skysight-inc/HackerNews huggingface dataset:
Same class of bug that completely broke Android app signing. In that case it was about ZIP file parsing differences (apps checked at install time by one parser, executed using another parser). And also the same bug class that allowed us to bypass Nintendo's mitigation for the Twilight Hack (Wii Zelda savegame exploit), twice. In that case it was about how they handled the savefile archives slightly differently from existing save data and the game itself.

Having multiple parsers for security-sensitive data that isn't just outright signed at an external layer is always a recipe for disaster.
never thought i would see the day. I guess congrats to YCombinator’s first golden child? They were first cohort of YC I believe?

really happy for them, for a long while they were languishing with no growth whatsoever. Their monetization strategy is still really unclear/unproven but clearly some investors saw enough to go ahead and bet big. good for them.
Could it be that authors of this post are trying to portray NSO as more powerful than they actually are? Could there be elements in googleprojectzero that work for NSO?

It is a well known method to make a spy operation more elaborate to worry adversaries.
> Are there any popular non-Rails uses for Ruby?

No. I'm going to get downvoted for this, but Ruby isn't popular itself (with or without Rails). It's barely more popular than Fortran, according to TIOBE[1]. It cracks the top 10 according to Redmonk, but has been generally declining since 2012[2].

Somewhat shockingly, it's even less widely used than Rust according to Stack Overflow[3].

They also found Ruby has a 53% loved vs. 47% dreaded score, compared to Python's 68% and 32%. It's especially surprising that Stack Overflow's respondents like Ruby less than JavaScript and SQL, the two most frustrating languages I have ever been forced to work with myself.

> Python and Ruby occupy the same space and use cases

This is absolutely untrue. I personally loathe Python, but it is perhaps the most useful language you can learn right now, and it barely overlaps with Ruby.

It's huge in statistics/data science and machine learning. It's not the most common web backend, but it still has a fairly large ecosystem for the web. It's rapidly rising in popularity, too.

1. https://www.tiobe.com/tiobe-index/

2. https://redmonk.com/kfitzpatrick/2021/03/02/redmonk-top-20-l...

3. https://insights.stackoverflow.com/survey/2021#most-popular-...
I don't think a lot Gen Z don't like the old.reddit.com because it looks kind of old fashioned vs say react "modern" pages and they're afraid of lookign old-fashioned. However, that is what keeps me coming back along with relative anonymity and content on topics that I like.
It's a company with experienced software engineers and a real product, very unlikely.
This is accurate. They have lead left for their syndicate selected if they’re going the traditional underwriter route. They’ll pick all the banks for their syndicate with help from their advisors, and then teach sell side research about the company and use this as a trial period for fielding questions while everyone is under NDA’s before the public flip. Once the roadshow is launched it’ll be something between 1-2 weeks before pricing, though that’s been compressed towards ~1 week since everyone is doing digital meetings now vs in person.
Undetected PowerShell Backdoor **See comment for URL**
>Non-platonic (as in, flirtatious, romantic, sexual) chatbots are not allowed.

tfw no GPT-3 waifu
There is also https://i.reddit.com/
>public image/perception among the tech crowd

I don't feel like Apple cares at all about perception among the tech crowd. So many things they champion draw the ire of us.
So does an IPO make their dark patterns ("download the app or we will annoy you forever") better or worse? It's either money for continued operations or the pressure to milk active users for cash.
First of all, why would you want the game to interact with your display server what so ever (aside from alt+tab)? This is why full screen exists.

>[In VRR] Whenever an application is slower than the displays maximum refresh rate the display will wait for the next frame before it updates the pixels and thus you don’t see any stutter

Nothing so simple. VRR means your framerate fluctuates, which means you have stutter, by definition. Perhaps if you can bound it within a sufficiently small range that it wont be perceptible. If game framerates _did_ have predictably small variance, everyone would just generate the new frame right before VBI and have perfect (practically) latency free, no tear, no stutter, no motion blur (via BFI/CRT) rendering.

