skysight-inc/HackerNews huggingface dataset:
I always thought SNOT just meant that you couldn't see any studs on the presentation surface, for example, such that if you took a picture of your model then you wouldn't see any studs.

Is it broader, like to mean using a brick in such a way that normally the studs would be on top but now they're in a different position? Or something like that, e.g., not just in the overall aesthetic?

I admittedly don't really know all of the terminology. My kid has recently gotten old enough for LEGO, so I'm starting to learn more (or relearn what I knew as a kid myself maybe).
Since that was less than two months ago, the current submission counts as a dupe. When it's open-sourced, that will be significant new information, which makes for a new story. It will certainly be discussed by HN then.

https://hn.algolia.com/?query=%22significant%20new%20informa...
If you have a 40 mile commute then the Volt can run on electric for pretty much the whole thing

... assuming that charging is always available at work/school and you don't go anywhere else either way.
I don't get the criticism here, you're right on the money. What's the one group of people absolutely guaranteed to

a) audit a tool like this and

b) have the chops to perform that audit

Reverse engineers. If you're nervous, just wait 2 months and follow Twitter.
No, it shouldn't. sh do not look at extension of file, gcc does. It can bring some issues like the need of explicitly stating source's language for gcc in the command line.
There is in fact very little evidence that we "need" the authentication provided by DNSSEC. Here we have an illustration of a phenomenon we've seen repeatedly: an attack for which DNSSEC has absolutely no utility, used deceptively as an argument for the necessity of DNSSEC. The same was true of claims that DNSSEC was a necessary response to BGP hijacking a few months ago.

If there were actual routine attacks that DNSSEC was seriously defending against, you don't think its advocates would be sounding their trumpets about them incessantly? Occam's Razor argues emphatically that the attacks DNSSEC deals with aren't occurring.

Meanwhile: if the reason we need DNS security is for certificate issuance, DNSSEC is a stupid way to get that. We can and will create a secure channel directly between CAs and registrars (one such system is RDAP, the upcoming replacement for WHOIS). We also have systems in place that have demonstrably defeated misissuance, most notably certificate transparency, which does not in any way depend on DNSSEC. CAs can and will do multi-perspective DNS lookups, which are valuable (though imperfect) even against the BGP attacks that completely bypass DNSSEC.

The history of Internet network security is largely the history of higher-layer systems routing around the insecurity of DNS; an insecure DNS is practically the premise of Internet security. And throughout that entire history, going all the way back to when I was in high school in the early-mid 1990s, DNSSEC advocates have been trying to foist this boondoggle of a protocol onto us. It was annoying when it was just a bad cryptosystem that was impossible to configure. But now it's a key escrow system as well. Fuck that. DNSSEC is still failing. Let it fail all the way away.
I think the programming language design is not the problem. Python and others are easy enough. The problem is more with representing the thousands(more sometimes) of decisions that go into building a codebase. It is impossible for someone to just go in and understand a codebase. If there is a way to shorten the time to learn why every decision was taken, programming could be easily gamified.
Geeks-need help to catch the Animal
In our community, there are a bunch of coyotees showing up unexpectedly especially in the mornings, biting women joggers and overall scaring people to go out at dawn. Is there anyway we can help the local cops using technology? Few ways I can think of:
1) Drone enabled animal recognition system?
2) Cameras watching neighborhood that would alert when it sees the animal?
I don't have a VR rig, but do have the game. What's the difference in experience like between non-VR vs. VR?
Not to mention SELinux, which was partly developed by the NSA. Red Hat is much more involved in that, though.
> The real question is the rest of the silicon (peripheral controllers like TB etc which they also get from their Intel deal).

This is one of the reasons I think the 12" MacBook moving to ARM makes strategic sense - with a single non-TB USB-C port, it's already on par with the iPad Pro. (Technically behind, since the iPad has a 10 Gbps port and the MacBook currently only has a 5 Gbps port.)

