skysight-inc/HackerNews huggingface dataset:
Exploting bugs to gain unauthorized access is a crime regardless of who does it. If the crime happened on EU grounds they have to asnwer to EU. That particular company should have trading sactions imposed on it just like the country it belongs to. We do the same for Russian hackers so it's only fair to apply that to everyone else.

EU is the modern equivalent of Soviet Union and it behaves like that. They do a ton of stuff wrong and they take decisions without any regard for the local culture and people. This has nothing to do with illegal access to other peoples devices.
It's unlikely there will be one "world" with overseers and moderators, just like the internet is not one website.

The "metaverse" (not Facebook's) can be an open source platform where anyone can create their own worlds which accept the items they've added support for. This is the direction Decentraland is going in.

The core libraries to build your world will be open source and standardized, like a game engine, but the actual content will be up to the creators.
How to block Twitter feed but allow messages on mobile?
You're paying for a degree, not knowledge. Most places will trash your resume if the scanner doesn't see a degree on it.
Thousands of Australians are living with undiagnosed cancers after lockdowns
It's very weird to be talking about "windows, mac or linux" developers.

Desktop application development today is maybe about 1-5% of all development, while overwhelming majority of backend development - the largest category - targets Linux.
Poland Belarus Border
So, disclosure policy is kinda an active discussion within the security community but there is a general move away from coordinated disclosure (aka responsible disclosure) where the vendor and reporter coordinated on disclosing the vulnerability, not publicly disclosing until the vendor okays it.

Coordinated disclosure puts a lot of power in the vendor to simply ignore or delay fixing issues, and frankly may not actually be the "responsible" course of action. Full disclosure, where the first warning anyone has about the issue is when all the details are dropped about it to the public _may_ result in a faster patch time but it also increases risk of it being weaponized during that in-between period. There is the chance it was being used in-the-wild without being known also, but releasing the information increases the risk of those in the-wild-attacks but reducing the overhead necessary to carry them out.

All that said, there is a newer option that has been pretty steadily gaining popularity over the last seven or so years. Deadline-based disclosure. This did exist before, but really gained popularity in recent years as Google's Project Zero adopted it as their disclosure policy. This is the idea where the reporter discloses a vulnerability which starts a countdown to the public disclosure (90 days is fairly common, but I've seen 30, 60, and 180 reasonably often also)

I think this deadline-based disclosure option strikes a good balance between the benefits of coordinated, and full disclosures.

Fwiw there was a good talk from Ben Hawkes about Project Zero's Disclosure Philosophy at FIRST 2020, https://www.youtube.com/watch?v=9x0ix6Zz4Iw
Meaning, can they fix the issue by just updating the console remotely and not fixable by believing it should never leak?
You can’t tell the difference between conventional and organic grain fed beef, but you can tell the difference between grass finished and grain finished beef. And there has been some fraud in this area too, usually in restaurant settings where the chef’s skill can make up the difference. Bel Campo Meats comes to mind, they were accused by former workers of lying about what meat went into their product; grass fed vs. grain fed.
Sucrase: A fast, pure-JavaScript transpiler for JavaScript/TypeScript
I'm familiar with your parent's variant ("cache invalidation") as well.

https://skeptics.stackexchange.com/questions/19836/has-phil-...
Value Stream Management
Learn what Value Stream Management is and why it can be a big help to organizations with self-developed software. Read more about its origin, benefits, and metrics.
How come this is a complete non-concern in other areas?

If you give anyone (say, PayPal) your address, you’ve given then your roommates’ address as well - since you share the same IP. Nobody cares, even though the third party can immediately begin identifying your roommates without harvesting their DNA, like they would in the case of 23andme.
Mine has. I work for a big tech company, and the team which approves / denies third-party software denied us to use Copilot. The given reason was that we don't want it to use our code to train its algorithms. I'm not sure how true that is, but it's what we have been told at the moment.
Please don't take HN threads further into religious flamewar. It's a particularly hellish direction for internet discussion to go, and also particularly avoidable, and we're certainly trying to avoid it here.

https://news.ycombinator.com/newsguidelines.html
“…a recovering alcoholic talking about the dangers of just one drink.”

