skysight-inc/HackerNews huggingface dataset:
Hey HN, this is just a little script I created that converts a program into a binary format comprised of zero width characters. I'm not entirely certain that this should be considered an exploit in and of itself, more so a method of extreme obfuscation, so feel free to correct me if my terminology is wrong in the article. I had this idea about a year or so ago but was recently inspired to make it due to recent posts relating to unicode[1,2]. I'm interested in learning about how this might be applicable in a real world scenario, seeing as I'm not normally involved in security. I hope you all enjoy :)

[1] https://news.ycombinator.com/item?id=29170954

[2] https://news.ycombinator.com/item?id=29062982
About the Urgency of Building Web3
That's pretty broad conclusions for Razib Khan to be drawing from scant (and biased) data. (The population of Indians in the United States in a non-random sampling of the Indian genome, especially since our immigration policy is largely selected on the basis on already having family networks based in the US. I would expect to see a lot more clustering than in an Indian sampling).

This is a better and more holistic description. I'd quibble withs some aspects of its framing but it's mostly nitpicks. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3514343/

The gist of it is that there are a lot of discrete, endogamous subgroups within India formed by successive waves of migration by different groups to where they are functionally distinct ethnic populations. So it wouldn't be all that different from racial differences in a plural society like the United States. What's remarkable is the maintenance of this plurality, as well as in-group social norms, over a very long span of time rather than it becoming a genetic melting pot as we might have expected from experiences with Europe. But even there you still have distinct groups with strong endogamy norms (e.g. Ashkenazi Jews).

There's also additional complexity because in many places there isn't just a norm of endogamy, but consanguinity (cousin-marriage). Which is certainly going to make groups look more endogamous even though it would lead us to draw subtly different conclusions about what that means in terms of historic cultural norms.

TL;DR it's a really complicated matter that doesn't lend itself to summarization into a single, clean, generalizable narrative.
no, in science, technique isn't frontier, discovery is. technique is just what you build to expand the frontier.
Building Zerodha with Kailash Nadh
I mixed hyperapp with hpyerscript.. My bad

In terms of "heavy", it's actually a problem with node's package management. Once I include test frameworks as dev dependencies, there's a high chance of installing my package will get the test framework together with it's whole bunch of dependencies installed as well - very unnecessary and time consuming.
I have been meaning to try out ASDF-VM. Currently my shell initialization script has at least 4 of these "version managers". While I don't really mind them (and they are mostly well-behaved), it might be nice to have something a bit more centralized.
It was really easy when I got my graduate degree in 1984. Don't know if I'd be able to do it today. (And yes, I'm serious).

My undergraduate degree was in math, and I switch to CS for graduate work because math got too hard.
https://eater.net
Yes, the `javascript:` prefix tells the browser to interpret the url as javascript. Try this one for example

javascript:alert('hello world');

Do note that some browsers remove the `javascript:` part when you paste it into the url bar because it could easily be used maliciously so you might have to type that yourself.
Writing notes where? In an app? Or the native notes app? Was it synced with your iCloud account?

There are too many variables at play before one can safely attribute it to an attack.
But at the same time indistinguishable by their reaction to Neil Diamond's "Sweet Caroline".
For basic document editing is as good now as ever. And it eats way less resources than the more modern conterparts.
Scott Manley has a good video on this topic:

https://youtu.be/_q2i0eu35aY
system administration hasn't died though it's just using more complex/sophisticated tooling than existed in the past and requires more development chops. Resulting in new names for the roles and the old hangouts becoming less relevant as they were arranged topically around technologies that are falling out of use primarily (atleast in the case of IRC channels etc). There isn't really a new home for these communities outside of stuff like the Apache and Kubernetes Slack instances which is very sad.
Correct. The json data type is less performant and stores the data more or less as lightly indexed text. jsonb optimizes the storage format and allows for more JSON operations, such as extracting individual keys.

For this product, if the super-generic API doesn't offer/require a need to do complex operations, though, json may be adequate to lookup items by id and present them.
Why one should ask to the original developer if the code can be modified?

If I see a code I want to change, I do it. I don't ask for permission. And colleagues can do the same with code I wrote. We trust each other.
I took only one CS class in college- taught by David Huffman. It was a wonderful class, most of it beyond me (I was a bio major who liked hacking) and I ultimately failed. So, IMHO it was definitely hard math (sphere packing, prefix-free codes) back in the 90s and I'm sure before that.

Amusingly, that failure so drove me to learn computer science that I'm now an expert, but I often get stuff like order calculations wrong because they don't correspond well with actual computer performance.
He makes money whenever he convinces someone he's right, of course he's convinced many to join his sect.
> Do I get some sort of token from their Matrix homeserver

correct

after you sign in, you will get a token, which you can then use to authenticate against matrix home server
Show HN: Create a simple, searchable wiki from Google Drive
Hi folks,

I've built a tool to quickly create wikis from Google Drive folders that makes it easy to find files fast. It's similar to creating a wiki with Google Sites, but it looks nicer and the search is faster and more accurate. You can easily publish public wikis to a custom domain too.

