skysight-inc/HackerNews huggingface dataset:
> but yelling at people who make syscalls directly is good.

Why though? Doesn't this mean that all non-C based languages are going to be treated somewhat as second class citizens, having to link the standard C library (eg. as Go is doing on some platforms) in order to call into the kernel?

While languages such as Go and Rust are aiming to replace/displace C due to it being designed in an age where security was considered less of an issue, it seems counter-intuitive to me that we should insist that they should link in the apparent attack surface of the standard C library. The syscall boundary seems an ideal place to make the delineation between the kernel and userland via an established API, and I would have expected that languages that want to displace C be able to use that interface directly in order to bypass the standard C library. That would seem to allow userlands to be built that include no C code whatsoever. But I'm very obviously no expert.
Can't you make page temporarily RW, JIT, then switch back to RX?
Would be interesting indeed!
I don't find it good reasoning, pretty much all drugs can exasperate mental health issues. It doesn't make people violent or dangerous, I would consider alcohol far more dangerous than LSD.
> It might sound crazy for an outsider, but that's just the way it is.

That is not true, in booking.com specific case, any competent frontend developer can do it in couple of days if they had to.
"We just lined up electeons" :)
We make it a point to have our kids spend their money in the form of physical cash (and they’re the one to hand it over to the cashier at the store and take the change back). Otherwise, it’s unapproachably abstract for them.

We don’t extend that to our adult spending though.
But why would they have come here hundreds of years ago? They'd have had to leave their planet hundreds (if not thousands) of years before that. Meanwhile, Seinfeld hasn't even reached them yet. What did they find so interesting about our system so many years ago that they would expend the time and energy for such a project? Who is paying for this?
> Ok give me your address. I'll call a developer and well start a 120 story highrise where you live.

Good. Maybe the US will have a third city then.
It would be very easy to do in Lua/Fennel, afaik. The problem is that Lua is so trigger-happy about `nil` that it doesn't distinguish nil's presence from absence, which won't do for JSON.

Now, I could attempt doing this in ClojureScript, but I'll get derailed to thinking about ClojureScript's inseparable conjoinery to Clojure and JVM, even if manifested in Lumo only as inexplicable boilerplate, and that gives me depression. Also Lua's start-up is faster than even bare Node.

Hy is probably the optimal choice. There's not even much to write: I can as well just spin up Hy's repl and read JSON in it. Maybe will need a few helper functions to save me from verbosity.
My vision was to make an "all-inclusive" product where people with ancient hardware would be able to enjoy a modern-day product. All existing engines focus on modern specs like OpenGL 3.x, 64-bit processors and operating system versions that I am not even able to run on some of my own devices.

In addition I have complex, dynamic geometry to render. And I wrote a custom, fixed-precision integer math library to prevent rounding errors for the almost infinite game world. Other products have weird rounding errors near the start, the middle or end of their worlds because of inconsistent floating-point accuracy. Moving to doubles only mitigates the problem instead of solving it.

And then it's just efficiency too. I have no idea how or why Unity or Unreal will treat my assets. As demonstrated on the stream: the game instantly switches between visual styles and texture quality. It lazily loads all resources so the main thread is only stalled when doing bulk uploads to the GPU. This makes the game start up in less than a second, something I couldn't pull off with a COTS engine.

Let me know if this answer didn't address your question fully.
This was absolutely my experience. Say about the looks of iOS 4-5-6 what you want, but gosh, was it easier to use. It used to be so intuitive, and very little of that is left.
Qodot: Quake .map Support for Godot
Beer and Its Non-Alcoholic Compounds: Role in Pancreatic Exocrine Secretion
I think your definition of conservative is correct, but it assumes the thing you’re trying to conserve is something like energy spent on new/different approaches. I think pg’s definition of conservative in this case assumes the thing being conserved is something like prestige or credibility.

