skysight-inc/HackerNews huggingface dataset:
for anybody reading. he means thedonald.win.

this entire thread is about t-moble censoring right wing and alt-right (white supremacist) websites.

hats off to them for doing the moral thing.
If the costs of the robot came down...or the wage of the worker came up.
A weakness in your clientside hashing will make your site weaker to brute-force attacks, since it will reduce the number of hashes (or passwords) an attacker has to try (collisions in client-side hashes will too, but very negligibly for a good hash function). It's also impossible to recover from without relying on another form of authentication to re-establish trust. For many sites this means downgrading to single-factor.

Any hash upgrade mechanism can be abused by a (possibly MITM) attacker to change a user's password while leaving you and the user none the wiser that specifically this occurred. If you need to lock someone out while their phone is beeping at them over their bank account being emptied, while not even making it look like their password was changed, that sounds like a fun way.

Lastly it's virtually the same as plaintext, since any salt will be known by even just a passive attacker. A true MITM won't even have to brute-force the hash.

Conclusion: Might do harm, will do little good.
Well that's not what FOSS software means, but even if you creatively change what it means to fit, that's still not true. I'm also paid to work on free software. I work on what I like and choose to at my job. That is why I chose to take a job where I am. If I didn't have a job I'd be doing this anyway as I was when I started getting into it as an unpaid hobby for several years. If my employer decided they wanted me to work on something I don't want to, I would choose to quit and look for something else.
For what it’s worth, JSX is exactly designed for this kind of usage. It’s just a syntax extension, and it only specifies the way syntax can be used in an expression position. It explicitly allows dot access (but doesn’t specify its behavior).

While it’s common to treat JSX as syntax sugar for hyperscript, even that isn’t specified. JSX is a compiler hint with expression semantics, that’s all. You can see how dramatically different it can be in plain JS by looking at compiled output from dom-expressions (most commonly used in SolidJS).
- Support different algorithms: NAS, Pruning and KD
- Quickly applied to different CV tasks
- Decouple model and compression algorithm
- Flexible and modular design
This seems like something that shouldn't be handled by the "free market" at all, because human health is at stake. And because of that, it isn't left to "the free market" in most of europe.
> But please don't mislead people into thinking Linux (on the desktop) comes even remotely close to Windows or macOS in terms of a good user experience out of the box

I use KDE on Linux, and when I do a fresh install, it takes me about 5 minutes to set the settings how I like, 0 janky workarounds, 0 external software, and 0 reboots. The adware/bloatware in Windows and the ridiculous feature deficiency in macOS give me put UX so low that KDE doesn't need to be that good - although it is.
How do you think profiling is done?

If a data aggregator can create a timeline of an individuals life, watching personality traits, social graphs, income, travel, routine, biometrics and health, stress and recreation, political affiliation, brand and taste preferences, savings, debt, credit, and social media influence traces, local, regional, and national cultural influences, and so on... that email archive is gold.

You can then create predictive models that let you target products, politics, music, media, and so on. It's not about spying on individuals, it's about manipulating populations. It's about rent extraction and wealth consolidation using tools of influence that negate consent. It augments abuses by law enforcement, corrupting the principles by which democratic governments are supposed to operate by hiding tyranny behind EULAs and TOS and private sector proxies.

Imagine a gpt-3 type model, except that instead of predicting text, it's designed to predict behaviors and psychological effects. That gives you a tool that's got a Darren Brown level of manipulation potential that you can scale. It's never going to be 100% accurate at the individual level, but you can target huge collections of individuals to modulate their lives through advertising and media sequencing.
Lastpass keeps having issues. This is the second time I heard of a security issue with them. It's not reliable at all and it sucks that our company uses them. Wish we switched to bit warden. Open source is the best when it comes to security.
Avidemux portable binary packages prepared for macOS (dmg), Windows (exe) & Linux (AppImage).[0]

As for Linux there are two variants of AppImage: normal & legacy.

