skysight-inc/HackerNews huggingface dataset:
Good information, and based on that, I agree, Nielsen is doing similarly bad things, one distinction being that a child is unlikely to sign up for these services without their parents' knowledge.

I'm not here to defend Neilsen at all, but I do think Facebook has a bit more responsibility to make the right decisions here given their ubiquity, reach, AND the invasiveness of how a root certificate allows them access to encrypted traffic and even text messages (really?).
Sofa – The best way to REST (is GraphQL)
The only problem with using Alpine as a desktop distribution, is that security updates will sometimes take months to be available, and this is only because the team working on Alpine is very small.

If this wasn't an issue, I would not use anything else on the desktop.
It's both, toxic and an allergen.
An Inside Look at Drift's Content Marketing Strategy
As someone who has tried that in the past: it doesn't work. I would kill myself trying to get certain people up to speed and also trying to do my own work.

The problem is that it's a self-fulfilling prophecy. For the most part, people are less competent because they don't put in the effort to get more competent. Trying to force people to give more effort is not a fruitful endeavor unfortunately.
Yes, but it’s not so much the side we “picked” but the team that was given to us. Just as the Soviets often times had no choice but to work with truly bad people.
I hope they'll drag it on indefinitely, and maybe the two will have a giant war of sorts. This is one of those cases where I don't like either side, so I'm happy to see them having a destructive fight.
Also, for doing it the other way around (REST from a GrapQL schema) there is Sofa

https://news.ycombinator.com/item?id=19037379
Areas You Need to Master as an SEO Professional
Show HN: Wiseer – Powerful and user-friendly text analysis
Tyson chicken nuggets might contain rubber, USDA warns
Isn’t a virtual SOC just a VM with extra steps?
Same! I’m actually going through Spivak’s Calculus, since that used to be on there.
Lignumified metal? :)

( lignum is wood/timber in Latin )
Hi HN! I've been lurking on this website for awhile now, and finally feel that I am ready to share my passion project.

It's not perfect, but I think it's a rather nice product at this stage. I'm excited to hear your thoughts on it!
So I guess you love Windows with dozens of running executables and plenty of open ports out of the box? What, you don't want the Xbox service at start up?, too bad.

OS security is rapidly decreased by increased running services. Minimizing your services reduces your risk footprint.
If a company is hiring people who can't write code then their hiring process has huge problems. In my 15 years of developer experience at 5+ companies, I've never once met a developer who couldn't code. I don't know where companies are finding all these developers who supposedly can't code.
I guess you can think of hazard pointers as a degenerate mark and sweep concurrent GC, where the hazard pointers themselves are the roots and the scan goes only one level deep.
Show HN: Leave Me Alone – A privacy focused email unsubscription service
I don't understand the level of complaints on HN about that sign up overlay. Are they testing multiple nag screens and I got lucky and always get the minimally intrusive one, and the rest of you getting the terrible ones?

Yes, it is slightly annoying, but it is extremely easy to dismiss. Unlike the nag screens at many sites you don't have to find and click an 'x' in some weird location. It goes away if you click anywhere on the page outside the nag screen.

It also goes away if you hit ESC on the keyboard. (I don't know if other keys also dismiss it too. I've only tried ESC).

Furthermore, also unlike many other sites, it comes up right away rather than waiting for you to get into the article and then interrupting you. So it is click on a Medium link, get shown the nag screen immediately if it is going to be shown at all, and then hit ESC or click somewhere and it goes away.
> We recently experienced an interruption with API

It sounds like kind of an amateur deployment/test problem. The lack of explanation would have me worried too. Their platform is pretty large and widely used, so you'd think their API would have tests for such a thing.
Sample size of one, but I worked at a medium sized company that had an Enterprise certificate they used to distribute internal apps to internal employees, and the few individuals who were given the keys to sign these binaries were told the warning about what they could and could not do with them. It was made crystal clear that if we abused that cert, Apple could revoke it and put us into a world of pain.

If some rogue team just got ahold of the certificate and keys and signed binaries meant to be distributed to the public, it meant either a major internal security failure or a willful disregard of Apple’s policy on enterprise distribution.
Mostly i solve my own problems and than make them bit more generic and polish them so that they are useful to others as well. Some examples are

1. Taxes: I have automated interest calculation,reconcilation of my accounts in different banks, calculation of ltcg/stcg in stocks as per my tax slab etc. Now every year i generate automated report and than spend sometime in reviewing before submitting it to tax authorities.

2.Organizing personal collection of movies/music: Finding the duplicates, making sure there is one copy, extracting thumbnails, downloading subtitles,trailers from youtube and movie info from imdb/wikipedia etc.
Say I have 100 rooms. Each room has 10 characteristics that might vary. Those 10 characteristics are going to be shown or referred to by about 10 different blocks... some are making decisions about the temperature, some are showing it on graphics, some are logging data.

