skysight-inc/HackerNews huggingface dataset:
>The current software engineering paradigm has no meaningful answer to this, no matter what "security experts" tell you. In a sane industry this realization would lead to a change of the paradigm, but people in our industry seem to be only doubling down.

Capability-based security is one possible answer. The Austral language is trying to make this a first-class language feature:

>The problem is that code is overwhelmingly permissionless. Or, rather: all code has uniform root permissions. The size of today’s software ecosystems has introduced a new category of security vulnerability: the supply chain attack. An attacker adds malware to an innocent library used transitively by millions. It is downloaded and run, with the user’s permissions, on the computers of hundreds of thousands of programmers, and afterwards, on application servers.

>The solution is capability-based security. Code should be permissioned. To access the console, or the filesystem, or the network, libraries should require the capability to do so. Then it is evident, from function signatures, what each library is able to do, and what level of auditing is required.

https://austral.github.io/spec/rationale-capabilities
What was your prompt?
We will be a success if we have that scale of problems :)
You can learn C at the same time.
I use one for Penny Arcade: https://pipefour.org/pa/

https://inducks.org covers the Disney Duck universe (think: Carl Barks, Don Rosa, et al) but it isn't full-text, mainly metadata.
Not Go
I feel like this framing conflates personal and societal responsibility in an unhealthy way. At the end of the day we all benefit from specialization, that's the entire basis for our modern standard of living. I don't think it's the individual's responsibility to ensure that things are fair at a societal level. Not only would it be impossible given personal preferences and the subjective experience of work, but it can also have negative psychological consequences if one believes that work is not morally valuable if one doesn't dislike it.

Now, if the OA felt entitled to his chosen career path regardless of economic reality then I agree that would be uncool, but I'm not seeing that here. The author is not looking for a handout. He is simply grappling with the tradeoff between optimizing for max remuneration vs the nature of the work itself.
Good, then go edit your comment to reflect reality.
To chime in about how the article is cherry picking rather than doing deeper analysis: Dark and gritty superhero deconstruction was a product of the '80s and maybe early '90s, and then the '00s had the gritty reboot/reimagining trend for TV shows and movies in general. You also had a lot of prestige drama doing gritty realism with complex, dark antihero male protagonists starting in that era, which kicked into high gear in the '10s. Sopranos to Breaking Bad. Also shows where society was the gritty complex realistic antihero. The Wire to Game of Thrones.

I wouldn't say contemporary culture is any more unhappy than that era, it's just harder to read because there's no GOT type "event" series that everyone is watching right now. Maybe there will be a new cultural phenomenon, or maybe with this glut of streaming content, there won't be. (And if we look at blockbuster films, so many of them are shiny happy Disney-MCU fare, which are definitely not dark and gritty.) It just feels like right now we have a huge array of choices. When presented with that variety, it's really hard to say that it's generally more or less happy.

I do wonder what will replace comic books as the dominant subgenre of pop entertainment. I was hoping we'd get a reconstruction trend with comics like Astro City or Kingdom Come getting adapted, but in writing the previous section, I realized there's no need. For every dark and gritty realistic The Boys, there's multiple Disney+ shows. Batman is a character who's inherently going to have darkness. The majority of superhero comic screen media is escapist and optimistic, and this not-study is cherry-picking.
Apple has a bajillion dollars and cheats their own engineers.

> Apple is the world's largest technology company by revenue, the world's largest technology company by total assets,[454] and the world's second-largest mobile phone manufacturer after Samsung.[455][456]

> In its fiscal year ending in September 2011, Apple Inc. reported a total of $108 billion in annual revenues—a significant increase from its 2010 revenues of $65 billion—and nearly $82 billion in cash reserves.

https://en.wikipedia.org/wiki/Apple_Inc.#Finance

And then...

