skysight-inc/HackerNews huggingface dataset:
Advanced type systems can prove more complex properties of your program; there will theoretically always be properties we can't prove (by means of type systems or otherwise), and practically there will be properties that are too hard to prove. Even with dependent types, "essentially any" is an overstatement.

But often times you can make important and hard-to-reason-about properties of your system "simple" from the perspective of the type system. For example, I used the C type checker to help make sure I was calling functions from the correct thread. I have a talk about it I've given a couple times - slides as C files here: https://github.com/dlthomas/using-c-types-talk/tree/master/s... - with an example program where the technique turns an occasional segfault at runtime into a "you can't call this here, dummy" error at compile time.
It's the same tactic that former CIA Director David Petraeus used to send messages to his mistress. It's been around for a while, so investigators look for it.

https://www.washingtonpost.com/news/worldviews/wp/2012/11/12...
>It's a shell of a functional service.

I can't say this in any less of a politically charged way but 10 years of austerity will do that.
The title is inaccurate. This does not require a backdoor. The agreement changes nothing about the use of encryption.

https://twitter.com/mmasnick/status/1177979730932297728?s=21
There are some switches that supply passive PoE, such as many of Ubiquiti's products.
> What’s the backstory?

From the person/hacker/security researcher (@axi0mX) who discovered it:

During iOS 12 betas in summer 2018, Apple patched a critical use-after-free vulnerability in iBoot USB code. This vulnerability can only be triggered over USB and requires physical access. It cannot be exploited remotely. I am sure many researchers have seen that patch. That's how I discovered it. It is likely at least a couple other researchers were able to exploit this vulnerability after discovering the patch. The patch is easy to find, but the vulnerability is not trivial to exploit on most devices.

> why make it public?

A bootrom exploit for older devices makes iOS better for everyone. Jailbreakers and tweak developers will be able to jailbreak their phones on latest version, and they will not need to stay on older iOS versions waiting for a jailbreak. They will be safer. It will also be better for security researchers interested in Apple's Bug Bounty. They will not need to keep vulnerabilities on hand so that they have access they need for their research. More vulnerabilities might get reported to Apple right away.

Source: https://mobile.twitter.com/axi0mX/status/1177542201670168576...

I wonder if this is this vulnerability that a private company was exploiting for tools they provided to various law enforcement agencies?
Get live serial port data on the web with bare JavaScript
Ithink this deserves some kind of clickbait award. The title suggests the existence of an interesting story but the answer is the most cliche answer you could possibly imagine.
It's interesting to see number of ultra-wealthy individuals who refocus their lives on philanthropy. Perhaps there's a point at which reputation and "good karma" became a more valuable commodity.
Have you looked at jsonnet[0]?

It has multiline strings and comments among other features...

[0]: https://jsonnet.org/ref/spec.html
It hang my PC and I had to use the reset button. The CPU load went 100% and never fallen back (I waited for about 15 minutes). The PC became so extremely slow I couldn't even log-in to another Linux console.

I retried on Windows an it (the download button) worked just fine however.
Does this mean that the use of TIF/TAD funding should be expanded? With TIF, bonds for infrastructure needed to support new housing are paid off by property taxes on the new housing. While this should keep the rest of the community from shouldering the burden of new infrastructure, opposition often comes from activists who claim it's another way for the rich to exclude themselves from the rest of the community by keeping their taxes to themselves. Typically the bonds last 30 years, after which the taxes that went to pay them off are directed back to the community's general fund.
You will have no problem in moving back if you are good at finding and solving business “problems”.

As long as there is people working (not monitoring) there is job to do. Always read up on the company agreements with contractors and look for the money flow. This will fast get you into the most lucrative Dev role within every company.
https://news.ycombinator.com/newsfaq.html

Are paywalls ok?

It's ok to post stories from sites with paywalls that have workarounds.

