skysight-inc/HackerNews huggingface dataset:
> Apple has significant investment in Darwin and are a huge contributor to LLVM.

Apple could make the next OS for Apple (presuming they were willing to take the leap to do something other than incremental improvements to their existing stable of OSes), but they aren't likely to make OSes for anyone else, so they aren't really relevant to the discussion.

> Also, don't count out Amazon ... they have their fingers in so many pies these days ...

Amazon seems to be pretty consistently plucking the low-hanging fruit from their current position. They might have the right talent to build a future OS, butz for a slightly different reason than Apple, it doesn't seem to be consistent with their orientation.
> If the analysis presented here can be made rigorous to show that ˆH is manifestly self-adjoint, then this implies that the
Riemann hypothesis holds true.

At least the date is not April 1st, but it's far too specialised to know whether this is significant or not.
Well in a sense they already do, but mostly at US universities.
By the time a simulation of you hears that it will already be too late.
And if you have civil debates on Facebook, your social circle is extraordinarily strange.

Also, Facebook is moderated by the person whose wall you are posting on. I've seen effective moderation in this way. If you have friends that value good discourse norms, and you shitpost in the discussion around their posts, they can and will delete your shit and tell you to knock it off.
Huh? You don't understand why people want anonymity? Or at least, pseudonymity?
And a helmet and gloves?
I'm comfortable using software that has been thoroughly vetted by expert security engineers. I am even more comforted by the fact that LastPass responds rapidly to Tavis Ormandy's reports (and presumably others). I'll use the guys who are extensively studied and do all right over the guys who are less so.

It's like choosing a 4 ⭐️ product with 5000 reviews over a 5 ⭐️ product with 3.
For me it's the ease of adding new sites, which is frequent. As a long time Keepass user I know the pain of generating often requiring navigating two programs for every sign up.

In light of recent revelations I'm considering going back. And possibly telling friends and family to maintain a separate LastPass for their important stuff, in a separate browser.
You've conflated "controversial" with "attracting harassment", which I perceive as pretty much in line with your earlier defence of victim blaming. This is something I reject outright as simply another angle chilling the speech of the victims of online harassment, instead of attenuating the bullies.

I'm responsible for my own OpSec, but we both know that public registries have their own vulnerabilities. Again, I think I detect a misattribution of responsibility. Nevertheless that was a single example, not the entirety of the means by which personal information can be gleaned by the unscrupulous.

My counter-position is that it is essential for we who have influence over systems design and policy to avoid unintended negative social consequences in the services we build.
Show HN: Product Hunt Sandbox
Is there a rule that you can only tell people about your app on one website?

IMO the whole concept of the "launch" is a myth. You don't post a blog post and call it a day anyways. You've gotta keep talking about your business, and that usually means talking about your business in multiple arenas. Launch here, launch there, launch everywhere.
Why not!? So they mess up. I figure all the other password managers either have similar issues and either weren't disclosed, or fixed before the issue was publicly found. No software is bug free.

While they have issues -- at least this is an issue I know that's been addressed.
Easy Property Validation for JavaScript, Node and Express
Try flux (or for macOS- nightshift). I haven't felt issues with my eyes with a quality monitor and a flux-type application.
For me, it is because I have shared folders for credential management for various jobs and it would be way too hard to get everyone to migrate. In fact, I am not aware of any other solution that matches LastPass functionality.

I have changed my behavior to just using lastpass-cli and a self-written Go/Qt GUI wrapper over the CLI - https://github.com/alexzorin/lpass-ui - (only builds on Linux sorry) to protect myself from the problems of the browser extension.
> values should in theory fluctuate based on current situation

The author touched this a little bit with adding the position adjustments

> my castle is worth zero to me if I'm throwing it so I can get you in check.

