skysight-inc/HackerNews huggingface dataset:
The claim that a "correct AST" would eliminate all sources of bugs is unreasonably bold, and I wonder if they really made that claim, or you misunderstood something? That just means the code compiles. Some languages are stricter than others, but none claim to eliminate all bugs.

Static analysis and safe refactoring tools are great, but they are certainly not going to protect you from implementing the wrong thing because you misunderstood the requirements or the environment; that's not possible even in principle. At best you can check for consistency (for example, consistency between a specification and its implementation).
What're some surprising facts about it that are unexpected to an outsider?
Yeah, that makes sense. And I can't think of any way to accomplish it better :/ Every app you install can potentially cause computer 'cancer'.

As a sister comment mentions, it's akin to warning the user whenever they run a command under su/sudo.
Fair enough, my bad
As a programmer of C language, where macros are conventionally all-caps long strings, CAPS lock is really important for me.
Yes. Not for the immediate "get a job" scenario... in that case you don't need either, you just need skills... but the comp sci route will give you exposure to high level topics you will need if you want to have a career
Is it not possible to manufacture shampoo in solid form? Like a bar of soap?
I and many others care about high quality laptops. Dell XPS and Thinkpads being two examples.

There's an entire world of excellent, powerful and cost-effective hardware outside of Apple's bubble.
> The court has ruled that individuals have a First Amendment right to use Twitter to interact with representatives of the federal government.

No, it hasn't, except insofar as such a right is protected against a specific form of government action.

It has ruled, more accurately, that individuals have the right to not have the government officials exclude them from full participation in particular corners of Twitter used for official government purposes.
Who are these graphics, audio, and film professionals who asked for a Touch Bar?
Oh honey... You may get 2-3 good years, but IBM VPs will swarm in and try to kingdom build -- its only a matter of time.
> you won't have to run an ad in the newspaper for a file system administrator with 5+ years of experience

Until you reach an extreme scale, at which point you hire the author of the filesystem.
Oh of course it was an 8080 kit. 8-bit microprocessor. Typo!
Caviar used to have a link where everyone could sign in and order by n time to get lunch. Seamless and stadium both have the same thing. The other alternative is to get catering and just set a weekly schedule.
My dad was a programmer at EDS for a short time before the Iran incident. Dad has a great deal of respect for Perot- Perot was quite the role model and practiced what he preached. He was also very approachable. Dad looks kindly on the times he had short but friendly interactions with Perot on the elevator or wherever around EDS. Dad was slated to join the Iran contract, but he decided being a programmer was not for him(he HATED punchcards). Talking with Dad today, one thing that isn't remembered as well is Perot's support of veterans during the Vietnam War, which was not in vogue then.
It's not that individuals have a First Amendment right to use Twitter to interact with representatives of the federal government, it's that representatives of the federal government can't control who interacts with them on Twitter in an official capacity.
Smoke, mirrors, and other obstacles along the way to ethical AI
> Modifying/creating/updating a few text files in your profile directory is not "binary-patching".

Correction #1: "This binary tool patches"

Predicted reply: "It's a shell script, not a binary"

Correction #2: "This executable tool patches"

Predicted reply: "It doesn't patch Firefox, it just alters your Firefox profile"

Correction #3: "This executable tool alters your profile"

Predicted reply: "Shell scripts aren't executables"

Correction #4: "This arbitrary code alters your profile"

Predicted reply: "It just adds a theme that AMO won't allow!"

And so, having nitpicked that to death to save us death by nested replies, I'm going to focus on your second sentence:

> it's done this way because it's impossible to do it with only a WebExtension published on AMO.

Correct. My point is that you can get lots of HN readers to do completely unsafe things — like allow a shell script to make modifications to their Firefox profile — by phrasing it as something appealing, like 'dark mode'. This modification is, by nature of being a command-line profile modification, horrendously unsafe.

