skysight-inc/HackerNews huggingface dataset:
Rust doesn't have copy constructors. By hard rule, any normal (non-Pin) rust struct can be safely moved by doing a memcopy of it's storage to a different, correctly aligned memory location. Structs that are Pin just can't be moved at all. Implementing Copy is just a marker that means that after doing the memcopy, the original can still be safely used.

This rule really helps both the compiler and the programmer to make moving and copying things effortless. It does prevent things like a struct holding internal pointers to it's own state. This is not bad on x86, because you can replace internal pointers with internal offsets, and the instruction set contains a fast reg+reg addressing mode, but can cost an extra instruction on many other cpu architectures. IMHO the rule is well worth it, although it is an example of a situation where Rust chooses to give away a bit of performance for sanity.
> because move leaves the object in an unspecified but valid state

Also and importantly because move() only indicates that the value may be moved from (it's a fancy cast), that doesn't mean it will be moved from. The called function needs to take an rvalue reference (T&&) for a move to possibly happen. That is if you had a

void foo(unique_ptr&& x)

it may or may not move. Likewise you can call move() on things which are not move constructible (or passing the result to functions which don't care) with no ill effects (save to the reader).

IIRC what happens here is that since foo() takes a unique_ptr by value the compiler will insert the construction of a temporary unique_ptr and overload resolution will select the move constructor (since we've provided an rvalue reference, and assuming the wrapped type is move-constructible).

> move leaves the object in an unspecified but valid state

Also notes that this is the general semantics, but specific types can define their exact behaviour here. In particular, unique_ptr specifies that a moved-from unique_ptr is "nulled" (equal to nullptr).
There’s an Automation Crisis Underway, It's Just Mostly Invisible
$20 on AliExpress. https://www.circuits.dk/testing-mh-z19-ndir-co2-sensor-modul...
I am in Austria, in a very modern building, and I believe every second window is blocked, I have never seen where all windows would be blocked.
we need to ban assault dogs, and close the dog-show loophole! :P
Would going through this course (if one can call it that) help me learn linear algebra, or is more of a "Here is a different angle for those who get it" type of thing?
This is exactly how state level actors would and have done this.
It is much different than last time!
Show HN: TerminalSplash – Browse and Submit Windows Terminal Themes
>Over the course of this reanalysis, we detected an error in imputing missing values for the SGRQ, whereby the worst possible score (100) was incorrectly imputed for missing values of participants who had died beyond the 6-month study period. The correct approach would have been to classify those values as missing because those participants had not died by the 6 months after discharge study end point.

The reassignment error is possibly forgivable, but I think this second error should have been easier to catch and is much less easy to forgive. A simple filter check between possible score and some other status variable in the dataset would of caught this mistake. I am doing a Masters in Biostatistics and this kind of checking is being taught to us early on, I hope there is more focus on it later to help avoid mistakes like this.
I don't host anything at home, but I think it still counts as self-hosting if you run an independent service. In that sense, I self-host Mastodon: https://mastodon.social
I think it's time we start to think seriously about noise pollution and regulation. Most countries have laws around noise, but policing typically isn't helpful. You tend to have a 'self-mediation first', 'police warnings second' and 'court cases third', policy, which I think is mostly fine. But if authorities don't take it seriously, it usually gets stuck in the first phase and never progresses beyond neighbour-disputes. Frequent-noise makers aren't typically the most reasonable bunch to speak to.
It is very much worth looking at Photoshop alternatives every so often. Pixelmator Pro is very good.
sometimes it takes 100x more without any apparent reason - it's probably because of memory or something, what takes minute to compile on my MBA, sometimes never finishes on raspi3 (swap is off)

I currently compile on raspi4 and scp the results there to check.
the upvotes show lots of support. you didnt need to get involved or save anybody here.

and what main account are you talking about? its an anon account for a reason. trying to break anonymity will ruin HN
I was watching an 8 Bit Guy video where he was demoing a Classic Mac OS machine running a complex UI, and it was interesting how elegant and obvious it was. I believe it was this: https://youtu.be/tvZ43JqrvXA?t=404
It was made by Ivo Lukacovic, he fully owns Seznam.cz (search, news, TV, email, maps, etc.). It started as his personal project but now it's a startup with about 10 employees.

