skysight-inc/HackerNews huggingface dataset:
> so you get charged a tax when an employer gives you equipment required for work?

Obviously this only happens when the equipment you get can plausibly be used for personal purposes. Such as a company car.

> What happens if you can't afford that tax then?

That's extremely unlikely.
In other news, Russian government is going to enact a law[0] that would require businesses to provide collected personal data to the government on demand. Not anonymized and without personal consent. The presumption is a single governmental agency would anonymize it, properly store, protect and provide anonymized datasets to other agencies and businesses to develop on.
This is already being called 'data nationalization'.

0. https://www.kommersant.ru/doc/5458430 (Russian)
True, but in this sense every code, every library and every API would be "for humans", which renders this distinction rather useless.
Google is very curated at this point, there are current topics that simply won't appear on any search. Usually in social media they are possible to find, either directly or using indirect terms.
Study finds solar exposure induces appetite in men, but not in women
While I agree databases are widely overused in areas where they are extreme overkill, whether human readable files are recommendable really sort of depends on what sort of data you are working with. Even just seeking in a line- or delimiter-based format is slow if the file is sufficiently many gigabytes. There are many cases where human-readable files fall apart, and ACID solves a lot of those problems.

Honestly, the software I wrote 10-20 years ago, if it doesn't run now it's not because I used a database system that's fallen out of fashion. If anything, systems built back then most likely would have leaned into storing everything into some cronenbergian XML-amoeba. It's unpleasant to work with, but it's not like it's somehow no longer viable.
Author here, I think a lot of the examples I made are friends for life!

The projects I started working on with strangers are mostly dead, but I still meet up and spend a lot of time with a handful of them. Even the example I made of Francesco and Fabrizio are of people that met online serendipitously and now have been business partners and friends for almost 10 years
Judgement is nigh. I'd love to get my hands on one of the decrypted binaries but I expect there are much more capable reverse engineers are already carrying the torch :^)
Do you have other objections beyond the wasted effort of re-writing the wheel?
The microcode runs on the CPU, and has the (theoretical) ability to directly modify anything running on the CPU simply by executing different instructions. The Management Engine (the component that runs the Minix kernel) is on the external chipset, and has no direct visibility into the state of the CPU. The OS that runs on the Management Engine has also been decodable for years, and while bugs have been identified nobody has found anything that's strong evidence of a back door.
Sheep Gets 3 Years in Prison for Killing Woman Under Bizarre South Sudan Law
Load Testing – Unorthodox Guide
Yes. Following NEWSTART.

Nutrition, Execise, Water, Sunlight, Temperance, Air, Rest, and Trust in GOD.

See: http://www.faculty.umb.edu/alexandrine_noel/AlexINFO/newstar...

Many testifies being healed from cancer as well, I know some personally who are following these principles.
This looks interesting, but not really innovative. I read the features and browsing around the only thing that stood out as a reason to specifically try this was the 64bit world coordinate support… but that has a pretty massive asterisk in that it is optional so it may not be as well supported by the rest of the engine, as is the case for most engines, and they didn’t mention the physics engine to match. It’s no good to me having a 64bit world if I have to implement my own entire physics engine in their game engine to take advantage of it.

Digging in deeper this appears to be the case, but they do have a Linux editor which makes them better from a Linux platform development standpoint than both Unreal Engine and Unity.
Thanks for the heads up I was always unsure about posting reviews on Glassdoor now I know that I will not post any reviews.
This is very flawed. Technology makes things easier so growth is inevitable. This "lauded, pioneering" economist seems to not understand evolution.
I don't think it's true that there's more being done in microcode than previously suspected? The microcode updates for various CPU vulnerabilities clearly demonstrated that microcode is able to manipulate internal CPU state that isn't accessible via "normal" CPU instructions.
It's a red flag when there are adjectives such as pioneering in the title
As a Sardinian living in London, it is actually not too bad. Winter in the Sardinian coast can be very very mild, but it is a large island and inland, in the mountains it can snow for weeks in the winter and be much colder than London.
Meta data leaks in frames and devices shown not to be reliable on 'respecting' boundaries.
Check fbpdf2, fbida and links -g.
> the annoying part is that the same rules don't get applied across the board

The same rules mostly do get applied across the board, which is why this story is about some guy writing a letter to private companies asking them to please find TikTok in breach of those companies' terms of service.

