skysight-inc/HackerNews huggingface dataset:
Someone should do the same with the new MitID implementation! :-)
Unless you want to listen to Presidential phone calls to other world oligarchs.
I honestly think that getting 85% of the way there (basically where Android is) is very possible with concerted effort.

A nice by-effect will be that whatever tricks come out of the bag will almost equally be viable to boost the battery life on laptops.
> Yes, putting every device in Windows AD and installing remote management tools that run at the system level is a recipe for total compromise.

What alternatives are there? I honestly don't know
Magnolia was utterly forgettable to me, except for Tom Cruise's super sleazy, arrogant asshole character. Crash was even worse, though.
Australian cane toads become cannibalistic in a display of rapid evolution
Saved you a click:

> “On certain highways, below 40 mph”
A poster further up mentioned something that I think is often ignored.

Security isn't just about overflows and injections, outsider enemies vs insider allies. Any human with privileged access that can be compromised will eventually be compromised as the perceived value of his privilege increases beyond the cost of compromising him. Logging, distribution of privileges, and other such solutions aren't really solutions so much as just a sort of cat and mouse game.

I would claim that impenetrable security is not only hard, but ultimately impossible.
Battles are for most people a huge energy drain, which effectively means that prolonged battle will tear a family apart.
So what is the most important for you? Family, justice, compensation or prevention.
Choose one and be happy if you achieve another.

Personally I would go with family as primary and prevention as secondary. That does not mean the other choices are in some way less, it just reflects my personal beliefs.
Can someone please explain what Okta is all about?

I had never heard of it.

It's an auth/ID service provider for many of the things I have heard about, I guess. For internal IT systems? Or for customer (public-facing) auth?
Ukrainian scientists rush to save irreplaceable collections
> No, the neighborhood gentrified because you got here.

> Most neighborhoods in the Bay Area, Los Angeles and New York City have been highly gentrified without any major changes to their built environment.

It's interesting how the language has gotten reversed on this over the years. As originally defined by Ruth Glass in "London: Aspects of Change" (1964) the word "gentrification" referred to property owners making changes to the built environment to attract middle-class renters, but the new renters themselves weren't the "gentrifiers": https://hakka3.files.wordpress.com/2017/11/glass-aspects-of-...
Actually that is exactly the right thing to do! If something goes wrong when Autopilot is on, I think the manufacturer have to prove that it was a human error and not otherwise.
> something like Okta is an infinitely more attractive target than we are

Agreed. Centralization of attack surface is a major risk.

I understand the allure and have been in situations where even knowing the risks, the path is forced upon us because "nobody is fired for buying IBM".

But yes, a centralized service holding all the marbles is an infinitely more attractive target than lots of disjoint little systems which aren't individually very interesting. The centralized system may be better run (arguable, but at least they have the resources and it is their primary job) but they also face a much higher attack concentration.

A compromise solution is to have both. I've been in one company where okta was used as the primary SSO and for most internal systems the only one. But for the very sensitive resources, one had to be authenticated via okta but also via a homegrown MFA system.
Understanding is easy, memorizing is hard.
"I like money!"
Lot's of disclaimers. Plus what happens if the system disengages and you crash 5 sec after because you were not expecting to? Technically they are not responsible anymore it seems.

From the article:

