skysight-inc/HackerNews huggingface dataset:
"Due to the closed nature of XYZ" is one of the stupidest reasons ever for breaking the computer of your users. They could have an automatic check for incompatible drivers and cancel the kernel upgrade, or even provide a checkbox somewhere in the settings where users can click "I don't care if my drivers are closed source or not" that would automatically also update any closed source drivers. I personally derive some perverse pleasure from learning obscure Linux kernel stuff, but I also 100% understand if some cook or a high school French teacher would throw out Linux forever and go back to Windows or MacOS the first time this happens.

(Also, I just double checked and the drivers in question are licensed under GPLv2 so the licensing is unlikely to be the issue)
You are confused as to what GPT-3 does.
Just go away. Really. There are plenty of places on the net where you and your junk will be welcomed with open arms but I'd love it if we could keep this crap from HN. And take your bro talk with you.
Yes. But the problem is they don't give you your tax money back, so the service is gone but the involuntary subscription remains.
Now what do you pay private security with, and why should the politicians get away with yet another form of theft in the first place?
If they want to wind it down, they should return then money by lowering taxes.
I think they're referring to this: https://www.euroweeklynews.com/2021/12/09/fda-says-it-needs-...

I tried to read through the court doc [1] linked by the site to find the 75 years but the legalese is beyond me.

1: https://s3.documentcloud.org/documents/21150416/fda-brief.pd...
There's "controversy" because of the trauma to the collective national psyche. People want to believe that larger forces are at work, commensurate to the mythos of a national leader.

But if you just examine the facts of the case, it's obvious what happened — a tiny, pathetic little man assassinated a president — with a confidence approaching 100%. (But not getting to 100% — it's important to always maintain your scientific skepticism.) See for example _Case Closed_, Gerald Posner's nearly 30-year-old book. https://www.posner.com/case-closed
I understand that Proof of Steak can be combined with Proof of Wok...
OK I've checked and it looks pretty nice. Good luck with your product!
As someone who regularly watches the News Hour - I heard quite a deal about Rohingyas fleeing Myanmar for years, I'm not certain what news feeds you subscribe to but maybe it's an issue with the media you're consuming?
https://news.ycombinator.com/item?id=29564300
Isn't this a separate issue to the one the grandparent was complaining about? I can't see anything about child porn related to this person, just a lot of talk about money laundering.

Also, are you sure there were no charges filed? Some cursory googling turns up articles including a PDF of the indictment [1] and more-recent articles seem to refer to an ongoing process [2].

[1]: https://manchesterinklink.com/fbi-descends-on-keene-and-surr...

[2]: https://nymag.com/intelligencer/2021/08/bitcoin-ian-freeman-...
https://www.sirillp.com/wp-content/uploads/2021/11/020-Secon...
Not for a while now.

https://www.thelancet.com/journals/lanepe/article/PIIS2666-7...

"In the UK it was described that secondary attack rates among household contacts exposed to fully vaccinated index cases was similar to household contacts exposed to unvaccinated index cases (25% for vaccinated vs 23% for unvaccinated)."

No difference in infectiousness. And with it, no logical justification for mandates. But this is Google and factions within it will certainly not give up a chance to get rid of what remains of the conservative/libertarian part of their workforce.
> So, what was the source of wisdom in rejecting the results?

You can run the same task 3 or 5 times and take the consensus option rejecting the others. But from experience unless the taggers have had special training in the current task the quality of annotations is crap. Then you have to do it all over again with someone in-house and gain nothing from the whole crowd sourcing ordeal.

Outside people tend to think anyone could label examples, but practice shows that it takes a special kind of person to do it well. Probably this is why many get their work rejected.
Just because one is homeschooled doesn’t mean they don’t have a teacher.

