skysight-inc/HackerNews huggingface dataset:
It is complicated to describe when cmov is slow and when it is fast. As a rule of thumb, if the next loop iteration data operations depend on a cmov in this one, and around, cmov will be slow. If not, it is very, very fast. Use of cmov can make quicksort 2x as fast.

Gcc absolutely won't generate two cmov instructions in a basic block. Clang, for its part, abandons practically all optimization of loops that could conceivably generate a throw.
Well at the risk of being flippant if you don't know what good quality software looks like, you probably work for, with or on behalf of these vampire-squid-consultancies. Or you have no business having an opinion about it or trying to form one. Really. It's as pointless as forming opinions about who is a good contemporary composer if you've been deaf since birth.

Look at all the successful startups disrupting industry by writing software. Note the total lack of vampire-squid consultancy in their codebase.

Look at the public service orders of magnitude cost blowouts and non-functionality that is the norm. Look at the domination of vampire-squid consultancies right there.

It's really not difficult to see unless you're determined to keep your eyes shut. The vampire-squid consultancies should not exist and are a symptom and proof of the prevalence of misallocation of resource in decisions made by the wholly ignorant.
That paper suffers from a small number problem.

With simple probability, using their 0.4%, it means that you would expect 0.26 blind child out of 66 to have schizophrenia. So that they see 0 is perfectly reasonable. For the other psychotic illness, that probability is 1.5%. So, out of 66 you would have expected 0.99. Maybe that kid is the lot and will develop apparent symptoms of psychosis in the next few years...

In general, an epidemiology study without statistic means that they try to find something but they didn't and couldn't explain why.

Now, common epidemiology statistic are going to use a 5% alpha error and a 95% confidence. So, if they were to repeat that experiment a 100 times, 95 times you would observe a value close to the mean. The probability numbers given are maximum, and I would guess that the minimum is zero. So 95% of the time, you would have a value much lower, and closer to zero individuals out 66 for psychosis.
Sadly, that is exactly how ideas like that promulgate. It won't affect me. It will only affect the others, the undesirables, the trouble makers, and misc. whippersnappers.

I know it will not affect me and people like me, because implemented rules will ensure that.

My parents lived in a society you seem to yearn for. Hard pass.
2G is already turned off in Australia and being phased out elsewhere (they need the spectrum for 5G and 6G). 3G is the minimum available.
Why you gotta be so difficult?
The next Casper, etc. DTC FB ads are going to be huge for them.
The problem with this new territory is exactly the unsettled issue of whether providing a password is testimonial and protected.

The protection against self-incrimination is/was a protection against being put on trial and being forced to say or give testimony that you took part in or committed a crime. It is not a protection against any and all evidence from being produced against you.

In a previous age, not saying words was enough protection, because evidence was usually physical (objects). The novel problem now is that the types of evidence being protected by passwords (and the method of protection) now are so closely linked that it's quite difficult to say whether being compelled to reveal a password is testimonial.

Suppose a suspect murdered someone and was seen putting the weapon in a safe, where the combination was known to be written in a person's private papers. Those papers could be compelled to be revealed without jeopardizing privilege because the discovery of the combination is not forcing a person to testify. Even compelling the person to reveal the combination might not be testimony. And in any case, the safe could be opened with much effort and a blowtorch.

But now, the safe can never be cracked, and the person's knowledge of the password is the only thing that will open it. The person revealing the password will surely confirm his/her guilt, so it now feels very much like the info/knowledge is self-incriminating testimony.

Modern problems. They need some court resolution at a high level.
By and large this seems absolutely useless to me. Sure it looks nice and more "polished" but it doesn't serve any purpose. There plenty of better ways to signal transitions and clicks rather than flaky button animations.
That's self-reinforcing. SSO is an immediate signal that your org can afford to pay because SSO is so expensive, and SSO is expensive in part because the entire ecosystem is expensive enough to make IDP per-seat licenses a smaller fraction of the overall bite.

