skysight-inc/HackerNews huggingface dataset:
> Beekeepers also make money by renting out hives for pollination?

The sad things of those practices is that the hive is stressed by being moved around a lot, and that hives are often used to impollinate but after pesticides have been used thius killing the hive.

It happens very often, sadly.
Lawsuit aside, I consider Ubiquiti's founder, Robert Pera [1], to be a fascinating individual. He runs an $18B company where he owns like 90% [2] of the shares (pretty high?). Also owns an NBA club (Memphis Grizzlies). I just think he's pretty under-the-radar for his kind of success.

1 - https://en.wikipedia.org/wiki/Robert_Pera
2- https://www.fool.com/investing/2021/09/28/3-stocks-with-78-p...
Do you have a link to your code that you've benchmarked in C++ and Rust? I'm also doing a lot of vector/matrix/array access in my code, so I'm curious as to what you'd be doing that would cause slow downs to the point that C++ can beat Rust by hours. That would be very enlightening to see.
Their stock dropped by about 30% after that as well didn’t it?
I’m of two minds:

On the one hand we need openness with regards to reporting breaches.

On the other hand we need truth in reporting. Krebs seems to be teetering at the edges. I’d rather have solid reporting without the drama.
Not really. not in the USA. The laws are very very weak here.
If you need framework: Svelte, Imba, Elm.

If you only need a view lib: uhtml, lit-html
"Maybe. Maybe not. There is no plan." [1]

Perhaps for WPT results, once we capture those regularly.

[1]: https://github.com/SerenityOS/serenity/blob/master/Documenta...
I'm on the same page. We just need to see a compelling alternative appear, and they'll lose their segment pretty quickly. Meraki could have been that until the Cisco acquisition and now $$$$ (and they make it extremely hard for SMBs/ProSumers to buy in). Some say that Aruba's "Instant On" stuff is one to keep your eye on as a direct replacement.

Ever since they fired their domestic development staff and shipped those jobs overseas it has been getting worse and worse. And it isn't because foreign developers cannot develop, it is because the company then and since has prioritized cost (and flash half-baked features) over quality.
Side note, the Chernobyl disaster:

https://en.wikipedia.org/wiki/Chernobyl_disaster

happened in 1986, roughly 35 years ago, if it is not taught in schools in Russia (or talked about much), soldiers (and young people in general) may well have no knowledge of it, nor of the risks connected to the "Red Forest" outside specific (if any) directives from the military command.
At the bottom of the article are 24 points supporting this.
Trustpage Directory: Find trusted software based on security policies
I can buy almost anything by tapping my phone in NYC today, including public transit fare.
> They are probably prone to honey rather than jams. /jk

Ah, this one was really juicy!
Is it time to start worrying about startup layoffs?
OP didn't mention any dislike for other big players.

They just don't want google.
Or even a lot of trips, judging by all the famous old psychonauts who were still lecturing in their 70s, 80s, 90s, and even 100s.
Mozilla’s readability library is also usable on the server with Node.js and JSDOM.

That’s if you are fine with using JavaScript on the backend.
Plain Vision Transformer Backbones for Object Detection
Well, if you think you might be having a reputational problem, sue someone for defamation. That way you remove all doubt.
They are widespread in the US too. Yes, we were slower to adopt them than others, but for the last few years we have had them.
Precision != Accuracy.
My friends and I always talk about how big a social problem scale-blindness is, so this is awesome!

Suggestions:

1. Show progress towards some fixed number of questions so you can see your score at the end so you can see how well-calibrated you are and compare with friends.

2. Add other things than weight, so people can get calibrated for other things too. Time. Probability. Money. Risk of death. Deaths (in war or from disease, e.g.). Stuff like that!

3. Have a speed mode where you have to learn to do these calculations really fast, so that you can incorporate this awareness into your day to day life and awareness of things.
4. Have a slow mode where you are trying to get everything right, so that you learn how to proceed when you really want to be sure.

