skysight-inc/HackerNews huggingface dataset:
Random number generation, including arc4random() and /dev/*random:

OpenBSD: ChaCha20
FreeBSD: RC4
NetBSD: NIST CTR_DRBG using AES-128
HardenedBSD: ?
Dragonfly BSD: xor of outputs ChaCha20 and IBAA

Also on OpenBSD, major 3rd party packages often come with security improvements. For example, nginx and Apache run chrooted, and Chrome is pledged.

I don't have the time to analyze privsep in base among the BSDs, but I can say it's extensive in OpenBSD.

I would love to see pledge support in HardenedBSD. I think they're doing good work. Hopefully FreeBSD can import some of it.

Also, Dragonfly is a first-class BSD citizen and should be included in comparisons. As a recent example, the project leader, Matthew Dillon, has done excellent work relating to Speculative Execution and collaborated with other BSDs which helped everyone. Also I'm pretty sure OpenBSD has imported a number of hardware drivers from Dragonfly.
No webassembly is a solution to it. JS just sucks. Actually so does HTML and CSS. The entire web ecosystem is a closed platform. The reason that the front end stack is constantly bloated is because JS,HTML & CSS are awful. If the people behind wasm were smart, they'd allow generic handles to a graphics context so that people can write/export other rendering frameworks. Strong typing is good, reactive programming is good. Using html and css strings is idiotic, and we couldn't build alternatives to this model for the past 30 years.
Marijuana alone is the largest agricultural product by value in most states by a pretty wide margin. And that’s been true for a decade before it was legalized anywhere recreationally.
Um, the download section on the vendors website contains the text "This installer may include bundled offers. Check below for more options."

https://imgur.com/a/Xrc1jMy

You can download FileZilla without the bundled "offers". If the average hacker news reader is capable of doing that, then whats left is just a criticism of ALL bundled installers, in which case, pick a number and join the queue.
I'd wager they couldn't. It's not likely they themselves would have those kids either. It would be the FBI prosecuting child pornography and being knowledgeable about it (with even more knowledge on how to lose a CP prosecution) and the NSA that would be hoarding those logs.

Of course, nothing says they wouldn't be cooperating in this.
Seconded. They are excellent. I must re-read them.

Water Margin[0] came to UK on TV in the early 80s from Japanese TV. Gained quite a following.

Journey to the West came to the UK as Monkey[1] (again a Japanese adaptation) around the same time. It was the most ridiculous, weird thing on TV. Most people at school were addicted to it. It became a cult classic. Sadly Saiyuki 2 never made it to the UK.

[0] https://en.wikipedia.org/wiki/The_Water_Margin_(1973_TV_seri...
[1] https://en.wikipedia.org/wiki/Monkey_(TV_series)
What other shortcomings are missing from the list?
This seems vague. Elaborate?
"I am a cat" by Natsume Sōseki 1905. like Murakami, but the first Japanese author to write like that (?) All the other novels he wrote are great too.
Cyberduck: A libre server and cloud storage browser for Mac and Windows
I don’t want your changes, thanks. The suffering of living in your prisons is worse than growing old.
In this version of web assembly only !

Web Assembly is gimped because it needs to be compatible with existing JS runtimes - when they add threading support you will no longer be able to run a WASM shim in JS but at the same time WASM will become a lot more general purpose.
I've been in touch with FB. They are interested in using rseq for jemalloc. They have provided prototypes of jemalloc based on rseq, along with benchmarks helping me make the case for rseq mainlining.

I don't know whether Google will ever want to swap from their in house rseq implementation to the upstream Linux rseq, use both ABIs for a transition period, or simply keep using their own in-house rseq.
My problem is not that it is tedious, but that it is not a recommended configuration. Stuff might break, it's much less tested, etc.
Heard if him, impossible. Any Seinfeld fan has heard of him.

