skysight-inc/HackerNews huggingface dataset:
* Sound of groaning *

Thanks. But ugh. That is both absolutely amazing and... well, what did I expect. Of course there are going to be process attacks :)

Hmmm. I guess the only defenses against this are

- trying to design the layout to get good "route coverage" via test routines (sounds hard)

- aiming for super-simple designs that make it difficult to constructively alter the design (pathological simplicity is one part of my idea; yet to determine viability)

- trusting the fab (ha!)

I wonder if using a huge process like ~30nm (or even bigger) would mitigate at all.

Edit: Small work fixes, added sentence
The creator of the pig-human chimera keeps proving other scientists wrong
I am in the exact same position with respect to type theory, it's maddening and depressing in equal measure.

Not claiming to be any kind of expert here but maybe what is making the glass frosted for you is not quite grasping the following (not saying that I fully grasp it):

> This new and revolutionary idea has had a far reaching and manifold impact on the development of modern logic. It provides the means to uniformly complete the formal apparatus of a functional analysis of language by generalizing the concept of a function and introducing a special kind of functions, namely propositional functions, or truth value functions, whose range of values consists of the set of truth values. Among the most typical representatives of propositional functions one finds predicate expressions and logical connectives.

Predicate expressions[0] are: is tall? is green? is a woman? (adjectives and nominal and so on.)

Logical connectives[1] are: and, or, not, …

Imagine thinking about these concepts before the notion of using functions[2] arrived on the scene in mathematical logic and thinking about these concepts after.

A part of me would love to believe that the problem (such as it is) resides with the communicative powers of the entire community of mathematical logicians and not with the learning power of my cerebral cortex but alas I fear the failure is mine.

---

Anyway, what would one do without the Wikiverse?

[0] https://en.wikipedia.org/wiki/Predicative_expression

[1] https://en.wikibooks.org/wiki/Formal_Logic/Sentential_Logic/...

[2] https://en.wikipedia.org/wiki/History_of_the_function_concep...
FWIW, the author of Doobie doesn't even use an IDE, which is par for the course I believe for users of Scalaz, Cats, Shapeless, etc. inference heavy libraries.

Abstraction isn't free in Scala, you pay for the features used; tooling suffers as a result, thus projects like Twitter's RSC come into being.

You may want to checkout Quill, or Perhaps Slick (though the latter I suspect is similarly IDE challenged). Barring that, give your IDE loads of RAM.
Have a look at TasksInaBox ( https://tasksinabox.com/ ). What is nice is that besides the usual web and mobile apps, it also has a client living inside Outlook so you can create tasks from emails as they arrive in your inbox.
I'd hate to live in a world where Pink Floyd's "In The Flesh" wasn't allowed on Google Play Music.
Exactly. Also, source control is not backup. It is possible for bugs in git or mistakes in your workflow to mess up all the copies of your repository.
Its daily electricity bill amounts to $39,000.

All from coal-fired plants.

Surely there's a better form of "currency" that's not so wasteful?
I wouldn't even call that mean so much as incompetent and desperate.

I'd maybe try to explain a little that my salary is actually set through a competitive process of interviewing so it's not a number I personally have to have believe in or not, and then maybe touch on why her comments smell of desperation and why that's not a strong negotiating position.
I recently contacted OnePlus support for the first time last month after I dropped my phone and shattered the screen. The whole process was extremely fast and smooth. Quick reply from OnePlus, they organized shipping to my nearest repair center and even the actual repair was quick.
If nobody wants to dig and lay cable to offer services to a small town what are you gonna do? The US had very low population density so the cost of teaching small communities can be huge.
Excellent -- Meson is so much clearer than the alternatives. It has the advantages of Bazel and similar (Pants, Buck), but seems more geared toward smaller projects, which is great for those of us not using a mono-repo.
> so it's not an issue with practice.