5. Have a mode where nothing is within 100 or 1000 of anything else, so that you're purely focused on scale awareness and so that your ability to estimate on a 10-100 scale doesn't matter so much.
Krebs also doxxes people he doesn't like, and threatens people who leave negative reviews of his products. He's a dark cloud over infosec and I wish people would stop linking him.
Why are there separate Program Files and Program Files (x86) directories?
From the article:

> Mobile phone SOCs integrate a substantial amount of function right onto the chip. Why hasn’t that been the case for the car?

Because your mobile phone SoC is not certified for -20/+80 degrees Celsius, copious amount of vibration, error-free operation on many environments (incl. inputs with wrong voltages, shorts, etc.), and have a lifetime of 10+ years with the same performance characteristics.

Your car is running a real-time simulation of your engine to keep itself operational, and it's a much serious business than running Android or iOS.

More information: https://media.ccc.de/v/32c3-7331-the_exhaust_emissions_scand...
The German-style Dachshund is a more powerful weapon than any fleet or army on earth.
I was addressing your statement that seemed to say class metadata is included in every language when dealing with stack variables. I trusted your earlier statements that this was definitely the case with Java/Truffle. Misunderstandings on my part are entirely possible.

Sorry I haven’t had time to read your article. It’s on my todo list for later.
I mean is it that much of a surprise? The architecture of the internet was designed to survive an inter-continental scale disaster… a.k.a. Global thermonuclear warfare…

Conventional warfare isn’t going to do shit…

And here’s just one of the many good XKCDs about sysadmins https://xkcd.com/705/
PlayerZero
I'm just going to assume this is sarcasm
Yeah I’m also pissed off that they failed to have policy in place to prevent an insider threat and deal with it afterwards.
https://www.youtube.com/watch?v=p33CVV29OG8

Modern Dictionaries by Raymond Hettinger

The official description of this talk is below, but personally, I'd watch any video with "Raymond Hettinger" in the title.

> Python's dictionaries are stunningly good. Over the years, many great ideas have combined together to produce the modern implementation in Python 3.6. This fun talk is given by Raymond Hettinger, the Python core developer responsible for the set implementation and who designed the compact-and-ordered dict implemented in CPython for Python 3.6 and in PyPy for Python 2.7. He will use pictures and little bits of pure python code to explain all of the key ideas and how they evolved over time. He will also include newer features such as key-sharing, compaction, and versioning. This talk is important because it is the only public discussion of the state of the art as of Python 3.6. Even experienced Python users are unlikely to know the most recent innovations.
Contactless payments are becoming more widespread in the US. At this point, the only store that I frequent that doesn’t accept contactless payment is Home Depot. I recently went on a week long road trip and 90+% of my transactions were contactless.
He's probably protected because of qualified privilege: https://www.law.cornell.edu/wex/defamation

They would have to prove that he was malicious in writing the article and since it's his job to write articles about security, they're going to have a real hard time doing that.
Not that I have ever seen. Maybe you should make it?
> You look out your window at that beautiful city that happens to be out there that cannot be explained by this gradual increase of biological complexity.

Sure, taken completely in isolation, this is true. But cities didn't pop up as the beautiful entities they are today. They grew, as history and archaeology tell us.

This article is just someone admitting to not having looked around much. It's essentially an argument from ignorance.
Both languages let you access vector elements with or without bounds checking. Stroustrup even recommends you use .at by default in c++.
> IBM even wrote a GCC front-end for PL.8, although it appears they never released it.

Oh, how I had hoped I had scrubbed PL.8 from my memory.

"80% of PL/I." Only missing everything that made it bearable to use PL/I. No interrupts. You get ITERATE but no LEAVE statement. No STATIC, EXPORT or PACKAGE. You do get DEFINE... But not the one in other IBM PL/? langs. Incompatible.

The two weeks I spent debugging an interbank transferring program IBM wrote for them decades ago was one of the least pleasant experiences I've had when actually having access to the source code (albeit printed on five reams of paper, rather than digital). Give me pre-standard COBOL or FORTRAN over PL.8, any day.

