skysight-inc/HackerNews huggingface dataset:
> a malicious mirror could still exploit a bug like this, even with https. But I suspect that a network adversary serving an exploit is far more likely than deb.debian.org serving one or their TLS certificate getting compromised

Exactly, this is far more easily exploitable because apt is using HTTP by default instead of HTTPS
I have a MSc with a specialization in formal methods from a place with famous faculty in the field, so I might be biased. But I have to disagree with almost anyone here.

Formal methods still lack a bit of maturity and streamlining to get adopted. It's a bit like functional programming in the late 90s and early 2000s. Nothing was terribly different from now, yet it was not widely used. Whereas now, we are starting to see adoption by mainstream players. E.g. lots of features in Swift.

With regards to formal methods, the situation is entirely analogous. The theory is there. Already developed. And it sits at the absolute core of CS. It's all about formally describing semantics. There are several approaches: type systems, model checking, program analysis and abstract interpretation. And these offer a tremendous amount of flexibility. You can go all the way from adding some lightweight formal specifications a posteriori with e.g. a fancy type system, to developing all your code formally by starting with some axioms.
Depends how the wealth is distributed. Currently what happens that let's say a factory installs a new machine that does the work of 10 employees. Instead the workers work amount being reduced (the total monthly labor is now 1600h less) and everyone working less the factory will downsize the work force appropriately, the 10 employees will be terminated and the benefit and value added by this new machinery goes to the owners of the factory.

In the short term (as long as there's still more people working than there are those whose jobs are being cut) this benefits the economy (even if the wealth distribution is not great), but what happens then the jobs displaced exceed the remaining jobs?

After all the money is supposed to go around. Your time and wealth is the income for someone else. When there's enough people without purchasing power the whole thing will eventually collapse.
How Dat Works
No, it couldn't. It's image-based. Your application is the development environment. That's the point of Smalltalk.
Although there may be a positive aspect to this. Valve mentions that developers that choose Vulkan over D3D will have a better chance to work on Linux through the compatibility layer. As far as I know, making your product for Vulkan makes you halfway to a full Linux port.
I think I agree with this also, but my experience is limited enough to allow for the likelihood of additional complexity and gotchas that will become evident over time.

I'm sympathetic to concerns of ops, having worked in that space before working as a developer. It's tough to dive into a new approach and discard existing, well understood solutions. It's an especially hard sell when the benefits of the new tech are opaque and/or don't solve problems you personally have (until I actually used k8s for my own project, I really didn't understand the hype either).

I'd suggest though that the "usual pushback" is a powerful force on its own that may make k8s a poor fit for an org (right now). If some portion of the staff - especially those responsible for reliably maintaining the infrastructure - is resistant to the approach, rushing adoption is highly likely to lead to failure (if for entirely non-technical reasons). The benefits of k8s will only become more apparent and more easily realized over time, and the opportunity cost of waiting until there are fewer "Kubernetes Failure Stories" on HN might not be all that great.
Canada blames US for Huawei CFO arrest backlash
I Made a Bikini Out of Bubble Wrap
It's likely stretched to be juuuust above 10 minutes so that it can be (better?) monetized. I've more or less stopped watching videos of that length due to this.
Of course not, but the switch to BSD fixed a bunch of the underpinnings in the OS and was a sane base to work off of.

Not to put too fine a point on it, but they found religion. Unlike Classic (and early versions of Windows for that matter), there was more to be gained by ceding some control to the broader community. Microsoft has gotten better (PowerShell - adapting UNIX tools to Windows, and later WSL, where they went all in)

Still, for Apple it meant they had to serve two masters for a while - old school Classic enthusiasts and UNIX nerds. Reading the back catalog of John Siracusa's (one of my personal nerd heroes) old macOS reviews gives you some sense of just how weird this transition was.
I did, years ago. Didn't do anything at the time. I'm not convinced that his thesis is the cause of my own pain.

Of note, I'm not really functionally impaired by this tension. Like, I never say "my back, my back, I can't lift today". I just have some tense spots that reduce flexibility a little.

Is there a specific thing you should do after reading the book?
Shut up and take my money!!

The closest thing now seems to be the GPD devices.
No, startups in Silicon Valley are starting to look at these certs because they realize how expensive poorly configured cloud infrastructure can be. It’s a skill that few people have at this point.
> Do colleges exist to promote education and intellectual curiosity or to train workers?

When college cost in the US what it did in the 1960s this sort of little bit false-dichotomy, little bit navel gazing question was at least fairly harmless. Now it's just fucking ridiculous even for most public schools.
Strongly disagree.
The reason people moved from livejournal is simply company policies, they messed with peoples freedoms. People got used to be able to say whatever they want and rely on ratings by popularity, but LJ excluded some political bloggers from public ratings and limited their abilities to grow. The audience didn't like it and started to look around for alternatives. In addition at that time LJ was already heavily outdated in terms of design and usability.

