skysight-inc/HackerNews huggingface dataset:
I think in this particular case, their policy statement in the sister article from Google blog indicates they couldn't really say that in this case.

> We made Google+ with privacy in mind and therefore keep this API’s log data for only two weeks. That means we cannot confirm which users were impacted by this bug. However, we ran a detailed analysis over the two weeks prior to patching the bug, and from that analysis, the Profiles of up to 500,000 Google+ accounts were potentially affected. Our analysis showed that up to 438 applications may have used this API.

^ the above statement, but couched with this:

> We found no evidence that any developer was aware of this bug, or abusing the API, and we found no evidence that any Profile data was misused.
Calling $60k FUD is way overboard considering that's the average selling price...
Project Strobe: Goodbye Google Plus – you won’t be missed
There are online tools to convert FB page to RSS feed.
security through obscurity is weak security anyway
it was generated and shunted from fossil sources that don't have that efficiency

Ahhh ... you raise an interesting point which I don't recall reading elsewhere in this discussion (but there may have been new comments posted since my previous pass thru the discussion).

A newly built natural gas plant has an efficiency of perhaps 60%[1]. Recently completed nuclear plants, such as AP1000 based in China, have an efficiency of about 34%.[2]

That's 60% or 34% at the source! There are additional losses from that point forward, whether the energy goes to run pumped hydro or is simply stored in batteries until needed.

[1] https://en.wikipedia.org/wiki/Combined_cycle#Efficiency_of_C...
[2] https://en.wikipedia.org/wiki/Sanmen_Nuclear_Power_Station
TI = Technical Infrastructure

If memory serves this was the PA (Product Area) originally responsible for GCP before Cloud became its own PA. But TI was headed by Urs and is responsible for the internal Google infrastructure (Colossus, BigTable, Spanner, etc).
> That doesn't mean that we shouldn't give it our best shot

Can you unpack that a bit?

I’d argue a fake solution like the the Paris Accord is actively harmful.

It’s the equivalent of banning the use of guns for 4 hours on a Tuesday morning punishable by a $100 fine and thinking that it’s going to help reduce gun violence.

At best it will convince people you have no clue and can be safely ignored.
Daily reminder that there’s no “cloud”, just other people’s computers.
Totally agree. There is a lot of value in having everything around you going smoothly so you can focus on your work. We have to book travel ourselves but every time I do it there is some kind of problem that takes hours to resolve. It would be so nice to have somebody who knows how to navigate the corporate process. It's not only the time but it's very distracting.
No, it's not reasonable to apply P0's public vulnerability research norms to internal security research.

P0 "competes" on an even playing field with everyone else doing public vulnerability research and, to a reasonable approximation, has access to the same information that everyone else does. Internal security assessment teams have privileged information not available to public researchers, and rely on that information to get assessment work done in a reasonable amount of time.

When P0 discovers a bug, it has (again, to an approximation) proven that any team of researchers could reasonably find that same bug --- everyone's using roughly the same sources and methods to find them (albeit P0's are done at a much higher level of execution than most amateur teams). That's the premise under which P0 bugs are announced on a timeline: what P0 has done is spent Google engineering hours surfacing and refining public information.

If you want to go a little further into it: the 90 day release window has a long history in vulnerability research. It's the product of more than a decade of empirical results showing that if you don't create a forcing function, vulnerabilities don't get patched at all; vendors will back-burner them indefinitely. Google's internal teams don't have that problem: when Google bugs get found by internal teams (and, presumably, by external ones), they get fixed fast. There's no incentive problem to solve with an announcement window.

Another lens to look at this through is the P0 practice of announcing after the publication of patches, regardless of where the window is. That's because, again, P0 is doing public research. Typically, when a P0 bug is patched, the whole world now has access to a before/after snapshot that documents the bug in enough detail to reproduce it. At that point, not announcing does the operator community a disservice, because the bug has been disclosed publicly, just in a form that is only "available" to people motivated to exploit the bug.

