skysight-inc/HackerNews huggingface dataset:
Although dragontamer's complaints are mostly correct, I think he's being a little uncharitable and is largely missing the point.

Yes, writing lock-free code that's generic, that supports many-to-many reads/writes, and that's correct on all architectures is hilariously hard, and most people should not try to implement these from scratch at work. Other approaches can be more performant, and can have acceptable trade-offs for most use cases.

Are there issues with this one? Maybe. As dragontamer stated multiple times, this stuff is pretty hard to reason about.

HOWEVER, this ring buffer was designed to run on embedded systems. As usual, the constraints are often a little bit different when you're writing software for a microcontroller.

As an example, let's imagine you have periodic bursts of data coming in on a serial port at 2 Mbps, and your microcontroller is running at 32 MHz. Also, your serial port only has a 4 byte hardware buffer, and the cost of missing a byte is... I don't know, sending an endmill through the wall.

You can absolutely make this work, and you can even formally verify that you'll always meet timing, but you're going to have a really hard time doing this if you also have to analyze every other piece of code that will ever try to acquire that lock. A single-producer, single-consumer, lock-free queue with fixed message sizes can be implemented correctly in about 20 lines of C. It has a lot of annoying constraints, and you still have to use atomics correctly, and you still need a memory barrier, and don't even think about resetting the queue from either thread, and... (etc).

But if you're careful, a queue like this can make an otherwise impossible task relatively manageable. I can no longer count the number of times a construct like this has saved a project I was involved with.

Would it automatically run correctly and at full performance on a Xeon running Linux? Fuck no. But that's not the point.

The desirable quality of lock-free queues for embedded systems is correctness, not performance.
Not 2004, 1994!
The other comment below yours does illustrate it a bit better, I don't think a sales site needs to be of a 'slick startup' style to provide a little more trust about their product and service, rather just take some care and attention with their presentation.

Things like the lackluster approach to their imagery or the lack of thought behind layout of elements in the footer/header etc to me doesn't instill the notion that this company has taken any care or thought to their own presentation, and because of that I wouldn't trust them to also take care with their card processing or other infrastructure related to taking my payment. You don't need a design degree or a deep understanding of the arts to make something which doesn't look like a dog's breakfast :)
> If you're more likely to be preyed upon because you don't have the knowledge or connections to make more informed investment decisions and are more willing to increase the tax burden on your fellow person as a result of investment decisions gone sour, that's where the government steps in to protect the general population. As a reminder, this is one of the few responsibilities the government actually has in any society, even the most libertarian.

I don't know where you get your ideas of what libertarians are or aren't but, the general basis of libertarianism is that government gives your recourse for physical harm, defrauding via lies of commission (on principle and independent of the individual's ability to protect themselves), and typically property rights (though libertarians often disagree why). Generally the truth is considered to be an absolute defense against an accusation of fraud, and the justification of fraud is not a function of government having to 'bail people out', and in general, libertarianism does not consider it the role of government to "protect the general population". Typically, libertarians believe this under the premise that so often governments have done (and continue to do) shady things under the "guise of protecting the general population".
Makes the marketing claim that much more amusing.

> …to speed up page loads, eliminate clutter…
given the current antitrust momentum I don't think they'd ever cut Mozilla off in a way that makes them look coercive. If anything the current arrangement is a hedge against bad PR. "if we hate competition and privacy so much, why do you think we're in business with our anti-ad competitor?" etc..
> They returned a US prisoner back to us recently, and he had been tortured to the point of being braindead.

There was an assumption he was tortured, but the coroner's report couldn't confirm his cause of death. Why would you state he had been tortured without any proof?
Google might not be happy about this move, but historically Google has paid Mozilla to be the default search engine in Firefox, which doesn't require Firefox sending any data to Google (apart from actual search queries, obviously).
Good point, I didn’t address that.
No... the computer is a second factor just as much as a phone. Something you know (password) + something you have (computer) = MFA
I had to check on my site but yes. Google Analytics cookies (they start with “_g”) are set on the website’s domain.
HIPPA isn’t only about insurance. If they collect any personal health information (which, by the very nature of their product, I’m sure they do) they need to be compliant.
Looks like there is an inflection point where adversarial activities become more profitable than genuine activity. I wonder if this has happened for Amazon. In this case, I would expect counterfeiters would grow exponentially. That's just the laws of economics.
Amazon's Choice in the context that Amazon is other customers here, makes sense. Amazon Customers' Choice essentially.
They hoped so.

One wonders how many others didn't get enough Twitter cred, before. That some low-level ticket stamper (even a high-level ticket-stamper) had authority to deep-six a customer on no more say-so than high CPU usage tells us more about the company than an incident report massaged by marketing communication specialists. Simply, the latter sounds good because it has been made to sound good by sounds-good experts, and could say anything; but the event itself is ground truth.

