skysight-inc/HackerNews huggingface dataset:
There's a very recent talk that they did at 37c3 that you can watch, if you're interested in the process of them gaining root on the various platforms [1][2]

[1] https://events.ccc.de/congress/2023/hub/en/event/sucking_dus...

[2] https://streaming.media.ccc.de/37c3/relive/11943
only half remembered and had a vague feeling it's familiar. It's been a while.
Realizing now BASIC is pretty weird.
https://finance.yahoo.com/quote/AAPL/ seems you are wrong

Compare with minute 22:40 of the talk

As well as https://imgur.com/a/82JV7I9
You are asking how requiring open source with no money to satisfy plethora of regulations along with legal liability (I.e. making it a commercial grade) makes it less likely for open source be made?

Ask log4j or OpenSSL.

Go read this: https://blogs.eclipse.org/post/mike-milinkovich/european-cyb...
... these kind of languages don't allow you to describe the hardware you want exactly, they only allow you to describe their functionality and then they generate a hardware for said functionality.

It is a common misconception that Chisel is yet another high level synthesis language with these drawbacks, however it is not. It simply allows you to write your own high level abstractions on top of exact low-level synthesis primitives.
As an example, it may start becoming more economical to include heat-batteries (I forget the name) in house construction such that they retain heat and radiate it to maintain a not freezing ambient temperature inside a house. That, along with insulation, and some rather moderate changes to behaviour, could entirely eliminate the need for electricity-use during night time hours. We don't know what ingenious and wonderful things people may do when the real-cost of electricity at night is exposed to them.
If, as seems likely, solar and wind come to totally dominate all new energy construction, then it seems like state/provincial and federal governments will need to either legally mandate / highly incentivize the construction of new baseload by utilities, or build those plants themselves. We have the TVA but as much as I hope, I don't think we're getting a bunch more federally owned and operated power companies in the US.
This has been debunked:
https://www.aldomedia.com/blog/t-mobile-fines-for-texting-sh...
In a world where software developers stopped writing any code at all you could make the same exact statement about how software developers writing code again isn't a silver bullet to productivity and therefore maybe not necessary while also still ignoring any actual consideration of the productivity impact of the change or actual necessity of it in achieving the overall amount of needed change. Sure, it gives no guarantee the developers are going to be productive as the business needs because of this one change... but that isn't actually say anything about how necessary it was or wasn't to get them to write code again as part of that path.

To be clear, I'm firmly against RTO myself and I think there are plenty of data points when it comes to actual measured productivity that back that view. In accordance, it's the measures of productivity and notes like "Only one in three executives with an in-office mandate are convinced that their in-office policies have had a positive effect on productivity." which carry the meaning from this article. It's completely unrelated to the test of the straw man argument "the only thing a business needs to do is have workers in an office and it will have no other concerns to address" as the measure of either the success or necessity of RTO policies.
I feel like some of the examples you list are a poor choice to illustrate your point.

Both Harry Potter (books so more than films, but in the films too) and Aang have plenty of flaws, and there's arcs and events that help them grow/develop.

It's been a while, but Katniss does have plenty of flaws and growth (and even some things she never overcomes about her self). Although, it's been a few years since I've read Hunger Games, I feel like she doesn't belong in the same category as Bella (which feels like a placeholder character intentionally). Tris from Divergent might be a good example though, but even there there's some growth.

Regarding some of the super heroes: they're all kinda "super" and very mary-sue-ish, I agree. But they still face challenges and difficulties they need to overcome, or the stories they're part of (rather than the character themselves) are otherwise interesting.

Most of the modern "strong female leads" are just boring (and this comes from a gay boy who LOVES strong women, my favourite characters are women: Sydney Bristol, almost every one from ATLA & Korra, Willow & Buffy, Halliwell sisters, Xena, Lara Croft, Jade from BG&E, women from Harry Potter, Aya from Parasite Eve games, an uncountable plethora of amazing female characters in Anime and manga, and I could go on and on and on, it's not like it can't be done, or hasn't been done, it has been done MANY times). The only challenge these modern Disney SFLs face is not believing in themselves (and as someone who struggles on and off with self esteem issues, I realise how difficult those can be, but also it's not "enough" to base a whole character around just that), usually with a sprinkle of "blame the patriarchy" in there too.

