skysight-inc/HackerNews huggingface dataset:
Ask HN: How to split ethernet frames read from Raw Socket
I implemented a simple packet capture tool which supports Linux and macOS(BSD) in C(github: https://github.com/c-bata/xpcap ). In macOS, we need to read ethernet frames from BPF device. Each ethernet frames wrapped by BPF(Berkeley Packet Filter) payload. And it can easily find next ethernet frame because BPF header has a data length.

But in Linux, we need to read ethernet frames from RAW Socket using `recv(2)`. And the byte sequences are starts at ethernet headers because the data read from RAW Socket is not wrapped anything. But ethernet frames doesn't have data length. So I think we need to parse until L3 layer to get the length of ethernet frame data. For example, IP packet has total length. But it's a little bit complex because we need to parse all packets until we can get data length.
https://en.wikipedia.org/wiki/IPv4#Header

Another expectation is that returned data from `recv(2)` might ensure only contains one ethernet frame. But I think this is not true for some performance reasons (recv(2) is a relatively heavy). Does someone know how to split ethernet frames read from Raw Socket?
mbr targeting / Ströer Digital Group | Software Engineers, Data Engineers | Berlin, Germany | Full-time, ONSITE | 50-70k€

At mbr targeting in Berlin we are developing and scaling the core technology that powers Germany's market leading digital advertising company Ströer.

With online advertising being one of the most challenging fields in high performance computing and data processing, we are working at the cutting edge of big data, machine learning and real-time technologies and we are operating large-scale deployments of real-time web services.

To expand our team of highly skilled engineers we are looking for talented software engineers who either already have some experience building scalable, low-latency systems or who are proficient with Java or Node.js and are looking for a challenging opportunity.

We are also looking for engineers who either already have some experience with big data technologies (Hadoop, Kafka, Flink, Spark) or who are willing to expand their skillset into the area of these technologies.

Please find more info here: https://mbr-targeting.com/jobs.html
Get in touch with us: jobs@mbr-targeting.com
Inline styles = open ended, while classesrestrict you.

Also this is switching things around. Now your html depends on your css classes and not your css depending on your html. No more broken css when a dev modified the html structure and didn’t realize that one of the hundreds of lines of css now doesn’t get applied right.
what a terrible place to work. Oh noes, i need the money and stock options otherwise i can't pay my 20m^2 apartment and buy the lastest apple goodies and travel 10 times per year to "explore myself"

Sexual harassment is no go but i rather associate that with woman in africa who don't go to the toilet because the fear of being raped. That is dreadfully awful

If you get a remark because you have nice lipstift i would rather get that as a compliment and be proud of yourself. In the end you want the attract the best man for your unborn children right?!

So, sexual is a no-go but a prude person should not devalue the meaning of harassment. Stay in that case out of the kitchen (or just stay in the kitchen)
> Under Obama, I saw no growth at all.

Really, you saw no growth at all during a Jan 2009 - Oct 2016 period during which the S&P 500 went from 850 to 2153, a 153% increase?

Are you an especially poor investor or are you just making stuff up online as has become the norm for Trump astroturfers?
The red flags and magic numbers that investors look for in startup's metrics
An oil droplet is a physical analogy for a quantum phenomenon. You cannot prove anything about the subatomic world by such analogies. Your insistence that it's "particles all the way down" also continues to be entirely incorrect. I think that you are more interested in believing that you have a special understanding of the universe than knowing the truth. Either way, I am uninterested in repeating myself further.
I suppose Blazer would eventually move to CoreRT when it is ready.
And decades into Chomsky's campaigns to tear down the mythologies of the nobility of modern governments, people in the tech community continue to get all confused and offended when self-identified socialists use euphemisms like "sociopath" for powerful capitalists. We should have been carrying his books around school as teens instead of The God Delusion.

"He admitted that he was opposed to democracy, that he thought offshore tax havens were good, that he believed workers shouldn’t have any rights beyond their contracts, and that he had no idea how capitalism could possibly avert the climate change crisis. The right often tries to avoid discussing these implications of its philosophy. Dr. Mitchell was quite blunt in saying that democracy is bad and tax avoidance is good. I am grateful to him because, while I find these positions morally objectionable in the extreme, it is helpful when I can point to someone’s actual words rather than having to accuse them of burying their true feelings beneath euphemisms." - Reflections on Debating the Right, Nathan J. Robinson
There are a lot of smokers who hate stoners, and won't mention their mj use to casual acquaintances. And it's certainly not for everybody, especially at higher doses or potency.
Unfortunately Teams has no usable extension API that would allow the funtionality of the old UCMA and UCWA apis.
If you don't want to bother with the container, `steam-run` will almost always work. That gives the same Ubuntu chroot (aka. buildFHSUserEnv) as is used by Steam.
I completely understand why they did it, and it actually makes a lot of sense to me. I wish PCLs never happened and I wish .NET Standard happened a lot earlier (seriously, the idea of platform profiles vs a standard API is idiotic and completely unmaintainable).

