skysight-inc/HackerNews huggingface dataset:
I'm not sure what you mean by named parameter enumeration or object enumeration to be honest.

> spread through a curve trading flexibility (expresivity) with organization (possibility of analysis). Java has nothing near that curve.

Java definitely leans towards the organization part of the curve. It doesn't need a single concept to run away with, because it knows that there is no magic bullet that will solve everything. Monkey patching is dangerous, especially when you're programming large systems that end up being used in finance or ecommerce.

On a side note, if I'm not mistaken, Brian Goetz mentioned that something similar to higher kinded types was not off the table for Java sometime down the line in a recent panel.
My computer CRT uses the trinitron style of aperture grille. VX920, 19", 1600x1200@75. Still looks great today alongside my newer 1440p144 flatscreen.
http://archive.is/VFSv5
I'm surprised this is the only comment even mentioning private equity, while the article seems to point to the private equity takeover as the root of many of Getty's problems. While changes in the industry and technology have made things tough, I imagine Getty could have found a way to muddle along while still supporting photographers. But with all that debt and pressure to profit, it was almost inevitable that Getty became the disgusting leach that we know today..
Chips with problematic cores are sold as lower end chips. For the same production cost, you are getting less revenue - failure rate plays a big role in profit margins.
How to Make Your Shopify Store Run Faster
But isn't like taking your Picasso and refunding you back five shillings ten pence your ancestor gave for it? For many players the game is not than just the fifty bucks they payed, it's countless hours spent with it. It's far beyond the purchase price.
Regex Tips, and Theory vs. Practice
Why can't you speedrun with the crack? If everyone agrees on a common executable that works it can be verified via SHA256 and still be used for speedruns.
A secure language is any strongly typed language that caters well to static analysis. Enterprise (and up to some point open-source) tools exist that are able to capture a vast range of security issues in code with the help of in-depth static analysis. I'd rather consider Java, .NET, C, or to a limited degree C++ as secure because of this.

Our compilers should long have included static analysis on par with optimization efforts, because - as you say - people tend to produce errors in code. Strong type systems and memory safety are a very nice first step though.

I am certain this will change over the years, but then the trend (that I am also prone to) is to go dynamic for the sake of productivity anyways.
Interview with Facebook's Head of AI
What does he mean by text manipulation?
<i>ARM has never enjoyed a Op/J advantage over x86.</i>

I'm not sure that exactly accurate, its more accurate to say, that there was a lack of market crossover that allowed similar power or perf envelopes.

That is because ARM did/does make much more efficient CPU's, they just aren't anywhere close to the perf of common x86 cores. AKA a low clocked in order ARM with small caches, etc is more efficient per op but it can't touch even a medium size x86. Intel sort of was in that market for a bit and their cores were efficient too, but the main selling point for an architecture is the software around it, and a 50 mhz in-order x86 can't exactly run modern windows in a reasonable way.

Now that ARM & friends are building higher perf parts, the power efficiency keeps getting worse. When someone makes a 5Ghz ARM core it will likely consume more than a couple mW.

The perf/power ratios have more to do with culture and market than ISA.
1 in a 180 million. What is your point?

The eff doesn't exist to defend pirates so that is irrelevant.

Pirating in every shape in form has to be one of of the lowest crimes to get caught for. And most cracks come from overseas so good luck there.
Here’s a comment from down the rabbit hole:

>Back in the day I spent an afternoon configuring my old 19" CRT like that. I ended up with settings like 800x600x167Hz, 1024x768x133Hz, 1600x1200x89Hz and 1920x1440x73Hz. Many refresh rates were much higher than the stated documentation, and I ran it for years like that.

