skysight-inc/HackerNews huggingface dataset:
Why should Cloudflare (be able to) block any request containing “boot.ini”?
At the moment, you can test it right here, type it into the search box at the bottom. The string can be in GET, or in POST'ed text, anywhere. You don't even need an extension or developer tool to find out which sites use Cloudflare filtering, as you can simply append "boot.ini" to your User-Agent, and enjoy the results.

I assume that it's a common test file for path traversal exploits and checking whether server process has administrator rights, and that blacklist happened to be applied inordinately, but other questions inevitably arise. What else is in the blacklist? Who controls it, and who can potentially control it? How long would it take for this bug to turn into a feature, and allow blocking "freedom", "election", "warhead", or "Assange" on a scale that is already bigger than that of Great Chinese Firewall? Also, how can one use similar innocuous user-provided plain texts to cut back-end web APIs that happen to run through Cloudflare?

Finally, has something changed recently about putting all the eggs in one basket, and expecting a free lunch?
The UX and reliability sucks? I doubt that. Using Signal for years on a old iPhone SE (1st Gen) and a new Pixel 4a. Signal works perfectly and for many other people.
It is just funny when the local radio reports that WhatsApp has another outage. While Signal had only serious problems when WhatsApp changed it terms last time - too many new users. Sounds like "I had once a bug with it therefore it is bad and I know how to doge the bugs in the other crapy software...so the crapy software is better".
Altought one could say that "The Network is the Computer" kind of won out, in the jungle of RPC protocols that we use nowadays.

Part of Inferno OS lives on what Go took from Limbo, and Go still isn't capable of using dynamic libraries like Limbo did.
I find this fascinating, because Tesla is meant to be able to completely autonomously drive a vehicle, so it knows how to drive safely, so what you would expect is just running the self-driving programme and getting it to judge how safe the real driver's actions are - ie, Tesla saw hazard X at time T, driver responded at time T+delta etc.

That's what I would expect. Yet instead of this they've got something that could've been hacked together in 15 minutes by an intern.
Cloud Backups and Recovery – 3 Keypoints
Are you so sure about your timeline? Don't most folks place hippies in the 60's and early 70's?

That's my mother's generation. People my age are having grandchildren - I'm in my mid 40's. We dressed up as hippies from time to time, though. A lot of today's parents were born in the mid 80's to 2000, approximately (a few stragglers on either side). I really don't think this is the hippie generation.

I'll add that smoking pot is much, much more widespread than anything "hippie", even if someone takes on part of hippiedom as their personality. In fact, a lot of folks look to older hippies and laugh because they were wrong about it never being legal again.
I'm a fan of your delivery; "Unless I'm grossly mistaken about the feature set of Instagram" gave me a hearty chuckle.

Anyway, if you could spare me a moment of charity and suppose that Instagram _is_ directly responsible for teen suicides, why shouldn't we consider that equivalent to "literally killing"? I'm unsure if there's real value to be preserved in splitting these hairs.

If I'm "directly responsible" for fatally hitting someone with a car, then I've "literally killed" that person.
That was meant as sarcasm ;)
My point is that he's trying to shoehorn the "Love Languages" framework onto that situation, because the model is designed to encourage you to do that - it's the same thing that makes it sell. You shouldn't dismiss that as a coincidence, it's not as simple as divorcing that from the legitimate insights. The framework is designed to be a brain worm.

Here's a question: you like the framework. Have you ever seen a specific relationship be saved by it?
>If you don’t care about their goals, then the ethical decision is to quit.

What if I don't suscribe to your "ethics"? Sure, if you own the company I'm employed at, you can fire me. But you can't force your arbitrary ethical standard on anyone else in any other case.

>they’re offering to pay you in exchange for supporting their goals.

They're offering to buy my work in order to support their goals. Not making me care. I have my own goals and I only care about those. There is no benefits at all for me to care about their goals aside from feeling good about being a good worker bee who cares about the hive if I drank the yuppie corporate kool-aid (I didn't). Both the company and me have to make sure that our work agreement satisfy both their goals and mine, or someone is gonna be unhappy. There is a power imbalance in that relationship due to supply and demand of both work and workers, and I'm thankful I'm a skilled professional in that regard.

>I’m a professional and consider myself ethical and I don’t see a huge ethical difference between stealing and accepting pay for work I didn’t do.

Do you uphold the same ethical standard from the company you work for? In a market economy, the incentive of the company is to pay you as little as possible for your work. If they're able to buy your work for less and they don't do it, they will get run over by the competition who will get the edge. Is that unethical?

