skysight-inc/HackerNews huggingface dataset:
> Factually and objectively wrong. This does nothing for end-user security which wasn’t already solved by UEFI Secure boot half a decade ago.

UEFI Secure Boot is a noop security-wise if you don't have a TPM to store keys and validate signatures, otherwise it's trivial to bypass. This whole thing implements UEFI Secure Boot, and T2 is the TPM.

Secure Boot can be disabled to install Linux, the only difference from before T2 was introduced on Macs being that Linux fails to initialise/access† internal storage behind T2. Using either a pre-signed loader with MOKs in NVRAM or your own signing keys is terribly involved[0][1] and adding keys or disabling SB is not always supported, even on PCs.

† For reasons yet unknown which could be any of a) bug in T2, b) lack of hardware support within Linux, c) intentional security measure, d) intentionally crippled feature. Judgement as to whether this is a glitch, undocumented hardware behaviour, or a mischievous scheme is currently impossible and an open question; stating anything one way or the other is currently based purely on personal beliefs, not facts.

[0] https://wiki.archlinux.org/index.php/Secure_Boot

[1] http://www.rodsbooks.com/efi-bootloaders/secureboot.html#fin...
Isn't that just ridiculously slow animations for the most part? I still use an ancient OnePlusX that I got when it came out and I've disabled all UI animations, toggling most settings (with legitimate exceptions like activating the wifi hotspot feature) feels almost instant, certainly nothing close to 300 ms. Admittedly, I haven't used any iPhone in many years, so I can't really compare.
I found The Book [1] to be pretty good, but it suffers the same problem that I find infuriating about programming language books in general. They have to target one specific proficiency level, so someone less experienced is going to get left behind, and someone more experienced is going to get bored out of their mind.

As a somewhat experienced Rustacean, my biggest frustration as of now is the lack of a comprehensive reference where I can look up very specific things (e.g. the syntax for byte string literals, or an exact definition of how borrowing works in some particular edge case). There is [2] but as it says on the first page it's incomplete.

[1] https://doc.rust-lang.org/book/2018-edition/index.html

[2] https://doc.rust-lang.org/reference/introduction.html
Natural Environment Benchmarks for Reinforcement Learning: We Challenge the RL
I don't mind getting downvoted but can someone please explain why - this is an honest question. Many devs have scoffed at interviews when I've asked them some really basic quesitons such as finding max element in an array.
If you're comparing, say, a 10 KLOC C++ program vs. a 10 KLOC Rust program, then the comparison is fair IMO. The end user doesn't care whether Rust chooses a different compilation strategy for dependencies.
This is already a better response than I would expect from most multinationals. Thanks for sharing.
Well if you focus on components only in your app then sure, not much needed. But complex apps need much more, like testing infrastructure, routing, data layer, service layer, tons of utility functions (last time I toyed with React it did not even have debounce ... Library for UI w/o it seems weird for me) and likely something else.

But hey, most apps are simple, so no need for all the above. I would say Ng/Ember are more specialized / niche.
Pff, my entire hard drive is scanned every friday. Friday is slow day on my work laptop (Win10 with McAfee)...

At home I run KDE Neon, when people see me use that laptop (1 y/o Asus, core i5, 8 gb ram, standard ssd) they always comment how snappy and fast everything is and ask me what laptop I use. Even my neighbor with his brand new Win10 desktop with NVMe drive and new i7 cpu.
Can recommend the Wellcome Collection museum if you're in London. It's close to Euston station / the British Library / the British Museum, and as far as I know it has free entry (at least it was when I went there last time). They have an interesting collection of old medical instruments and Victorian medical ephemera.
Am I the only one who really can't stand rust?

I was and still am very much in favor of the ideas and concepts, but when I actually tried to use it my opinion on it turned by 180°:

- The syntax is awful
- No dynamic libraries
- Slow compile times
- Many checks are too stupid to figure out some valid cases (maybe that improved meanwhile)
OTOH, we have phones, which are telephone, TV, radio, notebook, phone book, calendar, calculator, computer, compass, GPS, camera, video recorder, sound recorder hybrids.

