skysight-inc/HackerNews huggingface dataset:
It's why operating systems should implement a lockdown option to restrict users from performing arbitrary access to memory or kernel, even if the user is root. I mentioned before that, on one of my computer, I completely disabled dynamic kernel modules, hotpatching, /dev/mem, no ptrace() to arbitrary process, etc., making it difficult for root to do any low-level access to memory or kernel. I also enabled IOMMU, it isolates the address spaces of different hardware from each other, so no external hardware cannot have arbitrary RAM access via DMA, hardware-based memory capturer won't work. The only way to attack is either an 0day or a cold-boot attack, the 0day threat can be reduced by using a security-minded kernel, like PaX/grsec (not available to the public anymore), OpenBSD, or HardenedBSD. As for cold-boot attack, future hardware may support full memory encryption [0] at the hardware level and fix this vulnerability. Mouse jiggler is a problem, but USB firewalls already exist [1], if proper policies is enforced by the firewall, unauthorized hardware cannot register as an input device.

There may be still some exploits, especially when you consider that Linux kernel is not designed with security as its first priority, and over the last 20 years a lot of black magic has been developed to insert bad things into the kernel, but at least doing the countermeasures I mentioned will make it difficult. Hence, it's impossible to do any low-level changing or debugging on the system without rebooting it - which will immediately revert the system back to a "at rest" state, and triggers full-disk encryption. Other people may choose to do the opposite, it's a tradeoff between uptime and security.

Unfortunately, any attempt to introduce such a lockdown will be accused of being an evil technology that enables DRM. However, ultimately, the question is not whether a computer is locked down, but who is in control of the computer and it's locked down to protect whom.

[0] Don't confuse "memory scrambling" and "memory encryption". The vast majority of PCs today already use memory scrambling - the memory controller will "scramble" the data in RAM to a seemingly-random pattern using a Linear Feedback Shift Register, but it's done for electrical considerations - if there are too many 1s or 0s in a row, excessive current spike (di/dt) is produced, and it reduces signal integrity and creating excessive electromagnetic interference - LFSR-based scrambling is not for cryptography purposes and trivial to decode. On the other hand, memory encryption is a true solution that provides cryptographic protection to the RAM, and many hardware vendors have roadmap to implement it. Currently, it seems that there are two types, the first type is a "full memory encryption" - protecting RAM from physical access, the second type is "per-application memory encryption", which allows an application to request a segment of encrypted memory with an unique key - protect sensitive data of one application from accidental access by other programs. Both are helpful.

[1] https://lwn.net/Articles/738306/
I must be too stupid to understand why you think Windows is “fraudulently coded” or why communicating with a server is stupid…
I'm more inclined to use them these days not less. Bulma CSS framework is well structured and easily extensible. Tachyons is really good for prototyping. I am looking forward to try tailwind
> You do realize that OpenBSD is, by far, the most secure general purpose operating system specifically due to decades of thankless work by people like Theo de Raadt, right?

Yes, I think it is fair to say that I am very familiar with all of this information. I work in information security, and was quite into Linux kernel security for a while. I disagree with your assertion about it being the most secure general purpose OS but I'm not gonna go there :)

> I don’t think healthy skepticism of Rust is strong enough evidence to conclude that they don’t care about security.

Cool, that was not my conclusion either. I'm saying that Rust's value proposition in general includes memory safety and I think that it's not compelling for most developers, especially with regards to rewrites of low-value attack surface.
Why is rust easier than C? Is it because it makes what is simple in C hard?
Not quite arbitrary.

He new that he could avoid it by not changing the signature afterwards.
The main difference for me is that there are more ways to rescue, recover, fix, and work-around issues. I’m typing this on macOS now. I run into about the same amount of issues on macOS as I do on Linux. The big difference is that I’m just f*ed on macOS whereas Linux leaves me with multiple paths to save myself out of troublesome situations.
Spains position relative to Morocco hasn’t moved too much.
I don't know what project this is but a blanket "add a test which fails without your patch for EVERY PATCH no exception" rule is a bit cargo-culty.

Especially since the kind of test you're asking for, when written by a developer who is less than passionate about writing such a test but rather more passionate about just solving the problem his patch addresses, is probably not going to be worth much compared to a properly thought out set of tests which target the class of problems which the patch solves. Or possibly even an adjustment to existing tests on the basis of what the patch solves.

Finally, surely you get plenty of patches which do small useful things like cleanup but which it would likely be impossible to write a test for.
https://github.com/async-labs/saas/blob/master/README.md

From: https://www.indiehackers.com/post/17-saas-starter-kits-boile...

Probably more than that one.
Indeed, but lets be honest about the optimizing capabilities and supported hardware architectures of Cranelift.
Address space ≠ required RAM.
The biological warfare capabilities of the USSR that were revealed when the iron curtain fell were a complete surprise to the Western world.

