skysight-inc/HackerNews huggingface dataset:
Steve Naroff spoke about the motivation for clang at the (first, I think) LLVM meet-up, which I also attended: http://llvm.org/devmtg/2007-05/

Slides:

http://llvm.org/devmtg/2007-05/09-Naroff-CFE.pdf

Video:

https://www.youtube.com/watch?v=Xx7zFn31PLQ&feature=youtu.be

So there was a real technical need. IIRC, there was also a personal need, as Steve wanted to do something else, and I am sure not being dependent on gcc was also a big deal.

From long experience, Apple doesn't like to be dependent on others for crucial bits of their tech stack. Relations with the gcc team weren't the best, even without the GPL issues, although the new GPL v3 was also seen as a problem. I think Apple switched before having to adopt v3.
Does this support events on the sheets I upload?
I want to add another option:

4) Have a wide range of items on your resume.

I have found that having experience as an engineer in Fortune 500 companies, startups, working at the only dev, level 3 support, building dev ops, joining a big team, owning back end services, reworking a database, etc. has given me credibility for most positions. Everyone knows you won’t immediately fit in perfectly to any role, but if you have demonstrated an aptitude to learn and adapt, you’re likely good enough for their role.
I'll answer from the other side of the fence. I'm a semi-indi-developer. I mostly make software tools, almost all of which is distributed as source code. (it's not open source, but licensees get it as source code)

I get bug reports all the time. Some come with suggested fixes. Some discuss vulnerabilities. All are accepted with appreciation. All people I correspond with use their real names.

I don't have a bug bounty program, but folk who are helpful get discounts, and in some cases free licenses to other bits.

Of course YMMV. But if it was me I'd just email them the info.
Physical access is just such a rich attack surface that keeping your computer away from malicious actors is the right and proper solution.

An extreme example a pentester imparted to me once was, if someone could spend sufficient time alone with my laptop, they could remove my hard drive and insert it into an identical laptop with a hardware or firmware backdoor preinstalled. We were discussing nation-state adversaries, but the general principle applies.

Another example is attacks on encrypted drives (so-called "evil maid" attacks). If a computer is booted and the drive is decrypted, an attacker with physical access could open the computer, remove the RAM, and download it's contents, thereby stealing the encryption key. If the computer is powered down, it's still vulnerable to other attacks; enrypted drives necessarily have cleartext code for accepting the password & decrypting the drive. You could modify this code to log the decryption key, or broadcast it over your device's radios.

There's also the classic Windows "sticky key" exploit, where you replace the sticky key binary with a program that gives you administrator access, reboot the computer, and then activate sticky keys.

You could install a keystroke logger. You could install a device to record monitor output. You could log network traffic.

I've yet to find a kiosk environment that I couldn't break out of. Once I was able to break out of a scanning kiosk environment, and into a Windows desktop, by turning the quality settings all the way up and crashing the kiosk. That was one of the more difficult examples; most of the time all you need is to find a way to right-click. (I had the proper authority to investigate these kiosks.)

The point is that the list goes on.

It is true, as you say, that there has been progress in implementing mitigations, and that there are people who care deeply about these issues. A counterexample might be SIM cards, TPMs, and other HSMs. These systems are able to provide better guarantees by encapsulating their peripherals and being willing to self destruct. But that could describe a cell phone, tablet a laptop, too.

Maybe in the future this "law" won't be so hard and fast.
https://dbl.oisd.nl has about a million. Using it with minimal whitelisting for about a year, works fine
Real-Time Spatial 3D Audio Synthesis on FPGAs for Blind Sailing
I do exactly that, though I run my VPN in the cloud (a scaleway instance which is only 3 euro per month). Using algo for the vpn: https://github.com/trailofbits/algo . I can highly recommend it! Though I had some issues with play store updates being blocked but that's resolved now. Unfortunately google play services are essentially one big spyware collection so it makes sense for it to block them.

