skysight-inc/HackerNews huggingface dataset:
> I should be allowed to run the software that came with it 5 years ago. I could not care less about security or privacy or the illusion thereof

Ah but then when there is a bug that is exploited (e.g.SMS resetting phone) or a flaw that needs to be fixed (e.g. unexpected shutdown) then everyone is angry and pissed off because they haven't fixed it. It's damaging to their brand, and damaging for users who don't know/understand/care.

It's kind of a damned if they do, damned if they don't situation.

That said, they could just roll out security patches independently of new features - I believe Google is planning to do this in future Android releases via Project Treble - 1? Apps would rot though, as they update to use newer API features not available in the base OS.

Edit: I think project treble is just about easier OS updates and not modular security updates for older platforms

1 - https://android-developers.googleblog.com/2017/05/here-comes...
Sadly as an APEC card holder I can get a Hong Kong e-pass attached to my passport (to enter Hong Kong), but not the equivalent for China
If you have a relatively small set of users, setting up your own database is usually as simple as setting it up locally and you won't need shards or anything. And setting up backups is as simple as adding a cron job that calls your backup shell script, which you can test separately. And by "small set of users", consider what SQLite's own website[1] says:

Generally speaking, any site that gets fewer than 100K
hits/day should work fine with SQLite. The 100K hits/day
figure is a conservative estimate, not a hard upper bound.
SQLite has been demonstrated to work with 10 times that
amount of traffic.

If SQLite is able to comfortably handle 100k hits/day, I imagine that more "legitimate" databases can handle more traffic comfortably without needing to jump to scale horizontally.

[1] https://www.sqlite.org/whentouse.html under "Websites" section
I was in the psych ward a little while back and had an absolute breakdown while I was there. They had security put me in the observation room behind the nurse's station, which is just like a room with thick glass on three sides and curtains on the outside and a mattress on the floor. I was losing my shit. When I finally calmed down around 2 AM, a nurse came in with a little bottle of lavender essential oil. She asked if she could put it on my pillow. I had the best sleep of my time spent on the ward, and started using it when I was discharged. I had wonderful dreams, I was calm in the morning, I was comforted, I felt safe.
Are there any good resources or studies on the effects of laws against technology that is widely available & easy to implement?

I would imagine a culture's history has a great effect to. Guns in America for example.

I am curious how one would police data privacy when it's incredibly easy to collect data secretly. Do you only go after the big offenders?
I've submitted an issue on GitHub, title "Executing incomplete commands is too dangerous".

https://github.com/akavel/up/issues/8
Does GCC use that when auto-vectorizing? It's been a while, but in the past when I built binaries via gcc with autogenerated SSE/AVX I don't think they fell back to the C code for CPUs that lacked those SIMD instructions. They just crashed.
yeah yeah racism.

The siren song of those who have no argument.
As someone coming from CUDA I think you‘re on the right path. CUDA unifies multicore and vectorization parallelims. Crucial here is hardware support for branching (including early returns) even if it degrades performance. This allows a CUDA kernel being programmed in a programmer friendly way that is often already fairly performant, and the actual mapping to hardware is deferred to kernel invocation where it‘s straightforward to specialize. I think this concept is something that CPU (programming) could learn from GPU. Why not adopt the concept of kernels?
Ask HN: Recommended resource for learning how to build a SQL database
Hi,

I want to have a deeper knowledge of how a SQL db engine works. One learning approach has worked for me was reimplementing things from scratch. Could you guys recommend some good resource on building a SQL database engine?

Thank you.
Becoming comfortable with silent pauses in your speech in key, I have found that it not only captures my audience's attention, it also calms me down. Furthermore, the silent pause should also be used purposefully as a multi-purpose tool and be inserted consciously in your speech. I have noticed that using pauses strategically helped me reduce my use of disfluencies considerably.

