skysight-inc/HackerNews huggingface dataset:
> If you've got a war story about a security-relevant memory corruption vulnerability you managed to introduce into a Rust codebase (that wasn't in straight-up `unsafe` code), I'd be interested in hearing more about it.

No, they're in unsafe code. Except Go where you don't get memory safety with some kinds of race conditions. I'm debugging a segfault in Rust today as it turns out. I guarantee it's in unsafe code. But I have some unsafe code. A database would also definitely have quite a bit of unsafe code.

It's a lot better than the situation in C. But rewrites always introduce bugs. And sqlite is so well written and tested, it's not a low quality code base. I don't think a rewrite makes sense here, it'd be better to improve the existing code to make it safer. That's my opinion anyway.
I have connections at 3M, let me know if you need any fancy materials :)
The magnet is usually used as a mitigator to turn off the device in case the device is doing something wrong like producing pulses too fast. There is typically RF communication that can communicate to the device and can often be used to turn the magnet detection off, which means that the device will not quit working when a magnet is detected.
Exactly don't ride in the Gutter and also don't under take stopped traffic aggressively
If you burn a greenhouse gas to create H2, and then X% of the H2 goes to waste through leakage, it's possible this process may contribute more to global warming than just transporting and burning the greenhouse gas itself, depending on X.

If X is very large, you could argue that the leak of H2 does contribute to global warming.
The Internet Archive has been fighting for 25 years to archive the web
So they’re like Silicon Valley companies which pick their names based on available .com domain names?
I built a SaaS product, but it's too early to say if it's a valid idea yet. What I did do was find 5 companies with the same problem, and gave them free, very early access with regular calls for feedback. Interestingly, several were very precise in their requirements, and others were open to my approach and ideas. It's important not to try and implement every suggestion you're given if it doesn't feel 'right', otherwise you risk creating a product that's inflexible for everyone except the customer who asked for it. Try and find a sample of people who will give you the time of day.
Even in the case of the delta variant vaccinated people who get infected are more likely to have reduced symptoms (if they have any noticeable symptoms at all). That means a lot less coughing up huge plumes of virus over great distances. Nothing is perfect, but in the end the vaccines increase your odds of not being infected while decreasing your odds of spreading the virus. Herd immunity may not be reached but we can drastically reduce deaths and serious illness. That's already a win for vaccines.
KeepassXC at least includes passphrase generation using the EFF diceware list. I use that for "security" questions.
Model S Plaid just had amazing reviews by pretty much ever reviewer.

Check list make sense for all manufactures.

> These things are built in tents by staff that is treated quite poorly, and you should be skeptical in proportion to that information.

People are obsessed with this tent. Its just a simple stable structure that you can build quickly. It changes nothing about the manufacturing line being in a building.

The tend idea was set up when a guy with 30 years of manufacturing experience from BMW and other German car makers. They knew what they were doing, and its actually the cars from the tend that improved the quality problems they had early on.

> Getting any of these things fixed after you take delivery is a huge PITA.

Most of these things can be fixed by the mobile service, they can do it while your are not even there. Often the fix it while you work.
Those guarantees are checked by the programmer, not the compiler. Mistakes and bugs can happen, just like in C.
Facebook's Most Viewed Article in Early 2021 Raised Doubt About Covid Vaccine
If it ain't in the headline it's "SO CONFUSING"
That is not at all how I experience the web today.

I also get annoyingly loud and flashy autoplaying videos...
Considering that lots of developer blogs these days also employ some of those tricks, I wouldn't be so sure.
Thanks. I can agree that the process sounds very secure, but I still can't agree that it's more private. Apple had and will have the capability to decrypt iCloud data, so why add the additional scanning on the phone, of all places?

> Unless/until I see technical documents showing why there is a privacy issue for people who don't have CSAM

For me, it's about trust. Why not just do the scanning on their servers? With moving the scanning to the client, they've crossed the Rubicon. Apple has built a generic, automatic reporting tool for content on phones, which to my knowledge hasn't existed to date. On top of that, they've set the example that it's acceptable to perform client-side scanning.

Today it's against CSAM, but what about tomorrow? What will happen in authoritarian countries? Prior to this, I believe Apple had the high ground and could say, "we don't have the capability to scan devices and exfiltrate data". But now, it's there.

Perhaps you may say that this is the "slippery slope" argument, and maybe it is. I hope it never expands to include other things. Though I have a hard time imagining that this doesn't get expanded in the future.
Buy Oxycodone Online Cheap
Configure Linux with One Liner
Why not take cheek samples?

Wouldn't a finger print be easier?

Why would you need to go to the store plenty of dna sequencing happens over the mail for ancestry and alike. Partner with them and offer discounted dna results.

