skysight-inc/HackerNews huggingface dataset:
I don't consider it analysis. It is a discussion. He writes that Air France 447 was "an exercise in poor airmanship", full stop. That is completely inconsistent with the final report on AF 447, where literally everyone but the passengers got part of the blame for it. It blamed Air France, it blamed Airbus, it blamed the simulators, it blamed the pilots.

His central thesis in this article might be:

Boeing became the world’s pre-eminent commercial airplane manufacturer in part because it developed a coherent design philosophy that relied on pilots’ airmanship as the last line of defense.

And that's come up before in various discussions like Langewiesche's. And here I'll underscore this article is a discussion, it's not an analysis. He does bring in myriad relevant factors like airline's being cheap, foolhardy, downright wreckless at times, literally expecting pilots to paper over their decisions. I think that is a real problem all airlines have to contend with, but the safest airlines have mostly solved it, and the least safe airlines still struggle with it and it's mostly about systemic corruption, not pilot incompetency. It's just that if you don't have particularly skilled and experienced pilots all of the time, you're playing roulette - you don't have your last line of defense all of the time. Eventually, things aren't going to work out well. And on that part of the discussion, I agree with him.
Also that when the tequila was served after the people got fired, Run DMC popped out and started singing It’s Tricky
Semmle's post: https://blog.semmle.com/secure-software-github-semmle/.
Can't say that this is surprising, given the startup types I have worked with in the past.

[EDIT]
I want to elaborate on this, actually. Rewards are good incentives until they become so large that they eclipse the value of the thing one is working on. At that point, you no longer attract people who want to accomplish things for their own sake or who even think they know how. With a large enough reward, what you attract are assholes who want rewards.

I hope we figure this problem out before people like this drive our whole civilization/planet off a cliff because they want to be rich. You'd think it would be obvious, and I think it is to many of us. But there are enough of these reward seekers and the rewards are big enough that they dominate the scene.
The HP3000 [0] ("classic", pre-PA-RISC) was stack-based. It was a pretty popular business machine; the Classic architecture was produced between early 70s and early 90s. It was 16-bit, segmented, Harvard, and competed against IBM S/32 - S/36, AS400, PDP-11, and Vax. To most programmers there wasn't anything too special about the architecture; almost all development was in RPG, COBOL, or a really incredible (for CRUD) 4GL product from Cognos called Powerhouse [1].

[0] https://en.m.wikipedia.org/wiki/HP_3000

[1] https://en.m.wikipedia.org/wiki/PowerHouse_(programming_lang...
I like this so much better because it beautifully demonstrates the problem without cluing anyone else in that there is an exploit unless they care to look at how you're injecting the rainbow CSS banner. And if anyone tells you to stop doing it you can just explain that you thought it was an intentional feature that just wasn't very well documented.
My perception is that the difference is the message an author communicates. The message could be "I will tell you something important" or "Go buy this thing, in the meantime I will do some hand waving".
There is no need to add a link to a book in the article which is not about this book, as much as adding a link to Github account in a blog post about unrelated stuff. Otherwise it makes a piece of writing look cheaper in my, probably wrong, view.

Maybe be it's just me, seriously.
At the top of the article are two open source repo links:

Environment Generation: https://github.com/openai/multi-agent-emergence-environments

Worldgen: https://github.com/openai/mujoco-worldgen

Is this what you were looking for?
I tried to write that post about contemporary standards with wide enough room to avoid singling out one archetype and proceeding to disparage them by contemporary standards.

