skysight-inc/HackerNews huggingface dataset:
I'm actually hosting a webinar today on this very topic if interested: https://www.eventbrite.com/e/101595382524
My guess is that, like the crypto wars, disclosure fights are going to happen every generation.

There was a big discussion about this in the 90s. Vendors would sit on bugs forever, frequently simply to suppress knowledge of them rather than fixing them. Hackers rebelled; some simply published what we now call 0days, others would publish on a non-negotiable timeline. Eventually, "responsibly disclosure" became a norm.

Looks like companies have once more figured out how to game the process, so their counter-parties are going to renegotiate. And the cycle of life is complete.
Na, it's one of those giant enterprise applications with design by committee input forms, and so on. It's Angular's intended use-case.
Story Development
A lot of my dutch friends have been saying: "look! look! no excess mortality in the numbers"

so this is pretty important.
Thanks.

I was really curious how "red" [es] came about for "internet" [en], but I see it's from Latin word for web/net.

Also, I've not studied Spanish at all this just made me view "retina" in a new way, cool.
I always felt the same, until I was locked into it for 30 days straight....
IndieWeb: A People-Focused Alternative to the “Corporate Web”
Why would you say that? NY, Italy, Spain suffered horrifically, do you think the reaction was exaggerated there?
Given his passion for cellular automata and the timing of his post, it would have been nice if Wolfram had at least mentioned the late great Conway and his recent passing.
"A New Kind of Physics"?

> And for example my book A New Kind of Science is about this whole phenomenon and why it’s so important for science and beyond.

Right...
Google haven't built up too much of a user base for GCP's Cloud Source Repositories service yet (my speculation), so I wonder if they're viewing Gitlab as an acquisition target.

TBQH, I don't see Gitlab lasting too much longer without an acquisition event of some sort, when facing up against this sort of Microsoft-backed feature funding. And I say this as a bigger user of Gitlab than Github (primarily because of the free private repositories and organisations).
The idea that your would get a no knock forcible entry for disclosing a bug is appalling and potentially an indictment of our entire criminal justice system.

I'm assuming vntok's legal conclusion and claim of the type of law enforcement response is true (please do not make things up on hackernews).

In which case my former support for the police and low and order is SERIOUSLY diminished.

You have a non-violent offense, that is not an actual offense, and they are doing swat door breaches on you. wow! The priorities of these companies and law enforcement is backwards then.

I guess folks are being told to just sell it to a zero day vendor (which also happens to work for the same govt agency that will bust down your door if you disclose publicly). Pretty appalling behavior here!
Missed that announcement I guess
Historically there was no golden age of truth - the important thing is to not trust. Before Hearst got his blood money lying into a war newspapers were literally arms of political parties. The hard truth is you can't reliably delegate away critical thinking.
Economics Explained on youtube https://www.youtube.com/channel/UCZ4AMrDcNrfy3X6nsU8-rPg
> How do you deal with tests that end up self-referencing, testing only specific implementation details and adding no additional safety?

Generally, by describing tests in plain english that express "user" intent (where "user" may be the dev at the call site, or may be an end user) rather than expressing things like return values or state changes.

> In order to add or change a feature, you now have to write the code twice: Once to implement the change, and once to re-implement the change to assert that it does what it's supposed to.

From this description, it doesn't sound like you're doing TDD.

1. Write a failing test (where "test" describes user intent).
2. Make that test pass with an implementation.
3. Make that implementation meet your expectations for code quality, appropriate separation of concerns, appropriate abstraction, DRY etc.

(This is commonly referred to as red-green-refactor.)

> And no safety has been added, because the logic itself can still be flawed. You've just written it twice instead of once.

While you can always get the logic wrong, it's significantly less likely if what you're testing is intent. I really don't understand what you mean by "written it twice".

> Generally I find tests that test the controllers, where multiple units of work are attached together, to be much more useful.

