skysight-inc/HackerNews huggingface dataset:
> There are realistic systems that are operationally secure by the given standard. Nuclear launch systems are the obvious example.

AFAIK there aren't really any examples of production systems that have meaningful, formally verified security properties without gaping holes.

Do you have a good paper about the full stack formalization/verification of a nuclear launch system?

> “Best practice” is a euphemism for whatever it is the majority does. Nobody ever got fired for buying IBM. That’s not even reasoning.

1. Companies are sometimes sued, successfully, for not following "best practices". And on technical merits. Ex, Toyota lawsuits.

2. It most definitely is reasoning! Here's the cartoon derivation: "If I buy IBM I do not get fired. Therefore, I will buy IBM". This is reasoning about the social system, not the technical system. But then, security is both a technical problem and a social problem. $Billions on formal verification can't stop the simplest of phishing attacks.

> First all programs have operational semantics, the only question is how well understood they are.

Well... I guess technically. But that's not typically what people mean when they say something "has a(n operational) semantics".

Typically when people say "X has an operational semantics" they mean "someone has actually tex'd/coq'd/pencil'd the transition rules and maybe proved things about them".

Example: If I implement a programming language without doing any theory and you ask if I have an operational semantics, the only non-confusing answer is "no" or perhaps "the semantics is defined by the implementation of the compiler", which is just a tongue-in-cheek way of saying "no". This doesn't mean that no operational semantics exists, it just means I haven't written it down in the form of transition rules or a coq file or whatever.

If I give my language a denotational semantics and you ask if I have an operational semantics, I'll say "no". But again, that doesn't mean that the operational semantics don't exist. It just means I haven't written them down and proven a correspdonence.

> I’m surprised you’re taking issue with that since you give a great example thereof.

I think you missed the fundamental moral of the sandboxing example: perfect is the enemy of good enough.

Sandboxes allow for security guarantees without formalizing every aspect of the system. In fact, I conjecture that these sorts of "don't try to formalize everything" approaches toward formal security guarantees are really the only ones that scale.

If you try to formalize everything, you'll drown. If you strategically concede defeat and admit that some parts of the system aren't possible to formalize, you can get a lot of strong guarantees. As long as the concessions are strategic. Ex, sandboxing whenever the permissions interface is simple but the implementation is complex and the failure modes permit sandboxing.

Or, to put that observation in a pithy phrase: "perfect is the enemy of good enough."
I am thinking of the obviously watertight and airtight flexible, yet very tough material used for collapsible diesel fuel bladders... Fitted out with an air tank supply and ballast weight mounting positions?

https://www.google.com/search?q=diesel+fuel+bladder&num=100&...
> Shouldnt we be focusing on the fact that people need to work 60 hours rather than accomidating the system that enables it.

"Need" is relative. Programmers don't "need" to work 80 hour weeks, but if it's the difference between getting paid $80,000 and $160,000, some people will choose the longer hours, and there isn't inherently anything wrong with that.

So why is it wrong when someone whose base salary is $25,000 makes the same choice?
I liked this quote - "I think the essential way to do anything great, you have to have some incremental development philosophy because you're just going to be wrong with your grand design that you don't iterate on."
> Stats? Evidence? I mean hundreds of of thousands of companies use PHP and other forms of less than perfect tech.

Oh, I meant companies at the scale of Facebook. There aren't too many of them, would you not agree?

> I also think it's interesting that you're calling FB an example of tech excellence but saying it's going to fade away. Choose one?

FB does a lot of open-source projects. Their devs are excellent. That doesn't mean that their main value proposition is not comprised of code of the kind you speak about. No need to choose one, both can coexist in such a huge company like FB.

> I never made any such argument. Not even close. I only said quality is not the only requirement and might sometimes not be a requirement at all.

Well alright then. I am not here to pick a fight, you should be aware that you came off a bit more extremist to me and a bunch of others than you claim. But these things happen, I can't claim your intent because of a few comments, that's true.

