skysight-inc/HackerNews huggingface dataset:
"Amending our surveillance ordinance so law enforcement can prevent and interrupt crime in real time"

How the hell is this not the headline/discussion here?

Ya'll are down in the weeds of some very stupid real estate bullshit, while this shit is going down in your front yard.
Do you know if there a resources that tells you how to open a line to potential clients? IE: warm intro, cold call, etc.

It seems people prefer to report things anonymously especially when the bug bounty programs are worth so little.
> So the Torah itself could be seen as the Third Temple

What ruins the poetry is that the Temple was for making sacrifices to God as commanded in the law. The Torah itself is demonstrably unable to facilitate this sacrifice making the poetic comparison quite weak.
Start with owasp top 10
This is podcast is an advertisement by a man who is actively selling his technology to the US government. It's about as reliable as a founder seeking seed capital for their new AI product.
After reading through it's a pretty bad feature. It should have been blocked. The very nature of what it does is terrible.

Some background:

JNDI alone is fine. You want to load code remotely and run it? Fine. You can do that already in other ways. No issue with JNDI here, go ahead and use it on your server in a controlled way that doesn't involve user input.

Log4j has a 'routing appender' that can conditionally write to different logs depending on the content being logged. https://logging.apache.org/log4j/2.x/manual/appenders.html#R...

I can see a use to string match and send logs different ways.

Now unfortunately this patch flat out uses the 'routing appender' to look for incoming log statements with the pattern ${jndi:logging/context-name} and load that remote JNDI class.

This is such a terrible idea that doesn't pass the sniff test. The person who approved this should have simply read the description of what it does. After matching the pattern ${jndi:logging/context-name} it puts that match into a string 'key' and runs ctx.lookup(convertJndiName(key));

It's similar to someone submitting a patch that says "I want to run eval(user_input)". The only difference is that lookup(convertJndiName()) is a little bit obfuscated since it's not called eval(). I guess the review could be mistaken that it's harmless?. Still i think it's a bad smell. I'm worried for this project. It's probably worth going through everything that 'implements StrLookup' and seeing what they do in the 'lookup(final LogEvent event, final String key)' function. Both event and key are user generated content.
For a completely unknowable reason, WordArt effects are popular in hyper-edgy memes, these days.
Changing the programming approach seriously should be a major version change.

A language is an interface with humans. Switching to generics is a major change in the way to think about the source code. It's not an implementation detail which is not a big deal as long as the compiler can accept earlier source syntax.
Just to add that if you share your homedir (or just your dotfiles) among hosts I think you should be able to copy a terminfo file containing the right terminfo stuff in your dotfiles and use the same setenv ssh config line to set the TERMINFO env var to point to that file.
I stand in awe of your patience in the face of autodefensive incomprehension.
Is this supposed to be laced with opinion & personal philosophy? If so fine, but if it's meant to be objective then it fails quite badly & quite obviously.
Since getting that close takes a lot of DeltaV and I was curious:

>The Parker Solar Probe mission design uses repeated gravity assists at Venus to incrementally decrease its orbital perihelion to achieve a final altitude (above the surface) of approximately 8.5 solar radii, or about 6×106 km (3.7×106 mi; 0.040 au).[35] The spacecraft trajectory will include seven Venus flybys over nearly seven years to gradually shrink its elliptical orbit around the Sun, for a total of 24 orbits.[1] The near Sun radiation environment is predicted to cause spacecraft charging effects, radiation damage in materials and electronics, and communication interruptions, so the orbit will be highly elliptical with short times spent near the Sun.[34]

https://en.wikipedia.org/wiki/Parker_Solar_Probe
Well, that's what victory looks like. Maybe if it was a military one, the many PIGS would've been slaughtered, but you can't do that nowadays... yet.

I'm sure Doucheland is better off with those lazy subhumans in the union/eurozone than outside it, having potentially hostile nations at the border is never good.
Probably best to patch it anyway, some customer with a report from a dumbass jar scanning tool will moan continuously if you don’t whether you’re vulnerable or not.
Interesting that he filed this only under his State's constitution in State court. I don't see why he couldn't have made a 4th Am. challenge under federal law too, and filed in federal court. Although they may have passed on the State law aspect if they deemed it too complex.