I meant "in practice", of course...
OffTopic:
I have always considered my (bash) history as a profound source of knowledge. I hope one day, some machine learning wizard will create a function extractor from history. Something like: "oh it seems you often chain those commands: .... Let me make a function for you. Here it is: ... How would you like to call it?"
As someone who has hired people for remote position, it's a problem I've run into. A lot of people who look great on paper , have a lot of experience and seem a great fit actually do poorly working from home. It takes a certain kind of mindset to work well from home.

I'm now always a bit wary about hiring someone who has never worked remotely because I know the chances it won't work out are high.
> You write a whole blog-post on a topic...It was your job to do "literature survey"

That's a pretty high bar to impose on a guy's personal blog site. I mean, he also has a poetry section. From clicking around on his blog it also appears he has a PhD from MIT, so he's certainly no stranger to research, if that were his project in this post.

> And put that posting on tech forums, HN, linkedin, reddit, whatever.

It doesn't look like that happened here. The blog was written by a guy named Rick Manelius, and posted to HN a guy named by Dan Moore. While it's possible there's some collusion going on here, I say we "assume positive intent"; that is, assume Dan found Rick's blog entry insightful and posted it to HN for the rest of us to consider.
Where's the communication from Git itself about this? When I Google "critical git security update" I see this item, and stories from a few other outlets, but no notification from Git.

Their release note for this release just says "This release forward-ports the fix for 'ssh://...' URL from Git v2.7.6".

Nodejs has a page where they outline their procedure (https://nodejs.org/en/security/), with a list you can subscribe to. Does Git have something like that and I'm just missing it?
World's First Digital Babysitter App Coming to iOS
How are you opposed to net neutrality? All it does is aim to keep anyone from controlling the pipes that connect the internet. My favorite way of thinking about NN is to compare it to toll roads. Without NN, you could end up with a situation where Honda buys a toll road and then charges more for people to drive Toyotas on their road. Or they could reserve the left hand "passing" lane for only people in Hondas. In the same way, Comcast could slow down your connection speeds when you try to connect to Netflix or charge you additionally to connect to Netflix's domain.
Cool, so they have a neo-nazi stance. This is the anti extreme-right stance. Will we see stance anti extreme-left as well? Antifa etc?

We need a real balance, otherwise, we are pushing the world towards the war.
The external pressure comes from public outcry. Fewer people paid attention to neo-Nazis a week ago, hence fewer questions about the stuff they hosted.

I'm not convinced there's an argument that the right of a political cause to have its music distributed by a particular company trumps the right of a company not to distribute it or the right of the public to pressure the company into not distributing it.

If one is to impose upon on the freedom of actions of media distributors or the potentially-boycotting public (I'm not sure the latter is even possible), there had better be something pretty amazingly special about the cause that means their right to be heard trumps others' rights not to be the amplifier. I'm not sure any remotely compelling argument exists for neo-Naziism being a cause deserving of such special privileges or music distribution services being the sort of thing one should have an inalienable right to.
I'd rather say that Ryanair wins because it flies to places where no one else does. I don't fly with them because they are cheap - I fly with them because when I need to go home it's either a 3h ryanair flight or a 3h flight with someone else + 5-6h train journey. There's zero competition unless you only fly between capital cities.
I wouldn't put it that easily. I think I've flown 60/40 with "normal" airlines vs budget - when my times are fixed I can't really choose to vote with my wallet and, more importantly, leg room and service have not been better or worse - no matter the airline, it was simply hit and miss - all.the.time.
> one-two years from now, when there's support for wasm in javascript

How likely is this to happen in the next 2 years? I thought it'd be a lot more difficult.
Part of the issue is people are used to simpler statements. One enemy at a time. One condemnation at a time.

Also they are used to how politicians typically do whatever necessary to appease their constituents till the horse is dead. Not saying this is bad, but that's the expectation and one he doesn't follow.

I also think he's not attuned to people's sensitivity toward race.

I said no new taxes. No new taxes. No taxes. I won't raise taxes. Taxes will not be raised. Over and over and over and over.

Not being a pol hurts him here in that he does not get that aspect of governing.

