skysight-inc/HackerNews huggingface dataset:
My policy is:

First:
1) use encryption from day one. As long as you can be assured the encryption never failed (somehow repartitioning and writing bare data to the drive), it is a viable option to treat the drive as non-sensitive, depending on what it was used for.

Then:
2) use ATA secure erase to wipe it. This command, if you believe it was implemented correctly, should wipe the entire drive, including reserved space.

Then:
3a) re-use or re-sell the drives, if you're in a moderate security environment and all of the above have executed correctly. (or send back to a manufacturer if failed in moderate ways which still allow ata secure erase to execute...or if you really trust the disk encryption and it wasn't used for anything sensitive)

or

3b) If the security steps above have failed, or if you've screwed up somehow, or if the drive was used in a policy environment which requires or, or if it was used for the most sensitive of data and you need to convince outsiders of security, or if there's any chance the host the drive was attached to was hacked while in operation (in which case the drive security may have been defeated with new formatting or new firmware), physically destroy the drives in rotary disintegrator. You want to do the above even if you plan to shred them because it reduces security risks and requirements while in transit.
> Surprisingly, (to me, at least) Go is the big winner here. There’s a ton of search results for people moving from X to Go.

You mean ... Google search results?

I'm not trying to suggest that Google's search engine is intentionally biased toward Google projects, but I think it's reasonable to assume that their own projects wouldn't fall into whatever unintentional blind spots their search engine may have.
Ask HN: Pros and cons of creating a Webassembly to Python bytecode lib?
A lot of noise is made about webassembly these days, and I love it. Unfortunaly, I don't think it mean we will see Python on the browser any time soon, as downloading the heavy Python runtime just for that seems overkill. Except may be if we ship microPython.

However, we could leverage it for a usage of Python in electron apps and in Node.js without RPC.

But I'm more excited about getting ride of the "compiled extensions" hell in Python.

Indeed, despite all the efforts of the community, creating the wheel standard, providing tooling, etc. installing non pure-Python libs are still a pain for new commers, albeit a lesser one. And creating wheel for a compiled extension is still much more complicated than it should be.

My skills in low level dev being very poor, I'm asking the crowd here:

- would it be possible to create a pure Python lib to translate WASM into an importable pyc file?

- what would be the result performance wise?

- would it be worth it?

My educated guess would be that you would loose performances, because you would have to translate low level data structures to high level ones. But still it would let the package manager do the following:

- try to use the compiled dist, such as a wheel. Failing that...

- try to compile the WASM code to a binary. Failing that...

- turn the code into bytecode and use the library, just in a slower way.

It would allow to write a Rust/C Python extension garantied to be easily installable on a development machine for a beginer, but can be easily turned into something fast for production.

If WASM gets popular, it also means being able to use libs from Go, D, Haskell, etc in a pretty straigforward way.
Mass regicide.
Also, the likelihood of people blogging about a language change is not the same across languages.

Some crowds (Go and nodejs enthusiasts) are notoriously vocal due to the hype.

Finally, it's common practice for companies to have their marketing department to pay "media marketing specialist" to advertise for products (their language) by posting on forums.
This should have been shorten to "Avoid magic". This is applicable to any language, not just to C.

Magic stuff are for wizards, and most of us are not.
Scott Alexander Reviews Seeing Like a State
Anyone else notice that they were injected in BOTH EYES at once. That is totally non-standard for non-proven eye therapies. Even many run of the mill treatments treat one eye first to make sure there isn't some kind of bad reaction.
I prefer attempting to find an O(1)-space algorithm over dynamic allocation, which I suppose means using fixed-size buffers anyway.

In my experience it is surprising how many programmers will --- regardless of language --- tend to settle for O(n)-space or higher algorithms when just a little more thought would produce a simpler O(1). Line numbering is a common example of this.
The issue is that even a little bit of non-technical language can cause loss of precision. A regular person would love if the technical language was watered down and sprinkled with colorful analogies but this is not often helpful to actually attack the problem. The problems in OP link builds on large pyramid of concepts and abstractions all the way starting from numbers. There is no way out than to walk through this hierarchy of concepts one at a time for many years to finally gain understanding of the problem. Sugar coated explanations might make you feel good but don't actually help work on it.
I wonder whether that typo was intentional ;)
Blending (specifically in a dedicated blender jar, not one you ever use for food) is the best way to destroy SD cards I've found, and apparently a major fruit company has done this in the past.

It's also a solid excuse to buy a blendtec 800 with sound enclosure for the office -- way quieter than any shredder. And good for making drinks.
No, because:

In fusing plasma, the main carrier of energy out, is the neutron, and methods to efficiently use this energy are still to be developed, wait for the fusion plant prototype DEMO. It is not possible to store energetic neutrons.

