skysight-inc/HackerNews huggingface dataset:
I don't disagree, and thank you for the pointers. What I was talking about is API design, and I don't think you are contradicting with what I was saying.

As to C being more bug prone, for my own code I believe the biggest improvement to correctness would come from fat pointers with array size information, enabling bounds checking. That would help to spot errors in little-used code. On the other hand, fat pointers and other sophisticated methods can get in the way of a clean normalized data organization. A lot more flexibility with respect to data and code organization is possible in plain C, which is a great enabler of software in the first place. In the end, if the code is simpler and shorter and has more deterministic performance, but each line of code is more bug prone, that can still be a worthwhile tradeoff.

By the way, I don't view myself as a very careful C programmer and I don't have the patience to check my code against all kinds of UB and such. I've never done fuzzing (I might try it). But for example valgrind has revealed only few problems once my code was working, in the past. The main problem in my eyes is when coding C in an object-oriented style with endless pointers and lifetime issues. What I do is I try to avoid tree structures (including XML) since I feel it's a lot of peeking and poking and traversing with little reward. Instead, I typically use global data, flat arrays, and integer indices, and as a result the code usually becomes very straightforward.

By the way, for a project the size of an XML parser I wouldn't feel shame for such a tiny list of CVEs :-).
Yes, with the wealth (and power) gap increasing, if you want your descendants to have a chance to move up class-wise, you have to try and be in school districts where they will make friends who are high achieving (usually from high achieving parents), so then they can get into high achieving colleges where they can create a network of high achieving people to rely on in their future careers and lives, and maybe even marry one of those. It all compounds, and the faster it compounds, the faster the gap widens and the harder it is to catch up. Until something causes the reset button (revolution) to be hit.
I’m thinking about the non cleared data center folk, the sys admins and developers who use the servers for their applications.

How do a bunch of Supermicro servers vanish wintout anyone noticing? I’d expect quite a few people would be involved that do not have any clearances. Apple is known for their secrecy but a few other companies named are not.
- Periodically delete postgres table records older than (x) days and also, move the records older than (y) days to cold storage.

- Script/Bot, to download my favourite songs searching from multiple sources given its name as input.
Well, this was anticlimactic. Instead of a bezel-free pixelbook, we got a pointless notch-full phone.
Yeah, my ear area gets a bit sweaty if I wear it too long. How is the charging for the XM3? It takes a "while" to go to 100% full for my XM2. I hear that the XM3 blocks voice a bit better too?
What discipline isn't questionable?
I just sent you an email to schedule a call
Same, I like the USB-C port since my phone is the same. I hear the new QN1 chip is pretty good on the XM3.
Try what? Updating the firmware? I do it every time a new firmware version is released.
His name is Scott Blew, not Steve. Regardless, that's such a formidable observation, and such a coincidence as well.
It is used in perfume, reason enough for marketers to avoid any "whale poop" descriptions.
You're right, they should concatenate their whole names instead.
If you have done it, could share how? Were you 80% coding 20% managing?
While antibiotics might not be the major problem, I'll leave this here:

https://www.youtube.com/watch?v=lZCADC65Q4Q
Presumably this somehow accesses Github and talks to it, shouldn't that data be mentioned in your Privacy Policy?
I'm extremely sensitive to noise, so I've tried my fair share of solutions as well.

In terms of absolutely blocking sound, the best I've found thus far are a pair of Etymotic in-ear headphones. I don't recall the model I have. They aren't noise cancelling; they're basically just earplug headphones. But they are really effectively. Just be sure you use them correctly. It's easy to think you just plop them in your ear like normal earbuds. You have to insert them like ear plugs. When done correctly they create a seal and the noise blocking is incredible, even compared to the big PPE ear equipment I have. Plus they look just like any other earbuds to other people, so you don't look like a dork :P

Besides those, the Bose noise cancelling headphones are "okay". As others have mentioned, they're really poor at blocking nearby voices. If you're going to be listening to music, that's not much of an issue. But I tend to listen to podcasts, videos, etc, so there's nothing else extra to drown out what the headphones miss. And you're paying quite a premium for headphones that, in terms of build quality, sound quality, and features, are worth maybe 1/3 of the MSRP. Not much you can do about that; Bose holds patents on the best noise cancelling.

