skysight-inc/HackerNews huggingface dataset:
> I can ignore "how to do #1" when discussing whether entropy is drained by using it or not.

Ehhh... fair point. Still, the overall discussion is about RDRAND, so I feel like its very important to point out how RDSEED must be used to properly generate the 256 bits of entropy you require in step #1.

Each of these steps are tricky, and require thorough analysis to understand.

------------

EDIT: Its not so much that entropy is "used up". Its that RNG-sources of randomness gives "additive" entropy, while true entropy is "multiplicative".

Generating random numbers from a 256-bit RNG will give 256-bits of entropy from the first step, but be 100% predictable (and therefore "only" 256-bits on the 2nd step).

If the "next programmer" wants 512-bits of entropy, they will NEVER get 512-bits of entropy from your methodology, because you only started with 256-bits of entropy. Only by gathering "more" entropy will you be able to reach 512-bits of entropy.

The argument would go "who needs more than 256-bits of entropy", which is a fine point. But... that's how the math checks out.

It all comes back to the RDRAND vs RDSEED question. If the user just wants "unpredictable random numbers", then RDRAND and /dev/urandom is sufficient. But if you're creating independent random number generators (ex: If you're creating a service like random.org, and are guaranteeing certain amount of entropy per call to everyone), then you need to be using RDSEED.

Does 10 calls of your RNG produce 256-bits of randomness, or 2560-bits of randomness? What are your requirements? What are the requirements of the end user? For most people, having a RNG that "only" provides 256-bits of randomness across 10,000 calls is perfectly fine and sufficient. But there are plenty of cryptographic cases where that's not enough (and "true" 256-bits of entropy are needed in every call).
I don't know what specific devices they may have had in mind, but one accessible way to track sleep is with a smartwatch.

I use a Huawei Watch 2, and it tracks pretty accurately from what I've seen. Other Wear OS devices are probably similar.
Never a better time to try OpenSuse and pitch SLES at work.
Bill Clinton, born 1946, entered politics in 1977 (state attorney general), so at age 31. Before that he was in law school, graduating in 1973. That leaves four years between graduation and entering politics. (Note, for correlation with the article's theme, that he is a baby boomer.)

Alexandria Ocasio-Cortez graduated in 2011, entered politics in 2018. She actually had more real-world experience than Bill Clinton, by quite a bit (seven years instead of four). Still, she was 29 when first elected. (Not a boomer.)

Nancy Pelosi was 42 when first elected (though she became a member of the DNC when 36). But her father was a politician (Congressman from Maryland), and she helped with his campaigns, so she was literally working in politics from childhood. (She's slightly too old to be a boomer.)

George W. Bush was born in 1946, graduated in 1968. He first ran for office in 1978, ten years after graduation. (He's a boomer.)

Those are just the first four names that came to my mind, though in fairness AOC came to mind precisely because she's so young. Also, Pelosi is from a political family, which I didn't realize, but it often leads to earlier political involvement. Still, it seems that there are NeedMoreTea's point is valid: We've got more politicians who have been politicians for most or all of their professional lives, and less politicians who have been something else for an extended period and then went into politics.
Which is a problem we should not just accept, but do something about.
> The "bad/good" attribute is not helpful, but if we replace that with "people who obsess about memory safety or not" then the conclusion holds.

"People who obsess over memory safety" are in fact not writing in C and C++ these days.

> The security problems of C and C++ programs are caused by the fact that it takes effort to write safe code in those languages and most programmers/companies can live just fine with the safety they can reach with less effort.

No, this is not true, unless you define "effort" as "10x normal development costs and time", which does not make economic sense for mainstream software.
Only if a criminal investigation turns up chargeable offenses, sure.

The government can't just tell Zuckerberg to pack up and go home, but felony charges are about the only way he can be forced out at this point.
Cars have headlights and don't need the street lights. People are able to see well at night, once our eyes adjust.
"what are you going to do with that information?"

