skysight-inc/HackerNews huggingface dataset:
Project Zero is amazing, but they 1) seem like a very small team, and 2) their mandate is far too broad (essentially to search for 0-days in anything, versus a specific system). What I am talking about is more like Apple having a dedicated team of 10 vulnerability researchers all looking into iOS 0-days fulltime.
I see teams using Make to execute commands (e.g., transpile this, rename that, etc.), as a replacement (or enhancement) of npm (in the node world), for compiling Golang binaries, and even for running stuff in the pipeline. Make is quite versatile, indeed, but it feels like modern teams are using it in a way Make was never intended to be used. That’s the reason why alternatives to Make have appeared. My take is: wouldn’t it be possible to update Make so that it fits more modern use cases more naturally?
The problems with Make alternatives is that: they are many and they don’t come preinstalled with your usual Linux distribution. Make has that special place to be a greater tool than what it is right now.
Mathematically, 2-4% is equivalent to one of your great-great-great-grandparents being a full-blooded Neanderthal.
Yup. Want to have a laugh? Here is the Apple iOS certification report [1].

On PDF page 26 (document page 21) they describe the rigorous AVA_VAN.1 vulnerability analysis certification process they faced. The evaluation team basically typed in: "ios vulnerabilities" into Google and then typed in "ios iphone" into the NVD and verified that all of the search results were fixed. AVA_VAN.1 certification please.

To explain why, AVA_VAN.1 does not require a independent security analysis, it only requires a survey of the public domain for known vulnerabilities [2]. You need AVA_VAN.2 (which is only required in EAL2 and EAL3) before they actually attempt to look at for vulnerabilities themselves.

[1] https://www.commoncriteriaportal.org/files/epfiles/st_vid112...

[2] https://www.commoncriteriaportal.org/files/ccfiles/CC2022PAR... Page 154
I don't understand, are you saying people are forced into joining the cartel?
Oh god how could I forget the "let's just replace ARP and make people using LVS and keepalived change their setups."

What you need to support dual stack? Who would do that…
But I guess that’s my whole point is once they sell it to collectors it’s equivalent to the bill not existing? My confusion is around wondering if I’ve somehow fallen through the cracks and got lucky or other people have the same experience.

Why do other people pay bills they receive in the mail?
Just wanted to share that this is one of the best tutorials that I've read in quite a while! Super clear writing style, the use of diffs for each stage (as well as showing the progression via different tags in the repository) is incredible (and something I may borrow in the future!), and you do a great job walking the reader through the complexities of Rust in an approachable way. Really, really cool.
OpenTelemetry for Cloudflare Workers
They just realized they didn't really needed their own rendering engine.
It would have been a nice to have, like in the old days of IE6, where they could decide over the direction of the web.

But more valuable to them is that people are using a browser they control (no matter the tech within) - which is why they try to push you to edge however they can.
Great example. Right, the deep learning approach uncovers all kinds of hidden features and relationships automatically that a team of humans might miss.

I guess I'm thinking about this problem from the perspective of these GPT models requiring more training data than a normal person can acquire. Currently, it seems you need the entire internet worth of training data (and a lot of money) to get something that can communicate reasonably well. But most people can communicate reasonably well, so it would be cool if that basic communication knowledge could be somehow used to accelerate training and minimize the reliance on training data.
It feels zoomy so far. v8 is quite fast to start with. But we’ll see.
My take is that the "idea people" usually underestimate how easy it is make user interfaces and overestimate the difficulty of scraping, API "integrations", etc. (It's what makes Zapier such a successful racket)
Then maybe work from home but in your car is the answer
Tracking files based on content hash in addition to timestamps would be a very nice feature Make could add in a compatible way. The current timestamp-only tracking is problematic in many environments, especially with Docker.
If the hospital/provider sends your bill to a collections agency, then it can definitely show up on your reports. Especially so if you are actually sued for the debt, in which case the judgement is also a public record.