> In re: High-Tech Employee Antitrust Litigation (U.S. District Court, Northern District of California 11-cv-2509 [10]) is a class-action lawsuit on behalf of over 64,000 employees of Adobe, Apple Inc., Google, Intel, Intuit, Pixar and Lucasfilm (the last two are subsidiaries of Disney) against their employer alleging that their wages were repressed due to alleged agreements between their employers not to hire employees from their competitors.[11][12] The case was filed on May 4, 2011 by a former software engineer at Lucasfilm and alleges violations of California's antitrust statute, Business and Professions Code sections 16720 et seq. (the "Cartwright Act"); Business and Professions Code section 16600; and California's unfair competition law, Business and Professions Code sections 17200, et seq. Focusing on the network of connections around former Apple CEO Steve Jobs, the Complaint alleges "an interconnected web of express agreements, each with the active involvement and participation of a company under the control of Steve Jobs...and/or a company that shared at least one member of Apple's board of directors." The alleged intent of this conspiracy was "to reduce employee compensation and mobility through eliminating competition for skilled labor."

https://en.wikipedia.org/wiki/High-Tech_Employee_Antitrust_L...
I've yet to break into this one (I've seen it recommended so many times on HN). I'm no network engineer, but networking is a lot of fun for me and I enjoy learning about how it all works. High Performance Browser Networking[0] was one of my favorite books on this topic. Very approachable, even to complete beginner. I suspect that Beej's guide is a bit more low level and I look forward to that!

[0]https://hpbn.co/
Data may have said it in TNG, but pretty sure this originated with the 1983 film “WarGames” (https://en.m.wikipedia.org/wiki/WarGames).
Likely because the company is Russian.
I strive to follow the Apature Science naming scheme with everything I code.
> After investigating performance issues

Writing a book to rival War and Peace are you?
You could swap the flash to 16MB, or use a third party (almost) pin compatible clone with 16MB flash if you really want. I implemented a very simple compression scheme as well so you can load 16MB ROMs that compress to a few kilobytes less than that, leaving room for the firmware.
Why is it better than using plain Jitsi?
Where did he ever say that?

I never said he did. Notice the question mark at the end of my line. A question is not an attribution.

He did say he was happy to be downstream of Apple's "planned obsolescence". I simply asked about the kind of "planned obsolescence" that Apple has been successfully sued for.
I'm guessing the Voiceline app shared is too outline/fragment oriented for your use case? Something more freeform document oriented would be better?
Probably not easy taking orders on a Russian website from the US right now?
yes it will. it'll keep on augmenting the image until it recognizes it as the input
Unfortunately, the method OpenAI may be using to reduce bias (by adding words to the prompt unknown to the user) is a naive approach that can affect images unexpectedly and outside of the domain OpenAI intended: https://twitter.com/rzhang88/status/1549472829304741888

I have also seeing some cases where the bias correction may not be working at all, so who knows. And it's why transparancy is important.
If anyone thinks they will get cultural capital by having a middle-aged white dude as a groomsman/best man hit me up :-)
It’s really complex. For a partial survey of that complexity, see this SSC: https://slatestarcodex.com/2017/06/13/what-is-depression-any....

Part of the problem in describing/treating this condition is that depression is a huge constellation of overlapping causal mechanisms. You may be describing one set of mechanisms but it’s certainly not the only one.
"assuming Apple almost never allows known exploits to exist on the most up-to-date iOS release"

That's a false assumption.

At the end of the day, consumers aren't children. If they so choose to destroy what the manufacturer gives them, that is their choice.

I did some cool things with early Android that made the phone tailored to me. If I wanted stock, it was just a reflash away. This is the way.
Plus an inability to accept that there will be corner cases and some drawbacks, and that the best you can do with legislation is have the good well outweigh the bad.
solution: find uncontaminated food, or make it yourself
You wouldn't need to do anything to prevent people from buying it.

The restrictions inherent in the device (including only having a few apps that have been thoroughly reviewed by security researchers) would keep most people away.
Seems rather strange to me that this is an emulated process when the whole point of quantum is that it can do things classic computing can't?
On the other hand, if it's foggy and there's a ship in your path with a broken beacon then being parallel to the sea surface would not matter much.
I believe most concepts, like UX, can be broken down into multiple pieces, each of which can be described on a spectrum.