Summing up it's not because facebook was better, it's because livejournal got worse, and secondarily forgot to become better technically.
This sort of reasoning is curious to me. Is growing food pointless too because people will just get hungry again and need more food? Is making smartphones pointless because they wear out or become obsolete and people need new ones?

We are nowhere near the physical limit of how much housing can be built. Building more housing is just an ongoing need of the human race, just like growing food is. We’ll be building housing until we go extinct.
Apple Pay coming to all 1850 US Target locations, 7000 Taco Bell restaurants
> Other approaches try to bypass the compiler by verifying the generated binary against the semantics of the source code (treating the compiler itself as a black box). The major drawback is that you had to completely disable all optimisation.

sel4 verfies the binary against the specification, and lets you use optimization. Once you've extracted the flow graphs from the binary, following the optimizations isn't difficult.
In a very competitive environment such as SV you probably can't be too stingy on salaries either. Good employees are quite high on the list of things that will make or break your company.
Do unit tests or type systems make sense when the product changes from week to week? Unit tests and type systems are a formal method (technically; usually they usually do not fall under the academic discipline of formal methods). Formal methods cover a very wide range of tools, that drastically differ in cost and effort. Also, if you have code, then you have a spec, because the code is itself a formal specification. It's just not a very convenient one because it is a very low-level spec.
looks like a rip off of airtable
The over-arching point I believe the parent comment is making is that the kinds of people who didn't get college degrees back then because they weren't needed are getting college degrees now, because they are needed as qualifications for jobs. They weren't incapable of it back then, it just wasn't necessary nor widespread. Now it is. So it's the same kinds of people doing police work then as now, with the same aptitudes, just those people are going to college now because they have to whereas they didn't then. (And in a way, increasing prevalence of higher education is a marker of success for a society.)

Unrelated, a huge point I'd like to see addressed more is how housing costs have outgrown inflation over the course of decades. We used to build enough housing, but NIMBYism and restrictive zoning has taken over recently. Housing is much more expensive in big cities in real terms than it was then, even though fewer people live in them in many cases now (e.g. the population of Manhattan reached its peak in the 1910 census and is down 30% since then). Real wages haven't decreased since the middle-class heydays of the 60s, and a lot of consumers goods have gotten much, much cheaper since then in real terms. The real headwinds in the face of middle-class prosperity are housing costs, healthcare costs, and (to end the digression) university costs, all of which have grown well above inflation.
The fact that it is the only one that is relatively featureless makes it incredibly interesting. It's anything but boring.
Stop being a bully, VMware
==In particular, voters skew heavily older, and older folks are already covered by Medicare.==

Which is single-payer healthcare and has 77% favor-ability [1].

==Most Americans would prefer labor unions to have less influence than they do now or to maintain the status quo==

This is complete editorializing. You could just as easily say that more Americans prefer labor unions to have the same or more influence than they do now. The Chamber of Commerce, the country's largest pro-business lobby, has vowed to fight an single-payer initiatives [2]. This is what people typically mean by "elites", the owners of capital. They are typically the one's influencing policy, not high wage earners.

==But it doesn’t break down along “elites” and “non-elites” but rather at the middle class.==

You are completely missing the point here. Corporations are fighting increased minimum wages across the country [3].

==So it’s likely that the majority of actual voters oppose a $15 minimum wage.==

Here, you rely on the question asking specifically about $15/hr minimum wage. In reality, the minimum wage is $7.25 and there is a lot of daylight between that and $15/hr. If you ask about a different number, like $10/hr, you get a different result.

"the poll found that 71 percent of people surveyed support raising the minimum wage to at least $10 an hour." [4]

==But even though Americans overwhelmingly disapprove of the Republican President, Republicans just maintained control of the Senate.==

Only 35 of the 100 seats were up for election in 2018, so it doesn't stand to reason that the results would match public perception directly.

[1] https://www.cnbc.com/2015/07/16/medicare-medicaid-popularity...

[2] https://www.beckershospitalreview.com/hospital-management-ad...

[3] https://www.arktimes.com/ArkansasBlog/archives/2018/09/04/co...

[4] https://theintercept.com/2018/04/17/the-restaurant-industry-...
Well, the plebes can't afford to take classes to further ones academic horizons. When a class at a community college (read:too poor to go to a proper uni) is $900 and 30 students and no equipment needed, that class had better have strong income assurances. Else its a waste of money and further burdening of student loans.

And taking classes also means giving up time wise something else. Opportunity cost is also a thing.

So yes, liberal arts are the higher forms of education, which are also further from the rest of us who need a credential because of credentialism so we can merely live. (Food, water, electricity, housing, medical, internet are effectively all required to live these days. )
The name "Trello" appears 24 times on that page. Is this some kind of SEO thing?