I know what you mean, but castling into or through check isn't a legal move and shouldn't show up in your list of possible moves.
God forbid someone would have to learn how to use map, reduce and filter - 3 functions present in Ruby, Python, Javascript, PHP, Erlang, Scala and many others.
I have found the opposite to be the case. A newspaper I read had a problem with their comments. The comment section on every story was pretty active but almost always quickly devolved into partisan trolling and bickering and name-calling. They switched to Facebook comments to show real names and there was a dramatic change. Now, most stories get no comments. The few that do are civil.
Sometimes, yes. Usually for the bicycle and the cold.
Great list.

I have Bunnie's awesome Novena, which came with an FPGA (as well as an SDR add-on).

But, as the article says "FPGA development has always been an industrial activity, dominated by brutalist, opaque, and proprietary tools."... I haven't found the FPGA-FOR-DUMMIES guide to help me do anything with the thing.
I'm imagining a Battlestar Galactica situation where things are only networked if absolutely necessary. The internet, now serious business, couldn't be trusted with a bunch of super-intelligent AI connected. I'm imagining the internet reverting to its early days where just visiting a site is potentially dangerous. A curiosity but no place you'd trust with your address or credit cards
Well it's good that I never said you were then. Maybe actually read and understand my comment before responding to it next time.

I said that they aren't liked by companies that want to be able to take everything and never give back. I never said that they were ONLY liked by those companies, and I can't believe you're both capable of writing software and not capable of understanding that distinction, which leads me to believe that you must be either lying (about writing software) or trolling.

You can stay away from whatever licences you like. Their interpretation is very clear and well-known. If you think that something might be 'borderline' then don't do it. Even if it's technically fine it's almost certainly going against the intent of the licence, which is morally wrong.

The only obligation you could possibly take on is the conditional obligation that if you convey a derived work then you must make the source code available. That's not a difficult obligation, because you are already distributing the source code, because you aren't a fucking terrible human being (right?).
If you want to control disclosure of a bug why not offer large sums of money in exchange for an NDA? "Report it to us, keep quiet for 30 days and we'll pay you 100k." Would be a motivator few would turn down.
Which do you recommend? Which for non technical users who can barely manage LastPass?
Dart has really picked up a lot of traction in the past few years. If you do end up using Dart, I've got the perfect server-side framework for you to try out... ;)

https://github.com/angel-dart/angel/wiki
If I follow a project link and it is hosted on SourceForge I leave very quickly. Can't win me back.
The problem with the Trump era to me is that I'm no longer able to tell sarcasm from earnestness.
Nor is it AI.
Few people want to live in Waterloo when they could live in Toronto instead.
Since I didn't see any other good place to post feedback, I thought I would point out that it's "sheer number" not "shear number."

Also, lowrisc.org is not accessible via HTTPS.
Hmm, the post shows that the case was designed in OnShape but the screenshot shows that's its an imported STEP file from Solidworks(?). Admittedly though, I haven't used OnShape since they removed the private project options so I might be wrong.

Understandably, OnShape and Fusion360 (the HSMWorks/CAM integration in it is awesome.) is great for startups and hobbyist. But if you're trying to design some large assemblies or things with complex organic shapes, Solidworks is significantly superior in every way (I'm extremely bias since Solidworks is my favorite CAD software). I know the price is a lot for a startup but I highly recommend any company trying to get into the hardware side of things, to stick with the "foundational" CAD software because in the current CAD software landscape, the investment into these software would pay off in less than a year.
tl;dr: "from code" refers to the fact that you can regenerate the font with your own parameters.

Cool image in the readme showing a bunch of different styles inspired by other fonts: https://raw.githubusercontent.com/be5invis/Iosevka/master/im...
Bitcoin dice founder interview – making over $53k/month
Ask HN: Have you ever regretted hiring a developer?
I'm trying to find out what can go wrong while hiring​ a developer. What might cause that?
Lack of technical skills? Or attitude problems?
I've also seen CPLDs used to recover from board layout mistakes.
That's not an apt comparison.

Every security expert I've spoken to about password managers recommends against lastpass. Typically they recommend 1password, or passwordstore or sometimes even keepass.