I've had this happen a couple times in the past when I was in treatment for cancer and underemployed. One agency reported the collections action and it went on my credit report (no indication that it's medical debt or anything else, so I imagine it would be up to the consumer to contest these things with the bureau?) Another collector didn't, so I never paid the bill or heard from them again!
In Japan this is what happens, there is effectively a one party rule which contains factions.

Japans politics are terrible though.
Mesh shaders, ray tracing, unified memory, direct IO,...

V8 JIT is hardly as fast as C, almost there yeah, there is still a speed bump.
Took in your feedback in, we've changed the website and added some more informatio n.
Aren't guitar tabs typically combined with abbreviated notation to show the rhythm? No lettering of notes, but just an "X" associated with half-notes, quarter notes, etc?
Notion hosted through super.so

I don't like using 56 different editors and storage for text which ends up happening when you share content on Linkedin, Twitter, Community forums, blogs (personal and business), Reddit, HN
So the math seems to be that for the 25 million people prescribed this drug...

FDA claims: 1/5th of a percent died (55k)

TFA claims: 2 percent died (500k)

That's a huge difference of opinion.
It is not a US thing.

Europeans also have Latin on our money too. Our alphabet is the Latin alphabet.

They were still teaching primarily IN Latin at universities around the war of independence. Yes, you read that right, you spoke and read Latin as your primary learning language. The American universities copied the practice from their home countries.

Until the 1960s in the UK you had to know Latin to learn Medicine or Law. It was still taught in many schools, and I think has been having a resurgence.

I was taught Latin at school.

The Americans didn't cunningly adopt it to lend themselves legitimacy. It's as simple as the European settlers brought it with them. It was the culture of European intellectuals.
You might be surprised. Unless you are dealing with clients that have been burned by software licensing, or have attorneys knowledgeable in software patent/licensing law, you could charge clients for building software and release it as GPL. You then also provide the setup of that software, which you can include in the total cost. There is lots of GPL software out there, but not many people that understand how to setup or support that software. It is very possible to make a good living off the setup and support of GPL and other open source software.

If you don't feel right for open sourcing software you wrote for someone else, you could always offer your client a discount to let you open source the software. There are quite a few companies that now make their money supporting open source software, even when they aren't writing it themselves. I've done this myself, and I think it's a lucrative business model that still gives everyone involved freedom.
Same. I presume every company I have an account on will be compromised at some point, and all my account data will be out in the wild. This presumption hasn't disappointed so far ;)
Synthesia has done this exact solution for well over a decade now. But there’s also the option to read generated sheet music and adjust the playback and gradung in many ways.

https://synthesiagame.com/
> Poach them to do what?

Poach them to discover 0-days in their software, as I said.
My point is, I hope it’s not just a ruse and they actually do what they promise to do?
I've been thinking a lot about this kind of use case, and I'm more and more convinced we just need better ways of handling web content on the LAN.

Like, no matter what, the UX will probably be meh just trying to mirror screens. Instead the presentation app could give you a QR code with a TLS cert in it, and you could scan it and get a secure connection to it's mobile optimized web remote UI.

We are really nowhere near using the full potential of all the devices and connectivity we have.
> “bad actors", but wouldn't want to work for Google or Apple

- Everyone who doesn’t like US hegemony. Which happens about everywhere but US, in varied proportion, but even in Europe, and even worse in Middle-East,

- Everyone who doesn’t like monopolies. Capitalism of competition (as opposed to state capitalism, when the state borrows a trillion per semester, ahem) requires that monopolies be broken down to avoid distortion of competition. Helping bad actors can be, under their viewpoint, less bad than the damage done to a billion consumers consumers at a time. Plus monopolies impose a monoculture of occidentalism, with certain values that a firm in Egypt might consider worse than sponsoring bad actors.
Right, we haven’t done TLS cert pinning or TOFU yet. Filed as https://github.com/vector-im/element-meta/issues/2073
> Frankly, the prices that Apple seems to be charging for common repairs seems quite reasonable nowadays

MacBook Air. Damaged charging chip. Laptop runs fine on AC. Battery is at 100% health. It just can't be charged (this is the summary from Apple after diagnostics).