Me and several others' point is that quality plays a part bigger than what you seem to claim. I also knew many devs that decided they won't ask for permission to take the [slightly / much] longer road and this decision paid off many times over in the following months and years.

Sometimes businessmen simply must not be listened to. I can ship it next week alright. But I can skip a few vital details, namely that I did not take into consideration some stupid micromanagement attempts to teach me how to do my job ("nobody cares about this arcane thing you call 'error logger' or 'fault tolerance', just get on with it already!"). Such toxic work places should be left to rot, that is a separate problem however.
Are there any small enough for the one-parachute-for-plane-and-contents technology that can go closer to the speed of sound (like, go about Mach .8 or so), and rely on pulling into stall to slow down enough for the parachute to deploy without ripping out it's part of the airframe? That should be much safer than the current way when operating small aircraft at speeds where that parachute could not deploy directly.
> Does the general public not know this?

The general public, assumes that because launching rockets and space shuttles into outer space, they must be much more computationally intensive than something like say, a farm tractor. It's a bit condescending to question whether they know this or not, as I think it's quite reasonable and expected that most people don't know this.
Not only that, but it works without Javascript on the desktop.
I don't like Elon much (I think he's an ass to his employees), but he still sent engineers for free to Thailand and is donating materials that are probably not very cheap (rocket parts for the mini-sub thing). At least he's trying to help!
> They wont even allow you to sign up with a credit card.

This has not been true for years now. I have a Planet Fitness account happily billed to my credit card right now. I actually go 2 times a week, though, and the one time that I did have to cancel it, the process was painless and quick.
5 rescue pods already being flown out by SpaceX: http://www.times-standard.com/general-news/20180706/wing-inf...
The F-35 is a weapons system designed to continue the US's ability to easily win a conventional war against a high 2nd tier state power in their own territory. What this might look like is the total rout in 1991 of Iraq, which had the fifth largest army in the world, and advanced surface-to-air defenses, defeated in large part by stealth technology. This fighter is basically stating to these threats: you are not going to be able to defeat or stalemate us at our own game.

I know this isn't a popular sentiment around here but consider the difference in outcome between the 1990 invasion of Kuwait vs the 2013 invasion of Crimea: only in the one where we had absolute military superiority did the US - or "the UN" if you prefer - actually get a say in how it turned out.

Who does this entail today? The big two are clearly North Korea and Iran. Stretching it, I'd add Taiwan, Ukraine and the Eastern bloc, India on the China border, Philippines, and Venezuela becoming some type of Cuba situation. Then there are proxy wars between major powers like Syria, which will likely continue to occur in the middle east and Africa for several decades. Even if we don't enter these fights, we'll be able to give our allies this plane. (Or maybe they'll turn down the most advanced plane ever built because the pilot helmet has issues in high humidity situations /sarc.)

This isn't going to neutralize the other two main powers, it will continue to be an imperfect - maybe even useless - weapon against their anti-ship and surface-to-air capabilities. It can't defeat the 3rd world and it can't defeat a superpower. The question is: is the price worth what it can do (which is defeat 2nd tier powers / proxy adversaries for the next ~25 years)? Or is there something which can do that better?
OAuth 1.0a includes authentication and authorization. OAuth 2.0 is designed for authorization only and could be vulnerable to account takeover/impersonation attacks. MasterCard uses OAuth 1.0a instead of 2.0

https://developer.mastercard.com/blog/why-mastercard-doesnt-...
This is the best map I could find (linked off wikipedia):

https://ichef.bbci.co.uk/news/624/cpsprodpb/146FC/production...

I recall seeing one of a vertical cross section so you can see where the kids would need to go into the "submarine", but I can't find it again nor do I know how accurate that map is.

In any case, the above map has a few cutaways showing you the cross section size of the tunnel to human scale.
Uber and Lyft are forcing Southern California parking companies to adapt or die
Pretty cool, I love it!
Why do websites do this?
It is certainly possible to meet all of one's nutritional requirements on 1 USD per day of food, especially if you have a chicken to provide eggs.

