skysight-inc/HackerNews huggingface dataset:
> I don't think compilers should exploit every undefined behaviour in the C standard. Some of those might be there only to support rare, quirky architectures.

Well, that is one way of looking at it. My personal experience is that if there is an undefined behavior in the C standard, it will be exploited, eventually. I have seen this break millions-of-lines applications during compiler upgrades and/or flag-twiddling. As you can imagine, debugging that problem was a nightmare.

[...]

> Everybody makes mistakes and while some memory safety problems definitely happen regularly even to very experienced coders, and are harder to detect than e.g. an exception, they are also the minority of the problems I encounter, even when counting the occasional buffer overrun or similar. Even in terms of data security, I figure more exploits are high-level (i.e. logic errors not catched in a high-level language - SQL injection or other auth bypass) than clever low-level ones. And not every type of program is extremely security-sensitive.

I believe that you are right in terms of number of exploits, but for the wrong reasons.

I can't find the statistics on this, but from the top of my head, ~20 years ago, 80% of the security advisories were buffer overflows/underflows. At the time, just about everything was written in C/C++.

These days, we see lots of high-level exploits, but I would tend to assume that the reason is that 1/ the web makes it very easy to carry out attacks; 2/ C and C++ have a very small attack perimeter on the web, even if you include Apache/nginx/... as part of the web.

Also, yes, web applications, especially in dynamically typed languages also would require military-grade testing :)
Who's been reading Tim Ferris?
Germany and Ukraine to Demand Reparations from Poland
Macy's Wine Celler – Best Offer with $160 Savings and FREE Shipping
What, so the other businesses should be allowed to remain profitable while screwing over their customers on price even after a competitor comes along who can do a better job? Please, this is what markets are all about.
Support friends. funny video
we should all by on amigas right now, commodore just sucked at marketing.
The Washington Calligraphers Guild regularly conducts an event whereby calligraphers from around the world mail in a decorated envelope. A panel selects the best and they post it on their site over here https://www.calligraphersguild.org/envelope.html

If you're into this, it's fascinating to check out the earlier editions of the contest and the winners. One of my long term hopes is to actually send in something which they atleast consider.
Unable to break its security AND the service's owners are not cooperating maybe even
They're fair as they are. All this would do is punish more harshly those with more money. That's robbery.
Thanks for telling us.
Linkable ring signatures are problematic because if someone can coerce you into signing a second message then they can identify who you voted for.
Falsehoods are helpful for survival? All of them? Or only the ones you care about? What about the ones other people care about?

Aunt Maple wants to use sugar water for her cancer treatment...

Hmm.. strange, how much the value of false things overlaps with the number of wishful things. And how the ones we ought keep are those you like to wish for, and not those terrible wants other people wish for.

One might wonder: is the false really that valuable? Do we need to revive the Norse Gods for their "value"? Or rather, is it much simpler: falsehood is a kind of oppression which limits our ability to act.

"The abolition of religion as the illusory happiness of the people is the demand for their real happiness."
I can perfectly agree to much of what they say, but here...

> The C language is old and boring. It is a well-known and well-understood language.

...I think they are very fundamentally mistaken. C is a horribly complicated language. It is one of the least-understood languages out there. Experienced programmers and compiler authors can debate for hours about whether C code of less than 50 lines has defined behavior or not, and still not come to a conclusion. People can write an entire PhD thesis <https://robbertkrebbers.nl/thesis.html> studying the semantics of C, and still leave many open question (chapter 2 of that thesis does not require any academic background to be understandable, and it comes with tons of links to tickets/questions filed against the C standard). Consistently writing safe C/C++ is near impossible <http://robert.ocallahan.org/2017/07/confession-of-cc-program..., and judging from <https://sqlite.org/testing.html> the SQLite team agrees.

