skysight-inc/HackerNews huggingface dataset:
The whole execution contexts thing is sort of based off an assumption that the unique-&mut stuff has to do with thread safety. It doesn't. In fact, it had no bearing on thread safety in Rust for the many years before scoped threads were made possible by removing the 'static bound on Send.

http://manishearth.github.io/blog/2015/05/17/the-problem-wit... details why it's necessary.

The article does sort of mention this (and I have talked with the authors about this before) but IMO it underrepresents the importance of it.

One thing I did discuss with one of the authors at one point was swapping around the guarantees a bit -- allowing multiple &mut for cases not involving any form of runtime typing (enums and vectors are both cases of runtime typing -- in a vector the number of elements is runtime dependent). This would create a significantly different language and be incompatible with the vast majority of the ecosystem; however, it would still be safe, and has the potential to be useful. I even started hacking on a fork of the compiler that does this, but never got the chance to finish it. The idea in essence is not too hard to implement.
Not everyone is using Docker.
Yikes. You use SSH passwords?
TV replacement...Imagine having 5 large screen tv's in your living room watching every march madness game that is currently happening all at the same time.
> I get the sense that their security plan in general (either with their own police or just hired security) is just based on generating a perception of safety via a display of largely unnecessary force.

Churches often have policing needs, both routine (Sunday traffic, filing reports for legal purposes) and acute (murder, domestic disputes, people with psychiatric issues).

And even if it is just about perception, why not? If your offering counseling services to people, a sense of safety is certainly important.
If you really are concerned about this : buy organic.

If organic food gets more interest, more and more people will start growing it, and more and more people will have access to good healthy food.

These poisons wouldn't be abused if they wouldn't be profitable...
and that his name is Tomasz Fijałkowski.
It's not false, it's from someone else's experience. Maybe it's up to different gate agent or airport to decide what they'll issue.
It offers steep learning curve

Let's just let the multiple language issues in the above fragment slide, as they're not native speakers. But this, however:

What is more, such overall JavaScript applications require less code and fewer files, compared to those ones, with different languages on the backend and frontend.

Is an extremely broad claim to make, with dubious foundations.
I disagree with regards to your risk analysis.

Your cost/benefit considerations prioritize relatively miniscule security improvements without considering usability costs or diminishing returns. While we're at it, why don't we just use one-time pads? After all, those are impervious to any form of cryptanalysis.

The risk profile for most users does not require a hardware-based auth factor if it results in real world usability sacrifices that end in either 1) accidental misuse or 2) gradual disuse.

You're optimizing for someone compromising the device, great. But the point is that if that risk if on the table, all of this work is essentially meaningless anyway.
Indeed - but there's very little in the way of good examples on how to do that effectively and in a resilient manner, last time I checked.
No, I'm pretty clear about how Yubikey TOTP works. The point is that the threat model doesn't make sense. Any device you can use Yubikey TOTP on is significantly less secure than your iPhone.

Yes, I'm clear that the attacker in this scenario doesn't get your TOTP secrets. If your primary goal is to protect your TOTP secret, I see your point. My problem is, my goal is to protect my actual account. I kind of don't give a shit about my TOTP secret, because Google will give me as many new TOTP secrets as I ask it for, but I only have the one account. If the device I'm securely generating a TOTP secret for is compromised, I'm going to feel pretty silly doing a security theater dance with my Yubikey as my attacker steals my cookie and locks me out of my Google account.
I was recently at a Microsoft Training Centre, where we also had a chance to test the Hololens. All in all, it's crap. It is pretty heavy, so I can't imagine wearing it for more than 10 min. The latency was ok, but still somewhat disturbing. The gesture recognition was bad. I, and later on also the Microsoft guy, had to tap twice several times to trigger an action. The shown floor shop example was a bad choice. Speed at the shop floor is key, for workers and for other functions, and this is what the Hololens didn't have. During the show off they had to restart the Hololens - a clear fail I would say, but judge for yourself.
...neighboring police forces routinely battle each other in the present day U.S.?
What do you think this new paradigm in UX will look like?
It's absolutely not a necessity, but more incentive for writing OSS could be nice.
Educational...my kids love it. its a very immersive way to learn.
I have a tv.
The article says it isn't used as a crop desiccant in wheat. If you want another anecdotal data point, as a grain grower myself, I have to echo the sentiment there. I'm sure someone has tried it, but I see no reason for wheat to need desiccation generally.

