skysight-inc/HackerNews huggingface dataset:
> On almost all other devices you could write new data to a flash chip and that now becomes the UEFI boot loader that is used (and can bypass secure boot).

Let me see if I understand you completely.

What you're saying that if an attacker is willing to physically dismantle the machine, he can then, using SPI-flasher HW, replace the UEFI firmware on the machine with a custom UEFI firmware which does not enforce secure-boot...

And thus the machine's security is compromised?

If so, let me just state my opinion: If that's the kind of attacker you are trying to protect against, no matter of security measures is going to keep you fully secure.

And if we're going down that lane: what prevents an attacker this sophisticated from doing the same with the T2-chip's firmware?

What Apple offers with the T2 chip, for most people, has almost zero value, while providing lots of drawbacks over traditional UEFI Secure Boot.

This is all about Apple extending their platform lock-in to no longer only apply to mobile and tablet-space, but also to their traditional computer-line of products.

There's nothing noble being done here. It's just a plain-in-sight money-grab.
It is far from a myth. If it was a myth, salaries wouldn't be increasing so much, while the number of developers also increase. The demand for developers exceeds the supply so much that this is possible.

Do you know any other major industry, where people with little or no formal training can get in and up so fast? Where people in their early or mid twenties routinely make 6 figures? I don't.

The median salary is now above 100,000.
https://money.usnews.com/careers/best-jobs/software-develope...

That's roughly on par with chemical engineers but whereas (almost) all chemical engineers have at least a bachelor's degree, an increasing amount of software developers have no other training than online courses and still make salaries that would make other professionals with 4-5-10 years of education envious.

I love online courses, but try get a job as a chemical engineer (or any other engineering job) with just some online courses. As a software engineer that would only be an issue with some of the most sought after places, like Google.

Yes, I am sure there are a few thousand petroleum engineers in Texas and other niches that make more than software engineers, but generally, engineers make less.
Langar (Sikhism)
This is actually quite a common arrangement at larger companies in the UK.

I don't have a problem with it myself - it's simple to understand, and the company is giving you something of high value, and retaining your services for a minimum period in return.
Also the devs are going to be there for less than 18 months so there is no reason to think in terms of ROI
From what I remember, it acts as a "normal" NVMe device and you can just add its PCI ID and see the disk in Linux…

but in 10 seconds after that it powers the system off because it detects something like an unauthorized OS. Sounds a bit like prevention.
In Europe it's even more like GP said. They salaries are even less adequate than in the USA.
Try using a modelling tool rather than a drawing tool.
I'd still love to see a good tutorial on setting up Vim to work well with rls and all the other plugins. I only really keep VSCode around since it works with rls and sometimes I want to use the autocomplete for codebases that are large enough to really need good autocomplete, but not so large that rls gets bogged down and doesn't work at all anymore.
What about Graham's number?
It's being presented as something revolutionary and new, while that's clearly not the case.

And it provides Apple with the means to enforce platform-lock in, not only on its mobile line of offerings, but also on their regular laptops and machine, which traditionally has been 100% open computing owner by the end-users.

Which is why it is being widely criticized as unwanted, as a misfeature.
The thing is that the data does match the model, extraordinarily well in an extremely fine way.

Each of the view of a quasar described fits many parts of very elaborate models in a very exact way. There's a huge amount of data coming in the form of the spectrum of all these astronomical objects.

One particular detail has changed here but that's different from everything being uncertain, the size and properties of the whole system being up in the air and so-forth.
In a chip that has "secure" in its name, it's quite likely that a sudden system shutdown is intentional..
You haven't seen my AWS bill! Ayy lmao
Even if you turn secure boot off you cannot grant for love or any amount of money permission for software of your choosing to access the built in storage which is pretty much required for normal people to be able to run software of their choosing on the machine.

Few people will buy equivalent external ssd storage for 300-500 and carry it around with them to have access to a second OS.

There is absolutely no reason to believe that they will ever act to increase your ownership of your own device and every reason to believe that you will ultimately have about the same privileges as someone using their employers machine at work while being expected to fall full freight.

It's especially bemusing when you understand that evil maid is almost nonexistent in reality while your actual loss of freedom has real effects now.
It’s a common misconception but there are rich folks in poor countries, and they can be potentially be persuaded to invest locally.
Maybe choose another name?

I mean: Good luck trying to out-SEO Google re-using their own term[1] :)

[1] https://www.ampproject.org/
Oh. I thought "The process is entirely analog, ie, there is no refresh circuit that looks at the voltage and says "that's almost a ON, better fresh up the voltage"." was talking about DRAM as a comparison. Sorry about that.

