skysight-inc/HackerNews huggingface dataset:
> I think you are saying they can afford Mutually Assured Destruction? I hope they're not that crazy.

Russia has been working on strategies for limited use of nuclear weapons; they don't believe in MAD. It's called Escalate to De-escalate:

https://www.usni.org/magazines/proceedings/2017-02/escalate-...

https://www.defensenews.com/smr/munich-security-forum/2018/0...

https://thebulletin.org/why-russia-calls-limited-nuclear-str...

It's as crazy as it sounds; a miscalculation could destroy humanity. Consider that their ability to significantly influence foreign publics through social media could be valuable for the de-escalation portion. No doubt we'll see people claiming (false) equivalency between Russia's and the U.S.'s actions - 'they bombed Japan, we bombed Ukraine'.
Dropbox Pitches Investors on Scale, Growth and Collaboration
> There's a correct way to merge two ballots cast by the same private key: discard them both

What about the scenario where someone puts a gun to your head and forces you to vote for them - and you can't change your vote at a later period?
Heh, I think we stepped in the wrong direction. I didn't mean to offend you.

Take care.
Technopolitics: The Challenger
In a civil discussion, the whole notion of the opposite side whose points necessarily contradict yours and should be refuted can make the conversation counterproductive. Most of these political threads are useless for exactly this reason - they usually descend to participants getting locked inside their bubbles or even passively implying other participants are either bots or trolls, without any downvoting.
The long, slow death of Twitter
That's basically referenda and direct democracy, and I don't think it's the technology that's holding that back.
Racket: it has the feeling of having been constructed by people much smarter than me, who are eager to help me get smarter myself. The docs and guide are a joy.
The reckoning at Theranos
In the 1950s everyone cool was a little alienated. What changed?
Virgin Atlantic Cargo gained nine percent revenue growth in 2017 – Air Cargo
The thing with brains is that even if you understand all the building blocks, that really doesn't tell you much about how the brain actually works. Trying to understand the brain from neurons is like trying to understand Microsoft Word by looking at its machine code. Of course the brain has the added complexity that it isn't designed by humans, and so it's difficult to pinpoint where one region ends and another begins.
Plugging this website as I've found it very useful to learn simple regex with / get over my "oh God I don't know Regex": https://regexone.com/
Rivest invented the 3-ballot voting protocol (see https://en.wikipedia.org/wiki/ThreeBallot)

The trick to the 3-ballot voting protocol is that not everyone can validate their vote. However, when a group of voters band together, they should be able to validate that a subset of their votes (1/3) were registered with high probability.

With a sufficiently large group of voters checking results, the law of large numbers comes into play and they can statistically detect the presence of voting fraud.
Due to the Gini coefficient being so high, the network effect is severely constrained.

The systemic risk is outlined in the comment above.
Regarding your first question, why would that matter if the code that is signed by AMD is out in the wild already and can be executed in a manner that makes the exploit work?

That is how I read the situation, anyway; I don't think these people who didn't contact AMD in advance are getting new code signed by AMD to run their exploit. If they have some means of getting AMD to sign anything they want, that's bigger news than any of the vulnerabilities they are currently talking about.

My read was that they're exploiting a flaw in some readily available, already signed-by-AMD code to load something new and behave badly. If that's the case, I don't see why the answer to (question 1) would be meaningful. If that's not the case, do you have a link to the explanation that claims getting new code signed by AMD is necessary?
Because they would have to maintain their own key pair which could easily be taken by chance, unlike a trusted third party who is in another country's jurisdiction and is unwilling to just hand them over. Not everything is software.
> I have zero desire pursuing this alleged dialogue.

And yet you keep doing it.
Whether it's a valid PoC or otherwise, it reminds me how the US is mired in hyper-political arguments about voter fraud/Diebold machine issues when time could be spent genuinely looking for improved processes of election.
There is a cryptographic primitive that does just this allowing of plausible deniability whilst ensuring that only persons able to vote voted: Using Linked Ring Signatures.
Hey, author/founder here. Actually... I agree (if I understand you correctly). Joiner exists to make cross-database joins really easy for an individual analyst, not to compete with the scalability of a traditional EDW. On the backend, it works by querying all those databases directly, rather than making copies of everything.

