skysight-inc/HackerNews huggingface dataset:
Beyond bootcamp: Is immersive learning a must for coding?
You haven't been reading the blog posts on bloom filters. Or maybe you're saying they're not sensible, in which case I agree.
U.S. Agency Moves to Allow Class-Action Lawsuits Against Financial Firms
Americans are dying because our healthcare is too expensive. Not the insurance but the actual tests and procedures. They're all crazy expensive compared to anywhere else in the world. Graphics that really show this clearly could generate political momentum for fixing that.
> It doesn't make much of a difference whether you need to prove a JML specification or an Idris type, but a JML specification allows you to optionally use weaker but much cheaper forms of verification like concolic testing, regular test generation etc.

I think you're overshooting the target I was aiming at. You can use simple algebraic types in Idris and check your invariants dynamically as you would in any less expressive language, then incrementally move some of these to statically checked invariants where feasible.

Specification-tools require a lot more work in separate specification languages, which are often unwieldy.

> if you hear a lot about Idris it mostly means you hang around Haskellers, who have taken a liking to the language because of its similarity to Haskell in both spirit and style.

To some extent that's true. So take Haskell, remove the default lazy evaluation which trips so many people up, remove all the restrictions around types since it supports full dependent typing (no more whacky type trickery to check some invariants statically!), support for syntax extensions to support EDSLs, and easy integration with C. Welcome to Idris.

Frankly, this is pretty much the full wishlist that advanced programmers have been wanting for years, and I've seen a lot of interest in Idris since its recent 1.0 release.
the rep in rep ret is ignored, is just used for alignment;
the 'housekeeping' code is to handle non-multiple of 8 loop counts.

Still, unless I'm missing something, the code should be executing 8 adds per clock[2]; at 4ghz, that still above 1us for 500k adds.

GCC doesn't seem to be able to fold the loop given a constant expression, unless the function is explicitly declared constexpr; in which case it will complain about the accumulator overflowing, but gcc doesn't seem to be taking advantage of it.

Clang does not vectorize the loop but will replace it with a constant given a constant parameter.

Bottom line, I'm not sure what's going on with the article's measurements.

[2] potentially 12 for skylake or even 24 with avx.
(2013 – present) SSL hardening advice
This seemed a little partisan, but I decided to share it anyway since it raised a number of credible concerns nonetheless.
While Reddit seems less than competent to prevent this kind of manipulation, it does apparently violate Reddit's terms of service.

"You agree not to interrupt the serving of reddit, introduce malicious code onto reddit, make it difficult for anyone else to use reddit due to your actions, attempt to manipulate votes or reddit’s systems, or assist anyone in misusing reddit in any way. It takes a lot of work to maintain reddit. Be cool."
Author here, responding here like I did on Twitter. DNS resolver implementations matter here greatly. I received so many DNS queries (without me actually responding to any of them) that I quickly filled up my VPS with gigabytes of data from IP addresses of DNS resolvers across the Internet.

Saying "this is not the major security issue the author describes. He couldn't have hijacked any DNS traffic this way." seems a bit dishonest. You're saying that you have personally vetting all the DNS implementations of various DNS resolvers and have verified all of them take the resolution steps you've described exactly? If this is the case why did I receive so many queries (such as A, AAAA for the NS hostnames - which I assumed/assume was to cached these IP addresses for future resolution of the TLD's IPs). The way dig resolves things is different from how many production resolvers would do so, etc.

I can certainly see that some resolvers may take different steps for resolution which would make them unaffected by this issue (I'd have to think on it some more). A big issue here is of course that I didn't actually attempt to poison a bunch of the DNS resolvers which were hitting my server because I didn't want to affect any actual users. "Proving the point" in this case would've been dangerous and probably illegal as well.

That being said, mapping out how various DNS resolvers would perform their full resolution is an interesting side project and I've added it to my TODO list :)
Not sure how you'd get that (n+1) business off the ground. Even with the current happy-go-lucky funding climate, I don't see much success in pitching the idea. "We'll take on the giant incumbents, by accepting additional risk on behalf of our clients, in return of reduced profits".

