skysight-inc/HackerNews huggingface dataset:
I mean, my comment was pretty straight forward as to the relation? The book has full, detailed code listings and provides a vm with runnable code, you end the book building an automatic exploitation engine for a C++ program, so it does cover HLLs?
The binaries in the book are all C/C++ programs. I guess I don't really get the comment(no offense taken), given that techniques like symbex are used on binaries written in HLLs. The paper itself is a survey of the tradeoffs inherent in different implementations of symbex. So, if you want to get a sense of what symbex is, read the paper and follow up with some of the endnotes, if you want to build an application that actually uses symbex buy the book and work through it. Hope this helps!
Before Sheets was acquired by Google it was known as XL2Web, and it was strikingly similar to this. I can't find a lot of press, but see [0], for example - basically the same article, just with 2004-isms like using XML.

0: https://www.eweek.com/it-management/xl2web-package-lives-up-...
Digital Ocean’s Kubernetes service is now generally available
Ironically, could be interpreted as the reason they're leaving cities as well.
I don't see any developer documentation at the link. IBM, for all its faults, has some amazingly specific documentation and examples that actually work.
The spying is done by intelligence services. Services that have huge reputational problems, largely because they have nothing to fear and all the power. Whatever is going on inside those organizations is completely hidden from the government itself. What Snowden made available has shocked everyone, including those who should oversee the intelligence services.
Firefox 67.0 does run faster and consume less RAM compared to previous versions.
Set theory and logic are too interdependent to venture far in one whilst steering clear of the other. For instance, you'll only really skim the surface of model theory without a basic understanding of infinite cardinals.
I don't think Russia is capable of spying on mobile phones. And have doubts about Israel too. How would they even get there?
The final for Computer Architeture had us building an 8-bit CPU. It was a multiweek project, starting with
designing the instruction set leading up to building the CPU in software implementing bubble sort in assembly.

The first and only time I had to do an all nighter (2 actually) in college was due to that project. Two days before the final presentation, the CPU didn't work. After a few clock cycles the memory would contain garbage. I ended up rebuilding it from scratch debugging every step of the way only to find out the 1-bit mux (a primitive supplied with the software) was wired backwards.

0 corresponded to the B input, and 1 selected the A input.

Once I correct that, the CPU worked like a charm, we nailed the final preso, and I slept for 16 hours.
I think this is no longer true for some time now.

> It should be noted, however, that the 2006 postal law sought to provide the Postal Service with increased pricing flexibility and to promote simpler, quicker and more efficient process for changing postage prices. [1]

I think by and large current rates cover the costs. There is a weird international looohole which they are closing. We should not be subsidizing free shipping from China.

My point is mainly I don’t want to see taxpayer subsidies in excess of postage. I believe without the pension funding weirdness the USPS would be about break even, but there’s lots of conflicting information.

[1] - https://www.prc.gov/faqs#t8n185
Is anyone here using Symbolic Execution for something besides source code verification?

I’m attempting to use the technique right now in the context of writing an execution tracer for a bytecode VM runtime, where I want to “recover” ABI types for arbitrary bytecode (that I don’t have the source to), in order to emit traces that describe what’s going on in high-level terms (e.g. “foo[x][y].z = 3” rather than “$329f = ($329f & (~(1 << 32) << 8)) | (%r25 & 0xff)”.)

So I’m doing a static-analysis pass of the bytecode (essentially a decompilation pass) which symbolically executes math ops to build up symbolic formulae representing the math being done, and to associate program-counter positions in the bytecode with value bindings in the formulae; and then I’m feeding those associations to the runtime tracer, so that it can notice when it’s on an “interesting” PC position and feed its current register/stack value into an instance of the associated formula, for me to emit once I get all the bindings of the formula filled in.

