skysight-inc/HackerNews huggingface dataset:
All of these cyberpunk futures people have in the comments about writing code via their brain interface is fun speculation. I know a young boy who is almost totally paralyzed head to foot. If in 5years this gives him significantly greater mobility and ability to communicate it will be a true blessing.
I don't see it this way at all. Browser vendors have been very reluctant to accept that they're now supposed to provide a real application development platform.

It's businesses that demand web applications, because native deployment (in-house or for customers) is a tougher sell. A lot of it has to do with the bad security model of desktop operating systems combined with the overhead of administration.

Last but not least, web developers are the biggest pool to hire from. It all adds up to where the benefits outweigh the (significant!) drawbacks.
Waste isn't that bad if you dispose of the chemicals. ie don't dump them in the drain. Plus most of the material isn't wasted, my dad still has all his developed films from the 80s and 90s. Load them in a scanner and you get images which are about as good as the one you'd get from a modern dslr.

Lomography is also thriving in the film market: https://shop.lomography.com/en
This was particularly cool when Eric Fischer first put these up on Flickr because smartphones were fairly new and it was such a great example of teasing interesting data/visualization from data that people were recording essentially incidentally.

Google Flu Trends was also a hot topic around the same time although that turned out to be a lot less effective than it initially appeared.
If some code does not work as expected, the compiler is broken.

Sacrificing correctness for speed is an unfortunate trend. I have written lots of compilers in my life, both toys and "real-world" ones, and I can say with certainty that more than 90% of the bugs appear in the optimizer. Without formal verification or at least very exhaustive testing, optimizations should not be included in compilers. Of course, this is very hard to accomplish in low-level languages.
gamedev comes to mind, where performance isn't only about raw power but also avoiding garbage-collecting hiccups which are unavoidable in JS
How would you mitigate that if you were running it on-premise?
> Until OS vendors are willing to provide a safe sandbox to run untrusted code in

Thing is, "safe" OS-sandboxes are not safe; "local" privilege escalation vulnerabilities are still pervasive. Until OS's are safe enough that I can run `sudo -u nobody untrusted_binary` and not even think about the possibility of it taking over my system, something like the WASM sandbox (perhaps extended with WASI and other optional mechanisms) will always be needed.
Well TC is much older than Bitcoin, so you'd think newer stuff by the same author would be better. But it's hard to say anything for certain. The projects are so different in form and function. TC targets Windows, Bitcoin targets Linux. (Yeah, they're cross platform, but if you look at them you'll see what I mean) The cryptography code included in both is public domain/third party so that doesn't help. Bitcoin has networking, TC doesn't. TC is a driver primarily, while Bitcoin is not. They don't use the same GUI toolkit. So a lot of it is really hard to compare because the style of the code is following the common idioms for the framework being targeted. Where the author is more free of convention, they don't feel similar to me.

I should write up a detailed post about this topic.
Why and where are you paying for your bank? Serious question I haven't seen any that do such a thing barring "low balance surcharges". Are there any benefits over one which pays you interest for your deposit?
So if I understand you correctly (Noob here), Alice would need to sign the pair (key.enc, file.enc) to authenticate that those files originated from her.

Without that, Bob could potentially receive any pair of (key,file), which would just decrypt into garbage data.

BTW, variations on that sequence appear all over the internet when searching for "openssl encrypt file with public key"...
Interesting. Is this data available for download?
> an offline compiler like Clang can spend considerably more time to generate better code, whereas WebAssembly compilers must be fast enough to run online

This echoes the arguments for / against java. The compiler in this context mustn’t be “fast enough to be online” - it must be fast enough to keep up and able to smart enough to know what’s important. It also benefits from watching the actual program execution. Presuming you can “warm up” the application, it might just do fine.

I vaguely think that a lot of people are considering the compilation as a one time deal. It could be a phased thing. Java’s a great example of that.
I doubt it would work. How is dealing with slippery wet angry prisoners an advantage over dry angry ones?
There is no free lunch in this universe. For big applications like CAD there will be nothing "instant" for in case of deployment as web apps. Downloading native packed archive and running install may actually be faster.
People might start baking chips that can natively run web assembly at some point. If that happens we have found a very expensive path from running native binaries to running native binaries for the purpose of making this independent of the platform.
Ask HN: Good internet resources to get knowledge on fintech (card payments)?
Hi,

I am wondering if any of you can recommend good www resources (pages/blogs/books?) that could give me a good overview of fintech topics - in particular card payments (e.g. types of cards, issuing vs acquiring bank, processor, MA tokenization (MDES service)). Thanks for any suggestions!
Rerouted: Impacts of China’s Recent BGP Hijacking Attack
But it's the other way around. Can you distribute a native application on macOS without Apple's blessing? No, you can't (not when Catalina will be out anyway).

