skysight-inc/HackerNews huggingface dataset:
UK regulator proposes ban on crypto-based derivatives
Paper Books Can’t Be Shut Off from Afar
I think Mercurial deserved to win the mindshare war. It had an easier to use command-line, but I liked how branches were handled.

Like many teams, we'd start a branch with an issue number and you'd write code to it. Eventually you'd merge it to your main branch for the product.

You of course can do the same in Git. However, let's say you just find a given line of code and you can't think how it came to be there. You 'blame' the file and find the commit hash.

In Mercurial, you'd just look up the commit hash and find the branch. In git... well, you've got a few options - https://stackoverflow.com/questions/2706797/finding-what-bra...

Git won the war for some reason and it might just be because the services surrounding it were superior (i.e. Github vs Bitbucket). I don't believe it's because of it being a superior technology or user experience however.

Of course, you can still use Mercurial today but you'll feel like a second-class citizen if you do.
Ask HN: Does anyone still use flash or is it truly dead?
Are there any holdout communities that still use flash for some purpose?
Svelte(?) > Vue > React > Angular.
None of the things you mention require 4G. Heck, we were doing social media and messaging before 3G even existed...
C++ had a captive market.

It was bundled by C compiler vendors early on during the 90's, and it was on the rise as all desktop vendors were jumping into it as the way to write GUIs on.

Mac OS, BeOS, OS/2, Windows, they were all moving into it.

Had it not been for the rise of C based FOSS and the respective free UNIX clones, and it would have spread even more.
> running all non-I/O dependencies in an entirely separate process from the main program.

Maybe that's not such a bad idea. This "strong_password" thing is written in Ruby, a few milliseconds delay is probably not noticeable anyway and vastly preferable given the security implications.
Once they're old enough, find hobbies or projects that can include your children.

Bear in mind these hobbies/projects may not be in your area of interest--in fact, your children will probably guide what you focus on (just don't force them to be interested in what you're interested in). Regardless of the subject, you can make it interesting to yourself.

Once they're grown, you'll have plenty of time to pursue your own interests, and if you're lucky one of your children just might follow in your footsteps.

Mostly your children will grow to love the time you spent with them and you'll be grateful for it when you look back. They'll be happy memories.
So no sources, just a downvote. As expected.
Not OP, but you are missing this points:

1 the expensive(this is relative) card works fine, do I throw it or donate it without any good reason(switching to wayland could wait IMO until this card is too obsolete)

2 Buying a new GPU is a big investment for some people,those money could be used to replace an old low quality display or other stuff.
According to your article it was due to a lack of licenses, similar to the fact that there are no community run cell networks (like WiFi networks) due to a lack of licenses.
Blub paradox. If you habitually confine yourself to a single computer, remoting never becomes a tool you reach for. NeXT had remoting because it was meant for power users in labs full of closely networked workstations.
> This effect is so reliable that if you meet someone who isn't extremist about anything it's safe to say that they don't think for themselves, rationally or not.

This seems rather self indulgent when you've set the criteria so vaguely.

Perhaps an example of an extemist view would be beneficial.
So the theory is that chinese vendors put existing exploits into their firmware deliberately? That seems rather hard to believe. Would it not be much simpler to create a few new holes?
>> As every freshman course in “critical thinking” reminds us, the dull, unhappy burden of the rational mind is to follow the evidence where it leads, not the bandwagon.
>If you do that you frequently end up with a position that is "extremist" to someone or another.

Especially in the USA with its huge number of religious followers, in Europe (depends on which part) maybe not so much?

That said when talking about society, critical thinking is easy, coming up with credible proposals is hard.
There is nothing you can do about it. You have no meaningful impact on any government policies. Why waste time writing about this stuff if legislative representatives do not care about your writings? Genuinely curious why people waste time complaining about things they have zero control over.
> that lack is a result of designing for security

That still doesn't mean that I don't need screen recorder and screenshot functionality. Everybody wants both security and features.

