skysight-inc/HackerNews huggingface dataset:
>How many mistakes does someone have to make before we start to suspect there might be problems with relying on that person's work.

There's a lot of legitimate criticisms about modern OS security, whether we're talking about Linux/Android, MacOS/IOS, or Windows. However, we can't ignore the scope of these programs. Supposedly Windows 10 is approximately 50 million lines of code and due to its overwhelming popularity it has almost certainly been targeted more often than all of the other OS's listed combined. I am pretty sure all of these operating systems are > 10 million lines of code.

Whose work are you going to rely on instead? The level of security in these OS's isn't equal across the board, but I assure you zero days exist for all of them and barring some kind of miraculous technological breakthrough, they'll continue to pop-up from time to time as long as they exist.

Suppose someone pulled off a miracle by making a security-focused OS that's easy for non-technical people to install and use and actually gains enough traction to establish a market share. If such a thing existed it would likely get lots of things right where others have failed, but they would also likely get lots of things wrong. It doesn't mean we shouldn't try and it doesn't mean we shouldn't encourage both old and new companies to try and improve the situation, it just means that its an incredibly difficult and likely never-ending task. Security is a process, not an achievement.
What would accepting a non-Amazon controlled crypto even do for them? The transaction fees for BTC are low right now but wildly variable, and would add another layer of complication to Amazon's systems. Amazon probably has the lowest transaction fees in the world, I would guess, based on the volume of transactions it has. It has credit card partnerships with a number of banks and issuers.

The speculative nature of accepting Bitcoin or another crypto is all well and good, but I can’t see shareholders super stoked to see the less profitable side of the business accepting money this way. If Amazon wanted to speculate on BTC, it could buy it same as any other entity.

Sure, if Amazon had its own coin, that would be interesting, but not only would that face the same scrutiny that Facebook's Libre faced (possibly even worse, given Amazon is the third or fourth richest company), for Amazon users, there is no clear incentive to use an Amazon coin versus a normal credit card or whatever local payment systems Amazon might use. Speaking as a consumer, I really don’t care about what payment method is most profitable for any of the places I shop. In fact, I almost exclusively use American Express, which has the highest transaction fees (obv. I have a Mastercard and a Visa for certain countries), because it also gives me the most value/best protection/rewards I enjoy. Hell, I have an Amazon American Express card that gives me 5% back on all Amazon purchases — so any Amazon coin or other crypto would have to offer me a better return.

I get the appeal in areas where Amazon isn’t as dominant as it is, in say, the US. But even then, I would think more basic logistical issues relate to storing and delivering goods would be higher priority than a payment method that has lower transaction fees.
I have had this feature enabled. Age restricted videos don't load.

(Example: https://www.youtube.com/watch?v=q4qWMcQfOCc)
True, but still memory safe, also Go has a race detector included which is really easy to use https://blog.golang.org/race-detector
TMS570 dual-lockstep automotive safety controllers are hardwired to be big-endian.

Their close cousins the RM57 line look like nearly identical parts that are little-endian. I believe, but cannot prove, that the only difference in silicon is a factory one-time-programmable setting (fuse).

"Why would anyone want to build a BE machine?" In this case, they are trying to gain market-share from big-endian POWER microcontrollers.
Ask HN: Why is fuzzing important for security?
They’re not tackling it with an end to end model - all of the ML at Tesla is used for perception (and some prediction - I think there’s a cut-in prediction head running), which then feeds into traditional robotics algorithms, like I described in the parent comment.

If you listen to any of AK’s talks he only really talks about perception and he’s basically said that right now none of their planning is based on ML models. This is backed up by what reverse engineers have found in their Tesla’s.
Totally agreed.

That said, there is no also no reason at all not to have specialized police who do actually have mental health and de-escalation training.