You don't just do what you think is right, you have to continuously signal your intention, otherwise your intention is suspect.
How to Solve Any Dynamic Programming Problem
That brings back not-so-fond memories of trying to compile Servo on my notebook. :)

By the way, I just noticed that compilation times are another argument for microservices.
What is a groupware? Is there a reason this isn't called what it appears to be, an independent social network?

edit: unfortunately, after browsing OP's profile, I realize I may not get an answer to this.
I have to disagree with the EFF on this one.

"Sometimes standing on the wrong side of history in defense of a cause you think is right is still just standing on the wrong side of history."

https://mobile.nytimes.com/2017/08/17/opinion/aclu-first-ame...?
The State of Digital Ad Fraud (August, 2017)
No, it's not. Leave the OP alone, why on earth are people shaming them for needlessly clarifying they don't support white supremacy?
I'm interested. Do you have a link?
> Security by Obscurity doesn't work.

Yes it does! This meme is both widespread and incorrect. Security by obscurity is a great layer for defense in depth. The only time it's not sane is when it's used as the only method. But that's also like saying whitelisted input or parameterized queries don't work - they don't work on their own, but all things being equal you can have very secure systems that function in an opaque way while still getting strong assurances through formal audits.

> Nobody can analyze code they can't build and modify.

Essentially no one analyzes open source code regardless, unless they have a financial incentive. Even if you are one of the vanishingly small number of people who inspect the code for every FOSS tool you use, you are, with probability approaching 1, incapable of identifying all potential backdoors or critical security failures.

You need to balance the Platonic ideal of open software for audits with the fiscal reality that secure software is highly expensive and typically emerges as the product of well funded teams with significant expertise. This describes very few open source projects.
Slippery slopes are a fallacy for a reason.

I understand the concern - and it’s totally reasonable to point out concerns - but let’s fight when they actually start sliding down that slope rather than hand-ring over Nazi’s, hmm?
Interesting... there doesn't appear to be any fire suppression systems pictured in the mining buildings
Good to know! I'll probably go that route in a couple years then rather than buying a new device.
Python never works right for me, having to deal with yet another dependency just to use the build system is obnoxious.

Just use make. It's not hard and it works even for fairly large projects.
I have seen apps that choke on much more common names. Like O'Brian.

This post is a classic on various name issues: http://www.kalzumeus.com/2010/06/17/falsehoods-programmers-b...
My apologies for not expressing myself as clearly as I would like.

Some systems don't need to scale. Make and SBT etc. have an impedance mismatch with some projects due to their learning curve and the current sophistication of the development team.

The most important feature of any development tool is not whether it is best practice, it is whether it works. For example, Tarn Adams doesn't use version control for Dwarf Fortress. [1] That doesn't mean Microsoft should have switched the Windows codebase to zip files instead of Git any more than a single developer should start boiling the small lake of SBT just because it is better.

Sometimes, it is easier and faster and better to just build the tool that is needed. And of course sometimes it isn't.

[1]: https://www.reddit.com/r/IAmA/comments/1avszc/im_tarn_adams_...
Here's my comment from the Cloudflare thread, sitting at -4.

> But what's the end game? Do service providers have to morally support those who they provide service to? Because that's how things are looking.

And what do you know. That's exactly what's happening.
> Not all personality types are willing to solve problems (aka working) for their own intrinsic motivation.

There's also the issue that some problems are shitty and boring. You're not "solving" a problem when you're writing another boring CRUD app.
I guess it's because of his point #3.

Honestly, if I were to modify make for some custom behavior, I would look for another tool¹ or create yet another builder tool. Because although I already know most of the syntax, point #2 is an incredibly big problem, the GP missed point #4 in that make does not manage external dependencies², and the syntax is not bad only for learning, but for using too.

1 - Almost everybody seems to agree with me on this. The only problem is that we have all migrated to language constrained tools. This is a problem worth fixing.