If working 48 hour weeks, 1 USD per hour is $208 per month, which is a modestly good wage in some places. Not really the minimum, although probably so for a very dirty and unpleasant job in a recycling factory.
This is really cool, haven't thought about it before. Do you work for the same company or do you find a new job every year?
> “Unless your lot is right next door to the Staples Center, you have to find out-of-the-box ways to generate revenue.”

Pretty sure the end game here is selling the parking lots to developers, or becoming developers of housing and retail spaces.
> I don't see how that is any better than them going directly.

It means they don't need to keep themselves oriented in an underwater 3D maze while operating unfamiliar breathing equipment.
High quality GPU font rendering is possible now.

http://sluglibrary.com/
> Only the “Enterprise” version cost money.

Which is what we are comparing here. Enterprise with enterprise. Features equivalency.
Yes there are certainly situations where the back button becomes nonsensical. I'm talking more about things like a 30-image slideshow generating a trail of 30 URLs in the history, or (mainly) outright "dark pattern" sites that purposefully make it impossible to leave.
I don't but I'd still like to learn a thing or two from their creators, they obviously knew how to get stuff done that lasts. ;)
> match them with observed patern vs gain

Can you elaborate on this?
The number of supposedly minimalist websites that still use 3rd party trackers is surprising to me.

Even http://motherfuckingwebsite.com/ loads Google Analytics. It's like, I get it. Responsible tracking is often useful. But so is NPM.

If the entire point of your website is to satirically get across that overengineering creates its own problems, if the whole point is that content doesn't strictly speaking need the other stuff we attach to it, that it literally just needs a text editor and an ftp server, that everything we do has tradeoffs and that the default state of the web is performant and responsive and readable -

then maybe that's the one scenario where it might be good to skip including analytics?
> Maybe we really don't need social security

I think the libertarian idea is that we really don't need social security through threat of violence. There's a notion of the role of "private" charity. Libertarians aren't necessarily selfish or unempathetic.

Contributing to something for the common benefit can also be borderline-coerced through social pressure. This is explored somewhat in P K Dick's short story "Foster, You're Dead!" (one of the ones adapted into something rather different in the Electric Dreams TV Series)

http://www.sffaudio.com/podcasts/FosterYoureDeadByPhilipK.Di...

Although I found the story to somewhat muddy the waters by the world having both individual/private bomb shelters and a pay-per-use public one, as well as having a subscription-based communal shelter in the school. The town's defense was community paid but optional (through social pressure).

Of course that's fiction, and we're all aware of real life examples of "tragedy of the commons", but human nature isn't entirely one-sided, either. Aren't there examples of "pay what you want" or "pay what you think is fair" schemes that work?
I was looking into SAML a while back for a project (preexisting compatibility) and the lack of functional open source IdP's is depressing.

I tried Gluu and it's a RAM hog for what it does (IMO). I took a look at the developer docs and it seems all but impossible to override the password hashing method with your own (query passwords from your own database instead of LDAP hashed) was one use case I was looking into)

Even storing my custom hashes in LDAP would have been acceptable.
Sounds like you've got a fair bit of experience limiting your own career.
What does the Enterprise version give you that makes it closer to being equivalent to AWS’s secrets manager?
Would you not want to ban slavery? Do you want to keep these scientifically created children in their chains as the OP suggested they were in? You monster!
Windows also lost the ability to have multiple UI styles after Windows XP -> Vista, and has yet to recover it as far as I know. Microsoft also never officially exposed the API so you had to use performance-degrading hacks like WindowBlinds.

In my experience as a Mac + iOS user and developer for the past 8 years, and for the rest of my life before that on Microsoft platforms, Apple's record has been much better compared to Microsoft re: abandoning APIs or pulling the rug out from under devs.

Take NSDocument for example. It has been around for almost 20 years. All you usually needed to do was inherit from it and adopt its interface and your app would often get new features for free with each release of macOS, like autosaving and version histories.

The foundations for multiple UI appearances have been there since macOS 10.10 Yosemite, 4 years ago. They were hard not to notice.