I also had to manually provision my Android phone on IKEv2 (ipsec), Algo used to provide a strongswan config but unfortunately they dropped this in favour of wireguard. But you can still set it up manually (and on Samsung devices you don't even need strongswan). Wireguard is faster, yes, but my work blocks pretty much every port they don't know, except IKEv2/ipsec because many contractors use it to connect to their work :)
Delphi definitely handles resizable layouts and data loading nicely: I’ve played around with again via Lazarus, and the experience is much nicer than any alternative I’ve seen, even for complicated layouts.
Famous open source project > 10000+ likes.
This is awesome! I've had thoughts along these lines, I like your annotation idea. Excited to see how this project grows.
The rate at which new experimental input to fundamental physics is generated has slowed almost to a halt. How much you can trust theory in the absence of experimental confirmation is debated.
Guidelines for AI Procurement: a whitepaper from WEF [pdf]
Your descriptions of the human immune system and of viral evolution are both wildly inaccurate. I don’t intend to be snarky, but nearly every sentence is factually incorrect.
Author misses one important point with Redis: you don't pay for traffic. If you host it yourself, you pay for traffic both way if traffic crosses AZs. Dynamic scaling, no downtime upgrades,æ. It works really well.

I do hope they will get tiered RIs for ElasticCache like they have for RDS.
I've long since taken to carrying a USB battery that can charge and provide power at the same time. It's more reliable for me than USB condoms, and, well, it's a battery, which is useful too.
Ok. This is what the cool folks of Twitter use I guess. Thank you for sharing.
As someone who spent years homeless, this is sort of a hoot:

According to the second airport official, Ziebat has mostly spent the last 54 days reading magazines and newspapers, talking to his friends and family over the phone, eating at some of the fast food outlets still in operation within the terminal, interacting with housekeeping and security staff, taking walks within the transit area, and using the airport’s washrooms and toilets. Authorities also provided him with a recliner, mosquito net, toothpaste, food and other basic essentials.

“He told officials that he can manage his expenses. He sleeps on the beds, benches, on the floors, wherever he feels like. He is alone in the transit area as it is not being used because the airport is closed for passengers,” said the second officer.

Gosh, I wish my life had been that good when everything went completely to hell. Sounds fairly cushy to me.
Why have 14,000 people volunteered to be infected with coronavirus?
Why not both? Pepper the code with easy to find (and use) vulnerabilities and also a few harder to find. It's win win for those who are trying to inject the exploits, as if the obvious stuff can be chalked down to incompetence, then the subtle ones can surely be - so in a way its a smart method of shielding the nefarious act.
At any of the big corporate jobs I've held, it's been pretty easy to get life insurance for 8x my yearly salary

I think my wife could take 8 years of Silicon Valley salary and retire off it in a lower cost of living area, although you're right that it wouldn't be a luxurious monetary worry-free existence..
No, scrolling under DOS was really fast. And Windows 98 run much faster than X on a machine with similar specs.
And for those who think there's some malicious (as opposed to friendly) competition between the two projects: Steve Naroff was also instrumental (both technically and managerially) to get Steve Jobs to pay us to get Objective C++ working in gcc back in the NeXT days.
things that never happened
Responding to "our infrastructure is unmaintained" with "Bernie supporters won't be in the jobs actually doing the building because I found this cool infographic showing that bartenders lean Democratic and beer wholesalers lean Republican" is beyond mere non-sequitur into genuine weirdness.

It's not like our infrastructure problems are new, or weren't remarked on before 2016. They've been building for decades. They were there in the Obama administration, and the Bush administration, and the Clinton administration, and the other Bush administration, and the Reagan administration. Do you think the problem through all those years was our critical shortage of leftist construction workers?
> Be prepared for either outcome I guess.

Yes, exactly.

Happiness now (because now is guaranteed) and (hopefully) happiness later too.

