skysight-inc/HackerNews huggingface dataset:
Can someone familiar explain why the AO thinks it would take $2 BILLION and 9 years to implement? Similarly (on a significantly smaller scale), why would it take $XX Million and 3 years to implement?

From a total noobs perspective (mine), it seems that all they would have to do is remove the paywall; assumedly there was already a security review of the product, so this should involve removing blockers and not necessarily reimplementing the wheel.

Where do those numbers and estimates come from? They seem wildly inflated to someone not in the govt industry, but I assume (perhaps generously) that there is some internal logic behind it...
Vscode runs in browser and we will see a new startup in this space doing better than replit, with less effort by outsourcing ide to Microsoft which does great ides.

You can also checkout gitpod in the meantime.
Lol, I guess I just bought myself an Xmas present...Just ordered a matched pair of the keychains and 2 sets of rings from 2nd link.
By causing unecessary waste. Apple signed a deal with China in 2016 and made a big deal in the US about standing up to the feds. Apple isnt setting an standards.. all they are are glorified snakeoil salesmen. Slimiest, worthless slime of a company
> If you've ever been within a mile of a research lab this shouldn't be remotely shocking. Typical research is done rapidly, sloppily, and in a context where getting the "right" answer is the only incentive.

Let me preface that by saying that 50% sounds like an awful lot, even bearing in mind the following.

On top of that, these studies focus on highly complicated phenomena, where almost anything could play a role. It is common that one factor that is not necessarily accounted for in a study turns out to be important, even in well-run studies. Flukes happen as well.

Failure to replicate per se is not a problem, if the original study was done well and honestly. It is still some data points that could be re interpreted later in the light of other studies.

Now, the fact that there is so little incentive to publish confirmation studies is a big problem, because it means that these non-reproducible works are not as challenged as they should be.

Remember that one study is meaningless. Even with tiny rates of false positive or negative, erroneous conclusions are bound to happen at some point. A result is not significant unless it has been observed independently by different research groups.
The day Chrome (and it’s derivatives) kill my extensions, is the day I switch to Firefox. I cannot live without my adblocking.
React-Quickstart: A Modern Template to Jump Start Your React Project
This is "The Good" part of the lessons. There's also "The Bad" one: https://cdagostino.io/posts/2018-03-28-one-year-common-lisp-...
Not the same interview, but a talk also covering his time at Los Alamos: https://www.youtube.com/watch?v=hTRVlUT665U
Not boring (packy McCormick) has a fund that invested in replit

Packy likes to use buzz worthy words that don't really mean much, but he means well.
This is going to blow your mind, but some of those rich people created value commensurate with their wealth. Some of them are no doubt entitled clowns, but you don't often get to Jeff Bezos's kind of money without adding some value along the way.

No clue what your slavery quip has to do with anything.
> what if the neighbors collude and vote that you failed to improve the park despite having done what was specified. The contract could further specify that some neutral third party acts as an arbiter in that case.

If there's anything that shows that Web3.0, smart contracts and so on are a bad solution in search of a non-existent problem, it's this.

The ``problem'' is apparently that we don't trust each other and our institutions. The ``solution'' is to create a protocol for trust-less commitments. The bug is that the protocol ultimately relies on the fact that we trust each other and our institutions.

Can Web. 3.0 remove some friction from the system? Maybe. Enough to revolutionize it? Highly doubt it.
I ran into this situation earlier this year, minus the horrific personal tragedy, I hope he's in a better condition now, I'm deeply sorry about having to go through that.

I called AWS To deactivate my account in May of 2020 because I was going through some medical hardships and wouldn't be able to maintain anything on there for awhile and I wanted to double check that I wasn't going to keep getting charged if I forgot to manually turn something off. I thought all went well and it would be turned off, until I checked my bank around a few months ago and noticed I was still getting charged for AWS.

I spent 3 weeks trying to get support to why I was still getting charged and for much more than I had ever set uo, but they wouldn't tell me anything because none of my emails matched any accounts they had on record. I finally got a support person to slip when I told her the name of my company and she said it was similar to the email on file, but that it was a Gmail account. I've never made a Gmail account for my business and I was the only one that ever had access to the AWS account. I don't know how someone could have gotten into the account and changed the email, but I couldn't log in and the only thing I could do was have my credit card company cancel the charges (which could only go back 3 months) and prevent new charges. I'm still baffled about how this happened, but I've moved to GCP and will never go back, those 3 weeks were insanely frustrating.

