skysight-inc/HackerNews huggingface dataset:
CVEs have been filed for e.g. memory corruption issues with no known exploit or even plausible path to exploit since time immemorial, or at least since time-since-CVE-was-invented. The idea that there is a burden of proof or certainty required to number something with a CVE is a commercial vendor invention.

It's easy to see why people want CVE to work that way! It implies that people numbering potential security issues are doing a fuckload of work for you. But that work isn't free, and CVE has other purposes in the research community. So, no, I don't think anybody is going to talk the kernel people down from this. They're right.

If you want a feed of "CVEs" that clear a plausibility bar, put that together yourself. A lot of people would love to consume it and sell it to their customers; you'll get a lot of uptake.
harder due to convergence issues
> The alert was sent to the phones of TikTok users whose House members were on the Energy and Commerce Committee, according to a person familiar with the campaign.

That level of mobilization by targeted message is not going to go over well. In fact, it's proof (to some) that TikTok must be decoupled from China.

The medium is the message...and this very well could be a bad decision on TT's part.
Another awesome aspect of X11: Xembed. Since it's "windows all the way down" you can have apps (rather than the window manager or root window) be the parent of other app windows.

Two nifty examples of this:

* https://tools.suckless.org/tabbed/

* https://surf.suckless.org/
Game mechanics aren't copyrightable, right? So unless these clones copied the code, aren't these takedowns invalid?
All that said, parts of UC are indeed on federal land. Berkeley Lab, for instance.
Exact Sums over a Group Action
> It's what's more important? Doing fan service for fans who will revere your grocery list because it brings them joy? Or leaving behind a body of work you're really proud of and is widely respected?

Since you'll be dead and utterly unaffected either way, I'd go with pleasing the fans. Also, it's really a freebie for your legacy if it's understood that it was written under the influence of dementia and published posthumously.

On the other hand, if I thought it would be depressing or unpleasant to fans more than please them, I would want it destroyed.

But that's what I'd do. Terry Pratchett had every right to make his own decision on this. Even with dementia, that's 100% his call. (Of course, his assistant should make sure he was fairly consistent on this point, when most lucid.)
What value would you be adding over the existing free resources that explain how to do those things?
Thanks, do you have any of it publicly available or would you prefer an email?
CVSS as practiced sucks sometimes, the rules around not chaining vulnerabilities to up a score are rarely followed, but as specified it’s actually a good system.

Undercutting my own point though, it doesn’t hurt to rerun a calculation if you think the public vectors is “lacking” or if temporal/environmental metrics matter in your context
Yes, adding max-use counts and expiration dates to links can mitigate against some browser-history snooping. However, if your browser history is compromised you probably have an even bigger problem...
The left and the right live in completely separate bubbles. You may not be aware of this story, but the right is.

See https://www.faa.gov/pwdp . The Federal Aviation Administration has set a target of hiring people with "severe intellectual disability".

> The Secretary of Transportation has set a hiring goal of three (3) percent per fiscal year for individuals with targeted (severe) disabilities.

> Targeted disabilities are those disabilities that the federal government, as a matter of policy, has identified for special emphasis in recruitment and hiring. The targeted disabilities are:

Hearing (total deafness in both ears)
Vision (Blind)
Missing Extremities
Partial Paralysis
Complete Paralysis, Epilepsy
Severe intellectual disability
Psychiatric disability
Dwarfism

Edit: If you're into podcasts, listen to this (partial) episode of Blocked and Reported about a different FAA scandal about flight controllers training (the tests were changed to promote trainees who hate science and love risk): https://www.blockedandreported.org/p/premium-the-faas-bizarr...
How do you evaluate the quality of applicant screening?
Sorry for several edits, I got a bit worked up. :)

Your parent is singling out a group that absolutely are NOT doing their best, not in a unobtrusive way anyway.

Your empathy is cute but does not align with reality and, if anything else, betrays how privileged your life is that you can afford it.

