skysight-inc/HackerNews huggingface dataset:
Many of your remaining questions have devolved into "When will I see my favorite feature xyz appear in the C Standard?" The answer in most cases is "that depends on how long it takes you to submit a proposal". Take a look at http://www.open-std.org/jtc1/sc22/wg14/www/wg14_document_log... for previous proposals and review the minutes to see which proposals have been adopted. In general, the committee is not going to adopt proposals for which there is insufficient existing practice or haven't been fully thought out. There are cases where people have come to a single meeting with a well-considered proposal that was adopted into the C Standard. I wrote about one such case here: https://www.linkedin.com/pulse/alignment-requirements-memory... Alternatively, you can approach someone on the committee and ask us to champion a proposal for you. It is likely that we'll agree or at least provide you with feedback on your proposal.
The CPAP world is a microcosm of what's wrong in the medical world, i.e. why things cost so much.

A CPAP machines costs about 10x as much as it should, and a part of that is insurance companies wanting to make sure they are not paying for a device you are not using.

Which then increases the price, which makes insurance companies even more worried about them.

Then you are paternalism where only a Dr. is allowed to change the settings on the machine. So they lock them down, which adds even more to the cost.

And then they are prescription only, so they have to go through specialized distributors because heaven forbid someone actually buy one without a Dr. letting them.

The end result of all this is lots of people making money, and higher costs for the patient in the form of higher insurance premiums.
Since I see people on HN get this wrong more than 90% of the time I want to demystify the term Man in the Middle.

https://en.wikipedia.org/wiki/Man-in-the-middle_attack

The Wikipedia article's description is correct. MITM is a cryptographic attack where an impostor is performing certificate interception and so relays encrypted traffic. MITM is not merely listening to just any traffic.

If the violation occurred over port 80 its a safe bet there is no man in the middle attack. If I were doing security triage and I saw "man in the middle" and anything about HTTP or port 80 I would not consider this a priority ticket.

This incident is just a software defect rather than a security violation from the unexpected use of a reverse proxy: https://en.wikipedia.org/wiki/Reverse_proxy

An unsupported reverse proxy was only possible because the site was transmitting over HTTP instead of HTTPS.

> If that isn't clear to someone

It isn't clear merely because you used the scary term: MITM. A trained security professional performing triage would devalue the security ticket pending further investigation.
For what it's worth https://www.whistleblowers.gov/

> You have the right to report if your workplace is unsafe during the COVID-19 pandemic.

> If you have concerns, you have the right to speak up about them without fear of retaliation.

Whether or not Amazon ran afoul of the rules remains to be seen.
Yes, these policies are widespread. And often explicitly illegal under the NLRA. You have a legal right, for instance, to discuss your pay and working conditions with anyone you like.

But no one changes the policies until the NLRB requires them to after losing a case, even an easy case. Sometimes all they do is write "except where allowed by law" into the policy, then hope workers don't know what their rights are.
I made this same point when it was announced three months ago that Wag (another major Vision Fund investment) was struggling: https://news.ycombinator.com/item?id=21095990

Yet somehow people still seemed to defend the strategy ("you underestimate biotech ROI" or "investing in moonshots was not the point of the fund").

Most criticism is invalid because it misses the underlying flaw of the Vision Fund: If you're going to waste $24+ billion on the Adam Neumann's of the world, you could not have performed any worse by taking on riskier projects.

It was obvious to everyone that WeWork was going to flop (even if Softbank got some money back from an IPO, the ensuing stock price crash would've tarnished their reputation and who knows how quickly they could've exited) and that Adam Neumann was a con. So the return there was going to be heavily negative.

I doubt $10+ billion into drug research would've yielded as negative of results, especially in this era.

The only valid critique of our approach I've heard is that it's a logistical pain to try and spread and manage $100 billion around $5 million at a time.
You didn't address the comment you're replying to at all.

