skysight-inc/HackerNews huggingface dataset:
Yes, I think the problem is in way the current web ecosystem is evolving. People notice shortcomings of current browsers, they create frameworks that add the needed functionality (usually in a really hacky way that adds a lot of complexity and creates new problems), browsers acknowledge the potential feature (... wait 5-10 years...) feature is implemented, said framework becomes redundant and everyone now has to learn a shiny new framework.

The saddest part is that the shortcoming that the initial framework tries to solve is, most of the times, insignificant compared to the complexity that the framework is adding.

The truth is that we are all just "play-testers". We keep mocking new browser features, put them in the real world, test them, and then browsers can easily decide what features really provide value and should be implemented.

The real problem is that this is a never-ending cycle. We started to like this creation of new features so much that we never really focus on what we have and try to make the most out of it. We keep adding bloat to fix imaginary problems, when we already have all the tools that we need. I am not referring to new functionality, such as Web Payments or OffscreenCanvas, but to frameworks that try to mimic what the browsers are doing and just do it in a slightly better way.
Thanks a lot for taking the time to write this up, it really makes a difference.
> I don't really understand why the complexity of building websites is growing instead of going down.

People are doing things with websites they never did before. Office applictions, games, native-like UIs, real-time messaging, analytics and dashboarding, programming.

Good or bad, websites today have different interactions, behaviors, and development costs than 10 years ago. It sneaks up on you but if you see screenshots or use an old website you will immediately notice the difference.

> but while doing so we are creating hundreds of problems that never existed before.

Such is innovation.

> Tens of years of "evolution" and we just keep making everything slower and more complex for no reason, apart from being bored or wanting to be trendy.

Try making a website good enough that people will actually pay for it.

You may find your opinion changes.
uMatrix won't even let me open the link, which I don't consider a loss.
Thanks, I appreciate the thorough explanation. I agree that the "expected value" idea is an interesting one and I see how when viewed through that prism that the language I used and that linked source used can be seen as biased and more likely to incite a more partisan response.

Although I am still not sure I agree with the general guideline of not bringing up something like that incident as I believe it was on topic to both the post and the comment I replied to. My comment might have been the one to inspire a flamewar type response, but it wasn't the only comment that mentioned that incident in general. That said, I will try to be more mindful of that in the future.
Show HN: Curated List of Windows Utilities
Strangers already have access to all my data; I use Gmail [0] for most of my important personal emailing, metadata like website browsing habits is already snoop-able. iMessages might be secure, but there isn't anything substantial there that can't be dug up elsewhere.

If this guy was relying on any password to protect his phone from physical access then he is in for a nasty shock - whatever his password was, his adversaries would know it after this video. That fact that it was 111111 doesn't actually change anything.

He's in the US government. If he is up to something and he has enemies; it will get leaked. If he doesn't have enemies the lack of security isn't so terrible. His work is supposed to all be in the public eye anyway.

[0] https://nakedsecurity.sophos.com/2018/09/06/ungagged-google-...
I think we're at least one CS breakthrough away, and how do you put a timeline on that?

Kinda like how speech recognition was just almost there for decades until modern ML made it actually as good as a human being.
So, it's kind of like the fortune cookie thing, where people actually living in China have no clue what Americans are talking about?
why would you visit Reddit from a mobile browser? can I tell you about these things called "apps"?
A few hours after posting this I received another email, saying that per my request the account is being removed. I can see it removed now; I guess that's the reason the ticket is no longer there. Happy to see it resolved.
They should hire Alex Stamos
I doubt there's a material difference in well-testedness in hardware from the 70s/80s vs hardware from, say, the early 00s. Certainly, don't incorporate brand new off-the-shelf commercial hardware designed in 2019 for such a task, but a 15-20 year lag should give you similar (if not better) reliability than a 30-40 year lag.
There's also a book based on this quote by the legendary Terry Pratchett:

