skysight-inc/HackerNews huggingface dataset:
I’m usually not interested in social engineering which I think is boring stuff, but I think that (1) this is a weakness on my part as a developer with something of a security focus, and (2) this is perhaps the perfect sweet spot of social engineering and programming.

It is an utterly fascinating takedown of the back button hijack. Totally unethical but also very eye-opening for me.

Is this kind of back button hijack and history rewriting still possible in modern browsers? Edit: this link leads me to believe this may still be possible: https://developer.mozilla.org/en-US/docs/Web/API/History - would love a confirmation.
I've read at least one writeup from 1960s about A-3 Skywarrior ending up crashing while practicing touch-and-go (where you touchdown, then immediately take off again to do another practice round).

The pilot has accidentally released the drag chute instead of stowing landing gear, because the controls for both were a) similar b) located near each other c) not clearly visible from left seat.

Afterwards, the drag chute release was moved way elsewhere.
I was going for a pistol start UV recently, and some levels are really hard, especially if you don't know where secrets are. On some levels it's hard to get that shotgun to get things going and the ammo is often scarce.
Hiring 55,000 new employees in the last year is a big part of it.
I donated it to a local charity. I believe they used it to shuttle elderly people to hospital appointments.
On my similar Devqterm, ambian takes around 30s to boot. There might be hibernation, but I don't use it. I actually like the quasi-instant system shutdown you get with the physical power off button (though I'm sure it's reprogrammable)
That's a development board; if you look at the chip that's on that board (STM32F722ZE), there's no stock.
> These Covid-19 decree violation scores were calculated by analyzing nearly two billion global positioning system (GPS) pings to get “real-time, ultra-granular locations patterns.”

How did they acquire this data? At what point did 10 million Americans consent or opt-in to sharing this information with PredictWise?

And then the rest of the article about what they went on to use the data for.. Shocking. This is a clear indicator members of the general public aren't viewed as human beings; the national political parties view us as sheep and pawns.
So that settles it - Javascript is all you need.
That’s really minimal, even for x11: it doesn’t even do reparenting and setting up window borders or xdamage/xfixes compositing
I've also heard Canadians complain that they get many pointless alerts that can't be disabled.
Apple is bullying app publishers like how Spotify is bullying artists.

Whoever owns the dominant platform have the power.
assumedly when they're proud of its numbers
> Eh, yes, but also no. Obviously a compiler needs to work correctly to be useful, but our priority right now is to move the project forward using our best judgment, not ensure that it has maximal utility to early adopters.

I feel like I’m a potential early adopter and the amount of miscompilation I ran into playing around with it really made me lose interest. It seems like the priorities are set somewhere else entirely.
In a similar way that I choose to use backspace vs ctrl+z, I may use the back button or open a new tab (or duplicate tab, then go back), depending on if I want to keep current context or discard my current work.
Sure they do; just not the most current versions.

The App Store only sends versions you can actually run.
Graphviz is excellent. I use it for (amongst other things) generating diagrams of states and transitions, and also for automatically mapping choices as I write interactive fiction.

More generally I've added it to Newt [1], which is my in-progress C# code generator. It scans a PostgreSQL database to automatically generate a class library with models and EF Core data contexts.

As part of that it writes out a dot notation Graphviz source file for showing the tables and relationships. The repo includes an example image [2] - it only shows a couple of tables, but it gives an idea of what can be produced (and also shows the .dot source file that was created to produce it).

[1] https://github.com/kcartlidge/Newt

[2] https://github.com/kcartlidge/Newt#created-graphviz

Edit: If anyone does C and has skills or money available (I don't) the Graphviz README says "This project has only 3 of its founders remaining as volunteer maintainers, and support is limited and may end soon. If you can help fund to a more formal foundation to continue this project, please contact north on graphviz org."
No sudden unexplainable wealth, no bank transactions to personal accounts, no incriminating text messages. Even if the code was correct that alone is not proof the individuals accused took the money, but they were still convicted. That isn’t supposed to happen.
The many states and countries that had record outbreaks, the fact they were exceedingly well-vaccinated notwithstanding. (Vermont, Israel, etc. etc. this is pretty trivial to verify).

It just does not prevent transmission. We know what it looks like as far as transmission goes for vaccines that work (smallpox, oral polio, etc.) This is not it. Just isn't.
Some would be happy if their CTO knew anything about computing!
Private companies can ban whomever they want for whatever reason they want. Don't like it? Make your own twitter.
Sensor Response Characteristics of 3 Commercial Metal Oxide VOC Sensors (2019)
`upsert`, not sure how having someone implement `contains` is going to help solve your IRL problem optimally, but I guess the interview process is more about testing cognitive strength vs. practical experience.
The weird thing is, if you, as an employee start to show feint signs of wanting to leave, e.g. by complaining a lot to colleagues, or having an upset look on one's face, usually it is not acted upon, or even not picked up by any manager.
If on the other hand you make it very clear that you are unhappy or that you might want to leave, it is understood as you are going to leave anyway, so they don't bother fixing any of the things that you have a problem with. At least that is what I experienced a few times. Instead they start to act as if you don't belong to the team anymore or give you boring or strictly defined tasks.
So no wonder, you leave and they find some other employee, in which co-workers need to invest time and effort during a period of about half a year to get them up to speed. Rinse and repeat.
So long as it's your decision to leave Twitter, fine.