The game of power is completely different because communism practiced today has nothing in common with the communism of the USSR. Thus we cannot assume we are going to be lucky again our adversaries paradigm breaks and momentum is lost before they deplete their military capabilities.

Suggesting and half confirming an unknown unknown to an adversary is very efficient to expand this relative peaceful periode we live in. Every additional amount of resource adversaries waist on unachievable capabilities is an additional resource not invested capabilities that can be useful to tip the power balance.

Nobody wants a military arm race between global powers but I think it is naive to assume what we wish for is a reasonable reflection of how our reality is actually constructed.
Apple TV+ as well. I once got a notification that my complimentary free subscription offer included with the device purchase was expiring.

This happened out of nowhere on an iPhone I use for development, where I've never even launched the app in question.
Comparing WebFlux and Spring MVC with JMeter, Kotlin and Spock
You can check that the source hasn’t been tampered with before starting the build, and know you’re building the right code base.

Builds that curl junk and use a dozen language specific package managers don’t have that property.
I'd be curious what topics people would find most interesting. The whole COVID lockdown has left me with an abundance of "free" time, and I work professionally in this space (on virtualization for Google Compute Engine). I've been feeling the need to write lately[0]. I know better than to try to tackle a whole textbook, but I'm hoping I could manage a series of blog posts.

[0]: My work has put me in a lot of meetings for quite some time. I've felt a decline in my written communication skills: it takes me a lot longer to write things than it used to, and I'm less happy with the results. Nothing to be done for it but to write!
Switch to Linux. No telemetry, no forced updates, no ads.
The rate fluctuates up and down with the prime rate (usually prime + 1%).

The risks for the bank are the same risk with any type of loan. The difference here is that it’s secured against the home. I believe the max limit on it is 80% of the equity that you have in the home. Applying for an increase is the same as applying for an entirely new loan.

Just think about how many things can happen over a 15-30 year mortgage.
Because of some reasons I use evolution and thunderbird.
The search function in Evolution is abysmal.

May try out InScribe
> Take your crack pot anti-science rants elsewhere.

sigh. Which part is crackpot? Which part is anti-science? Can you please explain why you think that? I hope to convince you that I am not anti-science in the least. Rather, I think we are looking at this situation wrong.
Why is number of packages and not package size the relevant metric here? Especially when all the packages live in the same repository, there's practically no more overhead to review each package qua package, versus just a bunch of directories in a package monolith.

This "144 times longer" number seems pulled completely out of thin air.
Show HN: Cver- A simple tool to quickly identify groups of tabs when minimized
VR is only usable if the game and the entire supporting stack works perfectly (graphics drivers, USB 3 controller, power management etc). There are tight framerate/latency requirements and everything goes through intricate off-screen rendering as VR headsets don't pretend to be an additional monitor anymore.

This leads to two classes of major problems: total failure (crashing outright) and stuttering (low framerate, high latency, or occasional "hiccups"). These are equally unacceptable (stuttering ruins VR and can make you feel ill).

It is difficult enough to avoid these issues on Windows where the OS vendor, the graphics card vendor, the motherboard vendor, the game developer, and the VR rendering API developer are focusing their attention and releasing frequent patches to fix VR issues. There seems to be a general opinion that an Nvidia GPU on Windows 10 is the standard VR development target. If VR doesn't work perfectly for you on Linux, it's going to be a pain to sort it out, assuming that's even possible without hoping a third party releases an updated binary blob in the future.

Valve does pay attention to Linux and provide SteamVR support, but they haven't officially released Half-Life: Alyx for Linux yet. They will probably release more information about compatibility when they do.
If you diff föö and f though, it correctly gives an edit distance of 2.

The code is weird because someone knew enough to convert the strings to slices of runes but not enough to use the rune slices consistently. :-/
fwiw you're absolutely right. I didn't read the OP, but this is totally directionally accurate as far as I've experienced.
How to Stress Test Your SaaS Idea (With 3 Questions)
> PC Gamers

Baring games with anticheat you can play pretty much any game release within the last 20+ years with Wine + Proton + DXVK/D9VK. Usually with minimal fussing. You can check out ProtonDB[1] to see if you favorite game works.

1. https://www.protondb.com/
Video games have won! It's time to emerge from the defensive bunker that they must be "productive" by improving your creativity or problem solving or reflexes or whatever. They're a form of entertainment on par or even beyond movies, shows, etc. Time spent enjoying video games is no more wasted than when enjoying those other forms of media, although it is true some video games demand much greater time investment (the entirety of Game of Thrones is only 63.5 hours in length, for example, which is easily surpassed in length by many popular single-player games).