SSO isn't optional; startups of basically all sizes should be using it, almost from the jump. It's not a thing you're supposed to invest in when you finally hit, like, 100 employees or something; it's as important for a 5-person team as a 20-person team.

I get the concept of price discrimination and have no on-spec moral qualm with it. But charging extra for SSO is no different than charging extra for MFA; in fact, MFA as a feature is harder to deliver than SAML.
I'm in a similar boat. What are your thoughts on the Samsung Z flip?
Yes, I'm wondering about the law regulation in such cases too
There's far more moose attacks than wolf attacks. Being afraid of wolves as a human is completely irrational. It's one of the least threats you face in the backcountry.
In the modern era would streaming over cellular been good enough if you were still a truck driver?
Having set up a lot of SAML2 SSO integrations, I'm definitely going to put SAML2 in an enterprise tier. My sanity is not worth dealing with SAML2 for customers who are trying to get by with some $100/month subscription plan.

In fact, Raygun's policy (according to this list) sounds like something I would do: add support for a couple common ones like Google and Facebook, make all the other SSO setups require an Enterprise plan.

* note: I dealt mostly with higher-ed. Don't know if they're more or less competent compared with corporations.
> And for that reason, the brief trend of urbanization has already reversed

The current flight to the suburbs is a matter of unaffordability, which is very different than the forces that drove previous waves of suburbanization.

People being priced out of desirable urban areas hasn't necessarily resulted in a reversal of urbanism, but rather an increasing pressure to urbanize the more "affordable" (in price per sqft) suburban areas.

You see this in efforts to change suburban planning codes to allow multiple dwellings per lot, or to allow bars and restaurants to be open later. Both of those are examples of initiatives that have faced pretty stiff opposition from longtime suburban residents.

Developers have caught on to this too, which is why you see developments like the one described in the article, however shallow the implementations may be.

I agree that there is a lot of push and pull, and huge financial and quality of life trade-offs that everyone is forced to make.
Further in the thread [0] they explain why this is happening (hint: it's due to the virtualbox driver allocating an RWX page and executing it, which violates integrity rules and has been exploited in the past). Either way, the authors have provided build instructions for VirtualBox users.

[0] https://www.openwall.com/lists/lkrg-users/2019/12/02/1
Delve into the courses listed here, it might help: https://www.msse.umn.edu/MSSE-Master-Science-Software-Engine...
Small startups experiment with novel ideas, workflows and products (in a 1000 flowers blooming way). The successful subset of these that survive, get merged/molded/copied by BigTech, and acquisitions are one of the ways to do that.

More importantly, from Ben's other two points, if there were fewer startups because the expected return from investments reduce, end users lose because many of these novel ideas/products never come to market. BigTech can innovate much more slowly since they can only pick and choose a few of these ideas (even if they manage to come up with them).
I’m not about to call you an idiot, but we’re (happy) users of Auth0 (with Duo MFA). After a short transition period, this provides a better user experience and greater security than our prior stance (a mix of direct ADFS and some other random in-app username/password systems).

$228/mo doesn’t even register. We probably spend a lot more for coffee in the office. (We’re much higher volume user than that, but the initial price point is just not something that would be a barrier.)
I mean, the phone looks super cool if all you want to do is use it for is a phone and music player.

But the super-weird keyboard means typing (like replying to texts and e-mails) takes a ton of getting used to... and the narrowness means you can't really browse the web. Even reading a basic news article becomes frustrating with only three words to a line. (Or five lines to a screen in landscape mode.)

And given that most people spend way more time texting and reading the news on their phone than making calls... it's crazy to me they ever had user research indicating this ever had a chance of succeeding in the first place.
Common knowledge, but not correct. Code to destroy objects has to be generated for regular function returns, and is jumped into by the exception handler too. Managing resources by hand, instead, would also require code, but you have to write it. Its expense arises from its fragility.
Ah, but that's the subjective-leaning perspective on mental models. The yin of our yin and yang here!

