skysight-inc/HackerNews huggingface dataset:
This is a category of problems that can arise when "handover" between different application layers hasn't been tightened. Example: a web application is responsible for generating content, but the web server is responsible for delivering it over the network. The web application does, of course, know what resources it owns, but the web server might set/override the MIME type based on other criteria than the web application. That class of problems is more common as it seems, ie. in the "advanced web security topics" post I talk about how different interpretations of HTTP by proxies and servers lead to HTTP injection vulnerabilities.
Why choose between CLI and GUI if you can have both? I have a shell on my osx and use it for a large majority of my work, but I also have decent CLI <-> GUI interaction (pbcopy, mdfind, screencapture, open, osascript, ...), and the most consistent, easy to use but yet powerful GUI.

And two things OSX is absolutely unmatched in: spotlight and preview.
I used to hate Touchbar initially but later on got used it and especially sometimes useful[1] except the accidental Siri activation.

What I can't let go is the Keyboard sound !

[1] WebEx meeting, QuickTime, iTunes
Noooooo!

I hope not anyway. They injected some time into in the last year or so. I'd be curious to know the number of users; it's still free to get a number afaict.

It's probably their least profitable service, I suppose. Maybe they'll start (!) listening in on conversations and figure out a way to make money there.
Both of these are one tap or one-tap drag for me.
The lack of Solar variability in the IPCC models is a "known issue"[1] which is, in my opinion, an under stated position as the bulk of the heat/energy in the Earth's system comes from the Sun.

That said, the science around it is pretty interesting. Whether or not it puts the Earth into a cooling trend it is affecting the propagation of radio waves around the planet and as an amateur radio operator, having a 'quiet' Sun creates a pretty unique opportunity for operating in a previously unexplored solar regime.

[1] More research to investigate the effects of solar behaviour on climate is needed before the magnitude of solar effects on climate can be stated with certainty. -- IPCC 2007 Working Group (https://www.ipcc.ch/publications_and_data/ar4/wg1/en/ch1s1-4...)
Large shops seem to love complexity and mistake it for flexibility while constantly complaining about how complicated things are to integrate. It puzzles me how the culture seems to keep adopting stuff so complicated that only those with an army of consultants and massive resources could do the same thing while most start-ups look at the same problems, find a solution that gets the problem solved sufficiently and then build things that actually solve real problems instead of self-inflicted ones like dealing with the complexities of cross-account permission structures via AWS IAM and S3 bucket policies interacting with SSO.

I’m not entirely convinced that the F500 would adopt GCP if they had the support and hand-holding structure that they have historically demanded. Myself, I’d rather find a solution that doesn’t need such a team to support me in the first place. Sure, there’s all sorts of issues with partners’ service offerings and the high cost of transit between multiple cloud providers but perhaps you can save the costs of support and put it toward network instead (won’t solve the transit costs for your partners though).
On the other hand, my 2018 MBP feels MUCH faster. I think it's the faster read write on the SSD.
Is this some kind of a joke? Are you serious?? The keyboard interface is one of the two main hardware components of a laptop, the other one being the display. If one of them isn't right, the logical thing would be to get another laptop, isn't it?
MacOS is the only thing keeping me on Apple hardware. There are so many laptops of great build that I’ve been ogling in the past few years. I’d prefer to not go back to windows, though.
Is it simple? From what I understand it is still not clear how Rowhammer is physically possible. If you don't know how it's possible, then current manufacturers may not know how to create good memory. We don't get everything in physics yet and it's affecting our ability to make good memory chips that are secure.

One possible explanation of how it is possible, the parasitic coupling effect: https://github.com/google/rowhammer-test/blob/master/docs/re...
Control+Shift+Power turns off the display and by checking "Require password after sleep or screen saver begins" in System Preferences you get same effect by using a keyboard shortcut. https://apple.stackexchange.com/a/46170
I love the death rate over time chart. Might add that to https://killedbygoogle.com
Walmart outage as Black Friday sales start
They're making you ring them?! That's ridiculous! Personally I would just flat out refuse, there is absolutely no excuse for them to put the cost on you unless they can't afford to hire you anyway.
> Resumes often contain spelling or grammar mistakes that bias me against the applicants (and I need to tell myself that these mistakes don't necessarily matter).