Arbitrary bans are a harmful act. People use and enjoy social networks, sometimes even rely on them.
Or is it controlled by the code that constitutes it? Which "control" is more significant?
The NY Supreme Court is not the highest court in NY. The NY Supreme Court is comprised of 62 local courts and this ruling came from one of them. The city is appealing this decision and it will next go to an Appellate Division court and after that can go to the Court of Appeals which is the court of last resort in New York.
Yes, I mean that in addition to the good stuff (Sopranos, Game of Thrones, Batman, etc) Netflix would have to pay for a huge catalog of content that isn’t a draw on streaming. To make the most of it, they would suddenly be in the business of managing TV channels and distribution partnerships. So they’d essentially overpay because they’d be outside their core business when their strategy is maximal focus on the core business. The opportunity cost would be the ability to create and license new streaming content they don’t overpay for.

Warner has recently been culling some of these poorly performing fits from HBO Max (arguably imperfectly), so they also recognize this.

I didn’t mean that people don’t enjoy HBO’s good programs.
Yeah, "dirty" in russian doesn't have the sexual connotation to it. Funny enough, "hot" still has that connotation.
Write fish shell scripts instead!
How to draw my own window decorations is exactly what I'd be interested in learning.
Is it envy or is it solidarity? They look the same if you close your eyes.
You are missing the class b charges. Total would be $234.90 which is still slightly less than 27 million...
I have Win 10 pro and noticed a magnifying glass icon in the start menu with something about soccer that presumably would open Edge. Ie. An ad. There was a setting i never saw before "occasionally show suggestions in start" that I had to disable.

Zoinks!

There are also lock screen ads by default called "windows spotlight"

This is the kind of user disrespecting stuff that I switched to Fedora for. I paid for your damn operating system. Stop jerking me around
I know that things don't work as well as they should here, but to my ears this opinion piece sounds more like parody than reality. Take this line.

>Take out Greater
London—the prosperity of
which depends to an
uncomfortable degree on a
willingness to provide services
to oligarchs from the Middle East and the former Soviet Union—
and the UK is one of the poorest
countries in Western Europe.”

Yes. London is a financial centre. A large portion of the GDP of the country is generated by it's biggest (main?) population centre. Is there a problem that london chooses to indulge in the more lucrative financial services over Victorian industry?

Still, i do agree there are historical, major issues with lack of productivity and industry. The tories don't seem to have any vision for the economy future. They just throw money where its popular. I thought for a short while Liz Truss would be the answer, but she has turned up short in the IQ department, but i don't think its the picture of doom the atlantic thinks it is.
I am pretty sure they cannot blanket ban based on religion or race
I implemented "an ORM" at amazon in 1994. None of the code outside of the library used SQL, everything pushed and pulled C++ objects.
And that's one of the reasons why people don't use clojurescript. Arbitrary npm package import and interop was not possible until late 2018 with shadow-cljs. Build tooling "stability" is only a thing if you believe in reinventing every wheel, not using third party dependencies, and pretending that the half-baked "clj" tool doesn't exist.
It looks like EAR files just got re-invented.
I agree, but it's also a matter of degree and availability of the skill you're looking for in the market. I wouldn't hire a developer who has only touched Java to do React when there's lots of React developers out there, but as a Rust shop I'm happy to talk to a Go developer who seems open to learning Rust on the job.
the value is connection. you're free to disregard that, but as humans, and not automatons, we sell to connect to out fellow humans in more ways than work. now, you can point out that it's a very SV-centric post, and it is, but there's a ton of other SV news here, so that objection's probably moot. Other regions of the world experience earthquakes and the discussion of the science and technology behind the early warning system that was deployed is interesting beyond the bay area.
Guide to Webpack Configuration Options
You can create a dynamic library, to be linked to just like any C library, from Rust. Doing so was actually some of the first production uses of Rust ever.

everywhere depends on what you mean; rustc does have support for fewer platforms than gcc. But it's still quite a few.
GDP makes some good fits for this. I'm partial to the MicroPC, but I mainly use that when troubleshooting network issues. They have a whole lineup, each geared towards a different market segment.

