skysight-inc/HackerNews huggingface dataset:
Without the cast, a negative value for num wouldn't have made it past the limit constraint as the operand `num` would've been implicitly promoted to size_t (an unsigned type) in the comparison. That promotion would've reliably caused the negative value to be outside the constraint range in this case (because C has well-defined rules for signed->unsigned conversions), or in any event (if limit was >SSIZE_MAX) preserving the intended semantics viz-a-viz malloc.

With the cast of limit to int, num is never promoted. A negative value can then reach the malloc expression, where it will be implicitly promoted to unsigned anyhow--because malloc takes a size_t argument. Worse, the constraint check had the side-effect of preventing multiplicative overflow in the malloc expression, which means if an attacker can control the value of num, they can cause malloc to return a block of memory smaller than what the caller expected (though this is contingent on arithmetic bugs in caller code elsewhere in the hypothetical program).

The real bug here is that allocatebufs takes an int argument rather than a size_t argument. And the real issue with C's arithmetic typing isn't promotions in normal expressions (promotion to unsigned almost always preserves the intended semantics of size constraints) so much as the ability to pass arguments of the wrong signedness to functions, which has the side-effect of hiding the fact that caller and callee aren't on the same page wrt value semantics and arithmetic limits.

I'm on the fence regarding C's behavior here because almost everybody in the comments instinctively were okay with casting, just that they would've casted some other expression. But the real problem here was the type of the argument to allocatebufs. It should've never been signed because negative values for object sizes are non-sensical. But because everybody's instinct is to cast, what good does stricter arithmetic type checking do for callers? Especially when simply leaving C's existing promotion rules in place, particularly implicit promotion to unsigned, would've resulted in the correct behavior. This eagerness to simply cast arithmetic values to quiet compiler diagnostics is also a problem in other languages with formally stricter type checking.
Aren't auto playing videos blocked by default in Chrome now? https://developers.google.com/web/updates/2017/09/autoplay-p...
> but they still chose to ignore all of the prominent warnings and architectural guidance

So that's it, blame the user and caveat emptor?

> not to mention avoiding use of the services which have HA built-in.

Many (all?) of these services tightly couple you to Amazon, so avoiding them is a very reasonable decision.
YOLOrekt – Community Update – 001
That would be the compiler, not the linker. Regarding the warnings, compilers must strike a balance between positives and false positives (just that a number is of type int need not necessarily mean that it is negative). With most compilers you can select a warning level or even enable or disable specific warnings, like "sign conversions".
Advantages of Webapps over Native Apps
Is there anyone at Valve who still builds games?
You can do/create anything as a group. Whether it will be good is another question.
This is some good feedback, thanks a lot. I'll make sure to include some of these points in our next iteration of the product.

Thanks again.
This is not true: https://www.typescriptlang.org/docs/handbook/advanced-types....
SEEKING WORK - Boston, REMOTE

I'm a software engineer with 15 years of experience in various areas including graphics, image processing, GPU programming, and performance optimization.

Technologies: Python, C, C++, CUDA, Vue.js, Common Lisp

Email: info@nathan-weston.com
Web site: https://nathan-weston.com
Kijiji? Maybe that's just in Canada
I do the same thing! The first program I ever wrote was a very simple sudoku solver on a TI-84 calculator (it performed the constraint propagation logic that Norvig describes), and for every programming language I have learned since I have re-written that code.
The things I remember:

Most Americans have guns, support open carry, etc. I was an unfathomable oddity for not owning a firearm.

Most Americans support the current president (whoever that may be at the time), or at least hope he succeeds with his plans.

We only eat fast food, or at the least primarily as a people, prefer "American Food".

And a lot of things that can be boiled down to "America is horribly unsafe, if you go for a walk alone, you WILL get mugged or otherwise hurt"

The Hot Coffee thing was part of a larger thread about the American legal system being a game people play.

There are truths in some of these things, of course, but the scale of them was way off in his head.
This lawsuit is not about Youtube Kids. YTK already has no data collection nor targeted ads (obviously). This is about kids watching Youtube Main on their parents account (you need to be 13+ to have a Youtube account).