I agree that preparation is everything. It can mean different things for different people though. I have found that preparing a speech by writing it out and memorizing it does not work for me. What does work, is knowing as much as I possibly can about the subject matter, having a short list of the talking points or story and most importantly, the key message(s) intended for the audience.

Finally, have fun speaking. Be enthusiastic about what you are saying and put that energy in your voice and your gestures. Again, this doesn't only engage, it also makes one more comfortable speaking.
I'm also against heavy handed government except all the times when I'm not.
> Only a handful of specimens (less than 10) have ever been collected in California and usually there is some connection between the spider and a recent move or shipment from the Midwest. There is a great "awareness" of brown recluse spiders in California mostly through a misguided media barrage which is fed by a fear of the unknown and unfamiliar. I repeatedly have seen the media in their "quest to seek out the truth" write completely speculative stories about the existence of the brown recluse in California. Unfortunately, the truth is not nearly good enough to sell news and therefore, a speculative story is fabricated based upon faulty assumptions.
We are using it and it's great, so easy to also plug in your own metrics from whatever application you're running. I insisted with the management that we needed it on a new project and they were like 'fine if you insist, we do have Google analytics and uptime Robot you know', now they call me as soon as it's down (we installed it on a crappy server because it was just my fixation :) )
If the effect is not stable and at least some patients tend to return to insulin injection or need to repeat the procedure annually I'd recommend the researcher to try supplementing α-lipoic acid, sodium butyrate and, perhaps, inulin (not insulin). I believe this may help (or may not, would be cool to check with some sort of clinical trials).
That's easy to solve.

You assign a task to someone, then say:

You come back to me, as soon as you find it hard to move forward, ok?

They screw up

You should have come to me for help, like I advised you. Nevertheless, lets look at how you can solve your problem now
Can you elaborate a bit more? Which functionality are you referring to? And why did you disable it? Really curious! (Author of up here) I get it that by eshell you mean a shell in Emacs? (That's at least what I'm getting as a first result from google)
The biggest problem with the H1B visa system is that it's mainly an outsourcing tool. Cognizant, Infosys etc are just offshoring companies and spam the system. The really talented engineers go to the FANGs but these represent a small proportion of visas used.
Users will give you the preferences that they think are important. Or are important at the point of that interview.

Analytics can give you a decent glimpse of revealed preferences, which may or may not be what you're after.

Whether or not this is a good thing, depends on a lot of subjectivity, sure. But suppose you run a porn site - if you asked most users what they wanted in porn (before they had seen any), they would probably say one thing. If you examine what kinds of videos people look at, you'll see another. (This theme, with actual data from pornhub, is explored at length in the book "Everybody Lies" by Seth Stephens-Davidowitz.)

Both routes (asking and instrumenting) have their uses.
One could sandbox the whole thing with an tmpfs+overlayfs to avoid such accidents.
Yes, it was a mostly non-answer to a mostly non-question. It was in response to citing a proof in your own work, not a comment on the need for peer review of proofs in general.

The bulk of your rebuttal is exactly my own point. Peer review doesn't actually prove anything one way or the other. The ultimate truthfulness of a cited proof is all that matters. The idea that cited proofs should be peer reviewed don't add intrinsic validity, it just fosters academic laziness.

"Boy that's a fantastical claim that doesn't seem right; but all the citations are peer reviewed and I see nothing obviously wrong so I guess its true!" -OR- "Boy That's a fantastical claim that doesn't seem right; I don't see anything obviously wrong here so lets double check the cited proofs they based this on."

What's the practical upside to only using peer-reviewed proofs besides speed at the cost of fidelity? What's the practical downside to using unreviewed proofs besides "more work"?
That seems like a valid reason; for me, it seems that the competitive nature of chess and its pre-existing establishment in society as a measure of intellect determines its popularity.
Software scientist != software/hardware engineer != software/hardware developer != programmer/coder.

Programmer must know how to program.

Software developer must know how to make good software product.

Software engineer must know how to understand and meet specifications, follow engineering codex, and son on.