On the right side, we may find:

* consistency
* metaphorical
* discoverability
* ease of access
* attention to detail

On the left side, we'd find the opposite.

Where to be on the spectrum depends on context. For example, a sales page need not be as concerned with consistency as an application.

Being conscious of the existence of these concepts is key. Example: what does '...' mean in many applications? If you don't know, did you subconsciously?

And don't forget, design is partially subjective, however, a decision may be objectively inconsistent, un-metaphorical, etc.
Monkeypox: The Outlook for 2022
However, the SNI (prior to ECH) just tells us who the Client said they wanted to talk to when connecting.

Suppose the client calls 10.20.30.40, and they announce they want to talk to legit.example which is fine. The server sends a certificate (which the ISP doesn't see) and that certificate says it's valid for legit.example and for naughty.example. Now the client is allowed, in HTTP/2 and HTTP/3 to say "Actually I want https://naughty.example/stuff" and although the server isn't obligated to have that answer because the client said it originally wanted to talk to legit.example not naughty.example it often can answer and will. The client has a certificate showing this server is entitled to answer this question, and now it has an answer, so it's done. [If the HTTPS server can't answer or doesn't want to for any reason, the HTTP error code for this scenario, where somebody asked you about a name for which you have a certificate but aren't actually able to answer questions, is 421 Misdirected].
In my region of northern New Hampshire, there are a lot of retired folks with houses rising from $200k-ish values to closer to $500k-ish values in the last 5-10 years.

As such, there's a lot of discussion around lowering property taxes to help these retirees.

In my opinion? Fuck 'em. Property taxes are a brilliant method of perfectly progressive taxation: you can always choose to live in a cheaper home. If your home is so expensive that you can't afford the property tax, downgrade. Those of us who can't afford property will shed no tears.
The page specifically notes:

Last Updated: 6/7/2022

this would not cover a July release (yet).
If OpenAI could make a profit selling Dall-E images as NFT, I'd assume they'd do it, yeah?
This precise thing is causing a funny problem in specialty areas. People are using e.g. Google Lens to identify plants, birds and insects, which sometimes returns wrong answers e.g. say it sees a picture of a Summer Tanager and calls it a Cardinal. If the people then post "Saw this Cardinal" and the model picks up that picture/post and incorporates it into its training set, it's just reinforcing the wrong identification..
High property taxes are good on non-owner occupied homes.
I have just received mine (kickstarter backer, EU based) and am impressed by the build quality. I still need to play with alternative firmware etc and found a very naive cloning of my access badge did not work, most likely due to some additional security in place. Had to check though after I picked up an SD card on my way to the office.

Curious to see what uses I can find for this, most likely it will end up in a drawer sooner rather than later, but I can see this be very useful on holidays ;)
When I worked on a code signing app, which is arguably some of the highest stakes of almost anything I've worked on, we came around to an agreement that one ticket a month would be assigned to upgrade libraries, and we rotated that responsibility. We didn't stipulate what library, we didn't even stipulate which application in the suite (though it was assumed that you were likely to chose your primary application as the target), so long as something got upgraded.

This policy evolved, if memory serves, after a security issue was discovered with the XML library we were using. The fix was not back ported to our version, and the versions in between had multiple breaking changes, so it was a slog to fix it.

It wasn't even that we were having a production issue, because we were still in development and internal testing. Not a single 'real' signature had been generated yet. It was all test assets and test CA certs. But we had enough wisdom to put 2 and 2 together and get 4, so we tried to treat the situation as a dress rehearsal for some later bug that happened after we started playing for keeps. Almost everyone could see this was an untenable situation.

There were consequences of course, but we made a bit of lemonade in the process. Our integration tests were expanded to include a larger percentage of pinning tests for our dependencies. Given the gravity of the situation, we needed those anyway. We just now had a poster child for doing the work.
Makeup solves that problem for most people.
> medications are highly cost/effective..

