skysight-inc/HackerNews huggingface dataset:
Just for what it's worth: it's not that cryptography needs difficult-to-generate "true" random numbers, but rather that it needs a particular kind of pseudorandomness. The best mental model to have of crypto-randomness is that it's seeded from events unpredictable enough to be effectively secret; a typical CSPRNG is, in fact, essentially a stream cipher that uses "entropy" (again, those unpredictable events) as its key.

Once you've got it seeded, you can get random numbers from your system's platform CSPRNG plenty fast, and CSPRNGs make, for most applications, a reasonable default RNG.
I meant every stack frame to be a separate heap-allocated object.
Each provider will seek to make you take their one true path, or you need to do your own engineering.

Using the providers path isn’t necessarily gouging, but it isn’t cost optimized either. The answer depends on you.

That said, cloud is like any tenant/landlord relationship. Your rights are linked to time and are whatever your contract provides. If you didn’t like Office 2007, you didn’t buy it. If you don’t like Office 365, 2021 edition, too bad.
WAF wouldn’t just prevent DDoS I assume. I’m pretty sure there are WAF rulesets that attempt to block attacks such as XSS or even remote code execution vulnerabilities.
Plus, the partners Scroll highlights are... extremely biased, by any standards. That's not terribly reassuring in this circumstance for such a relationship.

EDIT: Tell me where I'm wrong, please. The majority are the Vox collective and close Media Matters affiliates.
Sure, right now unmetered electricity would be a bad idea.
Man, I keep thinking "just keep on chugging with Choo", but I'm really tempted by Svelte.

( https://choo.io )
How would we know? They've been lost.

Also, poetic value is subjective. Historical value, in the sense of helping us understand things we didn't previously, much less so.

You may not find a phrase in a given language "poetic," but knowing that native speakers of said language did may be quite valuable.
What definition of "police state" are you using? How do all the things you acknowledge in your third paragraph not make China a police state?

It's effectively totalitarian, special economic zones aside. We've seen what happens if they try to stir the pot politically. Their relative "freedom" is exercised with a guillotine permanently above their heads and no legal rights.

Everyone is surveilled across every arena of life.

And if you really think people only disappear in Xinjiang, look at the history (and continuing present) of human rights or democracy activists. [0]

[0] https://www.hrw.org/news/2019/05/30/human-rights-activism-po...
Good News for Mario Tennis Aces Players
Exotic cars usually have a lot more quirks and compromises than normal cars. They're also not known for being terribly reliable; the ones that are are made by divisions of much larger automakers, so they can raid the parts bin of their cheaper siblings. Jaguar used to be infamous for how unreliable their cars were, until Ford took them over.
Stock was $224 on June 19th, hit $224 again on the 24th and closed today at $224. Not sure what the slump is you're referring to?
I am confused about the multi-threading support in chrome. The article links to https://medium.com/google-earth/performance-of-web-assembly-... where they mention that chrome 74 added support for threading. Reading the 74 release notes I can't find anything

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe... says that SharedArrayBuffer was readded in chrome (behind a flag?) in v67, not 74. Is that the same? Is SharedArrayBuffer equivalent to the support for multi-threading or were other parts disabled due to spectre – or not yet implemented in 2018?

This whole wasm/threading/spectre mitigation situation is difficult to follow

What is the state of this in July 2019. Do you know about a benchmark/good example project that gives a good overview of what's currently possible?

context: I want to build a tile based view (tiles in x/y dimensions + zoom levels). The content of the tiles is loaded from server (shapes mostly) and rendered into tile images client side. I also want the same tiles prerendered as identical images on the server.