2 - Wether it is installing them or simply testing if they are there, make can't do any. Hello autotools, with it syntax set to extreme cumbersomeness.
Or Korn, which is better than Bash, IMHO.
While I definitely don't support these people, I do have to point out:

The problem with the approach taken by Google & Co. is that it criminalizes beliefs, regardless of whether or not adherents have taken illegal actions based on their beliefs.

If people 1) believe something, and 2) perform illegal actions based on their beliefs, a free society can punish #2. However, a free society can neither outlaw nor punish #1 without sinking into some form of despotism.

Liberty need not approve of all that she protects, and the best way to combat bad ideas is with better ideas, not censorship. Kudos to the EFF for raising an important point.
Over 1,000 hours of effort email and vpn comparison non bias
> The web still feels like a somewhat crippled platform to develop for.

Which is why nowadays I always favour native development when given the option, in spite of having been a Web 1.0 enthusiastic developer.
We share an optimizer with clang thanks to LLVM; we get to take advantages of those decades already.
He condemned them by name, but it took 48 hours to do so.
brb...changing my surname to "null".
I've heard talk that React Native opens you up to patent infringement.

There is a clause like that but it's only relevant if you compete with Facebook. There's a theoretical problem that might arise if you make something, it gets really popular, and then Facebook copy it. Technically then you'd need to either settle with FB or retool your product. It's a legitimate worry for some companies, but equally it hasn't stopped a lot of people using React and React Native. If it's at all likely consult a lawyer.
They started doing that relatively recently. Back then, it was a small grant, a job, and a large loan. Software didn't start outpacing other engineering professions' pay till the web boom. That was hindsight since I had the faintest clue what a major was.

Choosing a major that results in a job versus one based on interests.

Another decision was not to go to graduate school right afterwards. Poignant memory was of a professor asking if I was going to graduate school after I did well in a graduate school level course and saying no.
Right, "works for me" doesn't mean "you must do it.".
No love for Vala?
Build a Flask and React and Postgres App with Docker and Deploy It to Amazon AWS
This is far from a panacea; see the inability of successive governments in many democracies to change voting systems or large scale education/healthcare reform.

Elected officials, while a good way of ensuring no-one truly vile gets into power, also ensure no-one truly inspired gets into power

Edit: Just to note, I support democracy (it should go without saying) but we should all see that it isn't infallible
They do get upset. In fact, both Google's and EFF's responses are results of people getting upset. There's people upset that Nazi imagery exists, and Google wants those people as customers, so they have made the decision to ban Nazi imagery. There's people upset that this ban is overbroad and poorly applied, and that it sets a dangerous precedent, and the EFF is voicing that fear. Youtube, Facebook, etc ban pornographic content due to social pressure.

Google did not arbitrarily decide to ban Nazi speech on its whim, with no social support. This is a social war and it's why I find all the arguments unpersuasive - "private companies should do what they want"(except in cases when we don't like it, e.g. employment laws, denying service to minorities..) or "private companies should be forced to do what we want"(what happened to freedom of association?).

The underlying issue is that we're split on the importance and effects of tolerating hateful speech. The private companies are trying to navigate the social climate, which has become increasingly polarized. Boycotts, "with us or against us" demands is what is forcing their hand. It's not Google that's evil in this case, it's us. We are forcing them to take a stand on this social rift, and they have, and no one should really be surprised by it. Freedom of speech advocates have a long history of losing to moral panic.
some of these miners use many kilowatts of power. Take a look at those power cables, all that energy has to leave as heat.
previous discussion: Hello, I’m Mr. Null. My Name Makes Me Invisible to Computers - https://news.ycombinator.com/item?id=12426315
Thanks! I haven't used doobie yet (though I intend to), I had no idea it's API caused IntelliJ such an auto-complete headache.

I'm curious how a faster scalac would help in this case though. Perhaps I'm missing something, but scalac's errors don't really facilitate this kind of API exploration.