https://gpd.hk/gpdmicropc
If this product is just a few static javascript files, what keeps someone else from just taking these and hosting them on their own site, building up their own user base and pocketing the money?
Jordan Palmer is also an ex-NFL quarterback. He never started, wasn't that good, didn't last long, and only had 18 career passing attempts, certainly no Carson, but he was still a pro.
regarding stadia, What did you think they would happen? They have a graveyard of great projects that should still be used by millions.
The only things I see continuing are android, ads, search, I even feel with the severe losses their cloud unit is seeing even GCP could be shut down. Hell I could even see them abandoning Waymo, I mean this is google after all :)
This comment also goes for all those commenters trashing GIMP. Had this UI came out in the 90s Adobe would have killed GIMP with their legal team.
Because it's self-evident that designing a quick-ramp up process and modular system/good docs makes this a lot easier. It's 2022, you should be able to review checkins on gitlab the first week with a couple of basic tickets.

If folks are too green for that then they can be put thru an internship first. If an obscure language, have them do checkins on a tutorial.
Definitely. It's so much harder to watch now - seems like many companies have made myopic choices about monetization in the last year, making a plethora of services less useable.
If you think about the space both models are covering from a rate-of-failure perspective, it kind of makes sense that images end up being a bit easier than text: both text- and image-models can output results that look plausible at first glance, but when you analyze both outputs further there are a lot more gotchas in parsing meaning within language than there are in pixel placement within an image.
Ask HN: Smart ways to look at fairly small ($15-30k) business investment?
Hey HN -

Due to some obscure industry connections, I've come upon a very solid opportunity to acquire an extremely rare piece of unusual manufacturing equipment that's a step or two away from essentially printing money. I'm obviously not going to be super specific, but it's also not a piece of gear that a lot of other people know how to use; but I fortunately have a lot of education and experience in.

That being said; I've personally never actually lent money of any kind before, much less for a business idea. Honestly - I'll be the first to admit I'm not knowledgable in that regard.

I've assembled together a small business plan with manufacturing costs and profits, sources to back up the dire need for this particular product, etc; but I personally have little idea where to go next, and time is of the absolute and utmost essence.

Where is the best place to turn for a fairly small business investment like this? Should I be looking for a personal investment? Should I be turning to a bank?

Thanks for any and all advice, I'm hoping this community is a decent resource to get some good guidance.

EDIT: very, very grateful for the advice so far!
Thanks a lot for your reply, that's really interesting re. the mediumwave/shortwave spikes. I also hadn't realised that the receiver of the Duga radar was so far away from the transmitter.

I assume now you could probably use GPS/atomic clocks to keep them in sync rather than a cable.
Tor Browser (Bundle) – 11.5.5 (Android, Windows, macOS, Linux) Released → (October 25, 2022)

** * Note! - Change Log For → (Tor Browser 11.5.6 - October 25 2022) * **

Tor Browser (Bundle) – 11.5.5 (All Platforms) Change Log (Text) → (October 25, 2022) : https://gitweb.torproject.org/builders/tor-browser-build.git...

Tor Project – Tor Status : https://status.torproject.org

Tor Project – Tor Metrics : https://metrics.torproject.org

Tor Project – Check Tor Connection : https://check.torproject.org

Tor Support – FAQ : https://support.torproject.org

Tor User Support Forum : https://forum.torproject.net

Tor Community : https://community.torproject.org

Tor Download : https://www.torproject.org/download/

Tor Distribution Directory : https://www.torproject.org/dist/torbrowser/11.5.5/
It would be really interesting to see a Wayland version with equivalent functionally to the X one to get some idea of what the real difference is in complexity.
You don't need a team of people as skilled as Monet to make a working software product. Incredibly condescending. And good lucking ONLY hiring absolute masters for your engineering team as you scale beyond like, one or two hires. How many people in the world do you even think are that skilled?

Plus people require and deserve investment. It's okay to take in people who need development and turn them into solid engineers.
Ah, might have been a mockup I remember - the ceilings were quite low and the floor very angled.

It's a sign of how good the mockup and whole museum was that I remember it being better than it actually was.
Quality is revealed over the lifetime of the vehicle, not on the showroom floor like features are. And quality cars tend to last longer, they're not a great investment for manufacturers. Besides, how are features and quality zero-sum? Can't you have both? These fancy features still make cars difficult to repair.
But V8 and JIT'd runtimes were already standard for years by the time nodejs came out.
I am confused as to why there is a hard requirement tied to apple,google,ms accounts. I get that its so they can sync to other devices but what if I do not want them syncing?
Companies want mainly decent tech skills, or so they claim, but don't ask the tech questions to pick out those candidates (again, IME). How does that add up?

> Research the company ahead of time and build a case that you are ready to communicate to the hiring team

Yeah, to do that you need to know the companies' requirements. As an outsider you can't know them.

> proactively fill that gap with good reasons why they should bring you on.

