skysight-inc/HackerNews huggingface dataset:
No.

What Apple had was the option of updating the phone with a compromised (or compromisable) security implementation.

Apple refused to do that.

The FBI did find an exploit (which AFAIR they've refused to disclose, in controvention of previous policy if not regulation and/or law), but that represents a flaw in implementation which Apple can then remedy.

http://mashable.com/2016/02/16/apple-hack-san-bernardino-pho...

Rather than asking Apple to obtain and provide the device’s passcode, Tuesday's ruling orders Apple to provide the FBI with special software that can act as a workaround for the iPhone's built-in security. Court documents suggest Apple should either provide software that bypasses the need for a passcode entirely or software that allows the FBI to unlock the phone by running an endless combination of passcodes until they are able to unlock the device. The latter method would also require software that disables the iPhone's auto-erase feature, which wipes a device after a certain number of unsuccessful attempts at unlocking.

http://fortune.com/2016/04/27/fbi-apple-iphone-crack/
But now the question is: is it still reasonable to design all CPUs for that segment of a segment of customers?
Personally I care about vim (and some scripts I have), but I do think emacs assumes errors of the same format. It's generally easy to work with, and output by a lot of things (including [git] grep -n).

For my use, what I care about is that important locations that I might want to visit appear at the beginning of the line as either "filename:line:col: " or "filename:line: ".

Other lines can begin with "error[E0080]" - that does no harm.

If others have more particular needs, I hope they voice them. (nhaehnle seems to want severity following location?)
That was the notorious Dual_EC_DRGB which was backdoored by the NSA but was broken inside of OpenSSL without anyone noticing: https://nakedsecurity.sophos.com/2013/12/22/the-openssl-soft...
Not to mention that being an NP hard problem wouldn't be a strong enough property to ensure the average-case was hard, so I don't think the "considered" saves this from being incorrect...
Starts with a U and ends with an L? I'm so, so sorry.
How Big Data and IoT Are Helping Feed the World
Most bandwidth usage is ads and video. And bloated apps and web pages. What else needs much bandwidth?

Even HDTV only needs about 20mb/s, and can be compressed down to 8mb/s or so without much visible loss.
Was wondering how long it would take for this to come up. :)
How do you plan on preventing people from wanting things?
Seagate Unveils 60TB SAS SSD
There are multiple clippy implementations and they are pretty helpful. https://github.com/softwaremill/scala-clippy
Packing the circles such that you get a straight road would negate the need to pack them hexagonally.
I've found that my demon summoning programs work much better if I sacrifice the ram beforehand.
This is an entirely normal thing to do if you live in an area that doesn't have a semi-permanent criminal underclass.

It's not even really a poverty issue - there are places where people are poor as churchmice, but the social stigma around theft is strong enough to keep people in line.
This seems like something that compilers should do and CPU instruction sets should not.
Off-topic,

I was once walking through Atherton and a police officer stopped me to make sure I wasn't doing anything suspicious. I suppose the number of "walking while white" infractions a community tallies might be a good (if unfortunate) indication of how wealthy they really are.

The same police officer later bought me a coffee for no particular reason. What a country.
Would be great to explain why existing open source solutions were rejected, and how you achieved your goals and requirements.
Not going to lie, that silver in JiuJitsu has lingered in my brain for a couple years now :)
So I guess this doesn't currently work with sockets?
Never the less, this looks really awesome and i can't wait to start playing with it.
India does lousy at the olympics in general and Canada does lousy at the summer olympics.

I can'tspeak for other canadians, but I don't give 2 shits about the summer olympics.
I thought Seveneves was more like two "first half of Stephenson novels" smushed together; I found myself wishing there was more exploration of the "second" world. I thought the cultural evolution stuff was super interesting.
I expected to hate this but I love it already. I'm not on the all-functional all-the-time bandwagon. I go functional when it suits what I'm building. But working with CSS is broken for many of the reasons that chibicode outlines - semantic css encourages specializes classes that end up duplicating lots of css properties. The functional CSS proposed here obviously isn't a complete solution - although it may be the case that "If you use functional CSS, when you add something new to a page, you'll rarely write any new CSS", you have to pay for it in all of the classes that you write. I've seen really well-structured SASS files that end up keeping duplication and class names to a minimum, but it's hard to do. I'm anxious to try this for myself and see how the tradeoffs play out in a real codebase.
Show HN: Chrome extension to bypass that fake-login-wall on Quora
Unreal Engine is an industry standard when it comes to commercial general purpose engines.

