skysight-inc/HackerNews huggingface dataset:
> For example when ImageMagick's delegate functionality was envisioned ... IT security was not taken that seriously

Yes it might have been easy to get away with writing the OP's faulty specification into code back then. After 25 years of people screaming about the dangers of buffer/integer overflows, it's very hard for me to think that a serious C/C++ programmer could look at that specification and not see the issue before blindly committing it to code today. I suppose it could happen.

OpenSSL (which everyone else here is crying about as an example) is also over 20 years old.

> And still no one cares. It takes some competence to stop using C, but it's easier to simply shout at those who point out the obvious.

Well imagine trying to rewrite the Linux kernel today in a memory safe language, without losing any support for any of the current target architectures. Or NetBSD even more so for that matter. Nobody has convinced me it could be done, and as of yet, it hasn't been.

Throwing away C and C++ for good is fine - if you don't want to do much in the way right now of embedded programming, or working with sophisticated games engines (eg. UE4), just for fun.

If you're not confident of the quality of the code, then maybe don't deliver it to for all and sundry saying its fit for purpose. And if you are confident, then check it again.
That's all I'm saying.
I think that's about right. It's just one of many cases in which you have to be careful with terminology in diplomatic relations. Other countries/regions that need to be named carefully include: Holy See, the former Yugoslav Republic of Macedonia, Côte d'Ivoire, Socialist People's Libyan Arab Jamahiriya (some of these examples are out of date). In some cases people in the country/region have a strong opinion; in other cases it's people in a different country/region that have a strong opinion. Unless you have a good reason for having your own opinion it's usually best to just go along with these things and save your time and energy for something more important.
But it ran adb? https://forum.xda-developers.com/showthread.php?t=2407250
Looks like more than halfway. Assuming you can arrange aerobraking on Mars, soft-landing on Mars is slightly nearer than soft-landing on the moon!

Getting back is a different kettle of fish though.

https://en.wikipedia.org/wiki/Delta-v_budget#/media/File:Del...
I consider it like a chat in the library as opposed in the local cafe. I go to the section where people know their stuff about X, and we talk about X. It is definitely a network.
A lot of posts seem to imply that there is some sort of moral or neutrality or higher ground to be assumed by an App Store.

That is not so.

App stores are, at best, opinionated, some more than others.
I doubt it. Some might, but I doubt that most do.

Reddit should be easy to target with ads, sub-reddit are can be highly targeted. Take /r/beekeeping, it would be easy to sell beekeeping equipment via ads on that sub-reddit, but I have yet to see a single ad.

Or how about /r/battlestations pretty easy target for PC components, desks, chairs or posters, but no. You get an ad for BMW and freelance coder jobs... WHY?

No one want to buy ad space, everything is via agencies that does not give a shit. Tracking down relevant sites or in this case sub-reddits sounds like work, so instead let's just pump everything through "The Algorithm".
Apple reportedly 'furious' after Stockholm rejects plan for flagship store
I would not think that having to spend a little money is an actual deterrent for those who want to game public opinion. So I wouldn't be surprised if it still happened.
AIUI, an OTA update (or USB update) is effectively carried out by software that was booted from the same flash memory to which the untrusted software was written.

I accept that the manufacturer's OTA update is intended to be monolothic, is desigend to be monolithic, but what assurance do I (the owner) have that the software that was flashed by a physical user actually flashes its replacement monolithically? That it leaves nothing behind?

EDIT: on further reflection, it seems possible to design a phone that provides such an assurance. That any monolothic OTA update actually has to be monolithic, even if untrusted software is in control of the main CPU. But I wouldn't want to bet that any/many/most phones built today actually offer that guarantee.
You didn't provide any actual arguments, instead just dismissing what I said out of hand (in a needlessly snarky way).
You do realize that phone is only available for preorder? They may not even be around in 3 or 5 years. The OP likely suggested Apple (5s is in its 6th year of updates).
> Rust couldn't solve all of these bugs, but it certainly would have drastically reduced the total amount.