I completely agree that exploring an API (because who wants to memorise the standard library and API of all your dependencies) in IntelliJ is often quite cumbersome. One trick I've come to lean on a lot is to type '.ensur' to determine the type of the current term; this causes IntelliJ to present the method signature for 'ensuring', which is available (implicitly) on everything (except Nothing), showing the current type in its return type.
Wow - not only is the utility called with the developers whole name, but the GitHub project starts with this:

Fire DO NOT CREATE PULL REQUESTS FOR THIS PROJECT. Fire

Fire ANY PULL REQUESTS YOU CREATE WILL NOT BE MERGED IN. Fire

This has worked well for me: https://github.com/ymattw/cdiff
It's a reasonable reading of your comments. Perhaps you communicated poorly? Browsing the thread, I am far from the only person who read you this way.
> Make's syntax is quite simple.

I'll just leave this here:

https://github.com/sapcc/limes/blob/62e07b430e2019a6c1891443... (then used in line 42)
what languages don't distinguish between literal null and a string with content "null".

More importantly, who the fuck used such monstrosities?
Well it is obvious this is no Beowulf cluster.
Good to see multiserver microkernels back on HN. Have significant advances been made to make message passing better in modern CPUs?
> Even 'racist' music can be tricky business

This seems like, basically, all of the rap I grew up listening to in the 90s could be arbitrarily censored here.

"Big dicks in ya mouth is bad for your health" comes to mind, alongside NWA's "Fuck the Police", and even songs by the relatively higher-minded Public Enemy could be construed as racist, or incitations to violence -- if one were predisposed to a puritanical cleansing of our media. More obviously, rap from musicians like Immortal Technique, The Geto Boys, Cypress Hill are just begging to be censored under such criteria.

Of course, this is Google we're talking about, and they control much more than music and videos. It's not a big jump from determining the Wu-Tang Clan to be too controversial to ruminating over whether or not all those casual mentions of the word 'nigger' in Mark Twain's works is appropriate.

Sadly, we appear to be living in interesting times.
Yea, you know when I buy something, I learn about it. If I don't want to spend time learning about it, I find a brand/model that always has what I want. I don't buy the version that consistently doesn't have the feature I want and then complain about how it should be better.
Do you think the ADA is about pity for the disabled, or about forcing businesses to serve 100% of the public, rather than serve the most profitable 98% at the expense of the most inconvenient 2%?

Humans come in different sizes. If you are genetically predisposed to be in the 99th percentile for height, or in the 1st percentile for height, do you think businesses should be allowed to charge you 200% or more of the price they charge someone at the 50th percentile?

Simple demographic statistics would dictate that aircraft be configured with some seats suitable for a person over 200 cm (6'6"), and some for children or for adults with dwarfism.

Neither atypical height nor atypical weight are necessarily disabilities, but you have to serve the customer as they are, or you are not serving the customer. Clearly, airlines would prefer to serve sardine-shaped customers, with low standard deviations for all measurements.
This is my point. Moral realism grounds out the same place that religion does -- it's real or it isn't. God (some moral truth) exists, and it is this particular God (moral truth). Or God doesn't exist. The choice is yours, and it's completely arbitrary. A matter of personal faith, no more and no less.

Moral realism has no epistemic superiority. It's just as "bullshit" as everything else; the rotten core of bullshit is just hidden under a bunch of layers of deduction.

I prefer to air the dirty laundry; realists are uncomfortable by stained underwear and would prefer to play logical games on top of an edifice without thinking too much about the sand underneath their feet.

But at the core all systems of morality have the same problem. Realism is no escape. In fact, IMO, it's worse than a mistake because it provides the illusion of solving an insurmountable problems.

I guess it comes down to this: "I choose to believe in God and I know that belief is arbitrary" is to me by far the most compelling apology. Things like Goedel's proof just make me yawn and squint.
Now seriously, I only find useful to prepend www.* to my domain when I have plenty other subdomains, as for instance a shop, a landing page (it'd be the www), a blog and so on. If I only buy a domain to put a web (portfolio, blog or whatever), I just leave it as it is. Maybe it's "wrong" regarding some defacto rule, but I usually find it redundant when in the second case.