skysight-inc/HackerNews huggingface dataset:
I can't say I know of a specific app that had the bad version check. But given Microsoft's devotion to keeping old things working when you upgrade, it at least seems plausible.

This is the closest I can find to a definitive statement: https://www.reddit.com/r/technology/comments/2hwlrk/new_wind...
> you will have to prove the compiler

Strictly speaking you don't - that's one of two approaches. Fortunately, the CompCert compiler already exists if you want to go the route you describe.

The alternative to use a non-verified compiler, but verify that the generated code corresponds to the model. This is the route the seL4 project took. They used GCC, but verified the correctness of the code it generated.
>> Growing up under greater pressure (violence, abuse, trauma) leaves you less resilient, more risk averse, more at risk.

Speaking from personal experience, I have to disagree. I was raised in Baghdad by a single parent, my mother. We lived through three major wars, almost never had a steady income till after 2004 when I was 19 and started working for the US military as an interpreter. I believe growing up under great pressure (and violence) has made me more resilient and increased my appetite for risk.
Interesting. At my company, the curve of level vs gender is steep. Women are something like 5x more common proportionally at the lower levels than the higher ones.

This is apparently because of recruiting, too; we do great at recruiting from campuses, Grace Hopper, etc, and not at recruiting senior levels. Stats show women are getting promoted just as fast, we just don't get the candidates.

Do you know how you guys recruit more senior women? We'd love to know!
My guess was Blackbird or Airtree. A search shows them being in the top 5:

https://www.smartcompany.com.au/startupsmart/analysis/austra...
And all that was ever needed was a colored bar on the outside of the plug and the jack.
Doing your own thing often means working for clients which means working for someone .
Mass shootings on a nearly daily basis, imprisoning journalists, highest incarceration rate in the world and extrajudicial executions don't happen in a sustainable society.
Do you expect to ever end the arms race of finding loopholes vs closing them? What would this look like?

I don't believe it's possible. You can't fight bad actors by hoping they'll just somehow lose. The unregulated "more competition" market quickly turns into a "less competition" market as the most ruthless parties establish dominance through whatever means necessary. Your barriers to entry, in the extreme case, become things like physical intimidation.
It's all in the way Plaid connects to the banks - they do not systematically support MFA in their bank connectors; hence the issues you are seeing.
Mathematicians divided over faculty hiring practices that must promote diversity
so they'll just track users via Chrome, Android, Google DNS, etc

reducing third party cookies is welcome but this just seems like a move to protect their ad revenue
Hi HN: I've been around HN since 2011 and this is my first dive into gRPC. This tool is still in beta, but I'm happy to share it with everyone, it's been an amazing learning process. I'm happy to answer any questions or take any suggestions. Also, follow our progress on github!
Given the context of this conversation... How does the math change if you strike out on your own, earning nothing for a year?

I think it suggests that the healthcare barrier to entrepreneurship is much higher in the US than in Australia.
One reason is that in the old days people would run out of money before the next payday. The other is as an alternative to giving your kid cash to go buy something for dinner.
Can you explain (maybe with screenshots) on what you mean by "similar to reddit in the core but will have different features built on top"?

To me, Reddit is more of a forum whereas yours is more of a messaging system if I am understanding correctly?
There have been crypto vulnerabilities in Windows libraries before, but not the e=3 vulnerability; CryptoAPI parsed RSA signatures back-to-front, and so sidestepped the issue.
Matomo supports log parsing.
I've heard before that it's a split distribution. The quality of healthcare & outcomes in the US is some of the worst in the world, if you are poor. It's some of the best in the world, if you are rich. Or so I've been told.

