skysight-inc/HackerNews huggingface dataset:
> What should they do instead?

Well Xen for instance includes a reference to the relevant security advisory; either "This is XSA-nnn" or "This is part of XSA-nnn".

> If the maintainers start to label commits with "security patch" the logical step is that it doesn't require immediate action when the label is not there. Never mind that the bug might actually be exploitable but undiscovered by white hats. If you do not want to rush to patch more than you have to, use a LTS kernel and know that updates matter and should be applied asap regardless of the reason for the patch.

So reading between the lines, there are two general approaches one might take:

1. Take the most recent release, and then only security fixes; perhaps only security fixes which are relevant to you.

2. Take all backported fixes, regardless of whether they're relevant to you.

Both Xen and Linux actually recommend #2: when we issue a security advisory, we recommend people build from the most recent stable tip. That's the combination of patches which has actually gotten the most testing; using something else introduces the risk that there are subtle dependencies between the patches that hasn't been identified. Additionally, as you say, there's a risk that some bug has been fixed whose security implications have been missed.

Nonethess, that approach has its downsides. Every time you change anything, you risk breaking something. In Linux in particular, many patches are chosen for backport by a neural network, without any human intervention whatsoever. Several times I've updated a point release of Linux to discover that some backport actually broke some other feature I was using.

In Xen's case, we give downstreams the information to make the decisions themselves: If companies feel the risk of additional churn is higher than the risk of missing potential fixes, we give them the tools do to so. Linux more or less forces you to take the first approach.

Then again, Linux's development velocity is way higher; from a practical perspective it may not be possible to catch the security angle of enough commits; so forcing downstreams to update may be the only reasonable solution.
Biden to Sign Crypto Order as Industry Faces Sanctions Pressure
That is not the motivation for CBDC.

Cash as a technology is, like all other uses of paper, being replaced by digital solutions. And like all other paper replacements, this is leading to a significant shift in power and ownership. In this case, we are well on the way to have privatized a very significant piece of infrastructure, the payment system.

Since mandating the use of cash is unlikely to work (much less be popular), if the central bank wants to maintain any form of relevant control over this infrastructure, it absolutely has to launch an alternative to paper that lives up to the expectations of modern users. This is not a matter of being able to do new things as much as it as a matter of maintaining the position that they previously had.

A CBDC is a completely natural and necessary development for any democratic society in the 21st century. The alternative is the complete takeover of private actors.
they are busy doing blockchain projects :)
There was no active discussion of bringing Ukraine into NATO. Also, wanting to be in NATO (a) is the right of a sovereign nation to decide and (b) does not make that nation Nazis. Putin asserts Ukraine is not sovereign and is full of Nazis as his primary reason for invading after spending months saying he had no intention of invading. So he is a liar at best, delusional at worst.

Russia agreed to the Budapest Memorandum recognizing Ukraine's sovereignty as an independent state. Russia is also a party to the U.N. Charter as a founding member, and the Geneva Conventions. Those have all been torn up by Putin. So I for one choose to not believe anything he says, and find him completely untrustworthy. Any promise he signs is worthless including one to not invade Ukraine, or any other country, if they agree to stay out of NATO. Staying out of NATO is not a security guarantee so long as Putin is the one in charge. He presented not a single complaint before the U.N. about Ukraine before invading, after promising he wouldn't.

And as Putin is making it increasingly clear the stability-instability paradox may be a real and true thing, we have to consider that avoiding nuclear war at all costs itself has a cost which is that of principles. The principle being, you don't fucking roll tanks into people's backyards in contravention of the U.N. charter. The whole goddamn reason that institution exists is to prevent wars exactly like this. That it hasn't prevented it makes me question the trap we're now in: nuclear weapons are being used as a shield to permit a country to commit worse atrocities with conventional weapons than had nuclear weapons not existed, and that begs escalation all the way to a nuclear event. There is now a much bigger gap between conventional war and mutually assured destruction.

