skysight-inc/HackerNews huggingface dataset:
First thing I'd do is go through the Getting Started guide on the main page: https://elixir-lang.org/getting-started/introduction.html to get a feel for Elixir. For setting up an Elixir environment, I'd use ASDF - this guide is good: https://gist.github.com/rubencaro/6a28138a40e629b06470 - but the getting started guide's instructions will work too. The easiest editor for Elixir is probably VSCode with the ElixirLS extension.

After tinkering around in IEX and doing the Getting Started Guide, I'd do Dave Thomas's course (https://codestool.coding-gnome.com/courses/elixir-for-progra...) and read Elixir in Action by Sasa Juric. Dave Thomas's course will get you through the basics of the language and the important concepts step by step. Elixir in Action will go further into the concurrency model that makes Elixir unique.

Finally if you want to build a web app I'd go through the Phoenix Guides: https://hexdocs.pm/phoenix/overview.html#content . Those guides will give you a good example of what a real Elixir/Phoenix Web Application looks like using a database with pooling and request concurrency out of the box. The Programming Phoenix book will take that further (https://pragprog.com/book/phoenix14/programming-phoenix-1-4).

If you want more practice writing functions and algorithms I'd recommend Exercism's Elixir track: https://exercism.io/tracks/elixir or Project Euler (https://projecteuler.net).
My vote to rename it DuplOS lol
So on the YAML DoS one (CVE-2019-11253) it breaks down like this.

If you're using an unpatched version, anyone who can POST YAML to the Kubernetes API server can chew a fairly large amount of CPU/RAM. How badly this effects you, depends on a couple of factors.

1. Is your cluster exposed to the Internet? There's ~240,000 API servers on the Internet, so this isn't that uncommon.

2. Do you have `--anonymous-auth=true` on the API server? Again not that uncommon a config. If you're using a managed distribution, ask your provider...

3. Do unauthenticated users have access to an endpoint that allows for YAML to be posted? This is more likely in clusters at <= v1.13, but is possible theoretically at any version.

The underlying issue is in the Go YAML library, and has now been patched (if you're using it to process untrusted YAML, do upgrade to the latest version :) )

Interestingly the underlying issue is in the YAML spec, which doesn't mandate a limit on entity expansion...
Ubuntu 19.10
It's not like the student can re-create the art if they destroy it.
The text of the speech is available here: https://newsroom.fb.com/news/2019/10/mark-zuckerberg-stands-...

It's too long to paste here. I found it interesting to read, though. You don't have to be logged into Facebook to read it.
Security Related Interview Questions for All Engineers
The point the comic is trying to make (from the satirist's perspective, not the fictional Kelly's perspective) is that both of the depicted scenarios only exist in the flawed perspective of highly-priviledged people who don't have to think about racial issues on a regular basis. When interpreting this comic, keep in mind that it is being told from the perspective of the fictional character of Kelly who is very white, very middle-aged[1], and moderately conservative (in the sense that Kelly is vaguely patriotic and doesn't like changes to the status quo that do not directly benefit him -- as far as I can tell Kelly has no coherent politics beyond this).

The first panel depicts Kelly's perception of race in America in his everyday life: people of different races exist (as horrific outdated stereotypes) but there is absolutely no tensions between them. The second panel depicts Kelly's perception of what it feels like to him when racial tensions are discussed. Kelly, like most white people in America, experiences "white fragility"[2] when race is discussed. Because white people have usually not been regularly exposed to racial issues discussions of such create mental stress which can feel like a personal attack on them which Kelly depicts as a general riot. To white people, the easiest way to alleviate this stress is to shut down the discussion altogether and return themselves to the ignorance depicted in the first panel.

[1] https://i.imgur.com/vIHrvlg.jpg

[2] https://www.newyorker.com/books/page-turner/a-sociologist-ex...
I don't know anything about the current goings on, but I read Wingo's blog for his fascinating technical insights. He has written some controversial things on hiring and collaboration that I do not agree with but do find helpful to understand what he's writing here about RMS:

https://wingolog.org/archives/2017/09/04/the-hardest-thing-a...

https://wingolog.org/archives/2017/09/05/a-new-interview-que...

