skysight-inc/HackerNews huggingface dataset:
> They should have been able to get back to a neutral stabilizer position, disabled electronic control, and manually trim from there.

Yes. But that's not what the checklist in Boeing's MCAS bulletin said.

It said, disable the electric trim motor then trim manually.

In hindsight, prehaps it should have said "return stabilizer to neutral then disable electric trim motor".

I wonder if Boeing did that deliberately, because a bulletin with a modified checklist would have undercut Boeing's implied narrative that a procedure already existed and it was the Lion Air pilots fault for not using the existing runaway stab trim checklist. Or did Boeing simply not test the procedure in a simulator?
Isn't that a false dichotomy? I don't see a reason why people who "cosplay superman" or someone/something else would necessarily have to be denied any rights whatsoever...
The software did what it was supposed to, the issue was the specification necessitated by the design change.
But Googlers have developed a track record of objecting in relatively extreme ways to anything even remotely conservative, to the extent that a guy who wrote a memo literally about that exact problem, was fired because he gave an example of a topic on which Google was biased and they couldn't handle it.

No, I'm absolutely sure that any conservative person or organisation at all would be targeted in exactly the same way. There are so many examples by now. Especially because Bay Area liberals seem to regard anything that isn't hyper-left wing as "bad faith arguments" by "white supremacists" and "Nazis".

The idea Google could host an ethics board on anything at all is quite ridiculous at this point. Pichai would need to get a grip on his own workforce, something he is apparently incapable of.
There you have it, folks, programmers killing people. No, it wasn't on-purpose, but that doesn't mean it didn't happen.

This, of course, has been happening for a long time, it's just getting more and more obvious now. I feel strongly that AF 447 was an example.

It's important to understand that this is the natural result of two trends. One, software/hardware systems continue to become more and more complex, many times leading to unforeseen interactions. Two, programmers and programming management teams love to bunch up the work by things not related to the end-users: hardware component, new modules, architectural tier, underlying technology involved.

It doesn't take very much of that at all before you have a whole bunch of people all doing work of various quality in small enough isolated silos such that everybody can do a wonderful job -- and the system still kill people.

There's a lot more to add here. It's nothing new, and there are a ton of ways we've tried to fix this. My belief is that we've failed because we don't understand exactly what goes into making successful software at scale. I am quite concerned about it and I have been writing on this topic for several years. If you're interested in more, see my profile.
How China Turned a City into a Prison
Lumping DDoS in with hacking has always seemed disingenuous. skiddies DDoS things. Why? Who knows. Boredom? lulz? Perceived personal slight? "Justice"?
Mux is growing quickly and hiring engineers to work on analytics at scale
gems don't, NPM doesn't, PyPI doesn't, NuGet doesn't.... you get the picture.

Basically all apps using package repo's (i.e. all of them) are relying on massive piles of unaudited 3rd party code with usually no idea of provenance.
Cyberpunk 2077 Can Come to Google Stadia
I don't know much about "blackhats" but I know people, so the answer is yes.
Another one in the line of inevitable supply chain attacks on software libraries.

This isn't going to go away, it's just a question of if/when the damage caused will get bad enough that people start to accept some of the tradeoffs that would be required to improve matters...
The gaps easily get canceled out by using newer solar panels; I took the low end of commercial solar power outputs I found on the web, many of the more recent ones do 20W/sq foot or more. 25% gaps seems generous.

I thought about the rare-earth issue, but there's a simple solution that bypasses both it and the energy-storage issue: use solar-thermal plants instead of photovoltaics. These require only mirrors and steam turbines, both made out of abundant materials. Efficiency is actually higher than photovoltaics (30% or so), and energy can be stored as heat for up to 5 hours before it's used. (Ironically, they have the same issues relative to photovoltaics that photovoltaics have over fossil fuels; in theory they're simpler and more environmentally friendly, but implementing the theory correctly requires solving a number of engineering problems that together make them cost more and generate more hiccups than photovoltaics have.)