[0] https://sourceforge.net/projects/avidemux/files/avidemux/2.8...
oh good point - it's just permanently iTunes in my head
Keep in mind that my Nikon really only consumes power when it's _doing_ something. I can leave my camera "on" for months at a time and come back to a fully charged battery.

The screen is off except when I'm previewing a photo. The viewfinder is physical. The metering is only on for 10-20 seconds after I wake the camera by touching the shutter release and is only displaying on a low power monochromatic LCD. Autofocus only happens while I'm holding the shutter release until it finds focus then locks.

Meanwhile the iPhone battery is powering what is, effectively, an entire laptop with a 5+" screen and cellular, wifi and bluetooth radios.

Articles I can find are quoting an iPhone taking a few hundred shots on a charge. Nikon's testing puts my camera able to take a few _thousand_ per charge. There's literally an order of magnitude difference from my Nikon's 1400mAh battery to a iPhone's 2500-4500mAh battery. Two to three times the capacity for 1/10 the pictures.
I use iTunes because I have an itms library. The app is still super frustrating.
Kitty has more features and is easier to use than Alacritty IMHO

https://sw.kovidgoyal.net/kitty/
I'd say that the pandemic just made the mRNA technology more visible and famous. All those vaccines were already in the works.

I actually remember being told more than ten years ago in university lectures about such technologies. And that there was some technology that used DNA bonded to gold particles, and I think those would be shot through the skin or something. Never heard much of that again ... though...

Coincidentally I saw "No time to die" last night.
I stand corrected. It was Dual_EC_DRBG which had the backdoor. Nevertheless, it was a backdoor in a NIST algorithm using elliptic curves, so I think being a bit reluctant to use a NIST ECC curve is understandable, especially with RSA being tried and true.

GSM instead of GCM was a typo, and I believe it’s against the Ycombinator guidelines to make a correction like that a personal attack, and I believe we’re getting really close to crossing that line, so let’s just calm down and chill out.

This isn’t in any way a personal attack—I’m familiar with and have a lot of respect for your security auditing skills—but just an observation things are getting kind of heated here and it serves no one’s interests to have an out of control flame war.
Nobody is suggesting you can't consent to long term storage, we're advocating for a sane, privacy respecting default.
This project is over 20 years old.

Maybe the key pivot is having MusicBrainz actually connect with real artists and have each artist create an NFT for each track they unleash onto the net. Listeners can then donate according to what they listen to most. So artists should leverage the fact that they are the first to own and hold their masters.

Can also apply to video. So a MusicBrainz (SuperBrainz) blockchain? Does that make sense?
> I think that for diagnostic features, people would be just fine with a loose stability guarantee

The issue with this is that the output might be parsed by downstream tools that assume a special format. They might break by a change in the output.
thanks for that! we're all on-premise with our infrastructure, so I probably won't be allowed to use AWS here (I could imagine that the aws parameter store is also even more helpful in an architecture with several aws components)
These are all great things, but the fact we can't take some well-tested, used-by-millions library from npm and start building on it makes things very confusing.

It also makes skills non-transferable for the millions of web developers out there. Imagine hiring a SQL expert for your project that uses SQOL which is almost SQL but not quite, so everything they learn won't be useful in their future SQL jobs and the quirks / differences will make them pull their hair out and call it quits in short time.

It almost feels like building an entirely new language would be a better choice (maybe TSX+CSS, with no HTML) to reduce frustration if nothing else.

I appreciate the work you're doing on this project, as always.
Author, to help you with the mouse scrolling direction: https://github.com/ther0n/UnnaturalScrollWheels
The NFT is just an entry in a ledger. What rights the buyer has to the intellectual property that is your photo is decided by your respective jurisdictions. In general, I would think this is largely up to you - i.e. only the rights you explicitly granted.

However, I believe in the US, there is no right to even download a copy of a file on the internet for purely personal reasons. I could see an NFT buyer successfully argue in court that this right is implied, even if not specified.