Restricting chemicals proved to lower IQ springs immediately to mind.
Well, what I mean here is - you can’t do business without software (or rather, you can’t do business without computers). I suppose if you’re managing a convenience store in central Alabama you might, but otherwise, software IS the business.
Couldn't they? Didn't the Enron execs get jail time?
IANAL but I could see a lawsuit being possible if historical "actual" performance figures were misrepresented or back-tested theoreticals (read: overfit) were passed as actuals.
If you scroll down a bit there are a few examples, including jsfiddle: https://togetherjs.com/

Essentially, they are doing OT on the DOM.
I also care about departure time. If I arrive with one minute to spare (counting security and check in) but the plane leaves 2 minutes early I don't get their on time through no fault of my own. If I'm even a second late I accept it is my fault.
Governments can bring criminal charges against individuals if they have evidence that those individuals have committed a crime.
my own anicdata: Integrate a default proxy into our existing "choose proxy" workflow takes about 2 weeks, and I'm currently on my 3rd month of those 2 weeks :)

Reasons for the delay:

1) Proxy is a stand-alone application. Needs it's own deployment and build configuration
2) Main app was running on Node 6.x. High time to upgrade to 10.x as 6.x LTS is running out.
3) Upgrade to 10.x breaks some modules we depend on (Google Cloud datastore) and that module has been deprecated in Node 8.x+.. time to refactor that....
4) Main app is in a mono-repo with backend systems still running node 6.x Don't want to spend the time upgrading everything to node 10, so need to split Main app into it's own repo, decoupling from existing mono-repo codebase
5) Since we are upgrading main app to Node 10, Best to remove dependencies on old definitely-typed typescript typings (upgrade to npm @types definitions). And as such refactor to use latest version of all modules....
6) Security: New Default Proxy should only allow the Main app. code a solution for this using Keypairs....
7) Docs, sample code for users, announcement mail.

thankfully i'm currently on step 7. Usually I expect to be off on my estimates by a factor of 4x. This is excessive :)
Ah, it was shell scripts I was thinking of.

For the record, the concept makes since to me. I moved from ranger to nnn a while back, and the performance improvement that nnn provides really shows.

Thanks for all the hard work!
Hi, everyone! I would like to demo our browser-based digital signage solution - first on Hacker News. We think that a lot of (or at least a few) people would like to set up their digital signage solutions without partnering with some supplier. So we made it available in the browser. PS! The pricing part is not in effect yet.
Not necessarily. One of the more dangerous missions of the USAF is SEAD[1]. During Vietnam, the "Wild Weasels"[2] flew these daring missions where the gist was to get all enemy air defense to fire at them, so they could find them, and destroy them. Airborne based anti-missile lasers, such as this, would be utterly devastating for this. It would improve survivability of aircraft flying SEAD missions. SEAD is generally the first step (in US military doctrine) before total domination of the skys. I'd consider that a pretty offensive use of this technology.

[1] https://en.wikipedia.org/wiki/Suppression_of_Enemy_Air_Defen...

[2] https://en.wikipedia.org/wiki/Wild_Weasel
Auto-Aiming Bottlecap Turret
> How does it save time when I have to learn the ORM language, which probably has a lot less support and users?

The ORM is just an API to your database in your programming language. If you an handle any other API, you can handle an ORM.

It's has obvious benefits like automatically handling mapping database columns to objects, doing simple querying without lots of strings, etc.
Would you take this approach even if the framework is outdated? Part of rewrite is to switch to a newer framework and make general improvements in maintainability, reliability and speed.
This is about the only use case where I find ORMs useful
But once elected, they tend to stay in office for a long period. What was their age when they first entered Congress?
Until IE11 becomes so obscure that people stop scanning it for exploits!
Both my Sensei's developed issues with the scroll wheel.