https://en.wikipedia.org/wiki/Interesting_Times
I don't think you are correct. The host does not give you any useful information by opening a goat door. Opening a goat door only serves to confuse you into not realizing that the switch-choice is actually between one of the doors and a grouping of the remaining two doors. Opening a goat door in the grouping of the other two only changes the groups appearance, making it look like the single door that you picked. It does not change the functional state of that group in terms of its probability of containing a car.
The key was... did Marilyn vos Savant state in her version of the problem that the host always uses an algorithm to open a door with a goat? (The alternative was that the host randomly picked a door, and this one time it happened to be a goat.) I read some of her articles on this topic, and my opinion was that in some of her articles, she did not state what the host's algorithm was.

So, yes, even a person with the world's highest IQ can make a mistake.
Thanks for posting this. It looks like some really great tooling. I tried fuzzing the Argon2 library a while ago and very quickly hit some of the issues you appear to have addressed.
At first glance I am kinda ok with this. I mean, as long as a citizen / criminal is allowed to encrypt anything and everything and take any step they want to to protect their communication / devices, I kinda think the police should be able to do anything they can to get evidence. As long as they get a proper warrant and the crime suspected is grave enough of course. I might be missing something and is up to change my mind on this though. As long as they aren't arguing for something stupid like a backdoor or making encryption illegal or something.
I will check it out, also that analysis about producers interfering after a couple good seasons sounds like 95% of nat geo or discovery channel shows, hah.
This is not something I have ever heard of; in the US in the early 1980s we shared software at user group meetings and in BBSes.
Thanks for checking it out! Apologies for not striking the right balance of brevity while also being informative for you. I'm trying to improve there.

All the sensitive data is encrypted at rest using a key/passphrase determined by the user. Passbox doesn't store it and can't assist if it's lost/forgot.

That key would need to be shared with your trusted users and they would need to create their own Passbox accounts. Only folks you assign to your account (via email) can request access to view your data. No one else.

On the standard plan you can assign as many trusted contacts as you'd like. This is potentially useful for segmenting who gets what collections of data.

Both you and the requested user are notified of access requests to your account and also of any approved requests. A group without assignees is shared with all the trusted users you've linked to your account if they're approved access.

Any trusted user you assign can be easily removed or replaced.

---

Again thanks for your perspective! This is one way I'm thinking about tackling it and appreciate other ideas.
The War Powers Resolution [1] requires Congressional notification within 48 hours and limits engagements to 60 days without further approval.

Congress hasn't declared war since WW2, but they have been required to both approve military deployment and spending for every conflict since. Most controversially, the Authorization for Use of Force in Iraq [2].

[1] https://en.wikipedia.org/wiki/War_Powers_Resolution#Question...

[2] https://en.wikipedia.org/wiki/Authorization_for_Use_of_Milit...
I'll be reading these on the subway home. Thanks for all that you've done!!
Isn’t it strange that comments on medium are all very positive whereas on HN all are very negative towards this article. What I want to say is that there might be a bias?
well also... assuming "maybe" or "skip" are not valid answers, if you have the people who answered "yes", don't you indirectly also have those who said "no"?
Are you serious? If you read the article, it's quite clear this is a coordinated effort within the administration to gut this group (OCISO). They don't want to improve things by hiring Stamos. That is the opposite of their goal.
> As an experienced front-end developer I must say that I don't really understand why the complexity of building websites is growing instead of going down.

Complexity of building dynamic documents is actually going down. If you are to build a typical web site from 200x using modern browsers, you wont need jquery or anything like that. Networking, security - everything became 100 times easier and faster.

But if you want to build a desktop application using DOM as a rendering layer, then it is a different story.
Does this require a custom kernel module or does it just show up as a generic SAS/SCSI that happens to have a really high queue depth?
Less than a year according to the US Army and Microsoft.