>Not all displays have this functionality (yet) because it’s difficult to make it work well: In many displays with different refresh rates the brightness changes a lot, so if the refresh rate jumps around you’ll see the display constantly flicker in brightness.

The brightness only changes if you are using Black Frame Insertion (on old monitors you can't use VRR at the same time as BFI; on newer ones this is supposedely fixed, i have no idea how or if it's valid). One big issue though is that VRR makes liquid crystal transitions even harder than it already is to happen fast and artifact-free.

These measurements are bad for various reasons. There's also the obvious question: how does Wayland actually change the framebuffer? Direct scanout is a term I've never heard that could mean many things... I guess you get control over scanout, so you could render during VBI and have zero latency in this part of the loop, in which case why even measure it.
Yep. Tesla has a fast path to success if they can buy Agility Robotics. Then they can slap their AI hardware on Digit, start training navigation in Dojo, rev the Digit design to integrate that AI hardware, and the hardware engineers will be spinning up production in parallel to the AI team training navigation. In one year they could be showing off a Tesla robot walking around the Tesla factory moving boxes (Agility already has this demo).

I also just think Digit plausibly looks like a Tesla product (as opposed to Boston Dynamics Atlas).
When I watch movies like this I absolutely dig the scenery ang general graphical quality. As for the rest, I just do not pay attention. Same as for many songs. I like the melody, voices, arrangement but I do not really listen to words. The minute I do it'll ruin the piece.
Reddit also used to say "We won't use your email address for anything except password resets", and we all know how that went.

They've basically stopped adding new features to the old UI, so a lot of account settings require you to go to the new UI if you want to change them (and of course the most annoying settings typically default to "on" when the toggle is added). The markdown handling has also changed. That's why on old Reddit you'll sometimes see broken URLs with superfluous escape characters.
> But who knows how long the api will last?

The clock is ticking on that. I'd wager we see it shut down within the next 2 years. There will be insane pressure to increase ad revenue now, even more pressure than was already there. 3rd-party clients are a "leak" in this regard.
Since you're getting a lot of contrary viewpoints, I'll be the one to echo your opinion. I'm seeing a lot more people more interested in "winning" an argument/discussion than in engaging in a discussion.
I was curious. play.rust-lang.org here. Figures. "n" on the other hand, exactly where you'd expect.
What is a fairer way to allocate resources than you produce for me and I produce for you?

Seems to me any other system is open to being gamed. Sure there are people born into generational wealth. But those are like one in a million and generational wealth doesn't typically last more than a handful of generations as the number of descendants grows exponentially.
Much appreciated feedback!
this lists the addresses and keys and breaks down how it works

https://blog.google/threat-analysis-group/disrupting-glupteb...
ISO 646
You’re not wrong. Mining operators tamper their energy meters so their usage don’t reflect in the bill. My neighbour turned his residence into a mining farm, judging by the ludicrous number of installed air conditioning lol.
Hey, you didn't hear me praising Dune.
Both of the problems you mention have been fixed.
> I really can’t think of something more reliable and cheaper with assurances of availability like this

Assurances that they only need because they're breaking the law. It is well established that blockchains are good to facilitating illegal behavior. This is just a novel way of using them for that purpose
Yes. I agree. The movies don't show Gandalf casting a spell on the door in Moria and the counter spell being cast by Durin's Bane. Nor Glorfindel helping Frodo escape the Ringwraiths or Gandalf repelling the wraiths alone on Weathertop. Those would have been cool to include.

As sacrilegious as this sounds to the majority of the fanbase, I hold hope that the trilogy will be rebooted by another director. Not necessarily as a way to create a superior product, but to compare how two studios have approached the story.
But the idea that Amazon or Microsoft or Google would host anything at apple is pretty out there.

Apple uses their competitor's services because they can't build their own cloud and host their own shit. The big boys don't use competitors for services they are capable of building themselves.
That is not a good summary. In fact, Im not sure it applies to this article at all?

it doesn't say pilots are produced in China?