In comments, it's ok to ask how to read an article and to help other users do so. But please don't post complaints about paywalls. Those are off topic.
Probabilistic scripts for automating common-sense tasks – Strange Loop [video]
Unemployment is 3.7%, which is pretty closest to the lowest ever observed figures (other than during World War 2). How much faster can it drop?
Ember 3.13 Released (Octane Preview)
So you’re denying the existence of sex trafficking?

To clarify, I personally favor the Swedish model, which outlaws pimping, brothels, and buying sex but does not make it illegal to be a prostitute.
Great post! You touched on something there thats been bugging me last few years, testing is non existent in devops/sre world so developers who hate testing and do not understand it is core to good engineering seem to gravitate towards devops roles as they can hack their way thru their day all while creating tons of tech debt.
> Without being a lawyer, I'm pretty sure random drone strike on civilian in Pakistan, torture in Guantanamo or intercepting entire world communication is an example of "respect of humans rights"

This is a good point, I think. The US has an appalling record on human rights (aside from your examples, arming terrorists and overthrowing democratically elected governments spring to mind) - as long as we're talking about the rights of non-Americans.
The US, by their own admission, is "killing people based on metadata" [0].

Which in practice is done by using machine learning [1] on huge data sets gathered with that global surveillance enabled trough Five Eyes.

Because the army of humans that could manually sort trough those zettabytes of data has yet to be cloned. All that ends up in the fancy-sounding "disposition matrix" [2] aka the USGs kill-list. It's just systems upon systems doing their thing and nobody is directly responsible or accountable for anything that ends up happening, like when yet another 30 Afghani farmers get "splatted" by accident [3].

Considering how this has been going on for close to two decades, and the US has a very convenient way going about the casualty statistics [4], I guess these Afghani farmers are just another rounding error in the "war on terror". Figures, because before that they were mostly considered biometric cattle [5] and lab-rats for fantasies about "full-spectrum surveillance" [6].

Note: Under Trump, the USG now even stopped releasing their shined up drone statistics. So it's pretty much impossible to know the full scale about what's still going on to this day.

[0] https://www.nybooks.com/daily/2014/05/10/we-kill-people-base...

[1] https://arstechnica.com/information-technology/2016/02/the-n...

[2] https://en.wikipedia.org/wiki/Disposition_Matrix

[3] https://www.theguardian.com/world/2019/sep/19/us-drone-strik...

[4] https://www.theatlantic.com/politics/archive/2012/05/under-o...

[5] https://www.wired.com/2010/09/afghan-biometric-dragnet-could...

[6] https://we-make-money-not-art.com/big-eye-kabul-surveillance...
I did the opposite and went into a dev role right after university then later moved onto devops jobs. Getting into DevOps is relatively easy but it does require a change of mind set (some of my current colleagues came from a dev background and still refuse to fully embrace devops ways).

I think if it's a startup, it'll be easy to get into either types of roles. From my experience start ups give you massive jumps in career progression in little time even if the company barely cares about career progression. For me this has been due to the tiny size of the teams vs giant teams (my current team is 50 man, in start ups my teams have been no more than 5 people).

Having said all of that, in bigger companies there's more opportunity to pick and choose where you specifically want to focus.

Mileage will likely vary.
Agreed, the timing was so precise in this case I just expected that he'd be out of the country by the time they came to his house a few days later. Maybe his plan was foiled when the banks froze his accounts almost immediately.
I think it's just someone, possibly a non native speaker, mixing "reaping the benefits of" and "plucking the fruits of"
Does that make it somehow better?
This ranger is teaching his techniques to police officers.

These techniques may be useful for serial killers (although we don't know, there's no research) but we know these interrogation techniques have caused many miscarriages of justice.
The FT piece the article refers to is here: http://archive.is/ZLiUp
I think people hate the decision because there were trivial technical measures to prevent snippets already, for years.

Those companies spent hundreds of thousands of dollars to sue google... instead of spending trivial amount of engineering time to just put the right tag on their page.