So, one of the things you learn pretty early in recovery is that there is no “normal” when it comes to addiction.

However, there are _patterns_ of denial and implicit social construction around risky behaviors that most people only believe matter for “alcoholics” and other obvious “losers”.

Something can be both toxic (booze, cigarettes, online fake conspiracy echo chambers) and relatively benign in small amounts. That doesn’t mean that foregoing them is bad in absolute terms.

OTOH recognizing that toxicity instead of ignoring it can help to avoid the “only happens to other, weaker people” trap. Said trap lets many people slide much further into self-destructive behavior than they could otherwise with a bit more self-awareness and compassion.
There are in fact thermal PCBs (a.k.a. MCPCB) used for LEDs and other electronics that need to dissipate heat. They have an aluminum or copper layer that supplies rigidity and a heat path out the backside or center of a PCB.
>If companies can’t monitor employees working from home how do they protect against malware?

WTF ? if you as a company want protection againt malware then give me a super locked down work machine, where I can't install shit and updates will be done automatically?

If I work remote and I am using my own hardware then fuck you, I don't install your malware on my own machine so you can check my personal stuff.

So give me a lockeddown work machine if I have some super secret project that I work on. If you don't trust me and think I will screenshot your secrets then maybe is better we end this. I work from home for more then 10 years, it is all based on trust and progress tracking, but I don't work with super secret stuff, just the average proprietary SPAs(or desktop apps in the past).
> I think a lot of them would have been tempted to just take their hands off the controls and see if the plane recovers itself

That kind of seems to be what happens in the video?

I’ll be the first to admit I know nothing of planes outside of games, but if they’re even marginally accurate being gentle is very important.
Everything Is an Ad Network
Has anyone ever done an a analysis on whether Denuvo (or DRM in general) is actually a wise investment of capital? I imagine it probably does have some impact on early sales in that it will prevent early customers from pirating to try it rather than buying it. But at the same time, you have things like Steam's return policy, the general dislike of DRM, and the publicity/image cost when something happens preventing everyone from playing the game. Not to mention that it seems inevitable these days that it either gets cracked or removed by the publisher anyway.

I always wonder if the resources spent on Denuvo would be better spent on the game itself, or marketing the game, allowing the so-inclined to pirate it more easily at launch, but offsetting that with better sales overall driven by better reception, more word of mouth, etc.
This is a scary place to be: the top-level debug resource for a major project. It took almost two years to resolve, but was already known as SKL150. Looking at the clang vs. gcc assembly without knowledge of SKL150 would be literally impossible to debug. GCC -O1 vs -O2 is a clue, but even with the asm diffs, wth? Again, scary.
Because shares can be diluted and it’s not easy to filter for companies with shareholder-friendly undilutable shares. Most cryptocurrencies are not dilutable.
McAfee to Be Acquired by an Investor Group for over $14B
Forever. DRM is created under the cryptographically insane belief that one can treat a person as an eavesdropper at any time after they have been an authorized recipient.

That is the unsolvable problem that guarantees DRM will never be able to create a perfect protection device that allows the company to stuff the genie back into the bottle, or the cat back into the bag, at will.
I recently learned that this is an issue that bomber pilots / airplanes must deal with, when they deploy their payloads.