"...Handing over driving responsibility completely requires extremely particular circumstances. Right now, Drive Pilot can only engage at speeds under 40 mph (60 km/h in Germany) on limited-access divided highways with no stoplights, roundabouts, or other traffic control systems, and no construction zones. Eligible roads must be mapped by Mercedes for Drive Pilot use (similar to GM SuperCruise); the automaker has already mapped every such highway in Germany, and most of those in Nevada and California. The system will only operate during daytime, in reasonably clear weather, without overhead obstructions. Inclement weather, construction zones, tunnels, and emergency vehicles will all trigger a handover warning. And no, you can't close your eyes or go to sleep while it operates..."
same experience even with my galaxy S7.
While it feels that way, in my experience, it is very easy to break into 10 poorly secured systems compared to just 1 properly secured and monitored one.
Okta may have messed up here, and there's no doubt they're a large target, but they're still a much harder target to breach compared to anything 99% of companies will be able to set up (unless you're a Fortune 50 company perhaps, and even then - it may not be cost effective even if you can make it work).
Expect to have 50+ engineers and other technical staff to be anywhere nearly as secure with a custom solution. A roll-your-own solution with a small crew supporting it can never compete.
They're almost certainly putting a standard spec pi into a mil spec case. They might do some torture tests to weed out the bad ones / "uprate" the components.

The Broadcom BCM2711 is already rated -40 to +85C which is considered industrial or rugged. I have no idea what the rest of the components on the Pi board are rated for though.
I loved Ordinary People.. and hated Raging Bull, which is so overrated.
I was imagining a play like this utilizing insurance to smooth out the wrinkles. Seems like a fairly good bet that the restrictions are designed to essentially eliminate fault in the event of an accident.
You can have of course have a single binary deployed with different versions for different services.

More commonly the binaries would differ but share a lot of code in a library of the monorepo.
Converting the entire stack to memory-safe languages to save work is definitely in the “easier said than done” bracket.
Wikipedia is controlled by a few people where it matters and any capable country should be banning it and replacing with a local alternative, like China has done.
Get angry. Fight. Don't let another child get killed.
PMS is not a "belief".

Not sure if you're referring to the fact that it's not well understood, but that doesn't make it less real.
"If the car crashes while Drive Pilot is operating, that's Mercedes' problem, not yours."

Only legally speaking. If the car drives me into an incoming truck, it still is very much my problem.

So currently it is only enabled for very clear situations, driving under 40 mp/h(60 kmh) in trafic jams on a motorway (where there usually is a physical separation to the other lane, except in roadbuilding situations, but I would guess, that the autopilot will be disabled then).

So it should be quite safe. Otherwise they would not accept the risk. German car makers are very conservative.

Edit: correct speedlimit
“If the car crashes while Drive Pilot is operating, that's Mercedes' problem, not yours.”

It’s still my problem if I’m inside the car whilst it crashes.
Pi has nothing to do with Tetsuo. Completely different movies.
seeing as the phone is a chonker, you could maybe fit a thin screen on the top side of the phone, which would let you see some basic info without having to take the phone out of your pocket. (as long as the headphone jack was at the bottom and the power button on the side)
>Handing over driving responsibility completely requires extremely particular circumstances. Right now, Drive Pilot can only engage at speeds under 40 mph (60 km/h in Germany) on limited-access divided highways with no stoplights, roundabouts, or other traffic control systems, and no construction zones...The system will only operate during daytime, in reasonably clear weather, without overhead obstructions. Inclement weather, construction zones, tunnels, and emergency vehicles will all trigger a handover warning.

Those are some big caveats that mean that you won't be able to use this in most situations. It is basically only good for stop and go highway traffic which is a situation that other driver assist features handle pretty well.
Its basically corporate single sign on and auth management. Its very popular in the corporate space, but you are unlikely to see it as an ordinary consumer.
With regards to the last sentence there, in my experience cycling a "false flat" is simply a very gradual uphill that saps your energy slowly. Not really an optical illusion in the same sense as these gravity hills.
Fair enough, although sounds like it’s really hard to change then back to quickthrowers point.
The article and a lot of the commenters seem to be missing one important fact: far more people are browsing the internet on mobile devices these days, than on laptops or desktop machines. Therefore, prioritising mobile friendly design makes sense.

That said, I agree with the author's broader points. Although my pet hates are not the same as his and in fact some are mirror opposites:

FONT SIZE -The author complains about white space and large text. But for me the opposite is far worse. I do a lot of my web browsing on mobile and I am constantly infuriated by websites on which the text is literally too small for me to read on my phone and 7" tablet. If it wasn't for Yandex Browser's 'text reflow' function, much of the web would be unreadable for me on mobile, without a lot of zooming and incredibly annoying horizontal scrolling.

