skysight-inc/HackerNews huggingface dataset:
> But of course THEY don't want to run the audit (sounds too much like work!) so they contract the audit out to a third-party that builds a database saying which versions of various software are vulnerable according to these CVEs. Of those, these contractors don't actually understand how Linux distributions are put together and their scanners _always_ flag fully patched and up-to-date machines as being vulnerable to X, Y, and Z.

It depends on which software is used and how scans are done.

For (e.g.) Nessus, if all it does a port/protocol scan, and something like "OpenSSL 3.0.2" is reported in the Apache/web server string, then it is going to get flagged.

But you can set up "authenticated scans" where Nessus can go in as a (non-privileged) user and get a package listing. It then has a list of CVEs for each distro, which distro packages are vulnerable, and in which version the CVE was fixed in: you get a report saying "Package X is vulnerable because you are running Version a.b.c; please install Version a.b.c_foo1 to fix".

Run a yum/apt-get update to pull in the newest package(s) and vulnerability is cleared on the next scan after the _foo1 patched package is running.

The fact that your auditors (a) are using crappy scanning software, (b) do not know how to use it, and/or (c) the scanners cannot / are not allowed to login to get package versions, does not mean that auditing is inherently bad or useless.
I follow scientists, mathematicians, authors, comic creators, comedians and so forth. I stay away from politics for the most part (I'm not American so they mostly don't apply to me anyway). I do follow some military analysts re Ukraine.

Today, for example, the physicist Sabine Hossenfelder posted a series of tweets criticising this article: https://phys.org/news/2022-10-bell-theorem-quantum-genuinely...

It was interesting to read and I'm not sure how I'd have seen her thoughts otherwise, unless she makes one of her YouTube videos about it.

I'm not trying to say Twitter is the greatest or even that you should join, just that Twitter has a lot of interesting people posting stuff that has nothing to do with politics or celebrity culture and some of us find it valuable.
Of course you'd expect a formal specification to include details on what the fundamental data types actually are - C11 can't be nailed down on what char is, it defines it as a type large enough to store a member of the implementation-defined basic character set with implementation defined signedness. Which means you could have a valid implementation with anything from a 4-bit unsigned char to a 256 bit or larger signed char
I'd imagine surveys here could be useful (to you and to other searchers). But I'm not sure how accurate they'd be. If they list the price that way, it's likely to be highly variable for each client, possibly even with different contract/support terms by client.

But I feel your pain. Trying to compare preschool tuitions is a nightmare because they only want to tell you if you go for a visit.
Just because it's here doesn't mean it can't be modified going forward, and that we have to surrender to any and all ability to regulate anything. Fatalism can be attractive if you don't want to think about regulation, though, I suppose.
Great read and a very timely and important topic.
Taxonomies are one of the funnest things I have worked with (very limited capacities) in the Wordpress implementation (about 1.5 million indexed pages).

I think spatial datasets/spatial aptitude either makes them relevant or just an untapped avenue for exploration.

Interesting article and most likely part of 21st century technology on many.... levels.
https://commons.wikimedia.org/wiki/Category:Audio_files_of_c...
Google used to have that one thing that said "pay us and we will make some of the ads on the Internet go away." You paid Google, and then Google eliminated ads on their websites but also ads on any website that used Google to provide their ads, and Google paid those websites as if they had shown those ads. It was a really nice idea, but it had the downside of only affecting ads on a random (from the user's perspective) subset of the Internet. Also had the downside that if you're the sort of person willing to pay to make ads go away, you're probably also a happy ad block user.
I selfhost TimeTagger on hetzner with nginx basic auth in front. For backups i copy the timetagger sqlite file to a Hetzner storage box once a day. No issues so far, can recommend.
Web3auth/Torus and Argent trying to solve that problem.

But yeah, the moment you have key recovery, even if it's decentralised and requires multiple parties, you aren't 100% in charge anymore.