> I did disagree with the wording that made it sound like there is a refresh process that happens repeatedly.

Repeatedly continuous...? Nevermind though.
Place I worked at the laptops often had one core pegged at 100% load by some disk monitor that was competing with the AV software. I left very quickly and you should too.
Then why aren't they already investing? Why does their local economy not already have companies paying high enough wages to attract highly talented developers, due to their careful investments? Those wealthy individuals can be convinced, perhaps, but only if they're open to idea and the risk to their own personal estate.
could start with something like this https://github.com/kovasb/gamma
Is Satoshi Nakamoto Turning in His Virtual Grave? – Good Audience
Sounds like navigation might be different, but the linked page is a bit cryptic:

> Fast, precise cursor movement without repetitive keystrokes or fancy expressions. Look where you'd like to move, and type the token. That's it.

Digging a bit more, I found this [1] (in addition to the normal h,j,k,l, etc.):

> Jump Mode

> Press f to switch to jump mode. Elements on-screen will be prefixed with a two character jump token. Type the characters to jump to the associated element.

> For files with syntax support, you can jump to class, method, and function definitions using symbol mode. Hit Enter in normal mode to use the symbol finder, which works identically to open mode

[1] https://github.com/jmacdonald/amp/blob/master/documentation/...
Graded salary based on a mix of tenure and experience, with clear performance goals tied to moving those salary grades up sooner. This works very well for our grad programme.

Also; most people leave managers not companies. So if pay is right, and the people are otherwise a good fit, it might be company culture that pushes them out.
Look, if you want to talk economics and get taken seriously, you need to get your terminology straight.

It's not an economic shortage when you're in a store full of goods that you can't afford. It's a shortage when the shelves are empty.
"CONFERENCES

Plastics Conference

Apr 30, 2019

AWS developed this conference featuring the latest advances in manufacturing, fabrication, installation and examination related to thermoplastics welding and joining.

Shipbuilding / Aluminum Conference

Sep 17, 2019 - Sep 19, 2019

Industry experts will deliver the latest research and innovations in both the Shipbuilding and Aluminum industries. Aluminum is one of the most versatile and widely used metals in manufacturing, but its unique chemical and physical properties can also make it one of the most challenging to weld. The critical importance of welding in the shipbuilding industry will also be addressed by providing current information on emerging technologies being developed for shipbuilding applications.

2019 Aerospace Joining Conference

Sep 23, 2019 - Sep 26, 2019

To bring together experts from Research & Development, Manufacturing and Applications in the areas of advanced welding and brazing, adaptive manufacturing, single crystal repair and advanced repair technologies for the aerospace and IGT engine industries.

2019 Welding Industry Summit

Oct 15, 2019

SAVE THE DATE

This year's Summit will be a combination of interactive presentations, panels, and round table discussions intended to give each attendee current information on how more value can be brought to their welding operations, plans, and projects."

Does any of these look like to you as a single tool conference?
What country is this from? In the US the case law is iffy and in practice it seems like companies aren't willing to go to court for it [0].

[0]: https://www.hrdive.com/news/when-an-employee-leaves-can-you-...
What is industrial alpinism?
“Bad programmers worry about the code. Good programmers worry about data structures and their relationships.”

I think this hits the nail on the head for me: abstract structure first, the choice of language C/C++/Rust/... is then a secondary consideration.
This is just an amazing resource. I just found it here and have gone through most of it. At some point I found myself ignoring the goal and just playing with git commands to see the visualization of them. And for the most parts, it's very great!

I need to give this to some people I work with.
> you deserve to serve consecutive life sentences in prison and whatever harm befalls those in prison who get found out as pedos

Pedophilia by itself is not harmful to anyone. It is those who physically act in their urges or support the creation of CP media that are harmful. Passive consumption is not something I would blindly use as reason to wish someone harm. Instead I wish them psychological support to overcome their abnormal sexuality. Rehabilitation beats punishment any day for behaviour like that.
People end up compassionate and empathic after suffering indeed
The shelves are empty because all of the goods are elsewhere. We've already established that.

By your self-contradictory definition, the term "shortage" loses its meaning and ceases to exist. Because with enough money, you can always buy what you need.

If you need a few tons of platinum to do something and discover that (hypothetically) there isn't actually that much here on Earth, you could build spaceships to go mine it from the asteroids with enough money. Bam! No shortage.