Ethics and morals are not based in anything concrete and are made to domesticate you. If someone is explaining to you what is good or evil or just, they're trying to make you behave in a certain way to their benefits. Companies that wants "team players" and people "having a personal investment in their work" want complacent workers that will do more for less.
Goldman Sachs, Ozy Media and a $40M Conference Call Gone Wrong
This is an important issue. If we talk about regulating tech, this is the most pressing one. I distance myself from all colleagues that help to implement such productivity surveillance. Do something sensible with your life, the money isn't worth it.
It's absolutely technically possible to drive a Mini in a snowstorm, just like any other car (apart from perhaps super- and "hyper-" sports cars with ~zero ground clearance).

Whether one can follow the common-sense recommendation not to drive in a snow storm is due to all kinds of other circumstances, approximately none of which is related to what brand of car you own.
I have been trying to deploy fix to a bug we deployed yesterday. I think they have stopped deploys as well. As the deploys are being rejected without any explanation.
Absolutely, so many tried to go about it procedurally and fought the language rather than adapt to its way of thinking.

Once you understand apply-templates though, it becomes much easier.
he has proven time and time again that anything with a keyway can be picked quickly and discretely by anyone with a little knowledge (and the sometimes the right tools)

While it is fascinating to watch LPL make short work of almost every lock, I think it is safe to say that his lock picking ability is on a whole other level compared to even a competent burglar. If LPL spends more than 30 seconds with a lock, it's probably going to be fine.
Hypothetical: what good is a court order if the only copy of the key is in a HSM with tamper protection?

I'm not saying that Apple does this. I simply don't know.
Self-gamifying doesn't work, unless you have a malfunctioning self-delusion detector.
interesting that the health care protest is in the same park my picture further up the thread was in :)

but I wouldn't say that's the only difference. indeed if anyone is still reading this, I'd say go look at the report linked above. the small healthcare protest this morning peacefully dispersed, but the end of the report contains footage of the group/protests that have been running organised skirmishes with police most of this week. that this group is out there organising mobile/running protests on telegram and the like (the groups were public and they were livestreaming as they did so if you want to know how I know) is a pretty important context for police actions right now.

additional context is that protests (and subsequent police presence) has historically been a relatively common thing in Melbourne, and obviously the current context additionally involves movement restrictions and gathering in group restrictions that have been put in place until the vaccine has been rolled out. current evidence suggests we are primarily supply constrained ATM in Australia/Victoria relative to absolute demand, and the government has announced targets and timelines for removing these restrictions once the people who want vaccines have recieved them.

Australia lacks an explicit freedom/liberal philosophy, and it's certainly been the case that authoritarian aspects have increased recently, but it seems like a stretch to say that we're currently on a march to fascism. especially given the additional subtlety that what little fascist movements there have been in Australia are paradoxically aligned with the current protesters.

to paraphrase a quote from one of the protesting live streamer: "look at the police trying to stop peaceful protests. all we want to do is overthrow this government!"

in that sense there's a lot of commonality/overlap between the current protesters and the Trump movement. And another additional context of interest is the number of members on the twittersphere commenting on all this who are clearly Americans or aligned with American politics/media rather than locals. It's bizarre in that there's even been Trump flag wavers at some of the protests :/
https://wormhole.app/ Uses this effect also.
How would it hurt that security model if the phone could sign new components only with the permission of the logged in user?

> If you were able to swap out security components, you might be able to spoof messages

But Apple repair shops can do exactly that (unless they always replace the device whenever the screen is broken, but I doubt that). What's the purpose in this whole cryptographic integrity if a third party - certified or not - can violate it without leaving a trace?
If I was a person who has to worry this much about their security I'd much prefer swapping the screen myself without involvement of people that can't even be honest about "water damage" most of the time.
Can the voter explain the downvote reason?
Any suggestions on what GPU to use to train large models?
RChilli to Exhibit at HR Technology Conference, Las Vegas
Haha, true but he's still one of "us", just like Sid James, Chris Froome, Gordon Murray ...or my Irish Mum. ;)
Probably some standard emulsifier is surely added. That for me would be the key bit: Wikipedia suggests "emulsifier containing refined vegetable oil".
Wouldn't this law make productivity surveillance more pervasive? Based on the description in the article it seems to require that "Going forward, warehouse workers who think their quotas lead to unsafe behavior will be able to ask for 90 days' worth of documentation of how their work meets or fails the quota"?
I quibble with your notion that this argument needs be logically sound in the first place. Logic is about consequence; this is a question of values.

It is my value judgment that Facebook is disgusting, and my arbitrary desideratum for this judgment is that Facebook (allegedly) spun a narrative to cover their suicide machine.

You'd be right in saying that this line of thought is decidedly not sound; nor could it ever have been sound in the first place, because it's irrational and arbitrary. Does its irrationality and arbitrariness make it less valuable than logically sound arguments? If so, why?
But clearly, requiring a last name is wrong. If legitimate users can lack a last name, the system needs to work without last names: probably there should be a flexible "person's name" class that encapsulates first names, last names, titles etc. instead of attaching a raw last name to users.
XHTML5 is a thing, it is still there. You can use it in all modern browsers (no IE) and it adds support for XML namespaces to the HTML5 featureset.
XML is a terrible data interchange format because it embeds its schema in its data. That makes it sometimes an order of magnitude larger, and it takes longer to parse.