Yes you can:

https://forums.macrumors.com/threads/unsigned-apps-catalyst-...

WASM is the next best thing to an open, yet secure, platform.

So, instead of walled gardens with signed and checked applications (bad). We have to run untrusted and unchecked code of vendors who run code to track your movements around the web and in their applications? (Even worse)

Desktop Linux aside

Maybe we should make Linux an acceptable platform for more people rather than optimizing for proprietary web applications that you don't even own a copy of anymore.
> The slowness is not from the wasm runtime (which has been implemented standalone and is fast), but in the browser-y gui stuff

Not entirely true: In representative benchmarks, WASM has only 65% of the performance of native code. Of course, everything gets much worse the moment you interact with browser mechanics—WASM is only this fast while doing raw computations.

https://www.usenix.org/conference/atc19/presentation/jangda
Oh totally. Though in this case the source of the rumour gives me pause for thought. But the ice cream is amazingly cheap and good so that's all I care about :-D
oarsinsync got it right. I just avoid anything Boeing (which means Airbus most of the time).
I work on the dev team who do the equivalent for The Telegraph in the UK - each interactive longform will usually cost £3-£4k in dev time.
My gf and I started a project to spend a day in each borough of London, a couple of years ago. Originally we were aiming to complete it in one or two years, but life got in the way; it's paused at 16 out of 33 right now. I'm a born and bred Londoner in my mid-40s, and in the course of this (despite only being halfway through) have been to so many places I'd never visited - we research interesting cultural, historical, and alcohol-vending places to visit beforehand and it's ludicrous amounts of fun.
I can't help but think that you can only do a very shallow treatment of everything in this list in a CS program. It seems like the author basically put down his own CS program as a requirements list. The style the author uses reinforces this thought, since the sections are very shallow and very closely match what I would expect from someone who did an introductory course on every subject in the list. And I'll be damned if the 11(!) programming languages "every CS major should know" aren't exactly the programming languages that the author happens to know. It would be a surprising achievement to even know just C and C++.

This post may be influenced a little by the irritation that after seven years of study and two years of work experience (and many time spent on this stuff as a hobby in my free time), I still don't match nearly 50% of the 'requirements' in this list. But hey, these lists should be taken with a lot of salt. It's pretty fun to make one and reflect on all the things you've learned. In my list, there would be more numerical analysis and less languages.
> You don't mind drivers being half as performant as they were before, with the only benefit being they're easier to distribute?

A different way of phrasing this would be "would you prefer a driver that uses 2% of your cpu vs no driver at all? Note that if the hypothetical non-existent driver was written in c, it would only take 1% of your cpu"

> Why?

Because the alternative for many alternative OSes is no driver at all.

> How is that beneficial to anyone except the person packaging the driver?

Because if it's more convenient for the packager, then there's a better chance that they'll package a driver that way, which means I'm more likely to actually get the driver in the first place.
Visa applications: emotional tax and privileged passports
I strongly agree with this; email is not instant messaging, and there is not yet any secure replacement for email.

We need a modern design for a successor protocol to email, and no one is working on it because they prefer instant messaging (or think other people do).
Unless I'm missing something, both of these cases (and the case of the Australian judge a sibling commenter pointed to) has nothing to do with "failing to identify the driver" but all to do with straight up lying to the courts, i.e. perjury. The fact that they were speeding seems incidental.
Girls’ advantage in reading can largely explain the gender gap in STEM
>The gamma rays are also basically radio waves, if we would be using your logic you would say that gamma rays should be considered safe because we know 2G is safe?

parent never said anything of the sort.

Are you confusing the entire electromagnetic spectrum with radiowaves? [0]

No one in this thread has yet made the assertion that all energy is the same, merely that everything within the radio spectrum has similar effects towards humans.

Parent to your comment even drove a comparison between microwave and radio, commenting on the affect of microwave towards people.

>Bottomline is, higher 5G frequencies might be safe or not, and there are different legitimate scientific ways of showing that. But saying that it is safe just because "it's basically radio, like 2G" - is really not one of them.

That's your bottom line, but you also seem to be under the understanding that this energy that hits our skin is at all times absorbed, which isn't the case in physical reality. It's mostly reflected -- the fact that the human body stops it means little with regards to it's effect on said body, or any such accumulation of effect.

As for the rat study -- I am personally going to wait for independent replicatability in human models, or something more similar to humans, before I turn to FUD.

Hell, it'd be nice to even see replicatability of the same experiment across other labs..