Normally, tech employers don't have many hundreds of thousands of employees. You'll always be able to find anecdotes to support any narrative you want when you're looking at that big of a workforce.
> The problem is that some bands were never signed to a label, broke up before spotify got big, or for some other reason don't exist on any of the popular streaming sites.

For Spotify, Google, Amazon, Apple, etc. that's not a problem.

Are people going to cancel their accounts because they can't listen to a very small subset of music? Probably but it's going to be a tiny minority of users that's inconsequential to their bottom line.
But check out the page's source. The site isn't so much a "master class in design" as it is a page that was made in the 90's and has never been updated. Back then this was how almost every webpage looked. It's still using tables for layout. Based on the MSHTML generator tag, it was most likely made in MS FrontPage.
That huge asset has become a liability. We always needed to become encoding-aware, but UTF-8's ASCII compatibility has let us delay it for decades, and caused exactly the confusion causing us to debate right now. So many engineers have been foiled by putting off learning about encodings. Joel Spolsky wrote an article, Atwood wrote an article, Python made a backwards incompatible change, etc. etc. etc.

To be honest, I'm just guessing about what text is stored in--I'll cop to it being very hard to prove. But my guess is the vast majority of text is in old binary formats, executables, log files, firmware, or in databases without markup. That's pretty much all your webpages right there.

n.b. JSON doesn't really fit the markup argument. The whole idea is that HTML is super noisy and the noise is 1 byte in UTF-8, and 2 bytes in UTF-16. JSON isn't noisy so the overhead is very low.
The same safeguards that are in place on Azure (which is used by 99% of Fortune 500s for either Office 365 or cloud stuff), which is to say, ethics, and the fact that if they tried it once most of those companies would reduce their spend with Microsoft immediately. Not to mention the government contracts.
Strange is standard these days.
It's good to see how healthy people in Luxembourg became with all this pandemic!
$5 Raspberry Pi boards power ventilators in Covid-19 fight
Musk’s ventilator fiasco shows need for oversight of Gov. Newsom’s mask deal
Apple and Amazon produced detailed statements[1] explaining that they never found what the reporters say they found. And nobody has yet produced any concrete evidence of the spy chips existing; no example, no picture, no documents referring to them. It's impossible to definitively refute anonymous claims that some secret thing exists, but I think it's unreasonable to believe them.

[1] https://www.theverge.com/2018/10/4/17936968/apple-amazon-den...
Simstim is - at least in part - being worked on by a company called Openwater[0]. Mary Lou Jepsen did a talk at the Long Now Foundation a while back that speaks to the ambition of thought/memory recording via an MRI-like device and the "insertion"/playback of the same in other people [1].

[0]www.openwater.cc
[1]www.longnow.org/seminars/02018/oct/29/toward-practical-telepathy/
https://www.whistleblowers.gov/

> You have the right to report if your workplace is unsafe during the COVID-19 pandemic.

Amazon has to create the appearance that they aren't violating federal law
As experts, where do you see C going? In particular, given the many languages now out there built on decades of learnings from C, where will C have unique strengths? What projects starting today and hoping to run for 20 years should definitely pick C?
Do we think this is THAT much different from the Washington Post (owned by Jeff Bezos), Time Magazine and related (owned by Marc Benioff), etc? I mean, is there any major news outlet (short of possibly PBS) where we shouldn't assume some level of benign (or not so benign) influence from the money making side?
Since I can't edit, I'll reply to myself:

The other reviewers are on the deep learning fad train. The paper has been accepted, despite being a big pile of nonsense.
Again, the atrocities committed by the CCP are in a whole different league. For example I post on Twitter all the time criticizing President Trump and the U.S. government. If I were a Chinese citizen in China criticizing Xi Jinping, first of all Twitter is blocked (as is Google, Facebook, and basically half the internet), and I'd be kidnapped and never seen again.