You are commenting on the article that says that it is BS. The most upvoted comment on the article at the moment says "it [the ineffectiveness] is old news hardly worth mentioning"
I think you mean https://gordongoner.com
I wonder if it can be embedded in the future in Unity.
It’s not so much they were “real” problems, as they were acute problems. Acute problems - bad guy with gun - are easier to portray on screen than chronic problems. Anyone who thinks we don’t have real problems anymore and this is the end of history has their head in the sand. But it’s more difficult to visualize. How do you make a war flick out of climate change? How do you make an action thriller from wealth inequality? Even Covid, I mean I don’t know of any influential movies inspired by the Spanish Flu.

Some “dark and gritty” does suffer from a true lack of maturity on the point of the screenwriter - Zac Snyder does not have the writing talent to support his darkness without it seeming cheesy and silly - but a lot of it - Christopher Nolan’s Dark Knight - very much does touch on the real suffering of the modern era: terrorism, surveillance, class divisions.
Reminds me of https://en.wikipedia.org/wiki/Low-background_steel
I m a die hard fan of Hetzner, but well I m biased, I sleek German and live in Europe.

Their prices are unmatched and their service is awesome.
The got Mac Mini M1 Servers as low as 50€.

And big dedicated servers. In my company we use 80% hetzner.
I'm seeing this as well. While the amount of traffic has certainly decreased compared to the first couple of days after the CVE was announced, https://log4shell.tools is still being used by people every day.
You cannot. But a workaround would be to say something like “generate an alien in three different poses— running, walking, waving”

Then use inpainting to only preserve that pose and generate new content around it. It’s definitely not perfect.
That’s my perception as well but I believe it is flawed. I don’t work at Facebook but I imagine their business is run off the vast data they collect from users. Somehow, the increase of ads must be increasing revenue in a more material way than it loses users.

I don’t think Meta is incompetent and they understand the knobs they can dial in better than anyone else.
I doubt that just using nextdns could help in that. Couldn't they just hardcode and make requests to, say 8.8.8.8 or an unknown address, to resolve their DNS-over-HTTP domains?
I make over 140k in Switzerland and I'm definitely no genius yet still in demand at over 50. It can be done.
At most companies I've worked for, mentoring and training junior engineers is a requirement for promotion. Also, you might not get promoted for maintenance but

1. keeping it running with a healthy userbase and demonstrating high impact does, and

2. if you know how to spin it, then maintenance work can look like "building new stuff".
> There's many people including celebrities who are willing to pay huge sums of money to be part of that exclusive club.

Fatal error.

Celebrities don't purchase this "exclusivity" garbage. Why would they need that when they're already famous? If anything, they will get it for free and get paid to promote it, by the people that actually make it.

The kind of exclusive club you're envisioning is closer to Fyre Fest than the Viper Room, or some other exclusive celebrity owned club/restaurant.
I wonder how close the nearest match from the training data is. Was there a cheesecake that looked almost like these generated images?
> Also, we recovered a format of microcode updates, algorithm and the encryption key used to protect the microcode (see RC4).

RC4 had already been busted wide open when the two generations of CPUs (Gemini Lake and Apollo Lake) this affects were released.

Why would they use a known insecure cipher?
Besides the classic C book by K&R, what are some more modern C books that the HN community vouch for?
But how would you know? A random string of text or an image with the watermark removed is going to be very hard to distinguish generated from human written.
So at least cloudflare wrangler cli let's you test serverless locally. And iirc Google firebase (db) has a local emulator
Ironically, logging is one of the ways to help mitigate/detect security vulnerabilities.
SF's cable car system and historic F trains both work fine as public transit.

And people hate buses.
OVH, Scaleway
Americans Who Can’t Afford Homes Are Moving to Europe Instead
What are you basing that on? What should the price be? The training and generation are probably expensive.
I understand there is a separate level of privacy issues caused by phone companies selling data, but all of the reports refer to data collected from apps which can't be IMSI/IMEI since that's not available from apps?
Fear was used to push the masses to the vaccine. Discussing the results of a suppressed study that goes against media messaging is not jumping on a fear train.
> I’m not an economist by profession but I suspect (and at some point want to try and model) that one’s carbon footprint is just a linear function of three variables: the amount of money spent, the fraction of all money that’s in active circulation in the economy, and the fraction of clean energy in the total economy.