They will need a lot more time and good behavior to live this down.
Same could be said of the phone, right? A zero day on the phone would circumvent the 2FA.

Really, the SMS part is the actual weak link in the chain. Easier to hijack SMS than own a computer or phone.
Would you please stop using HN for nationalistic or political battle? You've been doing that repeatedly, and we ban such accounts. This is in the site guidelines: https://news.ycombinator.com/newsguidelines.html
i'm on my phone, but wouldn't something like this work?

*::before, *::after {
user-select: text; // or `all`?
}
The startup claimed they had all their backups on digitalocean, which contained data of Fortune 500 companies.

A startup who has fortune 500 clients must have history. I don't get then why digitalocean says they do not have payment history. Either the startup moved a few weeks ago - but then why don't they have offsite backups if they just moved. Or because they're french they did have payment history but did not have an American credit card to similar.. not sure what's up
I just came here to say: Fuck The New York Times.
If you're security-conscious then you'll install updates immediately, before you get compromised by whatever attack it might be fixing.

In reality no-one outside Mozilla is auditing updates (other than black-hats reverse-engineering security fixes to catch the people who don't update immediately). I don't think the situation for other browser vendors is any different.
> "Readers need to read more than headlines,"

They should, but they don't. They know that and you know that. Knowing that, it's irresponsible to publish headlines that are misleading when taken in isolation.
Or alternately phrased - low performance is also a safety risk in the military context. Increasing accident death rate in exchange for reducing the enemy-action death rate can be a good tradeoff.
This looks perfect way to solve the current dilemma of choosing a "daily driver", but isn't it convenient to have stored all of passwords or details in profile in one browser or is there a way to keep everything in sync. I definitely would like to give a try to Safari.
>I'm not sure how they are able to get away with this without violating HIPAA though.

The same way every health app out there does it. By not having medical professionals involved, not transmitting data in standard electronic medical formats and not getting data already classified under HIPAA. Without those you're no longer a covered entity or business associate under HIPAA so you can do whatever you want.

Contrary to belief, HIPAA is not about medical data as a whole.
NSA Cybersecurity Advisory: Patch Remote Desktop Services on Legacy Windows
In what way is DigitalOcean a "huge company"? At ~300 employees, it's closer to the SMB's definition of a small business (<250 employees) than mid-size (<500 employees).

In all fairness, having worked at a few tech startups, it can be hard to scale customer service to keep up with demand—you don't control how many support tickets come in, and it takes a lot more time to hire and train new customer service agents than it does to spin up new servers, and if you over-hire, it's a lot more costly than shutting down some servers.
What is this for? I feel like my voicemail box has nothing of value in it.

For things that require 2FA they will call or SMS but do they really leave a message if they call and you don't pick up?
> Will there be some revolution at some point that encourages people to somehow isolate their commandline activities to different realms, thus limiting the scope of any attack like this?

I hope we can at least put it off until it's a real problem and not turn the world upside down for a largely theoretical one. I also doubt any sort of sandboxing will be effective and practical to run software from untrusted sources.
Getting Started with Valence and Declarative Performance
Ask your father about drug induced mitochondrial dysfunction. I had ciprofloxacin 4 years ago and my exercise tolerance swiftly dropped in the months afterward. Research tells me this is due to mtdna depletion and dna damage and I just want to know how to get better. I now have stage 1 diastolic dysfunction and a plethora of seemingly unrelated problems, coming from none before.
You mean like those survey pop ups that come up halfway through an article? I hate those. Those have caused more suffering for me than 3rd party tracking.
>All of the most successful tech companies are platforms

This is silly. 4 rather recent internet companies are meant to prove your point that the way to success is as a platform? This post ignores the vast majority of tech companies.
Search engines are tracking that already and essentially always have. Enabling 'ping' doesn't change the privacy situation at all.
This policy simply gave a nice big force multiplier to assholes
This right here... There are game studios that can keep churning out enough games to create their own alternatives to Steam and they have and they will succeed without Steam. What will be left is microtransactions and indie games if they arent careful.
The NSA and GCHQ are really concerned about the BlueKeep vulnerability.

It has the potential to do some serious damage.
TLDR; looks like none of what I thought "Amazon Choice" meant is true. This is what I thought: (1) they had verified seller through some background checks, (2) made sure the seller was selling genuine brands/product, and (3) the product was the best selling among such verified products.
I haven't noticed that, but the labels definitely move around with very similar searches.
Anomaly Detection for Metatron Discovery Ex-Pack
No. I hate those questions and don't want to answer them. Just let me use your site and figure out what works from there.

You can still have analytics with this Firefox change, you just have to use your own domain for the cookies.
Empirical Methods for Software Engineering Research (2007) [pdf]
No, they don't. Although it's not about insurance either. Here is a list of who is covered: https://www.hhs.gov/hipaa/for-professionals/covered-entities...