Case in point: I live in 5 minutes walking distance from a major road artery in the capital city I inhabit. I have saved both and my wife's lives by not trusting the green light and looking both directions, twice now, because my life experience has unequivocally proved to me that in fact everyone is not doing their best at all. They are a-holes who want to get back home as quickly as they can after work and it does not even cross their minds that they can forever destroy a family while doing so. I watched interviews after such... specimens (I am being very generous here)... are caught in (or after) the act. Of course they cry and exclaim how their life is over if they get indicted etc. etc., but they never thought about it beforehand. Classic.

These people don't deserve empathy. They deserve a lifetime ban to operate any machine more complex than a coffee maker. They belong on the fields or the mines. We definitely need more labor there and they forfeit their place in civilization by proving that they are unable to be trusted with something trivial, something that you and I can deal with while being sleep-deprived and dead-tired. Honestly, how difficult it is to operate a car and follow the rules? I had a friend driving instructor when I was 17 and he told me he'd give me a license any day after I drove him around the town 4-5 times. I am not bragging; I am actually saying that no, driving a car and following rules is so easy that I am convinced that I can train a macaque to do it well (and there are videos of monkeys driving golf carts pretty well out there, by the way).

Looking after your own arse is a better reaction so I'll disagree with your blanket empathy stance.
Lets say you could take someone's remains and boot them up in a laptop and peruse all their memories from when they were living. Accept for a minute this piece of science fiction, but let's say the technology was there, it would just be about respecting or not the dead person's privacy. The ethics to me sound similar, if wishes are clearly known or can be inferred by a standard of reasonableness (like in the case of memories), I think the person's privacy trumps society's curiosity.
In some ways, there are a lot of similar aspiration with the Erlang actor model!

A major barrier to Erlang is adopting a new programming language, development tooling, etc...

What we aim to do with Dispatch is bring those distributed programming superpowers to mainstream programming languages that are developers are using.

A major conviction we have is that it should be possible to adopt Dispatch incrementally in an existing application.
It wasn't a grey area. The definition of who is an independent contractor vs an employee is pretty clear in US and especially California law. The only grey area is Uber just saying that all of their workers should be considered independent contractors because everything was through an app. Courts didn't buy the "it's OK because of an app" argument, so Uber and Lyft bankrolled a citizen initiative in California to amend the constitution (Prop 22) to declare that workers for app-based ride-sharing and delivery platforms are independent contractors and not employees.

So for years, they operated illegally, gaining market share subsidized by VC funds and wage theft of driver's benefits, then changed the law to legalize what they had been doing from the start.
I agree in general, and with the idea that effectfullness of compile-time calculations should be strictly limited.

OTOH reading an input file is one effect that a compiler inevitably has anyway. A clean way to load and interpret an input file as a part of comptime computation would be very helpful, without the problems of arbitrary effects.
> I suspect if you made your oatmeal with milk instead of water, it would help a lot, but I can't do this from being lactose intolerant.

I dunno about that: milk contains a lot of sugar. Water doesn't. You could add 3 tbsp of cream for an extra 150 calories (no protein, no sugar) vs 1 cup of milk at 150 cals, 8g protein, 12g carbs.

I add almond flour to oatmeal and protein shakes for an extra 100 cals of fat.
> These apps are free to download

Yes but you aren’t truly free to choose which app you download. You have to use the one being used by the people you want to message. That is of strong benefit to incumbents.
Really shocking to see so many comments here arguing we have a right to see/read/hear private, unpublished work that a deceased artist left clear instructions to destroy in the event of their death. Do we get to look at your personal journals, browser history and hidden photo gallery once you kick the bucket? Or is it only artists who must relinquish their privacy and last wishes to satisfy the morbid curiosity of the general public?
GDP growth is utterly broken from increased government spending. It's not sustainable.
> I can't remember the shortcut, it must have been something like alt+-.