For this I have a feeling that something like skia is the way to go. Skia can be used via wasm bindings. How I would fetch the shapes and render the tiles (or fetch the prerendered ones) transparently and then where to render the tiles into, that is what I am trying to figure out. It feels like multithreading could be very useful here. Right now only chrome appears to support OffscreenCanvas (which can be accessed from webworkers), hence the idea of using skia directly and possibly going a level higher to write whatever kind of multithreaded render logic in rust and run it with wasm and a single "canvas output". Whether skia is the right choice here or not is also something I have yet to figure out

The ultimate goal is quick startup (prerendered tiles) while simultaneously high performance when updating the entire view (=multiple tiles in parallel). This is mostly a learning project for me
Two macro-issues in my view, have caused the rise of what could be called "illiberal" tenancies.

1- The gains of globalization have not been equality distributed, we see this in rural France & England, along with the mid-west USA. Among the biggest losers of globalization have been the rural areas of advanced economies, rural areas are not as dynamic as cities and thus need more government support to keep pace.

2- The world's boundaries are still messed up. There is very little territorial dispute among advanced economies, but the developing world is dealing with a crisis caused by the poorly drawn maps of imperial governments (and the allies) post WWII. The Partition of India and Mandate on Palestine are the two biggest examples, but Africa struggles mightily with this as well. In the past 20 years 4 new countries have been born, we still have a way to go before reaching equilibrium.

Climate change is the kindle that has arguably already started the next major global conflict. It's only going to exacerbate the aforementioned points.
I think the cryptocurrency was used so that they could make stronger privacy guarantees than they could using a proper currency.

That seems like a fair trade-off to me, but it is indeed a trade-off between privacy and usefulness it is one I appreciate though.
Moore's Law vs. Duck Typing (2010)
A color scheme providing both colored and text-style preview for Markdown
You are spot on, in this case, I fear, given every partner Scroll lists is on the /hard/ left of the political spectrum. That's not a healthy partnership for Mozilla to take on, unless they proactively reach out to other mature publications across the spectrum.

EDIT: Tell me where I'm wrong, please. The majority are the Vox collective and close Media Matters affiliates.
Stolen implies that Equifax lost possession of the data, which I don't think is the case.

It takes teams months to get to the moon too, but that doesn't mean it's not out there for anyone to access.
I agree, advertised SLAs are garbage.

Agreements to uphold past performance are much better.
To the higher parent comment's point, the trade-off may not have been an equal one.

Yes, they have two less major mechanical systems. But they likely have more electronic and software systems, which tend to have more failure modes (and be more difficult to test) than their mechanical counterparts.

Back when I worked in automotive assembly, we'd did some work replacing mechanical systems with electronic controls. To a large extent, the mechanical systems, once tuned, would run indefinitely until they developed some mechanical wear. The electronic counterparts had to be re-tuned on a regular basis. The electronic ones had less moving parts, but increased complexity.
I believe leafspy will let you disable these sounds individually. You have to have a 2013 or later leaf. You also have to buy the leafspy app + an inexpensive bluetooth OBD2 dongle.
I don't get what this argument is.

Blockchain is software so you can just build layers on top of it that cover whatever business need you may have. If I look at the just the database layer of the current system, it'll also be "medieval" in certain respects.

Maybe blockchain isn't a viable technology, but this article doesn't make a particularly convincing argument against it.
Climbalytics - https://www.climbalytics.com/

Stage: Bootstrapped, Public Beta

We make: A fitness tracker specifically designed for rock climbers.

Team: Three part time

Needs: Feedback
> why use a cloud provider at all?

Cost+speed of scalability, and managed services. If you rarely need to scale, your workloads are all predictable, and you don't need managed services/support, you should just buy some VPSes or dedicated boxes.
Darwin's Dangerous Idea, by Daniel Dennett, one of the two most important (IMHO, of course) books I've read (Thinking, Fast and Slow is the other, already recommended, below.