Edit: The important takeaway for me is that he regards a host of project-unrelated views, including pro-free-speech views, as disqualifying.
Do you have a more concrete example? So far as I can see there is no reason why functional programming would require a parent component to know anything about how its child components interact with the state. The tight coupling you are describing sounds completely foreign to me as a Haskell programmer.
Yes, SwiftUI diagnostics in particular are going to benefit from these changes.
Tesla stock held by Elon Musk is most definitely illiquid for some rather reasonable interpretations of that word. As the CEO he can't just sell whenever he wants.
These are fair points, but I would say that even though it's not the JVM, BEAM is an impressive piece of engineering with a significant amount of dev-years in it.
Record all conversations using a device on your person and process them later

Processing and extracting multiple conversations at different levels from a single audio source automatically would be a great project to attack with some quite simple sound engineering tools and speech recognition ML.
These rights are strikingly similar to the ones outlined in GDPR.
Brilliant. Haskell was standing outside the door not until it was good enoguh to be an industry standard, but until industry standards dropped so low that it became competitive!
That would be my first idea for a new name. With that project being last updated in 2004, I'm sure they would be fine.
Where's this quote come from?
I wonder how many laws/rules there are, that made sense long time ago but not anymore, or those that never made sense to begin with.
Previous discussion from a year ago https://news.ycombinator.com/item?id=18488292
> File systems on macOS are case insensitive.

Not all of them. You can choose to have a case-sensitive filesystem if you’d like.
FWIW, regarding correct usage: the dictionary on my computer (Oxford American English) lists both meanings of biweekly and does not put either meaning forward as more correct. It even has a whole entry on the ambiguity of the 'bi' prefix.
How long before pharmaceutial companies tell you that you have a "miniprotein imbalance"
The 5 Most Common Pitfalls To Avoid When Making Decisions
William McRaven: Our Republic Is Under Attack from the President
That was a bit unnecessary hostile.

The idea that communication between resolver and authoritative servers should be encrypted is not a new concept. People have been discussing and talking about it for, I would like to say decades. What it does not have is an opportunity for data collection and there is not multiple companies competing to become the central location for dns query data. There is no default setting which a company might pay a significant sum for. Like DNSSEC there is also very little to be gained by authoritative DNS server providers in return for any added complexity. Since I work in this industry I can with fair confidence say that for most registrars the added risk and complexity is the primary reason why security technology in the DNS space is not moving like it does in other areas.

It used to be the same thing for email servers but googles attitude more or less changed that. If you do not support TLS then google is more likely to mark your email as spam. The cost of installing TLS is significant smaller than the cost of users email getting flagged as spam, so within a very short time window most email providers suddenly started to support TLS. Getting people to care about security is often a simple matter between risk and cost, a fact often brought up by Bruce Schneier.

> Does TOFU make sense

There is many potential schemes but one of the more simpler one would be to use DNSSEC and hardcode the certificates of the root servers (Authoritive server programs already hardcode some information about root servers as they rarely change). About 1398 of 1527 TLDs have signed zone in dnssec and it would cover most lookup. In theory there is nothing to prevent the root server from simply publishing TLS keys next to the NS records, with registries doing the same. Looking at how communication between email servers became TLS protected, they did not resolve all those questions and yet we went from all plaintext to almost all encrypted in a few years.

As side note, let me give one example of a business concept. When you buy a domain there is usually a way to get analytics of how the domain get queried. Information like how often and from where which helps the domain owner get a perspective of how their domain get used. Let now say 80% of the traffic get routed through cloudflare. 80% of the logs are now gone. That is sad but you can buy it back If you move your DNS to cloudflare which will happy provide analytic for your domain. All Pro, Business and Enterprise plan customers will even get additional geographical information.
Paying the ransom doesn't cover the need to spend money on fixing the problems. Having a ransom payer mark on the organization raises the security requirement, doesn't it?
For key servers, we've been known to clone the entire drive and put the clone in service.