I agree that there would be a solid market demand for this company. The same way there would be much demand for a telecom/isp that provides more speed at reduced price. Consumer demand isn't always the only thing needed for a business to succeed, despite what pg says.
Does anyone have experience using the Secrets[1] password manager on MacOS and iOS or opinions on how it compares to 1Password security wise? It seems to allow local vaults with iCloud Sync and the pricing is a one time payment as opposed to a recurring subscription model.

[1]https://outercorner.com/
It'll be interesting to see the court cases play out for this, and what the long-term effects will be -- both in switching WA to a more progressive tax scheme, and in the effects of a city implementing a tax like this (assuming Seattle prevails in court).

Seattle (and more broadly WA) taxes are all kinds of strange.

As someone said: isn't weird we have the two wealthiest people in the world here, but can't afford schools?
Yeah, that might be the case with fi, and it is sort of the natural way of things. I don't remember any older Google products having ever had a good support system, though.
Didn't they just massively throw their client under the bus? Not hard to find the guy's name, and now everyone knows:

- his big political stunt wasn't even his own idea, and

- he paid people a ton of money to fraudulently promote it.

What a way to burn your clients...
That would be boring
Incidentally, people undergoing cancer treatment tend to go into debt and file for bankruptcy at a significantly higher rate than the genpop
http://www.newsweek.com/many-cancer-patients-must-face-bankr...
So so sad. I learned a lot from the RT business model while building WakaTime.
The OP should be happy. He may have dodged a bullet on work environment. Shady is as shady does.
Not really. Can you name a website that sold for anywhere near $500 million that required so little effort by the founder who was the only person working on the website? The creator of PoF had a work week that consisted of 1 or 2 hours of work. He did not even hire a another employee for 4 or 5 years after he started the website and the site was pulling in a million dollars a month at that point. The amount of work he put into the website is pretty amazing for the amount of money he got from it.
REGISTRATION STARTED FOR HACKERS BASIC EXAM https://hackernucleus.com/registration-for-hbe/

HACKERS ARE USING THIS NEW ATTACK METHOD TO TARGET POWER COMPANIES https://hackernucleus.com/hackers-are-using-this-new-attack-...

BEST HACKING TOOLS OR SOFTWARE WITH EXPLANATION https://hackernucleus.com/best-hacking-tools-or-software-wit...
You should just get an experienced designer to review it and help you create a good story.
you will still take it down with a DMCA request though.
Just curious, what is it to do with breathing clearly through both sides of the nose throughout the night?
The employee stock is still in lockup period, so they saw exactly no profits on this as of yet.

This article is taking about July 31 as the earliest lockup expiration, but not clear as to which class of stock this is for: "The perceived catalyst for an impending drop is a total of 1.2 billion fresh shares that will become available for sale after post-IPO lockups expire July 31 and Aug. 31" Source: http://www.marketwatch.com/story/snap-short-sellers-bet-on-a...
Gtfo of Starbucks. You won't get shit done there. Find a cozy corner of your room or apartment and set up camp.
All companies can use ‘confidential filing’ IPO process now
Logging the stack in what format? 500 bytes could fit as much as two hundred numeric entries, or as few as five fully detailed text entries.
Did you have the big colorful picture books about what computers are for and how they work?
21 Companies Leveraging Blockchain for Identity Management and Authentication
How to Win Tech Candidates from Google, Facebook
There are other ways to find functions besides knowing their addresses a priori.
It's possible that aircraft carriers aren't purchased and constructed with cost as a factor. Or if it is, a higher cost may be considered a positive. ;-)
Does a family making 250K-300K in Seattle really count as "rich"? I don't object to the tax in general, but I do object to the terminology. It is certainly a high level of income, but rich?.

http://blogs.seattletimes.com/fyi-guy/2014/10/06/as-seattle-...

