skysight-inc/HackerNews huggingface dataset:
> If I find a serious issue that's still unpatched and someone tells me "Ops it's a duplicate sorry!" I'm still going to ask for payment. If I don't get it, it's a given that I'm going public.

Probably because I think what you've just described could be viewed as extortion, which is illegal in many locations? Also, it doesn't really do you any favors, I think. You'll get a week or less of recognition as finding an exploit, and then the story will come out how you both sniped someone else's find and possibly caused damage on purpose for your five minutes of fame.

To be clear, it's the initial monetary request and actions because it was denied that makes this entirely mercenary and would not reflect well on you. You were obviously willing to sit on the exploit for a while for some cash, so you no longer have any moral arguments to rely on for your behavior if you release it immediately, and the fact that it's not original just makes it worse. I imagine your reputation for security matters might never recover.

There are ways to get the moral defense back, but it requires waiting a while to see if it actually gets fixed and not taking it public immediately (so it actually is for their unresponsiveness and not just because they didn't pay).
The MISRA committee is a separate organization from the C standards committee, but there is overlap between the two groups and an official liaison process for the committees to collaborate. So there's a bit of bidirectional influence between the two groups.

I am not on the MISRA committee, but I believe they talk a bit about their public roadmap in this video: https://vimeo.com/190304951
A 64-year-old man accidentally ejected himself from a fighter jet at 2,500 feet
>The more customers local businesses lose in favor of off-shore producers the weaker they get, to the point where they disappear or become importers.

Yes, that is a possibility and it happens all the time. But what are some possible outcomes for the economy as a whole?

a) Domestic producers improve productivity and standards so they can compete with lower wages elsewhere.

b) Domestic producers move up the value chain importing lower value goods and services.

c) The domestic economy declines while a foreign one rises.

Your economic model only allows for c while some combination of a and b has been the basis for our economic progress and prosperity. That's why I disagree with you.

Your morals/pity accusation is a misunderstanding predicated on your assumption that importing goods we could produce ourselves hurts our economy. As I do not agree with that assumption, it follows that morals or pity couldn't possibly have been my motivation for bringing up migration.

My motivation for bringing it up was that trading with these countries is an opportunity to act in our mutual interest. It can benefit both sides and it is an opportunity to do what keeps getting repeated every time we have a migration crisis: Improve living standards in our neighboring regions. We shouldn't waste this opportunity based on some flawed mercantilist economic model.
You did an excellent job naming these. This made my day.
That’s why I say it’s mostly accounting—you have to convert reality into quantities before you can engineer it, and accounting is the set of rules for measuring and manipulating those quantities. The difficulty lies in the fact that unlike physics, where units are essentially hard-coded into the fabric of reality, the unit in accounting is money which is a social construct.
Recreating NYT U.S. Cases Map
At first I though they simply mean the letter "č" but no, it turns out that "ch" (and also "dz") is a digraph with a separate place in Czech and Slovak alphabets.
The explanation with both is that on charged issues people only want figure out if you are with them or against them. If you are neither, they will still try to categorize you as quickly as possible based on a keyword match to their prejudices.
There's a conversion in every ...A() function. Conversion between UTF-8 and WTF-16 is just more of the same, but without codepage lookup tables. (-:
I didn't change the behavior - I just added a newline. Sorry that wasn't clear.
They are using the haar cascade face detection, which works well for when the person is facing the camera straight ahead. Doesn't work great when the face is at an angle.
I don't see anything of substance here, besides a lot of pretty graphs. Just like Wolfram's "A New Kind of Science", we have the problem that there is a vast gulf between what you need to make flashy popsci and what you need to make a real physical theory. In increasing order of difficulty, you need to:

1. make a set of dynamical rules that matches general relativity in the low energy limit, such as recovering Lorentz invariance and the Einstein field equation (this is supposed to be the easiest part -- without at least doing this, a theory of everything is worth less than the graph doodles in my middle school notebooks)

2. demonstrate that you can add something that looks like matter

3. reproduce effects that we know have to appear in quantum gravity in the semiclassical limit, such as Hawking radiation and black hole entropy

4. demonstrate that you can add matter that behaves like the Standard Model

5. make specific predictions that we didn't already know from purely semiclassical considerations

6. find a way to verify those predictions

7. have the predictions actually be correct upon verification

These 7 steps are hard, which is why nobody has managed to do them. But it looks like Wolfram hasn't even bothered to start on step 1. His new book is just hundreds and hundreds of pages of pretty graphs and big words. It's more akin to a reformulation of the foundations of mathematics than a theory of physics -- and it's not a particularly good one, at that.

