2025-04-16

40 篇热帖

1. CVE program faces swift end after DHS fails to renew contract (www.csoonline.com)

After DHS did not renew its funding contract for reasons unspecified, MITRE’s 25-year-old Common Vulnerabilities and Exposures (CVE) program was slated for an abrupt shutdown on April 16, which would have left security flaw tracking in limbo. CISA stepped in to provide a bridge.

2. It's easier than ever to de-censor videos (www.jeffgeerling.com)

Last month I asked people to hack part of my YouTube video, specifically to de-pixelate the contents of a folder I had pixelated starting at the 4:57 mark.

Your browser does not support the video tag.

For years, people have used the censor tool to blur or pixelate out parts of videos where there's sensitive information. And for years, every time I've used it, I get a few comments from people saying that's not a safe way to censor information.

3. Darwin's children drew all over the “On the Origin of Species” manuscript (2014) (theappendix.net)

While Darwin was writing his masterpiece, his children were doodling all over it.

4. Attention K-Mart Shoppers (archive.org)
# 关于“Attention K-Mart Shoppers”广播通知的摘要

## 概述
“Attention K-Mart Shoppers”是美国连锁折扣零售商凯马特(K-Mart)在其门店内常用的广播开头语,用于吸引顾客注意并传达重要信息。这类广播通常用于通知促销活动、安全提醒、失物招领或特殊事件。

## 主要用途
- **促销与活动通知**:宣布限时折扣、清仓销售或会员专属优惠。
- **安全与秩序提醒**:包括防扒窃提示、消防疏散指引或儿童走失寻人通知。
- **运营信息**:如收银台关闭、停车场提醒或 store 提货点变更。
- **客户服务**:呼叫顾客处理未完成的交易或回应客户服务台请求。

## 结构特点
广播通常以固定短语开头,随后简要说明具体内容,最后可能以感谢语结束。语言简洁直接,确保信息高效传达。

## 社会文化影响
该广播语因凯马特门店的广泛分布而成为流行文化符号,在电影、电视节目中常被引用,象征大众零售场景。

## 现状
随着凯马特门店数量减少,这类广播的出现频率降低,但仍存在于少数仍在运营的门店中。
5. Kermit: A typeface for kids (microsoft.design)

Using design to empower children by making reading easier, improving comprehension, and helping dyslexics.

6. Decreased CO2 during breathwork: emergence of altered states of consciousness (www.nature.com)

Altered states of consciousness (ASCs), induced e.g. during psychedelic-assisted therapy, show potential to treat prevalent mental health disorders like depression and posttraumatic stress disorder. However, access to such treatments is restricted by legal, medical, and financial barriers. Circular breathwork may present a non-pharmacological and hence more accessible alternative to engage similar therapeutic processes. Scientific studies of breathwork are only just emerging and its physiological and psychological mechanisms are largely unknown. Here, we track physiological and experiential dynamics throughout a breathwork session, comparing two forms of breathwork: Holotropic and Conscious-Connected breathwork. We show that a reduction in end-tidal CO2 pressure due to deliberate hyperventilation is significantly correlated to ASC onset (r = -0.46; p < 0.001). Based on standard questionnaires (MEQ-30 and 11-DASC), the ASCs evoked by breathwork resembled those produced by psychedelics across several experiential domains such as ego dissolution, and their depth predicted psychological and physiological follow-on effects, including improved well-being and reduced depressive symptoms. Further analysis showed that different breathwork approaches produced highly similar outcomes. Our findings identify physiological boundary conditions for ASCs to arise in a non-pharmacological context, shedding light on the functional mechanisms of breathwork as well as its potential as a psychotherapeutic tool. Circular breathwork induces altered states of consciousness similar to psychedelics, predicted by decreases in CO2 saturation. Acute physiological and psychological dynamics during breathwork in turn predict sustained mental health benefits.

7. 12-factor Agents: Patterns of reliable LLM applications (github.com)

What are the principles we can use to build LLM-powered software that is actually good enough to put in the hands of production customers? - humanlayer/12-factor-agents

8. Generate videos in Gemini and Whisk with Veo 2 (blog.google)

You can now generate videos in Gemini, powered by Veo 2.