It's alt+SPACE. Very handy if you manage to get a window off screen, you that menu almost always shows up on screen, and you can select Move (possibly by hitting m), and then move (or drag) your mouse and the window comes back.
How did you do this? I mean the combination of prose and code samples. I would love to see more.
What an amazing magazine. I used to order copies from the library of congress every month via my local town library here in the UK. They would always show up eventually although a month or two out of date. I would have been about ten at the time in 1978. My dad got me into them. I have no idea where he heard about it. Maybe via amateur radio probably. As a kid I can't describe the sense of wonder in the air back then. Something was happening for sure. It's so nice when posts about these old publications occasionally show up on here.
Good luck to those launching Sarmats too as they'll have to stop the Tridents, Minutemen, M51, etc. It's important to remember that while they don't make weekly threats, there are three NATO countries with land/sea based nuclear weapons.

Realistically, there's no defending from nuclear weapons. That's why MAD, while crazy, works.
I work at a biotech startup where the founder sold a previous company after being "encouraged" to do so by CFIUS (https://en.wikipedia.org/wiki/Committee_on_Foreign_Investmen...). That company had taken a large investment from a China-based investor. The concern was about sensitive health info of US citizens being in foreign hands.
Yep, was definitely aware. It just seems like of all the projects at HARC, this is the only one that branched out from Alan's earlier ideas. The set of papers on https://worrydream.com/refs/ gives a good idea of some of the inspirations behind DL.
FLTK was hidden away in there, yes. Most of the article seems to be fluff, though, so the mis-characterization is rampant.
https://github.com/NightscoutFoundation/xDrip

xDrip+ is an unofficial and independent Android app which works as data hub and processor between many different devices.

It supports wireless connections to G4, G5, G6, G7, Medtrum A6, Libre via NFC and Bluetooth, 630G, 640G, 670G pumps, CareSens Air and Eversense CGM via companion apps. Bluetooth Glucose Meters such as the Contour Next One, AccuChek Guide, Verio Flex & Diamond Mini as well as devices like the Pendiq 2.0 Insulin Pen.

Heart-rate and step counter data is processed from Android Wear, Garmin, Fitbit and Pebble smart-watches and watch-faces for those that show glucose values and graphs.

On some Android Wear watches, it is possible for the G5 or G6 to talk directly to the watch so it can display values even when out of range of the phone.

The app contains sophisticated charting, customization and data entry features as well as a predictive simulation model.
Great post! I suggest adding a link to Dispatch earlier in the body. Right now the reader has to get all the way to "You can sign up to the developer preview for free today at https://console.dispatch.run !" before they know where to click (or maybe I need to get new eyeglasses!)
What would encrypting the project name accomplish? Typically if you’re trying to secure a S3 bucket you’ll do that via bucket settings. Many years ago you had to jump through hoops to get things private, but these days there’s a big easy button to make a bucket inaccessible publicly.
It and automation have always been coming. However, it will be here one day.
nothing prevents government from creating such law or executive order if necessary.
How much engineering time and effort is Apple going to spend on pure malice?
Yes, but the SK1’s is a little bit more centered. I haven’t found anything like it yet.
100% agree, though I don't know why we couldn't talk about it.

Boeing is a massive corporation with both public and private contracts, employing a huge number of almost entirely well meaning employees. The government has allowed too many carve outs and exceptions as the company grew and now have no choice but to stay mostly quiet while the cracks in the company leadership and potentially culture put not only passengers and the airline industry at risk, but the very military we may need to be at full fighting force if Russia, China, Iran and co, etc decide to escalate.
The part where they have like 3 bytes of memory so you switch from extremely high latency of RAM to laughably sluggish latency of USB serial. I think there's also no support below 8 bit quants, which you'd really need.
I would be interested in seeing a professional vulnerability researcher of any note jumping in here to make a defense of CVSS. I'd rebut, respectfully, if they did. But I don't expect it to happen, despite that there are plenty of researchers on HN.