Here is a video of a test pilot giving a talk at MIT on the F-22 and its advanced flying capabilities which --as he puts it-- makes flying an F-22 actually easier than a Cessna.

https://www.youtube.com/watch?v=n068fel-W9I

Apologies in advance for you losing an hour -- the talk is that good!
Incompleteness and the halting problem are both applicable to quantum mechanics and by extension the human brain. They apply to every rigorous system and also to every real-world system that can be described rigorously.
This seems like a hard to substantiate claim, IBM, HP and Oracle didn't become "also rans" due to government intervention. I'd like to hear the pitch for why FAANG is "different".
I bet that depends on the sub. The few that I'm active in are helpful and informative - nothing short of awesome. I'm sure some are awful.
Related news announcement from StackBlitz about browser-based development/experiment interface: https://news.ycombinator.com/item?id=29150594
Just around the corner: Karmaverse. Everything you say personally intermixed with everything you say professionally, graded on a scale of one. 1 == good. 0 == bad.

Just as everyone had hoped, fame about your outrageous behavior in the last WOW raid, where a n00b acting a fool triggered you bad, will spill over, first into the virtually real world then the really real one, eventually getting you fired and finally, we'll have universal and omnipotent social justice.

So excited. Can't wait.
Tcl is deeply rooted in EDA and chip design industry, too many code were written with it. It's like C++, no matter how fancy/modern rust is, there is no way it's going to replace C++ for the next few decades.

One way is to provide Python(python stdlib might be enough for simplicity) gradually, e.g. providing a Python binding for Tcl so for the future, you can write all new piece in Python, and it is either used directly or converted to Tcl behind-the-scene.
> Every single file in every single machine that ever ran VSCode would potentially be at anyone's grasp.

Even if they were scanning all the files, Copilot's terms [1] explicitly says they do not use the data to provide suggestions for other users.

> GitHub Copilot does not use these URLs, file paths, or snippets collected in your telemetry as suggestions for other users of GitHub Copilot. This information is treated as confidential information and accessed on a need-to-know basis.

[1] https://docs.github.com/en/github/copilot/github-copilot-tel...
I don't understand, why didn't the truck driver just defend the load with his shotgun?
Ikaria–The Island of Mysterious Longevity
I think the api that allows for more flexibility of implementation underneath is a hierarchical multi tag system with one root of the tag reserved for the existing filesystem, eg. "fs". Paths on /fs/dir/dir/file could serve as definitive storage reference and a way into the existing filesystem apis, while other tag systems can be imposed by the user in parallel trees of tags - all of which refer to the underlying fs tree under their implementations.
Right, and because your dependencies don't shell out to some random tools during a go build it makes your build system less likely to break and makes your job easier. You have guarantees that unless you run a `go generate` no third-party code will run, and that every build step is fully hermetic. And since you're already using Make for the build, it's probably better equipped to perform the preprocessing than go embed or even go generate so you don't really need Go's build system to take care of that.

`go build` & co are designed to easily integrate into complex or overarching build systems (which are inevitable for any large project, as you mentioned), and the lack of expectation of being able to shell out arbitrarily during a 'normal' build of some leaf library is what contributes to this ease of integration. Contrast that to how difficult it is to integrate with Rust/Cargo's build system where every second package has a `build.rs` which expects some undefined ambient environment to be present and makes any attempt to make the builds hermetic extremely painful.
Anecdote, but a friend of mine is an avocado farmer in Carpinteria, CA. Around 15 years ago he went through the process of converting his orchards to certified organic. He said it's 99% paperwork and nothing really changed on the farming side. Swap out one chemical for another that skirts the rules and technically organic. I don't know if this is how it is in the rest of the farming world, but wouldn't surprise me.
Same, I haven't listened to Radiohead in almost a decade and thought I would never spot it, but when it came on I got a huge smile on my face right away.
Visual Studio 2022 Launch Event (live video)
Climate Policy Is Happening, Climate Science Needs to Keep Up
Please don't add nationalistic flamewar on top of religious flamewar. We're trying to stay out of the deeper circles of internet hell here.

https://news.ycombinator.com/newsguidelines.html

Edit: you've been posting flamebait comments repeatedly and we've already asked you once to stop. We ban accounts that do that. I don't want to ban you, so would you please review https://news.ycombinator.com/newsguidelines.html and fix this? We're trying for something different from internet default here, and as you know, going against entropy takes a lot of energy.
Nitpick: validation is the consensus process and resembles proof of stake, you don't need to buy any mining hardware to do this. Proof of coverage rewards require the approved hardware.