All observable evidence shows those who complete their schooling in any form make more money
I think VM is the correct term here. They are technically emulating hardware
This is explicitly the background for SF author C.J. Cherry's Morgaine Cycle, although the destruction isn't complete and leaves fragments scattered across space and time. (The reaction of a interstellar human civilization to discovering the fragmented network of space-time gates is "shut it all down and bury it".)
lisp and smalltalk both manage this while allowing sophisticated abstractions.
I have seen SO MANY "reliable UDP" transports written instead of TCP over the decades. Off the top of my head: TIBCO, SaltStack, various games have bespoke UDP / TCP hybrids IIRC.

Is TCP really that fundamentally slow? How could high-level repurposes of UDP be faster than presumably hardware optimized and heavily analyzed TCP stacks?

The lies, damn lies, benchmarks seems a bit applicable too here. He's disabling caching? Really it is testing a specific transport situation, but caching IMO would mitigate a lot of the dramatic advantages? And what about cloudflare edge caching outside the browser? I think he was routing all resource requests through his single server that probably isn't cached properly.

So with good caching will HTTP/3 produce the advantage for the everyman over HTTP/1.1 to justify the attention?
A bunch of nonsense thought from someone who reads too much sci-fi:

> https://news.ycombinator.com/item?id=29569437

In other words, it's perfectly ok to change the past and the universe doesn't so much self-censor as timelines always ultimately loop in some kind of meta-time back into each other.

Another way to think of it is that it self-censors in the way that a delayed choice quantum eraser experiment does. The timelines which do not ultimately form part of a stable meta-loop structure destructively interfere with each other.

Feel free to point out all the ways in which this is nonsense by the way. I love this sort of education through correction of ignorant armchair supposition.
The only update that would be dependable is adding a third AOA indicator to implement voting logic. Boeing is too cheap to do that and the FAA is too gutless to force them.
Peer support is really undervalued in the modern world. Empathy and advice from people similar to oneself can be just as, if not more, healing as professional support, for certain situations.
So basically, you don't. You need to pay the forces enforcing your property rights somehow, and with taxation comes comes either a large overhead as the state needs to basically become a Forex trading house to ensure it can pay in whatever wildcat currency is worth the most or to standardise to the numeraire used to pay the people with guns enforcing private property
"We support E2E encryption and can't unlock your device"... except we put software on your device that scans for anything our algorithm deems illegal and then we route that data to the appropriate authorities.
No I can't see it happening either. But why spend a lot of time reinventing a wheel when everything about VSCode is actually pretty good, except its performance. But I'm a Vim user anyways so what do I care...
If Peter in ops has no immune system, he will get sick from non-COVID viruses or diseases regardless of what is done by other people. In that hypothetical situation it would be him who shouldn't go to an office, not other people.
Fully in the camp that a sniper fired a shot, and then a bodyguard accidentally capped the president from behind. Never revealed out of government shame. Hopeful to learn more.
Also it implies you may be recording me without my permission...drunk...in a bar...with my mistress.
How about you go away? Last I heard this was hacker news not covid news.

Fucking fascist piece of shit liberal.
This is a textbook whataboutism
In industrial markets *long-term* availability and robustness are also crucial.

You don't want to develop and optimize your software stack for some hardware that will be out of order in 3 years.

Olimex guarantees long-term availability and industrial standards.

Raspberry Pi does not and is only suitable for the hobby market.
Some may not agree with the use of parental control/accountability software. That's fine. Truple is not designed for you. There are tons of people who are negatively impacted by technology and they desperately need/want help. They should have the option to get it, and there should be competition in the space to deliver the best product for them. In today's world, using the internet is a part of life, and isn't something you can reasonably go without. Truple was built to help people learn to use technology responsibly with the help of their loved ones.
What a cool idea.

It looks like they’re going to be heavily investing in CRISPR too, by the choice of schools and personnel.

Stripe really is obsessed with pushing progress forward huh? Even their books are dedicated to that genre.

Looking forward to the innovation and the culture this project produces.