I do think things like LoL are a huge drain on some people's lives, though, honestly.
https://www.freeoffice.com/en/

Pretty convenient, has a ribbon interface same as MS Office. Honestly I can't even tell the difference.

Except for one thing: It doesn't take as long to start, and doesn't require a supercomputer to run with a decent performance.

Lotus 1-2-3 or Quattro Pro on a 286 feels faster than Excel.
I thought it was the most secure general purpose operating system because it's so rarely used - especially for use cases like running untrusted code in unprivileged accounts - that it's a low-value target. Sure, OpenBSD doesn't have exploitable security holes when used as e.g. a packet router, but when was the last time Linux did?

OpenBSD's website says things like "Only two remote holes in the default install, in a heck of a long time!", but remote holes in the default install is such a small surface on any OS (besides e.g. Windows XP). When was the last time you saw a remote hole in the default install of, say, Ubuntu desktop? macOS? The Amazon Linux AMI?

The interesting vulnerabilities are in server software that isn't running by default, local privilege escalation, etc.

Also, weren't there like four security bugs in December, at least one of which was remotely exploitable?
What about when it jumps from a lab to humans?
> video games are better than they've ever been.

They've never been more accessible and cheaper, either. Anyone else remember seeing SNES cartridge costs at launch?
This was fascinating all around - both for the means by which he optimized OKCupid for himself, and for the the insights about women that it yielded. He was able to type women in to 7 clusters, but that 7th cluster ('diverse') could have been optimized into further groups, it seems.
But... it's almost exactly where it is on a modern map! It's just above Africa.
I had a similar one I'd type in hex at $300, something like:
CALL -151
300:B5 00 20 ED FD E8 AD 30 C0 4C 00 03
300G
(that's a recreation I just worked out, but I think what I used to use was a little different - I forget what technique I used to use to get a semi-random character in the accumulator for it to print)

This filled the screen with scrolling garbage while buzzing the speaker.
> they generally don't evolve to become more deadly

That's a very important point and one that makes me agree with you in that it'll probably won't happen. This is because in most cases a virus reduces its R0 when its deadliness increases.

What I'm trying to point out is that "unlikely" is not impossible and since the stakes are high we should at least think seriously how likely the other possibility is.

For example we could think that for a virus like SARS-CoV-2 with asymptomatic contagion it's possible to think that a more deadly strain could maintain an R0 above 1 (because people pass it before becoming very ill). I talked more about this in https://news.ycombinator.com/item?id=23025899 to which I received a very thoughtful answer.

Again that does not mean that it will happen just that it could, and I believe we should encourage an informed discussion about this possibility
yes it is sub-optimal, but that is not because building it takes so much time, it is because of the node_modules. I am looking into migrating to Hugo as has been suggested by MANY people
Agreed, it’s telling that all the discussions about switching to Linux get right to “... and all you need to do it compile your own trackpad, WiFi, and display drivers. Sleep doesn’t quite work and scaling on HiDPI is still broken, but at least you’re not using Windows...”

Linux guys, I love you, I really do, but please spare a thought for those of us whose jobs and personal commitments don’t permit us to tweak our set-ups ad infinitum before you recommend the switch. Computers are fun, but we also need to get work done.
In my opinion: use black instead of #333 for the font text, and do not reduce font weight. There is virtually no excuse to harm legibility like that. Basically keep in mind you are optimising for your users' experience, not for your website looking good on screenshots.
I'd be very interested in reading more about the differentiating features of GNU APL. There is a great big announcement at the beginning of the GNU APL docs that talks of a decision needing to be made around a gap in the ISO specification. Is that the primary source of controversy or is there more discussion I could read somewhere else?

I've been looking for a good "diff" of the language differences between Dyalog APL and GNU APL, as much as to understand the extent of the progress since 'APL2' (or whatever the ISO standard name is considered equivalent to it) as any for any specific list of what GNU APL can't do relative to it's modern commercial compatriots.

(EDIT: Fixed final sentence to be a complete thought/sentence).
This reminds me of my previous job, where we built a "modular synthesiser" [1] with compile-time patch generation.

Each module's connections and parameters was described in an external file, parsed and interpreted at compile time to generate an optimised audio graph containing only the necessary elements, from the available template modules in our signal processing library. The rare compilation errors were wild, and so was debugging it (logging through the visitor pattern).

[1] The end product was actually a microphone emulation algorithm, but some of its architecture looked a lot like a modular synth.
https://slatedigital.com/virtual-microphone-system/
Businesses and governments get their licenses audited though. That's where the bulk of the money is.
> The way I understand it is that once a virus has jumped from animals to humans its virulence and danger will decrease continuously.

This is no truer than the quote about "each deadliner than the other". In fact many virii mutate continuously, c.f. the flu shot you need to get every year because there are always new strains.

