skysight-inc/HackerNews huggingface dataset:
Thanks - This is exactly what I was doing thinking back on it! I found it surprising because I landed on the same answer they did even with my misunderstanding of the statement. Ultimately I ended up figuring out this sequence:

> 1 + 1/2 + 1/4 + 1/8 + ... = 2

But this now seems like I got kind of lucky, and it might not always hold up generally.
Adobe Capture (mobile app) does that. There are also several others.
GCRA rate limiting
Fever is likely a mechanism that the body exercises to fight infections, just the way diarrhea is probably a way for the body to flush out vira and bacteria quickly. In both cases, excess can be dangerous but that doesn't mean they should be stopped per default.

Would you also give your kid anti-diarrhea and let the disease spread in order to stop the immediate unpleasantness?
When it comes to MSRs, thorium is a distraction. The benefits of MSRs have very little to do with the presence of thorium.

It's important for MSR proponents to focus on the actual benefits, rather than fake benefits, so they don't make bad engineering tradeoffs.
Continuous delivery for your profile picture
But the end user certainly doesn't care how long the program took to compile,which is something the author lumped together with runtime.

But end users do care about programs not crashing and losing whatever they were working on, they care about features, and they care about how long it takes for them to get the features they want, all of which are impacted in some way by the language and tools used by the programmer.
Thanks, but the product is not SaaS at this time, its on-prem, so pricing is not so relevant..

Docs & other resources will come along with open-sourcing the code
iOS/OSX Notes app
I haven't used Filezilla in a _long_ time -- is the malware optional? I imagine that most EU governments image their machines, so they IT departments likely aren't installing the malware.

And there is also the consideration that governments will continue to use Filezilla even if there isn't EU funding to make it more secure -- malware and all.
CVE-2018-5808 error within the “find_green()” func in LibRaw
Fevers are used by the body in an attempt to weaken invading bacteria and viruses, and make it easier for the body to heal.

You don't want to stop a fever ~ just keep it within the safe zone where it's healing, but not dangerous.
It seems the article was written as an experiment to gauge people's reaction on a critical Elon article. Not much credibility.
I created a fluid simulation in unity last year, with the goal being to use it to simulate flowing flames. I had to write my own fft on the gpu to get it to work. You can see the results here:

https://m.youtube.com/watch?v=KcLz3yAqqyI

https://m.youtube.com/watch?v=jWu7yWw_jBQ

https://m.youtube.com/watch?v=G9l1PP0-rDY

It’s up on the unity asset store too under “physics based flames”. I was thinking about doing a writeup on it for hn since it was a pretty interesting journey making it..
That’s like saying nothing can matter beyond the spatial extent of your body. Just another dimension.
Because in most people’s threat models, it’s still a win.

Biometrics do three things:

- It greatly reduces the friction of “showing” who you are.

- It moves the mechanism into an “off-main-CPU” chip, while the main CPU just sees limited APIs, and strong crypto which can be rekeyed. You can’t rekey your bio-signature, but this architecture is better in a number of ways.

- It creates a non-digital interaction as part of the auth flow.

I personally subscribe to somewhere between “not a wrench” and “not Mossad” security: most things I’ll tell anyone who will hit me with a $20 wrench, and I’m definitely not in the business of trying to stop Mossad reading my papers.

From that perspective, my security doesn’t need to be better than biometric on almost anything, because that’s good enough to make a wrench (or a warrant) a cheaper option — so I don’t care there are exotic attacks like copying my vein pattern, printing a fake hand, and touching things.

It also stops my main concern from the government: warrantless mass-surveillance. There’s a scaling limit on using fake vein prints to break into things. And the non-digital step forces an actual interaction.

Frequent, low-friction requests also allows for minimizing credential caching and for non-digital requests for confirmation before proceeding. This helps a lot against malware and escalation attacks.

Note: every power cycle and few days, as well as “major” actions, I have to use an actual password — I mind this less precisely because I don’t have to use it as often. So the biometrics are also only a low credential auth when the device is already authenticated through a better mechanism. Is this perfect? No. But again, it’s a numbers game.

