skysight-inc/HackerNews huggingface dataset:
There was an incident with similar consequences on April 10, 2014. The cause was a programmed threshold being breached and the impact was 6h of downtime.

Source: "The Coming Software Apocalypse" published by The Atlantic (https://www.theatlantic.com/technology/archive/2017/09/savin...)

walrus01 also linked to https://www.fcc.gov/document/april-2014-multistate-911-outag... in another comment.
Yes, the more standardized something is the more it just becomes an assembly line with very little room for discovering creative solutions.
> At how many bytes per second do you read and interpret regular high-level source code?

I don't know, but it's not hard to put an upper bound on it. A VT-100 screen worth of code is at most 2000 characters. If it takes me one minute to grok the code on a screen that's (again, at most) 33 characters per second. Even if we take this upper bound as the rate at which one can process object code (which, again, seems wildly optimistic to me) that's still several work-years to go through the iOS image.

> How do we know there isn't a secret backdoor in the Linux kernel and all of its drivers?

We don't. I don't claim that Linux is better. Go back and look at the context of my original comment. It applies to both iOS and Android. Tptacek's response veered the discussion onto iOS.

The problem is not that Apple or Google is evil or incompetent. They may be, but that's not the point. The problem is that these systems are too complicated, and the rewards for breaking them are too high. A back door in to iOS or Android could literally allow someone to rule the world (the President of the United States has been reported to use an unsecured phone). That is not a situation about which it is wise to be complacent.

> 1.6 GB is the total image size - it's not all code, let alone OS or security-critical code.

That is certainly true. But a back door can hide just about anywhere, so you have to look at all of it.

> It's not like the people looking at it are also staring at reams of ARM assembly. Etc, etc.

Yes, I know that. That's not really the point. Even if it were feasible to thoroughly audit the object code (I don't believe it is, but I'll concede it for the sake of argument) this effort is not a coordinated white-hat endeavor. Many of the reverse-engineers are black hats, or state actors not necessarily sympathetic to the needs of U.S. consumers. Even if they do find an issue it is not a slam-dunk that they will responsibly disclose it rather than attempt to exploit it for monetary or political profit.
Walmart-owned Flipkart to launch a video streaming service in India
Depends on the contractor and the team. If the contractor is a senior developer with actual experience who genuinely knows how to code, people will treat them well.

However, for every one of those, there seem to be about ten terrible developers working on a contract or freelance basis. People whose knowledge of web development has mostly frozen in the mid 00s, who end up causing more bugs than they fix, who leave security holes everywhere and end up causing untold amounts of grief as clients rightfully get hacked off and yell down the phone at the people working with them.

These types of people are who a decent percentage of UK developers and companies think of, and they don't exactly paint a rosy picture of the work style.
Defensive security engineers I know very much employ RE on a daily basis.
How would one distinguish this from any other day on CenturyLink?
Sources that invalidate foundational theory? It’s like claims that cell radios cause molecular damage in humans; that probably requires proving Enstien’s Nobel prize winning work on the photoelectric effect is wrong.
Where and How to Get the Right Reviews for Your Business
How can slavery be a direct result of capitalism, when the latter appeared thousands of years after the former?
Except the tools he recommends are definitely not the standard ones professionals use these days.
I think it's great that many other people are taking an interest in programming and doing it. And it's true that to think oneself very smart for being able to program is the wrong attitude. But this thread that you're replying in started with this particular assertion from the article:

"But any blue-collar coder will be plenty qualified to sling Java­Script for their local bank."

An app that's secure enough for a bank is unfortunately not something one can make without a lot of training. Maybe someday.
شراء اثاث مستعمل شرق الرياض
Not only can they not get security right, I have seen MANY people slinging Javascript at banks who are career programmers with CS degrees who can't get slinging JS right. I'm not talking total incompetence or can't fizzbuzz but people who were consistently unable to deliver on midsize or larger features and who's code is unreadable and unmaintainable.