Edible beans on the other hand...
"Pick up that can".
This 100%. They are OBVIOUSLY using your device from a commercial in a funny way. You know about it.

But apparently what we don't know we don't care about when you tell us and we know but we can bury our heads in the sand.
Types are pretend in TypeScript and Flow the same way that types are pretend in any other typed language. Types are used at compile-time and not runtime in both cases.
I was thinking of the same thing! 70% is "too slow" as well.
Is AR the future?

I demo'd google cardboard VR to a bunch of kids (prob about 200 ish) who thought it was amazing. They really enjoyed it and the feel from teaching them using VR was that this was another tool people will use in the future.

Kids are already wired up with headphones, phones in pockets, phones wired to external battery boosters. I say this because I thought cumbersome cables from phone to goggles would be a no no and the technology would have to wait for a wireless solution. But I think I am wrong, kids already have cables snaking around their bodies.

Personally I think external cameras that can show 'the outside world' inside the VR world is the future. I'm interested in your thoughts on AR... this I see as a great tool for industry, but not for the general public?
The only way I've found to protect against this is by being paranoid.

Whenever someone asks for my boarding pass, I show them my phone, while the paper copy is safely in my pocket.
Ok, when Glimmer's motivation was only typechecking, why not just fb flow then?
That website is almost upsetting:

"The biggest benefit to Global Services is the excellent service that is given to those with the status. They receive what can only be described as the royal treatment. Below, some examples:[...]

Irritated with a flight attendant or gate agent? Complain about it and he/she will be reprimanded by HR."

So if you are a GS passenger you can literally get people reprimanded by their own HR? Fab.
There are full fare tickets that can be cancelled/refunded, or changed to other flights, at any time. So there's always some amount of no-shows. So they don't really "know" that they cannot honor the oversells. There's also equipment swaps to smaller aircraft, flights cancelled for mechanical issues that then moves passengers to other planes, etc.

Denied boarding is actually pretty rare, happens to about 0.1% of passengers: https://www.rita.dot.gov/bts/sites/rita.dot.gov.bts/files/pu...

The other approach would be to never overbook, but if you're the only airline not overbooking, your margins will be lower. Empty seats don't make money.
I feel that some of these issues occur due to an over-reliance on object-oriented practices, in particular 'encapsulation' of state into objects and triggering side-effects in callbacks. The usage of Rust brings painpoints to the fore, but I'll argue that the code is better done otherwise, independently of borrow checker.

For instance in the 'Callback through closures' example, there is code like:

setTimeout(|| {
activityLed.toggle();
}, 2000);

First, in an embedded system, you cannot have multiple sources of truth. So its not just because of Rust ownership reasoning that `activityLed` cannot be shared between callbacks - if multiple events is to be considered for a given output they should be syncronized explicitly.

Instead I think the code should be more like the following, which models calculation of new state as a pure function. Side-effects are separated out by storing the desired effect as data, dedicated function for realizing. Time is just data, time-based logic without depending on hidden state.

This increases testability significantly. And it can be fully reasoned about by Rust, no conflicts with the borrow checker.

