skysight-inc/HackerNews huggingface dataset:
> Furthermore, the evil.c file with the same SHA1 hash would need to be valid C code that does something evil while still yielding the same hash

...and also produce an innocent-looking diff!

I mean, you could stuff a bunch of random bytes into a C comment to force the desired hash in the output using these documented attack techniques, but anyone inspecting the diffs between versions is likely to see such an explosion of noise and call foul.

If you want an analogy, it's like someone saying they've learned to impersonate federal agent identification cards, only it requires that the person carrying the fake ID to have a thousand rainbow-dyed ducks on a leash in tow behind him.

Such attacks are fine when it's dumb software systems doing the checks, but for a source code repository where people do in fact visually check the diffs occasionally?

Well, let's just say that when someone manages to use SHAttered and/or SHAmbles type attacks on Git (or even Fossil) I expect that it won't take a genius detective to see that the repo's been attacked.
Currently working on my French - was super interested to use this but it's not working.

Looks like the request to:

https://www.cliplingo.com/lesson/start?id=18

Returns an empty video id:
https://pastebin.com/8JemA2T3

Hopefully you can fix it soon - super excited to use it!
Systems with poor GC and the need to keep data for lifetimes greater than a request should have an easy to use off heap mechanism to prevent these problems.

Often something like Redis is used as a shared cache that is invisible to the garbage collector, there is a natural key with a weak reference (by name) into a KV store. One could embed a KV store into an application that the GC can't scan into.
> Since the whole point of the region is that the GC doesn't scan it, nothing in the region will be able to keep anything outside the region alive.

You can treat external references as GC roots.
As many comments have pointed out, no kids are locked up. The police went to their school and questioned them. I am not debating whether it is wrong or immoral to question minors without their parents present or the nature of the charges, However, no child is arrested, charged, locked up, booked or entered into justice system in any way. The article is click-bait and an appeal to emotion, not facts.
Overbuilt is not a function of supply and demand, but more often speculation.
An aside, but Adrian Tchaikovsky‘s Children of Ruin/Time center on intelligent spiders and mollusks. Earth-centric as they were bio-engineered from Earth native species, but an interesting take on non-human species.
Outliers exist, but in practice it can't be used to buy much. I can't use it to pay medical bills, tuition, insurance, cell phone, daycare, car payment, taxes, uber or pretty much anything besides a few online services or beer in a very small selection of local bars.
Try a packet capture. You wouldn't trust the browser to let you know all shady emails it is sending, right? :)
It's the requirement for the system, not for the app.
You can also listen to a large archive of modules at: http://modarchive.org

Truly free music.
Solving Billion-Scale Knapsack Problems
The RNC cancelling primaries is much worse. I'm surprised they've gotten away with it.

Iowa's Democratic Party still has a paper trail of votes. The results may be delayed but they'll at least exist.

On the other hand, GOP voters won't even get to choose who their nominee will be in certain states. Yes, I know the president will almost certainly win these primaries. But why not let people vote?

Sure, it costs money to hold the primaries, and maybe it causes embarassment to the president if he doesn't garner the vote he's expected to win.

But not holding primaries is simply utterly undemocratic.
I took a class that used prolog in college. It was so confusing at first. Then one day, I was doing an assignment with definite clause grammar, and everything clicked. It wasn’t just my understanding of prolog that benefitted, either. Suddenly I also internalized how regular expressions work.

I remember it distinctly because it was such a good, almost euphoric feeling that seemed to drop randomly on top of me.

When people say that learning a new, different language will give you benefits that carry over to the rest of your abilities, I remember that moment.

There is definitely a lot to be said for stretching your programming brain in new ways.
Maybe they should've just sent results in with a phone call.
PostgreSQL 12 Generally Available on Heroku
What does “double-verified” even mean? Though, in case you were wondering, GDPR requires continued consent for companies to use your email address; they have to delete it if they don't keep getting permission to keep it.
I wonder if they attempted manual memory allocation in Go?