Here's the link: https://neat.wiki

Hope it's useful, any feedback is much appreciated.
Tape over the webcam. Problem solved.
That functionality alone, I don't find terrifying. It's what allows web-based video-conferencing with screen sharing. However, I'd consider this an abuse of it, you should not be pressured into giving consent to do that as part of a job application.

The same goes with the terrible online testing platforms that have grown in use during COVID. They're terrible, ineffective, and an invasion in privacy.
I just spent a bunch of time with pip yesterday that was best solved with apt install python3-psycopg2.
There's the BBC of course. They're actually pretty middle of the road, but overall I'd say there is a distinct left lean. Not enough to put me off, but enough to wind up 'proper' tories.
I’d ignore this thread and go to the spec. If local servers are emitting CORS headers they’ll work: https://wicg.github.io/private-network-access/#example-opt-i...
What degree you get kind of depends on which college you went to and when. The difference in my school between the eng track and the arts track was basically 2 classes between the two programs. Both programs were run by the same professors. If I had got the degree 10 years earlier I would not have been able to get it and only could have gone math with a study in CS. As is, I think my CS program was 6 hours away from an additional math degree. Which makes sense as the math programs typically were supersets of the CS degree for a long time. I do not know about the time after but from what I heard they simplified the program a bit and went more algerbra/java like you said.
Ahh, not so! I've been in contact with my hypothetical African colonialist-scientist, and after reading about the successes of Belgian phrenology in the 30s he's suggested that hypothetical African science might best isolate the "Scottish" from "British" via examination of tooth decay!!
Thanks for the info! Do you know if anyone's investigated OAuth2 or in particular IndieAuth (https://indieauth.spec.indieweb.org) which is an Open Web extension to OAuth2 which would remove the need for client registration, and still allow OAuth2 interactions to remove need for the credentials being shared?
That's a good analysis, thanks.

But I don't think any of it justifies the ire towards Python, its community, or its devs that was expressed in the blog post.

I also do want to point out that there are quite a lot of general-purpose CLI tools written in Perl, Ruby, and Node.
A Tic-tac-toe game from Markdown file
> And those businesses have a right to exist because... ?

Strange line of reasoning. Generally it is a good thing for businesses to exist because they create value: employment and wages, tax revenue, goods and services that wouldn't otherwise exist, and so on. Not sure why you would want to be antagonistic towards businesses "existing".
I've been developing with Python tweepy for almost 5 years, and I've never even benefited from Twitter development in any way, not even just once. I want my time back.
You didn't get the point.

What I'm tring to do is making a "writable" solution with pure JavaScript, not needing to write a lot of `React.createElement` or something similar. I even got `attr` and `prop` proxied to the correct element when building, no need to extract them form arguments each time inside an element.

What's more, it's only less than 5kb without gzip.
> Give it a break trying to paint them into victim

Russia is not a victim, absolutely - it's an autocratic regime trying to cling to the last vestiges of their former empire with ultra-violence when it feels threatened, with no respect for human life. It's also not some monstrous, one of a kind villain. Can you imagine what would have happened if, say, China started building military bases in Mexico? Would the US ever allow that to happen? No country with the power to stop such things allows hostile military presence to build up at its border - that's really the be-all, end-all of much of Russia's decisions.

> Russia isn't afraid of anything with nukes and it's oversized military.

Russia's military is hundred of times smaller than NATO's. If NATO ever decides to attack Russia, Russia's military will be easily wiped out. There are US nukes on Russia's borders (in Turkey, arguably in Israel; slightly further away, in UK, France). There are anti-missile shields near to Russia's borders (in Romania).
Per what I know and have read:

The emotional aspects of love last about seven years. After that, pragmatics and mutual understanding need to take over. We have invented the notion of marriage and seem to have overturned what nature may have intended to be.

Marriages predate written history. I cannot be sure what led to the concept, however, I can guess.

I have read that non-monogamy is more common in the world than what most people realize.

It seems to me that when the notion of marriage was brought in, people would have needed brainwashing into it. I see several cultural aspects around marriages, some still being followed, that hint this.

Then, of course, is the welfare of the children which is critically important.

I am chosing not to write more, but have perhaps hinted upon my viewpoints on this topic.
Searching for jobs with employees not mandating vaccines for their employees?
Some employers (in financial sector in East Coast) have sent out emails (marked as confidential) mandating vaccines, allowing for religious/medical exemptions, and failing which "your employment at <Xxx> will end by voluntary resignation" (newspeak!)

There is no criteria on how they would adjudicate the applications for accomodation.

my position is completely WFH!

