skysight-inc/HackerNews huggingface dataset:
> If you've built your business around one specific type of jet it's costly to move to the competitors, which is why the "no type rating change" was so important for the max.

Yes it is costly but you know what? It's BS

Because the 737 line (nor the A320 nor any other line) is not going to last forever. (Especially wrt widebodies but that's another issue as I don't know if the A330Neo and the 777X have the same type as their predecessors)

EVERY airline should be planning ahead. I'm thinking if Southwest and/or Ryanair are not thinking about keep flying their NGs and forget all about this MAX stuff for one or two years at least (FR delayed their MAX deliveries last I heard)

Now Airbus just put out the NEO and they probably have room for another refresh on that platform but probably not two refreshes. But again, it won't last forever

Though the tough part for airlines is two: pilots can't switch between 2 types and bringing another type slowly is hard. But it is something they will have to do eventually
Lying about anything at all to an immigration official is enough to grant you a lifetime ban to the US. I guess they took his message as lying about intent of visit in his application which they could label as "fraud".

Edit: Added source. All that is needed is that they believe you lied to a U.S. government official and they can ban you for life.

It can basically be considered fraud if this is true:

> When making the false representation, the person intended to deceive a U.S. government official authorized to act upon the request (generally an immigration or consular officer).

And this is the consequence:

> The person will be barred from admission for the rest of his or her life unless the person qualifies for and is granted a waiver.

https://www.uscis.gov/policy-manual/volume-8-part-j-chapter-...
Flying is safe. No question.

And you can make it that much more safe by doing yourself a favor and avoiding the 737 MAX.
"However, a study shows that motion sensor data is accessed by 2,653 of the Alexa top 100K websites, including more than 100 websites exfiltrating motion sensor data to remote servers."

This is scary.
I recently found out about Larder.io[1]. It nicely integrates with github stars, web clipper and has an API. I like it for it's simplicity as most of these tools are way too much for simple bookmarking.

[1] https://larder.io
Conveniently, consuming shiny things and lowest-common-denominator mass media is what the Western society very much encourages us to do. Work, consume, repeat.
Smooch Joins Zendesk
2FA has no place over phone networks for account recovery. It's far easier to obtain access to 2FA texts or doing SIM ports like this, than it is to break some gmail account password (even a weak one).

So many people don't seem to understand this - I was trying to use U2F yubikeys on gitlab a while back only to discover they force you to enable 2FA first for account recovery, this completely defeats the purpose of hardware auth, it's not supposed to be for convenience, security is only as strong as the weakest link, 2FA is very weak.
Springer, Spiegel join Bertelsmann's Ad Alliance to counter Google (German)
Unfathomable for me either and reeking of utter corruption.

I could ALMOST understand it if they would do it in the medical field because there are so many companies small and large working in the field. But no, the FDA is indeed stringent and thorough.

But airplane manufacturing in the US? Hello? How many aircraft do they have to verify? It's not like there's 100s of manufacturers releasing 100s of plane designs.

The 787 and 737max were the only ones released in the last decade. And both were partly self-certified!
On the other hand, if you can submit a "new" medical device through the 510k process, it is the device manufacturer that certifies that the new equipment is equivalent to an existing product. That is mostly comparable to what Boeing did.
I attempted to get access to the data which the study is based upon. They requested I register my e-mail address, name, organization in order to get access.

having done that I still do not have access.

How much due diligence did you do on the data before accepting the study's claims?
I think you mean RISC-V (V being the Roman numeral for 5).

The MIPS ISA is now also open source, as of Q1 2019[0].

[0] https://www.mips.com/mipsopen/
Okay? You haven't shown that it's a meaningful comparison. What does it mean for nonviolent movements to be "twice as successful"? Nothing, because you can construct any arbitrary measure of movement or success.
Huawei's alternative OS to Android set to roll out as early as fall
It's interesting, the only way that would work is if they also turn every browser into a through node, which would be both highly controversial while also a great boon to the Tor network as a whole
The author appears to be looking at the deployed size of a debug build.