MODAL OVERLAYS, CAPTCHAS, COOKIE DIALOGUES --can there be anything more infuriating than the constant barrage of modal overlays, captchas and cookie consent forms, that plague almost every website? The annoyance of Captchas and Cookie Dialogues is pretty universal but, in my opinion, the full screen modal dialogues are even worse. You know, the ones that suddenly cover what you're reading with some 'call to action' such as "subscribe to our newsletter!'

Quite often, given the fact that, as mentioned in the article, you have to scroll past a load of junk to even get to the content on a modern webpage and that the modals are triggered after you start scrolling, I get a full screen modal dialogue shoved in my face, inviting me to subscribe to the site's newsletter, before I've read a single word of the site content!

Some web developers really need to read up on usability and think a bit harder about not pissing off visitors, instead of obsessing about the newest, flashiest way of grabbing their attention.

Hint: don't try aggressive, in-your-face upselling, while the customer is still hesitating on your doorstep, wondering whether to come in.
That is how P-Code was born for Pascal, its original purpose was only to help porting Pascal compilers not to become a widespread target format for environments like UCSD Pascal.
Whatever Mercedes says may not be what the law says. It may not be possible for them to take the liability from you. It may be criminal negligence or something else to not operate a car on a road in a state that says you have to.

Maybe they can agree to pay any civil liability you'd have, but taking a nap after you turn a car on may open you to criminal liability that Mercedes can't intervene in.
Web browsers are not bulletproof. Their sandboxing implementations depend on OS features, which vary. Check a CVE database for your favorite browser and you'll find plenty of historic holes to dig through.

WebGL is one of the biggest fingerprinting vectors on the modern Web platform, and expands browser attack surface significantly. Most webpages should absolutely not have access to privileges like this.
Lapsus$ hackers leak 37GB of Microsoft's alleged source code
Memorization alone and in itself is nothing but just a curiosity. But coupled together with good analytic and connection skills it is an incredibly powerful asset.
You can compute an autocorrelation with FFT's by applying the convolution theorem which IIRC the audio api can do the FFTs for you. I also found the the YIN estimator is a lot better as a time domain estimator http://audition.ens.fr/adc/pdf/2002_JASA_YIN.pdf and some years ago I worked out how to compute that estimator with FFTs also.
/verytrivial existentially sighs ....
I ask myself those three questions after practicing. In the literature of other domains, like education and nursing, it's called reflection. There's a lot to parse in the linked article, but I bet this is one of the most important points.

It reminds me of the philosophy of radical constructivism, which asserts that knowledge is inherently linked to the experiencer. This is in contrast to weak constructivist narratives which seem more common: "you filter the world through your own lens." Well, what if our lens is really all we have?
The USS Gerald Ford recently underwent shock testing: https://www.youtube.com/watch?v=lDDohTHEfOI

Amazon did one on their Snowball server:
https://www.youtube.com/watch?v=__ooXhq5gZ4
Memorizing is a lost art. It breeds understanding, because the symbolic surface makes itself apparent to the mind so readily—and without understanding, the symbolic surface has no grounding.

Only once the lines are memorized can you say them with feeling. And, when you know the feeling, you can make up new lines.

Understanding and memorization should not be seen as opposites.
Hi, thanks for your reply! It might be more appropriate to create these as issues in your repo, but I wanted to get back to you.

The first extension I tried was .py and there was no highlighting for that, which I found a bit odd considering how common it is. I then tried .java and that worked nicely.

It seems that you allow creating files with empty filenames, is that intended?

The demo server returns a 500 when trying to create an item with an empty title.

