even if a particular subcommunity uses it extensively that doesn't make it a pervasive request. I can name subcommunities with all sorts of exotic interests that have not penetrated the mainstream yet, like the capabilities-based security community. Someday, when that emerges, we'll all point back to E as a pioneer, but in the meantime, effectively nobody wants it right now.)
Have to agree. Love how the default font looks! Latex documents are very pleasant to read.
If your OS defaults to interrupting your work with its update policies, it's doing it wrong. Just because you can delay it doesn't make it acceptable.
It's also another kind of echo chamber, where the majority can penalize you for going against the group-think both by downvoting your posts and by providing you with fewer votes.
Yes, that review is definitely worth reading. Thanks for pointing to it.
I wrote this a a while back, but I think it' still is true: https://russell.ballestrini.net/career-development-is-a-game...
Banning a Chess Video for using Black and White as hate speech is so insanely bad. I would love to see an experiment where the same discussion about the game is done but replacing Black and White with actually racist Terms.

> N-Word Horse to B4

> Superior Race Queen to C5

> N-Word Pawn beats Superior Race Pawn

> ...

And see if the algorithm flags that too. I´d bet good money it does not...

Just a few examples:

* https://www.youtube.com/watch?v=IcBCy5SYEps

* https://www.youtube.com/watch?v=hLOw_SzkRQ8

* https://www.youtube.com/watch?v=Kppx4bzfAaE
I had this "Enterprise sets the deadlines" experience just yesterday.

I delivered a spreadsheet with detailed information of how long it would take to develop each feature of the new module they wanted. It totalled around 3 months of development.

Fancy suit folks told me 3 months wouldn't do because sales promised it would be ready in 2 months. Then I was asked where could shortcuts be taken.

In the end we had to cut features that will certainly upset our client given their initial expectation.
Cybersecurity Through the Lens of Covid
I'm not super active on reddit, but I do frequent (mostly as a lurker) some subreddits from time to time, such as r/math, r/learnjapanese, r/history etc. I don't remember running into any sort of heated political argument in any of these subreddits. Of course, for other subreddits it might be different, but this is my experience.
Totally agreed. But, so what? Why do we need to have an impact on the galaxy or Universe? Why would that impact be meaningful absent our own value framework?

Even if we want to, it’s not safe to say people in the future will. Any truly significant impact we’d have would occur so far in the future that it isn’t safe to assume that our progeny will be recognizable to ourselves. They may have evolved significantly different values and goals.
WHO and UN should band together and punish China if they fail to allow more investigations. Simple as that.
You really want to use LuaLaTeX (if you don't do so already) and then you can just load any font on your system using

\usepackage{fontspec}
\setmainfont{Whatever your font's name is}

Especially you don't have to deal with installing old Type 1 fonts which is messy, especially when they are not included in your TeX distribution.

You can also follow the instructions in the catalog which for some fonts show how to use them in pdfLaTeX, but these days pdfLaTeX mostly makes sense if you want to submit to journals which do not accept modern engines and such journals probably don't allow you to change the font anyway.