Well there's certainly a chronological argument that it couldn't have, but I agree with the sentiment. It saddens me that our industry is one in which people _do_ let perfect be the enemy of better.
Are there any sources on the split of per-user revenue between ads, reddit premium and reddit gold?

I would've normally expected ads to be the bulk of it, but now that we have Fortnite with its strictly vanity merch... you just never know.
Bone loss, changes in bone structure, muscle atrophy, and changes in the inner ear are just some of the suspected negative effect of spending extended periods of time in weaker gravity.

They'd have to spend hours each day working out to counter those effects. Their day would primarily consist of sleep and working out, with a few hours of time for everything else. That doesn't make for a good televised program.

On top of that, a minimum-energy launch window appears every two years and two months (or 780 days), making it way more realistic to send people on two year long missions.
I envy the languages with continuations. That makes the implementation of backtracking so much easier.
Currently, that phone doesn't exist.
Selling ad-free premium subscription is not a good idea if you rely on ads. As those willing to pay, is exactly those an advertiser want to target.
Electric car batteries might be worth recycling, but bus batteries aren’t yet
Why Communication Infrastructure Should Use Permissive Licenses
Climate change is not necessarily a doomsday for humanity. Just as great agriculture projects required a civilizational innovation, and just as Netherlands' constant work with the water led to a strong tradition of cooperation and responsibility sharing, climate change mitigation might motivate similar social and institutional changes elsewhere.

Or not. After all populism and demagoguery is extremely powerful (see religions).
Cool.
Does anybody have an idea How Django or Flask web app can be benefited from overall performance perspective ?
Needs more consistency:

"There is nothing worth celebrating about a world where inequality is so extreme that 58% of people are in poverty, while a few dozen billionaires have more than all of their wealth combined."

Followed later by:

"Yes, life expectancy, mortality and education have improved – this is fantastic news that we should celebrate!"
It's not so much "Trust me because of who I am" but "Trust me because of what I know". If "what I know" isn't actually relevant to the subject discussed, then that's fallacious.

Of course, an appeal to authority is not a valid method of obtaining new knowledge (an authority would be able to formulate the actual arguments that support it). It is a useful method to defer judgment, however, such as when the authority cannot be expected to come in and explain their reasoning in a Hacker News comment.
Russian ISPs Plan Internet Disconnection Test for Entire Country
I guess it matters a lot what happens to the grown out wood as well. If it's burned after cutting it down, you're back to zero for that particular tree. So assuming you're not storing large amounts of cut-down wood, the relevant metric is amount of bound carbon per surface area, and I think larger trees might have a higher density (in the long run) than smaller ones.
Even extraordinarily exorbitant fads finally fade.
You don't need an email address to sign up, let alone anything else.

Personally identifiable information are more valuable than those that are not. That's not a surprise.
Google and Facebook should fire any employees they have in the UK and then tell the UK to fuck off.
Microsoft Azure Lsv2 Instances Based on AMD EPYC Available
Eero seemed like the perfect company for Apple to purchase.

Apple could really use a Mesh product.
TLDR; When the numbers don't fit the narrative, you need to pick out different numbers.

"Here are a few points to keep in mind. Using the $1.90 line shows that only 700 million people live in poverty."

It shows that "only" 700 million people live in extreme poverty as defined by the World Bank.

"If $1.90 is inadequate to achieve basic nutrition and sustain normal human activity, then it’s too low – period."

Yeah, no shit. Extreme Poverty is extremely bad.

"Remember: $1.90 is the equivalent of what that amount of money could buy in the US in 2011."

Yes, it's bad. Really really bad. Let's drive that point home some more.

"If we use $7.40 per day, we see a decline in the proportion of people living in poverty, but it’s not nearly as dramatic as your rosy narrative would have it. In 1981 a staggering 71% lived in poverty. Today it hovers at 58% (for 2013, the most recent data). Suddenly your grand story of progress seems tepid, mediocre, and – in a world that’s as fabulously rich as ours – completely obscene."