And I have a hard time sussing why Apple would have seemingly abandoned updates if they're not moving it to ARM.
But Erlang is a dynamic language...
How does DNSSEC help you here? BGP attackers control IP addresses. They don't even need to touch the DNS to misissue a DV certificate.
This unwillingness may indicate a lack of competency, complacency as a market leader, or complicity with censoring regimes.

How f difficult is it to sign a zone?

DNSSEC isn't perfect (indeed it only provides assurances of record integrity and doesn't secure the channel); but it's certainly better than nothing, than no signature at all.

If route53 can't or won't or doesn't have to because they don't want to implement DNSSEC, route53 is not suitable for .gov and .mil domains.

It's really that simple.

I get that you want to use terraform; I don't see why you think route53 is the only DNS that terraform works with.
> Is * inequality inherently bad?

Suppose it depends on where you stand (or fall) in the resulting correction event.
It would also make me want to consider Ken Thompson's compiler trojan, and whether there is any similar vulnerability that could be inserted into an RE tool.

http://wiki.c2.com/?TheKenThompsonHack
EU considers Brexit delay of 21 months
I did see Colm's Tweet last week. I'm just not sure what the attacker gains from the lockout being cryptographic, as opposed to being based on old-fashioned DNS caching. If the attacker gets an A record pointing to a bogus IP address cached in a bunch of places, that's just as bad as getting a bogus DNSSEC key cached - either way, users are locked out until the malicious records expire at their resolvers.

DNSSEC makes many things worse, but I don't think this is one.
I’ve been thinking a lot about this recently as my company goes through what I think are pretty common growing pains. This is the first time in my career I’ve been part of a startup, though I’ve worked with lots of startups as a consultant/ contractor over the years.

This post from Steve Blank https://steveblank.com/2018/11/13/its-not-change-you-fear-it... is a more personal take on the same thing.

For everyone who’s been through this before, what was your experience like? I think I’m doing okay right now personally as the company changes but I’ve got peers who are seem to be struggling more. What helped you through these types of changes, what made thing worse?
Of course it is a moving goal post due to inflation, rising living expenses, etc.
I think we're agreeing and you probably meant to reply to the other person I was discussing with. If we're disagreeing, let me know and I'll reread.
Then throw some dirt on top and 'discover' it anew during the harvest? If something has been there for hundreds or even thousands of years it can probably last another few months. Not really a workable solution for construction, but surely a farmer might get away with it? Or one might store a found object for a while before realising it's historical significance.
That’s a pattern I use a lot. Passing services and connections around everywhere is a pain, but I like to stick to a more functional style. I generally use classes as a place to hold context (E.g. dB connection) and then use a functional style within the class. Works as a fairly happy medium for me.
To secure against these attacks, registrars and dns hosting providers need to improve the management of the zone. Things like allowing NS, DNSKEY, and DS record updates to be authorized separately from other record management. To limit the general updates to standard DNS records.

This doesn’t fix the problem of course as access can still be gained to the master admin account if it’s credentials have been compromised, which is true about nearly every service on the internet. DNS is no different, except of course that it’s critical to serving traffic to a site.

I agree with the GP in that ICANN is being dishonest in encouraging DNSSEC as a response to hijacked accounts. What they should be pushing for is better security practices, like 2FA, by the registrars and more authorization limited options for limiting the exposure of an account to common updates versus less common more critical ones.
Any suggested resources or examples to learn from?
I'm looking forward to the cow/pig/sheep/chicken extinction event - no one will keep them around, except maybe in zoos, if the whole world is vegan.

Edit: a downvote? this is totally serious - what are they going to be - released back into the wild where they roam free? There won't be any more, except as I said in zoos, if the whole world goes vegan
They aren't really comparable. While IDA has some debugging features, it's all about static analysis. It has features for browsing and annotating code - you can view the code as a control flow graph, add your own names and comments to functions and variables once you've made sense of them, define structures and their members so you don't have to memorize what each offset to a common type means, jump around in the call graph, find other usages of global variables...
Yeah, I feel like Paul Wouters also shot this scenario down pretty conclusively, but I'm sort of doing my best to reconstruct what colmmac was talking about and might not be doing the best job of it.
> They promised Mac Pro successors in 2019

I don't think they ever did promise that. They made the original announcement in 2017 and only announced "not 2017", they never actually committed to a date.
Only when constraining ourselves to native development across mobile platforms, in which case I do agree.
Say you’re asked to head a team to build an operating system kernel. You will use your expert judgment, and that will include not just facts and data, but your philosophy. Agile or waterfall? Micro kernel or monolithic kernel? The decisions are not going to be a neutral function of the facts on the ground, but your overall philosophy. But you probably wouldn’t base those decisions on polling the general public!
> Wether it's a good way to do so is another matter.