>The IVAS Prototype Project seeks to provide a HUD 3.0 and integrated STE Squad capability within the
Squad Architecture in support of Army, Marines, and Special Operations Forces within 24 months. The
PPA shall deliver a baseline standalone STE Squad capability within 12 months, and STE Squad capability
integrated into HUD 3.0 within 24 months. This complete IVAS capability shall be suitable to begin
production as early as 4Q20 to ensure clear overmatch in Close Combat engagements and drastically
increase Squad Lethality.

[0]https://uploadvr.com/hololens-microsoft-army/
> If you're running on any modern OS, even a really good, stable one

I suspect here you're thinking about mainstream OSes, like Linux, one of the BSDs, etc.

But there are quite a few very small, well-tested (RT)OSes that are actively maintained and suitable for the "absolutely must not fail ever"[0] use case.

[0] Which is, of course, impossible, but you'll get a lot closer with a modern realtime OS written to purpose vs. a Linux-type deal.
I'll just leave a tip for anyone planning to vacation in iceland: if you plan to visit the Blue Lagoon, try and arrive just as it opens early in the morning, preferably while it's still dark out. It will be mostly empty and this results in a far different atmosphere than the traditional "water park" feel you'll get later in the day.
> React gives you no options for putting that in a worker or breaking it up.

Isn't that React Fiber? [1]

"Fiber breaks down animation into segments that can be spread out over multiple frames."

How does that differ from React Concurrent? Are they compatible?

[1] https://en.wikipedia.org/wiki/React_Fiber
> The real problem is that this is a never-ending cycle.

That's where I disagree. I think the web was fundamentally unsuited to the "application" use-case and has been making its way in that direction for 5-10 years now. I think once we reach that destination, the churn will drop off dramatically. The platform will become enough, for the most part, and we may shrug off the need for comprehensive "frameworks" altogether in favor of simple libraries, like most other language ecosystems.
Obviously not all of the time because otherwise ISPs, VPNs, postal services could not run. I think what is more of an issue is constantly having to prove you were not involved when police come investigate.
I think most people get it that prize is twice as likely to be behind one of the two other doors rather than behind the door you pick.
So one time out of three you'll get it right while two times out of three the presenter indirectly indicates the winning door.

Edit. Be nice if my downvoter would explain what's wrong with the above.
How is Qt support for mobile platforms?
Without getting too political, this is an administration that has flaunted convention, oversight, and basic professionalism on virtually every front. To hear that they do the same when it comes to IT security is utterly unsurprising.
I agree.

In my various conversations on this topic around the bay area, people are generally overly optimistic, who believe it'll happen in next couple or so years, and people who are overly pessimistic.

Possibly a gross generalization but generally the people who are overly pessimistic are the ones who are or have till recently been engineers, while the people who are overly optimistic are the ones further away from engineering - with the farther they are the more optimistic they are.

Moreover, in addition to what you wrote there are a lot of other open questions, not necessarily in any order and definitely not a complete list:

1) Auto Insurance (cars below refers to fully autonomous cars):

1.1) What happens to auto insurance? Do I still need to buy it if I'm not driving it, or does it come bundled in the car price?

1.2) Does everyone pay the same auto insurance for the same car model/year.

1.3) Do cars with different autonomous models have different auto insurance?

1.4) What happens in the case of car accident between self-driving and non-self driving car?

1.5) What happens in the case of two self-driving cars' accident

1.6) What happens if a person is killed due to the Car's fault. Who is liable? The insurance company? The Car manufacturer? The self-driving module manufacturer?

2) Some Edge cases

2.1) What happens if on a 4-way stop 4 self-driving cars come to stop at the same time? Do they know how to handle that, as in which car is moving forward and which one is allowing other cars?

2.2) What happens in an emergency? Can I force my car to drive rash to the hospital or will it follow the speed limit to the T.

2.3) What happens if the Car runs into a situation which it is not trained for?

3) How are the cars tested?

3.1) As a consumer do we know that the cars are fully tested to handle ALL edge conditions?