I'm not sure why do you think that algorithms for solving different problems will require different hardware.
Show HN: Time Track (Firefox Add-On)
A theory of Mac future
This seemed like a good idea at first, but I have a suspicion that it would mess with schedules.
Scream Monique
You're being paranoid. There is furniture around that's 100s of years old where the glue still hasn't failed.
> FB has a lot of empathy, and it's the most (internally) honest company, and the most efficient at fixing them [of all companies I've ever worked at]. You're a victim of highly biased reporting/information.

Well, it may have a lot of empathy internally, externally, it just does not show.

FB & Twitter & YouTube seem to play the very same game: while they do provide great connection and progress with their tools, they also heavily contribute to setting the world on fire by giving everyone tools that highly benefit (and are incentivised by) extreme/clickbait/fake information.

And they seem not to be willing to act on it. Twitter is particularly demonstrative by its apathy (and its CEO discourse) regarding bot accounts. YouTube by its conspiracy contents. Facebook by its displayed ingenuity about their knowledge of what happened ("oh really? oups, sorry, nevermind, won't do it again").

It's like they act with social data & behaviour exploitation such as oil companies act with crude oil: a spill here and there? so what? we destroyed your ecosystem? listen, we bring so much more to the world, you can't blame us.

It's really like... boys with toys.
Can you imagine how awkward it would be to discover it a week into their new job?
Neither the comments nor the view count are necessarily legit; both can be created by bot traffic.
That's not a scam.
> And cargo doesn't recompile libraries every time.

Given how often Rust updates, it might as well.
The author doesn't say you should use a language without GC, but minimize its effects. There are techniques to avoid GC churn by reducing allocations and the subsequent cleanups.
You're missing the group which Java, C#, Swift, D and Go co-inhabit. Somewhere between "systems" and "scripting".
From your username, I'm going to assume you're in the US. :)

I've been working fully remote for six years now, and have recently started hunting for my next remote gig. So I've been in a similar boat.

I have had some success with reaching out to recruiting agencies in urban centers of my general region. Explain that you're an experienced remote employee, and that you are only available for remote work.

Surprisingly (having just gone through hiring two remote employees for my current team), it can actually be pretty hard to find experienced remote employees or even employees who want to be fully remote. Plenty of applicants seem to totally lose interest when they find out there's no office to go into or that they'll have to be pretty much entirely self motivated. Bizarre, but to each their own.

Actually interviewed recently for a firm who hired a recruiting agency explicitly to weed out all the applicants who aren't remote-friendly because they were tired of getting into interviews and finding out that the applicant didn't read the remote-only part of the job announcement.
I had the same thing, I uninstalled GitLens which fixed it (or at least made it rarer). Might be one of your plugins?
That's what she said to me - she may have misinterpreted. There were other aspects of life in Saudi Arabia that she didn't like, so it wasn't her only consideration, but given that she thought it was the case it was a clear deal-breaker.
Facebook will continue to harvest and sell people's data for as long as people are willing to give it to them. The conditions for Facebook's ultimate demise are:

1. Non-technical people are educated about their data being sold to advertisers who are in turn selling them stuff that is destructive/unhealthy. e.g: getting them into debt to buy things they don't need to impress people they don't like!

2. Willingness of these people to pay for storing their data in order to control their personal details and who can see them.

3. Availability and awareness of a low-friction-to-adoption alternative platform where people control their own data which has similar features to Fb's "core" products and biggest "child" products (Insta, WhatsApp). The "alternative" needs to be: distributed/decentralised, encrypted and mobile-first.

I am bullish on all 3 of these things and feel that it's only a matter of time before the alternative is available.