So in most people’s usage, biometrics are a huge solution to a tricky set of trade offs, while even in the really secure setting that you’re worried about fake hands, it remains a useful part of multi-factor because fake hands are complicated to make and deploy.
Danger for Swift 1.0.0
Sometimes you don't make enough money to retire early from a combination of bad luck and poor financial decisions. In my career, I followed a pattern of going to a company just a bit too late to get the really low priced options. I've ended up with dozens of former co-workers who are multimillionaires. I had a family and was (in hindsight) too conservative about when I went to a company. I also was a "paper" millionaire during the dot-com boom. The start-up where I worked was bought making my options worth millions. There was a 6 month lock out and during that time the stock price went from $75 to $0.75. My options were at $2. Did that make me a bad developer? At another company I had options at $7. The stock peaked a few years later at $60. I never exercised any because I was greedy. I was going to cash out when it hit $75. When I left the company after 6 years, the stock was at $8. All in all, I was almost always one of the best developers, but I never made "FU" money. I did learn to exercise options as soon as they were worth a decent amount, but never made enough to be rich that way. I'm sure there are many old developers who were as dumb financially as I was.
Also, text diagrams allows the use of source control and versioning, which is nice.
Here's an example of "use in anger", https://gitlab.com/jjg/lcrp/blob/master/lcrp.c#L159 -- the algorithm used needs the array to have at least 3 elements, generally there will be more. It seems useful that there is a mechanism to warn the future me that this limit should be observed.
Who are you to tell others whether they can reproduce? That's eugenics!

EDIT: ... isn't it? And isn't eugenics bad?
I'm not sure how

[general]
foo = bar

is 50% more verbose than

{ "general": { "foo": "bar" } }

But also it's significantly more human-readable (and critically, it's much more human-writable).
CVE-2018-19139 JasPer 2.0.14 memory leak in jas_malloc.c
About the SWIPE pattern: on Android 8.1 I can completely hide it.
You don't see the dots, you don't see the drawn lines, you don't the pattern in case of error. The only thing that I still cannot hide is the vibration when I hit a dot.

I also specifically chosen a pattern that goes through the same dot two or more times, to confuse even more a potential observer. I tested it with friends: I let them observe when I unlock my device, and ask them to try and unlock it. Not one has managed to unlock it.
It's not bullshit, you can download the version of Stockfish and ask it to analyse the games! I did this with scid, you can too. Around move 27 in game one is one example. I don't intend to repeat the tedious process because my curiosity is satisfied, and you're just being obnoxious.
Your apps/schedules don't tell you the platform? Here (GER & NL), they always tell you the track - be it official apps or the paper schedules - and all waiting areas are on the platforms themselves. Utrecht is the only exception I know, where there are still larger designated waiting areas outside the platform (tho the building is on top of the platforms, so you basically wait next to the escalator)
Cannabis with a higher concentration of CBD than THC. I like a ~2:1 ratio.
Cool.

One more "new" build system after Meson (https://mesonbuild.com/), Scons (https://scons.org/), "Modern" CMake (https://cmake.org/), Waf (https://waf.io/), qmake (http://doc.qt.io/qt-5/qmake-language.html), b2 (https://boostorg.github.io/build/tutorial.html), Jam (https://www.boost.org/doc/libs/1_31_0/tools/build/jam_src/in...), premake (https://premake.github.io/), build2 (https://build2.org/build2-toolchain/doc/build2-toolchain-int...), GYP(https://gyp.gsrc.io/), vcpkg (https://github.com/Microsoft/vcpkg), Bucks (https://buckbuild.com/), Bazel (https://github.com/bazelbuild) and autotools.

It is true that one more was really needed.

One more that has the genetic disease of :

- Trying of being "purely declarative", a thing that at least 4 build system already tried and failed as soon as portability and configuration kicks into the picture.

- Try to merge the concept of build system and package manager: A terrible idea for anything touching C/C++ for reasons discussed 20 times already.

