skysight-inc/HackerNews huggingface dataset:
I don't think it's about being tainted. It's that there's a bunch of C++ code out there already in Production in a ton of places that doesn't pass those checks, and may or may not actually be safe. It would be a ton of work that may not produce any end-user value for any C++ project to switch over to that.

Meanwhile, Rust has always had those checks, so there can't be any Rust code in Production that doesn't pass them that would be painful to switch over.
Yeah, even Walmart-brand instant coffee is Arabica.
> Most importantly you can use it transparently outside of your network; you have a single DNS service with a single configuration available everywhere.

As an aside: for a generic replacement for pi-hole inside and outside one’s local network, NextDNS (it’s not self-hosted) works fine. It allows setting up ad blocking and tracker blocker filters from common filter lists, allows custom allow and deny lists, and provides 300k queries a month in the free plan (when this limit is exceeded, the DNS works but not the filter lists).
SolarWinds attack hit many branches including the Nuclear Agency.

I wonder how plausible it is that SolarWinds served as the attach vector for this different type of breach?
Yes and no. They're "interesting lines of research" except when they're in your field, then they're foundations or anchor points for your work, past, present, and future.

I'm not going to disagree that a lot gets lost in translation between academic article and the lay-person who hears a story on the nightly news, but I don't think gatekeeping academic research is the answer, but rather more emphasis on critical thinking and critical reading.
A good guy. He saw the Glowies.
I watched a recorded livestream the other day of a game developer making a game in Bevy. It was maybe the 5th one and I hadn't caught the first 4. It had about 500 views. The video started off reviewing a PR made by a viewer who improved the inventory system they had going on as well as a few other contributions.

It was delightful to watch. Regardless of any criticisms of Rust compared to other "next C++" languages (e.g. Zig, Vale, Hare, Odin, Carbon, etc) the amazing community is what's already ensured Rust's place at the top
made me realize that the community is going to drive Rust to stardom
I've only done this as an amateur with nothing really at stake, but my approach is - skim the paper, read the paper, read about the paper, reread the paper while taking notes.

Usually on skimming and first read I'll flush out all the concepts and words I don't understand. I can then figure those out when reading about the paper. Reading what other people have written about it will help you understand more as well. Then, on the final reread I'm prepared to understand.

At this point, I'm either satisfied with some takeaway (usually much narrower than any press about the article) or I have doubts or questions. Search to see what others say about the doubts or questions. Then, read references around central or implausible claims. It's not really uncommon to find references that are dubious - e.g. the author cites a figure from another paper, you go to that paper and it gets the figure from somewhere that gets it from somewhere that gets it from someone's example of a different thing.
Ethanol is not a good solution. It's extremely inefficient to take solar radiation and turn it into corn, turn the corn into ethanol and then burn the ethanol for mechanical power.

Just turn the solar radiation into electricity and turn that into power. Solar and EVs are here now.
Reality does not seem to match your preconceived notions. Perhaps you should recalibrate your perceptions to match reality.

If there is a 200:1 multiplier in 1 very specific community, perhaps effort really should focus on that community.

Or much like COVID, will we not be safe until every 5 year old is vaccinated?
Of course, but they did that with a sensor. If anything my car computer says it has an emissions issue. But maybe I'm missing something.
I'm in a small city, but it has a bunch of extremely good local roasters and cafes (along with a thriving food scene).

I can go get gourmet coffee easily (walking distance), or buy extremely good beans, but heck - sometimes I want absolute shit tier coffee. Its what I grew up on!
Sounds more like a job for the keyboard layout itself ?

https://norme-azerty.fr/en/

(With good support for all(?) the Latin-based languages, and also Greek... I kind of wish they had managed to fit Cyrillic on another mode too !)

P.S.: better than the old AZERTY for math & code too !
I think the problem might be with your word "legit." What do you mean by it?

The idea of "legit" does not exist in science. There are hypotheses, created by observation of some phenomenon and an attempt at generalization. There are tests of the hypothesis, which are experiments aimed at disproving it. There's also accumulation of evidence against a hypothesis. Those that don't fall over due to contradictory evidence endure.

Just like nobody rings a bell at the top of a market, nobody blows a horn to announce the arrival of scientific truth. It's all subject to being overturned at any time by new evidence.

When encountering a new paper, this background process is running. Where along the trajectory does this paper lie? Is it contradicting previous findings? If so, how strong is the evidence? How reasonable are the experimental methods? How consistent with the evidence are the conclusions? Was a falsifiable claim ever formulated and/or tested in the first place?
I would have expected that a strong, physical audit trail would be a highly desirable thing.