That's 10,000 links. You can't actually draw lines for each of those links to the room information. It's literally impossible to put them on a screen, let alone process them visually. So you have to refer to the variables by name and you still end up with 100 links to draw between variable names and function blocks.

Once you refer to variables by name the relationship between the source and destination is no longer visual. The visual part is just inside any given encapsulated function. So now you're programming with parameter passing but instead of just typing text you're also pulling away to move the mouse and try to line blocks up on a grid all the time.

This should be pretty obvious while coding in text. Imagine every time a you call a function there has to be a line somewhere that represents that function call. It's too much visual information. You can abstract away some of it by saying "oh, we have a block here that goes out and grabs all the room numbers", but now a lot of the logic starts to depend on the contents of those blocks and it's no longer clearly visual.

Visual diagramming is great for roughing out an idea of how something works but enforcing a rigorous correspondence between the diagram and the function of the program turns out to be a lot of trouble for not very much gain.
Medium is like Google+ for me now. Don't go there.
ello.co is a decent alternative to sites like deviantart or tumblr.
By self destruct, I meant switching off the engines in flight seems to me to be a terribly dangerous behavior.
> It's entertainment for people who are interested in geopolitics.

And that's the crux of the problem. This entertainment geopolitics is no longer confined to just places like the NYTimes magazine. It has basically blended in with all "journalism" today because it's great for engagement. In the best case scenario, the hallmarks of good journalism like informing the reader with facts and being impartial are mere afterthoughts.
> Define a Language Server Index Format (LSIF, pronounce like "else if") that enables a language server to persist their language intelligence, so that it can be subsequently used to answer LSP requests at-scale (for example, hover and go to definition).

This is excellent. I am so excited about this.
Lock-free structures have always felt like the "holy grail" of concurrent programming. I remember being blown-away when I read through the paper on CTries (which I'm assuming ConcurrentHashMap would be based on), and even more blown away about how well they performed.

I always assumed that Ctries basically necessitated a GC, but I am very happy to be wrong about this!
Huge oversimplification. Some companies can hire very good engineers most of the time. Most companies cannot.
In this case, possibly years
It's worse when they are right though. I wish I could say that had not happened to me.
I don't understand why you are so hostile with me.

All I'm doing is telling you that you have rights and that you should not give up. That there are people living in your city with similar situations as yours that have managed to make it through.

I know one person who moved from Québec to B.C. to start a new life as their true gender, so I have a hard time believing that the situation is as bad as you describe it. I'm sure it feels that way, being trans is absolutely crushing but our perception of the world around us is often flawed.

Looking at your posting history here, most of your recent comments are either dead or negative. That's people who have no idea you are trans. In my eyes, the issue lies elsewhere. You act very crudely and I can only hope that you do not act the same way at the workplace or during job interviews.

Have you considered moving to another province instead of changing career? There are a lot of LGBTQ+ friendly cities across Canada.

Don't give up, keep fighting.
It’s pretty clear when you’re using an enterprise certificate, especially as an iOS dev. The whole process of building an app makes you very aware of code signing which is a pain felt by all iOS devs (it’s gotten more automated thru the years, but still..). I doubt anyone could claim ignorance.

Disclaimer: I work for apple, unrelated to all this.
> It is quite well studied and solved in various languages

I wouldn't say the expression problem is "solved"; various languages pick different tradeoffs, but the underlying problem is still there.

The best description I've seen of this is at https://www.tedinski.com/2018/02/27/the-expression-problem.h...
From the looks of the screenshots in the article, it's possible they are using MongoDB (json format, $oid field). Old versions had insecure defaults [0].

I'm currently in India, in the finance field, and I think it could happen to my company (passwords on post-its, computers left with unlocked sessions, some servers accessible from any employee - or anyone inside the office actually...). Security is sometimes tough to advocate, and raising awareness is easier said than done.

[0] https://news.ycombinator.com/item?id=13374715
Yeah, I really wonder if there is a “non-evil” example for:

Don’t worry how this will monetize. We’ll figure this out later once we have the scale.
I always appreciate those comments. Sometimes they include something obvious I never thought of.
You get deprived of those rights by being convicted of a crime by a jury of your peers. That's the whole 'due process' clause in the constitution.
This comment exemplifies everything wrong with Hacker News today.

1. It's smug and self-indulgent

2. It doesn't add anything new or informative

3. Boring standard whining
> We don't really know how DNA affects cognitive ability in general, much less what if any affect ethnicity or gender has.

That's why we need to study, come up with theories, disprove them, and find better theories. When it comes to race and gender, there's too much stigma attach to even try and come up with incorrect theories.
Not anyone who's ever been on a commercial flight.
Counting No. Of Parameters in Deep Learning Models
It's almost as if networks themselves would start injecting ads, which has been going on for years[1].