No it doesn't! The fact that the number of people that used to live in extreme poverty has gone down means that these people don't live in extreme poverty anymore. That's actually much more significant than the number of generally poor people that are now slightly less poor.
Why Searches Are Elegantly Simplistic and What Goes Through Your User’s Mind
How to Use PowerShell Splatting
Their ad platform also, as far as I'm aware, only spans their own website. Admittedly, given the ungodly amounts of time I'm spending there, that's still a significant amount of profile-building they'll be able to do, but it's still far less invasive tracking than e.g. Facebook's.
I find these marketing-kind of posts incredibly amusing.

>> Rust’s standard library was vulnerable for years and nobody noticed

That's literally as if a developer would say: "World was hungry for this database for years. Now I've built it.".

Come on - that IS your job, after all.

And we know well enough open-source projects never get enough time nor resources.
Why was a vaccine injury court setup in 1986?
> Among nations with at least 10m people, Taiwan ranks around #21 in GDP per capita with a very respectable $25k. They've built something nice for themselves over a long, difficult climb.

The Taiwanese are aware of what waits for those who cooperate with the PRC. Look at Hong Kong. Where’s their freedom now? Look at Xinjiang, at the treatment of Falun Dafa. Taiwan will be colonised, again. First the Dutch, then the Japanese, then Guomindang and finally the CCP.

http://scholars-stage.blogspot.com/2019/01/reflections-on-ch...

> After the Party seized power in 1949, Mao would systematically apply the same techniques to one group of Chinese after another: “landlords” and village leadership; gamblers, gangsters, and criminals; Christian congregations, Daoist temples and the Buddhist sangha; business circles, corporations, and stock-jobbers; universities, schools, and intellectual clubs; hospitals, aid workers, and relief organizations; minor political parties and independent political groups; workers associations and unions; clan groupings and ancestral schools; martial artists and Confucian hold-overs—any set of organized and self-governing citizens was soon a target of a struggle campaign. In time each would be destroyed or brought into a subservient relationship with the Communist Party.

...

> Today The Cause has flipped—officially—from socialist revolution to national rejuvenation. The Party works under the same schema but has shifted the “people” that Mao identified with specific economic classes to the nation at large.[6] Mass mobilization campaigns have been retired. But struggle and united front campaigns have not. Xi’s great corruption purge, the Uyghur labor camps of Xinjiang, the attack on Christians across China—these all follow the same methods for crushing and coercing “enemies” developed by Mao and the Party in the early ‘40s. “One Country, Two Systems,” interference campaigns in the Chinese diaspora, the guided, gilded tours given to Musk and his ilk—these all follow the same methods for corrupting and controlling “allies” developed by Mao and the Party that same decade. The tools have never changed. The only thing that has changed is the Party’s assessment of who is an "enemy" and who is part of the "people."

You’re quite right that if China puts conquering Taiwan above all other aims they can do it, if the US and Japan let them. If they back Taiwan up it’s not happening. The US is quite capable of defending Taiwan all by itself and if the US doesn’t back Taiwan up its credibility as an ally is dead.
The article has Microsoft in the title, not Facebook.
KDE Plasma 5.15 released
Aren't they simply trying to explain and persuade people current institutions are responsible for the positive changes, and that therefore they are good, and thus we should be supporting them? Also, they seem to counter misconceptions, not advocate for blind faith in a never ending progression.

Pinker actually addressed this, but unfortunately I can't remember in which book/lecture/talk/article. Largely paraphrasing he said that we have to work for the gains, but that doesn't mean we can't have a positive attitude about these processes. (Such as comparative advantage resulting in trade resulting in cooperation and some degree of altruism - or we can just call it "counterparty risk management", or simply looking out for your buyers and suppliers.)
So you are talking about "Office 365 Mobile" and/or "Office 365 Online".