The objective-leaning perspective may reel a bit from the "think for yourself" critique by the subjective side, but it counters with "don't reinvent the wheel" and tends to be hyper-efficient at integrating outside thought into the current context.

(BTW thank you for your comment, this gets into the good stuff)
I avoid resort fees in NY by staying in Jersey City. Basically a Resort fee is how Hotels make extra money by giving you bullshit "perks" that, if you're like me, you'll never use.
One of the more profound insights from Stephen Wolfram’s “A New Kind of Science” is that small rules can lead to extraordinary complexity.

Wolfram famously gives Rule 30 as an example, where you cannot know what each line of squares will look like before you do the computation, but he goes on to cover many other phenomena, like prime numbers and tag systems.[1]

One conclusion is that complexity stemming from simple rules is relatively common in our Universe and that historically, humans have done a good job of solving the narrow pool of problems where you can know the end solution with a simple calculation (say predicting the location of a ball as you toss it up in the air).

The implication is that there’s a whole “universe” of problems where we cannot know the end solution until we’ve done the work necessary to compute it.

And in that sense, it wouldn’t be surprising if software engineering was a bit like Rule 30: an endless array of patterns we can’t predict until we’ve actually created the code or computed what it can do.

It’s not so much that we’re bad at software engineering. It’s just that emergent complexity is part of our reality (assuming Stephen Wolfram’s insights apply to software engineering. Maybe they don’t. But it sure feels like it).

I think the ancients knew this well. The Tower of Babel story is pretty old. Details the problems humans run into when they try to scale and work with many different elements: Something nobody could predict and possibly, catastrophe.

[1]http://mathworld.wolfram.com/TagSystem.html
Auth0's pricing really disappointed us, but we don't have the resource to switch to another vendor at the moment. We're a SaaS who need a few dozen enterprise SAML connections, but each connection only has 5-10 logins per month. Their sales team flat-out told us that our only option is the $25k/year enterprise plan plus more for each connection. It's totally bonkers.
(YC S19)
Federal law prohibits funeral homes from not accepting caskets from another supplier, or charging more for services if you bring your own. FTC... The Funeral Rule. There are lots of other restrictions on the industry as well (due to past misdeeds)

https://www.ftc.gov/tips-advice/business-center/guidance/com...
1. The answer to that is already given right above you, won't repeat myself.

2. Deceptive framing on your part. The thread is obviously brigaded by people with a conflict of interest, don't insult my intelligence. The overwhelming majority of answers there are by people, who live in Israel and have no qualifications to answer the question in an unbiased manner. Have you even read some of the answers there? Obviously not, otherwise you wouldn't try to defend the indefensible.
An analog version of Cunningham's law!
SeleniumBase methods wait for page elements to fully load before interacting with them, which brings test reliability. There's also built-in mobile testing and cross-browser testing features included: https://github.com/seleniumbase/SeleniumBase/blob/master/hel...
I wonder how they're choosing the photo to go with the article.

Most of the photos match really well. I wonder if the results are cherrypicked and a human is matching photos with the articles, or if it's totally automated.
Would be nice though to map which models are most relevant for specific questions.
When entering passwords, the keyboard will always switch back to the Apple keyboard.
Does it have to look this ugly? Qt lets you make nice layouts easily and looks native by default.
Wait - is this not still a large part of the SoundCloud model? I host a bunch of my 8bit tracks up there and give them away for free, but I have to pay $150 annually to do it (and yes I self host as well, but the soundcloud ecosystem drives a good deal of traffic my way, and I appreciate the service they provide.
I have been a happy user of fish shell for sometime. It does have some compelling features even though not POSIX compliant. Indeed zsh is inspired by it.

I hope one day fish shell can support all the emacs keystrokes besides vi. I am using omf (Oh my Fish) as package manager, this is replcated by zsh as omz (Oh My Zsh).