All this misandry and trying to portray any masculinity as toxic is just lame. It's very similar to Disney's queer coding of villains. I remember in my teens, while being a sexually confused and closed queer how sensitive I was to that bullshit and how awful and ashamed it made me feel. It's ludicrous how it's being done again, just the aggressor and targeted demographics are different now. I can't tell if that's just Disney's Modus Operandi, or of this is some type of bitter revenge writing. It sucked then and it sucks now, and it will continue to suck. We need to do better.

People mentioned elsewhere in threads that people complain about too many POCs. I've not seen much of this (maybe a few low quality posts online, but that's just racist drivel of a few small minced idiots, and rarely anyone cares about it). What people dislike is their liked characters' identities getting twisted to fit "modern audiences" (often it's MORE than just race). And the irony is, not even this mythological modern audience likes it because it usually ends up being a shallow self insert, so then down the line the audience gets blamed and called names). There's plenty of original PoC characters that are loved (of Disney: Mulan, Pocahontas, Aladdin/Jasmine, Moana, Lilo, Encanto cast). The whole "well why does it matter" argument is also a bit of a bad faith bait. If it didn't matter, why so bullishly insist on changing it?
> For Disney we had Ariel, Pocahontas and Mulan in the late 1900s.

That's debatable. For example Ariel trades her ability to talk so she can use her body to impress a man. Academics usually consider the strong female character to be Ursula, and she's depicted as unattractive and then brutally murdered with a ship.
There is a reasonable argument that the Debian project has an anarco-capitalist philosophy, so really the only question is whether it is FUD or not. I suspect not though - regulation has a strong track record of taking out smaller players.
First, IP infringement is not stealing. It’s different and equating them cheapens theft. We should speak accurately.

Second, many patents are stupid. One click checkout was stupid and companies that implemented one click purchasing weren’t infringing anything. And certainly weren’t stealing.

Was this patent stupid? I don’t know, maybe. But assuming stealing is not a very good idea as I expect there are many more BS patents than valid.
To be fair, the cloud started it. :)
Certainly wittier than the repetition of ignorant nonsense.
A 12 year old who read a book on coding is now a professional? Standards really have fallen.
No, human nature does
That sub cals uses fuel cells, because WW2 is over for quite a while and technology advanced.

But no, 2,800 km isn't short. Not feasible for commercial ise, sure, but then no submarine technology is commercially feasible. It is too specialized.

Hence, green fuel as the preferred, and most realistic, option to decarbonize shipping.
If you’re trying to remember a station in Shinjuku that was confusing with paper tickets, maybe you somehow used the Seibu Line? It’s “Shinjuku” but effectively separate from JR and Metro and a bit different as a result - or at least was the last time I needed it.

I don’t know many who ride that line unless living out on it or wanting to take the less crowded way to ‘Baba tho.
Such a wild take. Would you want to live in the 50s? I definitely would not.
It looks like the registers could have been identified fairly easily via brute force. They're physically close to documented GPU registers, and accessing them triggers a GPU panic, which is how the researchers attributed them to the GPU component. The attackers could have used that same test to identify the existence of the registers.

The part that's less easily explained is how they were able to reconstruct a custom sbox table to execute the debug code. That's where the "insider threat" insinuations are strongest, but personally I'm not convinced that it precludes any number of other plausible explanations. For example, the attackers could have extracted the sbox from: older firmwares, OTA update patches, pre-release development devices (probably purchasable on ebay at some points), iOS beta releases, or a bunch of other leaky vectors.