The other place MS has not executed well is versioning/naming and the communication of those versions/names. But soon(?) it'll all be .NET Core and we can put this behind us.
It's not an unvarnished good. Modern candies and apples have dulled modern tastebuds to sweetness so that you need a lot more sugar to like it. High dietary sugar is like a tobacco reboot.
Right, no live Real Time :(
Everything You Need to Know about Flu Shot: When and Where to Get – UrgentWay
Towards Understanding Linear Word Analogies
Looks empty to me
Proves that we have not found a solution if men and woman can truly work together (without adding boundaries and rules which rapidly drain productivity). If you don't feel safe, feel free to quit and give up luxury salary.
I've been having great success (and fun!) recently, using Nix to manage the build for an application that I wrote in D a while back. The app builds reliably on a particular DMD version (one that's not already bundled in NixPkgs), and with third-party dependencies pinned at certain revisions. I'd like to make it easy to re-build the whole app, from any machine, with exactly that configuration and with a minimum of fuss. Nix seemed like a great way of coordinating all of that.

After the initial learning curve of the Nix expression language, and how the parts of Nix interact, I was able to write ~25 lines of Nix script that will run the whole thing from scratch: find and deploy the right DMD version, download the right dependencies, and build and install the application.

After a build, I can "copy the closure" of the application to as many other machines as I want, with no rebuilding needed. This guarantees that all dependencies (down to libc) are identical on all machines -- even if the machines already have other versions of those libraries installed. I'm very pleased with the results.

So: there's a learning curve to Nix; but beyond that, things get better, and personally I'm finding the return on time-invested to be very good. If you're interested in building your own software with Nix, I strongly recommend reading the "Nix Pills" articles a few times and doing experiments as you go -- many things didn't click for me at first, but the articles helped things fall into place.

https://nixos.org/nixos/nix-pills/index.html
I routinely upvote things I do not agree with, but this is not that, imho, this is just bad. But yes, I see what you mean.
If a flatpak exists for that program, sure.
If you have enough maggots you don't even need the heat pumps.

https://what-if.xkcd.com/4/
>You really think that the US government doesn't routinely "tip" off Boeing and several European countries Airbus?

>Countries look out for their own self interests beyond anything else.

And of course, governments only help local companies like this, if they in turn help their government.
I believe chrome currently uses BoringSSL not NSS, but still has some facilities for writing the same keylogfile.
This is definitely a nit, but isn't calling this a "new vulnerability" incorrect? The vulnerability has existed, but has only recently been discovered. I'd prefer it was referred to as a "new exploit."
> A good example of this is default implementations of interfaces, the ability to author generic code involving arithmetic, being able to use hardware intrinsics etc. And those features are likely exactly the kind we're not going to backport to .NET Framework due to risk.

I suspected that but it's good to see it written. It means not only the target will become independent and incompatible but that also the C# syntax will diverge between Core and Full. That's a death sentence for Full.
Many people are worrying about the implications. They made the video you linked to. This worry is widespread and is all over pop culture. The Terminator or Matrix movies for example. How regular people can influence weapon development is another problem altogether.
A couple I can think of

1. Zero to one talks about the importance of optimism vs pessimism for the future. Compare Obama saying the US needs to get used to sub 2% GDP growth vs Trump saying we can hit 5%. Trump isn't afraid to think big at the very least when it comes to space force and similar big projects

2. Thiel is libertarian and sees Trump as a means to reduce government. Romney got in trouble a few years back for saying a hard truth, that 47% of people don't pay taxes and are never going to vote for less free stuff. At some point it becomes two wolves arguing with a sheep on what's for dinner

3. Personal gain, Thiel has Palantir as well as another company that would use AI to create a "virtual" boarder wall via image recognition
It sounds like the author missed the purpose of the experiment, when they mentioned the moon. This would not work on the moon. The ISS is within the radiation belts and has a lot of protection.

What this experiment is about is satellites. Which is a big deal. If you can put stuff in LEO and use COTS parts, that saves a ton of money. And a super computer is much bigger than the testing they've done with small systems and cube SATs. Moon hardware will always have to be rad hard, but this shows that the commercialization space can be cheaper than was previously thought.
It's definitely the case even in the US, which is generally the poster child for "successful digital surveillance".

