skysight-inc/HackerNews huggingface dataset:
I think these layers of security against native binaries are a good thing, even though it upsets indie software developers (me included).

I used to distribute some small freeware tools for windows computers for a long time (~10 years). I stopped distributing binaries and only distribute source now (despite the fact that this likely cuts the user base literally to probably 0), because I decided it was simply impossible for me to guarantee the safety of these binaries.

I also got hassled by these security measures from MS/Google/etc., but honestly, they're right. I was making non-reproducible builds with dependencies I couldn't fully control on an insecure computer, uploading to a web host that I can't really trust, and letting the binaries sit there for months/years.

I used WordPress for a while, and it did get hacked a few times, despite keeping it reasonably up to date. I was first alerted to these hacks by google telling me they found malware on my site and were alerting people to that fact. My first reaction was obviously to be mad at google, but they were right.

Eventually I switched to a static website. But even that is hard to be fully confident in. I'm still trusting a cheap web host to keep their Apache (and whatever else) up to date. I bet cpanel is a cesspool of vulnerabilities given how janky I've observed it to be.

I suspect some or all of the above is true for the majority of the developers negatively affected by these security measures.

If you can actually be fully confident in your whole build and distribution stack, then you can probably easily afford the compliance/certificate costs to meet MS/Google/Apple's requirements to avoid getting flagged by these security measures.
This article is, in a way, kind of sickening. One of the women quoted talks about how her son was killed by diabetes complications. Sounds suspiciously like McDonald's is the knife that tears families apart.
Yeah, those gross low class people. I, too, enjoy claiming that things I didn't know existed must be unimportant. Everyone knows that culture is found at stylized bars and haute eateries.
A "dialect" of MacLisp, the page says. I doubt there was any code in common.
Imagine getting caught running the largest illegal global surveillance program
This is cool, but I must admit I'm kinda trying to wean off Python to Rust and was looking for something just like this, but for Rust.

Anyone know about such a project?
Perfect example. French and English are not in the same "larger family". French is a Romance language and English, while influenced by French, is a Germanic language. Learning it in 25 weeks depends on your definition of learning. You might be able to communicate basic ideas in 25 weeks but very few people are going to ever master a language in that time.

The same goes for programming languages. The syntax may be easy, depending on your language of choice, but mastering it is another story.
Oil for my car: $20, lasts 5000 miles

Oil filter for my car: $8, lasts 15000 miles

Oil and filter change for my least expensive bike: $22, lasts 1500 miles

Oil and filter change for my lowest maintenance bike: $67, lasts 6000 miles

Valve adjustment: $200-300 for a professional to remove the head and cams and adjust the valve shims. Interval varies, usually every 10000-15000 miles on a bike. Not required at all on a car due to hydraulic lifters that are fine for a car engine but can't move fast enough for a high-revving bike engine.

Final drive: Chain and sprocket need replacement every 12000-15000 miles, costs about $150 or so. Shafts need shaft oil every 10000 miles, dunno what the price is since I've never had anything other than a chain. Most cars last 100000+ miles without any transmission service.

Spark plugs last 100000+ miles on a car but usually are changed every 10000-20000 miles on a bike. Modern bikes often use multiple plugs per cylinder. $5 per plug.

The tires are the main killer for me. A set of tires on my car lasts about 6 years, while I have to replace tires every year on my main bike. That adds up very quickly.

Other costs:

Coolant every 4 years, brake fluid every 2 years, but that is similar on the car.

I have to admit that good coverage bike insurance is cheaper than good coverage car insurance as long as you stay away from sportbikes and hoon machines.
One of the most insightful and helpful and energizing responses I ever read!

I can't thank you enough!!
Japan is so advanced in terms of supply chain. Good read.
I do feel he knows a bit about encryption, but he doesn't know what he is doing plainly.

He is kind of a weirdo
From TFA: “What M.I.T. saw, we reproduce,” he said. “But on top of that we observe many more states, which most likely in his case were not seen, because of the dirty devices.”
Lucky you. Remote is great!

Some points to share:

- headphones are must (in case you are not alone / rooms)

- good music, good coffee, good internet

- discipline

- discipline

- discipline

- time management / time boxing

- enjoy the benefits of free time / your own schedule
* Red Rising (series) by Pierce Brown
* Stormlight Archive (series) by Brandon Sanderson
* The Three-Body Problem (series) by Cixin Liu
* Malazan Book of the Fallen (series) by Steven Erikson

Why all fiction? No matter how much I read about the human mind or current affairs or computer science or quantum physics or ..., there is no deeper, more lasting feeling in my soul than finishing an epic tale that has grabbed every ounce of my attention. So much fun, so many characters and plot twists and emotions and gains and losses. I loved every second reading these books and they have restored my faith in modern writing. Well done.
Don’t use Go.
You forgot valve checks. Those are an expensive service required on bikes but not on cars.