The researcher basically says "I couldn't find this sbox table in any other binary where I looked for it." Well, that's not necessarily surprising since it appears to be Apple specific and thus there are a limited number of binaries where it might have appeared. And as the researcher notes, this includes now unpublished binaries that might have been mistakenly released. It's totally plausible that the attackers got lucky at some point while they were systematically sniffing for this sort of leak, and that the researcher is unlikely to have the same luck any time soon.
"We can't have any people-learning; we're strictly a machine-learning shop!"
Nice pitch with the quantum!
Perhaps Apple should provide research devices directly to the US's and China's intelligence agencies and pit them against each other to help close more vulnerabilities. The agencies can decide on their own where to strike the balance between offense and defense, but I suspect it would lead to more closed vulnerabilities over time.
How many hundreds of billions in subsidies would be required to once again, for the nth time since the 1950s prove that nuclear is truly dead outside of luxury niche applications like submarines?

Today renewables are cheaper than fossil fuels which in turn are cheaper than than nuclear. Through pure economic terms the world is steaming towards a new cheaper energy equilibrium based on renewable energy.

We are currently in the chaotic transitioning phase but that will of course shake out. Sprinkling some luxury nuclear in top will have miniscule effect.
Why use so many words when few do the trick.

NIR has been known to be useful for a while. Closer to 1000nm, penetrates deeper, but isn't as 'potent'

670nm is great, but you can notice it when it's on, ESPECIALLY if it's the only light in your room, which can be annoying.

It's true that NIR stuff is healthy for your eyes, but HOW much so, is up to debate.

I've bought 10 30 W NIR bulbs to no effect (range from 650nm-950nm), but on the other hand blue light bulbs have been helpful with increasing visual accuity (shorter wavelengths appear to your eyes as fuzzy, so your eyes push themselves to refocus more often, though at the downside of low dopamine levels and no will to do anything {maybe this goes away with time? But I've spent a few days doing nothing due to blue light and I like to be productive}, while red light has no effect on motivation, but worsens my eyesight (light appears in focus, no need to refocus, eyes get "lazy")

All of this anecdotal, but I really do like reading/learning about this stuff and NIR seems to be more fad than not in real world situations
They’re referencing the recent shortage in them.

I passed through visiting old friends last week and they had them at some stations but not all.
I see no considerations for why my giving away stuff for free impacting other people's business means that my ability to freely give ought to be regulated. It is my property. I should be free to freely give of it. If that destroys a business then that kinda sucks, but why does it matter to my ability to engage in consensual non-monetary transactions with my property?
No drama, we've all done it: https://old.reddit.com/r/doctorwho/comments/86q7i/we_all_mak...

:)
what you really want though is fzf with C-r
> I picked a relatively large, recent, US based solar farm from the list of plants in wikipedia

> Agua Caliente Solar Project (2016)

Note that solar being cheaper than nuclear is a more recent phenomenon than 2016. The solar panel prices went from $0.63 to $0.26 in the time span between 2016 and 2022.

https://ourworldindata.org/grapher/solar-pv-prices?time=2002...

A better example is Spotsylvania Solar/Highlander Solar: https://www.sheppardmullin.com/assets/htmldocuments/PFI%2020...

Construction costs: $905m USD

Nameplate capacity: 618 MW

I couldn't find used capacity factors but Yuma is one of the sunniest counties in the USA while Spotsylvania county is further north and also has less sunny days. With an assumed capacity factor of 18%, one gets 111 MW.

$905m / nameplate capacity = $1.48 USD per rated W

$905m / used capacity = $8.24 USD per realized W
> Is the implication that once a device is EOL that a vendor should never release an update for that device again?

It seems typical for vendors use "EOL" to refer to end of support life, not merely discontinuing sales of the produce. Most notably, that's how Microsoft generally frames EOL for major Windows releases, hence expectation of jumps in PC sales corresponding to EOL of XP, 7, and 10.
Six, technically - if you count the nearby Seibu Shinjuku line. ;)
What do you think would need to be different for it to be considered meaningful to you?
You were not forced to do that because TOTP is manageable via password manager.

TOTP and yubikey are excellent technologies that way. They allow two-factor authentication without breaking privacy.