Again the U.S. has a ton of problems. But equating them to the CCP is like equating Trump or Hillary Clinton to Hitler. I don't like Trump, but he is an angel compared to Hitler.
As additional info,

> Although the first edition of K&R described most of the rules that brought C's type structure to its present form, many programs written in the older, more relaxed style persisted, and so did compilers that tolerated it. To encourage people to pay more attention to the official language rules, to detect legal but suspicious constructions, and to help find interface mismatches undetectable with simple mechanisms for separate compilation, Steve Johnson adapted his pcc compiler to produce lint [Johnson 79b], which scanned a set of files and remarked on dubious constructions.

-- https://www.bell-labs.com/usr/dmr/www/chist.html
My counter-point was only that it isn't _obvious_, as you stated.
From the news articles I've seen I get the impression that aside from an early investment in Alibaba, SoftBank has a very poor track record. Is that actually true or typical for VCs, or is it just a bad impression from only knowing about them from headlines?
Usually understanding a new, large code base comes in at least three phases.

1. At first, they always look like overcomplicated incomprehensible crap. Every little thing that you would have done in way X but was done in way Y initially looks like that.

2. But much later on, after you struggled a lot with making changes to the code base, things start to click. You understand why things were made as they were, what the constraints and requirements were. When you want to make changes, you know where they are supposed to go.

3. Then after much more time, it will look like overcomplicated crap again as you understand that people should have said "no" to the more bizarre of the requests, and that much easier solutions for some of the other things exist.

The original programmers started out somewhere between two and three, and as long as they stay involved, they can always guide people, tell them where their changes go or whether they are ill advised. They know which parts are essential to the architecture and which were never meant as more than temporary crap.

You get problems when none of the original programmers are still involved, and you only get people who have to climb the ladder by themselves. Or only have some people in step 1 left. Then the project is dead.
yup I feel like even in the best case possible, what's the sort of civilisational progress you get out of the sharing economy? I guess okay you can remove some friction and maybe at the end of the day everything is more modular and you're 20% more efficient, but isn't something that has an alleged "300 year vision", supposed to invest into things that change the world fundamentally?

I think it's deeply depressing if one takes a look at the list of most valuable startups how much of them is just consumer goods or services.

I wish there was a bigger role for engineering and science labs like Bell Labs at their peak rather than the dominance that the commercial sector has.
> And your employer is typically very happy to pay money for productivity.

And that's money that's not going to better equipment. Or your salary. Or whatever else that it could be spent on that would have a far bigger effect.

> But paying for good tooling is normal not strange.

Paying for bad tooling is normal. Good tooling tends to come as a consequence of trying to solve something else.

Bad tooling also tends to be much more expensive to produce, because it's so prone to scope creep. Visual Studio had to build their own Docker wrapper, because telling people to just use it directly would give their users a glimpse of the outside world, and we can't have that!

> When you go to your local handyman he will tell you a lot about good and expensive tools.

The vital difference is that physical tools are expensive to duplicate and maintain. You can't distribute a hammer via BitTorrent.
Compared to WeWork, Uber, and Wag, buying ARM was not their worst idea.
these things are the gift that keeps on giving
SEEKING WORK | Croatia | Remote only

Technologies: iOS development in Swift and Objective-C; C++ (some Qt); Go; some Ruby, Python

LinkedIn: https://www.linkedin.com/in/druzman/

Email: drago_at_ruzman_dot_net

I'm a software developer with 10 years of experience on iOS platform with strong C++ background. Recently mostly worked on multimedia and VoIP/Chat apps. Experienced in working remotely with European and U.S.-based companies. Ideally looking for part-time work, but I'm open to full-time and long term opportunities.
There was one time I as really into a lifetime offer from Manning but decided to pass it.
This looks really great. It's interesting to see that 99% of the source code is Prolog. I'm curious to know what advantage--real or perceived--did Prolog provide over some other, more mainstream language?