There are more unreal engine titles for any given version than any other engine on the market on PC's and consoles.

On mobile unity is probably bigger atm.
This is an important point that the author, even in his comments in this thread, has no answer for beyond scaremongering that "the state" will "break" us all. You can't secretly beat everyone with a rubber hose to let you spy on them.
If you have a look at the code on many websites the answer is ludicrous amounts of bloat.
US Government Now Has an Official Open Source Software Policy
So my first reaction there was "there goes another non-five eyes (or nine or fourteen eyes) hosted mail service who've just painted a (or another) great big target on themselves to attract even more NSA scrutiny".

(Second reaction was "Crypto in the browser in Javascript _again?_ Didn't was already point out this is 'doing it wrong'?")
We do. Silicone, gold, porcelain, and titanium are actually pretty good for being bio-inert as well as many many other compounds. The metals obviously come with many issues too (heav metal poisoning, weight, different elasticity, etc) and the plastics are not as durable or tough as the metals. Also, these things tend not to be 'squishy' so impacts and wear and tear are tough on them.

Fun fact: Gold teeth caps are really good for you, though maybe not your love life. Gold has very very similar mechanical parameters to your dentin.

Overall, bioengineers are making great strides into these compounds. We are developing new heart stents that coil and expand in response to heat or can just be injected and will solidify and expand wherever they are needed. A cool development sector is in 'smart' hip replacements. They have nano-pores in the titanium to induce bone growth into the implant and create a better and more healthy bond.
While eminent domain is a rule in property law, that's not the same thing as saying that it applies to property generally.

Copyrights and patents are regulatory property. They're created by government, and what rights such property entails are defined entirely by the government. All "property" is conceptually fictional, but government is effectively restricted from, for example, redefining the meaning of real property in a way that subverts constitutional protections against takings.

I don't know what the law is in this area, or even if it's settled, but I can easily imagine a scenario where the courts say that if a government implicitly or explicitly changes the rights that attach to _their_ grant of regulatory property, that such a change is not a taking (i.e. expropriation of property) for which the constitution requires compensation.

The opposite is certainly allowed. For example, SCOTUS has said (at least in dicta, if not in binding rule) that Congress can put back under copyright material that already fell into the public domain, even though other people have already relied upon it.

Generally, when discussing regulatory property and regulatory takings, the courts assume there are implied limitations to your rights such that merely because the government restricts your property rights causing you financial hardship, it doesn't necessarily follow that there was a taking of property. This is why zoning laws passed after you purchased your house can be enforced without the government being forced to pay you. When the first American zoning laws were passed and challenged in court, SCOTUS said that zoning restrictions weren't per se a taking because it was always implied that real property rights were subject to implied restrictions related to public health & safety. (Common law nuisance was used to support the argument, but crucially a nuisance is a manifest injury, whereas zoning laws are typically speculative at best, and in hindsight usually ineffective and even counterproductive. Forcing governments to internalize the cost of poor policy decisions is precisely the function of requiring just compensation, yet zoning laws are unfortunately permitted to subvert that dynamic.)

Implied limitations are especially numerous and broad in the context of regulatory property. The courts could easily say that grants of copyright come with implied reservations to the government; and that the government reserved the right to limit the grant, ex post facto, for the public benefit, such as when material is incorporated into a public law.
Did you read the post? This is specifically addressed. The AES hardware support requires a bunch of die area specifically for that purpose and still isn't that performant. Smaller-area CPUs don't spend the area and perform abysmally on AES, and even in CPUs that do include AES-NI, Chacha achieves comparable performance for the same security margin without any custom hardware support, just using the general vector instructions added to improve game performance. DJB expects that because vector math continues to improve while AES hardware does not, Chacha will soon outperform AES even on devices with hardware support.
Same, had a feeling you read that book haha.