And it's more that "can't be done" with Wayland, in spite of the needs existing and not going away.
Firstly, I had to have this website believe I was using it from the US before it would let me read the article. Secondly, it's for exactly these reasons that I find it awful and indefensible that I should be required to have a driver's license. Thirdly, this is why I have a single photograph and will be reusing it for as long as I can.

>Though Utah, Vermont and Washington allow undocumented immigrants to obtain full driver’s licenses or more-limited permits known as driving privilege cards, ICE agents have run facial-recognition searches on those DMV databases.

This doesn't seem like an issue, considering those wouldn't be US citizens. It's bad when it happens to US citizens. Only an idiot would enter a country illegally and then register with some of its systems, such as this.

It's important to remember that one reason a country may allow lawlessness, violence, or unchecked immigration is to then demand stricter laws and security measures to the problem it created.

Now, to respond to your comment:

>As a side note, that's one of the things that I'm excited about with the use of genetic data from ancestry type sites: they're catching white male offenders who weren't in the existing (racist) databases.

You complain about ''racial bias'', yet then write that. Would it be biased to start pointing out crime statistics and how only a few white people have been caught by such a system? Tell me how you think this reads:

As a side note, that's one of the things that I'm excited about with the use of security camera data from businesses: they're catching black male offenders who could blend into the crowd.

Do you like that?
Notably not in this article: any Huawei backdoors.

"Backdoor" implies malice. What this article is about is "vulnerabilities," also known as "bugs." The moral panic continues unabated.
You're probably right, I didn't really go deep in with the macros, mostly just injecting code with 'quote' to remove occasional boilerplate. The point was more about the ability to easily manipulate the code within the code to create DSLs (like Ecto for SQL) in a "lispy" way, which Elixir is notably good at. In that sense we can add D, Rust and Nim as well, all somewhat recent languages that also provide that feature.
Yes mathematically composability is part of it. That's because math functions return the same type. Its easy to express the 'state' of a function as the value of the operation.

There's a wider idea of idempotency in computing - that state changes in general respond to operations. Repeating the same function more than once (because the network stuttered or the sender resent the message) and arriving at the same state is a common example.
> But a key thing we're pushing, that's never been pushed before, is that the parens are worse than useless--they are harmful! They prevent easier program concatenation and ad hoc parser writing. And they make program synthesis, visual programming, and code analysis ~10x harder, for next to no gain.

Almost everything you've said above is not just untrue, but the opposite of the truth. As such, your statements require supporting evidence. Please cite some.

And who, by the way, is "we"?
I watched the explanation of the chart and it is still ambiguous both what it is, and its purpose. That narrator explains: "Rejected energy is the portion of energy that goes into a process and comes out generally as waste heat" - waste heat is not just as you wrote: "part" of it, it is explained to be "generally" (all of) it. Really neither of us should need to clarify the difference between "part of" and "generally all"

So then "rejected energy/waste heat" can not be used or as we are saying here -"accepted" by better battery storage, which was the opinion that you brought this ambiguous chart and presentation to explain. This chart is irrelevant to battery storage.

Also, most of the energy in the chart is thermo-electric derived from fossil fuel and nuclear plant. Wind turbines and solar "reject" heat energy in completely different manner and lesser degree than thermo-electric plants - it is truly nonsensical to mix the two together under the vague heading of "rejected". It makes so little sense, I do wonder about the credentials or motivation of this LLNL to educate on energy issues.
> A lot of very basic features (remote desktop, screen sharing, exclusive fullscreen, keyboard/mouse shortcuts) are still in their infancy.

- remote desktop: good point. Considering that screen recordings work fine, I don't see a technical reason that a Wayland remote desktop setup couldn't work.

- exclusive fullscreen: what do you mean by this? Using Firefox, F11 and Super-F both work in Sway and F11 works with GNOME.

- keyboard/mouse shortcuts: maybe? The fact that a random process can no longer read all of your keystrokes seems like a plus, to me. Otherwise, just add a shortcut to your window manager or DE and run a command of your choice.

