skysight-inc/HackerNews huggingface dataset:
The "put them behind a firewall" approach is really not adequate.
Many times these cameras are already behind a firewall of sorts, larger CCTV system will use a dual-homed server, with a dedicated LAN for the cameras, and a secondary LAN for client access to the recording server.

Even in this dual-homed setup, there is still the potential for the cameras to infect, or otherwise compromise the recording server, which itself generally has access to a much larger part of the organizations networks, if not the internet directly.

At this point, Hikvision has a well documented record of severe cyber security flaws, and countless public statements attempting to deny or downplay them. They are funded by the Chinese government as well. We have seen plenty of other examples of various governments utilizing vulnerable devices, like IP cameras, to gain access to networks, exfiltrate data, or perform other malicious acts.

There are many other good, cost-effective, alternatives to Hikvision that do not come with the legacy of vulnerabilities, and the risks of being closed tied to the Chinese government. Hikvision has brought this upon themselves.

As for how they were alerted, there have been publications documenting Hikvision's risks for years now. I started some of these back in 2017, including this from 2018: https://ipvm.com/reports/hik-hack-map
US can confiscate your dollar reserves if you keep those dollars in the US, just as they can confiscate your gold reserves if you keep them in the Fort Knox.

>sovereign actions

Nice euphemism for genocidal, imperialist war.
The US-China chip war is spilling over to Europe
> [...] yet multi-billon dollar studios claim supporting anything beyond x86_64 Windows is an impossible feat.

Who actually claims that? The issue is more that the ROI just isn't there. Remember that porting to a platform incurs additional support costs that need to be payed.
Of those 3 games you mentioned, only 1 is exclusive to the PS5. The rest are also available on the 9 year old PS4.

edit: had the wrong amount (the only PS5 game is Returnal)
I just heard that a guy I knew committed suicide over the FTX implosion. He was a weath adviser with a bunch of his clients' money tied up there.

FTX fucked with peoples' livelihoods, and by extension their lives.

Edit: just to clarify, it was his decision to park his clients' money there. But FTX spent a lot of money courting retail investors with slick campaigns. A superbowl ad that implied people were stupid not to participate. Big Silicon Valley VC firms imbued SBF with the aura of a wunderkind who could do no wrong.
Tesla Dome Lights Bug
I don’t have any Apple hardware, but my recollection from seeing those who do a few years back (including when they first introduced the Retina displays) is that all of these laptops were defaulting to non-integer scales, and at least a little uncomfortable at 2×.
Sony could also decide, God forbid, to compete in terms of first party games development.

Gotta love how everyone jumps on the regulatory block train.
> I'd argue the complete opposite. It's very meaningful for me to distinguish whether a program works correctly, crashes due to running out of memory or loops forever.

Fair for many applications. I work with computers that write proofs.

> Yet being the key word here. As far as I know it's not proven that it's impossible to build a time-efficient algorithm, only that (as far as I understand) it's unlikely unless P=NP. But there's another issue here as well: we don't know whether P=NP.

There are worse complexity classes than NP, for example EXPTIME, which we know are not P by the time hierarchy theorem.

> How many good people were discouraged into going into this area of research because of this widespread belief that this pursuit is proven to be unachievable in the general case?

Well, not me! Formal methods and program synthesis are alive and well, but it's important to researchers in these areas to understand what parts of our work are decidable and what aren't. I should mention that Writing efficient SMT solvers is an important aspect of this even when the theories are undecidable, and tailoring tools to real user patterns can really blunt the problem of undecidability in practical use cases.
And it is going to fall more after the rug pull about to happen.
Still, even in its worst, it is doing well against TRL, ARP, etc. And those are currencies used by many tens of millions.
It can’t, at least not directly. However, it can prevent bugs in the JIT runtime itself from being exploited.
There are tests, they're mainly just out of tree, focused on integration rather than unit, and very decentralized. You'll get nastygrams on lkml if you break them.