- Use its own syntax and config, because that is really what every developer want to do: Learn how to use a build system zoo for every component they want to use.

Well done guys.

Edit: I forgot some...
I think there’s an element of expectation there. The college hire might grow to be a grand wizard in 10 years, and become a massive asset to the company.

It is still possible the older person is going to become a wizard later, but the question is: if they have it in them, why aren’t they a wizard already?

College hires are seen as unscratched lottery tickets, older workers are seen as known variables.

I’m not saying this is fair or clever, but this seems to be a part of it.
Hashicorp Consul Rexec Remote Command Execution
I have to wonder how long the drug industry knew about this, but just brushed it under the rug like they do with all of their drugs, just to get them approved.

When there's money to be made, dangerous side effects don't matter to them.
This is very nice for swim lane diagrams :)

https://swimlanes.io/
So Goldacre's finding is that unethical practices and unproven treatments exist both in mainstream pharma and "CAM" [1].

So why is your contempt reserved for "CAM"?

> Unproven treatments that may make problems worse, while also encouraging patients to stay away from tested treatments

I keep hearing this but I've only witnessed the opposite.

I've utilised "CAM" for conditions that mainstream medicine couldn't help with (after years of trying to get help from different mainstream practitioners).

Only a combination of treatments from "CAM" modalities (naturopathy, osteopathy, myotherapy, yoga/pilates, limited chiropractic & TCM) has enabled me to get properly well.

Every "CAM" practitioner I saw encouraged me to keep checking in with mainstream doctors, which I did and have continued to do.

My mainstream doctors now look at my test results and just say "whatever you've been doing, keep doing it".

I get that there are horror stories, as there are in many facets of life. But like much of what makes up mainstream news reporting, the very thing that makes them noteworthy is that they are exceptions to the norm.

As someone who has gone about as deep into researching health/medicine as one can without actually undertaking a medical degree, I'm comfortable that the hysterical reactions over "CAM" are overblown.

So, it would seem, are government regulators around the world who are actually looking at the data, otherwise there would be even more stringent controls imposed on practitioners than are already in place.

[1] "Complementary and Alternative Medicine"
Perhaps they consider this sort of app a direct competitor to Google maps?
My Rust 2019 Dream: Dominate the Web
I am 67, but this story occurred when I was young and just out of college: there was a very old computer programmer at work who had great skill but he miss-applied it. The worse thing he did was writing tortured FORTRAN code that self modified itself at runtime - hardware architecture and operating system dependent binary patches. I promised myself I would never be that guy, read the book ‘The Egoless Programmer’ and followed a different career path from my old friend.
Like your link says: doesn’t lambda lifting solve that problem?

That’s what I always do if I want to move an auxillary function to the top-level for reusing elsewhere.
My Wish List for Rust 2019
> for reasons discussed 20 times

Could you provide some pointers, ideally a link?
how true would rate wikipedia's current claim that "how it works is not entirely clear" ?
> You can use the patterns described in the C++ Core Guidelines, and end up with something quite rusty, only without fully-automated checking.

Also known as the mythical "only other programmers commit errors, I am always correct".
Their notion of "better" may differ from yours. Do you actually know people who claim that reference counting is faster than a marking GC?

Reference counting can be better in terms of ease of implementation, cross-language interoperability, and by reclaiming memory immediately when the last reference to it disappears.
God dammit. This sort of thing pisses me off. Here I am, on vacation, waiting for my family to wake up. What better way to spend my time but pursue HN. I happen upon something like this. Something so damned useful that I have no choice but investigate.
> to the point that I can wake up and know if I'm going to get a migraine or not.