I feel like I'm on reasonably safe ground when I say that my take on CVSS is a mainstream one in the field.
The thing about power laws is that they assert an underlying mechanism that causes the power law, but they look very close to an exponential or other long-tailed distribution, and it's not so easy to distinguish between them empirically.

I recall reading a paper (but I can't find it right now) that re-evaluated a bunch of datasets that were claimed to exhibit power laws, and found that they actually were more closely aligned to an exponential distribution or other.
I don't think there are any European countries left where some long-distance railway company has an actual monopoly.
You have it backwards. The current policing strategy is the cause of the reported crimes mix.

People will report crimes that:

- they think the police will do something about, and/or

- they need to report in order to file an insurance claim

If your car window gets smashed and you're not going to report it to your insurer lest it raises your premium next year, and if you know the police aren't going to investigate, why would you report it?
This reminds me of this interview I watched 20 or 30 years ago. It was a guy (Canadian maybe?) who was developing a super cheap powered hang glider (for lack of better words) with machine guns on it. The idea was to make something so cheap, you can overwhelm fighter jets.
I have an XFCE theme you can borrow: https://mastodon.social/@rcarmo/112055833396413997
> How will AI reduce the ads we see?

> By giving us the content we want, and nothing more. This is already happening — look at ChatGPT and Arc. But the exact mechanics need spelling out.

This doesn’t make sense or answer the question. Users will always be moving to new ways to consume content, and the ads will always follow where the users are. Just because some content is deliver via AI doesn’t mean ads can’t be there too. In fact - a large portion of programmatic ad buying is controlled by AI bidders. So placing ads in AI generated content makes the ads work even better, as AI can generate content and also serve that content to ad buyers in real time for targeting.

There is no actual explanation of why AI somehow means less ads. From my perspective, it means more ads.
> You may dislike it, but EU law only applies in the EU;

Even then, that consecutive 60-day limit sounds bizarre. For instance, someone who has dual citizenship could legitimately switch between an EU and a non-EU country every single month. Why shouldn't that person have access to these "Interoperable Messaging Services" when in the EU?
The secrets are which secrets had been stolen.
Ask HN: What do you use for interactive visualization of large data sets?
Any data scientists here that communicate their results or data sets through interactive plots? I was wondering what your favorite tool or package would be for this task.
Working mainly in python, I often find myself using plotly or bokeh but find both packages' syntax clunky and unintuitive. Moreover, none of these scale well to large data sets - most of these solutions can not handle a simple 2d scatter plot with over 10k points. Commercial tools like Tableau are an option, but at the cost of some flexibility.
I notice it on TV as well.
As a sibling comment mentions, it depends.

If you want to learn more, there is a thing called clean-room development which is a process used to reduce the legal risk of copyright and intellectual property violations.
Nothing wrong with that, though.
> Do you have their names memorized? If you met one dining with their family at a country club, would you know what they did?

> Their personal reputations are still largely intact.

Well person who would be attending country club would know that they raised shareholders value and more than likely helped to them to gain X millions of Dollars.
https://covid.cdc.gov/covid-data-tracker/#datatracker-home

17,310 admissions, down 10.3% week over week

2.1% of deaths, down 8.7% WOW

1.5% of ED visits, down 14.6% WOW

7.4% of tests are positive, down 0.9% WOW

None of those numbers indicate growth. None of those numbers indicate a significant proportion of the population. I'll give you geography, but that's also characteristic of an endemic illness - distributed across a large geographic region among a small percentage of the population with relatively little impact.
My Apple Vision Pro Demo Experience
I have not seen one in the Midwest yet. Pickups are very popular here in general
This is great, going to incorporate this to our roadmap.