- losing all apps on compositor restart: Only an issue with GNOME and KDE. Pressing Super-Shift-C on Sway reloads the compositor and not your apps.
I mean "GNU/Linux" is supposed to mean "GNU with Linux" i.e. GNU userspace with Linux kernel. GNU/GNU makes some sense but clearly is redundant. It's just GNU as in GNU userspace and kernel.
Multi monitor display worked perfectly for long time, long before "it works on intel, let's call it new standard" crew decided that flat shared framebuffer is the only way to go (apparently because of compositors and nothing else), something that also broke support for multi-gpu and especially heterogenous multi-gpu.
The obvious question now is what it tracks. Presumably if you pick up a sandwich and then put it down somewhere else in the store you shouldn't be charged for it. What happens if you walk in, pick up a sandwich, eat the sandwich, and leave?
Is a complete rewrite needed? Can't you break and fix the parts that make application isolation impossible but keep everything else?
Nowadays using something like elasticsearch is common for this and then you don't have to reparse it. It's already indexed and you can search for what you want.

If you're going back to the raw text files, then you're right. But I'm not sure why anyone would do that these days.
Running some kind of automated analysis on the firmware and reporting vulnerabilities is a long way away from ”Huawei’s hidden back doors found”.
We can’t hide the fact that climate has changed naturally in the past. We just have to point out the important differences, like speed (as you say) and the fact that advanced civilization with seven billion humans wasn’t around for previous changes.
NT was never a microkernel.
The launch date is in September.
> The number and extremity of alignment with catastrophic far-right ideology, while relatively small, is significantly larger than the same metrics for similarly catastrophic far-left ideologies in the US

What makes you think that?

> one is much more rampant or destructive than the other

You’re right about that. Communists killed far more people than Nazis ever did, destructive as the latter were.
XWayland isn't a normal Wayland client - it requires special assistance from the compositor. In particular, the compositor acts as the X window manager and there's a special interface between it and XWayland on the Wayland side to make everything work.

I don't think it's possible to even implement something like XWayland as an ordinary Wayland client. By design, ordinary Wayland windows are not permitted to know or control their on-screen position, and X relies heavily on apps being able to do both. This is also a major reason why Wine will never support Wayland in the same way that it does X.

Basically, if your preferred compositor ever gets fed up of maintaining support for running X applications, the only way you'll be able to run apps that haven't been ported to Wayland is in an emulated desktop confined to its own window. Expect this to happen sooner rather than later given the current attitudes to backwards compatibility. (Think about Ubuntu dropping support for 32-bit applications, for example.) On the positive side, at least Windows 10 doesn't suffer from the same limitation...
Because X's developers gave up on it: https://www.phoronix.com/scan.php?page=article&item=x_waylan...
What do you mean by 'existing exploits'? It seems like they are accusing them of writing insecure code on purpose, which is exactly how i'd go about inserting a backdoor if I were going to do it.
Anne Frank's Family Tried Repeatedly to Immigrate to the U.S.
Good analysis, but I'm not sure about "a large number of downloads". Download counts can be pretty inflated due to CI/deployment processes that reinstall gems from scratch repeatedly. I've seen open-sourced gems that never got any real usage outside their original company get that number of downloads.

To add a bit of a sense of scale here, the popular Devise gem that's used for authentication in many Rails apps has 52.7 million total downloads and almost 20k stars on GitHub. strong_password has 247k total downloads and 191 stars. It has three reverse dependencies, none of which I've ever heard of and none of which have any of their own reverse dependencies.

This suggests to me that this gem is used by less than 1% of Ruby web apps (probably substantially less) and, more importantly, if you have a dependency on this gem you probably know (because it'd be a direct dependency in your Gemfile, not a dependency of a dependency).
If you disable can the bixby button be remapped (without any of those apps that require crazy deep permissions)?
Ah yes, a network device vendor with serious vulnerabilities, that's new...
> This is a gem that checks the strength of a user-submitted password

Does it, though?

https://github.com/bdmac/strong_password/blob/master/lib/str...
Ah, well, your original comment was a little unclear there, so apologies for the confusion.

