skysight-inc/HackerNews huggingface dataset:
March 2019 Security Advisories
I worked on this stuff for Ubuntu. I think this can work pretty well for some classes of apps - browsers, chat/messaging apps, voice/video calling, terminal, contacts, gallery, music player etc - relatively light weight (at least in terms of interactions) apps.

Android/ChromeOS and iOS/MacOS are already moving to this direction for these classes of apps.

It doesn't work so well (or is more difficult to execute well, or at all) on apps with very dense UI - video editing, 3D design, IDEs, interface design apps, CAD etc

An aside - I'm not sure I'd use GTK+ for this. Why not Qt, or something like Flutter?
You can take the GRE for CS without being a student, as proof of your knowledge. I have heard of very rare cases where people have been admitted to a professional master's program (different from the regular master's program in that it's meant for working professionals) without having a degree.
GitLab Vulnerability PoC: Exfiltrate and mutate repository via injected template
>and can even be outright blocked.

That's my biggest fear. Yesterday I woke up to find out that Three (a big telco provider in the UK) had blocked Mullvad's API path as 'adult content'. I had to physically go to a store and verify that I was an adult to be able to use my VPN - the very same VPN I use because I have so little trust in the UK Gov (I'm not from here and am not staying long term, but hate that the society reminds me of 1984 regularly),
The one place they have value is for people who have macbooks that are locked down to only allow app store/signed dmgs to run. TBH though since corp control of OSX is janky to begin with devs will usually figure out a workaround (or scream loud enough that this gets reverted, no one likes to pay for devs to sit around doing nothing).
Pretty sure I lost some brain cells reading your comment

> The US is nowhere near the top in terms of suicide rates in the world.

... Is that really an argument against action?

> compared to heart disease, strokes, cancer or diabetes.

Because studies have shown that making a small effort will make a large difference in suicide rates... It would be great if we could cure cancer, but we just can't.
which days? when people were cheerfully downloading and running keygen executables to crack their Photoshop trials?
OTOOH, you can't just add a couple of MB of L1 cache without increasing delays and even trying to add to other layers would result in much more complicated lookups.
Windows does not care about non-windows recognized signatures.

So this works fine for users who care about gpg verification, but fails the “Windows doesn’t prompt me about insecure stuff” test.
Run vs. Code in the Browser
Google Tools you should start using today
Seems like Ben Thompson's aggregation theory could be useful to look at here.

Netflix & Spotify are aggregators, they own the consumer and distribution. Acquisition of movies costs either royalties to a studio or cost to produce the movie (actor salaries, etc.) Royalties are probably negotiated and the aggregator has leverage in negotiations because they own the consumer and distribution to them.

Insurance owns the patient, but the patient doesn't necessarily get to choose the medication. Their condition plus the doctor's prescription dictates what medication they can use. You're also not allowed to shop around for doctors who will prescribe what you ask for. Pharmacies own the distribution of medication. Drug companies need to recoup the massive R&D costs of developing drugs and thus are granted 20 year patents. This is somewhat similar to studios producing content and the copyrights afforded to those studios.

Not sure how to put all of this together but I think a big difference is that the consumer doesn't have discretion like they do in the Netflix/Spotify space. Maybe a good parallel would be Friends/Garth Brooks. If I want to watch Friends, I have to use Netflix or if I want to listen to Garth, I have to use Amazon Music. But despite the fact that I enjoy Garth's music, I can live without it or I can get it through other means (youtube, buying an album direct from a studio-owned distribution channel, etc.) People literally cannot live without some of these medications so consumer discretion is removed there.

Also, consumers don't have the ability to self-diagnose and self-prescribe. There are also no other distribution channels for medication. All of it must come through a pharmacy. There is no distribution done by the owner of the consumer(insurance companies), although PBMs may be a similar model?