Does any employer here hire without the need for employees to be vaccinated?
Any special job boards?

TIA!
So Russian forces were involved (moral base or not) in both your examples, while Western forces in neither.

Here's a more complete list of Russia's attacks on its neighbor's territories. You'll notice they're pretty much all victories in the end:

https://en.wikipedia.org/wiki/List_of_wars_involving_Russia#...

Still waiting to see those Western attacks on Russian territories that worry you so much to justify the aforementioned aggressions.
I will pay you cash to delete your NPM module
> The lack of understanding of even what a parametric method is, in CS, is very telling: NB. it has nothing to do with the final model having parameters. It is whether the method assumes a parametrised distribution of its input data.

Having done my PhD work on (Bayesian) nonparametric methods I'm struggling to parse this.

What is the input data? Just the explanatory (independent) variables? Both explanatory and response (dependent) variables? Are we talking about a joint or conditional parametric distribution?

Many parametric methods (e.g. OLS regression) make no assumption about the distribution of the explanatory variables. Many "nonparametric" methods do make parametric assumptions about the conditional distribution of the response variable(s) conditioned on the explanatory variable(s) (e.g. GP regression).

I don't see how this works as a classification for whether a method is "nonparametric" or not.
Are you saying that %v should be avoided in general, or just in the context of queries? (Go noob who doesn't understand %v)
We are actually working on fixing the password sending issue, see for instance https://github.com/matrix-org/matrix-doc/pull/3262

Of course, untrusted clients can do all kinds of evil things after having authenticated. (And also clients still need the plaintext password at least client-side no matter what we do)
Fortunately there are a thousand gigabytes in a terabyte and nobody is using a system with single or double digit gigs of storage anymore.

Unless you are trying to save a buck it seems 1TB is the standard today. My primary desktop has 4.
Still, if the math itself was repetitive it can be moved into a library/module that the shape classes call into.
Redefine Meat brings 3D printed vegan cuts to restaurants
I'm very sympathetic to Julia's confusion and your yarn/npm frustration. But consider whether those libraries themselves might also be part of the complexity that are not worth the cost. Julia's trying to use Vue. Vue (and Webpack, and Babel, and the entirety of NPM) nominally exists because it's supposed to improve the developer experience. If instead it contributes negatively in other ways and you have to spend so much time wading through the tangled mess that it confronts you with, what's the point?

Ignoring the nullified value proposition, there are other reasons besides (like security) to reject what the NodeJS/NPM world considers standard practice.
Lack of IPv6 support is unfortunately quite common among devices, as are buggy/bad/underbaked implementations.
The big difference is Rust and Go are new and learned from their predecessors. If they live long enough, they too will become complicated (well maybe not Go since it’s central design paradigm is simplicity) and seem crusty compared to newer counterparts. Java started simple, but has grown and “forked” and now there’s Kotlin or Scala etc. All that variation was because Java was successful and people wanted to use it but in a slightly different way. JavaScript is the same: people keep evolving it _because_ it is so popular.
If they were still there, why wouldn't you engage them about a modification you think was better than the original? Everyone learns in that situation.
> It's not like the previous tooling was really any easier to deal with.

If you really understood the previous tooling, that probably explains why you have the mental models in place to understand what webpacker is doing with increasing automation. Say, if you were using babel without webpacker already.

For people who skipped that or came to JS in webpacker era (myself included), it's hard to understand what is going on. the universe of what webpacker does seems inconsistent and random and involves concepts underlying concepts underlying concepts where it seems like you need to understand the mysterious base to understand what the top-level tool is doing before forgetting it and letting the tool do it for you.

But webpacker isn't just insane, it is what it is for a reason, involving solving specific problems that were in existence in previous ways of doing things. If you had those problems personally... it's a lot easier to make sense of it.

I assume/sense. I don't know this from personal experience with webpacker... but it's a familiar sort of situation with software development technology.
Toilet history after the nomad era
There is open-issue here: https://github.com/matrix-org/matrix-doc/issues/2615

and custom implementation: https://github.com/turt2live/matrix-oauth
I really like the concept, but I'm not happy with the implementation.

From what I can see, it makes a call and receives an access token. This token can then be used to make requests to the matrix server like sending or retrieving messages. If this component is used for a matrix client, this makes sense. If the component is used for another service or app, I don't think this is a good idea.
Subreddit Simulator using GPT-2 [Top posts]
There's a difference between "abstraction" as used in computer science and software development, and "abstraction" as an intellectual act or process.

The former itself seems to have a few different but related uses, but generally it is often a matter of modeling.

The latter is generally that act of the intellect that draws out something from a whole. So it's kind of an opposite process, in a very loose sense. The concept "greenness" is abstracted from images (or phantasms, in classical parlance) of particulars we encounter through the senses. We never encounter "greenness" in the world as a thing, only things which are green.