We can't go back before Putin did this. The world cannot just glibly accept what's happened as a result of fear of nukes, allowing that to make us ignore our principles. And our principles are the U.N. charter - that's the best thing that most nations agree on most of the time. There isn't anything else. If we lose that, we have nothing, and then we are certain to repeat the mistakes of WW1 and WW2.

https://www.youtube.com/watch?v=ZxZlaiuicYM
The Google (news?) app on Android used to have a nice continuous scrolling behavior where you could start scrolling with two thumbs then keep one thumb on the screen and rock it back and forth on just the thumb pad. Any displacement of the "held" touch caused the screen to smooth scroll in the direction of the initial scroll in an amount proportional to the speed of the initial scroll.

Found it quite pleasant, but was never able to locate documentation of it. Would have enjoyed it as a generic behavior for all apps, particularly the browser.
A friend and I played a lot of adventure games on a 486 Compaq laptop with grayscale.
Be concerned about being 'practically correct' rather than 'technically correct'.
Surprised Arnol'd isn't mentioned for ODEs.
I love the idea behind this - as a software engineer, it's your job to build good processes, and not something to ask permission for.

But wow, some of this post is incredibly toxic and passive aggressive. Create your own personal bug tracker, then refuse to fix any bugs unless everyone else uses it? "Neutralize the bozos" by sending them incessant bug reports, until they're no longer productive? Can you imagine working on a team like that?

I totally agree that you should incrementally work towards hardening your systems. Inasmuch as it's something you can fit into your workday, I'd say that's just part of your job.
> The Federal Reserve Act does not authorize direct Federal Reserve accounts for
individuals, and such accounts would represent a significant expansion of the Federal Reserve’s
role in the financial system and the economy. Under an intermediated model, the private sector
would offer accounts or digital wallets to facilitate the management of CBDC holdings and pay-
ments.

From the Central Bank Digital Currency section under the Intermediated heading.
> Fun fact, China has greater gdp per capita than Russia(nominal, Russia is still ahead in in ppp).

>Russia gdp per capita for 2020 was $10,127 China gdp per capita for 2020 was $10,500

Why is there such a huge discrepancy between the PPP adjusted numbers? My impression is that lower GDP countries tend to have their PPP adjusted up because the price of goods in those countries are also cheaper. However, china and russia have similar nominal GDPs. Are goods just super expensive in China for some reason?
Where's your evidence the russians were firing on the civilians?

We both have just mainstream media reporting what they want us to believe, which might or might not be true. Soldiers hiding in refugee groups is a thing that has happened before, and whatever they do, it makes the other side look bad, when they shoot back.
If you've got existing pain, eg. Operation burden, an imperfect solution now gets rid of a lot of that pain now, rather than continuing to be burdened til the perfect solution is ready.

If you can wait for perfection, you probably don't need to build it at all, and so you've already got your perfect solution - nothing
What makes you so confident? Treaties have been broken for lesser reasons throughout history. It seems unlikely a country would be willing to enter a nuclear conflict for an ally with a GDP 500 times smaller.
I won't venture to guess what these are but I did find it quite interesting that the old and more recent descriptions of sightings are very similar, and that we still do not know what they are or where they come from.
Strang's latest book DE&LA is disappointing, it is linear algebra and its applications with the abstraction taken out and mushed together with supplementary notes from ODE videolectures. Mattuck's ODE course is good.
Hydro isn't carbon free. It takes a lot of cement to build a hydro dam. Even earth damns need to have their central and powerhouse structures made of cement.
Main ingredient: olive oil.
If we're talking about cities, Wakefield, Bradford, Leeds, and Sheffield all have low population densities (< ~1,500/km2). This is lower than Antwerp, Charleroi, and Ghent in Belgium, as well as Eindhoven, Rotterdam, Utrecht, Amsterdam, and The Hague in The Netherlands.

