skysight-inc/HackerNews huggingface dataset:
So, does this mean the FAA letter is the weakest it could possibly have been? Or was it plausible they could have said "we know you identified 63 corrective actions, but don't worry about that - so long as you do #3, #18, #31 and make a start on #40 you're good to go on the next launch"?
They were examples, they're widely used C apis. Anything that passes through to glibc, windows or posix will have this problem.
Sounds like someone needs to jack up fossil fuel prices to astronomical levels and the market will suddenly appear from seemingly nowhere.
> ... it's also annoying that the USA doesn't have a simple bank transfer system like many other countries do.

FedNow is here and live.
Being charged with a crime would require the people who could charge him actually wanting to charge him. If congress wanted him to lie in the way that he did, clearly they wouldn't charge him after the fact.
Why can't an attacker just link a new getenv() that pretends that LD_PRELOAD and other variables aren't set?
Some of the choices may be too similar. I answered one question with "TensorFlow", which was wrong. The answer was Bert, a set of models for TensorFlow.
The other post from RajT88 is the best answer to this.

It's a lot easier to implement an AI version of a strip club or hostess club than an AI version of Twilight or 50SoG.
Most of the fee goes back to customers in the form of cash back and loyalty points. The networks only get some 0.3% ish, the rest goes to the issuing banks. That's why you can get a no-annual-fee 2% cash back card like the Citi Double Cash.

Debit cards that fall under the Durbin amendment to the Dodd-Frank act only charge 0.05% + $0.21
> There's a lot of pressure in academia

Be careful to over generalize. There's a clear distinction in political divides between STEM departments and the humanities. But both even have inner differences. As an example, if you study Country X, you may or may not have certain conditions required to gain access to historical documents that are controlled by said country. Even if you don't live in that country and aren't leaving, those documents are on loan from said country and they control access.

Long story short, stop over simplifying things and google Simpson's Paradox.
I don’t think it makes sense to trust any single organization, because there is usually some motive other than finding the truth (profit, reputation/fear, power).

Rather find individuals/journalists who are searching for the truth and over the years don’t lie to your face.

Social media censorship does not help with this problem, and if we want to live in a functioning democracy more real debate is needed.
Did you even read where I said

“ that even if the “vaccines” did reduce the severity and number of deaths it was a win”

> I’m not sure about odds of catching it, but reduced odds of hospitalization and death do persist beyond 9 months.

We don’t know that. Most people who cared enough to get the vaccine, also probably cared enough to get booster shots as recommended. Every study shows that the effectiveness completely disappears within 6-9 months without a booster.

I am one of those who got the booster.

And you arguing with me about the effectiveness when I’m arguing about the messaging shows how out of touch people are on HN with the significant number of Covid/anti-vaxxers.
"Struggles to master" sounds like propaganda / smear piece to me. For a country that is clearly NOT ready for widespread EV adoption outside of enthusiasts. Maybe they have the foresight to see the infrastructure isn't there yet and are playing the slow game despite the complete ignorance of activist politicians who are pushing rapid widespread adoption of this technology when clearly the preparation is woefully inadequate.
One of species we should have eradicated. Whatever their niche is, it doesn't seem like unique anyway. Ironically we may not have that much power over nature as we think we have.
Hi, Liz! Really glad to hear you enjoyed the post!

>I will swim upstream here and declare I think it's a perfect film lol. Seriously though, for me it captures a moment in time that I will forever look fondly upon.

The documentary does a great job of capturing that. In all your scenes, you seem like you're having a great time. Your responses in the interviews are so fun and positive, even when you're reading mean blog comments about Fog Creek or maybe-or-maybe-not being shushed.

I mentioned this in the blog post, but it was satisfying to see how you grew your career as Fog Creek became more successful, and it's great to hear how positive an experience you had working there.
Only the mortgage is from California, rest of the numbers are average in United States. People are still paying $1000 monthly payments for their trucks in Arkansas.
This is where the legal concept of intent comes in. It's common to have different judicial outcomes depending on how deliberate the actions were.
China absolutely do want that. For one, reducing the world's dependence on Taiwan-made semiconductor will demotivate some countries from backing the island nation on its independence claims.
There are a lot of small utilities which are built upon LD_PRELOAD, for example.

- fakeroot: Gives the running program the impression that it is running as root, often used for example for building debian packages. This will let the build script create a directory tree which it believes is owned by root and then when
that directory tree is packed by tar, tar will also see root as the owner and the .tar-archive will have root as the user/group for the files in the final debian package.

- faketime: Gives the running program the impression that it is running at some specific time. Usefull for testing code during specific events like leap-years, etc.

- eatmydata: Will ignore all fsync() and related system calls which ensures files are written to permanent storage. I have used this once for running a database during a testsuite, and databases are much faster when they do not have to wait for the data to reach permanent storage.
> Actually, yes. I was raised in a religious household and rejected religion, and absolutely 'discovered' science.