I wanted to fight tooth and nail, just because I'm sick of ultra-large corps' ability to get away with stuff like this, but my wife was worried about Amazon's retaliation and not being able to use Amazon to buy things which is half the problem. I don't really have any advice, but maybe if enough people share their stories something will make it to a headline.
Yes, eyeroll, I was thinking douchey-meter overload, but the eye roll is certainly more diplomatic.
Generally, I agree - the two complement each other. The difference is that uBO is client side and its use can be detected. A DNS sink will work, no matter what was configured on the server end. Further, the DNS sink will hide elements - everywhere ADs are placed I see simple whitespace. Finally, scripts are blocked from even getting loaded - e.g. stats for the top scripts blocked today (2 hours in) for me:

Count:Type:Blocked Domain

4154:DNSBL_A:browser.pipe.aria.microsoft.com;
445:DNSBL_A:googleads.g.doubleclick.net;
421:DNSBL_A:www.googleadservices.com;
414:DNSBL_A:app-measurement.com;
356:DNSBL_A:in.treasuredata.com;
283:DNSBL_A:incoming.telemetry.mozilla.org;
254:DNSBL_A:reports.crashlytics.com;
239:DNSBL_A:config.inmobi.com;
146:DNSBL_A:telemetry.sdk.inmobi.com;
125:DNSBL_A:www.googletagmanager.com;
2.2 tried to create a "safe for unpickling" way (https://docs.python.org/2.2/lib/pickle-sec.html) which unsurprisingly failed (https://www.python.org/dev/peps/pep-0307/ 2003)

> This feature gives a false sense of security: nobody has ever done the necessary, extensive, code audit to prove that unpickling untrusted pickles cannot invoke unwanted code, and in fact bugs in the Python 2.2 pickle.py module make it easy to circumvent these security measures.

> We firmly believe that, on the Internet, it is better to know that you are using an insecure protocol than to trust a protocol to be secure whose implementation hasn't been thoroughly checked.

A few years ago, I think around 2016, there was a series of RCEs in many Java apps because they used the Java equivalent of pickle with the Java equivalent of "make pickle safe", which did not work.
> I get it, it's hard to see past the memes and bubbles and bullshit and buzzwords in the crypto industry.

I really don't think you do get it.
But that's a reality I can believe in.

Some large actors dominating the market and with that come regulations (AML/KYC), laws and borders and in the end it's like the traditional financial system with a VM and JavaScript instead of COBOL.

Whether that has any practical benefits to regular people remains to be seen. Perhaps, Perhaps not.
Unusual to find an RCE format string vuln in Java.
Don’t believe me?

Is covid such a deadly virus we should have lockdowns and mandates that 40% of the population disagree with?

Yes?

What is the story you have believed in this situation, and what are the facts?

We had the same amount of drunk driving deaths here in my county the last month as we did covid. Yet bars are open, school children still wear masks.
It's 80m on 800m valuation. It was on some tweet.
React Without Memo
Hey Francois, congratulations on building a great product. It deserves to attract a much higher ranking on hackernews that it has got. Might be worth waiting a few days and posting again.

I can imagine it sucks when you have worked so hard on a product and it does not get the recognition it deserves.

I have been working on a website builder of sorts but I have focused on the real estate sector. I haven't been successfull enough to be completely sure that my advice is correct but I suspect your tool would do better if it was more focused on one or two products. As a creator you are rightfully proud that when someone arrives on your site they have a lot of options. I personally found that overwhelming and confusing. Hope this little bit of feedback can help you improve your product rather than disappoint you.

Best of luck with it!!!!!
DHT doesn't use trackers: https://en.wikipedia.org/wiki/Mainline_DHT

What's true for SMTP also holds for BTC etc. Most users are just handing custody to exchanges, so crypto isn't really decentralized either.
Is there any scientific study (facts...) to this article? Generally I think I change my mind if new (reliable and significant) facts come in.
It does cause untold death and pain [1] and yet some people are unwilling to give it up. Sounds like there's some parallels at least.

[1] https://www.swov.nl/sites/default/files/media/media.up/fs_in...
Really wish the Python core developers would focus on this situation and almagate one official solution for installation, env and package management and one click distribution.
Knuth’s AOCP boxed set!
I would say Bitcoin is a part of Web3.
Are there no consumer advocacy organizations that normal people have access to?
If I understood Web3 correctly, it would be exactly like traditional web, except that:

* The source code of all websites would be open-source, and accessible to anyone. It could still be changed, but it could not be done secretly.
* All the actions of the users of the websites would be public.

If we take social forums, for example Hacker News, it would mean that:

* The algorithm behind the front page of social forums would be known. Administrators would have no way of secretly skewing it.
* When a moderator would delete a message, they would merely mark them as deleted in the blockchain, and they would merely be hidden in the UI that you use to see the blockchain. The message would still be accessible on the blockchain.