It makes a case for why Apple is now implementing kernel-level restrictions for read/write access to ~/Library/Mail, ~/Photos, and so forth — because sooner or later someone will run something that unexpectedly demands access to something it shouldn't have, and the user will be given a chance to deny it. After I upgraded to Catalina beta, Dropbox tried to access my ~/Desktop folder. Why? I only use ~/Dropbox. I denied it access.

I wish I could have the same "permission dialog required" approach applied to ~/Library/Application Support/Firefox, so that nothing but Firefox and tools I explicitly authorize can edit my profile.

Until that day, people will continue running things like this, thinking that they're somehow safe, without any warning from the Firefox team that "Granting this access could allow malicious software to intercept your communications and steal your credentials", which this dark mode thing very much could if someday the author of this "shell script" decides to make it do so.
I switched to Zathura and don't look back. I now read my PDF in my own color scheme[1] and totally love the keybindings.

[1] config: https://pastebin.com/raw/NwYB0JNf
EDIT: Ha. My apologies as I just realized my stupidity - I was browsing on mobile and it turns out out I jumped into the 'What is Dark' post [1] and never finished the original! The mailing list links are in that one - I subscribed. This is a lot more interesting, cheers :)

[1] https://medium.com/darklang/the-design-of-dark-59f5d38e52d2
The larger themes are:

1. Community has always supported people in times of need, more so than government services.

2. The Internet had created distance amount community members

3. Use of the Internet for funds like this (or for Gofundme, etc.) is bringing that back, though with strangers

4. Shifting attitudes and values on whether this is acceptable

5. One Millennial is now setting aside funds for direct contributions. I would not be surprised if that trend continues.

6. Continued pressure on Millennials to make ends meet with access to new technology has been leading to this.

7. Disadvantaged groups and their economic struggles are becoming more visible, along with means for the community to help.
That is a pre-existing feature, and while it mitigates one specific aspect of the issue, it doesn't represent a security-focused response. Yes, I am saying that's not good enough: an appropriate, non-dismissive response would commit to writing code to deal with the issue raised, subject to the industry standard 90-day embargo. Depending on how much importance they place on their user's security.
Examples given do not guarantee how a policy will actually be enforced. Motte and bailey rhetoric can be used punish a broad variety of behavior while insisting the policy only exists to curtail something abhorrent.
> I hope there will be holographic rooms that one can use to holographically teleport to another location and do meetings as if they are there in person.

HP took strides on this in 2007 with the "Halo Room".

http://www.hp.com/hpinfo/newsroom/press_kits/2008/halo/ds_ha...
So this method works for max and sum. What else? Is it any sort-of "associative function" - ie, f st. f(x, f(y,z)) = f(f(x,y), z)?

Are there other useful functions satisfying these conditions?
Did your company try to write an FAQ page on how to accept the double-confirm dialogs in all major browsers (with screenshots) to maybe reduce your "90% of support tickets"? Does your ticketing software redirect you to (or display) an FAQ page that matches the ticket title?

I've come to understand how features like these get built, but I've also come to understand that people that use software are a lot more resilient and savvy than we think.

If 90% of your support tickets are about getting through a standard double-confirm, patio11 would probably recommend increasing your pricing to limit your paying customers to a pool that probably won't have much more trouble with that.
I can see it is pretty good value. I kinda hope it comes with 2070 though because of 8GB. Also it is a bit heavy for me, but still better than my current ~7 lbs laptop...
I feel "if the game was big" would've been more fitting than "good". Reading it (can) imply any game that didn't spend money is bad.

I got downvoted already, and honestly could've let that comment be, it's not that big an issue, and I think we see it similarly.

Also, I'm posting this to clarify my stance and remove any doubt.

