skysight-inc/HackerNews huggingface dataset:
> All the tools do is enforce a loop of compile -> make compiler happy -> compile.

Sorry, this is nonsense. Tools can eliminate whole classes of bugs from ever happening. I will never have a null pointer exception in a Haskell program, for example[1].

I'm not so sure what's so difficult to understand about this.

[1] Alright, if we're being extremely nitpicky, it's possible to do really weird things with various language extensions which could conceivably cause similar things, but a) those are opt-in, and b) very rarely necessary, if ever except in the implementation of the runtime/language itself. They can also be localized per-module such that you know what code to be extra careful about.
Adblocker for radio
Sure, but the whole security model behind smartcards is premised on this problem, so it's not surprising. Fault attacks aren't new, and the kinds of side channels that smart cards and similar devices need to protect against are also a lot more interesting than just timing. There's a whole subfield of cryptography that focuses on this very narrow problem space.

I'm just saying: it's probably not all that easy to pull a key off a smartcard.

Remember that in most cases, the security model baked into the device is also that it need only be secure enough to resist economical attacks --- meaning, if the value of the secret you obtain from a smart card is less than the value of the equipment and expertise you'd need to carry out the attack, the smart card has probably "won" even if it can be compromised.
Might have something to do with labeling two teens that have sex as rapists.
It mostly does not matter for user-level software. Anything capable of creating faults on your system is almost certainly already able to read your private key and send it around.
I guess all the crashplan personal users are jumping over there en-masse. Good for business...
Just being helpful in case you didn’t know: the word is “wary,” not “weary.” Wary means cautious; weary means tired.
I remember the same. Our Early Childhood staff got the vaccine unless they had a liver (could be kidney, it has been 20 years) problem. Office staff were not given the vaccine because there was a risk. Things, obviously, could have changed.
If you need shipping software that allows you to rate shop Amazon (to do self fulfilled Prime)...I would suggest www.desktopshipper.com. They used to be named IBS Northwest but are getting away from that name for obvious reasons.
Line editors aren't so bad, and the Unix ed is pretty awesome. It's easy to list and read through code, and it has powerful search-and-replace. You just have to get used to using search or cursor movement commands for making edits. The programming I've been doing lately has all been in CP/M, using its "ed", which is a very simple line editor, and I still haven't felt the need to write things out beforehand. I think you just get used to it.
Pretty sure that wasn't intentional. It's just what happens in dangerous times -- dangerous people prosper.
> No idea how much need there is today though.

Lots, if you're into printing. Banding that's invisible on a monitor can become a monster when printed. An expensive monster mistake if you're printing a poster sized giclee.

This is a big reason why Photoshop dithers by default when going from a higher range down to 8 bits per channel.

Another reason the need for dither might be even increasing today is that digital cameras have only very recently gotten better than an 8 bit signal to noise ratio. We've had 16 bit RAW formats for a long time, but most cameras still had noise that was greater than 1/256. I tested one of my old Canon EOS cameras and found even in very well lit conditions, it's signal was a little over 5 bits, even though I could get a 16 bit image file out.

With the newest cameras, the signal to noise is sometimes exceeding 12 stops, so photographers might be running into banding issues in RAW images more often. Except a lot of them never notice because Photoshop quietly handles it.
Hope triumphs over expectations.

Reminds me of the award going to Obama.
Both "Uncle Bob" and the author are selling extremely complicated, cumbersome, expensive ways to develop software -- great for them as consultants if they can pull it off, not necessarily great for their customers. Giant near monopolies such as Microsoft or Google can afford these methods, may even benefit from this sort of super-bureaucratic "gold plating" of software and certainly do benefit from convincing small potential non-monopoly competitors to adopt these slow, expensive, bureaucratic methods that smaller firms cannot afford (they run out of money trying to create perfect software instead of software that works and gets the job done).
Just a while ago there was a paper here about how to create faults using the CPU's power management features, by software.
Being able to do more with your text editor is one reason to learn vim, and it's the theme I see over and over in these "learn vim" posts. But it's also responsible for the idea that, in the words of the article, "learning vim is a lot of work." It's just not true that learning vim is a lot of work -- learning to do a lot of things with vim is a lot of work. But basic hjkl navigation, switching between normal and insert mode with i and ESC, saving and exiting with :w and :q, deleting text with x and dw, these take a day to learn, tops. Learning the basics pays off right away, but it doesn't pay off in terms of being able to use advanced features. There's an alternative reason to learn vim that I never see anybody mention.