So I don’t think “Google was stealing” argument holds water - if this was really the problem, then the solution does not make sense.
The trick is to eat the right stuff so shit floats by itself.
The API docs don’t make it clear whether that’s still possible so I didn’t mention it explicitly, but I have done that before and that’s what I was alluding to with the “array of hash tables” comment.
It is also worth pointing out that you can still buy paper bush tickets, and can use cash to do so.
Regular PoE can in some cases get as high as 56 volts... Some PD equipment is overspec'd to deal with regulation issues on PSEs.
Just like developers cobble together apps that are barely operable. Hard coding IP addresses, opening connections with no timeouts, and lacking basic understanding what the difference is between DNS and HTTP.
Gradle also uses Kotlin these days.
Context really matters though.
The law is too lax.
I also want to kill someone and then my sentence reduced to 1/6.
In fact, I'd like to rob all brazilians from their taxpayer money through my corrupt construction company and then go to "home prison" at my 32 million square feet mansion without giving a single dime back. That's what I call a good application of the law! All hail the "great success" that it is.
I agree it would be good for police to be able to look into a criminal’s phone, but how will they actually achieve this without wrecking the encryption for everyone?
Initial idea of FOSS was more about personal use of OS applications,

This.

Free software was initially aimed at protecting both personal and commercial freedoms, not just personal ones.
Bret Victor’s is a great one: http://www.worrydream.com
One idea is to limit the percentage of the purchase price that can be borrowed. That would reduce a lot of the longet term problems but would upset some short term.
It doesn't matter now. It'll matter next time.

Change your title to DevOps, SRE, or team lead. I also don't like titles, I'm sharing my experience with you.
Are you a creative presenter? – 6 steps to becoming a one
Good writing is a form user experience design. Do what you feel you must. Adopt a personal style and some flair. Use punctuation as you wish. But know that the goal is (generally) clarity and communication, not blind adherence to any specific rule.
Been back in the news lately: https://foxbaltimore.com/news/local/baltimore-states-attorne...
Interesting never heard of Pulumi, thanks

You might be interested in https://www.jetbrains.com/teamcity/

It has a Kotlin strongly typed DSL for pipelines, i absolutely despite Jenkins and Groovy, so many bugs causing huge issues due to weak typing and lack of testing :(
IMHO editorializing this as a ‘back door’ is inflammatory.

Users need to learn to not have any expectation of privacy when using social networks. It extends far beyond PII leaks.

Perhaps complaints should be directed at the root of corruption/abuse of such systems, at least as much as the capability itself. The capability is inherent to the technology just as tapping a phone line is.

Telcos have to provide interception capabilities (CALEA in the US) or they are not allowed to operate. This has been true for decades, most people do not know how that works but they do know it is possible.
As these social media communications services become more entangled in our lives perhaps they too could be deemed essential infrastructure and treated as utilities.
If supply proves too difficult to increase, why not try reducing demand? Or course that would be unpopular with the infinite GDP growth folks but sooner or later will have to be confronted. Seems like the entire political spectrum supports infinite growth even if it manifests in different ways in different political parties.
you copy them to your new phone. yes.
"working remotely"
Agreed and fixed. Thanks.
It seems to have been moved to https://www.documentcloud.org/documents/6433147/ but I can't figure out how to download the PDF on this one. There is a GIF version which I've re-hosted: https://imgur.com/a/KYywfCQ
In what way though?

Knowing that I could nullify does not in any way prevent me from properly concluding a verdict based on the laws that are in place.

It's only if I choose to actually nullify that I'm not doing jury duty properly, but the knowledge of nullification as far as I can understand in no way prevents me from doing jury duty properly.
No, a lot of politicians amd lobbyists in favor of that reform had arguments that were maybe relevant 30 years ago, completely missing how media consumption has changed. And when called out, their response was deliberately hurtful, full of contempt and belittling those who - in their view - had no effin idea what this was about when in truth, even Axel Voss, the architect of the copyright reform gave factually wrong explanations of the contents of the regulation.