They absolutely matter! Spelling, grammar, and usage mistakes on a resume can be a red flag that the candidate is sloppy or careless. They didn’t even make the small effort to have a native English speaker proofread. Will they have a similar cavalier attitude about code reviews or compiler warnings?

When I’m looking for programmers, I’m often looking for craftsmen (or women): people who “use good wood in the back of the cabinet” [1]. If you’re misaligning the margins on your resume or if you incorrectly use “your” instead of “you’re,” it says something about the level of polish you find acceptable.

1: https://thenextweb.com/apple/2011/10/24/steve-jobs-obsession...
The Seven Wonders of AliExpress – Hacker Noon
Everything works with the exception of the SD card reader and microphone.

It's vanilla so I can update it for the most part no problem. Just gotta make sure my kexts are updated to support the OS. It's not as simple as an actual mac, but it's close.

It's pretty amazing. It boots up, shows the Dell logo, then the Apple logo, then it's up. Brightness, sound, thunderbolt, usb 3, wifi card had to swap but that was $20. Bluetooth, it all works. Keyboard backlight, multitouch trackpad, sleep.
Hmm, I see. In the past I ordered what ended up being a scam/"mistake"-priced item on Amazon, and I left negative feedback for the seller seemingly purposely baiting & switching customers by pricing items substantially low, cancelling the order on them, and offering them a store discount if they remove the negative review (this appears to be their long-term MO, as per the countless other reviewers experiencing the same bait & switch). A rep from the respective store actually called me on my cell phone, which is not listed in my shipping address (and is not in any public listings anywhere). Amazon should be more upfront/clear about what information is actually passed to a seller on their marketplace (ignoring manually scouring through EULA/ToS).
GitLab 11.5 released
Goo.gl was deprecated in March.

Not that the world was wanting for yet another url-shortener.
I also think it's much better than Windows 10. I use both heavily every day, and despite the fact that the MacOS I use is on an MBA 2011, I prefer it to my modern Windows 10 machine.
Your a stasi department in charge of monitoring the activity of privileged children (able to afford and get smuggled goods which from what I’m told was something most stasi family could afford to do) whom many probably have parents above your pay grade... what to do?
Also, I was amused that the recent article here on the "tiny emulators" (browser based) featured both KC85 and Robotron Z1013 emulators https://floooh.github.io/tiny8bit/ -- I imagine the author must have some GDR connection as those are pretty obscure elsewhere.
I upgraded from a late 2015 to a 2018 earlier this fall.

I don’t really miss anything, especially not the weight or the keyboard.

The touchbar has never been of use to me though. It doesn’t annoy me much, but the user design for changing volume requires more clicks than the non touchbar, so it’s obviously terrible design.

I don’t miss any of the ports, I thought I would, but it’s not like there was an Ethernet port so I still needed a dongle for the 2015 version.

There’s certainly room for improvement, but the 512gb 13” version isn’t crazy expensive for what you’re getting compared to other laptops, at least not in my country.
> Tests and deadlines provide motivation to do the actual work.