Youtube Kids also now has whitelisting, so you can in theory just pick channels manually and avoid all the bad crap.
If you take (1 << 63) + 1 as size (which is a large negative int64), multiply that by 64 and you get 64. So it will call malloc(64) which will succeed. If other parts do the correct unsigned comparison then you have a heap overflow.
Porsche Taycan revealed: $150,900 base price, 0-60 MPH in 3 seconds
MySQL only as of 8.0, which also added CTEs, more JSON features, and index features relevant to indexing JSON.
I left my solver running for 28 minutes and it never found a solution to that puzzle. Guess whatever corner case it's hitting in his program is the same as my program runs into.
I have the same. I rip DRM off of all content I have, both for futureproofing and to allow me to use the devices and playback software of my choice. I currently have around 6 TB of content.
Cory Doctorow tends to be a bit ranty when it comes to DRM. He wrote a whole not-so-great novel that was a rant on the subject.

Which is not to say that DRM is peachy-keen fine and wonderful, just that he's probably not the best spokesperson for the opposition to DRM.
Groucho Marx and public domain issues regarding copyright
iCloud Clusterfuck
Big fan of the search changes, preserve-case and multi-line.

Great stuff
https://ico.org.uk/for-organisations/guide-to-data-protectio... says you only need a data protection officer in some circumstances. You don't say what your startup does, but unless you are processing a lot of data or sensitive data you probably don't need one.

I'm also not sure that your DPO needs to be European or based in Europe
> Atom x5-Z8350

That's a pretty modern 4 core cpu. It's low power, but it's not too shabby. It's a shame Firefox doesn't seem to like it.
wonderful propaganda that they got to call restrictions "rights"
It’s been an effective method of sanctioning individuals and organizations so far. WeChat and Alipay isn’t worth a damn outside of PRC, and sanctioning a handful of pro-Beijing individuals isn’t likely to change that. Truth is, the United States still dominates the global financial infrastructure and being cut off from that is a difficult pill for most to swallow.
I would self-immolate for a game that simultaneously served as the sequel to both HL2 and Portal 2 (i.e. Gordon Freeman has both a gravity gun and a portal gun)
You can also try "pinch to zoom" on the trackpad, enabling the "apz.allow_zooming" flag
The grounds and equipment are not at similarly high temperatures, so the coffee going into the cup is significantly cooler than the water being poured.

IIRC at the time the McDonald's stated rationale was that by serving at that temperature it would be at a good drinking temperature when people arrived at their offices. These days that seems ludicrous to me.
"free money"

If you print money to pay UBI you get inflation, yes.

If you're paying it with VAT or Income Tax or something else you're not increasing the money supply, so broad inflation should stay unchanged.

Local prices will go up and down as you reduce demand for rich person goods and increase demand for poor person goods.

This would imply rent going up but one of the promises of UBI is to increase the ability of people to move to places with cheap rent, taking power from landowners.
Or a satellite...
And Portal certainly is more fun than any Lumosity game.

Educators don't usually consider fun to be important for learning.
Get yours while the getting is good. What would you do differently in Neumann's position?

This company/its IPO is a shining example of what emerged from the way "we" decided to structure the US economy post 2008 recession.
Can AI have sense of humor?
Then nifty 50. I rarely need to go as wide as the 'serious' one.
Rumor is they have a big VR game coming out soon.
Huh? DRM broke it's "promise"? What did DRM promise this guy.

DRM made a promise to business that it would control content in ways that would let them extract more money from users and make it much harder for them to copy or use the content outside of approved uses.

DRM has lived up that promise and more.

It's been so successfully lucrative this promise and similar systems of control may expand to ink, coffee, tractors, phones etc etc.

Sounds like a promise kept.
I can imagine he could sell 6 mil. in stock without damaging the price.
> Because that would likely cost money

Yeah, maybe a flight and some expensive beers.