A release build (as per the instructions) is `webdev serve --release`.
Wasn't Haskell created by a university?
That would be more tax dollars than community-driven.
I hate to be "that person" ... but what is it in this paper that makes it appropriate to label it "The boy's guide ..."

Answer: nothing. Nothing at all.

Words matter, role-models matter, names matter, and this is just completely tone-deaf in today's world.

Men (and boys) may scoff, but seeing the title is seriously off-putting. Unnecessary, inappropriate, and the problem is that the author probably has no clue.

I've not looked too closely yet, and I will, but it appears accessible, accurate, informative, and useful. It may even prove to be actionable. I just wish the title was different.
Be aware of web browsers though.
I don't think that's a fair statement. It's that I don't want it, but it's that I realize that once you begin the handouts they can never go away and seem to always increase. Now, thanks to perverse incentives here in the US, an illegal immigrant is a more 1st class "citizen" than actual tax-paying citizens are. That is all backwards and on its head. We have given away so many freebies that it has completely broken families, especially black families, where the majority of the time there is no father in the picture and women have children in order to receive payments and thus monetize a do-nothing lifestyle.

There has to be some kind of middle ground between the ugly Latin-American form of poverty where no safety nets exist, and the American "let's be Santa Claus and give away lots of freebies" swiped from the Middle Class.

We used to manage what is now called welfare at a very local level via churches and other private organizations. Now, we have an army of bureaucrats at all levels, themselves little more than work-for-welfare employees of city, county, state, and most definitely Federal governments. Then our taxes have to go up to pay all those people whose output is so very low. Then it becomes a self-perpetuating machine where those same people vote for more leftist policies because it protects their vested interests. Meanwhile, Main St. America is withering because of the high cost of shifting rewards from the productive class to the most unproductive people in history. Have you looked at starting a small business lately? Might want to check out how much a typical franchise or say, a tire shop, costs to actually start. It is ludicrous.

Who said I had to pay for anyone else? It's not your labor or your risk, it's mine. But this is America, where we privatize profits and socialize the losses onto the taxpayers. Were that only the case, that would be one thing. But no, you rub it in by also blaming productive people for everything, taxing us to the hilt, and making us suffer for our own ability to restrain ourselves and plan ahead for the future.

But here's the thing: I'm not your cash cow, never was. So yes, let's keep doing it because sooner or later your kind is going to run out of other people's money and then the slaughter begins. I'm going to laugh when Marx's "useful idiots" themselves end up dead because of their galactic stupidity. And hey, if I also end up dead, that's okay, as long as I get to witness the comeuppance. Because living this god damned American taxpayer lie every day is about the most irritating kind of living there is and one day I'm just not going to do it anymore.
Not sure what contacts you are talking about, but the civil lawsuits have started to roll in...
https://in.reuters.com/article/ethiopia-airplane-lawsuit/fre...
I doubt it. Chinese system only works when they are playing catch up. There is no incentive for being a pioneer in a culture where IP is not protected. The system doesn't work when they need to push above everyone else.
This goes beyond protectionism. It's more like mercantilism.

https://en.wikipedia.org/wiki/Mercantilism
Make ‘Miscalculation’ Great Again
I am one of the folks working on Valence, i'd love feedback on what we are doing.

Valence attempts to solve for performance management by giving folks a declarative way of setting performance objectives and having a controller go and meet those objectives. Though the Kubernetes autoscalers allow something like this, we wanted to build something that is higher level so that folks wouldn't have to worry about the details of analyzing their applications, instrumenting them, and coming up with the optimial autoscaler thresholds and configs.