I'm... honestly surprised by that. Those tests tend to be the most brittle, the least likely to cover all scenarios you'd like to test, the most error prone, and the hardest to understand and maintain.
A paranoid, but still quite possibly true, reading of that is that Chinese government "influencers" are part of that knee jerk reaction.
Probably link libicu rather than rely on libc.
Geico is most important company in the Berkshire Hathaway portfolio, and is wholly owned by Berkshire Hathaway.

The insurance business is Berkshire's primary business, and all the cash generated from premiums (the float), which is just theirs to do with what they please until claims come in, is what has allowed it to invest and buy other businesses.
Pandemics&Propaganda: How Chinese State Media Shapes Coronavirus Conversations
My goal with it was to test a theory -- an algorithm really.

It can be found on the site at the 'Fields' page.

It extends beyond cells.

Take a marching band, for instance... You have 500 marchers, all blindfolded, and the goal is to get them to spill out onto the football field and form an intricate design. The constraint is that you have to give each marcher the SAME rules... that is, each marcher starts out identically to every other marcher.

Well, the 'Field' algorithm is one way of accomplishing this.

I made the program to see if the algorithm really worked.
Like most things, it seems obvious in retrospect.
But, before the program was done, it was difficult for me to really convince myself that the idea had merit.
Part 2: http://www.cpushack.com/2013/03/02/chuck-moore-part-2-from-s...
Is java.lang.String still UTF-16? Is there any plan to fix that? Once Windows and Java take care of it, I can't think of any other major UTF-16 uses left. Are there any that I've forgotten about?

Edit: Still looks like UTF-16, according to the Oracle documentation page: https://docs.oracle.com/en/java/javase/14/docs/api/java.base...
Edit 2: JavaScript too. See my reply to someone else below.
The government changed the way they measured inflation to purposefully downplay it. For example, if they were measuring the cost of Levi's jeans, and they went up too high, they would replace them in their index with cheaper non-name brand jeans to show that inflation didn't occur.

And same thing goes with groceries. When ice cream used to be a pint, it's now 14 oz. They have decreased the size of things like food packages over the last 15 years, and I don't think that's taken into consideration in the inflation index. Recently they decreased the size of orange juice by 15% but kept the price the same. That is the definition of inflation.
Macroeconomics by Bill Mitchell (https://amzn.to/2XyoTrU)

The go to text book to understand the mechanisms and mechanics behind Modern Money Theory.
Is it weird that the same site published this on the same day? https://www.androidpolice.com/2020/04/09/google-play-music-t...

Very strangely authoritarian wording, too:

"It comes down to preference, but soon, you'll have no other choice but switching"

"Unfortunately, the equation isn't that simple here because YouTube Music will replace Google Play Music one day. You have to accept YouTube Music's quirks if you currently use and love Play Music, or you have to switch to another platform altogether."
It is never that simple... individuals' rights are always going to be coming into conflict. It doesn't mean anything to say individual rights always trump the groups will.

We are always having to adjudicate the boundaries of rights... that is why we have a court system. Where those boundaries are IS up to date, and has changed over time... this is unavoidable, because there is no 'natural' place to put those boundaries.
Show HN: Tilish – Tmux plugin that emulates i3wm
can you elaborate on what you mean by this?

because if you're referring to requiring review approvals before a PR can be merged, that's available in the free plan (under branch protection rules).
MbedTLS: Side channel attack on ECDSA
I think an acquisition of Gitlab would be the only way for me to migrate back to GH from GL. I've been a happy user of Gitlab for years now and have no yearning desire to return to Github.
I think that may be inaccurate -- IIRC, in C, you can do type punning via a union but not memcpy, and in C++ you can do type punning via memcpy but not a union and this incompatibility drives me nuts because it makes inline functions in a header file shared between C and C++ really messy. (Moral of the story: don't pun types.)
It was an oversight. They had HTTPS support. Going by the bug report, the client checked for a redirect to HTTPS, but didn’t check that it was to the correct domain.
Hey everyone,

I recently made a tmux plugin called tilish [1], which tries to port the i3wm keybindings and user experience over to tmux. This is perhaps most interesting for people that enjoy window managers like i3wm and sway, and would like their terminal sessions to behave a bit more like that; either when working remotely over ssh, or when working on computers without i3wm available.