Most academic crypto guys are ecstatic at the thought of someone asking them prior to using their stuff wrong.
The Data Protection Officer doesn't need to be located in the EU. You may also not even need to appoint one, depending on what exactly your company does.

You should read through the following sections of the GDPR carefully, especially Article 37 to determine if it seems to apply to you (the requirements are vague, but you should at least be able to get a general idea of whether it seems to apply to you or not):

Article 37 - Designation of the data protection officer - https://gdpr-info.eu/art-37-gdpr/

Article 38 - Position of the data protection officer - https://gdpr-info.eu/art-38-gdpr/

Article 39 - Tasks of the data protection officer - https://gdpr-info.eu/art-39-gdpr/

Recital 97 - Data Protection Officer - https://gdpr-info.eu/recitals/no-97/
Could it be that Portal players felt they were more successful in their games than Lumosity players felt?

I know that successfully completing a task(s) just before a test will result in better performance on tests, and failing will result in poorer performance.
GRSecurity has the same, odious, if legal posturing as RedHat - the GPL requires the current version's source (which customers have access to), be made available to customers. Upon sharing of the current version's source in a useful format to the public, licensing for future version is denied - ie, you cannot be a future customer of RedHat. Thus you don't have a right to the binaries and thus neither the source.

RedHat, gets away with distributing the source to their modified kernel as a giant patch file to the vanilla kernel because adheres to the letter of the GPL but not the "spirit", insofar as a law can have a spirit, and insofar as I can claim what the spirit even is. Business-wise though, RedHat is able to get away with it as a billion dollar company. Spender (of GRSecurity) is smarter than I, but has tried to build his product upon something that requires more smarts and more resources - that he is too fiercrely protective of - than he is willing to trade rights to, in order for his contributions to be available to the wider community, as he purports to desire. Facebook's kernel modifications, nor Google's "interesting" kernel modifications (as defined by those requisite for running Google.com and other properties) aren't made available, nor are they t
required to, by the GPL. (Android's Linux kernel sources and select other kernel changes are made available.)

The GPL allows building a business by providing support, and/or tuning of kernel parameters (eg VM swappiness, or disk scheduler deadlines) for running highly specialized workloads, eg Oracle DB. If providing a highly successful product, eg Google.com or Facebook internal knowledge will naturally follow. External benefits not necessarily so. The fat client of the pre and early Internet made the GPL (and LGPL) sufficient for the time, but things are different on the cloudy Internet, and arguably the broader community suffers for it.
While dancing links is cool, when benchmarking it turns out using bits to represent values, and just copying, ends up being faster. This is because on modern CPUs about the worst thing you can do is lots of pointer following.
> I was branded as a 'privacy nut' after the release of Android 10

You were doing baseless accusation on something you don't know anything about. Your comment was basically "they market it as being better to handle privacy thus they clearly are worst with your privacy!".

You didn't raise anything substantial at all in that comment.
Portal isn't very long
You most likely don't need a DPO: https://ec.europa.eu/info/law/law-topic/data-protection/refo...

Check out the rest of the website, it is pretty helpful.

Don't worry too much, GDPR is both common sense and designed do go after the big companies. Some rules are intentionally vague in order to be hard to circumvent using armies of lawyers and/or technical 'innovations' in exploiting personal data.
This is one of the very few real archaeological oddities: Phaistos Disk, Antikythera Mechanism, Lenses of Gottland, maybe those jade funereal suits from China that really seem to indicate "lost technologies" really existed, and maybe if they'd not been lost, things would have turned out differently.
Analyst Says Altseason Could Start If Bitcoin’s Dominance Falls to 40%
Valve playtests the shit out of their games. A lot of Portal's theming is based on their extensive testing culture and the ways they've developed to manipulate the player through testing. For example, the Weighted Companion Cube came about because they wanted a level where you solve puzzles while carrying an object. But the playtesters kept leaving the damn object behind. So Valve's solution was to tell them it was a "character" they had to care for.
One option is to just do nothing about it.
In my experience, keeping BL out of the DB is a practical concern, not a dogmatic one.

