skysight-inc/HackerNews huggingface dataset:
Management shouldn't even be at standups. Its for syncing with your peers, not an instrument of control. But I guess this is what you're saying, right?
> To many of those in China who do not wish to practice in politics, especially since the Communist has produced an unprecedented growth in the last decade

The Communists certainly take credit for that growth, but did they cause it?

> What's being preached often in the western world however, is a utilization of a "lack of freedom of speech" as a weaponry towards an uprising China that will threaten US's dominance. There is nothing wrong with that, it's only a bit hypocritical that's all, but thus is politics.

That's a misreading. Free speech and the suppression of civil rights are genuine and very important moral issues in the western world. It's not some hypocritical political "weapon" deployed to maintain "dominance."
EFF Wins Access to License Plate Reader Data to Study Law Enforcement Use
When I moved to Washington [state] I was amazed that I could vote by mail -- and by default, too.

Since moving to California after that, I've voted by mail as much as possible, and I literally live right next door to my polling station; I see it and their parking spots right out my bedrooms' windows every day.
Hotels (and transit, and banks) in China have been doing this for a while now. If this is any similar, it would be some awkward police-sanctioned box with a webcam and RFID reader to first scan the person's ID card, and then make sure the person's face is the same as the photo on the ID. Note that a national ID has been strictly required for a long time already, and the general idea is to make sure nobody is borrowing someone else's ID to get service, something really easy to do given that Chinese IDs are like US Social Security numbers--easily stolen, sold for cheap, and not easily replaceable.

Debates on all the hairy facial recognition issues aside, the main concern has been one that existed for decades, that people are being de-anonymized as a matter of policy for trivial things like entering a friend's apartment block or using a vending machine. Facial recognition is an enabler for sure, but even if ML didn't exist at all, authorities could (and here, would) just require IDs and the logging of IDs for every trivial transaction.
You beat me to posting about phones. There is a pretty strong correlation between the rapid increase in phone subscriptions and the increase in pedestrian deaths that started around 2009. I think phones in 2019 are also vastly more distracting than they were 10 years ago, and much of that is by design.
Right, there are many ways to do it correctly. In general, you need complete addition formulas (those that can take the point at infinity and produce a correct result in a side-channel indistinguishable way), if you have those, almost any scalar multiplication algo can be made constant time with regards to the scalar bit-length (you would just start at some fixed point past the end of the scalar in case of a left-to-right algo, with the point at infinity intialized).

One of the main points in the root causes discussion is that without complete formulas you are almost always going to leak the bit-length, so the only way to not be vulnerable in that case is to fix the bit-length to a constant value. This cannot be done naively by simply setting the high bit, because this would introduce bias in the nonces which would be exploitable even without measuring the duration, a much worse attack! However it can be done via the method suggested by Brumley & Tuveri in https://eprint.iacr.org/2011/232 where you add a multiple of the curve order to the scalar to fix its bit-length. This means the distribution of the nonce modulo the order remains the same (uniform, no bias) yet the bit-length used in scalarmult as a loop bound is constant.
Management has, culturally, become very metrics-oriented. This is the root of the problem under discussion here. See Goodhart's law for a brief statement of why this can't work.

Almost every time I bring this up somewhere, someone pops up to say that metrics are important, key to fair and impersonal management. Without it, everything would suck, and managers couldn't do anything. The problem with that thinking is two-fold:

1. It ignores the fact that, as soon as there's a metric that determines someone's rewards and punishments in a management system (whether it's governmental regulation, corporate middle-management, anarcho-communistic self-management, or anything else), the system of measurement will get gamed, and the most overtly "successful" will end up being the most cleverly sociopathic about it.

2. There is an alternative to strictly quantitative evaluation. The alternative is qualitative evaluation. This requires good judgement, intimate knowledge of the problem domain, good intentions, and the ability to consider context, among other things. Sadly, this is incompatible with bureaucracy, which means you need to either carve a bureaucracy-free zone out of the larger organization to manage a team well or stay out of medium-to-large corporations (and out of small businesses that ape the behaviors of large bureaucracies).