As an aside, in my experience it’s a fairly common usage to describe any behavior that avoids risk along some dimension, which could very well mean going with the herd, if you’re trying to conserve social status.
That depends (almost) entirely on whether the land is public or private, and whether it is local municipal, state or federally owned land, and whether that land has special protections or not.

For example, planting things (or disturbing existing things) on private land or state or national parks is generally illegal and enforced (assuming you get caught, of course).

Planting anything on a controlled list (such that it is considered invasive or otherwise dangerous) is also generally prohibited and enforced.

If it's not one of those things, then it's generally going to be ignored as harmless. If something were to grow to a height such that it obstructs important views (i.e. of a pedestrian crosswalk), or poses a risk of falling on something (a poorly managed tree leaning over a road) then the city or state would likely tear it out. By that point, though, it's not too likely that you'll get the blame for planting it in the first place if you're acting as an individual.

All of this, of course, is just speculation based on assumptions about the potential hypothetical circumstances. IANAL and you would certainly want to think carefully about what you do to property that isn't your own.
The perils of "Cloud Computing" in the 80's:

https://en.wikipedia.org/wiki/Inslaw#Contract_disputes_and_I...

> There were also disputes over service fees. During the first year of the contract, the DOJ did not have the hardware to run Promis in any of the offices covered by the contract. As a stopgap measure, Inslaw provided Promis on a time-share basis through a Vax computer in Virginia, allowing the offices to access Promis on the Inslaw Vax through remote terminals, until the needed equipment was installed on-site. EOUSA claimed that Inslaw had overcharged for this service and withheld payments.
Co-creator here! This is the compiled transcript + additional resources from our free online course jobsearch.dev — happy to answer questions and hope y’all enjoy!
The internal syntax and semantics of the query part is not really defined by HTTP. (https://tools.ietf.org/html/rfc3986#section-3.4)

Also:

"Historic RFC 1866 (obsoleted by RFC 2854) encourages CGI authors to support ';' in addition to '&'"

https://en.wikipedia.org/wiki/URL#cite_note-23
The danger with data is it can keep you trapped in a local maxima. Also there's the whole thing with a lot of users seeming to be more and more annoyed with telemetry.
Did something about his math-teaching ideas make them less applicable outside North America?
Unrelated to the rest of your comment, I found this sentence very amusing:

> Respectfully, you don’t know shit about the families of other people.

Specifically, I found it interesting how saying "respectfully" doesn't average out with the later disrespect into a neutral comment, you have to actively reword it to something actually respectful.
The Gift [pdf]
> In which ways is OpenBSD more in control of userspace applications

They port and package them themselves.
nobody that knows better is buying this spec hardware. it is made to satisfy purchasing departments. i’m sure it’s fine for word or google docs users that want to feel like they have an elite (“pro”) laptop so it also ticks that box.

rather than be upset that it is made, be upset that you had this spec hardware forced on you by your company policy.
Did you consider giving the the user some way to configure the text color?
super underrated guide, it opened my eyes on how to communicate leveling in the interview & what's important when talking to recruiters.

can't believe they're putting it out for free
Probably, but you do not necessarily expect half your text to disappear when you click accept right?
> What would be really interesting is some studies of the people who are in positions of authority to approve or disapprove such studies. What are their attitudes towards drugs in general and various psychedelics in particular?

One thing I've learned about people over the years is that they rarely change, even in the face of evidence and solid persuasion - I speculate the reason these studies are being approved more now today than before is not because of reasoned policymaking, but simply one of demographic shift in the public-sector: Those who bought-in to the anti-psychedelic hysteria of the 1960s will have almost entirely aged themselves out of the DEA, university research oversight boards, and the pharma industry. In fact, as members of Gen X themselves are _aging-in_ to positions of power and decision-making we'll see things start to open-up.
Nothing about this prevents applications from being built that do not depend on libc, this is a flag set on elf binaries that the program loader honors, tooling to build things that really want to generate syscalls can just flag all sections as syscalls allowed.
Few places give a discount for cash in the US. I use my credit card and get reward points worth 1-2% (sometimes as much as 5%). I don’t do it specifically for the points, but over the course of a year, getting ~2% of purchases back really adds up.

