skysight-inc/HackerNews huggingface dataset:
Very interesting. May I ask why you host them on a Windows workstation? Is it your desktop/gaming machine?
BF as an intermediate representation for a bunch of problems is a really interesting idea. Nice. Crazy. But - Nice.
The enforcement in this case is put on the carriers, so in case of non-compliance that's who's blamed. See the actual bill: https://www.congress.gov/bill/116th-congress/senate-bill/151...
I'm really far from an expert on this, but I've read quite a lot on the subject and my understanding is that there is considerably more historical evidence for Gautama-the-Buddha being a single real person than for Jesus Christ, that "we can't even nail him down to a specific century" notwithstanding. In the case of Jesus the timing isn't much of a question because of the well-accounted for political events of the time, whereas perhaps India at the time lacked sufficiently standard date-keeping system for us to synchronize the writings now.

But as I understand it the Buddha is mentioned in a lot of completely independent contemporaneous texts whereas Jesus is basically only mentioned only in the Bible. In itself that doesn't prove anything... the Buddha was active as a spiritual leader for many decades, and Jesus only for 3 years, and maybe the wider society around Jesus was just much more interested in political events whereas Indian society as a whole at the time of Buddha was exploring more spiritual and philosophical dimensions. But I've always had the impression that there are proportionally more history scholars who question the existence of Jesus as a single real person than that of the Buddha.
It's sort of complicated. I did a boot camp, 100 applications 3 interviews 0 offers, went back to school (Harvard, the real one not the extension school) and am currently doing the summer internship grind (30 applications 3 interviews 0 offers). But I'm CS.
who said the data isn't valuable years down the line? Crack today, who knows. Crack in the future, more than likely.
PostgreSQL Connection Pooling: Part 2 – PgBouncer
Work together to what end? If the goal is a vibrant internet where large players are not in control, supporting decentralization is important.
I saw one of the authors give a demo at our local user group last month.

It looked useful if you have multiple projects with different JavaScript stack versions. I don’t, but that’s only because my job has Java back ends. Which are also on different versions :-)
Some years ago I worked on a very popular Windows desktop C++ program that had to stay small and backwards compatible, which meant only Win32 APIs and homemade libraries.

That's funny, because it's exactly the type of job I'd love doing --- and I have been working on stuff like that (native code, mostly Win32, with some hardware/drivers/embedded stuff) for a long time; if you haven't guessed already, I try to stay very far away from the web stuff, even though I know HTML/CSS/JS and can use it if needed.
Cryptography in JS is useful when you have a secure channel and you only want the plaintext available to one party. (ex. a secure file store or encrypted mail server)
Maybe it's because literally every password protected service is vulnerable to users reusing passwords on other insecure sites.

It would be like a website writing an expose on how ford trucks are killing hundreds of drivers and expecting a response from ford, but when you read the details it's because users are driving their trucks into brick walls, something that literally every car on the market is susceptible to.
Just add a USB3 ethernet adapter. Works fine
One reason would be to make sure somebody's still around. I'd make tiny updates to let dependents know that I'm still watching the code base. Where I work, code is (sadly enough) dead pretty much when workers' contracts or consultant hiring agreements end.

Sporadic updates tell those who depend on the code that stability and security updates are still being handled, even if the code is "complete". I'm not sure I'd have a lot of faith in code that looks abandoned.
> IIRC while Rust does allow you to switch up allocators, it doesn't let you mix and match your runtime with multiple allocators. (Each artifact can be linked with at most one allocator at a time.) There are applications where you want to have multiple allocation strategies for performance reasons.

So, sort of yes, and sort of no. Like, you can swap the global allocator, but there's no way to parameterize standard library stuff over anything but the given allocator. But for your own code, you can write and use allocators however you want. Arenas are often popular, for example.
if you read the link he gave, it has a really good description of each...

but to summarize...