Under the hood, Valence is a simple feedforward control system that learns the dynamics of an application - forecasts its load and applies the optimial controls in order to continually meet those objectives. We have found it pretty effective at reducing cost and performance violations so now we are launching it to a wider audience to get feedback and start working on extending Valences effectiveness in other operational environments and other types of performance objectives.
Morse Code Celebrates 175 Years and Counting
LOL what? It's at least 4 orders of magnitude more risky to fly 737 MAX compared to Airbus A320 (counting deaths per 100k takeoffs). 4 orders of magnitude are not irrational.
> edit: (adding for clarity) In a lot of programming languages, whether they use slices or not, arrays are of a fixed size and must be copied to a new array if you want to add elements. Some languages have some syntax that makes it feel like you are modifying an array in-place, while doing the copy to a new array behind the scenes.

It's that or some magic with larger-than-needed arrays that automatically grow by a bunch extra every time they hit their boundary to make appends faster, while blowing up memory use and making append performance unpredictable.

Lots of (especially) scripting language hide this behind automagic and you see tons of append-in-a-loop where it's not really necessary, as a result.

[EDIT] had insert two places I intended append. Me need coffee.
> I assume that the catchy title references a breif moment from an interview, not a deep cultural analysis.

That assumption is correct.
ARM's now owned by Softbank (Japanese), so it's not even British anymore
And the hacks to work around them started rolling in quite quickly. For example:

http://gafter.blogspot.com/2006/12/super-type-tokens.html

At its root, the real problem here isn't "reification good" vs "reification bad", per se. Haskell has an excellent implementation of generics, and erases types far more aggressively than Java does. C# also has a very good implementation of generics, this time based on reification.

The problem is more that Java's particular mix of design decisions resulted in a language that operates at cross purposes with itself. Once upon a time, back in the beginning, Java was a reflective language. Being reflective requires type information to be available at run time, though. When Java decided to use type erasure in its implementation of generics, they created a really bad set of interactions: They kneecapped reflection, so now you can no longer call Java truly reflective; it's only partially reflective. You can no longer effectively and accurately reflect on what have come to be some of the most-used classes in the language. And, at the same time, they forever sealed a rather important corner of the type hierarchy off from generics. They also delayed a bunch of type checking until run time - after types have been erased - so that certain things can just never be made to cleanly type check. Meaning you also can't say Java is any more than partially generic.
In 1969, Engineers Turned Off the Water of Niagara Falls
I'm so tired of people purporting to speak for "the community" - especially when they diametrically oppose my own views. It feels a lot like they are co-opting me for their own agenda while simultaneously excluding me.

The things mentioned as evidence that community doesn't matter have a lot of buy-in from the community. Modules in particular are an effort that - at least from what I can tell - is heavily driven by non-Googlers (in particular Rog Pepe, Paul Jolly and Daniel Marti are people who put a lot of work into making modules actually work for practical workloads).

These kinds of pieces only make sense if you have an extremely limited view of who is or is not part of "the community" - in particular, if you throw everyone agreeing with the Go team out of that bucket.
The are usually offset by either multiple consumption tax rates (luxury vs necessary goods like food, toilet paper, etc) or income tax deductions in the lower brackets. Either by excluding taxes at lower income or by subsidies for those groups.
Depends who you ask.

I transparently use the darknet continuously every day.
Multiple home servers owned by me and my colleagues make up a VPN we share with friends and family.

Amongst the trusted recursive resolvers we use there's the DoT v3 onion from Cloudflare.
A proxy redirects our traffic for Facebook and DuckDuckGo over the respective onions, same for Debian updates.
A next generation firewall inspects our traffic and use Tor for some websites that are censored or geoblocked.
The F# development home on GitHub is now dotnet/fsharp
Maybe, but then historically - did China start stealing western IP or did the west? Silkworms, tea, pottery, gunpowder.... many things that got invented in China and in effect stolen by the west.

So you could argue that the west gave China ammunition in the past to go down this route.

Either way - the whole aspect of one country stealing another's secrets in regard to trade and product has a very long history.

