skysight-inc/HackerNews huggingface dataset:
> To implement the same level of functionality and prettiness in a native app toolkit like Qt is at least a month of work.

That's really only true for web developers trying to make native apps, and only because they're used to the mess that is web development.

It's a piece of cake to build a small app in Qt with C++, and it's even easier using Python or Common Lisp or one of the other language bindings.

Like everything, it depends on each developer's experience which one is easier for them.
Right.

What people are missing is that if Boeing is 'too big to fail' for the US Government, then burying the risk, soaking up the resulting windfall, and pressing the accelerator as they turn towards the brick wall was the right thing for them to do.

I'm uncertain about your point where everything is fixable- don't forget, it needs to be fixable without significant pilot training, or else it'll remove airline's reason to stick with boeing.

However, that doesn't matter! Boeing can fail as hard as it wants, and the executives will keep their money, and the US Government will still need to save the company.

The only losers will be pension funds, employees, and citizens- people without any say in the matter.
Ugh. I hear that first step can be rough. I took a non-traditional path so it wasn't an issue for me. I didn't realize internships were so hard to get, though.
I agree, but I was struck by how a dog and I would detect a person at the same time, hearing them walk along the dock. The dog could tell if the person should be there. I could not. Because the dog perked up at the same time as I heard the footsteps, I assumed it was the sound that the dog was using.
> Not sure what security experts they talked to

https://www.eff.org/about/staff/cooper-quintin
Nono Martinez Alonso's Daily Writing Process, Tools, and Techniques
The most interesting parts of the bill are pretty much "FCC will decide how it works", but some bits are better defined. For example the call authentication framework can add no line item to the consumer bill. Sure... they could raise the price across the board, but that's a cynical realist view :-)
There’s about zero chance I would ever attend an event where I had to surrender my autonomy in that way.

What if an emergency happens and you need to call 911? Is my safety less important than some vain attempt at reducing “leaks” or some fear that your precious event will be broadcast unauthorized? No thank you.
Forgot to check for null return from malloc().
Not really. Most of it is "Our Neighbor" followed by my address.
In finance, my field, papers published in academic journals were usually posted as working papers to SSRN. Maybe at least the working papers should be mandated to be freely available. To get the published paper, one would still pay.
It's possible that I'm jaded by non-existing documentation, but skimming over the docs in your link, this actually looks like an example of good documentation*

The API reference in particular you pointed to has a top-level description + linkable reference to each individual method / resource along with brief description. AND, for older versions, as well as a description of "objects" used in the API. I guess it would have been nice to also have a sandbox playground, like some of their other APIs do, but this one is fairly good?

Just curious, what's an example of great API in your mind?

*(possibly not in-depth enough, but I wouldn't be able to tell as a newbie).
I didn't see any distinction between types of "deception" in the paper which means it's classifying things like social anxiety and generally self-conscious behavior as deceptive. While strictly true it makes the algorithm useless for detecting security threats at this stage.
Professor Jeff Jarvis?
> Choosing the right job for the tool, would mean that all the wrong jobs should be outsourced.

outsourcing that is just "kicking the can down the road" some poor developer is still left dealing with the same problem. It doesn't change anything other than who has to do the thing you don't want to / don't think is right.
267M Facebook Users IDs and Phone Numbers Exposed Online
Not a huge fan of those kind of macros myself, because they still leave too much of the implementation exposed. The other alternative is pointer-arithmetic implementations, which do hide the implementation better but often come with limitations (e.g. list members have to be first and you can't be on two lists at once). But either way, that's C for you. The language has its limitations, and there's only so much you can do. Comparing that to an API in a language with better support for such things seems a bit unfair and snobbish. It's like comparing a matrix-math API in a language where it's native to the guaranteed-horrific internals of a C++ library to do the same thing.
From a purely technical perspective, this article raises multiple valid points. From a practical perspective, there can be legal and logistical benefits to not knowing what your customers are doing.