Also, @ggleason, based upon your experience with other languages, would you still use Prolog if you had to do the whole thing over again?
What caused so many people to start using "master class" in this way?

Usage appears to be on the rise too: https://trends.google.com/trends/explore?date=all&geo=US&q=%...
There are many improved versions of string APIs out there, too many in fact to choose from, and most suffer from one flaw or another, depending on one's point of view. Most of my recent proposals to incorporate some that do solve some of the most glaring problems and that have been widely available for a decade or more and are even parts of other standards (POSIX) have been rejected by the committee. I think only memccpy and strdup and strdndup were added for C2X. (See http://www.open-std.org/jtc1/sc22/wg14/www/docs/n2349.htm for an overview.)
Doing business during corona-time
>There is no such thing as a "self-signed" CA cert, (its one or the other).

Not sure what you're trying to say here. What a cert is signed by and what a cert's usage is set to are orthogonal things. There are CA certs that are self-signed (look in your OS's trusted roots cert store) and there are CA certs that are signed by other CA certs (intermediate CA certs).
https://www.idris-lang.org/drafts/sms.pdf

Try this way of programming.
>> "So, millions of Californians heard the governor announce Musk’s heroic donation of “ventilators.” Yet not one unit has been delivered – and Musk likely never had the real ventilators our hospitals need."

Amazing.
This sounds kind of like splunk. Any similarity?
It seems rather authoritarian to totally shred the relationship over mild dissent. How weak and pathetic is the Amazon leadership that they cannot tolerate criticism?
Turtledove
Why so obviously a grifter?
NIH’s comprehensive, curated source for publications related to Covid-19
I disagree for the reasons listed by others about it being impossible to enforce in a just way, and too easy to be corruptible. I think it would be better to instead change the incentives.

The current incentive of a publisher like NYT or Fox News is to make money. How do you make money on the internet? By driving up page views to increase ad clickthrough. And how do you drive up page views? By spreading misinformation, or at the very least, inflammatory articles which get people excitable.

Simply by reading a news article, we think that its goal is to inform us even if we approach it with caution. Indeed, we could say that writing thoughtful, well-informed articles is exactly what you don’t want to do if you want to increase page views.

Could this change with different incentives? I think so! I think an only-paid news source would probably do a better job at informing, since misinformation would hopefully cause someone to cancel their subscription. I’d love to think of other incentives that are in line with the goal of informing the public rather than increasing pageviews.
A podcast is a prerecorded album. These are common in standup. I have comedy tapes and comedy CDs; a podcast is not different in any way. If you ripped a CD and concatenated all the tracks, you'd have a "podcast".
Most CPAP machines have built in humidifiers.
Exaclty this. On gitlab you can run your CI runners on anything you like. Basically start docker and forget. Curious how github actions compare.

Update: apperantly github also has self hosted runners

https://help.github.com/en/actions/hosting-your-own-runners/...
You would need to use some special utility created just for that purpose.
> I'm pretty objective since I've beaten every Zelda and I can't agree. Their games just aren't at the same level as anything modern.

A lot of "modern" games come with rough edges. I'm not saying that they're not good games, but you can tell it was a bunch of people working to crank out features, exercising every new capability their engine provides.

There's a level of polish that a lot of Nintendo games have. They don't necessarily try to push technical boundaries. They'll take a simple concept or gameplay paradigm and then attempt to be fully immersive within the scope of they've defined.

Modern AAA games feel like summer blockbusters. Marvel superhero films.

Nintendo games feel like Miyazaki. Breath of the Wild legitimately felt like playing through one of his films.
Provide a UBI so half the population isn't locked out of bidding entirely. The problem with capitalism is that 1% of the population ends up mega-wealthy, and 50% of the population ends up dirt poor, literally unable to afford food. When that happens, the 1% shouldn't get to decide who gets to eat and who gets to starve (by choosing which ones to employ). There should be some form of basic income to ensure everyone has access to some goods, and they can decide which ones to pay more for, and which ones to forego.