But again I agree - there should be other options for government/public interaction.
The researchers call it "dream-like" and it is, in the sense that, like a dream, the neurons are stimulated and activated as though sensory input was occurring despite there being no actual stimuli.
Can you do a security exploit with a concurrency bug although in golang? You may corrupt data, but can you cause remote code execution with it?
If one of the devs purchase one, and it runs mainline linux, it would be a good candidate!
Why would a substance abuse treatment provider agree to treat a customer if their insurance company will not pay the provider directly?
That sounds…inefficient. Push code, ping QA, they test find issues, ping you, you fix, ping QA…
Hash List
I think you mean bullshit and pig swill.
I always wondered how our brain is pre-wired to recognize 3D objects right after a birth, but this article is saying that eyes are giving fake image-like input to our brain so that it can perform "pre-training"? Does this imply that our brain is truly a blank slate if these initial seeds aren't given?
The easiest way to be perceived as "doing something" is to spend money on it. Succeed or fail, you can still claim you tried. Much of the voting public is convinced that Democrats drink the blood of babies, so convincing them to look more closely and with skepticism is an uphill battle.
The 1991 Project (Economic Reform in India)
Abre los ojos.
I think the job posting was listed as being in the payments division though.
> we need to provide personnel to do that work, not pile it upon other professions as an unwanted secondary responsibility

There could be police who want it as a responsibility as long as they are trained and compensated. That is another possibility.
This article didn't link to the research article directly. Here it is for those interested:

https://science.sciencemag.org/content/373/6553/eabd0830/
IMO, this shouldn't be a TODO. This should be an #error based on the standard C macros for detecting endianness at compile-time.
We should take a step back. The location of the recording doesn't matter so much (though sometimes it does matter). The bigger idea here is that some interactions between citizens and LEOs are private matters and not in the public's interest.

As an anecdote, when my friend was the victim of domestic violence, she confided her history with her abuser to an officer, and that officer gave her very individualized care. Whether their conversation happened inside a bedroom, at a front door step, or at a public park doesn't matter. My friend would not want her abuser, her estranged family members, or anyone else to a hold of the conversation she had with the officer.
Why is that a massive product? Genuine question. The areas I could see that being useful don’t have significant Amazon infrastructure anyway (and that infrastructure would need to be built up for a coin to be valuable), and in the US, Europe, Asia, I can’t see the benefit of an Amazon coin versus any other payment form.

But I’m genuinely curious, why is this a massive product for anything more than a weird form of money laundering?
Fake operator overloading in JavaScript (2011)
Not my area of expertise, but people that claim to be experts suggest that global electricity generation is enough: https://www.barrons.com/articles/theres-enough-electricity-i...

My intuitive guess is your simple model is wrong, but I'm not an expert.
To the host it can matter
I was reading about Merkle trees today when I came across this other thing that I had not heard about before called a Hash list, and which I was looking for because I am doing some operations that may not require a full tree and where a list may be sufficient. And I figured maybe someone else know about Merkle trees but not Hash list, so that's why I am posting this, so that others who may have use for it can learn about it too.

To an extent I knew about the concept, having read a little about how BitTorrent works before, but I didn't know the name for Hash list and didn't know the details completely.
The numbering system was invented in India, but the particular numerals used for it in Europe (012345689) were invented by Arabs in North Africa. All the Europeans did with them was to rotate the "4" by 90°. This is easy to get confused about because of the subsequent conquest of North Africa by Europeans and the divergent Eastern Arabic numerals (٠١٢٣٤٥٦٧٨٩), which are what most Arabs use today. When you read about how Fibonacci promoted the use of Arabic numerals, adapted from the Arabs, it's easy to think that he must have been looking at "٠١٢٣٤٥٦٧٨٩", and that either he or some European copying his manuscript adapted these to the the "12345" forms you see in https://upload.wikimedia.org/wikipedia/commons/0/04/Liber_ab.... But if you look at https://en.wikipedia.org/wiki/File:The_Brahmi_numeral_system... you can see that he would have had to coincidentally adapt them back to more nearly resemble the forms in the inscription in Chaturbhuj Temple at Gwalior from three centuries earlier.
Who Writes the Rules of a Blockchain?
It doesn’t matter the percentage of time devoted to short term problem solving. If it’s a requirement for applicants to go through that process successfully then it’s a requirement to get the job.

