skysight-inc/HackerNews huggingface dataset:
Honest question: where do all of the new zero day vulnerabilities come from, new features/code? Just new bug detection techniques? I'd think over time entropy would get us to a point where there's hardly any vulnerabilities at all, but that's clearly not the case.
There is an anime with a similar theme. Parasyte: The Maxim.
Especially if the connector is not compatible with any other brand’s.
Agreed that confirmation bias is dangerous. Exports to the EU declined briefly after Brexit took effect but are now back to where they were before, presumably since companies adjusted to the new bureaucracy and found it's not that big of a deal. So this "special kind of mental gymnastics" doesn't seem to be gymnastics at all but rather an accurate assessment of the situation.

One may wonder how people got this so wrong?

"The truth is that the UK was in a very priviledged spot within the EU before it left and it made good use of that position, both in a political and economic sense"

Well, it's not really the case unfortunately. The UK was in a seriously under-privileged position inside the EU because its services based economy hardly benefited from the single market, which focused primarily on free movement of goods (benefiting Germany) and people (primarily benefiting eastern Europeans), but not on free provision of services (which would have benefited UK business). Instead services provisioning remained a patchwork of local regulations and barriers to entry.

As a consequence, leaving the EU single market didn't impact most British businesses to the extent predicted (by pro-EU economists, see my other comment), as they either weren't massive exporters to Europe to begin with, or were having to deal with local red tape and varying rules anyway.

There's a discussion of this problem here: https://euagenda.eu/upload/publications/untitled-46447-ea.pd...

This situation remained in place for decades because despite what the media may have claimed to people elsewhere in Europe the UK had essentially no influence, no ability to change anything and its "privileges" such as they were primarily consisted of opt outs of EU policies. But those opt outs were negotiated long ago, no more were in the offering and the ones that existed were under more or less permanent attack even when written into apparently watertight treaties. For example the EU was constantly attempting to force financial services out of London and the UK had to go to court, I think several times, to get these attempts blocked. Regulations were often interpreted in overtly political ways, again, specifically to damage the UK (see how "equivalence" rules aren't actually about equivalence, by universal agreement). It was often an antagonistic relationship despite being a member.

So the reason people don't talk about Brexit much in the UK is because the process was so drawn out and the eventual impact so minimal compared to COVID that there's really just not much to actually say.
> As the wage gap and opportunity gap widens in the US, allowing shoplifting is actually an intentional release valve that is being tolerated and even outright legally permitted (California Prop 47), because - without it - we would see more home break-ins, kidnappings of wealthy people and more severe offenses. Instead, shoplifting is relatively harmless and prevents this type of escalation of crime.

What a wild theory. I've seen no evidence of this mechanism existing.
I want to be positive but this is happening too slowly and only in markets where consumers value it (Scandinavian countries, UK, Germany) so without wanting to be cynical this is mostly brand management more than sustainability.

Using recycled plastic is still more expensive than new plastic, so unless they are willing to take the profit hit this is mostly talk with little walk and only in the markets where it will make a difference for their bottom line.
Lucky for them, otherwise the US would’ve sent some freedom and democracy their way.
Pixel 6 is the last Google phone I bought, after owning every single Pixel up until that point.

A company who fucks up this badly is not worth my money.
Out of curiosity, is packagingnews.co.uk a site you visit frequently for industry news or the first that come up on google when you searched for coca-cola's recycling activities in the UK?
ISO-8601 and we have a deal :-)
Owncast is a free and open source live video and web chat server for use with existing popular broadcasting software.
I wouldn't even be against going "here is standarised bottle shape, use it or fuck off, you can have fancy sticker on it."
Allowing one app to register more than one phone service provider smells like an Android API bug. Allowing an unlimited number definitely is a bug. Allowing the corresponding integer to overflow and... well... do we really need to argue this point?