He doesn't actually have sweeping powers of censorship that would allow him to just ban them on a whim, so he does the next best thing and raises his political profile so he might get considered for a more important job the next time his political party is in power.

I think it's unlikely that Apple or Google will find TikTok to be in breach of their terms, and even less likely that Americans will be completely banned from accessing TikTok.
Rather, it's your computer that is performant.
> They may not even think about such mundane things like licensing and stuff, that's what they have higher ups for.

Oh, come on. Engineers these days are not stupid. While I agree that their boss could plainly lie to them that he bought a commercial license, it was more like, "What will we use for the underlying storage?" "Maybe MiniIO, they're S3-compatible and efficient." "Fine. Can we use their code, though?" "Sure, it's open source, and we are a *aaS business, so no problem." I saw this kind of thinking before.
First time I went when I was in America, I ordered I think a medium with sugar. It was this gigantic 1 litre cup of very, very sweet "coffee". Had to throw it away, absolutely undrinkable. I'm very far from a coffee snob and that blew my mind.
> On the grand scheme of things, if we add up the sins and good deeds, the USA has done more to improve the lives of people who are here than other places.

Interestingly enough, this is the same pro CCP argument but applied to the US.

I will say that the melting pot is true and that the US is one of the most immigration friendly places I've been to. (from a cultural side, not from a paperwork side). In other places you can be there for 20 years and never be considered a true citizen while in the US people would consider you a true American.
It’s easy to not care if you don’t get the full picture. The data in question is not “your diddly doo”, but the aggregated diddly-doos of 200 million people and the insights and power it provides.
That's the killer, I'd happily pay for no ads.
Depending on how microcode is defined, it's arguably existed back to the 40s. Which modern and reasonably performant CPUs are you thinking of that don't have microcode?
I'm wondering why the information necessary for downloading the file can't just be encoded as a URL parameter.

When the user clicks a file download link it should be possible to generate a short lived token that authenticates the user against googleusercontent.com.
'should' from whose perspective though? 'Sites that don't want Tor users' have no incentive to care do they? If anything it stands to reason such a site would block anything and everything to do with Tor, using it as a search term, usernames containing it, anything?

(I don't know much about Tor, so am I missing something about 'middle relays' that such a site would want to allow them?)

Edit: oh is the point that you're not accessing the site using Tor, just from an IP addociated with Tor use?
This could happen even if the culprit does get fired - as far as I know, there's nothing preventing you from posting reviews despite no longer being employed by the company.
> And such a hypothetical backdoor may not be patchable AT ALL.

Intel microcode can be loaded at runtime. If there's a backdoor in the microcode then it can, by definition, be patched.
As a Chinese, I feel sad that China succeeds in exporting its idea of restriction to the world.
on my Pixel screen recording doesn't notify the other user.
Good old protectionism. Really nothing new to see here.
And let’s be honest, the Chinese are guilt of the same stuff.
It looks like the long age of globalization is going into a pause now.
Do you mean Chrome has some special support for this, or is this the same as for any other browser (where the adversary could copy the history db file)?
Just apply the same rules to them as they do to us and require them to store US data on US servers and give the government the encryption keys.
I don't think this works.

Normal companies with plenty of transactions per day don't have the motivation or money to put that much additional capital into the system.

Of course for a few transactions per month no one cares but I assume the goal is bigger than just a few transactions.
I assume that by "they" in your second sentence you mean the publishers.