But whatever you do, don't put off happiness now.
Man. I would have guessed that adding disulfide bridges would decrease catalytic conversiom rates by making the protein too rigid.
What's the standard driver interface for accessing accelerometers on Linux then?
What a fun project this would be to work on.
I think Thunderbolt already does something like this? At least on Windows, I'm prompted to trust or not trust a new Thunderbolt device before it can do anything except draw power. (I didn't know that was a feature and kept wondering why my external GPU wasn't showing up...)
"Why stop at two" is an excellent question, but the first cleave is the heaviest lift.

I think the first seam should be network requests. Unwind AJAX: produce the "content web" and the "interactive web." The content web should be HTML with JavaScript that can respond to events, but cannot fetch new code. This sterilizes the malware aspect of the web: JS can no longer track you (it can in crafty ways but ad blockers are a match for these).

The second seam should be aimed at the other direction: empowering the web. Factor out the "app web." This provides a native-level API which can dispense with the anti-fingerprinting, second-guessing nonsense. But the app web has higher barriers: revocable certs, user reviews, potentially frictive installs.
The OSM community generally holds that access-tagging of a feature should be based on ground-truth; for parking spaces this means defaulting to what is the local law, and specifying exceptions if signs indicate that it is private parking.
Is it possible to run locally?
> do companies still want to see engineers spending their spare time doing unpaid coding?

This is a festering rot in the core of the dev hiring process. Too many applications have a required field for your side projects before you've even gotten past the first page. The fact that this is being pushed by someone and enabled by some portion of devs is dangerous.
Are skills like deploying, designing on prem servers redundant in the cloud
Once you get behind the eight ball for some reason, it can be impossible to get out. I don't know how to get out from behind the eight ball in my own life and I think I'm well educated, talented, virtuous and blah blah blah. It's never enough and I'm not some kind of criminal or something.

You don't know the story. Maybe it was self defense. We don't have all the details.

It would be nice if, during a global pandemic, we could not sit around being all judgy going "People fucked over as a consequence of this here global pandemic were just being idiots!"
Nice. In my case, my direct mail load was very low—typically around 3 to 5 emails per day—and anything I was specifically CCed on was just as important for me to read as anything sent to me personally.

Whereas stuff sent to group lists (and other automated mail) was on the order of 10–30 emails per day. Enough to make any "new mail" notifications utterly worthless.
That idea is nothing new, it has been used in IBM's RISC project, Amsterdam Compiler Kit, Microsoft's Phoenix compiler toolkit, IBM i, IBM z/OS, Unisys ClearPath and plenty others.

And getting back to GCC, I had to study GIMPLE during my compiler assignments.

What LLVM has going for it versus GCC, is the license, specially beloved by embedded vendors and companies like Sony, Nintendo, SN Systems, CodePlay can save some bucks in compiler development.
While RMS is opposed to such a thing there is no architectural reason for it not to happen, just little to no support for anything not GPLed. ESR has no idea what he is talking about. It is true that GCC's architecture dates to the 80s and so isn't modular in the same way LLVM is, but that is hardly due to some sort of policy-embodied-in-code.

As well, RMS no longer controls gcc, and has not since the late 90s when I engineered a fork of gcc from the FSF and into the hands of an independent steering committee. At the time such an idea was radical...thankfully it is now commonplace.
It seems a clever Dane could get pregnant and take a year off, then get pregnant again during that paid year off, in such a way as to avoid returning to work in-between.
I just realised that if your router runs OpenWrt, you can install PiHole (an equivalent of, rather) directly onto your router by installing the following packages [1]

dnsmasq
adblock
luci-app-adblock

You may also need

libustream-mbedtls

Just tried it, works great. With a few small lists, the amount of blocked DNS requests is floating at around 30%.

[1]: https://openwrt.org/docs/guide-user/services/ad-blocking
I doubt this and the amount of effort this would take would be an huge waste.
It sounds a lot like Windows RT.

