skysight-inc/HackerNews huggingface dataset:
Once the commit is in the kernel tree it's effectively public for those looking to exploit it. Combing recent commits for bug fixes for the platform you're targeting is exploitation 101.

The announcement only serves to let the rest of the public know about this and incentivize them to upgrade.
How could you not encounter flash security problems? There was a time the flash extension for the OS/browser was being updated a few times a month due to security holes.
that's what i am using now, if a dutch bike qualifies. plus a lock through the wheels to prevent the application of kinetic energy by causing a high amount of friction.
If a government don't want people to hear something, it's fall has started.
Good Cop, Bad War: An ex-undercover cop's insights into the War on Drugs
Kidney stone risk is mitigated by K2 consumption.

VitD and k2 should always be paired.

Eat your natto while sunbathing. (Seriously, I prefer natto to k2 supplements - you get high dose of K2 through natto and you get nattokinase which lowers BP https://pubmed.ncbi.nlm.nih.gov/18971533/ )

Here's a great video about K2, well sources in the description:

https://www.youtube.com/watch?v=TaTsXMgS6RU

Here's another well sources video, in the description, regarding K2 and VitD:

https://www.youtube.com/watch?v=uJwNUcIFEEM
You can formally verify C code against a spec though.
> Don’t be a chickenshit

Kind of rich after asking someone for proof instead of spending 1 minute to google to verify the claim.
I mean these were and are free to choose how to deal with IP.

The point is many entered treaties to respect and recognize foreign IP.

And you know why? Because they eventually become technologically sophisticated enough that they want their IP recognized and respected.

You act like this was imposed by the West when it entered into voluntarily.
It wasn't available via `apt-get update && apt-get dist-upgrade` as of when I drafted that comment, but I confirm that 5.10.92-2 seems to be released now.
Because a predator doesn't spoil the trap.
The kernel is relatively easy to compile and install, so I would think that's exactly what they did.
Equally remarkable is the amount of stuff we take for granted today that the Mac team got right the very first time.

Had it not been for that user feedback, Windows might have copied the Mac and gone with “Do It” as well and we would be living in a slightly more awkward UI timeline.

I always think about this when I look at current Apple's UI. Just a little user feedback would have gone a really long way.
the reason why you think your point is unpopular and heavily downvoted is not because people are outraged by your views (I only speak for myself). But because of your name-calling and jumping to conclusions about how others form their opinion. I didn't even care about your points and it has taken a lot of my energy to weed out what you actually bring to the table because it feels like listening to somebody being angry.

It's a highly questionable form of communication that won't sit well with people who are already not aligned with your views. Even less likely you change minds this way. The effect of this style of discourse is that by calling your opposition deluded and out of the loop of what you believe is the truth, is that you will only get them to back down on their believe.

Because why would anyone sign into HN just to be insulted? More importantly, if your points do have value (and I'm sure some of them do) they will be drowned out by the name-calling.

The sad thing is that any value you may bring will not be evaluated by your peers if the basics of discourse are already violated. It's nice to be nice and won't cost you anything. On the other hand how can somebody be right on any subjects if that person has never learned to engage in healthy dialogue to discuss these subjects with anyone holding different views? Even they are correct they will not sharpen their mind with the same potential they could. For you it's counter-productive because nobody will ever give you a seat at the table even you would bring in a refreshing new angle.

I'm not attacking you nor do I care about your downvotes, but consider getting help because it's likely a pattern that you have learned from your environment and it will certainly hold you back. And you can actually sharpen these things if you surround yourself with a different crowd. HN is a perfect place to grow. But it just takes time. Good luck.
Agreed, except that I think it's poorly document and a bad system.

That's why I started this by saying I'd have an issue with someone who kept not tipping after being informed about the issue.
The tweet was posted by my old friend, and I absolutely trust her judgement in this case. Arguably, this is not the best proof, but it may take some time until more such cases come to surface.
This seems more like an issue where the Dr was giving you correct advice but you weren't hearing what you wanted to hear?

Why would you infuriated by a Dr telling you to go outside more to increase Vitamin? That's exactly what they should be suggesting in the first instance.
This is called bisection search (search for the largest/smallest value satisfying a given predicate).

It also reminds me a little bit of exponential search (upper bound unknown), although obviously the upper bound is known in your implementation.

Bisection: https://en.wikipedia.org/wiki/Bisection_method
Exponential search: https://en.wikipedia.org/wiki/Exponential_search

A practical application of bisection search is in git bisect (https://git-scm.com/docs/git-bisect) to find the first revision that introduced a bug.
Oilpan library, V8's C++ garbage collector
That particular one was stupid because it also affected other Cyrillic languages even though it was stated otherwise.
> I'm not a fan of such a policy. That usually leads to people zero-initializing everything. For this bug, this would have been correct, but sometimes, there is no good "initial" value, and zero is just another random value like all the 2^32-1 others.

