skysight-inc/HackerNews huggingface dataset:
> If you don't have a strong revocation system, then your host is vulnerable whether or not you have expiration, since attackers aren't going to wait until the day before your key expires to try to steal it.

We don't have a strong revocation system. Maybe one day OSCP stapling will be mandatory, although OSCP signatures are reusable within an expiration window, so we still have the question of expiration.

> In general, when a CA's root certificate expires, it creates a new one and gives it to browser and OS vendors. What's the difference between the CA continuing to guard their old private key, and starting to guard the new private key?

Their new key is fresh --- the public key hasn't been floating around being factored for the last 20 years. Maybe it's longer too. It certainly wouldn't be on disk of hardware they discarded before the new key was generated. Of course, they should have taken proper precautions with their discarded hardware, but maybe someone slipped up.

Frequent expiration is a way of limiting the damage of key theft, not a way to prevent it. In some (many?) cases, key theft is not detected, so limiting the amount of time it could be used is helpful.

OTOH, what do you do for devices which are shipped with a CA bundle, and never updated. They may be a problem for other reasons, but at some point, they don't have any valid roots and they turn into a pumpkin. (Fun times if the manufacturer realizes and tries to update, but doesn't get the update distributed before the certs expire; there was an Amazon Kindle update like that once).
I definitely experienced age discrimination in one company that will go nameless. The small company I'm working for now has been great - I love the culture. However, they were just bought by Thomson Reuters and this Monday I will officially be a TR employee. I understand their culture is similar, and I'm hoping it's true!
He's not. He(John Plant, which is a great nominative deterministic name for a primitivist) is 36 now, and was 31 when he started the channel.

source(just listing his age as "mid-30s" in 2017 but close enough): https://www.cnbc.com/2017/09/15/youtube-primitive-technology...
Dam - I thought my 40 years was pushing ...
Thanks for the inspiration!
arent the riots and protest much greater risk of spreading than a church service? why aren't police breaking them up?
By the way, git also comes with other diff algorithms which may give cleaner diffs than the default one

https://gist.github.com/roryokane/6f9061d3a60c1ba41237

Those alternative algorithms can be requested with command line flags like "git diff --histogram" or "git diff --patience". The default algorithm can also be changed via the git config file.
Highly recommend "export PYTHONDONTWRITEBYTECODE=1" in your bashrc and just forget about it. Pyc files are still an important optimization on modern machines in some circumstances (especially with huge oft-restarted apps), but the autogeneration behaviour has always been a pain in the ass

The bulk of your pycs are generated during package install. What tends to remain in the usual case is a handful of files representing app code or similar.
For me I’ve learned programming is one of the purest feelings of joy I experience. Even regardless of the language or environment. It’s so thrilling to get to take something apart and put it back together to solve a problem. I feel so lucky to have such work. Congrats. I hope I can make it to 74 writing code!
Thanks for the write-up! Glad to see that the SNES is still getting some love.
The author found out that the HTTP endpoint used to generate a JWT token would accept any email and respond with a valid JWT token for that email address.

He could literally send a POST request to that endpoint with arbitrary email addresses and get a valid JWT.

This is clearly explained under the "BUG" section.
I think people are missing the sarcasm... at least I hope that's sarcasm.
it's such a good idea you can raise almost $1B, get a car manufacturer to build a car for you supporting this system, convince a country to be a guinea pig, and ???

https://en.wikipedia.org/wiki/Better_Place_(company)
google had a fair number of older programmers (like over 50) when I was there. they had a group for them, 'greygler', also gaygler (not positive of the spelling). google has a bunch of employee groups that are portmanteau's of something + google.
>>In sub units which can be handled, mount them at the right points for C.G and design an airframe to permit module swapping with suitable equipment.

Swapping out stuff like that is going to be tricky. These are essential pieces of equipment. Whenever you plug/unplug important things from passenger aircraft you have to check and doublecheck that they are installed properly. You have to test them. Swapping out batteries would be like installing a new fuel tank. Swap and go may work for cars, but a faulty connector on a plane;s battery could mean the flight ends in flames.
It's an open secret in the IT industry that if you are smart enough to be a good programmer and you want to be well-paid you should become a lawyer.
It's only a matter of time before Hellfires leave the rails from so-called "surveillance drone" Reapers.

The corporate Empire has been built and it's occupying the lands of 280 million Americans.

It's Rome 2.0 and the Rubicon isn't as clear, but it's already crossed.

---

Minneapolis is in a de-facto state of war, there is no police presence in numerous areas currently, and locals have already setup their own road-blocks and community defense forces.

The Minnesota State Police have been arresting more reporters since CNN and targeting them with tear gas canisters and rubber-bullets at point-blank range. The MSP doesn't respect the Governor, and John Harrington and/or Matt Langer should be disciplined. That is, unless they want a full rebellion.
It's sort of inescapable, because there's some baseline level of tooling that needs to be supplied to the students to that they can learn the actual subject matter of the course.

As a practical example, in my graduate program, there were some courses where the professors handled a lot of those baseline details, and courses where the professors gave a lot of leeway to the students. My observation was that the latter courses couldn't go nearly as deep into the official topic of the course. Students would spend so much time managing their programming environments that it became a serious distraction.