I wouldn't count that as "discovering science." Maybe it would be more accurate to say you found it?

>> It's a set of values and habits of mind that you absorbed and where [most likely] explicitly taught from childhood (e.g. were indoctrinated into).

> That's simply not true. These attempts to equate science with a religion are always so disingenuous and show a fundamental misunderstanding.

Except science is exactly as I described, because (in this context) it's an ideological construct used by its adherents to make sense of the world and gain a sense of righteousness. It's therefore a construct privileged by them. That's often accomplished by a little mental game, that works much like when a job description is written to fit a particular person and reject others. It's not very surprising to see that truth insistently denied, because to accept it would undermine the the work the construct is being used perform.

Science is also a means to technology, but we're not really talking about that.

> No, I got what you were saying, I was just making a point to refute your false equivalence.

I'm not so sure you did, because you proceeded to construe "god" literally not metaphorically.
Quite possibly the peak Windows version (with service packs). The default UI was certainly tacky, but you could switch to Classic.

Windows 7 is a close second.
There is the notion of "socially-necessary labor" and the amount of that required to produce a thing does depend on the capital goods available to the people doing the work (that is, the technological sophistication and level of economic development). The expectation is that it will go down the higher the economic development. This can even make things that previously weren't worth doing before, worth doing now, because their value in labor is finally less than their use value.

In principle market forces are supposed to drive down prices, are they not? Absent collusion and corruption, etc., we would expect the price of a good to be very close to the cost to produce it. This is what pro-capitalist, pro-market economists keep telling us, anyway - and that is at least the theory. But that cost to produce it is exactly the capital used in the production plus the labor applied to that capital. But if capital is just the product of labor, then in fact the cost to produce the item - and thus the price I will expect to pay in a competitive market, does in fact correlate quite well with the labor that goes into production.
We could have privacy protection as the default, and then you can opt-in to sharing your personal life with hundreds of companies so they can show you more relevant ads. Since everyone loves relevant ads, they'd be sure to opt-in, right?
Yeah, the ostensible reason is to be 'digital cash', but the more accurate reason is that it was created by the banks to shift the liability nexus to customers.
Seems like something that could be solved using tree-sitter[1], though it would probably be pretty involved.

1. https://tree-sitter.github.io/tree-sitter/
Why isn't this already banned. Religious and ethnic discrimination are already illegal and that's what this is.
Sounds like you are moving the goalposts from “it doesn’t help at all (after 9 months) and isn’t even a vaccine” to “there was poor government marketing and tech industry actions were bad”, which are very different things.

I think that downplaying the benefits of the vaccines is somewhere between uninformed and irresponsible. I don’t care nearly as much about criticism of government commas and the tech industry.
> But how would you bootstrap this? How do you make sure the initial key was actually created in the secure exceution environment and not created by MITM malware running on the main application processor?

The device comes with no keys in it, but includes firmware that will generate a new key, put it in the HSM and provide the corresponding public key. The public key is authenticated to the service using whatever means is used to authenticate the user rather than the device, because what you're doing here is assigning the key in this device to this user, so it's the user and not the device you need to authenticate.

But now if the user wants to they can use a different kind of device.

> If this was that easy, FIDO authenticators wouldn't need attestation either.

They shouldn't.

> If attacking a single device costs a few millions, it definitely does matter, since you'd need to expend that effort every single time (and you'd be racing against time, since the legitimate owner of the device can always report it as stolen and have it revoked for transaction confirmation, transfer their funds to another wallet etc.)

You're talking about the HSM case where the user's own key is in the device and you need to break that specific device. In that case you don't need to prove that the device is a specific kind of device from a specific manufacturer (remote attestation), you need to prove that it is that user's device regardless of what kind it is (user's key in the HSM).

> How does some implementations falling apart imply all possible implementations being insecure?

Because for remote attestation the attacker can choose which device they use for the attack, so if there is any insecure implementation the attacker can use that one.

And if you deploy a system relying on it and then a vulnerability is discovered in millions of devices you're screwed, because you now have a security hole you can't close or you have to permanently disable all of those devices and have millions of angry users. But this is historically what has happened, so relying on it not happening again is foolish.

> Smartcards are an application of trusted computing too, and there have been no successful breaches there to my knowledge.

Smartcards don't require any kind of a third party central authority. You know this is Bob's card because Bob was standing there holding it in his hand while you scanned it and assigned it to Bob in the system. Bob could have made his own card and generated his own key and it works just as well. It's a completely different thing than remote attestation.
I think you have your analogy backwards: the "assembly programmer" in this situation is the person who doesn't understand why one would "color" functions and/or express a fundamental property as part of their types. "Why do we need to express this in their type? Every programmer should be able to understand this without help".
Immersive video of Large scale photogrammetry 3D city model in Unreal Engine 5
Its cheaper too.
I assure you if that code was to be ported to Go 1:1, Go GC would simply crawl to a halt. Write code badly enough and no matter how good hardware and software is, it won't be able to cope at some point. Even a good tool will give, if you beat it down hard enough.