As a user and developer I'm glad they took the time to work out a sensible implementation that is very easy to adopt now and makes good sense for the future. It definitely seems to be in a better spot than Windows' support for multiple appearances currently, if it has any.

If you see the WWDC sessions on Dark Mode, you might come to appreciate the thought and effort they've put into it:

[0] Introducing Dark Mode: https://developer.apple.com/videos/play/wwdc2018/210/

[1] Advanced Dark Mode: https://developer.apple.com/videos/play/wwdc2018/218/
Or just get married in a state with good marriage laws. E.g. if you live in NYC, get your marriage certificate from CT instead.
because the programmer has a real choice to choose to make less money, and not work as much, at a different job.

The person who's base sallary is $25,000 has no choice to work a different job for less money, esp when every job is making the same demands (you could be 100% certan every service job would be)
What does this offer beyond what LXD currently provides?
I wish I could upvote this a million times.

Your first point is 100% spot on.

Your second point deserves a caveat: CS does mean something at colleges/universities. they almost all follow the ACM model curriculum:

- CS I -> CS II -> Data Structures

- Discrete Math and Calculus I

- A smattering of available electives from a few fairly uniform buckets (SE,DB,OOP; OS,PL; ML/AI; theory,algorithms).

Contents of courses change (true in Math also! Biz Calc vs. Eng Calc vs. Honors/Advanced Calc). But overall shape stays the same. Can't guarantee outcomes, but can guarantee intent.

Unlike colleges/universities, at the national level, CCs have a serious cruft issue in CS/IT. It's totally impossible to tell what someone might know from the name of the degree program alone. Not even overall shape of curriculum is obvious.

IMO there's a simple solution: CCs nation-wide should pare down everything into a few specific named degrees:

1. Associates in CS Foundations: basically ACM without electives. Designed for transfer to a BA/BS.

2. Associates in Software Development: the non-math portion of ACM + some pragmatic courses (e.g., databases and web dev). Can have various version of this marketed as "AS in SD with Emphasis in ___" where ___ is chosen according to local/regional labor market. E.g., most bootcamps are somewhat like "AS in SD with an Emphasis in Web Development using <stack here>".

3. Associates in Information Technologies: catch-all for the stuff that doesn't even fulfill the non-math, non-elective portion of the ACM model. So "VBA scripting", "Networking aka CISCO certs", "Database Administrator aka Oracle&MS certs", "Applications aka MS Office+Web publishing", etc. degrees currently offered by CCs. Again, various versions can be marketed as "AS in Information Technologies with Emphasis in ___"

These issues might not be recognizable to folks in states like California with amazing CC systems, but in most of America, just figuring out which of the half dozen similar-sounding "IT/CS" associates degrees you want is a serious problem. And very often the answer is "none" because all gazillion of them fit into bucket #3 and you're really looking for bucket 1 or 2.
> The workers who do get fired due to financial constraints can now get a job elsewhere for more money.

or they drop away from employment entirely.

https://fred.stlouisfed.org/series/EMRATIO
Having them go directly relies on them keeping themselves calm while doing something that makes many adults panic. I'm not expert but I believe one key to successful diving is maintaining your heart rate at a certain pace.

Musk offered to send pumps too IIRC, but I'm not sure they took him up on it.
You're correct. Even though I have a decent third-party modem that I own, it lacks any real configurablity because most of the options get locked away by TWC.
I, for one, hope that a driver's license in not an acceptable ID for voting. It certainly is not sufficient to prove citizenship.

Perhaps you think we control for that as part of voter registration. We do not. I registered by walking into a post office, filling out a form, and handing the clerk some pocket change for a stamp.
I’d rather not give my kids a glass of juice OR soda but to each his/her own.
You can get a degree in it. I've considered applying,(i live in Atlanta) but I have a family to feed and can't just quit my job for a new degree. Also most of the big money is in NYC so you'll likely move...but you'd retire in 10 years because you either made a lot of money, or have a lot of stress.

https://www.scheller.gatech.edu/degree-programs/interdiscipl...
The PDF has a few slogans that you can Google.