It's the same complaint I have about category theorists trying to do applied physics. (And category theory is a much more powerful language than Wolfram's!) Yes, you might have an incredibly general language, with which you can talk about vast swaths of possible physical theories. But we already had way too many possibilities using ordinary mathematics! We need to narrow down on specifics, not muddy the waters by making things even more general. I mean, it's like trying to rescue a startup by translating the documentation into Esperanto.
"The only school that has any explanation for this is the Austrian School of Economics. Their theory of the business cycle is the reason they successfully predict every crisis to the tee (except for timing, no one can do that), while other economists are just blown away in surprise that it even happened."

Mises is a big joke. Never made it past assistant professor. Never worked a day of his live in private enterprise. His theories describe barter economies in the middle ages; alas this quite well. Due to his lack of understanding of the principal nature of capitalism he offer no insights into economics.

"Credit expansion can bring about a temporary boom. But such a fictitious prosperity must end in a general depression of trade, a slump."

Ludwig von Mises

Von an outstanding an deep insight, not. While not explicit mentioning it, he suggests that this is a bad thing. Trick question: What kind of boom does not bring a credit expansion with it? His quote is just a tautology and offers no insight. Yes, the boom/bust cycle is an inherent feature of capitalism.
As a consultant with no accountant -- in what areas did they save you that much? Entirely taxes?
If it had over 100 votes and was in the last few days you might find it by scanning through here:

https://news.ycombinator.com/best

You can also look at the front page from a specific day here:

https://news.ycombinator.com/front?day=2020-04-08

Through that I found this item:

Clojure: https://news.ycombinator.com/item?id=22797858

And this:

IO: https://news.ycombinator.com/item?id=22796409
TL; DR: No.
Right now I am reading The Black Death in Egypt and England: a comparative study by Stuart Borsch. It compares the macroeconomic effects of the black death in England in Egypt. The relative power of the aristocracy to control or fail to control the supply and price of labor not only affected wages in the short term but agricultural productivity and eventually the foundation for industrialization and entrepreneurship.

I am only a third of the way through, but it so far seems thoroughly researched, without the dodgy understanding of economics in many (most?) historical nonfiction books. The only potential problem is that I want to believe that the dystopian sounding world ruled by mamluks was an economic disaster waiting to happen, so I am wary of my reading being overly credulous. It could be that irrigation dependent agriculture was more brittle infrastructure, but I haven't yet had time to finish or digest the book yet.

From the introduction

England:

> In spite of the disputes over many significant issues, scholars agree about certain aspects of the outcome in Western Europe, particularly northwestern Europe. In many areas, urban and rural wages rose, land rents declined, grain prices dropped, agricultural output became more diversified, and unemployment levels decreased. Furthermore, the percentage decrease of agrarian and total output was less than that of the population, and per capita incomes rose. Overall economic recovery was largely completed by the year 1500. Landholding systems were transformed, and the manorial system, which was on the wane in some areas, collapsed in many parts of Western Europe, and was replaced by tenant farming or small peasant landholdings. Where these conclusions are accepted, they are often accepted as an axiomatic response to the relative scarcity of labor and the abundance of land that accompanied depopulation. The concessions that landlords made to peasants also seem to be an obvious consequence of the relative scarcity of rural labor.

Egypt:

> Wages dropped precipitously, land rents increased, grain prices rose, agricultural output became less diversified, and unemployment levels increased. The percentage decrease in agrarian and total output was greater than that of the population, and per capita incomes plummeted. The landholding system did not undergo a radical transformation, and the aristocracy was able to successfully contest the demands of scarce rural labor. Furthermore, economic recovery was nowhere in sight by 1500; the agrarian system lay in ruins, and agricultural output had declined by approximately sixty-eight percent.

[1] https://smile.amazon.com/Black-Death-Egypt-England-Comparati...
Wow, I'm have just started trying out the management track in my company, and your post is very motivating. As in, I thought I would lose out on the programming part, but if I end up with the same experience as you, I will make up for it by doing hobby projects again.
I wonder why the Washington Post would want to stress that they violated company policies. Not sure since it's behind a paywall.
@arussellsaw - might want to have a closer look at this [0] for some inspiration

[0] https://wwweeebbb.com/
Thanks. I'm not surprised by this. I know this isn't a "mainstream" opinion, but I was fairly happy when MS brought GitHub. I think that the Nadella MS is much more streamlined than the old "Enemy of the State" version that got our undies in a bunch, back in the last century.
That's what it says right there on the page already: "Additional equipment like viral filters are also required."
Top Reasons to Buy Bitcoin in 2020
Having lived in dense Asian cities with collectivist culture it seems like a "no shit" position. Then you spend some time in a US suburb or even more rural areas where people "feel" more insulated from broader society and you can see how these thoughts in conjunction with individual exceptionalism take root. Feel being a key qualifier because these people who be just as fucked if the disease cannot be contained in urban areas just like urban areas would be fucked if their rural support system collapses, and for many countries if globalism collapses.