So far I haven’t found any texts or papers talking about using symbolic execution in this context (to recover information lost due to previous compilation, in a pass “within” a tracer, JIT, transpiler, or anything else that starts with bytecode or IR), which is kind of annoying. Anyone have any resources? Projects that use this technique? (I’m thinking that this is something you’d see done in sufficiently-advanced game-console emulators, as a “deoptimization” pass to recover structure to help dynamic recompilation optimize better.)

Also, related question: if I’ve got a stack machine, and all the jumps in the ISA are indirect jumps (but with literal values pushed on the stack), is there any way to recover the edges between basic blocks without doing a symbolic exec over the stack ops (i.e. to discover, among all the DUPs and SWAPs and such, which constant stack-slot the jump op is actually receiving)? I’m pretty sure there is a “weaker” method, but I’m stymied here by my lack of compiler-theory education; everything I google about dominance hierarchies and such assumes you’re starting with a model of a register machine with direct jumps (where the edges are context-free extractable from the jump ops).
That still doesn't solve a problem of a user installing the browser for the first time, installing adblock, then going to a porn site in private mode and getting a faceful of malware-ridden ads. Who thought this is a good idea?
That would be Utah. Orem, Utah police arrested him and Utah County Jail released him on bail.
Yeah, this is it. Security firms specializing in static/dynamic analysis are going to be using this stuff. Vulnerability hunting, things like that.
How is it that you can be arrested with a firearm with evidence of an intention to attack, and walk out on bail?
I don't think this is quite right. The Postal Clause give congress the power to establish the USPS. It doesn't mandate that they do so. If Congress decided the USPS was no longer necessary (not a position I advocate), they would be well within their rights to pass a law abolishing it.
The in-vehicle monitor will likely be a standard part of autonomous and semi-autonomous trucking for the foreseeable future.

A monitor can be paid less than a driver, as they’re doing less work, and can respond to onsite issues more promptly and accurately than could a remote one.
Interesting; I'm not having any problem reading the article. Using Brave browser here.
The study was discussed here: https://news.ycombinator.com/item?id=19945514.
These are really timing attacks. It's not a matter of directly reading the data, it's a matter of being able to deduce what's there based on how long it takes to do it.
Why is everyone so ridiculously focused on the camera? I've never cared about the camera. I want a cheap HUD, even if the controls are hand-operated instead of creepy-computer-vision-operated. Most of the Glass projects I saw were HUDs, not vision-aware HUDs.
At Asana, we actually test performance in production with a A/B test split. We use Interana (but any data aggregator would work) to analyze the results. Trying to measure the regressions in a sandbox did not match our Real User Metrics (RUM). In order for this to work though, you need to develop a strong mental model of React performance so you can optimize it further.
Because spreadsheets are at the sweet spot of most complicated programming language that non-technologists can reasonably be expected to learn on their own.

Because you should have a reeeealy good justification to write a single line of code for something that can be done in Excel much cheaper, and mostly you don't.
I started out doing hardware, as you say. Lots of bad soldering (initially). Expensive smoke and shitty chips from Radio Shack that appeared to have had their magic smoke removed prior to being shipped to stores in packaging that definitely was not anti-static. Capacitors that blew up into confetti, diodes that became LEDs for a single, glorious instant. Poking around in the back of old teevee sets and somehow avoiding being electrocuted or thrown against the wall by 30KV waiting patiently in a circuit where the bleed resistor had cracked. Realizing that you're going to need another paper route to afford the buffer chips and board work. Learning that manufacturer data sheets are sometimes full of lies. Redesigning the support circuitry for the CPU to remove just one more chip. Failing a bunch of high school courses because you were writing a BASIC interpreter (in anticipation of working hardware, someday) instead of doing homework.

Oh, I built a working computer, too. That was fun. But when at the end of that project you've got a processor and some RAM and a display sitting there in front of you, well, you realize that you don't really know what to do with the rig. Now what?

Then I realized that I could do far more damage in software (at scale) than with hardware (just one-off workbench class disasters). And so . . .
That definitely makes sense.