What happens if the file goes offline? I would think that this will not effect an existing license that you have previously granted. Of course, the buyer may struggle to make use of their license rights if they did not retain a copy of the image themselves.
The mobile app does offer adjustments to margins, but only if you're a premium subscriber. The web app, which I use, does not offer the ability to customize at all, and the margins are 2x as big as the default on the mobile app. They look absolutely ridiculous, and despite having contacted Pocket support about this over a year ago, they remain double the size of the mobile app (and much bigger than they used to be before the 'upgrade').
Are you enabling sandboxing? Use `--spawn_strategy=sandboxed`, or better yet `--spawn_strategy=worker,sandboxed --worker_sandboxing`. That should disallow using files from the base system.

This does disable multiplex workers,.which can make it more memory intensive. Working on that.
> That's DML, not DQL.

Thanks. I incorrectly assumed there were only two sublanguages. But now when you say it, I've heard both DML and DDL before, but never DQL. Curious if there were even more categories, I found this Wikipedia article:

https://en.wikipedia.org/wiki/Data_query_language

Interesting to read, what a SELECT statement is, depends on if having FROM or WHERE "data manipulators". Quote from Wikipedia:

"Although often considered part of DML, the SQL SELECT statement is strictly speaking an example of DQL. When adding FROM or WHERE data manipulators to the SELECT statement the statement is then considered part of the DML."
Film development is actually quite a bit more subjective. There's a much larger variance in film type, and the chemical process.

Perhaps it's harder to doctor, but it's also not necessarily truer either.

With regards to sensor size and detail recorded...well that depends. Are you assuming 35mm sensors? Because people shot 8mm and 16mm too back in the day. That's not far off from smaller sensors today. Are we also accounting for film sensitivity? Because digital sensors have far eclipsed the sensitivity range of most common film types now, so would be more likely to resolve image data.

It's not so cut and dry.
My 3rd Subaru had 2 head gasket replacements under warranty, and needed a 3rd when I sold it to buy a Tesla. It's as if everyone makes decisions based on their personal experiences. I know I do.

(It was a design flaw that was unusual for Subaru -- but there's no excuse for Subaru not fixing the part after it was shown to be unreliable.)
Why go with FIPS approved algorithms though? Why not curve25519 which is easier to implement in a safe way compared to rsa or other curves?

"If I had to choose one key size, AES192 comes off as the best compromise between speed and security"

Did you test the speed differences? Especially when aesni is involved.
> Do C++ folks still not have the equivalent of Turbo Pascal Units (which were from 1987)?

Well, it's an easy problem to solve when a single compiler is used for everything. I doubt that Turbo Pascal Units could be used with other Pascal compilers.

With C++, your module compiled with Clang might be used in a program compiled with gcc. I don't think that C++ modules specify a binary interface in the spec.

With new languages it is easier to implement modules, because a new language, by definition, only has a single implementation. If the new language specifies a modules system it does not break existing software because, by definition, it is a new language.

> I can compile almost anything short of rebuilding my IDE in less than a second, every time, thanks to units in Lazarus/Free Pascal.

I know, I sometimes use Lazarus. I'm not really sure that a FreePascal Unit is compatible with other Passsl implementations (maybe Delphi, because the goal is to be a drop-in replacement for Delphi?).

My understanding of the C++ modules specification is that there is no requirement for modules from different compilers to be compatible.
If you want a more conservative BEV choice, buy a Bolt.
I've been working on stabilizing some options like this, with exactly that approach: the functionality is stable but the exact details aren't. For instance, instrument-coverage will work like that, generating coverage data that requires the current version of LLVM coverage tools to work with.

timings doesn't seem especially hard to stabilize; I'll take a look at it.
Maybe not what you are looking for, but on your webpage for Pocket, you can do "Bulk Edit" and delete.

Select the pencil-like icon on the right of the top bar (hover over it to see words "Bulk Edit"). Select the articles you want to delete, then select the trashcan to delete them.