I think articles like this get treated like they're referring to a broad category of activities, or making very broad statements, when in fact they're talking about a very narrow aspect of security. And to be fair, people do treat Javascript Crypto like it's the same thing as normal, native E2E encryption, so maybe that pushback is sometimes necessary. But this isn't a binary, black-and-white principle.

JS crypto is problematic in environments like the web because it is very hard to validate or pin the code that is sent to your browser (and for a few other reasons). This means that E2E crypto is not a good way of protecting yourself from a malicious provider. JS crypto does not remove your need to trust your host, and to trust your host's security.

It does not follow the E2E crypto has no uses at all on the web. It just means you have to be open about what benefits it does and doesn't provide. It isn't a silver bullet that will protect you everywhere.
> I do see Rust potentially replacing a lot of backend Java, eventually.

I'm not quite so sure. Rust can be a good fit for services that need to be very optimized for memory or CPU usage. Java brings so many other extremely important benefits like introspection, management, profiling, hot swapping, and being generally more productive due to the fact that it's a GC'd language. Not to mention the huge ecosystem behind it.
Is the 737-MAX fixable? Boeing is stopping production of them, so they know that it's not going to be for a while, if ever.

The 737-MAX's problem is that they changed the center of gravity of the plane so that it's not stable without an active system to correct that (MCAS). A failure in that system has already crashed 2 planes and killed hundreds. I don't think you can throw an active system on an inherently unstable airframe and call it a fix. Airplanes need to be as fail-safe as possible.
Personally, I see no problem with using Matrix for pragmatism reasons included. Your argument could make sense, if good quality FOSS IMs weren't an option. But they are. So I see no reason to turn to Discord and will not going to use it myself.
Requiring telcos to assist in fighting spam calls and wire fraud is not "censorship" by even the most lenient use of the word - it's saving elderly or non-techie citizens from being stolen from. Nobody mentioned backdoors or ML algorithms, either - stop strawmanning.
Being able to say "I stopped those robots from calling during dinner" has a ton of political value, and the robocallers likely have some plan ignore the new laws anyway.
What you're doing is probably much more expensive in the long run than buying a GPU or using a dedicated rendering service.
Do we? I'm under the impression they can install taps on fiber without disrupting service by bending the fiber just precisely right that a small amount of light bleeds out, or something like that.
Complexity is a very real and objective thing. When you can't 100% guarantee your program won't go into an infinite loop when you change a single line, it's too complex.
Yeah, unit comp, tech, expansions etc fall under macro
https://en.m.wikipedia.org/wiki/List_of_assigned_/8_IPv4_add...
Interesting that author seem to omit the possibility of PGP functionality available locally in the browser - as, say, a bookmarklet.

Surely websites aren't designed in a way to take advantage of that, but I still don't see in the article a good argument why that is impossible - given that the local code is a carefully written (e.g. Stanford crypto library seems to be a good example of crypto JS code).
>We can't discount all the revenues generated by defense spending, both by the US and abroad. That's a non-trivial amount of Boeing's income.

It's 30 percent of Boeing's income. Definitely not enough to prop them up.
> The US Gov't may not allow Boeing to fail

I agree entirely. They'll either bail them out, or just pass laws that prevent Boeing from being Sued.
It absolutely is ethically better and practical though however. IP is just information and information is meant to be free. To restrict it behind artificial pay walls is repugnant.
How to Build Clean Architecture and MVVM in iOS. (From App with Millions Users)
As with previous articles, The Information has unlocked this one for HN readers. Thanks!

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

There's a related thread at https://news.ycombinator.com/item?id=21836862.
Arg_max, maximum length of arguments for a new process
You are incorrect, but only technically. You can opt out of EDDM at the DMA website, but the whole chain of custody for handling the opt-out is so convoluted that it's effectively pointless.

What happens is that the DMA maintains an opt-out list which the mailers are supposed to check. Then they add your address to a cover sheet called a facing slip which they pass to the local USPS when they hand off the ads. The USPS is then supposed to give those addresses to the mail carrier and the mail carrier is supposed to check it when delivering the ads.

