skysight-inc/HackerNews huggingface dataset:
Maybe we could give the rendering engines catchy names like Shockwave, Flash, Silverlight, and JavaApplet. :)

You can barely trust a typical Web site to run Javascript in your browser without leaking personal information to God knows who. I'm not going to trust them with a full-blown rendering engine.
Atal Bihari Vajpayee, former PM who led India into the nuclear club, dies at 93
I don't mean to be rude, but not only is 1mg not a 'mid-range' dose, but it's not even enough to get effects from the drug. 100mg is ~average for a small/beginner dose (usually cost $5-10), could that be what your thinking?

Source: My own and my friends' experiences.

Edit: my apologies, I didn't see the /kg part of your equation. After doing the math, yes that seems like a reasonable beginner/small dose.
There's still "number stations" broadcasting over shortwave radio.

If it ain't broke, don't fix it?!
This isn't a misunderstanding, but a deliberate lie by RedCore. RedCore actively and specifically stated they weren't based on Blink (Chrome's rendering engine, derived from WebKit, derived from KHTML).

Here's an image from the announcement:

https://mmbiz.qpic.cn/mmbiz_png/LB4LpUCAfNwtCCCtSYiaL9o2B7wy...
I'm glad to have read your comment. I almost thought of buying the book.

I read "So good they can't ignore you" from the same author and was really underwhelmed by it. It came across as repetitive and formulaic (i.e. have some basic principle, then interview interesting people who employ this principle somehow).
It seems that easier approach would be to compile Go's openpgp library or something higher level like https://github.com/lastochkanetwork/easypgp into wasm.
>From what I understand, a big proponent in the revival (which was centered around the birth of the NES) was that Game Consoles were marketed more as toys than computers, right?

Yes... that's why the NES originally came with a toy robot and was sold as an "entertainment system" rather than a "video game console."
Very cool effect. Not only would it be useful in space applications but it could make better decoy tanks[1] as well :-)

[1] https://en.wikipedia.org/wiki/Dummy_tank
... and they gain deniability if the sources do anything unethical which in turns gives them more leverage over the source.
> it was raised by a competitor, Private Internet Access

Focus on the facts. Not the messenger. Secondly, I admire your love of this discussion [1].

[1] https://news.ycombinator.com/item?id=17497912
What frequency is it safe to consume alcohol at? Last I checked, never, unless of course you want to cite studies funded by the alcohol industry. Your opinion is that MDMA is worse than alcohol. I don't even think it's in the same league. In my opinion and extensive experience talking with addicts, alcohol is by far the most destructive drug, worse than heroin (and other opiates/opioids) and even methamphetamine. It is most destructive to the self, mind and body, and it's certainly most destructive to society. MDMA has a handful of deaths over many decades and billions of doses whereas alcohol kills 2.5 million people worldwide every single year. There is no comparison.
I’m from the south and have people (christian, non-denominational) in my own family with that view.

I’m not talking about some misinterpretation of Catholic views, but a view that actual people hold. No need for the indirection of trying to pin this on a label. That’s another convesation. But you are underestimating the level of sexual repression in the States.
Not gonna reveal as it's got to do with my private life :p
so you comparing long term heavy alcohol use, vs minimal MDMA use during youth.

Not really comparable. Would be comparing someone who has used MDMA 1-2 a week for 20 years against someone who had a couple of beers a week in college then stopped.

Heavy prolonged use / abuse of MDMA is damaging. Same with any drug
OTOH you are forgetting about the CapEx of the batteries, which looks to be in the ballpark of $1M-$10M depending on number of "skates" etc. That's $1M per mile of track (order of magnitude), which is the same as what METRANS estimates is the cost of retrofitting a third rail on existing rail track. As a rule of thumb, retrofits are significantly more expensive per mile, so I'd say odds are better than even the batteries are more expensive than a third rail.