For example I was taught that a big part of why our maternal mortality is high, is because new mothers who are poor do not or cannot follow up with their doctor in the days after release from the hospital if something isn't right, e.g. when bleeding fresh blood instead of clotting. Visits to the doctor are expensive, and various barriers (such as language) may have prevented them from being educated on when to come back for help.
I remember "How Not To Sort By Average Rating" by the same author, which I am confident helped shape thousands of recommendation/quality sorting algorithms (including Reddit or Yelp), over the years that followed its writing.

https://www.evanmiller.org/how-not-to-sort-by-average-rating...
Fortnite is now "Skilled-based match making, with forced cross-play". Doesn't matter what platform you are on, you are matched by your relative skill level. High-level 6-finger-claw iPad players (and some of them are really incredible!) will be in lobbies with medium-level console and PC players.
DoD Wants Help with “Predictive Health” (Scroll Down)
I agree mostly with Seenso. I can watch national geographic with the family easily, or watch some trash tv. My tv time is also lower, but it is easier to prioritize that over getting a multiplayer game going that we can all co-op on.
I think it's more like, "We find so many critical bugs, let's blow some of them for PR once we discover that adversaries are using them too."
What does that have to do with startups? My first job out of college was a very similar experience to yours yet the company was fairly large. (~2,000 employees) By the time I left I was the lead developer of one of the many projects I worked on during those years.

I think a larger company is probably more likely to have an established mentorship program in place for he engineers rather than a startup.

I also needed to take three months of disability and I received 100% of my pay during those three months (and even kept accruing PTO) because my established company provided me with short term (and long term) disability insurance.
I use this and for the most part it works just fine. The other day I ran into a problem where it got into this loop and I ended up making Chrome as my default browser just to get around this issue.

The issue is when you've an app that needs Google authentication and it opens the browser. To be more specific, I was trying to log in on Postman using the web authentication option. It opened my default browser (Firefox) just fine but it opened my other container (Work) which is not associated with my Google login. When i asked it to re-open the page in the other container (Personal), it lost all the redirect information and wouldn't let me continue back to Postman. I swear I had this same issue with another app but can't recall its name.

I suppose i could workaround this issue by having my personal container handle all the postman links but it seems like too many steps to get one thing.
> the bank we trust with our deposits is losing money every month

Meh. I don't trust the bank. I do trust the government deposit guarantee.
Nice idea! Won't work for static pages though.

Regarding log analysis, it can be tricky to get right due to logrotate edge cases.
It doesn't. But don't bother complaining when you get cancelled--we won't hear it.
Thanks! I didn't, but maybe I should have. I thought the API of scrypt.js would work well and don't think I came across anything better. I also figure scrypt is plainly better than PBKDF2; being designed from ground up for key lengthening and offering memory hardness. I figure bitcoin ASICs might be repurpose-able to attack PBKDF2; though I'm not sure if that's a threat, and I imagine it mostly somewhat applies to scrypt anyway because of litecoin and friends. If I were more worried I would have researched the default parameters more, I think this is 128- vs 256-bit territory.
Unfortunately Wireguard doesn't work on PFsense/FreeBSD otherwise I would be using it.

OpenVPN is generally well supported.
> but allows for far more tracking and precious data collection

I think you answered your own question there.
At the time the medium didn't allow for unlockable episodes/chapters ;)
> I am not saying they strike the right balance or not, but doesn't there have to be SOME balance?

No, absolutely not. User-targeted advertising does not need to exist, a priori. Plenty of empires were built on privacy-friendly content-targeted advertising in the past and there's no reason that can't be done now. Except that Google would make far less money.
That hidden cost is subsidized by the other customers charged the same price but that pay cash, or via debit card rather than credit card, or even with a credit card with lower rewards than yours.
I think the author is correct that the primary likely problem is mapping pid values into DB or textual files, with fixed fieldwidth assumptions.

What this made me realize, is that because I do this so little overtly, I hadn't even considered it a high risk. I do have pids in files: /var/run/nginx.pid style. They aren't fixed width fields.