In reality, since EDDM is intended for blanket coverage of local ads, practically no local advertisers bother or are even aware of the opt-out list, and even if they did the mail carrier will probably ignore the list, so signing up has little effect.

The best way to "opt out" is to be a dick to your mail carrier. Put a sign on your mailbox that says "NO EDDM: unaddressed mail will be refused" and then follow through on your threat by forcing your carrier to take back all EDDM ads the next day. My mail carrier quickly realized that there was no point delivering EDDM ads to my house.
Yes, because it was described in a comment with only a few minutes' worth of thought. The idea is sound - there are a ton of fairly obvious ways to fix the biggest flaws and improve the system.
Garbage in, garbage out!
Atomic-scale imaging of a 27-nuclear-spin cluster using a quantum sensor
Anything based on graph traversal generalized trivially. And any maze-generation algorithm by definition will generate a spanning tree, so you can always post-process the generated trees to re-embed the graph in an arbitrary number of dimensions.

For https://github.com/gliese1337/M4ZE.js (a prototype 4D maze navigation game), I used a 4D specialization of Prim's algorithm. There is no time travel involved--it's just straight-up 4 fully equivalent spatial dimensions, with full 4D maneuverability and no privileged directions. At any given time, the maze is visualized as a 2D projection of a 3D hyperplanar slice through the maze, and one type of control action is to rotate your viewing hyperplane.

It is actually far easier to navigate than I initially thought it would be when I started working on it. I recently implemented a 4pi-steradian all-around view to make it a little bit easier, but the bump in navigation ease is minor (though I kept it because it's cool, and allows for tricks like running the maze entirely backwards). User testing so far indicates that kids and teenagers adapt to it quite quickly, while most adults have significantly more trouble.
India gets more aggressive with internet shutdowns to curb protests
How to Build Modular in iOS (from app with many millions of users)
Valve has done a pretty good job at standardizing VR tech with OpenVR/SteamVR. All of the headsets except the oculus seem to have really good hardware compatibility. The vive controllers can be used with the pimax hmd, etc.

Facebook seems to be trying really hard to create a lockin with the oculus, if you buy games on the oculus store, you are now forever locked in to only buying oculus hardware from now on.
Hmm not really, Go is close to Python / Java / C# / C++, not much for PHP / Ruby, people didn't build backend services outside of the web in those languages.

Imagine one second Kubernetes, Docker or Prometheus those app have nothing to do with PHP / Ruby. It's related to C++ / Java.

Prometheus is the equivalent of what's at Google and it was built in C++. Same for all the DBs outhere in Go: CockroachDB, NATS, etcd ect ... those are C++ applications related.
That doesn't seem like it's asking enough whys to me. Why was the MCAS system necessary? Why didn't the sensor fall back to its backups?

There are underlying hardware concerns, from the wings to the sensors themselves, that may require retrofits. MCAS can be patched, but I'm not convinced that a patched MCAS can fully address the hardware concerns.
> To me this is almost equally offensive as a swastika.

This seems quite ignorant of history coming from a Norwegian. The red "santa hat" was a symbol of resistance during WWII, so much that it was actually banned by the Nazis/collaborator government for a time.

Wikipedia article in Norwegian, try an automatic translation service if you're interested in reading: https://no.wikipedia.org/wiki/Nisselue#Nisselue_som_norsk_sy...
Ryzen threadripper supports ECC memory actually. And most server grade features you could think about.
The article does not capture the complexity of running a hardware business.

Anki’s landed cost was nearly 65% of the MSRP. Retailers take 30-35% margins. This leads to paper-thin margins for marketing, low working capital for production and other opex. You will not survive in a market like that.

I work with ex-employees from Anki. It was a well-loved product/company. If it had survived another 3-4 years, they would have seen light.