The problem with the blue collar coder concept is that there is a lot more art(or design) required to write code than to work in a factory or mining(which I'm sure also has an art to it but I'm guessing is much less conceptual and abstract). Unfortunately I don't see it happening.
Electric arc welding uses, well, arc. And powerful one, I have to add.

So you can have long lasting big arc that does not draw enough energy to trigger circuit breakers.
Humane Smart Cities: The Need for Governance
We replied to one of your emails but haven't had a chance to reply to the other one yet. Sometimes it takes a while, but we do reply.
Gatwick Airport Drone: Lots of Second-Guessing, but Not Many Answers
Yeah, I like to use a couple of big monitors plus my laptop screen, and have all the relevant code visually accessible at once.
I would be happy to get a real data point, but it won't affect my argument unless my estimate is off by orders of magnitude. I don't need an accurate estimate for my argument to hold, just an upper bound that is in the ballpark.
According to a question at the end, this is about very old CPUs, K8/K10, because the newer ones authenticate microcode updates with public key cryptography which hasn't been broken. Still pretty amazing stuff.
That only scales to a point. Other side-effects of a larger population, like increased traffic, are harder to address than just building more houses.
Why I’m Building Zeppelin
Text parsing is something that comes up often (for me). For example parsing CSV files, or parsing tab separated data from the clipboard, or parsing various types of config files.

Swift has sweet solutions for a few special cases (eg. parse file names, parse dates, parse JSON), but parsing generic text is not something that Swift is good at.

NSString has a rich set of APIs for those tasks (NSScanner, NSRegularExpression, and all the rangeOfString... methods). Swift has pretty much nothing. (There is firstIndex(of:), but as far as I can see there is no way to find the next index, which makes it pretty much useless for most parsing tasks)

Maybe the problem is that I'm just not familiar enough with Swifts String, but until now every time I've had to work with Strings I became very frustrated.
The film Threads (which strived for accuracy) had a full scale nuclear attack on the U.K. preceded by a high altitude nuclear detonation over the North Sea, in order to knock out as many systems as possible with an EMP. And from the Starfish Prime test, we know that such events also create an unusual coloured light display.
I just switched back to zsh after using fish for a while. I found fish nice, but found the lack of POSIX compliance annoying when I wanted to modify things in my rc. I also just like the (oh-my-)zsh defaults better.
Sure, but would you want to?

Edit: That is, a slow death from radiation poisoning might not be so much fun.
I disagree.

Firstly, I disagree with the specifics of your counter; I disagree that industrialising antibiotic production is some kind of academic exercise. That's just a specific, though; I'm inferring that's what you're saying, from your comment on academia. Maybe that's not what you're saying?

My larger disagreement; I think the article isn't about the individuals. It's about the work. The article asks "if you stopped doing your work, and nobody replaced you, how much suffering would that cause?" If nobody industrialised antibiotic production, the additional suffering is huge. It's not about deciding that one person went down a research dead-end and therefore that job is a made-up job. I don't need hindsight to identify that industrialising antibiotic production is a less made-up job than renaming PwC "Monday".
https://en.wikipedia.org/wiki/Subaru_Ascent is being built and has 3 rows of seats. https://en.wikipedia.org/wiki/Subaru_Tribeca was the previous version, which they stopped selling in 2014 because of poor sales. I've seen them on the street and they were not attractive.
The Netherlands is in the EU. They have total unrestricted access to the EU market, which is exactly where the vast majority of their agricultural exports go.
Data Studio fills a weird niche. At my previous job I built a report in it and sent it to a client (approved by my manager). The client was ecstatic. They loved the report, how easy it was to understand, pretty design, etc. When this feedback got back to our CTO he was furious because no one else on my team was technical enough to use data studio, so I effectively delivered a product only I could produce. All our reports were typically made in microsoft word with screenshots of graphs from excel.