Is your argument "we don't have space in high density areas, and obviously we can't put them in low density areas"? Why can't you put refugees in suburbs and rural areas? The US spreads them out all over [0].

[0]: https://www.usnews.com/news/best-states/slideshows/states-wi...
uft: Universal Finagler of Text, Universal Format Translator?
unt: unt is not a transformer?
Wouldn’t you risk a violent outburst if you handed this to a cop or something?
This is awesome, thanks for sharing!
Related:

U.S. is considering a radical rethinking of the dollar for today's digital world - https://news.ycombinator.com/item?id=30239803 - Feb 2022 (101 comments)
> A at X% interest, but there is an opportunity to use that borrowed token and earn Y% interest, if Y is greater than X, you can make profit.

This is how arbitrage works. But wouldn't the arbitrage opportunities disappear if enough people know that this token yields more elsewhere? Surely the market prices would adjust accordingly.
If NATO wasn't confident that Ukraine would stop Russia, they would have already changed tactics.
I'm going to be honest: as someone who spends a lot of time in their local art museum I haven't been so impressed with the work of the atheists. They have some ideas and they're certainly expressive but it's nothing like what the religious created. I think part of that is how religion allows people to coordinate beyond just surviving, so their art extends beyond the individual.
UK Electricity Sources [YouTube]
Thank you, looking forward to chatting!
"Your margin is my opportunity." If there were money to be made doing it, I can easily see a Amazon subsidiary squeezing Element (the van company) for their last little drop of margin, and then the Amazon sub doing it themselves.

Or...Amazon is already squeezing Element, and Amazon just wants semi-intelligent meat sticks to drive the vans and carry packages. And because even minimum wage is too much to pay...
Without going in to it - there is a massive range of plastics and non plastics of varying quality, expense, and accessibility.

Yes, 3d printing is a legit method for production. Typically if you can have a die made for it you will be better off in the long run with casting. Dies are incredibly expensive however.

Smaller runs or highly specialised and difficult geometries benefit from 3d printing.
It's blatantly false, but hey, gets a laugh from the in-crowd right?
Depends on which timeframe you're talking. But even if so - who cares???

Watch a Ukrainian or Iraqi child die from a mortar and tell me if you feel any difference. If you don't you haven't got a point and if you do you haven't got a soul.
It would of course depend on the solution they go for, but if for example they used a cryptocurrency like Bitcoin, the difference would be that the 'int' in your account right now is forgable -- i.e. the bank can go in and just adjust it up/down as they see fit, with only regulations (i.e. messy human decisions) to stop them.

A CBDC backed by a proof-of-work scheme is unforgable, meaning said currency could be transferred between multiple banks (even potentially abroad) without having to worry about whether said bank obeyed all the regulations correctly or not.
oh, time to get my coins out then, I guess. don't wanna get accidentally marked by some clever script
So, if this goes through, would this make crypto-currencies competing currencies and therefore illegal?

I'm unsure how the regulatory actions of counterfeiting and competing currency laws work, which is how I ask... would this have to be written into a separate law, to outlaw or regulate the current crypto market, or would it already be folder into the current legal structure when/if the USD became a "digital dollar" with a similar format?

After a quick glance, it is mentioned that this form of digital currency is made in an attempt to cut down on financing illegal operations, so there would be some sort of ID'd blockchain tied into this... I would assume. Simple enough, put your social in with the block chain. Not a huge amount of memory more, I guess. My understanding of the block chain isn't extensive. I can only assume this is a backdoor route to exterminate uncontrolled currencies, which would make the above make sense... or are those just "traded goods" at this point, like baseball cards, or Beanie Babies? Or can those be, practically, made illegal?
It seems like many central banks are investigating this space. Here is a similar paper from the Reserve Bank of New Zealand https://www.rbnz.govt.nz/news/2022/02/innovation-key-to-the-...
We definitely will. Great question - honestly we were moving really quickly for this one and got it out the door as a proof of concept. In a future version we'll move over to react completely.
Or creating a walled garden that is safe to play in and then take the usual 30% "app store" premium. I am not suggesting this in the context of Russia here, but in general. A state that has the military power to impose order in places where it is scarce may create value. An example could be a peaceful middle east that produces more and some of that goes to the one who maintains peace and makes everybody abide by the rules.
Vitamin d accumulates. You can actually take it all at once, but most people take dailies. Fat soluable vitamin...unlike water soluable that leave the body almost immediately.
> CBDC transactions would need to be final and completed in real time, allowing users to make payments to one another using a risk-free asset.