Note that a random app that gets "medical data" is not covered unless it counts as a health care provider AND transmits data in certain HHS electronic formats.
Ask HN: Your Workplace vs. High Technology Hubs
Hi HN,

This was posted on HN yesterday: https://news.ycombinator.com/item?id=20088790

It compares SV (and other high technology hubs) with 'the rest' of tech workplaces.

My question is for those of us in 'the rest' of the industry:

How does yours compare? Does your company offer technology products, or is your technology work in support of something completely different? What development practises do you use? Tools? Stack? Hardware? What drives you nuts? What do you enjoy? How are your hours? Pay?

There is no particular motive behind the question - just pure curiosity, since what we see in the news, does tend to be the 'glamorous' side of the industry.
There should be essentially none [0]. There is no list because there are no issues between using OpenJDK vs Oracle for virtually any project. The JDK's are 99.99% the same. Doesn't android studio come with it's own OpenJDK implementation? [1].

0: https://www.baeldung.com/oracle-jdk-vs-openjdk

1: https://intellij-support.jetbrains.com/hc/en-us/articles/206...
Almost all cultures have some mechanism of cleaning larger food particles between teeth, particularly back teeth. But, more to the point -- absence of evidence is not evidence of absence:

https://www.health.harvard.edu/blog/tossing-flossing-2016081...
Why does "Updater" "not really count" as "remote code execution privileges"?

Either the vendor can remotely change your software and its configuration without user intervention, or it cannot. For any software that supports unattended updates, it can. End of story.
Diving into JavaScript Land as a Newcomer (2016)
Same story different day: https://www.history.com/news/roaring-twenties-scams-ponzi-wa...
I'm not sure why the "Multi Account Containers" are not built into the browser but I found this add-on to be a motivating factor in switching to FF.

https://addons.mozilla.org/en-US/firefox/addon/multi-account...
Benq has wide gamut displays.

Eizohas this https://www.bhphotovideo.com/c/product/1425544-REG/eizo_cg31...
Couple questions:

1) Is CockroachDB actually popular? Like sure they have a couple big users, but is it gaining traction?

2) Would it be as popular as it is if they'd started with this license from the very start?
"The Measure of Reality: Quantification and Western Society" by Alfred Crosby is another great book on this subject.
Ideas vs. Judgment and Execution: Climbing the Mountain (2008)
Use something like 1Password and you can have your passwords in every browser or app, on desktop and mobile.
It's been bad for years. I've heard from people who have gotten emails back that said that Amazon is actively pursuing a partnership with a company that they have never contacted (mine). Other people say they just get boilerplate responses that seem to be written by bad AI or non-native speakers who didn't understand the customer email.
Is this problem not solved by virtual environments or chrooting ? Potentially a simple wrapper script could be created around chroot that only installs the programs you need.
Not really. Take five seconds to think about it. Kids don't need dressers to be as high as an adult's chest. The furniture just doesn't need to be tall. There's nothing convenient about a tall dresser that you have to peek over the top drawer of. Why make dressers even four feet high? The volume works better if split in half, so you can readily see down into drawers.

That said, this is obviously all just one big ikea ad. If it were science, it would be about dressers in general, statistics around the globe and how to stack up the instances where kids got killed.
FWIW, I recently scanned a translation of the double-entry ledger part: https://www.gwern.net/docs/bitcoin/1963-brown-pacioloonaccou...
> Have the net founders in that list discussed the topic recently? I only see results from 2007

You must not have searched very thoroughly. Here’s the first article that came up when I searched “David Farber net neutrality”: https://www.technologyreview.com/s/531671/are-we-really-savi...

> it could have meant something different at that time

Nope. It meant basically the same thing it does today.

> It is unsurprising that investors like Andreessen are opposed to net neutrality: they stand to get richer without it.

The firms and investors backing NN also stand to benefit from it, so this ad hominem is moot.
> But at the end of the day, I'm just taking someone's word for it that this is all they send, and assumes that it won't change over time in a browser that regularly updates itself.

Actually you aren't. It's quite easy to build your own Firefox and use that, or use say Ubuntu's build if you trust them more. You wouldn't want to audit the Firefox source code yourself, but if Mozilla was intentionally sneaking backdoors into the source code, someone could (and probably would) eventually find that out and you'd be able to verify it by examining your source archives... which means Mozilla would have to be stupid/crazy to try that.
Having previous worked in this space (for ginger.io), I’d really recommend against talkspace. The time between replies is so asynchronous that it’s a really poor substitute for actual therapy, and their lack of HIPAA protections is unethical. They need to raise this money because they spend it all on marketing.

I haven’t been at Ginger in a while but they were the best I the biz when I left, and the team really believed in the mission for the greater good.
Maybe they wouldn't mind being paid in ICO?
I think this response is really good.