A tutorial:
- is learning-oriented
- allows the newcomer to get started
- is a lesson

A how-to guide:
- is goal-oriented
- shows how to solve a specific problem
- is a series of steps
At least in my state, you are required by law to have your headlights on if your windshield wipers are going.
This is a good idea for a lint!
There's an interesting podcast with Tobi here, where he also mentioned StarCraft.

https://fs.blog/tobi-lutke/
I still find WinForms to be a very productive and pleasant way to write native Windows apps, even quick weekend MVP’s.

Yes, it’s Windows only, but if you really want tight efficient native apps then you’ll want a custom built app for each platform anyway, with a nice standardized API for them to connect to. So I don’t see the Windows platform lock-in as a downside if the goal is good native performance.
I'm reminded of a story from a HN commenter who was a US soldier. He said in his unit he's been trained and tasked with cleaning rifles with brushes, rags, (no gloves) and an unlabelled liquid cleaning product. After years of doing that, one day he stumbled upon a label for that product, which said (paraphrasing) that it was a dangerous carcinogen chemical and should never come into contact with skin.
A lot of younger developers consider IRC limited and crusty. They are more easily attracted to platforms they've grown used to that behave similar to discord, teams, and slack.
https://www.typescriptlang.org/docs/handbook/utility-types.h...
By moving to its own OS, Facebook could have more freedom to bake social interaction — and hopefully privacy — deeper into its devices.

Privacy? I expect some amazing detailed & intrusive data gathering.
It can both be applied to enum variants as well as to entire enums. I meant the latter case. From the release announcement:

> A perhaps more important aspect of #[non_exhaustive] is that it can also be attached to enums themselves. An example, taken from the standard library, is Ordering

For example, take this _Nonexhaustive enum case here: https://github.com/est31/rcgen/blob/d6b84d3d9d51b088dd672975...

A little bit further down, I'm matching on the enum in the to_oid function. I'd prefer if I got an error or at least a warning pointing to the match if I added a new enum case and didn't update the match statement.
HSBC mobile and online banking have been down for 2 hours
I mean I am not a fan of C++ (though I don't hate it either), and I love how easy and well libraries for e.g Python works together and how easy they are to find and install, but I don't think it is necessary to go all the way to native code -- Java/Kotlin on the JVM performs pretty well (and you can always outsource the heavy parts to C).
My intuition is that if you wanted to (you probably shouldn't) you could implement reasonably secure client side crypto with WASM. Also correct me if I'm wrong but even in 2011 you could "securely erase" data in the browser by operating on typed arrays.

WebCrypto helps by providing a cryptographically secure RNG, that's not nothing.

FWIW I'm not trying to say the gist of the article isn't spot on, but I think the tools are more or less there these days to do the thing, even if it is absurdly easy to mess it up and there's no real good reason to try.
That’s not what you sounded like in your original post. In that, you say to abolish the USPS, not that we should update our laws because email is a thing now.
> a medium designed for carefully considered thought like that.

"Sorry this is so long. I didn't have time to make it shorter."
IMO it's fairly obvious the GP doesn't know what they're talking about. "Dumb" headlights will flash you on bumps and can't react. Smart headlights are at least supposed to react and might not react fast enough.
Alienated, Alone and Angry: What the Digital Revolution Did to Us
That sounds like a benefit for Matrix, but it's not obvious why Mozilla would want to spend time and money on that?
In 1990s is was not uncommon to be hired to IT solely based on your Mortal Kombat or Doom skills - pretty good proxy for geekness at that time.
I didn't know the pilgrims founded the country.

Also ironic you would bring them up since they were very much an "asylum for me, but not for thee" group, which explains all of the religious refugees leaving Massachusetts during the pilgrim's rule.
Oh indeed, thanks for pointing out! Wishing them luck then.
Any chance you all are hiring? I'd love to get paid to do this full time.
I meant, attempt as in finding the address. UPS and FedEx can just return a parcel because it’s too hard to reach.
No, actually the article claimed the opposite: the attack was likely NOT credential stuffing..
I don't see how a "dumb" headlight would be any better when rolling over a bump.
How blinding modern headlights can be.