Some more links for you:

Buy Facebook propaganda posters:
https://www.wired.com/2016/11/buy-facebook-propaganda-poster... (there are 20ish here)

Google Image Search for Facebook posters: https://www.google.com/search?q=facebook+posters

Look at Facebook's Analog Research Laboratory's Instagram: https://www.instagram.com/analoglab/?hl=en

See Wired article: https://www.wired.com/2012/05/analog-research-lab/

See Little Red Book excerpts: http://www.businessinsider.com/inside-facebooks-little-red-b...

Anything particular you're looking for?
Welding. See: Junkyard Wars.
Trump’s North Korea Policy Just Collapsed
or in my experience...

marketing put some URL on new promotional material without ever bothering to check if it existed or was even available.

a whois on exxonmobilerewardsplus.com doesn't look very reassuring at all.

I think someone scooped them on the domain and now they're stuck with bad promotional material.
> The idea that a legal, eligible-to-vote US citizen is running around living life in 2018 without any form of ID is preposterous

That's possibly true, but also completely irrelevant to what we are discussing, because in most states the voter ID laws only accept a few specific kinds of ID. There are many legal, eligible-to-vote US citizens running around living life in 2018 without any of these specific kinds of ID.
"Dark Side of the Mac" is a blast from the shareware past... http://www.poubelle.com/DarkSide.html
This article talks about "routes" but only shows revenue by individual airlines. For example LAX <=> JFK has tons of different airlines flying between them while Qantas has near monopoly on SYD <=> MEL route (for corp travel, which is a big chunk).

I'd much rather see overall revenues between destinations summed across all flights operating between them.
- Don't buy at the opening bell
- Volume = momentum (apply law of gravity here)
- Algo must reflect the Day Traders "spirit" (profit taking = specific % downward)
- Uniform circular motion is the key
You can say a lot of things about windows but abandoning apis isn't one of them. Windows is the king of backwards compatibility, for better or for worse.
Why not aeroponics?
> they threw it ALL away for Mac OS X

That’s because apps were supposed to migrate to Cocoa rather than sticking with Carbon.

> 14 versions later, the Mac wants to be appearance-agnostic again

Ten versions. NSAppearance is 10.10+.
> Another thing people might wanna try out relating to macOS appearance is going to System Preferences -> Accessibility -> Display, and enabling "Increase contrast".

You can also try increasing the "Display contrast" slider (to around the 3rd notch) while in Mojave Dark Mode, to remove the soft gray from the window chrome and replace it with truer black.

It affects all other colors of course, but it can improve reading/writing for those of us burning the midnight oil.
Divorce is governed by laws of the state you live in if you don't have a prenup...
Do generate more onsite activity. If you leave the site the site doesn't make money off you. It's generally a way to generate mostly fake ad impressions to rip off advertisers.
SeaQuest DSV
The real problem is when one's intent and focus is to create certain consequences (at a macro level)...inevitably it doesn't work (it may still work at a micro level), as evidenced by the analysis of actual consequences you are pointing at. Better to act according to a set of principles, consequences be damned--or blessed as the case may be.

Cf. Taleb's ideas on inductive reasoning/enduring conservative philosophy over deductive reasoning, etc
Ask HN: Does YouTube play what you want to hear?
If you're like me, you frequently plug in your earbuds, pick a song on YouTube and let it run in a tab while you work. I'm curious to hear the opinions and experiences of others who also listen to music regularly via YouTube.

Does it pick the songs you want to hear? How often do you go back and skip a song or jump to a totally different genre? Are there obvious improvements that can be made to enhance your experience?
Actually I forgot about the gp2x and the newer wiz one, never used it but looks snazzy:

https://en.m.wikipedia.org/wiki/GP2X_Wiz
The pods already on their way via SpaceX http://www.times-standard.com/general-news/20180706/wing-inf...
That's a myth, based on a coincidence of the words and the post-hoc fact that people found concrete to be ugly.
https://en.wikipedia.org/wiki/List_of_U.S._communities_where...