And again: not at all the case with internal assessments.
The notification don't need to be email. If there's no evidence of a breach, I think it would be reasonable for them to disclose into some kind of vulnerability database. Maybe someone could later determine if the vulnerability was exploited based on some data dump found on the dark web or something.
Fwiw, the original implementation of threads in Java were 'green' threads (it was project Green after all). These were implemented in SunOS (vs System V) using setjmp/longjmp and an some auto-yield logic in the JVM (basically when you did certain things it would start that thing and yield your thread while it completed). When I started I had the most System V experience so I ported it over the Solaris to get to what was affectionately called the 'hello hello hello world world world' stage. The choice to use the Solaris native threads over green threads was motivated by the work that had gone on in the Solaris kernel to do CPU scheduling efficiently. That gave Java multiprocessing for 'free'. Except it exposed a bunch of bugs in the mutex / synchronized code when you actually got parallel execution :-).

The magic, as the author points out, is dynamic stack allocation. If you disassociate a thread with a required stack size, then you are back to using just the amount of memory that your object heap and reference stores are using. GC gets to be trickier to of course.

This should nominally be a non-issue on 64 bit address machines as you only need map the pages that actually have data in them (minimum one page) but that still puts a huge load on the page tables. This is especially true with huge pages which are used to avoid tlb thrashing and to save on the number of levels you have to go through to get back the physical address of the page you are trying to access.

Its the kind of optimization problem that systems folks really like to dig into and optimize around.
I'm confused on both of your points.

1. How is this powerful, in the slightest? 100 students is less than a rounding error.

2. How are these students in any way brave?
> Those who would mix business and charitable, virtuous action are asking to be held accountable for neither while enjoying the rewards of both.

The problem isn't that people are expecting businesses to be charities. It's that survival and solvency make abuse of the commons a business necessity.

People want jobs that don't involve abusing the commons.
Except this is not true at all, and we have somehow managed to have the milk out for 30 minutes at a time without going off. Watch when they refill.
Previous discussion of Romer's blog post on using Jupyter: https://news.ycombinator.com/item?id=16840692
Seems likely they actually didn't. Apparently the further down this comment thread you go, the more times this has already been mentioned. (I read the top comment in the thread having already understood this, and thus interpreted it as a hypothetical question. But in this case, it wasn't provable at all, according to Google themselves' own statement.)
It's also very much used in Romania, so I suspect we either got it from the Turkish (the source mentioned by someone above) or it comes from our Slavic roots (from where it might have originated in modern Russian, too). Living at the crossroads of different civilizations and migration routes can be fun like that.
I've easily ran thousands with an -Xss at 128kB. It wasn't a great implementation and we reduced this to a nice thread pool of 400 but it worked quite well.

Threads are quite useful in many situations and have great performance characteristics. It comes down to people knowing the language they are using and using it correctly.
Right, but the only "profile data" they would need to add to the logs to know, would be a user ID. Not really any private info.
> controversial result, in part because the length

This part doesn't make sense. The controversy must have been a misunderstanding. 'mt-MRCA' is a moving target. It is the most recent common ancestor (MRCA) of the currently living population. The mt-MRCA for the population earlier in time would be older than the current mt-MRCA. Similarly for Y-MRCA.
Though implementing fork() in a kernel is entirely distinct from using fork() in user space. Implementing fork() is mostly "just" manipulating a bunch of data structures the right way. Copy the right bytes and set the right values.

It's like how you can implement Java, C++, python, Haskell and any other (practical) language in C, despite C having no support for e.g. classes or lambdas. Or how humans can design and build combustion engines, despite us not having the capability to ingest gasoline in order to rotate an axle at 6000rpm ourselves.
Look at the bright side.. accurate nuclear weapon simulations led to the end of live weapons testing.
FYI: Google Glass Enterprise Edition is still alive.
For now they are, and that might hold true in the future as well.