But, it's probably a good alternative to being 0% in charge with custodial wallets.
That's the thing - we don't know. But there are some very high level endorsements for the whole thing from within the CCP despite the whole venture being not particularly profitable.
I would suggest a better word to describe systemd design philosophy is authoritarian, if we're going to stick with political science terminology.

Human systems tend to flourish when political and economic decision-making is relatively distributed throughout a given population. I believe this position is backed by a reasonable amount of empirical observation.

Machines are (as of this writing) programmed by humans. Unlike humans, machines are automated rule-followers. This is substantively different from decision-making, which is a uniquely human trait involving moral agency, free will, etc. (at least as I'm defining it for the purposes of my argument). If you try to turn humans into automated rule-followers by decree, they tend to become miserable. Fortunately, one does not have to take into account how machines feel about being absolved of all decision-making, making such control systems very effective (you don't have to kill / imprison the dissenters). But even though the machines might be more effectively programmed by a centralized, unified, top-down, "authoritarian" control architecture, you still need humans to build this controller. And since we know software projects end up mirroring the communication structure of the humans in charge of building them, it follows that authoritarian-minded software engineers would be a best fit for building such systems.

The converse is that libertarian-minded software engineers tend to recoil in horror when they encounter authoritarian software design, no matter how unified, elegant, or effective it may be. Such things are a moral transgression to the libertarian.
Yes, my 550sqft (was a very rough size approximation, 5 yrs ago from memory) was certainly not in Tokyo, and the 4万 (plus utilities) that I paid for rent was seen as expensive. I was just using it as a basis to show that straight space comparisons between japan residences and north american residences aren't reasonable, as everything is geared to smaller living.
CVE-2022-3602
King responds saying Twitter should be paying him. I think that makes a lot of sense.
It's different now though... "publish" means much more than it used to. Now, if you want to share a picture with a few friends, that means "publishing" it on Facebook/IG/etc... It's no longer just a physical photo that is controlled by you. By moving personal interactions online, you lose a lot of control and things that used to be temporary are now permanent. I don't think that it's possible to put this genie back in the bottle, so the next best thing would be to have different levels of data permanence.
More habitable space than the ground? Maybe some day but that would be a grim future indeed.
I don't think the RISC-V spec cares, either, since it specifies an execution environment but not interfaces.

A narrower data bus would allow a 2-cycle execution path, and would likely split the longest combinatorial path in the current design (which certainly goes through the adder tree.) This could be either an 0.5 instruction-per-clock (IPC) design, or a pipelined design that maintains 1 IPC at the expense of extra pipeline hazards and corresponding bubbles.

A narrower address seems like it's only helpful as a knock-on to a split data bus.

Gut feeling: I doubt that splitting the data or address buses into additional phases would actually save resources. You would certainly need more flip-flops to maintain state, and more LUTs to manage combinational paths across the two execution stages. While you can sometimes add complexity and "win back" gates, it's an approach with limits. If you compare SERV's resource usage to FemtoRV32-Quark's, it's notable how much additional state (flip-flops) SERV "spends" to reduce its combinatorial logic (LUT) footprint.
Nice, I do something on the same line with org-mode, however while org-mode/Emacs if far less "GUI-ish" it's an integrated environment who can be an entire desktop (EXWM) while no modern application can, and that's the biggest issue of ALL modern software the model of "OS + application" have proven to be a very bad idea for users, good only for business...
Then stack overflow error is expected.
I mean that's is the predominate socio-economic organizational structure we indiscriminately apply to every exchange - "temper every material pleasure with monetary pain or monetary pleasure with material pain."

On top of this, we've devised a perverse trick - purposefully make something bad so that people can pay to avoid it. Good on you, if by this point, you're mentally responding with, "but that's just how the world works," and take it one step further with the normative retort of, "but should it?" If the best of all possible worlds is a creeping dystopia we should sit on that thought for some time.
Unlikely you'll find any good source.