Unfortunately most of the characters won’t map onto any Latin letter. Typical English Braille only uses the top 6 dots - but as a display character, this program uses all 8 dots. I’m not even sure which Braille dialects use all eight dots. As another commenter hinted at, it’s a bit strange to ask what the semantic meaning of graphical display characters are - a bit like reading out the characters in a binary file which happen to correspond to ASCII values. (Like, what might happen if you open a binary file in a text editor).
Well, not intentional (except for that camera company), but should we be using Huawei when that expert described it as "some of the worst [most exploitable] equipment I have ever worked with."?

We might as well make sure that it's relatively secure regardless of politics.
While that might be true, you are not going to switch the world to program in Haskell.

We need a solution which also works for most used languages, JS/C++/Java/Python..., which suggests that it should be done at a higher level, maybe with OS involvement somehow.
While that's true, the correct way of creating deniable backdoors is to simply write insecure code. The best way to detect something like that is essentially what this article tries to do: a comparative analysis of vulnerability frequency. It doesn't do a great analysis, but it is the correct approach to thinking about the problem.
...or just click the "reading mode" button in your browser.
It's also significant portion of "people who pay for Linux developer salaries" in the form of few workstation users that use Linux-based software that is often paired with Quadros.
Option 2 is overwhelmingly likely, IMO. Phishing, password reuse, credential scraping/spamming, and plain old brute force are unbelievably common.

That said, the other two options bear investigation too. Just don't spend time looking for a cold breeze from an un-caulked window frame when the screen door is open.
That is true it saves time
I'll resubmit since the tree my comment was in is dead.

Firstly, I had to have this website believe I was using it from the US before it would let me read the article. Secondly, it's for exactly these reasons that I find it awful and indefensible that I should be required to have a driver's license. Thirdly, this is why I have a single photograph and will be reusing it for as long as I can.

>Though Utah, Vermont and Washington allow undocumented immigrants to obtain full driver’s licenses or more-limited permits known as driving privilege cards, ICE agents have run facial-recognition searches on those DMV databases.

This doesn't seem like an issue, considering those wouldn't be US citizens. It's bad when it happens to US citizens. Only an idiot would enter a country illegally and then register with some of its systems, such as this.

It's important to remember that one reason a country may allow lawlessness, violence, or unchecked immigration is to then demand stricter laws and security measures to the problem it created.
The 4-7-8 Breath Work Technique: The Quickest Way to Be Free of Anxiety
You do have a point.

If I was an assigned Chinese official supervising Huawei (like every Chinese business with 50+ employees), would I say, "go write one backdoor?" Nope, I would say, "be sloppy and maybe a few will go undetected."
Intel and AMD maintain open source drivers that have supported this for ages. It's only NVIDIA that still tries to shovel outdated proprietary drivers without support for community developed standards down our throats.

Adding that their proprietary drivers are not particularly good, NVIDIA is not a very popular choice for a Linux machine.

Just remember that it took them almost a decade to add KMS support.
> But I also have concerns about the maturity of a language who has jumped to V2 in what seems like a relatively small amount of time.

Where can I download Go v2? Latest is tagged 1.13beta1

Go authors stated multiple times that there are no plans for a Go 2 at the moment. They rather improve the language in small increments breaking as least as possible.
Not sure if Spain is the best example since AC is already very popular there and growing in popularity: http://www.ine.es/jaxi/Datos.htm?path=/t25/p500/2008/p01/l0/...
That's a good point. So Tor Project's approach, starting from the latest release, is overall better.

I still miss some old extensions, though. Especially RefControl, which let me supply a site's root as referer to it. Smart Referer just drops referer, with some whitelist exceptions where sites break. RefControl never broke sites.
There is a lot of evidence in the GitHub. See JTree library and the ohayo data vis tool.