A well-executed new metro line development, like the MetroSur line in Madrid, runs at around $60M per mile total cost including everything, all the construction and the trains and the stations and property rights.

If you want to improve on that by 90%+, you can't afford much more than just the batteries and the "skates" for this Dugout line.
To be fair, what you said is only tangentially related to the posted article anyway. It is about a security audit of the OpenPGPjs library (what bastawhiz commented about), not how ProtonMail implements it (what you commented about).
MIT: 3Q: A bold mission to touch the sun
Agreed with 2. I honestly don't understand why the compiler doesn't do analysis to catch such cases. As someone who doesn't work on these things, perhaps it's too intensive? I've made silly nil pointer mistakes before and wondered why the compiler didn't say 'hey dummy, look what you did here'.
Who, phone companies or cryptocurrency investors?
Am... am I a function? Oh my god
And am sure this will happen. At some point websites will start shipping rendering with webasm. I am it keen on the details but a well done one could use a canvas to do the rendering.

As a anadotal. We can already fo to websites that run vms and emulate old operating systems. I dont this it is far fetched to run a web browser in a web browser.
I always wonder if this "hype->saturation->blow up->recovery and ultimately more stable and serious growth" cycle applies to other industries as well - arguably that's a bit of what happened during the dot-com boom to internet-based businesses, so it doesn't seem totally insane.

On the other hand, there have obviously been plenty of "hype->saturation->blow up->die forever" cycles as well, so maybe it's not a great thing to bet on.

Basically, now I'm wondering which of the two patterns things like cryptocurrencies fall into (I'd also mention real estate, but it seems like it's clear which one it's falling into).

Interesting to note that it seems like most of the actual companies involved in the "blow up" phase don't become part of the "stable and serious growth" phase, so maybe that doesn't bode well for the existing coins.

Side note: This article finally illuminated the origin of the name "Famicom" to me, and I can't believe it took me so long to realize the origin of that name.
Multiplayer WebVR Bowling with A-Frame and PubNub
Joseph Blasi talks about this in his book The Citizen's Share: Putting Ownership Back Into Democracy.
Then it appears the issue is stagnant wages, not inequality in pay. Let's say that all pay of big bosses gets capped at 200k across the nation tomorrow. Does that solve any issues with healthcare, education, etc? It seems as though the assumption is that higher pay for bosses comes solely at the expense of line workers. I don't think cutting pay of one party is going to magically increase pay of another party.
I agree, the feature set seems largely inspired by INI files. It seems in general there is a large demand for a more flexible (and less ugly) version of INI files.
I have an older but perfectly functional scanner that is a PITA to get working on Windows because the company never shipped an official 64 bit driver for it. Instead I have to download the driver for a slightly newer model and hack it slightly (add my scanner to the list of devices it supports) to get my scanner to work on Windows. It's so dumb.

As far as I know there isn't a "Postscript over IP" solution for this like there is for printers. There is no generic universally supported protocol that scanners could support that would future proof them.

SANE is a less than completely user friendly experience to set up too. I've found it to be pretty fiddly, although once you get it working it seems to do ok.
just a fact.
I agree. I see this all the time when otherwise reasonable people spout "oh well, Google/FB/Twitter are private companies so free speech argument does not apply to them and that racists/nazis etc aren't owed anything by social media platforms."
Choosing somethind to dedicate time and effort is consistently one of the hardest decisions one can take. Choosing something (or sometimes someone) can mean you are giving up on an (almost) infinite number of other options.

I encouter this pretty frequently between people getting into serious cientific research.
Of course they're not comparable because MDMA is much, much safer than either alcohol or cigarettes. We're talking millions of deaths a year for alcohol and cigarettes vs. a few isolated deaths with MDMA. Socially, there is no comparison or doubt which of the three is the worst: alcohol by far. Can you even find an instance of domestic abuse or murder facilitated by MDMA? I could find a whole bunch that happened just this past hour.
Twitter company email addresses why it’s #BreakingMyTwitter
To alter the analogy, perhaps these web developers might be implementing said plugin because their manager told them to, and once said plugin took off clients started demanding it.