This is so true in my experience. As a young man I could listen to the lecture and say "Yeah, yeah, I got this." and then try to work the homework problems and realize that no, I didn't really understand it. It is hard to force yourself to do the work if you don't have a negative externality for not doing it.
What browser are you using? in safari the back button worked fine for me.
I use a Thinkpad Windows 10 but am lost at work without the CLI of a unix variant. Current solution is adding memory and a VM of linux because work wont let me get rid of their managed OS. ( Powershell is better but it is not a unix shell and WSL isn't all there yet )

I wont be buying a new Mac.
What you're saying is agreeable: taking a class provides a certain level of motivation that self-study doesn't provide, for most people. That doesn't conflict with the idea that typical college courses have little tangible value added. If you're ok paying a couple of grand for extra motivation, then I hope you truly have a good reason to be doing so, and that it pays off. This type of system doesn't really support people who just want to learn for the sake of it though.
I never worked with Django so I don't know how much they mix backend and frontend code, but as a general advise: try to avoid debugging. And the cost of avoiding debugging can be quite high (e.g. factor 2) as you said already that you spend 4 times the time on debugging compared to development.

AFAIK, the most effective way of avoiding debugging is Test Driven Development (TDD). Try to modulize your code and test those modules before you use them. Building modules/libs with javascript can be achieved with tools like rollup.js [1].

Other than that, try to learn to use the dev-tools [2] (the first result on youtube search for 'devtools'; videos are good to give you an impression on what is possible) and curl to replicate network requests (the dev-tools have a function to generate curl commands).

[1]: https://rollupjs.org/guide/en

[2]: https://www.youtube.com/watch?v=H0XScE08hy8
Just an FYI that the antivirus on my work machine blocked it due to ping sweeping, which I'm guessing is related to the globe. So it's probably harmless but if you don't want to get a call from your IT dept I'd save it for your home machine.
I'm glad to learn that browsers tighten security as a response to such exploits. My, personal, takeaway is that user input needs to be validated at every level; if I cannot implement proper validations (e.g. analysis of user-contributed CSS), I'll have to prevent that input altogether.
There are a number of Wikipedia pages which catalog various uses of symbols for various disciplines:

Outline_of_mathematics#Mathematical_notation
https://en.wikipedia.org/wiki/Outline_of_mathematics#Mathema...

List_of_mathematical_symbols
https://en.wikipedia.org/wiki/List_of_mathematical_symbols

List_of_mathematical_symbols_by_subject
https://en.wikipedia.org/wiki/List_of_mathematical_symbols_b...

Greek_letters_used_in_mathematics,_science,_and_engineering
https://en.wikipedia.org/wiki/Greek_letters_used_in_mathemat...

Latin_letters_used_in_mathematics
https://en.wikipedia.org/wiki/Latin_letters_used_in_mathemat...

For learning the names of symbols (and maybe also their meaning as conventially utilized in a particular field at a particular time in history), spaced repetition with flashcards with a tool like Anki may be helpful.

For typesetting, e.g. Jupyter Notebook uses MathJax to render LaTeX with JS.

latex2sympy may also be helpful for learning notation.

… data-science#mathematical-notation
https://wrdrd.github.io/docs/consulting/data-science#mathema...
waits 5 minutes for gmail to load

Yes
I found the Touch Bar so objectionable that I sold a 6 month-old 2017 MacBook Pro at a considerable loss to be rid of it. After nearly 30 years as a user, I’m done with Apple products until they stop with the user-hostile gimmicks.
Can you elaborate? Vector spaces and fields differ in how they define multiplication. In the former, we multiply vectors with scalars while in the latter we multiply two scalars.

Also, vector fields are functions from points to vectors whereas field is an algebraic structure.
What I am saying is that it won't be some magical omnitool that can go from curing death to undetectably forging nanotech instadeath rockets.

Even if hardware is shares configurations will not for the same reason Steven Hawkings wasn't drafted as a general during any of the brief Falkland Islands wars even when they were considering if MAD called for nuking Argentina if they lost.
There are very different specialties even if the hardware is the same. Having superhuman General and superhuman Surgeon skill level would be two seperate major projects to create and with lesser redundancies and in the worst case would call for two modules due to lack of shared synergies. You can't really combine processing and RAM hungry CAD programs with weather simulations and expect to see same memory footprint with the same performance.
Relations of Power, Relations of Grace: Thanksgiving Tech Meditation
We're about to go up at work from the i5 13" touchbar 8GB MBPs to 15" i9 ones with 32GB ram. Main need? Running containers/VMs. Just doesn't fly on a machine with little memory and fewer cores.

