skysight-inc/HackerNews huggingface dataset:
> Notably, SyzScope has classified 183 bugs out of 1,170 fuzzerexposed bugs as high-risk. KOOBE has managed to generate 6 new exploits for previously non-exploitable bugs.

While the rate is low it does show that some bugs were indeed exploitable without that being known to the kernel devs. If an attacker is willing to invest more time than the kernel devs combing through commits to find vulnerabilities in the some older stable kernel then a big unlabeled pile saying "there's probably a vulnerability in there, go update" is correct.
Location: India
Remote: Yes
Willing to relocate: Yes
Technologies: NodeJS, Typescript, Go, C++, Java, MongoDB, Redis, ElasticSearch, Kafka, GraphQL,gRPC, Protobuf, PostgreSQL, Kubernetes, Docker
Résumé/CV: https://flowcv.com/resume/s9w7gs1vmc
Email: sainikaran2222@gmail.com

I have over 4.5 years of experience, with roles at Lyearn and Amazon, where I focused on developing and improving software systems.

At Lyearn, I was a Software Engineer III, working on making systems better and more cost-effective and growing a company from 0 to 1. At Amazon, I was part of a team that worked on making sure ads were relevant and safe. I've worked with technologies like NodeJS, Typescript, Go, C++, and Java, and I'm familiar with tools like MongoDB, Redis, Elasticsearch, and Kafka
> The thing is, sure ARRI is expensive, but depending on your production losing a day might be more expensive than buying a whole new camera.

This is generally true when purchasing equipment for personnel. If you have to purchase three new €2500 family MacBooks because of a burst pipe, that’s mighty expensive. Even for a small IT company, that’s just half a month’s wage per developer.

I know that with expensive camera gear we’re talking about €250 000 per camera or whatever, but you rent those.
As a brit who didn't encounter DDJ until the pre-internet early 90s, the magazine wasn't just exciting because of the depth of technical subjects that it covered [1], but it also felt exotic. The pages were a weird American size rather than A4-ish, the paper was differently glossy, the writing style was different and more relaxed [1], and the ads hinted at all kinds of stuff happening somewhere on the other side of the ocean. I had similar feelings about Wired and Mondo 2000. I miss them.

[1] Compared to the domestic UK magazines that were available at the time: Computer Shopper. Personal Computer World, etc.
Honestly they had it easy because of inertia and because they managed to build a successful business with cloud technology.

Had they failed with Gaming, Office365 + Azure the same way they failed in the mobile market, Microsoft would not be the same company as it is today and as it was 20 years ago.
It’s patenting compressing the raw photo site values before debayering, which saves space and in theory allows for better, non-realtime debayering algorithms (more relevant when the patent was filed).
> This is an enemy who would kill more than 10,000 if it could

And yet, it's Israel that has killed 30-50k... so far.

> who deliberately positions military hardware such as rocket launchers in and around civilians and civilian infrastructure

Gaza is a very dense, urban area, so it's kind of unavoidable. And you know as well as I do that these "rockets" are barely more than overgrown fireworks - they are mostly symbolic. That said, I do feel like Hamas are fools for continuing to fire them - I understand they need to resist blockade, occupation and dehumanisation, but I just can't see how this could possibly help.

> We know this is true because Hamas leadership has been saying this for decades

Except, thats not really true, is it? Hamas have been openly saying for several years now that they have no beef with people of the Jewish faith, they just want their homes back.
The Monaco Royals Whose Deals Have Brought Peril to the Palace Doors
*…are often confidently incorrect
This is similar to how Win32/GDI layout guidelines (pre-win 10) worked.

Windows says reference font dpi is 72 and reference sizes for buttons, list, labels, etc is specified at 96 dpi, then you're supposed to use actual dpi/ref_dpi and scale things according to that.