The more apt comparison is a product with 100 2 star reviews vs one with 1000 4 star reviews.

1password has more recommendations by security engineers, and has been reviewed in significant depth.

Lastpass has been reviewed in depth, but is rarely recommended by the same engineers.
It is a really pretty font.
I doubt this is going to replace Ubuntu Mono for me (so many fonts have tried, and so many have failed). But it's my duty, and my obsession, to give it a shot for a few days. So I'll spend some quality time with this on Monday. Whether it does or doesn't succeed in dislodging UM from my bosom, thank you very much for the effort you've put in. This is how progress gets made.
I'm going to save these links for the next time I get downvoted for saying that js object system and dynamic typing suck for performance :).

When JS performance threads come up I always mention that JS will never be as fast as Go/Java. Some people have a tantrum when I explain these issues. The sources I usually cite are dense and people just continue to downvote without reading them.
*Sturgeon's Revelation. Sturgeon's Law was actually something else Ted said: "Nothing is always absolutely so."
Yes, AS/400 (iSeries) has integrated SQL :)
1Password.

Just like most security folks recommend.

It's damn usable too.
Unfortunately, the GPL mafia is right, and hardware vendors will continue to abuse their users with proprietary blobs unless they are forced into change.
Full disclosure feels very much like pointing at my house and saying "This house here has a lock which you can get past using a Bic pen if you insert it with the rounded end and turn it clockwise. You could then steal all the things inside."

I get what you mean about "responsible disclosure" leaving users in the dark here but I'd feel much better if you'd just tell me there's a problem with my door before you put it in the neighbourhood news bulletin.

To make it worse, the vendor has the means to inform every user whereas you have the means to inform some tiny subset.

I see this as a discussion of trade-offs whereas you seem to see this as an obvious truth on your side of the argument. That's the only part that concerns me.
New terrorist laptop bombs may evade airport security
Experts in the field of AI have a long history of being wrong. "AI is 20 years" away has become the standard joke in the field. There is no reason to grant expert opinion on this topic any weight.
I strongly disagree. right now you are just taking about vulnerabilities in general but there's varying levels of impact. are these vulnerabiluties ok to tweet?

- able to see someone else's recipes on a cooking app without permission

- some has ability to transfer money away from your account

- disable a pacemaker remotely https://venturebeat.com/2008/08/08/defcon-excuse-me-while-i-...

because how closely technology is to our lives there will always be sensitive things behind someone's code or design as the only defense. it's not always information at risk. there are unethical bugs to publicly expose
tl;dr -- This isn't unpaid work.

Ethics come into play when a company is paying people to hack other companies' software. Google's Project Zero is a brilliant PR play, but it's walking a fine line ethically. Google pays some engineers to hack other companies' software, then publicizes the results.

Given its recent troubles, Uber could benefit from hiring a few gray-hats, pointing them at Google, and releasing some of the resulting bugs under an arbitrary "responsible disclosure" policy.
It's 100$ pm to borrow 24K$. It is not bad overall.
The moment I saw the problem I started coding :-)

https://gist.github.com/depp/3a6f0377284fbb9b33984063856051b...

Rather than brute forcing all possible permutations, we start from all possible final states and BFS backwards towards starting states. There are probably tons of opportunities for further optimization, but this takes ~800 ms on my desktop, and it only uses one core. We don't need to track the number of turns required to end each state, since the frontier will always consist of games which require the same number of turns to end.

Edit: Shrinking my data structures dropped runtime by 50%, and easy & cheap parallelism dropped runtime by another 75% on my four-core desktop. New runtime: 110ms (Intel i5 6600k). The key to the parallelism is that since the total amount of money never changes, we can assign a different total amount of money to each thread, and they'll never have to search the same states.
Lot's of options here:

ssh from my phone and restart the driver.

Go to a fallback ui, and restart the driver.