There is also "Office 365 Desktop" which is what I think you'll find most large corporations that have migrated from Office 2016 Desktop apps are using.

https://www.howtogeek.com/334597/whats-the-difference-betwee...

Office 365 Mobile/Online are much cut down, more comparable from Google Docs from the sounds of it, and hardly a 1:1 replacement for the Desktop apps. Which are still C/C++.

In addition, if you have any hard evidence that the majority of the Office Mobile/Online web apps are written in C# I would like to see that, because I can't seem to find any.

Thankyou.
> There is a highly effective technique for discovering vulnerabilities that I haven’t applied to Rust yet. It beats everything else by a long shot, and can be used only by the bad guys who want to break stuff, not the good guys who fix it. It’s… searching the bug tracker.

> The proper way to handle them is to file [memory safety bugs] into a database called Common Vulnerabilities and Exposures (CVE for short) so that people who care about security are alerted to it and ship fixes to users. In practice such bugs are silently fixed in the next release at best, or remain open for years at worst, until either someone discovers them independently or the bug is caught powering some kind of malware in the wild. This leaves a lot of security vulnerabilities in plain sight on the public bug tracker, neatly documented, just waiting for someone to come along and weaponize them.

Interesting that this is such a common communication failure. Wouldn't it be relatively easy to make automatic tools to help with this sort of thing? Searching for keywords in new issues for example?
It's crazy how this is even an issue in Android when it has been a solved problem in desktop Linux for decades. I can install Ubuntu on any ancient laptop and have daily security updates for life. The only explanation I can think of is that Google planned this on purpose so users would be forced to buy new devices every few years.
No one can "stop" climate change. It's far too late for that. All we can do now is hope to blunt the force of the impact.
Don't know if the equivalent exists where you live, but in France you can work with a contractor that does all the administrative work and just pays you a salary. You don't have to worry about accounting, tracking payments, business insurance, health insurance, retirement, etc. as you technically don't own a business, but you're still a freelancer, choosing who you work with, for how long, at which rate, etc. You have a salary without having a boss. I've used this system a few years ago, pretty cool.
How do you know? As far as it goes, this novel might be actually an accurate prediction (except for the year).
Wot?

It means there's _more_ data collection and profiling since you can't otherwise make profit.
Modern China is definitely a "market economy" in every meaningful sense of the term. Unlike in Maoist times, there is no central planning committee deciding what should be manufactured and sold and private businesses make their own decision based on what they think will sell. Is there government intervention in the Chinese market? Of course, but that's true of every country -- even the US. The completely free market is just a theoretical concept never practiced anywhere at any time.
Most people here seem to be missing the point: it’s not that poverty hasn’t been moderately improved over the past 30 years, but rather that Pinker’s work has had an incredibly outsized impact on policy and influence on media narratives.

Simply put, Pinker and Gates have tricked much of the world into thinking neoliberalism is the best thing ever, even though the data actually shows that the majority of the improvement comes from other brands of economic policy and that most of the wins overall are going to a small number of extremely wealthy people. It’s not abjectly terrible but also not great, and when our capacity to improve poverty has improved so much, isn’t there a moral imperative to do better?

Here’s an episode of one of my favorite podcasts that features Hickel as a guest:

https://soundcloud.com/citationsneeded/episode-58-the-neolib...

https://itunes.apple.com/us/podcast/citations-needed/id12585...
I prefer news of the form "The XXX company that Stopped Climate Change", otherwise, post random github commits (in Lisp)
Read the actual report.