Then you set DPI scaling per monitor v2 in manifest.xml and catch WM_DPICHANGED message and recompute scale factors and presto, perfect dpi scaling across any monitor at any fractional scale.
For an individual employee that usually falls into the bucket of "While I have no explicit memory of such an event. In the event that someone had instructed me to perform such a task I would have performed the task consistent with the training and procedures provided to me"
The things with SQL is that it's more like parroting RelAlgebra instead of trying to implement it with a comfortable syntax. All the bad ideas of the Cobol language generation come with it.

And, like you said, SQL kills one of the core ideas of RelAlgebra: composability.

I find it very sad that behind the scenes in most relational DBs, the mess off SQL gets translated to the operator language which the optimizer works with. Now, /that/ language is pure relational algebra complete with nice mathy properties.
I will repeat, again, what I say when I see people commenting about this with such bad take.

It is the US companies that do this. The worst cookie banners all come from US companies.

Examples: "Admiral" one of the biggest cookie banner company is from Florida. Their banner is absolutely annoying, made to trick you into consenting to be tracked.

Many USA healthcare sites, refuse to work entirely if you decline marketing tracking cookies (yes you read that correctly, healthcare sites kick you out if you want privacy about your health).

The crazy thing is, the law never said you must have a cookie banner, what the law says is: you are not allowed to spy on people, UNLESS they allow it explicitly. So USA companies that are not big on privacy for some reason, concluded that annoying cookie banners where is easy to accidentally give away your privacy is a great idea.

If your site doesn't track users, you don't need any banner, not even a disclaimer.

Just don't spy on people, and that is it. I wonder how people from USA can still claim with a straight face they are "the land of the free", when they aren't free to not be spied upon (by their own government even, as Snowden proved).
Well, that will likely not be a thing due to GDPR.
I believe we are well into the "not fly legally" territory when it comes to Boeing and the 737 MAX
Indeed! But it is beneficial to have additional formalisms; it gives you hints about what kind of modifications to 'normal' physics might be possible.
I wouldn't say they are the least evil, but they are working hard to lose that "bad actor" reputation they have been given over the year regarding privacy.
UpCodes (YC S17) Is Hiring SWEs Across the Americas
Can’t speak for @hef, but I’ve got a sketch of a sketch of a set of actionable policy prescriptions at sibling.
> it says on the box "designed in California".

And on the next line, "Assembled in China".

> If they put this sort of effort into inquiring how they mucked up their own companies then they might make some actual progress.

Here's the thing though, the point of an anti-trust investigation is that the market dominance might, possibly, be due to something other than people liking it.

I don't have a problem with the specific things Apple's getting criticised for in the Epic cases[0], but it's really unavoidably obvious that a lot of people do.

[0] And that's not as a fanboi: I do have a problem plenty of other things they do and fail to do, just not these specific things. E.g. Safari as the only browser engine was obviously going to bite them, even though the browser wars are much less important today than in the 90s.
> Apple used the judge’s reasoning

Using an American court's decision as a basis to try and break EU law tends to very well over on our side of the pond. Good luck with that.
D(HE)at: A Practical DoS Attack on the Finite Field Diffie–Hellman Key Exchange
At its core, FUSIONL AI is not merely a tool or a platform — it is a paradigm shift. It transcends traditional approaches to learning, offering a revolutionary framework that promises to reshape the way we acquire knowledge and skills.
Smart for Nikon as they've been losing relevance somewhat to Sony/Canon, and not had a great video offering. So this immediately makes them a competitor in the space.

Given how the stills & cine markets have contracted and converged, its unlikely Nikon & RED would survive in a healthy fashion as standalone for say the next decade.
English is indeed a well intentioned error, but why does SQL look like that?
Yeah, but iPhones don't fall from the sky with hundreds on board. I'm hardly a defender of Apple but I don't think it really matters here
But not like that.
CVE is just a identifier. CVSS should assign a score.