My neighbour onthe other side of the street regularly blinds us in teh kitchen when parking in his driveway. It doesn't help that white or blue is the new default color for new headlights.
I think this is the WSJ article mentioned there:

https://www.wsj.com/articles/how-google-interferes-with-its-...
* In my experience, cloud management is nothing like as simple as people make out; and you're not going to be magically making those ifrastructure man-power costs just go away. You need to configure all that stuff non-the-less, and that's where the time goes.*

I wrote CloudFormation scripts that handle our basic use cases and use parameters.

Any developer can click on quick create link for instance and have an isolated build environment just for there service. If they need something above and beyond the standard CodeBuild Docker container for their build environment they can create their own.

And we have made the infrastructure manpower diminish to an extent that it might as well be gone.

* Even compared to bare-metal, the difference isn't all it's chalked up to be - the actual rusty box doesn't need a lot of TLC, and you can hire companies for that too,*

Can I hire a company to put in 20 additional servers every night when our processing queue increases and take them out when it decreases?

And HA is - for most usages - best avoided. It's a complexity source like nothing you've seen before

It’s “complex” to have an autoscaling group with a min/max of two and clicking on a button (well actually use a CF script) when you want to increase the number of servers? There is nothing “complex” about having HA in a cloud environment.

Better to make sure you can replace anything that's broken really fast (because it's all scripted),

It’s even faster when you don’t have to do it yourself..

* Almost all actual downtime is not because your physical infrastructure went down in ways that most HA could have prevented.*

HA can be as simple as a rogue query killed an app/web server (been there done that). I got an alert that the web server was unhealthy. By the time I woke up well, I got another alert saying that a new instance was brought up. I went back to sleep and investigated in the morning. Not to mention the automatic updates performed on RDS instances or the updates that you don’t have to care about with managed services.
That will go away. From https://www.congress.gov/bill/116th-congress/senate-bill/151...

> NO ADDITIONAL COST TO CONSUMERS OR SMALL BUSINESS CUSTOMERS.—The Commission shall prohibit providers of voice service from adding any additional line item charges to consumer or small business customer subscribers for the effective call authentication technology required under paragraph (1).

It doesn't mean they'll be blocked at no cost, but the authentication system for all parties needs to be free and the enforcement for scams is on the provider. Effectively - you wouldn't pay anything extra once this is implemented.
I'm a huge proponent of static typing systems. However, that being said, I always keep in mind that everything has a cost.

* Just because I'm more comfortable with types doesn't mean that everyone else is.

* Someone may want to do something in a type system which is well typed, but only in a different type system.

* Someone may want to do something in a a type system which is well typed, but which has some bad compilation characteristics for the given type system.

Even if Rust is objectively better, you still have to get used to the things about it that make it objectively better. And you have to keep up with the changes that are made to it. And you have to understand where those better things fail down (for example Non Lexical Lifetimes ... in which case you have to get used to the NLL acronym that people use).

A simpler language, even if objectively worse, can yield better results if it is used with discipline. Discipline that might be easier to hone with less things that need to be considered.

And sometimes better results don't actually matter because the goal isn't the best results tomorrow but reasonably adequate results today.
All the more reason to consider the HTC Vive or Steam Index if interested in being an early adapter of VR where their achievements can be more collaborative.

Side note regarding Portal and other "social hardware", I can't imagine there being user-friendly privacy toggles when facebook owns the complete stack..
Not even limited to 'the government'. Improperly sanitized network gear shows up in second-hand markets all around the world. Happened at a former employer of mine and a 'finder' attempted to extort us over it. VPN PSKs on the equipment were still in use in the field (no PFS either, so years of captured content could ostensibly have been decrypted).