There are no such thing as "pilot factories" or atleast they're not mentioned in the article.
One thing that’s not clear to me (and maybe this has to do with how vp8 works?). In h264/h265 you have I frames (which are standalone) and P frames.

If I recall correctly, P frames require having decoded the immediately preceding frame or video corruption occurs until a new I frame is received.

With SFU selectively choosing which resolution stream to send a frame from next, how does this work? Is the client encoding each frame as an I frame? Is there feedback from the SFU to tell the client which stream its using so that the client knows to emit I frames (and thus generating a few corrupted frames until the stream is resynced)? Does vp8 work differently?
UI makes it easier, count at least you as being surprised how much messages are posted onchain and then spread across Crypto Telegram, Crypto Twitter, and then to broader news sources
It never actually IPOed, but Theranos?
Prednisone? Prednisone is quite dangerous, especially if used improperly.

Some forms of birth control have fairly common contraindications, and patients should arguably be screened. That being said, a pharmacist could do this.
Reddit in the last 2-3 years was ruined by itself. The homepage became more and more polarized and I'm sure it's by tweaking the algorithm to create more traffic and clicks.
The killing of Secret Santa and Reddit gifts showed that the company doesn't care about the community at all, but it's focused on maximizing revenue for the future IPO.
Really sad about this as the site was being able to stay out of the toxic environment of the social media giants for a long time.
I'll stop using Reddit because the moderators of almost every subreddit are rabid radical liberals who won't tolerate the slightest dissent from the party line.

I stick mostly to /r/DIY, /r/datahoarder, and a few other technical subreddits where idiots dare to venture, but it's still getting so bad that I'm frankly just considering heading back to AnandTech and Level1Techs for my technical discussions and finding some good woodworker websites for my hobby.

Reddit is so far away from what Aaron Swartz envisioned and worked on, that for the first time ever, I'm glad he's dead - he'd probably kill himself again if he could see what's been done to the site.
Gotta Go Turdle
I've just downloaded the whole case file from PACER, I'll upload it somewhere in a minute. They served the defendants by FedEx a few days after filing the case. Then somehow Google immediately managed to get a Temporary Restraining Order (TRO) in record time to enjoin the defendants from their tomfoolery. Not sure at this stage how the TRO will be enforced.
I realize that it might be the whole point that it shouldn't matter whether modern Greeks are descendant of ancient Greeks. But I still find it odd that an article about the topic nowadays doesn't mention DNA analysis such as this one: https://www.science.org/content/article/greeks-really-do-hav...
> If you check every node that the hare enters, you don't need the relative speed to be coprime to the cycle-length. This eliminates the need for the hare and tortoise to finish a round on the same node

> This change adds a performance penalty with the extra equality checks, but can reduce the total number of steps in certain contexts

The post seems to think that most of the value in this approach comes from the fact that it's easy to identify the beginning of the cycle after you've identified that the cycle exists. The method relies on the tortoise and hare finishing a round on the same node. Does that generalize to the case where the hare just passes the tortoise at some point?
I've talked to some professional filmmakers who love the books and feel the same way.

I disagree, but there are people who know what they're talking about that have similar thoughts.
Given https://web.archive.org/web/19981206145505/https://www.techn... I think we can set the year to 1998. Pretty cool to get an Internet Archive link from that early.
That sounds weird. Are you saying that doing more work than better-paid employees shouldn’t be an argument during salary negotiations?
This is the text from a letter from Google to the judge yesterday:

