skysight-inc/HackerNews huggingface dataset:
> The way to reach people is not with scolding

I think it's an unfair assumption to say that I'm scolding the teams I work with by trying to educate them on security issues - the fact that that is your takeaway from my last post says a lot about another issue with security organisations: that there often exists some adversarial nature between software engineering and product security. I moved into security from product engineering. I try my best to be the ally of the engineers, and educate them on bug classes so they can learn to deal with issues throughout the software development lifecycle, from early threat modelling and design issues to creating implementations that minimize weaknesses.

A helpful solution, as the child poster says, is to have frameworks that stop you from doing the dumb stuff, but smaller organisations sometimes don't have that luxury, and even still you can shoot yourself in the foot with your frameworks (Using front-end frameworks as an example, I've seen way too many extraneous uses of dangerouslySetInnerHtml and DOMSanitizer bypasses when I was a consultant.)

> scanners that are easy to use, helpful, and don't have lots of false positives.

I've written a fair amount of automation tooling to glue together COTS/OSS SAST/DAST applications. Most of even the better commercial tools still yield insane amounts of false positives and require human interaction to make sure that the bug is actually exploitable. Common web security tools such as Burp Suite Pro's scanner are effectively useless for most modern web apps. Some languages and architectures are better than others, some companies' internal rulesets are better than others, and it's a struggle to get something that works for even the majority case. Some of the most mature technology companies I've worked at are still trying to build these tools across their infrastructure, and they have better success in some languages/platforms than others, and they don't have the resources to keep up with the new languages / platforms / frameworks engineers want to use for this project or that. It's an uphill battle, and education is still just as important as tooling.
Document and record anythi that could be relevant to future lawsuits. Warm up your old contacts. You will be fired. Don't get stressed.
For someone saw CBOR, CBOR is kinda binary version of JSON, like MsgPack. CBOR is already mature as it is used in web browsers internally by a web standard [1] (and yes, Signed HTTP is in a controversy though...)

Because it is pretty much optimized for machine readability and lightness, one of usage is microcontrollers for IoT, with CBOR + CoAP(kinda HTTP for IoT), although I wouldn't say it is common yet, since CoAP needs IPv6.

[1]: https://wicg.github.io/webpackage/draft-yasskin-http-origin-...
Ada is hindered by the compiler situation.

The GCC frontend has always been second-tier at best, and AdaCore is very expensive (it's technically GPL, but you will never get a copy, except directly from AdaCore with further contractual restrictions).

They finally released a "Community Edition", but you may only develop Open Source software with it.

It's a shame. Ada is really nice.
Define "necessary".

Depending on how exactly you define it, pilot error is either the #1 or #2 cause of commercial plane crashes. FBW systems seek to reduce or eliminate that.
As someone who exclusively switched to Thinkpad laptops for their keyboards, I've went with Lenovo Thinkpad Keyboards for my desktop and HTPC too (they've got USB and Bluetooth variants). They are supposedly T440 keyboards in standalone form, and surprisingly, not many people know about them (they are cool for sofa use since they have a trackpoint too).
They do, see the 8chan affadivit in which multiple post screencaps from LEO have ‘(You)’ attached.
One feels compelled to point out that, despite 8chan being a breeding ground of hate, threads by mass shooters are typically removed in minutes and threats or manifestos containing identifying information are forwarded to the authorities, with at least one known incident being prevented by them, a planned shooting at Bethel Park High School.

Which, frankly, is the surprising part since I don't know why any sane person would set foot there. I visited once a few weeks after its founding and it had already degenerated to the point most regular users probably deserve to be on some kind of government list. Going there is just asking for trouble and I would urge anyone curious to look for screenshots instead of actually visiting the website.
You think they don't? It's well known 4chan allowed the fbi to scan their servers for child abuse material.
They're going to have to spend an immense amount of time implementing all the performance optimizations present in mri/yarv bytecode engine before they achieve performance parity.