You can make your own packet forwarder and get paid for data transmission, but not proof of coverage. Pure DIY with no central body blessing.

There are around 70 different manufacturers in some stage of blessing. Its really not a meaningful hurdle. The approval process is there to insure manufacturers incorporate adequate security protection of chain access keys.

Network buildout is called a chicken and egg problem for a reason. Speculation is just another tool and is used to phenomenal effect by Helium. The proof is in the pudding because a majority of Americans and Europeans have coverage now, where once was nothing.
If you frame it as witnesses and informants giving you clues where a criminal has fled, this would also be essentially the same as the first Carmen Sandiego games.
> Where people consider talking to someone a chore.

This bit in particular really hit me. I've noticed a rising trend around the Internet (or maybe I was just blind to it before), mostly on Reddit, of people who really do seem to consider any sort of real-life social interaction a chore and an attack.

I forget the exact context, I think the conversation that stood out to me was about someone in a gas station or something, trying to make friendly conversation with another shopper next to them, along the lines of "oh that's a cool hat". And the consensus of the thread was "yeah that's awful, why would you do that, why are you subjecting them to the labor of talking to you" or such.

Guys... we're humans. It isn't a crime to make small talk. It's not a chore to open your mouth. Most of us consider (or used to consider; and I'm not even old) that enjoyable. What happened?
PEnnsylvania 6-5000
Nothing more than complacency, maybe? A mistake I think the newer batch of Big Tech is eager not to make.
Aaron Swartz deserves a statue for future generations to know what he stood for and how he was martyred by the US government.
>I only got this much information after surreptitiously bumping into him one day.

I am confused how "surreptitiously" could be used in this context. Were you spying on him?
Some of that stuff you can get back by using an ePub version and reader from the AZW3 file which can typically be done using KindleUnpack. Some of it is less the file format and more the rendering engine used and they simply haven't bothered to backport it to their AZW3 renderers. Amazon does AFAIK precompute some stuff like hyphenation but not everything.
For a group channel, that’s often undefined.

I sure wouldn’t want slack to have access to my calendar or PTO schedule, especially given that I can already manage notifications today.
This is analogous to the megapixel quantity versus quality debate. I’ll take fewer megapixels paired with a good lens over more MPs with substandard glass anyday.
'I Cannot Stay Silent': GOP Senator Decries 'Unacceptable' Vaccine Mandates
He's not angry. He's responding to people who are angry he flippantly made fun of the job posting.
Politicians are under pressure to "do something" about services like Facebook, Instagram, Twitter, TikTok, Youtube, Reddit ... services which publish what some of their users do and say, and enjoy broad immunity from lawsuits despite choosing what is communicated and by who. None of which applies to Signal.

Your theory is that, seeing this, US politicians will decide priority #1 is to re-write the US constitution in order to go after a completely different service? Sure, they can't find a bare majority of votes for cheap, easy fixes that are broadly popular, but repeatedly getting super-majorities for the lengthy and expensive process of tearing down the fundamental principles of the country to go after an outfit few voters have even heard of it will be easy? I don't buy it.

One of the most awful things about the "better structure" of Matrix is that if you make any use of this "better structure" you eliminate Don't Stand Out which is an essential characteristic of Signal. Yet, to enable that "better structure" to even exist Matrix already makes you give up some of the privacy you have on Signal anyway. So you're losing some privacy to have the option of giving up even more privacy.