On a slight tangent. My sensitivities to noise have led me to some ... interesting solutions over the years living in noisy apartments. Hearing people's TVs, talking, etc through walls really bothers me. The solution I came up with was to pump white noise through a subwoofer, turned down really low. It creates a very subtle, low frequency rumble. It's just loud enough to drown out the stuff that bleeds through walls, but quiet enough that you forget it's there. By using just the subwoofer you target the majority of frequencies that can make it through walls, without adding the annoying "hiss" of regular white noise machines.

For me that was really effective for dealing with the day-to-day noise of apartments.
There’s a timing problem with this approach, when you get the money vs when the investor expects a return. The investor usually wants clear indications of what you’re doing with the cash to increase their investment. Holding it generally doesn’t sit well with investors as they could have given it to someone who would be doing things with it.
>“This is where the web is going,” commented Chris Coyier, CSS expert

are you kidding me?
Google specifically? Or are you thinking Samsung? (they of course have no notch and still have a headphone jack)
No clue if it's still active but I think that Last.fm can automate that.

http://scrobblealong.com
Cool fact about chartreuse: it's a color named for a liqueur.
>One could design a microcontroller, for example, that was disguised as an 0805 capacitor and functioned like an 0805 capacitor, but also had other functionality.

Don't you think it's going to be suspicious when you see a capacitor with 6 pins? Don't you think anyone that inspects the motherboard is going to wonder why a capacitor has 4 additional lines going to a critical flash chip? Seriously.... The entire article here is around replacing entire components. Adding new traces to a finished PCB is impossible without using wire that will be suspicious to anyone doing a visual inspection. Most sabotage will probably just program the flash chips with malicious software without changing the hardware or swap big components that use standardised footprints like QFN with a nearly identical part. Adding a small capacitor sized micro controller where it doesn't belong and on top of that connect it to existing chips in comparison is extremely hard. At that point you might as well design the backdoor into the PCB itself and embed it between the individual layers of the PCB.
In some parts of SF, you don't even have the option of sending your kids to Public school, because they won't let anyone else in: all seats taken. They have a pretty massive shortage of teachers because no one can afford to live there. At that point, your only choice is private school or move.
Sailthru | Senior UI Engineer w/ full-stack experience highly preferred | New York City (NYC) | Full-time, Onsite

Sailthru is a technology company focused on optimizing marketing messaging across all channels. We hate spam and strive to help marketers deliver the right message to the right customer at the right time. Our customers are among the largest organizations worldwide, and they use our platform to provide a connected customer experience across email, web and mobile.

We're looking for an experienced product engineer with a deep interest in all points of the product lifecycle to help architect, build, and maintain several of our key products. As part of a cross-functional team, you'll partner with designers to make a powerful product simple to use and an experience our clients love. We're currently making a big push to scale our product and tech stack. A few things we're doing: building modern component-based UIs (React, Redux, CSS Modules, Styled Components, Storybook), leveraging ML for intelligent features, and investing in our next-gen computing infrastructure and data pipelines (Kubernetes/Event Streaming).

https://boards.greenhouse.io/sailthru/jobs/1332779

Unlimited time off | Catered lunches | Health, Vision and Life Insurance | 401K & more
>"I’m not sure what you mean by “infinite rate”."

I quoted the sentence that claims this guys main discovery was that the process of economic growth does not "explode without limit".
A notch!? Why!
I'm using a PCIe x4 card adapter for my NVME drive, runs great.
First, most IT personnel on ships (especially one as ancient as the Bonhomme Richard) do not work on weapon systems. Most of them would not even be able to discuss where on the ship they are intelligently, let alone what they connect to.
The people you talked to simply aren't informed. You even note that you were talking to 19 year old kids, and they're not generally the ones who know what's going on.
> Those services being tied RIGHT INTO the OS is a huge advantage.