Everyone within the sound of my voice: get a password manager. It sounds like a hassle but it makes your life infinitely better. It allows you to keep your life private and more secure than it was while providing more convenience than you had before.

I recommend KeepassXC. Open source, audited, fully featured, and can be paired with one of several different kinds of syncing technologies depending on your risk appetite.
I looked it up, and the extended security updates for Google Pixel is only a recent change:

Pixel 8: released in 2023, updates through 2030
Pixel 5: released in 2020, stopped getting updates in October 2023.

https://support.google.com/pixelphone/answer/4457705?hl=en
I would strongly suggest looking into something other than programming for a little while. Tech Support/Admin work will be easy to do with your tech background. This will stretch the time you have to get certified in AWS and learn a language in depth.
What drives a sloth's ritualistic trek to poop?
a16z deploys capital fast into AI companies. They've already funded several companies running off the shelf open source models.

Find the latest flashy thing on Twitter / GitHub, spin it up with a waitlist, then send a16z your deck.
Apparently as of ~last week or so regular Suicas have started popping up again.

But it was never a problem to get one at the airport, which where a vast majority of people should get them.

If you skipped that part, it was quite painful in the past few months because of the IC chip shortage.
An attacker is far more likely to hide behind puny code or a misleading subdomain like microsoft.com.orders.com because that adds more legitimacy than a url shortener.

Professional uses of QR in advertisements would use URL shortening on their own domain, eg https://o2.com/trainpromo2 as that way they can demonstrate authenticity as well as owning the telemetry themselves.

Table service in restaurants don’t need to worry about data density because they have their customers literally sat at the table with the QR code in hand (it doesn’t get any easier to scan a code than like that).

If you’re dealing with a restaurant small enough not to have anyone manage the design then you can also bet that restaurant isn’t worth the effort targeting for this kind of attack. Think about what it would entail:

1. Having someone physically visit the restaurant

2. Measure that QR code so that you know the dimensions of the sticky label you want to print

3. Now visit that restaurant dozens more times to replace the existing QR codes. Each time hoping you get a different menu and/or table

4. Pull of this replacement in a short enough time so that people don’t report that their QR code does something different before you’ve captured enough devices (whatever your attack might be).

5. Hope that the owners don’t notice that the QR codes are now stickers (eg they don’t sit flush on the menu)

6. And hope that they don’t refresh their menus regularly. Which might even just happen because someone spilt the QR code / kids have drawn on it accidentally/ etc

7. And all the while, hope that you don’t get caught. Because restaurants will usually have cameras up. You better also not pay for your meal on card too.

It’s such an inefficient yet also high risk and short lived attack that it’s just not all that likely anyone would bother.

I do get the concern about opening up random websites, but rather than singling out QR codes specifically and letting everything else rot, I suggest we look at the root cause of the issues here. And that root cause isn’t QR codes.
> If you only use/develop FOSS stuff as RMS intended, you can use SSPL without an issue.

No, because "FOSS stuff as RMS intended" explicitly excludes the SSPL.
It would cost $29,351.07 to buy every Lego set and Minifigure released in 2023
The Safari vulnerability wasn't necessary (the device was completely owned before that), and was really just a "nice to have" - it allowed verification of the targeted user and, presumably, customizable malware delivery. From the article, if you look at the bullet points under the Kaspersky diagram of the exploit chain:

> After exploiting all the vulnerabilities, the JavaScript exploit can do whatever it wants to the device and run spyware, but attackers chose to: a) launch the imagent process and inject a payload that cleans the exploitation artifacts from the device; b) run the Safari process in invisible mode and forward it to the web page with the next stage.

In other words, if looking at the diagram, https://cdn.arstechnica.net/wp-content/uploads/2023/12/trian... , it's completely "game over" once you get to the skull icon in the lower left corner, and the Safari exploit is after that.
https://www.pasmo.co.jp/visitors/en/news/pdf/2023731_press_r...
Systemic Regulation of Artificial Intelligence
I think that’s as far as the grand scheme of a project goes, coding productivity is a myth.