Ideally you do this once and keep a card and use it everywhere.
The magnet is usually used as a mitigator to turn off the device in case the device is doing something wrong like producing pulses too fast. There is typically RF communication that can communicate to the device and can often be used to turn the magnet detection off, which means that the device will not quit working when a magnet is detected. This was used in the past for electric trains or other large magnets such as in factories.
The details in the avweb article are pretty damning... 500 AGL and one mile final is not even "near an airport," it's very obviously right in front of the approach end. Hard to imagine how anyone was operating a drone there without complete reckless disregard for safety.
Is this basically the em drive?
Horizon is one of the creepiest and most obviously objectionable product ideas I've heard from Facebook in a while. Here's hoping that no employer of mine decides to make use of anything like this!
Disagree about the progress; See Winget.

Classic bungling.
Today. They didn't want to do that yesterday. They will certainly want to do something else tomorrow.

Apple has a history of modifying devices that people bought in ways they didn't want and could not change (like putting a non-removable News app on their computers), but the CSAM episode shows Apple is willing to do a lot more, and more importantly, explained this to users who didn't care about the past abuses.
Not sure if it's your intention here but it sounds like you're saying Tooze only knows about fiscal policy because he's written a book on Germany in WW2.

Apart from anything else he's written probably the best book on the 2008 financial crisis and the Eurozone crisis.
I'm assuming he's referring to companies like Lockheed Martin, Raytheon, etc...
It's not a 0.1% death rate. Over 1.6% of US confirmed covid cases have resulted in death for example. To get a 0.1% death rate you either have to assume there is 10 times more unreported cases (in which case everybody in the US has had covid once or multiple times already at this point) or claim stupid shit like people with comorbidites were going to die then anyways.

Please don't spread misinformation.
And what really annoys me about Lattice in particular is that they shut down their community forum and now there is basically no way to get any form of support when using a free license.

A while ago I found a bug in Lattice Radiant that produced broken PLL configurations. I reproduced this and confirmed that it doesn't happen in their iCECube software, but had no desire to argue with their support about why they should even look at it when I'm not paying $$$ for the software...

I permanently switched to the open toolchain and never had any serious issues since...
I would actually write to trek about that. The shop here in SF seems pretty solid, but I don't currently have a Trek bike, so I might be wrong. I agree with you on the analogy, but I'm pushing for the apple-store parallel. No serious computer nerd would use an apple-store as a serious place to maintenance their laptop, but novice to intermediate computer users would, even if they have to go back a few times.
Epistemic Trespassing (2019)
Starting Display – getting to the first milestone of Apple-1 on breadboards)
It never seemed this bad in my experience. I've been out of it almost completely for a few years, so maybe it took a sudden turn for the worse.

> explosion of tools you need

I only have tools for my bikes, and so far, they've all needed the same tools, and I like to tinker. Maybe the low end in brand name bikes doesn't change much.

> the press fit bearing

You must mean the headset?

I've put what must be (maybe tens of) 1000s of KMs on a low end aluminum Trek frame from 2010 and it's still fine. That includes quite a few complete Ontario, Canada winters. It should be replaceable with the correct tools, although I do agree pressing it out might not be the perfect solution.

Lots of automotive parts are pressed in and out, though, and somehow they do it without breaking anything and throwing it out. You have to be careful.

One thing we definitely lost with the fork and handlebars was the ability to adjust it a bit. Now if you want it higher, you need spacers instead of just raising it up. Except then your fork is cut and it's too late anyway.

The modern headset should probably be stronger, so it's got that going for it.
> LEO have been wearing them for years

So in other words, your expectation is that we'll be wearing masks for the rest of our lives?
Every time I’ve achieved domain admin on a pentest, it’s been predicated with local privesc.

Your opinion is dangerous, professional negligence.
The usual suspects – Lockheed Martin, Boeing, Raytheon, Northrop Grumman, etc.

https://en.wikipedia.org/wiki/Top_100_Contractors_of_the_U.S...
You can't say it looking at the US, but I think it's hard to find fault with the strength of the initial lockdowns in France or Spain or Italy.
Years ago I wrote a rust program (pre 1.0) that linked to a python library that a co-worker wrote. We got deadlocks. Turns out we also were linking the system OpenSSL which internally uses python to deal with ca-certificates and the GIL was the culprit. So that's a why.
Who cares? What use is measuring the objective performance difference between two solutions if no one cares about the difference? That’s why I’m talking about the actual performance requirement.
Unbelievable. If you run windows lock your machine in a vault.
I wonder where Elon Musk would be without Twitter.

Still wildly successful, but man that platform is an amplifier.
The Linux community is incredibly diverse, some are nice and helpful, some are assholes, some just want to be left alone to do their work.