10. Clolog (github.com)

Full-featured logic programming (AKA "Prolog") embedded in/callable from and supporting calls to Clojure. In the spirit of LogLisp, Lisp Machine Prolog, and Franz Inc.'s Allegro Prolog, with some extra goodies. - bobschrag/clolog

12. How dairy robots are changing work for cows and farmers (spectrum.ieee.org)

Explore how autonomous robots are revolutionizing dairy farming, enhancing cow comfort, increasing milk production, and reducing labor costs.

13. Anonymous Release 10TB Leaked Data Exposing Kremlin Assets, Russian Businesses (trendsnewsline.com)

Trending News Stories from Around the World

16. JetBrains IDEs Go AI: Coding Agent, Smarter Assistance, Free Tier (blog.jetbrains.com)

All JetBrains AI tools – including our improved AI Assistant and new coding agent Junie – are now available within our IDEs under a single subscription and come with a free tier.

17. Markov Chain Monte Carlo Without All the Bullshit (2015) (www.jeremykun.com)

I have a little secret: I don’t like the terminology, notation, and style of writing in statistics. I find it unnecessarily complicated. This shows up when trying to read about Markov Chain Monte Carlo methods. Take, for example, the abstract to the Markov Chain Monte Carlo article in the Encyclopedia of Biostatistics. Markov chain Monte Carlo (MCMC) is a technique for estimating by simulation the expectation of a statistic in a complex model.

18. An Introduction to Stochastic Calculus (2022) (bjlkeng.io)

Through a couple of different avenues I wandered, yet again, down a rabbit hole leading to the topic of this post. The first avenue was through my main focus on a particular machine learning topic th

19. Homeland Security funding for CVE program expires (www.theregister.com)

Updated: Because vulnerability management has nothing to do with national security, right?

22. Snapchat is harming children at an industrial scale? (www.afterbabel.com)

In their own words, we see that Snap Inc’s design choices expose millions of kids to harm

23. A Postmortem of a Startup (buildwithtract.com)

A postmortem of a startup that attempted to address Britain's housing crisis by building software to streamline the planning permission process.

25. Four Years of Jai (2024) (smarimccarthy.is)

I’ve been programming for long enough to be righteously cantankerous about a lot of things. The list of languages, frameworks and libraries I’ve worked with professionally or on personal projects is too long to list – but it includes everything from C and assembly languages through C++, Pascal and Delphi, through Java and Clojure, through Perl, PHP, Python, Javascript, Typescript and so on. I’ve tinkered with Rust, APL, Uiua, Erlang and Haskell.

26. High time to tackle drug-resistant fungal infections (www.nature.com)

To combat long-overlooked fungal pathogens, researchers and regulators must embrace innovative science and policy. To combat long-overlooked fungal pathogens, researchers and regulators must embrace innovative science and policy.

28. OpenAI is building a social network? (www.theverge.com)

Sam Altman’s OpenAI has recently starting woking on an internal prototype social network to rival Elon Musk’s X.

30. Benn Jordan's AI poison pill and the weird world of adversarial noise (cdm.link)

Benn Jordan's latest video proposes a way to fight back when generative AI music services rip off music for their data sets. It's not ready for prime time yet, but it does offer a window into the wild, wonderful world of adversarial noise poisoning attacks.

32. I speak at Harvard as it faces its biggest crisis since 1636 (scottaaronson.blog)

Every week, I tell myself I won’t do yet another post about the asteroid striking American academia, and then every week events force my hand otherwise. No one on earth—certainly no one who reads this blog—could call me blasé about the issue of antisemitism at US universities. I've blasted the takeover of entire departments and…

33. Herb: Powerful and seamless HTML-aware ERB parsing and tooling (herb-tools.dev)

An ecosystem of powerful and seamless developer tools for HTML+ERB templates.

34. Show HN: We Put Chromium on a Unikernel (OSS Apache 2.0) (github.com)

Browsers-as-a-service for automations and web agents - kernel/kernel-images

38. A high-throughput parser for the Zig programming language (github.com)

A high-throughput parser for the Zig programming language. - Validark/Accelerated-Zig-Parser

39. Marching Events: What does iCalendar have to do with ray marching? (pwy.io)

... and why signed distance functions are cool!

40. Designing a low-cost high-performance 10 MHz – 15 GHz vector network analyzer (hforsten.com)

Designing a cheap two-port vector network analyzer with good measurement accuracy.