skysight-inc/HackerNews huggingface dataset:
I (and many, many others) notice lag in games with v-sync turned on vs off, and we're talking about single digit milliseconds there.

It's possible that Stadia might be "good enough" for casual gaming (and granted, that's a very large market segment), but I don't think it will ever be good enough for anyone who is sensitive to latency.
Hmm. Can someone alter the title to refer to: Cambridge MA, please?

Otherwise folk will assume it might be the UK one ;)
This is what I said that you quoted and rebutted with asserting that it's not okay:

>> And our drug approval process is often maddeningly conservative already in the eyes of people with various terrible conditions who would be happy to be a guinea pig to have some kind of shot at survival.

I have no idea how else to interpret your assertion other than "Just let people die rather than let them try experimental treatments. Letting them die is the morally superior option, even if it's not what they want."

I'm well aware I'm not the only person with a vested interest. Stating where I'm coming from isn't intended to be dismissive. It's to clarify what my view is based upon.

If you are talking about circumstances other than "I'm dying and willing to try experimental treatments as my only shot at survival" then you aren't actually rebutting the line from me that you quoted. Your talking about something else.

And if you are rebutting the line you quoted, you are, in fact, saying it's morally superior to let people die rather than let them try experimental treatments.
Ad Tech company X needs to only appear more effective than Y. Location data enables increased attribution, making X appear more effective. X may or may not have done anything that had a greater impact on the targets.
Tk is great indeed. I actually started programming with it, and loved it (I don't remember encountering any glitch with it, things just worked as you say). But it has its limits.

I want something more powerful (in a typed programming language capable of efficient data manipulations, rather than a text-based scripting language) and flexible (a basic API with the least constraints, not a toolkit with fixed design and implementation choices), etc.
This stuff often looks simpler and less subtle in hindsight.

Modern cryptography has gotten better at taking human (developer) error into account for designing secure API’s, but the fact of the matter is that the math is subtle, and cryptography in general is subtle due to the places where it collides with reality, so burning everything down and starting over is likely to just cause us to rediscover issues we already know about.

Say we stop using X509 certificates. We will continue to use signing to cryptographically bind claims, and we will still use PKI-like structures to attest trustworthiness, so we are still vulnerable to the same approaches of attacks even if we don’t use certificates.

We have actually learned a few things, such as that cryptographic agility seems to cause more issues than the problems it solves, so the field is improving in important ways, but if it’s not a key matching weakness, it’s going to be some Unicode encoding BS or some other critical but not validated data somewhere else, or... (because this is a real in the wild problem) using phone numbers to generate cryptographic keys for coin wallets.
Exceptions as flow-control is normal in Python. It’s used all over the place, e.g. generators with StopIteration.
I run Windows 7. And I'm proud to do so. It's the most effective Windows in my experience.

Disclaimer: I very rarely boot up true Windows and that's because it's required for a (very) few hardware issues. Say an hour per year. Any other time I might need Windows, it's in a VirtualBox instance. Probable total use of Windows per year is maybe, at best, 12 hours. The rest of the time I run Linux exclusively.
But it is exactly how CDNs and very large web applications have been doing things for ages.
I'm not sure what you're getting at regarding profiles. Chrome "personas" seem to be much like Firefox containers, but somewhat easier to use. Don't Firefox profiles require restarting the browser?

I guess I am not smart enough to figure out the simple configuration you mention.
Although I agree with your arguments as the cause China stagnated in 20th century, I think that what socialdemocrat referrs to is China under the last period of Qing dinasty (e.g. Yizhu, Zaichun, Zaitian, and other emperors).
Paris's burbs are making process notably because they tend to override local towns opinion now.

My parents' hometown of 7000 in the (very lower middle class) exhurbs was slated for around 300 new housing next to the train station. As usual everyone was upset at the town halls because "it will add traffic" "they are too dense", "it will degrade our quality of life", they got overriden, the houses & apartments got built anyway, and good riddance.

I've been to the exact same town halls in the bay area with the same bullshit arguments, except people end up with the power to actually make those projects not happen.
Let's do the math.

Someone making 100,000

On average you pay 2% of annual salary to health levy which gives you medicare
2000.00

If you are over 90k you pay 1.5 unless you have private insurance
On average $2000. Plus on average $800 in extra like someone driving you to the hospital

$4800 aus to usd = $3312.41

It looks like you are paying half.

But the government is spending 7800 a year per person. So the additional cost comes from general tax revenue which you pay.

On average you are paying an extra 10000-15000 in taxes on that 100,000
>FPS gaming with a keyboard and mouse isn't coming with you on your phone for the morning commute

Fortnite on mobile says otherwise
The "Unofficial Wireguard Documentation" was good when I went through it: https://github.com/pirate/wireguard-docs

https://news.ycombinator.com/item?id=20036194
> how do you prove that the formal spec correctly describes what the software's supposed to do?

