skysight-inc/HackerNews huggingface dataset:
> The discussion is relevant if you believe that an OS should have some responsibility for memory-related security issues.

Pedantically speaking, your point is valid. But as a practical matter, OpenBSD is the operating system that takes these issues the most seriously. They formalized the notion of Unix-based privilege separation, and systematically employed it across the system. They regularly perform system-wide code audits (including of bundled software, such as Apache back when they actually bundled Apache) to identify and remediate high-risk source code patterns (e.g. strcpy -> strlcpy, realloc -> reallocarray, etc). While people [still] debate the merits and performance of things like seccomp or Capsium, OpenBSD has incorporated pledge(2) into the vast majority of binaries on the system. They were the first to apply stack canaries, ASLR, W^X, and most recently PIE globally by default. And apropos the article, they were the first to implement their system malloc in a robust way that maximized the chances of catching memory bugs, sometimes sacrificing performance in a way that would be inconceivable for Linux distributions. And all of these things have resulted in a steady stream of bug fixes upstream to third-party packages from the ports collection.

One of the reasons OpenBSD forks projects like openssh or libressl, or implements from scratch services like iked, httpd, ntpd, relayd, smtpd, and many others, is precisely so they can assume full responsibility and control for things like memory management.

See https://www.openbsd.org/innovations.html

When a researcher points out a potential issue on OpenBSD, they're emphasizing their point by leveraging OpenBSD's credibility and the hard work put into the system.
Yeah, this seems _way_ less nefarious than what's going on behind the scenes to everybody else without their consent. At least they get people to consent and compensate them in this case, whereas nobody asks you whether you'd like to be tracked on the internet, and there's no way to turn it all off.

If I were to guess, this stuff isn't just "here's a router and we'll send you a check". There should also be a huge and very detailed survey the user needs to fill out so that Google could then correlated that data with similar demographics based on co-visitation.

This is also not new. Many years ago at Google I sat directly across the hall from the team that did demographic inference based on (IIRC) Nielsen panel data. I think it's safe to say that _every_ advertising company does this one way or another.

Basically at a high level they'd look at where Nielsen-paid tracked folks (about whom they knew everything) went on the web, and then looked at you, and their algorithm would guess your gender, age, income level, education level, etc etc.
I don't. Powered monitors, headphones, neither has a problem (even with the 48v mic power supply enabled).
>It seems your objection is primarily to the collection of the voice print itself. Why do you feel like that's different from collecting finger prints?

Fingerprints are harder to use in electronic mass surveillance.

Databases are easy to combine, the only barrier is often just a legal one (which is a joke for national security). So I'd like governments to collect as little of that data as possible.
In-car AI assistants are coming whether you like it or not
It would be interesting if you could define a restricted-API for email, with just enough functionality to provide your service. The issues right now is that there is no fine-grained way to grant permission to ones email, it's all or nothing.

Of course, it might take a long time for email providers to offer such restricted-API access, if ever. As a stop gap, you could offer an open-source daemon your users could self-host. It would act as a gateway, granting you limited access to their email, without you needing their password or cart-blanche permissions.
internet can still be super fun & weird. Screenhole is a fun community with their own currency instead of likes, buttcoin: https://screenhole.net
> I can't think of a great solution to this problem.

The mentioned government agencies have the "NOBUS" belief: that the concept of "NObody But US" (having access to the "keys to the secrets") works.

This article is just one of a many good examples that it doesn't.

What could work are just the systems which are secure without any exceptions. Which is hard to achieve when enough powerful influences (most often directly or indirectly tax funded, even if not explicitly government organizations) do all they can to make that not happening. It's then easier than it appears to be to achieve the goals of nobody having an access to a really secure system.