My current position is I can't see covid19 or any similarly infectious disease being contained without mass contact tracing / global medical monitoring technology, it's an emergent reality when globalized society confronts pandemics. The only things preventing this system prior was an absence of technology, so in some sense we are almost fortunate the outbreak is happening with our current capabilities. If covid19 happened instead of SARS 20 years ago, there wouldn't even be the technology to rapidly map the genome, roll out tests, or contact trace the way east Asian countries are doing to mitigate spread. This is the first time in human history where we have the opportunity deal with ongoing serious pandemic and perhaps implement resilient technical systems to prevent for future events without catastrophic social disruption. Covid19 is not going to be the last pandemic we see, billions of people in Asia and Africa are being uplifted through industrialization which means more opportunities for zoonotic diseases in the future.
While I can see what you're saying, you also have to properly compute, on your end, a cost for a False Positive and a cost for a False Negative.

In my opinion, in the case of security, I think a False Negative should weigh a lot, and thus measures to prevent it should be in place (i.e. not having an intern mindlessly looking through issues and sorting them into buckets).

Of course, the cost of each will depend on your app/company, its industry, its size, and so on.
SAML is the de facto standard single sign-on protocol for enterprise-grade applications. If a SAAS app integrates directly with Okta or OneLogin, it probably does so with SAML.

There's a lot of functional overlap between SAML and OIDC/OAuth, but SAML is a very different (and idiosyncratic) protocol; the "what" is the same, but the "how" is very different.
Good idea.

Maybe put a Youtube video of the comedian's performance on the detail page, so we get a little preview?
Amazon Fires Three More Employees Who Criticized Working Conditions
Some Quantum Mechanical Properties of the Wolfram Model [pdf]
I think it is just good practice to have all your data encrypted.
Touch Sensitive Plant with Arduino
You reminded me of a successful animator friend from long ago. He did work for all of the big names in animation, but would never sign a contract. He told them, "if you want me to do the work, let's do this. If you don't treat me well, we're done. If I don't treat you well, it'll be easy to get rid of me." It was a pretty brash style but it matched the kind of breezy guy he wanted to be.

There were quite a few contractors during the dot com days that were like this too--I remember some had a policy of hearing "let me explain why your paycheck will be late" and just walking out right then. Others would say, "I'm staying for a while, because I'm living off of money I made 3 months ago." And others would go right to the co-founder or COO or marketing lead and start a new business with them on the spot...something different, but comfortable since they already knew they could work together.
It's probably a stretch but the closest thing to this today is TPUs being built for Tensorflow.
What timeline are you measuring diversity in? HN has a lot of active users around the globe but you can see the ideological pendulum of the comments swing when Europe signs off and the US west coast climbs toward its peak.
Bitcoin Halving 2020: What's Going to Happen?
No. Č is something else, ch is a digraph that's pronounced differently. Take a look at Czech and Slovak alphabets specifically:

https://en.wikipedia.org/wiki/Czech_orthography

https://en.wikipedia.org/wiki/Slovak_orthography
But why even deal with that complexity? It's another place where thinks can break or you forget something. You can verify the doamin there too, but that still doesn't mean you can just make the request for the redirect over http and think that's okay.
Mt. Sinai developed a procedure for using these safely in a clinical setting, by using an alternate patient circuit with viral filters to capture the aerosolized particles:
https://health.mountsinai.org/wp-content/uploads/sites/14/20...
>This means 1 of 2 things:

>They're trying to get out of paying bug bounty money: I guess this is the more extreme perspective to take here, but considering the whole experience, a definitely possible one. I wasn't here for the bug bounty money, I have work by this point, but if there's some younger child trying to get into security research doing this, this could be enough to massively demotivate them if they were promised it from the HackerOne page.

>They had someone who posted the same bug either weeks or months in advance: This means that Valve left someone else hanging for an insanely long time. This is equally messed up.

I can't understand that in the age of blockchain buzzword bullshitting companies, in one instance where the immutable public ledger would actually be useful (for instance with sha512 hash of initial report) it isn't used. It wouldn't be very complicated and it would immensely help their trustworthiness.
Designer's Table (Chef's Table Parody)
Hook – Use hyperlinks everywhere to interconnect documents
SSO is a security feature, not a convenience. It happens to be a security feature that comes bundled with some extra convenience, but it's not the only one like that; so are password managers.
> in a lot of cases, it will be harmless; and in the worst case it will crash with a segfault.