A phone OS should never have to rely on good app behavior to not collapse like a house of cards. Much less one made by a corporation with a 71% worldwide market share.
"Microservices" are not just an acknowledgement of this law, they are a full blown exploitation of it. They are (supposed to be?) literal implementations of your organisation's boundaries/domains.
Yeah, configuring a kernel is one part plus the install wasn’t always like it is now — in the old times there weren’t as many helper scripts (chrooting manually comes to mind)
3 sentences per paragraph if long-ish, can go 5 if shorter and the rhythm is present in the cadence of language.

Basically until you practice clarity, word choice, and active attention to writing (no spell check, no assists), communicating anything of complexity becomes a planning exercise. How much will it take to convey this information in text? Would a picture work better? A graph to support?

I've made a nice living "translating" from Subject Matter Expert (A/C/E, SaaS, Wall St) into business language for RFPs. 9 times out of 10 a person can talk out a story to me just fine - meanwhile they've stalled writing anything for 3 days past the deadline so it's just making my life more difficult. It's obvious people hate writing in the business realm.

Why? Because once it's written down there's a paper trail and accountability. That scares people who want to use language in shady ways. Hence the phone call after your email to talk about what you just mentioned but not by using the Reply button. Sooooooo predictable....
As an instance admin since 2017: we don't have a way to fight this, and it just hasn't been an issue yet because spammers are incompetent. They always just sign up with accounts on legit instances.

When competent spammers start looking at Mastodon, either we hope buying domains is too expensive to be worth it (unlike email spam), or rely on IP range bans.
It can be difficult to wrangle Gherkin. I've tried to use "Writing Great Specifications" as a kind of guide. Reducing specs to (mostly) one each of Given, When, and Then seems to reduce UI steps.

Having agnostic specs is nice if the team moves from web app to, say, React Native: should still be the same feature set.

The con is QA looking for step-by-step test instructions have to look elsewhere (at the "code"). And, I still haven't seen a real example of QA, PM, and dev working together to write Gherkin :)

Tooling can help for some warts. Gherkin is line-oriented, so a parser is easier to write. Using ex or ed, one can generate a clickable webpage of specs to kick off a test.

Interestingly, the book above recommends DDD as a way to organize test specs. One suggested exercise is to highlight words from a spec and label them as one domain or another, and determine the core domain versus secondary ones.

Of course, one chapter or a few cannot describe DDD, but interesting to see that decomposition.

Other than Cucumber, what do you use for BDD?
Often it's the latter until it becomes the former.
You can turn it off on the mobile site, however you will see a header above every post mildly nagging you about the content in high-contrast text (annoying). You can't turn it off at all on the iOS app, as best as I can tell, so you're just going to have to tap reveal all the time (frustrating).

For some reason they decided to elevate random noise to the same level as pornography, forcing you to automatically reveal it all (on platforms that support that feature) or just be annoyed.

It's a minor thing in the grand scheme, but it does leave Twitter in a superior, less user-hostile position.
Thanks for the insights, will check the price/ performance ratio and update the recommendations accordingly.
Well, ignoring the implicit prejudice on your comment, it actually does not work that way in Brazil.

This was a decision made by a judge in Brazil and the way for Apple to appeal will be to go to the next instance (not sure if second or third in this case), which will be a different court with different judges.

And differently from the US, judges here are not elected nor appointed by the executive (with the sad exception of the supreme court); they pass exams, are nominated with stability (can't be fired without just cause), that way they are pretty much discouraged of doing "shakedows" or accepting "case or phones", as they risk losing a very comfortable and prestigious position.
Twitter contractors got holiday pay? Maybe it's an American thing, but here in the UK I've never heard that. You either work or don't get paid.
Misleading or not, vast numbers of plastic drink bottles enter the ocean from non-Asian First World countries when they need not do so, and we could solve this almost immediately by having effective deposits on bottles, etc. (I don't even need official stats to verify that, all I have to do is to walk down to the harbor near were I live to witness the fact.)