[0]: http://www.columbia.edu/~vjd1/electromag_spectrum.gif
The point is obviously that web apps can be directly competitive with binaries, sans the same level of security, given they operate a lite version of the application. This makes it theoretically possible to run everything via cloud, if you didn't already see that coming.
Yeah, right. Compilers do not deal with the difference in presence / absence and different implementations of various features on different platforms, be it native OS or Browser OS.
Working with enterprises that actually have individual SLA's with one of the clouds you mentioned, this is not true. You can handle out your own SLA's with certain providers, and not just get "credits." These enterprises have mature enough monitoring solutions to be able to prove to the provider that they didn't hold up on their end.
Besides that, every half-way capable solution architect wouldn't move "system critical" software to the cloud, hence reducing "lost profits" or "direct damage". If you're doing that, it's seriously your own fault.
Apple, Google continue inclusive push with new emojis
Hang on - how are you paying for all these services? The money will almost certainly 'touch' a legacy banking mainframe at some point.
Signal PKI doesn't really work for me, conceptually. I mean, Signal is great work, but the approach to key management and federation seems like it undermines the regular security of the approach.

The problem is the key servers are run by the same people who control the app. This helps if the key server specifically gets compromised and the target is verifying, but for many attacks people worry about it's actually not the key servers specifically that get popped, it's an employee laptop or the employee themselves via subpoena, policy change etc. And for those cases nothing stops the app itself being changed to show you a false safety number, possibly by Apple without the app vendor even knowing.

So we end up with a rather curious and fragile threat model that only really helps in the case of a classical buffer overflow or logic error that grants an adversary the ability to edit keys and not much else. It's very far from "you don't have to trust the providers of Signal" which is what people tend to think the threat model is.

And honestly, a technique that combats very specific kinds of infrastructure compromise are too low level IMO to bother advertising to users. The big tech firms have all sorts of interesting security techniques in place to block very specific kinds of attacks on servers but they generally don't advertise them as primary features. If you have to trust the service provider, and with both Signal and WhatsApp you do, then are you really getting much more than with bog standard TLS? After all forward secrecy achieves nothing if the router provider is diligently deleting messages after forwarding them to the receiving device - the feature only has value if you assume the provider is recording all messages to disk and lying about it, in the hope of one day being able to break the encryption of ... their own app. Hmmm.
FWIW: in my 8-bit emulators I'm closer to the 10% performance difference for code compiled in clang with -O3 (the native version uses latest Xcode's clang, the WASM the latest LLVM WASM backend via emscripten):

https://floooh.github.io/tiny8bit/cpc-ui.html

The time in the top-right is the time spent per frame in the emulator, in the WASM version that's somewhere around 2.5 to 2.8ms on my laptop.

The native version is somewhere between 2.0 and 2.2ms.

From my experiments, it's quite easy to accidentally hit a "slow path" on the WASM side, for instance registers are spilling earlier (AFAIK because WASM has one or two registers set aside). Things are getting better though. About a year ago, the same emulator code seemed to have triggered some specific slow-path and the WASM version was nearly 4x slower.

Of course it's always possible to put more time into optimizing the native version of a piece of code when targeting a specific compiler version, compiler-specific intrinsics and a specific CPU model. This is where WASM will always lag behind, with a portable ISA you'll always hit a wall where further optimization simply isn't possible.

So from my experience: somewhere between 10% slower and 3x slower is all within the "expected" range, the more important part is that performance is predictable for a given piece of code compiled with a given compiler version (e.g. you won't have the GC come in and do its thing for a few hundred milliseconds). And at least the emscripten team is very responsive and interested in such pathological cases.
Totally off-topic, but this reminds me of a story from a psychiatric nurse I know. They apparently once had to deal with someone who decided to strip down, then cover themselves head to toe with some form of body oil they'd managed to get hold of. Hilarity ensued.
I bet the bleeding hearts will be like: “you’re exploiting the sex robot!!!” so we will have sex robots sell masturbation toys

It’s gonna be a long singularity
it's just your opinion
Node.js scraper of all Binance (crypto) historical data
The the browser sandbox is just another sandbox, as we have seen with targeted attacks on Firefox two weeks back.

Why is everybody so insistent on running untrusted code?
Union Fever at Tech's Biggest Firms Is Weak
I take it it's not common courtesy??
Thanks for the helpful background. I think what I said still stands though.

