skysight-inc/HackerNews huggingface dataset:
I do tech support for multiple family members, and I have a policy about this. If I trust someone enough to hand them an Android app store, I also trust them enough not to download malware from the open web. On the other hand, if I don't trust someone to download software off the Internet, I also don't trust them with an app store.

There's a fair amount of anecdotal evidence there, I can't give you hard stats to back that up. But I suspect a lot of the "app stores improved security" anecdotes people have are actually due both to family members just slowly getting better about security in general, and (to a greater extent) the fact that phones are doing a better job than Windows/Mac of embracing the web model of sandboxing applications.

> because they get filled up with IE toolbars

This example in particular makes me smile, because I have family members on Firefox today, and they still end up with random malware/adware extensions, they just install them from the official store. It does nothing to help -- I've asked them how they got installed, and they don't know where they came from. Websites just asked them to click somewhere, and they did.

Firefox has gone through all this trouble to make sure everything has to be signed and vetted, and it has made no difference at all to my family members :). What they should do is move the extension locking capabilities from the Enterprise version to the regular version, so I can set up Firefox with a few extensions and then freeze it so that nothing can be installed, even from the official store.

Chrome's app store isn't any better[0]. Anecdotally I have roughly two options when I set up someone's computer. Either teach them about security and harden the platform itself, or make it hard for them to install any software from anywhere (usually by moving them to something like Linux and manually handling all of their setup). I haven't personally seen any evidence in my tech support stories that official app stores are helping my family members.

Yes, the frequency will go down. But this is an area where the gains have to be more drastic to be worthwhile. The support frequency only matters for trivial malware like adware and crypto-miners. It doesn't matter for stuff like ransomware, password theft, or phishing attacks. And the gains today are probably about as good as they are ever going to get. Universally, moderation gets worse as systems scale. Android has more malware because it's a bigger platform. NPM gets more malware because its the biggest package manager. I very firmly believe that app stores don't scale, because we can look at app stores today and see that they're not scaling well. It's a security dead end.

[0]: https://adguard.com/en/blog/over-20-000-000-of-chrome-users-...
Go has had to walk back on some of its choices recently; most notably on platforms without a stable syscall ABI and a very strong push for dynamic linking (…so macOS) they link against the system libraries.
I'd check out the HN comments in response to the parent's [1]: https://news.ycombinator.com/item?id=8815778

Specifically the top reply there is by rsc (tech lead for Go)
The best gift you can give your loved ones this holiday season is convincing them to get off Facebook.

If you didn’t feel like leaving over the political misinformation and data privacy abuse, maybe it’s time to leave when the FBI wants to scrape your data.

You may not have anything to hide, but as the article mentions, there is a lot of room for false positives. Trying to prove your innocence can be much harder and more expensive then not being identified in the first place.
>No ones going to fast food joints for culture and community

The entire article lists several examples of this happening, and you believe it's all false just because?
Thank you, really enlightening video. I'm happy I bought a HEPA filter now, rather than an ioniser.
Probably Kubernetes which was indeed Java in formative years.
Generally phones are communication. Historically people deprived of communication (relatively speaking) had economical trouble and not just because they couldn't afford it.

It opens opportunities.

iPhone might be a toy, but an old PC with web and email and an old phone with voice and SMS are much needed these days. Heck, there are very cheap and usable smartphones out there.

Density and latency are important though to a point. If you cannot download video due to bad ISP, you won't have access to certain educational opportunities. If your connection is accessible only once a week, you might miss something as simple and critical as accurate weather predictions.

I think next step would be integrating the communication device with body either via haptics or implants, to even further open bandwidth and reduce latency.

Obviously you cannot directly escape poverty with just information. But you can network locally, which can be even better solution. Networking, especially longer range, has a way of making big problems solvable.
This Has Been the Best Year Ever
Good to get your message.

Just using terminology more precisely as it applies to a natural environment over a lifetime.

The one constant is the structure which enables other people's money to be used for pure financial leverage.

No requirement for free enterprise which I truly care for as well.

Heck, before they were united, some States of America were founded by royal capitalist corporations, about the furthest thing from free enterprise.

So capital as other people's money is a resource, but not every resource is capital unless it actually belongs to somebody else with their conditions attached as agreed.

Not so much means of production, or hard assets, but whenever an investor provides capital to a founder so that

>The business strategy and long-term vision can be anything the parties agree upon.