Fusion ignition is the point at which a fusion reaction becomes self-sustaining, i.e. the energy being given off by the fusion reactions heats the fuel mass more rapidly than various loss mechanisms cool it. At this point, the additional energy needed to heat the fuel to fusion temperatures is no longer needed and can be turned off. Throttling off the deuterium or tritium fuels will stop the reaction.

The produced helium nucleus carries an electric charge which will respond to the magnetic fields of the tokamak and remain confined within the plasma. However, some 80 % of the energy produced is carried away from the plasma by the neutron which has no electrical charge and is therefore unaffected by magnetic fields. The neutrons will be absorbed by the surrounding walls of the tokamak, transferring their energy to the walls as heat.

In ITER, this heat will be absorbed into cooling water, through heat exchangers being dispersed through cooling towers.

In the subsequent fusion plant prototype DEMO and in future industrial fusion installations, the heat will be used to produce steam, driving turbines turning alternators producing electrical output.
And since we can follow that thought process, we are smart enough to infer the meaning of the advice given ("do not assume") in the proper context, can we not?

It's obvious to me we both can, so why the hell are you wasting our time with useless pedantry?
4 Step Guide to Sending Web Push Notifications
Awesome video.

I've watch the video at least 2 times it's great and interesting. :)

I cannot recommend all the CCC media highly enough. ;)
When you eat out and get shit food, there is a bone or something in your food, you usually can just tell them and they'll do something so you don't pay the full amount, it's common courtesy.
That's an option too, but is more complex and less deterministic.

The key assumption is you want low/no downtime. The problem you have is negotiating SLA penalties are difficult to get right for organizations like cities and getting good metrics are tough.

The other thing, especially with government contracting where RFPs are extremely difficult to change after the fact without getting contracts disputed by the losers is that the contractor will add risk premiums for penalties.
Will it Blend - Blending a Solid State Drive (SSD)
https://www.youtube.com/watch?v=XHu_EJVZm58
Microsoft Continues to Hoard Patents While Using Them Against GNU/Linux
There’s a curious anomaly, though: if you try to scroll using touch screen scrolling, the page happily moves up and down, even while JavaScript is blocking nearly everything else on the page. This also works for touch pad scrolling, mouse wheel scrolling, and click-and-drag scrolling (depending on your browser).

Mouse wheel scrolling still works on Chrome but not on Firefox.
Using DigitalOcean Load Balancer with Kontena
>A great many people said reusable rockets were not going to happen and that the pursuit of the technology would end in failure.

A great many people said? Where? And more importantly, why? For what reasons did they say it was not possible? Was it impossible by laws of physics?

What "breakthrough" in physics did spacex make that made this suddenly possible? How come we never hear of any such breakthroughs, but only about these PR stunts?
> People always say this

Americans always say this.
I've been experimenting with Debian/kFreeBSD lately, and one funny aspect it's had is making me realize that the kernel is not really all that important to the userland experience, at least for what I do. It still feels like Debian, even though they swapped out the Linux kernel for the FreeBSD kernel. That's one reason I think of Debian as an OS, rather than a Linux distro. Debian itself then has several distros, such as Debian/Linux and Debian/kFreeBSD.
You can do that but it's a faff. I often think I should but don't get around to it. You are not legally obliged to pay the service charge in the UK at any rate.
Not sure about Japan but a very large number of computer scientists also speak English. Due to the youngness of the field, the most important material hasn't been translated from its source language, which is English :)
That's simply sickening.
Fly – fast, lightweight build system, based on concept of coroutine
Top Reasons Startups Fail
Three-person baby licence granted
Startup from Bhopal is building an autonomous vehicle technology for India
Upstream? Likely never. Out of tree? https://github.com/tsgates/rust.ko/blob/master/README.md
India's Aadhaar wins World Bank praise amid ‘big brother’ fears
I too firmly believe that Privacy should score higher than business interest. If you do not wish to share such information, a polite "NO, Thanks" is much better.
All colors are potentially problematic.

https://en.wikipedia.org/wiki/Color_blindness#Types
I feel stupid now. I can't be the only one who used shred on a journaled FS without giving it some thought.

It goes against unix philosophy of a simple tool that only does what it is supposed to do, but some warning from shred that you are using it on FS on which it can't be trusted would be nice.
> Not really talking about sessions

Well, mostly a JWT lets you know the user that is signed in.

A server-side session generally does the same thing, but can be used to store larger amounts of data.

> I'm trying to understand what you were saying about whatever your Javascript has access to, their Javascript does as well. Why should this be a criticism of JWT and not CSRF?

They're unrelated attack vectors.

CSRF is about bad actors producing links and/or forms on a different site to your own, that a legitimate user clicks/submits (either through social engineering or some kind of javascript in their page) causing them to make a request to your server. A CSRF token prevents this because it ensures that form submission requests have come from a form hosted on your server.