Can a python or ruby dev bang out Advent of Code faster than I can in zig or rust? Sure. Is advent of code representative of a multi-year long business system where coding is 15% of the time cost at the high end? Nah.

When you look at the actual bills and where the actual time goes, spending time on optimizing the code pace of a MVP is simply not valuable. You’re saving a small percent of a small percent of time at the beginning to accept using languages that are not know for their steady state support ability.
I highly recommend you branch out into TypeScript, Node and React -- all of which are relevant in this job market AND, most importantly, are easily accessible from a PHP background.

There are some Laravel openings but it's still quite niche as well.
Open-Source Mapping of China's Energy Infrastructure
If a readily available device can answer the questions so easily, then those questions wouldn't be suitable for a professional exam because they could use the same device for similar tasks in their actual work too.
I'm not sure what you mean. 4gb is 31-bits (<4 bytes) of address space. If each page had 32K of address space (15 bits), that would require 64K different pages, which just requires the remaining 16 bits of the 31 bits to identify it. So the block address is just 2 bytes long, not 32K bytes.

For these paged systems, you typically swap in the the page you're interested (iirc, gameboy did it by writing the page number to particular memory addresses) and then work with it for a while, and often execute code directly contained in it, which will eventually lead to loading the next page you need when you need it.
I don't think its rate limiting because I'll go for days without posting and the first post is downgraded. I have never seen a "you're posting too much" message.
So it seems they discovered an anti-dote to roaches, but not to bed-bugs.

Is there any hope? C'mon science, do your thing!
Thank you, we've put a ton of work into this. Not only are your mailboxes encrypted with SQLite using ChaCha20-Poly1305 [1], but you can also now add an OpenPGP key [2] (for double encryption).

We support SMTP, POP3, IMAP, API, webhooks, regular expressions, and more.

[1]: https://forwardemail.net/blog/docs/best-quantum-safe-encrypt...

[2]: https://forwardemail.net/faq#do-you-support-openpgpmime-end-...
I mean, this is already an extremely complex chaining of exploits that requires extremely sophisticated research. I can assure you that this is not being used on the average person.
That is good info, but why does Apple make it non obvious on how to reboot an iOS device and AFAICT there is no way to schedule a regular reboot.
Summary: Who Not How by Dan Sullivan and Dr. Benjamin Hardy
Based on everything he has said to date, he would just cover a few square km with solar. In that one talk he said building enough solar to power the entire world is similar in effort to all the cars that have ever been built. So we can certainly do it.
The first thing Eisenhower did after taking office was to cut the defense budget. His administration built nukes, besides fitting with the administration's policy of massive retaliation, because nukes are cheaper than conventional weapons, pound for pound.

There is a thesis to be written (if not already existing) on how both Truman and Eisenhower viewed tactical nukes as, well, very large conventional weapons and potentially usable as such on the battlefield, while still viewing strategic nukes as something different.

The thesis would deal with both presidents' military backgrounds affecting their opinions, and how being intimately involved with the discussion of just how much more powerful thermonuclear weapons are than fission weapons affected taking such a nuanced view, an ability that I think has been lost to later generations (I doubt 5% of today's politicians, let alone citizens, can explain the difference between fission and fusion bombs I'd be amazed).
The grid has wild differences between day and night. Who cares if you can run at 100% when no one wants the power because everyone is asleep?
Please don't call your thing "open source" when it's so obviously not in compliance with the OSD.
Are you really saying Apple should actively break interoperability with old software?
On this topic, is there a definitive fan edit for The Hobbit? That’s also too dragged out over 3 movies.
For swimming, you can get prescription goggles. That makes snorkeling a completely different experience, you can actually _see_ things on the seafloor.

For other types of sports, you can wear contact lenses. Even if you're not comfortable wearing them all the time (I certainly am).

Last year I decided to get a laser eye surgery (PRK), and I'm now enjoying clear vision without glasses.