In the absence of sufficient money to go mine the asteroids, though, there would be a shortage of platinum on Earth. Except, your definition doesn't allow for shortages, because someone just needs to come up with the money. Maybe no human can afford to access it, but it's out there in the universe somewhere, so there can't be a shortage, right? I don't think that's a useful definition.

It doesn't really matter if you take me seriously, though, so I'm not going to keep expending effort trying to convince you to change your mind when you're not willing to consider my ideas.
I'm not sure I agree with the idea that there are few ex-Googlers. I am only one person, but it seems like there are a very significant number of ex-Googlers, likely more than current Googlers.
That already exists. <iframe name="my-iframe"></iframe><a href="/mycontent" target="my-iframe">load it!</a>
> What you're saying that if an attacker is willing to physically dismantle the machine, he can then, using SPI-flasher HW, replace the UEFI firmware on the machine with a custom UEFI firmware which does not enforce secure-boot...

Yeah, that's kind of the classic evil maid attack, and it is not unheard of for various spy agencies to dismantle devices to gain access or install bugs.

> If that's the kind of attacker you are trying to protect against

That is exactly what the T2 chip is designed to protect against, and more.

The T2 chip also runs all of the encryption/decryption for the integrated storage, this way all data on the flash is encrypted at all times.

I can imagine that the T2 chip over time will be able to do much more to help provide extra verification and security to the device and help keep users safe.

> And if we're going down that lane: what prevents an attacker this sophisticated from doing the same with the T2-chip's firmware?

Because the firmware on the T2 chip is signed and the way the chip is designed the only way to get firmware on it is to decap it because it is stored internal to the chip itself.

With your stock standard x86 motherboard that is not the case because the firmware is loaded from an unencrypted and unverified flash chip.

> What Apple offers with the T2 chip, for most people, has almost zero value

We'll have to agree to disagree, because the T2 chip also does full line-rate encryption/decryption of the storage with no OS involvement at all. This means if your laptop falls in the wrong hands, now people can't get at the data even by reading directly from the flash chips.

----

You are the one that claimed that the article was fanboy-fluff, I just described a feature that no other machine has... and you immediately consider it a money-grab rather than something to laud Apple for. Yet SecureBoot is good enough? Why not keep improving upon the status quo? Why not make it easier for people to keep their data private and secure?

It's all about defense in depth, and Apple added one more depth to their platform.
Yeah whatever happened with the Rolling Jubilee organization, which deliberately bought and forgave people's delinquent student loan debts? [ http://rollingjubilee.org/ ] Has anyone interviewed any specific person whose debt was abolished by this group? Were those transactions totally anonymous or arms-length or whatever the term is?
I'm seeing a lot of comments from a HR perspective or that once they get the training they leave. To me it's much deeper than that. This industry of software development only recently has exploded because it's much more mainstream and the demand is growing.

I feel if we compare it though to other trades the issue is simply the industry as a whole has top-ended and completely changed itself the last 7 years each time. I've seen Senior Devs take a junior role at their next company simply because the rate of change is so fast.

This is not a trade like plumbing or even electrical work where once a way of doing something is set in stone and you'll do things a certain way the rest of your career.

If you told me 10 years ago I'd be writing javascript all day everyday...
Even Butterflies are programmable if you are brave enough.
Five Black Fridays at the mall food court
I have twenty years of impressive experience, work is highly complimented, took me a year last time to find a job, was one month away from homelessness. “Shortage” self inflicted.
Rust sounds like the dream. I gotta check it out sometime
Inside the court of Ashurbanipal, king of the world
Frankly, I did the same. For me the reasons were:

- Personal growth: Devs in that company were nice, but not stellar (I was the most "senior" one after a couple years), so I couldn't learn much from my peers.

- Nature of the business: I moved from customer service to product development, which is a personal preference.

- Money: The new place paid about 40% more.
When is the last time Microsoft applied that strategy?
And here is Matt Taibbi saying the same thing about the news media - https://taibbi.substack.com/p/chapter-1-part-ii-the-ten-rule...
Idea worked wonderfully for me with tiny pet projects.
Echo products are always on things that can afford to use main application processor to do the hotword detection.
A low-profile tenkeyless mechanical keyboard might be an option: https://www.amazon.com/Mechanical-Keyboard-Extra-Thin-Switch...
Computer vision: how Israel’s secret soldiers drive its tech success
That was one of their grievances, yes. What's your opinion on the others on the list?
Indian Supreme court ruled, 2 years ago, that Privacy is a right (1):

(edited for brevity)

"..Supreme Court ruled on August 24, 2017 that the Right to Privacy is a fundamental right for Indian citizens under the Constitution of India. Thus no legislation passed by the government can unduly violate it. "
The reasons are twofold:

1. Managerial sense of urgency. Hiring a junior means training them up, for harder and longer than a more senior hire. And probably tie up your remaining senior staffers for longer training them.