# for each tick
# calculate new state
if (now >= state.toggleLedTime) {
state.activityLed = !state.activityLed;
state.toggleLedTime = now + 2000;
}
# and realize it
updatePin(config.ledPin, state.activityLed);
In every room?
I partially agree. Something to consider: Like the callbacks, prototypes are very flexible, so this flexibility comes at the cost of interoperability. When you have a standard way to declare classes, methods and meta data for them, this information is easier to consume from other libraries.
"if that risk if on the table, all of this work is essentially meaningless anyway"

I can't agree with this strongly enough. If someone's willing and able to hack your iPhone, then you need more help than a random art major writing a yubikey howto can give you.
Oh, boy, little lizard, hope you're ready for a cease and desist from the owner of "this kind of science". :)

(said in good fun)
/angry

Tell me, how does dementia lead to the birth of a healer? How does someone regressing mentally, with their ability to communicate being completely lost, with their behaviors becoming more and more childlike to the point where they can't even feed themselves, how does that signify becoming a healer?

The only blessing in watching my grandmother's decline like this is that it was swift. Six months of hell, of watching someone you love becoming frustrated at their inability to communicate even the most basic thing. Of watching them forget how to take basic care of themselves. Of watching a simple door lock with the code printed right above it being sufficient to keep them from using that door. Of watching them play with a child's woodworking set because they no longer know the difference between that and the beautiful works they used to make with wood.

Fuck this shit. Birth of a healer my ass.
Seriously, instead of a New Deal with public infrastructure projects, we're spending to create make work jobs with the TSA.
I will grant you the phishing use case, and that one is relevant to average users. I admit I mostly work with infra folks that would not easily be phished, but might have one of their devices compromised unknowingly rendering phishing moot.

TOTP is a mess in regard to phishing but if we have tools to avoid some of the problems while we are stuck with it, I feel they are worth mentioning.

Particularly for people savvy enough to purchase hardware tokens for personal use.
Thanks!

So better off to just log to a file and monitor the tail of that and send the data off with a seperate script?
Not on the ceiling above your bed. Not on the bus. Not in the passenger seat of your car.
Well they got a banking licence recently https://monzo.com/blog/2017/04/05/banking-licence/

I don't really understand why you pick on 32-bit/64-bit. I assume you wouldn't touch floating point with banking. What is it you think Cobol and big iron can do that Go and AWS can't?
And a spot to recharge your electronics along with free wifi! Don't forget those parts.
I too do enjoy paying the bribe just to get an acceptable service! Oh, it's just like when visiting a poor post-Soviet country.

I am so glad that United officially incorporated this wonderful custom. No longer do I need to decide on the bribe amount on a per-case basis, I can now just pay once!
Thanks, didn't realize this was already far along:

https://cloud.google.com/bigquery/public-data/gdelt-books

http://www.gdeltproject.org
No no no. Garbage collection has some mandatory overhead. Sure you can do an amortised analysis. Just like pushing into the back of a C++ vector is O(1) amortised... except that every once in a while, the entire vector has to be copied over into a larger block of memory, costing O(n) for that particular operation. You can mislead people, but you cannot trick the computer and hard realtime constraints.
Ubuntu 17.04 Zesty Zapus released
Can you give me an example of a language with GC that doesn't introduce non-deterministic delays?
Also Testament (1983), an American movie about a small town far away from major cities to avoid the nuclear war itself, but unlike this typical situation in fiction, they don't live happily after but eventually have to deal with radiation sickness due to fallout and the problem of supplies running out.
No, I understand that.

Let me simplify my point: Whether or not the TOTP secret is on the smartphone, encrypted or not, or sent to it from another device, is the wrong attack vector to optimize for.

Getting mainstream users en masse to consistently and correctly use any 2fa is a win.

Furthermore, you're moving the goalposts a bit by using the Yubikey in this scenario. So sure, if someone compromises your phone they don't compromise the Yubikey, but 1) how certain are you that your Yubikey is safer than a modern iPhone or Android model with the crypto and security engineering that entails and 2) how certain are you that accessing your iPhone's filesystem or execution state does not bypass this whole dance entirely?