The higher cost isn't actually true anymore, for photovoltaics and wind at least. Solar hit grid parity with fossil fuels in late 2015, and is now actually cheaper than coal power plants. This (rather than subsidies) is why the coal industry is in deep shit: it just doesn't make economic sense anymore, and the electric industry is rapidly switching over to renewables & natural gas.
What makes NH so special?
Redundancy too.

If both redundant hydraulic systems to the elevator fail, or the elevator gets stuck for other reasons, the emergency procedure is to control pitch with just the stablizer trim alone.
> But those problems are independent of build frontends: you could solve them once for both buildpacks and Dockerfiles.

You can build an image with both technologies, but that's not the key to the argument. The key here is every Dockerfile is unique and potentially quite different from any other Dockerfile. Small differences in layer order and layer contents multiply to very large inefficiencies at scale.

The way you tackle this problem is to make the ordering and contents of layers predictable for any given software that is being built. You can achieve this with Dockerfiles with golden images, strict control of access to Dockerhub, complicated `FROM` hierarchies, the whole shebang.

But at that point you are reinventing buildpacks, at your own expense.

Note that this doesn't change with or without buildkit.

> a new build format, and a new build implementation. Docker is going in the opposite direction by unbundling the format (Dockerfile) from the implementation (buildkit).

Is your understanding that we invented a new image format or that we rewrote most of Docker? Or that the way we've written it prevents, for all times and all purposes, adopting buildkit as part of the system in future?

Because both of those are misapprehensions. We have extensively reused code and APIs from Docker, especially the registry API.
I don't understand the question. All online shops have one outlet. That doesn't mean the distinction between small and large doesn't exist anymore.
Pretty sure it's jackasses with nothing better to do. Either for revenge or the lolz. Probably an impulsive decision since the attacker gave up so fast.

There's not much you can achieve for your own gains with a DDoS. I've heard of rare cases of extortion or underhanded business practices to hurt competitors.
That tweet doesn't include anything even close to "trans people shouldn't exist"
This video is very obviously fake.
Airline safety has increased by a factor of 100 in the last 50 years, in terms of fatalities / miles travelled. Both in the past and now, far more accidents are the result of pilot error than failure of any system.

Gloryfing the good old days of pilot jocks just isn’t supported by the actual data, this incident nonewithstanding.
>> Privacy for privacy's sake is a weak argument, and privacy advocates should abandon it.

But, why? Why is it that "privacy for privacy's sake is a weak argument"?

Why is it so hard to find a way to respect peoples' wishes to avoid doing things that offend their dignity? What is that great need to spy on everyone that is so indispensible to the progress of human civilisation that this strong concern of many people must be brushed aside as "a weak argument", an irrelevant and obsolete affectation that can just be ignored?

And who is making an argument in the first place? Is anyone arguing for or against the need for dignity in the last days of one's life? Is anyone arguing for or against the need to respect bereavement? Arguments exist for and against the limits of such things, but not their actual need. We need to be able to live our lives with dignity and worth, else our lives are meaningless, we are in constant conflict with everyone around us and the peaceful coexistence and collaboration that supports human societies goes to hell in a hand cart.

This is what tech companies have to understand: you can't just take a big, smelly dump on peoples' sensibilities and not face consequences just because you have "arguments".
Many countries need a one child policy, the sooner the better. Not only for their own interest, but also specially for the interest of adjacent regions that are being affected and reap no benefits.
Facebook Research: Cross-Lingual Language Model Pretraining
Cách phòng bệnh sùI mào gà hiệu quả nhất
It's time to start voice search marketing now
Google research shows that 20% of all search queries on mobile are voice search, and more than 40% of adults use voice search daily. If you haven't been using voice search, think again and check out this article.
https://www.engagebay.com/blog/voice-search-marketing/
Multi-stage builds address some of the problems, but they still have drawbacks. For example, at the moment they need a Docker daemon, which is a non-starter for lots of environments. They also don't help you with fast updates across a fleet of many applications unless you standardise all your Dockerfiles. At which point you are, essentially, recreating buildpacks.
> Is there any package manager system that isn't vulnerable to an individual being compromised?