The amount of engineering effort to remove the GIL and simultaniously make C extensions work is probably not worth simply choosing a multi-process w/ shared memory solution for true parallelism.
... Haskell, Erlang ...
What Is Helm Doing Wrong and How a Helm3 Controller Can Fix It
Has Boeing now lost enough money, that had they not tried 737 certification they might be financially ahead?
Didn’t read till the end but I would say: you know you’re in a big company when you get decent salary. Small to medium enterprises pay for the same job only almost half (at least in Germany).
Thread from 2017: https://news.ycombinator.com/item?id=14046446
Scientists used to assume the bible was a historical document that told the truth. They (generally) stopped believing because a close examination of reality kept contradicting it.
In nintendos defense, they say that is not a usb-c port and to use only nintendo accessories.
What's even stranger to me is how "normal" mass shootings have become
That need to keep it in the 737 rating drove a lot of the airframe design.
(I'm not an electrical engineer)

The problem I was thinking about was demand harmonics.

It's not unreasonable to envision a scenario where a large number of independent devices, acting in their own self interest, end up oscillating between on and off together. E.g. by using the same logic.

It seems like you need something approaching a parallelism primative to coordinate behavior. E.g. bid two steps in advance, find out if your bid was accepted one step in advance, then act.

Or is bidding in energy markets already complex enough to avoid that outcome?
Without certification as a 737, the airplane wouldn't have much of a reason to exist.
Censorship is disgusting, we should all oppose it.

Its literally removing the ability for the populace to educate itself.

Journalists blaming cloudflare should be ashamed of themselves, they've just basically called out their lack of intelligence and we should shun those journalists.
I am not watching TV nor do I have time/waste time for streaming services. But if something would convince me to watch it would be good content.
The simple option would be fewer commercials and good content. They would not even have to produce it. Go to some archive and show stuff from 20-30years ago.
> gzip-compressed JSON

CBOR is not about compression to make it smaller, but for machine readability. For example for integers CBOR uses binary representation so that machines can read it directly without converting from string to integer in JSON.
It's harder than I expected. Try: [1], which is a study of how unions have interacted with the gig economy. (Mechanical Turk workers had an organization, Dynamo. Last update on their web site was 4 years ago, though.)

Teen Vogue (which has better content than the name would suggest) has a good article.[2]

[1] http://rooseveltinstitute.org/wp-content/uploads/2015/10/Mil...

[2] https://www.teenvogue.com/story/what-a-labor-union-is-and-ho...
I thought the GNU version that comes with most distros was under the same license as the rest of GCC?
I meant that these weren't sheltered pacifists. They had seen death and bloodshed before
nginx behaves RfC conform. So if you sent it a SIGHUP it will try to respawn all workers by closing (from the server side) all open connections. The problem is that this behaviour confuses some HTTP libs/connection pooler more then others. For example OkHTTP seems to be able to deal with it, but others not so much.
Once you reach like 6-12 reloads per second you run into latency issues because you've to establish a new connection for every request, and if you're still running with HTTP/1.1 every benefit of idle connections and connection pooling is defeated.
Examples like Traefik (or more old school the F5 BigIP LTM) split frontend and backend handling of connections, and deal with so many reloads more gracefully. Beside of avoiding issues with HTTP libs it at least improves your latency.
You need to make a distinction between 8chan as a website and /pol/ board. Imageboards are just places for unmoderated and free discussions, the topics are up to users (especially on 8chan, where they can even create their own boards, which is not possible on 4chan). Most of the discussions there are innocent in nature, it's always the same few boards which create shit like this.
There was a time that it was difficult for me to understand how it was possible that governments in the middle east were supporting domestic terrorism. It was difficult to imagine how normal people were supporting the killing of fellow citizens.

Now, that I see this same trend unravel in the USA it becomes easier to understand. I have seen for the past decades the shifting of what "conservative" means. Extremists were always there, that I knew. But, it has been scary to see how moving what normality is toward the extreme has happened. News, in USA case Fox News, have validated the extremist's views creating an equivalence between "both sides".