Fine, I think. Maybe what, $2-300 with parts and labor?

"That will be $890 if you want to repair it. Maybe we can talk about getting you into a new Mac instead?"

$890. To repair a $1,100 laptop that is functioning perfectly other than being able to direct energy into a battery.
How cold the world is to make the primary form of communal spaces be working in the rigid hierarchy, abuse, and discomfort of the modern American workplace.
But at least racial hatred lives on – not least in your comment.
Yeah Emacs is insane. It's the only editor that is so customizable that it can imitate any other editor. Obviously, that comes with some effort to do, though.
Thanks. I linked to the blog post because it was one of the first results in the search engine.

How are you guys tackling host key rotation? Do you do it periodically, or on compromise? How do you protect such an important set of keys?
The story is a good one, but I'm not sure it adds up.

Most curiously, what is never explained is what the servants actually called the animal. At the time there was no singular term for cattle or sheep in English. Any reference to the individual animals was more specific, e.g. bull, heifer, steer, cow, ewe, ram, etc.

But once you've cut up the animal, that specific differentiation becomes difficult to track. For all intents and purposes the meat is the same. The idea that the servant would say "time to cook the heifer" or "time to cook the steer" seems suspect. In fact, unless the servant in the kitchen was also the butcher, it is highly unlikely they would even know if the meat came from a heifer, a steer, or what have you in order to be able to speak to it as such.

It seems likely even the servants called it "beef" or, at very least, some other equivalent term of the same intent.
> Japan is actually relatively short on things to do considering how many tourists they get.

Weird, I felt the opposite vibe. When I spent 3 weeks during spring over there, as a tourist, it seemed like there was endless stuff to do, see and enjoy. "Touristy" Japan feels like a theme park in itself. And for "proper" theme things, we only did Ghibli Museum.
One example for you: anytime you needed to use the "Visitor pattern" to do a transformation from one representation to another - you don't need it now. Sealed classes and pattern matching will be more succinct and easier to reason about.
I feel like this is a solvable problem:
1) make feature flags be configured to have an expiration date. If over the expiration date, auto-generate a task to clean up your FF
2) If you want to be extra fancy, set up a codemod to automatically clean up the FF once it's expired

I don't see the problem with developers using flags for configuration as a stopgap until there's a better solution available.
What we actually need is a program that effectively teaches sight reading sheet music well. That would be the music school winner.
Worth starting from ep.1 or just diving in where it's at now?
Wow you've lived a charmed life, friend. This is not the experience of the vast majority of people. Medical debt is real, and crushing.
I haven't seen pre-roll ads lately on Amazon Prime BTW. I started a movie just now to confirm.
>Term limits have been linked to lower growth in revenues and expenditures.[105]

It's always humorous when Wikipedia editorializes. I don't think everyone would agree that this sentence belongs in the negative impacts paragraph. ;-)
Android drivers aren't part of Linux kernel since Android 8.

> In Android 8.0 and higher, the lower-level layers are re-written to adopt a new, more modular architecture. Devices running Android 8.0 and higher must support HALs written in HIDL, with a few exceptions listed below. These HALs can be binderized or passthrough. In Android 11, HALs written in AIDL are also supported. All AIDL HALs are binderized.