An example:

https://en.wikipedia.org/wiki/Dual_EC_DRBG

"In September 2013, The New York Times reported that internal NSA memos leaked by Edward Snowden indicated that the NSA had worked during the standardization process to eventually become the sole editor of the Dual_EC_DRBG standard,[7] and concluded that the Dual_EC_DRBG standard did indeed contain a backdoor for the NSA.[8] As response, NIST stated that "NIST would not deliberately weaken a cryptographic standard."[9] According to the New York Times story, the NSA spends $250 million per year to insert backdoors in software and hardware as part of the Bullrun program.[10]"
> especially on the right-wing

You just took a great message and made it partisan. Why would you do such a thing? :(

Looking at some stats [0] it is plausible that education levels have some influence on voting, but realistically it is probably going to be a proxy for socio-economic status.

I'm not sure exactly what you mean by anti-intellecual, but the left has the same tenuous relationship with science as the right. The right just tends to be more obvious, because "science" has become a tool for telling poor people that the moral option is to accept lower living standards (eg, climate change => you are a bad person for consuming, but the rich aren't making sacrifices. Economics -> bankers get government protection from going bust, poor people get ruined with debt). I suspect these people aren't anti-science so much as they are pro-fairness, there are clearly massive class biases in the science that gets foisted on the political discourse.

[0] http://www.pewresearch.org/fact-tank/2018/11/08/the-2018-mid...
iRobot Finally Announces New Terra Robotic Lawnmower
Maybe a slow walk through each item in that subject is needed? Also for any particular popular subject there's more than one 'manual'.

I rarely read manuals. Except for roleplaying ones back in the day.

Is it a matter of time to focus for a long time on one task?
I give it a week until Facebook starts using some sort of exploit to get Onavo onto iPhones. Probably guessing it will be a Safari exploit based on past history. That's when the real fireworks will begin.
> it's a great fail safe but not if you lose your engines in flight and can't relight them like in the article.

It is still better to lose all engines than to have thruster reversers deploy in unsafe situations. You may stall without an engine at low altitude in a landing configuration, but you should still be able to glide for some time. Deploy reversers (or even a single reverser) and you fall like a brick very quickly.

https://aviation-safety.net/database/record.php?id=19961031-...
And if someone is bad at cursing online but good at cursing in real life, like me.

He is intelligent only when he is faraway of the keyboard...

...Now that I think of it, It makes sense.

Yesterday I had a crazy nightmare. It looked so real, I could swear it really happened.

I was crossing a certain trick sea passenger, and I asked my sailors to tie me to the main master of the ship, and never let me fall for the singing of the mermaids again.

But I wake up and it was a crazy dream...

Except for my gmail, that maybe didn't wake up yet, and doesn't send nor receive any emails anymore...Pity...right when for the first time ever, I wrote an email to HN...

Or maybe the gmail is working fine and I am still dreaming...
It seems unlikely that a jet engine could rip itself off the wing in any scenario based on thrust alone. The forces involved are not that large.
The quality of DDGs results is related in part to the number of users they have:

- they use link clicks to determine coherence between query and result. More users => more clicks => greater coherence

- they fund themselves using advertising, so their revenue is roughly proportional to their number of users. Increasing users => increasing money => more money to devote towards improving results

If one is interested in improving the results of DDG, then providing them with free advertising is an easy way to do it.
Tesla Q4 2018 Earnings Letter
Isn't this some tax thing? If they pay you money, they have to file a 1099 with the IRS. If they give you a gift card, it's up to you to record it as a gift on your taxes.
>and noted it adds the quotes then immediately forgot.

I quoted search terms yesterday, but still had to specify by clicking the link "must include" .. first result still didn't include one of the terms.

Come on Google, what is this?

I suppose that top hit earned them money; can't think why else they'd be deceptive about it.
Think about it like this: What actually is the color green?

sure, a wavelength of around 532nm coming into your eye causes it to happen, but thats just information. Then its processed in your brain and at some point recognized as green. Somewhere in this, you see green, but you seeing it cannot be measured. Maybe the activations of your neurons could be, and maybe that could even be fully reverse engineered to understand how the conclusion of seeing green is reached. And yet, the actual stuff in your conscious experience still isn't there, just a bunch of logic is.