There are some projects to bring BPF features needed (generally called eBPF) to FreeBSD, such as https://github.com/YutaroHayakawa/generic-ebpf - but there's no accepted mainline implementation as of yet.
18 Tutoring Platforms to Make Money Online
Yep my friend in Ukraine got an offer from one of US tech giants the process is if they can't secure H1B they just move people to Canada.
It seems like a simple clarification of a source, not a judgment in either direction.
The Android Arsenal – Demo Projects and Applications for Android
Prime may be "2-Day Shipping" but they state in their TOS processing time may make an item take longer than 2 days to get to you. I've have "2-Day" shipping items take a week to get to me and they just point to the TOS.
I think it is so important to not arbitrarily throw words like 'RAM' in such discussions, and use more unambiguous terminology such as - virtual address space and the resident set size (RSS).

On a 64-bit machine, with 1MB stack size (this is a claim on the virtual address space, not the physical memory), you can have millions of threads too (that you may hit a lower limit due to other OS level knobs is another matter).
That's because organic milk is rarely a loss leader.
OTOH the vast vast majority of people who will be reading this will be mathematicians who are familiar with the jargon. IMO it's perfectly fine for wikipedia to optimize for the primary audience, instead of optimizing for the rare curious person who has no relevant background.
You can get heroin and go shoot up inside the BART train station in SF. If you call the police they might show up, probably not. They'll arrest 1....100 other there shooting up too.

Edit: Soy boy SF engineers down voting me, go get your soy lattes and feed the dead overdosed pigeons in SF park ya faggots
Google + was one of those ideas that probably would have done significantly better had Google not been so forceful at getting people to use it. Yes, I get that it's hard to overcome the network effect thing and that fighting Facebook/Twitter/whatever head on would have been tough, but giving people the option to sign in/link accounts probably would have done a lot more for adoption and caused less of a backlash than Google's actual methods did.

'Use this service/product because you now have to in order to access something you like' is not a good way to endear your company/service/product to users, and usually has the exact opposite effect to whatever you were intending.
I would love to see a production ready kernel written in Rust adopted by the industry. I am exclusively using Go and Rust at home and at work, and I find myself equally productive in both. Go lacks a lot of 'high level' features for a GC language, so I don't find the GC to be that advantageous. Rust is safe, fast, and a joy to write. I'm not surprised by these numbers, I would be interested to see a breakdown of compile times for similarly sized kernels in Rust, Go, and C.
Look at the chart -- its an ongoing trend. Why does this particular moment indicate the start of a plateau?
I think we might be talking about two different navies. I thought the discussion was around the US Navy; looks like you're referring to the Royal Navy?
People use Google+ ?
While not a full kernel, Google's gVisor is a userland Linux kernel emulator written in Go:

https://github.com/google/gvisor

They use it in production for App Engine sandboxing.
Software architecture for functional thinking at the system scale
I don't know how you could prove whether anyone exploited this or not, unless you found a breach list posted on the open internet... even if you had the access logs:

> This data is limited to static, optional Google+ Profile fields including name, email address, occupation, gender and age. (See the full list on our developer site.) It does not include any other data

This is such a bogus statement out front. The first time I read it, I didn't even see "the full list" mentioned. The full list is much longer than this seemingly innocuous list of properties of a person. It includes such gems as:

> A list of places where this person has lived.

> A list of email addresses that this person has,

> The hosted domain name for the user's Google Apps account.

It's a little worse than they painted it to be, maybe not much, but at least they're being transparent, I guess...
The problem with doing this is that many other optimizations depend on inlining. So, if inlining is deferred until link time, thise optimizations will be far less useful.