Even equipment that appears to have been cleared out is probably hiding secrets in flash. The vendor of the equipment in this case had a separate command to wipe file contents. Deleting files just unlinked them in the flash fs.
And weechat-slack is great.
This is a claim that has been made about the Total Information Awareness program, its offshoots and, specifically, the NSA's big datacenter that was in the news some years ago: that one of the things the NSA are doing is collecting all the data they can in the hope they can make sense of it later, even I'd they can't now.
> As are mail boxes unless you own house outright or have a mom and pop landlord (which is really not much better).

What? How? No one is legally allowed to open a mailbox that isn’t theirs. If someone is opening your mailbox that isn’t a postman, report it; it’s a federal crime.
I encourage reading the earlier posts on HN from exple.tive.org about this over the past year, as I think they may speak more to the reasoning you’re interested in discussing.
Just for fun. I am taking it seriously, but I have no other motives other than to learn. This tech has serious potential to fix a lot of privacy problems. I thought it'd be good to have this out there.
By 'Privacy' they mean they will be the only ones with access to your data.
I don't know about that, Microsoft security analysis is in Rust, Google wrote an OS in rust, Mozilla firefox is mid-rewrite in rust, Linux is accepting rust work
The simplicity of BF makes it incredibly appealing for stuff like this.
In context of semantic web, pursuit of the eyeballs is a problem because it makes the people owning/creating the data also want to be delivering that data directly to the users, and be the only ones allowing to do so. Semantic web works for the opposite goal - to allow the data to be automatically transmitted, processed and understood by software, and only perhaps eventually delivered in some form to end user.

As for building more net-positive information ecosystems, going for the eyeballs instead of actually caring to deliver good information isn't necessarily bad per se, just suboptimal. It's better for an eyeball-chasing site to publish some information, if otherwise that information wouldn't be published at all. But it's the eyeballs being your primary revenue source that will make you work hard to make the data as useless as possible outside your own publication - which leads to a very unhealthy information ecosystem.
Wasn't there one like this already (though used android) https://en.wikipedia.org/wiki/HTC_First
That is a gross misreading of the text. He is talking about teaching about past governments and education in general. The Jefferson administration's withholding of a letter from the Aaron Burr trial because they contained national security information is the origin of the state secrets privilege in the United States.
A tutorial is to an integration test what a how-to guide is to a unit test.
> (b) a breakdown of TLS implies the code running on the endpoint can't be trusted, therefore (c) assume data exfiltration when TLS breaks down regardless of other variables

In security engineering the main question is always "from whom do you want to protect it." If your assumed adversary can overtake both your TLS and deliver modified scripts, yes, the encryption in browser doesn't bring anything. If your assumed adversary is somebody less powerful like a passive listener somewhere the traffic is comes out of TLS, or somebody who has access to the data, but the data are already encrypted, then yes, the encryption can make a difference.

Or as one great thinker wrote for Usenix 2014: "In the real world,
threat models are much simpler (see Figure 1). Basically, you’re
either dealing with Mossad or not-Mossad." "If your adversary is the Mossad, YOU’RE
GONNA DIE AND THERE’S NOTHING THAT YOU CAN DO
ABOUT IT. The Mossad is not intimidated by the fact that you
employ https:// If the Mossad wants your data, they’re going to
use a drone to replace your cellphone with a piece of uranium
that’s shaped like a cellphone, and when you die of tumors filled
with tumors, they’re going to hold a press conference and say
“It wasn’t us” as they wear t-shirts that say “IT WAS DEFINITELY
US,” and then they’re going to buy all of your stuff
at your estate sale so that they can directly look at the photos
of your vacation instead of reading your insipid emails about
them."

https://www.usenix.org/system/files/1401_08-12_mickens.pdf
After spending several months convincing a few friends to use Riot, the ongoing fiasco with E2E has caused all of them to leave within a couple of days. Obviously they're unlikely to ever come back.

It's a real shame. These are technical people who don't particularly mind verifying a key by hand. In fact I personally even prefer it.

The problem is not only that certain things are not done automatically, but that the UI is designed to make it difficult to do them even manually!

