skysight-inc/HackerNews huggingface dataset:
I dig the minimal HTML, wish they'd drop the Google Analytics but I can understand why they went with it.

I do wish though that they would update to spec-compliant HTML. A character encoding and doctype would make me feel better, paragraph tags would probably go a long way.

Still, I strongly dig it.
In this case, the GPU just sends the content of the framebuffer to the screen. It does not re-render the content of the framebuffer, which is what the most energy is usually spent on.
Literally everyone on AWS, for instance. Except Amazon, of course.
Because (1) compute requires newer hardware than what would be ideal; (2) compute cannot take advantage of early Z, which is critical for SVG (neither can Slug or GLyphy, by the way); (3) the two step process is hostile to batching.

Slug is asymptotically slower than Pathfinder at fragment shading; every new path on a scanline increases the work that has to be done for every pixel. (Of course, that's not to say Slug is always slower in practice; constant factors matter a lot!) GLyphy is an SDF approach based on arc segment approximation that does not do Bézier intersection at all.
Under communism, you pretend to work and the Government pretends to pay you.
Combining time limits with word limits would be nice. Harder to measure though.
Pretty hilariously bad report. When they first came out with it the URL path said 'Spotify' instead of 'Shopify'
Entity Framework is a pretty fantastic ORM. The only thing that's ever come close for me is SQLAlchemy.
I would argue quite the opposite.

.NET has the most comprehensive set of high quality paid libraries i have worked with so far. Yes they can be expensive, but you get long term support and professional documentation. For a commercial product this is worth a lot.
These packages certainly add bloat, and make it hard to fit under 1MB (can't really do it if a hello world is 1.5MB), but developers are adding a lot of their own bloat to get to 50 MB.

That said, Google could have (and probably should have) done a better job for Play store downloads with common libraries, especially common libraries they provide. They also could and should do a better job on translation strings -- the translation file must be stored uncompressed in the apk, because it wants to be memory mapped.
1. It's the CLI tool that is spying, not the binaries you are generating.

2. `set DOTNET_CLI_TELEMETRY_OPTOUT=true` to disable spying.
To me the interesting thing about debate is that everything is, well, up for debate. There are different judging styles, but if you have a truly "tabula rasa" judge and you can make a compelling case that spreading is bad for debate, harming the community/activity/etc., and it should be a voting issue that supersedes all voting issues that your opponent presented, you could potentially win the round on that argument alone, without ever having to directly address your opponent's arguments. Do this successfully a couple of times and word would get out, and other teams will either come up with a litany of arguments against your spreading critique or just talk slowly when they debate you. If other teams began to adopt this strategy you might start to see a community-wide change.

(On the other hand, you might get a judge who would laugh you out of the room for making such an argument, or on the other end of the spectrum a judge from somewhere in rural west Texas who will automatically vote against anyone who speaks >200 WPM. The judge is God first and foremost, but if your judge claims to be tabula rasa you can make and potentially win any argument you feel like.)
Patient Home Monitoring Service Leaks Private Medical Data
I didn't suggest forcing anything... But just because other people do it doesn't make it better.

Many of their clients may treat this as they would an actual breach. It's somebody they haven't vetted having potentially complete access to their development chain and production secrets. They won't know until they look. They won't look until they're told.

And what's CircleCI paying a for this breach got to do with the price of fish?! Say you hired me and gave me full access to everything in your business. Then one day I turn around and tell you my extended family, my friends, my dog walker and my cleaner have all also had access to that data. No big problem eh?
A Bug Has No Name: Multiple Heap Buffer Overflows in the Windows DNS Client
The real problem is that apps can get data off your device too easily. An app that phishes your password isn't actually dangerous until it uploads it to a server somewhere.

Apple should provide an API that limits an app's internet access in severe ways, preventing encryption, large uploads, etc. Unrestricted internet access should be a permission that few apps are granted.

Apps would still find clever ways to exfiltrate data but that itself would be something you could look for. Today, any app that has access to your data can upload it to anywhere without suspicion.
OP clarified it as a general topic of discussion in the industry, and not specifically about CircleCI. Other companies in the space respond with what they are doing. I saw it as a completely on-topic post, and assumed the best of his intentions. Both gitlab and github have shared incredibly valuable information on their architectures, and there are many many people that can benefit from an open discussion about this, including CircleCI.
Omg! English is not my main language and I did not know about this second meaning :(
This reminds me that most of the time when I try to find a name for something I go to urban dictionary, just in case :D I forgot to check this time...

Anyway, I do not plan to change the name for now. If it becomes obvious that it is offensive for some I will definitely consider this.
The real thanks should go to you Rob. As it's stated, it's an industry wide problem and the real guts come from the companies that take the issue seriously; the ones who come out, hold it close to their own, admit they were wrong, and work to improve. This says a lot about you and your company, and as a customer it makes me proud that you're part of our mobile pipeline.