I've even offered to work free for companies to start with. I got not one taker in the past few years. I offered to work paid - I go through the interview process where I don't asked get asked tech questions, just the touchy-feely stuff which I can't stand out in (who can?).

Point is, interviewing could be made a lot simpler and more effective I think; per https://news.ycombinator.com/item?id=33334492 I don't think you need to spend "half of all their time interviewing and hiring new employees". You should be able to filter far more efficiently. That's my point, not whingeing about my particular case.
> Again, why are you minimizing this clearly easy to abuse OS feature by comparing it to much more sophisticated exploits

You need to think like an attacker. If you gained a foothold on a machine, maybe for a limited time, do you wait until the user happens to login to their banking site by copy pasting the password, or do you comb the machine for everything valuable - files, cookies, password manager databases, ...

If you are sniffing the clipboard you are actively malicious, but then you limit yourself to low gains?

Note that most of the trojans listed in your link are fully featured, sniffing the clipboard is one of the many attacks in their menu.

You are right that it is an attack vector, but it's not a particularly bad one. Microsoft did implement various restrictions which annoy the user, and did implement some protections against common attacks - ransomware file protection, but did nothing regarding the clipboard. Which means that in their cost/benefit analysis it did not stick out as a priority.
No ads is worth quite a bit to me. I wish more platforms had this option to opt out of them legitimately. I would gladly pay another 25% on top of my YouTube Premium subscription if they would also enforce no in-content/native ads from the creators (just ask them to tag the beginning and end of the sponsored section, and auto-skip for premium subscribers). I basically lose my shit every time I have to hear "this episode brought to you by square space" lol.
If you do this you won't get a uniform distribution on the circle, the points will be the most dense at the center and get less dense as you go towards the edge. To make the points uniform you need to use inverse transform sampling[0], which will give the formula r*sqrt(rand()) for radius poolcoordinate, where r is the radius of the circle and rand() returns and uniform random number from the interval 0 to 1.

[0]: https://en.wikipedia.org/wiki/Inverse_transform_sampling
Yeah, still selling the Apple Watch Series 3 wasn’t a good look for Apple, no doubt.

But it’s one thing to sell a $249 watch that won’t get the latest operating system update versus a $6000 Mac Pro. Those customers would be super unhappy if the next operating system doesn’t run on it.
And car repair shops killed consumer trust in these kind of shops.
> have you considered handling the actual usage calculation and aggregation?

So for aggregation we definitely do some of that work already, we enable clients to aggregate their raw data with a few different methods, like via running a total, average or count, over any arbitrary time frame.

For us doing the actual calculation of the dimensions at a specific time, we haven't thought about it, but we're always interested in building more so we might be able to prototype something.

Your specific example though is sounds like another way of metrics to be pushed into our platform, this really wouldn't be that big of a problem for us to implement, and we even floated the idea around of us exposing a stream that clients could push data to which we would process.

Given that the logs would be in an open standard format, we could definitely do that and it sounds like a good idea. :) Thanks for the suggestion.
One of the big revelations in my life happened in my early twenties. A person was chiding me, extensively, over something, and I realized that I should never feel any guilt over something that I didn't do wrong.

Sure, that's simple and obvious, but I hadn't realized before that how often I did accept guilt for other people's actions... or guilt for something that wasn't wrong in the first place. It happens often. People use it as a tool, a hammer, sometimes to displace their own guilt, and it's freeing once you learn to shrug it off.

As a corollary, just as obvious, you need to accept guilt that you've earned.
Currently the Federal Reserve is attempting to reduce demand for goods and services by raising interest rates dramatically.

Reducing taxes increases demand and works against the Federal Reserve here.

The US needs a credible tax policy otherwise no one will buy Federal Government Debt. How does the government source money? Via taxes or new debt issuances.

Without sufficient taxes you cannot issue more government debt. UK just had this issue, EU looks like it’s next. Maybe even the USD after that.
I don’t think the article I linked is disagreeing so much as saying something different but related. But I’m glad that you got to see it.
"An open source project" can be anything, there are plenty out there which are solo endeavors that don't accept substantial contributions.

But I would agree that the classic model of big, slow-moving, design-by-committee open source projects have mostly yielded mediocre results.
See what is happening with StableDiffusion, a model was released opensource, performance in the same league as closed source, usable on consumer hardware and (non AI) techies start to modify it. The biggest steps/modifications are by specialists no doubt, yet still opensource, but others are happily glueing parts together to make something else. The key really seems to be access, an hosted API is rather hostile to innovation, using and especially experimenting is expensive, modification can only happen within whatever the API allows. For the tech to get bigger and more noticed faster more people need to be able to tinker with it.
To all people complaining about bugs:
1. It's easy to find flaws in hard, ambitious projects. All ambitious projects start out as WIPs.
2. It is much harder to do an ambitious project.

Try to be in the 2nd group.