This is targeting the top 20% of earners in Seattle. Time will tell if this is a sound policy. I think they could have achieved a similar level of tax by having a higher level of tax aimed at a much higher level of income (1 million plus). A family earning 200-250K in Seattle will definitely feel this tax. You still operate at a high level of privilege at that income level, but it isn't crazy. For comparison, according to cost of living indexes, if you earn 250K in Seattle you would need to make ~385K in SF, or only 140K in Atlanta. In Atlanta 140K is comfortable, but not "rich". I really think these sort of taxes should target the top 5% of earners only -- everyone below that actually feels it and is not "rich", especially in higher cost of living areas like Seattle.
> The Seattle City Council on Monday unanimously approved a plan to levy a 2.25 percent tax on the income of residents earning $250,000 or more annually. The Council estimates that the tax would bring in an additional $140 million each year.

In other words, they're offering a $140 million incentive for the high-earning residents of Seattle to move out. This is a good way to get "brain drain".
What is fun is the Litecoin one, and the fact there are ASICs with crappy power efficiency like the GAWMiners Fury and any other miners using the Zeusminers chips.
Yes, there are native UIs on desktop. I tailored my answer for react-native, as you mentioned that.

1. macOS -> Aqua [1], apparently there exists an community package for react-native [2]

2. react-native-windows [3] by Microsoft which apparently has support for Windows 10 and xbox

3. There are other UI kits for linux and cross-platform, e.g. qt and gtk. I did not find much about react native there, except for ubuntu [4]

PS: I got those hits by googling "react native for desktop" :P

[1] https://en.wikipedia.org/wiki/Aqua_(user_interface)

[2] https://github.com/ptmt/react-native-macos

[3] https://github.com/Microsoft/react-native-windows

[4] https://github.com/CanonicalLtd/react-native/blob/ubuntu/REA...
"Hustle", like "passion" and "wanting it", is a popular imaginary virtue to claim when your success was either down to luck, or something obvious and unimpressive (e.g. you paid a bunch of people to astroturf for you).

These guys didn't do anything remotely new or skillful. All that's special about them is that they're brazen enough gloat openly about cheating.
For what kinds of messages is snapchat the best medium? I've tried using it but can't understand its purpose.
I didn't know Rescue Time was from YC and I've used their product for years.

Sad to hear about this though.
A 32-bit client can only handle 300,000 files? Could you imagine if 32-bit windows fell over at that level. Is it storing every file in RAM?
None of the claims in this have anything to do with the essence of security, they all address the window-dressing of security.

What does it mean for something to be secure? As I see it, for something to be secure, it means that every security invariant holds under all attacker models.

Let's break this down. What's a security invariant, and what's an attacker model?

A security invariant is a statement like "information may only be read by principals authorized to do so" or something similar. The blog post talks about "oh well every exploit I've seen pops a shell with /bin/sh and we don't have /bin/sh so you can't hack it." This attacks the symptom and not the disease. If the attacker is in a position to run /bin/sh you are already at a disadvantage, the attacker was previously going to break your security invariant by spawning a shell and then copying out your secrets. They could instead just use their code execution to read the secrets directly, ala heartbleed, if they are in the same address space.

An attacker model describes the attacker, their motivations/goals, and capabilities. For example, what if the attacker wanted to take your unikernel enabled app and repurpose it into an e-mail spam bot? Well, there isn't a writeable FS and there isn't the ability to exec stuff, so the old model of "copy some files up and run them" won't work. However, is there executable memory in general? Can the application allocate existing executable memory? If the application is, or involves, for example a modern JavaScript interpreter, then it has to be able to do this in some capacity. So now the attacker modifies their methods so that their goal can be achieved in the constraints of this new system.

There is an argument you can make about sandboxing and principle of least privilege, but that argument transcends unikernels really. Look at the sandboxing and separation strategies used by programs like chrome, vsftpd, and qmail. They (in conjunction with enforcement technologies like seccomp-bpf or selinux) can make the same guarantees about the lack of system calls and least privilege.