One that comes closer is vcpkg [1], which is the Microsoft-run package manager for native C++ packages. It works by having the list of packages and recipes to build them (which it calls "ports") stored in a single repository. All requests to update them are submitted as pull requests and must be approved by Microsoft to enter the main repository.

I'm not necessarily saying whether this is a good or bad idea. Certainly it is a very different situation: only libraries that are already popular are considered, often the ports are submitted/maintained by different people than the library authors, and writing a port to build a library on multiple platforms may require significantly more work than just pointing at an existing GitHub repo. I just point to it as an alternative idea that has had some success.
While I agree with your sentiment on stereotypes, looking at the link your comment seems misleading.

The airlines you mention score lower on 'Safety Rating' due to lack of IOSA certification.

"Registering for IOSA certification and auditing is not mandatory therefore an airline that does not have IOSA certification may have either failed the IOSA audit or alternatively chosen not to participate."

For a budget airline I can see them not participating for cost reasons. Does this make them less safe?
It's fun.
Or maybe you are angry.
Or maybe you just want to test to break it down.
Or maybe you just want the programmers to feel sad, maybe because they were boring
Driverless trucks move all iron ore at Rio Tinto's Pilbara mines (2015)
Some things can be popular despite their shortcomings.
>Their safety rating is better

was better. sucks cause its not even their fault.
Now that is interesting, I have a kindle oasis and mix between reading on that (which is glorious I must be honest) and on my iPhone.

If I can download a “legacy” file format - I might try that.

Thanks again for your input!
Why is this a software problem? Even if there is a software “fix,” doesn’t it seem that this tells us more about regulatory capture than using software to patch over bad hardware decisions?
"On Wednesday, she announced the Corporate Executive Accountability Act, which would impose jail time on corporate executives who "negligently permit or fail to prevent" a "violation of the law" that "affects the health, safety, finances or personal data" of 1 percent of the population of any state."

This is really poorly thought out and in practice, impossible to enforce. This is clearly shoehorning a civil case framework into the criminal justice system.

"Negligently permit or fail to prevent" is the sort of clause that would almost inevitably end up hitting founders engaged in any sort of company that deals with personal data. Larger companies can simply fall back to delegating the security issue to a non-executive. At that point proving negligence becomes incredibly difficult.

"A violation of law that affects data" is also ridiculously broad. Currently, CFAA is already overbroad and assigns criminal liabilities to far too many potential acts that simply couldnn't have been imagined in the early 1980s. Any unauthorized access that sees records falling into the many categories stated and amounts to 1% of a state's population, which could be a few thousand rows, would somehow subject two people to imprisonment potentially.

And of course, how would this even be enforced? A company can simply change its terms and conditions to allow for information disclosure, and selling or giving away things certainly isn't illegal. This would immediately shift the onus back onto the one accessing the data, who also has no reason to report or cooperate.

If anyone actaully suffers a quantifiable injury, just sue. Warren clearly haven't been practicing criminal defense or having been a prosecutor for quite some time because this sort of statute is the sort that both sides get headaches for.
As per HN comment guidelines, it's best not to reply to comments like this and just flag them. The admins are usually quick to respond.

https://news.ycombinator.com/newsguidelines.html
> Don't feed egregious comments by replying; flag them instead.
Since this video may not be coming back I'll post a sort of transcript from memory since I was lucky enough to get to watch it. I'll try and just describe what I saw and keep my commentary/speculation to a minimum - in <italic>. Bear in mind this is a non-pilot observer's take on it from flaky memory

Was the video pulled? Who did that, and why?
Lots of things could be done, it's whether people are willing to accept the tradeoffs, which they haven't been (in general) up until now. Unfortunately, modern software development has heavily embedded the idea of using large numebers of un-reviewed open source libraries, changing that assumption would be very difficult.