In Europe there are similar movements, but, it has not been televised so much. Except, maybe, for the rise of extremism in the United Kingdom.

As interesting it is from the political perspective, it is dishearting the amount of suffering that it is causing. The political discourse is not used to agree in a way forward for society but as a battleground. And, again, news outlets share its part of fault. Diminishing investment in education probably is even more to blame.

The response is not to be angry, but to be calm and help society to value well-intended discussions over sensationalist posts and news headers.

I hope that it is not too late, the last time that xenophobia was not stoped it cost over 80 million lives, this time it will be way worse.
> What? Why? Putting devs on something that will provide benefit rather than might is hardly a firing offense. I simply don't believe you.

I don’t work at Amazon but failing to see past your own team’s mission and missing your role in the larger company is a (common) failure of management.
Adaptive Systems Programming Project: Simulation of Grey Walter’s Tortoise
I worked a summer helping clear it and saw it all grow back the next year. I didn't want that job again....the lines tangle up machines so best to attack with hand tools and just cut cut cut.
The same way you prove Airbus isn't lying?
We need to understand. We search for patterns.

Not knowing is an ache that forces some to look and convinces others to stop looking.
Setting up a firewall like ufw could prevent accidental port mapping to 0.0.0.0. I really don’t like that this is Docker‘s default.
Nintendo made a port based on the usb-c standard but changed it so it’s ever so slightly not usb-c. I think the problems stem from people trying to fit a 50-polygon into a circular hole, as it were (other way is a better analogy).
Eh, the expensive dock that works seems like a bargain compared to the cheap dock that destroys your docked device.

The obvious question is, if you can make a cheap dock that doesn't destroy the Switch, why make one that does instead?

And if you can't, how is that evidence that the working dock is "too expensive"?
Yeah, and part of the problem is that policy allows the bad boards to stick around so they multiply. In practice the bad policy means it doesn't matter how many good boards there are because there's a board next door hosting child porn or something.
Thread from 2016: https://news.ycombinator.com/item?id=10995726

2015: https://news.ycombinator.com/item?id=9597198

2013: https://news.ycombinator.com/item?id=6932089

2013: https://news.ycombinator.com/item?id=6632576 (the largest)
But that would force it into hiding. Much fewer people could run out for a short five minute vaping break in plain sight of everyone. So they’d save it for the evenings and their homes, which means they’d do it much more rarely, which means that much fewer people would get addicted. And nicotine as a drug isn’t all that fun.
> despite 8chan being a breeding ground of hate, threads by mass shooters are typically removed in minutes

So, it is ok that people promote and help mass shooters as far as there is no direct connection the day of the attack?

> Going there is just asking for trouble and I would urge anyone curious to look for screenshots instead of actually visiting the website.

Is a screenshot of hate speech promoting hate less than a rendered HTML page?

I will imagine that an Islamic extremist site will be closed within minutes of gaining notoriety. Why are we sparing white-nationalist propaganda?
The Max is not fly by wire, that's the problem. It's a hydraulic/mechanical control. That's why pilots aren't able to pull it out of dives or re-trim it, the aerodynamic forces are too much for the crew to fight against.
My friends and I used to visit the *chan sites when we were younger. Sometimes the discussions there were good e.g. if you browse the exercise forums.

But then one of my closest friends killed himself silently. That was when I realized that these sites are no jokes. Some of the people there have fallen so deep into the pit of hate and depression. Nowadays I don't even link nor share the name of the sites to my younger friends where I see the early signs of hate growing. My personal belief is that all of this is happening due to a lack of a proper father figure for boys growing up, making them socially illfit, making them outcasts and making them blame everything on immigrants and so on when they can't find a girlfriend or friends.
I think that technology has brought us some truly marvelous things. But they also enable us to avoid casual social contact while enabling us to withdraw from meaningful social contact.