That said, I have no idea what the transaction volume is like here. My experience of TV crime investigation tells me these are rare occurrences, under warrant.
I found the bug I opened against the csp spec, asking for it to not obstruct userscripts. https://github.com/w3c/webappsec-csp/issues/444
Related:

ImHex – A Hex Editor - https://news.ycombinator.com/item?id=25353965 - Dec 2020 (78 comments)
Hardly any useful content here. Just ads. All the comments here are people saying that the article is wrong yet it somehow got to the front page. So that would mean that all the people who agreed upvoted it but didn't comment. Hmmm....
I use Firefox over X forwarding all the time (pretty much every workday) in 2022, and it works fine.

I have not had a problem with any application thus far.
I'd kind of like to try Ruby on Rails but python was my first language and I was very, very green when I first tried to make a website so Django was a natural choice. It's served me well. I think remix.run is a pretty great framework, all things considered. You could always use Django or RoR to manage the database and use Prisma to inspect the schema. There are some downsides to that (you have to mess with bcrypt to get passwords to work the same on the node and python side), but might be a good compromise.
Not denying that caffeine addiction is real, but I also think "lack of coffee" has become a sort of blanket excuse for just being sleepy or not fully energized, regardless of the actual coffee intake. It's a common thing to just say, sometimes as a joke and other times as a convenient lighthearted excuse when someone misses a social cue or does something silly: "Sorry, haven't had my coffee yet!"

And most people who hear it kind of get it as well. They don't _actually_ think this person is physically addicted to caffeine. They hear it with the understanding that this person is just a bit tired, distracted, or out of it that morning/day/whatever.
Once again, facts are problematic.

Connecting monkey pox with the gay community has already provided a false sense of security to non-gay people

It's a true sense of security. The overwhelming majority of cases are in men who have sex with men; if you aren't in that category you are at virtually zero risk. (Yes, this could change in the future, but the best way to avoid that is to focus on where it's actually spreading now).
Prof. Huberman is an excellent source of information and it's always worth listening to what he and his podcast guests have to say. But be aware that he has a bias toward action (interventions), which sometimes runs ahead of the science and isn't fully justified from an evidence-based medicine standpoint.
> patented “data blurring”

This can be looked up.
I suspect it is not their own patent though, so not under their own name.
With an n=83 they did clustering, random forests and a regression model to develop a new genetic test? At least they used the standard questionnaire which should resist the chance of them overfitting the data.

But, the problem could be generally solved by treating people with the disease just using the questionnaire. Taking people's blood to see if treatment is progressing is an interesting way to assess people for treatment. Would be great if this test was expanded to a larger amount of people.
Do you know how big the performance cost would be when scripting with the new ECS APIs? Does the indirection involved mean that we lose some benefits of cache locality?
Small pleasures of programming (2020)
And before it was a digital version, a sealed file would be removed from the general filing system, kept under lock and key.

They seem to have forgotten basic security principles.
> I would also like to point out, though without citation because I am lazy / uninvested, that in the past (1800's and back) money was lent to the friends of the wealthy at no interest.

This is trivially disproven by doing a few searches on wikipedia: https://en.wikipedia.org/wiki/Compound_interest#History
Many sites are turning on CSP, a web security capability which lets sites block loading content from anywhere they don't allowlist.

Userscripts will run, but if they try to load any content from elsewhere, that breaks. So, for example, the Hypothes.is extension wont load. Affected sites keep growing. https://twitter.com turned on CSP many years ago.
The article is not complaining that they refuse to connect it to the gay community, but that they refuse to connect it even to certain behavior within that community.

This would be like refusing to admit large maskless gatherings help spread Covid, because that is not the only way Covid spreads. Yes, there is risk even if you avoid such gatherings, but the magnitude of that risk differs.

> “Blaming the gay community or gay behavior,” it concluded, “is not sound public health.”

But "behavior" was the #1 target of blame for Covid! If it was okay to blame behavior then, why not now?
Did you write this? If so, thank you! This is a fantastic and eloquent translation.
btw, fzf is written in go ^^
You're right, but a tank of ethanol will take you farther than batteries.
The website gets it. Safari does not strip it.

IMHO that's the correct thing to do. Maintaining GPS coords is highly desirable when uploading photos to your photo storage solution. It would be very sad if they were all lost.

Most web apps (such as facebook, slack) will strip the exif data though, so you don't always need to worry about it.
This has been a recurring theme from you, but in the cases you're describing the risk is only a race condition (no general solution is possible) and not a data race (which safe Rust is able to deny by design). These are categorically different problems.
Made with Dear ImGui. I'd recognize that font/style anywhere.
Indonesia blocks Yahoo, PayPal, Steam, gaming websites over licence breaches
Build the wall! Stop the Americans from stealing our jobs and apartments!
The only in-depth video I have seen of a so-called Hikikomori was actually a man with quite a significant social life as well as multiple businesses. He just did everything online.

I'm American and I think I fall into a general "Hikikomori" category although this term seems to be ambiguous and poorly understood.