What the consumers (the ones affected) really need to be seeing though is a smoking gun. Whilst we are not talking WMD's here, we are talking about the same level of proof being bestowed upon the joe-public. That - does need to change and equally such evidence need to be credible with more than a grain of truth about it.

Sure we have all read and heard and kinda-know what's going on and has gone on, but the public need to be told in a way that is clear cut and removes all doubt.
I think EASA doesn't trust the FAA here because the FAA had less involvement in the original certification than some are comfortable with. So rather that asking the FAA to certify the entire plane and maybe risk a similar procedure (Boeing self-certifies most of it), they'll do it themselves.

What I'm curious is whether EASA has similar certification shortcu... optimizations for Airbus.
Curse you - I won't be able to get any work done today until I have seen all 507 of them :-)
Tower of London Welcomes Baby Ravens for the First Time in 30 Years
Configuring Distillery
Late reply but you might appreciate: America is a big country, and population centers are often a long distance/inconvenient to access from the food supply.

This applies to both cities and remote towns in the countryside. Ensuring safety and stability is often a larger priority than freshness.

I.e. The remote town of 500 people 6 hours away from Salt Lake City won’t have the scale or shelf life to accept fresh kale from the California Coast. Processing helps bring these people food safely and conveniently.
Without MCAS a MAX has flight characteristics that would not pass FAA certification.
That is a pretty neat attack, but I disagree it would be useful against Tor.

DNS traffic is funneled through a different Tor circuit than the web traffic. You'd need to apply the bad DNS to all users, which would almost certainly in your exit node being dropped from the network.

I'm also not sure how this would be handled with HSTS preload lists -- HSTS preload applies to all subdomains so you'd need to come up with a completely different domain (and protections against homograph attacks mean that avenue is restricted). It'd probably be simpler to just set up an actual website with LetsEncrypt than to bother with stripping the TLS in this manner.
That’s a really neat trick but actually not so obscure. I would have thought Apple would catch it, this is actually a huge miss by their security team. It’s not the first abuse of browser APIs used to fingerprint a device (e.g. Battery API) and won’t be the last.

Any kind of ability to sample data from a device should be thoroughly analyzed for fingerprinting side-channels as part of the underlying specification as a mandatory section. Is this not actually done?

Is there any kind of similar calibration that is done on thr camera sensor (e.g. for color correction) that can be teased out of the resultant
image files? What about in RAW mode?

How about a sound recording? Does the microphone have any kind of correction factors you might be able to observe somehow?

Similarly for color temperature of the screen. Maybe there is an unexpected side-channel to get at those correction values as well, although this one seems trickier because how would you sample the screen output remotely?
Yeah, I wasn't saying that Ghandi did it alone or that the British were squeaky clean. In other situations against other adversaries, though, his approach would have just got him instantly shot. The fact that this never happened shows the general character of the British that he faced.
Maybe its by design - give people too little time to live their lives that they come to depend on services and consumption thus perpetuating capitalism.
The 19th-Century Doctor Who Stared Straight into a Living Man’s Stomach
To quote another comment from this thread:

> [D]rop the strawman argument and borderline ad hominem. It'll do you better.
If your worst case scenario is that you fail and get a regular job with a bunch of new skills, then you don’t understand much about being poor.

For what it’s worth I strongly believe that entrepreneurship should be encouraged.

I just don’t believe the way to do it is silence discussion about the factors that make it harder for people who have fewer resources.
> It will work with Android apps and web apps as well

I guess it is fair to assume at this point that they based it on the OSS part of Android ?