I'm pretty sure that the title of this post really should be "unikernels are obscure" because that's the layer of protection you're really getting here.
So I'm working on a side project that basically has an HN/Reddit interface. One monetization idea I had for down the road is basically a legitimate means to boost certain posts for certain periods of time, giving them prominence on the site in a clearly labeled area for such purposes.

Is this something people would be interested in?
How to Write a Hit Song
That seems a roundabout way of sizing a bloom filter. Here's what I came up with when I first implemented them for Newzbin: https://hur.st/bloomfilter

m = ceil((n * log(p)) / log(1.0 / (pow(2.0, log(2.0)))));
k = round(log(2.0) * m / n);
If you're into this kind of thing, I enjoyed reading "Trust Me I'm Lying" by Ryan Holiday.
...you mean like Reddit's "Promoted Posts" that appear at the top of the page?
Registers aren't all that valuable on architectures with reasonable numbers of them, and a lot of architectures do "branch and link" instead of an x86-style call. Branch and link generally means that control flow jumps elsewhere and the address of the next instruction is stored in a register. You jump back to that register to return. Functions are responsible for saving the link register if they clobber it.

This has at least one benefit over x86-style calls: a function like this:

void foo(void)
{
for (int i = 0; i < 10; i++)
some_leaf_function();
}

has to save its own return address to the stack, but it only needs to save it once, so all ten leaf calls can happen without stack access for the return address.

Of course, architectures like x86 have specialized hardware to optimize calls, so it's probably a wash in the end.
I’m pretty sure this article is making unverified claims. Here’s my understanding from reading some threads on Agilebits’ forum.

All native 1Password apps (mobile and desktop) support creating, reading, and writing local vaults, except 1Password 6 for Windows, which only supports reading local vaults.

The reason 1Password 6 for Windows doesn’t support writing local vaults is that it is a ground-up rewrite of the Windows app, and they have focused their efforts on cloud support since they see that as their main storage offering.

There’s been no indication (afaik) that they intend to remove local vault support from the other clients. Rather, they have indicated that they would like to add local vault support back to the Windows app but it’s not a high priority. See this forum post from April (https://discussions.agilebits.com/discussion/comment/365276/...):

> Windows is the rare exception where we have to build a brand new program and we're starting out with 1Password.com memberships first and hopefully add local vaults.
You have to make sure your spec is right, but you also have to make sure your tests are right, and people are pretty happy with the idea of testing.
Similar experiences.

CSS3 animations are cool because they have the potential to be superior, but 3 out of 4 times it seems that the equivalent JS/$.animate is smoother and more consistent.

It's the not the reality I want, but it's the one I've been shown.
I don't really see those as different entities. Governments are just businesses with a different name. I pay them for a service.
Both the English and the German wikipedia, maybe something along the lines of:

https://legiblenews.com/?l=de,en
Yeah. Either they care more about the lolz than future $$, or this, itself, is a made up story.

What if this is just a ploy to make this, a possibly fabricated, story go viral to undermine the candidate?

So meta.
The Seattle area definitely does - they have #28, #41, and #80 out of the best 100 high schools.
The PR firm isn't at all ashamed of what they've done, in fact they are publishing this as an example of what a great PR firm they are. After all, it shows their "hustle". It's odd, but not at all surprising, that someone in the PR/marketing world can fail to even see how something might be morally wrong with their scummy methods.
Edit: yes i know this is an unpopular opinion and will get downvotes. But it's also an honest question of mine that I've thought a lot about over time and I would appreciate a response if you want to downvote.

Even as a 'non-rich person', I can't help but think that progressive tax rates are unfair.

For me, fair means treating everyone the same. Regardless of everything -- that includes income.

Given this assumption of what fair means, the only fair tax system would be for each person to pay $X per year. A Family of 4 would pay 4 * $X. etc.

Can someone else offer a better definition of what fair means? And why I might be wrong?

I realize this would put a large burden on poorer folk in order to maintain the same tax revenue we have today. That may be undesirable. In fact an unfair tax system my be the more desirable tax system of the two. But even something good and desirable may still be unfair. I think that is the case here.