Dennett is a practical philosopher of science; the book is a detailed analysis and extension of the idea of "designer-free design", evolution by incremental random change. Among other things, he thoroughly presents the implications of Darwinian evolution, discusses the concept of "design space" and how some evolutions preclude whole swaths of that space, then speculates carefully on how the idea could pertain to other fields, e.g., the evolution of physical law (assuming that each "big bang" resulted in a universe with slightly different physics.
It'll be gone in 5 years. It's getting too big and too slow. Also, the react team managed to add hooks and useEffect in a way that makes it very easy to accidentally send your app into an infinite loop and not know why.
Two things: 1) humans do it by vision alone, hence, it is possible in principle, and 2) lidars are expensive and introduce one more failure point.

Most of the self-driving cars you see in bay area with lidars on top actually use those lidars to produce labeled data for vision-based distance estimator networks
If true, that's excellent news! I've carried around my custom Calibre settings for several years now, so I don't really know what is the default anymore. Back when I started using Calibre, the default settings were not ideal, and most Calibre converted files I've seen in the wild have used the old defaults.
That is so obviously true, of course it has to be punished.

We have mountains of literature, including by US intelligence couching it in euphemisms, saying basically that about the Middle East and the US. Just think Gitmo. I remember hearing the "argument" a lot, where people admitting that some people in Gitmo might be innocent, but by now have been treated so badly, they can't be released because they'd try to harm the US for sure.
An interview about testing the limits of scaling Kafka and Cassandra for real
I don't believe that, you mention this because you put 100% trust on the runtime. When I see syntax like: var array=something[4...$] I don't see security there, all I see is someone pushing the problem further under the carpet, into the runtime.

So Sure, RIGHT NOW the runtime might be safe from scrutiny, but is it because its SAFE or just not as such a high profile, just yet?

On the other hand I DO agree that 'junior' programming will always be a problem, regardless of the matter, and pretty much, regardless of the language.
For the same reason you want "to lock in" (meaning use) any solution. You do not want to build or operate it yourself. Why don't you take this further? Why to use a water utility if you can just drill your own wells? Most businesses are better of on cloud because their core business is not to build and operate datacenters but provide services to their customers (on the top of datacenters running their apps).
Yes, my statement was purely scoped to emissions, and using fossil fuels for electricity generation, as well as powering vehicles. If fossil fuels weren't useful we would of course not continue using them. Hydrocarbons will of course continue to be used in various materials.

However, for everything we make in plastic, there is a potential alternative. In many cases that alternative is more expensive than plastic for its specific purpose. Much of the reason plastic is cheaper is (conjecture here) because it is subsidized by fact that we use so much oil for energy. If all (or most) cars were electric, demand and production of crude would go down, and so would the economies of scale, possibly making plastic more expensive than biodegradable alternatives.

People will continue to use the materials that are cheaper. However our economy is not set up to internalize the costs to the world and to its biosphere. In that sense fossil fuels are very expensive, and we are incurring a debt. At some point its going to be time to pay the piper, and the alternatives will become cheaper by comparison.
> Based on your skill set, we'd hire you immediately (we're a listed, 3000+ employee company).

> The real problem here is the WFH requirement. That's just a no-no.

Thank you for the positive comment! Unfortunately the remote-only thing is due to personal health. I wish it wasn't so, but it is.
Hi,

I'm a Senior Software Engineer mostly focusing on Cloud based solutions and performing roles from architect to DevOps to tech lead. Basically doing what needs to be done to drive the project forward.

Location: Vilnius, Lithuania
Remote: Only if temporarily, pre-relocation
Willing to relocate: Yes, interested in Canada or US
Technologies: Kubernetes, Docker, Istio, AWS, IBM Cloud, Java stack (Spring, Spring Boot), Kafka, PostgreSQL, CouchDB, MongoDB, some experience with Javascript stack, also willing to pick up Scala/Kotlin
Résumé/CV: upon request
Email: logo.on (at) gmail.com
If you're talking about the 737MAX, there's no evidence to show that plane is unreliable at all.

It will very reliably crash shortly after takeoff if there's a problem with the single sensor that controls the MCAS.