You are no doubt correct about the source of the majority of the trash but we can't start pointing the finger until we've cleaned up our own mess.
>MacOS on an unmodified Wii

It's literally has a CFW on it with the Homebrew Channel. Anything but unmodified
> There are better examples out there if you want to critique EMH.

I'm curious. Can you give some links, please?

> The original point still stands. The vast, vast majority of professional investors (let alone retail investors) underperform the market. Almost everyone who promises safe alpha is full of it.

EMH claims that nobody can consistently beat the market in terms of risk-adjusted returns. Yes, almost everybody who promises safe alpha is wrong. That's self-evident from the fact that the stock markets are mainly professionals trading against other professionals. If one professional makes money with a good trade, there is (most often) another professional at the other end of that trade. Obviously you can't have a negative-sum game and then have the majority of players making positive returns - it wouldn't be negative-sum in the first place if that were possible!
Wouldn't car companies just lobby for some law changes that would make the "drivers" responsible rather than the manufacturers?

Or alternatively, allow self driving only on highways and such, where it's much safer?

I don't think progress is stopped that easily
This link posted by crooked-v seems to explain why it was like that, and how it has been fixed.

https://arstechnica.com/gadgets/2022/01/google-fixes-nightma...
> Edible

"older plants need to be cooked thoroughly as they contain cyanide"

Not that edible.
> What do you think led Vlad to invade?

There are vast natural resources in Ukraine which threatens Russias place as the gas station to the world.

They also have imperialistic ambitions to try and restore what they see as the glory days of the USSR.
If you're in a situation where you might trip on the cable, surely run your cable better or just use Wifi?

There are already so many things that can go wrong when setting up a network and there's no need to deal with potentially flaky physical connections. When I find broken clips in the lab I snip the cable in half and throw it in the bin. £5 for a new cable is a lot cheaper than spending time diagnosing a network problem.

(if I don't snip it in half, on occasion people extract the 'perfectly good' ethernet cable out of the bin)
Frankly, you're probably better off learning some SEO, writing some articles in your niche, and waiting for a while (6-12 months) for your website to show up in Google results for as many keywords as you can.

Use a tool like Ahrefs (you can get 7 days free iirc, or just use it for a month and then cancel) to find keywords people search for in your niche and start writing. When you're selling stuff on the internet, keyword data is illuminating!

Use keyword data to think about why people want a Geiger counter (I see you have a survey!) and the kinds of problems they have, then show them how yours fixes their problem.
in that case they probably don't give a f to the environment.
Apple could resolve the issue by eg having a free-charger-coupon/card into the box.
I'm curious to see to how much RAM is needed for that `Timer::after(Duration::from_millis(del.into())).await;`.

Does it optimize and use a `u32` behind the scenes, or does it use the much slower `u64` Duration (from `embedded_time`)?

It's not the RAM that interests me, I want to see optimal code generated, which should do timing based on a `u32`. Just curious.
yeah, tbh i think that's fair enough
https://nvd.nist.gov/vuln/detail/CVE-2022-4135

“Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)”
It's a publicly open collaborative playlist. Not sure why it's linked, maybe an experiment from the author?
Volkswagen Originalteil
I think we need to split some hairs here;

1-3 are deserving of sympathy - and it's really our collective shame that people are in that situation.

4 & 5 deserve to be mocked at this point.
Sounds like you’re unhappy that people didn’t want the network to be responsible for checking against bugs. But would the opposite actually be fine? What about people who buy their phones from the manufacturers?
exactly, best example I've seen:

https://abbey-decorators.co.uk/humans.txt
Having done both, and everything in between… I’m
continuing to move steadily away from binary implementation decisions.

You spend money, it gets done quicker (sometimes, but that’s the intent) but if it’s not the right thing, it’s a waste.

You spend time, you have time to adapt and adjust, but you can be too late.