Usually there are two things:

1. Performance. Business logic is usually horizontally scalable, databases are usually not. You want to pull as much BL out of the database as possible, and put it into stateless microservices so they can be scaled.

2. Version control and deploying changes to business logic. Business logic changes frequently. Do you want to have to be making that frequent of changes to your database? Do you have practices around safe deployment and code review for stored procedures?

I've worked at a place where there was lots of business logic (millions of LOC) stored "in the database". In this case the database was MUMPS. It can be done, and it can be pleasant. The catch is that vertical scaling is the only option, and you have to spend years building your own tooling from scratch.

I think the line between database and code is destined to become even more blurred, but not by bringing the code down into the database, but by lifting more and more database concepts up into "application space" as distributed computing becomes more normalized.
Writing code without thinking about tests is a great way to make writing tests a HUUUUUUUUUGE pain in the ass. Thus ensuring they never get written, and everyone is happy :)
That's a good example, IMO, and yeah it should be very much frowned on (or outright disallowed) to modify an approved code review before pushing without further review. That is kind-of a code review workflow problem, more than a discussion of whether rebase should "never" be used though, right?

The company I work for now has both notifications for commits in code reviews, so everyone sees if you modify something after it being approved, and some repos also have lockdown features where the approved review is tagged and cannot be checked in if modified. So this can be solved with some tooling around code reviews, and git itself doesn't exactly add up to a modern code review toolset. This may be as much or more of a Github problem than a git problem... acknowledging that there's a large swath of developers that doesn't really know the difference between them.
WASM is still young. The tooling around it hasn't gained maturity yet. Do you remember trying to debug Javascript before the creation of the in-browser debugger? Desktop application developers back then probably felt the same way you do now.

> this seems like a huge layered mess just waiting to trouble those poor devs.

WASM is a VM. It's less complicated than a javascript engine. How complicated it seems in daily practice is going to come down to how good the tooling is.
> But if that human follows and looks at that other person 24 hours a day, would you still say that no consent is required?

What if I'm not even following anyone; I'm just sitting on my front porch all day and the I notice the same person keeps walking in front of my house? Is consent required even though I haven't moved? I've made 10 observations in 10 hours, yes, but only because the person has walked in front of my house 10 times.
If you are on 69 or higher, go to "about:config" and enable "apz..allow_zooming". It's still a little buggy, but it works quite well
From memory I believe the case was settled for a presumably lower undisclosed amount rather than go through a long appeals process.
> If some stock falls 50% because of panic selling, without anything having to do with the underlying company, it will eventually return to the correct price. And much sooner than the decades long timeline that you're saving for.

But that's not true, because suppose if 99.9% of investors are buying ETFs and only 0.1% are actively managing, there won't be enough funds to bring all these panic dislocated stocks back up for many, many years.
in 1969, twenty-five Newsday journalists published an erotic novel called “Naked Came the Stranger,” under the name Penelope Ashe, with a deliberately inconsistent style—the group’s ringleader wanted to prove an ironic point that any book could succeed if it was filthy enough. (The novel became a best-seller; the hoax aspect, revealed a few weeks after its release, was a boon to publicity.)

Someone wrote a hilarious oral history of Naked Came The Stranger: https://www.wnyc.org/story/naked-came-stranger-oral-history/. It's all writing and presumably SFW, as well as being an amazing story—and perhaps an amazing story about recognizing market conditions, then capitalizing on them.
What do you dislike about safari?
Language is not clear enough, scan is different from metadata. I can see a lawyer defining scan as checking every word of the content and metadata being account Foo sends email to account Bar. That would be enough to make the connection. Foo account later uses google to search about topic A then topic A is presented to account Bar.
You sure it’s not all about the ratio of photons to sensor size?
And Google merrily uses C++ with exceptions disabled. That doesn't make it right when the shit hits the fan. "Works most of the time" is not acceptable in an OS.
Video has it's place for-sure, but I can't stand seeing it on news websites. So much data must be wasted on sending this junk down the pipe nobody looks at.
Of course one reason you’d want a faster processor is it will “race to idle” faster and increase your battery life (longer life with similar battery / equal life with smaller battery that’s charged quicker):