I would require all CVE to ha attached exploit demo code. Otherwise it's shouldn't be CVE
> They said israel should dismantle their colonies

Sure, but the implication was that Gazans were then "free" with self-determination; I wanted to point out that the situation is not so clear-cut.
You could address the accusation directly rather than diverting with labels of "bias" and "propaganda". Tell us all how Hamas, as an incorruptible bastion of truth and honor, has neither incentive nor opportunity to inflate civilian deaths.
There is evidence that they actually can't reason:

https://arxiv.org/abs/2311.00871

https://arxiv.org/abs/2309.13638

https://arxiv.org/abs/2311.09247

https://arxiv.org/abs/2305.18654

https://arxiv.org/abs/2309.01809
Breaking PWAs is the most recent example but the most well known was their (now dead and buried) attempt to circumvent USB charging requirements.
As an aside: I love how the people complaining about "identity politics" are often the ones engaging in a blatant form of identity politics by painting a picture of a white median income working class person who doesn't care about social justice (which by the way is often an ahistorical caricature and is often used as a way to infantilize industrial workers, especially when the trope is invoked by politicians with academic backgrounds themselves).

That said, I'd say both the FDP and AfD heavily engage in hollow populism and that has benefited both to some extent so far and seems to be what BSW wants to copy. The AfD uses a veneer of middle-class conservativsm to transport far-right extremist ideas, the FDP uses progressivism and futurism to transport very narrow interest group politics (i.e. despite all its bold claims in practice it tends to mostly do exactly what its core donor demographic wants and will abandon its supposed ideals if they gain too much traction). I'm not sure what it is the BSW is trying to transport but they seem to have adopted a shell that is a loose amalgamation of an anti-progressive, anti-Green reactionary sentiment mixed with a vague pro-worker veneer that is at the same time offset by a lot of pro-business ("innovation", "future technologies", etc) language.

Just an example: in the party's programme they go to great lengths to explain that the Bundeswehr should not follow US interests (i.e. anti-NATO without committing to an explicit position of leaving NATO), should not maintain presences in foreign countries (i.e. no participation in joint operations), should not receive funding that is offset with cuts to social welfare (i.e. less funding?) but must also be "equipped appropriately" to defend Germany (i.e. more funding?). This reads more like a political Rorschach test than a political position: you can either interpret it as being anti-NATO, pro-Russia and asking for cuts to military spending or as being isolationist and asking for more accountability in military spending or as supporting the idea of a European military organization as a counter-balance to foreign interests or ... and so on.

I don't know what it is but I don't have the feeling I'd get a straight answer from her or her supporters either.
The thing you are missing is that once third party stores is allowed, the responsibility and security burden is also shared with those third party stores who have to comply the same way to EU rules or risk being fined and lose reputation the same way.

It is not Apple's job to protect its customers from third party stores malware. They just have to build a secure OS with a safe apple store while allowing third parties to provide stores.
> A US judge ruled that Epic has a pattern of “malicious compliance”.

What "pattern" are you referring to? There was one incident with Fortnite, and Apple banned Fortnite permanently immediately after that one incident.
> 30-50k... so far...

... according to Hamas.
There is such a thing as a private road. This is not about access. This is about money, and to think the EU - the geniuses who gave us all GDPR pop ups - don't have a intrinsic interest in devaluing Apples ecosystem is delusional.
Fair enough I guess from a terminology point of view.

If you try to lose your bad actor reputation hard enough, at some point you’re “reforming”.
Astrophysicists unveil new phenomenon challenging definition of white dwarves
Right, its like RED was in the middle market, which is a bad place to be in any product/industry. Too expensive for consumers, but still not able to command premium pricing from top end pros?
What happened to “believe women?”

You think in a sudden 1143 person civilian homicidal attack, going door to door, no rape happened?

“UN team says rape, gang rape likely occurred during Hamas attack on Israel”

UN: “The mission team received clear and convincing information that sexual violence, including rape, sexualized torture, and cruel, inhuman and degrading treatment occurred against some women and children during their time in captivity.”

https://www.reuters.com/world/middle-east/un-team-says-rape-...

https://www.un.org/sexualviolenceinconflict/wp-content/uploa...
It is worrisome to the extent they manage to shape the regulatory environment to cement their initial advantage.
If you're clever about how you blend models you can pretty much ensure that the performance of the (weighted) averaged model is strictly better than the (weighted) average performance of the models.