As others have said, Fb has a massive cash reserve and they won't go down without a fight. My only hope is that the EU will take Fb to the cleaners under GDPR and that will keep the Fb execs busy for long enough for the alternative social network to win!
I’ve been reading these kinds of comments for several years now. Don’t get me wrong- I despise Facebook and these other exhibitionist platforms in general. I think there’s some truth and less teenagers using Facebook, but this notion that it’s a dying platform is wishful thinking at worst or speculation at best.
And this is why I used to have a laptop in my drawer I used for logging into the proper intranet, booking holidays and organising my pension.

All my actual work was done on Unix/Unix-like machines on our own old network, something we clung on to after acquisition.
Author is annoyed with a website, thrilling read.
I was going to try out Rust, then I saw this on the download page

curl https://sh.rustup.rs -sSf | sh

Really?
Could you list them please?
I didn't downvote you.

Cargo surely recompiles common dependencies across crates, unless one uses the workspace trick and even then recompiles do happen.

Just get Gtk-rs, get nightly and then trace the build log. I once even mailed Rust devs about it.

Incremental compilation still isn't up to incremental compilation + incremental linking, which is why I explicitly mentioned both on my comment.
How physical addresses map to rows and banks in DRAM (2015)
The Expanse. Books and show are both great.
> As a jr employee they’ll never rise to chief architect

This is so important, as a relativley junior developer at a 6 person web dev shop, the owner is the only other backend developer. I have no room for climbing, even if I get a job title upgrade or a raise, my responsibilities and the level I work at won't change. I will handle the day to day backend and the owner works on strategic choices. There is only so much impact I can make in this position
The irony. Easymotion was created as a better precisejump. Precisejump was created or at least uploaded in Feb 2011.
JLink – Share links to your code
That would get rid of obsolete laws, but I'm not sure people would enjoy all the side-effects such a law would have, at least in the United States.

For example, many more opportunities to cause government shutdowns, and many more must-pass bills that can be loaded with pork.
Yes.

The script is less than 400 lines, and is pretty easy to audit. We wrote it in such a way to prevent some issues like "if the download gets cut off only part of the script gets run." It's served over HTTPS.

You can also probably get an install from whatever package manager you use, if you prefer that.
Could you not argue that the move towards hiring developers from bootcamps is not a step towards on-the-job training?

I know of very few examples of knowledge industries where you can go from nothing to "able to pass an interview" within 2-3 months of intense study. The same goes for self-taught developers that learn on the side, and then use those skills to build a portfolio.

I've worked at places where they hire heavily from bootcamps, and a small team of senior developers are tasked with mentoring and training these entry-level developers. From my experience (in the UK), the issue is that people "are" hiring juniors, but the market has become flooded with entry-level and junior-level developers. Bootcamp graduates have become the entry-level, on-the-job trained types, whereas university graduates are expected to have an acceptable level of knowledge to be able to hit the ground running in a junior capacity.
The only way to properly learn git.
How does data-centric work? How is it different from OOP? Can someone elaborate for a person using python?

Also, what opinion rust devs have over golang?
To clarify two things you've said:

1. Hacker News won't let you downvote someone who replies to you, so it is literally impossible for you to have downvoted in this situation.

2. Both of you are correct, because you're talking about different things. Evgeniy means "You only need to compile your dependencies upon the first build", and you mean "if I use the same dependency in two projects, it will be compiled twice, once on the initial compile of both."
Sorry, misread your question as "So what if the brain is not just matter?"
Microsoft will not "kill" atom because they want to have two "horses" in the race.

The strategy of having multiple products in a given category is well understood by many segments (think about how many beverages CocaCola has!).

MSFT might "consolidate" or "unify" the underlying engine for Atom and VSCode, but I highly doubt they will discontinue/terminate Atom as a project/product given the goodwill damage that would have in the wider Open Source community.
Snippet: How to Get List of Dictionary's Key in Python Using Unpacking
C product is called UNIX.

Languages were always a product, they either came with the OS one bought, or add to be bought as extra tooling.
IoT-Cybersecurity: Regulation Ready [pdf]
You are not.

- No dynamic libraries

This is technically incorrect, but practically correct, by the way.