Do you really read the comments you answer to ?
Right, but it’s probably been reviewed and we’re not using NSA binaries.
For comparison, here's the C++ lexer for Digital Mars C++:

https://github.com/DigitalMars/Compiler/blob/master/dm/src/d...

The parser isn't in its own file, it's intermingled with the semantic processing, a mistake I didn't want to repeat with D :-)
You're too used to 8 hours - its been the standard for as long as you've been alive, but there is no good or scientific reason for it.

The work day used to be 12 (or in some cases more) hours, and a lot of people fought and literally died to get it down to 8. And the expectation wasn't that it would stay there - instead, the common idea was that as productivity due to technological advances etc. would keep pushing it down to only a few hours per day.

Instead, productivity has soared and the parasitic capitalists of the world and their legion of class traitor middle managers have managed to convince people that 8 hours is somehow perfect even though rarely anybody even actually works 8 hours these days - how long is your commute? Do you get work related alerts on your phone? Coworkers/bosses messaging you? That's all time wasted thinking about work. This small group of people - probably what, no more than 5000 out of 7bn people? Are hoarding and stealing obscene amounts of ill gotten gains, killing the planet in the process and ruining probably billions of lives, while we sit here and argue about whether or not we "deserve" to work less or whatever.
IIUC Babel.js is essentially a fancy preprocessor for JS. So if by that analogy, you mean "can I use Racket to design my own notation that compiles to Python", yes of course.
Well yes, I think that's how the tangents get started. If the article itself is sufficiently interesting or the tangent is particularly off-topic, those conversations get quashed pretty quickly. There were only a couple top-level comments about the mixers, it just happened that there weren't many comments about the article itself to counter-balance them.
I live in New Zealand, and I recently switched basically entirely over to wild game for red meat. I can buy it in my local supermarket, it's more expensive than cheap meat but actually less than the high-welfare farmed meat that I bought previously. It's also very tasty. I'll probably start ordering directly from the provider (http://www.game-meats.co.nz/) soon since they offer a much wider range of products than the supermarket has.

Here in New Zealand there's an additional bonus that deer and boar are invasive introduced species which are considered noxious pests, so I like supporting an industry which controls them.
> most fish flesh can be bland and rubbery

yikes. i think you will have a better experience eating in a seafaring culture - the british, french, norwegians, coastal china, japan, even new england? i think something is quite wrong if you think cod, haddock, sole, tuna, and salmon all taste the same.
That's not to say that I don't waste oodles of time on my personal computer. I certainly have some addiction there. I've lost months to what amounts to not a lot through computer use.
This entire comment is a non-issue since you can specify what distro you want.

Let's not get focused on a red herring because one person decided to shoot out a verbose comment.
Serious question--how does one verify the security and privacy of something like NoRoot Firewall?

It wants:
- have full network access
- view network connections
- run at startup

That's a pretty serious list of permissions to consider giving something that while it would seemingly be beneficial, is also a great vector into my phone activity for a malicious actor (not accusing them of being such btw).
Strangely enough the image looks far better - as in more or less like it should - in Firefox (67.0a1) while she looks like Freddy Krueger's offspring (wrong colours, translucent areas which should be opaque or the other way around, etc) in Chromium (72.0 build 3626), both on Debian (Sid). I say this is strange as the author explicitly mentions she only expects it to look as it should on Chrome.
Count matches, sort, and then put separators between different levels of matching.