That sounds strikingly familiar. Is it my eyes? My sinuses? Allergies? My pillow? For 15 years and countless doctors nobody could figure it out. Then I went to the dentist and had my bite corrected and have not had a migraine since. I believe my bad bite was causing me to clench my jaw in my sleep.
Breaking the Mathematics Education System Despite Itself
67 Prominent Startups that failed in 2018
39C - seems about right as decision.
Interesting! Could you share examples of works in theoretical ML using these ?
Due to an autoinflammatory condition, I've taken ~1800mg daily for periods of 6 months several times.
I don't like the idea of going on opioids for longer that a couple weeks, but maybe I need to switch.
The worst part is that a large portion of the push back against improving the tax system here in the US is all the tax software companies. Intuit (and H&R Block) spend millions every year lobbying against tax code simplifications or at least simplifying how you interact with the IRS.
The name of his company was linked all the time.
The same certainly applies to play store, “hahahaha no” still accurately reflects the general case for both platforms.
Yeah the Tek scopes were made before they came up with them though which is annoying. I usually replace them with the Harwin gold plated turned pin ones as I got a massive box off them from eBay for virtually nothing :)
I Left a Buddhist Retreat in Handcuffs
Great talk. Imho, the most interesting aspect is Neds emphasis on the length and intensity of the work, and his own attitude toward learning. Over a year of studying and hammering on the sandbox before a win presented itself.

A lot of people seem to be kept out of the field by the notion that finding these vulnerabilities can only be the result of some kind of genius
I use http://mayura.com/ It is tiny, doesn't need installation (just unzip and run the .exe) and it creates PDF (suitable for latex) and SVG (suitable for web) files.
TikZ. Takes a bit of study, sure, but I can do nearly anything I want now in a reasonable time. And it will look amazing.
My friend’s dad is an inventor and discovered that the best way to retain knowledge is to teach it, which is why most students forget 90% of the source material. Most teaching is based on students inputting knowledge not outputting it.
There is no silver bullet for targeted pain relief, or really, pretty much anything in the body. The body is an enormously complicated biological organism. Trading ibuprofen for Cvs/marijuana doesn’t trade side effects for no side effects, it trades one known and some unknown side effects for mostly unknown side effects.
Reference counting is only better in terms of ease of implementation.

Hence why it is usually one of the earliest chapters in any CS book about GC algorithms.

Reclaiming memory immediatly only works in simple data structures. Naive reference counting impletations have similar stop-the-world effects when releasing relatively big data structures, which can even lead to stack overflows, if the destructor calls happen to be nested.

In case of Objective-C and Swift, Objective-C tracing GC project failed due to the underlying C semantics, thus they took the 2nd best approach of enforcing Cocoa retain/release patterns via the compiler, which only applies to a small set of Objective-C data types.

Swift naturally had to support the same memory management model, as means to keep compatibility with the Objective-C runtime.
The backstory was Yahoo! Buzz Marketing paid for the wrapping on their car for several employees they selected over the years. You didn’t get paid for having it done, but there were unofficial perks that came with it (along with several strict rules, like something as simple as getting pulled over could cause you to be terminated, depending on circumstances).
Hyundai Kona: Pick for North American Utility of the Year
‘Lipid’ Nanoparticles Could Be the Future of Neurodegenerative Disorder Treatmen
> Must have been a strange sailboat to have an engine room :-)

He wasn't talking about a sailboat, but anyway any sailboat built for ocean passages will have a diesel auxillary.
Right, but why are private practices artificially limited for whom they can bill the NHS? That seems like pointless, unnecessary bureaucracy that comes back to bite them with more A&E visits.
That $100 per year is required just to keep apps installed on your own iDevices, let alone submitting them for review.
> Presumably, from your wording, you are also unhappy when a non-monopoly business cuts off service (which, technically, PayPal is, unless it faces antitrust action that I'm not aware of).

That's disingenuous. A finding of monopoly status might be legally definitive, but it's not necessary to reasonably conclude that a corporation is a monopoly.

Online payment alternatives certainly exist, in a similar sense that alternatives to MS Windows existed in the 90s. The recent Patreon/SubscribeStar event suggests strongly that there is collusion at the very least, if the source of the suppression was not PayPal itself. That doesn't change the fundamental point being made.

You are correct that I'm unhappy with discrimination based on political beliefs even when non monopolistic corporations are involved, but pragmatically, that's a much longer discussion. Tackling the immediate concern of people of people having their livelihood destroyed for expressing unpopular views would be sufficient as a stop gap.