Also check out the Windy Maps app, which is basically stripped down version of Mapy.cz.
Thanks for a good point! I'll make this more obvious.
HN is not fond of humour or dry wit. But sometimes you just have to post it and suffer the slings and arrows of outrageous down votes.
Hey HN!

I recently have gotten into dev on Windows (and really like it), was looking for a place to find themes for the new Windows Terminal and couldn't find any, so I made this for a fun weekend project

I hope you find it useful!

A little on me:
Self-taught dev. Learnt to code at home building projects, 9 months later I used that portfolio to land a job as a full-stack web dev and I love it!

Follow me on Twitter to see what I'm working on:
https://twitter.com/itslukehero
To be accurate:
Safari has 20% of mobile browser marketshare.
And 5% of desktop browser marketshare.
So globally they are <20%
Yes, I know, and all those crates trying to wrap unsafe C libs are really not free - I've tried.

Maybe just dig into some sources and see what macros are expanded to to see the overhead.
In the Sea, Not All Plastic Lasts Forever: Sunlight Accelerates Decomposition
What in Catalina is worth upgrading to? I don’t see much.
The things is that there are valid reasons for all those features: JS-based redirects are useful for many webapps, blocking text selection can be useful for some buttons and such, many people do use custom app-specific key mappings, overriding right-click is useful for many apps (e.g. Google docs), etc. etc.

Of course, all those features can also be abused, but that doesn't mean it's a good idea to try and second-guess website authors; that just makes things much much more complicated for everyone.

Any feature can be abused in any platform, and as the web has moved towards an "application platform" – instead of just a document viewing platform – there are many more features with potential for abuse, but it also becomes much more important that behaviour is consistent and predictable.

I'm most definitely not on the "the specification is holy"-side of things, but from what I read in this issue the Chrome team seems surprising tone-deaf to concerns about Chrome's behaviour here. This is general patterns I see with Chrome, which confuses "it works for the majority of cases/users" with "it works well". These are simply not the same things.
No it is not. "Rak" is both cancer and crayfish in Polish.
The comments pointlessly feteshize this accident investigation, but Air Moorea (and Chalk's Airlines) were both really the result of carrying passengers in worn-out airplanes.

Besides control cables, corrosion, fatigue, worn seat tracks and unavailable parts are also issues in these dinosaurs.

https://en.wikipedia.org/wiki/Chalk%27s_International_Airlin...
That's an interesting hack as autocomplete=new-password will generally disable autocomplete.

Though it may not work every time, as browsers & password managers might also suggest new passwords (following whatever their internal generation rules are).
Rust really doesn't do ("read the docs and don't screw up").

It's a very much a "bondage and discipline"-style language in the sense that unless you explicitly use "unsafe", you have to prove to the compiler that everything you do is safe. Moving large things is not unsafe because after you move something to a different scope, the original doesn't exist anymore and can't be used, so if you were to accidentally move something and tried to use it again, the compiler would helpfully tell you that the thing you're trying to refer to isn't there anymore.

There is no warning on every time you pass something without copy because passing things to different scopes is extremely common, normal and desired.
RocketChip would be the obvious choice. You can run it (somewhat slowly) on an FPGA.

https://github.com/chipsalliance/rocket-chip
Update your beliefs..
Microsoft is now a major contributor to chromium.
As it says right on the URL, that CVE is from 2003, not 2019, and it doesn't affect any Windows version past XP.
MDN literally mentions jquery.disableAutoFill which basically does that for you under the cover (scrambling the name on display, and unscrambling on submission).
It's the same meaning but I would prefer "just follow the specification an let developer decide what they want"
I self host a flask app on my raspberry pi, soldered to the garage door opener.