Interesting choice of words for a monetary instrument which can be arbitrarily inflated or seized by third parties.

And this doesn’t even touch on the political risk inherent to “national” monies.
This seems a little crazy, but, you don't actually have money in a bank account.... You are owed money by a bank. Everyone is actually passing back and forth IOUs from banks when they pay for things digitally (or by check). It's one reason why there is a lot of complexity behind the scenes when you pay digitally. It's also the reason FDIC insurance exists. If you think about the fact that my "money" is an IOU from Chase and your "money" is an IOU from Bank of America - how do I send you "money"? It's a complicated dance with lots of different database entries.

A central bank digital dollar would be IOUs from the central bank. It's closer to cash.
The same as now:
D) All of the above
I just redefined technology as “something made by humans that barely works”

If you look at the stacks we build everything on top of, it’s insanely brittle and barely works. We simply lie to ourselves that it’s otherwise so we can get out of bed in the morning actually ship something that’s useful to another human being.

If you don’t believe me, look at the organization or source code behind the black box you’ve built everything on. By some miracle it works, but barely.

I’ve found the best book that describes this is “The Systems Bible” — https://www.amazon.com/Systems-Bible-Beginners-Guide-Large/d...

You’ll chuckle as you read it and learn to embrace the miracle that anything works.
I didn't know about the swapfile thing... but TIL. I had been wondering how to to make a non-snapshotted volume for some other reasons, though, so that's a 2 birds with one stone thing, thank you!
What's the purpose of the help message screenshot? Couldn't you use a code block, like in all the other examples?
I second the usefulness of the calculator built into Emacs. Even if I didn't use Emacs for anything else, I'd keep an alias around for starting calc.
The kettle used was vacuum insulated.
The voice of Utah's arches – Ambient seismic vibration sped up 25x
Well, first - recognize that learning something, and being able to explain it to others quickly and clearly are two separate problems. Both are difficult.

Even for areas that I have a high degree of knowledge in, I find that practicing how I am going to explain it to someone else makes things go much smoother. The only reason I can explain things 'offhand' and have it go well, is if I have done it so many times before that I don't need to practice it.
I suggest blood work over guess work. Dieticians are recommending quite a bit more than that.
I still enjoy using a good handheld calculator. Today it's an HP 35s which is fine but I only bought it because my HP-28s battery door broke.

I'd love to get one of the Swiss Micros[1] but I can't really justify it when my 35s is good enough. Maybe if I get a nice bonus this year I'll treat myself.

[1]: https://www.swissmicros.com/products
You misunderstood, or simply ignored the word “public”. In free press societies, you need the will of the people to go to war. You need a 9/11 moment. A casus belli.
And tell them what?

"Hey, I gave real money to this guy and agreed to accept magic beans in return. Now I have discovered that I can no longer redeem these beans for cash"
They're already committing war crimes in Ukraine.
You're repeatedly posting such cheap Russian propaganda it crosses the threshold of offensiveness to actually become hilarious.
Disagree. CBDC is a way of hijacking a democratic society to enforce rigid economic engineering. It is vastly asymmetric for the state, who can delete your life savings with a click, or deflate your wealth to better accommodate debt.