Take for example auto-vecorization. If we have a loop that just calls a function which increments a value in an array, we may very well have a great candidate to vectorize. However, if the function isn't inlined, the auto vectorization optimization will just see a function call as opposed to an increment and won't be able to do anything with it.
TI is Technical Infrastructure, organization responsible for management/storage/database/analytics/scheduling, etc. software in datacenters. TI and Cloud used to be different branches in the same PA (product area), but TI consumed Cloud Org once cloud became a priority and now it's a single organization (itself a part of PA which also includes G Suite).

Since external-facing cloud projects have very simple and transparent metrics (unlike internal TI projects), Cloud/TI organization mostly concentrates on cloud projects nowadays.
> It's true that ultimately there aren't a whole lot of morally "good" things you can do with your compsci degree at the moment.

uhhh. your bubble is astonishing. or your standards for "good" are unattainable by anyone.

how about folks who work on CAD software? is that bad because it will be used to design plastic trinkets, or good because it'll design medical prosthetics?

(are the medical prosthetics good because they help people, or bad because they make someone money?)

if i write the software for a piece of test equipment for batteries, is that good because now people who buy consumer electronics are less likely to catch on fire? or bad because i helped the big company sell more plastic trinkets?
That's sort of the point. You can only prove positively that a breach has been exploited because there can be proof of that. But there can never be 100% ironclad proof that it wasn't exploited.
Good luck in your move out of the US!
No, they said our society and economic system incentivize profit over all else. Neither of those things are true.

Lots of people make principled decisions every single day. You think only rich engineers can afford to put morals over money, and everyone else is selling their soul for a paycheck? Where do you live?
Yes, but terminating your GC status is much more easier than relinquishing your citizenship. After all, the visa is designed for that (to be something that you hold on to while in the US and give up when not maintaining permanent residency status anymore).
cloud, not hosting. hosting is just part of cloud. Well, the first reason is that if Google misses this growth opportunity, they will be punished badly in the market, which will affect their ability to complete long-term against Amazon and MSFT. Growth in cloud is what growth in mobile was 10 years ago: critically important to remain relevant in a market. When cloud switches to "profitable mode" some time in the future, if Google isn't in a position to benefit from that, they'll have huge revenue and ultimately profit issues compared to Amazon (which has already surpassed Google on the basis of its cloud growth). So it's an existential thing.

Everybody thought social growth was critical (5 years ago, everybody thought Facebook would eat Google due to growth in mobile ads), but it turned out that social growth was not necessary, instead maximizing watch time on youtube and maximizing app installs in Play both turned out to be far more important. Google isn't worried about Facebook like they used to be- they're worried about Amazon and Apple.
> I think drones are close to the level of dangers of cars.

prosumer level drones are certainly a lot more dangerous than people who have only seen $40 toys would imagine, but i have to say this is a bit of a stretch. the mavic air you mention has a top speed of ~42 mph (although you won't find them traveling that fast for long) and weighs just under a pound. the maximum kinetic energy delivered is within a factor of two of a high school pitcher's fastball. the props can definitely cut you up bad, but it's not going to kill you unless it happens to hit a critical artery. this particular drone also happens to cost $800, fairly easy for a seriously interested professional to come up with, but most people are not buying a drone like this unless they plan to skip this generation of iphones. finally, a major reason why air travel is much safer than cars is that the airspace is actually quite sparse; there's just not that much stuff to run into if you're not near a major airport. when you consider all these factors together, it's not surprising that i can only find a handful of incidents where a bystander was seriously injured by a drone over the last 5 years, despite the fact that there are more unmanned than manned aerial vehicles in the US!

i don't know how you're going to compare this to a >3000 pound vehicle that routinely travels through densely populated areas at 30mph. the electric scooter would be a better comparison imo.

since i've already written a wall of text, i will say that i don't necessarily mind paying $200 and taking a course one time to be able to fly my drone with relative freedom. what i mind is having to call all 10 helipads (which may not even be operational) within 5 miles of me, one by one, every time i want to fly my drone 5 feet off the ground in my backyard.
A common response is "Capitalism". It's an easy, glib response. Unfortunately, it's not a good one

If anything, Capitalism has lifted 90% of the world's population out of poverty. It's a solution to absolute poverty, not a cause. It may, however, be a cause of relative poverty. But to paraphrase Winston Churchill, it's the worst system for eliminating poverty, after all the other ones we've ever tried.
That is the kind of argument that carries a lot of force on a message board, but is not at all lined up with how the world actually works. In reality, almost nobody operates under the norm of "any vulnerability found must have been exploited", and even fewer organizations disclose as if they were.