Now that we're all not picking it, however, I think they should remove the "People" section. They did a good job of adjusting process instead of blaming people. The people section, however, might lean toward blaming people. They didn't, in this case, but it could.
Firefox is open source, and even the telemetry server code is on github, so if you wanted to really dig in you could.

At the end of the day if you want Firefox to make rational decisions about what feature to implement they need to collect some data. That fact alone can't be a problem for anyone who wants to have firefox be a competitive browser.
Great response and ownership.
Counter-anecdote slash venting:

I recently logged into my long-dormant DO account to kick the tires on their now-GA managed Kubernetes service and to contribute some CPU cycles to a distributed computing project I'm interested in (not cryptocurrency, I swear).

I first requested and was approved for a droplet limit increase (to 25). I started 20 nodes, deployed my very CPU intensive workload, and 12 hours later my account was locked and my nodes all went NotReady.

I immediately replied to the abuse ticket explaining my usage. 4 days later, my account was unlocked and received the "allow high CPU" flag... but they billed me for the nodes as if they had been running that whole time. I asked for a credit (5 days ago) and they haven't replied yet. Probably a little busy over there right now.

So... I'm not too thrilled with DO. I get that cryptocurrency ruined everything, but this has been a frustrating experience and I'm glad I was only using it for a pet project.
> you probably still can't use the string literal '</script>' within an inline script.

You're right: https://jsfiddle.net/pLo9bdhs
From the perspective of allowing more and more games to exist and do well on the market Valve is doing amazing. This talk goes over some of it https://www.gdcvault.com/play/1025672/2014-vs-2018-The-Shape but essentially there are 1000+ games right now on Steam with over 100 concurrent users. One of my games got about 80 concurrent users at its peak and it made a small but fair amount of money (especially for someone's first game), so it's easy to see how 1000+ games with that many players means a lot of financial success to a lot of people, way more than ever happened before for game developers.

One of the things that amazes me about Valve and the way they run Steam is that I released my game, had thousands of people buy it, pushed updates, communicated with users, got paid, and I had to speak with 0 human beings at Valve. It all just happened in a very predictable, clear and highly automated way. This lack of friction is absolutely amazing for developers, especially people like me who live in a third world country and would otherwise have more difficulty going through these processes for any number of reasons. So IMO they're doing something extremely valuable which is properly acting as a platform so that other game developers can succeed and make more and better games for everyone.
Personally, my "go to" list for movie rankings is http://www.phi-phenomenon.org/ which is a labor of love project attempting to generate a forced ranking of all-time best movies.

The main downside of it is that it discounts recent (past 5+ years) movies. This is partly due to the infrequent updates, and partly because films take a while to appear in the data sources the site uses for its statistical analysis.

(I am not affiliated with that site. I'm just a long-time, satisfied user of it)
That is from 2006. I remember a documentary in german TV from ZDF - Der Millionensarg. Therein this person

https://de.wikipedia.org/wiki/Sebastian_Pflugbeil

walks with him through the ruin several times, and compares several videos with the floor plan, together with other people, and they all come to the conclusion that the official story makes no sense, for several reasons.

Anyways, wasn't the conclusion of the last episode that it was all about saving face? Who is to say it would be any different now? Especially if there are BILLIONS to have?
Hm?
Depends on your definition of "success". As a percentage of total market capitalization, these 4 companies comprise a significant portion of that, though by percentage of total companies, it's a low figure.
Get into a less dodgy business
> Around 1/5 of the items I buy online have been opened and used, or have some defects.

yeah. for some items, i've tried to avoid this phenomenon by ordering from, say, homedepot.com, or Lowes.com, but then it seems like they sometimes just send me items with damaged or blemished boxes, or opened product, which they couldn't sell in the brick and mortar retail stores.
now not interested in making _____ but something that makes money with least effort

I substituted the blank for "games." Doesn't this now apply to lean startups?
I presume by 'a VM', OP means something like a pre-built install/appliance so that there's no need to hunt down and install every esoteric shell that's out there just to use them for 30s and decide they don't suite their usage.
Extended periods are very relevant to any TSA employee that can hold down the job. Death is death, flashy or not.
> and he might be a too overconfident

It's pretty much a law of nature that the pioneers in any field will be overconfident. If they weren't, they never would've tried.
Promising thousands of U.S. jobs, Foxconn offshored 155 to Mexico
That's not true.

They only need to be HIPAA compliant if they're a covered entity and dealing with an HHS related transaction.

https://www.hhs.gov/hipaa/for-professionals/covered-entities...

> A Health Care Provider .... ...but only if they transmit any information in an electronic form in connection with a transaction for which HHS has adopted a standard.
Why would there have to be some space between the lines if you used a router?