skysight-inc/HackerNews huggingface dataset:
No, it's not, because computers and humans are not the same. A computer might give away too much information because someone misconfigured it. The closet human analog to that would be if the human was improperly trained in what information they're supposed to give out. But the human also has other options: they could be tricked into giving out more information than they should, or they could be giving out more information because they're being paid off or given some other benefit.

You can certainly assign various levels of blame and responsibility to the human "server" in those scenarios. But the human on the other side of the interaction, the one requesting information, doesn't magically become free of reproach. If they are requesting information they know they should not have access to, and then making use of that information for their own gain, they're guilty too.

There's a very narrow carve-out for the white-hat: requesting information with the intent of uncovering vulnerabilities, with the intent to help them get fixed. We expect a white-hat actor here to destroy and not make use of any information they obtain that they shouldn't have.

> If I go to the IRS to do some paperwork and notice it says "File #7881991" in the top right corner and I go to the clerk and ask them "Hey, can I have files 7881992 and 7881993, too?" and they give them to me, who is liable for that? It's quite obvious.

Yes, it is obvious: the clerk is liable for giving you something they shouldn't have, and you are liable for fraudulently representing yourself as someone who should have access to those files.

I don't get where this idea of "the other person let me do the crime, so the crime is ok" comes from. That's just not how the law works in the real world. If you then walked out of the IRS office with those files, I would absolutely expect you to get arrested. (Even if you immediately gave the files back, you'd probably be on shaky legal ground.)
> fixing the flaw could cost the state $50 million

It's hard to imagine the kind of contorted bureaucracy that could turn such a fix into a $50 million change request, and yet, I wouldn't be surprised at all if it did cost that much.
ID laws aren't really a debate at this point. The overwhelming majority of Americans are in favor of showing some sort of ID to vote as long as said ID is free (i.e. being poor isn't a possible impediment to voting). By 'free', that means free or reasonably free of time as well. People working multiple jobs with children simply don't have time to wait down at the DMV for three hours (if you're lucky) to be able to vote.
video games :(
duplicate: https://news.ycombinator.com/item?id=28866805
https://www.nber.org/system/files/working_papers/w25522/w255...
What Oculus Quest 2 link cable are you using?
No thanks, Django was a complicated mess, and Python is, in my opinion, not at all suited for long-running services in production. There are a plethora of other languages for that.

Seems like you're close to, or perhaps the creator of, the project - nothing against you or the team. I just don't have a lot of positive things to say about Django after having worked with it.
Didn't he also give the data he found to Gawker before notifying AT&T of the issue? That seems like a pretty key difference here, but I don't know what weev was charged and convicted for.
Which were the best eras to visit various places?
Also Andy Pavlo is my #1 celebrity crush, for people who are not aware his DB lectures are great: https://www.youtube.com/c/CMUDatabaseGroup/featured
I thought leaving was easy, but returning was the complicated part.
How to turn on and turn off end-to-end encrypted backup for WhatsApp
Because servers don't decide anything. They're autonomous systems imperfectly carrying out the will of humans who make the actual authorization decisions. If a computer system erroneously prints an extra 0 on a check mailed out to you that doesn't mean you get to keep the money because the computer isn't the entity that decides how much money you're owed.
Nobody is stopping you from taking risks. What are you talking about?
This bug was not a complete takeover, or anything even close to one.
Creating a throwaway for this..

My multinational non-tech company is doing the following:

* NOT increasing salaries for positions

* NOT replacing people who leave

* NOT giving any pay rises or benefits to current staff

* They move skilled people from team to team on an ad-hoc basis

* They hire in expensive consultants

* They let go of the expensive consultants before handovers can even happen
2 weeks to settle would be very annoying for people who are getting used to same-day shipping. It works when all of the goods are virtual/revocable but once you need to ship an actual product you want to be sure that you actually have the money (within some margin of error).
And this is why the year of the Linux desktop will forever be in the future. From the cryptic (to a normal user) error messages, the broken repositories, the (often) primitive UI/UX, I really don't see Linux becoming more mainstream popular anytime soon.
> The downsides are that the packages end up larger because they ship with all of the necessary bundled libraries (which can also increase memory usage of the application because it can't share the libraries loaded in RAM by the native operating system), and there's a lack of trust that the developer can keep up with bundled library security updates.

This has basically been happening with browser debs anyway. Browser upstreams bundle their libraries, and distributions have increasingly been unable to unbundle them.
It is more like the records office decide that, but didn't tell the people who they were holding records for that they didn't feel like staffing the desk. The records office is of course 99% to blame for their incompetence here, but it is still a bummer for the people who trusted them, and better not to look.
FYI, that's not the View Source feature.
The 11% is the early odds. The investments were made up front when everyone was driven by FOMO, and 11% went to scams. After reality ensues is now, and if everyone were choosing to invest now, the number would be 0%[1], not 11%.