Top and the like may mis-display on a wide pid I guess, unless its set to use some truncating field but then you get a problem of mis-attributing the PID value to the truncated value, cut/paste.. BOOM
if you scroll down you'll find a funded opportunity to work on a healthcare ML project, incidentally backed by the DoD, which as you know has a pretty awkward relationship with SV (including non-unique URLs). But in this case, they're trying to pay people to hunt cancer, other healthcare challenges.

This bit is fairly unique to the OTA contract vehicle that Defense Innovation Unit uses, and I suspect of significant interest to start-ups:

"Companies are advised that any Prototype Other Transaction Agreement (OTA) awarded in response to this Area of Interest may result in the award of a follow-on production contract or transaction without the use of further competitive procedures."

If you have a look here (1), you'll see the follow-on production contracts can be quite substantial.

(1) https://aaf.dau.edu/contracting-cone/ot/prototype/
Do we want affordable, plentiful housing, or arbitrary beauty, though?
International Workshop on Plan 9: 2020 Edition
> The hardware would perform the optimisation using typical means.

The HotSpot JIT is an impressive feat of compiler engineering. The advanced optimisations it performs cannot practically be performed in hardware.

Modern CPUs are capable of, for instance, loop-detection, but they haven't put optimising compilers out of a job, and never will.

Jazelle would add no value on a modern ARM server, for instance. You'd get far better performance out of HotSpot, or some other modern JVM.
The truly big games, in terms of hours played, seems to be online multiplayer. MMORPG, FPS, whatever DOTA is... those are the games where some people start putting in 1000+ hours per year. Problem is close to everyone can enjoy TV and movies, not everyone wants to do eSports.
Big if presently true.

Ultimately people are going to spy on everything they can get away with, more data for the neural network to make you buy things...
The biggest problems faced by most companies are logistical problems.

Doesn't matter if it's cutlery, bits, people, or shit. Your company's biggest problem is probably ensuring the right stuff is in the right place at the right time, while also ensuring the 7 other combinations of right/wrong stuff/place/time don't happen.

But most companies don't realize that. They try to frame logistical problems as business problems and try to have fresh MBAs solve it. Half of all startups are some guy trying to solve a general logistical problem for a specialized audience using the cloud.

Old guy at my old job. Retired Navy Chief. Never seen him smoke, but can't imagine him without a cigar in his mouth. His saying was "The important part is getting the logistics right. Everything else is logistics."
Not quite sure what the take-away is here, and whom he is talking to.

Good software is good. Well, uh, yeah. Anything else?

Write software that people actually want?
Well gosh darn, why didn't I think of that!

Also, GNU grep is not antifragile. I learned that when I upgraded my PCRE to a new major version and suddenly grep failed. grep is used by configure scripts, so without a working grep you can't compile a new grep. To me that is the very opposite of antifragility.
Keep in mind Australia has ~40% more doctors per capita than the US [0]. And the supply/demand curve is not linear, so physician shortage alone can account for a significant part of the price difference (note that Singapore and Japan are noteworthy exceptions to the doctor/quality ratio). As for why there are fewer doctors in the US than most developed countries, there are a number of potential reasons, and there is no reason to believe that any of them would be solved by the government subsidizing healthcare. You might just get long wait times like Canada and the UK (with comparable, but still higher physician counts than the US), which are sort of the jokes of socialized medicine countries.

[0] https://data.worldbank.org/indicator/SH.MED.PHYS.ZS
I think you're talking about just allowing the symbol. The plus sign is an allowed character in the local part in the spec. But mailservers are not required to treat it specially and apparently Exchange doesn't. That seems to be the thrust of the comment you answered to.
> If we can't even get crypto libraries right

Signature verification is one of the hardest things to get right. One reason is, they're harder to test: when you encrypt or hash something, you have a whole bunch of bits you can check against test vectors. With signature verifications, you only have one bit: it's a match, or it's a fail.

Moreover, it's very easy to forget to check something (here, that we are using the same base point). Other constructions, like EdDSA, are simpler, and verification requires a single equality check. Harder to botch.