> (maybe that improved meanwhile)

The next version, released on December 6th, ships "non-lexical lifetimes", which does make the borrow checker smarter.
Is this not DriveSpace all over again?
https://en.wikipedia.org/wiki/DriveSpace
The trade-offs of locks are accidental locking like deadlocks; message passing removes this trade-off but is less flexible, and dataflow further constrains the use of explicit synchronization. It's part of the larger argument for declarative approaches enabling equational reasoning.

Task/data parallelism bear to be mentioned because they're common terms; thanks for pointing it out.
> “It was very exciting,” Barrett says. “Then it crashed into the wall, which wasn’t ideal.”

Reading this reminded me of the two Wright brothers, who had similar issues, and similar people around them, not believing it would work.

Kudos. It sounds pretty amazing to me.
> what important purpose would they serve?

To spread the knowledge how to actually write C code that meets a certain quality level regarding security and safety.

And not that writing C89 without any sort of static analyzers is still acceptable practice.
End users run "cargo clean" really rare (I can't even name examples - really rare). If we compare regular compilation in C++, then we should take regular compilation in Rust, not something exceptional.
A programming language won't make you a good programmer in the same way as a brush won't make you a good painter.
Darwin among the Machines
Yet many still haven't learned to use lint like tooling, initially developed in 1979.
Congratulations, you just argued against TV, the internet, cars, and everything else that enables stuff :P
I did say "major" for a reason :)

I don't personally hear from many self-identified Java/C# people who are coming to Rust. Maybe they exist and I don't hear from them, or they don't describe themselves as such.

There are some Go developers, but it seems the languages attract very different types of people, so there aren't many. There are some people who do love both.

There are only a few people from D (of which technically if you squint I'm sort of one, incidentally.)
I would also not suggest using the exact company name/URL in the email address used to sign up. One time I couldn't log in to my password manager service and after a _lot_ of back and forth it turned out that after some years my email was somehow scraped from their DB for using their domain name in my email... So now I always go with something obscure but still traceable back to the service it was used for.
A simple but completed buyapp for react-native begginer
They should take advantage of wasm and offer a web version.
My theory is that Facebooks users will quietly stop visiting the site, as user generated content is replaced by ads, post from various companies and political nonsense. It depends on your circle of friends of cause, but I think a large number of Facebooks users have seen a trend towards decreased engagement with friend on the site. In the end friends are the reason for going to Facebook, when friends don't post anything, you just start visiting the site less and less, until one day you've logged in for the last time.

Facebook will however be able to survive for a VERY long time, due to groups and Messenger. They have effectively kill the forum business for a large number of communities. Those communities will have to be rebuilt.

In the end people don't remember or even care about Facebooks missteps. If they did most politicians won't be elected for more than one term. A small number of us care and we don't have Facebook accounts anymore, the rest are outraged for a week or two and then it's business a usual.
The Conference on Neural Information Processing Systems No Longer Has 'nipples'
If you're working in the game industry, and your repository includes a lot of huge binary files that are mergable, perfoce is a godsend.

Also, p4merge is the best merging utility for any VCS, and I always install it alongside git if I work in Windows.
I'm not aware of any paintbrushes that refuse to apply any paint unless you hold them in a certain way. They may apply it poorly, but you're still getting some paint on that canvas.

I think a more proper tooling analogy is safety tools, like the Saw Stop. They don't guarantee that you make a good construction, but they do either prevent or significantly reduce the chance of you losing a thumb.
Getting Started with Kaldi and Speech Recognition
Spatial Information Systems
There should be a submission guideline that disallows such useless titling.
> This makes me want to build model rockets again..