Regardless of whether you build or acquire any facilities they are

>entitled in return to a portion of the proceeds from the enterprise that he or she enabled.

So I think we can agree that type of thing is it for sure.

But I do think it's actually some of the uber-capitalist corporations which have done the most damaging outsourcing.

And I don't see how I could rightfully be a capitalist without any capital.

Well, it might just be best to be able to change at any time, if you really do know how to perform for shareholders.

A founder without any of other people's money, and without enough prosperity to enable their investment in other people's ventures, just doesn't seem to be actually handling capital, yet, even if the cash flow gets fairly large.

Even if they are very agressive entrepreneurs this does not put them in the catagory of funded ventures, and opportunity to well exploit a capitalist market might remain out of reach even while it still must be operated within.

When the economic system is structured so that capital alone can yield more than many labor approaches, terms become more critical than ever for outfits seeking leverage so they can become capitalist in difficult or uncertain conditions.

Without extraordinary terms an operation might be better off which could take place whether there was other people's money or not.

Capitalism can enable wonderful things and not-so-wonderful things but the foundation is basically the other people's money aspect of it.
Note that this is from September. Not sure if anything interesting has happened with the case since then.
There is a fascinating class system for users of Google products, from the biggest GCP spenders who are treated immaculately, to free-tier youtube consumers with adblockers who only exist to be A/B tested and tracked.
I'd like to see a thorough performance evaluation. JS/NPM based untyped language together with communication via HTTP/JSON sounds painfully inefficient.
The Riverworld
The Linux model is not the "right" one, it's a choice that they've made. Just like static linking isn't the "right" choice either, it's an option with its own drawbacks. Other OSes provide an approved, API stable layer to access the OS; it's just not the syscall layer.
It's not a conspiracy theory to say that the vast majority of employees at the tech giants are very anti-Trump. People were openly weeping in their offices after he was elected, execs gave people time off to cope.

The parent poster is correct. What was once praised as savvy is now being eliminated as an option all together as it's become useful to the other side of the political spectrum.
> we should strive to build a few quality relationships that don't interfere with our life

Our relationships are our life. Our goals are just stories we've made up about ourselves
> On the other hand unresellable licenses along with sales mean that everyone pays the same price

no, unsellable licenses result in price discrimination, because it gives the distributor a monopoly on the sale. That is why steam games have different prices in different regions. Through resales this is eliminated because people can trivially use the arbitrage opportunity to buy low and sell high.

This is a good thing because it maximises consumer surplus. I'm not really sure what a 'random consumer' is either. I don't really see why we should let platform owners or developers exercise market power to the disadvantage of consumers.
This looks like bait for an unproductive discussion.
> non-goals (e.g., "make it easy to attach debuggers to apps replicated a zillion times in Borg")

But wouldn't it still be nice to have a standardized way to analyze post-mortem dumps across languages?
Just as in other fields, Europeans tend to outpace the U.S. when it comes to book smarts, but lag when it comes to things you can't/don't learn in school. They're great at building exactly to requirements, but less skilled at handling the unexpected or coming up with something novel. There's a place for both skill sets, fortunately.
Correct. When I enumerate the other alternatives, there's no single backend that is free from a fatal flaw.

SDL - can it drive 4K displays?

OpenGL - a shattered ecosystem, with some implementations being out of date (Windows) or significantly different (ARM + OpenGL ES)

DX11 - windows only

The only real alternative would seem to be duplicating logic by implementing it for multiple backends.

------

IIUC, the author is using a library that will eventually have OpenGL supported as a backend, so I don't think your predicament is forever, assuming that you actually want to use it and aren't just complaining to complain.
Bitly is so useful though for making usable QR links
React Native is a good place to start. Not only would you be able to put together mobile apps, but the knowledge would be applicable to building web pages as well.
A reply from a GitHub worker:

> We do not do content scanning of private repos. There are many reasons an account can be flagged, but uploading a kernel driver to a private repo is not one of them.
I have used UPX on Windows some 15 years ago and liked it a lot these days. My primary motivation was not network transfer speed, it was HDD storage, bandwidth, and especially latency. It was faster to sequentially read the complete binary, compared to reading individual memory pages as required.

Nowadays disk space is very cheap, disks are often solid state with ridiculously high IOPS, but antivirus software became much worse and likely to mark a UPX compressed binary as malware.
You can apply the same argument to books. Every consumer/user/individual right you have is in some way "bad for the industry as a whole", and if they could take that right away from you, they could squeeze you for more money.
What is it about it that makes it snake oil?
> I don't know. Neither do others outside of the project.