The problem isn't reliability, it's a fundamental design flaw (the engines being too big for the obsolete airframe design) that was bandaged with a fundamentally flawed software hack that was specifically designed to not have any redundancy and to fail easily.
"What is Real" by Adam Becker. He presents the sociology of why the Copenhagen interpretation persisted for so long, despite strong opposition early on and refutations of Von Neumann's work on why it had to be true.

Once into the modern world, he provides an overview of current interpretations and their experimental support.

Becker's book is, I think, the best lay person's explanation of the problems QM was invented to solve, the Copenhagen Interpretation itself, and several of the more modern interpretations.

Great, mind bending read.
In Edinburgh we used to buy onions from a real Frenchman in french 'bleu' workers denim, from a bicycle covered in onion ropes. Same guy for ten or fifteen years from the early sixties until the eighties. He drove a Renault van to a market in france, bought a truckload of onions, camped just outside town and plaited onion ropes to sell each season.

https://en.m.wikipedia.org/wiki/Onion_Johnny
> It'll be gone in 5 years. It's getting too big and too slow

Funny, that's what everyone said 5 years ago. I'll bet on React to be here for another decade, no problem - there's just way too much momentum. In a way, it's Rails all over again (that's a positive).
Apologies. Friend link here: https://hackernoon.com/everything-you-always-wanted-to-know-...
I felt the argument was in good faith.
ahahah you are absolutely correct I was looking at the wrong zoom level on the chart, my mistake
Well, US law is how you know.

Harassment is not a new thing. It is covered in multiple different situations.

Courts and juries and judges handle this stuff all the time.
> You can describe the geometry of space-time with vectors just as well as you can describe quantum state transitions.

I don't think that's true. Quantum description of gravity that has any aspirations to describe real world doesn't even get the math solid with irreducible infinites popping up everywhere.

As they should.

I just don't think shape of the spacetime is something that should be possible to quantize. It's just fundamentally different for me and expectation that it should be ruled by similar equations as other forces seems misguided.
The Effect of Heat Stress on Productivity and Decent Work [pdf]
Facebook Fined EUR 2M for Violating German Transparency Law
Writing Articles About Technology
People have been talking about it since the (mid) 90's, sure. But nobody has ever implemented it, at least not at any sort of scale. So we can't really say that buffet style has proven "better" - it's just been available.

The problem isn't making things into a financial decision, it's making them into a non-trivial financial decision.

If you want $10/mo for me to access your particular walled garden, I'm going to have to think about it. And if I'm already paying for a couple other walled gardens, the answer is probably "no". But micropayments are supposed to go the other way. If you have an article that looks interesting from the headline and it costs me a nickle to press "read", I'll probably do that without thinking about it at all.

The problem isn't with the idea, the problem is that nobody knows (or wants to know?) how to get the transaction costs down low enough so that the payments are actually "micro". Regulatory bodies don't help here either, as it's not a scenario they've planned around or actually care about.
Have you ever used VidAngel? Basically it gives you a tree of content you can selectively filter before you even watch the show. You can say "filter all sex", or you can drill down into the tree and only filter "naked women" or "naked men" or even drill down and filter a specific scene if you know about it.

When you hit the timestamp of a filter, it just skips over the scene.

Books would be the same, but with the added advantage that you can easily alter the text to make it feel more natural. So instead of an explicit sex scene, you can end the chapter with a new transition where the characters enter the bedroom and close the door and it is simply implied what they did in between chapters.
The 286 did have protected memory.

Each memory access was associated with a segment register, one of CS DS ES SS. The low 2 bits were for 4 permission levels, and the next bit up indicated which of two tables the MMU should use, the LDT or GDT. The high 13 bits were an index into that table, which contained 8-byte structs called descriptors.

Each descriptor had a 24-bit base and a 16-bit limit. The base would remap memory. The limit would cause an access denial for out-of-range addresses. There were also permission bits, including no-execute.

That MMU was used by Xenix, Windows 2, OS/2 1, RMX, and various DOS extenders. Some of those weren't very serious about controlling permissions or remapping memory, but the hardware could do it.