> Binderized HALs. HALs expressed in HAL interface definition language (HIDL) or Android interface definition language (AIDL). These HALs replace both conventional and legacy HALs used in earlier versions of Android. In a Binderized HAL, the Android framework and HALs communicate with each other using binder inter-process communication (IPC) calls. All devices launching with Android 8.0 or later must support binderized HALs only.

https://source.android.com/docs/core/architecture/hal

> The term Legacy HAL refers broadly to all pre-Android 8.0 HALs (deprecated in Android 8). The bulk of Android system interfaces (camera, audio, sensors, etc.) are defined under `hardware/libhardware/include/hardware` and have rough versioning and a roughly stable ABI. A few subsystems (including Wi-Fi, Radio Interface Layer, and Bluetooth) have other non-standardized interfaces in `libhardware_legacy` or interspersed throughout the codebase. Legacy HALs never provided hard stability guarantees.

https://source.android.com/docs/core/architecture/hal/archiv...
Nice!
Do you have plans to make this open-source so that others can make use of it?
They probably don't want to hire criminals to work at their companies.
In the beginning, I used to post my blog posts anywhere I could or thought was relevant.

For the longest time, Twitter was where it was at til they banned my account a year ago after someone logged in and posted random crypto shit, and they won't unban me as of X.

Occasionally, I post on my Facebook or LinkedIn. And once in a while on Hacker News, if relevant, though rare.

Other than that... with 2 to 3 million visits a month from around the world, along with hundreds of contributing authors and marketing agencies, they tend to share everything.

With an existence of over 10 years, the website has its own reputation and fan base, attracting thousands of new visitors every month. Its focus is on jobs, careers, and the workplace. To date, I think 800 articles are my own, and the other 4,000 belong to other people.

https://confessionsoftheprofessions.com
That's still a loose correlation, but I do appreciate the correction
Why are people allowed to post this hateful culture war shit on this website?
For a text editor? Without a doubt.
Facebook started its transition to make everything* internally IPv6 slightly before then.

It was indeed a lot of work. But worth it.

* When I was there we still had a handful of weird things that couldn't be made IPv6. If you needed to access such things you could get a dual-stack dev server.
>If the hospital/provider sends your bill to a collections agency, then it can definitely show up on your reports.

So I agree this was the impression I got in theory, but in practice I’ve never seen this happen. Why is there this mismatch? I check my credit reports once a year, there’s nothing showing up
What does cold war in this context? My mom went to China with a group a few years ago, and had a great experience.
Unfortunately, Just is a stupid task runner. It has no dependency tracking, which is the real power of Make.
> involved a non-favored foreign state

Egypt is not 'non-favored'. The US has very close ties with Egypt's dictatorial regime[0], despite its awful domestic human rights record[1].

[0]https://thehill.com/blogs/congress-blog/foreign-policy/58552...

[1]https://www.amnesty.org/en/latest/news/2022/09/egypt-human-r...
The THE lul
I think this is similar to looking at the budget of the US government and asking why they don't simply pay off all the potential criminals such that most crime in the US is then mitigated.
This would be a good idea for ivory not so much fentanyl.
The domain itself suggests overwhelming political bias.
This is just one that was noticed and trackable. How many other quiet half-a-percent-contributors-to-mortality are going unnoticed? I don't think the epidemiological surveys for detecting these kinds of thing are well funded, to say the least.

There's some sort of Drake equation you can do here: prescription rate times chance of side effect divided by detectable effect size, if the number is below the threshold, it's invisible.

It would be interesting to establish something like a holdout group longitudinal study where no new drugs are allowed for 5 years or something and see if their mortality rate differed substantially from the baseline.
If I could edit that now I would
Already very well-paid criminals for that matter
This looks great.

Semi-related to this: does anyone know of any double entry ledgers backed by actual databases like dynamo?
If the number of skilled 0-day hunters who will work for a paycheck is > 0, then yours is a moot point, since a poaching program would still make an impact even if there are some people who work for spyware companies who would not work for FAANG.