In many languages with GC you can actually do manual memory management relatively easily with few helper functions. You write your own allocate() and free() functions/methods. When you allocate, you check the free list first, if nothing is available, you do normal allocation. When you call free you add the object into a free list. If you memory management leaks, it triggers GC.

Usually you need to do that kind of stuff to only in few places and few data structures to cut GC 90%.
I'm a little lost here as far as to why this is in the "Ask" section of HN. Maybe I'm missing something but it seems like this is already a well understood concept on HN and, not a question / ask.
I agree with your general sentiment. However, in my anecdotal sampling of people who frequently cook vs frequently eat out, tolerance for discomfort is greater in those that frequently eat out. Especially in relation to food, where those who frequently cook almost can't tolerate food cooked by others. Further on the food front, people who cook seem to be more heavily affected by fasting, or less willing to tolerate it. (For my sampling, eating food supplement such as huel or soylent goes under the frequently eat out category)

With respect to the ancestral comment about getting confused looks when refusing to eat with someone, they likely aren't confused because you would eat food you cooked, they are confused because you don't want to spend time with them. Personally, eating out for lunch with my labmates, coworkers, friends, family, etc. is the highlight of my day.
Let's not start the Electron debate again. That's been argued to death already.
If you want to force it you can call "runtime.GC()" but that's almost always a step in the wrong direction.

It is worth it to read and understand:
https://blog.twitch.tv/en/2019/04/10/go-memory-ballast-how-i...
This would seem dumb in any previous administration, but given how the agencies have been weaponized as political cudgels, this seems like the prudent decision even if there was a big fuckup.
It sounds like you have a history of abuse. I am so sorry and hope you're able to get the help you need. As I'm sure you know, not everyone trying to socialize is out to get you. Not everyone has the same social needs as you. But I can see how difficult that could be if you've been a victim of abuse. I think it's good to note that not everyone has the same hang ups as you do, and many people do actually enjoy meeting people and making acquaintances outside of specifically designated social events.

DM me if you'd like someone to talk to.
Mining your Own Business is a great book about delivering business value for analytics programs.
Is the Future of Neural Networks Sparse?
There is strong evidence that they're providing components for the MEMS LBS in the Hololens 2.
Yeah, and to be fair, your phone wont be ditched, it will still be useful. Nobody will force you to do buy any of this tech, it would be useful though. I've heard of contact lenses eventually doing the same and I fantasized about it a decade ago long before I became a Software Engineer.
How is your documentation and writing? Rarely have I seen corporate software teams get this even remotely competent. Its generally so bad, in fact, that in my prior organizations they deferred almost all technical writing to QA personnel and product owners, because they couldn't trust the developers or the technical leadership to produce anything intelligible.

Here is a brief checklist of things to focus on communicating value:

* Purpose - What would ya say you do here?

* Measures - How do you measure success in numbers?

* Product Goals - What are the very specific and quantifiable goals of the current project/product?

* Product/Development Alignment - What is your approach to align the work to the business? Be short and specific. Don't say Agile or any jargon bullshit.

* Personnel Alignment - How many people do you need doing which jobs and how do you justify that in hours and dollars? This should be driven by the business requirements and not some developer's bullshit technical requirements.

The reason these things are important is that the higher your rise the further you move away from the granularity of the actual work. You need to clearly understand business organization and how to organize teams opposed to individual developers. Developers are just resources (numbers) and a collection of those resources are a team, but those resources are interchangeable because what is most important is shipping a product and penetrating a market.
Visualizing Bitcoin held on exchanges over time
The bigger problem wasn't that the app used by precinct campaigns to report back to the Dem Party, it was the convoluted rounds of voting that didn't add up in some precincts and caused the party to have to review all of the paper backups.