On a similar vein, wealth often also brings protection against the State which often abuses its own citizens (e.g. corrupt Government and police officers). This does happen in the US as well (e.g. violence against African Americans) but not to the same extent.
Henry George has better land value models.

I truly believe california has it all wrong talking about housing: people asking for more construction don't understand what is going on when they campaign for that, and people that complaing about boards also dont understand it.

California does not need housing reform, it needs tax reform.
At least there's no longer a pack of dogs living in 444 Castro Street.

https://www.mv-voice.com/news/2009/01/05/mt-bay-plazas-muddy...

"I never dreamed it would change the way it did," [Bill] Jelavich said of the city's downtown.

https://www.findagrave.com/memorial/97694017
Doesn't that evaluate as true if A and B are contradictions and C is a tautology?

Whatever A⇔B⇔C means, surely it shouldn't allow for that.
Stross, yes. Not sure if it was book 3 of a series or something. I didn't read much else of his.
Because within that codebase there's an untold number of exploitable memory errors which put users at risk. Browsers have critical security issues all the time.
I'm interested in the rationale behind this default. What about extensions make them a possibly bad fit for incognito mode?
Cauchy distribution.
https://en.m.wikipedia.org/wiki/Cauchy_distribution
The mean of a sample of cauchy(m,s) variables has that same cauchy(m,s) distribution, regardless of sample size.

Meaning to matter how many samples you take, the mean (of the samples) is just as variable as an individual sample.

The mean and variance of the distribution (equivalently, of infinite samples) are undefined. The Cauchy is equivalent to a t distribution with 1 degree of freedom.

Infinite variability will be undesirable for lots of reasons though.
As parent mentioned, there is overhead to using async: both in actual execution (e.g. likely spinning up another thread, plus creating a future object) and cognitively (in terms of following control flow, and knowing when exactly things are happening).

It's not that it isn't great when you do need it, but there are also plenty of cases where you don't need it and it's just unnecessary overhead.
Yes; it's very easy for big corporations to lobby the EU.
It's accessible and empowers the individual.

Not everyone can code, but everyone can transform data in a spreadsheet and email it off to the next person.
Wolfram gives developers free access to its knowledge engine
If you can get this to work with the Gecko driver that would be fantastic. I initially tried using Gecko and ran into some difficult to debug issues, but it might be possible now.
The article fails to mention that non-US companies with any kind of connection to the US are affected too.

The US sanctions affect pretty much all multinational companies.
What? `(A⇔B)∧(B⇔C)` is exactly equivalent to `(A∧B∧C)∨(¬A∧¬B∧¬C)` which is equivalent to `A = B = C`
>Semi's can't react as quickly to changing conditions as a Tesla.

That's true whether there's a human driving or a computer. The only relevant distinction for a semi or a Tesla is whether the computer can react faster and make better decisions than a human driver would.
What I find fascinating is that Lisp, commonly perceived as too high level to be practical, is actually at its core (in its original implementations!) an incredibly low level language.
Not freedom from but freedom to : set your own terms not the terms of the play store or the iPhone store.
Indexing helps the user find the app.
Sharing a specific page of the app to a friend's thanks to the URL.

You can't install an app without accepting all permission, contact info, sms, and so on. Facebook is much more privacy agressive on native than on the web.
You get a certain number (10-20?) of free articles per month.
Having a terminal in Vim is very convenient.
Tax rates are progressive, meaning that those with lower income pay significantly less than those with high earnings.

Taxes are used to finance and subsidize common services such as heathcare, public transport and education, which people with a disadvantaged background otherwise could not afford.

Thus, it is more likely that those which were born in a low income family (and are willing to improve their situation) can move upwards, since they don't have to worry so much about basic needs.

https://en.wikipedia.org/wiki/Social_mobility

https://www.economist.com/graphic-detail/2018/02/14/american...
Ah you made this click for me. I had always failed to understand why squirrels would do this. Faking hiding a nut doesn’t feel like a productive use of energy even if other squirrels are watching. But if it is mutually understood that all squirrels are going to pretend to bury nuts n% of the time, it becomes less valuable for other squirrels to spy on you to begin with!