So use a language that has an option type, we've only had them for what, 50 years now.
There's nothing to be surprised about, Vulkan creators themselves said that they do not want to replace OpenGL for these kind of use-cases.

Vulkan is very deliberately a very very verbose low-level API to allow maximum optimization for game engine developers. It's not meant for your my-first-3d-program usage and it shouldn't be sold as such. Same way as using ASM to write CLI tools isn't a sensible approach.
Destruction of evidense, the same as if you had burned papers.
CNN is also not party owned... It may have similar views to eg. democrats, but that's not even remotely similar. Eg. They aired unedited coverages of many of the Trump campaign rallies.

Show me one 'Ukraine is in war' topic in RT and Russia invaded Ukraine. Which is literally what happened.

Note: Yeah, thought so.
My (naive) idea -

1) build any kind of prototype
2) Go to Shenzhen, China and find a manufacturer / partner.
I find it really hard to read large sections of text on a screen without the highlighted text play that somehow anchors my view (this is a largely subconscious process I think).

But yeah, my wife will go batshit when trying to read the same thing over my shoulder. "Just stop, I can't read when you do that"
Yes. I have a working exploit, but havn't published it (yet).
Can you name the inventor of pizza? If I make a pizza at home, do they loose any money? Should it be forbidden for non-Italian people to make pizza, on the grounds of cultural appropriation?

I think it is exact opposite: the fact that pizza is one of the most popular foods worldwide benefits Italians. Any Italian can brag: we invented pizza. Also any Jamaican can brag: my homies invented reggae music. It doesn't matter that much whether a reggae song that you can hear in the radio was made by an actual Jamaican or not. Copying is the greatest compliment.
The old Reddit design was just so much better. As a long time front end dev I know this can be an annoying take. But product teams push out so much redesigning that's just unnecessary and this happened with Reddit. The official app has less functionality and is less intuitive and the new website is a garbage fire of pushing you "related content". I guess I'm glad that kept old.reddit.com at least.
> And security has not improved much.

What?!

Modern browser security has gotten orders of magnitude better since Shockwave Flash was removed from web browsers. The sheer unending volume of security vulnerabilities flash introduced into browsers was staggering. Flash (until very near the end of its life) had no sandboxing, and had its own update mechanism. It was the norm for people to be running old versions of flash with unpatched security holes. And flash had so many vulnerabilities - if memory serves, flash generally fielded more CVEs in any given year than the entire rest of the browser!

Remember how revolutionary pwn2own was? "Wow, find a vulnerability and win $1000!". These days vulnerabilities of that magnitude are worth way more money, because of how secure the browser environment has become. ($100k-$1M on the black market as I understand it.)

The only reason it feels like security hasn't improved much is because crypto ransomware has made hacking so much more profitable. But even then, most randomware doesn't usually take advantage of security vulnerabilities in web browsers. Its really quite remarkable how secure the modern web has become; and that wouldn't have been possible if flash were still around.
Yes? This is faster and easier than you may think it to be. Building a reasonably small kernel only takes ~a minute. People usually have fully automated git-bisect-run scripts for build & test in qemu.
yes, exactly. my point is, that this problem is not specific to the unusual lock described in the article, but is really an issue with any lock and therefore not really relevant.
Ask HN: Resources to Learn About NFTs
Hi,

I am looking to learn more about NFTs for two reasons: a) upcoming job interviews with companies in that space; b) I want to learn how to mint some of my own.

Does anyone know of any decent introductory resources which convey substantive knowledge about NFTs, how to mint them, etc, without being overwhelming?

Thanks
This is a fine example of the abuse of the word "literally". People excuse the abuse, saying that it also means something like "emphatically"; but in this case, it's clear why this abuse results in errors.

As far as "theft" is concerned: software, including recorded music and films, has zero marginal cost of production. The software industries therefore have the potential to generate extreme profits, unrelated to the risks and costs of development. Intellectual Property laws are needed to protect these extreme profits.

Incidentally, I'm not aware that the term "Intellectual Property" was in use before about 1985. Copyright infringement, in particular, wasn't a crime before about that date; enforcement was by civil suit, and if you didn't make any money from infringement, then the court's award couldn't be greater than zero.
We are the company behind the open-source vector search engine Weaviate. We are looking for people to join our engineering, devrel, and research team s . These roles are remote, with a slight preference for a specific region for the devrel roles.

The following links should provide enough information to learn what we are working on and documentation to the open-source software.

- Weaviate: https://weaviate.io

- SeMI Tech careers page: https://semi.technology/careers.html
I don't think this is an especially great question, but I worked at one company that asked this question and most people who got it right did not seem to have an implementation memorized. I say this because they got it right only after writing a buggy version and fixing some bugs.