Vim allows you to think less about your text editor. Once the basic editing commands become automatic, vim puts the least friction between your brain and your text. No mouse, no arrow keys, your fingers mostly don't stray from the home row. (Especially if you learn to use ^[ for ESC.) It's as big a gain as learning to touch-type. The productive insights accumulate with time. It really doesn't matter to the beginner that dw composes a command and a motion. It deletes to the start of the next word, and that's enough for now. The idea that you don't actually know vim if you don't understand its grammar is ridiculous. It's like saying that kids can't speak English because they haven't learned how to diagram a sentence.

The whole "learning vim is super-productive but super-hard" narrative is just condescending ego-stroking from people who already know how to use it. I suspect it's actually discouraging people from learning vim, which isn't actually very hard. Half a dozen commands, and one crucial concept -- normal mode -- and you're off to the races.
Yeah I had to work back the way from Google, the HN search didn't return any results
OpenType (otf) is more modern than TrueType (ttf) and supports more functionality and features within the font.
97 percent of federal cases and 94 percent of state cases end in a plea deal. That's a conviction rate comparable to the most authoritarian regimes in the world. Sentencing is mostly in the gift of the prosecutor, not a judge. Threatened charges without much to back them up are common, and you don't have time to investigate them because the plea deal is time limited. This is a way, way, bigger scandal than Ulbricht.
> I imagine that a good portion of HN's readership (and probably MathOverflow.com's) were intellectually gifted as children. Or at the very least, remember themselves that way.

Not gifted. But definitely curious.
something happened to crashplan?
It'd be really hard to change SSNs as database keys. But we could stop using knowledge of SSNs as authorization. Make a public database, put all the SSNs on it, and associate each with a public key.
Initial experience creating cross-platform apps with Flutter and Dart
That is a lot of words to say that it doesn't help to have access to the source code if qualified people don't perform adequate audits.

In this regard, open source software is still better. Google "Heartbleed".

When a neglected piece of critical infrastructure code was finally examined, it was shown to have serious flaws. Top talent immediately shifted their focus and began sorely needed maintenance. Nobody asked permission. Nobody called their lawyer. They just got to work to get-er-done. I think Theo was among those to help resolve issues.

I am grateful for those eyeballs and those fingers.
Malware Fools Users with Fake Document While It Steals Their Passwords
What makes you think it is unmaintained? Just because there was no commit for some time? Maybe there is nothing more to add. It's just a small base image which probably does everything it should for the creator. There also are no open issues or PR.
I looked into the CLIQZ browser (standalone, not the Firefox feature/extension) about a half a year ago because someone at my company suggested to use it as our standard browser. CLIQZ is heavily marketed as privacy respecting browser. Just the quotes from their homepage[1]:
"Cliqz gives you relevant search results and does not leak your private data.", "Does not save any private data, has all the privacy features."

Knowing the company behind CLIQZ is one of the largest German media groups (Hubert Burda Media) I was suspicious. A quick check with Wireshark revealed that every keystroke in the URL-bar is sent in realtime to some Amazon servers.

Given that CLIQZ does come with ad blocking and anti tracking features I assume that when they talk about privacy they really mean private between Hubert Burda Media and you, cutting out Google, Facebook, etc.

EDIT: Here is another quote from their website[2]:

> "Privacy by Design" means that no personal data is stored on our servers. We do not only promise that. Using the Cliqz transparency dashboard you are able to check that anytime."