C is old, yes -- and C has boring and well-understood fragments. But full C is very, very poorly understood.
It's not about using the system as an "user". It's about the fact that it bases democracy on principles which are way beyond the mathematical capabilities of 99%+ of the electorate!

I mean, if my government decides to use some crypto/blockhain magic, there is no way I can figure out if using hash algorithm H in a method X is valid choice or if it is a backdoor/negligence.

This is an issue which simply does not happen with paper ballots (backdooring these is of course possible, but really expensive especially at scale). The attack surface is easy to reason out, unlike with cryptography.

Maybe it does not matter though (and maybe I am afraid of mathematicians secretly taking over the world, ha!)
Although Sagan was a great educator, Maxwell and Feynman deserve much more credit than him.
Yes, very nice indeed!
I was surprised to see that the images were 320x400. I completely forgot that this resolution existed and supported HAM6.

I converted the images with imagemagick and it really achieves a retro SF look, e.g. https://bhaak.net/nms/3_output.png, https://bhaak.net/nms/9_output.png

Although I think this images might be a bit better than how they would be shown on an original Amiga. I don't see any of the typical HAM6 artefacts one would expect.
The tech is great and it's still very early but it lacks any community consensus mechanism regarding important events.

Recently there was a hack and a petition was created to ask the devs to allow the community to vote on how it should be resolved:

https://www.change.org/p/colin-lemahieu-lets-ask-the-nano-de...
Depends on the GC implementation, not all of them "eat your memory, trash caches, and slow everything down" the same way.

And even those that do, if they do it within the time and memory budget bounds for the task goals, then that is still a win.

I don't care that manually managed memory would solve the task with 10ms and 20KB, the GC with 100ms and 200KB, if my budget is 1s and 1MB.
We could certainly do that today (and we are, on a limited scale), and I think it may happen with electric cars surprisingly soon.

Certainly for those of us living in larger cities, a subscription service would make sense, so you would have to worry a lot less about parking. Especially with self-driving cars that could deliver themselves when needed.
Link to PNG image: http://www.makelinux.net/kernel_map/LKM3_2048.png
Did you know just 5 Nano nodes control over 51% of the network?

https://www.nanode.co/representatives
I've seen that pattern several times, often enough that it's a bit of a red flag as it seems management know their own weakness but don't want to be exposed to it.
It can be said that the election was electronic, however other countries have used electronic polling stations (notably the USA) and those have since been proven to be easily hacked and the results modified.

The headline here stating the use of blockchain is important because its the first election on the planet that has used the implementation and its an implementation that can't be modified without trace.

As for point two I have no idea, I am assuming it required people using voting booths but given the technology used, nothing is stopping it from allowing decentralized voting.

edit: As it turns out it looks as though people voted using traditional paper ballets and it was inputted into the block chain via a neutral third party: https://www.bitguru.co.uk/sierra-leone-presidential-election...
The are not. Remote is far worse as it usually enables compromise (via privilege escalation most of the cases) and persistence without need for a previous break or physical presense.

These reported errors, while quite severe for what i've been able to make out of the less-than-good paper, do not grant a primary mode of attack and do not provide a way of getting privileges. Just a way of keeping it forever and ever and ever and ever ...

Should be fixed and done properly, just get the fucking CVEs already and publish it ... It is highly likely that it's in some way applicable to other secure elements on other cpu's as well so a proper response is needed.
Wow, that's one hell of a strawman.

I am absolutely not against people wanting to run a business for profit. In that sense, I am a rather pragmatic socialist libertarian, if you will.

However, I am strongly against businesses that exploit their workers by underpaying and overworking them.
Opps, I believe you are correct. I haven't reviewed the proposal in detail, but are they planning to standardize the event generation side of things? (the parts exposed to running Java applications)?
I wonder what pg thought of dabbledb
Get a proper smartcard, don't let it be connected all the time (remove when not needed) and if they need to be kept private really badly, for the love of god don't connect it to the internet in any way.
> But this doesn't solve the problem for other resources like files, since when a file is closed actually matters semantically. You don't want to just let the garbage collector decide when to shut down a tcp connection.