Though, to be fair, the version of PL.8 I was granted access to was the original compiler, only. Not the updated one used for z/Arch firmware, today. Which I think solves a lot of those things. And I do mean the original compiler. The very, very first version.

I said no interrupts? Most of IBM's PL/? langs will signal when they run out of memory, so you can do something intelligent to kick the never-allowed-to-go-down mainframe into gracefully continuing to crunch endlessly (like clearing up part of a queue, and re-requesting it from a previous point). That signal is missing. So instead, you have developers build their own systems of heuristics to guess if a memory allocation had failed. Heuristics that had begun to fail, after an old network card burned out and was replaced with a similar one... But a faster, more modern, one. Faster hardware is the bane of old, hard-coded software.

DCL IntVar INTEGER BASED (Cursed)
You can't get ye flask.
That should come under work safety laws, especially for the type of job they do. Like the lady said - that sort of long term fatigue is worse than getting drunk above the legal limit. I have personal experience. Situational awareness and judgment gets progressively impaired. How is that even an acceptable risk on the railroad? An accident could potentially harm people who are not even connected to the railroad.

There are accident investigation report in the airline industry that found that fatigue and impaired alertness from even the maintenance staff is a threat to the safety of passengers. Any work that involves a risk of accident must include pre-shift alertness tests and mandatory minimum scores. Considering the sort of health risks involved, that should apply to all jobs - with a minimum number of paid leaves/year for recovery.

It should be of grave concern for the general public that huge MNCs are willing to put the lives of employees, customers and even general public at risk in pursuit of insane profits for the C-suite and investors. It's an even bigger concern that these MNCs are able to influence legal system to rubber stamp such insanity.
Not the maxed out BTO ones, at least not at present for the Mac Studio.
The original "Claymorphic" video game from 1990: TROG in PLAYmation TM !

https://en.wikipedia.org/wiki/Trog_(video_game)

https://www.youtube.com/watch?v=wHPjU7TZ73A

Other Clay Animation Video Games:

https://en.wikipedia.org/wiki/Category:Clay_animation_video_...

Armikrog, BoomBots, ClayFighter, ClayFighter 2: Judgment Clay, ClayFighter 63⅓, Claymates, The Dream Machine, Harley's Humongous Adventure, Hylics, The Neverhood, Platypus, Skullmonkeys, Trog.
None of them work for large consultancies lol.

My cousin who was a child prodigy became a buddhist and now teaches music.

One works for a bank in AI/ML, one is a broadcaster and author, another had their own small boutique consultancy that has just been bought by a slightly larger boutique consultancy.
Ubiquiti is interesting. The CEO is the technical founder and bootstrapper, overwhelming controlling shareholder, and has been the subject of what I'd consider unethical (stock) short campaigns in the past. So you have a CEO without many checks and balances who is justifiably defensive of his company. I am a fan of him and his company. That said, I think he is in the wrong here, and I just hope he realizes it and can amicably resolve this in a way that is more productive for everyone.
> Rust's Vec indexing is bound-checked by default. Just something like this is abysmal for performance

Unless you can provide numbers to back this claim up, I'll continue to rely on my measurements that bounds checking (in Virgil) costs anywhere from 0.5% to 3% of performance. It's sometimes more or less in other languages, but it is by far not the reason any programming language has bad performance. I have no reason to suspect that it costs more in Rust, other than misleading microbenchmarks.
You haven’t actually explained when Rust is slower. You just described a situation where you care about performance.

What specific operations happen slower in Rust than in C++?
Sure, I was more interested in the response from the other side of the debate, why I should be able to write whatever I want. Admittedly the way I worded it probably achieves the opposite.
This is why journalists try to get multiple sources to corroborate what the other is saying.
No, your example is daily infrastructure people already have. Maybe I say it too broad, there is layer of tool. You only need a few of them.
Show HN: An app that makes shopping social
Dominion Voting Systems is currently in middle of suing Fox News, Newsmax, OANN and others for billions, so it's definitely a thing that happens.
If that's the case, maybe this is a rare case where it makes sense to sue for defamation.