Where risk is concerned, I would expect the intellect to seize on the concept through abstraction (2), but any modeling of risk would involve the use of (1).
So no what?

Are you in all seriousness questioning the fact that a Buk SAM complex which crossed the border days earlier from Russia has shot down MH17? The evidence for this is clearer and presented in more excruciating detail than pretty much any other such crime, at least in the public domain. Phone calls, geolocated videos and photos, witness testimony...

I'm genuinely curious about the mental gymnastics one would need to resort to in order to deny that a Russian Buk shot down MH17.
Workers call the shots as job vacancies boom
I have not, but I do not see why it would be much slower than direct access to the storage. Databases are quite good at streaming rows.
He probably meant https://gitea.io ;)
How incidents made me a better engineer
They probably won't give you the drivers info. If you contact the police, they should contact Uber to get the info... as long as they decide to perform a thorough investigation (nobody hurt - depends where you are if they want to look into it). Better move quickly on it in case the deleted history is only kept in some transient log files. Good luck.
> Nevertheless, I wouldn't be so quick to dismiss it

An interesting psychological phenomenon in its own right, the human mind's ability to know (or, inability to not know) the future.
Nvidia Releases Open-Source Image Scaling SDK with Cross-Platform GPU Support
Python's trend of "reinvent it yourself" engineering leads inexorably to a sprawling mess of duplicated and incompatible projects. The source of this problem is Python's lack of "lead by example" on the topic of DRY code / implementations.

With Perl modules (like Python packages), the intent is to never have to rewrite them, but to make them so generic that they are just extended by new modules (that inherit the old modules) to gain more features. Their naming convention reinforces this intention, with "Net.pm", "Net/IMAP.pm", "Net/IMAP/SSL.pm", etc. Each one of those files can be uploaded to CPAN by a completely different developer, without having to completely re-write all the base stuff from scratch. You can already do that with Python, but because everyone names their packages "fizzbaggy", "unclib2", "OtherThingHere", etc, there's no sane convention that clearly tells you what this thing is, what it does, or what it depends on.

The end result of all that is a nightmare in terms of regular users figuring out how to install and use most Python scripts, packages, and tools. This is part of why Go is so popular now: no need for an engineering degree just to run a Python program!

I do not believe there is any way for Python to re-invent itself and suddenly become less sprawling or confusing. The shift would be too huge and take too long.
Most of the Black people in my section of the u.s. were stolen from Congo/Angola. To be precise, those of us whose ancestors came through Charleston, SC enroute to other areas in the southeast.

The devastation upon thriving, sustainable Indigenous economies — because we’re talking about peoples who made rainforests “work” before any human arrived in Europe or Asia — wrought by the trans-Atlantic slave trade from the 1500s onward and European colonialism is documented in Walter Rodney’s “How Europe Underdeveloped Africa” among hundreds of other analyses.

The level of eugenics and racism in the comments, let alone ignorance of the last 500 years of human history is incredible.
I would start by putting it in a path that won't be included in the users default $PATH, perhaps /sbin or /usr/sbin
I'm less worried about 3.1 as I was with 3.0. It took years (like more than three) for the move from 2 to 3, and still there's a couple of popular tools that still haven't fully supported 3.0 yet.
There's a large portion of the population who street park and don't have the luxury of charging overnight.
Yes on the native notes app. It's no longer synced to my iCloud because I couldn't afford the storage. Atleast, that's how I assume it works.
Why historical language is a challenge for artificial intelligence
And Julia's Pkg! One of my primary reasons for switching away from Python to Julia was how ergonomic modern dependency management was.
Because it wasn’t necessarily an improvement on the original code. A discussion should have happened either during the original commit or before the refactoring commit.
That's why async/await is about having an event loop driving a state machine so that you aren't blocking a thread, you're having a state machine wait on a result

Performance numbers don't care what's in your book
I hadn't heard of Resilio before, but their website makes it seem like a very attractive option.

In fact, their screenshots remind me of the biggest gripe I had with Syncthing back when I was using it daily in college- Syncthing doesn't let you browse a folder without downloading it. By the time I graduated, I had a good 2GB of Verilog crap sitting on my phone, just so that I could work on homework from my phone (of course, you could also blame me for putting Vivado projects in my Documents folder).
In Canada, the most money you can get paid from public maternity leave benefits if you take the standard 12 months off is about $30k CAD (~$24k USD).

It's a major pay cut if you have a high-paying job, so if you are a developer making $100k, you are going to have a large reduction in your standard of living. The monetary incentive is still very much to work as much as possible.
Taking off in Germany as well.
Slowly because the law does mandate an API but doesn't specify any technical details

Also because of a complicated authentication and registration system (with the regulator)

But the banks finally did something after they were ordered to do so. They were quite hesitant before because it weakens their control over the customers finances.