Here's one prominent example: https://github.com/linux-test-project/ltp
CT scanning tech could put an end to 100M liquid limit on flights by 2024
Ok, so one reason is that it’s someone else’s app, where adding cloud support would be impractical.
Sure, it's just surprising that we are already looking forward to 2028 for PS6 when the current PS5 release is still so completely botched and unresolved.
How do we know that risk-taking doesn't lead to a higher rates of parasitic infection?
Not sure if it's available in other countries, but in France you have Dealabs which allows you to vote on deal and offers a bit like on reddit, allowing the community to highlight the best bargains.

It's also used as a commercial device by companies directly nowadays but the good deals there are usually worth checking out.

https://www.dealabs.com/
If they strongly support Russia, I’ll suggest to you that they aren’t just right-leaning.
UK bans Chinese CCTV cameras on 'sensitive' government sites
If I ran a forum like this I’d invite SBF too… assuming he was stupid enough to come. This isn’t a privilege people are handing him, it’s an opportunity to gawk at the dumpster fire.
I've gotten two great "deals" this week.

The first: I bought "unlimited" worldwide maps from Osmand, which I use a TON for offline maps when I bike. It's $9.99 for unlimited worldwide offline map downloads right now. Great deal if you'd like to move away from Google Maps for navigation (not so great for business search, but it's slowly getting there!)

The second: not actually a Black Friday deal, but I recently switched to https://purelymail.com/ for email. It's a one-man show, significantly cheaper than the competition because... it's not bootstrapping some massive startup or running off VC capital. If you just want IMAP for desktop/mobile for cheap, but can't self-host because Google will throw all of your emails into spam, this is a great option. $10/year or less estimated cost. And it's fully encrypted on their servers, not used for advertising, pretty much exactly what you want if you JUST want mail.

Oh, and the Gigabyte M28U 144hz 4k 28" monitor that I use is now down to an all-time-low cost of $450. If you're looking for a beautiful monitor for your home office, this is it.
Plastic and organic trash emanates from the coastlines of southeast Asian countries like energetic particles are emitted by the sun. Lots of it and in every direction.
Ghana isn’t questioning anything. They’re just running out of USD.
Please make sure this information makes it to sentencing when Bankman-Fried’s trial concludes.
I need to vent off some steam here. It really bothers that whenever I use a piece of Microsoft software like Teams or if I accidentally login to edge to use some MS service like Minecraft, Xbox etc., it logs me in to a MS account locally. It's infuriating. I can still undo it by going to settings and logging me out of all apps, but I bet there is someone in MS thinking well right now how to silently remove that option as a part of the next batch of updates (and all reasonable people always update their software to stay secure, right?).
The US may have backslid a bit, but it still leads the world in property ownership rights and fairness of the legal system. When a foreign corporation takes a domestic corporation to court, which jurisdiction will they get the fairest shake? What happens to billionaires when they speak critically of the Chinese government? Despite claims to the contrary, freedom of speech and rights of the property ownership are still vigilantly protected in the US.
Not supporting macOS is fair.

After all, Apple went out of their way to not support standardized cross-platform APIs like Vulkan.
Heuristics to maximize antifragility translated as lessons for a startup:

Heuristic 1: Minimize the cost of experimentation. You can do this by limiting yourself to experiment you can easily implement, i.e. MVPs that you can launch in 1-2 months

Heuristic 2: Try to maximize the number of experiments you can do. Let's say you have 18 months runway, and 2 months per experiment. You should focus on trying out 9 ideas / mini-pivots / features in these 18 months. You should focus more on the number of experiments to run than the outcome of the experiments.

Heuristic 3: Keep your optionality. For instance, it's better not to get locked into a contract with a large enterprise early on, since this will limit your possibilities.

Heuristic 7: Keep it simple. Narratives lead to complex solutions. Simple solutions work best.
$80 software 50% off to take screenshots and that's a deal? Mac app economy is truly crazy.