...the word came into mind: I was nitpicking. Yes, I should've let that be. Cheers!
Dijkstra is a good source of controversial quotes, but they tend to be hyperbolic and I wouldn't take them as the last word on anything.
> you work directly with an AST and the UI only permits modifications by operations that preserve the correctness of the AST. It eliminates all sources of bugs

With the caveat up front that I know nothing about this beyond what you have written: wouldn't this just catch compilation bugs? The compiler tells me if the blob of text I gave it is incorrect in terms of any syntax errors.
Business logic bugs and accounting for bogus data seem more important to me.
That's cherry picking numbers somewhat.

Clinton never got a majority of the popular vote. A mere 43% in 1992 and 49.2% in 1996.

Contrast that with Obama's 52.9% in 2008 and 51.1% in 2012.

Or Reagan's 50.4% in 1980 and 58.8% smashing in 1984.

Reagan was obviously a lot more popular with the electorate than Bill Clinton and it shows in the only way that ultimately matters: votes. Approval ratings are at best bullshit, at worst they're aggressive propaganda from the corporate media machine to favor their candidates.
Seems like an opportunity for your company to pivot into the nascent and lucrative automated lunch ordering industry.
I have not read the paper yet but the abstract says that they compared two hardware adders synthesized from C++ code. It seems like a fair comparison but I wonder whether it might be possible to hand design a much more efficient posit adder that is more competitive with hand designed floating point adders. I can see how the number of lookup tables used in synthesis would be proportional to the number of gates used on a dedicated chip though so maybe there would be no difference in comparing hand optimized adders on ICs.
So is it the fact that a member of government clicked the block button the violation?

If it was a President whom the moderators at Twitter supported and they willingly blocked all of this President's critics on his behalf, would that make it legal?
http://archive.is/dM4pI
An enclosure + GPU?
Hmm? It seems like this is a step in the opposite direction.
I don't know why this guy was downvoted, he's correct.

I even have a pretty decent UserChrome.css to better integrate Tree Style Tab, https://www.reddit.com/r/FirefoxCSS/comments/ao3ydl/configur...
Checkout Pock - https://pock.dev
Internet is even more recent, does it make even less necessary to operate out economy?
The Emergence of AI from the Computation of Space
Primarily a class system as a first class citizen of the language, with uniform object syntax, without sigils or other syntactic contortions.

Being able to pass around open file handles without having to look up 5 kinds of punctuation.

Being able to build up complex data structures without having to use explicit references, where something completely different would auto-vivify itself if I used the wrong sigil.
I was absolutely mozilla's target audience when firefox was introduced. Now they remove control and capabilities from us, and I keep getting told here on HN I'm not their target audience, and should accept that they are making this for "most users" who need extension signing, auto updates, sandboxing, and in general NERFING THE POWER from me. Who the hell are they building for if not techies? Who do they think is going to evangelize for them if not techies?

Mozilla: fix it.
well they need it to operate the economy in the way that it has been operated as of late. which is to say: maybe if we take that away from them, we could solve two problems at once? Pollution from air travel, and all the societal problems that a globalized economy without meaningfully global regulation brings?
Hospital Robot Moxi to Help Nurses Not Replace Them
Or the person buying it is the increasingly number of non-technical people buying Raspberry Pis. To them, its just broken and needs to be returned.
What are knobs used for anyways outside of daws?
Well, yea, this is why implementing social welfare and safety nets is far better done at the government level, where you have accountability and a justice system.

An attractive person holding a clever, written-in-English sign, at a football game that cost them 100$ (or whatever) to attend, garners 3000$ for beer. The ugly, dirty, illiterate homeless person that stands outside of a train station gets 5$ for food.

Unfairness can exist at the bureaucratic level (shit like judges being tired and being less lenient towards the evening, or just plain and simple sexism and racism in the justice system), but it's far better than "marketplace of begging for welfare."
If they block someone for anyone else, you are correct. But when they block someone from the ability to interact with Trump's account (or any similar politician's), it is a position they are in only because they are doing business with the federal government. It seems natural that to the extent they do business with the federal government, they have to respect the same rules.

So if they ban someone and that person is unable to respond anyone else's twitter, that is fine. But the moment they ban someone from responding to the President's twitter, they have violated that person's right in the same way the President did.