There's very likely a better phrase to describe it than "data warehouse."
> You can static_cast a void * into other kinds of pointers.

Moreover, you can use static_cast for downcasts (from the parent class to child class) - without runtime costs of dynamic_cast. static_cast is not safe (it doesn't perform runtime checks), but reinterpret_cast is even worse (it doesn't perform even compile-time checks).
Add Your WordPress Site to Webmaster Tools
That's a fun map.

The Linux kernel has more device drivers embedded in the core than I anticipated. I'm guessing most are used for bootstrapping/fallback (e.g. loading the "actual" drivers)? Such as ext4, ipw2100, ac97, i8042, etc.

Just to be clear, I'd imagine most of the above are common enough to have on almost all but the most niche Linux distributions. My question relates around having them this high up in the source tree, rather than why they're useful/what they do.
I've got two: I write and prefer to write code in Go. But when I'm in my thinking mode, I like and use Haskell a lot.

I find Haskell clears up your thinking a lot, but it's really not great for production work. Go on the other hand is extremely great for prod work
Python is my favourite by far, mainly because when I first read over the syntax I typed in an ultra simple program and it worked first time. Normally, you would wrestle with constructors, imports / includes and semi colons in the appropriate places, but the fact that this program worked first time really impressed me.

It has a beautiful clean syntax, which is as concise as I can imagine that a human readable language could get to giving instructions to a computer.
Russia is absolutely prepared to win a land war in their own territory. It kind of appears to be all they're interested in. Which would tend to make one draw some crazy wacky conclusions like maybe it's a defensive force held by a nation of peace-loving people who just want to cooperate and be respected, or at least left alone?

Probably sounds ridiculous to anybody steeped in the current wave of anti-Russian hysteria in the American media (or the earlier wave in the 80s). Why somebody might be producing warmongering propaganda against Russia I don't know, but clearly I'm supposed to take it as an unquestioned first principle that of course Russia is out to get us (as if we weren't busy "getting" ourselves) and of course Putin is the bogeyman -- Putin, a guy who has something like an 80% approval rating among his people and whose every public speech seems to be about conciliation, cooperation and peacemaking. Something isn't quite right. (Probably both sides are full of shit.)

Anyway no one has ever invaded Russia and won, including Napoleon and Hitler. Russians are proud of that. Their navy is about 2/3 as big as the US, but if what you're defending is most of Asia (an ocean of dirt) maybe that's not the biggest concern. Anyway if China does join in, their navy is comparable to the US's, and together with Russia's, it'd be bigger.

The Russian air force is tiny (same for China) but given that all our aircraft carriers are basically sitting ducks for all the various Russian carrier-busting missiles they have nowadays, our air superiority might not matter as much as we'd like to think. Also they tend to stretch money further. Their jets are fairly cheap, indestructible metal cans with loose tolerances... kind of like flying AK-47s... while ours are exquisite and expensive (because they're made out of porkbarrel) and you have to walk the airfield and pick up every little bitty piece of debris before you take off, otherwise it might suck something in and choke... so the equivalent of a flying AR-15 that always jams.
Top IoT “security” Architectures and How to Fix Them
Not sure what you mean by "won't detail". Do you mean "won't include in the list"? Since you've tried to list all the possible speculative causes of this sort of debacle, without committing to any of them... it would surely be odd to omit one because, like the others, it's speculation. But I'm not sure what else you could mean, since no elaboration of the concept is required.