As a customer, Rob, what would be a good avenue to notify you of issues like this in the future? Not every company wants to be front and center of what is essentially the news hub of tech people like HN for issues, so is there some way we can get with you guys directly to straighten security issues out, as well as some assurances as how you'll handle it along the way?

Thanks for your attention to the issue :)
Can you please give any usable link for this:

> What does not match observation extremely well is naive quintessence models where the metric expansion works within galaxies and is simply checked by the gravitational interactions of the matter within them

Or write some additional details about it. I know that the "popular" explanations claim that "everything" expands, and I understood from your reply that what we see can be technically modeled in equations as if there's nothing that expands inside of whole galaxies, but what is the actual proof that there are actually no expansion forces inside of the galaxies at all? Thanks in advance.
So you want to knowingly create more criminals, just so you feel better? That's just disgusting
Your comment is both true and utterly irrelevant to the person you replied to who asked about comparison between CPU and GPU efficiency.

The important information to answer the question is how much power the GPU will use, not how much it can use.
Does this affect how you perceive designs with colored text in them?
The Apple's way of implementing authentication into the various services caused me a lot of frustration. All this constant password reassurances combined with the necessity of complex passwords that is difficult to type in on an iOS device and the previously very persistent enforcement of constant user agreement updates made me use the least possible services.
It was far from a pleasant user experience.
I might have missed several things, interestingly looking non-essential programs or cool iCloud features that I gave up to avoid these annoyances, but that is it now. I will never know.
It is still enough to 'click' those remaining stupid messages away that block you from using the device, like click away warning about the accuracy of local positioning when I want to make a photo on a situation that goes away in 3 seconds (so eventually no point of warning me about metadata of a photo not happening), it is absolutely wrong obstructing the user more, repeatedly, in using its device.
I guess I accepted not to use the iPhone that much as its potentials would allow. I don't trust it (firstly just about its usability, now about its security as well).
Inside Google X: Google’s Moonshot Factory
It depends on how you define loss leader.

Free breadsticks?(okay if you produce them in house or have a massive amount of locations), $15 worth of produce sold for $14? Hell no.

25% - that's the sales price you can put towards food costings, this should give you a rough idea of the unforseen costs.

If your kitchen isn't running at better than 25% food costings, your kitchen isn't profitable. Some places you can take a cut from this if you are working with another industry(such as gambling), but for a pure restaurant/cafe, don't even think about not hitting that point.
Isn't that just really standard employment? Or maybe similar to an academic tenure position?

I think UBI is meant to be "universal", with no prerequisites.
I second this. Debate was really fun and if you didn't want to talk fast there were plenty of lay tournaments and forums.
Yah? Good luck with that
Interestingly, WebRender renders that demo at about 2fps. It's obviously a bug though, if you hold in the mouse, it's 60fps.

Win 10, latest nightly, WebRender enabled
Once I refactored some stringly typed C# code to use an enum with values Prod and Test instead of the two strings "Prod" and "Test".

I was relying on expressions like

mode == "Test"

to fail to type-check to spot all the places that I needed to update.

Sadly some parts of the codebase weren't very idiomatic and had some

"Test".Equals(mode)

This caused a bit of involuntary testing in production and thought me not to trust anything while refactoring.
That's a fair point, and I'm a bit ignorant there. My exposure is mostly mid- to fine-dining, mostly family friends who were owners. Food costs tended to be higher for them, as did labor - they weren't the kinds of places that people would work at just to stamp their resume, but needed good FOH and BOH talent. It seemed to me they wanted no part of bargain shoppers - they understood their fully burdened costs and priced accordingly. Some items had thinner margins than others, but they didn't put loss leaders out there.
Historically, modern representative democracy, with something vaguely close to universal suffrage, has only been around for 100 years or so. You can look back farther and draw the conclusion that increasing economic participation results in increased democracy as you describe with the industrial revolution, but that doesn't imply that you're bound to reverse course if economic participation declines.
One the last day of a colleague of mine, he decided to run `rm -rf --no-preserve-root /` to see what actually would happen on his workstation (it was going to be formatted shortly after). We were all standing around talking waiting for whatever would happen to happen before we saw him off. A few minutes in I asked if he had unmounted our NFS volumes. Nope. He quickly pulled the power, and that was that. I have no idea if anything was deleted, but he probably had ~ 2PB of mounted data attached to his workstation. Everything from build archives, customer logs dumps, test artifacts, dogfooding clusters (the product was a parallel distributed networked file system), and possibly a few random other things.