I’m moving towards smaller, cheaper, and faster incremental interventions. Accrete successes, scrape off failures.
Perhaps the commenter means diversity of background and experience, rather than skin color?
I’m in a similar position. I used iPhone for years but after they started to remove important apps from AppStore I decided to move to pixel. UX is terrible and unpolished. Hardware is just bad. But I can sideload and that’s more important.
The 'Myth of Elon Musk' Was His Most Valuable Asset
I own one and want to use it as my daily driver. I also want out of the Apple/Android ecosystem.

It is unusable as a real phone. It's a fun toy and I would buy again to play with, but it doesn't work.

The radio dies all the time. The battery can't last more than a few hours.

Buy one to play with, but don't expect to actually use it.

I actually ended up giving it to my hardcore Linux friend (the i use arch btw kinda guy) and he doesn't use it either.
Apart from the fact that FFT is way more complex than needed for a guitar tuner, I also believe it’s not even really possible to use a Fourier Transform for a useful guitar tuner. Because you won’t achieve good enough frequency resolution.

I would be interested if I am missing any possible tricks here. But the low E string on a guitar is about 82.4 Hz. For a useful basic tuner you would need a precision of maybe 5 cents (~ percent of a semitone), or roughly 0.25 Hz (roughly 1 Hz for the high E string). Frequency resolution with the FFT improves when you analyse a longer signal. For 0.25 Hz resolution, you need more than two seconds of audio. Two seconds where the pitch doesn’t change. I don’t think you’d get anywhere with such a design.

I’m not sure if this could be changed with a higher sample rate. With a higher sample rate, you have more samples per second to feed into the FFT, but also the upper boundary for frequency increases, so I believe frequency resolution just stays the same. I’d need to look up the formulas, though. Maybe with extreme zero padding? Or any other tricks?
At the minute I’m leaning towards going to Australia to take advantage of the new 3 year Working Holiday Visa for uk citizens. I’ll probably get a campervan over there and do the whole nomad thing for a while or just rent for a bit. After that I’m not sure, options I’m weighing up atm:

- study German over the next few years and then study in Germany (free or extremely low cost tuition)

- as above but in Argentina or another Latin American country (have already been studying Spanish for a couple of years so not far off the standard required)

- rent in Ireland for five years (can live and work there visa free as UK citizen), become a naturalised citizen then move anywhere I want in the EU

- move to Glasgow or Belfast where property is cheaper and the people are friendlier.

- do the whole digital nomad thing in more affordable countries like Thailand, Bali, Mexico etc

The only thing I know for sure is I am absolutely done with England and don’t want to be part of it anymore.
> If you need hours to figure out if a log line is relevant or not, then you have much more important problems to take care of.

I don't.

> Has nothing to do with zealotry, just common sense.

Ah yes. "does it change the semantics of your (whole) program if that logline, that you are talking about, is not executed for some reason - or if it is executed more than once?" vs. "this logline is critical and will be e.g. parsed and used by another system and actions might be taken due to it, then I would argue it is good if you are forced to consider the potential impacts to your program. "

etc. etc.

And yet the fact is that if you need to log something your precious "mah purity" function is doing, you're stuck with "sometimes a couple of 100 lines need to be rewritten".

Where as non-cultists just do a `Log.info` etc.

If you can't understand that, well :shrug:

Edit. I just re-read that inane pseudo philosphical bullshit about "the semantics of the whole program a log line". No, I definitely don't need to consider the semantics of the whole program to add a bloody log line.
Havent read the paper, but your quote doesn't change the core point that it could be correlation.

E.g. perhaps aggression makes them more likely to eat infected animals and also more likely to challenge for leadership.
So why are they seizing iPhones?
If the company bans you, they are publicly claiming you have performed a disreputable action of some kind. If you have not, why not sue them for defamation ?
Memory issues and JIT bugs mostly :)

https://microsoftedge.github.io/edgevr/posts/Super-Duper-Sec...