If you want to drop JSON altogether, something like Protobufs would be better. But JSON + JSONSchema has all the benefits of XML and none of the drawbacks.
Do these systems largely expect you to have a big NAS with pirated media? The evolution of the media landscape seems to be away from things like this except for people digitizing their blue ray / dvd collections, but it’s otherwise difficult to comprehend why one wouldn’t want a Netflix subscription instead.
That is beyond the point, since the OP changed the magnitude with every size. If it was 8x at each iteration, we would've had less pedantic comments here
An annoying half-solution that breaks down as soon as you encounter content with both. Better imho to have one way and become good at it. I think I might even prefer trailing commas to be mandatory.
Funny enough, pg did it that way to stick it to the W3C and its recommendations about the proper use of tables.[0]

[0]http://paulgraham.com/arc0.html

>pg: "Arc embodies a similarly unPC attitude to HTML. The predefined libraries just do everything with tables. Why? Because Arc is tuned for exploratory programming, and the W3C-approved way of doing things represents the opposite spirit.

>(...)

>Tables are the lists of html. The W3C doesn't like you to use tables to do more than display tabular data because then it's unclear what a table cell means. But this sort of ambiguity is not always an error. It might be an accurate reflection of the programmer's state of mind. (...)

... and yes, that decision is baked into the server, web app, HTML and forum code (which to my knowledge have never been changed in the standard Arc distribition,) making it a de facto requirement for all Arc based webapps and a PITA to change.
I've found weechat to be easier to configure with better defaults.

Also cool: it's quite well written.
Kogito API Incubation
Ah ok, that makes sense; it's basically the same thing. Though there are other nuances to "teach" other drivers behind you, like driving extra-slow or breaking once I guess.
Nope. WA uses server-side group management, with Signal its purely on user-side. The message is revealed to be a group message on client-side. In theory, since the group messages are a burst of packets of the same size, the server can distinguish between messages to groups,and drop them if it wants to, but that would be interference of communication which, IIUC, is a felony.
Typically calling someone a smoker implies tobacco, and in the past that was a strong correlation.
> What's the point?

Some code bases use single quotes, and it's annoying to copy/paste an object from that code into a JSON objdct and have to change the quotes.
> Is supporting at most 64 GB really that much better than a laptop with 64 GB soldered in?

Yes. Normally some people (like me) can't afford to buy the highest spec laptop. Thus, I'll be going with a lower memory and storage version of a machine, and then expect to upgrade the RAM and storage when I've got enough. That's exactly what I did with my current Thinkpad T440. And for a current gen Apple, I can either buy a 8 or 16GB machine, and the price difference is pretty significant for me.
Indeed, the West braindrains the entirety of Asia, and gets best talent at an unbeatable price.

Yet, some come forward, and still complain.
It means it was top secret until the day it was announced, so the big opposition party were briefed the day before it was announced and there's been absolutely no public discussion at all.

The cabinet just made a huge strategic choice on their own and gamble on being able to sway the rest of society.
Research, also of correlations (as a starting point), is to some of us "in general definitely a good thing". But.

Your use of 'accurately' probably does not consider actual sensible practices in the assessment of data, where you assess the occurrances of false positives and false negatives in more revealing considerations. One of the first online articles found through a quick search seems to be very good already as an introduction: https://towardsdatascience.com/accuracy-precision-recall-or-... (Koo Ping Shung, Accuracy, Precision, Recall or F1?, 2018).

Politically, there is a problem in fairly dealing with the matter of inclinations, especially considering that guilt is after actions, not inclinations, or considering that it amounts to "prejudice".

The use of 'pseudoscience' in the article was more political than theoretical - imprecise but left to the reader's margins of "getting the idea". It meant that "we have been there and the actual scientific results were poor (e.g. we could not predict local brain function under that bulge that may have meant inclination i)".

Science is much more complex than the simple correlation you seem to be supposing. Science is about understanding phenomena with objective grounds and methods (understanding is then corroborated with predictions, but predictions are not understanding). In your example you are limiting the matter to observations: they are the first step in science, not the last. (A statement like 'people with quality q tend towards inclination i' would be an observation, not a law.)
If you’re in a place where your stuff dries outdoors in 15 minutes, the added humidity indoors won’t be a problem.
I love how atomic energy gets to be described as “resilient, carbon-free energy” but only when it’s going to power things that surveil, kill, or surveil and then kill.