I get that the merchant is paying it and passing it along to customers. Since they pass it on to me whether or not I use the card (almost always), I might as well take the money.
That isn't what they said. They carefully explained that they could migrate to Python3 but that the benefit of doing so was small so they looked at the performance benefits of using other languages and decided that the performance benefit was large. The performance benefits of using Go (or Kotlin) were the deciding factor.

My guess is that the framework for them thinking about this is that they have already been thinking about migrating languages to get better performance and the Python3 migration seems like completely wasted effort if you then throw it all away to go to another language shortly after.
Undo on iOS manages to be ineffective and embarrassing at the same time. I give the phone one good shake, feeling like I'm playing D&D, rolling for a saving throw or whatever. Maybe you roll a good number, maybe you don't. It's embarrassing to pay so much money and still feel like you're begging and the technology is deciding whether to work for you or not. I know from spending enough time around people using iPhones in public that the vast majority of the population has decided it's too awkward and attention-getting to be worth trying at all. Being old, married, and less susceptible to embarrassment, I do give it that one shake, and sometimes it works.
Yeah, this is not a racial bias. It’s race-based inaccuracy.
Seconded, and his series in the Atacama is incredible.

Seriously, he's incredible.

https://www.youtube.com/watch?v=gUOejqhaeZI
Ugh those scenes of him dressed up eating dinner alone are heartbreaking.
How monopolistic a company is its demand elasticity.
Build error, build failing

https://imgur.com/mL9ILZO
I strongly support this policy not only for security, but also for general operating system robustness. Linux is pretty much the only system that places the ABI compatibility boundary and the machine privilege level boundary in the same place in the stack. I think that's the wrong place: it pushes a lot of complexity that could be in userspace into the kernel, because the kernel is the first place past the ABI break. Linux would be better if nobody except libc were allowed to make system calls and we just made libc (or a giant VDSO) the ABI support boundary.

We should at the very least have a VDSO for every system call. There should be some opportunity to run code in userspace before a privilege transition. Doing so would give us a lot more flexibility than we have now.

For example, consider socketcall(2): for a long time, all Linux socket system calls (like recvmsg) were multiplexed through a single system call. A few years ago, the kernel community realized that this multiplexing was a bad idea and made individual system calls for all the traditional socket operations. But since we have to support old programs, we have socketcall(2) and the new system calls in the kernel. Why should we?

If the ABI support level had been libc all along, we could have changed the system call strategy (from multiplexing to fine-grained calls) transparently without bloating the kernel with compatibility code.
autosave is awful when mandatory, as it is in FCPX. when optional, like Office, it’s great.
But we can’t live past the heat death of the universe, so does it really mattter? Nothing lasts forever and just increasing the time doesn’t change anything. Moreover, if people never died of old age, they would die of something else. The last study I read about this put the average lifespan of humans without death from natural causes to about 4000 years.
Pour plus d'informations sur Mark et les services qu'il fournit
Oh Mark W. Brown, vous ne faites que recommencer. Vous avez produit un autre film de mariage de style super8 mm qui me fait chaud au cœur et qui fond totalement mon cœur.

Cette jolie demoiselle aux fleurs dans les cheveux porte Monique Lhuillier et j'adore ce film. le père pleure quand il voit la mariée (gulp!), ces magnifiques bouquets et robes de demoiselles d'honneur bouffantes et le temps romantique du couple sur le terrain au manoir de Wethele, où l'affection qu'ils partagent pour l'autre est évidente dans la conduite (encore une fois!).

Comme d'habitude quand il s'agit d'un film de Mark W. Brown, mesdames et messieurs, profitez-en…

Pour plus d'informations sur Mark et les services qu'il fournit, visitez le site Web de Mark W. Brown. Vous pouvez également suivre Mark sur Facebook, Twitter et voir davantage de ses films sur Vimeo.