If anybody can do it, it’s Patrick and the extraordinary individuals behind this.
If my app won't run for reasons that are not my fault for longer than the SLA guarantees, the affected services should be at least yellow status and I should be accumulating free AWS credits.
For sure, as a Caddy maintainer, all credit goes to the contributors of https://github.com/lucas-clemente/quic-go. Early on this was mostly Lucas Clemente, but Marten Seemann has been the primary maintainer for quite a while now, including the transition from QUIC to HTTP/3. https://github.com/lucas-clemente/quic-go/graphs/contributor...
Journey to a Faster Concurrent Map
Almost nobody used the original Unix-tools on any Unix (like Irix, Solaris, AIX, HP-UX and Tru64). Everybody installed the GNU tools, that's why after some time every vendor shipped them with their Unix as add-on disks.
> Considering how Google’s treated AR and VR in the last 10 years

You mean how they've treated a large proportion of their customer-facing products?
There was this one: https://en.wikipedia.org/wiki/Operation_Aurora

It seems that the level of access gained could have been used for a larger breach but fortunately the attackers had different motives.
> C-u M-.

No, thank you.
No thank you! They already harvest enough personal data and I'm not giving them direct access to my eyeballs.
It is interesting to see what you have described as part of your role as CTO. I'm a CTO as well, and of a relatively medium sized company (~600 people). I'm also an avid developer and engineer, but those developer and engineer skills are primarily tasked with exploring new technologies. The CTO role really does vary a lot from company to company, and CEO and CEO. I prefer the approach of a CTO being very technical, but not focused on things like active code production. The technical part comes into play when you are thinking about the future, and trying to make decisions that will influence the company many years down the road. Any focus that is narrow enough to get 'called out' right away would be an indicator of too narrow of a focus.

In a way the biggest fear for a CTO is getting called out 3 or 4 years down the road for problems in the core direction you set. It happens, and will happen, and we all work to make those events as rare as possible.
Mold/design.md at main · rui314/mold
What you're seeing is really the same pattern as the late 90's dotcom boom-bust. Then, too, TONS of people (and their sisters and mothers) went into the "Information Superhighway" to become "WebMasters" and develop "Web Sites" for businesses large and small as more and more money plowed into those companies and a rush for talent, including not-very-much talent was drawn into the field because of the $. When the dotcom bust happened, and believe me, there will be another (even if different) correction again in the future, many of those same people will exit the field from layoffs or finding another job in tech again becoming hard. They'll migrate to another field that pays OK that they can find their thing.

And then, rinse-and-repeat, we'll probably see the same cycle again in the 2020s thru the 2030s.
Kind of hard to separate cause and effect there. Why does my dad prefer Windows? He's used it for 30 years and he's used to it. If he switched to Ubuntu, would he prefer that? Perhaps, but there's a lot of stuff to learn. So he prefers Windows, in some sense.
Best Information Security Books of 2021
TL;DR - the ending of the post is all you need:

“JBIG2 doesn't have scripting capabilities, but when combined with a vulnerability, it does have the ability to emulate circuits of arbitrary logic gates operating on arbitrary memory. So why not just use that to build your own computer architecture and script that!? That's exactly what this exploit does. Using over 70,000 segment commands defining logical bit operations, they define a small computer architecture with features such as registers and a full 64-bit adder and comparator which they use to search memory and perform arithmetic operations. It's not as fast as Javascript, but it's fundamentally computationally equivalent.
The bootstrapping operations for the sandbox escape exploit are written to run on this logic circuit and the whole thing runs in this weird, emulated environment created out of a single decompression pass through a JBIG2 stream. It's pretty incredible, and at the same time, pretty terrifying.”
The closest viral relative found so far was in Laotian bats. But it's not an exact match and doesn't settle the issue one way or another.

https://www.nature.com/articles/d41586-021-02596-2
> For extra agony, try using the iedit emacs extension to change a symbol throughout the file. It's extremely laggy.