Luckily the same group of people who saved California from the scourge of atomic energy are still out there vigilantly protecting me from having to form my own opinions because I might form the wrong ones, aka the ones that don’t line their pockets and give cost-of-living another sorely-needed boost to help get all those troublesome poors (but I repeat myself) to move away while also thinking it was their own idea: https://science.time.com/2012/02/02/exclusive-how-the-sierra...
A thesaurus won't work. There are not many true synonyms around; often, synonyms change the meaning of the word, or interact with the meaning of the context. You also need to change inflections, word order, prepositions, and sometimes the sentence and discourse structure to make a good fit, while maintaining the consistency of vocabulary and readability throughout the current context. It's quite a complex task.
There's a good Atlas Obscura story on how Smirnoff had to not just invent the brand, but introduce America to vodka:

https://www.atlasobscura.com/articles/how-america-fell-in-lo...
For many use cases, the way I'd do this these days is just to adopt Avro or Flatbuffers, or some other such format, and use it in JSON mode.
I think there are two kind of separate topics here: mindfulness meditation and enlightenment. Mindfulness meditation can be useful just as a tool to improve attention and awareness in daily life. To “achieve enlightenment” you may or may not use mindfulness meditation, and in fact it may be the wrong tool for your needs. E.g., if you really must right a wrong in your life in order for you to personally come to terms with it, no amount of mindfulness meditation will get you beyond that.
> Why would you as a company need to defend yourself of accusations like this if they aren't true?

I'm wildly against Kafka traps like this. However, after reading the rest of your comment, I fully agree with the spirit of your post. I feel that this rhetorical question is superfluous and weakens the strength of your following rhetoric.

I _only_ mention this _because_ I like your rhetoric (in fact, I plan to steal much of it); my apologies if it seems as tone policing, which is the opposite of my intention.
> JSON allows arbitrary integers to be represented as numeric values.

What are the practical problems one runs into due to this mechanic? Isn't that just, any number literal scheme in any language ever?
That is odd to say the least. I share your concerns here and such mechanisms should be under a lot more scrutiny.
I mix it with milk and its really nice.
Maybe we should hope for a nuclear energy race!
Pro tip: Baileys instead of milk for a Kellog‘s corn flakes breakfast :)
Funnily enough, I just saw this link pop up: https://blog.pragmaticengineer.com/project-management-at-big...

"How Big Tech Runs Tech Projects and the Curious Absence of Scrum"
> IMO, XML and Enterprise Java were regression

From what? (especially XML as im not even sure what E-Java means)

I think (as you also mention yourself) that XML is quite good at some things (it's schema based, can mix schemas, has namespaces, etc). Just (as you mention as well) it was overused at some point.

Given we agree so much: what is it that XML was a regression from?

JSON is a regression from XML wrt schemas/strictness; but then it was very low overhead (which was needed as is it gain momentum used in places where the client (JS browser app) and the server (serverside of said browser app) are both maintained by the same organization).
That can be the result of bad regulation, yes, but I think companies were too ambitious in implementing said tools that regulation became a necessity.
> We took it to the technical group in the Gilbeys building that housed their factory offices, distillery, research laboratories and warehouse in Harlow, Essex,

I think I always associated it with Harlow but I wouldn't let the truth get in the way when winding up my family relations. :D
Cerebas is NOT the first company to make a 1 trillion transistor chip.

The title goes to Samsung, and they beaten them by quite a few years.
-Not end-to-end encrypted by default (on any platform)

-No end-to-end encryption for groups (on any platform)

-No end-to-end encrypted desktop chats (Win/Linux)

-No cross-platform end-to-end encrypted chats (iOS)

-No end-to-end encrypted group (video) calls

Great, for Durov if he wants your data, and all entities hacking their server for your data. Not that great for you.
If they have that, why then do we see videos and news of people reading newspapers and sleeping behind the wheel of a Tesla?

The only feature I've heard is that if you don't engage with the AP by applying torque to the steering wheel it'll disable it until you come to a full stop and park the car.
If you only watch these videos you might walk away with the impression that it is that simple for him - just walk up to the lock, pick it in 30 seconds and bingo - but in one of his earlier videos he pointed out that before recording a video he practices opening that particular lock until he can do it reliably.
Don't we already have Yet Another Markup Language (YAML)? :D
Easily rename your Git default branch from main to master
> JSON doesn't mandate the use of binary numbers, parsers can keep number literals as strings and let the user choose whatever binary storage.

So it is a coin toss whether a perfectly valid JSON file can be processed (read/written - say pretty print) by a perfectly valid JSON library without its contents getting trashed? Quality software engineering right there.
I really like how you explained that. I haven't though about it in the terms of that fat tissue is not getting insuline resistance. Thanks for sharing your point, it broadens mine.
Yeah, so I just wanted to point that out, to show that the theory behing CICO doesnt work out. It's not calories in vs calories out, it's a whole holistic approach to health. If you keep carbs up, there is no way down, no matter how many calories in vs calories out.