No idea if anything would have happened, most of the data was read only (builds, logs, etc) but some was not.
Sure. Let's just agree on a definition of racism and how to measure it (hint: we won't).

And there's nothing rigorous about the piece linked.
The new improvements to Firefox fall under a project called "Quantum". Firefox 57 is merely the first Firefox release to have any Quantum components enabled, in particular Quantum CSS (a.k.a. Servo's CSS engine, Stylo) and Quantum Flow (which is a general umbrella project for making Firefox UI more responsive). Here are the others: https://wiki.mozilla.org/Quantum
I'd like to see how this is done on iOS, since the OS is much pickier about what it will let you install.
The rails are already there. When I drive down I5, you can see them.

The reason this sorry state of affairs exists is because truck traffic is heavily subsidized (highways paid for with taxes) whereas rail traffic is heavily taxed (and the rail companies have to pay for the tracks).

It could be improved by increasing weight taxes on trucks, and using the proceeds to subsidize intercity tracks.
LINQ to SQL is pretty poor in my opinion, plus it's no longer maintained and bugs aren't fixed[0].

[0]: http://www.aidanjryan.com/blog/2012/08/25/sqlmetal-bug-with-...
OK, I should have pointed to observations which demonstrate that what we can see of the universe does indeed look like foam, at the level of galaxy clusters and superclusters. I'll do it later, if anyone expresses interest.
Something freely given becomes less valuable versus something given through being earned. It is really not a standard employment, because you have no employer except perhaps your community or city who pays you the UBI. But being paid means you give something first. What you give is contributing to society, your tribe.

This is similar to the notion of tribes. If you want to be part of the tribe, you better contribute, by hunting for food or making something for the tribe.
In Git 2.0 they changed the default push mode to "simple" which prevents this issue.
I may have some bad news for you

the best at any highly competitive activity - when assembled together - will talk primarily about that thing.
Damn. I can't believe even Tupac paid homage to him, produced with Rick Rubin and all. What an interesting read...
Yes, that's why I put these as two separate points.
> why can we have a top of the line desktop PC which is totally libre

It was an accident of history, leading to the ISA bus x86 clones, and Compaq not losing a court case around clean-room engineering.

IBM even tried to roll back that accident with the MCA bus, and possibly would have succeeded if they hadn't been so greedy.
The next talk will be on threading, and will address all this. The IPC and threads talks belong together, but are too big to combine in one talk unfortunately.
I used to work at Addgene, really enjoyed it. The nonprofit "open science" business model is awesome!
I left the country for a while, and when I got back, I was no good at picking those up either. But I do understand your point.(I think)
There is absolutely no breach here. Absolutely not. Suggesting so is ridiculous. The word breach is a very special one and this is not it.
The downvotes let me assume that people understood this question as a suggestion. But it was really just a question from someone who hasn't looked into that space for 10 years and is curious how it looks like from an expert perspective.
One can certainly make that argument. But now you have two ways to run executables; via the shell / fork - and through the init system (with various capabilities etc).

I guess I'd prefer a single api, so I could sandbox (or not) netcat and Firefox the same way as samba and openssh.

It might not be a major point - but it would be nice if there was a single way to "run in env/with configuration" that didn't involve an extra (and somewhat opinionated and opaque) wrapper.

It's a little like the dot.desktop-file approach to dress up cli tools/interfaces in a desktop gui - it's brittle and doesn't really work all that well. And the cross-platform story isn't great.

On the other hand: attaching capabilities to process trees seems better that text-based matching etc. I suppose I think the bsd jail approach looks better - even though that to involves a "wrapper" - but it's a wrapper that's not artificially limited to "services".

[ed: the fact that any kind of name lookup is left out is also a bit odd - as demonstrated by the curl example, for many uses of whitelisting name resolution is essential. And for ldap/kerberos/ad being able to work with named resources seems to be the only sane idea. That's why we use dns and catalog services in the first place! This even more clear in an ipv6 environment, as the addresses are generally longer, and auto-assignment is somewhat better than ipv6/DHCP.]
Thats a new one for me. I know you have to prove you're constantly looking for work to continue getting unemployment. I didn't know that some welfare requires having a job. Do you have more information about that?
Why don't employed people act like a big block too? Is this an Anna Karenina sort of thing, where unemployed people are all alike, but every employed person is employed in his own way?
This reminds me of a phenomenal Radiolab episode, on how a team of black students managed to turn the tables on teams that were effective at "spreading" [1]. I think the author alludes to this:

> Some debaters even began refusing to debate the resolutions altogether, formulating elaborate theoretical and critical arguments that were, at best, tenuously linked to the topic they had been given.

I do pretty much agree with the author though. Everything has become a game and we've completely lost sight of the fact that we're ultimately trying to build a better society. It's a big part of why I stopped identifying with political labels. Although, as always, I'm suspicious of the concept that there ever were "good old days".