I think the simplest way to think about this is to consider a simpler example. Say that a government entity is holding a town hall for public comment on some issue, but expecting a large crowd, they have to use a private venue to host it as all government venues are too small. They pick Richy Rich's Stereotypical Rich Person Club. On the day of the town hall, the club decides as a private club they want to ban some people from being on their property, thus denying them access to the town hall.

What if they choose to block everyone on the opposing side of the issue?

What if they block anyone who doesn't show up in a custom made suit?

What if they decide to block all non-members for that day?

What if they decide to block any minority?

Despite it being a private company, by doing business with the government in allowing them to use the venue to host the town hall, enforcing the rules that normally a private club is legally allowed to enforce can still violate's a person's Constitutional rights.
No, but this ruling applies to Trump's personal account ('@realdonaldtrump') not the official Federal account (@Potus).

You can read an analysis about why this conflicts with twitter's TOS here:
https://pjmedia.com/vodkapundit/appeals-court-rules-trump-ca...
Learn Go with Tests: Roman Numerals
I USE CAPS LOCK ALL THE TIME. DON'T YOU DARE TAKE IT AWAY FROM ME!

Seriously, I use it a lot when programming. I like to write my inline SQL in CAPS because it's easier to read. I also write contants in UPPER_CASE. There are plenty of times where you need to type a sequence of capital letters.

Also, if you program in C or C++ you'll probably use MACROS at some point and it would be a pain to not have it available.
I had a WiFi router that by default was set to filter out DNS responses with RFC1918 addresses. A surprising amount of stuff was broken until I figured that out.
You could easily have that experience in our untouched forests as well. It's not bird- or animal dense.
Clicking the link to the article takes me to https://guce.advertising.com/collectIdentifiers?sessionId=3_...

This is blocked at my DNS level. Why is engadget.com forwarding to this address?

I just unblocked guce.advertising.com and it forwarded to engadget, so this must be some sort of tracking system.
12 years old Nigerian creates a laundry folding robot
They probably won't.

Atheists are the most oppressed 'religious' group there is but no one will recognize it.

It's common they are left out of so-called "progressive" movements to support peace / safety.
I resisted the urge to vote you down simply because their response you quoted pissed me off so much. I'm going to remind my CTO of this when our contract expires and it's time to evaluate alternatives.

Signed,
Unamused CISO
Check out forgotten weapons. It has all sorts of history of the development of certain firearms and inspects them as artifacts and engineering marvels.
dunno if megabus is still doing it but you used to be able to get a bus from Philly to NYC for $1 (with wifi)
>Of course this means part of what you teach then is when to talk to the git expert on the team but as long as beginners stay away from squash, rebase etc they should be fine.

The thing is, if you ask 10 git experts what should be taught to a beginner, you'll get 10 different A4 size pages. As an example, when my team (finally) switched to git, the expert on the team made a tutorial on what commands to use, and what to avoid/ignore. Looking at it now, he taught that rebase is almost mandatory and gives problems you're guaranteed to run into if you don't use rebase.

Not saying I agree with him, but that is one problem with git - no clear consensus on beginner friendly features.
I like your point about the FCC and the EPA. Yeah, no one likes loss of control (in theory), but the thought of no control for something like spectrum/frequency usage is just as scary as the thought of no control for environmental impacts / protections.
Avast MITM's every website you connect to (2015)
It has made money in 24 out of the past 25 years — a period that includes the dotcom bust and the global financial crisis of 2008-09 — earning hundreds of millions of dollars for McKinsey partners and alumni, according to an investor in Compass. Over the same period, the average fund of hedge funds has lost money in five years, according to data provider Hedge Fund Research.