For you, the minimal security gains might outweigh the usability costs if you know what you're doing. But a hardware token for most people, as the technology currently stands?
VS Code with the extension has nice autocomplete and navigation features (peek definition and such).
The demo will blow your mind. My biggest takeaway was that AR probably has more potential in the long-term than VR. VR is immersive sure, but you quickly run into physical boundaries or your mind becomes out of sync with your body. AR has all the benefits of VR but layered on top of your physical environment, enriching it and providing a reference point.

To speculate, I'd say VR will find its killer app in gaming/entertainment (similar to TV), and AR will become the next great I/O interface between humans and computers (similar to phones/tablets).
In industry. Every factory I've worked in would benefit from AR.

Where's that bit? Where's that tool? How do I repair this thing? Who attached that bit to this thing.
In the end I think the idea of microservices as totally independent from each other is just a pipedream. There will always be dependencies between them. His solution to create more microservices for shared libs will create a whole other set of problems. In the end people just have to talk to each other and sometimes you just can't avoid that people have to synchronize their work.
Where's Ariya in all this? He seems to have also completely abandoned Phantom...?
U2F happened because Google developers were being phished. We are all phishable, probably especially those among us who believe we're not.
The delay is still non-deterministic, meaning that there is no upper bound that the pause can be guaranteed not to exceed.
HoloLens is cool but most of the HoloLens applications you write will be consumed on the $299 software-compatible Mixed Reality headsets that ship later this year (it's amazing how few people are paying attention to this announcement - Microsoft uses Mixed Reality as its branding but these are basically high end VR headsets with integrated tracking for a third the price of Rift and Vive devices)[0][1]

From an application developer's perspective, the only difference between HoloLens coding and Mixed Reality coding is that when constructing 3D scenes your HoloLens app should have a transparent background so the person can see their room through the viewport because that's what they're buying the expensive headset for and in Mixed Reality you should have an opaque background because it's VR not AR.

The really big thing though is that $299 is roughly what you'd otherwise pay for a pair of big monitors. Full on virtual desktop support with floating windows for these devices is being shipped to every Windows 10 machine starting this week via Windows Update with the intent being you don't need old-school monitors just work in the headset, or with your monitors, or however you want.

Windows now has (or will shortly depending on your Windows Update timing) a built-in developer mode simulator for application testing of Mixed Reality code without a physical headset. The simulator is still a little buggy and incompletely undocumented (remember to shut it off when you're not using it) but it's pretty incredible and more than enough to start building and testing applications.

[0] https://www.engadget.com/2017/04/12/acer-microsoft-vr-mixed-...

[1] https://developer.microsoft.com/en-us/windows/mixed-reality
Speed.

With the history file already there, you don't have to wait for it to populate.
There is some discussion on that here:
https://github.com/rust-embedded/rfcs/issues/23
When this was about skin colour, it used to be called racism and apartheid.

When it's about class it's called economics.
Thanks for the work, PhantomJS made generating screenshots to show different UI states in bulk effortless.

It has saved me days of effort over the last year.
Do you think your malloc/free (or kmalloc) implementation has no non-deterministic delays? I hate to break it to you, but malloc/free is not magical and O(1). It's complex, even reaching into the cache and operating system, and non-deterministic.
I wrestle with this one all the time. A shared library creates a weak dependency between the systems that use the library. Making changes to that library may affect those other systems in unpredictable ways. In my opinion if you leave business and domain logic out of those libraries and have a well defined and tested service contract then it is reasonably safe to create shared libraries. I have found that maintaining backwards compatibility and using feature flags in these libraries goes a long way at making them relatively painless for the microservices that use them to deal with change. We also generally only use shared libraries for codifying best practices and conventions.