Maybe somebody else could help me fill in the gaps with how the aggregator model is different from the pharmaceutical model or identify mistakes in my assumptions.
There is the approach Samsung is taking with LinuxOnDex. My Note9 runs Android but I can plug it into a monitor, mouse, and keyboard and boot up a Linux environment. It's still a bit rough since it runs in a container on top of Android but it works surprisingly well.
You might want to look up the ARM instructions "FJCVTZS" and "AESE", and "SHA256H".

ARM is a CISC processor these days. AESE has a throughput of once-per-clock cycle, as well as "Floating Point JAVASCRIPT convert to signed rounding to Zero".

AESE is in particular a very "CISC" instruction, because it is usually macro-op fused with an AESMC instruction. The ARM decoder will look for AESE + AESMC instruction pairs and execute them as a single macro-op (kind of like how x86 joins "cmp" and "jnz" instructions together into a singular op).

None of these instructions follow the "RISC" paradigm. As soon as processors hit the real world, it turns out that CISC instructions that accelerate common tasks (like AES Encryption: done by every web server and web-browser today) or even Javascript-specific instructions, is a good thing.

---------

ARM's "CISC" roots go deeper than that. For a long time, ARM machines had a "Jazelle" mode which directly executed Java bytecode. When Java-for-phones became less popular, Jazelle support was dropped.

But in any case, the "CISC" advantage is that you get instructions designed for the applications that run on your system. And lets be frank here: AES Acceleration just makes sense these days. Everyone uses a web browser or a web server.

Honestly, x86 is falling behind the CISC-wars. Intel should try to catch up and implement a Floating-point Javascript Convert assembly instruction as well, to improve those "Geekbench" scores.

-----------

CISC vs RISC is stupid. The purported advantages of RISC have been ported to CISC, and vice versa... now as ARM and Power9 support CISC-like instructions like AESE (ARM) and vcipher (Power9). All processors will have CISC-instructions to accelerate their most common tasks these days: there's a lot of extra die space (especially because large portions of the die have to be kept 'off' to help distribute the heat. So rarely used specialized instructions are very useful for heat-distribution purposes).

The biggest advantage to "RISC-V" is the ability to add application-specific instructions to the core. That's innately a CISC-design: custom instructions to support everyone's favorite optimizations.

The original design of "RISC", that is REDUCED instruction set, is incompatible with today's cheap transistors. You can fit billions of transistors on modern systems, so there's almost no reason to reduce your instruction sets.
Burned out, hit my limit, and needed to take a break in grad school twice. Once due to contract work (had to pay my bills, so spent a week writing testing code instead of core product), and once due to emotional exhaustion after writing an unaccepted paper (spent a week watching all 7 seasons of ST: Voyager while my ex was at work).

Since then (11-12 years now), the work ethic that pushed me through a PhD in 5.5 years left me burnt out after 60-80 hour work weeks at my first gig. Since stopping working for other folks after coming home (except as necessary for pager duty in some cases), I put my spare hours into relationships, family, and personal recreation. With the wife and kids, basically now just family and personal recreation.

Unfortunately, my personal recreation tends to look a lot like work (email support, open source projects, ...). Combine that with "working for myself" for the last 21 months, and I've experienced more pain and stress in the process of building a business than I did getting the PhD (solve all the problems, all the time, no academic advisors, no end in sight). I think at this point I've needed to take explicit "I am burned out on this" breaks at least 5 times in the last 21 months.

I've been trying to explicitly "not work" in the evenings to cut my own work-driven exhaustion. Trying to do something fun (work on non-work fun software, handle correspondence, play video games, etc.), but at least half my evenings end with starting an overnight "run forever, log failures" set of unittests, or at least updating my daily worklog.
If I remember right, in France arts pieces are not taxed as other assets (like flats) are.

edit: https://en.wikipedia.org/wiki/Solidarity_tax_on_wealth#Basis

The English version is lacking some exempted elements compared to the French version, where works of arts are explicitly cited.
It's not about the price, but about name on the certificate:

> However I cannot use "Notepad++" as CN to sign because Notepad++ doesn’t exist as company or organization

CAs would put author's name as CN, which isn't great, especially for collaborative project.
I don't think I understand what the difference is with the "old way" if as you describe it ... there seems to be no difference. You don't have to pay some cert provider under the old or current way.
_Most_ people did not use computers like that at all, and it's not like they weren't tedious for those of us who did. There was simply no alternative at the time -- there is now.
Duplicate of https://news.ycombinator.com/item?id=19325302
> I remember the good old days when people were actually trusted to do their own research before downloading a potentially dangerous exe.

