skysight-inc/HackerNews huggingface dataset:
> But truth be told, not having to deal with servers at all is magical. And if your team is used to it, it does cut down on a lot of worry such as patching stuff. Spectre or Meltdown patches? Ha, zero effort for us.

The problem with this (which applies to "cloud" infrastructure) is that, ultimately, it's somebody else's server.

You may not "worry" about something like low-level security patches, but that also means you have no control or even visibility into them. It doesn't mean you're not subject to the consequences.

Of course, there's always something magical about any form of outsourcing when it works realy well. I'm not sure this form has enough of a track record to be blindly trusted, however.
This is so badly written that for a moment it did make me question getting involved. I thought I had all the information I needed to make an informed decision, yet this article brings so much information to the table, I'll need a full day to digest it all.

I do appreciate Mozilla's approach[1] which is to connect you to an MEP straight away.

[1]: https://changecopyright.org/en-US/call-now
The Most Honest Book About Climate Change
It's a good start but:

* It wasnt very visible in the ICT media. Sun did a full steam ahead Java Campaign

* Open source at the time was not seen as trustworthy. I did run Linux at the time. SO did you, probably. Corporations would not touch it with a 10 feet pole. I presume oberon was seen in the same light.
No amount of 'security' will help here. That's because every one including the people don't give a dime about 'security' in India.

In Aadhar enrollment centers, passwords are shared. You might like to introduce an OTP like concept, but phones are shared too. 2FA? nice try, but then people also share answers to security questions. Next what? DNA authentication? Biometrics? guess what none of those are any where near reliable and they are mostly identity related things and not authentication related things.

There is also government policy. Which is lapse. Mostly run by civil servants who understand nothing about technology. IAS is largely a trivia testing exam with focus on things like meeting and group discussion skills. The head of UIDAI recently claimed that data could not have been possible stolen as the data was still in their database :)

This is a phenomenal lapse at every level.

Software is one thing, but if your people have decided to work around it, its basically all over.
The new chat is a huge improvement over the old one in terms of UX, but lack of persistent history is pretty pathetic considering the amount of resources Valve has available compared to a startup like Discord.
There is a very comprehensive overview of math support in the different flavors of Markdown here: https://github.com/cben/mathdown/wiki/math-in-markdown
I can't believe they used a picture of a Vietnamese tunnel
> Quick quiz: if git tag -l is shorthand for git tag --list, then what does git branch -l do? If you thought, “surely it doesn’t list all branches”, then congratulations: you’re a veteran Git user!

Ha someone should make a logical git CLI.
Interesting to see, how the usually data driven crowd on this site largely dismisses a data point and the usual talking points are reversed:

40h work-weeks that pay great -> Must be boring.

Economics study is done by economists -> Probably skewed.

How dare these people
* equating carreer value with expected profits
* using a weighted average to come up with a number
* expect candidates to pass hard stats tests before constructing insurance products

Programming in JS web frameworks is clearly superior to any work done using Excel and be it supplying the nation with health coverage. /s
App Engine (standard)?
It will be in the next stable! You can install it from Testing or Sid.
That's essentially what I meant. Thanks.

Quantized light still is like "wet water", but at least it sounds less like some obscure/magical light from the magical world of quanta.
People don't hear their microphone, so they won't notice wrong settings. Telling them is the only choice you have. If you think "command" is too strong of a word, use "urge".
Yes. You can if they come to your server. And then they are not exactly strangers anymore. Nobody cares about ingame voice as those are usually PTT per default.
I didn't down vote you or censure you, and I'm not trying to score points with this post. I suspect our fellow commenters are reacting negatively to what is perceived as pedantry. Every post here is implicitly representing the opinions and perceptions of the poster. My post was based on my immersion in British and European political culture and meida, and the opinions I read and hear through many different channels - newspaper and web news articles and opinion pieces, TV news and interviews, radio, etc.