But really, it's a constant struggle. Micro-service teams are semi-autonomous and are going to recreate functionality at will. That's a communication problem mostly though.
New Night Lights Maps Open Up Possible Real-Time Applications – NASA
We make our users download tens of megabytes of shitty unoptimized JS for tracking, ad networks, unoptimized images, autoplaying videos, and so on and so forth now.
A TV everywhere I go and in any direction I choose to see one is not something appealing in the least. In fact it's a repelling idea.
Which editor do you prefer?
I created this new social rating engine
Hi I created this new sort of social rating engine its called "Randomness Logic" it users a sort of stochastic algorithm incorporating user votes. Its for people to post articles and have interesting content delivered in a new concept, it took 4 years of programming and prototypes to get to this, Please give me your feedback it would be highly appreciated. Thank you for reading

The url is: http://faceclicker.com
We'll just have a Babel of dialects, pun intended. There might not be a technical reason for having JS, but there's a social one -- we've got plenty of people who call themselvs "JavaScript programmers", and people tend to be set in their ways to an awful degree.

I mean, on the backend, there's no ultimate technical reason why you couldn't switch -- the closest you can come to the browser situation is the limited PHP hoster of the early oughts -- and still we don't see a rapid progress away from awful languages. Just more people duct taping said languages into something slightly more sane.

We'll get the same for JS. It's the new Pascal/C in that regard.
Churches should use some of their tax-free money to provide assistance to the poor and needy like they're supposed to.

The poor certainly can't afford to fight anything in the courtroom.

The needy (such as people with mental issues) certainly shouldn't be arrested just because they're going to a church.
Some users report rare sounds on their 15-inch MacBook Pro 2016
So, let's just say for a moment that this applied to 100 flights per day, and meant that United foregoes $1,000 in revenue per seat that they don't sell. They would be giving up $100,000 per day, or $1 million every 10 days, or roughly $35 million per year, by leaving a first-class seat empty on every flight. Weighing that against the risk of pissing off one or two first-class passengers a month for those times when everyone shows up for their flight and a VIP suddenly wants to claim a seat, just doesn't make good business sense.
It's a good question, and I was about to mention the tragedy-of-the-commons trade-off, but you already did half of that in your final paragraph.

The other half is, that the third-party ad networks themselves are in fact already feeding a tragedy-of-the-commons situation. Somewhere in the whole maelstrom of shitty clickbait websites funded by ads for other shitty clickbait websites. I read an article recently linked here about those weird vague thumbnail image clickbait links (the ones about celebrities, diets and skin diseases, mostly) that appear below low quality articles. They followed the links, and it just led to more and more of the same, but it did so while spiraling downward into a lowest common denominator like way, way lower than I'd have imagined.

There's some really out-of-control complex systems (in the systems theory sense of the word) in the guts of the advertising industry and they are already causing tragedy-of-the-commons situations way before, and regardless of, people using ad blockers.

Disabling the ad blocker is not going to help fix those (they'll just gobble up the extra profit). And even then, to (personally) answer your question, yes I think using ad blockers is a net benefit if it keeps those systems at least somewhat in check.
I was in line behind a girl flying from Schiphol to the US a couple of years ago, and they told her she needed to throw away the unopened bottle of water she'd purchased from a shop in the airport. She was arguing that she'd bought it right there and it hadn't been opened, and the guy said, "they're supposed to seal it in a bag. Maybe you can go get a bag?"

At that point, the rule isn't "you aren't allowed to bring liquids onto a plane because it might be a bomb". The rule is "you have to bring your bomb on the plane in a special bag".
United has an interesting way of dealing with elite status these days... sure you still have silver, gold, platinum but then you have the real elite flyers.

You might be the first person in boarding group one, but you'll still be eclipsed by the 1K / Global Services / Polaris flyers who are the true elite both in status and in total dollar spend. They don't even bother to wait in line - they just show up when boarding starts and are shuffled to the front of the queue (along with a friend if they want), no questions asked.

Based on those layers it wouldn't particularly surprise me if one day as a mere Gold flyer I get bumped for higher tier elite. United has made it clear total dollar spend is how they judge the true status of flyers.