And moto tires are expensive, much more so per mile than car tires.
Also, every Signal user is likely geolocated at at least meter accuracy.

Can one still side load Signal via adb install?
Autohotkey for automating all the rubbish and manually intensive software I'm forced to use at work.
- Google Keep ( chronological, good search, hashtags, simple, fast)
- Evernote ( more features)
- MS OneNote — Comparable to Evernote but free.
- A github repo + `ack|grep|fzf`
- Apple Notes (only if you exclusively use iPhone
- Keybase Files + Encrypted Git repo (an encrypted alternative to github)
- Moleskine pocket notebooks

My breakdown is 80% keep, 15% moleskin (then I transcribe to keep) and 5% Keybase (for off-the-record journaling)
In the neighborhoods they live in, McDonalds is often the healthiest low cost restaurant option.
Don't remember where I picked that one up but I like the saying: There are very few challenges in life that couldn't be made easier to overcome by knowing the right people.
Percentages are misleading, what matters is the actual time it takes. Even small gains will have an effect as you increase the traffic and add additional stages to the system. Small delays accumulate and can have a surprising effect on queue sizes and latency.
كلمات اغنية خليك جامد مدحت صالح
Life having meaning is like life having a door. There is only one way to advance and for a lot of people that door is locked. If you instead think that the door does not exist then you are free to choose any path.
It does what it says and it’s expensive. There’s a couple of commercial packages like this - two that come to mind are vcinity and Signiant. A solution can be made but every time I look at the market you find very few customers with a real need to move terabytes that can’t solve their problem with a snowball-style solution. Those that do usually also have the economics to justify a commercial package.
Wonder if you would have the same opinion if you taught in a poor neighborhood, kids who have English as a second or third language.

I would gladly admit that my method is shitty if:

They only failed my subjects

Some still couldn't answer copy&paste kinda questions - open book quizzes

Other teachers didn't pad their scores at the end of the term

I'm done with this thread.
Well in Europe it's like that as well. My neighbourhood didn't have a warm place to hang out and everyone went to the city centre to socialize and only when a McD popped up did I start seeing kids from the block hanging out in the hood
As a native iOS developer I will gladly help you answer some of these questions if you want to provide more specifics on what you're looking to do. Could you reply with your email, or put it in your HN profile? Or just elaborate here?

On mobile we work with pretty high-level abstractions, so if you did this yourself, most of the new stuff to you would be the frameworks like UIKit or Core Data (at least on iOS).

Edit:
Ray Wenderlich and objc.io are my go-to learning resources for iOS stuff
I use it in the browser. Works fine if you don't allow it to send notifications.
If you need Photoshop, you'll stay on platforms where it's supported. If you don't, you'll probably not pay for it anyway.
I never saw Raval as much more than an internet personality.

As such, the fundamental problem here is the world today values and rewards glossy content. Gobs and gobs of glossy content. Repackaged content. Aggregated content. Outright stolen content.

If you can make it at scale, views, subscribes and subsequent ad impressions will make it worth it.

And the good news: we're not discerning viewers. Someone stole something? We'll wag our finger, furrow our brow and click play anyway. There exists only incentive for producing.
This comment from the above link is worth highlighting:

>Last thing: I visited the first location of the California gold rush. It was a tourist town filled with vacation homes set aside a picturesque lake. You know what you did not find there? Any of the families of the old gold miners now trapped in despair or drug addiction or boarded up homes. Once the gold dried up, those settlers moved. Unpleasant to be sure, but they did. And I have to think they also liked living there and found it a difficult choice to move. Just as the migrants from mid west moved during the dust bowl. But they did it. What has changed? I have to think government policies that have subsidized the pain of economic competition have made the tradeoff between moving and not moving easier. Is that the world we want?
Did they actually redo everything, or does it just look that way from starting from the Plan9 toolchain? Which could also be said to be re-doing everything, but from a much earlier starting point.

IIRC Go started out shipping with a port of the Plan9 C compiler and toolchain - it was bootstrapped by building the C compiler with your system C compiler, then building the Go compiler. Which, until re-written in Go circa-2013, was in Plan-9 style C. It all looks deeply idiosyncratic but it was a toolchain the initial implementors were highly familiar with.
Submitted title was "John Carmack advocates C++ for server development". We've replaced it with a shortened version of what he said.
This simple framework helps me format my thoughts for presentation:

- What is the problem?

- Why is it a problem? (Eg, Business impact, impact on customers, etc.)

- What are we doing about it?

- What consequences do we expect (or do we already see)?