The Way of the Superior Man by David Deida is a great follow-up. The guru stuff is sometimes overwhelming, but there are good ideas in that book.

There is also a fantastic summary/teaser of the book on FightMediocrity (YouTube channel).
So you'd prefer not to have any crypto at all? Because 99% of people are going to use their browsers anyways.

Btw for example https://blockchain.info/wallet/#/ (in-browser bitcoin wallet) I think has never been hacked - you might say it's a huge outlier but it is possible to do well.
good. these sorts of tech-driven kafkaesque nightmares need to be righted.
Agreed, in fact I'd go as far as to say after 2 years you should have a pretty good feel for the environment and have an idea if there is room for growth. Some companies propagate a culture of mediocrity where everyone is just there to collect a paycheck and go home. If you can recognize that sentiment early on, its best to distance yourself to avoid getting sucked in and resigning yourself to the "do enough to get by" mentality.
Because those roots are hard wired into us by a billion years of evolution.
Only if you believe in the concept of evil and sin.
Bitcoin Is More Useful Than Fiat Currency in Zimbabwe
It's your fault for saying "look for". They're doing just that. They're using all their available brain power thinking about the code so they don't have any to spare to interpret unclear instructions. Instead say "search for", or if that's still unclear say "control-F for" (or whatever shortcut activates search).
+1 for this "guide." It is super easy to digest and nice to have as a reference. Where some books might be denser and be full of more information and details, this post was full of great bits of info that could easily be referenced back to.
Bay Area event about how digital culture influences written language
We must define people-pleasing differently then. I am way too lazy to rewrite stuff ten million times, read some of my other comments.
I'm building a chat platform with js and https crypto. It's better than nothing in my opinion.
+1 for Vinay's guide - super helpful while planning your API structure in the early days.
If nothing else, it's because people like to separate their living space from their working space. For reasons ranging from Easier To Get Into Work Mode, to No Screaming Toddlers.

It turns out renting office space or a big enough apartment/house to have an extra office is expensive. Wouldn't it be nice if somebody else paid for that? Perhaps somebody who also pays you and can then recuperate this cost with scale by putting multiple people together in the same area.

If everyone had their own home office, how much would salary have to increase?

Take San Francisco for example. Renting a 2-bedroom apartment instead of a 1-bedroom would increase my and my girlfriend's rent by about $1,000 per month. This would give one of us a good home office. The startup I work for pays about $10,000 to rent a big-ish office space. There are 15 of us working in it pretty comfortably.

That's a lot cheaper than everyone paying an extra $1,000.
Yeah, because gamers have the deepest pockets in consumer-grade hardware, that isn't a tiny niche segment. Business users aren't tricking out desktops to the tune of thousands of dollars to push the envelope of performance.

Well, aside from the cult of Mac... They spend the same amount of money as gamers, but for bog-standard commodity hardware in a pretty case.
Sending streaming lightfields for viewing in VR (for live sports etc.) Is going to take every bit of bandwidth we can throw at it.
>
But when we exec a child, the kernel resets any signal not set to `SIG_IGN` to `SIG_DFL`, so all our children, atomically, get their `SIGCHLD` handlers set to `SIG_DFL` at the moment of creation. Consequently, when either our process or the kernel sends `SIGHUP` to our process group, all our children die.
This is a terrible idea and I'm sure some legal department is going to take it down. But I thought it would make for an interesting discussion at least.
Aside from Vinay's guide that has already been mentioned - http://www.vinaysahni.com/best-practices-for-a-pragmatic-res...