"contact us" pricing revolves around understanding the customer's use case deeply enough so that you can demonstrate maximum product value to them and then extract the most possible money. I despise it.
Agree with most of this, but:

> Paying $8 [...] At best this will reduce conversation quality on Twitter

Really? That seems completely contrary to my experience. In every online community I've seen, a higher barrier to entry has always been positively correlated with the quality of the conversation.

Not saying there won't be downsides to this, but I very much doubt a lower quality of conversation will be one of them.
Not one but I'd check if the host where the program is used from is in a Windows domain, check for non-conventional local IP ranges (10.x.x.x or 172.x.x.x), or use some other information like the e-mail used on the record, is it free @gmail or @bigcompany? You can 'wargame' this, if you want.

At the end of the day, you should probably still 'suggest' they buy licenses. More aggressively each time as more and more signs come up. Maybe mail yourself about who could be a company and reach them over the phone to ask?
LinkedIn has also taken this cue and also regurgitates LinkedIn posts on its trending topics equivalent. I like the topics, I don't think the sourcing on the "hot takes from the LinkedIn crowd" works very well but I guess it gets the clicks.
Have you tried "This ruby code does the same thing as the following python code" in a comment?
The first item under the "requirements" section for the Techical Writer position contains a typo -- you are asking for "99+" years of writing experience where I assume you mean "9+" years
I read the newspaper at breakfast, a habit formed sixty years ago.
I use BBEdit as my secondary editor. It’s pretty fast and stable.
Nova looks pretty mature but it doesn’t have some extensions I need :(
Yes and no.

If we used the logic you used above, then the FDA should not function as it does today and we should allow "snakeoil" and elixirs to be marketed because, you know, people can decide for themselves. [yes I understand the loophole of "herbal medicines"]

Let teenagers publish but don't trend the things that lead to unwitting self-harm.
Pretending it's not clearly more complicated than that will not convince anyone, it will make them feel condescended to. While Scorcese is Scorcese, a deep learning model is not Michael Bay.
"perfect fit" because interviews are crap at identifying perfect fit.
Sounds like somebody maybe wants a bribe and he's not picking up on that.
If you read the stories of many "successful" CEOs (I'm thinking Jobs here, but there are others) the decisions they'd make often would come out as quite impulsive.

If you dig significantly you might find that they're not as impulsive as they seem, that the person was actually considering many aspects but playing their cards close until cut-off time.
How would you do that? Compile a JVM to WASM? A GraalVM to WASM image? Seems like it'd be too heavy for the web.
I totally disagree. If you actually contribute to a conversation (which means saying something which is considered relevant by the people taking part in it - not just saying something random) people will reply to you or share your views or just add a like (or platform equivalent), thus making your voice heard.

On the other hand, paying to boost your tweet regardless of its actual value is going to be a great tool for spammers, troll or people who really care more about saying something than they care about its utility to the conversation. This will definitely drive down quality (and I'm ready to bet that browser extensions to just block out anything from paid users will start popping up).
> Because the capital cost of building it was hand wavey thrown out as $500B and the operating costs of facility would be exorbitant.

Yeah, estimated using the inflated cost of the ISS and other historic projects... give a tenth of the money to a private company not bound to political pork interest like NASA/ESA and they'll manage it just fine. Alternatively, give NASA/ESA free rein to do things the efficient way.

The problem at the root is that, historically, space access never was a plain "we need task X accomplished" - there always was the political interest of those with decision power to spread R&D and construction far across the country, so that everyone got a little piece (and every politician could claim of having brought jobs to their voters). That caused enormous inefficiencies - stuff needs to be shipped three times across the continent (look at Airbus supply chain, it's insane), there's an enormous amount of red tape and coordination efforts required, and turnaround times are insane. Meanwhile SpaceX has like two manufacturing plants and four launch sites and especially they manufacture a lot of what they need completely on their own so they don't have the typical delays you have with a classic vendor-supplier relationship, and they save on profit margins of all the intermediates as well.
Not in my experience. I follow plenty of blue tick accounts that aren't lords, merely notable within a niche.
You forgot the /s sarcasm indicator.
"The highway network is not scale-free" - no shit, highways refer to roads of a specific size. You're taking a slice out of the road distribution.
I don't understand Elon either, but I'm certain that he's not an impulsive moron who doesn't understand complex system, or that he's financing all this with his dad's emerald mine money.