Vous pouvez voir plus de Mark W Brown sur Love My Dress ici Goodrobe, y compris une fonction d’interview et une introduction au format de film super-8mm, ainsi que parcourir de nombreux autres blogs vidéo ici. https://www.goodrobe.fr/robe-de-soiree-e22
Sorry, that was poorly presented on my part. I believe the most recent estimate was around 2-3% of all internet traffic was served on a web server being hosted by Amazon.

I can’t find the original source, but this Quora post[0] and included primary source[1] suggest the same.

[0] https://www.quora.com/What-is-the-estimated-percent-of-inter...

[1] https://www.netcraft.com/internet-data-mining/million-busies...
Finally! :) I have one with borked USB port (I think the 1537 one), if it works this may make it useful again.

Thanks for working on this!
> one laser remotely generates sound waves that bounce through the body...

This is oddly related to what I was just watching. It was a SciShow episode that discussed how phonons which can be generated (come from??) sound waves. The phonons may be affected by gravity in the reverse way than all other matter and may even repel matter.

Phonons it seems are not just sound. The MIT website explains "phonon is just a fancy word for a particle of heat."

Anyway it seemed somewhat related especially "The resulting mechanical vibrations generate sound waves that travel back up". But I guess the researchers in the article may not have meant the sound waves literally go up.

http://news.mit.edu/2010/explained-phonons-0706
"Today's tools" do not necessarily allow you to make anything like this. I'd even go as far as to say that an array of ancient hardware and software are the main reason for being able to make a product focusing on compatibility and performance. Not aiming for a moral high ground, but just looking at it practically.

I started Angeldust on my trusty, white MacBook1,1 mentioned in the starting post. Having only an Intel GMA945 for powering a 1280x800 display and trying to get a decent frame rate forces some design decisions. I quickly ran into optimizing for GPU overdraw and resources instead of being bottlenecked by the dual-core Intel CPU.

Then I ported the engine to iPhone 3GS where you get the exact opposite situation: the GPU can push lots of pixels to a 480x320 screen, but the ARM CPU is struggling to keep up. Just this 2006/2009 era combination of hardware alone forced me to be efficient with both CPU and GPU. Eventually I even got the engine running smoothly on a first-gen Raspberry Pi on a 1280x1024 display which is no small feat.

I think if you start from "today's tools" on "today's hardware" it's entirely too easy to consider any older platform inaccessible or obsolete, while if you work the other way around you appreciate the sheer power older devices have when used properly. Then moving onto newer hardware is just icing on the cake and just shows you how ridiculously powerful a modern 6-core Ryzen with an appropriate GPU is.
Doesn’t this depend on the backdrop.
Would you fly your own private plane alone?
Writing takes practice like any other skill. When I go back and read my earliest blog posts, it's a total cringefest. A stumbling start is nothing to be ashamed of, and is a requirement for a strong finish.
Some where, some place in the past, I read that Ford had made a very successful car, maybe the Sable, but was unable to figure out why or how it happened. Apple made things of beauty - but it seems now that they do not understand why or how they did that. If it wasn't so sad it would be funny.

Personally, I believe that Apple products used to be works of art that were the result of a combination of talents and skills orchestrated by a master artist. Now they are just products.
Can't help but quote:

«ng the first Jobsian era at Apple, I used to joke that Steve Jobs cared deeply about Apple customers from the moment they first considered purchasing an Apple computer right up until the time their check cleared the bank. Of course, in later years, the check was replace by a credit card, and check clearance was replaced by the 15-day return period, but Steve’s and Apple’s focus remained the same.»

https://asktog.com/atc/the-third-user/
It’d be amazing if we found some polynomial solution to an np complete problem buried in some kids Minecraft mod 10 years from now.
Oh ok, I missed that. So how does this increase security then, if an attacker can just flag the binary safe? Seems like a bit of an honour system.
> Spotify - has a web app

Doesn't that require Widevine DRM?
Can you help me explain where this second class citizen sentiment comes from? If all programs need to go through libc, doesn't that mean they are all equal? Whether to make system calls go through libc or not is just a matter of where you put the ABI boundary. Putting that boundary "above" the raw system call instruction (like most OSes do) doesn't hurt anyone. Linux does it differently mostly because it just shipped the org chart.
Is essential that the people doing this, either knows what is seeding, with name and surname, or stop doing it. Right now. Invasive species are not a joke.