Managers who insist on doing everything quantitatively (and sometimes they're forced to do so by their managers) will not get good results. "Good" is qualitative, not quantitative. Equating "good" with metrics just gives you results that look "good" on paper, but really aren't good.

Probably the biggest benefit of a small organization is the ability to eschew managerial bureaucracy in practice.
in almost all cases, the "no action" option has already been deemed unpalatable
Firing and public shaming are part of the problem. People are afraid to voice controversial opinions because they can get called out. I highly recommend the book, "The Coddling of the American Mind."

There is almost a rewards and point system for taking out powerful people who are somehow wrong (racist, Nazis, etc). The trouble is that everyone then becomes a Nazi. People can't have slightly different views and have honest discussions. Instead they get asked to (forced to) resign. It creates a huge void between academics and students .. the relation between students and teachers is now fragmented, and it's also been coming out in the corporate and open source world.
I really wish SQL syntax was in this order.
Why are all western societies like this? East Asia doesn't hesitate to build dense apartments from Jakarta to Seoul. I don't buy the "cultural homogeneity peaceful society" argument because the amount of cultural diversity across the half the human population living in that area is colossal.

But without fail almost everywhere in the Americas and Europe is structurally against density in any form and systemically fights it.
> mere numbers cannot capture the significance of the harm to children.

Oh, bull crap. By this argument, literally no protection or liberty that allows even one child to be harmed could ever be tolerated. Why stop at vetting baby-sitters or teachers? We ought to require mandatory background checks for every person who ever visits a family or goes into a public space that might contain children. Law enforcement also ought to be able to track every underage child at all times, via mandatory GPS collars.

At the risk of sounding callous, there are occasionally some situations where you really do need to shut up and multiply.
And my point is that the period that we are looking back on was unsustainably good regarding a lot of factors.
Possibly https://www.imdb.com/title/tt3080232/plotsummary?ref_=tt_ov_...
Wait, this isn't about hacking at all. Disappointing.
There is plenty of single family housing in Italy, where I lived for many years, and where most other housing types are legal.

If someone is happy in their SFH, why would it disappear?

If someone has the money, they'll be able to build new ones too.

Yeah, maybe central San Francisco won't have many, as people cash out, but that seems pretty reasonable. You can go live in Lakeview Oregon and have a huge house on a huge lot if that's what you want.
Should be simple enough to have the government/LEAs posses the training data and have a standard harness/workflow you integrate your training program to. Then you send your training peogram and get the resulting trained model files back.
i really don't see why. back then there was no IVF and donor sperm would be a way for good old fashioned conservative couples who cant conceive to have the children they always wanted
I wanted to, and did, buy as soon as I was able after graduating college. I admit to being an oddball, though. I hate moving and value the ability modify my living space without restriction (building codes notwithstanding) over location flexibility.
Discord Confirms Layoffs
I am really thankful the Figma team is talking about this stuff (especially with regard to security). I think providing a plugin API so that other can extend their application is pretty smart and in general brings web applications closer to traditional desktop applications where plugins are way more common.
They enumerate a finite set of disjoint cases, so in some sense they are an enumeration. But the real reason is, of course, that sum types can be seen a generalization of C enums, so the syntax was chosen to maximize familiarity.
Liquidity is absolutely terrible at the moment and all real estate deals are priced in US dollars (and have been for some time). I'm speculating on that the low liquidity will eventually push the real estate asks down, I mean after all what good is your asking price if no one will ever match it. If not - there will be other buying opportunities.

Sometimes you have to be very patient. The US real estate bubble took ~5 years to fully bottom out, although already in 2009 the prices were very good: https://fred.stlouisfed.org/series/CSUSHPINSA

Liquid assets already took a serious beating (see the REITs that I pointed out).
I really don't think Steampunk is tied to the iPhone in any way. "steampunk was a cultural response to the ultimate technological zeitgeist, the iPhone" is a pretty bold claim.
I really like jvns's work but I have to say I found this diagram misleading when I first saw it! SQL queries "happen" in whatever order the database optimiser decides.