First, with respect to Thursday’s hearing, in light of Defendants’ failure to oppose
Google’s motion, Google intends to rely on the declarations of Shane Huntley and
Elizabeth Bisbee, which fully support the proposed Preliminary Injunction. Should the
Court prefer to receive live testimony from one or both of Google’s declarants, Google
respectfully requests that they be permitted to appear virtually, as each would be
required to travel from out of state (from the West Coast, in Mr. Huntley’s case) to appear
in person.
Second, as anticipated, following the disruption efforts pursuant to the TRO,
Defendants have attempted to reconstitute the botnet by using the Bitcoin blockchain to
direct the infected devices to new command-and-control (“C2”) servers and migrated the
storefronts used in service of the Enterprise to new name servers. See ECF 5 (Compl.)
¶¶ 47-50, 54-65. Google’s disruption efforts already have identified several new C2
servers, and Google is working with the relevant web-hosting providers to disable them.
Case 1:21-cv-10260-DLC Document 14 Filed 12/14/21 Page 1 of 2
December 14, 2021
Page 2
While the TRO provides that Google may move to modify the Order in the event it
identifies new domains, see ECF 8 (TRO) at 11 16, Defendants are generating new
domains nearly every day in an effort to evade the TRO. Rather than submit repeated
requests to the Court to add new domains and IP addresses as they are identified, Google
respectfully requests broader injunctive language to cover, for example, any C2 servers
identified in blockchain transactions initiated by Defendants and/or the Enterprise, any
domains used to host storefronts used in connection with Defendants’ criminal schemes,
and any domains identified by Google as hardcoded in the malware or otherwise used to
distribute the malware. A proposed Preliminary Injunction Order is attached at Exhibit
1.
Finally, the TRO provides that “Google shall post bond in the amount of $75,000
to be paid into the Court registry.” ECF 8 (TRO) at 16. The Clerk has requested that
Google instead submit the required bond to the Clerk and seek a modified order directing
the Clerk to accept the bond. Accordingly, to accommodate the Clerk’s request, Google
respectfully requests that the Court so-order that Google’s submission of the $75,000 to
the Clerk satisfies the TRO’s bond requirement. Google’s Proposed Order at Exhibit 1
incorporates this modification.
I mean, of course it is, it's just saving the PNG; it's not going to decode it and then re-encode it or something!
Or like just a terms of service interpretation that they didn't even know of

Platformless internet, whats what people mean by web3 and I’m here for it

A public utility that can just be optionally used no matter what people think of you
Counterpoint: Maine.
My school keeps sending my kid home with food for “supper” simply because they keep buying so much of it to act like a soup kitchen and they need to get rid of it all. I keep telling them not to accept it, but they apparently have no choice. It’s weird.
I have some thoughts about this:

1. The state has to remain in the school business as a back-up for schools that fail, kids who get kicked out, and regions that have insufficient capacity because it's not profitable to run schools there. The public schools need to provide excess capacity so the private ones can operate at capacity and take financial risks. As a result, the state bears the risk.

2. A fleet of SUV's hit the road at 6:00 AM every day to carry kids to the far flung schools that their parents managed to get them into.

3. A shortage of available capacity, turnover in administration and ownership of schools, statistical variance, and opaque metrics make it impossible for parents to actually make an informed choice based on the quality of schools. It will be a crap shoot.
Teacher incomes in the US are greater than Denmark, Korea, New Zealand, Norway, Japan, and Sweden. And while those countries may have universal healthcare, I don't think I've ever heard of a school district not providing health insurance to teachers.

https://www.cnbc.com/2021/10/05/heres-how-much-teachers-arou...
> In biological construction, there is no clearly defined blueprint that shows the final structure. Instead, our genes contain the information to make the structure by controlling a sequence of events during morphogenesis.

This seems obvious now, but it never occurred to me. It inspires me to try to stay more focused on good processes and less on desired outcomes.
In 2021 you can always get a blitz game in 1 or 2 seconds on lichess by choosing one of the standard time controls (in the "quick game" tab, which is the front page).
Lichess is a bit sluggish in navigation, but it's almost purely community driven and you can feel that! I do support them and I really like their transparent philosophy, they even show you WHERE do they spend EVERY received $! Yes, there are some flaws, but me with other guys are actually making the website just better every day. Chess.com sure has their own philosophy, better moderation, better news articles (sometimes written by professional journalists), but hey, it's almost like a comparison of good paid service with good opensource community driven thing. Like... Windows vs Linux. Both do have their downsides, but the core philosophies are different and you just follow them or not.
> Most people's phone numbers change fairly frequently.

