jsf01

The best argument in the article though is the one you seem to be missing. The chair itself matters little when it comes to your comfort in comparison to your fitness.

Beauty being subjective, it’s best left to others to describe the project as beautiful rather than the author. Like the difference between someone saying “I’m beautiful” vs having someone else describe them as beautiful, that comes across as a lack of humility in most contexts no matter how true it is. I think that may be why so many here including myself find it off-putting.

The marketing text in the readme is more self congratulatory than useful to the end user. It’s fine to be proud of one’s work, but the documentation should first consider the needs of the project’s consumers. If it were up to me I’d strip out all the nonsense about the beauty of the code—at the end of the day, it needs to run well. Whatever clever or minimal techniques or linter rules you think make the code beautiful are not relevant to anyone that’s not a contributor to the code base.

What would this be best used for?

My first impression is that this would be really easy to detect. One look at the source of a page using whitespace steganography and you’ll know something is up. Whereas with images and LSB steganography, unless you’re looking for it with software there aren’t any obvious tells.

The average transaction fee refers to the cost in btc to make a transfer. That amount is then converted to usd to make it easier to comprehend. Such fees go up during periods of high strain on the network and as people choose to pay more to get their transactions through quickly.

https://ycharts.com/indicators/bitcoin_average_transaction_f...

Any chance you remember what those bugs resulted in? I’m dealing with the same scenario for work where I’m using Mithril and have been wondering if what I’m seeing is due to my usage or the library itself. I do love the library and its community but I’ve run into some crazy ui issues, especially when using keyed nodes, that I’ve never seen with the more mainstream vdom options I’ve worked with.

This sounds awesome. Do you know what game that was?

This page lacked any information on the tech details of the Quest 2 and how it would compare to the first edition. Are those available anywhere online?

No. They’re saying that it’s creating an entirely separate DOM tree unnecessarily by using shadow DOM where it isn’t needed.

On a related note, I’m curious if anyone has a benchmark comparing performance and memory consumption when attaching a shadow root vs not.

Why do you do it? I’m sure inventing chemical weapons is a fun challenge to a skilled chemist, but if you’re morally opposed to it shouldn’t that matter more?

What is the reason for using different syntax for Move and TakePhoto from the Operation enum in the penultimate example? Is there a name for each of those enum member types?

With a buffer overflow, you can write your own code into a chunk of memory that ends up being run by the application. In this case, since WhatsApp already had SMS read privileges as part of the signup auth flow, the attacker also had those privileges.

The article has some detail about the remote code execution part of this exploit.

“What this means is that there was a software flaw in the WhatsApp code for handling MP4 media files. If an attacker triggered the flaw, the function in question would crash in a way that could allow a potential attacker to gain “RCE” or Remote Code Execution.

In layman's terms, this means the attacker could inject his own code into the application and, by triggering the flaw, make the application to run with all the privileges and access of the WhatsApp application itself.”

Using a centralized service which, ultimately, you have to take at their word seems to me like it should not be necessary in this age of trustless networks and innovation in decentralized technology. Speaking in particular about ProtonMail here. Are there any email services that are provably private?

This seems like a good approach. Often we either have a different set of underlying assumptions/facts or different axioms. For the former case, the “how truthful” approach makes a lot of sense.

What do you mean about the key travel on the keyboard? I’m not familiar with the term in this context.

Never knew! Thank you. Do you know if the current algorithm is published anywhere or do they keep that under wraps to prevent it from being gamed?

Is this the actual HN ranking code? It looks like a demo of a lisp.

The leading zeros threw me off as well. At first I interpreted 020% as 0.20% due to the coloring. For something information-centric like this, I think clarity over stylistic choices should be the foremost concern.

Yes. They’re also using fs.exists in the exact way that the official documentation says not to use it.

Is importing P5 a requirement for this engine to work? I know “minimal” can mean a lot of things to different people, but I don’t think it P5 adds much that you couldn’t trivially do without it in this case, and by stripping that dependency away you’d be able to make a very strong case for this being an ultra minimal engine.

Why did fingerprinting never catch on in that way? That tech has existed for ages. Way cheaper to implement as well. Seems like it would also be less prone to false positives compared to facial recognition, but that’s just speculation on my part.