With attacks getting more and more sophisticated just downloading from the legitimate site no longer guarantees integrity. Sometimes not even having the exe signed does it, with supply chain attacks and code injected long before being signed.

Perhaps also posting the hash on a public website (a tweet for example) 24h before making the installer available would mitigate the code signing issue. You could use it as an authoritative source that's less likely to be breached/modified after posting without immediately raising flags. And if it was an unauthorized post the 24h also gives the author enough time to flag it. Supply chain attacks are not considered here.
A More Inclusive Repository
See here [1]. It's based on qualified appraisal and/or valuation of similar works at known auctions.

[1] https://www.journalofaccountancy.com/issues/2010/jul/2009209...
> until recently
Why not gtk+ though?
> Online code review puts pressure on the reviewer to find the problems quickly so as not to take the other engineer's time. Usually I want to take my sweet time, look at the surrounding code, figure out things for myself. Sometimes I just want to stare at the screen for five minutes to think about it. That's really uncomfortable when there is another person on the other end of the line.

Yes, absolutely this.

I think it's essential that the reviewer takes their time to inspect the code without distractions and without being rushed.

If you want to have a face-to-face code review, in my experience it works better to have that meeting after finishing the code review, so you can go over your review and discuss each point in greater detail.
Zuckerberg teases privacy-focused overhaul for Facebook
I’d agree with this. Sadly, the vast majority of the value that I got out of 4 year university was the piece of paper that said I graduated. The software development skills that I needed in my day to day job I had already learned by myself as a teenager. The advanced math and computer science classes were interesting but I can’t say I’ve used any of it after the exam. My career is no better due to my knowing what an eigenvector is. And the humanities fluff/filler they made you take to graduate was an irrelevant waste of time and money. I just needed that damn diploma. It is a signal to employers that says “this person has passed at least one standard hurdle and is qualified for a shot st the middle class,” but that’s about it. As OP points out, many career-training skills can be self-learned, especially nowadays, so I’m not sure why you’d go besides for the diploma.
APL is for numerical programming with vectors, matrices and so on.

Prolog or Datalog is best when you deal with logic, complex rules, deduction, configurations, graph manipulation, or search. For example, Microsoft used to have embedded Prolog that chose the right combination of libraries and drivers when you installed their OS.
>>The “flip-flop” on retail strategy, he added, “makes it seem like Musk is winging it and the board is letting him wing it.”

That sounds like a founder who is not afraid to experiment and course correct when necessary to me.
note that alacritty has improved a lot since this, despite being less than a year since the tests were done, I have been using it for many months now its pretty great.
git commit -m WIP

I hope you're rebasing that terrible commit message away before pushing this remotely.
To do that you need to provide some sort of notarised letter, so that adds more cost to the certificate.
I will pay you some fraction of a dogecoin to get off my lawn.
AKA wtf?!?

https://github.com/Microsoft/calculator/issues/169
I was going to say something similar about the Xeelee stories (I also love the The Three Body Problem) but remembered that humanity in those stories only manages to have weaponized neutron stars in a feeble attempt to fight the Xeelee.
Except drugs are different from other products. If a drug is actually a good idea for patients, with no profit motive behind it, it will sell itself. Doctors should be aware of the drugs the big drug manufacturers are producing, and prescribe accordingly based on need. If you need to hawk your drug by plastering TV ads all over the place, or by having salespeople push it to hospitals / etc., it's arguably not a necessary drug.
Could post to Microsoft Store, which would let them do this for free.
I got into J in the '00s, it was interesting. The community was making substantive stuff, but they were making it for themselves more than for anyone else. I noticed a lot of teachers in the mailing lists. They were making tools that helped them track grades and attendance. They were generating quizes and worksheets from question banks that they produced over the years. They were creating puzzles for their students. All of this was substantive, but it was focused on their ability.

