skysight-inc/HackerNews huggingface dataset:
This is my primary concern. It will become a weapon to destroy the lives of anyone who is targeted by someone with middling or better hacking skills. A sort of digital “swatting” that makes using apple products a no go for anyone with cyber-enemies (one can’t opt out of Apple ID and apply security updates).
This is a solved problem.

[Y2K Programming solutions]: https://en.wikipedia.org/wiki/Year_2000_problem#Programming_...
On a visitor perspective, this seems undervalued. This is a 50% or more discount to the market-cap/unique visitor ratio of Twitter, Snap, and Facebook.[1] And all the stats I've seen indicate much higher user engagement and time on site for Reddit compared to the other social platforms.

The biggest issue is of course that their monetization is horrible. Like 95% lower per user than the other socials.[2] So the real question an investor should ask is whether this is fixable? Or is there something intrinsic to Reddit traffic that makes it difficult to monetize? Either way, Reddit should be throwing an insane amount of money and equity to get a Sheryl Sandberg like executive with a track record of juicing monetization.

[1]https://www.theverge.com/2020/12/1/21754984/reddit-dau-daily...
[2]https://www.cnbc.com/2019/02/11/reddit-users-are-the-least-v...
What Bugs Can You Find with Fuzzing?
Well, you don't always get to choose the area you get lost in :)

Source: got lost in another country a month later. In a city with the highest homicide rate in the world.
> "Nice guy? I don't give a shit. Good father? Fuck you! Go home and play with your kids. If you want to work here, close."

Ugh, no. This is terrible advice.
What software did you use to make it?
I'm usually terrible at noticing typefaces (especially when developing to a design). But now this has been pointed out to me, I can't not see it. It's tricky to focus on and I can see why people are finding it troublesome...
One reason to remove the features is if they started supoorting another format (HEVC? ProRes?) for which thir decoder doesn't yet support these operations?
Agreed. You can't blame this on testing only on Macs, because it's bad on my Mac too.
I feel the same way about my dev environment. I'm a Linux user with a propensity for customization, but my preferred bashrcs and vimrcs have converged on something small enough to write up from memory. It's a lot of fun to have a hugely customized ultra-productive setup, but as soon as you find yourself on somebody else's system, a server, a container, or whatever, it's not so fun anymore. The less setup you need in order to be comfortable, the easier it is to be comfortable!
That is odd to me too. Wouldn't many high-rise apartment buildings in a downtown corridor have more mixed-use/retail/office options as well as a thriving downtown area to walk to?
They forgot Linux, which started at 0.x and was at 0.99plX for a number of patch levels X before being released as version 1.

The minor numbers should always start at zero.

The major number starting at zero lets us express that the program is not released.

I.e. we are actually using 1-based versioning for the major number, and are reserving the 1 for the first stable release when the beta program is considered to have shipped.
The Internet also failed to refute the arguments of skeptics until one day it didn't fail and now several of the largest companies in the world are entirely Internet based and providing indisputable value.

Cryptocurrency offers new primitives that are unavailable in any other system known to man. It takes time to build up a backbone of technology that can take these new primitives and get them to the point where they can compete with established trillion dollar industries, but it is happening, and it's starting to happen very rapidly.

It's certainly true that crypto is full of snake oil salesmen, overhyped technologies, and culty communities. But the presence of those things doesn't change the fact that the technology is real, and that it can do things at a fundamental level that no other technology can do.
> You cannot escape Google/Microsoft/Facebook/whatever.

This is such nonsense.

There are more alternatives now than ever. Name any service provided by FANAMNGS (or whatever acronym we're using today) and there are many alternatives. Shit we even have viable alternatives to iPhones and Androids.

Now if you need AWS level quality of service, you're gonna have to use a service provided by a company that has the means to provide that level of service. The difference is, 20 years ago, that level of service was just not available to your average person/company.