[1] https://www.privateinternetaccess.com/blog/2016/12/comcast-s...
The South Indian kingdoms were naval powers before British and Portuguese. There was hardly any trade done from India via land. It was mostly via sea.
Because it’s a prison. Voice monitoring is disclosed when calling from a prison. Public or private makes no difference.
So the venture funding is just giving them more rope to hang themselves with? It's letting them make bigger, more costly mistakes?

I would bet many of the investors were making a bet on Ev Williams as much as they were on Medium. Medium's business model has always felt a bit exploitative. If they truly are focusing on quality rather than quantity, maybe that will change.
So, they might be able to tailor a potentially unsafe or deadly hormone (read: poison) to get at cancer. Sounds like chemo v2 to me, not a cure, won't work in all cancers especially later stage which no longer depend on the receptor stimulation.
It had a one year lapse this past year. So just let it expire?
Why physicists need philosophy
You do bring up an interesting point. Apple's (expected?) responsibility here is to protect their users from malicious apps on their devices. It does seem reasonable for me what they are doing, but of course if they were to lose sight of their users' best interests, then this could become problematic. However, I think for issues like that we need to just trust the market to correct for that. If Apple were to destroy user trust, then I would not doubt that people would flock to their competitors (Google, Samsung, etc).
I found this article helpful. Since C is a "strongly typed" language it helps to review what is meant by type. In addition, like #DonaldPShimoda, I liked that the author challenged to the existing notions of type. Good read.
Full stop, no arguments, I’m right? Are you open to discussion or here to impose your ideas?
Apple has a very lucrative business where they have a sizable legion of followers who will spend almost any amount of money to own their products. They don't really need new customers, and aren't likely to convert many with traditional advertising tactics, so they just have to sit back and continue iterating on what they have to get existing customers to keep coming back for newer stuff. Basically, their business is all about draining money from their existing userbase, not expanding it.
A US company took money from a foreign government and used it to spread foreign propaganda, while calling it advertising.

Money is pooled into massive organizations called 'PACs' that are used to fund campaigns that get folks into government, then offer them sweet high paying jobs afterwards as long as they do their bidding while they work there. It's not corruption, that's lobbying.

It gets tiresome calling things what they are when there are dozens of definitions that the corrupt use to alter the nature of what they do with language. Corruption and propaganda are rampant, but once they can all be called 'marketing', or whatever the people with the power to influence via the media want to call them, that's the language that we use, and truly harmful things become easy to defend.
This is something I got curious about too. It's very likely the answer is no, but I would like to test it at some point.
Venezuelan Army Defectors Coordinating via WhatsApp
I found that I now distrust a lot of articles as people tend to get the things in my field blatantly wrong all the time.

Things are complicated and rarely as simple as they seem.

On the other hand, I've worked on things for hours before for someone to glance at the problem and solve it. Always a humbling experience.
They are right more often than you’d expect. Irrational escalation, loss aversion, confirmation bias, etc play their part everywhere causing senseless projects to be pushed to completion.
> No. In this case it allows cheap, (mostly) unsynchronized deallocation.

There isn't anything about garbage collection that enables something that couldn't be done before. If a lock free data structure is holding other non-trivial data structures that have no notion of concurrency, you are already in a position where you have to take what you can get.

> synchronization consumes a lot of CPU cycles. Ask any C++ programmer.

I've done a large amount of lock free programming in C++ and the best scenario is lock free data structure that takes responsibility for all the data stored in it and isn't just a container of pointers is the best approach to control the amount and types of synchronization. Atomic reference counting with the last reading thread responsible for deletion is just fine as an approach.

Ultimately, having granular but heap allocated data structures in a 'lock free' container needs to come with proper expectations, since it is a poor way to scale concurrency. Granular synchronization can be fine if typical usage isn't going to see much overlap or if the whole thing won't see much use in the first place, but for concurrency to scale, larger chunks of data separated out by their dependencies needs to be used.
> systemd set the secure default, even if that breaks backward comp, as usually upstreams do, when it comes to security.

Breaking compatibility is generally avoided to the utmost. Even security-sensitive things like TLS continue to support older, less secure versions to retain compatibility with peers that haven't been upgraded yet, much to the chagrin of everyone when they screw up the version negotiation, but better than the chicken and egg problem where nobody can upgrade until everybody has.

But the other point is that the claimed security improvement doesn't actually seem to be there in this case. They haven't made it so you can't have a program continue to run after the end of the current session, they've only changed what you have to do to make that happen, thereby breaking everything that did it the traditional way.
It doesn't say "40 minutes to be towed back" it says "A tow truck arrived some 40 minutes later to tow the aircraft off the runway."