You might also want to consider allowing the user to specify the highlighting themselves. For example, I might want to specify .bash highlighting for a file with the filename `.bashrc`.
That's the idea behind the documentary "Everything is a remix" on YouTube. Worth to watch
https://m.livesoccertv.com/ took more than 4 MB. And if you navigate to Sunday's results it took 18.2 MB, which I think is too heavy. I wish there was something light weight like HN.
Civil liability is one thing, but what about criminal liability?
Given that pi design files are open, they could presumably build their own. They would probably do this anyway.
*sigh*

> noting that a U.S. Predator drone was involved in the airstrike on Gaddafi's convoy in the moments before his death

> U.S. Predator drone was involved in the airstrike on Gaddafi's convoy

> U.S. Predator drone

Nobody "supplied" Predators to anyone. USAF (!) not only flown Predator there, but at least relayed some information about the convoy to the ... intersted parties and quite possibly actively participated in the airstrike. I can't sweep that under "just supplied equipment" banner.
Actually, the fact that memory safety bugs are more difficult to exploit seems to have increased the rate of vulnerabilities discovered and exploited, and the fact that these are now often higher-level bugs (think insecure feature design bugs rather than low level implementation bugs) - means that once something is discovered, it can often be exploited in a way that is either much more pervasive or far harder to detect.
So no - safer languages won't stop security from being an issue. Secure design, implementation, configuration, and frequent red-teaming exercises are the only way to reduce your risk, and even then - expect to reduce the rate by some %, but never reach zero.
Easy to game the system and offer credible bribes to yourself to collect the bonus. Just giving it some brief thought and it doesn't seem hard to make the chances of getting caught really low.
Let's Go Dutch – Split Your Bill via Bitcoin Lightning
While we are at cool mathematical objects discovered by hungarians, I really like the Szilassi polyhedron: https://en.wikipedia.org/wiki/Szilassi_polyhedron

This and the tetrahedron are the only two known polyhedra in which each face shares an edge with each other face.
powertop is probably the tool you're looking for. Agreed though that finding and fixing all the programs which needlessly poll is very tedious grunt work, and work that often goes regresses over time.
I interpret self documenting as writing the what in the code and writing comments about the why. While minimizing the places where you need to explain your code.

My role of thumb is that if it's not obvious why that particular line is there and removing it would break functionality, add a comment.
I wouldn't say easily over 50%. For example https://www.varonis.com/blog/inside-world-insider-threats-pa... says roughly about half, and that sample might be biased as i assume its easier to take someone to court if they did it for money.

Still your point stands that money is a common factor. However you still have the problem that bribes usually aren't a one time payment but an ongoing thing, so a purely financially motivated adversary would take the total value into account.
> anybody who will ever need to call a sleep function

Bullshit.

I never needed to know what unixtime is when I wrote anything with sleep().

All I needed to know is how long in seconds I want the execution to pause for, never ever I needed to manually calculate something from/to unixtime, even when working with datetimes types.
I'm very sorry to hear that.

You need to consult with a lawyer to decide the way to go from here. He/she can tell you what your odds of winning are, and what the best strategy is. As someone not emotionally involved with the case, and having access to all the details, an impartial person is the best one to trust. I don't think you should see this case as revenge or closure for the death of your son, because you will be disappointed one way or another. You also don't have the personal responsibility to fix the failings of such a huge company.

Personally, the only advice I can give you is that the way you are living is unhealthy. It is an unimaginable tragedy what happened to you, but you have to somehow gather the strength to rebuild your life again. Your reaction is understandable. However, try to think of the way forward as much as possible. You are likely relatively young, and you have the possibility to start over. There is no way to change the past, only the future.
If that is the only use case Mercedes feel their safety assurance can justify what does that say about other self driving cars for which their manufacturers will not accept liability?
As mentioned elsewhere, that story is fake. Computational photography is more about increasing the sources of data, by e.g. reusing the shakiness of one’s hand to decompose the adjacent color channels’ input. This is a statistically correct method to increase the noise-to-signal ratio, nothing like “this is a leaf, put a leaf here”
Autopilots in airplanes have nothing to do with autonomous driving.