A non-exhaustive list of things that could be done...

- Improve repository security (e.g. stronger authentication requirements). Problem here is most of the repositories are non-profit and this costs money. Also there's a risk that if you increase friction for developers, they'll go elsewhere.

- Require library signing. This has some potential benefits (may even have stopped this attack) but again increased friction for developers and management overhead for repositories.

- Curation of libraries. Actually pay some people to review the code in the libraries. This doesn't scale easily when you consider the volume that places like NPM have.
Product marketing interview questions to help hire the right product marketer
It did happen with sold music. Most downloadable music sold in the early to mid 2000s had DRM. It wasn't until Steve Jobs wrote an open letter in early 2007 calling for the music industry to drop this did it start to change widely [1].

One label, EMI, then agreed to go DRM-free on iTunes. Another, Warner, said that Jobs was an idiot and they would never go DRM free. Within a year or so most labels came to agree with Jobs, and when Amazon Music launched in early 2008 it was DRM-free, including music from Warner.

It took something like another year for iTunes to go fully DRM-free, because Warner was holding out there.

[1] http://macdailynews.com/2007/02/06/apple_ceo_steve_jobs_post...
It has a light color scheme, if your browser supports the media query `screen AND (prefers-color-scheme:light)`. Currently that’s Safari 12.1, and Firefox beta channel or later.

(I run Nightly, so I was initially puzzled by your comment, since I was seeing it light.)
I propose the radical idea of drastically reducing the number of transitive dependencies we rely on. I don't think that it's okay that I need hundreds of megabytes of unreviewed libraries for running relatively simple programs.
For this problem, where the resulting code does not correspond to the published source code, reproducible builds is an adequate solution.

https://reproducible-builds.org/docs/buy-in/

When it comes to verifying this, we need to have independent rebuilders that build these packages reproducibly, and can attest these rebuilds in a secure manner. I have been working with NYU Secure System Labs to try provide this to debian packages and we currently have a PoC for such a system.

https://reproducible-builds.org/docs/sharing-certifications/

https://ssl.engineering.nyu.edu/blog/2019-01-18-in-toto-pari...
Anyone maintaining a library with a large audience of consumers should be mandated to use 2FA/MFA, I can only assume from the information here that they only had a set of credentials for authing :-(
HM Government Share Checklisk – “Don't Feed the Beast”
Yep, the issues started way earlier than the software. In fact the software is at the very end of the chain here, unless you also want to insert "no training". It all started when they wanted those big engines crammed into an airframe not designed to hold them, so as to try to quickly catch up to shifting market demands being met by Airbus.
AquaHash: Fast Hashing with AES Intrinsics
The speculation is that his employer, which flies a lot of 737s, didn't like him using a company simulator to illustrate a safety issue with the 737.
He pulled it himself.

https://twitter.com/MenTourPilot/status/1113723580284583936
A Brief History of Agile
that's proper networking, but networking can also means oligarchy~ where you just get inside groups because people know you and you're just not bad enough to get the boot.
Todays email to blue apron team
Terrible examples.

A Google Scholar search found only one article in Neuroendrocrinology related to transgender individuals.

https://scholar.google.com/scholar?hl=en&as_sdt=0%2C3&as_vis...

That article's abstract begins by saying: "To date, research findings are inconsistent about whether the neuroanatomy in transgender persons resembles that of their natal sex or their gender identity."

https://www.karger.com/Article/PDF/448787

The Endocrine Society is a political organization for doctors, like the AMA, not a research journal. The foremost journal they publish is called Endocrinology, but I can't find any articles there:

https://scholar.google.com/scholar?hl=en&as_sdt=0,39&q=endoc...