The mentioned Transparency Cockpit explicitly says: "Telemetry data do not contain any information about queries, search results or visited URLs."

[1] https://cliqz.com

[2] https://cliqz.com/en/desktop
> it's good to have competition in numerical libraries and software so there's replication of results. Try your analysis using one library, and corroborate it using another one.

and then discover that they are all using netlib/lapack under the hood :b
It's generally easy to maintain on my server. With normally fewer than 40 processes/daemons running at any time, I can reason about what's going on, as opposed to Linux or macOS.

Downsides are that much of the system feels stuck in ancient times (there seems to be more support and documentation for tape drives than SSDs), the ongoing removal of sometimes useful software like sqlite from base, and anemic or absent support for secondary hardware platforms and features like Bluetooth.
I'm saying prosecutorial practice in the US is entirely structured around plea deals, and guilt, innocence or standards of evidence are rarely significant.
They're shutting down their consumer service to focus on the B2B market.

https://blog.eogn.com/2017/08/22/crashplan-is-shutting-down-...
Digitalization comes to the materials industry
I think what you're looking for is Ctrl+O, which allows you to exit insert mode, insert ONE command only (e.g. 4k), and immediately enter the insert mode again
I've been using Language Server to learn rust while coming back to ST after using VSCode extensively. Have you tried using a LSP extension instead of a TypeScript one?
Why does that mean unmaintained? Maybe there is nothing more to add. It's just a small base image which probably does everything it should for the creator. There also are no open issues or PR. Funny how no commit in some time equals unmaintained nowadays.
So why not keep using SOAP and WSDL?
NSA contractor stole documents, and now the Russians have more US hacking tools
There are nuances. With this reasoning taken to extreme, would you in the end got rid of the compiler just force yourself to be more careful?

And I kinda get your point, because I got in to the past to a point where I had passed through all of the checks for my PR with code that didn't actually work.

I still think that checks I put in place for myself help me more than they make me more lax.
Why would you need to read through the paper to see if it applies? Are you deployed in settings where attackers can physically flip bits or not? That question, the only one that matters, is posed essentially in the abstract of the paper.
Is it possible that data isn't getting bigger - but that the people who work with it just want to process larger data sets than before?

I mean before they'd train a model of 1,000 inputs and then test it against another 50 and call it a day. Now they want to train it against 1,000,000 inputs.

Am I completely off base? It's not my area, though I work with databases, my observation is that developers always want to use the most data possible even when it doesn't really provide any benefit.
And that's why I named my company:

http://ground-up-software.com/
Well, of course, one would write with `cat -`, and only edit with `ed`.

It isn't a very productive cycle, but with printouts and smaller codebases, it seems viable.
... let me show you the queries the developers are writing ^^
That's a shame. So much untapped human capital. For every Sergei Brin and Max Levchin that makes it to the US, there are probably 10 others that could have as much a positive impact in the right environment.
Books is a good indicator. We have about 100k+ listings at any given point. We have seen at least 50% of our competitors go out of business since the last rate hike (mid summer).

...you are now paying about $3 more per book and the majority of that now goes to Amazon. Not the third party seller. They raised % taken and also began taking a percentage of shipping fee which is why you see a bunch of third party sellers listing free shipping. Basically they caught up to Ebay in that regard.

"Used" books are not really profitable to sell on Amazon anymore. If you want better prices go to Abebooks.com. Same sellers and generally $2-3 cheaper now.
University of Chicago | Full Stack Engineers | Full-time | Chicago, IL | ONSITE | https://cdis.uchicago.edu/careers

Building petabyte-scale production data commons for data-driven research in cancer, birth defects, post traumatic stress disorder, and AIDS used by the broader scientific community. We believe in open-source, open access data, and open science.

The ideal candidate will be a python expert and have some experience in databases, data structures, cloud technologies, and microservices.