Generalizing the whole community from reading some forum posts is pretty unfair.
I’m old enough to remember when we didn’t know who was infected and who wasn’t infected.
For those wondering, Carmack founded the now defunct Armadillo Aerospace (as well as being a well known video game developer).
I had been meaning to google how to do that... thanks for saving me the time :(
I'm pretty sure I've seen sci-fi movies where they get around this with a fake layer of skin applied and engineered/stolen blood with the desired DNA.

Biometrics are never perfect. Sometimes they can be forged (even something as simple as a printout of a human face looking in a camera), other times you take advantage of a tech vulnerability to feed the desired biometric data in directly without needing to produce anything physical at all.
I am looking at a bike for commuting and as this will be multimodal - that means a Brompton which is well over £1200.

Oh and trying to find one in stock is a nightmare in the UK most be even worse else where.
Xanax 2mg bars online without script
This was exactly how I was able to break out of an unprivileged user account in Windows XP, except it involved setting a timer with `at`
Every single set of predeployment briefing for US troops includes local body signal briefings when appropriate, such as the thumbs up example given, pointing with index finger, using the right vs left hand for certain actions, bowing, and anything else the State Department and/or CIA has recognized. Very few people in these briefings remember them, mostly because there's another thousand things being blasted at you that are arguably more relevant to survival and success. I say this to agree: Mossad would definitely recognize and brief people on this, but retention of training can never really be guaranteed.
EWG is a source of misinformation: https://www.theecowell.com/blog/a-case-against-the-ewg
It’s a feature, not a bug ;)
Never buying another razer device after I recently found out that the user agreement allows them to collect all the keystrokes from my keyboard and send them to their company -- you know, so I can customize my keys' colors.
Physically? Basically never. Practically? Dozens of times a day as I machine hop using my USB hub in my monitor.
I always put my GPA on my resume. I'm always hoping somebody will mention it and nobody ever does.
Would note that the report found 21% reduced risk of infection in required mask use for students vs optional. Not considered statistically significant because the confidence interval included 1.0. (CI was 0.50 - 1.08)

One could argue that an increased sample size would yield a statistically significant result, and on the flip side another could argue that the effect size would be minimal if you need a larger sample size.

The rebuke, of course, is that even one extra case could kill a loved one that the kid would spread disease on to.

Personally, perhaps reframing the argument that one should wear a mask at school so that they shouldn't have to wear one at home would be a more compelling argument, but I suspect many would disagree..
I guess I'm not seeing from that quote how they're anti-Yosys/SymbiFlow. Are you saying that they just aren't as helpful towards the open source FPGA tools as they could be? Lattice still seems to be more open towards these kinds of open source tools than Xilinx/Altera by far. Yes, Lattice should probably be more proactive in actually working with the open source developers, but baby steps, I guess.
What is that supposed to mean, except don't trust the product being rolled out?

The factcheck word twisting is getting out of control.

But if anything, this distinction is worse, because instead of saying don't trust a controversial product, it's saying don't trust this controversial product because you shouldn't trust the/this government promoting it.

And that's largely what made this, or magnified it, as a political issue: the broader acceptance of saying it's ok to distrust the government depending on what politician is speaking.
Optimizing hot paths is already done via PGO (https://en.wikipedia.org/wiki/Profile-guided_optimization).
> If they have lost all their devices it would be like if they lost all citizenship paperwork

If you're running something like a phone company in the US, millions of the people you service probably aren't citizens. If your process is "longer, generally in person, process involving reference verification and a waiting period", then your competitor will get those customers instead. Prepaid plans first became very popular in the US in part because they do not require bank accounts or SSNs.
Yeah, an awful lot of drivers seem to forget that¹ I have the right to the entire lane, even as a cyclist. If you don't like it, you can use the other lane, if there is one, to go around me. If there isn't — tough! Am if I am occupying the entire lane, there is almost certainly a reason for it — like an upcoming left or because there isn't sufficient room for you to pass. Because if there weren't, fighting with a car is not high on my list of priorities: I'd much rather scootch over, give you room to get by so you can speed of into the sunset and I can have an empty road to myself.

¹IANAL; in the jurisdiction I'm in, but my understanding is that this is common
It's not a one dimensional problem though. There is a lot of interaction between the various systems in a human body.

To keep with the programming analogy, ya, you can see the SUM statement and that is necessary to understand, but what is it for? What is it's role in the larger program? Where do it's inputs come from? Where do they go? What effect does changing it have in other places?