Edit: I'm guessing 'yes' as even the link to their own site on that page takes you to the URL /trello-alternative on their site.

Edit 2: Wow, even the Trello name and logo are featured prominently on their homepage.
With some exceptions many people just aren’t aware of them because it’s the blogs run as businesses, or by people who are otherwise at least Internet famous, who command outsize attention. It also increasingly makes sense to plug into publications, etc. with promotion engines for many types of content. I personally publish fewer things in my own blog than I used to.
Posting a url to LinkedIn shows a complete lack of everything. The fact that the post links to a podcast instead of an article is double shady. Just post a link to the mp3 and accept the fact that this is a terrible way to promote it. Why would I trust the advice of someone who can't even HN right?
Scoop together with a large collection of portable software is a godsend in a corporate environment, where you don't have admin privileges on your work machine and getting up-to-date software approved and installed by your IT department is a royal pain in the ass. I can confidently say that were it not for Scoop, I'd be in order of magnitude less productive at my work due to the lack of necessary software. Scoop is one of those things that makes a potentially unbearable work environment a productive and even enjoyable one. Yes, Scoop is not perfect. Sometimes it breaks and I have to manually fix it (it likes to uninstall outdated packages before downloading and verifying the checksum of the updated ones). But the time spent on fixing it is easily recovered by boost of productivity that it provides.
It would fit in the broader methodology of 'single purpose tools that do their job well' or 'small pieces, loosely joined', but yes, probably too annoying to bother with.
Keep humans in good jobs in the robot era
I looked into SCTP a bit. It seems to have a few quirks that puzzle me. E.g. the number of streams can be limited by what the underlying OS or other endpoint is willing to support. Not sure if that is what I want. I need to read a lot more to fully understand it.
Microsoft have never been developer hostile. In fact that's their entire business strategy, keep developers happy and then make integrating with Microsoft's other products the path of least resistance.

GitHub feeds into that. I'm certain we'll see a "deploy to Azure"-like integration soon.
Oh yes, VK as well. The same model as Facebook. Somehow people whom I used to read on LJ would tend to migrate to Facebook rather than VK, but that can be just my bias. In general VK is more popular, true.
Governments do expect an ROI from educating children. Educated children make employable adults who make taxable income which makes governments happy.
Damn. I can't even get the game to run right in Windows. It's got that physics glitch where it can't make it past the gate in the intro.
Or that employment is growing rather than shrinking - but I absolutely agree.
Addis Ababa Beats Dubai as World's Gateway to Africa
The longer answer it is too cold to make the same cool cloud patterns in the visual spectrum Jupiter and Saturn have.

That's not what the articles says at all.
I find TLA+ syntax and tooling to be far better than that of almost all programming languages.

E.g., here's a TLA+ spec I recently wrote: https://pron.github.io/files/TicTacToe.pdf

The syntax is as close to standard informal mathematical notation as formality can afford.
Hmm, it's almost as if the author of https://whydoesaptnotusehttps.com/ may have overlooked a few things.
I admit, I'm usually a lurker :)

I have a few other things that I'm looking forward to sharing, though. I just started with this because it will hopefully contextualize some of the other content.
What if increased intellectual curiosity has a high enough ROI over someone's lifetime to cover the costs? What if the higher education allows them to enjoy life more and thus increase quality of life over the long-run?

I'm not saying either of these are the case, but it is worth exploring before we outright dismiss.
US counties are paying most of the federal income taxes
Yeah absolutely you need a society. But now you're into the realm of arguing by degree of contribution to some effort. At that point there are probably more plants, bacteria and fungi by number of individual organisms or biomass I would like to thank for my accomplishments in life. But hey who the hell thinks that way? Im almost certainly more thankful to my local trees than I am road workers in Australia living in the UK.
It's unfortunate. I generally tend not to comment on things I want to criticise. I love Jess's work but saw zero value come from the time spent reading that.

I think my point was more valid, in this case, given that this isn't some random person trying to contribute something, I'd have been less critical in that case and not commented, but this is Jess Frazelle. Those of us that know the name know she's an extremely skilled engineer, and _that_ is why I was disappointed at the post.
Well! As it happens, around the time of this article I was working as a summer research student in Lawrence Berkeley National Labs, carrying out a search for supernovae as part of Saul Perlmutter's Supernova Cosmology group.

When astrophysicists work on this activity, they use (no surprise) computer vision. The lab's software automated the process these nova hunters ran manually: we subtracted two images of every segment of the night sky taken on different dates to see if any new bright objects appeared in the difference. If so, it's possibly a supernovae!