40 minutes for the truck to arrive?
"Bugs like this have been fixed" != "all bugs like this have been fixed". That is, some similar bugs having been fixed does not make such an exploit impossible.
> Of course, you need to prepare a cross-dressing photo of yours first.

This seems like a way to collect cross-dressing photos? Not sure if there are other motivations here.
The author is on point though. NyTimes feels dated and confused in the way it is acquiring its news.
I don't understand the issue. systemd offers the option to override the default. Its literally a config. If its such a big deal, why don't the distros just override it? Its a one time change.
This is straight out of chapter 1 of Alan Cooper's "The Inmates Are Running the Asylum" (2004). What do you get when you cross a computer and an airplane? A computer!
Dedicating yourself to a specific high quality open source project (popularity doesn't not necessarily imply quality, but in the absence of other indicators start here) can serve in many ways as a mentor would. Some advice on getting started on an open source project:

Open source projects (whether corporately funded or hobby led) are run by people! So it's in your best interest to give before you take. Become active on the communication channels, answer user questions, fix issues where you can, etc... Once the lead developers recognize your name, they will be more willing to review your code (and get your changes merged when review bandwidth is low). Well run projects often have very knowledgeable people that can point out mistakes and teach you in general.

Of course, there's still value in being a "drive-by contributor" where you fix a small bug and never come back. It's just unlikely that you'll form any sort of relationship from such an interaction.
The bigger threat that WW3 or Global Warming is pervasive monitoring. Whoever survives all the other disasters can be completely controlled by whoever has the ability to monitor everything (and then kill anybody who acts or speaks against their interest. There is no such thing as resistance when your ability to resist is detected and monitored.
Medium is poor choice of publishing platform anyway https://pawelurbanek.com/medium-blogging-platform-seo
All of which are for process crimes committed after the investigation started, or for completely unrelated white collar crimes from years ago
how about we make it illegal to hack into systems unauthorized? oh wait...
Some of the comments in this thread will answer your questions: https://news.ycombinator.com/item?id=18479588
Specifically, it wasn't a design goal of reverse thrust, and it's operation mid-flight was directly responsible for over 200 innocent lives lost[0]. Thrust reversers are very much a "nice to have" feature on turbofan aircraft, with every one qualified to both land and initiate a rejected takeoff at maximum weight without using them, though not without some maintenance after.

[0]: https://en.wikipedia.org/wiki/Lauda_Air_Flight_004
You're correct, it was the F22, not the F35.
People (including me) always talk about how memory safety without GC is the most important feature of Rust, but just as important is how easy Rust makes fine-grained parallelism. In Rust, you can often start off writing sequential code and then bolt parallelism on after the fact and have it all "just work" with improved performance, thanks to libraries like Crossbeam and Rayon and the way the ownership/borrowing rules enforce data race freedom. That's really powerful.
Highly recommend Leave Me Alone. Discovered it late last year through Twitter and it helped me unsubscribe from 238 newsletters with about 5 mins effort.

It's also an open startup so you can look at all the actionable metrics at https://leavemealone.xyz/open
I sent Stripe a bug report once and they replied I had to sign in on their website to email them.
I believe what's being referred to is the first sentence on the OpenBSD site: "Only two remote holes in the default install, in a heck of a long time!"

A more cynical reading of it would be: "OpenBSD is secure as long as you don't run software on it." I share that cynicism.

The discussion is relevant if you believe that an OS should have some responsibility for memory-related security issues.
> There's little you can do beyond that.

Depending on how much you want to spend, some flavor of iZotope RX will let you de-crackle and perform other types of audio restoration in a very transparent way.
This is the second comment I've seem where you being a hallway monitor is far more disruptive and annoying than whatever you're responding to. FYI making it clear that I'm being contradictory is better than a passive aggressive declarative statement, which is a position I shouldn't have to explain, but since you're apparently so concerned about how other people communicate, there you go.
I can imagine there's plenty of "between the lines" stuff you learn as a CIA agent that, while not specifically classified, wouldn't be something you want going to other nations.
> because I don't think it pertains to the big decisions that I really care about.

Because you dont want to think that, or because you've studied this and know it is the case?

With companies like FB being directly involved in the study of emotional manipulation of their users by altering their news and friends feed, I really think you are off base on the potential power they could have over a large number of individuals. Maybe you are somehow immune to their propaganda, but that is not a risk I want to take at society scale.
OK, agreed - that was definitely unjustified hyperbole. By all accounts, they did not intentionally "collude" with the Russians.

But what looms larger in my mind is the fact that FB was egregiously negligent in allowing the manipulation of their platform to take place to the extent that it did --- both in the context of that fiasco, and in much worse situations, e.g. in regard to the genocide against the Rohingya in Myanmar.