Several of the sub-threads in this discussion mention metadata. Don't Stand Out is crucial because of metadata. The Secret Police can raid all sixteen users of "Jim's Black Pill Matrix Server" and if two of them are innocent bystanders too bad, all fourteen members of the Conspiracy To Do A Naughty Thing are known to use Jim's server, and so they Stand Out and were caught. In contrast, using Signal the Conspiracy To Do A Naughty Thing are disguised by the presence of Sarah's Hen Night Planning DO NOT TELL SARAH, Smith Family Group, and LOL Funny Cats!!!! among many more. Signal doesn't know, or care about any of these groups.
No you can't - apps can't read Core Motion data when your screen is locked, or they're in the background.
Most registrars have a grace period of 30-40 days, where the original owner can still reclaim it IIRC.
Isn't a "superintelligence" something that is called an "oracle" in Math & Theoretical CS ??? Something that can find an element within a set respecting a set of implicit properties or tell that such an element doesn't exist ?
>Vinegar. Sticky traps. Soaps. Diatomaceous earth. Targeted bacteria.

>Organic herbicides and pesticides are chosen specifically such that they don't contaminate the product (and thus products of the product). Nowhere in my comment did I claim otherwise.

Contaminate with what? Organic herbicides and pesticides contain the same constituent chemicals as their conventional counterparts. They have to, otherwise they wouldn't work. The organic variety contain more ballast, however, which requires additional application to meet the efficiency of the conventional variety.
Here's some research(2018) on the topic that involved a lot of countries. While this place is pretty tame is comparison with others, I wouldn't be suprised if that would actually be true.
https://demtech.oii.ox.ac.uk/wp-content/uploads/sites/93/201...
Going inward without physical protection/distribution won't work unless we can "live" without matter, are we humans then or spirits?
Only on GNOME on Mesa though.
Is the name of the company unique and very random or something more in the trend of "WeatherForecastsForFishermen Inc"?

Are you sure the AI couldn't get some context from the current file? No title tag in the head, no description nor keywords ? The filename/path is also used, could it be it?
Is it possible that Zillow artificially inflated the housing market?

They bought up bunch of houses while having the most popular pricing tool? That's a strong incentive to predict ever increasing prices. Plus it whipped up a frenzy and site traffic. Dangerous incentives all around. You can see how this could be self reinforcing with systems that all want the numbers to go up.
Hire Power Washing in Surrey for Both Window and Carpet Cleanup
Power washing is perhaps the most efficient and effective method of cleaning the windows, however, before you begin cleaning, you must understand that like all other power washing jobs, windows cleaning in Surrey should also be left for a pro to get it done as missing steps throughout the washer's operation might result in serious issues such as glass breaking or other harm.
I will check. I would say that it works... for now. :P It is not something we should rely on, I think.
Commercial long-haul warehouse-to-warehouse trucking was always the MVP for self-driving.

It has the revenue potential (high utilization), it has the economics (lifetime revenue supports capital investment), and it has the urgency (labor shortage at desired wage level).

Unfortunately, everyone wanted to be the sexy consumer darling.
Thank you for sharing this wonderful story.
LCS35
Telegram does get access to your data, and them getting into advertisement is literally the topic of this discussion.

As a result, governments aren't getting access to Telegram, advertisers are.
We ban accounts that take HN threads into religious flamewar, regardless of how right they are or feel they are. If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
https://tim.blog/2021/10/28/chris-dixon-naval-ravikant/ is a really good discussion of what's coming with web3.
For the record, salvia (or salvinorin A, the primary psychoactive ingredient) really isn't considered a psychedelic, which is traditionally held to mean substances that are primarily 5-HT2A agonists.
My mental model is that the biggest risk is the turning turboprop.

The rest of the dynamics fall out from that: during the dive, the engine on the divers' side is already off, and once the stall happens, the pilot cuts off both engines (to avoid a spinning engine hitting anyone), dives to gain speed.

Being inside the plane as a jumper during the recovery was probably the least pleasant -- normally one doesn't have a seatbelt in that scenario. I think at 0:54 one more person falls out the open jump door?
I like this point. Bubbles all the way down. If one becomes fixated on the troublesome qualities of crypto its intellectually dishonest to ignore the similarities in every other non-crypto investment vehicle.
VP Harris Sets Date for Inaugural Space Council Meeting