Krebs does tend to just throw stuff on the wall. Conversely, people should not be so influenced by one security blogger.
> since I know what a joke is.

https://en.wikipedia.org/wiki/Poe%27s_law

Not judging one way or the other, just saying that it's incredibly risky to make jokes like this, especially in the current climate, where the narrative and emotional response matters more than facts and rationality.
I've worked with a bunch of bootcampers at a previous job.
I don't have good things to say.
Even the good bootcamp developers still required way more oversight than a typical developer.
They also made our business analyst and UI/UX team pretty angry because it was clear they wanted to do more than just be developers.

I also think a 4 software engineering degree is a waste of time.
There has got to be a better middle ground like a 2 year course that teaches better fundamentals than a bootcamp, and is far more practical than a typical university degree.
> There is nothing in the screenshot's text which suggest the former is referring to the same person as the latter; in fact, I read it as expressly making a potential distinction.

Yes, precisely. You proved the complaint’s point. You think they might be distinct, and the complaint is pointing out that since they were the same person, this writing is intentionally misleading.

> If this is the basis of their complaint, I worry for Ubiquiti as a company.

Slow your roll. You just demonstrated the complaints point.

Regardless of the merits of the case as a whole, #6 is a fair point.

As for the grammar. It’s not Pulitzer level. But there are complete thoughts in each sentence, so it’s not wrong either.
It has taken a long time, but the US is now, arguably, the most corrupt nation. The final straw was when the US Supreme Court made secret political bribes legal.

It is not because other nations, like Russia, would not like to be more corrupt; they just don't move enough money to compete. China is the only serious rival to the title, and is openly organized for corruption, first and foremost, where the US still pretends.

If we want to become less corrupt, it will be a long and hard road. But thus far we, instead, elected an out-and-out grifter to the Presidency, and then held our noses and elected the father of another to replace him. So, it will take a change of direction we seem not to want.

Too many think they have a chance to get on the gravy train, and would hate for it to stop while still have the chance.
Incidentally, both chemotherapy machines and radiation machines are made by corporations. Corporations which are built and run by managers and executives which you could say "thrive in managerial hierarchies".

The value they add to our society and lives is tremendous and calling them "cancer" only shows your bias and lack of rationality.
Well the clue seems to be in the name, it's got 'public_key' so that's a deliberate choice. The choice of word 'exposed' makes it sound like it wasn't meant to be seen, but I'm not so sure.

The issue is more likely the signature parameter, which does require a secret key, the documentation does not show it as required. Is that what the author is interpreting as "I noticed that for uploading an image you only need a public key."?

> signature

> string

> signature is a string sent along with your upload request. It requires your Uploadcare project Secret key and it should be generated on your back end. See Secure Uploads for details.

I looked at several uploadcare repos including Swift and Java, and I can see a signature being generated.
Workday Amazon Fail
I quite enjoyed that.

Few (hopefully helpful) bits of feedback:

1) Would be nicer if it wasn't just an endless list of question cards. Maybe have new ones sliding in on the right, with answered ones going off to the left.

2) Visually separate the question, your answer, the correct/incorrect answer and the explanation.

3) Scores! How many right, how many in a right in a row, how did your guess compare with others etc

4) Social Interaction. Let me share my "best run in 60 seconds" and then let others see if they can beat me.

5) Pictures? Was just thinking you could have a 2x2 grid, with number and labelled picture of object in a colum, then you click on whether you think column 1 or 2 is the heaviest.

6) Stats - maybe on landing page or as commentary on your selections
"Did you know the weight of the Blue-whale has the most over-estimated mass"

7) Difficulty curve (or setting), feels a bit odd after you'd put some estimate into guestimating to just be asked "does a gorilla weigh more than 5 tins of beans?" Or maybe it just currently feels too-random. I might get 20 in a row, but I can't compare myself to somebody else who got another 20 in a row right.