On average, it is true by definition (at least, if one holds that all activity in some way supports personal consumption) that carbon footprint from consumption is (global carbon output) × (personal consumption) / (global consumption).

It sounds like your proposed hypotheses essentially rephrases this.

> Thus the only solution to reduce your carbon footprint is to pretty much just spend less money!

In the short-term, sure. What spending a premium on things that reduce carbon footprint in normal narrow analysis (but which force the reductions in the short term to be someone else's increases who aren't paying the premium) does isn't actually reducing the near term footprint of the whole economy, it increases the economic incentive for production models which reduce the footprint per unit output.
Cool! I'd love to know the things you've learned after dealing with real people. Can you share some with us?
Good lord. I try to tell folks all the time that to some extend you have to ignore news. Big world events are going to find their way to you. Russian invading Ukraine is going to end up being something you hear about regardless if you follow the news at all.

The tragic stories of children getting bombed in Ukraine? The photos? The gory details? That likely is only waiting for you if you go searching for it.

I'm not advocating being ignorant. I'm advocating limited the amount if tragedy you seek out on a daily basis. It isnt good for ones head. It certainly doesnt make anyones life better.
> You, as an adult, can choose not to install shady software.

You clearly do not play tech support to elderly family members, or have kids
8 years is too much time. I feel like a technology gets replaced every 15 years so by this logic, rules will only get applied at the tail end of its lifespan. Better late than never but maybe 3-5 years would be a better number.
Barely made it halfway through. The post was largely an exercise in bragging.
Like with any process there is some waste (bullshit jobs), but the question is, it worth committing the extra resources to eliminate these bullshit jobs or would those resources be better used elsewhere.

Essentially not all waste is actually worth eliminating.
NFTs were never limited by artwork availability - they are limited by wash-trading ability.
High property tax gets us to closer to a land value tax, so yes.
I consider usability to be a critical component of "UX."

I started by reading The Design of Everyday Things. It's a book that changed my life. There was just a thread, hereabouts, about the book[0].

I also took a few classes with the company that Don Norman co-owns (NNG)[1]. These are useful, but not a "philosopher's stone." They tend to push user group testing a lot, and I'm not a huge fan of UG testing.

I tend to lean on the platform standards, a lot. As I develop Apple software, that's easy. Apple has a very heavy-duty tradition of UI[2]. It's not perfect, but I keep on tossing out my fancy custom UI, in favor of the built-in UI.

They did a hell of a lot of work, so I don't have to. I usually regret "taking the road less traveled by."[3]

I strongly suggest getting familiar with the built-in UI for whichever platform/industry you are working with. Look at ISO icons[4].

Being "unique" is not always a good thing.

[0] https://news.ycombinator.com/item?id=32135115

[1] https://www.nngroup.com

[2] https://developer.apple.com/design/human-interface-guideline...

[3] https://littlegreenviper.com/miscellany/the-road-most-travel...

[4] https://www.iso.org/obp/ui/#search
Somewhat meta, but why would Microsoft I use the Kit suffix which has been widely used by Apple adopted from NeXT?
"girl with a cap standing next to a shadow man having a speech bubble, digital art"
It's the difference between equality and equity.
Everywhere in the world you design for what the local conditions are.

I bet Mumbai doesn't mandate winter tyres in winter, right? Sweden does. If suddenly one winter you see -10℃ in Mumbai, would you appreciate Swedes mocking you for not being able to drive in a car not designed for it, with tyres not designed for it, on roads not designed for it, etc…?

Nothing in the UK is designed for 40℃. Buildings, the type of steel made for train tracks, ventilation in tube tunnels, the asphalt, the walls in the building, the windows (no double glazing in Mumbai, I assume?). I would expect everything in Mumbai is designed to handle high temperatures. But not cold.