The core argument is really simple. Ideal teams don’t consist of 10 identical clones of the ideal worker allowing the team to work 10x as fast. They consist of multiple different skills that allow teams to finish complex tasks more than 10x as efficiently as any one person on the team could. https://en.wikipedia.org/wiki/Comparative_advantage
When the chips worked they had better perf/gate, but Intel had a lot of yield issues, making the perf/$ ratio worse.
Ask HN: How to deal with bug bounty hunters
I operate a one-man SaaS. I have a dozen or so customers, and make enough money to cover costs but I’m years away from being able to live off it.

Every few weeks I get an email that goes something like this:

Hi, I’m an ethical hacker and I found some security vulnerabilities in your site. Attached is proof.

I expect a reward for this information, can you let me know how much you will pay, or should I share this exploit online?

———
Now, none of the issues are very serious, nobody has been able to access data they shouldn’t have, they’re usually small things about header, XSS etc, but nevertheless valid.

I can’t really afford to pay them, and buy I also don’t want to suffer reputation loss.

At the same time, I don’t k ow that it’s realistic to have zero security recommendations as pretty much any project I’ve ever seen has some… although it’s a worthy target.

Any recommendations on how to deal with this?

1. Ignore them?
2. Pay them?
3. Thank them and ask them to move on

I usually fix the problem and to (3), but it’s concerning behaviour that seems to be increasing in frequency.
I miss the days of weird phones and tablets with brand names I've never heard of with Allwinner SoCs in them. Such odd devices, so much fun to play with and explore. Rockchip based handheld gaming devices are about the closest to it nowadays.
The first stable version of the language is 3 years old... How do you expect to be taken seriously with such obviously silly statements?
A Detroit article from 1904 rails against city's crazy street grid
Actually it's simpler. People and organizations would just move to a jurisdiction where such liability laws didn't exist. Apple would move. Microsoft would move. Google would move.

And then the US would be forced to decide whether to accept imports of foreign devices and software (created under the no-liability framework) or to stay with homegrown technology frozen in time.

The best thing you can say about this proposed reform is that it would make a great plot for a sci-fi novel.
> Even more, how many times do we hire someone knowing they have made 500+ mistakes in prior work leading up to their application.

While i don't disagree with the point you're making entirely, I have made many mistakes in my career and i still get hired and i suspect you have too. Most people make mistakes, and still have jobs.

Realistically, people/orgs make mistakes. Requirements change. Expectations change, security practices change, etc.

Roman bridge engineers would likely struggle to build bridges at the scale and requirements they're built to in 2021 (miles long, tall, huge train weights, etc). Things change in technology jobs a LOT faster than typical NSPE engineering licensees' jobs. Its a different world. There are probably bridges under contruction today that were designed before the iphone.
Huh, how weird. How are those stimulis generated? Through the mother's eyes or brain activity?
link is a 404, should be:

https://www.palmbeachpost.com/story/news/2021/07/26/surfside...
Scary thing is if Google offered this as a free app, most people would happily use it.
Everybody wants more housing in SF, but building up doesn't increase the grocery stores, the roads, the parking, the first floor retail, the room on the sidewalk.

Everything outside the home will become more crowded. You can always shove more people in. The smart question is what is the maximum pleasant capacity? Look at New York, it's unbearable.