For example, you may be interested in this read: https://blog.twitch.tv/en/2019/04/10/go-memory-ballast-how-i...

Issues like these simply don't happen with GCs in modern JVM implementations or .NET (not saying they are perfect or don't have other shortcomings, but the sheer amount of developer hours invested in tuning and optimizing them far outstrips Go).
Not really. Sure, the mortgage number is California specific, but it’s not much lower in the whole country and the rest of the numbers are for the whole country. You also should take a look at the BLS numbers I shared and you’d know it’s not pretty elsewhere either.
Crazyhouse is a fun game, but I find it inferior to both chess and shogi. Shogi without drop moves would be rather dull. The board is too big, and the pieces too slow-moving. Chess with drop moves (i.e. Crazyhouse) is too chaotic; drops make the already powerful pieces overpowered on such a small board. Chess and shogi are both nicely balanced games, Crazyhouse is not.

Another problem with Crazyhouse is that you can’t easily play it with a physical chess set. You can only play online, which some of us find hard to enjoy.
I feel peace of mind knowing my todo list will be my legacy.
robots.txt does not say "authorized admittance only". It says "I'd like you to abide by these rules pretty please".

It's there for entities willing to (try to) respect website owners wishes and preferences.

It's useful when you need accessing stuff in an automated way, while staying on good terms.

By downloading robots.txt, the entity is asking the website owners their preferences regarding crawling. It's polite to do so. robots.txt can also offer useful guidance ("yeah, don't go there... [it's useless, too costly, etc], but you can go there...").

It's not a guarantee. And entities can totally decide that the request is unreasonable. Their call. The risk is being shamed or blocked.

Personally, I find it unreasonable / harmful to allow Google and deny everything else. If I built a crawler for a search engine, I would probably not follow this. And Twitter might find out and block me, of course.

robots.txt is not a security measure / measure against abuse. This is what IP ban and other kinds of blocking are for. But it's still useful. Not flawless, but useful.
The app just tells me my bank has Zelle and I should use it instead.
>Maybe CFB needs to implement a per-team salary cap.

Maybe schools should not be involved in professional sports in the first place, especially one that inherently causes brain damage.

Let the NFL owners pay for a minor league.
For a couple of initial test institutions in limited cases.

It's coming, but it's not really "here and live" fully yet.
The Leaf is a glorified golf cart, it is not comparable to a Toyota family car.
NK seems to be getting disproportionate media attention compared to other dirt poor and authoritarian countries.
Just a ui bug, the presentation layer doesn’t match the data layer
> People make copy-paste mistakes. All the time.

But if you do that every image looks wrong and it's vanishingly unlikely to get into a release.

> You can abuse it to gain a (known-page-offset) write primitive in the other, non-sandboxed process to which the buffer is also mapped.

There's no reason to have the memory mapped into both processes at once, and you can't exploit the bytes you write without a real vulnerability.

Since it's a one-shot write into the buffer, if your intent is using it as an exploit step then you might as well encode an actual image with your exploit-assisting bytes.
https://github.com/NVIDIA/TensorRT/issues/982

Looks like tensorRT does work with 30x0, but I couldn't find much.
>It seriously made me (and others) question how good the school was academically if they couldn't manage to win, despite setting records on spending.

Why?
The key problem with NFTs wasn't the "digital property" part of the equation. It was the cryptocurrency aspect. Digital property, like say CS:GO skins or Roblox stuff, have a thriving market despite only existing as database entries on Valve or Roblox's servers. Importantly, though, they exist in a space that people otherwise want to be in.

The big failings of all the current metaverse projects is that they focus too much on the cryptoproperty angle and not enough on establishing spaces people actually want to inhabit. This makes sense: the crypto scene is complicated, but has a lot of money to throw at things. To get that money, you have to deal with that complexity, which ends up committing large amounts of your time and energy into the cryptoproperty angle. Then, when it comes time to attract users, all you have to offer is the crypto stuff.

Meanwhile, the crypto stuff doesn't actually solve any problems on the developer's end that existing MMOs face. So you're trying to compete in a ruthlessly hard to break into market, while ignoring the people who have a demonstrated preference for products like yours, because you're busy focusing on the people who want to invest in your product.

As long as the metaverse is being built as a cash-grab first, it'll never succeed.
You'd need to go through the legal process ie: get a court to issue a subpoena to Chase to get to the other bank, then to the other bank to get the customer info, then you sue the other customer.