[1] With the caveat that it's possible there are some long cons that haven't yet been exposed yet.
The title should have been "Strong mobilization efforts needed to neutralize voter turnout reduction of ID laws", because that's what the data in their abstract actually says.
Had been with Ubuntu for so long but some problems with snaps finally drove me away from it. For now, I'm using Mint due to familiarity without snaps but flirted with "user friendly" Arch derivatives (had problems with both) and NixOS (got tired of specializing in a programming language just to use my OS and ran into some problems I couldn't find a solution to.)
What do you mean? Mine has a taskbar from default install. Which window manager are you using?
To be fair, some moving parts outside of canonical's work are necessary yet break often.

Prominent example: Nvidia drivers. Oh how often have I wiped a system because the precise combination of driver/CUDA/nvcuvid/nvenc and nvidia-docker broke through some freak update.

These are the things that often prevent smooth upgrades.
Most european countries require some sort of government ID before voting. I don't see what the big deal is.
To me, it feels like the same effect as Ruby ~15-10 years ago. Lots of chaos as good (subsequently winnowed down to preferred), patterns were discovered, and then things stabilized. It isn't sexy anymore, but to this day I've yet to discover a better tool, that lets me blast out features and make changes at rapid pace, than Ruby (and Rails on the web side).
While it's great that Godot is getting better funding, that's about the worst insult I can think of. Epic is so confident that Godot will never be a serious competitor that they're giving them charity money. We'll see; there was a time when Autodesk viewed Blender as an also-ran too.
This has been discussed to death, but I'll summarize what I've learned. Anonymous individuals don't get to vote. People who vote without an ID claim a name. At the polling station, they (the poll workers) look for that name on the voter roll. In many states, the voter is required to know an additional piece of information, like their mailing address on the voter roll. If you're not on the roll, then you don't get to vote -- or in some places, you get a provisional registration.

It's possible to exploit this: you can claim somebody else's name, and apparently get away with casting their vote. If that person also votes, then that's easily detected. If the jurisdiction doesn't have a way to separate provisionally-authentic ballots from ID-verified ballots, then the election only needs to be re-done if the number of fraudulent votes is large enough to impact the outcome of the election. Elsewhere, both provisional ballots would be spoiled.
It's either a fiction or it's real. And given the privileges that come with being a citizen, of course it is not a fiction.

But if it is meaningful, why should it not come with a cost? Nations as constructed obviously provide value to the people residing there, should this not come with corresponding responsibilities? Like paying taxes? And if there is value and meaning to being a citizen of a specific country why should a nation not place restrictions and requirements on this privilege? I could even see for example the incentive to ban dual citizenship as one. Why is it just assumed that keeping a bunch of citizenships, not paying taxes to that country, all while not living in that country is a thing that should exist?

It seems like these people want their cake and to eat it too. If the country wasn't good enough to live in, why would you expect to keep the citizenship if you leave? "Marriage" is a two-way street..
Having read opinions by federal circuit court judges on technical matters, it's not clear to me that the judges who will see this case are likely to understand the matter any better than the governor.
I don't think simply changing the ID in the URL to see what would happen is itself a malicious act. But, after discovering the vulnerability, OP admitted to continuing to exploit the vulnerability so they could make use of the information they'd gotten, information that they should not have access to. That part of it is actively malicious.
I mean don't let this one exception detract from the main point.
We know men are stronger, faster, have better endurance and have higher bone density. We also know people with more fat and less dense bones are more buoyant.
It's interesting that the trade-off is in favor of women in ultra marathon swimming but it's not exactly a surprise that in that particular event there are additional factors in favor of women. Without even checking who wins those events I can also tell you white people are better than black people at them, again for the same reason (buoyancy).

On the other hand over reliance of published studies may lead to you believe nonsense like lack of advantage of trans women (biologically born men) over women in almost all sporting events. Clear nonsense to anyone who ever seen how hormonal changes influence speed/strength/endurance development but suddenly a debate if the only thing we can go with are published studies (I mean, even that points to the obvious conclusion if you dig deep enough but the fact that it's not easy to get "people with more testosterone at puberty develop stronger bones/more muscle etc." published makes it seem way less obvious than it really is.
Dmitriy Zaporozhets (co-founder) was Gitlab's CTO until 2018 and now his LinkedIn profile says "Engineering fellow at Gitlab". What happened to him?
Agreed, my laptop now has 2 USB-C, 1 USB-A, a microSD, and a headphone jack. I would absolutely swap the second USB-C for a USB-A, and the microSD for an SD. Or some days an ethernet jack.
I wonder if he's trying to "control the narrative" in the hopes that he (or the state) isn't sued for releasing private teachers' data to the public.
It's not just that it's contact data; I agree, exposing contact databases is a big deal, and that this (as depicted) is a significant bug. It's that to accomplish that with this bug, you have to install a malicious app from the app store. That is a very high hurdle towards operationalizing the bug, especially since, as I said elsewhere, Apple does API-level surveillance of apps in the app store.
Thats so weird. Why do people give a damn about something that only matters with legal matters and not anything about identity.
I’ve learned that ubuntu upgrades only if you update to the next version as soon as it is released. I have a 14.04 server that I cannot upgrade anymore and it sucks.