For me, there is enough track record to prove he has some very unique business skills, and often succeeds by doing things that conventionally looks crazy.

That said, Elon's Twitter may well be a failure regardless. Pretty sure it won't be boring though :)
He should just rename it to IDEA: https://i.ytimg.com/vi/Q_gY90vH3t0/maxresdefault.jpg
The point is the vulnerable code will execute any time a trusted certificate is being validated. If you have a service that depends on mTLS, then your service is (by definition) validating client certificates so you can't mitigate your exposure.

There is a separable question of whether your service trusts certificates issued by a CA that might produce a certificate with a SAN of the necessary form to trigger the exploit.
This makes absolutely zero sense
I foresee super quick closure of almost all graphic artists in a closed and heavily moderated pay per view/use communities. Or they will simply starve. This so called A"I" producing a ton a derivative art will mess up a lot of industries.
Thank you very much for me tldr!
That will probably require finding an efficient way to extract building materials in space (possibly from the moon), moving those materials to where you want your station (probably a Lagrange point), and building with those materials. These are non-trivial problems.

Also solar is far more efficient in space, without any annoying atmosphere in the way, it makes perfect sense to use it there.
I'd like to think making the platform a more positive, constructive place would improve engagement and therefore be compatible with their business model.

However, I confess I'm leaning towards the more cynical outcome.
Broke for me on FF and chrome
Genuine question: Why ES6?

As for the compilation target, It may be better compile to CommonJS as well, so you can base your entire project in Clojure and leave the target as the production build, like Babel does.
Why, there is already barely anything useful to do with the current crop of space stations.
FYI, this is primarily because of state / local tax. Prices are in the 3-4 range in most other states.
In my experience, most commercial offerings over USD$100,000 are negotiated, simply because there's enough money to do pay someone to negotiate.
People usually scroll straight down, so their eyes will dwell on the last contents

Just past the fold at the top, but out of view from the bottom, would be the ideal place
Neural Network Pruning Explained
Unrealistic from the Lambda side, yes! But we were just trying to generate connections to the DB, not test the capabilities of Lambda
It needs to be in a format that you can then use existing algorithms with - the Reidemeister move being the "easiest" https://en.wikipedia.org/wiki/Reidemeister_move
I wonder if that's actually true - if it is, King should go make his own Twitter-like thing.
The difference is that this is a full ride to GEO, so the satellite stays attached to the second stage and the second stage does the circularization burn at GEO. Thus it has a much higher mass penalty than most commercial launches, which are to GTO, where the rocket only puts the satellite on the path to GEO (a Geosynchronous Transfer Orbit) and the satellite does the circularization burn at the destination.

Even Falcon 9 can put a 6.4t satellite onto GTO in expendable mode and Falcon Heavy can while recovering all 3 boosters, but direct insertion into GEO of 6.4t would probably be stretching the limits of Falcon Heavy if even doable at all.
Yeah this guy is legitimately insane, I wouldn't listen trust any word that goes out of his mouth.
You can’t communicate via quantum entanglement. If you’re using it for encryption you still need a classical channel for your cipher text to go over. So, no help with latency.
SEEKING WORK| CET | Remote

Senior Mobile (Android and Flutter) engineer looking for work.

Creating high quality mobile & TV apps is my passion. Mobile architecture, clean code, SOLID principles, Unit and UI tests, CI/CD.

Skilled with Android, Android TV, Flutter, Firebase, MVVM, Kotlin, Jetpack.