But you found it; as it turns out everyone on the spectrum from "unconventional appearance all the way to downright unpleasant to work with" is a cartoon-cutout "lone wolf". Ya got me.
Exactly, it's the same with e-cigs. Some studies show that nicotine is bad for the vascular system, some studies show red meat increases your risk for heart disease and certain GI cancers, etc. The issue is opticts, tobacco smoke is really it teams of the carcinogencity and people consumed a lot of it. But since vaping looks similar and it's not 100% safe, people want to apply the same level of danger to it.
You don’t need WSL to run gcc on windows. You can use the mingw distribution to get a GNU tool chain that compiles a standard windows EXE.
I don't unfortunately. If I find some time I'll have a think about what I could open source.
Thank you,

I'll give it a serious look.
At Dynamicland, the Building Is the Computer
KFC is serving fried chicken sandwiched between 2 glazed doughnuts
The only real usefulness of quantum computers would be the supposed quantum supremacy.
IBM not caring about Q supremacy is pure nonsense.
How would you compare to something like UiPath? Congrats on the launch.
"Voice and subtitles not available in your language" For literally the first recommended film on Google play movies. Scroll through it a little bit and it seems like original languages are not available, closed captions are never available and the only subs available is not my preferred language (google also warns me for this).

This is ridiculously often the usual experience outside the US, if the content is legally available at all... Or I can just torrent the same content with my desired subs/dubs or buy a game on steam an play it in my desired language...
The only ones who are being singled out in recent times are those who are downright unpleasant to work with. I still see all the same quirky characters getting well-paying jobs.
People want adventure, and nobody has bigger adventures than people who are manic.

I think there are some pretty clear signs of manic-depressive episodes in Russ Hanneman's story arc.
So I guess AOT compilation is coming? That seems to be the next logical step. Cache compiled versions of your code in a format that can be loaded directly into memory. Java does it if set up to do so and it definitely gets better startup performance. Plus you get a pre-warmed compile cache.
I'm actually flabbergasted by the number of people who on here who don't know this reference.
Wow, that's wild. As someone without a CS degree and about 15 years of experience, I didn't think that was something that I'd have to worry about anymore. Guess it can still happen.
It's a good habit to get into, though, when it comes to pointer types. How many times have people written code like:

const int *foo;

when they meant

int *const foo;

or

const int *const foo;
Dijkstra wrote that in 1988. Things change. The prevailing wisdom changes over time.

Is anybody really proudly counting lines of code at this late date? Is there anyone out there who doesn't love an all-red diff? Is there anyone who really thinks the prolix version of a function is better than the concise one, all else equal? Who is getting paid by line of code, or has to meet a a quota of LOC?
> It has nearly any song I'm looking for

Why has Spotify/Apple Music been able to accomplish this while TV/movie services can't?
Not so sure about that, their big Amiga collection lasted couple of days.
Maybe you already do it, but I think integrating adblocker functionality when loading JS sites would be desirable to reduce load time. And if ads are what the API user is interested in, perhaps add a flag for whether or not one wants ads to load.

Recommendation: https://github.com/cliqz-oss/adblocker
Should be the fastest adblocker library (used by Ghostery, Cliqz and Brave)
My comment wasn’t meant against you personally (for all I know it was just for emphasis and not serious, and from your comment it seems like it), just against the attitude of firing people for small things, rather than, for example, teaching them to do better.
I imported the 8110 4G from Singapore or Vietnam (got it off eBay) last year for like $80 US. The 4G doesn't work on most US bands so it's basically just a wi-fi device, but it was a fun thing to buy to try to play/hack around with. I had visions of using it as a controller of sorts for some IoT/smart home stuff, but haven't done much with it.

KaiOS is interesting, but from a pure usability POV, going back to T9 is terrible. Simple acts of logging into services is genuinely painful -- which makes it a fun toy but absolutely not anything I would use for anything other than hacking/ROMs/potential IoT stuff.