If you're talking about social media, then yeah, social media NETWORKS rely on having everyone on the same platform. It's easier than ever to host your own Geocities equivalent, if that's what you wanna do for some reason.
Productivity was something I struggled with for many years.
At times I was the best employee, and others the worst. Have a tricky problem to solve? Or a complicated architecture. I was the right guy for the job. Need to build 200 variations of the same feature. I was horrible.

Chief problem being that anything boring was physically painful to me.

Pair programming helped a lot, but those gigs are hard to find.

Eventually diagnosed with ADHD.
Completely shocking to experience “normal” with medication.
I no longer take any medication (BP), but I can somewhat deal with boring stuff now, where before I could not.

Feels like I learned how to focus. The physical pain part is gone.
Reader's Digest (of all things) has an article about this that claims their traffic light name is originally an artifact of Japanese words for color but in the 70s the government actually shifted the lights towards blue to match the word. https://www.rd.com/article/heres-japan-blue-traffic-lights/

The traffic lights, they turn blue tomorrow
And shine their emptiness down on my bed
The tiny island sags downstream
'Cause the life that lived is dead
If they don't keep track of which matches are false positives, wouldn't it be possible to be extremely unlucky and pass the threshold with nothing but false positives generated by Apple?

This makes things worse not better.
Why not try, though? First and foremost, I think it's a good thing that designers are getting work. I also think huge "for fun" webapps are in a particularly advantageous place when it comes to pushing the boundaries of design, mostly because they have people on hand who can do it and who probably want to do it. Next, it's really a low risk preposition.

Maybe Office 365 needs to be conservative with fonts. Twitter can push boundaries, though. I wish they'd push boundaries more, ala Bertone or Memphis Group, but I guess the risks are larger the more you push the boundaries.
I think you could setup something like this on the fly too without root access. I’m not entirely sure, but a while back fly.io published [1] an article talking about how they use wireguard-go [2] to do something similar in user space. I might even try this too…

[1] https://fly.io/blog/ssh-and-user-mode-ip-wireguard/

[2] https://git.zx2c4.com/wireguard-go/about/
Show HN: Convey – Quality Public Dialogue
Hey all,

A project I've been working on for the past few months just entered the beta testing phase and, since HN with its insightful and helpful comment section is one of the inspirations, I wanted to share it with you!

https://convey.earth

Convey is a Communication Platform that Incentivizes Quality Content, Collaboration, and Discussion.

The two aspects that set Convey apart from the status quo are the incentive mechanism and the digest.

Incentive Mechanism

Unlike most platforms, authors pay per byte to post on Convey which incentivizes brevity. Similarly commenters also pay per byte to comment but half of the coins they spend is paid to the author of the parent post so quality content that generates collaboration, discussion, and debate rewards authors more than spam, harassment, and hate.

Digest

Each month, the posts with the highest yields are published into a digest enabling authors to reach a larger audience while readers enjoy quality content covering a diverse range of topics.

As always the code is open source and hosted on Github: https://github.com/AletheiaWareLLC/conveyearthgo

I hope you'll try it out and share your feedback!

Thanks,

Stuart
As you said, it is tweet-based. About a font on Twitter. The Tweets in the article show the font.
Wow, this is just really basic stuff in the secure IC world that you need to monitor the supply voltage for glitch attacks [0]. The glitch they are injecting is in the 20 us range which isn't even that fast. Whatever part of the chip you want to keep secure (the SP in this case I guess) probably needs a dedicated voltage regulator, preferably an on-chip LDO w/ a droop monitor on the output. I only skimmed the paper, but it seems like there is no supply monitoring being done that would cause the SP to bail out of its hash checking.

[0] https://ieeexplore.ieee.org/document/4595799
Too many to unpack here, but I'll start with this.

Repeat after me: digital friends are friends.

Personally, TikTok takes a very small fraction of my life (I go there when I don't feel I can do anything else), and I have many "real world" friends to interact with offline.

And I met some of them through social networks.