Marketing it would be an incredibly tiny needle to thread-- promoting the OS can run Microsoft Office while immediately changing the message when they ask about every old no-source-available compiled-for-Windows-98 app.

It feels like the people who can switch easily probably jumped to Chromebooks already.
Yeah thats a good point - I personally have the bad habit of clicking "yes" to that dialogue whenever I see it, since it does sometimes spuriously appear. I certainly wouldn't attempt a teardown of all of the equipment currently plugged into my machine when I saw a message like that. Do you know if HIDs can impersonate other HIDs? E.g., if you attached a dongle to a usb keyboard, could that dongle claim the identity of the keyboard and thereby avoid the prompt?

My favorite "security interface failure" is the fact that OSX apps frequently demand a user login and password in a popup window. E.g., Slack does this. It would be so easy for an app render this popup (even on a webpage!) and I would totally type my password into it. I feel like the only answer to this is to have a sacred corner of the screen that only the OS is allowed to write to
Apparently, in high level play, the countries are all viewed as essentially equal despite them being asymmetric.

For example, in the novice games I've played, Austria is always the first to bite it due to the fact that they have the most borders to defend. However, if they play their cards right and can eliminate a neighbor, they end up in a pretty powerful position on the board.
> Now it does seem that if you were to pick a country that would have the largest % of people happy, and that was your ideal, you'd be a Dane. But if you believe in individual liberty, high achievement, competition, and diversity, then there is no comparison. USA or some other countries.

On diversity you are correct. But which individual liberties are Danes lacking? Guns?

Tax rate is certainly high, but it is very much a free-market economy and very business friendly. How do you define high achievement? Living a comfortable and secure life? Getting a college degree? Becoming a billionaire?
I think you hit the nail on the head. The various random things that can be thrown at you is incredible.

Add that to different personality requirements. Most want extroverts during the interview process but introverted after hired.
React, Redux, Webpack, 90% line coverage testing requirements...

I understand intellectually, sort of, kind of, often not really..., why those things came to be... but for fuck's sake, they have really sucked the joy out of my web development.

It feels so much more free and fun to just sit down and hack some vanilla HTML/CSS/JS.

The modern web development stack has attained "bondage and discipline" levels rivaling those old Java enterprise edition stereotypes.
Currently the site I'm building is a pretty static site of about 30-50 pages that is just brochureware for a non-profit scientific organization, on one hand I feel sort of embarrassed because it feels like I'm back in 2004 and I have a hard time justifying my salary for something like this, on the other hand I'm really super embarrassed at making the wrong solution because a React SPA with a service worker has been ordained as the way to make this thing.
I run my pihole within LXD on my home server, found it much easier than to maintain another device. Also much more responsive.
Try http://aerowinx.de.
Tamoco monitor and sell people's detailed movement data in secret (in Norwegian)
Indeed. I've played both online and in person, and I don't think I'll ever play it in person again even if it would be with my friends.

I could envision playing in tournaments or other set ups that could be fun (maybe you do a game where each nation is led by a team so when you get out you at least have a few friends to hang out with), but those are different from casual games with friends.
The survivalist bunker idea is so stupid for the kind of people I see investing in them. These are Silicon Valley guys with $10+m in the bank but have never even been in a fistfight. If the shit truly hits the fan they are going to be very quickly relieved of their nice bunkers by a few Bud Light drinking boys 2 years removed from their Army deployment.
Being a developer ;) I built an application for exactly that purpose: https://contextualise.dev/. Saying that, check out apps like Roam Research and TiddlyWiki. For more examples of apps to manage your knowledge check out this resource: https://github.com/brettkromkamp/knowledge-graph-radar
This commenter sounds like one of the people who have a chip in their shoulder about refugees, immigration in general and Muslim minorities..
It looks like you are just cherrypicking examples and wildly speculating. Brazil is early into this and seeing a high rate of transmission (R0 2.8). We really don't know enough in this country's case what the end result will be in terms of mortality.
> I tried playing PBM, and IMO it misses the entire personal charismatic essence of diplomacy.