Airplane autopilots are so simple they they can be implemented with entirely analog circuits. They are simple feedback control loops that operate off a single scalar variable in each axis.

There is ample time for the pilot to correct any “mistakes” the autopilot makes.

There is no expectation that the autopilot operates independently of the pilot’s supervision and judgement.

In terms of decision-making and autonomy and liability - an airplane autopilot is really analogous to cruise control in a car, nothing more. It operates the flight controls to maintain simple parameters chosen by the pilot, and that’s all.
Mostly because the ones that praise GDB know very little about the competition.
I can't believe it. It was the same for me back in 2009 when I was learning Ruby.
Thanks for this.
It's a stylesheet, it was supposed to replace adding styles directly to HTML and using stuff like <font> tags and <center> tags (yes, those were a thing). That's where the cascade is useful, you can put a coat of paint on your existing HTML page without modifying the HTML itself (like https://www.w3.org/StyleSheets/Core/Overview or http://www.csszengarden.com). I don't think people were thinking about components in HTML back then, there was server-side templating with PHP and stuff, but nothing on the frontend.
Russian government has no money to implement something like Chinese Great Firewall but feels an urgent need to censor online space so more likely scenario is a complete cut-off from an external world (like in North Korea). Russian ISPs has been tasked to prepare to operate all networks inside the country in isolated mode - like a huge LAN. Will it happen - no one knows for sure but there is a real possibility.
> Once you engage Drive Pilot, you are no longer legally liable for the car's operation until it disengages

This is a step in the right direction - but they although they may take responsibility for any financial penalty or civil liability - but can't control what a criminal court decides.
The examples are js, but could be represented in any language. Think of the titles "trivia", "missing context", "unspecified behavior"
... yeah... that's a whole row of ice cream flavors of its own. There's depressed despair, betrayed despair (chocolate and vanilla), cold disdain (mint) and red-hots (if I think about this I will get so angry that I will do something career limiting, so I cannot think about it anymore).

I'm still trying to work out how I communicate to someone that the things I have stopped mentioning might still be bothering me, and so fixing the two things I'm actually harping on won't magically make me happy. Maybe that's just something people are supposed to work out for themselves. Mostly I seem to have figured out how to do this when three or more people are involved (basically hand all of my fodder to someone who is still engaged, and let them run with it), but not when it's one on one. Conversations with people who can't 'look at things' can be exhausting, and that seems to hold no matter which party you are.
You can't get revenge on a company like that. It's an unthinking, unfeeling automaton of concrete and steel and paperwork. Unless there is a criminal case to be made against specific people, nobody will really care if they lose a civil case. You and your family will probably suffer more. Something to consider.

Also don't think of the money as the value of your son or the cost of your family suffering. Even if you got a billion dollars I think that thinking could still leave you feeling guilty for accepting it.

I'd consider taking a settlement and forgetting about that company as quickly as possible, and getting medical help for yourself and your wife to work on your mental injuries. See psychologists, grief counseling, find people or support groups who been through similar situations, etc. Your wife and family need you, and your son is going to be with you wherever you are so don't need to sit alone at the cemetery every day to be with him.
Visual Studio, C++ Builder and XCode.

But if you really only need to watch variables any GUI frontend to gdb like QtCreator or DDD will do.
If not for the threat of involving authorities I might agree with you. How many people would really risk up to 7 years imprisonment (my countries max) to make a bit of money?
ifupdown, the Debian tool to manage network interfaces, used to be written in literate C using noweb. When I took it over from the original author, I struggled to understand how it worked. I had to print out the weaved version of it, and read it making notes on the paper. I eventually managed to make sense of it, but making any change was very difficult, so I ended up converting it to plain C, adding some comments from the original literate source and reindenting.
GitHub used Okta, it’s been a while so possibly replaced, but one example.