You can want the world to work differently, but to do so coherently I think you should explicitly engage with the unintended consequences of such a policy.
Naming is an act of creation
You work for the company not being named, don't you?
If anyone wants an amazing book that changed my perspective about life and death I'd highly recommend "The Tibetan book of living and dying".
I'm also having similar issues. I was recommended Cognitive behavioral therapy. I'm also going to have a doctor's visit.

They always recommend exercise, so I agree with DoreenMichele's advice. I'm overweight and have poor fitness.
I'm just a baby computer scientists but when I was reading the title I immediately thought "no way that is possible in general" which is I suppose why it is a good paper.

good ideas can often seem pretty crazy.
> In other words, Facebook isn’t holding itself to the same standards on which it’s being judged by critics who’d like to see reputable, serious news organizations dominating the feed.

Does anyone actually want that? It's a social network, I doubt there's a large percentage of users who want to see the same mainstream news that dominates every other platform. I think real users want it to be fun and personal, not "serious".
It's obviously hyperbolic to claim that there is virtually zero safety risk of a 4 pound drone, but I also see a lot of hyperbolic exaggeration of the risk. The two main risk categories of drones are interference with aircraft and interference with the ground.

The aircraft risk is almost entirely mitigated by not flying your drone anywhere near low-flying aircraft. That requires a small amount of research. You should be far enough away from aircraft that the risk of your drone losing control and flying into aircraft flight paths (whether due to malfunction or operator mistake) is virtually zero.

The ground risk is harder to mitigate, because the normal failure states of a drone are falls and short but fast uncontrolled horizontal flights. The risk of property damage or injury in these cases is very real, but I think it's on par with the risk of some common recreational activities (like throwing or hitting a baseball), and much lower than the risk of some very common and well-accepted activities (like driving a car).

All these things (flying a small drone, playing baseball, driving a car, etc.) require some knowledge and diligence. I believe society can, should, and will establish a set of safety expectations and risk acceptance for new things (like drones) just like society has for old things (like baseball and cars).
Did anyone re-implement the basic React API surface, using Wasm as a backend for the Virtual DOM? To me, it sounds like this would be an interesting project.
If it wasn't for this I think they could of had a healthier community, and maybe if they had named it better. Google Plus is such a terrible name, I can't help but think to whoever named YouTube Red (which is now Premium, could of been Plus...) but I guess Google as a whole is fragmented just like Microsoft and their Windows team are. It's a pain to manage so many diverse teams with differing directions. I loved the idea of Google Plus, but it died when they were trying to normalize all my data into one giant blob of cash.
Scoop Technologies, Inc. | SF | Full-time | https://takescoop.com/careers

Scoop brings commuters together in carpools they love by partnering with their employers. Scoop unlocks new opportunities to make friendships, improve your well-being, and make the most of your valuable time.

Open opportunities:
- Data Engineer: https://jobs.lever.co/takescoop/8d1055ac-ac0e-4613-a874-afc0...
- Platform/Infrastructure Engineer: https://jobs.lever.co/takescoop/81a66379-655c-4adb-a8e5-3a7b...
- Product Backend Engineer: https://jobs.lever.co/takescoop/f9d32b6a-e7dc-477a-9be2-6531...
- and many more!
I use it all the time for the main websites (Google, FB, Amazon, banks, etc).

It's also useful to access the same site with multiple accounts from the same browser in development.