This helped us with several problems:

Backup system didn't record the permissions.

Backup didn't get 'resource forks' or 'alternate data streams'

Backup wasn't complete enough to satisfy copy protection for software that was no longer supported.

Backup process didn't see deep into the folder because there was a hardlink/symlink loop that caused it to stop

Backup didn't get a coherent copy of a bunch of files that was acting like a database

Drive had a CRC error that let it keep running but stopped the backup system from reading the file

Windows program stored vale in the case of the file name while the Unix backup command assumed it could squish the Windows files to lowercase.
Chromium in Ubuntu – deb to snap transition
Worn Out EMMC Chips Are Crippling Older Teslas
One more reason for me to prefer GIMP over Photoshop.

I still won't convince my friends running old pirated copies, but still...
I wonder if statcounter is getting tracking information from Firefox users when Firefox ships with content blocking to protect privacy. I think it's on my by default now.
Manifold: Uber's model-agnostic visual debugging tool for machine learning
I bet this has been discussed internally, but nobody cares because they don’t care about UX enough. They don’t understand the impact. The internal organization is fractured into fiefdoms defending internal services (e.g. deployment, AMP) and defending layers (e.g. SRE department), with nobody left responsible for the complete, vertically integrated user experience.

To me, this is a simpler explanation than malice.
Call it whatever you want: The extent to which SecuROM was harmful doesn't influence how we should judge Google's DRM. So why bring it up?
Echo's listen for their wake word, which is done on device and offline. It detects the wake word, and then connects to the internet. It is not actively transmitting in the background.

If you have proof of echo devices not doing this, you need to yield a source. Wireshark logs, anything.
CppCon 2019: Chandler Carruth, Titus Winters “What Is C++”
This is simply pandering by the CEO to placate possible investigations by a conservative administration.

That doesn't really make sense, since the current issue at stake is some pro-Trump ads, which Facebook allowed and CNN did not. This speech is more like Zuckerberg defending this action as neutral, while the NYT and Elizabeth Warren are attacking it as unfairly supporting Trump.
> What am I missing by not having internet connected stuff?

I'd say that's a question that can be asked of anything that's Internet-connected. Phones, watches, TVs, cars, etc. They probably all create a level of convenience, typically at some cost Like all costs it's up to each person to make a decision whether that cost is too great - usually these questions are really veiled value judgments on others' cost/benefit analyses.
You need more pronouns
> I use Mac OS X (pron: “ten”).

To be extra pedantic: unless you’re running an eight-year-old OS, you are likely running either OS X or macOS.
How The New York Times Is Experimenting with Recommendation Algorithms
Simulating the micro-environment is the tricky part. Humans go great distances and interact a lot with the world, and that, plus time, is what aging is, isn't it?
Can you simulate all the different ways DNA can mutate?
A friend works in the city of London, he told me taxi drivers always have details about business deals that aren't yet public for the very same reason.
Building a Crypto Kill Switch
It's great for discovering new products. It would be nice to have amazon links to actual products right next to the reviews.
It would also enable you to monetize your site with affiliate money.
Yeah agreed. It's almost certainly some code that needs to change from this:

testResult = TestFingerprint(fingerprint);
if(testResult)
return UNLOCK_OK;
else
return UNLOCK_FAIL;

to this:

testResult = TestFingerprint(fingerprint);
if(testResult == RESULT_OK)
return UNLOCK_OK;
else
return UNLOCK_FAIL;
Sounds like you might be dealing with a particular implementation quirk, or perhaps with SSH or some other network transport issue. In general terminal emulators tend to implement control character processing with a state machine:

https://vt100.net/emu/dec_ansi_parser

In theory that shouldn't be affected by latency or delay in processing characters or groups of characters, and should be independent of the line speed, after all, the VT100 was able to operate at speeds between 50bits/second and 19,200 bits/second.

https://en.wikipedia.org/wiki/VT100

That said, there are so many terminal emulators out there
(xterm, gnome-terminal, linux console, just to name a few) and so many potential transport protocols (telnet, SSH, serial etc) and modern pty layers to deal with as well, so there are bound to be differences/quirks with different combinations.
Sounds like what many people (perhaps your wife is one of them) subconsciously prefer and tend to, which as I've been informed on HN before (I am one of them, I'm aware I have such a preference but it's not consciously deliberate) is Zen's 'command position'.