CNBC's version is an example of what some people call "Fake News"

https://assets.publishing.service.gov.uk/government/uploads/...
China’s ‘easy’ money days over as value of VC deals plunges
An important note regarding the "kosher" ISPs - they're opt-in. Anybody who has an account with a "kosher" ISP is free to cancel and get an account with an unrestricted ISP. That makes them qualitatively different from Chinese etc. ISPs where people have no choice but to submit to censorship.
That seems like a pretty dubious assumption. Who’s to say they aren’t more desperate for cash due to that? Reddit makes it painful to browse their site on mobile exactly because they want you to use the app so they can track you.
On higher education, programmers and blue-collar jobs
I would say that was true until 2-3 years ago, my sense is reddit has broadened out a lot recently.
Why would ecologists think in straight lines? Don't they start with the Lotka-Volterra differential equations to model prey-predator population fluctuations? (Even if they learn just the concept, and not the underlying math.) Also, haven't they learn a bit about exponential bloom and decay of algae?
Thanks for this quite useful. Finally, some other dedicated providers than Hetzner pop-up
€380 Pocophone F1 with Chrome. What an eye candy!
It sounds a lot like constraint programming.
This made me chuckle, just a few years ago we were up in arms against Chinas great firewall, I know this is not on the same scale but its still a restriction on what people can report on and now who is to say whether there will be political bias in shutting down certain posts?
I don't really like the message. For me, it's not "boo, a bug was found after years", it's "yay, they managed to find it!". Bugs are inevitable, security bugs as well.

What I don't understand though is how they ended up with that bug in deque implementation anyway. Does Rust use "unsafe" keyword for its major data structures? If so, why? I would assume that having Box would let you implement most of the ideas without resorting to working with pointers and manual memory allocation...
It seems like Google Documents has enough momentum that it's not going to just randomly get shot down. And it doesn't seem to be in the phase of getting neglected.
So let's address that.

Do you believe that quality of life for a randomly chosen person has improved since 1820? My reading of Hinkel is that he does not believe it.
Intel SGX 'safe' room easily trashed by white-hat hacking marauders: Enclave
Serving article comments using reinforcement learning of a neural net
If you can afford a car, you are not poor.
I recommend spending some time in e.g. Democratic Republic of Congo, Mozambique, Uganda, Yemen or Malawi, so learn about poverty.

Poverty entails non-optimal choices.

Looking at the drug addicts around where I live, non-optimal choices often lead to relative poverty too.
Design Without Color First
We are, at every level.

Personally resist, ignoring political demands en-mass, refusing to open offices in a totalitarian state, international sanctions for actions against on neighbouring states and diplomatically agreed semi-autonomous regions (HK).

China is powerful but if they can't sell to us, all their plans are for naught.
This is an NP-complete problem, so performance will be an issue anyway.
Here's one dumb but plausible scenario of how the world ends:

A new automated network-exploit tool is being researched.

One day a national-security intern brings their vape inside the faraday cage at work. Completely forgetting the damn thing has a quad-core armv7, bluetooth and 802.11ac for google now functionality of course.

After doing a quick battery check, they go outside to take a hit, and unknowingly release into the wild the worst digital virus humanity has ever experienced.

It does not take long for the vape to exploit their work phone, however this is contained by OS. What's not contained is the wifi security camera across the street. The tool makes short work of the bootleg windows xp POS terminal inside the store too.
It pwns the wifi-router, finds a bunch of gaming PCs with GPUs good enough to run hash-cracking on, and the rest is history. Turns out all the Cisco and Huawei firmware keys were still up on pastebin so the tool starts mining ethereum instead, no one knows why. Intel gets a mysterious $75Billion order for FPGAs. Rolling blackouts start happening. Boston Dynamics tries to file for IPO.

The 9 mortals left on earth who still know to reconfigure BGP(Border Gateway Protocol) have all gone afk. No one is sure where they are or if they even wanna help after all these years.
You made a simple If-this-then-that claim that was a non-sequitur, that's my only point.

> we strive everyday to provide new mitigations and defense in depth to prevent its exploitation.

I'm fairly confident that even if you didn't do that it wouldn't make much of a difference, because the likelihood of anyone attempting to exploit your particular niche program are quite low.

> But you go ahead and believe it's because of dumb luck if you like.

I didn't say it was dumb luck. The fact of the matter is that most software isn't hardened in the way you describe, for simple economical reasons.