I think we may need to better separate good from fair in common language. They're intertwined, but they shouldn't be IMO.
A few good ideas:

don't use the same name on websites. unique username and strong password for each of them.

Use a browser like Brave if you can, or use Ghostery/ublock/etc.

Don't use anything Google at all.

Avoid Facebook the best you can.

I think the VPN is a good idea, and I haven't had one being marked as spam ever. PIA has been decent and has end points in the state that I'm in.

If you want to be a little more obscure, do all of the above but from a virtual machine running Linux. Periodically wipe & restore the virtual machine.

It depends on how anonymous you want to be.
More like an "empathy-deficiency drain", and I have no problem with that.
That seems to be a very directed line of questioning. Mind If I ask why you seem to think sleep deprivation is the issue? Your last 2 questions trouble me a little, as I exhibit both of those conditions, rather irregularly.
That was my thought too.

I get it, they need to promote their services, but if this is what they think is the right way to do it, that doesn't fill me with confidence that they have any ability to do PR beyond buying fake upvotes on social media.
a) In real life try explaining to your SO/kids that they must abandon their existing life because you want to save 2.25%.

b) Assuming there was some flight out of the city good news! We can solve this by increasing state and federal income taxes. We can even tax capital gains and dividends at income tax rates. There is more than enough money to pay for the things we need to pay for.

(It is probably wise fiscal policy to exclude the first 1 million in investment income from capital gains as a way of encouraging small investors and those just starting out. If I were King I'd exclude the first 1 million in wages too, with a graduated phase-in and make it up by taxing people with $1 billion or more in assets+income combined).
Standard practice? Someone should tell all the fresh CS grads who keep blogging about their multiple hash algorithms. I've been doing this as standard practice since the 1990s. I'm glad if Computer Science academics are catching up to the working practitioner.
Illegal, plain and simple https://app.leg.wa.gov/rcw/default.aspx?cite=36.65.030
Real world, as in non-technical users.

Yes, open-source libraries are indeed everywhere - I was talking about a complete open-source OS, like a Linux distro. Sorry for the confusion.
Yes, $250K counts as rich. You can "get by" on combined income of $150K extremely easily. Maybe you don't buy a new bmw every year or live in an untrendy neighborhood. Oh, no.
Alexa (Amazon Echo) used to call 911
I'm going to guess that the City Council will radically overestimate the revenue this tax will bring in because they will fail to consider the reaction once again: http://www.seattletimes.com/seattle-news/politics/seattles-g...
I'm a little suspicious of the story since a few of the facts don't add up but does make an amazing use case I hadn't thought of. Really hard to stop someone from being able to do this quickly.
One person's tax is another person's "things and services government can buy for cheaper than I can."

They've just given a $140 million incentive for people to move into the city.
Because those wealthy people ran companies that never paid a dime in Washington States B&O tax while every other business without big lawyers must do so. If WA wants to fund the things they want they simply need to treat all business fairly.

https://www.google.com/search?q=microsoft+does+not+pay+b%26O...
But that only works well if the PR is up to date with the targeted branch.

AFAIK, you have to manually merge the targeted branch into the PRs to be in an equivalent situation. Also, other commits might still be added into the targeted branch between the time the tests have been run and the PR is merged.
Occasionally someone has a good experience with Google support, usually but not always involving one of their latest products when it's still a big corporate focus.

But so far, those good experiences always seem to be rare exceptions. The median customer service experience with google seems to be extremely negative.

If google collected (I don't think they do?) and then published NPS scores for their major customer-facing products, would any of them have positive scores? :)
The history of tax the rich gimmicks is simply the history of levying more tax on the middle class, and even eventually working class. Starting with the U.S. federal income tax, which was promised to be a tax only on the rich. In fact some states had no residents who had the minimum targeted income, at the beginning. How long do you think that lasted? Wait and see how long before Seattle adjusts the minimum down.