Because there are so many stars out there you can use this method to predictably discover large numbers of supernovae when you need to study them. They called the project the Nearby Supernova Factory ( https://snfactory.lbl.gov/ ); as far as I know this is still the preferred method.
"Pharo is a mininal, elegant, pure, reflective object language with a goal to deliver a clean, innovative, free and open-source immersive environment." [1]

[1] : https://pharo.org/about
Playframework (with Scala) + Vue.js (with Typescript) + Heroku.

It gives me a good balance on development speed over project's age and performance. I particularly like the balance of type safety and brevity.

Learning curve is high for new comers because of Scala and how to integrate Vue.js with Playframework. But, once I know how to do it, it's not an issue when starting a new project.
The article doesn't say it isn't interesting (nor does the title), and actually says it has nice swirling clouds now. (The comments here really are something else...)
I have a hypothesis that productivity growth is tied to the capital / income ratio. That is: if the percentage of income that goes to capital vs labor increases, the productivity of the laborers rises at a slower rate. But I obviously can't substantiate that.
Underappreciated xterm bug resurfaces, exposing millions of VSCode users
Tschichold was a design genius. His first book ‘The New Typography’ set out the rules for modernist design, rejecting all old forms of design.

Some of the work he did at that time basically set the template for most design we have now. My old design tutor, who’s father was one of the UK’s leading modernist typographers and knew Tscichold, had a piece of his that she said had almost every modern design cliche, though done for the first time here.

Later, after a run-in with the nazis, he moved to the UK, rejected modernist design ideology as a little too fascist and revived traditional book design. He also designed the Penguin Classics book series - a major design achievement itself.
Pharo is making some moves in this direction with:
* the CI first bootstrapping a non-GUI image as a separate artifact prior to loading the GUI and IDE into the release product.
* good progress on stripping graphical elements out of the VM so it could be embedded in other systems (e.g. as a game scripting engine).
* using git to manage sources.
* some community `vi` keyboard bindings (I haven't tried)
But still there is not yet an easy access to use separate tools. The benefit of using Pharo IDE is being able to mold your tools...
http://www.humane-assessment.com/blog/the-moldable-gtinspect...
These people may not be your target audience.

Your product page made sense to me and might also make sense if your customers are web and mobile web developers
So Coq basically have to be correct and trusted for this to be secure?
https://en.m.wikipedia.org/wiki/Bayh–Dole_Act

Is what gives universities IP rights and allows them to keep research closed. Top Five Fascist laws in the books.
https://web.archive.org/web/20190122153012/https://pharo.org...
Couldn’t those root CAs also be used to handle end-to-end encryption for your 2FA codes?
>>You can have a 75 year event in successive years - the UK village I live in once had two 250 year floods inside of 5 years.

Yeah but at some point the "250 year flood" might need a new name, like every other year flood or something.
Hmmm, well that's why I like Ruby and other languages with functional approaches. Method chaining and blocks are very similar to pipes to me.

cat /etc/passwd | grep root | awk -F: '{print $3}'

ruby -e 'puts File.read("/etc/passwd").lines.select { |line| line.match(/root/) }.first.split(":")[2]'

A little more verbose, but the idea is the same.

https://alvinalexander.com/scala/fp-book/how-functional-prog...
"Horrible virus used to cure xxx disease ends up destroying humanity" is becoming a common trope in fiction. Rise of the Planet of the Apes, The Passage, etc.

Fiction hasn't been accurate at predicting good things in the future, but it sure has been spot on when predicting the bad stuff. It feels like we're living in one of those frustrating horror films where the protagonists ignore obvious warning signs and put themselves in the worst possible situations.
CBS Rejects Super Bowl Ad for Medical Marijuana
IMHO, shell scripts are a minefield and if you want something readable and portable, this is also the wrong technology. They are convenient though. They are like the Excel macros of the UNIX world.

Now back to the topic of "cat", which is a great example of why shell scripts are minefields.

Replace "foo.txt" with a user supplied variable, let's call it "$F". It becomes cat $F | blah_blah... I mean cat "$F" | blah_blah, first trap, but everyone knows that.

Now, if F='-n', second trap. What you think is a file will be considered an option and cat will wait for user input, like when no file is given. Ok, so you need to do cat -- "$F" | blah_blah.

That should be OK in every case now, but remember that "cat" is just another executable, or maybe a builtin. For some reason, on your system "cat --" may not work, or some asshat may have added "." in your PATH and you may be in a directory with a file named "cat". Or maybe some alias that decides to add color.

There are other things to consider, like your locale that may mess up you output with comas instead of decimal points and unicode characters. For that reason, you need to be very careful every time you call a command and even more so if you pipe the output.

For that reason, I avoid using "cat" in scripts. It is an extra command call and all the associated headaches I can do without.
PuTTY is not a good terminal emulator by any stretch of the imagination. I have only tolerated that setup because of emergency situations.