One relatively innocuous way to neutralize the hoarders of exclusive rights is a compulsory license. It was proposed in the context of the TRIPS waiver:
https://www.communia-association.org/2021/03/22/communia-sup...
1M website has SQL bug
Google is one of the big search engine. In Google.com you can find vulenrable websites. The most famous of which is the SQL bug. Most of the malicious hackers use this bug to seriously damage 13,000 websites every day, nearly a hundred of them are big and famous sites, including movie streaming sites that have subscriptions, bypassed with this method, or some of the websites that They store the data of the people of the world, they suffer from this bug. Hackers use these bugs to sell important data in the deep web, which is close to several million dollars, data that are vital and personal privacy of big people. Unfortunately, these websites do not have experimental penetration tests that will be hacked in the future and their vital information will be sold or given to people for free. No, I don't know where our data goes, neither do you, we just know that they are not being used properly.
As I understand it, you would need to have an existing RCE to exploit the microcode patching process.

h0t_max’s research means that future attacks — once your local machine has been infiltrated by some other means — can do a lot more damage than simply encrypting your filesystem or sending spam. They can rewrite the way your CPU works.

When your OS gets attacked by malware it is attacking the layer above the bare metal on which your OS runs. The base hardware remains untouched. You can at least clean things up by installing a new OS on the bare metal.

If malware attacks the bare metal itself, then you are stuck out of luck.
The article's "good" (HTML) example above this statement is bone stock HTML. The only self-description given is that there are 4 anchors and 3 divs in that response. Any other description would have to be assumed based on text between the tags.
This is a really intuitive way of thinking about it. The best way I could work this out was to start with the special case of pure scaling in a single direction.

For instance when scaling by "a" in the x direction

M = (a 0; 0 1)

It's pretty easy to see by graphing an example that in order for the normal to work out correctly you must scale it by the inverse scale factor (1 / a), so the correct choice of M is the inverse, M⁻¹, i.e. M = ((1 /a) 0; 0 1).

This of course generalises to scaling in multiple directions (just multiply the matrices) - i.e. to diagonal matrices. For

M = (a 0; 0 b)

the correct choice for transforming the normals is

M = ((1/a) 0; 0 (1/b));

By applying singular value decomposition you get

M = UDV

So choosing M' = M⁻¹ᵀ you'll get M' = (UDV)⁻¹ᵀ = UD⁻¹V

Since orthogonal matrices U, V will actually correctly transform the normals (they're rotations or reflections) you can intuitively understand that M' will work for transforming the normals.

Question is - where does the transpose part actually come from? It's a of a bit "magic" choice. This article makes it very clear that this "arises from" the transpose in the dot product, (t⋅n = tᵀn), as the dot product defines orthogonality!
How's that an issue? Here's an example of what happens: https://gist.github.com/robertlagrant/23489d8970ef6b49960307...
Today I learned, thanks for a new word. And its opposite: "proletarianization".
The governments are the direct beneficiaries of this data collection either directly or indirectly.
> I want USA to do whatever it needs to be the top player

Are you sure? Several months ago I've woke up to learn, that my country start to kill civilians of other country with bombs, missiles and shelling, to become "top player". And, what is even worse, many of my fellow citizens support it.

Now I'm trying to leave this country for some other, which don't have ambitions to be top-player but don't kill civilians and don't attack malls and hospitals.
libxml2 can be massive overkill if you just want to parse XML data. Unless you need schema validation and namespaces and all that jazz, you can parse XML in C with a simple state machine of ~200 lines. Add another 200 to build a DOM-like structure.

https://github.com/ccxvii/snippets/blob/master/xml.c#L326

Or in lua with ~200 lines altogether:

https://github.com/ccxvii/snippets/blob/master/xml.lua
After wasting several hours fighting the feeling, I give up and indulge myself in my favourite things.

I've come to admit that work doesn't always come at will. I don't think it's a very professional position to hold, but you can't deny it.
It is not "If the client knows nothing about the meaning of the responses" but "The client knows nothing about the API end points associated with this data"

This means that if "/api/item/search?filter=xxxxx" returns an array of ids then you don't have to guess that item prices can be fetched by "/api/item/price?id=nnn" but this url (maybe in template form) needs to be provided by either the "/api/item/search?filter=xxxxx" query or another call you have previously executed.