Tech We Use: Python, Go, PostgreSQL, OpenStack, AWS/GCP/Azure, Kubernetes, Docker, Elasticsearch, git

https://github.com/uc-cdis

Apply: Submit resume + cover letter + code sample at https://jobopportunities.uchicago.edu/applicants/Central?qui...
Sure, and Rowhammer flips bits from software too. The point here is you need relatively precise control not just in location but in timing of your bit flips to break crypto like this. Rowhammer attackers have the luxury of attacking bits that stay high-value for long periods of time. DFA attackers get very tiny windows.
Nice to see something like this adapted to the US, I've seen comparable proposals in Germany [0], also build on a similar base of taxing land value/production facilities.

Imho it seems like pretty valid approach considering land is one of the few resources we recognize as actually being finite, so it's a good place to start for building a "base".

On the other hand it's quite frustrating how accepting we have become of creating "wealth" out of nothing by printing paper money but if we try to do the same thing based on something actually tangible, like land, people lose their shit going "you can't just make up money", sure we can, we do it all the time.

[0] http://www.wissensmanufaktur.net/plan-b
Sure, legacy software is still catching up to multiple cores. Postgres is much better now or you can use SQL Server instead. None of them are native multi-master anyway so scale up is still better than scale out unless you only need reads.
Death at a Penn State Fraternity
How a Data Scientist Can Improve His Productivity – Dataversioncontrol
> Do you really think the tools you use like your web browser, mail client etc, have less vulnerabilities on OpenBSD than on any other BSD or linux distribution, please...

Yes. OpenBSD employs several mechanisms that improve the security of every application e.g. W^X and stack protector.

See: https://www.openbsd.org/security.html
well, those whiz kids had to grow up to be someone, someday...
Amazon delivery has been bringing packages to us for nearly a year now. A few things I have noticed:

1) They can never find our house. Now, We do live in a newer neighborhood (3 yrs old) but USPS, UPS, and FedEx don't have a problem. AMZL US will often miss deliveries because they can't find our house. Usually this just sets the delivery back a day, sometimes 2 or 3. The worst case was 3 weeks.

2) They deliver late. Not really a con; just a fact. if AMZL US is delivering the package it won't get to us before 5.

3) Their drivers are not professionals. I get the feeling anyone can deliver for them. I swear half of the people I see are Uber drivers who don't have a route ATM.

4) Just yesterday AMZL US brought me a package. They guy who brought it didn't know how to scan the package to mark it as delivered. He actually had us do it for him. They have a long way to go before if they want to take this seriously
Interesting subject matter and story, but terrible writing. I'm having difficulty believing that it was really written by an associate professor of English at the University of Illinois at Urbana-Champaign:

https://en.wikipedia.org/wiki/Gillen_Wood
Not one mention of the plastic bag ban which many experts argue precipitated this whole mess. Great journalism.
Incendiary bombs used against Germany[0][1] and Japan[2] arguably caused more death and destruction in single air-raids than the singular nuclear attacks on Japan; albeit with a use of greater manpower in the attacks themselves.

[0]https://en.wikipedia.org/wiki/Bombing_of_Hamburg_in_World_Wa...

[1]https://en.wikipedia.org/wiki/Bombing_of_Dresden_in_World_Wa...

[2]https://en.wikipedia.org/wiki/Bombing_of_Tokyo#Operation_Mee...
I definitely agree with you. I'm very much in favor of an optional single payer solution, consolidating the various programs down into one.

The issue is that doing so will put millions in the insurance industry out of work. It becomes more than a public health issue, and very much so that looks to eliminate a industry that has wide power to retaliate through various strategies.

Not to mention, single payer is a quite resource intensive strategy that will require extensive capital to start versus spending now for more coverage through a program.

Because of this, single payer may never come to America through federal means.
In addition to that, those instances might be deployed for short time were much power at once is needed and powered off after that. In that case the cloud might even be cheaper as Google offers pricing by Minute (or was it second now?) whereas most bare metal providers bill by the month.
SVN in sublime text, although paid, is so much better than whatever VSCode has for SVN.
Ancient Viruses Buried in DNA
I bet the Russian oligarchs beg to differ.