I have hosted media folders/streaming applications for friends and family, but this has been by far my most used and most useful hack.
It’s soul destroying, I’ve worked on contracts where it took 3 weeks just to get an account before I could start work. I hated it.
https://www.svd.se/sara-sprangdes-sonder-av-en-turkisk-grana...
Then only ignore autocomplete=off for forms that have password fields.

Sure, stupid devs can still work around that too, but so can they work around the current ingore-always behavior.
Is there any way for a founder to turn the acquisition/liquidity event into a half decent moment for employees of the startup?
The OWASP Top 10 is intended as an awareness tool to help raise visibility of web app. security issues.

I'd agree with the article that it gets misused (a lot) as some kind of checklist that, if you apply, you can have a "secure" application.

Ironically OWASP has several other great projects that are designed to provide methodologies to improve application security like ASVS https://www.owasp.org/index.php/Category:OWASP_Application_S... and at a more organizational level, OWASP SAMM https://owaspsamm.org/ .

Where I do feel some frustration with this article is where , to me, it feels like it's suggesting that "shift left security" (the idea that security activities should take place earlier in the development lifecycle) is any any way a new concept.

The idea of doing more application security work early in the development process has been around at least 20 years and probably more.

Instead of having new buzzwords for it, to try and make it more attractive, I'd be much more interested in a study of why after all this time it's still not uncommon to see a first security touchpoint for a project be a penetration test done 2 weeks before go-live.
Probably not much less. Physics is physics. I'd be super sceptical of any claim about efficiency of something like running being much different from person to person (happy to see any quality research that proves my scepticism to be unfounded though). People like this are just monstrously fit compared to your average person, they still have the same thermodynamic considerations.
Ryanair claims to be the only European airline that doesn't overbook. Probably they can get away with this as changing your flight costs more than a ticket in the first place
An intelligence agency put an ad in for a "break-in specialist." The ad promised a very diverse line of work, for a tidy guy who knows how to "cover his tracks." If agencies are putting "ads in the paper" to hire such guys, I don't think it's unreasonable to claim that they also have guys who can covertly plant a chip.
“Once is happenstance. Twice is coincidence. Three times is enemy action”
I have a c.2016 Intel development machine. I never log in at the console or use any GUI, it runs command line only Fedora Linux and apart from that it only ever runs code that I myself have written. Because I use it for compiling and testing I need it to run as fast as possible.

Over the past few years it has really slowed down. I got some (not nearly all) of the performance back by using some of the command line options shown here. I'm going to try the whole command line later today and do some actual before and after testing.

But IMO this is the kind of situation where turning off the mitigations makes sense.
Its the parent who is clearly marketing different product in multiple comments around the thread. I was just annoyed that i had to read thrid comment about how great differend product is
The problems are 1) side channels. Caching those would mean that a malicious script could use timing to find out if the user accessed specific other websites. Also it enables a channel for cross-domain communication. 2) malicious user tracking would not work as well anymore, which would be good but Google probably will not support that. Currently they get all those nice http log entries from sites that only include fonts etc.
MacPaw apps, at least CleanMyMac and Gemini 2 are very nicely done, and useful to boot.

Softorinos app WALTR 2 is in the same vein, looks nice and very useful.

DaisyDisk is amazing as well.

---

From what I've noticed, they seems to have some overlap and they often do cross promotions. I actually think their advertisement verge on spam sometimes, but I still love their apps.