[1] https://www.podtrac.com/pts/redirect.mp3/audio.wnyc.org/radi...
Pristine-tar updates
"We take security very seriously"

No you don't.
I responded downthread to someone else making the same point. I'm sure there are some restaurant models that support that idea. My only exposure is to mid- and fine-dining where at least these particular owners weren't putting loss leaders out there. Some items had higher margins than others, but nothing on the menu had a negative margin. There are some exceptions like "holy shit I need more avocados and they're $100 a case all of a sudden" but that situation wouldn't last long.

Bargain hunters, I'm told, are bad customers for restaurants. The person coming in for a great deal on $20 chicken is also squeezing a bowl of lemons into a glass and asking for more sugar packets. That's what they tell me, anyway!

However, my overarching point would be that a restaurateur needs to understand operating costs in great detail. If a loss leader is going on the menu, you need to be engaged enough to know it's a loser, by what margin, and also the benefits of keeping it around. The article in the OP suggested no such CBA was really occurring.
$19bn. We all knew about Google paying Apple to stay on the iPhone. That's $3bn.[1]
There's the old deal with Mozilla to be the default search engine in Firefox, but that's over. But there must be a lot of other deals to add up to $19 billion.

That Google has to pay to be on the front of Android handsets is surprising. Isn't that enforced by the bundling agreement Google requires to use the Google-proprietary parts of Android? That's how Microsoft forces their stuff onto PCs; they don't pay PC vendors.

The non-Google Android phone business is pretty dead outside China.

[1] https://www.cnbc.com/2017/08/14/google-paying-apple-3-billio...
3 Must-Listen Podcasts for Entrepreneurs
Humourously enough, when I worked on a team that was writing a graphical web browser for mobile in the late 90's [1], they used a display list for rendering.

The reasoning was somewhat different, web pages were essentially static (we didn't do "DHTML"), if the page rendering process could generate an efficient display list, then the page source could be discarded, and only the display list needed to be held in memory, this rendering could then be pipelined with reading the page over the network, so the entire page was never in memory.

Full Disclosure: while I later wrote significant components of this browser (EcmaScript, WmlScript, SSL, WTLS, JPEG, PNG), the work I'm describing was entirely done by other people!

[1] - I joined in 97, the first public demo was at GSM World Congress Feb 98
In general, I would tend to agree with you. In this case, though, the original article was about CircleCI specifically but mentioned this being an issue across the entire industry. GitLab is a part of that industry and they have lots of users on HN so, in this case, the comment is relevant (IMO).

More generally, however, you're right although I have just come to accept that this is how things are on HN. Choose pretty much any "Show HN" thread or any thread about some cool new app/product/service and in the thread you'll find a few "shameless plug" comments that would be considered spam in any other forum: "Hey, we also make an app that does $foo, sign up for our beta at example.com and check us out!".

(One of the worst "offenders" is Userify. Pick any thread that relates tangentially to user authentication and chances are good you'll find a comment from them that manages to work their name/URL into the conversation somehow.)
This practice is allowed by industry security standards, like PCI-DSS. If it's determined that the third-party acts as a PCI Service Provider, then the compliant party has a duty to determine that the third-party is also compliant.

The client vetted CircleCI, and CircleCI presumably vetted the third parties. It is not fair to say these vendors have not been vetted.

It may not be a best practice, but it's little different than CircleCI (or any other company) contracting with a private data center, which has direct physical access to their equipment. They have presumably vetted the data center provider, or cloud computing vendor.
What, is it too big for your internal storage? ;)
China’s AI Awakening
For WebRender, we targeted the integrated GPUs. You still need some logic to ensure you don't accidentally kick the discrete one into gear, but the integrated ones definitely have enough performance for almost anything WR will throw at it.
Great write up.
First design requirement: two meters above sea level.

The first thing that comes to mind when I see that number is "laughably insufficient". The IPCC is already saying 0.8-1.2m of sealevel rise by 2100, and 4-6m in the centuries after that. They're building a doomed city.
EF6, yes, it really is the best thing going. But EF Core right now has some major issues with lazy loading and not supporting group by on the DB-side last I checked. I believe those are both scheduled to be fixed.
Agreed. Useful but documentation is minimal, uses some non-standard naming conventions.
Seriously, what do you expect from the people that brought us such lovely software as iTunes? /s
Really cool work. Can't wait until we can give PathFinder a go in FF for text, and hopefully even SVG, :)

BTW, I see you implemented PathFinder in TypeScript as well. What do you think of it, especially since I assume a lot of your recent programming has been in Rust?
MADAGASCAR AWAKENING AND ARISING- KOLOINA ZAZA – Exploring Motherland Africa