A county court judge is woefully under-skilled and will almost certainly side with authorities and bump this to the appellate courts for a more in-depth legal examination.

Do we know if he has a collateral federal case?
Let's Improve the Code Reviews
There's a big ethical difference between those restrictions and releasing an engineered contagious pathogen into the air.

It's not really about the "airborne vaccine" itself, its about the fact that the engineering that goes into designing something like that can be used to deliberately kill a lot of people.
For us older folks remembering what "stamps" are, and that people used to collect those: The most valuable ones are those with printing errors, e.g. typos. If you produce enough stuff at scale mistakes happen. And I would assume the stickers are much less controlled and monitored then the chips / hardware itself.

No idea how it works in electronics, in aerospace so you would do thorough testing on the affected units. And if they meet the spec, someone would make a call regarding relabeling. Considering how expensive relabeling tends to be, it isn't unreasonable to assume the parts just got a concession for the labels. I wouldn't read to much into it.
Agreed 100%. As a person who writes Go daily, I appreciate that they conformed to well established standards. The crypto is redone in Go which is a little scary, but the author is among the best in the business so I generally trust it.
I hope noone _believes_ in Big Bang. It's a hypothesis about the origins of the visible universe with a lot of observational data to support it. Nothing more. It creates just as many questions as it answers, and it's as useful for an explanation on our greatest existential questions as the hypothesis that we live on a spherical body suspended by gravity in vacuum and not on a flat disk supported by four giant turtles.
Going Deeper with Depth Maps
Consumer goods have all sorts of regulatory barriers to get through and you’re paying for it. If you get a spot welder and buy cylindrical cells wholesale, you can build dirt cheap li-ion packs. LFP really doesn’t buy you any safety for such a tiny (1kWh) pack.
Of course it is. Unwrap panics on error, while ? bubbles up the error instead. But ? wasn’t introduced to replace unwrap, unwrap was always frowned upon. It instead replaces match and return.
...which of course is an option that Unix provides. "ssh <hostname> <command>" does exactly this.
I live in a west coast city that has seen an explosion in crime, much like San Francisco. While anecdotal evidence is not the same as data, I can tell you from my own experience and those of many others I’ve talked to, you won’t see the data reflecting the true crime rate because people don’t bother reporting it to the police. In my city, it’s not uncommon to wait on hold with 911 for up to 20 minutes at a time. If the police show up, it’s often hours later. When they do, they will typically tell you there’s nothing they can do, especially if the crime in question is a property crime. The best you can hope for is a police report.

In my city, car theft has become so rampant that a whole new subreddit has emerged specifically to track stolen cars here. Groups of citizens with guns sometimes organize on Facebook to go reclaim stolen vehicles from homeless encampments. Catalytic converter theft is also rampant. My street has been hit multiple times. Our shared mailboxes have been broken into over and over again. Stores in my neighborhood routinely experience break-ins and thefts. Shootings are through the roof. In October 2019, there were 28 shootings in my city. In October 2020, there were 88, and in October 2021 there were 129.

Sometimes, when the thermometer reads 98.6, it’s because the patient is healthy. But sometimes, it’s because the thermometer is broken.
Thanks! I'm using Azure TTS.
Yes it’s very long and no, iDevices speakers are actually pretty good (for their size).

iOS ringtones are pretty nice tbf (especially the alarm clock ones) but they are the same for years so, as nice as they are at start, you inevitably end hating them.

For the record, I randomly noticed that when enabling ringtone plus the vibrations, the Taptic Engine vibrates in sync with the ringtone in a subtle way that emphasizes the notes. I found it smart.
Ah yes, the three little bears who wanted to be Chancellors. That's a fun one.
What if believing in it is proven to have significant benefits, regardless of the scientific truth value of the doctrinal propositions? How do you really judge the rationality of that?
Option 3. A 8-month tenure looks too short on your resume, even by the mercurial tech tenure standards. Filling it up to 12-month or longer will help

A. It looks better on your resume. You don't have to explain yourself every time someone asks why you left so early. Explaining yourself like this for years to come whenever you interview is a drag on its own.