I have customized fish for my use with completions for many utilities and packages I use and so far it's been a breeze. Also used fzf (fuzzy find), which helps me towork beyond up and down arrow keys for completions and history.
> So security should be free? That kind of implies something about its worth that I might not think is the author's intention.

By this sentiment, does Let's Encrypt debase the value of security as well?
I made my product free and how it compares with other personal page solutions
I've fixed up tests that randomly failed in the past. It's definitely possible to get them to work reliably, but it does require a paranoid approach of carefully waiting for changes.

Humorously enough though, people had never bothered to debug why the tests were failing. One reason was that a backend service crashed. It turned out that quickly deactivating users after doing things in the UI caused stuck threads that ran infinite loops. No one had ever looked at the logs.
I hope it updates the ssh keys, because I’m pretty sure I roll mine every couple of years.
If you raise an issue and a few days later they update with a fix, then it's probably good.

You're never going to see that from IBM. You will get an email from a marketing team telling about all the other services you may enjoy.
My 2cents but I have noticed lots of small, minor updates to their front end over the last year. Things like better focus and hover states, branch copying, better mobile layouts, etc. Lots of minor front end polish.
What about if your password itself is an admission of committing a crime? Like your pass phrase is "IMurderedJeffreyEpstein"
You're attacking a strawman here. I never proposed any of that and of course no one is suggesting that you use the exact same airborne infectious disease quarantine procedures for suicide too.
Compare the costs of automation development vs the cost of life support systems development, launch and maitenance and it's not even close.

Yeah I know it sucks when someone poo-poos on your (and my) heroes. I know. "For a successful technology... " etc. Feynman wasn't perfect either. Astronauts continue to be selected according to an ideal of how they will come accross to the public, from Alan Shephard on. And there was something very impressive about all of them that played well in the media. It took 30 years to find out so many of them are also pretty weird and not people you'd take scientific advice from.

Experiments on humans in space are mostly interesting in research for space life-support. You do different, arguably vastly more bang for buck experiments if you're not using humans to do them.

The space race was literally cold war propaganda (and wonderful, beautiful stuff at that - vastly better than most propaganda). NASA continues to put PR front and centre. You can disagree, that's fine, decide to what extent the PR is influencing you and if you're sure it's minimal I can't ask for much more, right?

The ideal would be if NASA had basic science front and centre rather than the incredible waste frittering away vast wealth on the pretence of children's astronaut dreams. And I want a flying car too but reality should win out.
Not surprising. The growth rate of CO2 in the atmosphere is increasing over time: https://www.esrl.noaa.gov/gmd/ccgg/trends/gr.html
Ironically, the title "Doctor" originally meant "teacher".

https://www.merriam-webster.com/words-at-play/the-history-of...
> I mean, I was going to point out that that sentence massively compromises the validity of the author's argument, because I've been in companies with more than five employees for which this was definitely not a core security requirement.

no, it was a core security requirement whether or not it was accepted as such. but it turns out that saving money wins out over security until you get owned OR you're making enough money to not care.
I just finished adding SSO to the (very small) SaaS company that I work for, and this page gives me mixed feelings.

Yeah, SSO is a security feature and you expect to get security for free. But SSO is not free for us as the service provider. We pay a vendor (Auth0) a decent amount of money to handle all the hard stuff. We also have to manually set up SSO for each of our customers who want it, which can take anywhere between 10 minutes to several hours depending on whether the customer has set up SSO before. For these reasons, we charge an annual fee for SSO on top of the regular subscription fee. We're just not big enough to absorb the cost.
We use Google's Custom Search API.

We're basically taking headlines off RSS feeds (such as Wired, TC, NYT) attaching images through the Google API, and posting them.