What else should an IDE integrated coding copilot be able to do?
A recent presentation on the architecture

https://youtu.be/WQDMKTEgQnY?si=W0E9Kq6P280l3Wcl

IMO we still need an MLPerf submission or similar to really understand if this is more efficient or more efficient only if you also want to minimize latency.

Nvidia has pulled enough rabbits out of the hat when it comes to MLPerf I’m still not convinced they can’t work some CUDA magic and undercut them on efficiency.
How about the agreement not to expand NATO? Or Minsk agreements? It's so funny that people talk about Article 5, but don't really know what it really says! If Russia attacks Poland, let's say, because Poland gets into Ukraine, you think America will start a WWIII, because of Poland? Get real!
These are great suggestions, thanks for sharing!
Canadian Dept of Defence and Armed Forces Artificial Intelligence Strategy [pdf]
We can look back in time to see that, ultimately, Google's adoption of XMPP was bad for XMPP.
> Prejudice

Yes. What other form of insurance could I use here?

> I have a dual citizenship, [...] I am not my governments’ property.

No one is the property of their government but you have openly decided to split your allegiances. Anyways, you can only have this dual citizenship because both of these governments have decided to allow it, and that could change tomorrow.
Can I hide all videos with “Minecraft” in the title?

Or anything that references MrBeast?
Perhaps https://en.wikipedia.org/wiki/The_Night_Land
It depends. If you're constrained to one chip and one platform you can characterize or you can estimate the characteristics of a float that matter in your application. In some applications like embedded that's actually totally fine, and modern embedded chips can often do floating point as fast or faster than they can emulate fixed point to work around floating point's drawbacks. On one project I worked on they originally wrote everything fixed point out of fear that floating point would introduce some deleterious effect. But in the end they rewrote parts of the project using floating point to no ill effect and great performance improvement. And there were features of the product that they had to strike because the rewrite needed to support them couldn't touch certain sensitive areas of the code that had been tested extensively in the 2 or 3 years of development. It would have been much better to evaluate the assumption that floats are bad early on in the project and make the decision based on real information. The heuristic they were applying ended up costing part of the product that was strategically important.
In general you can't copyright game mechanics, but trade dress laws provide a loophole around that. You can legally protect how a game is presented, and in some cases that's intrinsically tied to the game mechanics enough that you can't really get around it, which is how The Tetris Company has been able to effectively lock down the exclusive rights to the Tetris mechanics and successfully sued those who tried to make a Tetris clone without their approval.
This sounds like a big security flaw in the system that uses access links. Secrets should not be logged (in most cases).

When opening a Dropbox/GoogleDocs/OneDrive link, I expect the application not to route them through potentially unsafe CDNs.
Well then we should further separate the stupids: (1) those who are not actively malicious because they are burned out or even with awful health conditions and cannot bring themselves to be more productive and benevolent but still need the paycheck and (2) the a-hole MBAs or careerists who simply use the company as a trampoline to a better paycheck somewhere else and to tell with the consequences if they set back 1000+ families' financial well-being.
But what good is 2B for? I didn’t see a use case tbh
Why Facebook doesn't use Git
Vendor offering citations for purchase latest bad actor in scholarly publishing
The British once believed that pretty much the entire world population were their subjects (as have many other empires), but we didn't let that stop us.
The rule of leniency
If I made a scrabble app, is that not allowed? How come Wordfeud, words with friends etc are allowed?
There's no way such a thing could be enforceable, right?
Nginx Bad Bot and User-Agent Blocker
Yeah, I've also started having those info bars on subsystems like Intellisense crashing when trying to popup the context menu to present refactoring options etc. It began less than a year ago.
> replay

When you want quick response to keypress, and yet app state also depends on high-latency ML pose or gesture analysis waiting on camera frames, and spoken "Launch the missiles!" can become "Lunch is mussels! In butter!", replay with improved understanding of past input is nice.
How to Load JSON, Avro, Parquet, or Anything Else in PostgreSQL
Nothing except the Constitution. Seems like an open and shut 1A case.