Data studio is a little too technical for most people, but not technical enough for another large group of people. It like photoshop + pivot tables. It works incredibly well for a small set of people who are semi-technical, already know how to analyze data, and have some graphic design senses. I expect google to kill it eventually, or integrate it into analytics/google ads/dbm/etc and kill the spreadsheet integration.
If you're looking for a tool professionals actually use every day that requires you to hate yourself, WinDbg scores higher on both counts
The string representation is for display purposes/information exchange only. I'm sure most implementations would internally store the data in a 16-byte form (eg the C implementation uses __uint128_t), where the data is essentially a 128-bit number.

Given that, inventing a new character set seems pointless, since you'd compare the data using 128-bit binary operations already anyways (as opposed to lexicographical string comparisons). Which leads to the question - how is ULID different from UUID in practice?
Thanks for the pointer to Mary Poppendieck, I hadn’t heard of her. Which book of hers would you suggest I pick up first ?
Ask HN: What are your favorite content sites?
Perhaps the issue here is that I just look at this much differently than a scientist.

Let's assume I am the captain of the USS Enterprise and my goal is to explore new life and new civilizations. Our ship will be passing up tens of thousands of planets that may be teaming with life and fascinating things that could lead to new discoveries and scientific breakthroughs. The science officers on my ship would certainly love to stop and visit every single one of those planets. I have to make some decisions that they may not like however. I have other officers that must analyze the cost of visiting each planet, weigh the risks of each one. There is a cost benefit analysis that must occur each time. Without following this protocol, I am endangering the lives of my crew for what may be little to no gain. There has to be enough evidence that the planet in question offers something worth risking life and limb before I even consider sending down an away party, otherwise at most I will send down a probe. In the fantasy concept of Star Trek, a probe is minimal cost and risk. Today, that probe is a very large sum of money, some of which is paid by tax payers.

So while I agree with you that there is certainly reason to believe something can be gained, I expect to see some quantifiable scientific data that suggests these gains are worth spending money there verses here.
I’m not sure how much this actually clarifies things, to be honest. But, who knows.

And about the cookie banners, we didn’t add them because we thought normal people give a crap about cookies. We added them because lawyers told us we needed to. Nobody is happy about those things- users, developers, nor designers.

Maybe I’m overstepping here, but I find it unbecoming to assume that everything developers make is just because that’s what they felt like doing that day. We aren’t cowboys, we take orders just like anybody else.
Free social media automation tool
Anyone have any recommendations on how an interested technologist can contribute towards solutions to these problems?
Isn't that "disruption"?
Mark Zuckerberg reflecting on Facebook's 2018
Surprised it didn't mention that consent doesn't mean 'agree to everything or get lost'. For many sites, it seems the only thing they do is ask you to agree to every tracker in existence sight unseen or leave, with no option to choose what cookies you want to allow or to view the content without them running.

Would also be interesting to see a legal critique of the equally common practice of assuming the user gave consent the minute they scroll the page or click anything on it. Seen a few companies argue that, and I suspect it's probably not compliant with GDPR (no matter how they spin it).
> Richard Kuklinski was a fulltime hitman

The wikipedia page you linked says:

> Throughout his criminal life, Kuklinski was involved in narcotics, pornography, arms dealing, money laundering, collecting debts for loan sharking, hijacking and contract killing.
Why not? It clearly doesn't add anything meaningful to the run time, and helps avoid the question of whether the loop got optimised out.
So how does it work in your field? Making your own significant contribution is literally the basic standard required for a PhD in most fields.
Not really from a usage perspective though, and resources often don't matter.

If you're doing something like this in the background, then that usually means it takes a "long" time (or you'd just wait for it). So the overhead of starting an additional shell simply isn't important.

Not that it's always irrelevant, but that's why the issues are still open.
The next century will be much less concerned about energy efficiency at all society levels than at present. Here's why.