Citation?

I think it’s just as easy to claim (and I certainly would bet that) most people’s phone numbers do not change frequently - I’d wager on something like 70% remain the same for 5+ years.

Curious / interested to be proven wrong though?
Noooo… this will be the end of Reddit.
www.abebooks.com is what you’re looking for.

although Amazon acquired them.
I agree with the comments.

It's really weird however that in some parts, Jackson goes at length to be very faithful to the book, almost in an unnecessary way. Yet in most places he decides to venture far away from what Tolkien wrote or suggested, making it into a pretty mixed bag.

Not only missing the Scouring of the Shire was bad, it was essential in Tolkien's philosophy of life (which is essential Christian at core). You can do good, but nothing guarantees that you will be rewarded for it, and the Scouring of the Shire is a stark reminder of that.

Instead, Jackson went for a Disney(TM) Happy End. Seriously?

Let's not forget Jackson is also to thank for Gandalf tackling Pippin with his staff when he finally grows up and tries to act like a responsible adult in front of Denethor as he tells about Boromir's death. That must have been the worst thing in the whole trilogy. This is exactly the opposite of how Gandalf reacts in the book.

https://www.youtube.com/watch?v=F5OxGHBMFEo

Aside from that, Jackson has a weird tendency to make everything look overtly visual instead of suggesting things. Theoden is "possessed" by Sauron, not by some kind of magical spell (that makes his beard change size!), but because of Wormtongue's ill influence over him. That's it!

In the same line, The Mouth of Sauron is represented by a character whose Mouth is the only thing visible from his face, and overtly large and dirty. This does not make sense. The Mouth of Sauron is not litterally the ugly mouth of some kind of demon, it is simply... a spokesperson. It's really tiring as he does this over, and over again.
I think the parent is intended to be humorous, with references to general shortage of a lot of products, and paralleling manufacturing in China.
I feel like Zoom support is the absolute last thing I would ever care about with a display manager.
Both problems may be present, but I think one of them is the bottom line/root cause. It’s a numbers game. I don’t think there are enough who are in touch with reality to influence election results.
I keep wondering, why hasn’t someone made a new Reddit that’s pretty much just the old Reddit? It seems like there’s a ton of demand for it. Disrupt what Reddit has become by creating what it used to be.
You can. I did... eventually. It requires GarageBand and is an unbelievable pain.
The actual visuals and layout are fine imo. I don’t need to see a billion posts at once. The problem is it runs like shit, gives errors all the time, and has a billion nag popups.
> This on systems which could easily be bumped to 1024x768 or better.

Well, on a 14 inch CRT with no DPI scaling it’s debatable whether a higher resolution was ‘better’.
The Reddit of 2006 where tutorials on generating HTML in Lisp rocket to the top of the homepage is long gone. I can't imagine investing in an ad company that is fueled by clickbait and outrage the way Reddit is. Plus, some percentage of the userbase will always run aggressive ad blockers and be impossible to effectvely monetize. However, my brain works very differently from other people's, so I could be wrong.
Unless you’re comparing it to an arduino, many other boards like ESPs have WiFi or WiFi and BT as well, and aren’t hard to get it running quickly. The zero has no wireless as far as I remember.

What were the zero and pi zero w used in?
> every subreddit are rabid radical liberals who won't tolerate the slightest dissent from the party line.

> I'm glad he's dead - he'd probably kill himself again if he could see what's been done to the site.

Woof, there's one echo chamber and then there's this...
Homebrew is written in Ruby IIRC, but that is really just an example, not something that makes it popular.
Thank you @m3at!
From the complaint, it looks like there are some Delaware corporations that are connected to the botnet that might have some assets that could be raided. So while the defendants probably don't have a lot of exposed skin, they do have some skin in the US that they are at risk of losing.
Just curious, did you abstain from the internet for 8 years? Or just Reddit?
What's Reddit need access to public capital for?

Of course they want to make some individuals rich, but other than that?