On the Kobo, you are limited to deleting one item at a time, unfortunately. So you bulk edit on the web, then sync your Kobo to remove the items.
Some suggestions from a person who spent a long time tinkering with the AV setup:

- Switch out Scarlett Solo for Scarlett 2i2. Solo doesn’t have any control over the Monitor volume so if you’re using headphones dialling volume back and forth will get old fast.

- Just get the Elgato CamLink. Yes it is more expensive but you won’t be constantly fighting with your no-name webcam adapter in the middle of an important meeting.
No. He wasn't on the right path because he was talking about the wrong thing.

It astounds me how people are so quickly conflating multiple different scenarios.

Playback and capture are very different things. Would you be accepting people complaining about log4j vulnerabilities with regards to a C++ code base for example? No, because you'd know the nuanced difference that's inherent in a code base. Image processing is the same. It's not just all one catch all Boogeyman
> Any other combination - not as dry, not as windy, and it would have been a small localized fire.

If what I heard was correct and they're having 110 mph wind gusts, any fire is likely to spread, even in a neighborhood. I agree the open space makes it spread even faster, but with that kind of wind, fire reaches a new level of destruction.
You will need a transcript of processing and intermediate results.
If you hang out on /newest you will see non-english stories. (Always spam, in my experience, but I suppose not always) It's hard enough for even good submissions in English to quickly pick up enough votes to make the leap from /newest to the front page. Using a language with a fraction of the speakers would make it almost impossible, I guess.
Sadly not here.
The vaccine came from his brilliant scientific mind so there should be no objections there either.
> Algolia search also supports comments
Thanks, I didn't know that!
the difference is, before media, everyone understood that if they didn't experience something directly, they had to trust someone who spoke, and that speech was always understood to be an interpretation and possibly fiction.

but now we have all these artificial experiences that might clock real to the senses and have a reputation of fidelity, yet have always been editable and are increasingly made of black box constructive interpretations that value who-knows-what over fidelity. and no part of the process can be interrogated for motivations or detail.
Check out the definition of "rent seeking".
Plus high income areas skew up so if you're in some parts of the country a 50k car is on the low end.
Not sure what you mean by the “internet” being 20 years behind. Maybe website design? Certainly not connectivity which is generally world class.

Japan has a great culture of precision engineering and quality (although software is a bit of a different story). On the other hand decision making is very conservative and change is often blocked by vested interests.

Also they invested heavily in a lot of cutting edge infrastructure during the bubble, but now have been slow to replace it.

The most likely answer as to why the MPD still use floppy disks is there is no funding for a total system upgrade. The most likely reason there is no funding is a combination of conservative decision making combined with a politically well connected vendor that makes big bucks of supporting the existing infrastructure.
Value changes over time, sometimes quickly, sometimes slowly, but the value of a thing or service is not constant.
We need a subthread about the fact that I can't access this through Sci-Hub.

I'll start: why isn't it on Sci-Hub yet??
It's easier to get one vaccine a year than to check 50 times (to be generous) a year. Also that would only tell you that you have a tick and then you need to check again that you see the red swelling to know you are infected. Then you need to get the antibiotics and then you need to hope that works.

Also I expect/hope vaccinations will develop into some kind of regular maintenance thing like software updates. With the mRNA technology that would be really easy. Scary for many people, also, but really, why not? Every year there are scientifical reasons to update the immunization for almost everyone against certain antigens. This way we may eliminate many strains of Sars-Cov-2, Influenza, other cold viruses, measles, maybe even HIV and the Herpes family eventually.
> We don’t need animal protein to be happy and healthy and live long lives.

i doubt you can speak for everyone in the world. There's no doubt some people can do this, but there's obviously a large number who cannot. They like the taste of meat.

The solution cannot be to not eat meat. The solution should be to capture all the externalities of making meat, and adding it to the cost of meat (i suppose this should apply for all products and services, not just meat). Then people who choose to eat meat would pay for all externalities properly, and there would be no problems.
> If a user's use case would be suited well by ChromeOS

Do you know anyone like this? All such people I know prefer the UX on iPad.
> system seems pretty dumb in general.