There will be far less democracy if we ceed control of the money supply to politicians.
Along with being one of the big 3 turbine manufacturers, they also do a lot of military and marine stuff.
This nuclear tech fits their business as the Vanguard submarines are powered by RR reactors.

https://en.wikipedia.org/wiki/Vanguard-class_submarine

https://en.wikipedia.org/wiki/Rolls-Royce_PWR
I'm still wrapping my head around this (it seems rather magical; can it really be just that?)... but I find the idea of "sampling from a distribution of trajectories that reach a terminal state whose probability is proportional to a positive reward function, by minimizing the difference between the flow coming into the trajectories and the flow coming out of them, which by construction must be equal" to be both beautiful and elegant -- like all great ideas.

How did you and your coauthors come up with this? Trial and error? Or was there a moment of serendipitous creative insight?

--

To the moderators: My comment is now at the top of the page, but manux's comment above is more deserving of the top spot. I just upvoted it. Please consider pinning it at the top.
Would Russia (assuming it's the source of this attack) have suffered collateral damage / friendly fire on its own satellite terminals?
I'm not a philosopher by any means but the interpretation of Atheism I presented above is widely used. Specifically by Matt Dillahunty and a lot of modern Atheist.

I wouldn't be against an interpretation of agnosticism that is functionally identical to my interpretation of atheism, but at a certain point one word to describe a world-view is never going to be sufficient and explanation of the nuance is going to be required.

You can say "Christianity" and you would be referencing both the Westborough Baptist Church and Christian Unitarian Universalists.

I already described in detail in my first comment my interpretation of Atheism so I don't know where confusion could possibly come in.

Therefore, I reject your premise that I "have to use the interpretation of what people mean, not the broadest one" because:

- that varies from person to person and I cannot read people's minds.

- Your interpretation is not universal

- the interpretation I presented is actually quite widely understood and common.

So while you are correct that I cannot assert "Atheism is X", you are wrong that I am wrong.

Also you are the one having the pointless semantic debate about something I already explained and clarified in my first comment. Call me agnostic I don't care, even though an interpretation of agnosticism is that god CANNOT be proven, which is NOT what I said.
I would hope that there are end-to-end 'did it save the baby' tests!
Do we have good universal descriptors for math levels? I'm a big fan of accessibility, and I think your idea about tweaking language to reach a wider audience could be a big win for increasing the article's impact.

To update the article to include your recommendations, the author would probably need some kind of "cross-walk" which would map the American perspective to a more universally understood framework. Would you happen to know what "pre-calculus's" opposite number would be in the universal framework?
> Speaking at University of Washington, Bill Gates said: “Although 3 million computers get sold each year in China, people don’t pay for our software. Someday they will, though, and as long as they are going to steal it, we want them to steal ours. They’ll get sort of addicted, and then we’ll somehow figure out how to collect sometime in the next decade.”
I've been coming around to this as well, which surprised me as I thought I had left religion for good.

> release you from the burden of coming up with an answer to some very fundamental questions about life.

I'd even modify this to say "impossible burden". Science reduces to the model: P(A|B). No model is ever safe, since we can never observe the generator of B, and changes in B can turn the whole model irrelevant. So the pursuit of some perfect scientific model of the world is an endeavor with 0% probability of success.

Hence, it seems the wiser strategy is to have a strategic balance between religion and science. What that split is, and whether it's most advantageous to do so at the society level or society of mind level, I don't know.
If you have two minutes to talk and there isn't much to talk about you will get granular. On a slow day I love to talk about fights with the build system, having to rework the mocks for the unit tests, etc.
I could and probably should, it was just really lazy at the time it was written >~<
> That is not the case here

Are you sure that false-flag attacks always involve a media blitz?

Just thinking that if I were planning a false flag, and I know that people would recognize it as such because of the media blitz, then I'd look for a workaround. That seems consistent with what we have here.
The antiwork wolf of Wall St
This also has a nice command line interface for those who prefer the terminal.
Chalk it up to you being smarter than you thought :)