Granted, I've raised an especially unpleasant possibility (as no more than that), especially for consideration going forward; but fraud from other causes is also unpleasant and has to be considered despite being unpleasant and, according to the article, not necessarily an act of commission. To quote: "But the fact that Theranos was a gigantic fraud doesn't quite mean that it committed fraud." You've considered it, nonetheless, and I think that's reasonable - as speculation.
> The Friday before I started, my wife, my assistant, and I came in after everybody left and worked all weekend. We ripped everything off the walls, painted, cleaned the carpet, emptied cupboards, put new art on the walls...

Based on that plaque, I bet the new art was just splendid and people really appreciated it.
I don't see how that's relevant. As has been pointed out to you many times "it's as good as wall street" isn't an acceptable standard for criminal investigation.
Another vote for Kotlin - it strikes just the right balances for me in the functional vs. objective and verbosity vs. readability ranges.

Its connection to Java brings a huge ecosystem of tools and libraries to the table, but if you don't need those, today Kotlin can also be used without Java or the JVM.

It has been my main language for work projects for over a year now and I still love the language.
The Case Against Education – Bryan Caplan
Thugs don't beat you up these days, they throw money at you. At least that happens in India these days.
We're giving away 20 pre-release units next month to anyone that joins the waitlist.

Are you sure that wording is accurate?
Indirect calls as opposed to what? C++ virtual method calls are supported by Clang CFI. Direct calls are always safe because the destination address is fixed. (That is, unless you mess with the PLT, but that's what RELRO is for.)

Not sure what's up with SafeStack - though I bet it has to do with more hardware timing attacks, in this case to leak the address. The whole design is a bit of a hack since the only thing preventing the attacker from accessing the safe stack is their (theoretical) inability to guess the address. If only x86-64 hadn't gotten rid of segmentation, so normal memory accesses and stack accesses could actually use entirely separate memory regions… On the other hand, Intel CET should allow for some subset of that functionality on future hardware.

But again, to be fair, one should note that "grim" has a different meaning when the budget for acceptable performance loss is perhaps 1-5%, not 30-50% :P
Alabama Sheriff Legally Took $750,000 Meant To Feed Inmates
No, space did not permanently alter 7 percent of Scott Kelly’s DNA
> There is no way to prove you voted one way or another with anonymous ballots.

The coercing party can insist that you take a mobile phone picture of your ballot. This kind of coercion is common in some regions of Russia where civil servants and teachers are told by their superiors that they must vote for the preferred party “or else”, and a mobile phone picture is demanded as proof.
Has iOS 11 really affected app star ratings?
Classic democracy doesn’t include human rights. If you’re not a male citizen you have no right to be heard, and even then, the majority have the right to execute or exile you if they find you annoying.

Modern democracy is build on a core belief that everyone is created equal and that we are each responsible for our own lives. Something which extremely similar to the core thesis of Lutherism which laid the foundation for the renaissance and the Age of Enlightenment that eventually led to modern liberal democracy.

It’s a lot more complicated than that of course, but this is the Internet not a PhD. :)
XSLT is one of those things where an XSLT ninja can be super productive in transforming XML and do things much quicker than the coder using a general purpose language. But most of us don't use XSLT enough to get that good, so for most of us XSLT is harder than just coding something.
One problem is that the security firm is incentivized to hinder any mitigation efforts. Hypothetically, a delayed fix or even a successful attack would help their short position.
Sam Altman of Y Combinator paying $10K to be killed and brain preserved forever
ThreeBallot
Here’s loads of evidence of artillery attacks across Russian-Ukrainian border (from Russian side) in 2014:

https://www.bellingcat.com/news/uk-and-europe/2015/02/17/ori...

Here’s direct evidence of one episode of invasion:

https://www.theguardian.com/world/2014/aug/14/russian-milita...
The adversary in question isn't accountable to our laws. There is no "thief's responsibility." There's just "you got pwned, you have no recourse, now it's your problem."

For all intents and purposes, that thief may as well be a crocodile who slips in during the night and eats your children. We can put it on trial or negotiate with it about as effectively.

Was Equifax blameless in the events leading up to their breach? They could have prevented it, but they didn't. Or do we only expect responsibility from criminals and corporations?
It's a reasonable idea if car batteries become easily swappable.
> why do you trust your VPS provider over a VPN provider?