It seems currently that SARS-CoV-2 is not doing this. But the science is still new and we just don't know.
One technique that keeps me motivated is thinking from the point of view of the future. I ask myself how much further along will I be if I start now?
Megathread – Australian Government Contact Tracing Findings: COVIDSafe
What's the reason that the Earth had that form? And why not any more?

Did it speed faster around the Sun when it was a liquid lava blob so it got a pointy end that later had too much elevation to be covered in water?
To be fair they are demonstrating pretty well that premium users don't see ads.
That particular way of gaming it won't work. The sensor inside the pill is a tiny logic circuit that transmits a signal throughout the patient's body. The current comes from basically building a battery out of the patient's stomach with the polar molecules in hydrochloric acid. The current contains some data and the worn patch detects the tiny sine wave.

It would be difficult to game this but it is still possible. The app itself could be broken for example.

I think the FDA approval for this device assumes the patient actually takes the medicine so no guarantees are made if the patient doesn't.

To tie this to my point, adding in electronic reporting and measuring opens up a number of possible ways of getting false data during a trial so I think it would be difficult to manage that. For example, in oncology trials, monitoring for adverse events and cancer progression might involve blood draws for analysis and maybe a monthly progression scan. These types of things are much easier controlled at a central location. Although not all trials are the same and electronic monitoring and reporting seems to have a lot of potential for drug usage and trials.
> So no, “security” isn’t the most compelling use case (for me, anyway), it’s moving past these dumpster fire build systems as quickly as possible so mere mortals can build their own software.

I will be mean, I am sorry but this kind of attitude piss me off.

If you are not able to run a ./configure / make / make install & 3 apt-get properly. Then you should just stay far from keyboard and not try to build anything. Whatever the language and the build system.

These "dumpfires" have been able for 20 years to build program scaling from 10 lines to 100M lines... On platforms that are maybe older than you (AIX, HP-UX...) and ranging from micro-controlers of few KB of RAM to the biggest supercomputers in the world... They work for for kernel mode and user mode... and are also able to build an entire OS distribution like OpenBSD.

They are indeed not perfect.... but they deserve at least a little bit of respect, even from the script kiddies not able to understand them.

And honestly, an other point where Theo is right: I bet that none of their (your) '3.0 Modern successor' will be able to replace them in the next 15 years.
Case in point, had I not had the fortune of having access to Native Oberon during the university, I would also be an anti-GC voice.

Instead I learned what Oberon allowed me to do, got to dive into the history of programming language research at Xerox PARC, and became a firm believer in GC enabled systems programming languages.

Programming languages landscape lacks dreamers like Alan Kay or Jobs, apparently many only believe in stuff that is demoed in front of them and even if proven wrong, they only care if they can take immediate profit from it and not 5 years down the road.
Sure but the list of all countries is quite a bit longer; the list in the FAQ is a much narrower category than that.

If they were able to figure out legal issues in the other hundred plus countries, I was wondering what's so particularly challenging about these, that's all.
And:

> Where are the pervasively used compression libraries in Rust? Video and audio codecs? Network stacks? Database engines? System management utilities? PKI and encryption stacks? All that stuff is still in C.

How many of those projects in any language are less than five years old? The ubiquitously used stuff is mostly much older. But among the projects which are that young, Rust has substantial representation.
so as a consumer where can I get a copy of the version of Windows without the ads?
And yet it still bit him twice a month? After the second time that happened, I would have deleted that program and smashed the hard drive to keep it from returning.
I moved to another country, but Google is still here...
Are they not preventing the right of individuals to organize?
i applaud your effort to break out of your bubble, and to that end, make these observations:

"regardless of their culture" -> that's othering. you could substitute "regarless of our cultural differences" and be less confrontational in that regard.

"Some folks are stunned when I 'see' them. People from different cultures are accustomed to being invisible." -> why you, and again, why is it your culture vs. theirs? why would they be invisible and not you? culture is shared, and the effects of your (new) actions is to create that shared culture. perceiving 'other' cultures this way is antagonistic. other people feel that, even if they are otherwise polite and welcoming.
This is my anecdote, but when using crummy old printers and scanners I've had a lot more luck with Ubuntu just working out of the box with them (with maybe a selection dialog), but I had to hunt down and download the driver software on the Internet on Windows 7. With Windows 10 I've had a better experience where it has generally found drivers through Windows Update. So drivers are mixed bag on any OS, I think.
You mention that snaps are really well suited for installing and updating large surface applications like web browsers. Then you say that by removing snapd you will opt out of critical components. If Canonical is using snaps for large third party applications so their maintainers can push updates without user intervention, why would it EVER use snaps for critical components? Like, wtf is that? If something is critical to my system, I need to decide when it is modified. The maintainers can't possibly know when that's okay. Using snaps for anything important is a serious regression.