In the situation where we're worried about what someone else's JavaScript has access to, it means their javascript is already loaded into your page: a vulnerability with poorly escaped user content, a rogue browser extension, a malicious or compromised CDN, etc.

In that situation, CSRF is irrelevant. The CS in CSRF is "Cross Site" - this is no longer cross site, as the script is running in the context of your own page.

So in this situation nothing we do can prevent them from making requests within the current user session.

But what we can prevent them from doing, is stealing a user identifying token: e.g. a session cookie, by marking it HTTP Only, so the JS environment doesn't see it.

JWT's accessed over XHR/etc and stored in local storage are available to any malicious scripts running, meaning they can grab the user's JWT and send it off to their own server, allowing them to make requests as the user.

If you send JWT's as cookies and mark them as HTTP only, you've defeated the "don't send session cookies with every request" goal of JWT, and the cookie will be bigger than most session cookies.
What is the pricing at meetedgar.com?
And what features they have that are essential and what are disposable?

Their site seems to be purposefully opaque regarding these points.
Oh yeah, I was thinking about international craft beers.
Mobile VR is possible without strapping a smartphone to your face
Perhaps nothing at all will come of it?
I don't know, I was able to understand the initial problem statements, and even a bit of the numbered sub-problems, and I'm a trained classicist pig-ignorant in math.
"Magic" becomes obvious common-sense once you understand. The overall theme of the parent comment is that we should try to understand instead of giving up, because that's what makes us learn and become better at the language.

IMHO if you want to become an expert in C and C++, you must be able to read Asm and understand what the machine is actually doing.

A very relevant article on this same idea: http://www.linusakesson.net/programming/kernighans-lever/
So it's okay to refuse to pay for a service that's already been rendered to you because they don't follow the law to the T and charge your card in a different way.

That seems entirely reasonable. If I were paying the bill in a restaurant and a member of staff insisted I paid using some personal transfer service, I'd probably refuse too unless I was able to confirm that it was legitimate.

you're also breaking the law if you walk out of a cab without paying.

Difficult to argue that's the case if no opportunity was offered to pay legitimately.
If you use Linux with systemd or without is a significant difference, which is probably as big as switching between BSDs.

The name of my operating system is "Ubuntu", not "Linux".
An OS is a kernel and userland developed together in its entirety. All the code shipped is maintained by a single responsible entity: an open source team or a company. External code is imported into the source tree and treated as if it is owned by the team. Any patches required for it
to integrate cleanly are the responsibility of the OS maintainers.

A distro is a Linux kernel and a collection of open source software, typically GNU, which fulfills the needs of the userland environment. The distro maintainers are responsible for packaging and distribution. They are not responsible for maintaining the kernel or any of the userland software unless it was internally developed such as a custom installer or various glue code, maintenance scripts, etc. They do not own the libc, the kernel, the shell, any drivers, responsibility for writing security patches, or bug fixes for any code they did not originally write, etc. The distro volunteers or employees of the company in charge of producing the distro may be involved in kernel or other open source softeare development, but it is not required.

This may be an unpopular statement, but a Linux distro is not an OS.

It is a collection of open source software that tries to be compatible with all of its components. Subject matter experts of all components are usually not involved in its creation. Instead they exist spread out across the entire Linux distro ecosystem.

Does Arch Linux have an expert in the virtual memory subsystem of the kernels they ship?

Does Gentoo have an expert in the kernel random code?

Does Debian have an expert in the glibc codebase?

Does Ubuntu have an expert in the bootloader?

Does Mint Linux have an expert in the BASH code they ship?

I can say with confidence that Suse and Redhat employ experts of many areas of the kernel, glibc, systemd, filesystems, and other components, but not everything.

Does FreeBSD/Dragonfly/OpenBSD have an expert or designated owner of the filesystems they ship? Bootloaders? Libc? Kernel timekeeping code? Random? Crypto? VFS? Network stack? NIC drivers? CPU schedulers? Shells and userland utilities?

Yes they do. They're OSes, entirely maintained in-project. Just like Windows, OSX, Solaris, etc.

OpenBSD is most aggressive here, but unmaintained code usually means nobody is using it and it will be removed. Everything has an owner and is constantly being looked after. In the BSD world it would not be common for a major component to exist long term without an SME joining the project and maintaining it or replacing it.