Most web developers that I know who have this problem fit this description. they don't like doing any of this, but it's what they're told to do. Or alternatively they're barely 'developers' and care about other things instead (many designer-developers, for example).
The problem with wealth inequality is that it's the same distorting forces of a monopoly. A small cadre use their wealth an influence to shape politics to serve their interests. Markets chase after small lucrative pools of customers. (For example, luxury condos get built, but affordable housing does not.) Education gets warped as the wealthy concentrate in small neighborhoods and thus improving those schools, while the rest fall farther and farther behind. The macroeconomy becomes more unstable as it's driven by the fads whims of the few. This instability and political disenfranchisement then leads to political instabilities and eventually sudden political upheavals where entire political, social, and economic systems are overthrown for sake of reform, but at the same time just leads to more extreme instability.

Until ironically, the wealthy simply leave (because who wants to stay in an a dangerous unstable place, when you can afford to leave), and let place that they set on fire burn to the ground, click their tongues and say, "Who knew this would happen?"

To think of it another way, no one puts all bets on a single investment. You diversify. That's what spreading the wealth does. It diversifies opportunity.
If anyone is interested in learning more about this topic, I highly recommend reading The Ultimate History of Video Games . [1]

I picked it up on a whim at a thrift store and found it to be very informative and engaging. You'll also see some familiar names in there as it spends a lot of time talking about Atari.

[1] https://www.amazon.com/Ultimate-History-Video-Games-Pokemon-...
Bombs aren't necessarily made out of metal.
Other poster is correct, sorry if it wasn't clear. Essentially, they were storing passwords either in plaintext or a reversable encryption scheme.
Now, this was a few years ago, so I don't know the current setup, but not so far back that not storing plaintext passwords wasn't common knowledge...
> And this was before pirating.

I'd be careful arguing that this period was pre-piracy, copying floppy disks containing commercial software/games was rampant in this period among many enthusiasts. Software piracy arguably came of age with floppy disks, and there was all sorts of weird and wonderful attempts to combat it.

I still really miss the weird 'papercraft' contraptions that started to appear with many games in the mid to late 80s that had to be used to 'verify' you had a legitimate copy. As a kid I particularly enjoyed the "Grail Diary" that came with your 5 1/4 inch floppies for the Indiana Jones and the Last Crusade adventure game, and required the use of red acetate cardboard glasses (also included!) to reveal hidden messages printed on the page.

> http://nerdlypleasures.blogspot.com/2013/03/exposing-code-wh...

> https://www.wired.com/2009/07/grail-diary/
The validation mechanism is control over the phone number, not knowledge of it.

Verification by knowledge of numbers intended to remain secret (social security, credit card) is also never okay.
Apple’s secret plans to 2025: What comes after the iPhone?
I wonder how many people saying that Jefferson's actions were inexcusable also hold that there is no ethical consumption under capitalism.
Do you seriously think the CIA cared about server costs for something like this?
This is almost certainly motivated by the push to start selling devices in S-mode (aka, Windows Store-only mode). Though generally-speaking, when you have hardware with Store apps that configure them, Windows is supposed to (and generally does from my experience) automatically install the app, rather than have you look for it.

Having apps running in sandboxes where they only have permission to talk to the device they're built to interface with is more secure, and arguably, the best choice for most non-technical users. I'm glad this is the direction they're moving, as long as the ability for those of us who need it to turn such protections off remains.
Yep, that's true. I was missing some finer details. There is stderr, which usually is the same as stdout (terminal), and you can run shells in noninteractive mode (they will detect when they are not connected to a terminal). In this case there is no prompt and no job control.
NYU Makes Tuition Free for All Medical Students
Matlab uses 1-based indexing. I've used it extensively and it was definitely a bad move. One particularly annoying example is splitting an array into blocks, e.g.