The politicians who were pushing this through were deliberately breaking just about every rule of civil political discourse. This is all on the record. Such behaviour it is completely out of line, but I don't know how to counter it effectively when those responsible for it have more political power and have better contacts in the media to have their views (and, in this case, lies) reported.
First, I know nothing about DoH, so take this with a grain of salt.

They should look up a canary domain that doesn't resolve from the roots, but local sites can configure to provide the address of a DoH resolver. Then you don't need to have a list of known DoH providers-- any site can install a DoH resolver and then add the canary domain to allow clients to upgrade.

It'd still be vulnerable to MITM attacks on initial connect, but at least the window for them is closed after the first resolution with this approach (better than normal DNS).
It’s getting where I can only read about half the articles posted to HN. Do we have a large user base of people that pay for NY Times, Bloomberg, etc.? Or just a bunch of people that use workarounds?
The author really tried hard to build up the suspense before the reveal, so it would be very odd if they gave it away in the title. I even think they gave away too much, since my first thought was "baby" when I read "in the freezer".

I think this kind of story is one of the rare cases where I would have preferred a less revealing title.

Some people enjoy reading stories without knowing the end beforehand.
Home Owners Association, Neighborhood Association, Historical Society, etc
Unreadable on Chrome.
Mr. Fennell protected the presumed killer by refusing to testify.

Do you have any evidence for this, or are you assuming that protecting the murderer was Mr. Fennell's motive? Was he offered immunity for his testimony? If not, then he has very good legal reasons, not to mention the Constitutional right, to remain silent.
Was the content on the site taken down? It appears by clicking on the link that we are being directed to the blog itself not the blog post.
What people really hate is having to write complicated configuration. No matter what format you put it in, it is still complicated configuration. It's hard if not impossible to test, there's only one right way to do it, and it is likely interconnected with other complicated configuration.

Whatever format it happens to be written in (now YAML is the apparently trendy way) it is guilty by association.
> So let's say this law passes BUT someone builds a really good open-source messenger.

> What we need is a law requiring some type of side loading.

You are asking the bad guys (passing bad laws) to be good (passing good laws). I do not think those expectations are realistic.
Meanwhile, the US government (mostly Trump) is banning Huawei equipment over spying concerns. Apparently the only concern is that we weren't the ones doing the spying.

This really hurts our credibility on a government level outside the Five Eyes.
From my experience, SRE is a person with developer mindset (and skillset, or the desire to have a developer skillset) who doesn't mind touching the infra.

A SWE typically won't want to touch infra. That's my experience of course, YMMV.
What are you talking about? This sounds like a Lyndon LaRouche screed.

Can you say this in, like, normal English without ideologically biased adjectives?

And maybe even throw in an example to clarify?
come on. there are enough ring security doorbell cameras alone siphoning down data that if Amazon doesn't have a system like this under contract/NDA from the US government, it's probably well into the RFP process. that or it was developed in the US originally and stolen then rebranded.

or maybe they'll just steal the tech via NSA/CIA? no better way to evaluate your adversary than dogfooding their tech.
Most software engineers simply hate being on call and the software being developed can be pretty mundane unless you’re working on cloud native tooling perhaps. It is a rather narrow area of software engineering honestly, but IME software engineers passionate about their software in production are great SRE candidates and I say this not because I’m a former generalist software engineer either but have had to hire for these positions.
I agree. The proposed law is a bit confusing. The UK already has forced key disclose under RIPA.

https://www.legislation.gov.uk/ukpga/2000/23/part/III
Unpatchable bug in millions of iOS devices exploited, developer claims
When I gave this book an attempt, I appreciated the author's honesty about the difficulty of the material. I went with Real World Ocaml instead, intending to reattempt SoFP in the future.
Today I suggested an addition to a section in Real World OCaml, and the author pointed out that the section was already so dense that adding the extra content would require more explanation. I now appreciate the difficulty in making such a technical material approachable by a less technical audience, and a heads up is appropriate.