I’m amazed at that those resolutions and refresh rates were achieved so long ago. LCDs were so thin as to ge unstoppable, but definitely came with trade offs.
Oh man, I recently got an 11 Pro and feel the same way. No need for any other equipment. Your secret is safe with me.
So in this version of the story, the MCP defeats TRON.
Windows Commander (now Total Commander) was/is still good. It was the first piece of shareware I registered, for Windows 3.1. It's still in development today, with an Android version!
Also there's a general effect that any rewrite can improve the code quality. Same thing might have happened if you rewrote in Python.
Totally agree. It was a relatively simplistic way to think about employment. It also ignores all the downsides and stress that come from self employment. But there’s also many mental benefits around the agency you feel: not feeling like a cog in a wheel working towards unclear goals, being able to see the fruits of your labor, etc.
Weird thing: my dad got into beekeeping. He takes an occasional sting, but he says while the sting is temporary, it relieves some of his arthritis in joints near the sting.
You should first think what your goals are. The 30% chance is a bit optimistic, take a look at the first lesson on How to start a startup https://startupclass.samaltman.com If your goal is to make money then joining FAANG is the safer path. To reach unicorn level in a startup is always risky long shot, unless you already know you are joining a rocket that is on a market dominance path and you are getting a great equity deal. There are plenty of ex-FAANG starting startups so you could have a good chance of joining a couple of years down the road. Good luck!
Seems like an opportunity for America and Israel to sell five-eyes style cyber defense services to allies in the region. Especially with the EU determined to support Iran in spite of sanctions.
“All in” as long as they don’t micro-trench in an area with freeze/thaw cycles. Yes, I’m still salty they pulled out of Louisville KY.

At least they left $3MM to pave the roads they tore up. Get real points on that one.
SoftRAM 95 (1996)
I've found DuckDuckGo to work very well as my default search on mobile (so well, in fact, that I can't remember the last time I had to go to google for a search).

I still haven't brought myself to use it on my laptop, but I do use Bing on Vivaldi (I use Opera, Vivaldi, FF Dev Edition, Opera Dev Edition, and Chrome Canary - the first two for everyday browsing, and the rest for dev-ing. I use google in Opera, and Bing in Vivaldi).

Using search engines other than Google is a nice change of pace, even if not solely to avoid AMP pages.
Is Facebook a publisher? In public it says no, but in court it says yes
https://www.theguardian.com/technology/2018/jul/02/facebook-...
This has nothing to do with interpreting probability, but with a utility function that's not linear in terms of wealth. With decreasing marginal returns to wealth, the same bet becomes less attractive at lower wealth levels.

Although this can't fully explain risk aversion, see https://pubs.aeaweb.org/doi/pdfplus/10.1257/jep.15.1.219
Could you be more specific about Heartbleed was a parsing problem?

I'm familiar with the LangSec lingo and the concept of a "weird machine", much as I hate the term itself, has value. But it's not a product of LangSec so much as a name for a concept we've had for decades.
https://news.ycombinator.com/item?id=21701798
Personally, I would use Next.js. It allows you have dynamic pages (e.g. your app) alongside static pages (e.g. landing page). Since it's server-side rendered, it's great for SEO.

You mentioned you don't want to do SPA+SSR. With static pre-rendering from Next.js, there isn't a SPA. It's a fully static site.

You also mentioned having multiple pages. Rather than dealing with React Router or other SPA approaches, Next has a `/pages` directory where each file nested inside maps to a route. So `pages/about.js` is /about. It's similar to PHP in that regard.

If you don't need CMS, then you don't need Wordpress. For hosting, I would recommend Zeit's Now. They're also the creators of Next.js, so the tech pairs well together.

It's as simple as `npx create-next-app` to make the app and then `now` to deploy.

https://nextjs.org/
https://zeit.co/home
In a world where we harden all of the things and write code in memory safe languages maybe memory corruption will be the old school vulnerability and this type of thing will be all that is left
You know you've always had the option to ban the imei number of your phones radio with all the providers. That's making it pretty damn worthless Imo.

What Apple has done just isn't with the trade off.
If you don't mind building it yourself and are happy doing the OS config/setup, I recomend buying one of these chassis' and going the DIY route.

http://u-nas.com/cases.html

I've got 2x 8 bay NAS now (onsite and offsite) for my data. One at home and another at a friends for DR.

Running ProxMox for the hypervisor w/ ZFS and running either native Docker images or LVM's on ProxMox for all of my services. I went down the route of using ProxMox because I want to be able to build my on k8's cluster on my own hardware.