> I find these baseless micro-aggressions against Go missplaced and unfruitful.

Hu? Ok then Go is perfect because it is developed in secret.

We are discussing here, I'm not "micro-agressing" anyone. If I don't like a design / re-implementation decision, and I in the mood to share that opinion with this cyber-assembly, I do it. And I expect developers to not be offended by me having a technical opinion; and I expect third parties to be even less offended. And yes, it might be a bad opinion in some cases. I'm not even 100% sure it is not the case here, because like you said they could have had some kind of justification to do that. But it suspect it is extremely rare to have a good justification to rewrite an assembler, with really big quirks on top of that, when they did it.
Both are orthognal. Prentending the contrary is just a way to find pride in deciding to be a geek who has no sex.
Well, Microservices built with Node.js are just that :p
Node's V8 engine is very fast
> People were openly weeping in their offices after he was elected, execs gave people time off to cope.

Same thing happened to certain classes of companies when Obama was elected, so what?

> The parent poster is correct

No they weren't. You don't just get to pass off an idea as fact.

> praised as savvy is now being eliminated

Because of bad press that's not worth the tiny revenues political ads bring in vs. everything else. Maybe they've simply made the better economic decision to avoid the revenue impact of these class of ads. Much more likely than "Tech Giants collude to deny Trump campaign access to social media advertising".
This looks interesting as well as it's developed at CERN and uses plain tcp protocol https://github.com/fast-data-transfer/fdt
There's a difference between mastery and whatever it is you think you're doing in a month. Learning syntax is simple enough, but learning to write software in the language's idiomatic style and using common libraries without looking them up every time is a longer task.

It's not like anyone would say the vistor who looks up words in a travel dictionary has mastered the language...
Vmlinux-to-elf: A RE tool to recover a .ELF with symbols from a raw kernel
On a side note - why are bank apis so sht?

Would love a clean read only way to http api my 3 banks. I don't even care if the security is rubbish for read only. Csv imports are bullshit. There is no reason why this can't be live and clean

So hard to keep track of things when it's spread over multiple banks & jurisdictions
No religious flamewar on HN, please.

https://news.ycombinator.com/newsguidelines.html
I'm interested in this. How are you planning to execute your plan for 2020? Will power? or will you combine that with some kind of service or application to set some guide rails for yourself? Would love to hear the specifics!
Slip fee, liveaboard fee, electric and trash come out to about $800/mo
I think this sort of misses the point of the Pragmatic Programmer’s advice: you should learn a new language every year for exposure to the ideas that language has (e.g. Prolog to get a sense of how logic programming works, J for array programming, etc.). This doesn’t necessarily mean learning the language well enough to write production code and it certainly doesn’t mean switch your primary go-to language every year.
If this to you is a low, then where do you suggest that culture and community should be found in these places?
I feel exactly the same way: Computer Systems Engineering. Took to programming easily, as well as digital. (Not as good in analogue though). Was teaching my tutors programming by the end of first year. Getting asked to hack/ deconstruct software in 2nd.

Would fail miserably in these Google style tests.

I think the difference is that our brains are wired to solve issues from first principles. Some of the best CS I've come across use pattern recognition to determine the best algo to apply to a situation.

The end result is the same code, but we speak different languages until we arrive at the same end. Other design methodologies help give us a better framework for cross communication.

Eg. Voronoi diagrams. Absolutely fantastic way of doing mesh reduction. Took a CS guy to point it out to me ... (I was mostly thru designing my own).

Eg. Same CS would never consider using ASM to save clock cycles.
Right! I am shocked to see some of the rhetoric in this thread that is clearly held by higher income folks. To believe that community and culture requires material things like fancy tables and premium meals and dressed up waiters is....feudalistic, and the same sort of thinking that leads to golden toilets on $20 million yachts.

Community and culture requires friendship and comradery, something the poor hold in droves and the rich spend their entire lives trying to find. It really must be lonely at the top.
Just saw a french documentary on TV5 about bread and one guy also had "gluten intolerance" just to find out latter he had an intolerance to insecticides and the like used when storing the grains. Large volumes of grains are attacked by insects and fungus and the easy solution are chemicals. To be found in flour latter on and in bread.
This is why Cranelift is being worked on. There is also a Rust interpreter, miri.