I am not sure if a segfault is always the worst case. It could be by some coincidence that array[i] contains some confidential information [maybe part of a private key? 32 bits of the user's password?] and you've now written it to a log file.

I know it's hard to imagine a mis-read of ~32 bits would have bad consequences of that sort, but it's not out of the question.
That's not always necessary, and it's a good way to get dragged down into quibbling. The GP rings true to me, even though I'm not sure precisely which of the PG essays they most had in mind.
Not only that. Aesthetics are a function of design. They allow us to understand a message, follow a narrative and more deeply empathize with objects to the point that we may be forgiving of small issues.
They are part of how we behave and interact with many things that surround us and influence us. They help us to create mental models for the world because they become an attribute of the objects we desire or loathe.

Of course, utilitarian and plain boring design aesthetics have a place in the world, but imagine if everything was like this website. It would be almost impossible to generate opinions because we don't have any distinct reference to help us imagine if something could be more harmonic and visually appealing.

I believe that the goal of aesthetics is precisely to empower people to generate feelings toward objects that otherwise wouldn't generate a connection. It's the same reason why we can appreciate art or admire nature. Because those things are full of visual attributes that help us to elicit thoughts and re-describe things as we see them (ugly, funny, colorful, boring, etc).
> It is a pain in the ass to have a variable number of bytes per char.

Maybe, but nobody can stomach the wasted space you get with UTF-32 in almost every situation. The encoding time tradeoff was considered less objectionable than making most of your text twice or four times larger.
No idea where you got that information.

Testing in Germany started very late, but was then increased rapidly.

As of today, Germany has done 1,317,887 tests. The US: 3,029,979 tests, Italy: 1,073,689 tests. (Source: https://www.worldometers.info/coronavirus/) So not exceptionally more than others.
Tesla's Egg of Columbus
Also see: HiPPO

https://whatis.techtarget.com/definition/HiPPOs-highest-paid...
As much as the guy can be annoying, the associated "Project Announcement" is a fascinating 20,000-word-ish article. [1]

I've long assumed that the basic structure of the universe must be some kind of graph, simply because it's the most elementary structure there seems to be, and so easily gives rise to dimensionality. So seeing someone try to tackle this bottom-up and see if it can ultimately give rise to quantum mechanics and beyond sure is fun to watch.

[1] https://writings.stephenwolfram.com/2020/04/finally-we-may-h...
Sounds mostly like the issue is nobody has bothered to submit a proposal for it then? (There is so much in-the-wild experience and code dealing with this issue, I cannot imagine the second point being problematic.)

On the third point, I have trouble thinking of any technical objections to such proposal.
You can say it's just a "disagreement" but there are no benefits to doing this. No one has actually out forward reasoning that makes sense. You have just thrown out flimsy arguments and then moved on to more flimsy arguments when I point out how absurd they are.

This is a typical thing people do when they can't directly confront something. They throw out as much as they can and don't acknowledge when what they said was shot down, they just throw out more and hope something sticks.

https://en.m.wikipedia.org/wiki/Gish_gallop

You said so much and none of it made sense, but instead of backing up claims of "parsing being easier" or "can't support multiple line endings" or any other nonsense, you just make be on to more nonsense. Literally no other compiler intentionally breaks by default. There is no reasonable reason to do this and you haven't even come close to mentioning one and infact have had to go into bizarre concoctions because you don't want to admit how silly this is.
If you're avoiding little Italy or little Canada because you think they're diseased then yes, that would make you racist.

If you avoid those places because you don't feel like having Italian or Canadian food right now then no, that's not racist.

In this case, the reason why people were avoiding Chinatown was because they were avoiding a group of people they were afraid of due to the coronavirus. That's racism. They weren't trying to avoid the virus because they were still going out, eating at other restaurants and still being in the general public.
Sam Clayton Jr. Legendary Reggae Sound Engineer Dies at 58 of the Coronavirus
We avoid infrastructure deployment codes that needs to store the state. I know it's easier and faster do that but it feels so unsafe that it has the ability to delete things. We don't grant delete permissions to our automation and do deletions by hand.
Another pattern I see is that discussions about the CCP quickly devolve into distracting comparisons to problems outside of China. I never see discussions about problems outside of China get distracted by "what about the CCP".

I'm not sure if it's a coordinated distraction campaign designed to make false equivalences; or if it's just American guilt (fostered by the media and schools) losing all perspective.

Let's stay focused. The CCP is a real problem for human rights -- not just for the Chinese people, but for everyone around the world.
Messing with vents if you don't know what you're doing sounds like a sure fire way to kill yourself.