I do dislike the lack of a magsafe, but at least with 4 ports hopefully if/when I break one (haven't yet in a year) then there's more left.
Great write up, I will likely upgrade my old air, was waiting for a fix to keyboard and other issues
It should have been an extra row and not an instead row.
:D I just saw that I recommended your video ;-)

Great work man.
People would cheat by looking up the answers.
I'm really sorry, but I'd kind-of want to know exactly, why aliased pointers are bad?
Google is a steaming pile of dinosaur dung these days.
One thing I found to make the touchbar less annoying is go keyboard -> Touchbar shows "Expanded Control Strip". At least then you get a full strip of useful buttons that aren't constantly switching with the application.

The main issue though is with "Expanded Control Strip" the touchbar locks up (while holding a key down) about 2 or 3 times a week (which can only be fixed by a restart or: "sudo pkill TouchBarServer")

The whole thing is pretty inexcusable for such an expensive machine, but I like the macos ecosystem.
Kobo Forma Review: A Formidable Opponent for Amazon’s Kindle Oasis
Calling Jason Scott
I would have to echo this, no problem with perforce, but sayings its ecosystem of plugins is more viable than git?

Maybe 5+ years ago?
The only home grown gaming device I remember seeing in the wild was this pong clone:

BSS 01 (Bildschirmspiel 01)

http://www.pongmuseum.com/collection/rft-tvspiel-ddr-gdr.php

https://de.wikipedia.org/wiki/BSS_01
looks at a big screen filled exclusively with flat text and flat, non-descript icons on a big, flat white background

Yes.
On SGX, I believe the general model is that the CPU doesn’t trust the physical memory backing the enclave at all. But I suspect that the CPU will detect the attack and disable SGX entirely, systemwide, until a reboot.
The interface on Inbox is _much_ less cluttered. I spent an hour turning off things in gmail trying to clean it up after the announcement, and it still looks too busy.

Other specific features are missing that help with email fatigue. As far as I know, there's no way for me to tell gmail to group a set of emails together and only alert / show them to me once per day at a certain time, like you can with Inbox. I can't create custom bundles to hide large groups of emails I don't want to accidentally bury other content (without actually removing them from the inbox). Gmail kind of has the "tabbed inbox", but you can't configure the categories with the flexibility that bundles had. In Inbox, I feel like I can control how much email interrupts me without also missing anything important. I don't get this same feeling with gmail.

The Inbox product as a whole had a strong focus on trying to reduce the interruption of your email and keep your inbox clean. While gmail has taken in some of the features, it hasn't absorbed the core goal of the project.
‘almost every female seemed to wear one’ speaks to how different the world wars where vs what we think of a modern wars where only a small percentage of the population are directly involved.
Norton Utilities was not an anti-virus though, it was an utility package for things like data rescue.

Back then, the stuff from Norton was widely considered best-in-class software... so very much unlike today. Sad how that brand name was ruined.
> Frenchmen are legendarily intolerant of badly-spoken French.

It may have changed now. I have been living in Paris for several years, speaking strongly accented french (but mostly understandable), and I have had no tolerance problems so far, except the occasional person who prefers to speak in english to me.
when was google ever good at UX?
- yep, Atlanta here, Google Fiber needs to be added to this list.
Agreed, I want my late 2014 13 inch Macbook Pro with the latest hardware. Also:

- swap the SD port for UBC C (1 regular USB; 2 USB C)
- move the microphone from the side next to the camera (when I'm talking to someone a slightest move makes loud noise for the other person)
- round the front edge (next to the trackpad)
- add 0.5mm "jump" ot the keys

If someone would make that with OS X or Ubuntu I'd buy it on the spot.
Can we go back to Jinja now?
Tap hold and slide for volume and brightness. It’s faster than the old keys.
This. If I could give you more points, I would. Enough said. Also take back the old Final Cut Pro to really compete with Adobe, and some of the quality of life features they used to have, but oversimplified away.
I fixed this problem for myself by automatically pulling down changes in the background upon opening a new terminal.