Read him? The numbers start to thin out.
> If the people behind wasm were smart, they'd allow generic handles to a graphics context so that people can write/export other rendering frameworks

Games maybe, but for normal applications sounds like would just end up with worse graphics than old Java applets, Swing, etc.
https://en.wikipedia.org/wiki/Mesoamerican_ballgame#Human_sa...
Sure, the web is sometimes used that way currently, but few projects are using full-on Foo-to-JS compilers like GWT or ClojureScript that make the original source entirely illegible when viewed through the browser console.

Instead, projects are mostly using "light" transpilers built to have clean mappings to JS semantics, like TypeScript, where the original source can be recovered and traced by the browser as long as the transpiler generates a source-map.

WASM really won't work with the "source map" paradigm, and so a move to a web where most development uses languages that compile to WASM, is a move to a more opaque, less learnable web. (And also one that browser extensions have far less of an ability to intercede in.)
Away from cities it gets very dark at night, unless there is a full moon. But near cities there is a lot of light pollution, so we're always in a state of near-twilight.
I'd dispute the whole "we are shipping this extra software, we don't really know what it does, but they are paying us so I don't see what the problem is ¯\_(ツ)_/¯" (paraphrasing)
Can't plug an iPhone into it though.. and unless they've switched it up since I bought mine you get a USB-A to lightning cable, so you can't plug it into the laptop either without a dongle. :)
They did this before. Used to have Binkiland included in the installer from Soureceforge. They stopped, but obviously they're right back at it again.
By being hosted in Rust, Gluon has access to the Rust ecosystem. So one could use Gluon and still be in the family depending how seamless the interop story is.
Another solution to a too-bright room is those eye-covering masks like airlines give out. I try to use them at this time of year otherwise the 5AM sunrise wakes me up earlier than I'd like.
Regular code reviews like what the OpenBSD folks do. Also, they appear to be back on OpenSSL again[0], and not using LibreSSL like the list claims. If they can't even accurately reflect which SSL library they are using, what else on the list is incorrect?

0. https://hardenedbsd.org/article/shawn-webb/2018-04-30/harden...
Oh yeah, I disagree completely with the "above average" characterization, but it's how they framed the question.
Javascript already has multithreading via webworkers. That's not something WASM will introduce.
Which facts did they dismiss? I just saw a lot of rabble rousing..
I don't know if you were being sincere, but that specific scenario can't happen because of due process in the US.
>Everyone knows they shouldn't touch bare wires, but unless you work with electrical circuits regularly, it's hard to develop the practices that keep you from accidentally brushing against an exposed wire.

Eh, I'd say even with experience it's hard to drill in, because someone with experience has probably brushed up against something running supposedly lethal voltage once in their life, and walked away with only a startle and a tingly arm, breeding complacency
There are underground and above ground non auto networks. See Canada, las Vegas, Portland transit mall
If I see someone being immoral I'm going to tell them "how to make their living" not because I hope they are going to be so inspired as to change for the better because you and I both know that's not going to work.

I do so because I hope other people will listen and stop doing business with them leading to a decrease in profit and THEN changed behaviour from the culprit.

There is lots of factual information. They are factually doing a lot of malware like behaviour in their installer and bundling software from questionable sources they have no control over. At best they are putting their customers at risk.

The only facts that can possible emerge is that its actually worse and customers are getting their identities stolen or some such.

Rabble rousing is literally the only way anything gets fixed.
The practice paper given to children learning kanji is commonly partitioned into a 2x2 grid, to help with proportions -- kind of like how children learning to write English are given paper with guidelines for baseline, ascenders, descenders, and mean line. You can see an example of the 2x2 grid in the Nintendo kanji game on the article's "Info" page, or by searching for "kanji practice paper".