Something else I noticed is that all of these seem to be run by eastern European people. I am curious if there is some niche/stereotype to be found in making high quality apps from those countries.
[citation needed]

They are now a major user of chromium, and may contribute, but they do not have any say in what goes into chromium. That is still controlled by google employees. If said google employees do not like microsoft patches, they will reject the proposed changes, and microsoft can then at best push them into their own fork.
Sometimes I feel like the headlines to the stories on HN are made procedurally using AI and then an article is created to back up the story. I'd have no way to know the truth.
Actually, using clear Linux is THE way to have the fastest Linux.
Yes, but I have the impression a lot of people who never came into contact with some kind of audio/hearing theory have no clue about that, so I think it is better to write it explicitly. Mainly because people who don't know what SPL means can just go and look it up, also learning comething, instead of remaining clueless and using dB as-is treating it as some absolute quantity.
It’s only cheaper if you compare it to the high end Cooper. It’s an exercise in positioning for BMW.
And you are assuming web devs could configure their servers properly. Anyway, it all boils down to the mentality of lowest common denominator: using that workaround, nobody has any incentive to fix their proxy.
Yep. In our case typically stuff that is important enough to take time out for, and which we evaluate (in a couple of different ways - survey sampling, outcomes, etc) aren’t being structurally addressed in the quotidian team knowledge and craft sharing that occurs doing the job itself.
We were so afraid you would kill our children,
We dug us a cave that was seven foot deep,
Carried our young ones and pregnant women
Down inside the cave to sleep.
You were heavily criticized because you said nonsense. Cancer research also relies on millions of lines of code but you would not say the same, would you? The science of climate change goes well beyond the models. The models account for only a small fraction of the science and they are produced completely independently by many research groups, leading to overlapping results.
I have no suggestions for you
> To be fair parental income is the best indicator of child income and those things you list are proxies for parental income.

Intelligence predicts scholastic achievement irrespective of SES factors: Evidence from Brazil

https://s3.amazonaws.com/academia.edu.documents/45855748/j.i...

This study explores whether or not intelligence tests' scores predict individual differences in scholastic achievement irrespective of SES factors such parents' income and education. The variables of interest are analyzed considering three independent samples of participants comprising a total of 641 children. The participants belonged to a Brazilian School characterized by broad and representative ranges in intelligence, scholastic achievement, and SES factors. The results indicate that SES factors do not predict children differences in scholastic achievement, whereas children's intelligence tests' scores predict their scholastic differences. These results underscore personal intelligence as a genuine predictor of individual differences in scholastic achievement.
If you want to be malicious and capture wrong auto fill data, wouldn't a simple AJAX request on change be enough to capture sensitive data before the user gets a chance to correct it?
I think the fact that fake components regularly make their way into the supply chain should be more of a concern than the supermicro story.

So, supply chain security is poor, and getting backdoored parts into the supply chain is a realistic possibility. Bunnie has a good recent talk on this.

https://www.bunniestudios.com/blog/?p=5519

The question in my mind, is is it worth the risk of detection. Particularly when other methods are less traceable, more easily deniable.
I haven't tried it, but maybe div with "contenteditable" could help?
Games have necessarily become more and more parallelised (whether through multithreading or multiprocessing) over the last decade, as even consoles are multi-core these days.

Both XB1 and PS4 have 8 cores (2xJaguar modules). Both also reserve one of the core exclusively for the system, so a single-threaded game would only leverage 14% of available CPU compute power.

The Switch is somewhat similar through to a lower extent: it effectively uses a quad-core ARM, with one of the core reserved to the system leaving 3 to game developers.
Gibson Research’s InSpectre utility will allow you to do the same thing on Windows.

https://www.grc.com/inspectre.htm
I don't know about the paralysis but I once read an internet fact that stated our brains are innately wired to react to babies and children's screams in order to ward off potential threats to our retirement plans.
Similar thing at my last job. Some internal webapp that was communicating with a bunch of other services. Whenever you edited the connection to such a backend you'd get a bunch of settings to change, as well as - depending on the backend type - credentials to talk to that other service. So if you were saving your credentials to that web app, whenever you edited such a backend connection, it would overwrite the username and password field in that settings page with your credentials for the web app itself. Even though the fields were pre-filled with the current values in the html the server sent you, chrome just went ahead and replaced them on page load. It happened more than once someone accidentally saved the settings and replaced the actual credentials for the backend with their login credentials for the webapp. So anyone accessing that edit page afterwards could steal their coworkers password.