I think starting with LLVM was the right decision (and one that was I was primarily responsible for). Rust would lose most of its benefits if it didn't produce code with performance on par with C++. LLVM is not the fastest compiler in the world (though it's not like it's horribly slow either), but its optimization pipeline is unmatched. I don't see replicating LLVM's code quality as feasible without a large team and a decade of work. Middling code gen performance is an acceptable price to pay until we get Cranelift; the alternative, developing our own backend, would mean not being able to deploy Rust code at all in many scenarios.
Well don't have any kids then.

So from an evolutionary standpoint, focus might not be that important after all ;).
Anything like Kurt Saxon's "Perfect 3.3 Cent Breakfast"?

https://www.survivalplus.com/foods/The-Perfect-3.3-Cent-Brea...
Who is your customer and what are you providing for them? If your customer is the job advertiser then do they want fewer to apply, more to apply, or the best to apply? If your customer is the job applicant then how are you saving them time or reducing risk?

I like that you are focusing on the common sense aspects, if you get the basics right then I think you will be off to a good start.

A good initial start for your site would be to standardize the amount and type of information for each job advertisement so that applicants have an easier time comparing them.
Ebooks are also more accessible than print books. Text-to-speech and the ability to change font size mean ebooks are accessible to people with vision disabilities, and many people with learning or attention disabilities find text-to-speech helpful as well.

Braille and large print books exist, but only sometimes will you find the book you want in those formats. And those traditional accessible formats aren't nearly as flexible as an ebook. Depending on the individual, a particular level of contrast, certain colors, or font may make a big difference, particularly for people who are legally blind but still have some limited sight. There is little chance of finding a print book with precisely the right formatting for you, but with ebooks the problem evaporates.
Remarkable Papers from 2019
We've asked you repeatedly not to do personal attacks on HN. If you keep doing it, we're going to ban you. I don't want to ban you, so would you please review https://news.ycombinator.com/newsguidelines.html and fix this?
Or again relevant experience. No one is gonna say no to a person coming out of e.g. Netflix’s search dept or Facebook or has decades of big data experience, regardless of their education.
My point is not that you must agree with Moxie's design choices. Just that there are inherently complex trade-offs involved and Moxie makes choices focused around mass adoption and not for selling the protocol to big companies.

Also, i'm not sure what you mean by third parties knowing "everything" since Signal provides E2E encryption of content and pretty good social graph protection. For existing users of Android and IOS (target market) I'm not sure what extra trust or knowledge Signal users must give to Apple/Google other then the fact that the user does use Signal.
I've seen a bunch of people switch into the field, realize that they HATE writing code and promptly leave the field. It's easy to forget on a site like this that very few people actually enjoy programming. You're translating human ideas and language into something a machine can understand. That's not most people's idea of a good time.
I think it's also easier for any developer who is looking to start front end development.
I think this should apply to all software one buys that can and does run solely on one's hardware. The idea that only a license to the software can be sold is frankly absurd and in a world of SaaS, unnecessary and destructive. It's amazing what kind of illogical craziness our courts of law can justify in the name of profit.
So what's different from PyAv ?
Holiday travelers, take note of this airport security art project
Exactly, and I’m surprised none of the other comments mentioned this so far. Often web app endpoints are bottlenecked by IO because they’re spending most of their time talking to a database or cache server. Python is probably not the right tool for a CPU intensive endpoint that needs to serve up hundreds of thousands of requests per minute and can’t be cached.

There are a lot of ways to handle the IO intensive scenario in python:

* Threading - Works with python libraries written in C, but now you need to add locks to your code to prevent race conditions. Not good for CPU heavy work because it’s switching context every ~100 instructions.

* Gevent - Requires minimal code changes, but it usually blocks when running code from python libraries written in C. This uses event loop style concurrency and automatically patches internal python libraries to switch context when IO occurs. This means less time spent unnecessarily switching context, so it can scale better than python’s threading.

* multiprocessing - Better for CPU intensive work, but requires more memory than other solutions. You don’t need to worry about race conditions since the processes are separate.

* asyncio - Requires code changes and using compatible libraries. It does event loop style concurrency that allows you to specify specifically when to switch context. Like with gevent, this means less time spent unnecessarily switching context.

* ...And there are probably a bunch of other ways I’m missing.

I’ve heard that this sort of stuff is simpler in Go.
Please don't respond to a bad comment with another, even when provoked. That only makes the thread worse. Instead, the site guidelines ask you to flag it, or email hn@ycombinator.com in egregious cases.

https://news.ycombinator.com/newsguidelines.html