However, I personally find the i3wm keybindings to be efficient and intuitive, and find dynamic tiling via tmux layouts to be a better workflow than manually splitting panes. The plugin may therefore be of interest also to people who don't have any experience with i3wm or sway, but do use tmux regularly.

Note that this is similar to the project 3mux [2], which was also announced here a few days ago. The main difference between our projects is that 3mux is a tmux replacement, while tilish is a tmux plugin. Thus, 3mux is a larger and more advanced undertaking, but tilish can easily be adopted on any machine that already has tmux available (you just have to copy over the right tmux.conf).

If you try out tilish, I'd be happy to receive feedback! :)

[1]: https://github.com/jabirali/tmux-tilish

[2]: https://news.ycombinator.com/item?id=22843705
I certainly read it as applying to both. Certainly Benford's law is demonstrable in many areas, but there's also an interesting sort of "Benford's paradox" at play that when free choice is given between units options, people seem to "prefer" the versions of constants with the lower starting digit. An interesting question of whether one seems more "natural" than another simply because Benford's law so often applies to similar situations.
Hi Nat. Big fan. I've been on GitHub for a long time now. There's a fair bit of friction in issue/PR management for people who have primarily CLI-centered workflows. I know that `hub` and friends exist, but will there be official, supported clients in the future?

Also: are there plans to open source more of GitHub? Post Microsoft acquisition, I have been increasingly concerned about vendor lock-in, EEE, and so forth.
You say they are unconstitutional... where are the court rulings saying this?
Sorry, are you referring to Kaleb or Trump? thanks
What safe guards are in place to prevent Microsoft from using GitHub to glean competitive intelligence?

Just like Facebook used Onavo.

https://www.wsj.com/articles/facebooks-onavo-gives-social-me...
Although FETs have built-in body diodes (to let current free-wheel back), power IGBT packages usually include built-in/added free-wheeling diodes.

From a power handling perspective, power IGBTs and FETs act similar just with their own challenges.
> Berkshire does not try to entice visitors or market any services through its website

At least Warren does it in the CEO's message :) https://www.berkshirehathaway.com/message.html
This is a great change! One request: I wish that SAML was not an enterprise feature. SAML ought be a basic security feature like 2FA—it's especially valuable for open source teams who might use a mixture of services, and an easily accessible and cheap SSO solution would go a long way in raising the security bar for all teams, not just open source teams.
Nice user name. Good luck!
Writing formal letters with Unix roff's “mm” package
Maybe, but this move looks to flatten GitHub pricing down to two tiers: enterprise and free, while GitLab has four pricing tiers and the enterprise feature offering doesn't seem to be there (Gold doesn't look too enterprise-y at first glance).
A New Way to Get Started with Docker
I'm curious what exactly makes this undefined behavior.

And in particular, what about something like this?

struct Foo {
#ifdef __cplusplus
int bar() const { return bar_; }
private:
#endif
int bar_;
};

Or, taking this a step further:

struct _Foo;
typedef struct _Foo Foo;

// In C "struct _Foo" is never defined.
int Foo_bar(const Foo* foo) { return *(int*)foo; }
void Foo_setbar(Foo* foo) { *(int*)foo; }
Foo* Foo_new() { return malloc(sizeof(int)); }

#ifdef __cplusplus
struct _Foo {
void set_bar() { bar_ = bar; }
int bar() const { return bar_; }
private:
int bar_;
};
#endif

The above isn't ideal but it does provide encapsulation in a way that doesn't seem to violate strict aliasing (the memory location is consistently read/written as "int").
In the north american phone market, Google has 2.3% market share. The other two vendors with their custom chips have 55% (Apple) and 26% (Samsung) and are market leaders globally as well. Globally, Google's market share is even worse. They certainly have the capital and manpower to design chips, but as selling phones and chromebooks isn't such a great priority for Google, they might not pour as much money into it as Apple so the resulting performance might be disappointing. Furthermore, no matter the amount of money spent, they likely won't it get back unless they start licensing the SoC but for that to work it has to be much better than the alternatives.