So at some point a colleague went ahead, found the template and added a fake username and password field at the very beginning of the form that had something like "position: absolute; top: -2000" (after an hour of failed attempts with the autofill attribute and using hidden fields and whatnot).

So yes, f*ck those Google devs on their high horse.
When was that? I started using Linux in mid 90's and never recall a useful installation of that size. Single floppy rescue disc distros did not have room for C compiler and standard development libs IIRC.
This may be the best way to get a negative result published:
as a retraction of the published reversed-positive findings!
I’m not sure that is the case, BMW have had eight consecutive years of growth. If they are suffering at all at the moment it is probably down to weak demand in China as much as anything.

https://www.best-selling-cars.com/brands/2018-global-bmw-min...
An infinite number, in theory. Even (sign n d) does, since you can have anything in d.
It's not only talking about money. According to this classical experiment [1] it reduces productivity even while solving problems, because the prospect of a reward occupies some of your brain's problem solving capacity constantly.

[1] Sorry this was the first link that came up in Google: http://thepsychreport.com/books/how-incentives-hinder-innova...
>> Peek read by scanning the left page with his left eye, then the right page with his right eye. According to an article in The Times newspaper, he could accurately recall the contents of at least 12,000 books.[6]

These are pretty extraordinary claims and I'm curious to know whether they were ever tested in controlled conditions.

For example, how does one verify the recollection of the contents of "at least" 12,000 books? Was there an experiment performed, where he was asked questions about a sufficiently large, randomly chosen, sample of those 12,000 books?

I understand that Tim Peek made a living out of his mnemonic abilities and I think, in that context, skepticism is justified.
No, Gentoo is. https://bugs.gentoo.org/74072#c1
The URL title is much better: rockefellers-hired-militias-to-shoot-at-strikers-in-ludlow-massacre-115ae488164c
Google rejecting Microsoft changes has not yet been observed, it could happen.

Most people think that Google agenda could conflict with Microsoft agendas.
I have read a LOT of chromium issues.
I can tell you that the higher management at Google does not dictate chromium changes as they are too technical for them.
The truth is, except for maybe a few exceptions, chromium evolve through the decisions of engineers that want to create the best possible product.
They are not different to Firefox or edge engineers.
Thus they should collaborate pretty well and a Google and Microsoft team should not have more "conflicts" than between two Google internal teams.
As you said for the exceptions, Microsoft can maintain a fork, it's still order of magnitude more economic and smart than to constantly duplicate work in a redundant browser (firefox)

You can see a list of their merged pull requests here:
https://chromium-review.googlesource.com/q/author:*.microsof...

BTW I really wonder when Apple will switch back to chromium.
Intel NUC7i5BNK with coreos running the following in a single node docker swarm:

- Traefik (reverse proxy)
- Git Annex
- Gitea
- Drone (CI)
- Docker Registry
- Clair (security scanning for docker images)
- Selfoss (RSS reader)
- Grafana / Prometheus / Alertmanager (overkill really)
- A few custom applications...

Turris Omnia running transmission under lxc
Haven't browsers already done changes to combat that?
>
Comment 66 by battre@google.com on Tue, Oct 8, 2019, 3:48 AM CDT (5 days ago)
- Overall, I still believe that neither of the extreme strategies ("always honor autocomplete=off" and "never honor autocomplete=off") are good

https://bugs.chromium.org/p/chromium/issues/detail?id=914451...

We're in for the Long haul on this one.
Never heard of OWASP before

Do programmers really follow it? Is it a status quo for companies to make sure their software follow OWASP top 10 like a checklist?
I’m honestly surprised that they couldn’t just name Rockefeller in this headline.
Same with SAP.
Thanks, ordered and will try it out.
Chrome explains in their security FAQ [0] why they don't adhere to autocomplete=off for password fields.

They could still follow it for other fields.

0: https://chromium.googlesource.com/chromium/src/+/master/docs...
I like the sarcastic tone it's written in. Wonder if makes enough difference to notice?