There is also this Medium post: https://bradfults.com/the-best-api-documentation-b9e46400379...
> C++ class vtables are a prime target for heap overflow attacks because they store function pointers on the heap

Is that so? The actual pointers should be in .data. The pointer to the vtable is on the heap (or on the stack, or wherever your object lives). In any case, you should be able to use something like [1] to place constraints on indirect calls, right? There are lots of approaches to double checking function calls that don't involve increasing function pointer size.

Besides, there are lots of bits of code that depend on function- and data-pointer interconvertibility --- people can stuff function pointers in raw void* cookies to callbacks.

Rather than make the effort to make existing code work in this (in practice, new) subset of customary (as opposed to standard) C, wouldn't it be better to just write components in a language that's memory-safe to start with?

[1] https://gcc.gnu.org/wiki/cauldron2012?action=AttachFile&do=g...
In the fight for talent, it's all about speed
I think you underestimate how hard the original problem is. Small decisions can cascade and have effects very far away on the map. Also, in what exact sense do you mean convex?

Furthermore, SAT is hard in theory but the kind of very structured instances found in practice tend to respond well to heuristics.
Many of the core Rust developers use emacs, so I guarantee that this use case will be well-supported. :)
> They're optimized for single-precision linear algebra. If you need double-precision all those optimizations go out the window and you're left on your own.

Not true at all on modern X86. You just get half the FLOPS by using double precision instead of single precision -- 16 double precision FLOPS per core per cycle. Which is very good considering there's also twice as much data to process.

You could rather say X86 CPUs are highly optimized for double precision performance.
A Google site criticizing Amazon...

Am I the only one seeing the irony?
Ahhh yes we've been hit with this. There are subtle differences in the GAE APIs when using flex. Trace as you mentioned, but also channels api doesn't work at all, cloud debugger only sometimes works, etc.

Most of these have gotten a lot better since managed vm's first rolled out (3 years ago!?!?!?!?!)
Sunshine and rainbows aren't produced by the economy. Google searches are, even though they are free.

If we're talking about how good the economy is, I'd argue that we should count all the good (and bad) that the economy is doing, not just the GDP.
The majority of the core Rust developers use either emacs or vim. You can rest assured that this aspect of the tooling will not be overlooked.
Apple's MacBook Pro to be overhauled after four years, features touchscreen keys
Because "we're" being realistic. Changing that is unrealistic.
I am not familiar with GraphQL and my APIs are serving only a handful of people. I do have one suggestion: write a really really good client library for your user.

This eventually can become the basis of your test harness. In fact, every time I write my tests, I end up writing a client library...
One approach to understanding low productivity that I find interesting is covered in Jason Furman's very readable "Is This Time Different? The Opportunities and Challenges of Artificial Intelligence" report [1] -- he's one of Obama's lead economists.

In short, productivity growth may be lagging because of AI etc; it's because people have to spend time retraining for jobs not obsoleted by new technologies. He briefly states his rejection of Gordon.

[1] https://www.whitehouse.gov/sites/default/files/page/files/20...
It's a little strange that ClojureScript is omitted from the sections where it compares favorably to Scala.js, e.g.:

> If you look at other compile-to-JS languages like:

> - Google Web Toolkit which lets you compile Java to Javascript,
> - The Opal Ruby Compiler for Ruby
> - Brython, PyJS, Skulpt, Transcrypt or RapydScript for Python
> - Various flavors of C#-to-Javascript (Salterelle, Bridge.Net, JSIL)
> - Or Haskell-to-Javascript compilers (Haste, Faye)
> You'll notice one thing in common: none of them have a standard way of writing code that runs on both their "original" runtime (JVM, MRI, CPython, CLI, ...) and on Javascript. And the reason why is straightforward: none of them are compatible enough, complete enough to really let you write "full" Java/Ruby/Python/C#/etc..

ClojureScript is mentioned in the article, but only for this specious comparison:

> Clunky Interop
> Many other languages are not as fortunate. For example, here's how you create an element in ClojureScript, compared with Javascript

(let [paragraph (.createElement js/document "p")]
(set! (. paragraph -innerHTML) "<b>Bold!</b>"))

var paragraph = document.createElement("p")
paragraph.innerHTML = "<strong>It works!</strong>"

> Now, the conversion between these two snippets is mechanical, so it's not something you need a PhD to perform. Nevertheless, it is clear that using Javascript APIs in ClojureScript, while looking like ClojureScript, looks almost nothing like the Javascript it represents.