J (and APL) really seemed to be an extension of what computing could've been. As a computer scientist and programmer, any language and OS work for me. I want something, I make it. I can write an app in C or C++ or Java or Lisp or Erlang or... because I have the background for all of that. For most other users, they have to find a program that accomplishes their need, or maybe they do it in Excel or Google Sheets. But in the past we had an idea of interactive languages that were the main interface for the user. The user could then produce the things they needed to meet their needs. They didn't need me, the CS guy, they could produce at least a functional prototype that met the need for the day. Then over the years they'd tweak it, add more, grow it into something comprehensive, or it reached a natural limit (due to complexity or meeting requirements).

J and APL are from that branch of computing. We've hidden it in our OSes (to varying degrees), encouraging people to buy programs that accomplish X rather than providing them an environment to produce their own programs to do X. The APL family of languages makes it front-and-center about the user accomplishing their needed computations and activities.
No it's not. The headline never says "all", you added that. The fact that the number is greater than 0 is a problem.
Government tracks people breaking the law. Backhanded activism at its finest, this article is.
In old computer magazines from the 80's and before, it was a trope to have an article about some technique or algorithm, and then show it implemented in one line of APL.
Germany’s Vanishing Military
I don’t know what you hired them for, but if it was a skilled labor task they had some sort of signal in their resume they could do the job (github repo). We are talking about basically taking HS graduates with nothing except grades/extra curriculars and investing N months in training them for some job you have no certainty they will be able to do, and no assurance they won’t just go to your competition afterward.
Yes but Ferrari has no intention of making their product affordable for those that want it, even if they were able to.

Tesla wants to offer an affordable car that more folks can afford. It's been making steady progress in getting to a lower price point, but there are still A LOT of people that would buy a Tesla if it were just a bit more affordable.
Well, a little different. We have globe-spanning transportation and communications. Actual technology to bring to bear. The best chance of mitigating the disaster that has ever existed in history.
The existence of whole industrial and home computer industry kinda proves that the models were effective and worked. Yes, there were vulnerabilities and viruses but that did not stop the computer industry from growing and proving its worth.
Like the current US president often says, you mean?
Building a Healthy Remote Culture
My fear here is that people are using events like these as a tool to generate believable false identities (for opsec purposes. watch the grugq's video).

Recycle a few key identities between events and you can build something really useful.
Intel's Upcoming 9th Generation CPU's Leaked
Did it have olives in it?
>There is a stigma around working at McDonalds, not skilled trades.

There is absolutely a stigma related to trades for some groups of people. I know a lot of younger tech workers, and other college educated white collar workers, who would look down on jobs such as plumbers, mechanics, skilled laborers, etc.
This reads like Douglas Rushkoff’s Ecstacy Club novel for modern times.
And 5318008
BuffaloGrid | London, UK | Onsite | https://buffalogrid.workable.com

BuffaloGrid is on a mission to bring mobile power and internet to the next billion. We have developed a solar-powered, internet-connected system that helps organisations deliver mobile phone charging and connectivity services at scale. We’re a diverse group of designers, developers, strategists and operations specialists based across offices in London and Delhi.

BuffaloGrid is backed by the UK Government, Microsoft and some of Europe’s leading venture funds including Local Globe, ADV, Hardware Club and Seedcamp.

We’re searching for people who share our vision for using technology to make the world more socially and economically equal.