In the PC world, my computer has a certain number of FLOPS even though it has no impact on my day to day work where I care more about RAM and such.
Lol. Well, I mean nothing is outside of the realm of possibility, but remember those native Java chips! Some thought those were going to be a big win. And then you had companies like Transmeta trying to do the exact opposite - interpretively optimize all the things....or something like that.
Citing 9/11 is a great example. We have better information of what happened, how people became trapped, and how the response was handled. At the very least family members should be able to obtain access to recordings about their family and callers should be able to obtain their own calls. This isn't some wildly hard concept. Calls to a public entity about private individual happen. Medicine is another field that exists but family members can gain access if needed.
"...Last but not least, web developers are the biggest pool to hire from..."
For boiler plate business web apps sure. And while those are probably being prevalent the world does not stop there.
Motel. They're usually what you'd expect from the lowest end of hotels, and (at least around here) a great many of them are left over from the '50s through the '70s—the pre-interstate era, where driving to visit somewhere several hours away usually meant stopping in some little town overnight.

I haven't personally stayed in one, because I have enough money that I'd never have to, but the impression I have is that one would contain a bed, a desk, a chair, a not-entirely-spotless bathroom, and not much else.
I recently switched to desktop GNU/Linux full time outside of work, and I have to say it's really damn good now.

Mind you, I'm using a Lenovo laptop, so it's among the best supported hardware you can buy for the purpose. But the fact that there aren't more boutique computer makers selling GNU/Linux systems installed by default is an interesting statement on the industry.

I'm sure ultimately it comes down to the availability of software like Microsoft Word, but ironically having so much stuff move to the cloud is a boon in this case. With so many web-based apps available, nontechnical people can switch from Windows to a well-configured GNU/Linux system and not notice much of a difference.

With that problem out of the way, a hypothetical hardware vendor can focus on building sane defaults, a good user experience, and good documentation (good for users, not developers). Then if and when it works out and marketshare ends up in double digits, more non-web software will start to become available anyway, and/or a lot more corporate money could start flowing into established projects like LibreOffice.

Obviously the Chromebook was a thing, and you can buy System76 machines today, but the former was too extreme and the latter is probably too expensive for grandma just checking her email.

I assume the reason it doesn't exist it is because the logistics and economics of the hardware don't work out. But I wonder if it will become feasible some time in the near future.
Now for the counterargument:

Airbnb is evil, because it facilitates and profits from rule and lawbreaking, up to and including turning whole apartment buildings into pirate hotels, while spinning the tale that it's all about individuals occasionally renting out their primary place of residence for a couple of days. It's evil because while occasional random temporary sublets aren't a problem, they become a problem when they stop being random and instead become a coordinated, frequent phenomenon.

It's evil because its whole business model is making money by encouraging people to break social contract and do wrong against their neighbors.

Sure, hotels, motels, hostels, and all other legit accomodations aren't perfect. But this isn't the way to fix them.
Please actually read the paper. As usual, the mean is a poor approximation of a distribution. This paper states repeatedly that it was able to reproduce the experimental results from the 2017 PLDI paper, which primarily used PolyBenchC as the suite. My team wrote that paper. We didn't cherry pick.

The issue is mostly that we suck more on Spec2k6 than we realized. Since publishing that paper we do track Spec2k6 internally but we don't spend time tuning for it.

/v8 wasm runtime TL
Java’s success was built in those days though. Personally I liked the language just fine without those features, Java generics in particular make code a lot less readable IMO.

This is partly why I like Golang so much, they’ve been focusing on readability.

I will agree that Lambdas are better than anonymous inner classes.
I don't. Especially if it can be bricked through the internet in the middle of driving at high speed.
This could actually be pretty effective. Airbnb is very quick about disappearing anything from their platform with a less than perfect rating.

I discovered this after stumbling across some darkly funny bad reviews and then diving into their API to look for more of the same.

..Not that I am neither condoning nor condemning finding a way to dock the property a star over time. Personally I'm pretty tolerant of happy neighbourly noise - I like to feel like I have life around me, and I have a fairly good memory of how loud a neighbor I was when I was younger.
No, AI is not coming for you
Never tried because it is paid. I didn't know if it was good.
Continuous Integration Theater (Now with Evidence)
Signal is beholden to the whims of Google due to their reliance upon the google cloud messaging stack. All messages are delivered based upon something outside of their control (whether Google decides they have enough priority to wake the modem). If you are on your phone all the time and have signal open it is usually instantaneous but say your phone is usually dormant it can be hours before a notification pops up. I'm not sure how different the situation is on iOS or if this is even avoidable with the current mobile duopoly. I find that the unreliability of signal precludes exclusive use of it so I tend to route a lot of communication through SMS via signal or double send. This is not high security stuff. It does seem like a relic of our age that chat is considered the preeminent form of communication. I think long form and long lasting texts like e-mail are valuable but maybe I'm just long-winded.