People from ex-USSR countries do however seem generally have strong math and science skills, and (for some reason) many women end up in software engineering. Western countries can probably learn something from that.
If they follow the example of previous laureates Obama or Aung San Suu Kyi they'll be enriching their own uranium within the year
I don’t see why we should make this a requirement of every programmer.
Durov, the founder of VK once very upbeat about Russian scene, had to flee abroad after hostile takeover by Russian government affiliates. His Telegram is an American company.

Korolev, the champion of Soviet space programme, has died because the doctors could not ventilate his lungs. His jaw, intricately broken by NKVD interrogators in 1930s, blocked the pathway. The Soviet space programme limped ever since.

Names, leaders and technologies change, but certain things there are self perpetuating.
These are still 4 to 5 figure prices. Larger companies really don't care about these tiny fees, especially compared to the licensing costs of the software running on these servers. It gets the job done faster and easier, so it's worth it, especially when everything else might already be in Google Cloud.
Cryptocurrency resources
I have some customers with a stronger threat model than 'physical access owns the secrets' for reasonably mundane 'IoT' products. IP protection / late-point differentiation / any as-a-service model requirements can bump you out of that category.

Fault attacks themselves require exploiting the structure of whatever primitive you're targeting, so in that sense whilst 'everything is susceptible' isn't false, it really does vary quite a bit, and attack strategies can be really quite complex. Some fault attacks on block ciphers are effectively augmented differential cryptanalysis.

In general you're not going to be able to take a library and be able to make any claims about protection against invasive or non-invasive SCA without first knowing about the hardware it will be run on, so agree that it's not usually meaningful to add countermeasures against aforementioned types of attacker.

IMO applied crypto is at its hardest when you're close to bare metal and you have a physical attacker.
Hey, you brought up floating points. I talked about monoids, not floating points. I don't even make the assumption you say I break when I use floating points. Of course floating points aren't a monoid, let alone a group or a field.

> catenation (operation +) is not strictly associative. (Because memory allocation is different!)

What the hell are you talking about? The ordering of operation influences the address of the result? Who ever cares about that? Even in C, you don't rely on the value of such addresses —only their uniqueness.

> Yet he does this mistake...

Step down your high horse.
When you were moving to Germany, how much did your partner not want to go as well? Did it take a lot of convincing? How did you structure your discussions?

Thanks for your input though. Helpful to know others out there have been in similar situations.
Abebooks.com? Never heard it it. thank you!
Just because it's "plain text" doesn't mean it has to be monospaced. There are too many other things you can write that aren't "code" for which a good text editor is infinitely preferable to a clunky dedicated GUI application.
Some people may have those attitudes, but if so, then they are demonstrating a lack of discipline. The intended purpose of tools is not to enforce discipline, but to enable disciplined people to do a better job.
If you use enough of them, of course.
Sorry I didn't really mean about reviewing the code - I meant being able to see the successful project.

I listen to Torvalds when he talks about how to write his software, because his software is a massive success.

I'd listen to NASA because their missions were a success.

Why should I listen to other people like Robert Martin? I had seen FitNesse in the past, and while I'm sure it's a useful and well-written bit of software, I don't anyone would remotely describe it a particularly notable success. Why would I listen to his ideas more than anyone else who's written a testing framework that some people use?
I think you've changed the topic?

The topic was on the US government using technology like face recognition as part of a surveillance system across the general public.

The "whole freedom thing" doesn't preclude passing a law which prohibits that from happening, similar to Montana's new law limiting automatic license plate readers.

So I don't see how your response is related. I think you are referring to increasing use of facial recognition by someone who isn't the government, yes?
The comment I was replying to was:

>Americans stab, beat, and bludgeon more people to death that most countries entire murder rate. The US is a violent country even without counting the guns.

Which is still not backed up. However, I am surprised to see the stats on the murder rate and gun violence all the same.