Online anonymity permits endless Sybil attacks -- helping turn communities' frustration from anger and rage into violence. I'm guessing/assuming that 8chan is an anything goes censorship free community (like 4chan was/is?). And maybe it's not explicitly in support of racist ideals but instead refuses to condemn any ideologies or discussion. But because of other communities' moderation, they likely become one of the bastions of the racists. So even if their ownership never had any interest in hate speech, their platform becomes a de facto mechanism for its spread.

As much problems as anonymity causes I sure don't think that some new Real World Identity driven Internet would be a good idea. But sites with next to no content moderation seem like a bad idea. Not that I can imagine a resolution, really.

~~

I imagine how frustrated I might feel if I didn't have some kind of daily work or creative task to keep me busy and fill me with purpose. If I felt depressed I might be willing to blame it on someone. If everything I read said that in fact there is someone to blame, I wonder: would I be able to see through that? Would I stand up and say 'no, that's wrong: those people aren't the source of our problems'? I like to think I would. But I've definitely caught myself (long after the fact) buying into BS groupthink/hivemind conspiracy hogwash.
I don't know why but when I read the article I was on version 75.0.3700.142 and updated to version 76.0.3809.87 successfully. That's really weird.
If you offer extension for a nominal fee, those with big pockets will always opt to do it. Domain registration fees are supposed to combat squatting, but look at where we are. Any good domain name you can think of is probably owned by a squatter.

And there's a similar situation in the media industry right now. Before Fox got bought out, they were churning out Marvel films in order to keep their license. It didn't matter if the films were any good or made a profit. Sony is in the same boat.

I'm not sure if changing copyright is good or bad, but if we do move to a world with temporary copyright, it needs to expire uniformly for all parties.
I feel like we might be diverging on what "a general purpose web app" represents.

I've never really seen those issues unless there is a more extreme circumstance.

In my read of "web app", in most cases you want to push/data in and out of the database. And modelling 1:1 and 1:n relationships is pretty natural in my experience. Deeply nested relationships are a pain, but they're usually a pain in SQL too. Document-orientation helps here a bit, but with some drawbacks. Where I think it does fall over completely is analytics, and OLAP-like work.

I guess hotspots can be an issue. However, that implies considerable related transaction volume, which I'd argue DynamoDB can excel at.

If you're using a framework like Rails - then sure, DynamoDB is out. But so is Lambda. The pattern of SPA (React/etc), Lambda, and DynamoDB is what's emerging instead of those frameworks. Definitely agree it can't cover many cases, but covers a lot of ground for me
I think the "Structure long messages" section could be more succinct. Background, Consequences, etc (unless they're company standards) don't really impart much information. It could be better to instead have practical info as those titles.

e.g., instead of Background, have "Huge increase in log messages". Instead of "Cause of the problem" have "Caused by bug in external library". That way, if people only read the headings, they still get a useful understanding of the issue immediately.
Does anyone have an idea of how big 8chan and 4chan is in terms of users?

Just from the visible activity in there I can see they must be massive.

I think Slate is incorrect in describing them as expression of traditional neo-nazism. To me they are quite their own thing. Born out of Anime culture and gaming-culture becoming a playground for role playing, trash talking, trolling, real-life pranks degenerating into what it is now ...

To me they are very hard to understand. You start by joking that you are a jew-hating nazi and then after a while you become an actual jew-hating nazi. How does that work psychologically?
You'd be imagining wrong. Cloudflare left up ISIS websites because they said it isn't their job police content.
I have never heard of a tech company that doesn’t require that you explicitly give up ownership rights to software written on the job, so good luck with that
the fbi literally pays people to post in threads about mass shooters.
I don't know why this equation stumped the internet. Order of precedence is something very, very axiomatic. If anything this equation proves or stating is the fact that ambiguous equation is total nonsense.
Apparently this marks US Mass shooting #250 for 2019 (this was the 215th day of the year).