So yeah, getting rid of the caucus (which is undemocratic anyway) and letting people just vote for who they want is the solution. Fixing the app doesn't fix that people were too confused in certain precincts to count it correctly.
Swift wasn't included in the OS until iOS 12.4, and only became fully module stable with Swift 5.1 in September. While some teams were allowed to ship their own versions with their apps, the vast majority were prohibited from doing so until it was part of the OS. For apps that were started before that time, Objective-C was the only option. I expect to see a lot more Swift in iOS 14, as it will be the first version where Swift was available for the entire development history.
Probably just a reflection:
There is no way you could see what is displayed if you don't wear the glasses with this system
Indeed, that's a power you'd have to be comfortable having in the hands of your opponents. Because at some point it will be and then they'll be the ones defining what speech is restricted.
We originally cached this data with a Redis cluster but we hit scaling issues. The Read States service only exists because Redis had issues.
Right; Go is purpose-built for writing web services, and web services tend to be pretty tolerant of (small) latency spikes because virtually anyone who's calling one is already expecting at least some latency
This is like "we can't explain gravity" articles.

If you drill down and keep asking "but why", you'll eventually encounter phenomenon you can't explain.
With recent Go releases, GC pauses have become neglible for most applications. So this should not get into your way. However, it can easily tweaked, if needed. There is runtime.ForceGCPeriod, which is a pointer to the forcegcperiod variable. A Go program, which really needs to change this, can do it, but most programs shouldn't require this.

Also, it is almost trivial to edit the Go sources (they are included in the distribution) and rebuild it, which usually takes just a minute. So Go is really suited for your own experiments - especially, as Go is implemented in Go.
OK well I am sorry he missed finding WMDs in iraq. I hope he enjoyed his time there.
Interesting, they went a totally different route.

> The ballast in our application is a large allocation of memory that provides stability to the heap.

> As noted earlier, the GC will trigger every time the heap size doubles. The heap size is the total size of allocations on the heap. Therefore, if a ballast of 10 GiB is allocated, the next GC will only trigger when the heap size grows to 20 GiB. At that point, there will be roughly 10 GiB of ballast + 10 GiB of other allocations.
I would tend to agree. Maybe I'm ignorant of the inner machinations of political campaigns, but it seems like it's not the type of work that requires domain experience to be effective in. But that's what we would think as IT professionals, people in political campaigns may not think that way.

And really, you see this in lots of sectors where they want developers with experience in that domain even if it's not really necessary. Or at least, nowhere near as important as being a good developer is.
Let us tell a bit of a story. You bought your two cars because your all-terrain car hobby is very important to you. This was a bit of a financial squeeze and you could not go on holidays as often as you liked. But since the car hobby is more important to you, you think you made the right decision and are happy about it. There is another person who thinks going on holiday is the greatest thing ever. He went on holidays five times last year. This was a bit costly but he decided he did not need a car that badly and could use public transport instead. This was a bit less comfortable but he thought the great experience of going on holidays five times was well worth the inconvenience. So, where did your car come from? It did come from the other person who did not buy a car but went on holidays instead. But both of you were happy with your decisions. No crisis situation or fierce competition is needed in situations where not everybody gets what they want. In fact, both persons might choose to forego a promotion that was offered to them and which would have contributed to economic growth because it would leave the one person with too little time for his car hobby and the other with too little time for this travels.
> If you're going to use Electron, you HAVE to make sure it is updated with each update of Chromium.

I never really thought about this, but in retrospect, this is so blindingly obvious, and is almost certainly a potential exploit vector to a wide range of electron-based apps.
In my experience, designing websites in the browser limits the imagination and thus the design ends up being easy to build in HTML/CSS, but it isn't very interesting. Using design tools makes it easier to get the look you want - and from there you figure out how to put it together in the browser. It's an extra step, but my own designs are much better when created this way.
Then you get some marketing logo etched into your retina :)

I'm wondering how is the laser scanned over the retina (probably some MEMS chip). What happens if the beam scanning is suddenly stopped in place, wouldn't you get the whole laser power concentrated in a small dot. And it happens so quickly that you won't have time to react.