I believe it came up before in the context of office desk arrangements. In office or restaurant, wherever, I find it very uncomfortable to have things going on behind me.
> You’re free to disagree of course and you’re free to entrust all sorts of strangers to make all sorts of decisions in your life, just don’t expect others to do the same.

You already do though. You're just entrusting a different set of un-elected un-accountable strangers with no economics degrees with your monetary policy -- the Bitcoin Core team. And the PRC where over 50% of the hash power is located. They could change the number of Bitcoin on issue, the rate, the block reward rate, anything, with zero recourse on your part. Your government is accountable to you, the core team, to themselves.

If you tell me they wont then you're trusting them not to unless you can point to a math equation preventing them, I guess.

You're describing a libertarian pipedream that can't exist.
ExpandTheEdge: Making Twitter Faster
There are some obvious problems. While we can argue about whether Dijkstra is efficient, the real problem is it's unnecessary. The queue can, and should, be fully defined, not dynamic. There is no reason to let each individual actor search for the best location to go. If we are looking for an optimal solution, then there is no need for individual decision making.

Consider: Imagine every parallel queue, but with a "gap" every 3 people to allow others to pass by. In real life, humans wouldn't walk all the way around the queue, they'd find someone who would step momentarily aside to let them pass. Representing this by forcing the individual queues to not be fully solid would allow that behavior to be represented.

Anyway, this work doesn't even get to some of the more interesting aspects of buffet design, like handling multiple tables, popular items, correlated items, etc.
How does OCaml prevent you from deploying working code that you didn't want to run?
The Impact of Brexit on CISOs
As long as the fed buys the crap out of the mid dated treasuries the curve will not be inverted.
I can't remember the name of the company but this sounds like a level down from what a "hosting" provider was working on with Eve Online to demo dynamically provisioning compute for the universe in blocks whose size adapts to the population.
HN is public forum, a phone is not, but yes they could share my IP, browser etc, if they do store it somewhere it will be leaked anyway. Always assume that.

We do actually know that a lot of Android phones leak user data, especially ones owned by Chinese companies.

And yes, tech companies lie all the time. (also governments)
The problem was subtle -- some part of a program was writing to a memory location it shouldn't be, making random memory locations 0.

We had a custom moving GC. Fixing the bug involved changing the GC so, we used mmap to map an anonymous buffer storing the GCed objects into many memory locations, and each time a memory block was allocated:

1) Choose a random copy of the memory.

2) Mark all the other blocks as neither readable or writable.

3) Make all references to GC memory we were currently tracking point to that block.

This meant anyone who was keeping a pointer to GCed memory we had lost track of would point to a now protected block of memory, and as soon as they tried to read or write through it would cause a segfault.

This made the program run slower.. so much slower the startup, which used to be about 3 seconds was now about 6 hours. However, it found the bug (and a whole bunch of other GC bugs as well).
Were escape rooms even a thing pre-Facebook? They seem like a distinctly 21st century business to me.
”This would be Voyager 1 Computer Command System turned on in July, 1977”

Is that correct? Voyager 2 launched before Voyager 1 (August 20 versus September 5, 1977. The numbering was chosen because Voyager 2 overtook Voyager 1), so it might have been switched on earlier, too.

Also (https://history.nasa.gov/computers/Ch6-2.html):

”Although both CCSs are always powered, rarely are both Flight Data Systems running, and both attitude control computers are never turned on at the same time.”