Now if you've not got much experience with ZFS, it's very easy to get your head around but you need to get your head around the basics.

The documentation in the link below is enough to get you started on ProxMox. The documentation below is some of the best I've ever read.

https://forum.level1techs.com/t/how-to-create-a-nas-using-zf...

If you want to go down the route of something a bit more off the shelf for your OS. I wouldn't use anything else but UnRaid. It's got cheap licensing but it's so fucking easy to use and has an awesome UI.
By default? No.
There was a paper by Rasool and Schneider in 1971 that was behind this, I think. "Our ways" would've been industrial particulate pollution, where a 4x increase, sustained, risked kicking off a new ice age. Schneider later retracted the findings in 1974.
Finding Hardware Trojans [video]
ATM --> PBX --> USB Modem --> RPi --> Banking Application.

The RPi turned ATM API called (done over POTS), into REST calls. One side would listen for the incoming call and decode the message, and the other side would call the custom banking application.
Yet some languages are extremely helpful in this regard: see for instance F* and the HACL* library.
Assuming you have adequate control over the local network to deal with jitter one could just use SIP ATA’s with everything set to use G.711 (uncompressed PCM audio) and make modems quite happy to believe they are on a traditional POTS line.

You would need to know how to setup Asterisk or something similar to do this, but it’s not a Herculean effort either.

Alternatively, POTS PBX devices exist as well and would work fine - though they’re harder to come by these days.
Sumizeit – 100+ Bestseller Book Breakdowns
I don't understand what this is. Maybe because I don't know much about linguistics. Can someone explain what this is? Seems interesting.
From my perspective this line of thinking makes more sense for in-person contact, where it's possible to read the other person's state more accurately and get a feel for whether or not one's helpful suggestions are actually helpful or not. What matters is not the message you send, but the message the other person receives, and a lot can change from one to the other.

Here on an internet forum, we have almost no information about each other. The risk of such comments doing more harm than good is much higher, partly because the potential for misunderstanding is so high, and also because people have often used this language in snarky ways, for personal attacks, and so on.

That doesn't mean you can't reach out to someone you're genuinely concerned for, but the burden in that case is on you to disambiguate your intention from anything presumptuous or malicious, and that requires a different communication style—much less generic and casual.
Writing email. Viewing logs. Configuring servers. Setting reminders can be done in cron. Probably lots I don’t know about offhand too.
What the CIA’s Torture Program Looked Like to the Tortured
> makes me think they actually have a phone line and are really dialing.

Yeah. It was an actual telephone system using a cheap ass PBX. The Pi had a modem connected which would dump the incoming messages into a python application that would do the decoding.
The qmail source code has this convention.
Final Fantasy 7: An oral history (2017)
I really enjoyed the sparkling prose, reminiscent of Warren Buffett and Jeff Bezos.
So they built some tech with no business model? Ooph
So, like how in Linux, a lot of system manipulation is presented as psuedo text files in /proc and and /sys, but expanded to the rest of the system. So like the window manager is manipulated by creating fake files (fake as in they don't exist in any persistent storage device) and writing text to them that describes the state of the windows. Rather than socket() and setsockopt(), under the hood it's opening something like /dev/net/tcp/google.com/80/ctrl and reading and writing text about the state of the connection.

Because of this the whole system is introspectable via cating interesting files.
Laptoprates.com Start at 3$ Only
Using the same blogging software for 20 years
"Being employed by someone is by its very definition, an exploitative relationship ... so no matter what you are getting paid less than your true value" stuck out to me as well. But I think it's wrong. For example, imagine you're incredibly good at something very narrow. At a big company which has important needs that align with your skills, you could be making them enormous amounts of money and getting a solid chunk. Working independently, you can spend far less of your time on your top skill, and you may not be able to find any needs nearly as large as the ones big companies are hiring for.
I ran FreeNas many moons ago, I ripped it out after the FreeNas 10 nightmare. Sounds like it's been pretty unstable ever since and now run ProxMox.