Despite your forgetfulness, you seem like you might qualify for a job at my place. Hacking up doskey is excellent. Here, take a look:
https://news.ycombinator.com/item?id=20328264
The 737MAX is not fly-by-wire.

The problem is the automatic trim control system that was hacked on to make up for the design being fundamentally flawed (having engines too large for the obsolete airframe).
Depends which specific part of the industry you work in, perhaps.

The company I work for has set working hours, with some flexibility in start and finish times. But it's basically 8 hours per day, 40 per week.

What surprises me most, is that companies aren't limiting work hours to 40. And that people put up with working stupid hours. 80 hours would be utterly insane. Even 60 is ridiculous. The evidence shows that people don't get more done if the hours are increased further. But people do need a life outside work, and any more than that and you have zero time to yourself or your family, and that's going to be detrimental to your health and happiness. Why isn't there more pushback against it?
For the size and importance of Cloudflare some insights to a couple questions would be nice:

1. Why are WAF rules not progressively deployed since there's already a system to do so?

2. Maybe there should also be a testing environment that receives a mirror of production traffic before deployments reach real users?

(I understand the WAF change was not set to take action, but a separate environment would be less likely to affect production)
>> I've preferred C to C++ and D to C++ for a long time. To me when I read C++ code it's like the modem disconnected in the middle of the editing session with all the : and << flying around.

I'm sorry, but even though I think D is a great language, there are plenty of usecases where D isn't a viable alternative to neither C or C++.

If D had all those missing features, or if you compared D to some other mainly-GC:ed, statically typed and compiled language, I think the syntax comparison would have been more fair.
You're right, and I completely missed that. Sorry! Will try to correct.

Edit: ok, I've merged the comments back into https://news.ycombinator.com/item?id=20335816 and made this one the dupe instead. Thanks for watching out for the quality of HN! Especially when we screwed up.
Eh.

Netflix is a good example of buffet-style offerings, but you have to remember that Netflix was born out of cable, which is a much better example of buffet-style, and was largely despised because it was buffet-style. People hated paying for dozens of channels when they only wanted sports.

I would add a caveat to this that people like paying a low price for a lot of content. If the price of a buffet is too high, then people will start to ask why they can't just pay for the small amount of food or content that they want to consume.
I would claim that Python's context protocol [1] is exactly a general tool for resource management.

[1] https://docs.python.org/3/reference/datamodel.html#with-stat...
You must have been awesome during the start of the industrial revolution.
It's been well reported that climate change will mean different things for different people, and some of the effects will be beneficial in some way for some.

That doesn't wipe away the fact that even with these factors considered, CO2 is the primary cause of catastrophic, runaway climate change which will make Earth significantly less livable over the next few decades.
But in a sense, security is just part of the engineering required to make such a project a reality. No one is going to be deploying a kernel like this until it's proven, so perhaps the emphasis on security isn't needed for an initial blog post.
You'll probably be happy to learn about the file format M4B! It saves your listening position, so you can move it between systems and use different programs and it should remember your position. It's the preferred file format for audiobooks.
Distributed Systems Engineering with Apache Kafka Ft. Jason Gustafson [audio]
Why shouldn't big landowners get the benefit if they are truly bee friendly? It would take way more small landowners to have the same effect. Why not give a break to people under 5 acres as well?
We need fewer people like you if this shit is going to work
> Why so many problems at Google lately?

I recently left Google to start a startup and now everything is falling apart.
> I would also question why we are saving collapsed comments.

I can't be the only one who had no idea it did this? And if so, I'd could argue that there isn't really a need for it.
I think the difference between your comment here and the info on the status page is that after reading your comment i feel like i know what's happening.

you're right, there's no additional actionable information there, the status page contains everything i actually need to know. but a bit more information makes me feel better. I guess the difference is your comment reassures me that you actually know what's going on. the status page text (prior to the 14:31 update) could equally mean "we've got this under control" or "shit's broken and we don't know why"