The buffer data structure that Emacs uses -- a gap buffer -- has a fundamental incompatibility with making multiple "simultaneous" edits. Any attempt to do it in Elisp is going to be hacking (in a good way) around that. Performance will definitely degrade for a large buffer, because it has copy around most of the buffer contents for each edit. Full explanation here if you're curious: https://nullprogram.com/blog/2017/09/07/
It's possible still to do some real coding as CTO. One thing I like about Stripe is that the leadership will make sure to take a week or so each year to ship a real feature and then write up all the little pain points that they experienced and ensure they are addressed - it helps quite a lot with developer productivity.
Exploiting and Mitigating CVE-2021-44228: Log4j Remote Code Execution (RCE)
Only if we open sauce...
More like ultimately all these companies buy into a certain form of vendor lock-in and they have no competence or willingness to migrate or even consider the competition. It's starts with "oh I'm just renting a remote virtual server" and in no time it's "Oh, all my stack is tied to AWS proprietary products" because convenience. That's what Amazon wants.
https://www.archives.gov/files/research/jfk/releases/2021/do...
To me, this undermines the credibility of the other content since the "joke" tries to portray as genuine by being published on arxiv. It sort of dilutes to credibility of others.
Would love to see them called out via new regulations or a lawsuit, however :)
Post on Reddit, then.
There's lateral hires with their eyes on the same job too.
Everything is sandboxed, part of the complexity of exploitation is the circumvention of the sandbox.

The reason they create a virtual machine out of image operations is because they have not even got direct code execution at that point.
That is one of the most out there conspiracy theories I have heard.
Another great set of JIT introductions are

A Basic Just-In-Time Compiler
https://nullprogram.com/blog/2015/03/19/

A JIT Compiler Skirmish with SELinux
https://nullprogram.com/blog/2018/11/15/
Dear sir, the entire NSA staff are currently plugging away on that pesky P=NP problem, including datacenter janitors.
It'll get digitized somewhere

I wonder how many surveillance cameras can be borked by walking around in public with this on a sign. Too long for a hat.
Wow this escalated hilariously fast. Coming from a country with universal healthcare, I find it amazing how you believe your absolutely shitty coverage is to blame instead of, I don’t know, corporate greed?

But yeah, I guess low-level employees should do without healthcare, they just shouldn’t be poor AND sick after all :)
Execute, take the resulting value, and divide by your estimated execution skill. :)
Well maybe the right out of context text blurb hasn’t yet been found?
They're going at night, duh
no, any explanation of a ‘super spreader event’ is making a post hoc rationalization, arising from the biases of the explainers. thermo-fluid models of such conditions are often similarly biased, but have the additional proof burden of not representing observed phenomena, just assumptions and suppositions about it. it’s just as likely that factory workers having lunch together is the cause of such a ‘super spreader event’. occam’s razor suggests we start with the simplest explanations before considering convolutions like that.

make no mistake, if covid menacingly floating in the air to catch you unaware were actually a meaningful method of spread, we’d have evidence all over the place being reported feverishly by those very same biased reporting sources.
This proves how hollow claims of "green crypto" are. This is about as far from a vegan token as you can get.
Since NSO is able to do these 0 click exploits on iphones does this mean they have have hacked apple engs as well and have copies of iOS lying around?
Thanks! I just ordered that book
Also, just go to the gas station and prepay with the amount that the card has on it to the penny.
Local fiddler asks question to super Ai 100 ways and is eventually told “Jackie Kennedy”. Finally, the case is closed.
No health association in any other country has the investigatory capability necessary to definitively determine what happened in China at the beginning of the outbreak.
That applies when you use competitors too.

They could have a related outage, or even a coincidentally timed one
"Science" is a process. That of collecting observations, building theories and testing those theories, rinse repeat. So yes a belief in Santa is 'hostile' to science, because it is completely at odds with that process.
If they solved P = NP, their first intention would be selling it to the highest bidder. NSO hackers are the digital equivalent of mercenary soldiers.
If you trust your test setup for 17.4 GHz to be within a few dB of what you'd get at a certified test lab, sure.