We are having a conversation, not posting peer reviewed fact checked academic papers. If you doubt or disagree with a post then it's much more effective and useful to others to provide reasons for your disagreement or counter-arguments and evidence. Again, I'm not trying to be argumentative, this thread is off the home screen and effectively dead. We're just communicating with each other at this point, so I'm just trying to explain how the commenting culture works, as I understand it. Best regards.
Works for me, don't know if my savior is uBlock Origin, uMatrix, or I Don't Care About Cookies...

https://github.com/gorhill/uBlock

https://github.com/gorhill/uMatrix

https://www.i-dont-care-about-cookies.eu/
This is just AWS, GCP, and Azure — it would be nice to see Zeit and Cloudflare Workers in the comparison as well. (Any other serverless providers of note?)
> IMHO there are now a few languages that are becoming proper full stack languages in the sense that they scale from embedded all the way to browser development.

I think you're being a bit optimistic here: traditionally, the only language that has been able to do this is C++, and Rust is displacing it simply because Rust really tries to target C++ developers and their pains. But other than that I don't see much else development here. Swift has promise, but unfortunately nobody's really writing much framework or foundational code with it; at least not yet.
By no means do you need DPDK to basically eliminate the latency difference - I just wanted to point out how low latency can go in general.

A vm using SR-IOV with ixgbevf on good ol' Intel 82599 from 7 years ago will not have a latency difference noticeable to the overwhelming majority of use cases vs. bare metal.
Right, I do know that (The Capability(tm)!) and for some reason I just mentally exclude facial recognition from the term "biometrics". OP specifically said "at least fingerprints" - it's good to have a reminder that facial biometrics still count as biometrics too, and they're lower on the hierarchy than fingerprints.
> The (I think typical) view is that the UN decided to split Israel into two states, one for Jews and one for Palestinians. However, the Arab countries urged the Palestinians to leave Israel, as they were preparing to attack Israel.

Haha. No. The UN decided to split Palestine in two states, giving half of it to the Jews. Of course the Jews had everything to gain from this partition and the Palestinians everything to lose, since they were the sole owners of the place. Of course they rejected the partition and there was a war, but the Palestinians have been actively expelled by the Israeli army. In fact, 200 thousand of them had already fled their villages before Israel's declaration of independence, to escape from violence- episodes like that of Deir Yassin, where a Jewish commando massacred the inhabitants of a Palestinian village- women and children included-, throwing grenades inside the houses. It was a proper ethnic cleansing operation.

> Israel didn't really do anything wrong

No, as far as ethnic cleansing goes, Israel didn't do anything wrong.

> At the end of the day, the right of return is something that simply can't be granted, not if Israel wants to remain a Jewish country

I agree with this. However, I also think that the right of return is mostly aspirational, and given good will on Israel's part, the issue could be just ignored long enough until it's not an issue anymore. By good will on Israel's part, I mean: establish a border once and for all (on the green line), abandon all settlements beyond that border, either renounce completely to Jerusalem east or share the undivided capital with a Palestinian state, completely remove the blockade of Gaza (and create a wide corridor between Gaza and the West Bank). Stop opposing the creation of a Palestinian state, and contribute to it with aids and reparations (that would make up for the right of return).

You'll say: this is a lot to ask from Israel. And it is, because Israel is currently enjoying great profits from its illegal and immoral actions, and there will be no end to the conflict until it decides to abide to international law and moral standards.
Agreed. We're not stupid, we know there has to be a rake - so just tell us what it is.
Stop Writing JavaScript Compilers. Make Macros Instead (2014)
> And the database has not been compromised.

The database is not known to be compromised.
May I ask who will lose his professional credentials, when your AI does not follow established practises and insurance coverage goes belly-up?
> Can't the Aadhar DB (post enrollment) be scanned for all enrolled iris data with poor quality iris data and they be monitored and deleted ?

Not so easy. Every effort that's made to reduce fraud (false positives), might affect genuine beneficiaries who depend on the system for food, healthcare and education - by increasing exclusion (false negatives). A probabilistic auth platform with a really wide scope is a recipe for failure.
> You also need tools to produce text and data sections that can be loaded at a specific address.