Assuming you own an non-Google Android phone, what difference is there? I use Google photos on my Samsung...

On iOS, I will admit there is a difference is not being able set default applications but other than that I don't really see a big difference. Google, of course, works hard to ensure the same experience regardless of device so it's not much of selling point of their own phones.

By comparison, you actually need an iPhone to experience any of Apple's product integration.
Either that or really good palm detection, the iPhone X/Xs have really good detection when I try and reach over to null palm-touches. My Essential PH-1 on the other hand does not, and that makes it really frustrating to use with one hand.
An MP3 “granule” (according to web search) is 576 points long. so L3_imdct_gr, L3_imdct36, and L3_imdct12 are going to be inverse modified discrete cosine transforms operating on 576, 36, and 12 coefficients, respectively.

Modified discrete cosine transform means a DCT type 4 in which adjacent blocks are overlapped. See https://en.wikipedia.org/wiki/Modified_discrete_cosine_trans...
I came here to post this also.

Prior art.
Are there any successful communes like this that are rational and science based? East Wind's focus on the naturalistic fallacy makes it quite unappealing.
> the only alternative to dropping close errors would be panicking, and that would be significantly worse.

There are plenty of cases where you'd prefer an application to crash upon an unhanded write error, rather than silently losing data that could be highly important and irrecoverable.

(Of course, actually handling the errors is preferred above both.)

> Destructors aren't supposed to fail.

But isn't the whole point of this discussion is that the destructor of fs::File (and probably any other buffered IO writer) can and does fail in some cases?
Agreed. This is not Google engineering. This marketing-driven design. Something is off here..
Even during the cold war, Americans did business with Russia. No large computers or munitions, but Americans still ate Russian caviar. There was this call to boycott it at the same time as the Moscow olympics, but I don't think anyone called it "treason". https://www.washingtonpost.com/archive/lifestyle/1980/01/31/...
> In what sense do you disagree?

Not the parent, but it is trivial to write C++ and Rust examples in which destructors of variables with block scope are not called. The std library of both languages do even come with utilities to do this:

C++ structs:

struct Foo {
Foo() { std::cout << "Foo()" << std::endl; }
~Foo() { std::cout << "~Foo()" << std::endl; }
};

{
std::aligned_storage<sizeof(Foo),alignof(Foo)> foo;
new(&foo) Foo;
/* destructor never called even though a Foo
lives in block scope and its storage is
free'd
*/
}

C++ unions:

union Foo {
Foo() { std::cout << "Foo()" << std::endl; }
~Foo() { std::cout << "~Foo()" << std::endl; }
};

{
Foo foo();
/* destructor never called */
}

Rust:

struct Foo;
impl Drop for Foo {
fn drop(&mut self) {
println!("drop!");
}
}

{
let _ = std::mem::ManuallyDrop::<Foo>::new(Foo);
/* destructor never called */
}

etc.

> There are some situations where objects with block scope do not have their destructor called e.g. `_exit()` called, segfault, power cable pulled out. But in that sense nothing is guaranteed.

This is pretty much why it is impossible for a programming language to guarantee that destructors will be called.

Might seem trivial, but even when you have automatic storage, any of the things you mention can happen, such that destructors won't be reached.

In general, C++, Rust, etc. cannot guarantee that destructors will be called, because it is also trivial to make that impossible once you start using the heap (e.g. a `shared_ptr` cycle will never be freed).
Treasure hunters challenge the FBI over a dig for legendary gold
"But the attempt didn’t work, because the Linux team was
careful enough to notice that that this code was in the
CVS repository without having gone through the normal
approval process. Score one for Linux."