So very similarly to how you click on links on a website. You often have a priori knowledge of the semantic of the website, but you visit the settings page by clicking of the settings link, not by manually going to "website.example/settings".

PS: these links could be provided by a separate endpoint, but this structure is often useful for things like pagination: instead of manually incrementing offsets each paginated reply can include links for next/previous pages and other relevant links. These need not be full URLs also relative URLs, just URL query fragments, or a JSON description of the query would work (together with a template URL from somewhere else)
They were always going to need microcode to deal with errata or are you referring to encrypting the microcode rather than just signing it?
Cholesterol isn't "ingested" into the bloodstream.
'Google senior vice president Prabhakar Raghavan told the Fortune Brainstorm Tech conference that according to Google's internal studies, "something like almost 40% of young people when they're looking for a place for lunch, they don't go to Google Maps or Search, they go to TikTok or Instagram."'

This seems like a terrible search experience though!

I just tried searching for local lunch places to me in Instagram, and the results are useless!

I'll have to try TikTok I guess, but I dont see how a platform full of short-form video is going to give me a sensible result about where to eat!

What am I missing here!?
Looks like fixes for golangci-lint just got merged and should be in the next release:

https://github.com/golangci/golangci-lint/pull/2991
tptacek's point is that a MAE has nothing to do with the stock price, only revenue or profitability.
I prefer feh normally but I did for some reason prefer it for viewing the hourly weather (US specific but maybe similar is available elsewhere). I bind a key to

mpv --no-terminal --no-osc --image-display-duration=inf --title=weather --x11-name=weather --wayland-app-id=weather

followed by the weather.gov url (the image link there with selected options goes to the current. I also have a kitty +kitten icat alias for viewing in the terminal, although for hourly weather I usually use mpv. Also small radar images that are available (0 = latest 9 = oldest, radar names shown on main radar.weather.gov page next to the circled checkmark):

https://radar.weather.gov/ridge/lite/

Those I look at via icat since I'll keep them around to see how things are moving if I don't head out right away. For longer term weather there is a text forcast:

https://tgftp.nws.noaa.gov/data/forecasts/zone/

Some of the files are confusingly similar but with subtle differences that I don't remember. I use:

alias tw='/bin/curl -s '\''https://tgftp.nws.noaa.gov/data/forecasts/zone/or/orz006.txt...' | sed '\'':a; /^[[:space:]]*$/ { $d; N; ba; }'\'''
If GDPR would be enforced, Google, Microsoft, Facebook and other will exit EU market.
At the moment GDPR is a joke.
> They may not even think about such mundane things like licensing and stuff

Imagine a medical doctor or civil engineer claiming that knowing the laws of their professions is "mudane". That's why no one takes programers seriously.

> we are not decision makers.

You totally can decide to not work on stuff you are not comfortable with. It's not like there's a shortage of software engineering jobs.
Show HN: Walletsy – Proof of ownership made easy
Hey HN, I believe that easy proof of ownership is an unsolved problem that is one of the blockers towards mass adoption of NFTs. Walletsy is an exploration of my beliefs.

Walletsy makes proof of ownership easy and risk free. Get instantly verified in all your servers (that have Walletsy set up) in just a few seconds.

Server managers use Walletsy in order to gate their community and run raffles with just a few clicks.

Users just connect their Wallet and Discord to Walletsy once, and then no more headaches. They can also link their Twitter, add multiple Wallets and remove them.

Looking forward to the feedback.
> Which machine language is the microcode written in?

The mirocode is generally a sequence of uOps.
But in Intel's case, there seems to be a more complex mechanism, called XuCode, that generates the uOps sequence.
The XuCode ISA seems to be based on x86-64, as Intel says [1]:

> XuCode has its own set of instructions based mostly on the 64-bit Instruction Set, removing some unnecessary instructions, and adding a limited number of additional XuCode-only instructions and model specific registers (MSRs) to assist with the implementation of Intel SGX.