Meanwhile there's plenty of other cities in America that would love to have your company and its employees.
wasp.. white anglo-saxon protestant, good luck with that. i bet their main branch is 'master'. I'm not even going to check though.
Think about why countries have their own currency and don't automatically adopt some other country's money and you can start to figure out why it's advantageous to create your own coin. Historically it has been a huge problem for countries that let their citizens make their own money so they make it illegal. I don't know why that's changed recently but as long as it's legal companies will create their own. It really does become free money for the company.
Something about this reminds me of the 'Winning Ticket Hypothesis' in artifical neural networks: that some 'random' initializations prime a network far better for later faster learning. From https://arxiv.org/abs/1803.03635 - the abstract:

Neural network pruning techniques can reduce the parameter counts of trained networks by over 90%, decreasing storage requirements and improving computational performance of inference without compromising accuracy. However, contemporary experience is that the sparse architectures produced by pruning are difficult to train from the start, which would similarly improve training performance.

We find that a standard pruning technique naturally uncovers subnetworks whose initializations made them capable of training effectively. Based on these results, we articulate the "lottery ticket hypothesis:" dense, randomly-initialized, feed-forward networks contain subnetworks ("winning tickets") that - when trained in isolation - reach test accuracy comparable to the original network in a similar number of iterations. The winning tickets we find have won the initialization lottery: their connections have initial weights that make training particularly effective.

We present an algorithm to identify winning tickets and a series of experiments that support the lottery ticket hypothesis and the importance of these fortuitous initializations. We consistently find winning tickets that are less than 10-20% of the size of several fully-connected and convolutional feed-forward architectures for MNIST and CIFAR10. Above this size, the winning tickets that we find learn faster than the original network and reach higher test accuracy.

Are these innate patterns of activity priming mammalian brains in a similar way?
Russia has done it with natural gas in the last 10 years. The UK seemed like a great EU partner - until they weren’t.

Things change and over the span of 10-20 years, things can change dramatically. The life span of many of these decisions is 30 years or more.
Herbie Happened (2017)
Congratulations on your "common sense", but several highly publicized and actively exploited recent exploits against iOS required no user interaction:

https://arstechnica.com/gadgets/2020/12/iphone-zero-click-wi...

https://arstechnica.com/information-technology/2020/12/zero-...

https://arstechnica.com/gadgets/2021/07/clickless-exploits-f...

etc., etc.
I don't think brains are pre-wired to recognize 3D objects.

There was an example case of a blind man with cataracts getting it fixed at around 50 years old. People were curious if he would be able to know if a sphere was round just by looking at it without touching it.

IIRC - not only could he not do that, but he couldn't visually interpret shadows (saw them as black splotches - didn't recognize depth), and was confused why objects got smaller as they were moving away.

I think the human visual system trains on a lot of visual input data, but it typically happens at the baby stage where you can't really interact.
TSMC will have US locations, too - no one will count it as American.

This isn't about jobs, but control. GloFo can pull out/dismantle/sell any time.
I like seeing this, I’ve had multiple discussions about building something similar but always run into the same difficulty with convincing individuals to pay for this. I however see a great b2b idea in this because finding stuff in a company, especially a large one, is a complete pain in the ass and they definitely have the budget and willingness to pay a reasonable subscription price. The difficulty here is Google actually has a product for that in gsuite/workspace but they’ve let it languish on the vine. So the question there is, was it not something they saw being able to make money, or not able to make enough money for a company already operating on hundreds of billions in revenue? I kind of hope someone decides to find out though.
The largest fraud wave in history? Unemployment insurance fraud during Covid
In learning the Debian Packaging, I have a LOT more confidence in the Debian Packaging process, and a much better understanding of why it is what it is.

Debian packaging (the quilt format) will watch the upstream git repo and will error out if the repo being packaged is different than what is upstream. The only way to add patches is to put them into the "Debian/Patches" folder and explicitly put them in there.

In addition, one of the default CI pipelines for the Gitlab called "reprotest", which checked various environment differences to ensure that the package is reproducable.

The outcome of this is it is signifiantly easier to check that a downstream package matches upstream for the average person, rather than checking all of the source, they can look at where upstream points to and check if reprotest passes.
In a similar vein, I’m the author of git-self-blame: https://github.com/JacobEvelyn/git-self-blame

(Still among the best-commented code I’ve ever written.)
The Ideal Office: Concentric? (2012)
The shorthand is "if only" => "next time."