3.1.1) What is the definition/definitive list of ALL edge conditions?

3.2) When will we know that the threshold has been passed, and the car is truly autonomous?

4) Security

4.1) Assuming the cars will need to be connected, how will the security be?

4.2) Can the cars be Pwned? I'm sure they can be.... so this is the rhetorical question

4.2.2) If the cars can be pwned, will the fully autonomous cars become the next WMD (Weapon of Mass Destruction) -- if you don't agree, close your eyes and imagine a fleet of hundreds of thousands or millions of fully autonomous cars under the control of a rogue entity hell bent on causing damage/killing people.

4.2.3) How do we protect against that?
That's mine, by the way, so I'm available to answer questions if anyone wants.

I'm actually planning to rewrite it and move it to a new stack soon. It also accepts cryptocurrencies if you are so inclined (you have to email me to arrange that, but I'll add a payment processor with the rewrite).

I plan to add some more features with the rewrite, mainly file hosting for a monthly fee (many people have requested it).
Well I can expend that to friends as well if you like. Who do you think your password is protecting you from? Are you frequently at odds with law enforcement?

Most people aren't; it isn't a feature to protect people from governments (I wish we had more features that did). Encryption is a good thing in a general sense but for most users they are more likely to lock themselves out of their own data than protect themselves from anything outside their close friends and family.
I really hope this is the sort of thing products like VSCode will start turning to WASM for. Performance is their Achilles heel for the time being even though they’ve done a relatively good job considering.
I remember reading about how were two Stephen R. Bournes working at Bell Labs at the same time (only one of whom was the author of the Bourne shell).

https://www.sendmail.org/~ca/email/README.cf.8.8.html

> [...] and at one time Bell Labs had two Stephen R. Bournes with offices along the same hallway. Which one will be forced to suffer the indignity of being Stephen_R_Bourne_2? The less famous of the two, or the one that was hired later?
> I would compare this to ask if men are judged the same way as fathers. For example, if a male CEO doesn't take the day off to nurse his sick infant

The example I would use is a father who looses his job. Is he considered as morally a less worthy person compared to a mother who lost her job?

Cultural we still have gender role leftovers from the perception that mothers are judged based on how they are able to raise children, fathers on how they are able to provide for their children and spouse. A man who can't provide is cultural viewed as an unfit father. A woman who can't raise her children a unfit mother.

In such culture it is of no surprise that the father can take a much more relax attitude to question such as nutrition.

> women on average were studied to have an additional 2 hours of work per day upon becoming new parents, while men on average have an additional 40 minutes.

And how many work hours at the office? Should anyone given our current culture be surprised if fathers spend more time in the office than mothers?
It's amazing how different parts of the world see that.

I was going over the sizes of the S and 3 with my Dad in Australia, and it turns out the 3 is the same size as the most recent Ford Falcon, one of the biggest Sedans in Australia!

The 3 is NOT small in every country in the world except America.
Those runs get ignored since that isn't the scenario. Specifically we're looking at the case where Monty opens a goat by chance (ie. he could have opened the car, but did not). It also helps that that result doesn't matter to the overall question, is it better to switch or to stay, since both options are irrelevant when Monty opens the car door.
There are tons of junior developers out there, bet you won't have the same turnout for senior level engineers.
I don't think it's a complete story either way. It's just some bureaucrats complaining that they've been made redundant and from there we are lead by the author to conclude that the White House has inadequate IT security going forward. This is unrealistic.

It's a reorganization. That shit happens all the time in organizations everywhere. Of course the people losing their jobs are unhappy, and it's their right to complain about it, but not necessarily a bad thing that the DoD is now in charge of White House security.

I'm curious if I'm being downvoted because something about my comment was wrong, or simply because "orange man bad." Maybe share some insight about the right chain of command for government IT security operations? I'm not saying that the reorganization is a good thing, only that there is insufficient evidence provided to conclude that it's a bad thing.
> As the author of Redux I can assure that it’s not designed for — or capable of — the providing thee features described on this page... Hope that makes sense.