They simply don't have the resources to log every single memory read/write and every network connection of all their hosts. Thus you would have to already be a known target for them to want to do that. Whereas a VPN provider has a limited scope of what they can log and thus needs a fraction of the resources to log everything.
Found no description of how exactly people vote with Agora https://agora.vote/: do they come to a place and press a button or do they download an app(or go to a web page) and press a button?

Either way, I can't see how fraud is prevented even with a blockchain in place.
You're completely correct, that's how it is. A dumb moment, I cannot deny I'm a bit nervous.
Paper describing the Agora network: https://agora.vote/Agora_Whitepaper_v0.1.pdf
My favorite programming language is Zero (yes it is my invention). If you have not heard of it then I am not surprised because the language is very new (theoretical actually). You develop programs in it by defining new infinite sequences from existing ones.

All begins with the primitive infinite sequences and the language's means of combination (specified with decimal digits)

---universe begin---

sequence 01: 0 1 2 3 4 5 ...

sequence 03: 1 2 3 4 5 6 ...

sequence 05: 2 3 4 5 6 7 ...

sequence 07: 3 4 5 6 7 8 ...

...

---universe end---

0105: count by two

---universe begin---

sequence 01: 0 1 2 3 4 5 ...

sequence 02: 0 2 4 6 8 10...

sequence 03: 1 2 3 4 5 6 ...

sequence 05: 2 3 4 5 6 7 ...

sequence 06: 1 3 5 7 9 11 ...

sequence 07: 3 4 5 6 7 8 ...

...

---universe end---

01030501: set up some cycles

---universe begin---

sequence 01: 0 1 2 3 4 5 ...

sequence 02: 0 2 4 6 8 10...

sequence 03: 1 2 3 4 5 6 ...

sequence 04: 0 1 2 0 1 2 ...

sequence 05: 2 3 4 5 6 7 ...

sequence 06: 1 3 5 7 9 11 ...

sequence 07: 3 4 5 6 7 8 ...

...

---universe end---

Please note that as the universe grows we always leave space for more sequences by skipping every other sequence designation.

What makes this language useful is that with very little effort any two arbitrary infinite sequences can be defined. As a consequence any mathematical relation is easily defined as a mapping from members of one sequence to the corresponding members of the other sequence.

I will briefly describe the language's means of combination. Writing a sequence designation one next to another will form new sequences by pulling out corresponding members. But all sequences are infinite so after the last designated sequence is visited the member value is used to select the possibly new member in the first designated sequence. Digits that are not able to be confused with sequence designations specify the three other primary means of combination. They are "cons", "car", "cdr". With a proper understanding of their use one can build arbitrary sequences. I will just say that "cons", "car", and "cdr" are used to combine entire sequences which is logically equivalent to combining corresponding members of those sequences.

In the code above I write "0105". The "01" is a sequence designation. The "05" is a sequence designation.
What if time travelers did show up, but only in any of the multiverses except this one? What if all of the time travelers turn out to be multiverse versions of Professor Hawking himself?
> I find myself writing simpler ones and tying them together with app code just for sanity's sake.

Or just use PEG, parser combinators, or other more readable parsing abstractions
IIRC this particular case was only seen on a specific version of one compiler for MacOS that was provided with extra patches, so it's at first glance less of a problem than it originally looks. That said, I don't think it was doing anything illegal according to the standard (no an expert on this), and as compiled software and a library, the reach of that case may be larger than we might otherwise assume.

There are undoubtedly ways to tell the compiler to be careful, but that isn't always in control of the person writing the code, and even if some level of control exists, compilers change.
I started an awesome list with the content from this discussion: https://github.com/cweagans/awesome-diy-software
Blockchain provides no advantage over other technologies in elections.
The waiting list on this, is it a relatively quick thing, or is it moreout reserving a spot at some undecided time in the future? It'd be a shame to lose out on such a brilliant mind so early.
thousands of top people don't have access to block trigger in emergency situation.
Hm, do they intend to solve that problem? (Can't the person with a gun just force you to destroy your private key after voting?)