Though, of course, most compilers provide extensions that make this task generally possible within C (using the loose definition of "I don't need any separate files or inline assembly, just attributes and flags).
> I expected better discussion on HN (apart from sensationalist articles)

There are three people across three different parts of the world who corroborate the report - CTO of a global technology group, a security based analyst and a professor of Computer Science. I wonder how this is "sensationalist".

> "Having looked at the patch code and the report presented by Anand, I feel pretty comfortable saying that the report is correct, and it could allow someone to circumvent security measures in the Aadhaar software, and create new entries. This is pretty feasible, and looks like something that would be possible to engineer," Wallach said.
Debt is worse now than in 2008. We haven't / didn't escape anything, just passed it on to future generation(s).

Future generations will be paying the bill for mistakes of their parents.
I think systems programming should be split in two, honestly.

You have the kernel-level systems programming where you need to be near the bare metal, where you write kernels or program microcontrollers with less RAM than a x86 CPU has L1 cache, where taking a microsecond longer can mean the overall system crashing (or even costing a human life).

And you have system-level systems programming where you write services and supportive infrastructure to enable user programs, where garbage collection and non-realtime behaviour is acceptable, where you can skip a microsecond and it'll be alright.
Inside the Magecart Breach of British Airways
One of the reasons why India needs some kind of people authentication is rampant corruption! Corruption at a scale that most of people in Europe or US cant even imagine. Add to it the culture which celebrates corruption and eulogizes people who find loopholes in system. As soon as a policy or rule is implement, someone gets to work to find a loophole and profit. Schemes and subsidies for poor get siphoned by rich and powerful by creating fake people, less than 2% of citizen's pay taxes by just disappearing in records, billions of dollars of unnamed properties exist because owners are fake people on record, someone else appears for exam on a student.

While I still dislike citizen's database, I can also see why some kind of person authenticator is needed for country like India. I sat through UIDAI architects presentations, and from what I could tell that substantial thought was given to design. So while I maintain skepticism for such database, I also believe India needs some way authenticate various transactions (monetary or otherwise). SSN is a joke, at least Aadhaar was given substantial thought.
Thanks for reading, and thanks for the feedback! That's a good tip on the passive/active voice. I did actually think about standardising that but let it (unfortunately) slide as I thought I would go from my initial thinking to more instructional but that's probably not as effective and engaging to the reader the whole way through. Will remember that tip for my next post! Thanks again!
https://en.wikipedia.org/wiki/Epigenetics

https://en.wikipedia.org/wiki/Memetics
It's simple:

Bugs in application code causes errors in that application.

Bugs in system code causes errors in an user application.

If bugs in your code causes problems only to your code - it's single application. If bugs in your code causes problems in other programs - it's system of programs.
The Effectiveness of Publicly Shaming Bad Security
Understanding Image Virality [pdf]
This can't be upvoted enough. The organization which outsources critical authentication to CIA-MI6 linked companies, and yet find the courage to indulge in the Orwellian-doublespeak of 'nationalism' is something that needs grave attention.
Probably the biggest jitter comed from your VPS getting preempted by other customers due to oversubscribing (cpu or network), not the relatively benign and fixed amount of packet processing overhead from virtualization itself.
> Pointers are required mainly so you can do pointer swaps and be sure there is no unnecessary allocation

Many languages are getting around this issue by hiding pointers in their type system, performing copy-on-write, and taking the decision of whether allocations are performed on the stack or heap out of the hands of the programmer.
Thank-you for your kind words about the post. That was what I was trying to do with it - to break down some of the nebulous fear that beginners have with assembly. Cheers!
Red Badger | Full Stack Software Engineer | London | PERM | ONSITE |
www.red-badger.com

Friendly independent consultancy based in Old Street, delivering complex enterprise web applications for big brands such as the Financial Times, Tesco, the BBC and many others. We also work on a number of social value projects including the Pride in London App.