And Nature is the most heavily politicized journal on the planet. Their editorial board routinely takes sides in political issues.
It's to early to conclude it's only a software bug. And blaming programmers is the absolutely not the way to avoid issues.
Humans makes errors, always. Programmers or not. Some errors are unfortunately dramatic (talk about this to surgeons for example).

Now to remove the human factor as much as possible, there is processes and engineering techniques. If the failure was indeed caused by the software, and not by other defects in the plane design, the real question is how could it pass any safety check.
For me, in any scenario, the first really wrong thing is how the plane passed all safety checks without the defect being detected, internally at Boeing as well as externally.

As more information unveil, it seems that the prime suspect is the pressure to release a plane too quickly.
Isn't that orthogonal to the previous statement? The ideal situation would be to have fly-by-wire and a single hands-off button instead of HAL saying "Sorry Dave, but I cannot do that".

Of course, commercial pilots would need to have an actual interest in flying manually. The Gimli glider pilot was an enthusiastic pilot outside professional aviation.

I don't know if such an interest is still possible with modern exploitative labor practices.
Building the Same App with Angular React and Vue
What do you use for DRM-free audiobooks in Poland?
I was just played a Spotify ad for this. Normally in the UK we only get government commissioned ads for the following issues like:
- public health or safety (smoking, drink driving)
- anti-crime
- new laws (e.g. tax-filing)

It's interesting that they're now commissioning anti-misinformation ads. Note that the content doesn't seem to suggest using e.g. the governement as a source of truth; just to apply critical thought.
Oil is not used in the production of fertilizers.

Here's a quote I found in [1]

"The macronutrients required by plants are N (Nitrogen), K (Potassium) and P (Phosphorus). Oil is hydrocarbon, made from H (Hydrogen) and C (Carbon). There are no plant nutrients in oil.

Nitrogen fertilizer (N) is made from ammonia, which in turn is manufactured from natural gas, not oil"

[1] http://peakoildebunked.blogspot.com/2005/08/28-isnt-fertiliz...
It’s Time for the Heroic Male Paleontologist Trope to Go Extinct
Did you also read the follow-on post on transitional permissions?
C++ is a complex beast and while I quite like working in it, I'm finding that the latest versions (17 and 20) are filled with features that I'm having trouble understanding. The surface for errors is also huge. I've been programming in C++ since about 2002 and I feel quite proficient in it, but, if given the option, I'll use something that is both safer/less error prone and more productive (and I say that as someone whose argued right here that C++11 and beyond is a very productive language).

Beyond that and what sibling comment said, the author is known for creating various languages, so he clearly enjoys doing it and is making this language for himself.

I have never understood why there's always somebody complaining that new languages are unnecessary when a new language is shown on HN. I personally love seeing new languages. I also recently went on a language hunt for something that met a specific need for a side project I'm working on and I came away empty handed because I couldn't find something that met my criteria[1], so I'm always on the lookout for something that might.

[1] In case somebody has any suggestions for me, I want something with Clojure-like immutable data structures as a default (or something similar, at least), is native compiled to reasonably efficient and low footprint binaries (but is not as complex as Rust or Haskell), is a functional language (but with prettier syntax than OCaml, which was almost my choice, but when I started reading example code, its a complex mess of symbols <insert perl joke>). And... it needs reasonable library support... (at a minimum I need to be able to respond to HTTP requests, make HTTP requests, parse and generate JSON and talk to postgres, ideally using SQL and not an ORM). Haskell is probably my best bet, but I don't have the energy to learn all of its complex features.
Is precise scheduling of trains really a revolution?
Can you elaborate on what do you think would be a good solution to this problem? In my opinion, having big central sources of libraries makes it easier for security scanning services to operate. Companies hosting libraries locally (e.g. with Sinopia, Nexus, Artifactory) have to proactively monitor them, but most commonly will let them frozen at a specific version and miss all security patches.