I wonder if the squirrel burying meta changes across generations. That is, when squirrels feel confident that nobody would bother spying, they waste less time pretending to bury nuts, which over time leads to more advantage from spying again, and thus requiring more deception.
Color Bookmarklets
https://www.squarefree.com/bookmarklets/color.html
Reminds me of when I attended an event in Paris, France and they had a robot bartender. I was there during the day when they were setting up and it took a team of 3 engineers ~8 hours to set up vs just paying a bartender for the 3 hours + an hour's setup time that the evening cocktail reception lasted.

I understand they organisers wanted something cool, but it was comical to observe nonetheless.

[Edit: punctuation]
A lot of sentiment here around "housing is the root of all these problems", but isn't it also the problem of these companies creating offices in communities that can't support them?

Given there are a lot of places that offices could be built that could support the employees, I think some of this responsibility lies with the companies who consciously keep their offices in locations that may cause their employees (not to mention facilities contractors) to be homeless.
95% of the current games use OpenGL / DirectX 11 over Vulkan/ DirectX 12. Vulkan seems to be a nice to have with lots of potential in my opinion. I have yet to find a killer use case for Vulkan, on the web in particular.

With WebGL, in my current projects, the limiting factors are the network, javascript and RAM more than the opengl driver overhead...Maybe the reason behind it is to find common grounds with Apple and supports several investment around Stadia's core technologies?
I'd like to not democratize bad actors. By publishing it free I'm taking something that could cost like $300k to build and giving it away for zero.

This prevents malicious actors that are underfunded from doing something with it.
Add an out of band channel to ssh and your favorite ssh client/terminal emulator. Teach it that information in the out of band channel is used to render html, jupyter notebooks, or whatever. On the remote side, have your sshd set an environment variable that lets apps know the side channel is available, and then df can produce cute little pie charts or historic usage graphs. Ls can produce thumbnails if run in a directory with that kind of media and the appropriate args are used.

Honestly, it's likely that nothing special is needed on the ssh part of things as simple port forwarding and environment variables would do the trick.
Uncertainty is everywhere!

The normative values aren't handed down from God, or some definite evidence of health. Instead, they were the typical range (mean ± 3SD, percentiles, etc) from a sample of healthy people, possibly matched for demographics (e.g., sex).
Suppose we set each range so that it contains 99/100 healthy people. It would only take about 70 independent tests before you have a 50:50 chance of being outside that range on one of them--and that's assuming you're an exact match for the reference population.

There's also error in the measurements themselves. Some of it is errors in the actual procedure or preparation: cross-contamination between samples, dust blows into the well, etc. However, many of the tests are stochastic too. Some measure binding between stuff in your blood (e.g., antibodies) and a "probe" that's designed to detect them. This usually works, but non-specific binding can cause false positives (the probe binds something that is similar to, but not quite the same as, the target). Other conditions can cause false negatives. The "front line" screenings are usually meant to be cheap, fast, and biased towards false positives.

You might be interested in a fairly common statistics question about screening. Suppose you had a test that is 99% reliable: 99% of sick people test positive; 99% of healthy people test negative. The disease itself is somewhat rare--only 1% of people have it. If you test positive, what are the odds you're actually sick? The answer[0] will explain why we don't test or scan people for tons of rare diseases, even with very reliable (and free) tests.

[0] ʎʇɟᴉɟ-ʎʇɟᴉɟ
While you're here the rename of the URLs has caused me pain.
For example (here on Task.Unwrap)

https://docs.microsoft.com/en-us/dotnet/api/system.threading...

The code sample has broken links, the correct pfxteam blog is:
https://devblogs.microsoft.com/pfxteam/whats-new-in-beta-2-f...