Between low salaries and high selectivity, it's tough to find staff. The FBI has talked about how their marijuana use rules are a major impediment to hiring programmers, and some wings of US Cyber Command have apparently been trying and largely failing to train up talent internally because they can't recruit enough. (And that's after "fully staffed" was redefined downwards several times.) Turnover is apparently also sky-high, especially for civilian contractors.

Even the NSA is mostly in that situation, though. Or on the non-intelligence side of things, the US Digital Service is the same. They've both managed to pull in a lot of top-tier talent regardless, thanks to some mix of civic duty, prestige, and the promise of work you can't do elsewhere.

Which raises the question: what actually determines staff counts and quality? If salaries are crap everywhere, why have some countries gotten so much more talent than others?
Again, if your belief is that the executive class can’t make meaningful change in this matter, (and I assume you accept that fines aren’t significantly felt by the lower ranks), then fining itself is unreasonable: the company itself can’t really do anything about it. We can let people know the data has been lost... but thats it. The fining is just petty revenge, for succumbing to natural forces. The PR hit too: why disclose the company?

But obviously you do believe its possible for the company to change its data security practices. Obviously you believe theres a scale to protective efforts. Who better to enforce such efforts than the bosses? If not them, then who? What position is better to effect change.. than being in charge?

I agree that on any data loss, severe punishment is too much, simply because it’ll eventually happen for even mundane reasons; but discovering as a result of loss that they never did anything proper to protect that data is a pretty damned good reason for larger punishment.

I can agree that executives today have little to know insight on their data management practices, but I don’t at all see why they can’t have it tomorrow (or more likely, offloading that insight onto third party auditors, as you’d do for finances, gdpr compliance, and really anything you’re too busy to be personally involved in)
Although the Mac version of the packages is far more likely to be broken or buggy in some way. Unfortunate, but an inevitable consequence of not many people using it.
Have you also checked other distributed/decentralized social networks? Curious about your experiences.
>The polite open secret of espionage is that spying on your allies isn't just normal, it's part and parcel of basic modern statecraft. Being able to anticipate the moves of your allies, understand their thought processes, and watch them for compromises are all incredibly useful things, and the first two very important for working closely with an ally. This is, quite frankly, normal stuff.

If this information is beneficial to both sides, it should be freely exchanged. Relying on everybody spying in each other allows poor information to cause massive mistakes, creates a power imbalance should one agency outperform another, and requires a massive investment in a sector that is also capable of economic espionage and the creation of a surveillance state.

If this is a necessary element of state diplomacy, how can interactions between countries like the US and Mexico ever be fair? And how is the public benefitting from this large investment in state controlled espionage?
How would you prevent a rogue developer from updating/deleting events? Even if you could tell from the hashes that something changed, you would lose whatever data the dev changed. Backups can help mitigate this, but not until after the fact.
Markets are efficient because firms optimize along essentially one dimension. It is naive to think that markets will magically solve any problem that does not naturally align with that.

https://en.wikipedia.org/wiki/Tragedy_of_the_commons
NixOS doesn't have directories like /usr/bin, /etc, etc. This defeats the traditional `make && make install` path; instead you have to build a nix package, and be familiar with stdenv.

My concern is that it would be more difficult to install software that doesn't have a nix package built (in particular, from git repo trunks), and also more difficult to have confidence that the software I write would work on other Linux distros. For this reason I chose Arch over NixOS.

In practice NixOS users find these to be significant issues? How do you deal with them?
he's saying windows as a programming platform is dead

Not exactly. I'm saying that Windows as a deployment platform is dead. You can keep developing on Windows and deploy to Linux. I do it all of the time.
Congrats, you have my dream job. Hold onto it as long as you can!
If you've since uninstalled the extension or switched machine / browser, then that's no good for you.
Code density is claimed to be similar to x86 and better than ARM with thumb, see the bottom of this slide: https://www.youtube.com/watch?v=Ii_pEXKKYUg&feature=youtu.be...

More information on the original design (not quite the final design) of the Compressed extension can be found in the original research paper: https://people.eecs.berkeley.edu/~krste/papers/waterman-ms.p...

And ... SPARC. Seriously? Register windows were a failed experiment.
I'm not sure (haven't tried it), but I believe there are few tricks where the assembly can be loaded on .NET Core _but_ the called APIs in the assembly must of course be present.
This is good news I think. The fragmentation is quite annoying and not needed I believe. We moved everything (15 years of code) to Core 2 and it was not a lot of work. I could not be happier; the experience for developers is so much nicer.
>For example, your web browser probably by default runs Javascript, NaCl, or WebAsm code, which is supposedly sandboxed sufficiently to no longer be a threat to the other stuff running on your machine.