There may also be some phantom image effects like we used to have on those old TV monitors. Or like we can have when fixating a picture.

What's probably more insidious would be projecting some very lightly superimposed structure. You probably can induce some unconscious cognitive load or nausea. By decreasing the discomfort for example when the user is looking at an ad, you will increase the effectiveness of the ad.
I miss it too; Pascal (Delphi) used to be one of my favourite compilers; until Dennis in tech support refused to reset my version 10.2 license registration limit the other day..
Time to move on I guess.
Credits to the ungoogled-chromium project [0] for the patch [1] which is also used in Bromite since 15 February 2018 to prevent this type of leaks; see also my reply here: [2]

[0]: https://github.com/Eloston/ungoogled-chromium

[1]: https://github.com/bromite/bromite/blob/79.0.3945.139/build/...

[2]: https://github.com/bromite/bromite/issues/480#issuecomment-5...
Skills to acquire in 2020, ye Hacker News reader? A wee bit of abstract mathematics knowledge, so that you can better think in abstract terms when solving problems. The hardest of problems require the usage of and familiarity with advanced abstractions. Abstract mathematics knowledge provides that great—and profound!—capability.
> could do DMA on the video-game memory

The SGX won't allow you do this as the memory is encrypted

> plug the monitor HDMI cable into a raspberry pi 5 or 6

I don't know if the pi is powerful enough for that or not, and a HDCP type extension to what's coming out of the SGX could stop it, but ultimately yeah, you could have a robot play the game for you.

> stealthily modify the GPU drivers

Again, SGX type systems aren't going to allow that. This side of SGX type systems is all about trying to make your computer act how the developer wanted it to, regardless of your wishes or a malicious actor's wishes.
I recently stopped smoking weed for the first time in a long time. After about a week I was having incredibly vivid dreams. I never even realized I had missed them.
A good place to start is with the Poetry Foundation: https://www.poetryfoundation.org

It's been around since the early 1900's and has lots of good articles and podcasts, even a poetry magazine.

If you're American, it's nice because it focuses a lot on American and Midwestern poets.

And if you're in the Chicagoland area, it has events and its new headquarters downtown is considered an architectural treat.
That might be true, but from a language design PoV it isn't convincing to have dozens of GC-related runtime flags a la Java/JVM. If you need those anyway, this might point to pretty fundamental language expressivity issues.
I'm a heavy WhatsApp user and I feel like WhatsApp has gone downhill ever since Facebook took over. Performance is down significantly, I experience a lot more visible bugs, more and more exploits are being revealed about seemingly trivial components (file encryption, browser XSS), and useless features are beeing added. Its not like WhatsApp Inc. was flawless before they got acquired, but at least it worked well and most of the developers actually wanted to make a great chat app.

Its just a matter of time before Facebook merges WhatsApp with its Messenger (and keep either of those names).
no it's there. https://golang.org/pkg/runtime/debug/#SetGCPercent
Hah, well now I feel like a dufus. Good info!
So far it seems that Google is notifying the people who received videos that weren't theirs, not yet the people what had their video leaked.

> Google has been sending emails to affected Takeout users. In the email, which was first spotted by 9to5Google, Google writes, "Some videos in Google Photos were incorrectly exported to unrelated user's archives. One or more videos in your Google Photos account was affected by this issue. If you downloaded your data, it may be incomplete, and it may contain videos that are not yours."

> While this message is directed to Google Takeout users who tried to download their own data and accidentally got someone else's, we've yet to see a message directed to the "unrelated users" whose videos ended up in the archive. We've asked Google if it plans to notify users who have had their private videos exposed, and we'll update this article if the company responds.