You can learn more: https://notrealnews.net/about or https://bigbird.dev or email bigbird@bigbird.dev!
Until people start having kids and more and more leave the dense areas.
Sysadmins to present at Aus surveillance law review
Have some crippling disabilities. Result of some minor stokes and other clots.
But with flex time I can be highly effective. Like 10x programmer type. But I have days were I can’t get out of bed at all.

Last job forced me out since I couldn’t commit to being in office 100%

Most Every job I apply for asks if you have a disability. If I say yes or decline to stAte. 100% chance I get passed on. Weeks later job still open. If I say no Disability then a good 50-75% call me. My skill set is awesome and in demand.

Highly frustrating
Download: Definitive 'IR Management and Reporting' Presentation Template
There aren't many things you could say you like about any language that couldn't be sneered at with "lots of languages have that lol".

It's what your parent likes about Go. Inventing a claim of uniqueness and then condescendingly dismissing it isn't a good look.
Awesome, appreciate it. I'm @kaishir0 over on Twitter and the rest of my comms are in my HN profile. Would love to chat sometime.
Our society has produced software teams that produce highly reliable software (space shuttle, banking technology, and embedded systems) that don't leave room for a great deal of speed it innovation. Let's call them Type 1 teams.

We've also produced "move fast and break stuff" software organizations, who have realized moving fast and failing is a better financial outcome than safely arriving at a suboptimal destination (Facebook, Twitter, tons of startups). Let's call them Type 2 teams.

Neither Type 1 nor Type 2 teams are Bad or Evil. They are simply suited to different applications. What happened here is, an organization that was unable to distinguish between these types of teams hired a Type 2 team for a Type 1 job.

Generalized example, usual caveats apply.
The biggest tech thing I am afraid of that all other people are excited about is digital election. ML field is pretty clear about its limitation.
But this just means that small companies are more permanently priced out of SSO. Small companies should be using it to be more secure, but that list gives you a pretty good idea why they can't.
the Dear GitHub era was a long time ago. they used to be super stale. made a lot of improvements over the last few years imo
I've been liking the Nokia 1 I recently bought.
’Pale Blue Dot’ Revisited
Asking an accused to provide that content directly is tantamount to testimony, as the Eleventh Circuit concluded. To quote: "the decryption and production would be tantamount to testimony by Doe of his knowledge of the existence and location of potentially incriminating files; of his possession, control, and access to the encrypted portions of the drives; and of his capability to decrypt the files."

It all comes down to the duck test. Is the request for the decrypted container similar as asking directly for the content to be written down by the accused, or spoken about in the form of a testimony? Does it has the same purpose and the same result?
"A website written by someone who doesn't understand enterprise pricing"
Podcast: Lessons in self-care and building an App-based Startup
The sentence is (afaict) accurate, relevant, and to the point, only incidentally being amusing. It should survive StackOverflow as well.
So much this - I'm so glad to see this site as it mirrors an exact complaint I have - with hosted directories becoming so popular, wanting SSO should hopefully slowly stop becoming a signal that you are a big org with lots of money to spend.

When my org tries to buy a new SaaS I try to get them to only budget/consider it at the lowest level that gives them SSO - if they can't afford that, then they can't want it enough...it works sometimes...
If you have compliance requirements it’s always a cost saver vs vetting and legal work required.

If I need to use your SaaS’s identity system, you cannot afford to do business with me, because my company will bury you in red tape and liability.
Old School: things only 90s Sysadmins will remember
How many times do we hear complaints from the community about open source shipping with insecure defaults, yet we expect security to be a premium feature we must pay for from SaaS?
We've been building a lot of content systems lately and found Wagtail to be pretty useful (https://wagtail.io/). We build pretty much everything on Django so it's a natural fit for us.

Understanding the models and the way they show up in the admin takes a bit but it's pretty smooth after that, and very programmable. And its built-in API uses DRF, so you can expand on it with that easily. Our frontends are all React-based and it works out very nicely.

Looking at this I kind of checked out once I saw Java, which I'm not inclined to deal with these days. To each their own of course.