Now maybe we could discover some dynamics of consciousness though. If we create conscious AI or some way to inject new logic into our brain that is directly witnessed, we could probe for what configurations produce what kind of consciousness. So at least we could understand the behavior of it. But the actual stuff of it is not measurable by anything but itself.
Giving DDG free advertising is something I try to do once a day. I believe DDG is the rare ethical business and deserves praise.
Business Insider has a leaked memo and internal discussions and even many Facebook employees agree this was stupid and shooting themselves in their foot. I quote “When will we learn?”
You forgot gerrymandering.
>>> As always, the people are getting the government they elected and that they deserve.

No, there's no mechanism for "the people" to vote for a party in the legislature, as the people are divided up into districts.

The candidates whom I voted for, all won: Governor, assembly, senate. I didn't elect the government, and I don't deserve it. Who does?

Of course that's true for anybody who votes for any losing candidate. I think the problem for voting systems is to ensure that, if a vote falls short of a 100% consensus or massive landslide, can the government claim to be legitimately elected with no asterisk? I don't think this is a black and white question, and there is no perfect voting system, but my own opinion is that gerrymandering weighs against that claim of legitimacy.
I think a bigger reason than any of those is that the web became a corporate advertising tool, run by bean counters and marketing people who don't like "weird" content because it may scare some people away. Just like TV, web content now targets the lowest common denominator and anything confrontational or "weird" gets put on niche sites or self hosting out of the limelight.

I think there are still a ton of "fun and weird" sites out there, they're just not on highly promoted, corporate backed platforms. And they're now a much smaller percentage of the entire web.
I use bing. I dont really mind that someone is monitoring my searches and tracking my usage. I just dont want Google to dominate, so hopefully using bing helps to balance the world.
People can always supply reasons for why they need to build dystopias.
So this is an ad for the author's publishing tool "codeblog"? Worst, when you click on the link in the article, it only has a form to put your email in. I have no idea what this tool does or what it's used for.
Adding on to this... things inside an engine happen FAST. Too much energy can spin up the turbines to the point of failure in milliseconds.
A computer running pre-programmed processes wouldn't be said to have consciousness. But what if one of the pre-programmed processes was for the computer to monitor all its own sub-processes, and dynamically re-direct them as necessary relative to pre-programmed higher level goals? Couldn't that machine be described as conscious?
Also worth noting that he just launched a competing ad network: https://blog.iconfactory.com/2019/01/advertising-with-ollie/
What I'm trying to say is that even if you report them for 1099 on the federal level, you do not necessarily convert to "employee" status in a state's eyes. This has an impact on your ability to file for unemployment, tax burdens, etc. You'd think that the federal opinion would influence the state's, but there's a breakage.
If you're looking for another dose of nostalgia: https://www.cameronsworld.net/.
I don't know if Wisconsin has voter-initiated ballot referenda at the state level. We can have county wide "advisory" referenda that are non binding on the state government.
Not particularly surprising after the recent NY bill which will require gun owners to share their social media logins and search engine history with the state. Sometimes the slope really is slippery.
The broken window to the developer's soul
Yes, but read past the inline image:

> My impulsive reaction was to create websites without any structural semantics in them. Bram Duvigneau pointed out that, while this might indeed help some casual screen reader users, it would very much cripple the experience for experienced users.

I've thought about stripping away some HTML semantics to make screen reader navigation less "wordy." Navigation menus are often coded as unordered lists. I've considered not making them lists because I'll keep menu length manageable (no more than 7) and I know the screen reader will announce "link" plus the link text for every item; the separation between items should still be clear. But it might not be clear when they reached the end and it would be contrary to the norms users are familiar with; I wouldn't make this change without testing it with multiple real screen reader users.
There’s a Bigger Difference Between 6 and 10 Than You Think
Qualcomm swings back to profit in Q1 amidst Apple dispute
What little is left of news servers can also be interesting to troll thru - but there's more noise than anything out there on those today, so it can be frustrating at best.