Yes it kinda a MVP "designed" to block spam, phishing and similar.

Which then is all the time abused to block other thinks.

Like the UK "adult content" (i.e. porn) filter is all the time abused to block other thinks (like the ticket website for the C3C in the past).

Or like CCP minions (1) sneak sensitive terms in lists of Chinese insults to block them.

And because all "censoring" of non-adult-only, phishing, etc. content is supposedly just a random mistake you can guess how that never ever has any consequences.

(1): Sometimes state sponsored people, sometimes CCP favoring Chinese nationalists etc.
Fortification, Part V: The Age of Industrial Firepower
It's only a matter of time before Los Gatos, Saratoga, Almaden, etc suffer major fire damage. CalFire defensible space recommendations are largely ignored.
This isn’t true, really: there are massive amounts of data being pushed about in a modern camera, through custom image pipelines that will do many gigabytes per second of throughout, but none of those are really bottlenecks for the sensor data per se.

Most of it ends up in a RAM-like write buffer, because SD cards, or even faster formats like CF-express, can’t keep up with the write speed of tens of 50 megapixel shots coming through every second.

There are sensor readout speed limits, which is why you don’t see cameras exceed 30 frames per second of 8k recording, but there’s no reason why you couldn’t read out the entire full-well capacity of the sensor each of those frames.
That's exactly where I arrived on it all too.

I worked with a guy for a while doing high end security for buildings measured in 10's of K dollars per square foot. He was on a sort of forced retirement and had to have some work for a year or two gap before going on Social Security.

We had some amazing conversations about things like home security, say the value of a dog compared to fairly expensive systems, and the overall basic equation below as applied to threat scenarios:

Basically, when:

entry_cost < ((rewards / risks) + cost_of_sale)

...there is a chance that attempts to infringe will happen and be successful. When the risk/reward equation ends up being positive multiples of entry_cost valuation, you can count on infringement happening.

The whole game is to make that equation unfavorable and then stay ahead of all that as part of the normal product development and revisions over time, including new features, bug fixes, and the like. Obviously, strong customer relationships and value added can only strengthen the moat here. These basically increase that cost_of_sale term considerably.

Entry_cost is simply everything they need to do in order to infringe.

Rewards are a simple sales forecast, what's the revenue coming in going to look like, and why?

Risks get added up and weighted by percentage estimated likelihood to happen.

risks = (risk1 * likelihood)+(risk2 * likelihood)...

On this one, it's very similar to how sales opportunity is valued and rolled up into a forecast:

opp1 = $100k * 1 (gonna happen, done deal, no exceptions)
opp2 = $1M * 0.1 (high risk, many exceptions to overcome)

The two opps above are worth the same potential revenue! ...in terms of a forecast for that sales period, quarter, whatever. Sales teams that do not weigh their forecasts often under-perform and or show very turbulent performance relative to expected performance. Ideally, as opp2 is improved, sales exceptions removed, the degree of certainty improves, leading to more potential, real revenue in future forecasts.

Cost_of_sale is basically what it takes to do business and obtain that revenue.

That basic analysis formula has worked well in my experiences so far.
Because it’s sometimes hard to discern from Backscatter (malicious bounce messages).

See: https://en.m.wikipedia.org/wiki/Backscatter_(email)
Sure, feel free
Installing is easy, configuring not always. Who thought blank defaults were a good idea in their package. But change distro and suddenly you have sensible defaults in the same package.
Interestingly, yesterday, after having to login and "enroll" into some kind of Micro$oft program to download older visual studio 2017 (which I only needed to compile from source and it was a dependency, not actual use). This rubbed me off so much that I thought I need to take a break from Windows. I installed Ubuntu 20.04 LTS. It took me less time than ever to setup, hiDPI seems to work fine. No problems with suspend, GPU or sounds, everything works. So far I think UX for new users might be even better than macOS. (constant mac laptop user)