How've you found FreeNas recently? Or are you still running the FreeNas 9?
https://xkcd.com/1354/

In Heartbleed the parser parsed an incoming field specifying length, but failed to correlate it with the rest of the request. Had the parser been written to a stricter specification, that would not have happened. Typically that is what is meant by bounding computational complexity. Or at least that is my understanding of it.
Ask HN: How to get into genetic engineering if I have no formal background?
China’s Genetic Research on Ethnic Minorities Sets Off Science Backlash
The Logic of Information: A Theory of Philosophy as Conceptual Design
> Being employed by someone is by its very definition, an exploitative relationship, even if your job is great. Your employer can only afford to hire you if you make more money than you cost [] so no matter what, you are getting paid less than your true value.

Weird fallacy. If I am paid to dig ditches in Haiti, is my true value different from digging ditches in Monaco?

The amount someone brings in depends on their context: what organisation, what country, what city.

We don’t have a “true value”.
To me, the headline is misleading. Security is part of the daily programming job, not just of the security specialists. But as a programming language feature, I’m not so sure. Certainly some languages present a large attacking surface than the others (like generic pointers or pointers arithmetics) but in general, security is a product of process, not a feature per se. It’s naive to believe when I program in a certain language, my program will be automatically secure (or at least more secure than programs in other languages).
Counter counter point: SQL injections and buffer overflows now require nearly intentional effort to introduce into a codebase, whereas they used to be the default.

The question is: when we find a common class of vulnerability, what's the best way to deal with it?
I'm not sure I get what you're saying here. What do you mean you're "game-over'ing app pentests"? You organize penetration tests and are usually able to expose vulnerabilities when you do this?
Equal Health Care for All: A Philosopher’s Answer to a Political Question
I think the point is that, if your buying a quad socket, the 2TB of ECC ram you stick in it will dwarf the core prices, or similarly its not hard to drop $50k on U.2 NVMe, etc.

Its possible to shift this argument different ways depending on the part of the market your looking at.
The title is a bit misleading IMO. The company was in a state of flux before they pivoted and rebranded as Segment as far as I can read (when they had a different name). The actual company 'Segment' seems to have been on a great course of growth since then.
I have an odd fascination with people who manage to use Plan 9 (they strike me as delightfully insane). It feels like I'm going down a Discordian reality tunnel whenever I read things like this.
It's a few threads above the OpenBSD one on oss-security, hardly obscure.

https://www.openwall.com/lists/oss-security/2019/12/
The Great American Eye Exam Scam: Replies
Uber CEO Dara Khosrowshahi Suggests the Future of Uber Is Amazon
> thinking they are better than you the whole time

Do people really think like that? This sounds like possibly a personal insecurity. I don’t know too many grown adults who think things like “I am better than you”. Better at what? making money? Smarter? Getting dates?

I don’t know... maybe I’m just too optimistic but all of the VCs I’ve met have been super nice.
From jellyfish’s pypi page: “
a library for doing approximate and phonetic matching of strings.”

Huh! Hadn’t realized. That adds an ironic spin to the whole thing.
I suspect that, at least for lower-power or lower-area designs, a compact ISA with a friendlier encoding than x86 would be a win. A significant problem with x86 is that a high-performance core needs to decode multiple instructions per cycle, but x86 has a nasty problem that the length of an instruction can’t be determined until it’s fully decoded. I think that modern front-ends try all possible offsets at once and throw out the wrong guesses. This costs area and power.

A design where all instructions have one of just a few sizes and where the first byte unambiguously encodes the length would be nicer.

RISV-V is decent in this respect.

FWIW, x86’s legacy is a security problem, too. The ISA is so overcomplicated that nasty interactions cause all manner of security bugs. As a recent example, the sequence mov (ptr), %ss; syscall with a data breakpoint at ptr could be used to root most kernels. With virtualization, this type of thing is much worse. A hypervisor needs to handle all the nasty corner cases in a guest user program without crashing itself or the guest kernel, and it needs to handle all the nasty corner cases in guest kernels without dying. There are various ways that native kernels can literally put the microcode in an infinite loop, and hypervisors need complex mitigations because an infinite-looping microcode bug triggered by a guest can’t be preempted by the host, and it will take down the system.