> This mapping is something that everyone who wishes to learn Clojurescript will have to internalize.

This seems misinformed at best - both Clojure and ClojureScript have interop as a first-class concern, and interop forms are exactly the same between them.

I appreciate the work that Li's done, but I'm disappointed by what seems like a rather disingenuous omission of the only other language which fulfills Li's criteria.

Interop, IDE support (IntelliJ), parent language compatibility, static optimization (judging by the payload size numbers, ClojureScript utilizes dead-code elimination more effectively than Scala.js), performance (ClojureScript immutable vectors are faster to build than JavaScript arrays, far from the 1-2x Scala.js slowdown cited in the article!) - there is (and has been - since 2011) a compile-to-JavaScript language that is in the same league as Scala.js, and arguably eclipses it on many dimensions.

A language-agnostic comparison can't reasonably leave out ClojureScript.
Backticks aren't used anywhere in the language itself so they're an obvious choice for a delimiter, and such usage has been popularized by markdown.
That's because on web apps we have plenty of CPU cycles to burn. Our performance bottlenecks are disk/database and network speeds.
my parents live in an affluent southern california suburb and still do this all the time. when i visit i just walk in the front door.

in most suburban places you can also leave the garage door open all day long just fine.

it's primarily dense cities that are the issue. just like online, when there's transience and anonymity, there's a high incentive for people to behave poorly.
Personally the versioning and backward incompatibility don't concern me in themselves, as long as integrations with older API versions are also fully supported indefinitely and there is a clear and safe path to upgrade.

In Stripe's case, I normally find an initial integration is a better experience than most payment services. The API is reasonably designed and well documented.

However, I also find Stripe integrations are effectively impossible to maintain or update over time. Older API versions aren't documented anywhere I can find, only the current one. There are decent changelogs with warnings of incompatibilities, but you can't write an automated integration test suite. I've never found any documentation that explains how their versioning actually works, what is affected, and how to revert if you update and there's a problem.

In practice, that means older versions of the API aren't fully supported indefinitely, nor is there a safe, systematic path to manage an upgrade to a newer API version. For that reason, we normally treat Stripe integrations as write-only code, where once you've got something written, tested and into production, it's never touched again (short of a serious security issue or the like, obviously).
A false sense of security is worse than nothing at all.
Facebook HIRING ▪ Software Engineer Engineers (full-stack) and (back-end) +7 yrs
HIRING ▪ Product Engineers (full-stack) & Software Engineers (back-end) +7 years experience - Menlo Park, Seattle

PRODUCTS ▪ AdTech, Pages, Internet.org, Mobile, Core Growth, much more... http://bit.ly/fbprd

http://bit.ly/facebkF8 – www.fb.com/careers – https://code.facebook.com – http://bit.ly/glssdrFB

Send your resume or LinkedIn profile to me directly: datnguyen@fb.com
There will always be people who will happily infringe upon your person to their benefit and your dismay.

There, now the philosophical twaddle is excised without ruining the spirit of the point
Nope! I pay my rent using it for example.
I can't help but find myself wondering - did they write that in every bomb? Wouldn't that be incredibly risky? Also, how did they know that that particular bomb was made by Czech factory workers (was the message in Czech?) And why did they think to cut the case open? As far as I'm aware that was not normal bomb disposal procedure.

I had a Google and found a few more facts:

* This anecdote comes from Dagmar Simova, Albright's first cousin, who was 12
* The bomb landed in London, during the Blitz
* It is implied this particular bomb landed in their neighborhood

What are the odds, that this very singular message throwing the Czechs in a good light, should be discovered through an unusual procedure on a perfectly normal bomb (among thousands) that happened to land in the neighborhood of non other than the cousin of future-famous Czech-American Madeline Albright?