This is a valid point. With formal verification, the buck stops with the model. Looking at existing projects like Sel4, though, it's clearly not a knock-down argument against formal methods.

> Your proof that it has no null pointer crashes tells us nothing about whether it has off-by-one errors. For each kind of bug, you need a different proof. Did your proof cover every category of bug? Almost certainly not.

This appears to be a guess at how formal methods work. It is wrong.

Formal methods are able to take an abstract model and 'refine' it into an executable program that implements the formal model. [0] This process is mathematically watertight (ideally at least). There is no room for language-specific bugs (such as buffer overflows) to creep in.

What you don't tend to get from formal methods, is a guarantee against side-channel attacks, such as timing-based attacks. This may be a real security concern. From a quick google search, this seems to be an active area of research.

[0] https://en.wikipedia.org/wiki/Refinement_(computing)
It and Padmapper are two services I occasionally use almost entirely because they have cute mascots. I’d probably even buy t-shirts with them.
That PowerPoint is the backbone that keeps organizations together. It's like drawing books for toddlers. Keeps them busy for hours, everyone knows how to do it, when it's well done they are complimented and have silly talks about what they did.
I understand that, but why is it done that way? It's extra work to install it, and the fact that it's an extension probably means that it's not tested as well as normal browser UI. I really hate using extensions because I like to keep my software plain vanilla as possible to avoid strange bugs.
This is true, but the bug here is not subtle. It would have been shocking to discover an ECC implementation that let attackers specify curve parameters even 10-15 years ago. When we blogged the e=3 debacle back in '07 or whatever, we linked to a Kaliski presentation from 1999 that called out validating curve parameters.

At least with the ACME vulnerability, there was a novel service model involved. Here, we're talking about certificates that allow you to embed what is in effect your own cryptographic algorithm to interpret the certificate under!

This is a rare instance where I'm happy to concede that closed source allowed a terrible bug to survive far longer than it would have if nobody needed to break out a copy of Ghidra to read the code that validated elliptic curve signatures.
> Would such a brain be conscious? Why or why not?

If the brain was stimulated by inputs from the surrounding environment then YES!
I've never heard about reconnecting severed nerves and have them function. Is that currently possible?
Public Relations for Musicians – How Can It Help You?
Cryptographic Vulnerability in MS Windows – how without maths
Please stop trying to do the browser developers' job. If focusing the input field opens the keyboard, that's the correct behavior, whether you agree with it or not.
The website of the 'Mundaneum' Belgium museum is here: http://www.mundaneum.org/en

(Alas the pop-up message seems to be in French only. Is it a plea?)
Living long doesn't mean living well.
Spending more doesn't mean spending well.

Instead of counting the dollars spent, we should begin measuring outcome. May be that will solve the problem.
Love the shock.

Take a job as a pentester (or don’t) and you’ll look at your list, nod, and say “Yes. This is normal.”

It’s normal to be broken. That’s why to do pentests on every piece of security infrastructure.

The hypothesis that systems like this ought to be secure is empirically false. I am trying to shake the shock out of you, because your surprise = my surprise before being a pentester. But the job forces you to come to terms with the fact that everyone, everywhere, is broken, always, and this is neither surprising nor (and you’ll hate this part) a big deal.

Bug is fixed. Life goes on. Yes, of course the infrastructure could have been attacked from any time between “forever ago” and that fix. Ask yourself: why is this surprising to me? And carefully examine the assumptions with which you want to say “because it’s their job to make it secure...”

To be clear, I wish the world were different. But I wish we’d take a hard look at reality and the history of vulnerabilities. Stop thinking things are secure just because the label says “secure”. People devote their entire existence to seeking out and exploiting the tiniest imperfections, sometimes for no reason other than because it’s fun to do so. There is zero chance software would end up impenetrable under those conditions.

Hell, even Tarsnap screwed up once, and Colin is pretty much cryptographically-signed Jesus. So if someone as smart and dedicated as him can make these mistakes, what hope have we? Especially when “we” consists of a large number of programmers working together, and all the complexities that entails?
The bay area (and california) housing issue isn't limited to the county of SF, and it isn't because of a lack of space to sprawl out with.

This is a tired argument that has been debunked many times before.
I think you're right.

This is a function of Marketing departments wanting to create large audiences. Large audiences mean more chance to attribute a sale, and also more impressive sounding campaigns.

The technical and time cost of implementing something that removes people who have made purchases from the audience (probably 0.001% of an audience) is much higher than simply adding someone who visited your website (lets say 5% of the audience) to the audience. If your product is reasonably ok, your largest group of customers is often your previous customers, so attributing the ads those previous customers see to their next purchase is logical for marketers.
It really sucks to spend a year or two on a team that is theoretically growing only to find out that either 1) It's not actually growing and the position will never exist or 2) Somebody else on the team is the boss's favorite and has been there longer than you, so when if it does get created, they will get the role. If it's you as the new hire vs. somebody who has been there 3+ years, you are really fighting upstream.