The lines are meant more to help relative placement than to exactly divide characters, but many characters do divide into left-and-right or top-and-bottom portions -- see Jack Halpern's SKIP system for example:

https://en.wikipedia.org/wiki/Kodansha_Kanji_Learner%27s_Dic...
Thank you for that, it was a nice comment and I up-voted. It is interesting, my eldest always seems to think we are poor now, since she was old enough to have remembered the worst of it. I earn above average wage now, but she is scarred by it. My reaction is not to victim-blame other poor people who didn't get through, but to campaign for a system which helps people succeed. And that system is not, categorically, anything with strings attached or any 'work-makes-you-free' Victorian BS. Working out of poverty is miserable and I don't feel a lot better for having done it, but I do bear plenty of scars.
This looks useful: https://github.com/awslabs/serverless-application-model/blob...
The "Javascript is bad and webpages are too big" crowd is going to have a tough time coming up with an opinion about this.
Watching Mel Gibson's Apocalypto gave me chills.

I don't know if there are any other movies that depict the times so realisticly (atleast from a movie watcher's perspective though not from a historian's one).

The last scene showing Hernan Cortez's ship is the bridge between the old world and the "new world". The start of the decline of the Aztecs.
Set up right they should not have even needed to flip a transfer switch. The generator would be feeding a large ac to dc battery charger, which charges the same battery bank which is connected to the pv charge controller. You can parallel the outputs of an ac-to-dc battery charger and a pv charge controller together onto the same battery bus, with appropriate DC breakers in place.

Simply start the generator and the battery bank begins receeiving charge. There are pv charge controllers (Schneider electric) which support generator auto start based on a low voltage threshold.
Missed opportunity to name it 'crust'
Serverless and Vendor Lock-In: Does It Impact You?
iMessage doesn't require a phone number. You can use it with just an email address.

I mean, you do need an Apple ID to do it that way. But I don't think there's anything stopping you from creating throwaway Apple IDs.
I think Go is a reasonable counter example to your assertion that mainstream languages have to be complex and constantly changing in a breaking way.
> todoList.Root.Set("innerHTML", string(newTree.HTML()))

Using examples like this are really unconvincing when it looks like old jQuery or vanillaJS. Yes, I appreciate that folks like whatever they are familiar with and JS is not elegant, but web assembly doing old school DOM manipulation, but now in N number of different languages sounds terrible for maintenance.
Edward http://edwardlib.org/

An amazing Python library built atop Keras and Tensorflow for composing and training probabilistic models in just a few lines. If you're interested in machine learning and/or Bayesian statistics and modeling, you owe it to yourself to check this library out. The webpage has several different tutorials that are all super interesting.

I don't know too much, but I believe this library will be superseded by Tensorflow Probability (Dustin Tran, who writes & maintains Edward is also on the TF Probability team).

https://medium.com/tensorflow/introducing-tensorflow-probabi...

Either one of these are super super valuable if you're looking to play around with and invent new ML algorithms, since you can do in 5 lines what would have taken you 1,000 lines and 4 days of debugging to do without these libraries.
If you have skills, time and motivation to do this, why not?
what is the relationship of this to Material-UI? https://material-ui.com/

On the Material-UI website it shows CreativeTim (the creators of Material Dashboard) as being a major contributor, additionally there is a Material Dashboard "Premium Theme" for Material-UI that's created by CreativeTim. In the MaterialUI site's thumbnail comments it says created with MaterialUI, but on the MaterialDashboard site it does not say this.

Very confusing. did CreativeTim move away from MaterialUI to a bootstrap4 foundation? or something else?
I recommend The Death of Ivan Ilyich. It's a short but thought provoking book, for me anyway.
Cryptocurrencies do not need to be adopted on the same level as state-issued fiat currencies in order to achieve this goal. So long as they provide a means for some people who wish to live outside the state, evade taxes, launder money, and channel resources into actions which harm the state and its ability to enforce laws, it succeeds. As long as there are privacy problems being solved by their use, they will appeal to people who value that privacy over living under the control of state governments.
I don't remember what, but there is already something fairly popular in the Rust ecosystem with the name crust.