The short version is that working online and not going out much at all may just make sense if you are relatively poor and have a health condition and/or just don't want to deal with office politics anymore.

And especially if you don't have much savings, going out, making and keeping in-person friends can be quite a struggle. For me, my startups or the easily acquired contracts with "international" rates keep my savings relatively close to zero.

And the reality is that society is quite judgemental towards men or individuals who do not have a high income or even seem unwell.

But part of this is just an ignorance of technology. No, I don't go out usually except when I have to go to the ATM because my landlord is a bit behind the times, but I do work quite hard and socialize in my own way. My online business right now is again kind of keeping me poor but the other hand I am getting hundreds and often thousands of microtransactions per day at this point. And fairly optimistic about it.

I did have a little working vacation scheduled to visit my brother and his family in a week or two but had to cancel it because I am just going to be scraping by this month and if there was another fight with his wife then I would have no recourse because could not afford to get a hotel. Anyway it's just not practical right now.

Anyway, a retreat to living online can be easily explained by just having financial and/or health problems.

But I also do have a social life to a degree. I play Eleven Table Tennis in VR almost every day. I get to have my day on any topic on HN, reddit or sometimes Discord.

But I would say even in VR I am somewhat withdrawn in that I find places like VR Chat awkward and mainly avoid them. Part of that I think is just my nature of not having a ton of interest in socialization or a lot of energy left over for it. But another aspect is again the financial situation. Even I would say the cheap apartment may contribute because all of my business is broadcast to my neighbors which does suppress voice chat interaction somewhat.
> They go a bit more in depth than that. They try to ensure there is no hole in the state of art, that may have an impact on your result, and that your methodology is sound.

Of course, yes. The reviewers will give critical comments and may even recommend "revise and resubmit" for the authors to make changes to the article.

But the reviewers aren't going to run their own experiments and try to replicate the results, for example.
From the afterword:

> Multiplication can be considered iterated addition only when one of the numbers – the number measuring the degree of iteration – is pure. Adding five apples to itself three times makes 15 apples. But three apples or three oranges as a count for adding makes no sense.

Hm, I wonder what happens if you consider "times" or "iterations" a unit? I haven't thought this through but it feels like the edge of a deep insight. Playing fast and loose with units and iterations feels like Lisp. Being strict about it feels like Haskell.
If it's grinding beans to order then as long as you're not buying stale beans, you should be fine as you are. As I see it, the most crucial factor is water temperature (it bugs me to see boiling water used for coffee) and the freshness of the beans is the next important factor (somewhere from 3 days after grinding to two weeks is best).
I guess it depends on what you mean by "best."

For me, X11 forwarding:

- works out of the box, no config needed

- works on an application level rather than desktops; this is key

- doesn't require anything network-wise but SSH

- doesn't require me to modify servers in tightly controlled environments

These are all mandatory requirements for me.
Failing to strip exif is traditionally one of the first mistakes most new sites with photo sharing make. Browsers wouldn't strip it since it is useful information that's used by many sites. Sites that keep it on purpose just have the good sense to make revealing it optional or selective.
ImHex is great, especially the pattern editor. Very useful for debugging custom binary formats besides just reverse engineering.
>> Should auto-manufacturers be liable for emissions produced by cars that have had their catalytic converters stolen?

> This is an interesting hypothetical, but I don't see the relevance

That's your willing ignorance, and on the 2nd point too.
I read a lot of papers on power systems and tend to look at things in this manner:
1.) Is the author actually trying to solve a real problem or just trying to pad their resume with key words
2.) Is machine learning being suggested even if it is entirely impractical for this use as only slightly slower methods exist that are deterministic and don't require maintenance?
3.) Does the paper make either solid logical arguments or do an experiment on a full-sized model and not just a tiny toy model?
I don't think locals in Mexico are saying "sois una plaga", which is a very Spain verb form befitting the Spanish source. The original quote says "eres" which is singular.
Jevon's paradox isn't a law, and it's been really clear that it hasn't applied to electricity.

We care about cold beer and hot showers, and only want them so cold and so hot respectively. Jevon's paradox does not apply to most consumption that we are trying to modify.

One place where Jevon's paradox really does apply is driving. Which is why we need a stronger movement to at least legalize planning that allows people to live without cars. Note that I'm not even saying we must force carlessness, simply make a careless life legal. Allow people to choose to build housing and businesses such that one doesn't have to use a car. Things like removing parking minimums, etc.
thank you for your advice, but this is precisely what I have done did, having initially had the false sense of security on monkey pox, believing to be transmitted mainly through gay sex. It is only today that I 'recalibrated my perceptions to match reality' as it seems the monkey pox can transmitted through any kind of touch.
As one of the few people actually using the Colemak keyboard layout, I am very glad about it's excellent multi-language support. It allows me to type nearly any language reasonably well. https://colemak.com/Multilingual (Basically any latin-chars using language, Chinese and Japanese are also fine as they use IME-based inputs, only Cyrillic based langs and APL are a bit of problem but can't have everything)

For the languages I use is it is mostly a matter of AltGr + key, which is quite ergonomic. It would suffer greatly if I had to make long presses as that would kill my typing speed.