I do agree our knowledge of genetics etc. will be much expanded soon. But we'll probably also make some nasty errors.
I think it's valuable to ask "stupid questions" like this. Can I try this out? Yes, but without looking at the page, I estimate that it'll take me 30 minutes minimum to get rust downloaded and installed, and figure out how to build the project. That's not something I'll do on a short break from work, for example. If somebody has some experience with the project in, then I'll be satisfied with that for now, and maybe enticed to try it when I do have the time. I'm gonna guess that there are quite a few lurkers with the same question, some curiosity, and not enough time or motivation to answer it for themselves immediately.
Can you provide citation on this?

Edit: I’m genuinely curious about it, as opposed to accusing you of lying.
That is not what it shows. The overall cumulative price change from 2003 to 2021 is just shy of 50%, yet the Military Spending went from $437B to $934B. Taking a smaller portion to support a desired statitical result is not scientific.
Basically just a marketing fluff interview. Would love to see lattice ditch their shitty tooling and dedicate time to developing yosys and nextpnr. Nextpnr especially misses crucial features.
> I think they'd have had a more powerful statement if they dropped the whole parenthetical.

I don't think you're the target audience. I gather that stuffing as many buzzwords as possible into a sentence is lot more meaningful to many these days than the semantic content of a sentence.
Didn't y'all vote for having extra tariffs a while back?
I think you're reading too much into this. Specialized stopped selling bikes on Amazon for the same reason Apple (as well as other high profile brands mentioned in the article like Nike, etc.) doesn't use Amazon as the primary retailer of their products - because it's an unnecessary middleman. Specialized is enough of a big, premium brand name that they can drive people to their own online shop directly. Online/DTC sales is inevitable in the bicycle industry, just like it has been for most other consumer products in the past decade, and prior to the pandemic Specialized had made a huge push into online sales to compete with the likes of Canyon (which was a bike company founded to take advantage of exactly this market gap which for whatever reasons the traditional brands were slow to get into).

The online model is also amazing for consumers as well (not to mention small indie bike manufacturers). Instead of choosing between maybe 2-5 bikes that might match my basic preferences and be in stock at my local bike shop, I have dozens if not hundreds of models to choose from made by any manufacturer around the world.

Sure, shops that do bike maintenance are important, but none of what you're saying here explains why any special interventions are needed for them. Won't the demand of more people using bicycles, and needing them fixed, be enough to keep these maintenance businesses healthy? I think bicycle advocates are much better off focusing on getting bikes to more people, and then improving cycling infrastructure to make it safer and more accessible to average people in everyday situations. The number of bike mechanics available is certainly not a major bottleneck that is keeping anybody from taking up cycling today.
I use Darktable for almost everything. Except for a few occasional UI freezes it's amazing. Some samples of photos I have taken and processed in DarkTable

https://dheera.net/photos/dancelight/

https://dheera.net/photos/lashioroad/

https://dheera.net/photos/wintermongolia/

https://dheera.net/photos/jinghangyunhe/
Meetups Everywhere 2021: Times and Places
Or others. Especially the heavy load to hosiptal system if one get sicks. There are two forces in live - self preservation and passion for others. Left and right coexist in one. That is the fundamental issue in life.
Actors Working as Protestors
> you could go one more cycle of exponential growth, doubling every n weeks/days

I'm not sure a big percent- of people is prone to hard covid. I tend to believe the majority of people has already went through it asymptomatically/easily and so will the majority of those who still hasn't.

Exponential growth in positive tests doesn't imply infinite (limited only by the size of the population itself) exponential growth of severe cases or deaths.
Is this about the design patterns or the A*? Design patterns are a mix of techniques to pay complexity make code extensible that usually will not ever be extended and workarounds for the deficiencies of a specific family of languages. An example I posted about previously is that you could spend hundreds of lines across a dozen files implementing double dispatch, or you could use dramatically less if you aren't implementing it in terms of a language-provided dynamic-dispatch-on-the-first-argument-only primitive.

It is nice to write code that can be understood by the next reader. To explain what our invariants are and what we are up to, we have comments.
If it pumps their stock, why would shareholder be not happy about it.
It's a quick read - you can bang it out in two hours, and it's totally worth doing!
I'm at the age where I should start taking better care of my skin, but when it comes to reading up on the science and then translating that into deciding on products to buy, my eyes just glaze over. Did anyone put together a simple list of scientifically supported products that I can smear on my face?
Does that mean you have to temporarily install Windows or plug it into a PC with Windows, turn off the lights, and then go about your day with Linux?
Time is faster near mass and slower in motion
1 inch clear steel bushing SC with ceramic SC spin in vaccine mag.box at 50 mps. Time is slower 500$186000 the sloewer
"game developer"... He created a couple of small time indie titles : DOOM, Quake, with a hobby company called ID software