Also, NVidia and Cuda drivers mess the upgrade path as well. And ubuntu is the most supported distro.
> Knowing where sed output is generated

Is the use of "sed" intentional or a typo? Either way, I love it.
lol. No bet. Not because I doubt my position (I see an aerogel-inspired material working out). Rather because the 50 year timeline that I would feel safe betting on is basically my end-of-life. I'm not really interested in paying out a longbets.org payment on my deathbed.
1. Good and replaceable battery;

2. Multiple USB on BOTH sides plus headset jack;

3. 16GB+ RAM plus 512GB+ SSD;

4. Solid frame for frequent travelling;

5. No touchscreen;

6. Keyboard that feels like one;

7. 15'+ screen;

8. Touchpad that can be disabled easily
Should South Korea build its own nuclear bomb?
Automatic updates are great, when I release security fixes like new Node.js version to Wekan https://wekan.github.io . It has worked well for me for many years.

Update install is very fast, with very small downtime, automatic database schema upgrades, etc.

Sandboxing is great, code can not write outside of app's own writeable directory.

Does Flatpak have any kind of automatic update ability?

Or is there any automatic update ability for some other package system on Linux/Windows/Mac ? Is Snap the only one?
In my experience, Ubuntu, or Linux in general, works great on desktops but very poorly on laptops due to lack of hardware and driver support. Not a hardware engineer myself, I think this is because desktop hardware is more standardized while laptop hardware is more proprietary, advanced, and custom-made to different makes and models. My previous job was the first job I had wear a company-supported Linux laptop was even an option. I absolutely loved it, but fully admit it was incredibly difficult to set up and maintain. Most devs continued to use Macbooks.

One specific Linux issue I ran into repeatedly is that Chrome and Chromium by default refuse to trust Linux graphics drivers and instead do software rendering. It turns out, software rendering makes your browser really slow and makes it burn tons of battery when not plugged in. I eventually figured out how to enable most acceleration for Chrome. However, there were several electron apps like Zoom that didn't expose any option to enable hardware acceleration. The zoom desktop app was completely unusable for me on Linux. Instead, I used the browser app exclusively.

Slack was similarly unusable without hardware acceleration but to its credit exposed an option to enable it.
It does feel exciting that fusion has apparently moved from being "just 5 years away" for something like three decades to this past decade they've revised down to now perpetually "just 2 years away", at that burndown rate we can expect it in maybe three decades.

That said the cheapest fusion power we'll ever have access to will always be solar power because the capital costs of building our solar system's sun are already well and easily sunk/amortized.
Sorry to jump in wildly here - but this reminds me of a similar attack on the idea where we shouldn't use "air cleaners" to reduce carbon emission already in our atmosphere.

I get it, it's not a the only solution to a problem, but again - why not use this technology if the job it is designed to do helps, even enough to mitigate some other issues. Just because a solution does not address all 10 parts of a problem, doesn't mean that you can't use that solution for 1/10 of the problem.
It was added as an amendment, therefore it is an extra constitutional protection. Some people (a broad coalition that included both Federalists and anti-Federalists) were concerned that the Constitution, as originally written, did not ensure a protection of human rights. That's why they pushed through the Bill Of Rights.
> Anyway, the biggest one is that what was previously an app is now a separate environment that is sometimes hard to control. If I wanted to run an app in a sandbox, I would have run it in a sandbox.

I see sandboxing as a major upside. Users expect sandboxing by default nowadays. Some game they downloaded shouldn't be able to intercept your online banking browser session. Yet, in the traditional Linux desktop model, they can.

Having app sandboxing by default is long overdue. Not having it makes the environment a second class citizen for user safety and security when compared to iOS and Android, for example.
Blender does have a real-time engine called Eevee which is pretty powerful, although I don't think the use cases overlap enough to bother Epic.
Anecdotal but no less amusing: I upgraded my desktop and used the extra parts to rebuild my Windows 10 system, the nearly cutting edge hardware on the newly rebuilt main desktop all worked when I reinstalled xUbuntu 20.04 on the new SSD.

The hand me down parts, while not ancient, were still old enough that I had expected Windows 10 to be able to support it when I installed it on the SSD for that machine. Wifi and Webcam both did not work after Windows finished installing and detecting hardware/updating.

Windows 10 later decided to reboot my system, unprompted, when I still had a project file open in Premiere.