Actually, they were just lucky enough that someone wasn't able to break into the main BitKeeper repository. It is highly unlikely that any private organization could withstand a state sponsored intrusion from the likes of the US, Russia, or China. And that's assuming they needed to. They probably already have found bugs that would let them in without going to such lengths. Also take into consideration that just "Linux" by itself is useless, there will be a lot of other 3rd party applications installed on the system with a lot less strict security over their source code.

The particular bug in question doesn't actually provide an exploit, it just sets the current UID to 0. An attacker would still need some other method of executing their own code under that ID which would require the ability to create new processes (e.g. the command line), or a method of altering the code of the current process through some other bug. The fact that an accompanying alteration wasn't found that allowed for that is a good hint that there's a lot more problems.
> I would definitely spot that device if it were on these boards because it was described in detail and there were some pictures of what it supposedly looked like.

In case you missed it, there is an article posted today [0] that has this quote from "Hardware security expert Joe Fitzpatrick", one of the Bloomberg sources, regarding "the supposed spy chip":

> In September when he asked me like, “Okay, hey, we think it looks like a signal amplifier or a coupler. What’s a coupler? What does it look like?” […] I sent him a link to Mouser, a catalog where you can buy a 0.006 x 0.003 inch coupler. Turns out that’s the exact coupler in all the images in the story.

[0]: https://9to5mac.com/2018/10/09/bloomberg/
PRISM was an overt program (to the data stewards, not to the public) for processing FISA warrants and the like.

Other NSA programs that Snowden revealed were covert hacks.
https://en.wikipedia.org/wiki/Global_surveillance_disclosure...
To be fair, I have never seen an external security audit do anything useful.

Either they bend to the folks paying the bills, or they flag a zillion, generally known to engineers, issues.

If you really want to make you security audit useless, hand the auditors C code. They will stare at you as though you just handed them the head of a small child.
See linked article above, you have an adapter that works with your phone, but it might not work with your friend’s phone, or your friends’ adapter/headphones may not work with your phone, and if your adapter breaks and you replace it you’ll need to be careful with finding a compatible replacement. With lightning headphones and adapters they’re all just compatible.

I don’t know anyone with Pixel earbuds, but their reviews online aren’t stellar.
Also the mixing of sports and education seems weird to start with. Are there other countries besides US doing that?
[Podcast] Austen Allred (Lambda School) on long term thinking and self-learning
Wow! This is a top notch phone
You'll see things here that look odd, even antiquated to
modern eyes. Phones with cords, awkward manual valves, computers that barely deserve the name. But all of it is intentional. It's all designed to operate in combat against an enemy who could infiltrate and disrupt all but the most basic computer systems.

Of course, those attitudes have changed through the years and Galactica is something of a relic. A reminder of a time when we were so frightened by the capabilities of our enemies that we literally looked backward for protection. Modern battlestars resemble Galactica only in the most superficial ways...
It actually is a huge risk.

You make the same flawed assumption many people (including the folks over at FB) make, that your email is private and that once it's breached it's game over anyway.

The reason we came across this issue a while ago (see below) is that an elderly family member was forwarding emails when people had invited this person to an event. This family member knows better than to forward emails regarding password resets and account details. They really didn't do anything wrong. They just unbeknownst to them shared full account access to 50 other people.

Nowhere in this email does it say 'dont forward' and the expectation of anyone to click at one of those email links would be to be prompted credentials when they are not currently logged in as that person. Now, no matter on what device you are, it seems you can with one click be granted access to the entire account based on that link alone.

It's not even a one time use token, it's a all free pass.

Social engineering wise it's so simple: "Hey buddy, that party tonight, do you still have the invite email? I forgot and I'm on my way to work now." - done.
Booooo!

Throws tomato
> I'm curious why HN users don't seem to have a problem [...]

I do and always have. I also have a problem with their silence concerning relinquishing control of iCloud DCs there too. I avoid Apple products due to their anti-developer, opaque, and money-above-all approaches.

> it seems to me that standards are different for different companies.