At least in some languages this is not an issue if one is able to use higher order functions, with bonus points if they allow for trailing lambdas.

So if it is possible to organize the application architecture as regions where the resources are supposed to be valid, then one can manually get rid of such resources.

Of course, this might not always be possible, and there is the caveat that one needs to remember to apply such patterns.

Which is easier if it can be imposed via the type system.
Not really. Where I am that'd take at least double the time. Depends on what kind of emergency it is, of course, I'd not move someone with spinal injury, but if my girlfriend is feeling terribly sick, I'd rather drive her (that's an actual real life example that happened to me).
There is a compiler option for that, just run javac alias instead of g++
Wind and solar need tons and tons of land to power our energy needs

Elon Musk begs to differ. Here's something he said:
“If you wanted to power the entire United States with solar panels, it would take a fairly small corner of Nevada or Texas or Utah; you only need about 100 miles by 100 miles of solar panels to power the entire United States,” Musk said at at the event in Rhode Island. “The batteries you need to store the energy, so you have 24/7 power, is 1 mile by 1 mile. One square-mile.”
https://www.inverse.com/article/34239-how-many-solar-panels-...

something like an area the size of the US to power the world, per Steven Pinker

Not to slag on Pinker, but Musk has proved himself to be a hell of a lot better visionary in the real world than most anyone else, and that includes pop authors.

Somewhere else I saw a claim of 0.6% of US land area needed for US power needs. Even if it's 1%, no BFD. Let's assume that many areas of the world don't have as good solar irradiance as the USA. So maybe it's 2% in some other places. Still, no BFD.

IMO the biggest problem with current nuclear is that it's run by utility companies. Those places aren't staffed by the world's brightest bulbs (heh heh). Allowing morons like that to build and manage nuclear plants is akin to allowing toddlers to play with live hand grenades. Most of the time they don't pull the pin, but when they do the results aren't pretty.

PV solar is simplicity itself. No moving parts. Linear economies of scale: 2x the panels means 2x the cost and 2x the power.

OTOH Southern Co. is now saying that the two nuclear reactors they are trying to complete will cost more than $25 billion. https://www.myajc.com/business/southern-says-vogtle-costs-ex... Oops.
They are coming soon to Australia for the last 2 years.
It is not purely luck, it is also about being in the right position and circumstance to make use of lucky happenstances, and actually about being in a position in life that makes those lucky happenstances more likely to happen.

Luck doesn't do much if you can't act on it. Conversely, lucky breaks happen more often to people who are able to expose themselves more to the possibility.
Literally how Private Internet Access responded to an FBI request.

Not endorsing PIA in any way, though do use the services.
Web support for create-react-native-app landed (alpha)
I think the numbered LifeStrategy funds are only a UK (GBP) thing. Am I wrong?
Housing Anywhere Discovered the Best Way to Share Data
It's amazing how we are still using grid design for every thing and not much has improved other than few UI improvements. Maybe it's natural for our brains to map lists and tables.

And why do we need so many of these sheet apps. I remember my colleague showing me smartsheets. I wasn't impressed then too. Why spend so much time and energy to move to slightly better sheet.
Both systems have their disadvantages. Electronic voting, especially when it's not completely anonymous, opens up the voting process for all kinds of vote buying, coercion and intimidation.

Take Turkey or Russia for example. Voters know exactly that the current radical governments can track their ballot numbers, so they'll think twice before voting against them.
The Amiga architecture was very limited in regards to 3D (or pseudo-3D), so was pretty much left in the dust when Doom came out.

Very awesome at 2D, though.
Design Psychology and the Neuroscience of Awesome UX
IBM was never in the consumer space.
Neat. Thanks to both of you!
Obviously the only way to do that is to throw a Recurring Neural Network at it? Am-I-rite or am-I-rite?