And increasing the space of possible models pretty much guarantees the performance will improve, provided you can still find a good enough optimum.
Rhea Space Activity to fly navigation payloads on lunar lander mission
Not a lawyer but it doesn’t look like any legal claim to me. They’re just telling you what they prohibit. I prohibit you from saying “balderdash”, but if you still do there’s not much I can do about it but stomp and pout.
Or, hear me out, people seeing this constructive feedback here could take it to heart and do better next time.
They mean the launch sites aren’t, because they are are obvious, high priority, targets for the enemy.
The optimizer does not work work on pure relational algebra. Or works on something very similar to SQL in the case of PostgreSQL.
Sal Khan Has Big Dreams for AI in Education. Are They Too Big?
Oh dear... I knew the US is one of the few to not recognize the ICC. Never heard of Section 2008. The wording so interesting, especially part covering also people of NATO allies: So theoretically, the US could sent Seal Team Six to extract a member of the Dutch armed forces from The Hague, and attack a NATO member in order to free a citizen from said NATO member. Theoretically, right after Seal Team Six delivered a wanted war criminal to The Hague. Well, I guess at least the strike is easy to position in that case...

Thanks for the throw back to the times of bad George W. policy and laws, almost forgot how bad it was over everything that happened since 2016...
> First of all, who intentionally writes code to contain SQL injection vulnerabilities anno 2024?

here's some ways it could happen:

- startup doesn't have ability to hire competent, experienced developers. they end up with rookies with potential but not enough experience to avoid security foot-guns, and/or experienced expert-beginner developers who have a low level of ability

- leadership doesn't value quality or security, so the company culture reflects this and focuses on what leadership values

- startup outsources development work and has no in-house technical capability to check quality or security of deliverables

- startup is pre product-market fit in a domain where security is less relevant, and security issues are less of a risk to the business than the more existential concern around identifying and de-risking a scalable, profitable business model. then suddenly the throwaway proof of concept codebase for the 7th pivot starts getting traction, and by shovelling features on top it is possible to win more customers
There's plenty of people in that position, but they're all working at huge corporations. Nobody ends up having to chase things like SOC2 and PCI-DSS without getting paid for it.

Why should unpaid volunteers working on the Linux kernel do compliance work for FAANG-sized companies without getting paid for it? If these companies want the reports carefully triaged, they can send some employees to carefully triage them.
Do you mean this part?

> what interest Palestinians have in regard to Israelis from your point of view?

I'm not sure I understand the question? Is it "how to Palestinians feel about Israelis?". If so, I don't know, but I can imagine how I might feel if I'd been dehumanised my entitre life; lived under brutal occupation/blockade my entire life, seen siblings carted off to be tortured in Israeli dungeons, had my father shot in front of me etc. Perhaps Israel should stop stealing land and homes, and stop their institutionalised dehumanisation of Palestinians; many Israelis seem to need de-radicalising.
'Love to see a graph age of the accounts posting here and their positions on this topic.
To make it more accessible to bon-programmers. It worked but it is unclear if it was worth the downsides, especially the loss of conposability.
> Like, if Israel doesn't want the Gaza strip/west bank, then why hasn't there been a two state solution?

My understanding is support for a 2 state solution is relatively low on both sides. Especially now that things have deteriorated, but even before oct 7 it seemed unlikely.

Even if Israel doesn't want Gaza, they still have an interest in not getting shot at. I don't think they believe that they would be safe from attacks if they left Gaza alone, and based on both history as well as current rhetoric from Palestinian leaders, it doesn't seem like an irrational fear.

> Like, fundamentally, oppressing the nationalist aspirations of the Palestinian people is never, never going to work, and October 7th will happen again and again until the Israeli people realise this, and make attempts towards peace (which the Palestinians should also do, but right now the Israeli's have a lot more power in the situation).