B. A few more months will give you time to interview at your pace. Consequently, you will have a better pool of offers and a better gauge of what the market can fetch for you.

C. More time is good for building connections before you leave. I understand you are not learning from your day-to-day operations. However, are there coworkers that you can learn from before you leave? Do you wish to build and maintain bridges with some of these people? Abruptly quitting burns bridges, and it may be better to put conscious effort to build some connections before leaving.
>>> "The researchers plan to use these results to further explore the brain networks and behavior that can boost achievement in low-income children and adolescents."

I wonder what the people who funded this research plan to use it for?

Also the term "Affluent Children" does not sit well with me, "Children of Affluent Parents" is a far better turn of phrase.
Get a good amount of swap on ssd, the default 2GB on most distros is not nearly enough to save you when you really need swapping. IIRC you can even make it sparse to not occupy disk space when you're not using it.
> I saw two dbus-daemons running on my Ubuntu server; I killed the user d-bus daemon process running as me and nothing seems to break, so while it’s there, it doesn’t seem to be used by anything on my server.

Every systemd service is exposed on a dbus path in systemd. You can query a service's environment like so:

$ systemctl status foo
● foo.service - Can we read this service's environment over dbus?
Loaded: loaded (/etc/systemd/system/foo.service; static)
Active: active (running) since Tue 2021-12-14 23:00:10 PST; 6min ago
Main PID: 104167 (sleep)
Tasks: 1 (limit: 9366)
CPU: 1ms
CGroup: /system.slice/foo.service
└─104167 sleep 3600
$ qdbus --system org.freedesktop.systemd1 /org/freedesktop/systemd1/unit/foo_2eservice org.freedesktop.systemd1.Service.Environment
Error: org.freedesktop.DBus.Error.AccessDenied
Rejected send message, 2 matched rules; type="method_call", sender=":1.761" (uid=1000 pid=104282 comm="/usr/lib/qt5/bin/qdbus --system org.freedesktop.sy") interface="org.freedesktop.systemd1.Service" member="Environment" error name="(unset)" requested_reply="0" destination="org.freedesktop.systemd1" (uid=0 pid=1 comm="/sbin/init splash ")
$ sudo qdbus --system org.freedesktop.systemd1 /org/freedesktop/systemd1/unit/foo_2eservice org.freedesktop.systemd1.Service.Environment
FOO=secret-secret

So you can read it but it seems systemd does enforce some sane default permissions on who can read the environment.
Part of the problem with government work prestige is that for every FAA engineer, for every NTSB investigator, you get three or four - for the lack of a better word - political commissars these days, whose job is to blindly carry whatever the higher-ups deem "important" at the time down the ranks. Something about rotten apples spoiling the bunch.
Sounds like you just don’t like change honestly.

Which I could agree with you- I dislike change too, I fight systemd because I don’t see it benefiting me.

But this is a bit silly, you keep coming up with rotating surface level complaints but the main reason X11 was replaced was because it was architecturally broken not because they wanted to solve specific issues.

That there is no great community around wayland is because of naysayers like yourself. Things are easier to solve than they used to be but people are doing everything they can to avoid using wayland.

Things like nvidia forcing people to use X11 have caused distro maintainers to do double the work to maintain backwards compatibility; which means it hasn’t had as much love as X11 over the years either.

Normally I would take the stance of “what ever works” but you sound like you’ll do anything to justify not switching. Arguing about creature comforts or that your compositor has more control over your UX than some random program is an absolutely surface level argument when we’re talking about fundamental and required architecture changes for us to go forward with desktop Linux.

That you don’t understand how dire the situation was becoming is quite telling. It’s not worse, it just doesn’t have the community stuff behind it yet, and the reason is the mentality you have.
This feels like an unusual opinion. Lots of people from different backgrounds are happy with Go. And it's praised particularly for its concurrency model.