Source: I work with retail teams with products in similar categories (https://www.playosmo.com/).
Am I missing something? This is just the About Us page of a large network provider..
I get 11 seconds to shut down, 11 seconds to boot, on a 256G NVMe ssd. I'm curious what's going on on your machine.
It‘s a hardware problem because the plane is instable. The MCAS was the fix but didn‘t work. We will See...
It's not just a direct result. VSCode was already on way to make Atom defunct and the acquisition closed it earlier.

Also, GitHub Actions is based on Azure Pipelines already.
Hyperledger's Brian Behlendorf on Open-Source Tech and Digital Identity
Does this make any of you fearful about getting on a plane? I mean, with all this airing of dirty laundry and scrambling I feel like mistakes are more likely now than ever, plus no new planes = we are stuck on old hardware, and when those planes do go back into service they will have been outside collecting rust.
It's fascinating how Ring's business model benefits from local crime prevalence, which in turn might lead people to invest in home security.

It is also fascinating how media companies are likely to pounce on the slightest of flaws(some malignant, and some innocuous) with either Nest or Ring, since it feeds on people's sense of security/safety again, and thus are likely to lead to more clicks.
I spent 5 years trying to get AT&T Time Warner to stop sending monthly ads for their cable internet. I finally got someone to admit that they don't maintain a "do not mail" list and that every other CSR I spoke to had lied to me. What finally worked was threatening a lawsuit and restraining order. The ads stopped immediately.
The government might pass laws, but it will only fly inside the States if other countries disagree. In this one, Boeing is limited.
While this is true (the MCAS being at fault), it was compounded by incorrect and/or absent reporting of what the MCAS system was doing. One of the indicators was tied to an optional set of features on accident (spaghetti code?), which caused budget airlines that didn't purchase the optional features to not show pilots when there was a problem with MCAS.

That coupled with lack of training of how to react to exactly that scenario, and we have the events that transpired.

All of which is fixable one way or another.
The article implied he wasn't the only one they talked with. There isn't anything he said that was explicitly incorrect (unlike some of the other unnamed security researchers), but he must not have much experience with credential stuffing incidents given his responses.
Ya, I browsed through the article and zeroed in on Christmas caroling being related to drunken people running nude through the streets and singing. Was hoping for a fun little anecdote next time someone brought up going Christmas caroling.

But turns out that all seems to be bunk. Caroling seems to be related to the early practice of going door to door as peasants singing and asking for food/gifts from feudal lords... "... so bring us some figgy pudding, and bring it right here."
If I understand homomorphic encryption right, in CISC case it will go through all possible instructions instead of all possible branches, so no advantage here.

From repo:

> This is because at every cycle, the VM has to go through every possible instruction on every possible data cell.
Those are pretty big accusations with very little proof. They use a perfectly legal accounting method and anyone interested can largely figure out how much risk Boeing takes by investing in new programs
There isn't one, because ... I'm not even sure what I was thinking, except that I probably should have gotten a few more hours of sleep last night.

Maybe I was thinking about this comment by someone else when I wrote that???: https://news.ycombinator.com/user?id=kibwen
The answer is above. Because it fragments the development community which ultimately harms everyone.

LF translating documentation for them is a one-shot effort that's ultimately going to be useless as time goes on without someone on their side dedicated to keeping it updated and keeping github issues in English.

It's not too much of an ask. Again, see Clickhouse for an example of how to do international open source correctly.
Spectral is quite usable as well in my experience (At-based) https://spectral.encom.eu.org/

Fractal is the GTK counterpart https://wiki.gnome.org/Apps/Fractal

Thunderbird also has a Matrix back-end, though XUL is quite close to electron.

Lots of other clients https://matrix.org/clients/
Oh wow, this looks sweet at least at first sight. Don't use Verizon and IR Blaster is cool but not an absolute must (it worked really well with now discontinued HTC app that combined TV Guide with IR blaster, you clicked on a show and it switched your TV to it).
+1. I think the book would be much more popular if it were not for the clunky title, which is a tribute to George Will's book "Statecraft as Soulcraft".
You may be totally right and it was credential stuffing and the article may have been wrong, misleading, incompetent and stupid.