Terrestrial marketed energy consumption will increase by one to two orders of magnitude due to an explosion in photovoltaic production. The cost of photovoltaic panels has been dropping exponentially for 40 years, which was hard to notice when photovoltaic energy was still more expensive than energy from other sources — it was still restricted to marginal uses where grid power wasn't an option, like Joey's house.

Unsubsidized photovoltaic energy is now cheaper than energy from coal or oil in all of the tropics and a substantial part of the temperate zone; this started around 2016, but it's gradually spreading to more and more of the planet as photovoltaic costs continue their exponential descent. In fact, in many places, it's now cheaper to build new photovoltaic plants than to buy coal to keep existing coal power plants running.

Photovoltaic energy production is on track to exceed current world marketed energy consumption in the late 2020s. This doesn't mean it will be the only source of energy — there are still places and applications that will use fossil fuels — but it does mean that the cost of energy for more flexible applications will begin to drop.

How long will that continue? Probably as long as there are places to install photovoltaic panels (which total hundreds of times current world marketed energy consumption), materials to construct them (which are abundant), and demand for the energy — the only real possible bottleneck during the next several decades.

So I predict one to two orders of magnitude increase in world marketed energy consumption by 2118. Three orders of magnitude is not out of the question.
This whole comment reads very bigotrist.
Sorry, that wasn't very clear.

I knew well enough, but the system was already approaching a million lines of semi-working floating point workarounds by the time. And since it was all my crazy idea, I would have been held responsible for every single rounding error from that point on, had I managed to get the ball rolling at all. Life is too short and too precious.

I was thinking language designers mainly; but user preferences are shaped by habits, which means that anything but floats will take more effort to communicate and popularize.

edit: Observe how popular this comment is for even floating (take that!) the idea. Plenty of people have serious issues when it comes to floats, that much is obvious. I'm guessing its mostly avoiding change at any cost, so good luck to us all.
You're right, it doesn't need any skills - just a willingness to break rules. Disrupting rather than hacking!
This example is a bad one. In fact, when Tesla's repair system is busy, they'll send you to a standard tire store.
I would recommend they get a native English speaker to go over their copy. It's pretty bad.
Thank you for your clarification.

As I understand it, "first strike" is meant to be such an overwhelming attack that the response is not an effective deterrent. Here's the definition from Wikipedia:

> In nuclear strategy, a first strike is a preemptive surprise attack employing overwhelming force. First strike capability is a country's ability to defeat another nuclear power by destroying its arsenal to the point where the attacking country can survive the weakened retaliation while the opposing side is left unable to continue war.

That is, "China doing first strike against US Pacific Fleet" isn't a the correct use of 'first strike' as it's typically used because while the US Pacific Fleet may be destroyed, the rest of the US military has enough capability to destroy China.

As for 'Response decision time is minutes', that was also true for US/USSR in BMEWS days, designed for 15 to 25 minutes warning against ICBMs. Less for sub-launched. For the UK it was, infamously, four minutes.

So while I agree that it changes things, the (il-)logic of MAD is no different in a future with hypersonic weapons than it was for nuclear weaponry in the 1960s.

The nuclear torpedo is the right kind of bonkers. It highlights the stupidity of the US missile defense strategy, it's doable, and it builds on the supercavitating torpedo designs Russia already has. And it is a much better second strike weapon than first strike.
Intro to Binary Exploitation – X86 Assembly Crash Course
Ruby 2.6 Adds JIT Compiler
So it that why the state leans progressive? Liberal transplants from Boston? For a state that seems to be mostly rural without a large city, it is amazing Bernie Sanders is the senator.
>So he waited until what, Wednesday January 3rd...

Yeah, three days. He was ignored for 3 days after a mob destroyed his house, and was only listened to after he went to the press.