... snark, but not really? Todays hammer of choice is machine learning and AI.
Makes total sense. Thank you! I’ll give this some thought.
"The are not."

The basis of this is mostly you just saying it emphatically, as far as I can tell. Most real-world exploits rely on a combination of vulnerabilities. What's a sensible ranking of 'remote' over 'persistent'?

just get the fucking CVEs already

What does this really have to do with anything? It's hard to imagine anyone dealing with a real deployed system saying 'Well, since there is no CVE, this does not affect us at all".
The issue here is that most of the time something like half of people are speeding and some of the time literally everyone on the highway is speeding. The people who set the speed limit set it with the goal of causing a certain kind of psychology on the people driving, not because "past this point your car is going to lose control and kill everyone", and the law is then defined to follow the signs (which expect people to go over) and not the reality. It is just all fundamentally broken, as you can't fix it by changing the signs or defining a "true cap" as that would also break the psychology parts and lead to drastic differences of relative speed. The result is that no one truly cares about speed limits as defined (nor should they) and so police have immense discretion to use "you were speeding" to nab almost anyone, which is giving the police departments (who are optimizing for their budgets) and police officers (who are often applying flawed stereotypes as their model of criminal behavior) way way too much power.
I have no experience with AI, but is this application very different from ltc or eth fpga mining? Do I get it right, that AI chip needs plenty of memory to hold coefficients, manipulate data, get next set of coefficients, repeat this multiple times and the bottleneck is memory bandwidth? Or it can be parallelized with more FPGAs for different layers with corresponding storage for coefficients.
> They do NOT want an autonomous Ada community to pop up, they just want to attract programmers they can contract. Since they're basically the only noteworthy contributors for Ada, they're impossible to bypass, hence using Ada means submitting to Adacore's whims.

Disclaimer: I work at AdaCore. Both forces are working in tension in the company: Some people push for the community, some for commercial interests. Of course as a company we want both to coexist, which is the difficult balance to find. The community advocates are getting stronger and trying to push their visions and make it understood. This is a long process but it's making headway. But, anyway, saying that we don't want an autonomous Ada community to pop up is dead wrong.

The libraries we release on GitHub are generally under GPLv3+runtime exception, so you can actually dynamically link against them in code with a different licence. https://github.com/AdaCore/gnatcoll-core for example.

It is very possible, if not ideal, to develop native software in Ada today, with whatever licence you choose.
When I was younger, I honestly believed in the explanation that left to their own devices, free enterprise will work to protect the environment, as anything that hurts the market will hurt profits. What I didn't take into account was that this argument doesn't work for enterprises run by beings with limited lifespans. All except the most empathic humans will not incur any cost to avoid consequences that are beyond their lifespans (or, in some cases, beyond their immediate offsprings' lifespans). That is why I believe that Adam Smith's invisible hand will fail to help the environment...
Flock Dynamics
The Most Useful Mobile Apps That Make Your Day Easier
Americans love their freedom. Which is more important: the freedom of corporations to innovate in extracting natural resources, or the freedom of citizens to pursue happiness without being poisoned by drinking water?

The last photo on that page shows Mary Workman holding a glass of well water that the Hanna Coal Company rendered undrinkable. Something to remember for those who pine for the days of "great coal jobs" and that unrestricted American entrepreneurial spirit of the 1950s.
I don't think fragment shaders are suitable for this, since the HAM modes are very stateful. In HAM6 for example, a screen is composed of a bunch of 6-bit instructions encoding one of four operations each with four bits of data. You can either set the color directly to any of the colors from a 16-color palette, or you can use the color of the previous pixel, modifying one of its RGB channels.

This is similar with HAM8 but in order to be able to use more of the 24-bit color space the instructions are 8-bit wide with six bits of data, and you can only modify the six most significant bits of a color channel and directly use a 64-color palette instead.
This same EPA?

https://www.nytimes.com/2016/08/17/us/navajo-nation-sues-epa...