So the top of the list would be companies with 8 matches, then there is a separator, then there are companies with 7 matches, then there is a separator, and so on... all the way down to zero matches. The list is always everything, but the sort order changes.
Oh wow. There is so much pure maths that has applications in computer science. Loved my algebra courses in pure maths!
Yet many of us turn off ClearType because the subpixel artifacts are worse (subjectively) than the increase in resolution.

Ironically I feel that subpixel rendering works better (and becomes worthwhile) in high-dpi displays where the artifacts aren't as noticeable.
> > Intel CPUs do NOT have this feature, outside of vpshufb

> Yes they have.

No they don't, but its very tricky to see why. You're blinded by vpshufb, and can't see how it can fail to solve some problems.

Lets take stream compaction as an example problem.

http://www.cse.chalmers.se/%7Euffe/streamcompaction.pdf

Stream Compaction can be used to remove redundant whitespace from strings, or to "compress" the raytracer rays so that they are all able to be read by a simple load (as opposed to a gather/scatter operation). How do you perform stream compaction?

Well, its a straightforward scatter operation: https://i.imgur.com/aIoO8dm.png

Now, how do you do this using vpshufb? You can't. vpshufb is backwards, and won't efficiently solve this stream compaction problem. GPUs can solve this problem very efficiently, but Intel's current implementation of AVX512 is missing the "backwards" vpshufb command, to perform this operation.

Or as I've been trying to say: vpshufb is equivalent to a "gather" over SIMD Registers. But Intel is MISSING a scatter over SIMD Registers. The instruction is just... not there. I've looked for it, and it doesn't exist. As such, GPU-code (such as the stream compaction algorithm) CANNOT be implemented efficiently on a CPU.

I mean, you can use vpscatterdd to implement it, but again... vpscatterdd is 17-clock cycles. That's way too slow.

> Quite expected because RAM in general is much slower than registers. Even L1 cache on CPU / groupshared on GPU. On both CPUs and GPUs, you want to do as much work as possible with the data in registers.

The L1 cache has the bandwidth to do it, it just isn't wired up correctly for this mechanism. Intel's load/store units can read/write 32-bytes at a time, in parallel across 2xload units + 1x store unit.

But the thing is: writing many small "chunks" of 4-bytes here and there (ie: a vpgatherdd / vpscatterdd operation) is not a contiguous group of 32-bytes. Therefore, Intel's cores lose a LOT of bandwidth in this case.

GPUs on the other hand, have a great-many number of load/store units. Effectively one per SIMD unit. As such, reading / writing to LDS "shared" memory on AMD GPUs can be done 32-at-a-time.

So the equivalent "vpgatherdd" over LDS cache will execute in something like 2-clock ticks on AMD GPUs (assuming no bank conflicts), while it'd take 9-clock ticks on Intel cores.

Again, LDS cache is so fast on GPUs, that it is effectively functioning as if any LDS-load/store is as fast as a vpshufb instruction. (Not quite: vpshufb is 1-clock tick, and doesn't have to worry about bank-conflicts. So vpshufb is still faster... but GPUs gather/scatter capabilities are downright incredible)

How long before you think Intel will implement a true crossbar so that the vpgatherdd and vpscatterdd instructions can actually execute quickly on a CPU?

-----------

GPUs actually implement a richer language for data-movement. Intel could very easily fix this problem by writing a "backwards vpshufb" instruction, but I'm not aware of anything that exists like that... or any plans to implement something like that.
> people's happiness and wealth don't correlate much past a certain point!

Exactly! Most people in the world are well below that "certain point". In an ideal world that everyone has enough to feel safe and secure, probably wealth inequality won't matter as much.
I definitely see a lot of mockery of vegans among my circle of friends/acquaintances. Not outright hatred, but definitely mockery and it's not directed solely at vegans. It's just that vegans tend to be rather vocal about their choices, and they tend to be very social media adept and like to arrange eye-catching demonstrations in public, at least around here. I think a lot of the mockery comes from insecurity, I know some guys who are very adamant about their Manly Personality, which has meat, booze, beer and cigars as mandatory elements.