Sure! Seems like we are talking past each other (these problems being waterfalls and data races and the examples coming from https://reactjs.org/docs/concurrent-mode-suspense.html).
It's as though they have to walk around with signs and bullhorns declaring themselves assets of adversaries at this point. The only thing that makes me doubt it is how ham-handed they are at it,
In an ideal world, the HTML rendering infrastructure would have been built atop a lower level representation that was also accessible to JavaScript and allowed for the construction of one's own rendering loop and pixel by pixel manipulation. This doesn't exist, but you can kind of imagine what it would look like if you imagine a world were the HTML rendering architecture was just a library that ran atop webGL.

But that isn't the world that is exposed to web developers, so a lot of complexity is necessary to take a declarative rendering language and trick it into giving developers the kind of control they need to address issues like the naive solution for altering the declarative tree and triggering a repaint not necessarily cohering with what users consider "good looking."
For more utility, enable (and save) timings using the '-t' or '--timings <file>' option.

You can then replay the session, in realtime, or with some multiplier (slower or faster), using scriptreplay(1). An advantage is that full-screen utilities will be fully captured.

I've used this technique, and serial connections (zmodem, minicom, serial-over-ethernet, many ILOM/IPMI/BMC systems) to record full system installs, starting at BIOS prompts and configuration utilities.

Replaying the session through the phosphor(6x) screensaver can be entertaining.

http://man7.org/linux/man-pages/man1/script.1.html

http://man7.org/linux/man-pages/man1/scriptreplay.1.html

http://manpages.ubuntu.com/manpages/trusty/man6/phosphor.6x....
> isn't this bit a good thing?

Well, yeah, but you're kind of missing the bigger picture of what's going on here, which is that the administration is apparently trying to undermine this safeguard. So yes, it's a good thing that the safeguard exists, but no, it's not a good thing that the administration is trying to do an end-run around it, which is what makes this news.
Or deleted by a 500 lb bed hacker after all the security guys are removed.
Just a note, "Visual Complex Analysis" is a terrible book to learn complex analysis. Proofs are very iffy, akin to sketches of proofs. With that said, it is a excellent supplement to another std. complex analysis textbook.
Well, how equal are you to your neighbour? I don't even know, I couldn't answer that question if it were put to me. Might be 10x as wealthy as my neighbour, 100x, 1x, 1/2x. I seriously don't know and I'm pretty sure they don't either.

People are notoriously bad at estimating wealth inequality. Something that they can't detect can't be the root cause of their unhappiness.
Have you considered that the answer to systematic failures in the governance of the United States might be better fixed at a systematic level, rather than just arming everyone?
No, the White House wants to transfer records which must legally be preserved into the hands of pliable partisan hacks who can hide or destroy them with no accountability, instead of leaving them in the hands of ethical information-security experts.
The first part of the manifesto made me feel for the author. Its unfortunate that they never got to attend a school where they were sufficiently challenged and around peers of similar ability/interest. There are many cities/countries around the world that place advanced students in advanced classes with like-minded peers, and it is unfortunate that the public school system in this country seems backward in that regard.

The second part of the manifesto sounds like the deranged ramblings of someone with delusions of grandeur. We can have a nuanced discussion around the current laws, but blatant violations of copyright and patent protections are not acceptable. "Exploring" the world doesn't justify breaking into private systems - if I decided to start "exploring" my neighbors bedrooms at night, I would hardly complain about being thrown in jail or being branded a criminal. Complaining about society's systemic racism is hardly a moral defense for snooping. Just because you're smart and good with computers, doesn't give you free reign to do whatever you want.
Maybe we’ll all be wearing masks in public by then
Add timings.

See also scriptreplay(1):

http://man7.org/linux/man-pages/man1/scriptreplay.1.html