2. A desire to fix the problem permanently. A senior hire will be with the company a long while. A junior hire you train up is going to leave when they're more senior than they role they filled. Especially if your corporate promotion and salary policies are rigid, you may have difficulty retaining junior employees once trained to the level of a senior.

Until managers believe that hiring and training juniors is a long-term strategy that can be planned and budgeted for, the junior glut - senior shortage dynamic will persist.
Yes, I'm dealing with binary formats containing binary and decimal floating point in various sizes. I also sometimes need to talk to C APIs that take _Decimal64 and friends. Rust's interoperability is hampered by the lack of basic types.
Maybe it doesn't. But the only way we have of knowing that is to construct an AGI and demonstrate that it can be done in roughly the same volume and power consumption as a human brain.
Rust is a wonderful language, but I still have the impression that it is not stable as of 2018. All the toys I've made to play with it during the last years went deprecated quickly, especially if you rely on the ecosystem of packages (web server, database, ...).

In addition, there was this thread: https://internals.rust-lang.org/t/concerned-about-rust-2018-...

All in all, Rust will be great when stable (including the ecosystem).
CAN GHEBREYESUS TELL THE WORLD THE TRUTH ABOUT EBOLA? – ASKS SCIENTIST DONGEN
Oh, absolutely. Great way to ensure sure the door staff are actually checking the ID against the ticket sales records 100% of the time.

The problem is, night clubs ain't developing this stuff in-house. And whoever develops this stuff and sells it to nightclubs will discover they can make more money if they sell the machines to nightclubs _and_ the data to the adtech industry.
> reasonable

That's debatable.
There is no language called C/C++. There is C, and there is C++. The answers are qualitatively different for the two languages, so conflating them, in any context, can only ever produce confusion, noise, and misery.

The answer is that C++ is replacing C anywhere C is not dug in too deeply -- mainly OSes conceived long before C++ stabilized, and specialized embedded environments where manufacturers are actively hostile to change. Rust is also replacing C, in the same places, but of course still overwhelmingly more slowly. In a few places, Rust is used where C++ would have been, such as in Mozilla's page rendering, but the difference between Rust's and C++'s expressiveness is not, generally, big enough to overcome structural drivers. Both are so overwhelming better in every conceivable way than C that only inertia maintains any remaining niches for C. It is just so overwhelming better to code Rust or C++ than C, and so much very much C, that there is no need for either Rust or C++ to see the other as competition.

In the future, Rust and C++ may come into competition, but today it is more like motorcycles vs tractor-trailers. (Back in the '90s Jonathan Schwartz compared C++ to another language, saying if the other was like a seaplane, C++ was more like a boat anchor with feathers.) C++ still has historical baggage Rust lacks, but that is changing. C++ is getting better very fast, so that Rust is chasing a moving target.
Well the XR is the 10c
They did it to Nokia a few years ago. Skype is an ongoing project.
Thank you for this piece. I am working on a game, that I am prototyping in Go. In my prototype, I have just entered the realm of multiple threads, and for this project to work out, it needs to handle quite a lot of threads working on the same resources.

While I have not personally dappled this far into concurrency in Go myself, I have read plenty of articles where developers recommend using the mutex package rather than the goroutines themselves.

But I've also read about Rust's thread and resource handling -- and I'll admit, I've been looking for an excuse to write some Rust again -- and so inspired by this entry, I've decided to finish the prototype in Go, and build the real version in Rust.
https://dilbert.com/strip/2018-11-22

;)
Ask HN: What will be the tipping point for Facebook?
I think it’s clear now that Facebook is a horrible company that operates with machiavellian efficiency, lacks any human empathy, and has applied deplorable methods to deflect fundamental problems of the platform instead of actually fixing them.
Still, they keep on going just fine with a slightly dented image, while ads dollars keep pouring in.
So, what needs to change for Facebook to pass a point of unsustainability?
It looks just like another “kill someone on 5th avenue” scenario to me.
I don’t mean this the wrong way, but maybe the issue is something with you?

If you’re having trouble getting interviews, it’s possible your resume is not great, or you are applying to jobs that have a bad fit.

If you’re getting rejected after interviews, it’s possible you need to practice programming interview questions.

It’s also possible you haven’t achieved a high level of skill yet. If this is the case, spend time building your skill set and competence.