Yeah leaving the stub is bad practice because it could cause you trouble in FCC certification, not because it always will or even probably would. Let's put it this way, if you wanted to get enough energy into your fifth harmonic to be within 10 dB of what you were putting out on the fundamental by leaving a stub like that... you would tear your hair out for a good long while before giving up.
I'm not familiar with the German rules, but GDPR Art. 14 §1 says:

> Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:

> (a) the identity and the contact details of the controller and, where applicable, of the controller’s representative;

Usually, these contact details are in the privacy policy.

It's certainly unusual for a website to omit this, and in most cases I wouldn't buy from a site where it's missing. In this particular case, maybe it's less strange.

However, I still wouldn't order without knowing from where the package will be sent. Something from Estonia arrives here without any import taxes, something from outside the EU can do (the CrowdSupply site says they handle VAT), but can also attract high processing fees.

https://gdpr-info.eu/art-13-gdpr/

(Note I'm not interested in buying a BusKill; I'm just procrastinating.)
Do you think the video is edited or where was the body guard that you think shot him?
> Number one, static type checking is hardly a "new tech"

Static typing of course not new, but migrations usually happen to relatively new languages: Go, Rust, TypeScript. I haven't seen reports recently of any large migrations to Ada, Pascal or even C++ or other old (20yo+) language.

> MongoDB. Way too hyped-up during its honeymoon, and then almost immediately crapped

MongoDB is still used in new projects but it is not longer getting a lot of up-votes on HN. It is somewhat similar to PHP - HN doesn't like it but the language is still widely used.
It's illegal not to provide schooling of some sort, so that is yet a 3rd variable("willingness to commit crimes") that could be a better predictor.

I don't care whether schooling causes or doesn't cause a benefit: You called it "trivial" by looking at statistics, and that supreme confidence that there can be no other explanation seems unjustified.
Thanks, that's what I suspected!

That makes sense, the "constantly moving around having side-conversations and whiteboarding things" being a good part of it.

After reading your description, I could see myself liking in-person mobbing too, and it really being a different thing than "pairing" (which I don't love)... but trying to do it remote sounds nightmarish to me personally.
Ensuring hydrogen supply chains don’t become ‘nobody’s problem’
I'm truly curious how many of these options (especially multithreading) were on the table 10+ years ago when GOLD was written?

I'm curious because I sat through many slow C++ links at Google thinking "hmm, seems like the linker could be faster if it used more CPU, because it's not IO bound" and then thinking "nahh, the folks who wrote GOLD knew what they were doing and made it 'as fast as reasonably possible'.

And I just checked, GOLD has had a threads option for years but apparently it wasn't enabled?
My first though though when you say these things is: I wonder what the company culture is like? The environment could be toxic if your feeling so much doubt.

I think being a CTO brings it's own unique challenges, perspectives and context. You were a developer. Your not exactly one now and that has to be considered. For one you have context that developers don't and they may not understand that. It also depends on the specific situation. Good code, 'right way', it often just translates to "my definition of right or good". Lots of subjectivity to software development, as weird as that sometimes feels. Lots of ego and ego is a problem.

In my experience a group of developers can believe something is right very strongly and be completely wrong about it and that really sucks because we're social animals and, for better or worst, concensus is often at play in decision making.

No idea how to fix your specific issue but I think it requires openness and sharing and accepting that different people have different opinions on what's correct and everyone has to accept that it differs from person to person. Did you want to share anything specific? Not sure if it'll help but it might give you more insights to get a set of different opinions from outside your usual circle.
Hackers Backed by China Seen Exploiting Security Flaw in Internet Software
The whole reason these systems are proposed is because "detective work" is ineffective and the harm is ongoing. You gotta a least meet people where they are. Don't you think the level of policing required to actually find people who possess CSAM wouldn't also be a massive overreach? Or are you hoping that "just do more" will come to nothing in practice?

Prosecuting members of the ruling class in this country is a whole separate issue, and one that I'm sure we are in total agreement on sans the "well if rich people are above the law why can't everyone be too" take.