"Think about it...McKinsey is the foremost management consultancy with better links/knowledge and influence over the World's leading companies. Its partners are very smart. Yet they can operate and compete in the highly competitive world of investment - not a management consultancy's core area of expertise - better than large, established professional money managers - without the competitive advantages coming from their insight as management consultants! Really! If that were true, they would spin off MIO and run it 'for profit' becoming one of the leading global money managers. Or does an opaque structure work better for them?"

- https://www.ft.com/content/7c6700bc-2976-11e6-8b18-91555f2f4...
South African teens fly from Cape to Cairo in plane they assembled from kit
Maybe you crossed into having webrender enabled for your system?
Do people really enjoy twitter? I mean literally 99% of the time, it looks like it's just people trying to be clever. I get it that it can be a meme generator, but every time I've used it, like any popular site, it is just majority trash. Maybe I haven't tailored my twitter experience, but I can't stand the site after more than a few hours and I'll just stop using it.
The government official, by choosing to use twitter, has chosen a platform that has people excluded. Perhaps the technical flaw is on the politician for choosing a platform that has already excluded people, but the end result is that from the private public partnership people are being excluded.
Realtime refers to installations, not necessarily the threat of the extension. If a user installs an extension, you should know if the extension is a threat as soon as possible whether or not it has exposed data.

Scoring is a complex problem and there's some literature on the subject. We can break down scoring / threat intelligence into a few buckets:

- Known bad actors: some extensions are known bad actors. They've exposed data and even made the news for it. Let's make sure those are absolutely not running in your environment.

- Heuristic classification: a number of heuristics can be used to score the threat of an extension, for example, the permissions it requests, its content security policy, etc...

- Automated code review: even if an extension developer is not themselves intentionally malicious, the extension may be using outdated or vulnerable libraries that can be exploited by others.

- Manual review: there are over 200k extensions so an extensive manual review of each is not practical. Still, for the most popular extensions, a manual review can effectively score the extension based on factors that are difficult to automate. For example, review of the privacy policy, investigation of the owner entity and its business practices, etc...

- Corroboration / triangulation: a category of threat detection that Extension Monitor will be able to provide at scale is that of cross-referencing installations with purchased data to single out likely sources.

These may also apply to a single extension across versions / time.

Regarding counter-measures, Extension Monitor is read-only at this time, so remedying the threat is environment specific. Some fleet management solutions may provide this. Other self-managed machines would require the machines administrator to remove the extension. Some teams that already allowlist or blocklist extensions would find the threat scores useful in their own manual investigations of which extensions to allow or block.

Hope this helps,

Will (still a real human... and not a Matt)
but this is just as much about growing timber. 30 years, the trees will be cut down. that's if some bug doesn't eat up the monoculture first.

my bet is that a rich diverse ecosystem will suck up far more carbon in long run.
It means precisely what it sounds like -- using language which describes the targeted group as something other than (and lesser than) human. The article gives examples where religious groups are described as "rats", "viruses", "filthy animals", or "maggots".
Other languages have large ecosystems of packages that allow users to do common tasks quickly. I can imagine not having something similar would be a sticking point to adoption; how does Dark picture the Dark ecosystem working and competing with other already well-entrenched ecosystems? Thanks!
F8 is right next to F9, which is super important for loading autosaves in Bethesda Softworks' games, so thats a big affirmative over here.
Ok, but if you store only metadata then you lose the advantage of running all the file operations inside a transaction. Then again, posix has no notion of transactions ...
Define "de-humanizing". If you look at how previous twitter anti-dehumanizing policies were enforced, this was used to
ban NPC memes -- which were not memes against a person but against ideas. It was used to ban people who said things like "men can't get pregnant" -- which is an idea/belief.
>IMO it's both counterproductive and futile to keep national markets separated.

One thing that many comments here aren't mentioning is that some regions have differing requirements to be able to sell in that zone. A common issue is the rating (MA, PG, R, etc). Once, when about to release in Germany (mid 90's) we had to change red blood to green in order to not get rated as R.

So it's not as though the developers can publish without strict regional forethought, so they may as well use a pricing model that satisfies the cost of living.