Can these systems be powered, but not running? https://www.allaboutcircuits.com/news/voyager-mission-annive... leaves that option open:

”The CCS typically remained on at all times, but the FDS would usually only operate one at a time, and the AACS would only ever operate one at a time. The idea was that regular dormancy of computer systems not actively in use would help maintain the lifespan of the systems.”
The problem with FB and all other platforms is they are replacing the market with their own algorithms to maximize advertising revenue.

Social media is a better platform for political ideas than newspapers or television. Every newspaper and TV channel ends up slanted towards one side of the other. The NYT goes for the Democrats, Fox News goes for the Republicans.

But social media is whatever you make of it. You can get either Democratic or Republican viewpoints from Facebook or Twitter.
I don't like /r/programming either but some of the smaller programming subs are ok.

For example /r/cpp has moderators from the actual C++ standards committee.

In general I wish there's a better way to stalk where these experts hang out. For example at one point /r/machinelearning was pretty good but then the famous researchers left and it's hard to track the diaspora (I think those discussions ended up moving to twitter)
Baltimore (like many cities) is run by crooks and morons. They are a shining example of ineptitude and failure in all things.
Not getting vasectomy sooner!
California has banned political deep fakes
Ada/SPARK is underrepresented as well. Correctness? You most definitely got it. Performance? Yep. Easy-to-use language constructs for concurrency? Yep. And so on and so on.
Do you think that Al Capone was imprisoned for making an honest mistake on his tax return after receiving conflicting advice from two accountants?
> The $ operator is definitely confusing in Haskell

I generally think of it as a sort of open-ended parentheses that encloses the rest of the line. Instead of a backward pipe. It means "evaluate everything after this character first then apply the preceding function to it" just like parentheses would.

print $ even $ 4 * 2

is equivalent to

print ( even ( 4 * 2 ))
Wow CIA agents are actually just swell folks who have all of our best interests at heart. I feel a lot better about all those third-nation torture dungeons now.

Earlier this year NPR hired as CEO the guy who previously ran the USA organization for external propaganda. It's so surprising that NPR are even more committed to internal propaganda than they were before they hired him.
OOP is nothing like a Turing Machine.
That’s an interesting opinion.

In the spirit of Hacker News, would you mind expanding on why you believe that to be the case?

We’re generally concerned with comments being progressively more detailed as the discussion gets progressively more decisive.
Also true for the Caltrain, coffee shops, and nicer restaurants between SF and SJ. And SFO, SJC, and SEA airports; I think I hear some salesman loudly talking about a deal almost every time I fly out of those places on weekdays.
- Removing Linux NULL pointer check: https://blog.regehr.org/archives/970

- Time traveling undefined behavior: hhttps://devblogs.microsoft.com/oldnewthing/20140627-00/?p=63...

- bool that is both true and false: https://markshroyer.com/2012/06/c-both-true-and-false/

- Turning finite loops into infinite one: https://stackoverflow.com/questions/24296571/why-does-this-l...

From: https://twitter.com/shafikyaghmour/status/114602835166622925...
> Pay people

This seems like an unnecessary step for the intelligence apparatus
Ask HN: Have you worked with EDI software?
Does anyone here work with EDI [0] and/or have experience setting up an EDI server for a physical goods business? I'd like to understand more and see if it's worth implementing for our business. I have not been able to find good resources on EDI online from a developer perspective.

[0] https://en.wikipedia.org/wiki/Electronic_data_interchange
How do blockchains help you "enforce" restrictions on downstream uses of personal data?
I recall once reading a bug-report thread of how null-check elisions caused a vulnerability in a big piece of software.
I've tried to find it often, because it would be nice to reference in response to your kind of question.

I'm afraid that more than an hour of searching hasn't turned anything up. I think it was a Firefox bug, but given my fruitless search, that seems suspect.

Here's to hoping someone else happens to know what I am talking about and shares a link.
It’s not the latest OS. Apple updated iOS 9 and 10. The latest version was iOS 12 at the time.

https://appleinsider.com/articles/19/07/22/apple-issues-ios-...