There are also small pockets of gopherspace if you dare to look for 'em.

For more "mainstream", you can also still find old-school style ANSI BBS systems (I know, redundancy) on certain IP addresses; most are simple hobby projects, or focused on certain niche things (retro computing, for instance).
Chrome does this as well. news.ycombinator.com is in black and the rest of the URL is more grey.
Who exactly is the "us" and "we" in this scenario?
I hope they get an automated reply where they can apply for a new certificate and await approval. Then being put in some queue for a month.
Free Jupyter notebook servers with 5GB disk space
An Introduction to Casanova
In airplanes, a lot of procedures and diagnostics involve not re-trying a failed action, not touching anything before reading a check list, nor flipping a switch twice if it didn't work the first time.
The way that non-dualists (those that see a single consciousness of which our own awareness is an aspect <-- not a great definition) approach this is from the basis that consciousness is primary and the physical manifestations that exist around that flow from consciousness. So, from that perspective, physical rules that govern rocks are actually subordinate to consciousness.

Non-dualism doesn't make any sense to the rational mind, non-dual realization usually arises in someone that has explored the realm of their own personal consciousness very deeply (meditation, contemplation, psychedelics, hypnosis, lucid dreaming, etc).
Yes, because these systems inherently violate the privacy of parties that didn't consent to the spying. This includes private individuals, and competing companies with whom the "consenting" individual interacts.

A thought experiment: imagine a corporate TOS including a clause that specifically prohibits use of devices/software that violates the provider's privacy. E.g. an end user's account can be terminated because they're using Google/FB/other "voluntary" spyware...
Stop working 12 hour days. Take a completely disconnected vacation. Limit yourself to 8-9 hours per day of screen time when you come back.
Having altitude and being able to glide in is a hell of a lot better than one of your engines reversing and throwing your plane into an irrecoverable spin.
I just think that there needs to be significantly more caution - almost a pathologically high amount of caution.

Think of it from a software engineering perspective. All the unit tests that are done to ensure 100% code coverage, all the testing in identical staging environments, and yet we still have to revert sometimes, once the code is in production.

And this all still happens in environment where the code is something we wrote ourselves, is properly and thoroughly documented, with all dependencies and relationships clearly defined. And still, major problems happen but it's nice that we can just go to Git and try again.

With genetic engineering, the genetic code was not written by us, has zero documentation, the relationships are left for us to figure out, and there's no proper staging environment with a working ecosystem for us to test things in. We basically deploy straight to production after a few unit tests. So, yes, definitely I don't think there is currently enough caution being taken.

Of course, the reality is that genetic engineering won't stop, not until we shoot ourselves in the foot a few times and people realize the seriousness of it.
We should consider changing/limiting that.
It's helpful to look past the illusion of the two parties and realize that most of the politicians in each party are more on the same side in the big picture stuff than not.
Modern planes are flying server farms. How is this surprising?

I've worked with several pilots in my career. Unless you have a ton of experience, IT pays better than flying.
You were asking if "consent was not enough", as if such a thing was inconceivable. I'm just giving you one of many possible counterexamples.
My jam used to be to go to alta vista or hotbot and search "weird shit" and see what came up. Boy howdy...but nowadays I can agree with a lot of the comments. It is about monetization (thanks Mitch) and the user base. Also the rise of what I will call super social sites like Reddit, FaceBook, etc. Allowing users to tailor their content into a funneled feed, where before you had to search for it. Literally. Then bookmark it/rss feed, hopes it stays up. Save some websites/data to a zip drive.... ohhh I did, I did. <3 me some iomega zips. Thanks for a walk down internet history lane. Enjoyed it!
There is no comparable anti-intellectual streak in the American left as there is in the right. Attempts to equate the two is pure bothsiderism, as insulting as it is wrong.
Pain is objectively bad. Even if in a greater moral system pain is necessary to balance things and so is "good" in that sense, even then it would be a necessary evil. (keyword evil) If there were a way without it, that would be better.
You can sorta meet the burn-in half way with a smaller number of thermocouples (temperature is the primary component of burn-in AFAIK) and a wear model related to cumulative energy input. I've been looking to prototype this, but I've not done the work to acquire a panel which I could prototype it on. It'd take quite a bit of fast memory, but not an outlandish amount.