There is also a big open source release coming soon—the largest database of programming languages and features in the world by a factor of at least 10x, more like 100x. Over 10k languages, over 1k columns.

We is the Tree Notation Lab. Will be announcing what that is and the funding for it later this month.
That’s conspiracy theory logic. The fact that it doesn’t look like a backdoor is evidence that it’s a backdoor? It is impossible to disprove something like that.
This article quickly turned into a puff piece for ReFirm
This is how they describe their security system:
https://finitestate.io/product/

Would love more details on how it works
> Mine as well - in peak hours you're lucky to get close to 1MB/s in two bigger cities I've lived in. Also latency spikes even when the bandwidth is OK.

It's the same in my country.

> Don't know how much 5G will help with all of this but 4G is not a good option as a primary internet connection if you work online and any upgrades would be very welcome.

The thing is, very few people work from home, and even those who do rarely require more than 1 MB/s for the most common office tasks.

It's true, though, that 4G connection is not the best option for 8-5 software engineering. But it still makes it possible to work from anywhere in the countryside during the entire summer.
> The United States, however, has made zero mid-band spectrum available at auction for the 5G economy.

This is simply not true. Being an employee of Dish at the time, I happen to know that Dish spent over a billion dollars buying spectrum in the 600 Mhz (low-mid) range in 2018 and they were told they must monetize the spectrum by 2020 if they wish to keep it. Dish has a strong hold on rural America and is definitely keeping them in mind when it comes to 5G.
So, I can totally believe that the Chinese government instructed their tech companies to put back doors in their equipment (not least because the U.S. government almost certainly ordered U.S. tech companies to put back doors in software sold into China). But, it is a little odd that the article headline is about Huawei, but the re-appearing backdoor that "just screams malicious"...was not in a Huawei device. Maybe both "Huawei is really bad at security" and "Security camera company you've never heard of installed backdoor in their device's software" are not very clickable headlines?

Again, I totally could believe that Huawei, or any other Chinese tech company, would do this if told to by the Chinese government (again, because U.S. companies almost certainly do it when told to by the U.S. government). But, that's not even what the article (as opposed to the headline) is alleging.
Has anyone said Visual Basic 6 yet? It was a pretty nice language and the ui design tools were really nice and intuitive.
Also it's laughable that they imply vulnerabilities are less common in "American" made software.
Not sure what you expect a Huawei backdrop would look like? “PRC Agents click here”?

Any decent backdoor is going to look exactly like sloppy code that someone “forgot” to fix.
Indeed, replacing this with the list of top 100 passwords would be much more effective.
Perhaps. But at the same time, if I was a Chinese gov't official tasked with getting a backdoor past America's radar, what would be my strategies?

Writing sloppy code with the hope that a few bugs will be undetected seems like a decent strategy to me.
Then there is no need to say OpenPGP is broken.

Once you hand off the validation to a 3rd party that does nothing to validate other than a voting system of other people then you are done. You basically put your PGP keys on reddit and decided the key is valid because it made it to the front page.

PGP may be many things, but it is not broken, and saying so is blaming the tool for a obviously bad use of it.
What of this:

Dahua at first ignored ReFirm’s inquiries, then claimed the vulnerability was a simple error that had been fixed in the latest update. But when ReFirm looked through the updated firmware, they still found the same backdoor — just relocated in a different place in the code. (Huawei had done the same thing).
I think they tried in the past but their tests showed that it would be less profitable and uncovering that they make more than 10usd/month on "free" users would convince lot of users to leave.
It wasn’t just Wayland that used GBM, plus every other vendor supports it but Nvidia and it’s well documented in Mesa.

But I personally don’t care as long as Intel and AMD are available, it’s fine. I see Linux like MacOS, it’s an operating system targeted at a limited set of hardware. As long as you buy within this group 90%+ of the problems with Desktop Linux will go away.