for i = 1:numel(s)
foo(s[i])
end

That is fine, but what if you want to process in blocks of N? Now you have to do:

for i = 1:(numel(s)/10)
foo(s[(i-1)*N + (1:N)])
end

Ugh no thanks. This is as simple as it gets too. For more complex array manipulation... enjoy adding and subtracting your 1's. 0-based indexing is just way more natural.
I think it is more that candidates (especially well qualified ones) view the interview process as a two way street. The company is probing you for competence/fit for the position and the candidate is probing the company for things like culture fit.
Are there any phone companies that have decent security practices? As far as I can tell switching is pointless because they're all awful in this regard.
" A feeling of unfairness as business leaders take home the lions share of profits"

The social consequences of unfairness are huge. Once people feel they work in an unfair society they become cynical and lose motivation. I would argue a sense of fairness is the number one ingredient for a successful society.
Attackers can break into legitimate, low security, websites and use them as attack vectors. It's often easier that attacking the target directly and it's been done for decades.

Also, botnets uses legitimate services to rely C&C traffic. Forums, pastebins, github gits, IRC and email gateways, VMs on AWS and other cloud services...
There's not a lot of detail in the article, but reading between the lines it seems like an attacker went to an AT&T retail location and pretended to be the plaintiff in order to re-assign the plaintiff's phone number to a new SIM card.
Yes, I considered mentioning Rust as a more modern example. But even in Rust, ranges such as `0..max+1` are awkward enough that a closed range syntax was added to the language. With a range like `0u8..=255u8` you can also ensure that your induction variable can directly be passed to things expecting a u8 without a cast that might hide an accidental overflow.
Wow. That is the best handwriting I've ever seen. Makes sense if you want people to read what you've written. I was baffled by the fact that my mathematics peers in uni
had sich illegible hand writing, like they were doing it out of spite. I found I was correct more often when I took the time to articulate myself legibly, then again I concede I lost probably letter grade on average from all my exams because I ran out of time so often. Maybe that explains it.
One of my issues with the discussions of reducing wealth inequality is that people talk about the negatives of having billionaires but often propose measures that would negatively affect millionaires. Also, it would be nice to see more discussion about how to improve the wealth building ability of those at the bottom.

Often times the argument starts with something like "rich people have to much money" and then talks about how we should take more money from them. I had a lot of respect for Bernie Sanders because he started with "we should do X good thing for society" and then he proposed a specific tax to pay for that thing. I think that is much better rhetoric than arguing that some people have to much.
Actually, Executive pay is one of the primary drivers of income inequality growth. This is further driven by the shift from cash compensation for executives to cash and stock.
Windows 10 is the "last Windows ever". There's a pretty wide tree of branches under "winmain" that teams contribute to, and at each layer more branches are merged together, until they finally hit winmain, and then weekly they tag (more or less) a build from winmain as the Insider's build for the week.

It's actually a lot more elegant than you'd expect it to be for a project with as many developers as Windows has
The discussion of how to denote the bounds of a sequence may be missing one consideration: Intuition from language. When speaking we articulate a range by stating the first and last permissible value. E.g. "Pick a number between one and ten". My point is understanding the length of the sequence is rarely as important as quickly grasping its bounds.
>was that Game Consoles were marketed more as toys than computers, right?

Well, even if one wanted to, a marketing exec really couldn't advertise Nintendo NES as a "general computer" since it had no keyboard nor ability to connect a disk drive and printer. The "toy" aspect was an intrinsic property of NES (the "E" in Nintendo _E_ntertainment System) rather than a marketing angle. Therefore, its focus on gaming dictated the type of commercials you could run to advertise it.[1]

From what I remember, the Nintendo NES was the first console where the quality of the games closely matched the real arcade versions.[2] Donkey Kong was a prime example. The NES version looked, sounded, and played like the real thing. (This wasn't true arcade games licensed & ported to Commodore 64, Intellivision, Atari, etc.)