I'm not sure if it would be you or the officer.

The banking system is supposed to know who everyone is, which is the point of the KYC regulations. Extracting that information out of them is work.
2022: https://en.wikipedia.org/wiki/2022_Rogers_Communications_out...

2021 (but was generally just mobile/voice, not fixed line): https://www.cbc.ca/news/business/rogers-outage-1.5992954
Not everywhere I guess but US Bank, Wells and JPMC have it [1]. Whole bunch more have RTP too. [2]

[1] https://www.frbservices.org/news/press-releases/072023-fedno...

[2] https://www.theclearinghouse.org/payment-systems/rtp
Yeap have the same problem here as well.
Each Office 365 tenant does not have a personal Exhange server. The sending smtp server is being shared and can be verified with the email headers. That is how this flaw works.

I feel like an idiot because I see the same behavior with the variable 'not in my organization' with transport rules and how many false positives I've had. I can clearly see the usage of different exchange servers being used in my environment when my company acquires a bunch of users. It falsely flags them because they are using a different shared exchange resource.
> So you’re stuck choosing a single CPU or having to write send and sync everywhere. There’s a lot of use cases where you would want a thread-per-core model like Glommio to take advantage of multiple cores while still being able to write code like it’s a single thread.

No your not, you spawn a runtime on each thread and use spawn_local on each runtime. This is how actix-web works and it uses tokio under the hood.

https://docs.rs/actix-rt/latest/actix_rt/
They did go through proper testing. They had been going through lots of testing for years, incrementally, slowly, just like the vaccines in this article. It was only the pandemic that provided the money and urgency to do it sooner rather than later.

Please do not let politics bleed into science.
It is quite challenging. I think giving a bit more context would bring it within an enjoyable range; e.g. showing the entire file, including the full path
It also lacked a firewall at launch, despite claims to its great security.
Location: Allentown, PA

Remote: Yes

Willing to relocate: No

Technologies: .NET, TypeScript, Azure + GCP, DevOps

Résumé/CV: See LinkedIn - https://www.linkedin.com/in/craigsaboe/

Email: me@craigsaboe.com

18+ of development experience, many stacks in many industries. Love finding ways to optimize/accelerate/support developers and teams; DevOps, documentation, standards building.
You mean when I said in my original post

> But, I think it was a disservice to call something a vaccine

It was a severe disservice because it increased skepticism and reduced uptake

> I think that downplaying the benefits of the vaccines is somewhere between uninformed and irresponsible

What part do you disagree with? Even the pro-vaccine side which I’m one of says effectiveness declines to near zero after six to nine months without a booster.

> I don’t care nearly as much about criticism of government commas and the tech industry.

You should care because they are a major cause of the anti-vaxxers and causing people to die and be hospitalized unnecessarily because of ineffective messaging
Lots of other countries offer direct to consumer rails. I think fednow is an absolute improvement over ACH but it’s still way behind some of the peer payment systems out there.
My security model is not going to do smolsite.zip any good when quad9, 1.1.1.2, et al. decide to outright block the domain.

Also, cookies.
“ Did you even read where I said…”

I did. You said “if” as if maybe they didn’t.

“We don’t know that.”

Yes we do. Boosted vs not boosted is differentiated in case, hospitalization, and death data.
Ahh, right--that was your original question. The thread got long and I lost the plot.

I wouldn't be surprised if the overall market size (in users, not dollars) for all types of "relationship substitutes" for men is simply far, far larger than the market for women, even though Twilight and 50 Shades are themselves huge. For every 1 female erotica fan out there, I bet there are 10 or maybe 100 male users of porn or OnlyFans. I would also guess that the amount of money spent by men is at least a multiple of the amount spent by women. If I was an entrepreneur going into a market where, say, there were 100x potential male users and maybe 3x potential male dollars, I'd be a fool not to at least initially target men.
This is a lot more common, but I wouldn't call this proper skepticism. It's usually just people being cynical and biased in their own way. They've subscribed to a political tribe and social media echo chamber that happens to be opposed to something in Nature, and that's the reason why they're doubting whatever is written in Nature, with some made-up justification that sounds plausible only within that echo chamber but is transparently wrong to people not caught up in that particular group think. That said, actual skepticism should be applied everywhere, including towards Nature.
Well several years ago I was a merchant, and every time I was victim of a fraud the Credit Card companies took their money from my payments, so those fee's did not cover the fraud at all. Not only was I out the product, I was also out the Money, and fee's a double whammy.

So I 100% disagree that the " credit card fees actually buy you something" because all they do it push the liability on to the merchant.

Visa and Mastercard is not covering the costs of fraud
First human organ created inside an animal opens door to producing ‘spare parts’
Rachmaninoff's Prelude (op 3 no 2) is incredibly fun to play!