They have a history.

- running a secret local server on client machines (which incidentally led to several vulnerabilities including the one that enabled attackers to gain webcam and audio access, as well as login credentials)

- lying about e2e encryption (or if you give them the benefit of the doubt, at the very least being disingenuous about it)

- routing all calls through servers in China

- not being explicit about the many conditions that disabled encryption (such as having a participant call in from a phone, recording the session, etc)

- widespread data collection for targeting purposes

- sharing said data with Facebook

- automatically reinstalling the client after you have tried to delete it

- a shady installer that uses preinstall scripts to install the app without the user ever having to click “install”

- gaining root access in their installer

- overriding the password prompt message to make it seem like the system is requesting admin rights and not Zoom itself

Many of these have been patched, to Zoom’s credit, and others have been explained away. But you can’t look at a company with a history like that and say that Zoom would knowingly be the app of choice for a privacy conscious user.

Privacy conscious yet uses Zoom. Hmm

The downside there is you’re heavily relying on strings, which feels a bit weird for things like event handlers, which would either have to inline the function as a string or do some magic behind the scenes. The editor is also going to be less helpful in figuring out your intent when using a string-only templating system.

If it’s only 10k lines of glue code how are they running into minutes long compiles?

Having tried doing a polyphasic sleep cycle around four years ago, the one thing that I really missed was the clear delineation between days. On a normal sleep schedule, you wrap up your day with an evening routine and begin the next day with another routine. Each day is a single discrete unit you can look back on and remember easily. On a polyphasic schedule each day blends into the next. It’s like one long neverending day. You can’t really do most normal social activities because you need to adhere to a strict napping schedule. At first it’s cool to be awake at 3am when the rest of your world is asleep. But eventually it’s just a pain to not be able to go to stores or the gym or whatever until after your next nap. Looking back, it’s harder to remember any specific details about the experience. I know I did it to get a ton of work done on a project I was deep into at the time, but outside of the late nights and extreme tiredness from the beginning of it, I can’t remember much. The value of a long night’s rest for solidifying memories, at least anecdotally for me, can’t be understated. Other things like scheduling meals, managing sunlight and your obligations to others when you need to sleep, require a bit of forethought. Life’s just much easier on a “normal” sleep schedule. Polyphasic will drive you nuts.

Seems common here that many interesting discussions are also controversial and therefore result in a lot of downvotes. It’s a pain to read downvoted comments because of the low contrast despite them sometimes being insightful yet unpopular. I also catch myself automatically taking a harsher stance towards grayed out messages before even reading them. I wouldn’t be surprised if many downvotes come in after the initial graying out of a comment, a sort of dogpile based more on herd effects than the content itself. In all, the current voting system doesn’t work well when it comes to controversy. Maybe that’s somewhat appropriate for this community since most tech news isn’t all that controversial. But it’s unfortunate that it’s so damn hard to read unpopular comments on this site. And impossible to reply to them. Are the mods open to changing the grayed-out punishment for downvoted comments to something else?

Yes. From that linked website, among cases that had an outcome (recovered/died), deaths in April were around 20%. Today, around 10%.

It’s difficult to calculate an exact death rate. For one, there’s limited testing. Without being able to test the entire population, a whole range of biases can skew the rate dramatically. The large number of asymptomatic cases that never go reported may be an indication that the reported mortality rate is too high. On the other hand, it’s likely many deaths due to COVID-19 have gone unreported. See, for example, the spike in overall deaths in Lombardy in Q1 2020 compared to prior years and how it exceeded the official COVID-19 death tally for that region by something like 4x. Then there’s the question of what deaths to attribute to the disease. If a drug overdose patient died because they couldn’t get access to a ventilator, would you include that in your death rate? You couldn’t if you were tracking the mortality rate of the disease to the people it infected, yet there are significant such cases of deaths that would not have occurred had this pandemic never begun. Those numbers won’t be captured in a naive calculation either.

That being said, I’ve found a good summary of some statistics on this page, which you may find helpful.

https://www.worldometers.info/coronavirus/coronavirus-death-...