I did take the 8110 4G to Europe/Asia this year to use as a cheap way to get a hotspot overseas (eSIM on iOS for dual-SIM stuff was just rolling out and since I often still need to use my actual phone number, I have to pay the $10 a day for .5GB of data from Verizon plus whatever the pay as you go SIM costs.). With this, I just bought SIM cards with big data plans and used it as a hotspot with my laptop/iPad/iPhone)
eh? i’ve just last month done both those things. svg no raster and direct json import
I heard some Chinese researchers have really been focusing on spiking networks. How do these results compare to the leading edge in that country? Or maybe to the leading edge in general from less famous groups?
The best security bypasses tends to be the simplest ones!
Metaphorical... I don't want to be ignorant

I want to ask,

When 'did' the 'usage' of a 'tool'

'became a weapon' ? Cui bono ?

BTT (-;
Probably the latter in fairness.

But presumably the data from those trackers feeds into the hidden backend heuristics the parent commenter mentioned.
There's a balance point. When I did interviewing at FANG.Co I would occasionally just get people that were severely under qualified for the role. It might be a large swatch filter but the degree requirement does reduce the number of those applicants and time lost by devs doing technical interviews.
Because of "move fast and break things" I expect that we will find some unauthorized third party ended up getting access to live audio and video from customer's Portal devices. There will be remediation of the loophole and then we'll all forget about it.
Nowhere in your whole comment have you given any evidence for Snowden's ridiculous claim that the US has said it does not target civilian infrastructure.
> I don't understand all the secrecy in doing these types of pen-testing. Why wouldn't you just tell the cops what you intend to do and make sure everyone involved has a clear understanding of what is going to be done and what not.

It's not really an accurate measure of response time if the responding parties are told ahead of time. That said, I would imagine the benefit of an accurate measurement vs. the cost of a heads-up is vastly different when you're dealing with first responders as opposed to a vendor.
The parent says it is "cosmetic", not technical. The parent, being someone who wrote C daily for 25 years, knows what the syntax allows and that it isn't necessary. A constant pointer to a constant pointer to a constant integer should be written "int const * const * const x" because there's only one other way, "const int * const * const x," which is inconsistent, ugly and potentially confusing.
It really depends what type of candidate you are looking for and what sort of job it is. One of the often overlooked roles of a hiring manager is understanding the signals coming in from the interviewers, weighing the results properly against other information, and making sure that the interviews actually gave information which can correlate to on the job performance.

In the past when I've been the hiring manager, I've had inexperienced interviewers ask my candidates questions like this for all kinds of positions - when you look at who does well in other interviews and gets an offer (and performs well), it basically never correlated at all to performance in whiteboard-only CS-focused interviews.

In this case I was interviewing for a full-stack senior position where there would almost certainly be zero systems-level coding, so the interview should have been a throwaway at best.
A Market with Millions of Smokers Just Banned Vapes Entirely
What happens when your hiring policy favors folks with little to no practical life experience?

A maniac surrounded by yes-men can be a terrifying thing. As leader of We Work he can only get up to so much mischief. Definitely wouldn't want him as 'President of the World'.
This was my first thought. I don't ship anything through dams, but most of my electricity comes from dams on the Columbia.
Its an uneven power dynamic though. The employers typically hold many more cards than the employees.
Totally off-topic, but thank you so much for all the fantastic software you've written!
The problem is what is considered equivalent. I've seen jobs that claim the equivalence as a decade of industry experience.
I have only once fired for cause. Every other time, I’ve gone through the process, the PIP, and then terminated them according to their contract, usually with “more generous the legally or contractually required” severance. Let’s me sleep at night and has the nice side effect of keeping the peace with the remaining team.
The "choosing the easy professor path" always bothered me too; I always felt that it was stupid to go to college just to get the receipt, so I purposefully didn't do the ratemyprofessor thing, though now I almost wish I had, since I ended up on academic probation and eventually dropping out...though that might have less to do with my class selection and more to do with me spending most of my time playing Minecraft, upon reflection.