Nonetheless, you misrepresented what the article actually said -- the article raised both, the possibility credential stuffing (implied by Amazon spokesperson), and doubt about it (unspecified security expert, WiFi attacks).
Bootstrap Icons
> Major airlines operating the 737 variants will just continue to use the perfectly good 737-700,800 and 900 variants until something new and fixed comes out.

I think airlines love the situation. The balance between supply and demand for new aircraft has taken a hit. That means any glut in capacity has been erased and pricing power has gone up a lot.

Airlines had an excuse to cancel flights and put you on a different schedule, all while claiming force majeure.

While the 737 variants are fine, they have a shorter range than the MAX. The MAX can do some interesting transatlantic routes (UK,FR,ES,PT) and east coast US/Canada that are dicey in a non-MAX.
The government can pay for the pilot retraining - which Boeing should have done in the first place.
They could force them to spin off the defense contractor part and only bail that part out, perhaps.
Manafort - tax evasion nothing related to russia or the president

Cohen - tax evasion nothing related to Russia or the president

Papadopoulos, Flynn and Stone - Making false statements to congress or the fbi. No other charges of actual wrong doing and nothing remotely close to anything they were accused of. If Hillary was held to the same standards she would spend the rest of her life in prison!

What's interesting is that all of this came from an illegally kicked off investigation and spying due to massive and purposeful illegal and deceitful tactics used by the FBI and the democrats. I would not be surprised if at least the last 3 all have their convictions overturned. The FBI made up a criminal case and then went after them for obstructing said made-up charges.

The left is in denial now because the FBI's shady behavior suits your end goals... but this will rock federal law enforcement for decades and will only get worse the more that comes out. Things will even get worse if/when details of Schiff's collusion with said parties ever come out and if he's ever pointed at for being the cause of the illegal leaks from secure depositions which I suspect at least someone next to him was responsible for.

Downvote me because you don't like my opinion, but I watched/listened to countless days of testimony on my office TV and the left has overplayed their hand. I hope this attempted coup was worth guaranteeing Trump 2020! There was a serious chance of defeating him without this and now it's a mega long shot.
Show HN: Corpox - Programmable Modular Space Ship Game (Mobile)
Features.

(Think about it.)
I like the conceptual separation. I like alt-tabbing to "Slack" not "Chrome". It also doesn't have any of the header bar so the electron app has more UX control, including access to OS level window menu options. Also it can do things that you can't do inside the browser. E.g., I've seen electron apps that come with other background processes. I also think it performs better in terms of versioning/caching resources. So an electron app could be just a web-site, but they often are much more.
Ring doesn't seem to implement basic mitigations like warning users when there's been a login from a new device.

"Ring does not alert users of attempted log-in from an unknown IP address, or tell users how many others are logged into an account at one time. Because of this, there is no obvious way to know whether any bad actors have logged into people’s compromised Ring accounts without their consent."
How We Built This: LightStep’s Slack Integration
"it's also now opt-in."

I believe this is the improvement you are looking for.
The US Government needing you is always enough to prop you up.
An interesting point in there on culture fit which I always had in the back of my mind. It's quite possible your "cultural fit" is way too restrictive. Being challenged with new ideas can be a good thing.
After review, the ruling on the field is overturned.

Self Own: 15 yard penalty. Play the American ads.

#fail
They are suspending production of them to avoid various issues:

1. Cash flow issues, since they have hundreds sitting around they haven't been paid for yet.
2. Storage issues, since they have hundreds sitting around.
3. To make it clear to the FAA that there's a limit to how long re-certification can take without larger economic impacts.

I would fully expect that with Boeing and the Airlines' pressure on the FAA, and the FAA's current schedule, the aircraft should be re-certified in January. It could slip again, with another issue or a government shutdown, but those are not that likely.
Thanks for the oddball YouTube link. Love finding gold with <300 views.