It would be great if 404 page could show the posts for that day for the 4-Nov-2009 time period
Huawei accuses U.S. of bullying, says working with Google to counter ban
I agree wholeheartedly, and hoped to get across everything you said. I took care to mention in the bottom of both of my posts that your beliefs can be wrong/misguided, and CBT could help with something related to self-esteem. I don't know if could stretch that into political beliefs. I also don't think principles and self is a static thing. I should've been more explicit about that.

I'm not really proposing a solution, just an observation that these things, who you aspire to be/principles vs. how you live your life, seem to be coupled with psychological problems.

I think we are pretty much on the same page honestly.
I guess what I'm trying to say is: it's a feature, not a bug, and it's really important for entrepreneurs to understand this because otherwise they might think they have no competition where their competition is with the most useful piece of software humanity ever produced.
In your analogy, you get to work either way.

In either case, our discourse continues to suffer. So what choice do we have? Maintain the current system and watch our process devolve slowly, or permit regulation which runs the risk of creating a power vacuum?

Our system suffers in either case. We're talking about damage control at this point; not actually fixing the problem.
But, you wouldn't need to save a password if it was a one-off, either?
For future reference, you can download VLC from app store, it has a local wifi server which you can connect to from pc and upload media files from browser.
> For the first time in at least a decade, 4,868 more people left King County, Wash. — Amazon’s home — than arrived from elsewhere in the country.

This statement lacks precision and is a poor way to open the article. It implies that this is the only time that particular net change took place, not a net-negative change. EG, maybe 2000 people left last year?

While one can certainly infer, it's poor style IMO.
You could also run dual AthlonXPs in SMP motherboards (even though it was only the AthlonMPs that were officially supported).
If only the company in question were some sort of specialist in tech, then possibly it could discover some sort of technical alternative to location-based work environments.
Thanks for that. Listening is key. How do I even approach them to begin with (cold email/call)?
I have approached it in two different ways. One was with discrete hardware on breadboards. The other was with VHDL and an FPGA. Out of the two I would say the breadboard method was the most satisfying because at the end you can show it off as wizardry to the two people or maybe three people in your life who love you enough to be bothered by it.
Request for Startups: Government 2.0
> Since the assumption is that this class of exploit is known and patched, it might be less attractive for exploit makers to target. Given that, you can actually disable the mitigation to get the performance back without suffering a breach.

This is an argument that anti-vaxxers use. And it works -- until enough people do it to compromise herd immunity. Then, suddenly, it doesn't work and you have a Very Bad Time.
If you filled every damn square inch of that space with 5 story apartments, your commute would go from 3 hours to 45 days.
Upward mobility there is defined as movement between different income quintiles. Higher taxes affect everyone so would merely adjust the boundaries of those quintiles.
Things that help me when I'm feeling tired or just struggling with keeping a normal sleeping pattern:
1. try to cut coffee for a month. You'd be surprised how much it affects your sleep/eating habits. Or atleast it does for me.

2. If you can find the time, work out

3. Most people need between 7 and 9 hours of sleep. While it's also recommended to atleast get 1 block of 5 hours during sleeping.

4. Water, get an healthy amount of water in a day (though don't start chugging like a mad men, I said an healthy amount)

5. Having an balanced diet that is maintainable.

6. Having a cold shower in the morning wakes me up, so does taking a dump

7. Drop sweet drinks they're sugared water and hold more calories then you should drink

I'm not an doctor so take everything I say with an pinch of salt
Seconded. Geoff always asked us the hard questions we should have been spending more time thinking about.
>but if you were really concerned you could perhaps acquire a small outfit like Keikai and protect yourself

Only one customer can do that, not all of them. As a small provider of enterprise software I would offer to sign a source code escrow agreement.
> getting most of it with your fingers

Please tell me you don't mean this like it appears you do...
I'm curious, why 190deg and not 180deg ?
Exactly, and besides, if you want to write secure software it is also mostly a development process thing, and not just what programming language you write it with.