Depending on the medium, do a sentence, a paragraph, or a page for each.
Your service sends everything through the instance so we rely on the bandwidth you're willing to share. It already is amazing, but the same thing through WebRTC would be really great. I know it means work would mostly be on the client side though, and curl wouldn't be enough anymore
It was a long time ago though, hardware support was not up to snuff yet...
There are plenty of efforts and tooling that reduce the number of dependencies and the deploy size of binaries at Google. The notion that we don't care about size isn't true.

But it's true that it's not worth optimising first, it's done by first evaluating the impact across the fleet and then prioritising the most effective changes.
I've always wanted to re-sell my Steam games. I assume Valve has a real business reason why they haven't allowed this, since when sharing your games locally they are better than anyone. Clearly they don't have the big company mindset of forcing people to pay for a license on every device.

If Valve complies with this ruling I'd guess we'll find out what that reason is. I think loot crates and the item market reveals the problem. Steam licenses will turn into some kind of black market money laundering machine that will be impossible to regulate.
Remember when they praised the Obama campaign's efficient use of tech/social-media, including targeted advertising? Why do you think this new fangled opposition to political ad spend is timing itself right before the 2020 ramp up?

Hint: it's because tech Titans and their cronies can't tolerate an opposition campaign being just as good at tech/social-media targeting. Not because of some new found puritanical,
ethical hate of politics
Very interesting article, thanks for posting! I've thought about this a lot in the context of online communities (IRC channels, old-style forums and "old-style" games where people can host their own servers, and you get to know "the regulars"). I think the "clan" or "community" idea in some online games really makes them into "third places". I used to play Wolfenstein: Enemy Territory a lot. The key point in the game is that while of course people were better than others, it only took 5 or 6 hours of play to level up to the highest point you could be. Most servers saved xp points between connects, so while it may take a new player on the server 5 or 6 hours to level up to stuff like faster reloading, there is no massive difference between what some players have access to and what others have access to - you don't accumulate weapons or items or skins, nor can you buy them. This means that the game is very heavily (somewhat luck) egalitarian in that some people have more skills than others, but everyone has an equal opportunity to gain those skills.

Newer online games like Overwatch (which I play more now) have distroyed this community spirit. The normal mode of playing is no longer that one joins a server full of regulars, rather, you're matched up with random people. You can play with specific people, but it's weird to randomly friend request someone after the length of a game (20 minutes or less). The mitigating factor is that you can choose to "stay as a team" if you enjoyed your 20 minutes, and it'll group the people who select that together. After playing more games in this group, you might start chatting ("fancy another game?" or "you did great in that!" etc.) and then add each other as friends. But it's not the same as hanging out.

Old games were more like going to your local running club every week. New games are like going to a different fun-run in a different part of town each week, and then maybe someone asks you to to run with them again at one of the fun-runs, but there's a very low chance of that happening and it's kinda weird.

Chat servers/channels/whatever that allow off-topic discussion seem to be the go-to "third place" online now. HN and Reddit are too large to qualify in a meaningful sense for the majority of users.
Agree on most of this; most systems I've used so far feel a bit clunky (Houdini has by far been the most sophisticated system I've worked in), and my sense is that if it had more mindshare / attention, the paradigm could actually be pretty fluid. Using most node-based tools today (including eternal), I get the admonition that it's like using text edit to write python compared to a pro at using pycharm.

The timeline thing is really key. Houdini does it in a sort of clever way where "time" as a variable is exported globally to any node that wants to use it, and the timeline feature is a consequence of using the time variable in any of your functions. i.e. it's not jumping you to a point in the program's execution, but rather acting as a controller for all time-dependent functions. sort of like exporting a time uniform to graphics shader
The context is interstellar probes to colonise the galaxy, that requires a self replicating universal constructor. Otherwise you just get a grey goo, or on Ian M. Banks terms a self replicating hegemonic swarm.
Backtrace can be amazing at run time if your going to put that info into logs. It makes finding "fringe" errors a lot less painful or more easily reproducible.
Hardware support is fairly limited
Yes and the security mainly comes from the sandboxing, not from some hypothetical stores of websites making random judgments (also I also know that the reputation and blocking of website could depend on the presence of hostile JS, but given what is described here Google judgment seems to depends on quite "random" factors, that should also not be relied upon for JS content)

If you want to go toward security, unilaterally disabling parts of the web because of parts of third party legacy OS design is not the way to go, actually I don't see logically how the described approach of Google would yield any interesting true_malware_blocking / false_positive_blocking ratio. And you know what would be even safer? Shutting down the computer when the user attempts to browse the web. Browser vendor should let the OS antivirus take care of its own business -- if I want my complete computer to be taken care of by Google I can go buy a Chromebook...