I think a fundamental problem here is historically, israeli overtures towards peace (imperfect as they may have been) have often been met with an increase in violence. Its hard to sell peace to someone when they don't have a lot of reason to believe it will actually result in peace and not increased violence.
I've seen the "too smart" get crippled by analysis paralysis, while the B student will optimistically plunder on to some degree of success.
"I don't know, yet. Hold on."

That's what I look for when I interview people.

Definitely not "I know" when they don't, or "I don't know" and a shrug.
Help Merge Xcode Like Mini-Map Section Headers into VSCode
The amazing David Gileadi has contributed Xcode like minimap section headers to Visual Studio code, the code is done and all the feedback from the vs code team has also been applied.

But the PR is not being noticed by the VS Code's Team and the David has been patching and keeping the branch update with the code for six months now.

Please make this go to the top in hacker news and in GitHub so that they notice it and merge it!

With a lots of thanks for your support!
Certain sentences are so well-crafted they give me joy. This one is a gem:

>I often wonder how many tens of billions of dollars have been paid to management consultants to solve problems that low-wage line workers had solutions for, only because a guy in a suit has a hard time taking a guy with dirty fingernails seriously.
For what it's worth, as I can see there have been some flak from the commenters here, I think we're probably on the same page. There are people who I do identify as leaders, and I probably wouldn't object to them calling themselves leaders... but I think the word has been so thoroughly captured that it's wise to use something else.

It's a bit like how there are some legitimate blockchain use cases (or so I've been told by a friend who works in the space) but you'd have to be nuts to identify yourself as a crypto-advocate with no further context.

>One last thought; I’ve seen it written that people join companies and leave managers and I agree with this wholeheartedly. For me, the simplest measure of whether a manager is a leader is the staff turnover on their team. That is one metric you simply cannot fake.

In the tech space, what do you make of high turnover? Do people get a pass if their staff average a 1.5 year tenure, or is this indicative of systemic issues?

Also, this would only be done by a true sociopath, but you can fake that number with sufficiently intense levels of psychological manipulation, enforced skill atrophy, and fear. Someone recently told me that they can't leave their organization before a contract expires because their CEO litigated very aggressively against the last person to do so, even though it was perfectly legal.

>I suspect that the author would be fine with the company meeting if he didn’t already have well formed (and it appears, justifiably formed) opinions about the competence of the company’s leadership.

Absolutely correct. I can imagine a useful four hour meeting, but it would be very rare. A lengthy face-to-face meeting would always be an annoyance, but they've made plenty of other mistakes and this is the cherry on top. I had hoped more people that didn't 100% agree would have been able to make that charitable inference, but I'm glad someone did.

EDIT: I apparently don't know how quotes work on HN, and don't have time to find out. Sorry!
A sentiment often expressed, but I find it too close to “An armed society is a polite society” for my comfort.
Which county is that please? If you don’t mind sharing.
You don't, it's up to the device owner.
There are smartphones designed in europe. Isn't Fairphone a dutch company? The greenphone was from Norway. Gigaset is German. The Shift smartphones too. Wiko is french and chinese.
> Except, thats not really true, is it? Hamas have been openly saying for several years now that they have no beef with people of the Jewish faith, they just want their homes back.

No, that is not what they have been saying. That's what you have been hearing, but they have been saying they want the area to be under Muslim control. They could have had their homes back decades ago if they accepted Israeli rule. No. When they say "Free Palestine" you hear Western ideas of freedom, democracy, sovereignty, dignity. They mean "Free Palestine of Jews". We know this because they say it and act on it, repeatedly.
> There is such a thing as a private road.

Yep, but not interstate roads. You can also buy a pocket calculator, which in your analogy is the private road.

You go with you conspiracy theories.

The explicit goal of the DMA is to open up the market. I can only recommend you to read a bit more about it: https://digital-markets-act.ec.europa.eu/index_en
I had to do it for space

I even had to delete the word candidate
SpaceX targeting March 14 for next launch of Starship
funny, I dont recall 25 year olds forbidden from leaving the US during the last how many years and countless wars? I also dont see a general notice in israel to not leave the country.

But even if it happens other places, it does not change what it is