I think good companies (which are incredibly rare) will figure out how to make the behaviors that get people bonuses and/or promoted coincide with the ones that are good for the company long-term. Sadly, it doesn't seem to happen that way too frequently.
Show HN: RSS/Atom Feed Reader in Go
Those who dont will have a cheaper car. This will either please investors (more profit) or help beat the competition in sales.
Totally not my taste, but each to their own I guess. Interesting to see what demographic goes for a "meat-and-sickly-sweet" range like this. Perhaps it's just the opinion of a 'fried chicken purist' like me though ...
When using a quantum computer, what is the act of "observation" that collapses the qubits to 0s and 1s? Does the observer have to be a human?
For the main two apps I work on, there's some configurations that are different between different client deployments, this includes i18n strings, configuration settings/options, theme options and a couple of images (base64 encoded) for theming. Switching to JSON.parse was a pretty significant impact, from about over 200ms to under 100ms for my specific use case (IIRC). Memory usage was also reduced.

I don't remember the specific numbers... it was an easy change in the server handler for the base.js file that injects a __BASE__ variable.

var clientConfig = JSON.Stringify(base.Env.Settings.ToClient(null)).Replace("\"", "\\\"");
// NOTE: JSON.parse is faster than direct JS object injection.
ClientBase = $"{clientTest}\nwindow.__BASE__ = JSON.parse(\"{clientConfig}\")";
...
return Content($"{ClientBase}\n__BASE__.acceptLanguage=\"{lang}\";", "application/javascript");

The top part is actually a static variable that gets reused for each request, the bottom is the response with the request language being set for localization in the browser app.
For the most part people in IT departments aren't stupid, they know precisely how crap the software they're stuck using is, they just don't have any real input on the decision process. Blackboard, for instance, is notoriously awful but is everywhere in schools. This often applies to policies as well, unfortunately.
Show HN: How much does your team appreciation cost?
You are putting words in my mouth again. They cannot hack domestic infrastructure. They can infiltrate foreign infrastructure belonging to foreigners if it is helpful for national security (a very low bar because any networked computer can act as a jumping off point to attack another).
C itself is an old language that lacks a lot of features that are near-universal in newer languages, but the language is still evolving, and there is still a valuable distinction to be made between how people preferred to write C decades ago and what's considered good style today.
correct. copy paste even from a vector app comes in as bitmap. you have to use file->import or drag drop.
Lovely parable, I shall definitely use this expression with clients --
As long as he's publishing under a CC license, it might be nice to release the LaTeX source as well. PDF is usually good enough, but sometimes needs to be converted to other formats; you usually get best results going latex->epub than pdf->epub. Some devices it's a lot easier to be able to change attributes to better fit the form factor.
I mention this because of these choice quotes from the linked story:

"“We’re bringing up a generation that turns to their screens, without a library of information accessible via screens,” said Mr Kahle. Some have taken advantage of this “new information system”, he argued — and the result is “Trump and Brexit”."

...

"After President Trump’s election, and as the existence of disinformation campaigns that sought to sway voters came to light, the archive began several new projects. One of these was the Trump Archive, a collection of the US president’s television appearances that now contains more than 6,000 videos, including from before he took office. Separately, as part of the effort to document the 45th president’s often-contradictory statements, the organisation is cataloguing Mr Trump’s tweets."

The fact that they call it the "Trump Archive" and not the "Presidential Archive" speaks volumes.
See wahern and my response to the grandparent.
This would actually cause me to abandon WhatsApp. Hard for me to explain why. I guess it's that they've finally obviously decided to monetize WhatsApp.
I think it makes sense to limit how much impact one large state can have on the whole country. It sounds very much like California overstepping the government's authority to regulate interstate trade.

I know people in this case will want to support California because this has to do with emission standards. But look no further than the countless items that now print "Known to California to cause cancer" for another impact.

California is so large that it can practically dictate terms for the rest of the U.S. I do not believe that's a good thing, and I believe eventually there'll come a case that will make that abundantly clear, if it's not already.
To be honest I think it's a big mistake on the part of typescript to not have a JSON.parse<T>.
As crazy as it sounds, after having worked at a few high-profile startups/tech cos it's not as easy as it looks to find a co where the CEO/founder is not an eccentric billionaire or multi-millionaire.
> It seems like everyone here thinks torrenting is as easy and simple as using streaming services actually is, and that streaming is as complicated as torrenting actually is.