It depends on the people you get. I've had great random games where everyone ended up role playing as the period appropriate leader of their country. I've also had games where nobody talked to each other leaving me wondering why we were playing.
Low code and no-code markets are growing rapidly, so don't be sure the markets have decided.
Well since most new apps are web services and kubernetes is the standard then shouldn’t we be treating it as the new OS later?
No. At even 1% of Earth's mass, a black hole's already down to 2 Kelvin of output, across a surface as big as a grain of very fine sand. It would take more than 10^44 years to evaporate on its own, but since the cosmic microwave background is 2.7K it would actually grow over time.

For some other data points, a thousand ton black hole would explode in 84 seconds. A million ton black hole would last 2600 years as an unimaginably hot point five hundred times smaller than a proton. A billion ton black hole would last 2.6 trillion years as an unimaginably hot point twice as big as a proton.
oh wow that's one blast from the past !

I remember that project from very long ago (I never used it for various reasons)

hmm

As far as click goes ->

myButton.setOnClickListener { doSomething() }

kotlin makes this pretty minimal, I don't really see much we can remove there
Everyone Should Hire Car Services in Greenwich – Best for the Journey
In the holidays, you can go on the trip by hiring the best services. Automobiles Company has invented too many vehicles that come in various structures, shapes, colours, models, and versions. So, you can choose the vehicle that will fulfil your desires or wishes. So, high-quality and top-notch transportation you need to hire is the Car Service in Greenwich.
> Maybe Gmail is the best example of using the SPA experience to drive a rich UX.

Gmail is is the perfect example of an app that loses more functionality than it gains by being an SPA. Middle click to open an email in a new window doesn't work, if it was a normal web page that would have come for free. This is more important functionality to me than saving a page refresh. Same goes for JIRA, middle click at least works but the the 30+ seconds to reload the SPA in it's own tab makes it unusable.

These are both document driven apps and the document viewer I'm using them in have some great features that they cripple.
At the same time, I had typeahead find and completion for method and variable names back in the 90s with vi/emacs and exuberant ctags. It didn't need that much cpu or ram mojo. We tend to use whatever is available.
Oh great point. Thanks for the explanation.
It's only an extra round trip in the case of an unexpected EOF. File size is returned from SMB2_CREATE and so given the default of a RHW lease then (a) the lease can't be violated - if it is, then all bets are off as the server let someone modify your leased file outside the terms of the lease. Or (b) you know the file size, so a short read if you overlap the actual EOF is expected and you can plan for it.

A short read in the middle of what you expect to be a continuous stream of bytes should be treated as some sort of server IO exception (which it is) and so an extra round trip to fetch the missing bytes returning 0, meaning EOF and something truncated or an error such as EIO meaning you got a hardware error isn't so onerous.

After all this is a very exceptional case. Both Steve's Linux cifsfs client and libsmbclient have been coded up around these semantics (re-fetching missing bytes to detect unexpected EOF or server error) and I'd argue this is correct client behaviour.

As I said, given the number of clients out there that have this bug we're going to have to fix it server-side anyway, but I'm surprised that this expected behavior wasn't specified and tested as part of a regression suite. It certainly is getting added to smbtorture.
If you think you can count on YOY 12-15% returns on the stock market, you should be buying 10% OTM LEAPs instead of shares. You'll be the world's first trillionaire in a decade or so
Setting aside the AI angle, perhaps just recording the assumptions in a way that can be measured would be enough.

Tooling, runtime sampling, or just code review could reveal when the assumptions go awry.
So what is your opinion of this article? https://thenewstack.io/kubecon-2018-kubernetes-is-the-new-os...
DataGene – Data Transformations and Similarity Statistics