Let's see if they manage to solve the Play Service pickle also. A lot of application assume you have them, I don't know if a lot of dev' are going to repackage their app "play-service" free for one vendor (wouldn't be surprising for popular app tho').
I must admit, every time I've flown recently on a 737 I've nervously checked the information card to check the exact model. I think all of our local airlines run 737-800s though.
No evidence of communication and implementing a protocol: OTRv4
This seems highly optimistic. I would assume the opposite, that we will look back and wish for the days when the worst we could expect is device fingerprinting through the gyroscope API.
The College That Gives Graduates the Wrong Diploma
Not just the 50s/60s - this video explaining differentials is from 1937 and is a marvel of pedagogy:

https://www.youtube.com/watch?v=yYAw79386WI
I'm not following. What does WebView have to do with MicroG / Gapps? I'm asking in particular because:

1. WebView comes pre-installed on LineageOS, irrespective of whether you install Gapps

2. WebView can be downloaded separately from the Play Store
somebody's been drinking propaganda Kool-Aid
Occam's Razor: Did he really make up a strange claim that reflects negatively on his employer, or was something very much like what he said actually part of his brief?

I believe it was the latter, the twist being that it was forward looking, not reflecting then-current reality. It was likely someone else's prediction that the quality of talent available to Google will go down, going forward.
It's a great example, as it shows the complexity of the discussed topic and attempt to justify any changes to the language/stdlib. In the above-mentioned comment rsc replies to another Googler, not to "community".

So we have

a) Google having problems with lack of monotonic clock in Go

b) Go team reluctant to break API and break promise of
compatibility without really serious reason

c) community feedback in form of well written experience
report, explaining how serious the issue is for the community

d) immediate reaction and efforts to find a solution (without breaking API)

Even though team was dismissive of the idea, feedback from the community made them to change their minds.
KP Ceilings
It would be unethical to do so explicitly ("Airline kills poor people"). It could happen automatically due to demand based pricing, but many people don't know the difference and would price the risk at zero. So I think it's "Mostly no."
It's the most efficient way to extract value from us
People didn't really stay in the same village all the time, there is plenty of mixing going on in history. Languages have moved as well, the german-french border can write you a long essay about that.

Considering the current political climate in the US, the difference isn't that large...
What do you mean by casual? I use it relatively often, when I want to access a website privately (I don't trust any VPN service that much). I'm pretty sure I'm not the only person doing that.

But maybe you mean if someone using it as the main browsing tool for privacy reasons? This I doubt, since it's indeed slow. I also don't think that Tor is meant to be used as your main browser really.
You are correct. Domains can be still sensitive though.
I've worked on CQRS / ES microservices at scale and have seen how successful they can be at reliability, scalability and performance.

I don't think people are qualified to reject this pattern unless they've spent some serious time working in these ecosystems. It took me a long time with a ton of production experience to evolve my thinking and truly appreciate CQRS/ES.
That this very thread exists suggests a certain “C++ ification” that happens to languages.

I really respect the slowness of the go maintainers in adding new stuff. I also suggest that we all ponder our tooling some; Writing java with emacs or vi is a materially different experience than using eclipse or idea and var style type-inference seems almost silly with those tools which do it for you.
As an IP lawyer who has been involved in several cases involving Chinese appropriation of trade secrets and/or patents ... it’s real. Smart companies don’t even try any more, just accept that if they do any business with any Chinese nationals, their secrets will be exfiltrated. And if you patent something, it will be used in China and there’s nothing you can do about it. It’s just an accepted cost of doing business these days because IP enforcement in China is still nonexistent. The courts are so corrupt and openly biased against any outsiders. The rule of law is not valued, plain and simple.
>the Arch Linux fork Manjaro ships a static private key on their installer image which also gets copied to the target system. The result is that all Manjaro users have the same "private" key and anybody can easily use this to sign any package that the package manager will accep

https://pierre-schmitz.com/random-but-important/
As they did with gunpowder, china-clay, silkworms, tea and even Panda's.

I think only Panda's out of that small list have their IP still protected and the rest got industrial-theft treatment over the centuries. Though in fairness - they do share Panda's.
As my flight anxiety will tell you, there's nothing safer than not going anywhere at all.
Which part is misinformation?