Otherwise they're really nice.
This is one of the things academia actually gets right in a lot of institutions (and very wrong in others, of course). But instead of "glue work" the formal name for it is "service"; typically it does carry weight when the time comes for promotion and tenure. The proportion to which it matters of course varies by institution (R1 vs teaching vs regional, etc.), but it's usually documented or presented to candidate hires as x% of your time is expected to be "service work" pre-tenure, the remaining portion is divided between research and teaching. This way, going into it, we at least acknowledge the tremendous necessity of being glue, and also set out to explicitly reward people for doing it.

Of course then part of the problem of finding a good fit as a university professor is one that allocates the balance between service, research, and teaching that aligns with your own goals!
timing should be amortized, when `nnn` (or similar) is on you have state and can think and operate infinitely faster
Your company doesn't have a backup machine you can work on for a few days? Even if you are a one person shop, you should have some sort of plan for hardware failure.
citi double cash back or something like that
Thanks for the compliment!

The plugin-based mechanism fits perfectly with the fundamental design to keep the core file manager lean and fast, by delegating repetitive (but not necessarily file manager-specific) tasks to the plugins.
What happens in Magic when you run out of cards? If the tape isn't infinite then there are lots of algorithms that halt.

The halting problem is like the pigeonhole principle. Just because there is no general compression algorithm doesn't mean we don't use compression all day every day. We have solutions for many interesting subsets of the problem domain, and that's good enough.

We can also tell if a program will halt in no more than N clock cycles by providing the analysis with a budget. If the budget is exhausted then the program would keep running for an unknown duration longer than the limit. Possibly 1 cycle. For third party code, you could just refuse to run that code at all. There are some useful programs that would get rejected but there are many useful ones that would not. So implementing an "infinite loop detector" as a "really big loop detector" wouldn't be the dumbest thing to try, anymore than implementing video compression is.
Yes, it seems that rather than starting wars and sending military out to fight, the discussing has landed on more abstract aspects.

If this period becomes the longest time between new wars since 1978 then I think that is an improvement. 40 years with constant news wars every second or third year is kind of crazy. It only takes that the US last until 2020 without starting a new war for it to reach that "record", and given current political internal fighting between the left and the right it seems this will actually happen. It would be amazing if as a result the military budget would start to shrink as current ongoing wars ends.
There is a tiny fraction of the population that has a certain gene that allows them to get by on less sleep[0], but definitely not 10 min for an entire week.

[0] https://www.ucsf.edu/news/2018/03/410051/scientists-discover...
Title works curiously well for Locutus (of Borg) as well.
> Have you not had life experiences where the person with the highest test scores, most amount of praise, recognition, money, earning power, etc., is actually a comparatively ill-equipped human for some task? This intuition should make us skeptical of drawing too many conclusions from such metrics.

1. I'm not saying that people should trust IQ. I'm saying that, to the extent that people trust social science, they should trust IQ more than anything else from the field.

2. There is actually research about what you are talking about[0]:

"The upshot of this research is that work sample tests (e.g., seeing if people can actually do key elements of a job -- if a secretary can type or a programmer can write code ), general mental ability (IQ and related tests), and structured interviews had the highest validity of all methods examined (Arun, thanks for the corrections). As Arun also suggests, Schmidt and Hunter point out that three combinations of methods that were the most powerful predictors of job performance were GMA plus a work sample test (in other words, hiring someone smart and seeing if they could do the work), GMA plus an integrity test, and GMA plus a structured interview (but note that unstructured interviews, the way they are usually done, are weaker)."

This is not to say that IQ is some sort of guarantee - the correlation is only about 0.5. That being said, it is one of the strongest factors; at a population level, it should not be particularly surprising that IQ would have a strong impact on economic success.

___

0. https://bobsutton.typepad.com/my_weblog/2009/10/selecting-ta...
Some of the backports aren't nearly as fast or performant as using a newer kernel though.

For example eBPF was back ported (and also in CentOS), but running a syscall heavy work-load in a docker container on the older kernel about 50% of the CPU time was spent in the kernel filter.

I ended up moving our entire CI/CD platform to Ubuntu 18.04 and the performance issues went away and my workloads now run at full speed without slowdowns.