Would be weird if people here didn't find torrenting easy and simple. And depending where you get your torrents from, it could be significantly easier than streaming.
In a similar note, a group of friends of mine (10+ years) all use TeamSpeak to communicate regularly, namely when we are playing video games.

We have Slack, etc - but hearing a regular voice attached to someone really does program the brain different, at least it feels that way to me.
Isn't this what WASM was supposed to be?
Gitlab hasn't generally seemed interested in these sorts of free scanning tools. I wonder if that's because their users are much more weighted towards private/self-hosted than Github's are? Because so little open source happens on Gitlab, they can't buy good PR through this kind of strategy like Github can.
When you read the book about Theranos it’s mind boggling how unwilling these bigshot investors and board members are to question their own decisions even while seeing very clear warning signals. Instead they shoot the messenger. I remember similar stuff happening during Enron or the housing bubble in 2008. There were plenty of people with real concerns backed up by concrete data but they just got ignored and ridiculed. And then later “no one saw it coming”.
Basically, but we've come full circle; we would rather ban a safer alternative (vaping) than ban something we have decades of evidence of harm (tobacco). Why aren't we restricting tobacco sales to smoke shops? Most grocery & convienience stores still sell cigarettes. Why are we more concerned about the habit-formation/addictive chemicals than the actual carcinogens in tobacco?
I have a friend that did this between 3 houses. The Ubiquiti equipment to make it happen is fairly affordable, and works pretty well.
There we have it. New guy trusts them so we're good folks.
They have an archive of "330bn web pages" (quote from article). I'm sure those are not exclusively conservative. One or twenty might even be dictionary entries for "example".
Thoughts on Arbitrary Pagination
Hmm, I've always been told getting FAANG interviews as an experienced developer (regardless of a degree) is near to impossible as an experienced dev unless your work history is already FAANG or unicorns
From Zero to Deepfake – How easy is it to create a deepfake?
This is speculation on my end, but I'm assuming it has to do with TV and Movies being more expensive to produce and therefore more expensive to license?
I’m not against firing people if they are a bad fit, are incompetent or are toxic to the work environment. I’m against firing people for small things, not giving a chance to improve, firing on a whim or simply discarding people. Treat people like humans, but that doesn’t mean you can’t fire people who are a negative force on your business.
The Weapon that Disabled Iraq’s Power Grid

https://cyberarms.wordpress.com/2010/04/28/the-weapon-that-d...
> Do you really think the only thing the bank does to log people on is to check the username and password?

Yes. Yes I do. If you're putting arbitrary limitations on a user's password length, down to 6 characters even. I see no reason why you wouldn't be equally as insane with the rest of your system.

And, frankly speaking. The whole "you're locked out after 3 attempts" non-sense is complete crap. What is this now? We're supposed to believe databases don't get hacked into, and hashed passwords aren't leaked on the net for countless people to hack at and break?

This sentiment leads me to believe the passwords are stored in plaintext.
Tough life that maintainer is going to have, seeing `JSON.parse(...)` being wrapped around object literals in code. This truly is going to cost them many man hours and lots of hair pulled out in stress.

Seriously though, there's clever code and then there's just nitpicking. Micro-optimizations with JSON.parse() look ugly and nullify some editor conveniences, but they're IMO very far from being a fireable offense.
Note that they are not photos where the cell phone was removed by Photoshop, they are just people pretending to have a cell phone in their hands.
From https://www.removed.social/about :

> The large format portraits are of individuals who appear to be holding personal devices although the devices have been physically removed from the sitter’s hand. They are asked to hold their stare and posture as I remove their device and then I make the exposure.