Not to distract from how awesome Emacs is though. Just wanted to add a solution for those who regularly type text in different languages.
What benefit do I get from using those services, over putting an open source solution on a $5/month machine and using that?

This one has 8k stars on Github:

https://github.com/knadh/listmonk

This one also seems to be popular:

https://github.com/phpList/phplist3
If you can afford to take a lower salary, you could try getting a position as research technician in an engineering lab. No guarantee that you'll develop the skills you want, but at least it would solve the problem of professor recommendation.
We can blame plaid all day but the banks are the ones that created a need for a third party in the first place. How banks didn’t come together and create a more secure and planned version of plaid themselves shows the technical incompetency of the leaders of those banks.
That’s a liquidity problem, which is different.

The PP was talking about inflation of money supply.

For reference, you can have liquidity problems and an inflationary money supply at the same time.
Please don't post shallow dismissals, flamebait, or name-calling comments to HN.

If you'd like to make your substantive points without those things, that would be great.

https://news.ycombinator.com/newsguidelines.html
My org lost a few people to Intel. They all did their research and know full well the technical and managerial leadership at Intel are total clowns and that Intel is finished.

So they are going to rest and vest. They all know Intel is finished but the short term bump in pay is quite attractive for people who want to take a break.
> How do you know what happens in practice?

I’ve done consulting work for that industry.

> What information are you thinking of that isn’t considered private?

Statistical distribution of the absolute jerk. People who race, and distracted drivers have to correct at the last minute both have sudden changes in acceleration.
r0 estimates: https://twitter.com/PJACaytonPhD/status/1552920032577212416

Predictions: https://www.metaculus.com/questions/10976/total-estimated-mo...

Dashboard: https://public.tableau.com/app/profile/peter.suwondo/viz/Mon...
Exactly. It serves great purpose to me. I love being able to see exactly where a photo was taken. I have cherished vacation photos from many years ago and I don't remember where we were. When location data is there, I can pinpoint the exact trail or campsite, even when it was very remote. There are also photos of my kids where I'm not sure which house/area we were living in at the time. Location data solves this.

Since the location information can easily be removed but is extremely difficult to add, the clear solution to me seems to be to strip it when not wanted, and only upload your photo to trusted services. Most legit services will strip the info anyway (facebook, slack for example).
My ex and I had been watching this coming for months. We've known it affected our community. I can't go to a queer space in my city without people talking about it. Hell, every single day I've been at the nude beach I hear more people talking about going to Canada. Guess where I'm going next week?

We have stockpiles of this vaccine and we sat on our hands. I really struggle to empathize with someone that just reads basically the same sentence about "woke media" repeated about a dozen times and thinks that explains a spreading health emergency.

Am I supposed to believe that more headline "the gay wh+res are spreading the monkey virus" would have... What? Caused MSM folks to stop having sex? Gotten the government to allocate vaccines sooner? Mobilized the clearly super functional public health infrastructure that I know got torn down the second omicron started to fade from the general population?

I'm not convinced, again, especially with the obvious overt tone to the entire article with zero follow through.
Serious questions: if these garbage collectors are so good, why aren't they widely used? My guess is that they have downsides such as low throughput, high CPU usage, high memory usage, etc...
You can't import a JVM GC into V8, to stay with my example, but you can reimplement the ideas if you have quasi-infinite money like Google.
this is like saying in early 2020, 'overwhelming majority of Covid-19 cases are Chinese people, it's all good'. The issue is that transmissibility is not only through gay sex, but in fact any kind of touch. The gay community simply got hit first
You're right, solar doesn't scale like nuclear, solar scales far better.

As we build more nuclear some places build it slightly cheaper with more experience (South Korea), but most places pay more and more as they learn about it (the US, France).

Whereas solar follows standard manufacturing learning relationships, and turns out to have a fantastic learning rate.

> The main reasons why solar is so cheap right now is because the manufacturing is being outsourced in China and you get subsidies and tax reductions for using and trading solar electricity

This is simply untrue, and shown by manufacturing outside of solar, and also the costs of solar without the subsidies being the cheapest energy source right now, and only getting cheaper.
The point is that the police departments face constraints (budgetary, management, laziness, etc.) such that many crimes and police reports simply are not investigated at all.

Some first hand examples: The four times my car was stolen, no investigation or arrest, including the one time I even was able to give them the name of one of the people who did it.

Usually they don't explicitly announce these policies because they are unpopular, but every police department has some threshold beyond which they do nothing.