Naive people could end doing a lot of damage after seeing a video from a project in the other coin of the planet. I can spot at least one invasive species in the images that must not be used in some parts of US, for example.
I’d take the complaints about iOS 13 text editing with a grain of salt. I’m on board with most of the criticisms of iOS 13, including that the new text editing functionality is hard to discover, but now that I am familiar with it I would not want to go back to the old UI.
You’re not old. Apple has a software problem these days.
The cert has to be signed by something, usually its own key. If it was self-signed then the NSA signed it with those details.
My biggest gripe is how ridiculous bluetooth connection is on iPhones. Apple for some dumb reason decided to remove headphone jack before making Bluetooth connections easy and convenient. How does this make any sense? It still is bad - long pressing bluetooth button still takes multiple steps and is buggy (doesn't register, or long pressing leads to mistakenly pressing on the following pop up screen listing the available connections).

There should've been software/interface changes before ever even thinking to make hardware changes (removing headphone jack).
the hyperbole is not really helpful or substantive, its not about the algorithm its about how the product wouldnt have shipped when individual contributors, their manager, the director, the executive team, the board, and their vendors all noticed that it didnt work very well when the demo failed because they were not white males testing it on themselves and their colleagues and photos of their friends
How is this relevant? AFAICT AWS Policy statements are capabilities. Each policy statement denotes both actions and resources, and that policy is then granted to another identity/resource.

As noted by other comments the parent article focuses on capabilities that grant definition of capabilities. It shouldn't be surprising that principals can use that to establish further capabilities in the absence of other restrictions.
No, but he was born in Canada and spent most of his life in America, and all of his educational attempts were in North America.
I automated specifically after getting a few stupid late fees in my 20s. At this point, if it’s not automated, I’m at least 25% likely to be late.

Fortunately, there are only a handful of small bills that I have that aren’t automated. They’re annoying.
For the same reason that ASLR improves system security even if you can still in principle pass a special flag to build a non-ASLR binary.
> We should have a VDSO for every system call.

This doesn't really make sense; the vDSO only works for system calls that do nothing but read a value from the kernel and return it to userspace.
A lib for strongly-typed events publicly-listened but internally-only dispatched
I'm going the plug Clockify as a happy (unaffiliated) user. It's free for small users, and has a good reason for how they make money anyway (it's just advertising for them, they make their money from big customers like Google, IBM, PwC). They have everything and the kitchen sink, but you don't have to use it. For example, open an email or a Google calendar event or a Github issue and they've added "start tracking a new task" inline.

https://clockify.me/customers
Terrified mum says Amazon Echo speaker urged her to kill herself
On the livestream I detailed this a bit. Angeldust has a single "domain model" containing all item, entity and object properties contained in a PHP code generator that generates C++ source code and header files for use in the client, server and asset tools. It also generates PHP files for use in the interactive and tied-to-the-game website. The website is also in PHP.

The client uses Objective-C to integrate certain platform features into the C++ codebase on iOS and macOS. Java is used for some functionality not provided by the Android NDK.
Duly noted - sorry for diluting attention.

Connecting both aspects though: arguably the failure of subsequent technologies to fulfill the decentralized Notes vision has facilitated the rise of extreme centralization and greatly exacerbated our privacy problems.
Remember when I mentioned "cyber"? That's because I'm using the terms in the context that professionals do in cybersecurity contexts. What that means is that the pudding analogy is irrelevant.

It's not a good analogy for a whole host of other reasons, but that's one of them.

You're using a nonstandard definition of computer security. That's your prerogative, but don't be surprised if it continues to cause confusion for those you interact with.