So yes, x86 is not fantastic.
I'm familiar with the bug, but not with the parser-theoretic response to the bug. Would LangSec somehow do away with the on-the-wire length encoding? Or would it simply say "your parser should check the length of incoming data"? Isn't that about as useful an insight as "validate user input"?
I can't say whether you're overestimating the startup changes without knowing what it is but your stock is usually not worth as much as you think it is. tldroptions.io may help.

I also don't know what market forces might do to any of the FAANGS but odds are not much. So I'm betting you'll at least have 5 years of pay before any funny layoffs happen if I'm being pessimistic, that's at least $1.5 million if spent wisely.

Do you think your options or stock or ownership or growth at the startup is worth the cash that goes right into your bank account? I can't tell you one way or another. What I do know is that most people are going to FAANGS because their startup dreams die with lower pay, less benefits and general failure. I don't think the pendulum has swung back in the other direction yet even though pie is getting sliced thinner every quarter.

I would say do the FAANG if you're on the fence. Cash is nice.
It’s complete nonsense. Quit your job and sit at home doing whatever tasks you used to do at work, and see how much money you get paid. My guess would be $0.
This is a problem with shitty police departments, not cameras.
Yes, all software has bugs. But how we make things safe and reliable is not by eliminating the bugs, but by changing the process to make those bugs impossible. We cannot eliminate all bugs, but if for each one we eliminate the flaw in the process that enabled that bug, we get fewer and fewer bugs.

This works in the real world. For example, see airliners.

A large part of my job as a language designer is to look at the causes of certain kinds of bugs, and find ways to design them out of the language. There's no reason today that array overflows should still be happening.
> Parsers for file formats?

Yes. As trivial example, consider a UDP packet format { u16 type,size; u8 data[size]; } fed the 4-byte packet {ECHO,0xFFFF}, which is incompetently parsed as {ECHO,"<65535 bytes of stack memory>"} because the 'shotgun parser' assumes its input is well-formed. Whereas a 'recognizer' (ie a non-buggy parser) would reject that packet as 65535 bytes too short.

Good programming language design can make it harder to write the buggy parser and easier to write the 'recognizer', especially if the language/standard library provides built-in parsing tools.
Man... that's an awesome tool
> With the exception of multimedia and the modern web, all my needs are met.

Bit of a deal-breaker for me, personally.
It’s generally hard to buy AMD CPUs period.
Simple Go Mocks
Your version It specifically says this is a potential threat to "elected officials, candidates, political campaigns, [and] political parties" makes it sound like the FBI said that.

In the letter it speaks separately about FaceApp specifically (~"no known campaigns") and general potential threats (~"anything developed in Russia"). Your summary combines a quote from the "no known campaign" and the "anything developed in Russia" bit to say something they never said.

Specifically the letter says the FBI will investigate any foreign influence operations involving FaceApp aimed at officials.

Your version turns that into a claim that the FBI says FaceApp is only a potential threat to those officials. The letter doesn't say that at all.

Additionally you make up a bunch of stuff around the threat model that you claim the FBI sees. ("The potential threat is for someone at Candidate_1's campaign taking selfies with the app, that then uploads them to Russian servers where the Russian government can see them and can also see what's in the background (sensitive documents?) or see geo-location from the app (like how Strava was leaking the coordinates at military bases [1]) or any number of things a hostile foreign government who has already hacked American elections once and is planning to do it again might want to do with pictures that interns/staffers might think are private.")

Again, this letter doesn't say or imply that. In-fact, the foreign influence operations may imply that the FBI is more concerned about foreign adversaries using the politician's likeness (eg for "Fake News" style videos or something).
Vs throwing the whole die away because you don't sell enough systems that small?

Its hard to tell, but intel still has a strong markup on 24 core parts being sold from 28 core dies. Intel has often be "caught" down selling parts to protect their higher margin parts. (AKA they are selling parts with things disabled that work)