BSDs are OSes, and are mostly independent. You cannot easily port kernel code between them because they have diverged significantly.
dd 1x-2x is enough in most use cases. most people don't have the time to go rummaging through random hard drive to recover what is mostly garbage. there might be a gem in there, but it's a straw in a haystack.
That charity doesn't exist without our government to setup and run the legal, tax, postal, transportation, employment and other systems that enable the charity. Just sayin'...
This is a fantastic piece of technical writing. There's plenty of detail and pretty much no fluff. More of the same please Microsoft.
In the UK, which is still EU for now, you don't have to register for VAT until your income is £83k so most waiters will be ok on that one.
blockchain is just a data structure, and its already being used by a bunch of financial institutions to do the distributed ledger thing.
Playing with Mach-O binaries and dyld
As long as you have ~uniform density out to the edge of the observable universe you get zero net gravity. Move over 1 light year and that particle also sees ~uniform density out to the edge of it's observable universe and you don't get a vast black hole.
Some number theory, linear algebra, calculus of variations, combinatorics, etc. From the applied math side of things, it isn't terribly deep. It's actually right about what I would expect from an applied math student who was good at the undergraduate level and ready to study at a competitive university.

For general admissions for any discipline though, I'll agre it's probably a bit rough for non applied math grads. At least it doesn't include any analysis, abstract algebra (groups, rings, fields, etc.), or topology. Which would be murder for non-math majors.
The reason bright red + bright green “vibrates” is because they don’t have enough lightness contrast (see my other comments in this thread).

If you choose a dark red (say, #C2454F in sRGB) and a light green (say, #51E6AF) you’ll be fine (albeit a bit garish in this particular example). Or choose a light red and a dark green if you prefer. Where you wind up in trouble is with two colors of the same lightness, say #DC555E and #047E54.
> What's risky about using a credit card to buy a kayak?

If you don't pay back the debt, in 72/(interest rate) (interest rate period) the kayak will cost twice the price.

http://www.investopedia.com/ask/answers/04/040104.asp

I think we're agreed on the core principle here though:

> I think for the vast majority of individuals just trying to make good personal finance decisions, "don't take on debt" is (on average) great advice.

100%
I wouldn't say the OS requires unsafe POSIX compatibility. The whole system can be mostly unaware of POSIX if you can use the available APIs to create shims. Basically a wine equivalent - Linux didn't implement any windows APIs after all.

So all the unsafe bits can exist only in the process which is based on them.
What I really want for spacebar scrolling is this in working: https://greasyfork.org/en/scripts/20937-red-read-line

An indicator on where the bottom of the screen scrolled to, so I don't need slow animations or incremental scrolls to find where I left off reading.

(The linked script is not working on all pages and sometimes blocking klicks, I just threw it together to try if the Idea works. I think the principle works really really well.)
Webpack Tutorial: Understanding ngtools/webpack
[ANN] Bancor – Standard for Automatically Tradable Coins. Hello Long-Tail and ETFs
A bitcoin wallet is not top-secret material and I don't trust myself not to fuck up overwriting the entire disk. I'd rather just take an angle grinder to it and not worry about it.
Depends on the size of the black hole. The Roche limit would require a ridiculously massive black hole or the star is broken up because the closest bits to the black hole are much more strongly attracted than the farthest bits.
Latest Top Gaming Mouse for Small Hands
Worst case scenario microwave it. It should make the ssd non functional and fry all circuits inside.
> that number sounds strangely familiar, isn't it?

I don't know much about universes.

Why should this number sound familiar?
You mean position: sticky? [1] Yeah, that took way too long, leading to horrible JS implementations, but it's there now.

[1] https://developer.mozilla.org/en-US/docs/Web/CSS/position#St...
No-one wants to own a depreciating asset like a battery. The model would be something like "pay $x/year and any member of our nationwide network will swap out your battery for a battery with at least 100 miles' worth of charge, whenever you want". They can take care of replacing worn-out batteries on their side.
There was a true-colour GIF using more than 256 colours using this technique.
> An OS is a kernel and userland developed together in its entirety.

[citation needed]?

How is a Linux distro not an OS? Isn't it the Operating System on whatever machine it's running?

If I run Ubuntu or Arch, what OS am I using?
In case drewdevault.com has been blacklisted by your web proxy (as it is for mine), here's an alternate source:

https://sircmpwn.github.io/2017/03/15/How-I-learned-to-stop-...
Hammer is twice as fast, not half. So huh
Yeah, I think he/she meant "humanely raised"
Could you clarify what you mean by "don't let you interop"? React gives you a DOM node so you can render anything into it, including an Angular component, a jQuery plugin, or a web component. How is that not interop?
There is also a Japanese language version:

http://www.i.u-tokyo.ac.jp/edu/entra/pdf/archive/16math_j.pd...
If the solar plan falls apart, electric cars would prop up the coal industry better than gasoline cars. The electric cars you charge from your wall outlet will be powered by coal, no?
iOS Application Development Company
I agree with you, but your last line is wrong: the footnotes make it clear the author knows the omission.
So it'll now be 4x?