The combination of low price point with higher quality games I think were the key factors for its success.

[1] https://www.youtube.com/watch?v=vDFvkWY6tJU

[2] https://www.google.com/search?q=donkey+kong+arcade+original&...
I could reasonably argue that they should not allow any employee to give out my details, such that they can intercept my messages, to anyone. And by allow, I mean even make it possible.
> Performance is orthogonal to this.

That's largely true, but it's often cited as a reason to avoiding malloc/free (however dubious that is).

> To me the less you juggle with pointers and malloc/free the safer your code will be from memory leaks, misuse of unallocated memory, NULL checking issues, and easier to inspect/reason about.

I don't quite agree. I've worked mostly in code bases using the pattern described earlier (an opaque pointer, a $type_create(), and a $type_destroy() function). With that pattern, I find it much easier to be certain by code inspection that a particular object or transformation is valid because as long as the pointer was allocated correctly, the object can only be modified by functions that know the type (aside from memory corruption, but that's always possible). That's usually a small set of functions that know the struct details. This fact is useful both as a library author and as the author of a library consumer. By contrast, if the struct is exposed, it's harder to identify all the places that can modify the structure's details and to be sure that invariants are maintained in all those places.

Besides that, several other failure modes are much less likely with opaque structures, including copying a structure you shouldn't, miscopying a structure that's okay to copy (e.g., off-by-one while copying), or operating on a correctly-sized block of memory that's never been initialized. You can still use unallocated memory, of course, but that's fairly easy to make safer by initializing pointers to NULL. (The analogous option for stack-initialized structs -- initializing them to zero -- is not necessarily any safer than leaving them uninitialized -- particularly if the struct contains file descriptors.)

There are tradeoffs to both approaches. To me, the ability to modify the struct in new versions of the library without breaking the ABI is a pretty major point in favor of using an opaque structure for a library's primary handle. For very simple ancillary structures that are very unlikely to change, and where the convenience of stack allocation is worthwhile, exposing the structure makes a lot of sense.
You're applying the "one-third rule" to pre-tax salary, but it's generally applied to take-home pay.
I think it's representative of a disregard for the workers, rather than the absolute value amount
For that to work,

- the client and compositor need both implement this protocol extension

- the client needs to ask the compositor whether it should provide its window decorations

- the compositor needs to cooperate and tell the client that the decorations are server-side

Is that right?

I'm also puzzled by something else now: in Wayland, any access to absolute screen coordinates is considered a security risk. So how can a client provide windows decorations then? The main functionality there is moving the window around, which means setting a new absolute window position after a user interaction. How is this possible when the position is hidden away?

EDIT: if I had read the compositor source code before posing the question, I'd have known that the client merely provides the window decoration as a visual area, but not its behaviour. The move and resize behaviour itself including user interaction is part of the compositor.
"In corporate religions as in others, the heretic must be cast out not because of the probability that he is wrong but because of the possibility that he is right." +1
Attack vectors for replacing Chrome:

- Hack Google

Attack vectors for replacing OpenPGPjs:

- Hack the servers hosting OpenPGPjs
- Hack the browser to inject or replace content across domains, sandboxes, other security barriers

It's a subtle difference, but delivering applications dynamically via web browsing is much more precarious than natively hosted applications.

Another way to think of it is if your entire Linux OS were actually just web apps with GUIs. Every time you run 'bash', it was actually downloaded from a remote server. And every time you used bash, and it used some plug-in which was hosted on some other site, that plug-in could be compromised, and could be trying to attack your OS, which if successful, would compromise your entire host.

That doesn't happen right now because all the apps sit on your host, aren't constantly re-acquired, aren't constantly subject to potential 3rd party attacks over a wide surface area. Though this does sort-of happen with programming language package managers like npm, pip and so on. But you can pin those versions and hashes if you're paranoid, which I don't think you can do with a browser.