Exactly. And countries. So I try not to draw any reaction equivalence except in personal preference. People's outrage is more a product of who they like most at any given time, often driven by narratives in the press/community. All you can do is be consistent with yourself and don't get too whataboutist when these double standards rear their heads.
That's not correct. https://en.wikipedia.org/wiki/Global_surveillance_disclosure...
Which podcast was it?
I have a 6s+ that I traded the battery and rear camera out at an Apple Store for less than $100 total. My rear camera was very shaky and would never focus on images so they came out blurry. I think it's totally worth a battery replacement and using your hardware as long as you can. My battery life is way better now and I'm back to going days(!) without charging.
You example of people going into bars and not becoming alcoholics isn't applicable because they aren't addicts... There's usually an underlying cause of addiction. But it doesn't have to be boredom like in OP's case. The steps you talk about taking towards abstinence are usually to reinforce different habits (which is done in addition to addressing the underlying cause). I do see the point you're making. I think addiction to your phone is a little unique. The behavior is so reinforced that it becomes second nature. Whereas, for example, picking up drugs is a much more deliberate/infrequent effort relative to pulling your phone out of your pocket. Which is probably why the conditioning of other habits is so important in that case. You have to deliberately rewire those deeply ingrained neural pathways.
AirPods supposedly work pretty well with Android. You don't get the full experience, but they're still quality buds.
I hadn't seen this before, but searching for "Joe Fitzpatrick Jordan Robertson" finds https://appleinsider.com/articles/18/10/08/security-research... which seems to be what you were referring to?
The links that I have tried do not expire. I can't tell you how long they will last.
You can view them just as easily as you would a pdf. Running the code inside them is what takes extra effort. Which isn’t necessary if you just want to understand the processes being applied.
The Chrome extension Dark Reader works very well on Hacker News. It's hit or miss on other sites and can create some disturbing SVGs.
"Extensively" is not 100%
Correct. And since the time between the two phones was so short, there's no way Apple copied Essential here. It's just a case of two companies trying to tackle a new problem and coming up with similar solutions. But it would be fair to say that Apple popularized the notch.
You can export to another platform in circle, square, or widescreen format.

Field of View: 105°
F-stop: f 2.2
Photos: 1642 x 1642 px
Videos: 1216 x 1216 px at 60 fps

source: https://www.spectacles.com/shop/nico
Your statement is equally a "crankery" if you've never had to deal with or experience the healthcare system. Unless you educate yourself on a topic to try to understand what's going on with yourself (unless it's something very simple), then you'll likely have as good of odds deciding if a doctor is good at what they do/figuring something out, as does a "health" startup. The systems of indoctrination are real and human error is a huge problem, likewise, doctors are selected primarily for their memorization skills and not critical thinking. - so if it is something more than simple, - good luck. They will listen to you for symptoms (assuming your self-awareness is adequate to notice everything important and your ability to share those symptoms is adequate) to then match up what might be going on, and then send you for testing, further specialist opinion, or whatever else. Technology will replace most of the processes in health - and that is good. Another example is using AI to analyze x-rays and MRIs for issues. Your family physician will depend on the report to decide if there's anything that needs to be treated - I have had more than one MRI reports where on second look by a different doctor they spot something that the original didn't.
Apple didn't come up with the notch. Essential and Sharp were first:

https://www.phonearena.com/news/history-of-the-notch-and-bez...
There was mention of one being discovered buried inside the FR4 PCB material.
> scary if the military is driven like an MBA only led business with no influence from engineering/security

Having known many people that worked in/around the military and defense industry, this seems like our reality.
That raises an interesting question about just how targeted this kind of attack could be. At manufacture time, do the folks on the assembly line (so to speak) know who a particular board is going to? If not, they would have to add the extra chip to all outgoing boards, which means there should be plenty of them in the wild, no?
A linear resource would require that the resource is explicitly released on all codepaths no?
How did you decide when it was time to stop bootstrapping and raise a round? Was there a magic number traction-wise (total users, MRR, etc) or was it motivated by the desire to staff up a team and execute on your product vision?