Just mind blowing to me when we have FOSS software like ShareX which pretty much does the same and more https://getsharex.com/
>the Soviet Union took 50 years to go from agrarian to space

That's a naive view of russia. Up to this day, one of the main tasks of russian army - as previously soviet - is potato harvest.
Ambient Weather's weather stations are on sale (20% off some components, and some base stations). That never happens.
Linux didn't have unit tests.

For the most part we had Linus eyeballing every line of code before merging it. And if you wrote an extra if or did a boo boo using the wrong enum flag or you overran your buffer, you were flogged, berated and pitied in front of an international audience of engineers.

I don't know how things go now in the post-sensitivity world.
> but checking if the email/username already exists is a separate endpoint that the frontend hits

I'm sure this happens in some cases, but it's definitely not a good practice, would hopefully get flagged by any pentesting or security audit, and also, most people use some sort of framework for auth (devise for Rails, Spring Security for JVM, or similar) - and those usually don't work in that way.
And a ton of other games because things like Unity make that easy. If you aren’t focused on AAA, you should have no problems finding more games than most of us have time for.
If I were the interviewer I would treat him very gently... for the first 30 minutes or so. Hand him his own rope by fawning over his every word as you extract every confession possible.

Then when it's clear he's said everything you're going to get out of him, publicly embarrass him with the dress down on all his double speak.
If a parasite gives the host a competitive advantage, is really a parasite?
Europe accuses US of profiting from war
Looking forward to Elon making some needed changes to twitter!
rOtring 800 is down to $20. Lost mine a couple weeks ago and was really bummed.
Tiantian Kullander, Co-Founder of Crypto Firm Amber, Dies at 30
https://i.kym-cdn.com/entries/icons/facebook/000/037/360/cov...
I had thought the same thing at first too, but they were comparing the x86 build running on an M1 against the native build running on an M1. See the machine list in the first screenshot.
Don’t think is as botched as you think. It’s tracking in sales closely to the PS4, which if you think about it it’s pretty good considering the pandemic + supply chain issues.
I think their point is that Andrew Wiles' flawed proof was shown to a community and improved without any automated testing because something can be verified before it's integrated and that verification never changes.

You don't need testing for verified code interacting with verified code in an environment verified to run verified code, but testing takes half the time for "good enough" reliability so we don't spend the time.
I’m curious whether people who hold this view are graphics developers themselves who’ve developed games?

The reason I ask is because there are so many different graphics APIs, of which Vulkan is the one that has the lowest rates of direct targeting.

You’re looking at custom platform APIs everywhere but Linux. Windows and Xbox only officially supports DirectX (including console variants here), PlayStation have their own, Switch supports their own plus Vulkan (and most people don’t target Vulkan on there).

Even Metal has significantly more games targeting it due to iOS support. Before people say those are only mobile games, thats a severe underestimation of what games are on mobile.

So every cross platform game needs to support multiple APIs anyway, and even if you count every API , Vulkan is by far in last place.

Edit: I’ll also add that both macOS and Linux had lack of games when their only API was a cross platform one: OpenGL. yes, macs GL is outdated today but it wasn’t always , and just like Vulkan, very few games directly targeted GL anyway.
News Outlet
Where can i find good coverage of cool preseed, seed startups in the US. Im from Argentina and sites like Techcrunch dont seem to cover it well. Twitter is good, but maybe someone knows of a better site. Thanks!
https://archive.ph/wDlOS
DDD offers a lot of benefits regardless of the programming paradigm. We heavily use DDD in Haskell.
On writing clean code: Uncle Bob
I agree that GDP-stock comparison is not good, but why compare to EBITDA rather than revenue or expenses?
System exclusives have never been viewed as anticompetitive, and for the life of me, I can’t figure on why.
Police usually prevent crime. Does everyone seriously need to watch and read Lord of the Flies?

To see when police are absent, look to CHAZ. Did CHAZ not have one of the highest murder rates in the known world?
"One man with a briefcase can steal more money than a hundred men with guns."—Don Corleone

"One man with a keyboard and an internet connection can steal more money than a thousand men with briefcases."—SBF
As I understand it, he’s not allowed to leave the Bahamas, so yes. It’s not like Zelenskyy is likely to attend in person either.