Incidentally this strategy is why I worked at startups before this job. One did land me a lead position with 1 report, but it was when the company was falling apart and thus not the most meaningful experience. Another took the role I'd been doing by myself, and replaced it with a team and a newly minted manager... who wasn't me. I got shuffled under someone else who didn't want to manage and promptly quit, so that didn't work out either.

My company theoretically prefers senior ICs internally sourced for EM roles - it's the only place I've been able to interview for EM positions, and I very nearly got one - the hiring manager said he was set to pick me, but then they decided they really wanted somebody with deep experience at the last second.

Actually, interviewing for an internal transfer at a big company has been the closest I've come. I've also found that the big company is a lot more inclusive; startups tend to be cliquish and if you're not part of the boss's in group you will really struggle. Here, I can get involved with many things and many teams directly, so even if my boss doesn't have a job for me, I can work the network and find my place.

At least... that's the strategy I'm trying now. "We're a growing team and that position will totally be there for you a year or two down the road" applied to 4 jobs over almost 10 years without yielding any fruit. (and 2 of those companies imploded, so I didn't even get RSUs like I get now)
> If not, what happens if someone else releases a superior product in the interim?

They'll get your business.

> Or my business needs change?

I didn't waste my time building you a feature you won't pay for.
Browsers have those quirks because web designers work around and hide them.
but only shortname curves
I like NSA being more active, but the concept of trusting NSA on crypto is just never gonna happen. Their core mandate is being able to break it so the whole concept is a non-starter
Thanks for your kind words :)

I shifted my career into web dev, and got a bit more picky with the companies I applied to work for. I feel much better about my work now. You'll find something!!!
I use my VPN to access devices in my home whose manufacturers want me to pay a monthly fee for remote (or commonly, delayed cloud) access.
Oddly, that article doesn't link to the most interesting modern use. It's for security exploits. People have built compilers that output a binary that consists largely of return addresses that point into the middle of normal functions.

https://en.wikipedia.org/wiki/Return-oriented_programming
I think one factor that many people underestimate in the decline in any country or empire is the cost of brownfield projects versus greenfield projects.

For example, building a new town/city and its infrastructure is dirt cheap relative to fixing and replacing existing infrastructure. This is not unlike the cost of maintaining software and refactoring it versus writing it in the first place.

With a new greenfield city land, labor is relatively cheap because the cost of living is relatively cheap. There are also no entrenched interests that will engage in legal battles every step of the way. There are also no citizens whose you have to continue to support while you create the new replacement infrastructure and you have none of the complexities of migration from old infrastructure to new infrastructure.

Besides their authoritarian bent, these are some of the many reasons a country like China is getting stuff done while the US and Europe gets relatively little done.
This at least would not be out of character for Rome:

Monte Testaccio is an artificial mound in Rome composed almost entirely of testae (Italian: cocci), fragments of broken ancient Roman pottery, nearly all discarded amphorae dating from the time of the Roman Empire[.]

https://en.wikipedia.org/wiki/Monte_Testaccio
And that's for civilian systems. The only other time I can recall this happened was with the DNS vuln.
His brain ramblings may be useful to someone else out there having similar experiences or thoughts.
Banks in the US also work relatively well. The problems happen when somebody - anybody can find your name, date of birth and ssn from the internet. With these 3 pieces of information, they can call any bank and pretend to be you. That is why banks jump through hoops to verify your identity. That is where questions pop up like

1. What is your mother's maiden name that you gave us when you opened the account

2. What is the phone number listed on your account - so that we can verify that it is really you.

And when all else fails.

3. Banks ask you to go to a local branch with your id before they will unlock your account.

That is what happened with the author in this case. However he thinks that just because he is calling - the banks know that it is him when the bank can never be sure.
Your ISP is has a MITM position whether they own your cable box or not¹. What you usually don't want is them having access to your LAN.

¹ As far as is relevant in this context.
Rapidly moving toward compute as a commodity priced in the same way global commodity markets are. Interesting times
A thread from 2016: https://news.ycombinator.com/item?id=11273495

Related from 2017, shortly after he died: https://news.ycombinator.com/item?id=13304873

https://news.ycombinator.com/item?id=13315746
"For background, please read <my blog post>".

"To learn more about this investigation, visit
<the book I wrote>"

I agree with an earlier comment in https://news.ycombinator.com/item?id=21197466 that the Quora question is meant to promote a book, not really to ask a question.
A Plea for Simplicity (2008) [video]
When I joined a team of seasoned BSD developers in 2000, they proudly pointed at some 10+ year old binaries that still ran (from their old DEC Ultrix machines) on Tru64 alpha (binary compatibility).