>Looking at CVE (Common Vulnerabilities and Exposures) data after 2019 shows that roughly 45% of CVEs issued for V8 were related to the JIT engine. Moreover, we know that attackers weaponize and abuse these bugs as well; an analysis from Mozilla shows that over half of the “in the wild” Chrome exploits abused a JIT bug, as illustrated in the charts below. Note “Edge” below refers to the legacy version of Edge.

https://msrc-blog.microsoft.com/2019/07/16/a-proactive-appro...

>Figure 1: ~70% of the vulnerabilities Microsoft assigns a CVE each year continue to be memory safety issues

>C++ does have its virtues that make it attractive and in some cases essential: it is blisteringly fast, it has a small memory and disk footprint, it’s mature, it’s execution predictable, its platform applicably is almost unparalleled and you can use it without having to install additional components. If only the developers could have all the memory security guarantees of languages like .NET C# combined with all the efficiencies of C++. Maybe we can: One of the most promising newer systems programming languages that satisfy those requirements is the Rust programming language originally invented by Mozilla.

https://www.chromium.org/Home/chromium-security/memory-safet...

>The Chromium project finds that around 70% of our serious security bugs are memory safety problems. Our next major project is to prevent such bugs at source.

>Using safer languages anywhere applicable

>>Rust

______________

As you see you can literally turn off JIT with a few clicks and make your browser way safer.

Unfortunely you cannot force people to use Rust or other safe environments like .NET or Javas
The value in DDD is in the boundaries. It makes them explicit not just at technical but also organisational level.

Then within a boundary you have a shared semantic model which is explicitly documented so visitors from other domains can "speak the language".

So far none of that touches code - but Conway's Law generally results in a set of services at the boundary.
The article mentions a heap buffer overflow in GPU, so it might be a driver issue. GPU drivers were traditionally not written with security in mind so there are a lot of potential bugs in there.
Because they want the latest features of the OS on their phone
For when ad hominem is all you have left?
haha, if you can get an ESP32 to do image processing, then you're not an average hobbyist
Years ago, when we just founded our company, I asked an experienced CTO: 'In your experience, what is the most expensive thing to adjust later on?'. He said: 'Changes in your datamodel'. That advice worked out well. We spent extra time designing our datamodel and it saved us quite a lot of money / time on refactoring later.

So making schema discussions as concrete as possible with Excel together with business stakeholders sounds like a smart thing to do.
Thank you for the final line, I never realised that
I had this thought but doesn’t the pack mostly eat the same thing?
Emission levels are complicated. There isn't a particular threshold they have to be under. Rather, phones negotiate with the tower to use the minimum power needed to get their signal through, depending on their distance from the tower and other factors. Using lower power means less interference with other phones as well as increased battery life and less RF absorption by the user's head. This negotiation has a lot of parameters that vary between carriers, so carriers legitimately need to test that every model and version of phone works reliably on their network and doesn't just start blasting at full power sometimes, causing other calls to drop.
Related:

A Better Way to Borrow in Rust [...]: https://news.ycombinator.com/item?id=33720041 (1 day ago)

A Better Way to Borrow in Rust [...]: https://news.ycombinator.com/item?id=33716788 (2 days ago)

A Better Way to Borrow in Rust [...]: https://news.ycombinator.com/item?id=33716525 (2 days ago)
I think that’s the takeaway from the Lord of the Rings.
The next crop of YC applicants should be interesting ...
It's one that I know and flick through regularly. It covers the wider aspects of the packaging industry and has a good reputation for following what's going on.
The state of Hesse, not Germany. Data protection is overseen by the states, not the federal government.
That's ("how to make something strong the right places") is not really industrial design though (but mechanical engineering). Industrial design of course also take that into account, but it's more about making it usable and the aesthetics of it.

Sorry for nit-picking.
When someone is saying 'fraud', I think most people are talking specifically about a criminal offence of some kind.
Or just always hardcode the use of the built-in phone app for emergency numbers. That shouldn't be something that a third-party app can register for.
Bureaucrats going on a power trip thats about to get struck down by the courts.