How far Linux has come is honestly refreshing. How long Windows has continued to have absolute dealbreaker issues is astounding.
Why would I do that? :-)
If I gave the impression I'm against it, I'm not. It's nice to have repairability, a bonus feature, but not a competitive or innovative incentive to purchase over the, and at this point everyone has to admit, very well designed Apple line of product. I do believe we are well into the era of disposable electronics, and both assembly, disassembly, recycling and repair will be fully automated in the near future. Because, in order to make products more compact and continuing the SoC trend moving components to silicon, there's no longer a place for the human technician.
Your edit reminds me of an absolutely insane article I read a few days ago about an elected Juvenile Court Judge in Tennessee: https://www.propublica.org/article/black-children-were-jaile...
Some serious Jedi business going on here
Out of interest, have you tried other distributions? Perhaps Debian based like Linux Mint / Pop OS, or others like Manjaro?

What keeps you using Ubuntu after all these years?
The Y is a much more expensive car with a discontinued standard range version and the base model 3 is by far and away the best selling version of the vehicle.

Averages can be misleading. Id like to see the median prices given that the base tesla model 3 is VERY premium vs the base model accord which is not.
Helping authorities with such matters is like feeding alligators: they'll bite you if they can and they won't be grateful.
and there's the 3rd response: the enlightened centrist.
Clickbait. The intent was not to coverup.
> People working multiple jobs with children simply don't have time to wait down at the DMV for three hours (if you're lucky) to be able to vote.

Malarkey. I just got my first RealID in California last month, and I was in the DMV for around 20 minutes. And this wasn't in some bougie city with a special DMV.

Make a reservation, show up, done.
Time to upgrade the T-series SPARCs. Nice to have a free modern OS to keep that amazing hardware still in usable state.
I was going to say something about how you needed to know what DNS is to know how URLs work and how all this is easily teachable at the high school level, but I realized I'm just out of touch. Amend my comment to say that the previous poster's classmates can't tell apart a search bar and a URL bar either.
Proton.

Play on Linux.

Lutris.
Thanks. I think I’m just not at a programming level where my brain is working faster than my fingers. But I get it. I can relate in the following case: I like to write fiction, and lately I have been writing children’s stories that I’ve told my daughter as I put her to bed. I’ve found that I can invent and tell a pretty decent story in the span of 10 minutes. When I later write up that story, it takes me 1.5-2 hours. Adding in punctuation seems to slow me down the most, in part because those non-story elements distract me and mess up my flow. I’m testing whether it’s faster to use a voice to text app, and then edit in the punctuation at the end.
Sounds like you're tired of working at a place the size of your current job and yearn for some place smaller. If you can't make a jira ticket to discuss the unreasonableness of timelines, and how to address the most egregious lapses in judgement by management in planning and deadlines, what's Jira even for? Make your manager do some work! Otherwise we're all just faffing about with assigning story points in order to avoid the actual work of programming.
Open source game development remains light, but Wine works better now than at any time in the past.

I installed a game that had a Linux release that blew up on ALSA libraries. The ultimate fix was to install the Windows version over Wine.
It's the "perceived" part that I am suspicious of (and I assume the GP too). It makes sense to me that strict ID laws don't do much to fight actual fraud because the systems in place are pretty effective (moreso than ID laws, I'd think, since I've personally rarely had an up-to-date state ID).

But how does it not have an effect on perceived fraud, when all of the people perceiving fraud are arguing for strict ID requirements? I think I know the answer (these people perceive fraud in response to their "team's" loss, regardless). But it would be interesting to read what the authors say.
I've seen it happen once or twice in Chrome. IIRC, it was when an overlay element (newsletter or paywall prompt) was removed, but an invisible <div> that blocked scrolling was left behind (it would usually be removed when the prompt was dismissed).
Yes, and getting identification is anything but free in most of the US. Often time you may have to pay to get some other documents (birth certificate, SSN card, etc) first to prove your identity. The threshold of proof for getting an ID in some states is pretty high, and only getting higher with the pointless REAL ID initiative.

Many people in the rural US (which is a ton of people) are hours away from a place that will issue identification.
Did you read the license linked above or the clauses I cited? None of your text is on there, and what I read (even of the "Polyform license") was quite permissive, unless I'm really misunderstanding something here.
What do you mean by "What do you mean?"?

I don't know which window manager. I just use Ubuntus defaults. It looks like this:

https://ubuntu.com/wp-content/uploads/a728/2020-04-23-13.05....
On the other hand, every college student ever needs a computer in order to do their school work. College students and new grads with a ton of student debt are not exactly demographics that can afford to drop several thousands of dollars on new laptops each time they break or become too slow.
> Anybody know if 787 production has now--or will be--moved entirely to South Carolina?

Yep, I believe it happened earlier this year: https://www.king5.com/article/tech/science/aerospace/boeing/...
The Great Feminization