I think you will also find that morals for many people are inversely proportional to the offered salary. An 0-day developer being compensated $130k may well abandon their particular morals if offered a $240k salary instead.
If someone described to you how to play d above middle c on a trumpet by saying “1 & 3” that would be pretty close to guitar tablature. Instead of reading a score, they show you what frets to hit.
Make is not a command runner. That people are abusing it as such doesn't mean make needs to change, it means people need to use the right tool for the job. Shell scripts can do the exact same thing without the wonky syntax or attempted dependency resolution, so why not just write a shell script? Hell, even npm has script running functionality. Is that not sufficient?
I think people find it humorous because it's an unexpected instance of sexual dimorphism. Like a "Men are from Mars [not Ares]" kind of thing.
I've never had a doctor run a credit report on me before, have you?
I, too, am fed up with It! That's why I'm implementing an open-source ASN.1 library.

...On the way to writing a new hypertext protocol that uses ASN.1, of course.

...Which I can then write a browser for.

I, too, am not sure if this will ever finish, but I figure that at least, at some point, I will definitely be able to tell you why ASN.1 didn't win the protocol wars. :-)
> it is worth paying over one thousand currency units for a thing, entirely for the sake of destroying it

Oh boy, you didn’t see the one who destroys the Ferrari and Tesla.. but the business model pays well in return with subscribers and viewers.
FCC closing loophole that gave robocallers easy access to US phone numbers
I believe the issue wasn't of IPv6 support generally, but of issues with TCAM space and the increase in routing table size moving from v4 to v6. Overflowing TCAM would cause routing to hit the CPU which would immediately lead to outages.

Tables were relatively large internally because AWS was all in on clos networks at that point. And the devices used to build those clos networks were running Broadcom ASICs, not Cisco or other likely vendors.
What makes them slow is syntax highlighting. It’s impossible to solve well without making the highlighting mechanism really basic.
So true, I’ve paid tax on every dollar I’ve earned.
Flat-network multi-cluster and HTTPRoute timeouts with Linkerd 2.14
Every month at Buoyant's Service Mesh Academy, we dig into a Linkerd-related technical topic. In August, we covered the new multicluster functionality in Linkerd 2.14 and summarized in a blog post: curious what folks think!
I have someone in Las Vegas who stole my identity and is using it for medical services. I get collection notices for these services sent to my house (I'm not near Las Vegas) and I have to dispute every one of them. I've had to file police reports on it, but the Police in Vegas don't really care about helping me.
Had a echocardiogram that I was told would be covered but insurance didn't pay, and they balance billed me for $5K. I never paid. Got handed to debt collectors. Wrote to them saying it isn't my debt and to cease contacting me.

If they take it to court I'll lawyer up and fight.

In any case, I gave neither debt collectors nor medical office my residential address or mobile number. I suggest you NEVER give your residential address to medical offices either, or they'll happily tell debt collectors where you sleep. Which personally I think should be a HEPA violation but apparently it isn't.

Give them a virtual mailbox or office address where you can receive mail.
>but I told them they'd lost a customer for giving me my money back.

That sounds unreasonable.
You are looking at a Large Language Model (specifically GPT3.5) output full paragraphs from a book it was trained on. The prompt is the first 13 words of the book, shown with a white background in the first screenshot. The words with green background are the LLM outputs.

The second screenshot is a diff that compares the LLM output with the original book.
Also an easier way to search subdirectories without having to invoke the shell to enumerate those files. A runtime with filewatxhers for hotswap compiling of .o files at runtime. Basically all the stuff msbuild provides
Actually Yandex is much like google with blacklisting i have found.
Because Make is perfect for 99% of cases. And adding the extra 1% of features would be a mountain of extra work and complexity. Bazel does that, but I don't work on anything that needs its complexity, so for me and most other projects it wouldn't be a step forward.

Make is great. Even has a debugger: https://remake.readthedocs.io/en/latest/debugger.html
Not sure I understand the rationale behind this comment in the context of OP.
How would you classify RapidPages on your measure: smart or dumb?
My TUI editor of choice is "joe". It allows you to freely assign keybindings through a config file. Comes out of the box with Wordstar, Vi and Emacs bindings, but it is easy to roll your own.