The biggest downside, though, is that there would be a fee to any action done on the website (posting, moderation actions, changing your profile, ...).
From a quick look at the lunasec page, it looks we can mitigate by blocking outbound LDAP traffic to unknown destinations?
A bump means people in the market are trading their shares with each other at 20-30% higher than what the company sold to the market for, that's what it means by money on the table. It's as if they sold for below market value. An IPO pop cannot immediately be turned into cash to spend, can't pay for ads with stock
Do you want to call out any particularly malicious ad blockers here? Just in case I happen to have installed one of them.
Listening level affects the way your hearing weighs frequencies.

Also: a violin is an acoustic instrument, it's loudness is part of it's qualities
Well, thank you for the report and correction, clearly the "the app's data collection practices" is an excuse to hide some other reasons, I hope the app will be back regularlu in the stores and not only via APK.
NotJustBikes doesn't think cars should be abolished.

In fact, they shared a video just three weeks ago about how non-car-centered cities are _better_ to drive in:

https://www.youtube.com/watch?v=d8RRE2rDw4k

Car-centric designs for cities makes living in cities worse, _even for people who like cars_.

The thesis of Strong Towns isn't that we should ban cars, it's that we should stop _subsidizing_ something that we know is bad for us (in economic terms, health terms, quality-of-life terms, and in ecological terms)
Title would still be a dupe with multiple recent discussions.
Feynman could talk about the color of beer coasters and it would be a fascinating read full of great anecdotes
Stated like this it comes across like a software rewrite, with all its inherent fallacies: underestimating the effort, misjudging the complexity of the original system and comparing known to unknown outcomes.

That's not to say it's inherently a bad idea, rewrites are sometimes useful but you need to acknowledge those factors.
That's only a partial motivator. A lot of things aren't allowed, even within those boundaries, for "security" reasons.
Can you give a practical example?
Every disastrous technology/standard has been when people have shoehorned different agendas into one thing. The shorter the keyword and catchier the better.

Web 3 is shaping up to be excellent for this! Prepare your resume. Start early, add Web 3 in there.

To marketers, it means better targeted advertising (more is just a side effect they love). To hackers, it means decentralization and going back to 1.0... IRC, but better, Usenet, but better, Blogs, but better... To Megacorps, it means more control, more moneeeeey. To governments, more control, more transparency. To humanists, absolutely nothing. This is shaping to advance humanity in absolutely no way better than 1.0 did.

So get the popcorn ready, update your resumes and join the penthouse of the jaded.
The 'formatMsgNoLookups' property was added in version 2.10.0, per the JIRA Issue LOG4J2-2109 [1] that proposed it. Therefore the 'formatMsgNoLookups=true' mitigation strategy is available in version 2.10.0 and higher, but is no longer necessary with version 2.15.0, because it then becomes the default behavior [2][3].

If you are using a version older than 2.10.0 and cannot upgrade, your mitigation choices are:

- Modify every logging pattern layout to say %m{nolookups} instead of %m in your logging config files, see details at https://issues.apache.org/jira/browse/LOG4J2-2109

or

- Substitute a non-vulnerable or empty implementation of the class org.apache.logging.log4j.core.lookup.JndiLookup, in a way that your classloader uses your replacement instead of the vulnerable version of the class. Refer to your application's or stack's classloading documentation to understand this behavior.

[1] https://issues.apache.org/jira/browse/LOG4J2-2109
[2] https://github.com/apache/logging-log4j2/pull/607/files
[3] https://issues.apache.org/jira/browse/LOG4J2-3198
I'm so confused by the idea that Tokyo is somehow bike-centric. Perhaps there's another Tokyo somewhere in Japan that is not a subway-and-taxi centric metropolitan area where bikes are rarely seen.

It's a pedestrian-friendly city, though, I'll give you that.
On Networking:

I highly recommend - An Engineering Approach to Computer Networking: ATM Networks, the Internet, and the Telephone Network by S. Keshav. Unlike other books, it actually does give you a 360 degree view of the entire field which is no mean task.

On Operating Systems:

I have heard good things about Operating Systems: Three Easy Pieces by Arpaci-Dusseau though i haven't read it myself.
I will quote from an article I wrote in CoinDesk last year:

https://www.coindesk.com/tech/2020/03/12/in-defense-of-block...

For every technology we use today, there was a time it was laughably inadequate as a replacement for what came before.