> Try imagining the tangled framework needed to protect political belief in a way that wouldn't infringe on freedom of expression if you want to understand why political belief has not yet enjoyed such protection.

More than likely it's not a matter of difficulty, it has simply not been needed. The centralisation of power inherent to technology has been changing the landscape considerably.

Regardless, recent studies have clearly shown that conservative and liberal brains are structurally different, so to some extent, political discrimination is discrimination on physiology. I agree that it's a subtle issue as to what should and should not be considered a deeply held conviction, but it's becoming increasingly clear that it is needed.
> but the question is: if they have it in them, why aren’t they a wizard already?

An aspect of this thinking is that people don't always know how to identify those 'wizards' if they can only evaluate someone against the company's own internal tech/lingo.

Someone very well might be a 'wizard' - demonstrably so with experience on visible projects. But if the interviewing staff can't parse out those skills in to something they grok, there's still a mismatch.

Another way of putting this: I've seen people in companies who were considered 'wizards' because they could do everything 'the company way', even though the 'company way' was demonstrable and horrifically both inefficient and insecure. Boat-rockers were not welcomed, regardless of the potential for positive impact.
> Below a certain age, tooling and practices knowledge is likely to be up-to-date.

There are exceptions. C++ game devs for instance often shun the STL for good reasons (compilation times, performance of debug build…), and then the junior fresh from college must unlearn most of what they believed about "modern" C++. They're up to date on the standard all right, they're just not up to date on the best practices of the field they're getting into.
Floki (an EDN/JSON browser for the terminal)
‘Acoustic camera’ seems to be the marketing term used for such products. Searching for this on YouTube will yield all manner of examples. The size of the device will dictate range and frequency response, there’s a neat study of elephants with one here: https://youtu.be/Xl7LnAob2T8

One thing that I think is interesting is that you could record a setting with one of these contraptions (eg party, train station) and go back later to do beamforming in software to zero in on specific conversations.
> Hint: What's the recovery email address for all of your random online services?

hey_$service_dont_spam_me@my_domain.com

> What's your personal contact email for work, taxation

my_name@my_domain.com

I always thought of gmail like gmx.net or something, it's where people who don't know internet things could get free email. I figured it's a good way to test the waters, I also had free email long before I had a domain... but over a decade later, we're actually building houses out of this duct tape? It's duct tape, it's useful, but it's still duct tape.

I don't mean this to blame the author. (Though them making another account with Google for private stuff made me despair)

My first thought was, if companies want to be persons, and do this to other persons, a fair response would actually be "Dear Google, stop existing. Please don't make another company, either." I know it's not realistic, not even desirable to me -- we don't even boycott really horrible actors on a large scale, so why ruin Google and all the lives that hang off of that. I don't believe in collective punishment under any circumstances, ever. But as a response to Google (et al.) "as a company", it would be fair -- and no need to tell them why, either.
There's a great video essay on this topic: https://youtu.be/r86Sb4heCWM
Note the part where she said she was a military wife.

That is, the healthcare system she's talking about is the one provided to members of the military.
No. It's just text.
This is why there are coders and why we have graphic artists. Outsource the job to them. I've tried to do it myself, it's not worth it. This is why those jobs exist. We can't do it all.
I wonder if part of the issue is a kind of unspoken fear that the “dream” outcome may not be as common as people want to believe.
If I am a young developer with more stock options than salary I want to believe that I will have the option of retiring early. Seeing older devs who were not able to “cash out” plays poorly with that narrative.
Also, VLC has a huge attack surface - binary parsing is difficult to do right in C / C++. I hope this effort makes the crashes less frequent...
I'm still sticking with CMake.

Autotools on Windows is an absolute nightmare and none of the other build systems have nearly as much support as CMake when it comes to integration with various tooling (as in tools which understand CMake).

I like gn, but it has the annoying problem of needing anything in-tree to be converted to gn.
Austria is the next country working to impose a tech tax on companies like Apple