Key points from a good article.

Definition: "A counterfactual is a statement about how the world might be different now if something had happened differently in the past. It’s a kind of “alternate history” idea."

"Here’s the rub: a counterfactual cannot be a cause. By definition the counterfactual did not happen, therefore it cannot have caused anything. Only events that actually occur can be causes of other events. Causality should be stated in a form “Because X then Y”. The statement “If not X then not Y” is not an explanation, it is a kind of wishful thinking about how the past might have unfolded differently."

"When performing Five Whys it is important to avoid this counterfactual leap. Stick to the events that actually occurred. [..]"

"Try to reformulate the counterfactual as a statement about future prevention:"

1. If we configure file purging, then this won’t happen again

2. If we monitor for “volume full” conditions, then this won’t happen again

3. If we clean up files from old builds, then this won’t happen again.

These are useful statements. When formulated this way, they’re clearly talking about the future and not hypothesizing an alternate history. "
Showing my ignorance...

Is intel really competing with TSMC or with ASML?
(ASML make the EUV machines TSMC uses)

Why can't Intel buy ASML machines and do what TSMC does?
I understand there is a lot more that goes on around the ASML machines, but Intel should be able to do that bit right?
they are building one in japan
I believe the parent comment is referring to sending customers a tax form, not Amazon. Someone who bought Bitcoin for a dollar a decade ago and now buys a GPU with that Bitcoin would absolutely have to pay capital gains on the increased value of the Bitcoin as it's effectively liquidating it.
>I don't understand the dichotomy here.

Let's make it easy then: Without coal as a large % of base load they'd have to shut down a good amount of their manufacturing and focus on putting less EV's on the road until they could replace the base load lost from shutting off all their coal production. China is #10 on the list of natural gas reserves, far below what the US or Russia has. At their current consumption they are anticipated to run out in a little over 20 years. I do not think it is a viable strategy to throw tons of natural gas online and rely on Russia when it runs out.

Literally nothing the Chinese do with energy policy right now will appease the west. If they put in more hydro for wind/PV storage western press would print headlines about how the big bad CCP flooded over some villages and are destroying their environment.
Yeah, nowadays (expensive) bicycle riders thinks it's really smart sophisticated transport method and hobby.
> Also, Apple buys up huge amounts of the supply chain such that their screens, cameras, etc are better than basically anyone else's,

Care to provide a source? Last I heard, their screens are made by Samsung and LG, and the camera (sensors) by
Sony and Omnivision. None of these companies are owned by Apple.
No he's not, he even stated, that he is fine with coming back to the US if he is guaranteed a fair trail.

https://www.washingtonpost.com/news/the-switch/wp/2015/10/06...
It’s not that bad - its just an initial thing to setup then it’s pretty automatic for every commit
My first name is Dutch. It includes a vowel combination with no equivalent in English, although both long A as in Tanis or U as in "Tunis" (or Tuesday, which is far closer in origin) are close enough. And not (also valid) "Ee".
I suppose the closest might be the French "eau" for my "Teunis".
(the way I'm used to saying it almost has an almost silent "r" in it too ...)

I usually don't bother. People mess it up regardless, so for unknowns I'll use the "English" name of Tony. I hate it, but it's pronounceable by lots of speakers, including origins of several languages which also have trouble with other parts of my name. "Tony" works phonetically very well for a lot of people.
Someone with an IQ of 80 who's literally incapable of coding? Fail.

I actually worked with a developer who said their tested IQ was in the 80s.
Out of the literal billions upon billions of people who have walked this earth, you consider an age gap of 3 years to be an "extreme outlier"? We're not talking about a decade difference, really. I think there's better evidence out there than just this point. Look at how far the human record has progressed for the fastest marathon run by a human-- it's now faster than a horse!