In the current situation, if a business owner decides to drop you on the ground, you're literally gonna starve to death in the next month.
Covid-19 Slams West’s Nuke Carriers While China Signals Taiwan, Japan
thanks for the fast and reassuring answer, I appreciate it. I'll wait until that message goes away, I can't risk losing my private repos.
For (3) mandatory warnings the closest thing is probably ISO/IEC TS 17961:2013. The purpose of ISO/IEC TS 17961 is to establish a baseline set of requirements for analyzers, including static analysis tools and C language compilers, to be applied by vendors that wish to diagnose insecure code beyond the requirements of the language standard. All rules are meant to be enforceable by static analysis. The criterion for selecting these rules is that analyzers that implement these rules must be able to effectively discover secure coding errors without generating excessive false positives.
Tools to get you started making video games
Seems like this is more of an argument against over-investing in UI.

Just seems like circular logic.
One of them has since been promoted.
Dell releases new tool to detect BIOS attacks
Yes, that's what I meant. I knew I was using the wrong word but couldn't remember the right one.
The Trouble with 2FA
Using VueJS Alongside Django
Standard corporate Newspeak. Make knowing exactly what you "can" say such a landmine ridden pursuit you stay silent, while avoiding contradiction of federal law.
Which international advice is much stronger than the NHS guidance?

e.g. CDC is the greater of 7 days since symptoms start or 72 hours after symptoms end: https://www.cdc.gov/coronavirus/2019-ncov/hcp/disposition-in...

My local (Canada) guidance is greater of 10 days or end of symptoms: https://www.alberta.ca/isolation.aspx
The riskiest components in SSO deployments are SP-side libraries, and those are all open source. If you want to use Okta to drive those libraries, the trial account you need is free.

The worst bugs here are indeed mostly private, but that's because they're feature bugs inside of people's random products; they're like every other bug in that regard. But people do find and report bugs in the SP libraries.

I agree that SAML is risky to implement; since we agree that Github SAML is an unalloyed good thing, we'd be searching for reasons to disagree at this point.
It's worth noting that previous major flu seasons were around January. So it's pointless to compare current death numbers with another March weeks. You need to compare it to previous flu seasons.
The CEO of the SoftBank did lose a ton of money back in the Dotcom bust. I guess he is a huge risk taker. From Wikipedia:

https://en.wikipedia.org/wiki/Masayoshi_Son

>According to Forbes magazine, Son's estimated net worth is US$23 billion, and he is the second richest man in Japan,[1] despite having the distinction of losing the most money in history (approximately $70bn during the dot com crash of 2000).[3]
> one would expect the systems and the math to become simpler the deeper and more fundamental the models became

The notion that there exists a single expression, CA rule, or other fundamental truth at the root of the physical universe is an arbitrary assumption. It may or may not be true. We should go where the evidence leads us.

In the end we should have a model that is no more and no less complex than what is needed to model observed reality.
I'm not an alt-righter but the news media seems almost as corrupt as our politicians.
The very few times I've ever put in a check like that, I always do something like i < MAX_INT - 5 just to be sure, because I'm never confident that I intuitively understand off-by-one errors.
> The only valid critique of our approach I've heard is that it's a logistical pain to try and spread $100 billion around $5 million at a time.

It's almost as if the fund was just a terrible idea to begin with. Masayoshi Son is famous for losing more money than anyone in modern history.

https://arstechnica.com/information-technology/2012/10/how-s...

He made lots of investments but made all his money on Alibaba. In my opinion, he's actually a below average investor, and that bar is pretty fucking low. And it really shows when you look at how horribly the Vision Fund is performing. He got lucky once and has cultivated a personality around it, and people were dumb enough to believe him. He's not the brilliant investor that Warren Buffet is, he's the talented con man that Adam Neumann is. Maybe that's why he was happy to give him so much money.