I’d be more interested in what either of them have to say than Pence or Zuckerberg though.
What's their story? Are they simply an independent studio? Is there VC-money involved?
It makes me sad seeing the narrative on forums like this and elsewhere shift to "Tech companies are all bloated and Elon is right". Anyone saying that is missing the point entirely IMO. Even if if it were 100% true and everything Elon has done up to now is correct, it's still a complete travesty the way it's been executed. You want to come in and make big sweeping changes? Cut dead weight? Fine. But have some god damn empathy and also take a minute to figure out why everything is the way that it is before you start throwing your weight around. All the rest of the dialog is beside the point in my mind.
well, vanilla NAT really.
Judging from the graphs[1] it looks like they were running the x86 binary through Rosetta on the same M1 machines as the native M1 binary.

[1]: https://cdn.factorio.com/assets/img/blog/fff-371-ups-graph.p...
That's right, except you skipped all the other bits in the link provided -

Be respectful. Anyone sharing work is making a contribution, however modest.

Ask questions out of curiosity. Don't cross-examine.

Instead of "you're doing it wrong", suggest alternatives. When someone is learning, help them learn more.

When something isn't good, you needn't pretend that it is, but don't be gratuitously negative.

Reflexive snark comment that's not even about the thing being shown is none of that. And there's also

Please don't post shallow dismissals, especially of other people's work.

from

https://news.ycombinator.com/newsguidelines.html
Appears he was listed weeks before the crash in October:

https://web.archive.org/web/20221018125217/https://www.nytim...

FTX public crash started in November:

https://wikipedia.org/wiki/Bankruptcy_of_FTX

____________

EDIT: Another comment links to tweet by NYT & SBF both confirming he’s still “speaking” at the event, though who knows if he’ll actually be live and in person:

https://news.ycombinator.com/item?id=33743735
Proton Unlimited (ProtonMail, Drive, VPN, Calendar) is 40% off the two year plan (172.56 €) or 35% off the 1 year plan (93.48 €). Good for those who like the service.
Basic technology skills easily transfer. All office software is similar, it does not matter what you learn. And even more important than learning this or that office package are fundamental skills about knowing the basics of what a computer is, how it works and what software is and what it can do.

What german schools need is technically competent people who are able to teach their students actually relevant information. The problem is that it is quite hard to find people who are technically competent and able/willing to teach.
(This is somewhat of a structural problem, due to how the teaching profession is set up.)

The best part of my IT school education (in Germany) was when my school hired a professional software developer who taught programming for a semester. The worst part about it was that half the class clearly didn't care.
Can you give an example of one? It blows my mind that this is possible - I mean not the technology exactly, that makes sense, but just that something reasonably portable that I would carry around in case my phone dies can also have the level of utility of jumping my vehicle in a pinch.

The future is pretty cool.
Sony is very competitive in terms of first-party games, multiplayer shooters are maybe a special case. For single player story-heavy games Sony studies are probably the largest developers and publisher.

Multiplayer games compete more directly, and you need to get a large enough playerbase to make them attractive. Which puts large, established franchises in a much better position than new and unknown ones.
China central bank to offer cheap loans to support developers' bonds
If you think that’s wild, wait until you hear about Dropbox and rsync.
I'm considering moving from a desktop with powerful GPU to a laptop + external GPU using a device like this. Would be nice working from a single machine both at home and away.
> There are worse complexity classes than NP, for example EXPTIME, which we know are not P by the time hierarchy theorem.

I mentioned this in another comment: isn't EXPTIME only defined for Turing machines?

Which again, just touches on all of my points.

For all we know, if you've reached the conclusion that an algorithm's complexity is EXPTIME, this conclusion could be just as false as the Halting problem and Rice's theorem are for real-world computers.

> Writing efficient SMT solvers is an important aspect of this even when the theories are undecidable,

My point is that you shouldn't believe that the theories are undecidable because those analysis were done using Turing machines as models.