Don't get me wrong, I think the EPA is a net gain. But let's not pretend they're prefect simply because their mission is good.
Not if the valves were automatic.
I generally do it like this:

1. Download liblame

2. Thank god and Richard Stallman for open source software

3. Have a cup of coffee.
That's without even showing the Cuyahoga river burning, the oil slicks and dead animals in Newtown Creek, or any superfund sites.
Elsewhere in this discussion, I suggested the same thing, except using envelopes instead of folding. You also need to separately tally the other N-1 discarded ballots to make sure they're not being brought out of the polling station. (Discarded ballots brought out of the polling station prove to jackbooted thugs that you didn't vote for the opposition.)

Though, I don't understand the purpose of the pen in the proposal. There's already one of every possible ballot, so you don't use the pen to mark candidates. You don't write your name on the ballot, as that would ruin anonymity. You don't cross-out the ballots that you don't cast, as that would open back up the weakness to photography. So, how is the pen used?

Also, what's the purpose of having the official put the ballot in the box instead of having the voter put the ballot in the box? Is it to prevent multiple votes from being cast? You need to have a discard box for the unused ballots and tally those discarded ballots in order to detect when the jackbooted thugs force people to walk out of the polls with their discarded ballots in order to prove how they didn't vote. Once you have this, you've also got multi-vote detection.
After EPA : https://upload.wikimedia.org/wikipedia/commons/thumb/d/d5/An...
Ask HN: How to get started with microservices
Do you have any recommended books, blogs or online courses?
Any UK alternatives to this? Been looking at moving away from Barclays which charge you fees out the wazoo.
Even most libertarians recognize that in situations where the very physical nature of something (like air) means that pollution won't stay where it was created, it's an unavoidable tragedy of the commons. Free markets are much better at avoiding such situations in most circumstances, but when the tragedy of the commons is inescapable, regulation is the only weapon we have.

Now issues with the current form of the EPA may arise, but the notion of removing it with nothing to fill the void doesn't even fly with my Any Rand loving self.
Some differences between the two being that Smoot-Hawley broadly applied tariffs to tens of thousands of products from most countries in the midst of a major economic depression in an attempt to help out American farmers and other related industries.
What's It Like to Fight in 15th Century Armor?: A Surprising Demonstration
Anyone else getting a bit of a dodgy PR vibe about this post and all the glowing comments, or is it just me?
I've never really understood why conservatives are so reluctant to look after their environment, after all they get to live in it as well.
% Best Camping Lantern
There's really no comparison between them is there? Regular profiler has their usage but don't they change the runtime characteristic a lot specially in tight loop and cpu bound situations? The biggest advantage of JFR are two folds running it in production, problems that are hard to reproduce and secondly not getting wrong data because the profile has changed the characteristic, forced de-optimization on the code and such.
A Paycheck Could Be in Cryptocurrency for Employees Shortly
I think it comes down to what you want to achieve

I have a tech blog as my tech notebook. After years of loosing notebooks Ive found a blog the best solution to this.

So when I solve a problem I will write it up and then if its useful to others then fine
I think this is really cool. A trendy buzzword tech may bring more people to the polls, and the unforgable blockchain technology seems to have a use case here. I wonder how they prevent people from making multiple accounts. The fact that generally I find block chains slow, doesn't negatively affect this type of system. Great!
The problem is the modern 'corporation'. First govermnent allows anonymous structures like this that are free to pursue maximum profitability with minumum legal responsibility for the individuals behind this structure. Then afterwards it needs to regulate that which it allowed in the first place.
How Elegran Real Estate Automated Analytics Reporting with One Single Solution
For reference, see /r/wallstreetbets
There was a relevant discussion on the Bitcoin mailing list recently: https://lists.linuxfoundation.org/pipermail/bitcoin-dev/2018...
Or Acorn Archimedes.