From https://arstechnica.com/gadgets/2020/02/google-photos-bug-le...
>Do you honestly believe we should STOP regulating full-auto so strictly?

Yes. The Constitution specifically forbids all gun rights infringements and there is no exception for automatics.
Under GDPR you can use all the PII you reasonably need to provide expected services, you don't even need separate consent. But, if you have PII, the moment you use it for other purposes, or obtain/retain/share without proper cause, you are breaking the law.

IMHO, that is very reasonable.

Real world example - giving your phone number and information to your car mechanic / doctor / bank teller / plumber is reasonable. Using that information to score girls or ask donation for a puppy shelter would be considered improper.
> Your link doesn't seem to support your conclusion very well

Sure it does:

"Before World War II, government money for research was rare, and was mostly aimed at aeronautics and agriculture studies."
Their bulk data API now only serves NOAA data. All the personal weather data contributed for free is not available in bulk.
How do you secure the escrow?
In addition to D. Richard Hipp's thoughts as HN user SQLite — author also of Fossil, so he oughtta know — I offer these:

1. Keep in mind that Fossil and Git are both applications of blockchain technology, which in this particular practical case means you must not only forge a single artifact's hash, you must also do it in a way that allows it to fit into the overall blockchain.

2. Fossil's sync protocol purposefully won't apply Dr. Hipp's hypothetical evil.c to an existing Fossil blockchain if presented it. Fossil will say, "I've already got that one, thanks," and move on. Only new or outdated clones could be so-fooled.
>In the pre-Trump era politicians had to at least pretend they weren't corrupt.

I guess you should let Hillary know she should not have been in control of a foundation that was receiving millions of dollars in donations from foreign leaders while she was the head of the department in charge of US foreign policy.
Kick's usage is correct except within the business world and especially financial and executive populations, which, while admittedly narrow, are what we were discussing. When you say that an executive's pay is tied to the company's performance, within these communities it's generally understood that this is a contractual relationship.

ex. "John's salary is tied to performance - if the company is valued at over 100 billion, he'll get another 5% stock" etc.

or "bonuses are tied to performance milestones"

If you are simply observing that an executives pay rises while performance falls, associated is a clearer term.
Checked that Vivaldi doesn't seem to be sending this header.
Oh interesting, it must be an extension that is filtering it out for me (Ghostery, DDG Privacy Essentials or Adblock Plus in my case)
Valentines Day Font
Hosting Your Own NuGet Server and Feed for Build Artifacts with BaGet
I wonder if it would be feasible to rewrite the LRU cache (either fully or in part) in a way that does not require the GC to scan the entire cache.
The billiard ball model works fine when you include the impact of other billboard balls on each other resulting in vortexes etc. It’s simply computationally expensive to do so.

Anyway, absolutely flat wings generate lift as long as the angle of attack is non zero. But, by changing the wings shape they get more efficient. The reasons for that are complex differential equations that don’t really have simple plain English explanations, which is why people do so much testing and simulation. Aka simple 2d diagrams don’t result in: https://en.wikipedia.org/wiki/Wingtip_device

What’s even more confusing is most wing diagrams put the center line in the wrong location. If you take a symmetrical tear drop shape with zero angle of attack the bottom will be sloped up at the same angle the top slopes down. Thus if you instead lay that teardrop so the bottom is flat that represents a positive angle of attack. Granted, wings generally don’t have a symmetric shape, but similar principles apply.
Judging by the (upper)middle class kids I work with, the social stigma around wearing earbuds while holding a conversation is clearly on the way out. It seems like a rapid social shift (which makes me old at 34, I guess) and is probably an “important” change for those who want to sell us on the AR future.

To that end, my experience of using transparency mode on AirPod Pro earbuds is that they very much do “become invisible” while allowing me to overlay (auditory) information on the world around me. If they were built to be as inconspicuous as my father’s hearing aids, nobody would know the difference and no overt social stigma would persist. The AR future of today is auditory.