We're currently recruiting for:

* Software Engineer https://buffalogrid.workable.com/j/40680C4488

* UI Designer https://buffalogrid.workable.com/j/D9B2421106
Hang on, why is there a HEVC encoder in the security coprocessor and not the graphics unit?
Obviously very subjective, but modern art seems like a case of emperor's new clothes to me, a humble engineer.

When I was in college I would see art around campus take the form of random metal shapes welded together, concrete blobs, or Pollock-esque splatters and shake my head.

How can you judge a category of art for which there are no rules?

I can look at Michelangelo's "The David" and be awed to the core at how he was able to replicate lifelike looking veins in marble. It's difficult for me to even fathom his skill level but I recognize that it is much, much higher than mine.

But a sideways urinal with some marker on it? Anyone with no skill can do random things with random items and call it art.

"Any sufficiently advanced art is indistinguishable from garbage"
I like this, in addition, I believe in documentation through unit tests. Especially when dealing with edge case business logic. Implement a test that has a verbose name or description testing that logic. If someone breaks it- they are notified through a failing unit test, then they also have a clear reference of why the logic was there in the first place and they know that now they have to go to product to figure out if the logic is still relevant.
I think that "self-documenting code" only covers the what, though. Code, regardless of style or language is fundamentally just a bunch of instructions; the why (and sometimes how, i.e. assumptions/preconditions/platform-level details, and so on) can't really be encoded there.
Another major benefit of dynamic linking is that multiple processes can share the same dylib in memory -- for things like Apple's AppKit.framework, that can add up to significant savings when multiplied across all of the open apps.

https://www.quora.com/What-is-the-difference-between-static-...
As another commenter mentioned not true. There are various levels of commercial pilots. Not all commercial pilots fly for a large airline or shipping company.

Even though most commercial planes have a full avionics stack it usually isn't as good as for flight for most features.
Thanks for this.

I’m not suggesting you change what clearly works well, but anyone starting out should consider second hand gear. The best espresso gear ages well, is repairable and is readily available second hand. The machines Rancillio Silva, La Cimbali Junior and the grinders by Mazzer are all readily available and affordable if you are patient. Bought dirty, chipped and not working is best - then the price is lowest, sub $50US each is the best I’ve achieved.

I’m yet to find one that isn’t just a broken on/off switch or disconnected cable. All the parts are easily sourced and a careful respray is cheap.
The above machines are commercial grade and designed to be pulled apart quickly using a screwdriver or two and maybe a spanner.
Careful though. It’s a very slippery slope.
As a user, is there a significant difference between an OS with no apps and an os with mostly half-hearted ports of apps?

Having been a user of Windows Phone, I would say, don't bother giving me an app if it's going to be garbage.
your point is...? scientific experiments are often done on genetically similar animals.
Sure, a test suite doesn't replace that. It helps ensure that test returns "Yes, good!", instead of "Why did you break this thing that worked last week!", assuming you know anything about what the customers consider good.
No, it doesn't. Net neutrality is the idea that all content should be treated identically. The idea that you should have unlimited data, or that data should be billed monthly, or any of these other things that are nice are not the same.

An easy way to picture it is common carrier. The postal service does not ask what you are sending. It asks you how big it is. It charges you based on when it needs to arrive. There is no mention of the contents - a dimensional pound of feathers and a dimensional pound of lead cost the same to ship Express Post. Net Neutrality is the expansion of the same idea to the internet - that Spotify, Netflix, my cat blog, and Hacker News cost the same, and are charged the same, per "standard reliability" kilobyte.
Taiwan is the awkward counterexample. It never experienced the cultural severing of the Cultural Revolution, yet is arguably the most thriving democracy in Asia.
Nreal's Promise of True AR Sunglasses Could Be the Real Deal
"The simple truth is we have no way of objectively determining the value of any work of art or the performance of its maker."

It's not so different from software really.
Same, I use Terminator on Linux and iTerm2 on macOS. I much prefer iTerm2 but found Terminator to be the best on Linux (quite subjective but a bit confirmed by this study).