There is a segment of vegans who are very enthusiastic about calling non-vegans "murderers" and shaming them for "eating corpses" and the like. It's a small fringe group, but they are very vocal, and are deliberately very attention-grabbing.

Since I sometimes move in the same or adjacent social circles, I do know quite a few people who are vegan, and they're pretty relaxed about it, outside of occasional activities in protests and the like. I like talking about recipes with them, stuff like finding the best egg substitute for Belgian waffles, always a great way to get a vegan very enthusiastically chatty about a subject they really care about :-)

I'm very open-minded about food, so while I do like dishes with meat, I'm also very enthusiastic about good veggie dishes, and I don't want to judge people for their dietary choices.
For finger tracking, version 1 used random forests [1], because of the performance/hardware budget trade-off: they're harder to train than a traditional deep learning algorithm, but are much more efficient to compute on the device (branching being basically free on a CPU).

Version 2 uses a deep learning accelerator [2], which makes it possible to do the heavier computation of DNNs (which involve floating-point operations, which would be much more expensive on the CPU).

From an engineering perspective, I just love seeing how it touches all abstraction layers of the stack, and the types of solutions that come out of thinking about the silicon and the high-level ML models at the same time.

[1] https://www.microsoft.com/en-us/research/wp-content/uploads/...

[2] https://homes.cs.washington.edu/~kklebeck/lebeck-tech18.pdf
Why Google Glass Failed as a Consumer Device and Why It's the Future of Industry
Oil prices aren't particularly low by historical standards.

https://imgur.com/a/twnV7GZ

So I'd guess that the "decade of losing money" is due to poor economics of individual wells, where production dramatically falls over time.

That requires more and more capital for new wells just to maintain constant volumes.

If you only look at aggregates it can appear there's a boom, when in reality it's a bit of a shell game that only works as long as you're constantly drilling new wells.
Sure, but as I said, if you split your database, you have to deal with transactions, joins, consistency, over- / underfetching. All this leads to complexity and performace issues you wouldn't have otherwise.
The root of trust comes from the accumulated proof of work instead of an organization. This is interesting because self signed certificates can be trustworthy if they are signed with the private key of the Handshake top level domain holder. I believe it will open up the chain of trust for devs to innovate on and experiment with novel cryptography
Thanks Steve :-) I think I'll save this wonderful idea for some day when I'll feel an especial need for something like that.
DNSSEC use another chain of “ca”, not the root ca like those in browser. It is another complexity. Not sure it help in general and as said here not even dns hijicking. What is its point is still not sure.
IMO we should fight to consume the modern Web and apps in ways that benefit us and not somebody else.

Throwing away the devices is a radical and unrealistic measure for many.

If you need to live on a lonely island somewhere in the Pacific for 18 months then by all means, do so.

I quite like it in the civilization when I am focused and not constantly distracted though. And that's achievable.
No dogs just children :-D Thanks for your kind offer!
Rendering PSD Files with Rust and WebAssembly
All numbers from statista.com

Alphabet - 98,000 (2018)
Facebook - 35,000 (2018)
Apple - 123,000 (2018)
Netflix - 5,500 (2017)
Amazon - 647,500 (2018)

Total - ~909,000

That is total number of employees worldwide. so lets conservatively take off a third. Also Reasonably only a third of those employees (probably a lot less at amazon) are actually developers. That gives us ~200,000. The Bureau of Labor statics says there are 1,200,000 software developers in the US in 2016.

FAANG does make up a lot more software development jobs than I thought, I would have to say a significant portion. Very interesting.
Agreed. One DB to focus resiliency on, but every table or database is owned by a single service and managed using migrations.

You can optimize that away later if necessary.
> Windows on ARM can only run UWP apps and win32 only under emulation.

You can compile C++ Win32 apps to ARM64 for WoA: https://blogs.windows.com/buildingapps/2018/11/15/official-s...
DNSSEC works perfectly fine for securing requests from end-users. Of course you need to link your application with a DNSSEC-validating library. But that's just a small matter of code.

Things become slightly more complicated when you have to deal with broken home routers. But that code exists as well.