Question to consider for you: during the pandemic, when one probably couldn't see most of their friends and had to interact with them remotely, did they cease being friends?

Also, just an FYI, your comment comes off as patronizing, missing my point, and making a lot of assumptions about me.

And remember, there are healthier, less destructive ways to surround yourself with the content you love than writing such comments on HackerNew, trust me.
I'd agree when it's simple to do. Sometimes "fix a bug" leads to rewriting some code and the bug fix comes naturally - or more easily - with that.

For a contrived example, say a bug exists because a sort algorithm sometimes reverses the order of identical values. Fixing the resulting bug locally might involve handling duplicates with some extra logic, but changing the sort might result in fixing the bug as a side effect. I might argue for both because correctness should not be an accident, but we might change one fix to an assert rather than handling a case that doesn't occur any more.
The biggest problem is that their revenue per user is atrociously low compared to other social platforms. That money should be thrown at poaching as much ads talent as possible from Facebook or Twitter.
I dislike 360deg videos because there is always something happening where you're not looking, and you miss a lot. Using a VR headset doesn't solve the problem.

Cinema will never be VR. This leaves video games and simulations, both are expensive to make and play.

VR will never be as popular as a smartphone or a movie, it will always be a niche.

And the moment when every one has an oculus rift (or whatever headset) with a computer able to use it with enough FPS is far far along the road. So far we might turn in another direction before getting there.
They've also been hiring ML
Cool, that's exactly the type of thing I was picturing.

Is this used or packaged in any major Linux distribution besides ChromiumOS? I'd like to try out living inside this for a while (probably in a fullscreened VM) but CrOS is a bit too restrictive/unfamiliar as a userland for me to want to attempt it there. I guess Crouton exists, but I'd be afraid that Crouton would add an additional layer of impedance-mismatch to the VT that isn't there when just using it raw (like the kind you get when using tmux-in-ssh-in-tmux.)
Time to treatment is the most important factor in defining stroke treatment outcomes. Stroke outcomes are quantified at 90d post event with a metric called Modified Rankin Scale. The treatment strategy is defined based on the type, location, and severity. The two options we have for ischemic strokes (i.e.85% of all strokes) are TPA (clotbusting medication) and thrombectomy (catheter based mechanical removal of the clot). Each of the them has its advantages and disadvantages but the common denominator is that the earlier the patient arrives in the hospital, the more efficacious they are.
It's bad on Mac, it's bad on Windows. What the hell did they use to develop and test this where it looked good?
> When a virus scanner finds a virus, it alerts me and I can either quarantine or delete it. It’s up to me to decide if what it’s found is actually a virus, or a false positive.

This is also a bit superficial. If you are breaking the law, you can't decide by yourself whether you are breaking the law of not. That is up to the judge.

While you can quarantine or delete the virus, AV vendor is still getting all the stats. It is not maybe including PhotoDNA matches but cryptographical hashes are included for identical match. It is still perfectly legal to inform CSAM content against these matches, and we can't be sure if that has been made or not.

In case of Windows Defender, what if automatic sample submission is enabled? Uploading and storing a file makes Windows as cloud-provider for this specific scenario, and is required by law to report CSAM content.

Who knows if PhotoDNA is also applied into this content, but that hasn't been told yet? It is legal, there is no need to to tell that.
> If you subsidise housing to make it affordable (a market distortion in itself)

This didn't happen. What happened was an extreme lowering of the barriers to entering into a mortgage contract, such as minuscule down payments (which are back), NINJAs, and floating the extremely high-interest rates on those mortgages to volatile and completely gamed numbers like LIBOR. After collecting these mortgages into a bundle, they paid someone to declare them as safe as US treasuries, and immediately sold them on/started borrowing against them.

You can absolutely do this with crypto, except it would be even easier.
> And the other ~60% have behavior changes like twice the time not in quarantine,

I do not think that this has actually been quantified.
Detailing WeChat AI and Beijing Jiaotong University’s NMT System Architecture
How does the tagging feature work? Is it at the table and column level?
Talking to science deniers and sceptics is not hopeless
I think Uber showed the demand curve is there, given both the lowered price and lowered transaction costs. It is certainly possible that when the dust settles there exists a larger taxi/hailing industry than before, operating more efficiently.