Edit: (in light of another reply that mentioned the lambda calculus). The addition to Real World OCaml that I suggested was to call out the implementation of the Y combinator in the section on Memoization. The explanation used the Y combinator to work up to an implementation of memoization, and it was so intuitive that I felt it should be noted, but that won't easily fit into an already dense chapter.
That’s kinda backwards. One should point to the source and if that is no longer available then fire up the Machine.

In this case the archive.org link is a 403 for me while the original works.
I second the other guy:
Are you finding these jobs in any public lists/platforms/whatever?
Telegram is not EtE encrypted by default. Only special “private chats” are and they unavailable on desktop.
I don't think that leereeves was saying that none of this is real. The point was, this isn't 100% (which you would likely conclude from the media). "This is not 100%" is not a claim that "this is 0%", though.
Agreed. How hard you it be to add a $ icon?

Or, better, require use of non-paywall links or to include the workaround.
Better ask for browsing and messaging history.

That should be a much better analogy. Especially in the postmodern hypersensitive world.
If search for "usb audio" in your link, the first hit is

> If Handheld device implementations include a USB port supporting host mode, they:

[7.7.2/H-1-1] MUST implement the USB audio class as documented in the Android SDK documentation.

?
That actually is interesting, thanks.
I don't mean to imply it's bad. But yes. How much lower could it go? What did a trillion dollars do? Its not a great example of a large effect being correlated to a policy change.
You are absolutely right. I also already assume the government can access virtually anything I am doing anyways. I think we are all naive to believe otherwise.

I also have nothing to hide :-)
If you're logically consistent, then outlawing encryption implies outlawing computers and mathematics.

We are venturing straight into a totalitarian nightmare, and are totally fine with it.
Recap of Web Development in September
NOBUS is going to work well. Not.
My buddy had bad GI symptoms(throwing up, diarrhea). He also lost his adrenals and thyroid. His thyroid may come back, but he'll be on pills for the rest of his life. IIRC, the treatment lasted about 2 years. He had the advantage of being a guitarist by trade who lived at home anyway. I'm not sure how someone with a normal life would have made it through it. He was the only patient who made it all the way through the trial. He also smoked cigarettes and marijuana, and had a opioid habit. That said, he still managed to keep hiking a couple times a week except on his roughest chemo weeks.
Firmware updates are a thing for other devices. Sure, the force-restart logic should be stored on some separate device that isn't touched by any part of OS other than the firmware updater — but are you sure if it really is or should be read-only?
Too much money. Once you pass a certain amount of money, it is very hard to diversify because you are such a large share of the market. I am not exactly sure where this number lies nowadays but once you pass $10bn or so, you can't own much outside the S&P500 without running into liquidity problems.

The only market with infinite liquidity is US Treasuries (that is where the Chinese put their $3trn of foreign currency reserves). Mortgage-backed were liquid until GFC, and liquidity in corporates is falling because dealers can't carry inventory (afaik, not expert...MBS pre-GFC was ultra liquid for sure though and seen as an alternative to USTs).

The Saudis own $150bn here (and growing because of Trump/MBS relationship apparently) but I think the issue the Saudis have is that they have a fucking huge budget deficit. There are tons of people on do-nothing, civil servant jobs (mainly royal family members), they have to spend a ton on defence (ostensibly against external threat but the royal family is terrified of an uprising too), and they spend a ton on welfare to buy popularity.

They are definitely investing for a return.
I’ll leave it up to Run DMC. https://www.urbandictionary.com/define.php?term=word%20is%20...
All good reasons. I'll take the first one a little further... when such an event happens, it may cost the company actual money. If you fire or create an environment where someone wants to look for another job, then whatever that event cost you is no longer an investment in the education and experience of your employee -- you've now invested that money in someone else's employee.

A person who plays a part in a costly error is going to be much more cautious in the future and be very helpful in improving systems so it can't happen again. You want to foster that approach rather than discourage it.