But, no, the tech giant is the victim here! How dare he even think about inconveniencing the multi-billion dollar corporation during its time-off! /s
> This example - despise the perplexing celebrations - is a product of the limits of Go

All coding style is a product of the limitations of the language (well, except when it is coding style dictated by the limitations of a different language applied in a cargo cult fashion out of it's appropriate context); and celebrating the choice of how to approach this problem given that it was being done in this language isn't the same as celebrating the language choice. Go would be pretty close to my last choice for anything, but that doesn't stop me from recognizing this as a thoughtful way to apply Go to this problem.
Last time I used data studio all the public data sets in google big query were available in data studio (hn comments, reddit comments, nyc taxis, etc)
I mostly work in Scala these days. But really any ML-family language is fine for everything. Garbage collection is not the barrier to writing system tools or soft realtime that it's reputed to be (the fact that people advocate Go for those use cases is proof of that).

(The JVM startup can be a bit slow for scripting one-liners, particularly if you're running them on every file in a directory or some such. There was a time when I would switch to Python or Bash for those, but I realized I was wasting more time making mistakes in those languages than I ever saved at runtime)
A screen? They use a screen? I thought they printed the hex dump on that special paper with green and white stripes and holes down the sides and did the disassembly by hand with a 0.5mm mechanical pencil. When did that change? Why didn't anyone tell me?
Sounds just like the online fakeid business. Those guys actually do offer discounts for bulk orders!
When people see a sudden bright light in the sky, the usual reaction is for them to go to the window to see what it is.

Also, the lights my blind you. Then the carnivorous plants come.
I strongly prefer decimal fixpoints as well, despite being slower; that's what I'm doing in Snigl.
Following is an excerpt from Apache Kylin FAQ page:
http://kylin.apache.org/docs/gettingstarted/faq.html

How to compare Kylin with other SQL engines like Hive, Presto, Spark SQL, Impala?

They answer a query in different ways. Kylin is not a replacement for them, but a supplement (query accelerator). Many users run Kylin together with other SQL engines. For the high frequent query patterns, building Cubes can greatly improve the performance and also offload cluster workloads. For less queried patterns or ad-hoc queries, ther MPP engines are more flexible.
A lecture on IEEE floating point from CMU including most of the gotchas the pdf contains https://scs.hosted.panopto.com/Panopto/Pages/Viewer.aspx?id=...

This is an active research area, ENS de Lyon has a lot of material available if interested implementing floating point on FPGAs, plus there is Vol 2 of The Art of Computer Programming where Knuth shows the reader how Babylonian mathematicians made extensive use of a sexagesimal (radix sixty) positional notation that was unique in that it was actually a floating point form of representation with exponents omitted.
> if you are serious about getting into data science or AI

Then you won't be using Javascript anyways. Like you said, Python is the way to go: PyTorch, TF, PyMC3, scikit-learn, etc.
Yay, that settles it. Now I definitely can't afford a Tesla. The car maybe, but the legal team that should go with it, nope. Current owners, make sure you have a lawyer on retainer.
It's far worse than that. It's like if Apple didn't have a price for an iPhone, but instead at the register it scanned the package and looked at which factories each part came from and which assembly-line workers in those factories worked on those specific parts, and which mines the minerals came from, etc. and then charged a different line item for every one of those factors.

Sure, the average cost is $1000. But yours might be $5000.
Foxconn to begin assembling top-end Apple iPhones in India in 2019 – source
Many north Texas communities in fact: https://www.dallasnews.com/news/crime/2018/12/28/911-outage-...
So, GNUStep all over again, or...?
He invented the cloud
I got one about bypassing GitHub's authentication using Unicode on the company blog: https://blog.getwisdom.io/hacking-github/

I've wanted to write a deep dive on JS defense for a while now. Lots of cool stuff learned I'd love to share- maybe in the next few weeks.
LEDs last almost forever if they work within their parameters (mostly the temperature is important). They degrade quickly if they overheat. And above let's say 5W they will overheat if they are made out of plastic.

So - these plastic ones are designed to fail, so why put a proper electronics there? So they skimp on power regulator as well (and that's probably what killed your LEDs).

Buy LEDs with metal radiators - they are more expansive, but they aren't designed to fail in a few months and should really last decades.