I hope I get a chance to take a poke at it before too many patents are filed.
European here: our (mobile) phone numbers are "random". Are yours too or are they matched to a subscription area ?
I disagree.

"They" and "them" are - as far as I am aware (and I work in a highly-charged (some out say overly-so) diversity-aware company) - the currently preferred terms. The sand may well have moved under my feet (this happens every month or so) but as far as I understand this is the politically-correct term for referring to generic "people" without referencing gender one way or another.

For better or worse, I think we can all agree that only ever saying "him"/"he" or "she"/"her" is currently considered unacceptable (for better or worse) in English-speaking companies.

I do wonder though how this plays out in companies where gender is a major part of the the dominating-language. How can you eliminate her/him in a language where such simple concepts even a table has a gender stereotype (der tish, la mesa, la table etc)
The all-new 2019 Mazda 3 punches far above its weight for under $30,000
>If apple is going to antagonize some of the biggest lobbying tech firms...

Google and Facebook would be the antagonists with the Enterprise Certificates and Apple would be protoganist, in these scenarios, yeah?

In other words, it's not as if Apple is telling these companies to use their Enterprise Certificates to skirt Apple's review process and then pulling their certificates when they're discovered to be doing so.

Calling Apple the antagonist, at least in these scenarios, seems a bit disingenuous to what's actually playing-out.
Nintendo used to sell Official Nintendo Cleaning Kits specifically in response to blowing on cartridge card edges, to prevent people from damaging their NES carts due to moisture oxidation.

All but the most severely dusty NES carts should work just as well as a clean cart. NES carts failed mainly because of a fault in the NES front loader mechanism.

Me, I had a TI-99/4A before owning a NES. Random hangs and glitches were normal to me. (The TI-99/4A was prone to overheating.)
> $30/month, unlimited data+text

Whaaaat? I'm on the T-Mo 5Gb + 100 min talk + unlimited text $30 pre-paid plan, where'd you find this unlimited data one?
"Thanks for the A2A"
So its ok to steal something u, cant reverse engineer?
Because there was money to be made, and thus it was taken over by large corporations.

Everything becomes less fun and weird when taken over by large corporations.
Clpgk: Qi Mixed into Common Lisp with Read Syntax [Japanese]
I thought that they did as a mitigation for uncommanded thruster reverser application.
Probably but I'm starting to think the corruption bar might be pathetically low for a lot of these people as well. As in, what they want most is to feel important - put them in a private jet, buy them fancy dinners and I suspect you don't actually have to pay out all that much cash.
What enterprise certs are meant for and what they are used for in practice are very different things. Apple themselves bought out the Testflight service and integrated it into their toolchain and it was built on using enterprise certs to distribute to external users.

It has always been used as a release valve for the standard restrictions of the app store process.
Most meals that I make are easily prepared in less than 30 minutes. I finish eating in 15 minutes, unless it's a special occasion. 45 minutes for meal prep and eating doesn't seem that crazy.
I find the 2-3 feet opposite the monitor and 16 inches from the keyboard and mouse to be my most fun area. But hey, I have tried others and myriad postures to boot.

:)
Stupid is the enemy of progress.
Sigh - I am getting heavily downvoted on this.

Please - sexism has no place in our industry.