I'm really glad the accompanying article has a bunch of qualifications of the form "Database engines don’t actually literally run queries in this order" but a lot of the beauty of these diagrams is that they work on their own.

I wish the title of the picture said something more like "SQL queries are interpreted in this order" to make it clear we're talking about semantics and not what actually takes place.
A small suggestion to help with marketing is to make your mothers the face of the company. Right now it appears as if you are doing this for your helpless mothers rather than with your awesome mothers. I am not sure how involved they are but mothers should be on the About page.
People on coinbase are also throwing away a large part of what supposedly makes cryptocurrencies valuable. They're essentially day traders.
Digital Mars C and C++ compilers still support 16 bit 8086 code generation and are free:

https://www.digitalmars.com/download/freecompiler.html

Source code to the compiler/libraries is also free:

https://github.com/DigitalMars/dmc

https://github.com/DigitalMars/Compiler
The solution to this would be to compel the company to push an updated version of the app to the target device, and thereby intercept traffic only from the target of the warrant, while maintaining E2E encryption for everyone else. (Of course, some will complain that even this ability to surveil is too much, and all encrypted messaging should be open source to avoid this possibility, but to me it's far preferable to leaving open the potential of hoovering up everyone's communications.)
> Google has become unbelievably data hungry in the past few years, and in my opinion Chromium cannot be trusted to not phone home in some way shape or form.

This is not a particularly Google-free solution as upstream Node.JS depends on V8.

(Disclaimer: I am an employee of Google. I do not work on Chromium or V8. All opinions expressed are my own and not those of my employer.)
The current population increases by about 140 people per minute. How do you intend to launch people off the earth at that kind of rate?
So everyone who has this feature purchased the full autonomous future upgrade for $6000.

Does anyone really think that will become a reality before the cars end of life?
Apple has true E2E encryption with iMessage if you don't turn on iCloud backup of your messages. It's encrypted when it leaves your device and decrypted on the receiving device. Furthermore the messages on your device are locked via passwords from the Secure Enclave.
The goal of the moderator is to enforce the rules, if you can't accept the rules why would you be a moderator?
I feel like "money laundering" has given way to "human trafficking" among those horsemen, but this is otherwise right.
99% of all uses of the number “99%” are made up.
Unless I'm writing 'select *', I always do the select portion of a SQL query last. Starting with from enables helps with autocomplete on most editors too. I actually with 'select' was at the bottom. The only reason it would be useful at the top would be if it allowed you to use the new/computed column names as aliases later in the query, which doesn't work with most databases.
Node-Red Version 1.0 Released
> focused on detecting security risks of open source

Looks like you're working on a project that's interesting to you.

Is there a way to go after something else, while still keeping the project (and then product) interesting to you?
But Steampunk is just the Age of Steam version; the prototypical version is Cyberpunk. Which is actually inspired by roughly the same era as ST, but focussing on different elements of the era (and usual set farther forward from the inspiring era.)
This is why I like Linq in C#. The syntax order corresponds to the logical order. This also makes queries more composable.

And a very practical advantage is that the editor can support syntax completion. SQL syntax cannot support that since you write the projection before the from-clause.
The article touched on that point, though. It spoke about how the narrative is skewed because many teachers are in rural locations.

That same link shows that the median teacher salary in California is $82k, which is still 17% above the median household income in California [1]. The average student loan debt is right around $30k [2], so above average wages combined with average student loan debt shouldn't be construed as unlivable, unless that term is extended way beyond the plight of teachers (which may still be fair).