And even then, implementers can be tempted to get clever, which requires extra care. I've personally been bitten by not verifying mathematical jargon, and mistakenly thought "birational equivalence" was complicated speak for "bijection". Almost, but not quite. This single oversight lead to a critical, easy to find, easy to exploit vulnerability.

We found out 15 months later, 1 full year after public release, by tinkering with the tests. A cryptographer would have found it in 5 minutes, but as far as I can tell, they're all very busy.
Google Flights is faster than Kayak was.
I'm a tad younger than you and I'd like your opinion. I stopped caring about the gaming industry because

1) even if it's entertainment, I think the deep value is .. as a kid thing. It's not dismissive, I just think that gaming value has limits. It's a dreamy world you interact with and that fits the younger brain. As adults you'd rather master the real world more.

2) I find games today not much more original than in the past, it plateau-ed somehow [0] and they're mostly selling more technical oomph to justify new things.

[0] to be honest I interact very lightly with games, only a cousin younger than I show me some stuff, this plus the fads you can hear about online.

Do you really think a PS5 game will be that much more enjoyable than a PS2 game ? The other question .. well you answered it. You and your friends are still into them.
A generous 8 days notice of the product shutting down. That’s a new record I think.
I'd say the US's first total loss was the Civil War. The North didn't really win. 100 years of Klan terror should be enough proof, not to mention the continuing rule of the South by landowning oligarchs who keep the place a festering corrupt shithole.
Which is why collective bargaining and unions make life better for everyone in the long run.
Ask HN: S3 Compatible Storage with Versioning?
I am looking for an s3 compatible service cheaper than AWS s3. I am currently using Exoscale, but it doesn't have versioning, which I need. Scaleway has versioning but has problems with Restic backups/restores, and Wasabi doesn't have a proper CORS support so direct uploads with presigned URLs are broken at the moment.

Is there another compatible service which
- has versioning
- supports CORS / direct uploads
- is very compatible with s3 so things like Restic work?

Thanks!
The eprivacy regulation, taking care of that, was supposed to be finished by the time the GDPR went into force. But Austria's pro-business government managed to delay it until there wasn't enough time before the last European Elections.
The problem is not with digital signatures. The problem is bad ECC certs used to generate digital signatures. So SMB is not affected. Code signed with one of these bad ECC certs is a concern. But considering that people install stuff that's not signed all the time, the primary issue is probably TLS MITM.
http://archive.md/I8yLE
In America, it's amazing if you're rich and a nightmare if you're poor. Decades of trickle-down Reaganomics and hyperindividualism lead to a dog-eat-dog society where nearly everyone is atomized, disconnected and unconcerned with anyone else... it's not so much a civilization as it is an insane asylum of people locked in together who don't want to know anyone else. It's as close to libertarianism without privatizing fire departments, but basically everything else is privatized (including numerous "private-public partnerships") to deleterious fallout (healthcare, prisons, education, military, roads, infrastructure and many more areas that allow perverse incentives and corruption to takeover public resources and commonwealth and monetize them). Lacking enforced legal protections is a disaster from a lack of government... less government isn't always a Good Thing, especially when political appointees are wolves guarding the henhouse.
N=1
“ What doesn't kill them doesn't make them stronger: Questioning our current notions of resilience.”
https://www.ncbi.nlm.nih.gov/m/pubmed/29254696/
America got great by sending the children of the elite to Holland for college.
"Dual Elliptic Curve" is an RNG, a PKRNG, that works by using a public key to encrypt its state, which is then directly revealed (as public key ciphertext) to callers (for instance: in the TLS random blob). The problem with PKRNGs has nothing to do with elliptic curves; you could design one with RSA as well. The problem is that for a given public key, there's also a private key, and if you have that private key you can "decrypt" the random value to reveal the RNG's state.