Edit: I think it was https://github.com/maidsafe/crust .
Stereo Systems Won’t Turn into the Death Star. AI2 CEO on AI
Is this also a useful tool from an administrative point of view? One of my friends is a db admin and he has not heard of ORMs at all.
We've forgotten how to elevate issues above cable news fodder when necessary. But history will see this with absolute clarity.

The present is trapped into framing everything as an issue with two sides, and maybe nuance gets lost. But the bigger problem is that the equilibrium is so established that the middle no longer accepts that one side could ever be very right or very wrong on a given issue.

History will not be limited as we are to seeing Rachel Maddow and Sean Hannity as equivalent outrage peddlers at opposite but equivalent ends of the horseshoe.
I would rather they go out of business if they can't figure out another way to make money.

You CAN install binaries on other platforms but on for example linux distros their is a curated platform of packages where you can get most/all software.

The fact that this is the default way to install software and regular users don't need to look beyond the official repos is why installing software on linux isn't this kind of shit show.
Alternate (probably American title) I remember from high school is The Gods Will Have Blood
Spinning up an app engine service is incredibly easy and, if using standard environment, is basically free until you have load. It auto scales from zero very quickly (milliseconds).
People are ‘ghosting’ at work, and it's driving recruiters crazy
It is a matter of perspective. For my personal projects I decided some time ago that I would use javascript both frontend and backend. That was a world of pain, mostly attributed to the lack of static typing, asynchronous nature implemented through callbacks, and the pain of choosing alternatives in the chaotic ecosystem. It was somewhat alleviated when I switched to Typescript, started to use async and await, and settled in some choices (Bootstrap, React, webpack...). But then I tried the golang. Yes, the lack of generics hurts a bit, but otherwise it is an absolute damn pleasure to use: static typing, reliable completion in IDEs, batteries included, more clarity in choice of modules. It just felt right. Granted, it is my multi-year background in C and C++. For me multi-threading and co-routines just feel more natural way of doing concurrency than callbacks and CPS.
> And you still don't remember that friends name?

Some information can be relearned. Some cannot. It would be relatively easy to discover the name of someone from your past (ask a coworker, check a yearbook). I think the better example in the parent’s comment is a lost password.

I changed the pin on my phone while I was in a sleep deprived state and had to erase it to recover from not knowing the pin after I finally slept.
All ICE Employees on LinkedIn
I think there are two things: the short-term effects of missing a night of sleep persist for several days even if you get plenty of sleep later and the chronic effects of missing a day of sleep accumulate even if you "make up" the hours later on.

I'm guessing the second one is what the article is trying to say here. If you don't get enough sleep during the week, you can't make it up on the weekend, even if the total hours slept per week adds up. You'll still suffer the long-term effects of chronic sleep deprivation.
HN readers are capable of not using FileZilla, because its admin is actively trying to mislead its users into running malware.

Are you associated with FileZilla? Why are you here bringing out the "everyone is doing it" defense?
IRC always felt to me more like a public forum, whereas IM was private conversation.
im just the messenger.. i found it here: https://twitter.com/11rcombs/status/1009294293717143553
Silicon die analysis: inside an op amp with interesting “butterfly” transistors
Now you seem to be pretending not to understand a metaphor. Is that to avoid actually debating the point? And please do let me know where I'm coming from. I'd like to hear that, since it's so clear in your mind.
Ask HN: Should I stay? First employee equity/pay question
I was the first employee at a startup 1 year ago. I'm thinking about leaving now because I don't feel like I have enough equity to care.

When I started, I was making a competitive salary with other tech companies in Los Angeles (150k), but was awarded what felt like a very small equity stake. As the first full-time employee, I was awarded 0.5% option grant.

The company started with a 3M seed round out of an accelerator. We just raised a 8M Series A round.

Since starting, I've always felt the equity stake was too low and considered leaving many times. I was offered a job at Facebook, which I decided not to take. I also came across a number of other Series A stage companies that I strongly considered, but decided not to pursue.