Code isn’t law, code is better than law. I wondered what I would have done 300 years agi before computers, and realized I’d probably be an architect or one of those lawmaker guys who wrote the Constitution. I mean think about it … you’re setting initial conditions, trying to think of edge cases, putting in Byzantine Consensus (checks and balances between branches of government, mutually distrusting parties checking election results etc.), but making it an Upgradeable smart contracts (process to do amendments etc.)

Now CODE can do a lot more. In our applications for instance, you can:

1) Know the average amount spent on food or clothing by a citizen of a city

2) Vote on how much of food, clothing etc to simply subsidize by issuing more currency and airdropping it to the people (universal basic income)

3) Take a dot product between 1 and 2, and issue the universal basic income or stipend etc. and redistribute the wealth in the community according to the

And best of all — it is entirely voluntary, thanks to smart contracts. No one has to accept your currency by fiat. But if they do, they’re helping to end food insecurity in your community. Just like that. No representative democracy and out of touch elites. Just the community taking care of its business and its vulnerable. Via a smart contract and decision making.

And that is just ONE of the many applications that are possible. Intercoin has produced 10-15 applications that can all work together like LEGOs. Now we will be giving them to communities. Here are some more possibilities:

https://intercoin.org/communities.pdf
If anyone in that circumstances then would not pay the bill and tries to know the reason behind demanded full payment and raise complaint against AWS.

Anyone in need of personal or corporate investigation then visit at https://www.spydetectiveagency.com
It sounds like you're suggesting that if it could get the number right, it would probably also be able to model people well enough to understand they would consider it a mistake.

We don't have to reason with counter-factuals here. GPT-3 just reproduces language. It isn't trained to be right, it's trained to predict and reproduce language so it has no incentive to be right. And the pattern of saying something correct but wound-sounding is quire rare in my experience. Most people who do that do it by accident as well I think.

It also has no model of people and it knows no numbers. Everything it spits out is response to context, which does allow to seem to model people and seem to know numbers.

No doubt, it has an association with some article describing the actual distance of an Everest ascent as well many other facts and misinformation about Everest. It will spit all this out in context.
I think your comment, and the one you responded to, are both correct. If our legal/governing system was able to adapt more quickly and keep up with the pace of modern technological advances, we would all be better off. The challenge is, how?
The Matrix Awakens: An Unreal Engine 5 Experience
> 1) Steel core ammunition is illegal for use in handguns since its armor piercing. Banning lead without relaxing rules on steel would create legal problems. And in some states steel core is illegal in all types of firearms.

It wouldn't surprise me if this were the secret goal for some people.
> Neither location mentions what should I think be by far the main purpose of scrollbar-gutter: avoiding layout shift when you open a modal and disable the page’s scrollbar to avoid confusion.

This can already be avoided by layering things right and not removing the scrollbar.
this Snort signature should detect it fairly reliably:

alert tcp -> ( msg:"log4j rce detection"; content:"|24 7b|jndi|3a|"; nocase; )
Nothing about what you’re suggesting now needs a blockchain and having local money doesn’t prevent outside influence just changes how it is spent. People will just spend it on those that hold local money or have influence over those that do. You’re trying to passively solve a complex, hierarchical social problem with technology when we know that’s bound to fail or at best paper over the cracks.

And yeah there are lots of places that local government sucks but there are also lots of places where it doesn’t and I guarantee you the reason isn’t tech.
There are comments suggesting that this was reported the Apache some time ago, but a CVE wasn't assigned? Getting a CVE assigned, even with hardly any details at all ("get ready to upgrade log4j") could have really helped people here.
The linked video as well for those who want to skip straight to it: https://www.youtube.com/watch?v=WU0gvPcc3jQ

FX Guide also has an article about it with more details https://www.fxguide.com/fxfeatured/the-matrix-is-unreal/
Depends what you call a fact. If I say that this Processor is the best at these benchmark, does it matter that the benchmark favors it? If I say a camera takes the best images, but omit they’re difficult to do consistently does it have the best quality? If I said these headphones sound the best and produce the most accurate sound, what if it’s true for me but not for your music genres?
I’ve used Better for a long time and it’s not a scam. It also doesn’t have access to web content.
Escrow services do exist, and usually one of the parties has more power over the transaction than the other. Either the buyer or the seller can cheat the other one out of their money or goods. How do you prove that the package didn’t just contain a heavy brick instead of the promised tablet? I‘m not convinced this can be solved by any kind of contract.
I just think it's hilarious that they simultaneously call chrome old hat while boasting that they're the same as chrome.
I don't think that the convenience of moving money around has much to do with what the article's talking about. It's more about flexibility when there're more than just one party involved--the kind of stuff that with fiat you'd have to hire lawyers for.