Experience in agile environments, leading smaller teams, code reviews, pair programming, and mentoring.

Email: dinkomarinac7 at gmail.com
What a town square!
People have tried: https://en.wikipedia.org/wiki/Alternative_DNS_root
My understanding was that value of verification was, well, verification that you were, in fact, that person [0]. I wonder if this property will be maintained.

Otherwise, impersonators can pay to get the blue check. In the long term, maybe this is fine, but in the short term every Twitter user is going to have to adjust from the old meaning of the blue check (user $foo is actually person $foo) to the new meaning (user $foo pays $8/mo).

[0] - "The blue Verified badge in Twitter lets people know that an account of public interest is authentic" - https://help.twitter.com/en/managing-your-account/about-twit...
I suppose it could lead to a race to build a new generation of heavy lift vehicles or other propulsion systems. Maybe a return to the NERVA[1] engine! That technology was an interesting story point in the "For All Mankind" series alternative timeline.

[1] https://en.wikipedia.org/wiki/NERVA
You are not entitled to rights or privileges in a country you are not part of. For example I wish the US and the UK would stop spying on me with their dragnet, but alas I am not a US citizen so I am not privileged to be protected by their own laws
Did you miss the word "regardless"?

Re multiple times:

https://news.ycombinator.com/item?id=30008480 (Jan 2022)

https://news.ycombinator.com/item?id=27261872 (May 2021)

https://news.ycombinator.com/item?id=21653956 (Nov 2019)
What happened to the US space force? I expected the US to have nukesats in orbit by now. Or maybe they do?
>The 3 button UX is still atrocious regardless

Speak for yourself...
Not to mention, if you get YouTube premium you also get YouTube Music ad-free. Ads in music players are far more annoying IMO.
From a user perspective it's messy and confusing. What does "half as many" even mean? The experience is only different in degree, not in kind. There's less value, both real and perceived, in such a position.

It's hard to imagine that the conversation started from "half as many." My hunch is that it started as "no ads" and somehow backed down to "half" for one reason or another.

A couple reasons I can imagine are:
- They could've justified No Ads at the rumored $20 price point. Cut the price in half? Add half the ads back.
- They want to make room for a $20 SKU later and need to reserve some features for it, which could include getting rid of all ads.
- They want to anchor at "half" so that "No Ads" sounds even better if they change their minds down the line.

Or some combination of all those.
Location: Austin, TX
Remote: No
Willing to relocate: No
Technologies: JavaScript / TypeScript, Node.js, React & React Native, Electron, most Jamstack frameworks, Python, Golang, PHP, C#, AWS, SQL / RDS, Redis / Elasticache, Figma
Résumé/CV: https://wbobeirne.com, resume pdf available on demand
Email: ^username at gmail.com

I'm a full stack engineer who likes to focus on UX. I like wearing a lot of hats and don't mind a little bit of early stage chaos. I more or less live in the browser, and have spent a lot of time with advanced capabilities like WebRTC, WebGL, Web Audio API, Service Workers, PWAs etc.

I'm currently open to new work in the Austin area, either with in-office or hybrid teams (I'm not open to remote opportunities at the moment.) If you're doing cool stuff with web technology, I look forward to talking more with you!
Us, Europe, ...
UK is all fucked up currently so hard to say there I guess!
Again, Can you name one law which ties deficit spending to GDP?

Newsflash,

We did deficit spending when ratio was 0.2, 0.4, 0.6, 1.0, 1.2

We will do deficit spending when ratio was 1.4, 1.6 or 2
For mapping out the hard parts, there's a separate "plugin" that you can enable to turn on contour lines and hill shading or slope map an overlay on the main map https://osmand.net/docs/user/plugins/contour-lines
In your example, both sides are equally acceptable and we just pick one. How does this apply to the present case?
Can you give an example of what it means for a subdomain to not be walled off?