That's not a flawed curve that NSA pushed; it's a much more straightforward cryptographic backdoor.
I would say I had a great childhood in general, but also with some major stress factors—I feel I can safely say that those stressors don’t leave you on their own so organically. And that kind of stress, even if it’s not conscious all of the time, can colour one’s perspective in an impactful way. Sometimes for better, funny enough—but also for worse in others.
There's no reason to conflate "advertising" with "user-targeted advertising". There's nothing inherently privacy-breaking about advertising. A regular billboard doesn't track users, a print magazine ad doesn't track users and there's no reason internet advertisements absolutely need to track users.
>Maybe the fact that Houston isn’t 49 square miles, surrounded by water on three sides, might have something to do with it.

Neither is Silicon Valley.
Thank you for your insightful answers.
Major investment firm to prioritize sustainability, back off coal
Gov trying to ban magnet balls again
I wish the browser ui for location and notifications would be less intrusive
By dropping the render farms at the other end of your broadband connection. It worked, it just wasn't economically feasible then. :)
which just makes me hate southwest even more.
Maybe it's because they haven't tried any better and so don't know how the constrained controls are limiting their gameplay?

I see a lot of this in other fields. People will use a sub-standard workflow and think it's fine until they experience something better and at that point they realise how bad their previous workflow was.
As a merchant that accepts credit cards, I can say that the vast majority of the money comes in via credit cards themselves, and costs 3% in fees. It absolutely comes out of the customer's pocket at the end of the day.
Unlimited Tomorrow is modernizing prosthetics using IoT
That is from the Heritage Foundation. Funded by the Koch brothers. Do better next time.

https://www.nytimes.com/2018/06/20/magazine/trump-government...
> Exceptions as flow-control is normal in Python.

Perhaps it's high time that problem was solved?
I have the same experience whenever I read a paper. I wonder if there's anything intrinsic to that or if I only like it because of nostalgia.
To try an approach without assigning blame:

Banks and financial institutions are set up to detect fraud in ways which will tend to spot 'unusual' behavior and anomalous patterns.

The combination of someone who is technically competent to the point that they use seemingly different behaviors to the typical user population and are taking actions which have traditionally been seen as high risk (wire transfers, transactions from new accounts, ...) is going to lead to automated flags being raised.

A wise implementation will avoid feedback loops, introduce human review which assumes the best unless clear evidence of fraud is present, and will provide mechanisms for individuals to clear/restore their status.

The latter resolution workflow, unfortunately, introduces further risks, especially if implemented halfheartedly. Training individuals that it's OK / expected to provide additional personal details to use a service ends up leading phishers to attempt the same techniques, and simultaneously creates a high-value target database of personal data should any of that information be stored long-term.

I don't know clear answers here - and yes, perhaps the author could have taken a more gradual or slower approach in order to avoid some problems, and maybe they are angry based on things about the financial system that they don't understand.

But there is an ongoing and serious problem here with the way that we provide access to systems and services and then attempt to remediate concerns via automated means.

Source: am European and have lived in the U.S., thus have experienced being 'unusual' to many U.S. financial services, have experienced not understanding systems in a country new to me, and have also worked in fraud and care about computer security and overall freedom and safety.
Yikes, I know people teaching middle schoolers English for a heck of a lot more money.
Be that as it may, the dude worked on _secret_ stuff as of late. The way access to secrets is structured in Russia, there's no way he wouldn't know it's secret. You can't take any materials out of the secure facility, for one thing. All computers are airgapped as well. He'd have to smuggle it out if it was recent. And even being seen near anyone foreign would be a no-no.

I had access to government secrets (probably similar level to his) when I was a student. I had to leave my notes in a secure facility within the university. I could not bring in any notes, either. If I wanted to read my notes, I could only do so at that secure facility. No copying, partial or otherwise, was allowed. It was explained to me that if I were to try to circumvent any of these measures, I'd be in trouble.