Is there any way now to request more equity, without taking a pay cut? Or is it too late?

I definitely can't imagine staying at the company, knowing that there are other employees starting now with a similar equity stake and also feeling like the founders are coming away with 30x more equity, when we all started around the same time.

What should I do? Leave or stay?
Sure yeah, I understand your vote, and your slightly positive leaning ambivalence. But in a couple cycles or so when the ideology of the elected officials more closely matches the current ideology of the party's voters, you will find your views unrepresented by either party. Put another way: if (in my opinion, when) President Trump starts chafing at the Federalist Society's dictates on judges and begins nominating authoritarians, it will not be so much as a blip in his support amongst the current Republican voting coalition. That's no longer part of the ideology, it's a transitionary hold-over from the previous ideology.
The insertion sort conversion example makes Rust look intimidating and verbose as compared to C :-).
anything by Jack London.

I had read translations of his works in russian and after immigrating to Canada, was surprised to know that nobody had ever heard of him here.

A real gem if you enjoy the likes of 'of mice and men'.

https://en.wikipedia.org/wiki/Jack_London
Also gasp mass transit. A dozen small compact cites with trams (streetcars) modern ones get up to 40mph can serve to create a good cbd at the hub, fit well with walking and cycling while providing critical mass for there to be enough things and places nearby. If service is 24/7 and stops are spaced close enough you can even park most cars outside the city.
But mIRC was (is?) also easy to use.

AIM, Discord etc. have the 'word-processor problem': the protocol and the interface are inexorably intertwined. You're stuck with whatever user interface they provide.

And this 'word-processor problem' is compounded by the 'normal people' issue, or, even worse than that, the 'lowest common user' problem. It's optimisation not for the best or the most powerful or even the prettiest interface, but rather optimisation for ease-of-immediate-use. (I.e. the interface for word-processors, whether LibreOffice or Word, are miserable environments for actually creating in, because they're tailored to not even 'average users' but to 'inexperienced and lazy users' - those who want to be able to sit down and use it without any training.)

With an open standard, you can have good interfaces for 'normal people' and an interface for 'lowest common users' and interfaces for other types of users, and this enables all of these types to be able to interact.
Unfortunately, you could argue that it's well known because it's so easy to believe that it's being used as an instruction manual.
Why US only and why screenshots? It seems a lot easier to give people a browser extension that automatically reports back.
My favorite collection is the "The Golf Omnibus" aside from all the Bertie Wooster books themselves.
libc is not tiny either. Try compiling helloworld.c using gcc with -static option. You get a similar size. I don't use Go much but I recall comparing binaries and a Go binary was about 200k larger than a binary from gcc compiling C.
The Revolt of the Masses by Ortega Y Gasset
But if catching up means taking on baggage and complexity, is that still a win. Technology is a means, not an ends. Of course non-native should evolve, but taking a copy-cat approach seems like a not so good plan.
Sophisticated users will know to download the unbundled installer, and maybe even go so far as to verify the hash.

But that sideskirts the question of whether to continue using software where the authors are willing to put their users at risk by monetizing with what is apparently malware bundles.

FileZilla is by all accounts a fantastic piece of software. I’ve used it for years, both the client and the server, and it’s no doubt provided significant value to me over the years.

And yet I’ve never paid the FileZilla authors a penny for their services.

So while I didn’t force the FileZilla authors down this dark path that they’ve chosen to use for monetization, I accept that I am part of the problem.
I got tricked into installing adware as part of a java install, and took me many hours to get it back off my system.

I don’t get why microsoft isn’t pushing all these vendors really hard to distribute through the windows store. The windows store is a graveyard compared to the mac app store, despite having a head start and a bigger target audience, and it’s basically impossible to use windows without sideloading apps. Microsoft is pushing windows S at people, where you can’t sideload software, but the windows store just isn’t ready for that and all it will do is push people to the mac when they inevitably have a bad experience.