Overall, with Moore's law dying, there will be a trend towards more and more vendors building custom chips, but that's a rather long term trend and I think Google is a bit early for it. From a strategic point of view though it does make sense because it gives Google a foot in the door, seats on committees, etc., giving Google both information as well as influence. But I wouldn't be surprised if the project gets cancelled in 3 years.
Couldn't agree more. Gitlab's CI is what made me finally fall in love with CI as a concept. Obviously it was needed before, but it always felt like an ugly chore. With Gitlab, it's one of the first things I do when setting up a new project.
You didn't find that there was pressure to work later? I tend to prefer to come in late because you can control your bound on that, but leaving early makes you look bad (despite the irrationality of that), and its just easy to fall into the habit of "oh just another hour, I will still be home for dinner..."

Then there are meetings scheduled for 3-6pm....
The closest I could find to a recommendation for UTF-8 is in UWP design guidelines: https://docs.microsoft.com/en-us/windows/uwp/design/globaliz...

However it's not quite unequivocal. Windows still uses UTF-16 in the kernel (or actually an array of 16bit integers, but UTF-16 is a very strong convention). The code page will often allow the Win32 API to perform the conversion back and forth instead of your application doing it.
Makes more sense when you see his twitter feed these days is mostly retweets of political stuff like your uncle on facebook (or... everyone on twitter).

You just can't become the guy who seriously posts political shit on social media all day and spends so much time consumed by the "them bad, we good" faction war.
I believe that "Master class" is taking it a bit too far. The site has remained the same because there is no reason to update it. If the simplistic design was revolutionary or represented something other than "Don't fix what is not broken" they would be using the same format for their portfolio companies.

The site gets the info out to the people that need it, nothing more nothing less. It's a good design for what they are trying to do however it's a terrible design for many other companies.
> Every time a language dies, like latin or summerian did, we gain uniformity.

So when Latin evolved into French, Italian, Spanish, ... we gained uniformity? I'm not convinced!
Best Themes for Linux Mint Cinnamon
This is completely unrelated to the announcement, but when will Enterprise Server ship support for GitHub Actions?
Sorry, let me simplify (or try to):

Was driving a lot seen as a positive thing in the 50s ? and if so, did it led to a distorted urban organization where job hubs were always way too far and now we're seeing the negative side of this, because driving is linked to pollution, and wasted time rather than progress/future/freedom.

I hope it was clearer :D
Yes, we are working on an official CLI here: https://github.com/cli/cli

I think open sourcing GitHub is an interesting idea.
I would request similar to the sibling post, that at least OpenID Connect or some such SSO could be a feature for us smaller companies that still want to practice good security by doing SSO.
Being selfish and looking at the numbers for the UK.

One thing that is striking is the peaks in age. The total figures look like the peak has yet to arrive, but thats because the mortality in the 65+ range is climbing (Given that 13% and rising have cases, this isn't suprising)

but the 18-65 looks like it has peaked. This shows a similar pattern to spain, if a bit earlier on the slope.

However this is just a shallow observation.
We'll have a beta next month, and should ship this summer.
It's got nothing to do with middle management. As long as WFH is not mandatory by fiat, people are going to work on-site to be competitive for promotions/bonuses, because in-person work is just more efficient.
I think a lot of these dudes are retired. A lot of good C people like P.J. Plauger, John Benito, and Clark Nelson have all retired recently. Anyway, they are all invited back. As an incentive, we typically have free coffee and snacks at most of the meetings. :)
"In some ways one part of the solution is simple: Pass laws that deliver consequences for lying and disseminating false information or fabricating narratives."

Something inside me dies every time I hear an American say that the solution to this problem is to set fire to the First Amendment. And who, pray tell, would determine who was lying or misguiding the public? Do you think if such a law were to come into effect while Trump was in power, that he would make sure to use that power justly, instead of as a muzzle to silence political criticism? Or that any other person in power wouldn't abuse the heck out of this?