If you need FOSS app for design & simulate model rockets -- use OpenRocket.[0,1,2]

There are many tutorials on YouTube.[3,4,5,6,7]

[0] http://openrocket.info

[1] https://github.com/openrocket/openrocket

[2] https://sourceforge.net/projects/openrocket

[3] https://www.youtube.com/watch?v=JCU8QRVkdYQ

[4] https://www.youtube.com/watch?v=1pp-mVTBd14

[5] https://www.youtube.com/channel/UCIUaeJ7GV_WPTp26NIkg4rg

[6] http://www.youtube.com/watch?v=egHbZUEr_Co

[7] https://www.youtube.com/channel/UCeWSz41c1ic4pBmUIiZQsTQ
I can envision a scenario where T2, when booted with Secure Boot disabled, tries to protect a Secure Boot OS and user data stored on the internal mass storage device in the event of the user subsequently re-enabling Secure Boot thus adding a layer of guarantee that everything is safe even during the time window when Secure Boot was disabled.

If intentional, this behaviour is nonetheless not documented in the whitepaper.

In such a scenario, a possible solution could be to offer an option to force an internal disk erasure upon toggling secure boot, in which case the internal device would be cleared for non-secure OS access.
I have an HP EliteBook with an i5 processor, 8GB RAM, and an SSD that’s about 70% empty (only 30% space is being used). It runs the latest Windows 10 image from work and is slow as molasses. Almost every action I take, be it a mouse click or hitting a key or switching between applications, takes a few seconds or much longer. I thought it’s a McAfee issue, but the CPU usage is above 50% almost all the time and this usage is across many processes (whose names I don’t understand), not just McAfee.

Since it’s a work image of Windows, it has policies set to prevent me from changing many things.

Where do I even start troubleshooting this issue and finding the culprits? Is it just a CPU usage issue and/or some kind of I/O issue? I haven’t yet tried using something like Process Explorer (from the sysinternals tools) to get a clearer idea of what’s happening (though I’m not sure if that’d help).

I’m thinking of putting Linux on it as an alternative.

Any and all suggestions are welcome and appreciated.
I honestly don't know why people would want to navigate code using jump-mode/easymotion. I've found it far more confusing than just searching for the word.
Does dav1d support scalability, such as spatial scalability? Is is possible to decode only 1920x1080 frames from a 3840x2160 video (if the video has been encoded with spatial scalability)?

It would be nice to be able to decode smaller frame dimensions with faster decoding time. That would be useful for viewing 4K material on computers which can't decode the full resolution.

The same for 10- and 12-bit videos - it would be nice to be able to decode a 8-bit version for 8-bit displays with faster decoding time.
Show HN: Networking Emails – Email templates to help you grow your network
https://docs.microsoft.com/en-us/windows-hardware/test/wpt/
A language (programming or otherwise) is much more than a just a simple tool. It's a way of thinking. A language that guides you toward good solutions definitely makes you a better programmer if you give it a chance.
A trucker can cut road damage 10x just by adding more axles. This saves you money. But they'll only do it if they save money too. If everyone has to pay for wear, then the truckers have a reason to make those upgrades.
Handle Switch Case in Python with Dictionary
So you agree that a tool does not make a good programmer.
As a junior, the switch job raise is much higher than that, especially if you decide to move to a larger / more active city (which is not that big of a deal as a junior). During my first job I got raised 12% over 2yearish, and swapping and moving to a larger metropolitan area brought an additional 30%-45% (depending on which offer you looked at). Now ofc there are other factor (higher life cost), but still that's massive.
How are those 2.2B monthly active users counted though? Does a Messenger login count, does a Facebook login button on a third party site? If you counted users as someone who spend at least 30 minutes on Facebook.com (or their app) during a week, or said that an active user is someone who posted at least twice in four week, I doubt they'd have even close to that number of active users.
I come from C. What got me started was the O'Reilly book, Programming Rust by Blandy & Orendorff. (It cultivates the your sense of snobbery too. Imagine code examples using lists of "murderous Renaissance artists".)
No. I wanted to like it, but a lot of stuff (standard type names, syntax) is different just for the sake of being different.

I wish D would have won the C++-successor race.
> People end up compassionate and empathic after suffering indeed

I agree, but suffering is not (I hope) a prerequisite to becoming compassionate and empathic. These qualities are inborn for most people. Perhaps suffering makes people more inclined to put these into practice more consciously or more naturally.