And so on.

I'm talking about software developers. You are showing me examples unrelated to professional software product development at all. Moreover, there are lot of professionals in IT, but only part of them are software developers.

So we are just talking about different things: you are talking about "someone who sits in front in compute and enters programming code", while I'm talking about professional Software Developer, short segment of IT professionals, subset of programmers.
Most visas do though, so it could be worked out.
Except that it was refreshed in 2017 (per the article itself).

What is even the point?
I've spent quite a bit of time looking at autovectorization, but didn't write about it much here, as it's only good for a pretty small subset of problems. One subtle gotcha I ran into is that `round` doesn't autovectorize, but `float` does, even though today's chips have perfectly good vector round instructions. See rust issue #55107 for a deep dive into that problem.
“If you are being hunted, this bush is one of the best places to hide”
You know that less has interactive grep right?
Type & phrase <enter>
To go back:
& <enter>
I don't know if you've ever seen Kokkos[1], but that's one of the big C++ frameworks for taking parallel loops and using templates to generate code for SIMD and multiple cores. They also support GPU code generation to some degree. The main issue is compile time, which gets pretty bad when you start using it in non-toy applications.

I can't find the reference right now, but there have been some attempts to augment C++ compilers to understand the semantics of the library directly, basically treating the template metaprogramming as a DSL instead of general-purpose. This can be speed up the compile times dramatically, but of course you lose generality and the compiler has to be customized to understand every library it wants to optimize. Overall it seems like there is more research to be done on doing this in a safe way without paying through the nose with compile time.

[1]: https://github.com/kokkos/kokkos
Why do you need a planned endpoint?
A potential solution is to create a user who has no or limited write access, and modify up so that it always switches to that user.

I wonder if there’s a way to do this without requiring the creation of a new system user. Some way to revoke all write access for the current process.
Curiosity and Procrastination in Reinforcement Learning
Why is SIMD considered unsafe? I thought that safe code was permitted to cause panics, and the worst thing that will happen if unsupported SIMD is used is a panic.
But they are not all equally so, right? Seems like dose response would be important to understand when evaluating for possible policy/intervention determination.
Why is a planned end point necessary? An average of say $100k per year isn't impacted whether you pay that person $50k for 6 months or $200k for two years.
Wow, uh, '97 was kind of the end of the road for most of that kind of stuff. I used BBSes in the '80s, but as soon as I got to college and onto the pre-WWW Internet I never visited another BBS again. Hacking UNIX and VMS systems was way more fun.

I also got into a whole peck of trouble with credit cards and lock picking. Oh, also, Warez. And lots of other shit. I pretty much abused everything the squares hold dear and lived to tell about it. And wouldn't have done it any differently except for getting caught.
In case anyone else is reading this, I want to make clear that I'm giving the standard description of quantum teleportation.

https://en.wikipedia.org/wiki/Quantum_teleportation#Formal_p... provides a clear description of the initial states of C and A/B, the operations performed by Alice and Bob and the final state of B (which is identical to the initial state of C).

Clearly you don't find this description correct but I would be surprised if you can write down an alternative description that makes sense.

You're free to have your own theory, but I don't understand why do you feel that you need one in the first place. What is the problem with measurement breaking entanglement?

> If you could cause an entangled particle to become unentangled (i.e. to transition from a mixed state to a pure state) by performing an operation on its partner then you could do FTL signaling by observing the presence or absence of first-order interference.

Let's say Alice and Bob have entangled spins in the pure state (leaving out the normalization term):

|up>_alice * |down>_bob - |down>_alice * |up>_bob

According to QM, if Alice measures the spin along the z-axis one of the following alternatives will happen:

a) she gets a positive measurement, her spin is in the pure state |up>, Bob's spin is in the pure state |down>, there is no entanglement between the spins

or

b) she gets a negative measurement, her spin is in the pure state |down>, Bob's spin is in the pure state |up>, there is no entanglement between the spins

How do you think this allows for FTL signaling?
LLVM does (quite recently!), but Rust currently does not. I think it's likely that Rust should add it, but a large part of my post was exploring how far we could go with Rust as of today.