8) "Is greater than" is nice, but simple <,> choice makes it too simple some times.
Maybe, "Which is closest to?" - which would give you multiple options to choose from.
You wear QC35s to the gym?? Does the sweat not break down the ear pieces?
What makes you think Rust forces more “checks” when moving data than C++ does? Can you give an example?
And not to mention better CPU cacheline hits!
Hah exactly! This looks like my Quake clans site I made with notepad and Paint Shop Pro but with a better color palette and typography.
Thanks for the correction. I miss-read it as monthly cost.
Reading the article of December 2nd it seems accurate to me. Ubiquiti was wrong about the scope, that the incident was external. It says the suspect was pretending to be a whistleblower. It sounds to me like the suspect wasn't a liar when whistleblowing so what would Krebs retract?
When I had to use Windows for work (man, I'm glad I don't anymore) I used to get a ton of random password prompts (Sophos VPN, some Microsoft 365 or Windows accounts) with absolutely no way to tell whether they were legitimate or what triggered them.

What a shit show. It's a weird thought that people use this crap in allegedly secure environments.
You are quite right, it's a typo in the article.
Hug of Death. I'll try again in a couple of hours.
I literally was at a startup that could do this successfully, so I'm not underestimating the messiness.
I wasn't actually suggesting bypassing paywalls (in case it came across like that) but rather taking content that a user has access to but that is not accessible by a third party - such as paywalled content, content behind login screens, etc. An extension seems like a natural way to accomplish that.
Is there any scenario where the discrepancy between FFT and its analog cousin cannot be resolved by upping the sampling density? Distortion is always there, whether it comes from an imprecise sensor/instrument or from extrapolating sampled data. In the audio space, nothing above 20 kHz is audible anyways, so even a bog-standard 44.1 kHz sampling rate should do "good enough" for most DSP operations there.
Any time I say race is a bullshit concept, inevitably someone calls me racist.
Wow! There are a lot of options. Thanks for the list
America is many times less racist than China is. I think it is proper to debate the degree to which allowing Chinese citizens to immigrate helps or hurts America.
Of course, the story was posted on his blog. That's 100% his duty, or at least if he wants to maintain his reputation as a journalist.
"Dipole rotation is the mechanism normally referred to as dielectric heating, and is most widely observable in the microwave oven where it operates most effectively on liquid water, and also, but much less so, on fats and sugars.":

https://en.m.wikipedia.org/wiki/Dielectric_heating

In ice the molecules are not free to rotate as they are in liquid water.
Thank you very much for answering, although it is a very personal thing to ask about.

I guess I should get an official opinion. Nevertheless, diagnosed or not, virtualizing people seems like it could work for me, although it seems to take a significant amount of time for each person to work.
Unfortunately this is probably correct.

The right outcome here would be some form of retraction, and more visibility into how this came about in the first place.

As with all insider attacks, it's almost impossible to stop someone from doing the first bad thing, but you should have controls in place to easily identify who the bad actor was. Ubiquiti eventually did - with the assistance of the FBI, but not after the damage was done.

On the other hand, Krebs not vetting his source, and allowing this through resulted in a 20% drop to Ubiquiti's stock - which affected the company, their employees (who have a financial interest in the stock) and played into the attackers hands.

I'd like to see both of them come together and do a real strong analysis.

That said, the negative "tone" that came from these articles persists - take a look at this thread for evidence.

How many people know that Ubiquiti dropped the cloud login requirement? That their recent firmware and releases have been impressively solid (judging from my and community experience)?

I don't want Krebs or Ubiquiti to "win" here, I want people to behave ethically.
The loc.gov page came up first in my search, and links to the Adobe one :)
It's both rich and poor who corrupt such systems though.
Badgerow vs. Walters [pdf]
>Don't they presumably have a US alien ID (Green Card or otherwise) and/or a foreign passport

There are millions of visa-holders who live in the US but don't have green cards. Carrying around a foreign passport for everyday identification is an absolutely terrible idea because of the risk of theft or loss. Losing a visa-containing foreign passport can necessitate getting an emergency travel document from your foreign-country consulate, traveling back to your home country, getting a new passport, getting an appointment at the US embassy in your home country, getting a new visa issued in your new passport, then finally traveling back to the US. The whole process could take weeks or months and cost thousands of dollars.