I have a Mathematica binary for Linux from 2000 that still runs mostly-OK. It's statically linked, and can't find fonts (because the distributions moved the location).
"random number generator"
Interesting. Were there any similar vulnerabilities in Windows XP's crypto libraries?
Obsession with Perfection
I always saw the lenders themselves as predatory. If a student tried to take out a mortgage, the bank would look at their ability to feasibly pay back the loan before denying them or approving them at a lower amount. It seems like folks just get their student loans rubber stamped. Since it's so easy to get lent more money, colleges are incentivised to charge more.

I'd be interested to see a world where your degree itself was factored into the equation. Pursuing biology? Nope, we've got too many of those and biologists don't make enough money on average. You'll only get lent a safe amount. Pursuing law? Now that's a safe loan with good payback odds! This would likely incentivize schools to put more scholarships in the less lucrative fields, and potentially keep those fields from becoming overpopulated. Or maybe folks will need to start their education in a community college or state school to build credibility. I'm sure the implications would be more nuanced than that, but I think that the incentive system for lenders is currently not working as intended.
:O

how can this be, Hipmunk was so much better than the competition... people... people wanted it...
There's a point that the article only brushes on that seems important.

My generation (born in early 70's) was the first to really come up with access to video games pretty much as a given. We had space invaders etc in the arcades (or wherever else they could fit a cabinet), hand-held Nintendo and basic home consoles in primary school and then of course came the boom with PC, PS, X-Box and all that followed.

But a lot of people only a few years older than me are just as dismissive about games now as they were then - this is kids' stuff, a waste of time and money. I'm not an obsessive gamer, but I do play every now and then and I absolutely see games as just another option on the entertainment landscape.

And being that older people weren't into them, I guess I'd always had the thought in the back of my mind that games were something you grew out of, like binge drinking or not caring about your retirement (your examples may vary). But the other day I was playing with friends and I looked around at these ~50 year olds and realised we're never going to "grow out" of this - particularly if the hardware and software just keep improving the way they have.

So for me one of the big reasons that gaming will keep growing is because those older, non-gaming generations will die out, replaced by new generations who start gaming ever earlier while eventually you may find yourself playing call of duty with a platoon of 80+ year-olds.
I suppose part of me hopes that spotty or misleading data disrupts advertising models more than an absence of data. I may be wrong.
Cloud gaming may help this, but realistically: the fact that you notice updates (on fast internet) is really a tech problem that even local-rendering traditional consoles can solve.

Background updating should be a thing. It is available on every major console. It never works. That can be fixed.

Additionally, there have been rumblings about where innovation is going to surface in the next generation of consoles. One of the more consistent themes is the handling of downloads; it'll be easier for developers to "shard out" their game into the components that, say, a particular mode or level or segment need, in order to get players into the game as quickly as possible. It may be a 50gb game, but you'll only have to download 3gb of it to get started.

We're seeing some of this on the XB1/PS4 today, but usually its very binary: Ready to Play, then Full Download. Next gen consoles will get much more specific and optimized. I believe (don't quote me on this) Sony has outright said that their goal is: you buy a game and you play it instantly, with no cloud rendering/streaming; just really smart handling of downloads and packaging.

The most ironic thing about gaming over the past generation is that games always used to be like this: you buy a disk/cartridge, and you're playing. Nowadays, you buy a disk, the disk has to install to the drive, then there's a day 1 update; its a total mess. We'll see how the next generation looks, but I doubt very much the situation will look much better for people with bad internet. If you've got great internet though, maybe we'll be close to the way it looked in the past.
No, watch the talk. He doesn't toot his own horn at all.

He was the closing keynote at our annual conference (Okta's Oktane) last year and it was the same way. He was open and clear about what he did, how much he regretted it, and why he did it. Fundamentally, it came down that he was young (16), scared (parents getting a divorce), and stupid. He reacted out of fear and total disregard for other people. He also talked about coming through the other side and learning what mattered and why.

I sat down in his keynote as a fan of his exploits and finished as a fan of the man himself.

Watch the Google talk.
> The author here seems to have a pretty shallow understanding of how banking infrastructure actually works (ex. ACH vs. wire vs. direct deposit), which is the root of a lot of these complaints.

This is approximately the level of understanding that most people have. I think this helps highlight the point that the banking system is just horrible to have to deal with -- you shouldn't have to know the intricacies and oddities of the banking system in order to do this sort of stuff.

> and still want high-touch in-person and phone interactions in a financial institution.

This is me. For mundane things, I prefer an automated system. But if anything at all goes wrong, or if I'm doing something unusual, I want a human to hold my hand.