https://en.wikichip.org/wiki/race-to-sleep

Of course there is an optimum between price, workload and battery life that will differ per person.
If you want to short a stock, you get far better leverage with options than actual short positions. And AFAIK there's no limitations there.
BuzzFeed’s Tech Team Helps Journalists Report on Technology with Authority
So...when is FF going to get proper site isolation?
It seems like the phrase "without evidence" has spilled into non-political news. If I'm not imagining things, this is a good thing to happen.
What do you mean OR? That's exactly what I'm saying.
When will the online/cloud version of VSCode be released?
This makes sense, but it also implies that there is no actual backdoor in TFA. The code as shown in the article is not exploitable without assuming more (actually exploitable) bugs somwhere else in the callsite (which the article doesn't mention). Or maybe we haven't figured out the actual vulnerability yet...
Not sure why you're being downvoted, there definitely is a lot of agriculture in the California and Arizona deserts.
>This is well described by Ricardo's law of rent (1809) in the context of land rents (which are essentially land monopolies). In other words the landlords would increase the rents exactly to the aggregate amount of UBI money handed out.

Thanks. I keep asking the same question without knowing there is actually a Law of Rent. And I have yet to see a convincing argument.
The governement doesn't put criminals in jails, they apply freedom management!
The multiplication can end up turning that large negative number into a small positive one, likely giving you a chance to smash the heap later on (depending on exactly how the int is used).
Re: AR/GERD, have you tried "intermittent fasting" of the 16:8 variety (that is: no fasting days; just, limiting food to a small e.g. 8 hour window)?

My parents developed later-life GERD and I believe I was starting to. Started IF for other reasons and the GERD-like symptoms more or less vanished for me. I think part of that is the necessary gap between last-food-intake and becoming horizontal for sleep... which is now a few hours minimum...
You allude to this, but it's been explained to me that the sourness of sourdough comes from the (wild) bacteria, while the rise of the dough comes from the wild yeast.

When you feed your sourdough starter, you discard most of it and supply fresh flour and water. This sets up ideal conditions for growth. The yeast is faster to grow than the bacteria, so the ratio of yeast to bacteria is higher immediately after feeding. Thus, you can control the sourness of the dough through those feedings and their timing relative to preparing the final bread dough.

The microorganisms should be invisible. You just see their effects on the mixture. Your starter is probably good if it doubles in size within a few hours of feeding (due to carbon dioxide production by the yeast). If there's visible mold, that's very bad. The yeast should be strong enough to defeat any stray mold long before it can grow enough to be visible. I would just throw that batch out and start from scratch.
How "Information Gerrymandering” Influences Voters
> and we should see a lot of "hold" or "sell" from the analysts.

That's not how that works... Sell-side analysts have a systematic bullish bias, that's what they are paid for.

https://www.bloomberg.com/opinion/articles/2017-01-20/wall-s...
Yep everyone's stupid except you...
Aristo – An intelligent system that reads, learns, and reasons about science
Everyone's stupid except you...
> what’s the barrier to creating fuel from air and water, using electricity?

> it’s not really fossil fuels that are needed for planes and rockets, but high energy density liquid fuels

The energy density of liquid hydrogen is really low, so that idea won't work. You want hydrocarbons of some sort, because they have the required energy density, so you could probably switch planes to run on some sort of biodiesel instead of fossil fuel.
Well, then quantify the scale at which data collection should become illegal with unambiguous terms.

I don't see anything wrong with making observations about people, especially if it helps my business. I'm allowed to do so without computers: "Ah, sir, I see you are sunburned, did you know we have ointment for that on aisle 4?" (no one would say: "How dare you observe that I am sunburned! That's a privacy violation! You didn't have my consent to observe that!")

So tell me how far I'm allowed to go with computers.