I think that would fall under "Even if it's desirable to run some risky code as well" and using hard core affinity wouldn't it? For performance oriented use cases 8-core and higher systems are not exactly super rare at this point, and AMD at least has been pushing the physical core counts pretty hard even on non-super high end chips. In a single owner/trusted dedicated metal case it's a lot easier to just say "core 1 is for running web code and that's it, if every core is needed for something else the web stuff will all be evicted and slept until that's over" which on a percentage basis doesn't incur that big a hit in a high core system. It's not like a IaaS system that's devoted to running dozens/hundreds of commercial client VMs and needs to be able to perform dynamic allocation with no manual intervention and untrusted code is the rule not the exception. IaaS is all about scaling, and that's a hard and interesting problem. But sometimes for individual instances it works fine to just pick a completely non-scalable solution that gets the job done and brute force it.

I'm just thinking that it's worth remembering that most security is an economic equation, and sometimes performance is in fact worth it, or the security issue can be soft mitigated sufficiently in a restricted case. "Only trusted signed code may use SMT" for example, that won't work everywhere and it doesn't mitigate SMT still being a dangerous feature, but it may be plenty good enough in some instances. Or perhaps there is a server where the only truly sensitive piece is the private key, and that simply gets offloaded into an HSM blackbox and thus isn't available to be compromised anyway. Or the auth/signing servers disable it but other boxes do not.

Basically, it just seems like it's too valuable a feature and the threat scenario not universal enough for it to be simply abandoned entirely as the authors suggest given the physical and economic realities we're facing right now with silicon.
The main selling point of tailwind for me is that it improves iteration time by grouping the CSS with the HTML: I don't need to switch files anymore and also more importantly don't need to come up with ids and selectors. It reduces the level of indirection.

Of course you can say now I mixed style with HTML but if you never intend to change style separately from HTML then why introduce the mental overhead of indirection?
Yeah but why not generate code from your specification? Or create a model of the specification that you can interrogate in code?
Any time you're looking at a locally saved/cached copy of the map but don't have the network connection to make navigation requests? Or are just trying to find your own (or your friends) position in a situation where you have spotty or unavailable GPS.

Do Google or Apple let you use navigation offline? I know it can continue an existing route if the connection drops, but I've never tried to start navigation somewhere while offline.
Evaluation Model [of Racket]
It'll be a good learning experience for the next generation.
Why not start gender quotas with immigration - instead of wrangling it in at the workplace?

Set quotas requiring that 60% of all H1B visas must be offered to women.
Ah I see what you mean
That seems unlikely, everybody in my area (that I speak to) loathes these delivery services because they consistently screw these things up. It’s not 1 in a 100, it’s more like 9 out of 10..
DeployBot in the Cloud
You're comparing it to the middle of an enormous economic crash, and even then relying on an estimate of 4% which is high outside of an economic crisis/recession. Let's wait until the tax cuts have kicked in for a couple of years and then count it, but even by the estimates on the link you provided it's spending as if you're in an economic meltdown when you're not, and high by historical standards.
Donald Greenberg: VR is still a baby, we’ll need 20 years for photorealism
The most interesting exhibit for me is "People watching a television set for the first time", where everything is colorized except the TV image, which correctly remains B&W. I wonder what kind of a training set provided the neural network with this notion.
Yes the main way to keep drones in check is to develop anti-drone drones. Just as the way to keep biological weapons in check is to develop biological cures and antidotes i.e. staying several steps ahead of the bad guys but without creating offensive weapons per se.
I think we should stop using shallow adjectives to signal quality.

"organic" is just a marketing label.

Instead of trying to sort everything into two bins and decide how to gatekeep "organic" how about we do science and education and labeling to teach people the details of how their food is bred and produced and how quality and effects vary.
Depends on what your definition of "solid" is. Since most of the shiny new stuff is coming out on .NET Core first (think Span<'T>), it means that if a project is targeting .NET Standard (a set of APIs that can run on .NET Framework or .NET Core) it has to wait until that new stuff is ported to the other frameworks and a new version of .NET Standard is released.
I bought in around 2012, so I didn't gain anything to speak of over the second Obama term. I'm in Vanguard total market index funds.
ISTR that way back in the old days mail clients displayed every header, and then they started hiding some known ones, and then they started hiding all but certain ones. Is that a correct memory?

Because that'd probably explain the mess nowadays: no-one even notices all that cruft.
Premiums reflect the insurers experience with the company.

Some companies self insure and only have the insurance company handle the billing. This provides arm's length from employee's confidential health care.