RHEL 8 comes with the 4.18 series of the Linux kernel that is already EOL. That's a shame and once again it will fall behind quickly :/
Generally being 5 minutes late for an appointment counts as you get a dirty look but you are on time. Being more than that and they get mad. So 5 minutes or less intervals mean someone running just a little late isn't actually late to their appointment.
How would someone know the backpack is Alice's unless they were tapping the conversation? If you're not in the immediate vicinity of the backpack witnessing her drop it off, then you've gained information that is otherwise not publicly known. Sure, one could request camera footage showing the event, but I would hope that the person in possession of said footage would at least ask for a warrant first.
Cars aren't the only thing that use the streets.
The By Line is from one of their main Apple analysts paired with a guy that covers retail exclusively. Likely the story they're trying to play out is this general downward trend in retail, but there's very little steak here. It reads like a hit piece for someone with interest in the stock trading lower, rather than the meaningful reporting of legitimate news here.
What do you mean?

It's a comparison of a load of cheap micro controllers. How do you expect to use it?
It's factually correct. Deposits are created and then converted into the required capital at a price. To buy equity you need to use a deposit, and that comes from a prior loan. That's just how it works.

Same with liquidity which is just increased amounts of loans to the central bank (government) in the form of government bonds. Collateral uplift can give you that.

All these just add to the cost of the bank, which changes the price and that reduces the number of people taking the loans. But the fact remains that the quantity floats at the current price of money. Liquidity and capital requirements just change the current price of money.
Zen and the Art of Modern Money
My former company (valuation ~$100M) was not a software company. It was a services company, and most of the business could run off of paper.

We were not a convenience store in central Alabama.
Supercomputer will perform a quintillion operations per second
Agreed. This post is one long excuse.

If I was the client and you sent me this blog post as an answer to "why is it taking too long?", I'd fire you.

Because you spent more time writing the post than it'd take to update the code.
I've used many ORMs. I don't hate them, but I think their net utility is negative.

While you initially might think that interfacing with the db is going to be very tedious and labor intensive, it usually turns out to not be that bad.

Battling the ORM to make it do what you want can on the other hand be very tedious.

When you have the SQL in the code it's much more obvious what the performance profile and potential concurrency problems are. That's very important to solve real problems which arise in almost all projects with some scale.

If I were to choose my tools, I would pick some sql-based schema versioning system, and potentially a simple data mapper for moving data back and forth between db records and entities.

But I would be very reluctant to use a full-blown ORM nowadays.
I don't remember the mechanical mice being bad. I cleaned them every few months, not every fifteen minutes, and the cursor dragged or jumped occasionally, not constantly. For me, the laser mouse was an incremental improvement rather than the game changer this article claims. Am I the only one?
Well I’m one of those people and it’s the only factor. They wasted so many hours of my time and money because of their poor service, I just feel bad buying anything from them.
You can be genetically blessed. The "gene variant ‘p.Tyr362His’" let's one get by on less than 5 hrs of sleep. See: Margaret Thatcher. A friend of mine that got 2 Bachelors and 2 Masters degrees in 4 years might've had that, though he said he just got used to the lack of sleep.

source: https://www.telegraph.co.uk/news/science/science-news/110061...
> not flag many bad boxes while getting a few common issues nailed down would be a winner

Easier said than done when you have to take a stance on a bunch of polarizing issues, and any choice you make will be a bad check for half the population.

Not messing up the issues people generally agree on is the easy part.
> Instead, modern C++ code traffics in value types, and relies on destructors, almost always from a library or compiler-generated, for cleanup.

Are std::vector and std::string "value types"?

> Use-after-free never happens

Yes, it does.

> The reason that, in modern C++, memory safety issues fade into insignificance

No, they don't.
My preference has been this sort of tool: https://github.com/krisajenkins/yesql
(Timescale cofounder here)

Hey, just wanted to clarify: the vast majority of TimescaleDB code is Apache2, and you can easily compile (and we ourselves build & distribute) Apache2-only binaries.