Since checking on every terminal open is unnecessary, I check on a probabilistic basis based on how often the backing git repo changes (0.5% - 3%, different repos for vim, dotfiles, configs).
The best class I've ever been to in 5 years of university was a pure maths class (topology and linear analysis) that I took as an elective (I think this is the word). If I'm ever in charge of teaching a class, of mathematics at least, this is how I will do it.

The format was like this: the classes were 2h long, and the professor would begin with an exposition: first a short recap of the previous class, then introducing the new material for the day, new concepts, definitions, the starting point for the day's class. This could take anywhere from 5 minutes to up to 30 or 40.

After that, we were handed a work-sheet. It contained the definitions/summary of the concepts that were just introduced, then a series of exercises. Now this is the core of it: the main part of the class was working through these in order. The exercises were structured so that the rest of the material was learned by doing, by working out through the exercises. They would e.g. ask to prove interesting consequences, or important theorems that followed from the definitions at the start. The professor would point out an exercise, read it aloud, comment on the "meaning" of the problem or what it's meant to demonstrate or similar remarks, then give us some time to figure it out. After a bit, he would ask someone that completed it to present his/her reasoning. Now note that this part required real effort from the part of the professor. I tremendously admire him for this because it required him to listen carefully and think through the proof presented by the student, something which is more difficult than, say, presenting and explaining his own proof on the blackboard. Anyway, he would listen to it, comment ("you could have simplified here", "you didn't consider this case there", etc.), perhaps ask some other students for alternative approaches, or maybe give an alternative approach himself if necessary. By doing this we would learn the rest of the material by working it out from those principles; in a way in a sort of "narrative" that had a thematic "chapter" in each class and an overarching "story" for the whole class.

In summary, only about 10 minutes at the start would be real exposition. This usually amounted to stating definitions or axioms to work with for the rest of the class. The rest of the material -- any theorems, conclusions, etc. -- were worked out.

I have some difficulty concentrating even on 1h or 1h30 lectures. These were 2h and I would be effortlessly engaged for the whole duration. It kind of pains me that maybe the best class I've taken in university wasn't even one in my degree :^)
Without googling, do you know where you organize your contacts in the new gmail update? It wasn't intuitive before, but I think it's even less now.
The design I hate most about google is the delayed moving UI. Like I am about to tap something and something pops up and I tap on something else.
So frustrating.
It looks nice, but does it have that super important "hacking" sound effects every Hollywood blockbuster incorporates into their computer UI scenes?

Anytime I hear those sounds the movie is ruined for me.

Sorry, I just had to let it out.
Looks like Comic Sans to me :-)
People lie on resumes either on purpose or they think they know a technology but they don’t really.
> Amp has native clipboard integration, so content will carry between different instances

By "native" does that mean an X-server's clipboard? So when you're running it on a machine that has no X-server running (a typical server), there is no clipboard?
...and Coleman.
Small world. Thank you!
Archiving web sites
I recently upgraded from the 2015 to the current gen.

2015 pros:
* Better battery life
* Way better keyboard
* More robust
* More useful port selection
* Trackpad is a more reasonable size

2018 pros:
* Way better speakers
* Slightly better screen
* Lighter
* Faster
* Trackpad is not mechanical
* Finger print login is useful

I'd really love a proper "pro" macbook pro, that sacrificed a bit of the thin-and-lightness for an actual professional level of stuff (better cooling, more ports, bigger battery, no touchbar)
Even look at Google Drive. The UI is terrible and slow
Bcos Adobe on Apple environment.
Yeah, after 10 seconds I just gave up and navigated to https://contacts.google.com
Music, performance, too.