Another company was in the habit of asking a different question that gets to the heart of the matter of "Can you think with invariants?" but is not nearly as tricky as binary search. That seemed better to me.
> This is misleading fear mongering

Oh so the CDC link is fear mongering? When presented with facts does it feel good to ignore them at convenience ? Cognitive dissonance much?
You can probably get volunteers to do it as a job. Ordinary draft is useful to get large masses of people. You don't need that, you need a few motivated specialists.
Oh, out by Fontana. My brother used to live there. He called in Fontucky.
Anything coming from Kremlin is just noise, distraction and lies. Why bother listening when sooner or later all promises, agreements, treaties are just ignored and shat upon.

Case in point, there was a humanitarian corridor and ceasefire agreed on two days. Not only was it not held, the road was mined and road was also bombed during by the russians.
Wouldn't Lint have caught the error too?
The Intersex Pigs of Vanuatu
Evacuation route out of Mariupol was mined, Red Cross says
Freshmeat.net expanded my view of F/OSS so much, at a time when I just didn't know the scope. Great site and great project.
Ukrainians Are Stuck in Antarctica as War Rages at Home
I’d imagine it’s a similar level of quality to forcing unmotivated soldiers to fight.
Yes, that's what I did.
I suspect they'll get zero PRs:

"The files in this repo are for historical reference only and will remain read-only and unmodified in their original state.

Please do not send Pull Requests suggesting any modifications to the source files."
Develop NLP Web App from Python Notebook
“All news sources are partially propaganda, some more than others” -https://twitter.com/elonmusk/status/1499982913949081600
> B2B hardware is much more doable

This is a point that usually gets lost in these discussions. The type of market makes a huge difference. My "side businesses" have always targeted B2B or niche B2C services and I have a lot of experience doing that. Businesses are far less price-conscious than individuals.

However, I also worked for a company making consumer wearable hardware and the approaches you have to take, along with the minimum viable volumes are night and day. Also, consumer products tend to require certification testing that industrial ones don't.
These provisions are part of the customary laws of war. As such, they were never intended to apply to unlawful combatants such as terrorist groups.
> This is not the same as a draft, it's driven by special skills, not a broad need for manpower.

How has the military (US, or other) historically managed to recruit and retain their medical corps, or the Army Corps of Engineers? Has there just not been a situation in modern memory where there weren't doctors sufficient to keep the gears of war turning?

I've worked with quite a few Federal and DOD "hacker" types over the years in the capacity of a hacker in the private sector. The impression that I have is such that your average ruck-humping Joe will not be able to do it, but it's not so special (as contrasted with a civil engineer or doctor) that you couldn't take high-aptitude recruits and bootstrap their knowledge to a sufficient operational capacity in the amount of time as a typical post-boot AIT timeframe as you might a Corpsman or linguist.

Our not-quite-aptly named SOC would routinely engage in legally grey operations to disable cyber-criminals servers whose hosting providers were non-responsive to our standard, legal course of take down. The majority of the staff had a Bachelors in an unrelated domain, several with an associates in general IT work, and a few with nothing more than a programming bootcamp.

The tale that we're so special as to not be meaningfully draftable is, I feel, egotistical.
I purchased Berkeley Mono to give it a shot. While I found it visually appealing, it still cannot compete in the terminal against Pragmata Pro due to how narrow Pragmata Pro is. I can fit so much more on my screen yet still have it be clean and legible with Pragmata Pro.
I'm not sure why you can't make a framework tuned towards a "general set" of applications that offers batching and run-to-completion semantics. As far as I can tell, the biggest problem with this is the semantics: async/await and futures models of async programming make it hard to figure out how to produce batches.
So what do you do when the lock breaks and you can't cut it open?

Look, I could list a dozen reasons why this is a bad design but I won't. Besides the U-lock, there has never been a widely adopted tech solution to combat bike theft. Locks which release OC gas when sawed, GPS tracking, bike registers, camera surveillance etc., none of it works as well as a solid U-lock through the frame and rear wheel attached to a solid object. Only frame-based solution I'd like to see is some universal mount standard for U-locks.

The problem with reducing bike theft is that you can't do it just by inventing new locks. You need to do all of the following: reduce the need to steal bikes (eg. sane substance & welfare policy), actively police and punish bike theft, teach proper locking techniques and make online marketplaces responsible for selling stolen goods.

Out of those, teaching proper locking techniques would be the easiest to implement. People seem to have no issue leaving a 1000$ bike locked with a 20$ cable lock unattended while they go shopping but would probably never do the same with a 4k flat screen TV. Put a $40 U-lock on it properly and you just increased the difficulty of stealing by a lot: instead of using pocket fitting cable cutters, the thief now needs to make two cuts with a noisy angle grinder. Chuck in another lock and the thief will probably just find something easier to steal.
It sort of is.