And the other point is that sure, there are many people doing formal methods, etc. But how many more would there be if most people believed the problem to be solvable?
"This is the first update to the prefix system since 1991, when the organization added zetta (10^21), zepto (10^−21), yotta (10^24) and yocto (10^−24)"

We now need for prefixes that denote 10^27 and 10^30:

"The prefixes ronna and quetta represent 10^27 and 10^30, and ronto and quecto signify 10^−27 and 10^−30"
Version 0.1.0 was released in 2014, and version 1.0.0 was released in 2020. They are now working on an expansion. So yeah, as far as I know it's their only game.

As you might hope, the game is exceptionally well-polished, at least once you get over the initial UI complexity.
I work in the US. My contract reappointment letter-- essentially the mew contract in effect as of my reappointment after annual review-- is basically a paragraph that says "blah blah reappointed for next you subject to available funding blah blah" and I sign it and send to hr.

I just checked the employee handbook to be sure, and there's nothing about standard work hours/break etc. Probably because most workers are in a union where the union contract spells out some of those things in more detail. But I'm not in a union, I'm an exempt "unlimited" employee which essentially means I do not have a set amount of hours I'm obligated to work. I'm obligated to work the hours required to perform the work I receive. In theory the expectation is a person will mainly have about 40 hours of work to do, and in practice that sometimes there will be crunch time and you'll have to do a bit more and you can't complain or ask for overtime. With respect to OE, it seems perfectly reasonable that this be double edged, and should I accomplish all expected tasks in < 40 hours I'm no more obligate to work longer than my employer is obligated to pay me more when I exceed 40 hours.

In all honesty though, my work does roughly take 40 hours to complete, my job there's always more to be done that time allows and my boss & I work together to prioritize without any expectation that I regularly go over 40 unless something either 1) goes horribly wrong or 2) comes out of nowhere and needs to be addressed ASAP. There's some, but not complete, overlap between #1 nd #2.

All of which is to say that I can easily see how someone could meet the average expectations of a job in much less than 40 hours, especially at $Large_Company where employees are interchangeable widgets and 40 hours is the socially defined amount of time that a least-common-denominator person meeting the minimum requirements needs to complete the job's tasks.

I'm fascinated by this (new) concept, but I'm absolutely not looking to jump over into the OE world. There is enough ethical murkiness that I'm just not interested even if I think a person could, if careful navigate that path. I also like my current job and, as I said, have a backlog of work. I'm in a position of high responsibility of critical importance and it is not the sort of job where I'm only expected to do a discrete pre-define chunk of work each week/month/etc. So I would very much feel bad and unethical if I cut into it's time to do some other work. But I can see how that's not true of all jobs.
They require two implementations. It's not going to help if these implementations are in the compositors nobody cares.
It seems your subjective feeling is not reflected in measurements. At least for kwin wayland is as fast as uncomposited x11

https://zamundaaa.github.io/wayland/2021/12/14/about-gaming-...
sanitizers don't work because they only check the paths that you actually run them on. vulnerabilities come from the weird combination of edge cases you didn't test.
Servers are not required to provide a shared inbox, but if they want to enable batching behavior they can. Not sure if that's what your asking?
China's official TFR figures are massively engineered: https://www.project-syndicate.org/commentary/chinese-populat...

India ones are still over replaceability.
I stand corrected, which means I have basically absolutely no reason to buy a PS5 right now.
I'm not going to say that I have strong views on this right now. But the reason I used EBITDA is that GDP is the total value added of the economy. EBITDA is the total value added of the company.
I have been, and I agree that a few cameras pointed at your house would make me feel safer.
Small changes preclude absolutely nothing happening far more often, and the imminent demise of the petrodollar has been forecast for fifty years involving some much more seismic events than a country with gold mines and a severe dollar reserve shortage and debt problem proposing that gold might solve their problem.

At least the half dozen "gold dinar" projects had a bit of global ambition and a theoretical rationale for the religion of much of the world's oil exporting economies to participate.
Good Lord I want one. I'll put it next to my E-meter.