One answer would be to just include the old ballot in the new one, so it's clear which one to invalidate if you see both.

I guess now that I'm thinking about it you also want to prevent ballots from being cast once the election is over, and timestamping an event as having happened before a given point is a valid use of an actual blockchain.
well, it definitely works on my own box.
Given the complexity of running a stock brokerage service I don't think it's appropriate to call Robinhood an "app"
Nano has no miners ;)
I've spent time in countries all over the world and my experience was not like yours at all. There were so many more important factors in guessing a foreigners personality than what their nationality/ethnicity was. What is their education level? What is their occupation? What is their economic background? If you want to stereotype then those were much better questions to ask than "chinese, japanese or korean."

Now if you want to argue that certain countries produce way more of one socio-economic class than another and that you're more likely to be exposed to people raised in that culture then maybe I can agree. But to just say, for example, all Nigerians are loud mouthed tricksters? No I don't agree with that kind of stereotyping.
Could you do this in real-time with a post-process shader on PC? shadertoy.com?
We use a bunch of third party packages (e.g. parts of boost) and, because they typically don't compile without warnings or weird compiler options* we try to isolate them in "trampoline" files or surround the header includes with a bunch of #pragma GCC diagnostic ignored "-Wblahblah"

Some of the errors are way past the parse tree and so they can't be controlled by a pragma diagnostic ignored (e.g. -Wduplicated-branches ). So this option is silently ignored. It would be convenient if GCC could say "Warning: -Wduplicated-branches can't be controlled in a #pragma diagnostic" . (or add support for it, but that's hard :-)

* BTW I'm not implying these warnings are due to crappy programming; typically they result from the wide variety of compilers and C++ standards the library manages to support. I only have to support two compilers on one platform, all in C++17.
Got to have something to sell in case Canon Lake gets delayed again...
Well, the point of the OP goes further than that. Two Big Questions are (a) what to do with the non-owning back references (such as backref going up the owning tree) - for this 'soft' pointers are proposed (I _hate_ shared_ptr-like ref-counted stuff, in large projects they tend to cause much more trouble then they're worth, especially memory leaks due to shared_ptr loops are troublesome, causing both syntactic and semantic memory leaks, ouch!), and (b) how to formalize the use of those non-owning ('naked') pointers/references and how to prevent them from being dereferenced when they're pointing to already-deallocated memory locations (and saying "don't use naked pointers/refs, ever" is not really practical IMNSHO).
Sell people's tracking data like most "free" software
The problem is what you suggest would destroy them as businesses. You have just described them doing "just" the parts of their business where they operate at a loss with massive multi-decade debt loads.

Generation is the only part of the business that produces the money to fund the infrastructure and the generation is the cheapest part of the business.
So, this is a great way for a major states to actually brute-force hack elections: have several millions of computers do proof-of-work for false ballot data.
Only because I felt it was cheapening all the blood sweat and tears I put into understanding and developing a real EDW that I found fault with the advertising. Though that aside the premise looks really cool!
So, from an executution model standpoint Rust is pretty close to C++ -- manual memory management, with RAII as the usual strategy for managing things. The big novelty is that the type system actually enforces this, so you can't have dangling pointers, or forget to close a file, or...

But most languages have had a solution to the resource problem at least as far as memory is concerned for a long time: garbage collection. It has huge advantages over Rust's approach, in that you can basically not think about RAII or ownership at all; as long as you're not actively holding on to an object, the memory will get reclaimed for you.

But this doesn't solve the problem for other resources like files, since when a file is closed actually matters semantically. You don't want to just let the garbage collector decide when to shut down a tcp connection.

So what the gp is suggesting is, it would be nice to have a language that uses GC where it makes sense, as it's generally easier to work with, but also provides sane mechanisms for releasing resources like files and sockets.