Edit adding citation: http://lists.llvm.org/pipermail/llvm-announce/2018-September...
Release Notes for Safari Technology Preview 68
2 seems the reasonable choice. If old hardware can't support a new feature, don't add it. I don't think customers will have trouble understanding "Your phone is old and it can't handle this new thing". That isn't difficult to understand. For older phones just provide necessary security updates for the older version of the OS.
Slightly misleading headline and first paragraphs yes, but then they focus on the idea that the location was not refreshed for 8 years and are curious about this gap.
The way environmental concerns have been corrupted into institutional delay levers is sad.

"How Burrowing Owls Lead To Vomiting Anarchists" is one of the few (and best) explanation of the impacts of these kinds of tactics that I've read [0]

[0] https://techcrunch.com/2014/04/14/sf-housing/
The code was not open-sourced. It was only given to one party, and presumably did not come with a license to redistribute the source code.

This means all users of the software are less safe. If the NSA can find a bug in the code, they can unlock everyone's files, but nobody else could ever uncover that bug.
Is there any source for this that doesn't rely on a Aptoide press release?

Every other source seems to go back to this Reuters article and the Aptoide PR.
If I wanted to offer whatever programming chops I have and support one of the initiatives you're working on, what's the best way for me to do that?

I appreciate all your work and contributions to the community in general. Please keep your chin up and keep moving forward.
I know you mean well, but please take a look at the Hackernews guidelines linked at the bottom of the page, specifically the following two passages.

>Don't be snarky. Comments should get more civil and substantive, not less, as a topic gets more divisive.

>Please don't post shallow dismissals, especially of other people's work. A good critical comment teaches us something.

These are great guidelines, I really appreciate the thoughtfulness of whoever wrote them.
Cost and promise.
Maybe cutting off network access could be done too? That would reduce some potentially useful features, but it could be a parameter to enable it (hey, we're talking Linux, never enough parameters! ;). That is, assuming that a syscalls/capabilities trick like that is possible at all. (Anyone can say more here? Some kernel hackers? This is HN, ain't it?)
That's patently false. If tech was the panacea you're suggesting, free speech would be the norm and there would be zero concerns regarding privacy.
Great questions!

> Can I sign up somewhere to get notified when "back up to your own cloud destinations" is complete?

If you edit your backup, you can create a custom hook (https://relicabackup.com/docs/backup-hooks). We plan to implement email notifications when such events occur as well.

> As great as cloud backup solutions are, the weak point is always getting things out.

We're implementing "Bring your own cloud" now, so you can provide your own S3-compatible, SFTP, Azure, or Google storage (more to come). This feature is almost done.

> Also, trust and security are going to be huge.

Backups are encrypted on the client, and the key is kept on your local device (don't lose it!). We can't access your data, and even your file selection is encrypted.
Wasteland? [0] [1]

[0]: https://en.wikipedia.org/wiki/Wasteland_(video_game)

[1]: http://wasteland.wikia.com/wiki/Broken_toaster
Same goes for any LPer, speedrunner, eSports player or gamer involved in playing basically any video game before the last generation or so.

Bet most Smash Bros Melee/GoldenEye/Ocarina of Time players aren't older than the games they're playing!
Also: support for dark mode via prefers-color-scheme CSS property, and <input type=color>.
I also found that humorous/obnoxious. He is literally a limousine liberal. (I say this as someone with a liberal streak myself.)
> You don't die if your encryption is weak

This really depends on the business you're in.
This should be the default mode, and you could activate it with a --rw flag
I am definitely on that particular boat. I'll add one more point:

- Not very willing to setup DBs for several projects both paid and hobby because it's a fixed time sink. And before anybody tells me "but with this script it can take 2 minutes!" please don't forget that to learn to use your magical script I have to learn a few other things beforehand. (Although admittedly that's most likely a small time investment.)
/diy/ is really great. Generally post quality is inversely proportional to board popularity. Also avoid any board related to entertainment if you want rational discussion.
The video describes mostly about what they would do under active surveillance e.g. people following them. Some of the prosthetics she describes also may throw off facial recognition.
Internet access is not nearly a luxury in the same way cigarettes are.