E.g., I have one device 'foo' which you already trust. I add a new device 'bar'. Why on earth would you want to verify its key manually when I could just send you the new key from 'foo' which you already trust?

Even worse, the key for 'bar' is not straightforwardly available anywhere in the UI on device 'foo'. It should be easily viewable in the right hand pane where the list of devices is, but it's not. The only way to get the device ID and key is to send a message from 'bar' to 'foo' and view the details of the message. Why?
The CEO of Shopify thinks otherwise: https://twitter.com/tobi/status/1207704457796083713
Then so did black-Americans' alleged feelings, no?
The web version work also well in Firefox, so you don't need to give all your RAM.

Slack calls don't work reliably in Chrome/Electron on linux anyway, so no loss here.
Losing Faith in the Humanities
Eric Weinstein and Tyler Cowen Together
So cool / futuristic. A guy once wrote an open source JVM in VHDL. I've always wondered how hard it would be to port something like that on top of an underlying FHE NAND gate implementation. Edit: Link - https://www.jopdesign.com/
Makes sense. It'll be a *nix variant probably.. we might get a nice new UI layer out of it.
For a company of the size of FB and its ambitions, this seems kind of late. I would have thought they already had something like this.
I Hate IM, Part One: Matrix/Riot
The Art of Joining in Spark
> how can someone like Snowden report corruption

By simply reporting corruption. Where Snowden got into trouble is that less than 0.1% of the documents he leaked describe anything illegal.
i think these are different things.

Yours is concerned with code quality and maintainability, both generally benefit from idiomatic programming style which people new to the language rarely have. And you're 100% right.

BUT the parent post was talking about ideologies "the one true language" vs "hey, i can make this work anywhere"

the latter camp affects you in that many of them don't have the discipline or patience to really ingest the new language before spewing out code that "works" but sucks for maintainers.
This guy is very dedicated to wearing that hat
I did this and it was worth it. I still get a few pieces of mail spam (AT&T is literally the worst, and I have called them repeatedly) but it's dramatically better.

Entirely nonsense that there's costs and whatnot associated with it. I am sure it's a PII goldmine for some script kiddie who gets lucky.
> The term “voice service”— (A) means any service that is interconnected with the public switched telephone network and that furnishes voice communications to an end user using resources from the North American Numbering Plan

See https://www.congress.gov/bill/116th-congress/senate-bill/151...

This makes it irrelevant where the call originates. If the call is received on a US-allocated number, it's covered.
This leaves me curious about the connection between the philosophy department at the University of Chicago and the art of motorcycle maintenance.
You get the same problem with old headlights as well when cresting a hill or headlights that aren't properly adjusted. Believe it or not but the difference between high and low beams is a bit more literal than it might seem. High beams are aimed a bit higher up whereas low beams aren't. On my car they're the exact same wattage, color temperature, and beam pattern. The only difference is that they're aimed higher up for longer range. If my low beams were adjusted up as far as the adjuster allows for they would be functionally identical to properly adjusted high beams.
Thank you.

Yeah, it's going to take me a bit to work through all that. (I'm thinking about this in my evenings, and when tests are running at work.)

On the last paragraph: I had thought (assumed?) that, in the integers mod p, (a * b)/b was hard if p was large. Is there an algorithm better than O(p) for this?

My group was the complex integers modulo p. Now to do (a * b)/b, you have to find both the real and imaginary components of a.
If we read the same article, we’d have been agreeing that it said it was unlikely to be credential stuffing.

> Security experts told BuzzFeed News that the format of the leaked data — which includes username, password, camera name, and time zone in a standardized format — suggests it was taken from a company database. They said data obtained via credential stuffing —when previously-compromised emails and passwords are used to get access to other accounts — would likely not display RIng-specific data like camera names or time zone.

> “One could argue that the person maybe got these through credential stuffing,” Cooper Quintin, a security researcher and senior staff technologist at the Electronic Frontier Foundation, told BuzzFeed News. “But if that was the case, why did that person go through and add the information about names of camera and time zones?”