TDD, pair programming, code reviews are part of our agile delivery process. We work in small X Functional teams of Delivery Leads, UX&D, Engineers and test.

You can find out more here: https://red-badger.com/jobs/software-engineer-consultant-nod...
or email laura.hasting@red-badger.com
You picked one of the countries with the most evil government (historically, I make no claim either way about the current situation) as an example. Of course it's going to look bad in that case.
That chart is quite strange. Why would JS start take 500ms (on my system it's 80ms) and be slower to start with more dependencies?

Maybe it's because the bulk of the time is just copying the deployment artifact to the local disk. In that case the overriding factor is the size of the package.
So long as the rest of the world keeps buying US debt they will keep trucking on. The US is too big to fail: nobody can afford that house of cards to implode.
In the past news organisations used to pay for those people to find out what's happening in Ruralton, TN, and let the people know.

People now aren't willing to pay for those experts, so the only ones that cover the news are those with other agenda
> And since I sense the question coming, Android, OS X/iOS, ChromeOS might use an UNIXy kernel, but its exposure surface to applications is so small, that it can be easily exchange for something else, it is just a matter of cost.

Android, macOS, and iOS expose almost the full set of POSIX to the programmer. Now, you may argue that it goes mostly unused, but it is there, and there are people using it.
I've bought my kids (4 and 6):

1. Learning Resources Code & Go Robot Mouse Activity Set
2. The Official ScratchJr Book: Help Your Kids Learn to Code

They really like playing that. They are at the age that nothing lasts long though. Both are lot of fun and laugh - especially when mouse gets out of board and can't find the cheese (dummy mouse! hahaha!). And in application you can do crazy stuff, including your kids' funny voices etc.

Play, have fun (and the kids will not be aware of learning of logical thinking).

[1] https://www.amazon.co.uk/gp/product/B01A5YMCH4/ref=oh_aui_de...

[2] https://www.amazon.co.uk/gp/product/1593276710/ref=oh_aui_de...
The lines of what is a mental illness are blurry. That doesn't mean we should stop paying attention when the "blurry blob" moves left or right on the chart.
Handling startup stress
Worksnaps mobile version
6 ways to conduct effective one-on-ones
1. There's a configuration file, and it's incredibly well-documented. You can simply reference the default config, read the manpages, or read the available documentation for help. See:

https://sw.kovidgoyal.net/kitty

2. There is a resize option for text. Hell, in my experience, Kitty seems to have the most powerful font management of any terminal. See:

https://sw.kovidgoyal.net/kitty/conf.html#conf-kitty-fonts

3. That's because the machine you're SSHing into doesn't have Kitty's terminfo files. That's easily fixed by running "kitty +kitten ssh myserver" where "myserver" is the IP/domain of your server. See:

https://sw.kovidgoyal.net/kitty/faq.html#i-get-errors-about-...
A compromise in this case being that illegitimate entries are being added when they should not be able to. You don’t need write to consider this specific case broken.
I don't think memetics is applicable in this case since the idea assumed he was born and raised back when his grandparents were. (Same sperm and egg, different culture.) Maybe you're right about epigenetics though, I don't know enough about that.
I have yet to experiment with it but I think the best use-case is cron-type functions. Imagine all the little robots you could build to automate your business. And you get monitoring unlike cron.
> the only language that has been able to do this is C++

I'd say Object Pascal is able do it too, though it's certainly true that Pascal is not as widely used as C++. Free Pascal and Delphi are the two major Pascal implementations today:

https://www.freepascal.org/

https://www.embarcadero.com/products/delphi
recently i lost my developer job and took a temp position in a warehouse after difficulty finding a new dev position. i think it is easy to romanticize manual labor when you're sitting at a desk. when you actually have to do it to survive, there really is nothing romantic about it. not fun!
Apparently, the bill passed in the Indian Parliament does not limit the right of the state apparatus to 'bio-authenticate' you. A scientist at CSIR apparently blurted out earlier that DNA authentication was under consideration. The amount of money spent on this BS project is absurd.
Sploitus.com – Exploits and Tools Search Engine
What's wrong with simply stating that there are special transistors now that are capable of being switched with a single photon. But no, there are quantum transistors now which can be triggered by quantum light.