The UI does not clearly present the prior tweet in a conversation when linking to an individual tweet. This makes it easy for people to ignore the context since they have to work to see it. Combine this with the preference for using real names and it is easier to make the "look at what an asshole this person is" posts.
Also it seems BBC (linking to https://bbc.co.uk) is also listed under United States.
Who knows if they work. Russians aren't even able to maintain army supply trucks properly.
Does it make a difference who is actually expected to pay the bribe?

For example, corrupt traffic officers' bribes are often regressive (as nobody's threatening the rich and powerful), leave people with less money in their pocket, and requires the creation of direct injustices like wrongful imprisonment or even violence.

Whereas a defence contractor who has a bunch of retired generals and senators as "advisers" merely steals from tax revenue, which is collected progressively; the average citizen has no less money in their pocket; and no direct threats are needed at all. It's still corruption, certainly, but it doesn't put innocent people in jail.
Tipping a fixed percentage, regardless of the service, is the closest I can get to opting out of this bizarre and unreasonable practice without being an asshole. I am happy to distort a market which should not exist.
The first part is finding something people will be spending money on in like a year.

You either have to be in an industry and see the “next major iteration”, “now that this tech exists let’s make it simpler” or you have to talk to a lot of people to find a common trend.

Once you have that you start talking and showing your MVP to people. They will give you product excuses not to buy. Use those excuses to slowly iterate your product to remove those excuses.

If at the end there are no excuses and people aren’t buying your value prop isn’t strong enough.

Start with “why are people allocating budget here when they could allocate it to something else” … it needs to affect the bottom line somehow because someone who’s buying your product needs to make a business case internally.

So find a trend, iterate on the product, make sure there’s a “reason to spend money on your product instead of another product”
Who are you to decide if it was worth it or not ? Tons of humans had a really good time and memories on e.g. Habbo. That alone makes it entirely worth it.
During my day job I use Vue and and Typescript. In my side projects I use Java to build web apps and to serve the pages and jQuery to add bits of dynamic interactivity. Love jQuery. I miss the old days, everything is so overly complex now.
>retailers' perception of the reality

More food will be sold (because why not buy the extra whatever since you can afford it) the better workers will demand more pay (otherwise they can go somewhere else that can afford them.)

It's much like gas exchange/osmosis/pressure. Sure the individual particles aren't "thinking" about the behavior of the macro system but their velocity changes every time they bump into each other and that creates the macro effects of osmosis, pressure, heat etc. In the same way inflation is a macro thing that results from the behavior of individuals.

You can see it with boats and cars today: lots of people now have spare money and buy boats/cars -> people selling see that they can charge more (because there are fewer being sold, the ones that do get sold go for more etc) -> boats/cars are more expensive.
Draft only makes sense if your country is actually being invaded. Otherwise it is a massive waste of resources to force people into service they do not wish to perform, nobody gets anything useful out of that.
Silencing ideas that you do not agree with does not lead to an open society. Because guess what, the less popular ideas ends up being the right one sometimes.

(In this case I agree that RT is likely propaganda, but knowing an argument you disagree with makes it easier to argue against people that make it.)
Most people whose computer has become part of a botnet don't know it.
CNN’s coverage of the conflict has really been spectacular, it’s sad that they only shine during troubled times like these.
The Anti-Dollar Axis
A Deep Dive into Ed25519 Signatures
I know this is an old thread, and I don't use catch-all addresses (well I did back in the wild-west of the web, but we're talking over 20 years ago), however it's funny to see how many people are like "Gmail spam filter caught it" or "several domains with Google workspace and had no problems". I've used other email systems; which for example, use SpamAssassin; and the amount of shit that comes through. So yes, catch-all is all the rage, if you're using Google, however if you're not, expect a bunch of spam, right? I hear more and more people wanting to getting off the "G" ecosystem, so I guess it'll be different responses to this in the near future.
Since zx drop commonjs support on 5.0.0 version, I can't use it without `{"type":"module"}` in package.json, so I decide to rewrite it with typescript.
Jesus Christ you're touchy.
Draft? We need less war not more. Drafts are evil.
A while ago, I have made a video tutorial on binary search which explains it visually:

https://www.youtube.com/watch?v=uHpRuBdcYtI.

The visual explanation in this article is also very nice (color the items less than the value to search for with green, items larger with red), and it shows how people can have different intuitions over how and why an algorithm works.
Kind of sad for digital version of latest by Tears for Fears https://magicvinyldigital.net/2022/03/04/tears-for-fears-the... Its common for CDs in the 80s and early 90s to have DR12-DR14. Nowadays its only DR6-DR8. Why don't modern mastering engineers wake up to this regression?
Well the fix was released ~30 minutes ago, so that checks out. ;-)

The security-tracker site is now updated as well.