PS: Decoding of the XuCode microcode can potentially give precious information about uops encoding

PS2: You can find more information on uops encoding in another work from the same team [2].

[1]: https://www.intel.com/content/www/us/en/developer/articles/t...

[2]: https://github.com/chip-red-pill/uCodeDisasm
Yes, it's important to separate work you do for your employer from your personal life and everything else basically.

I never understood people who use their work/school machines to do stuff that could hurt their employer/school. Or even just to cause them potential problems.

But of course, the other way around is true imo: I won't use my personal devices for work - but that's mostly to prevent me from giving free extra work time to my employer.
Not a good one, I imagine.

My drive to work each morning involves travelling on a stretch of rural road which is about 6 miles long with no boundaries stopping animals such as cows, horses and donkeys wandering into the path of speeding cars. The limit is 40mph but it's mostly ignored.

As a consequence, around 40 such beasts are killed each year because the majority of people believe their need to drive at 20% above any given limit (for no other reason than satisfying their fragile egos) outweighs the lives and welfare of innocent animals.

So who's going to care less for the lives of a few birds when delivery of random crap from amazon is given priority?
I think you are engaging in whataboutism and should not be taken seriously.
Really. I'm finding Discord has a really high surface tension. By that I mean that I bounce off servers because so often nothing interesting is happening and I can't see anything to drag me back
Can you please elaborate on the "To protect the media conglomerates." part?
> Is this an American thing to always brag something about race, or how much "non-racist we are"? Nobody gives a sh* here.

Sure, you have no racial problems of your own to deal with... (http://www.romea.cz/en/news/czech/harvard-survey-over-15-yea...) There is an old saying about people in glass houses that you may want to consider. You may also wish to stop kidding yourself when raising the question of whether or not you are on your knees servicing American interests; if you did not see yourself in such a position then it would probably be unnecessary for you to act with such childish hostility.
It was a rhetorical question to the OP: fully cooked gill fish (enough to kill the parasites in fresh water fish) is extremely uncommon in sushi restaurants.

As the GP pointed out, this might not be an issue in the US (because of freezing requirements). But I would not be one to be eating carp "raw".

It's possible that this is the thing that takes narezushi mainstream, but I doubt it.
> Reality: nobody cares.

I'd like to talk about how we patch this pervading cynicism and
replace it with a model that's actually useful.

It isn't true on face value. Consider the course of the Cov19
pandemic. Two things spread. One was a virus. The other was an idea,
news about a virus. The latter spread much faster than the former. It
spread because people love "doom". Any story about the impending "end
of everything" is lapped up, relished and shared by the public.

There are well understood stages to information propagation. After "Is
this real?" and "Am I affected?" comes the question of "what to do?"

I think this is where your assertion about "care" comes in. Some
events will blow-up and burn out fast. People run around like headless
chickens enjoying the drama about something remote to their lives, but
ultimately nobody can do anything, so focus recedes. Wars and
famines are like that. Curtis calls this "Oh Dearism".

Alternatively, if there is any residual effect, new events connected
to the initial story, it feeds and grows. The initial "All the chips
are broken!" story that would die after a 24 hour news cycle becomes
an ongoing "situation". Then people care, because it's cool to care.
It gets a catchy handle "Evil-Inside" and a news slogan "The chips are
down". And then it won't go back in the bottle.

To reformulate your "Nobody cares" - as a question - "Do people have
sensible cares that are proportionate to the threat?" No. But if the
media tells them to care because cars are running off the road and
there's a massive uptick in cybercrime, which nobody can ignore and is
directly attributable to a single cause, then the "care" (hysteria)
can get worse than the problem (which may have happened with Cov19 to
some degree).

Finally, they may care, but about completely the wrong thing. One
suspects, if it turns out there is indeed some serious drama in Intel
chips, then Intel and the US government will try to paint the security
researchers as irresponsible hackers who unleashed this upon the
world.