When we announced a new license in December, we didn't relicense any code, we just said that some future features will be available under a Community or Enterprise License. The code under this "Timescale License" is clearly marked and in a separate subdirectory, and for virtually all users (except the public cloud DBaaS providers), the community features are free.

This is the actual top-level LICENSE file in the repo:
https://github.com/timescale/timescaledb/blob/master/LICENSE

And here's a blog post discussing in more depth: https://blog.timescale.com/how-we-are-building-an-open-sourc...
> Totally agree it's a reasonable time. I think that it's a waste of time to argue why it takes time to do your work. You'd only write that letter because you feel bad about charging your client for your time.
> A better letter if you wanted to write one would be about the benefits you provide and the completeness of your work. I wouldn't even mention the time it takes.

I understand your response, but the (grand?) parent seems to be indicating you don't do that, and just explain that you do good work.
This is great but it should be noted that it dates from 2017.
Instagram Is Reshaping How We Interact with Art and How Artists Create It
There was dust underneath a key and they used a can of air to remove it .
OK i restate. Replace, in my original post, "Rothschildren" with "goldsmithers." I didn't even know they were Jews and that whole bit is ad hominem at best. But my point remains.

My money is not the bank's asset. Neither is the stuff I put in a storage unit at public storage.

Imagine if they were loaning out your stuff while you were away.

If I choose to invest my money that's my right. It's not your right to choose how I invest my money.

Going faster isn't a reason why it should be OK to steal people's money when you're saying you're keeping it safe.

Lies like this brought down the entire world economy. Wars were started. Lives were lost. But you suggest it's better except when it's not?

I don't agree.
I have thistles that if left untended will be even taller than tomatoes or raspberries...
Absolutely! I personally use xfce4-terminal is drop-down mode to preserve my contexts over days.
Torx screws are not odd and quite superior to philips. Since the patent ran out I expect them to slowly take over.
The enterprises I've worked where we've used RHEL... epel is not allowed near a system, only officially sanctioned repos and updates.
Apple to Reveal New Home-Grown Apps, Software Features at WWDC
That seems like an implementation detail done for the performance of prioritizing the use of the faster device. If you need something that's in storage/swap, chances are you're going to need it repeatedly and so it's a performance boost to "swap" that with whatever is being used least in RAM.

From a functional point of view, it's still really just expanding your memory with a persistent storage device.

> I'm guessing that this is actually mapping the NVM directly into the process, so individual loads and stores write directly to the device instead of actual RAM.

If this were the only difference, then it would be just swap without its main optimization and for no noticeable benefit. I doubt this is all there is to it.
US is a mix of measures. Imperial is allowed, but there are only a few places where it is required. Metric is in fact very common - but only for measures not in day to day use (that is intentionally contradictory have fun figuring it out)
From the comments below, it sounds like interfacing my C++ code with python using Cppyy would sacrifice performance.

Even so this will be awesome for unit testing. I really like the testing interface pytest provides, along with its parametrized tests.

Anyone else using python to test the logic their C/C++ code? I can't think of how I would test the memory allocation and freeing portion. Anyone think it's a bad idea?
I just downloaded `nnn` from apt and I am not seeing this performance at all. `ls` is blazingly faster than `nnn` on this machine. I am seeing a speedup over `ranger`, but both are taking quite a while for a directory with 196388 files in it.

time /usr/bin/nnn -S /local

/usr/bin/nnn -S /local 0.04s user 0.36s system 15% cpu 2.503 total

time /usr/bin/ranger /local

/usr/bin/ranger /local 0.31s user 0.02s system 12% cpu 2.667 total

time /bin/ls /local

/bin/ls /local 0.00s user 0.00s system 86% cpu 0.002 total

Perhaps this is related to the `$LS_COLORS` environment variable, as discussed in a few other comments? It is set on this machine.

echo $LS_COLORS

no=00:fi=00:di=34:ow=34;40:ln=35:...<many more entries>...:*.sqlite=34:
You could and generally should.