Again, it should be taken in context (outside the SV bubble). I know engineers who started at <$40k (albeit a few years back during the recession)

[1] https://fred.stlouisfed.org/series/MEHOINUSCAA646N

[2] https://www.federalreserve.gov/publications/2017-economic-we...
For context, the email relay policy from Apple, as mentioned above and quoted in the linked article under heading "Apple's "Email" Relay" is:

https://help.apple.com/developer-account/#/devf822fb8fc

In order to send email messages through the relay service to the users’ personal inboxes, you will need to register your outbound email domains. All registered domains must create Sender Policy Framework (SPF) DNS TXT records in order to transit Apple’s private mail relay. You can register up to 10 domains and communication emails.
It really is "whatever the optimizer feels like". Pretty sure that's the first law of SQL performance optimization - "The optimizer is always your best friend and worst enemy".
Well, unless you wanna get all Stalin-y, the current people are here to stay, and we have more than enough space to house them. I don’t wanna hear any nonsense about not having enough room. Saying “we have too many people” isn’t a solution, it’s just a falsehood.
Agreed... it feels a bit more natural. I actually like using the extension methods for LINQ in C# in a similar order (not the LINQ syntax itself though).

edit:

CTEs can make it closer to the syntax in question though.
Any chance of this sanitizer being generalize for use outside of the kernel? Someday could the we use this like UBSan?
Location: Niagara, Ontario, Canada
Remote: Yes
Willing to relocate: No
Technologies: PHP, Laravel, Laravel Spark, Laravel Forge, Javascript, jQuery, Vue.js, Node.js, HTML, CSS, MySQL, AWS, WordPress, Linux, Vagrant, Docker, Redis, SASS, LESS, Web APIs, RESTful APIs.
Résumé/CV: https://linkedin.com/in/braunson
Email: braunson [at]] braunson [[dot] ca
Raft Is So Fetch: The Raft Consensus Algorithm Explained Through Mean Girls
Well I won't say that I'm sorry. Some issues are too important.
Location: Austria

Remote: Open to it

Willing to relocate: Depends on the location

Technologies: C, Python, Java, Rust, AWS, Linux

Résumé/CV: www.linkedin.com/in/stefan-ilic00

Email: stefan92f[at]yandex[dot]com

----

I have a master's degree in CS and two years of experience in development (embedded systems and security research).

Primarily looking for positions in the field of security (rev & vuln), model-driven engineering and software architecture, but I am also open to other interesting projects.

Blog: https://ens3c.netlify.com/

Github: https://github.com/F3real
This is probably more common than you'd think. It's not unlike using open source DBs whose maintainers stop working on it, or even open source code libraries in general whose maintainers stop work. Most likely you will weigh the cost of migrating your data (and/or code) to a different DB/library vs the risk of it not getting security patches, etc.
Misleading, and the author even explains that, despite not dull understanding it:
"queries aren’t actually run in this order (optimizations!)"

SQL is a declarative language, very intentionally. There is no way to infer operational semantics (order of execution) from a query.

SQL has a terrible grammar, as most everyone agrees, but this article doesn't explain it well.
Isn't this only if you have iCloud backup enabled for iMessage? I remember I had to explicitly enable that.

Otherwise the keys are stored in the enclave on your phone. Makes it a bit harder for the government - they have to use a zero-day to get your messages at that point.
Huh? I was active in steampunk events from 2010 to 2018 [1][2], and never heard anyone even mention an "iPhone".

[1] https://vimeo.com/124065314
[2] http://www.aetherltd.com
I've rarely seen vendors sharing e-mails with payment and shipping companies, and would consider it somewhat icky for privacy reasons, especially when done without the user's consent.

It also seems that you could set up your own relay allowing those providers to contact your customers. In fact, that would be the privacy-conscious alternative even to your current implementation.
I wish Apple would actually publish the configuration document too (under the well-known URL, as listed in the peculiarities). It makes it one less step for OpenID clients to follow.

I wonder what their rationale is, for not doing that (given how easy it is, compared to all the other things they fixed).