That said, generics are still new and won't have the strongest library support for a while, and it takes a bit for idioms to settle. It wouldn't be unreasonable to wait for ~a year.
For item 2, you may want to consider how the Fed stepped in to hush up the reverse repo inter-bank lending in Fall 2019. That rolled into 2020 bailouts.
We do this. But with 25 devs making dozens of builds of a day each, plus daily develop branch builds, PR builds, RC builds, et al., the queue is backed up. And attaching lldb to an iOS device with debug symbols means copying the 500mb build output back to your local machine.

Really only useful when your multi-tasking back and forth between a couple of different bugs/features.
Chef Jamie Oliver Wins Against McDonald’s
Does it need to be voice? You can get physical switches that work with “smart” lighting systems, and physical kitchen timers have been around long enough that they are big-free and have a well-tested UX.
Tiny branded cellphone batteries used to retail for $100+ 20 years ago.
"We live on a placid island of ignorance in the midst of black seas of infinity, and it was not meant that we should voyage far." - Lovecraft
Zoom ringtone please, I had a boss that would call me with horrible timing on a routine basis.

https://www.youtube.com/watch?v=vlyGdpyI1zI
Having a private key provides ownership over an account. That ownership allows you to transfer money. It allows you to accept money.

This is outside of IP or laws. You can move money without laws.

NFT are a differet topic. NFT are a way of having a digital token attached to something that can be used to determine ownership to an account. Do they need to be decentralized? No but it opens up ownership to all not just the approved.
I haven’t read any of this cause I’m on my phone but wouldn’t the closest approach occur in 2025? And isn’t the 6.95 quoted the closest distance so far?
Here is a link to their press conference zoom call. https://www.youtube.com/watch?v=Lme7EjH8uP4 Lots of other good information and images from the probe.
Was having fun clicking the icons until I clicked the Outlook button, and my entire body convulsed as my eyes jumped to the bottom right corner of the screen. Need a black box warning for some of these sounds!
I think the 5 million km figure is just an order-of-magnitude/ballpark estimate, not something precise.

"The corona starts at 10,000 kilometers and extends out to about 10 million kilometers, where the gas finally escapes the sun's gravity and becomes part of the solar wind." [1]

[1] https://www.scientificamerican.com/article/i-read-that-the-s...
The mirror size is largely limited by the size of the vehicle launching the satellite into space, if I recall correctly.
I've used all of those and more and spent a decade deep in the purely functional Scala/Haskell camp. Diving into a moderate or large Go code base is always far easier for me even though I've used Go much less than the others. Before I even knew Go I would often look at various algorithms in Go just because it was so easy to understand exactly what was happening.
Something like Mycroft or Almond(if i recall correctly)

Lot of plugins and functionality, especially mycroft.However Almond being open-source is very good for hacking around
Personally I use sway and tell my compositor to bind certain hot keys to certain commands.

The downside is that once a command is bound it cannot be reused: so if I wanted to have OBS and simplescreenrecorder that both use “meta+S” to start recording then that’s not possible.

The biggest issue I have with wayland is that OBS and screen recording simply do not work, I’m not sure if there are effective workarounds but a consequence of one program not being allowed to spy on another program is that you can’t record the screen.
Sysinfo: Version 0.22 and FreeBSD Support
The vaccine does not grant immortality. So when you take the long view, everybody dies.
You're right, it was: https://www.theguardian.com/technology/2019/jul/26/apple-con...
Inflation does not have zero damage to poor people. It means despite wage increases they haven’t actually seen meaningful gains in 40 years before the pandemic.

https://www.pewresearch.org/fact-tank/2018/08/07/for-most-us...
Sure it's another problem: https://bugzilla.mozilla.org/show_bug.cgi?id=1745600
Since the log4j vulnerabilities are making this chilly winter a burning hot mess for a lot of software folks, I thought of re-posting this wonderful, timeless article on why need to think of software components like parsers or loggers as Turing machines capable of being taken over by adversaries.
While I can see why this would be useful (in very strict cases), one can always wonder if there was an ulterior motive to developing this "feature"

And of course, it's one thing to parse a jdni entry in a config setting, another to parse every single log message
For every use case I can think of, there are several better ways of achieving the same goal.
Milvus is a layer on top of FAISS.
This is going to increase my costs from $4800/year to $8000/year, and yeah, no more perpetual license.