Have a system util notice the driver is misbehaving incorrectly, and restart it.
Thank you for that. Would any security engineers here who have successfully published vulnerabilities like to chime in? I would appreciate strongly informed advice.
The slight curve to usually straight letters like 'v' and 'k' reminds me a bit of of Inconsolata. I really like this touch and makes a monospaced font flow. Is it also using Spiro splines?
A lot of programmer fonts feel too wide for me. I think I will give this a try . It looks beautiful and it's open source .
That's fallacious logic.

"This password manager is bad, so all the others must be just as bad"... yeah.

Other password managers, like 1Password, are more frequently recommended by security engineers.

They're also not built entirely as browser extensions and interfaces, which massively increases attack surface.

Maybe the reason other password managers aren't tire-fires is because they're designed better and are more secure, not because they have more unknown issues.
But if we get rid of libraries, cut art programs, and social programs for the poor; what the hell would the military even be fighting for?
> I agree that the UI is terrible but keep in mind that IB is very very specifically targeted at active stock traders and institutions, not regular people

I understand what you're saying here, and you're right. Large parts of IB's complexity come from accomodating the crazy stuff you have to do when you want to unload millions of shares without tipping off algos.

However..

The implication that "active stock traders" and "regular people" are mutually exclusive is one of the things holding finance software back.
How SpaceX's Historic Rocket Re-Flight Boosts Elon Musk's Mars Plan
Waterloo is best at bleeding great Canadian engineers to the USA
s/Vim/EMACS/ and you're correct. Unless you want to learn Vi, Vim is not what you want; rather EMACS is what you want, and I will agree wholeheartedly that it is "not easy to use."
Would you agree that the following series of actions is the most ethical way of reporting a vulnerability?

1. Inform the company of the vulnerability

2. Offer a limited disclosure of the vulnerability to the public/whomever you want, without giving away details of the vulnerability, as these would make an attack from an adversary more possible while the company fixes the bug.

3. After the company patches the bug, do whatever you want.

edit: I guess it would be important to ask this as well so we're not just going in circles, of the three general categories of ethical systems, would you say you prescribe to virtue, consequentialist, or deontological ethics?
> To follow on though, shoukdn't it technically be the case that piece values should in theory fluctuate based on current situation.

Yes. One common example is knights and bishops. Both are worth about 3 pawns, but knights are generally more useful in closed positions due to their ability to jump over pieces, while bishops are better in open positions since they can more attack and move long distances.
For all your complaints about lack of a stable ABI, when you run Linux on a PC most of the hardware just works, most of it without out-of-tree drivers. (In some areas like graphics proprietary drivers give you a better experience, but even there typically there is some baseline support in tree.)

The reason this is possible on the PC and not on phones is because there are more standard hardware interfaces that don't exist in the ARM world. The lack of that is why the phone vendors need to do a lot of custom work.
The details for nextcloud's calendar app is here. https://github.com/nextcloud/calendar/blob/master/README.md

I'm a huge nextcloud fan.
How do you tell that LastPass has been vetted better than the alternatives? "Experts looked at X and found no major issues" normally doesn't get very much attention, and potentially isn't published at all, or just reflected in recommendations.

(some of it is of course also depends on the threat-model: something with no (or with more caveats, an explicitly activated browser integration) is way less likely to be vulnerable against attacks launched from a website, reviewed or not)
It's a messy C codebase, which is orders of magnitude leaner than a clean electron codebase.
if multi-monitor support was as solid as it is on macOS, i'd likely switch
I like the idea that you are just walking around asking security engineers for password managers
I don't think this is a bad assumption to make though. Active stock trading, daytrading at least, requires a minimum balance of $25k in the account due to SEC regulations. The people who have that much money available for investment outside a retirement account are very very few and near-entirely investors.
Random muse, but God damn I love Google's code quality.

Compared to the midnight bamboo forest my company built. A challenging codebase, not by its merits but because you need to be clever just to find your way through.