It's appalling to get such a read from ieee. Unbelievable even. But, hey, it's ieee spectrum, so who cares anyway besides people with money ready to burn.
In Overwatch, we can set the input/output volume but no threshold and my mic doesn't have that option.

That's why I also use PTT.
I can't find any packages that have an estimate. Even some of the more popular NPM stuff:

https://tidelift.com/lifter/search/npm/left-pad
The social hierarchy based on alpha/beta individuals has never been observed in many species, including humans.
You didn't read my comment well. The security in my scenario doesn't rely on the laptop not being stolen. There's a hardware key. If it gets stolen, it gets blacklisted.
SmartKarma – Singapore| Full-Time Contract – React Native Developer
SmartKarma is platform for sharing equity research with Buy-Side investors.

SmartKarma is building a platform for actionable research.

Qualifications

- Clear, precise communication with multi-cultural team - Adept to professional software engineering - Test driven - Agile

Technologies we use: Node / React / SCSS / HTML5 / Ember

These are good to have but not an impediment to a capable candidate.

To apply: mg at smartkarma.com or apply here:
https://jobs.smartrecruiters.com/Smartkarma/743999676240311-mobile-frontend-engineer
I don't see why. You don't show either passport to anyone when leaving the country. Instead they take your photo and compare it to the ones they have on file, which for a dual nationality citizen will include at least your passport photo.

I'm more surprised they don't want to physically stamp your passport. Even though they already have a record of you entering and exiting the country, they've always liked to have physical passport stamps. And losing those makes a material difference in the case where another country cares where you've been.
The weight is a very difficult problem in my opinion.
Power Ledger – The world's first peer-to-peer electricity network
Actually my point was that the US gets changes after they are tested elsewhere. You didn’t address that.

So by omission you’re saying that the US won’t be getting these encryption laws. And that Australian style gun laws won’t arrive in the US either.

Ok then.
Here is one example with an estimate:
https://tidelift.com/lifter/search/npm/eslint
Idle Thoughts About Pollard Rho
How to install VestaCP on Debian 9?
I don't actually have a child: I was merely basing this observation off watching my sister go through Common Core and compare to my (pre-Common Core) experience.

> If that's the case, then it sounds like your child needs to be in a higher level math course.

This isn't necessarily possible at school, and besides, even if it was, this may not be the best idea (for developmental, social, etc. reasons). Outside of school, sure–she is doing things to get ahead and learn more.

> If they're already at the top, then I don't think having to explain in detail the "why" behind concepts will be a net negative for your child.

This is exactly the group I think it's a net negative for: you're forcing them to put what they feel is "obvious" into words. This is fine once or twice, or when teaching others, but on assignments you have to do it repeatedly, and at some point you'll just give up and start writing things that are just different ways to word "because that's the next thing we have to do" to fill space.

> Just curious, have you read all the way through the Common Core math standards? Most of the people I know in technical and engineering professions who have read completely through it (and not just a single section or grade level), come out with a lot of respect for the standards.

No, I haven't, but I'm sure they're not bad. It's just that the way they ended up being implemented hasn't really impressed me, since it seems like the goals they've laid out aren't being achieved.
There is thanks https://github.com/feross/thanks - with an open issue to read the URL from package.json https://github.com/feross/thanks/issues/2
Introducing the Qubes U2F Proxy
I've heard this line of reasoning before, and it glosses over a lot of the traditional downsides of this lifestyle - things like extremely heavy drinking and public or domestic violence. You got a "tighter" community at the expense of extreme conformism socially enforced.
PostgreSQL Configuration Cheat Sheet