I’ve been paying for Hex-Rays out of my own pocket for a decade because it’s a great tool, but $8000/year for a personal license subscription? Forget it.
He was writing the article at McDonald's and the police arrested him for saying "If I am not permitted to save this document, an airplane might fall out of the sky." when they wanted to arrest him for being homeless in the McDonalds. It was all on Kuro5hin and K5 users sent him money and items and books in jail.

https://news.ycombinator.com/item?id=19489570

He published a lot of stories and articles at K5.
"The CSAM fiasco" was just geeks on the internet being geeks on the internet. And some really bad marketing on Apple's part.

The feature itself was perfectly fine, very few people even bothered to read up on it and focused on "OMG APPLE IS SCANNING MY PHOTOS!" without any nuance.
The third party doctrine has changed though, since US v. Warshak and Carpenter v. US, right?

https://en.wikipedia.org/wiki/United_States_v._Warshak

https://en.wikipedia.org/wiki/Carpenter_v._United_States
Have you looked at https://github.com/jina-ai/executor-hnsw-postgres ?
Those unicorns can still satisfy a new woman every week. There's enough unicorns that most women will be able to get laid with unicorn whenever.
CSS pseudo-elements vs pseudo-selectors (double colon vs single colon)
The problem with the haptic buzzer is that it is absolutely silent on many surfaces (unlike actual vibrations)
Parker Solar Probe Enters the Magnetically Dominated Solar Corona
Boeing killed my friend, Anne-K. Feigl, on that Ethiopian flight
From business idea to first 100 paying customers in a nutshell
Vector Graphics Terminal
Customizing FreeBSD Ports and Packages
Nothing I self-host on my home network is exposed to the public internet. I use Wireguard to access the home network remotely.
I'd be interested in hearing from others on this, but typically the way that "inherently unsafe Thing" gets done in rust is that you have an unsafe layer wrapped in a safe layer.

The problem is obviously building the safe layer. Sometimes that's really hard. There are obvious examples already in Rust - like creating a safe API over scoped threads, or io_uring, ghostcells, etc. Some things may not be representable using only safe code in Rust, with no overhead.

Another relevant thing you can't really safely express is FFI. That would be relevant here since there's this VM boundary.

And then you get JITs, which also have tons of security issues.

Idk, I'd be curious to read about this if there are any papers. Maybe the wasm people are thinking about this?

Certainly it's not unreasonable to say that a memory safe JIT'd VM is going to be tough make memory safe.
Yes, every exposed webserver needs a heavy firewall and WAP/fail2ban/etc enabled?

Oh you tried to access wpadmin.php? IP gets banned. Too many failed ssh attempts? Banned. Tried to connect to mysql/postgresql? Not running but banned regardless.
Software has been mostly solved for a while. My issue is hardware. The way I read, is that to get proper voice recognition in many circumstances, you need a microphone array (for every DIY Alexa and Dot). Now you have a PI, the array installed on it and… it just stands around looking ugly and accumulating dust?

You want a case, but then from my research, cases can easily interfere with those arrays. So you need one that’s custom-made for the array you are getting. But no array I’ve seen does actually come with such a case.

Back when I asked (relevant subreddits and on tildes before I deleted my account), no one could tell me that any of my research had been wrong, but no one had a solution either. I posted the threads almost 2 years ago, so maybe things changed? I’m currently still using Alexa, but besides privacy reasons I’d also love custom software that can take the idiocy out of my assistant (mainly by using pre-configured commands that do what I want instead of sometimes guessing what I want; also for on-the-fly language switching, Alexa is atrocious when you want to request a band that’s not in your primary language)

I could probably get away with the kitchen and office assistant using a normal microphone, but both bedroom and living room need to recognize voices from most directions (and in the case of the living room, also have decent recognition through music playing).

If anyone has any solutions, I’d love to hear them.
Taking the other side of this: what if this is really a man-in-the-middle attack of sorts on the supply chain? These kinds of typos we are in phishing emails why not here? And it could very well be that AMI is doing damage control by just saying “it’s a typo” — like they can’t spell their own name?