But overall this is great news.
Yes

I went to Microsoft Build earlier this year. There's a lot of cool developments coming out of Microsoft with developer tools, AI, ect, ect.
Handling the Hate: Negative App Reviews
I don't get it, hasn't E2E been already available for a long time in facebook messenger ?
No, the app just compare the face in front of the camera with the photo saved in the NFC chip in your passport. So that the government agrees that the user of the phone and the passport are the same person. Once this is done, the photo is destroyed as well as the comparaison. It's an app that does what every custom officer do when you cross a border.
The Jerusalem UN vote reflects views about the disputed status of Jerusalem rather than anti-Americanism.
For example, all infrastructure contracts are rewarded to a select few companies. These companies charge outrageous rates, building highways and bridges etc. at some of the highest rates per km in the EU, all the while these roads end up with significant technical problems just 2-3 years into exploitation, due to poor work and, more importantly, the use of lower quality than the spec materials (outright fraud), all the while paying workers 500EU / month. Based on my research, I'd estimate around 60-70% of the construction costs are theft.

Or do you want to talk about the fact that BG fuel prices are about the same as all other eastern EU countries, all the while, BG has the lowest fuel tax rates and the same (or lower) VAT, thus more money goes into Lukoil and gas station monopolies than anywhere else.

You are very uninformed.
In general, I love SQL. It's one of my favourite languages (or rather,
language families) to play and tinker with. But the fact that SELECT
comes before FROM has always ground my gears. Thanks to this article, I
now finally have a better explanation than “Dunno, feels weird” :-)
> and if bad advice lead to someone getting hurt, we would all surely put Apple on the hook

No, you'd put the app dev on the hook. Validating the truth of all statements in every app is not Apple's job and never was.
Why do SQL clauses need to be ordered, anyway? Is there anything that would be impossible to parse if the order was not defined?
The thought that people can remove all crime or get anywhere near it is faulty from first axioms.

https://en.wikipedia.org/wiki/Blackstone%27s_ratio

"It is better that ten guilty persons escape than that one innocent suffer."

If you start thinking that parents "can be" the criminals then you've decided that parents are automatically guilty and must be proved innocent. This goes against the very moral fiber of the entire western world theory of law, the presumption of innocence.
Huquso
Same thing applies to me and my google branded phones (first nexus, now pixel). Just sign in after changing the phone and works like a charm.
I've never heard of that, but the steampunk aesthetic is present in Dishonored, for example, and many other computer games.

Steampunk is alive and well, and (arguably) more alive than ever. There are steampunk conventions, steampunk meetups, steampunk games, steampunk magicians even. This didn't used to be the case. It started as an obscure literary subgenre that few people had heard of. Asking on HN about steampunk 10 years ago would have probably drawn mostly blank looks. Now many people actually know what it is, and even participate.
It's on our list. Hoping to get there soon.
In the 1990s steampunk was just what we called whatever it was that Tim Powers, James Blaylock, and KW Jeter were writing, and now it is costume goggles you can get at the Party City at the local mall.
Yes thank you that’s what I’m talking about.
I d say most of the hurdles are regulatory. Bitcoin has become digital gold - a place to store large amounts as a hedge and nothing more. Cryptocurrency will not take the place of visa payments because there s no insurance, its slow etc. All the uses where cryptocurrency would shine and visa cannot do (e.g. quick anonymous tips for your comment) are illegal. So we re stuck until either the regulatory framework or national currencies fall apart.

> How do we make Bitcoin/crypto easier for normal people to use?

Pay people with bitcoin. This is #1. People don't have a problem figuring out even complex systems if there 's money involved (And that's a good thing)

> Bitcoin volatility makes transaction really hard.

Not sure if that's really an issue if cryptos were being used daily. They are instantly convertible to other cryptos or stablecoins, therefore the volatility would quickly go down if people used them in real life. People would exchange them for the most stable currencies only, because people don't like to see their coins devalued. We see lots of volatility today because most bitcoin big players got them by sheer luck / being there first so they treat it as casino chips; its not "a hard day's work" earnings.