> The individual driver has no buying power to negotiate
This is true for the full-time driver, and certainly uber drivers have by in large become this in larger markets. But where I am, most drivers are still part-timer that do it for extra income on nights/weekends. In that case, their capital expenditures are already sunk costs, and they just need fuel+maintainance to balance out, which they can probably deal with at lower margins.

One can certainly imagine a world with app-dispatched taxis (already here) that is more efficient, with burst capacity from part-timers. That is probably a world with more taxi usage proportionally to the population than 20 years ago.
I was hoping someone would repost this.

Saw it a while back and couldn’t remember enough to search for it.
Thanks
Big Ball of Mud Pattern
Whatever Happened to the Pirates of Politics?
This is funny and sad to me. We had SQLite in the browser[0]. I only did a little bit of work with it but it seemed actually pretty nice.

It was torpedoed because it was SQL-based (and not trendy "key value" and "web scale").

There was the whole excuse that the specification was "whatever SQLite does" and, therefore, not suitable for being a standard. There would be worse things than SQLite upon which to base a standard, all things considered. I still believe it was torpedoed because of lack of trendiness and "not invented here".

[0] https://www.w3.org/TR/webdatabase/
What they did say was that privacy is a human right. So they are, by their own confession, abusing human rights, albeit to protect another human right. But the irony is striking.
I dunno whether it would be considered hacking, fraud, or plain old theft, but if you hadn't returned the BTC, this would be a clear example of exploiting a bug for financial gain. if nothing else, the operator should have some legal recourse to get their money back. if it can be shown that you did it deliberately, I don't think it would be unreasonable to consider it a criminal offense.

of course, this is not quite the same as misunderstanding some subtleties in an explicit contract. for example, the mere fact that I did not understand an auto-renewal clause in a lease does not get me off the hook for payment. although I might have some recourse if the lease stipulates something absurd (eg, notice to vacate must be hand-delivered to office in antarctica).

crypto does not necessarily mean you get to do a complete end run around the laws of sovereign nations. what it might mean, if designed well, is that you don't have to depend on those nations enforcing things.
The moment you cross 10M items or 100 QPS then scaling such a system becomes non-trivial. Combine that with some additional features a typical company may want but won't find in the open-source libraries -- such as live index updates and metadata filtering -- and you have a good reason to look for managed solutions like Pinecone[0].

That's not a high threshold for any enterprise software company handling customer data or any consumer tech company with >10M users. Google, Elastic, and AWS thought so too because they all introduced (or planning to introduce, in the case of Elastic) vector search in their platforms.

[0] https://www.pinecone.io
Must depend on your device as the tweets are using Proxima Nova for me.

edit: although if I click into the tweets and view them on Twitter, it then uses Chirp.
Microsoft protests Amazon’s $10bn NSA cloud computing contract
Launched Protective.ai for developers (need feedback)
They need more than that for the sole purpose of making the mobile website experience as horrible as possible (and constantly iterating to make it worse and worse)
The font rendering feels broken on my Windows machine to me. Like the designer only tested it on a Mac and didn't account for how Windows renders fonts differently.
I'm not sure why utility frameworks are so popular. It seems like Sass solves most of the problems of vanilla CSS. Writing Sass is not only quicker and more powerful than regular CSS, but you can also create your own utility classes very easily with loops.

Moving CSS into HTML does not makes much sense either, as it's far stylistically cleaner to separate CSS and HTML into their respective files.

Plus, if you have two elements with the same or similar styling, re-writing all those utility classes over and over seems extremely cumbersome. Why not just write the class name and use it everywhere it needs to be used? .button or .button-primary is far simpler than writing out inline CSS over and over again.
> How do they come up with this?