Yes, it won't literally kill you not to have Internet, but that's a disingenuous argument. I did not say "essential to remain alive", I said "essential".

You are simply not at a level playing field if you do not have Internet access in 2018.

Family emergency while you're not at home? Resources to learn about the world, educate yourself? Increased job opportunities? Housing listings? Mobile financial services?

https://www2.deloitte.com/content/dam/Deloitte/ie/Documents/...

https://www.nytimes.com/2015/04/02/business/dealbook/melinda...

Internet access is most commonly going to be through smartphones in the developing world. Internet access is essential.

Saying it's a luxury in the same way cigarettes are is ludicrous.
It's to prevent you hiring an H1B for a one-month, $50,000 contract, then hiring them for a separate 11-month, $50,000 contract after. The company will argue the initial hire is a $600k/yr rate.
That's an important distinction and one that I should have made. So point taken.
Dynamic language designers have a tendency trying to reinvent the wheel, and eventually regretting that choice. Explicitly declared, lexically scoped variables are the sane choice.

The Perl community realized this, and introduced 'my'. The Javascript community realized this, and introduced 'let'. I'm not sure of the current status of Python, Ruby and PHP, which from my point of view all started out with rules broken in various ways...
You can't write python 'without OOP'. Almost everything you do requires instantiating some class, or called a method on a class. Unless you write everything globally with no mutation.

You can write python in a functional style, but you're still going to use OOP constructs.
The throttle was not lifted in 11.3. They added a switch so users could disable it.

https://www.theverge.com/2018/2/7/16984234/how-to-iphone-thr...
I was most amused to find a "Men's" Pocky in Japan. I couldn't believe I'd been eating gender-neutral Pocky the entire time before.
There's a quote from a book that I can't quite recall, but related to German professors droning on with ever-more deeply nested sentences, and finally finishing with all the verbs at the end, leaving the poor students utterly lost as to which verb went with which sub-clause.

Anyway, great story, I'm sure, but it seem apropos.
Median household income, San Francisco County, 2016: $87,701.

https://www.census.gov/quickfacts/fact/table/sanfranciscocou...
I've lived in the US for my entire life, I've live in both the north and south. Traveled large portions of the country. I've also traveled internationally numerous times. To say that Atheists in the US are hated is putting it mildly. There have been research studies into it, and the results were Atheists were one of the most distrusted groups in America and rated lower than Muslims and actual rapists. You can look up the Pew study, The Journal of Personality and Social Psychology Study, The University of Minnesota study and there's more. Every single one disproves your point. If you've been an Atheist in America and haven't seen this, then you're putting on blinders or live in a liberal city.

Edit: Typo.
Also real billboard: https://en.wikipedia.org/wiki/Discrimination_against_atheist...
Micro-drones with winches can open doors and lift 40 times their own weight
Just started using the new Kubernetes offering on Digital Ocean. Still in Beta but works pretty good. If this is a sign for how they will do databases, I'm all ears. Add CI/CD and you have a Heroku competitor.
The types of people who know how to handle this aren't the types of people who play the lottery.

But yeah, I totally agree with the top subcomment: consult an attorney. Have that attorney help you with everything, like literally everything. In fact, it might be worth getting two so they make sure the other doesn't take advantage of you and so you'll have backup in case one attorney is unavailable. Your attorney should be able to hook you up with a good financial advisor, insurance (you'll want umbrella insurance along with a bunch of other insurance you probably never knew you might need).