[1] https://www.usatoday.com/story/news/nation/2019/08/03/el-pas...
It is, although COSE is significantly different to JOSE in many ways.
I recently watched a documentary about a diving ship that had a tripple redundancy positioning system that failed during a dive. It was fixed with a hard reboot.
I'm the person who moderated the above bit, and I'm pretty confused about who my unwashed heroes are and what machine I support.
without writing a thesis, here are some thoughts:

- US is/was about 100 years behind european labor movement (germany, sweden, etc. started mid 19th century; US not until 1935 Wagner Act)

- ghent system - in scandanavian countries, unions provide most unemployment benefits, not .gov. you can imagine this leads to large union membership

- americans lost manufacturing/blue collar ("union" jobs) en masse as white collar jobs rose, whereas trade skills are still a thing in countries like Germany with their sort of parallel university system for trades

- there is probably a relationship between strong social welfare and union membership, though directionality isn't clear - perhaps large % of union membership enables more tolerance towards social welfare, or perhaps social welfare allows people to not worry about retaliation from attempting unionization, or ..
Dolphin Progress June and July 2019
Oh damn, my condolences.
I sure am glad we've reached the point of domestic terrorism and I'm 100% sure people will still go:

1) "Not everyone you disagree with is a nazi"

2) "We shouldn't shut down their opinions, they're just as valid"

Because as we can see, that obviously has no negative consequences at all.
This is a way more complicated topic than it sounds. If there was a board dedicated to planning and carrying out mass shootings, or other violent acts, I'm sure it would get deleted rather quickly. But when the topic of a board is "discussion of politics", it isn't illegal in nature.

It's the same reason why Reddit administrators hasn't deleted /r/the_donald yet, despite many of it's users breaking Reddit rules. It's hard to draw the line where it's acceptable to ban a whole community with "safe topic", because majority of posters are breaking the rules / law.
Yep - 8chan was started because even 4chan wasn't odious enough for them.
There are experiments (currently underway in Germany) to extract hydrogen from natural gas without burning the resulting carbon, leaving behind graphite powder which can then be either buried or fed into carbon-composite manufacturing.
Still missing Hangouts, Chat and GChat
Bottom should rather be the empty type and one consequence of that is that is you happen to build a x of type bottom then x sort of belongs to every type
Svelte 2 vs. Svelte 3: Cheat sheet
Hey, could you please review the site guidelines and stick to the spirit of this site when posting here? Normally we ban accounts that attack others like this, and I actually banned yours, but decided to reverse that because you posted a more substantive comment earlier today. Basically, we're trying for more thoughtful conversation and better signal/noise than internet default.

https://news.ycombinator.com/newsguidelines.html

You might also find these links helpful for getting the intended use of HN:

https://news.ycombinator.com/newswelcome.html

https://news.ycombinator.com/hackernews.html

http://www.paulgraham.com/trolls.html

http://www.paulgraham.com/hackernews.html
No. It was a software fix put in place to satisfy a regulatory requirement under specific, known flight conditions.

The following planes (among others) all translate flight inputs. Airbus A320, A330, A340, A350, A380; Boeing 777. https://en.m.wikipedia.org/wiki/Flight_control_modes

A non-Max 737 doesn't need MCAS because it already behaves like a 737.

Essentially, most replies on this boil down to people being shocked (shocked!) that computers are currently helping all planes fly. I'm not sure how they thought AEs were getting efficiency gains while physics stayed the same...
I assume you mean implementing insecure code hard.
The reason why extremism is having more trouble taking root in Europe is because there's less inequality there. Where inequality is highest, terrorism is highest.
Worth considering the varying definitions of mass shooting can inflate the count beyond what people may think of when they read “mass shooting”.

https://www.washingtonpost.com/news/fact-checker/wp/2015/12/...

The US is a large company and there are more guns than people. There’s a lot of opportunity for people to snap and go on a rampage, unfortunately.
The theorem language I have heard most about lately is called Lean. Working number theorists are very active in developing it, driving to make it actually useful to write their theorems in it.
It it also weird that "network byte order" is considered as BE. Is there any advantage of BE when it is transferred over the network?