You mean the valuation? It's a simple formula of ([money raised] / [shares issued]) * [total shares outstanding]
Reddit is increasingly forcing mobile users into the app, or to at least make an account. Presumably to improve monetization.
That doesn't make sense to me, why would a larger space allow for more CO2 buildup, if there is a connection to the outside?
A lifetime of suffering in the desert led me to create https://www.ihateaz.com
Google search led to arrest of cleared campaigner
I stared it for a good minute thinking maybe I wasn't being served the new font, but no, it's just so similar to Helvetica (Roman) that I have to deliberately look for the differences to tell. I compared Chirp and Helvetica side by side and the only significant differences in the characters themselves are in the upper case J, Q, and R, then lower case g and the numeral 2.

Am I missing something or is it just that I go to twitter so seldom that I assumed it was always Helvetica?

Edit: it seems it's not the font itself, but rather something going on with the rendering making it blurrier for some people than the previous typeface.
Selective enforcement should concern anyone who cares about civil liberties.
Curb usage is pretty big in a number of metros.
> When you say sitting at home in a virtual world, I think of online meetings, which could be improved by having a more real-like world

Are you thinking of Star Wars holograms but in VR?
This was my first thought, as well. They never draw any straight, solid line from flat promise chains to security. It's at best a "my preferred style encourages secure coding practices" form of argument, which is a weak form of argument, especially to put at the top of the page.

Their callback-based async code examples also stand like straw men. Use some utility packages. async. run-{parallel,parallel-limit,series,auto}.

When I hear complaints about error handling and callbacks, it's usually the opposite of what I read here. You end up with error-first parameters to every callback for every async operation. Linters like Standard will yell at you if you fail to handle an argument called "error". There's no chaining a bunch of promises with one `catch`, or wrapping a bunch of await calls in one `try`. The utility packages themselves take error-first callbacks.
Clickable link: https://convey.earth
I think its even simpler than that. They don't want to reveal any of their secret sauce through available source be it tipping off competitors to hardware designs or just revealing compiler optimizations they believe are valuable enough to keep as trade secrets. Why would they make AMD's job easier?

Intel's C compiler has always played games with non-intel x86 architectures compared to their own.
I bought onetwoseven.one for the sole purpose of sending one silly email as "root@onetwoseven.one" to somebody.

I'll probably get some real mileage out of it at some point.
Can it read email? I think that is the acid test for whether software is "done" :-)

https://en.wikipedia.org/wiki/Jamie_Zawinski
Same here. It's like all those sensationalist political / culture war articles that frame some out-there fringe idea as a mainstream agenda (e.g. "Curry considered racist"). Then you actually read past the headline, and it turns out some unknown blogger or tweeter was just looking for attention.

Anyone going purely off of headlines, and taking them at face value, would have an absolutely bizarre worldview by now.
There are roughly (I am not an expert in this) three things that make up a video file. A container format, then a video and audio encoding. MP4 is a container format. Think of it like a stream optimized zip file. Then inside this container, various video and audio codec actually do the work of compression their respective components. While MP4 is based on the MOV container format, I don't know if they are 1:1. So at minimum, all the contents would need to be unpacked and moved to the MP4 container format if the codecs were staying the same. That doesn't sound like what is happening here as that should be really quick. (If that's even possible).

That's why parent was asking about codecs, if the MOV has video in MPEG-1 and Google wants it in H.264, it has to reencode the video stream.
And then you would see a mass exodus of users..
They are using 4:2:0. You'll get no argument from me that 4:4:4 (or at least 4:2:2) would be nicer, but I don't see any major issues visually with their fairly high bitrate capture encoding settings.

Here's a mediainfo output for a Quicktime screen capture on the latest Big Sur release on an Intel Mac: https://pastebin.com/8SUZqMed

Edit: posted wrong output, fixed pastebin output to show the .mov straight out of quicktime (previously had a remux via ffmpeg)
The Awk programming language (1988)