Anyone know if Google is hiring webforms developers?
Is there a particular reason you trade the ASX? It isn't too hard to get a US brokerage account in Australia.
I respect your opinion and the belief that library education continues.

I think a far greater cause is the lack of critical thinking taught in schools, the lack of engaged debate and encouraging people to think for themselves and gather their own information. We had to write persuastive papers, research topics from encyclopedias, etc. It seems kids don't do that in school these days. (get off my lawn)
The last time I went to a library was in Sweden, and it was a fantastic library. They had all the multimedia stuff you could want - wifi, internet computers, a "media lab" for audio/video/music editing/XCode, digital media rentals, plenty of study areas in a gorgeous area with panoramic windows onto a park https://1001libraries.files.wordpress.com/2014/09/malmocityl...

The computer/wifi access does require a library card, but that doesn't seem to onerous to me.
Another example:
https://github.com/dotnet
Exploring Emacs RX Macro
> Air gap the computer and control the inputs and outputs. We can formally prove what a system is capable of. That fixes the problem.

Debates about superhuman AI have focused quite a lot on what it would mean to "control the inputs and outputs" while still being able to get some kind of benefit from the AI.

You can indeed formally prove that a computer will or won't do certain things, so you could use that for isolation purposes. But in order to be useful, the AI needs to interact with people and/or the world in some way. Otherwise it might as well be switched off or never have been built in the first place.

If it's really a superhuman intelligence with superhuman knowledge about the world, then interacting with people is where the risk creeps back in, because the AI could make suggestions, recommendations, requests, offers, promises, or threats. Although there are plenty of ideas about limiting the nature of questions and answers, having some kind of separate person or machine judge whether information from the AI's communications should be used or how, or limiting what the AI is programmed to attempt to do or how, none of these measures are straightforward to formally prove correct in the way that simpler isolation properties are.

If we made contact with intelligent aliens, would formal proofs of correctness of the computers through which we (say, exclusively) communicate with them guarantee that they couldn't massively disrupt our society by means of what they had to say?
FLAVOR: Ubuntu Core

HEADLINE: Support ZFS root FS, with mirrored disks.

DESCRIPTION: Allow installing with a ZFS mirrored root volume, and ensure update-grub/update-initramfs correctly detects the situation.
It's only a fine line if you think everything they find would remain unfound without them.

It's sort of like saying Consumer Reports walks a fine line if they alert the public about any dangerous behavior they see in the products they test. The danger is always there, telling people about it so they can avoid it and it can be fixed is to the public's benefit.
It's always been a bullshit and disingenuous argument, especially for the goal of defending Wikileaks.

The truth is Assange is paid to hurt the US, and censor information that damages Russia. That's why he does things like publish the personal info of CIA personnel children, censor emails damaging to Russia, and hold regular meetings with arms of Russian propaganda. Assange has tacitly admitted this and didn't even try to deny it.
Sounds aweful, the absolute worst. Wow
I'm actually a little curious as to what sort of workflow others are using for their calendars. Personally, I use a terminal/text based program named khal:

https://lostpackets.de/khal/

to view and edit calendar events and vdirsyncer:

https://vdirsyncer.pimutils.org/en/stable/

to sync this with my email provider, which supports CalDAV and CardDAV. I'm asking about others workflow because this simple setup allows easy access to calendars across multiple devices. Although I don't often do it because I don't have a need, vdirsyncer just dumps the CalDAV events into a folder in text format, so it's pretty easy just to write a shell script to modify, automate, or maintain calendar events. I also like it because it allows me to backup my calendars for record keeping sake.

Now, I don't claim that this setup is for everyone, but are there useful, interesting tricks that this workflow doesn't allow?
This is Windows 10. How do I enable that option?
Hinton? Wow. After decades of going on about neural nets while most machine learning folks pursued other things, he's sure milking his 15 minutes of fame for all they're worth!
... there _is_ an apt command. Apt-get install aptitude if it's missing.

It has pretty progress bars too ;)

I don't think rhel is much better; dnf?!