I was saddened by the move of Edge to Chromium engine, but honestly while I used the old one from time to time for very specific purposes, I could not recommend it to anybody. I will still try to make people use FF by default, but I'm starting to think the position of the new Edge will be interesting and it could be good to try to switch some from Chrome to Edge.
Yup, sorry, my mistake.
After being sued, McDonald's hired Temple Grandin to devise a scoring system for meat processing plants. They are such a big buyer, they practically single-handedly forced reform down the throats of the meat industry.

https://www.nationalgeographic.com/culture/food/the-plate/20...
The problem is that that one OS is right. Systems calls form an API and it needs to be stable and managed. We (developers) have been working on this issue for years and have at least attempted solutions (eg. semantic versioning) where most OS developers feel free to break them on a whim. It is a terrible practice that forces others to spend their time working around.
Perhaps the other assemblers would not provide desired compilation speed?

Perhaps their IP requirement would not sufice Google lawyers?

Perhaps Go devs would rather have more control on the development of assembler by writing it from scratch to understand every design decision instead of inheriting thousands of unknown design decisions?

I don't know. Neither do others outside of the project.

I find these baseless micro-aggressions against Go missplaced and unfruitful.
Would you please stop posting in the flamewar style to HN? You've done it quite a bit already, and it's the opposite of the spirit we're going for here, so we actually ban accounts that do it.

If you'd please read the site guidelines and follow them when posting to HN, we'd be grateful.

https://news.ycombinator.com/newsguidelines.html
yeah, but it's cheaper than full L1 hit, which is where it would go if not for that.
I couldn't have said it better or nicer. Also the todo list example looks a lot like that, an example that could be simply git cloned. If the web/ CSS stuff is original you have more to show!
This is all speculation, but I would guess that the main issue is legal agreements with the publishers. The publishers don't want any game resales, they want only new sales. Unless France can equally compel the publishers to allow this, it might end up being that Steam is forced to withdraw from France.
Evernote isn’t perfect, but it works well enough.
I think this is bad; not necessarily for the consumer, but for the industry as a whole. Reselling means that copies sold after the release benefit random consumers, not the developer. On the other hand unresellable licenses along with sales mean that everyone pays the same price, but the developer gets all of the revenue. Digital goods cannot be scarce; we shouldn't treat them as if they are.
UPXed binaries have their code pages mapped as dirty - this means the OS can't page them back to disk if needs or wants to. In some cases, that's an acceptable cost to pay - for low-latency servers you might want to mlock all your executable pages so there's no risk of a page fault and disk read killing your tail latency. Of course if you're doing that then you have to either pay the full cost of your binary size in memory, or you have to have some warm up phase and then hope that everything you need is loaded then. In the first case you suddenly care a lot about binary size, because memory is quite a bit more expensive than disk.

But one valuable reason to use something like UPX is that you can attach a crappy and thus inexpensive disk to servers that you're not using for actual storage. Compression on disk lets you load from a slow disk faster, and of you weren't paging to disk anyway then UPX doesn't have much of a cost.

But if you're on a traditional desktop operating system, UPX will increase your effective memory footprint, and force writing to swap instead of merely dropping pages. On Android, which doesn't swap, you'll significantly increase your memory footprint.
Completely agree. As a boot-camper myself, I would have been an absolute disaster for the first 6 months (really, longer) of my career. It was exactly working with experienced people who had the time to provide rigorous code reviews, and my own desire to learn from these people, that prevented me from totally messing up our codebase and eventually brought me up to speed. But even today, I acknowledge that my knowledge is very shallow compared to anyone with a four year degree. And I think the job security provided by that degree — which comes from the ability to do good work on things besides just web applications — is increasingly valuable as the number of developers increases (even though developers can work to overcome this knowledge gap).
"Please try harder, you make Nazi's look reasonable in comparison" breaks the site guidelines badly. Please see my other reply to you at https://news.ycombinator.com/item?id=21908329.
>For Valve, it would only apply to tangible games, not to online licenses. According to the UFC, the initial purchaser must be able to resell these games second-hand, even those acquired on the platform.

Sounds like physical games that must be activated on Steam to be able to be played. Once you activate them you can't play on another account even if you have the DVD (but sometimes it's just a code in the case). That's an opposite of most physical console games that can be resold and played on other consoles, under other accounts.

For example I have The Evil Within phsyical collector's edition (awesome game btw) and it comes with a Steam code. I can't play the game under other Steam accounts. And the physical DVDs are worthless, I can't resold them. On the other hand if I would have bought the game on PS4 or XBox One I could just give the disks to someone else and they can play the game no problem.
Over the past 20+ years in the industry I have found that yes, saying "no" is the most important component. If you let other people to walk over you eventually they'll complain you're not flat enough. This includes not working on job-realated stuff on your own time (which is something the employer will almost always try to cajole you into doing), and not checking work emails after work.

The other two major components are sleep and physical activity. Just get that 30 minutes of HIIT cardio done, every day like clockwork, and sleep _at least 8 hours_ a night, every night.