The price of freedom is eternal vigilance, and like everything else in this country we've racked up an enormous debt without making plans to pay it. It only takes a generation or two forgetting this to destroy everything that made America beautiful.
That's fair. As you note by drawing a distinction, modern Arabic and formal/historical Arabic differ in their digit reading order: https://www.quora.com/Why-are-numerals-written-left-to-right...

I don't know if the original Hindu system read from most significant left digit first, but if it did then the historical transmission into Europe may have entailed two flips of numeric endianness.
I'd like to thank you for this change but also in general all the amazing things Github is doing. I haven't finished high school yet but your Github Education pack is SO useful for me and I know I will never have time to use half of the stuff on it.

Thanks to everyone at Github making stuff like this possible and creating such a great epicenter for open source in general. Keep on being awesome!

Also I was wondering, Github is offering so many features for free, but does the company sustain itself through entreprise payments or some other stream? I was just curious. :)
That's odd, https://github.com/pricing mentions it as a paid option.
He sold Instagram years ago, so it's no longer his. Also, instead of blindly launching an ad hominem attack against him, judge the article on its contents. Of course, having success in one area doesn't mean he is an expert in another, but it doesn't exclude the possibility as well.
You can `pulumi destroy --target <urn>` in the same way as you can target a Terraform destroy.

An important thing that is not as well understood about Pulumi as it should be is that it does in fact build a declarative model, but using an imperative language instead of a DSL. Consequently there is not a huge range of difference in what can achieved from the declarative model.

Disclaimer: I was a Terraform maintainer for a long time, and also contribute to Pulumi.
user: throw-45432
created: 28 minutes ago
karma: 1

Another way CCP apologists deal with difficult things (forgot: flagging is another). You really must think the HN crowd is plain stupid.
> Our reasoning for skipping frontend tests: Most of the frontend code is visual. Tests can't tell you if the result is aesthetically satisfying, so you have to look at it no matter what. Since the backend diligently enforces data sanity, the frontend can't really get into too much trouble, and a page reload fixes almost anything. Frontend testing seems to be high-effort low-reward.

This is an example front-end react component project that I wrote that benefits heavily from tests: https://github.com/lookfirst/mui-rff

Why? Because it is a wrapper around two other frameworks (React Final Form and Material-UI). Any time those two frameworks change something in a way that I didn't expect, I want test failures.
I believe C is doing the right thing. Const as immutability is a kludge to force the language to operate at the level of data structure/API design, something that it cannot do properly.
Microservices is a polar extreme to monoliths.

It's not about making each macro-service into 1000 micro-services. It's about making your macro-services smaller, instead of all-consuming monoliths.

The problem is that monoliths will never be hackable. A LEGO-kit is hackable. A monolith just have hooks and connectors, but the product itself will always be static.

You can get things shipped as pre-assembled LEGO kits (both metaphoric or not)?
A lovely example of why one shouldn't take legal advice from message boards.

But I would say that if you're doing this sort of thing for the first time, I would strongly advise you to talk to a lawyer who knows this corner of the law, and to someone who has done this before.

Smarts do not substitute for experience and domain-specific knowledge.
It seems to, on the upgrade page for a personal account it still says "Pro" but for $4/m
Creating Serverless HTML and API
According to Wikipedia, the territory now called Mongolia was conquered by White Russians in 1920. Before then it was controlled by the Chinese Republic and before that the Qing dynasty (the rulers of which were ethnically neither Chinese nor Mongolian). In response, the Red Russians assisted Mongolian communists in conquering the country. The assistance included the sending of Russian troops.
Is there a link to the research article/preprint?
Did Human Evolution Include a Semi-Aquatic Phase?
My father bought a lifetime subscription to the uk magazine 'Private Eye' in, iirc, the 1970s, for £10 (they were being sued and on the verge of going bust).

He still gets his copy delivered every fortnight.
Agreed. SAML even makes sense for solo dev.