Also, in reference to your question, "Isn't the language just a tool?" - no, it isn't just a tool. It's also a language. For a professional software engineer, the programming language isn't just a way of telling a computer what to do; it's also the primary, and most authoritative, medium by which you communicate complex technical information to your colleagues. It's perhaps comparable to the divide between informal language and legal language - one is useful, especially for communicating to people with limited expertise in the field, but the other is where the rubber actually meets the road.
Kingsley Amis 'A guide to modern usage', a similar choice for non-Americans.
Oh man, that is classic sloppy web development.

It's often so easy to reach for the values in the params/payload first because you're already working with them, instead of remembering to use the session values instead.

This would be a great audit to do for entire codebases.. Just check all places that are using params/payload values and see if there's actually already a session value that should be used instead.
My cynical brain is working overtime finding a flaw in this statement, or the angle from which it is selfish, and it's failing. One of the things I like about it is that its personal, not a company statement. Its a risk for them, though, and I am also, reluctantly, impressed.
I wonder are there any locks that prevent astronauts from touch the wrong buttons on the screen?
All I can say is "very" - Psyco is ancient, and predates pypy.
It uses FP16 yes, but the question was about average people running them on their PCs. I don't think most PCs have fp16 support, so you'd have to do it in fp32, doubling the size. It's likely not so fast on a CPU either with that size, especially when using FP32.
Easier Troubleshooting for Distributed Databases
People have to do stuff in the short term to adapt to new conditions. There's a lot of disruption right now simply because people and stuff have to be moved around. That's not the same thing as a long term shortage of anything, but it has a real cost in terms of physical goods or labor or money. Why should this be permanent? If more flour needs to be allocated to home use than restaurants, restructuring the supply chain is not something that goes on forever, whether restaurants mostly reopen or not.
this could make your code faster by providing more consistent control flow: the main thread is always doing Work and your gc threads are always cleaning up dead objects. this provides fewer, better-predicted branches and code that's more likely to stay in the icache.

most gc based environments use dedicated threads for gc and finalizers, this is one reason to do so

edit: to be more specific:

your normal flow is to alloc at the top of your function, and at the bottom you dealloc. so in basically every case you are paying the cost of deallocs, but if the alloc is conditional the dealloc is now also conditional which is more branches to predict. the dealloc is probably also handled by functions so you have jumps/calls eating up branch prediction table space

in the gc/offloaded dealloc scenario, your deallocs on the work thread are no longer conditional because you're just handing addresses off to the gc. if your gc is STW you've added 'if (stop_requested) stop()' branches throughout your workload, but those are effectively 0-cost because stop_requested is always false (when it's true, the cost of the mispredict has no significance because your thread is about to suspend). the gc thread is always doing the same thing or waiting, and again when it's about to wait a branch mispredict cost has no significance.
I’ve seen character offsets for JavaScript (which requires it due to minimization), but never Java. I’m pretty sure that data is not available in Java bytecode, nor most compiled languages.
I have also started learning NLP this year. Here is what have followed.
If you are completely new to deeplearning I would recommend course from https://www.fast.ai. Since it will teach you the concepts in a more practical way and also the next courses will more theory than practical.

For theory on NLP with deeplearning you can follow Stanford course by Christopher Manning.

http://web.stanford.edu/class/cs224n/index.html#coursework

it will give you a good understanding of how deeplearning is used in a certain area of NLP. But remember deeplearning is one of the techniques for solving NLP problems if you are more interested in Understanding NLP then I would recommend the following book.

https://web.stanford.edu/~jurafsky/slp3/ed3book.pdf

Although, Stanford course should give you a great high-level understanding of how GPT models work but if you really need to go under the hood then I would suggest after finishing this course you should learn Unsupervised Learning in DeepLearning.
Taliban doesn't get help from Iran. They get help from Saudi Arabia and Pakistan.
It sounds like they're raising prices in order to slow demand, so that the system can catch up. I'm curious if this will lead suppliers, etc. to go back to something like "just in time...but a few extra weeks just in case"
I assume if Tesla is using QT under Linux, Dragon would probably do the same?
Probably close. The first software program ran 21 June 1948 (https://en.wikipedia.org/wiki/Stored-program_computer) and not many people who start working at 16 keep programming until 74.
I noticed after reading your comment that HS256 is marked as “required” for compliant implantations. In practice, I have only ever seen signers implement RS256 though...
People need food to survive. No one needs religion.
You may be pleased to know that someone is actively working on this. There was a presentation [1] by the author Paul A. Jungwirth at this year's PGCon last week.

[1]: https://www.pgcon.org/events/pgcon_2020/schedule/session/100...
Phrases like that along with the policy of having new Googlers (Nooglers?) wear propeller hats really turns me off of the idea of working at Google. It sounds like joining a fraternity. Maybe a goofy one but still a frat.
Doesn't it make sense that the costs of changing how supply chains work are factoring in to everything?

Like, people want flour. There's probably plenty of flour, but at first the grocery stores didn't have a way to sell what the restaurants aren't using. There's a cost to changing how it is packaged and distributed.

This isn't inflation, because it isn't a new baseline.
When it comes to speaking for racial justice and equality for LGBTQ, private corporations have been much more on the side of the angels than the government.

The same government that wants to shut down Twitter.
Zoning is a big area where churches often are found to have more freedom. The basic argument is that putting arbitrary restrictions on a church is a violation of the 1st Amd.

There is nuance, such as, if the state can prove to a court that a zoning restriction is necessary. For example, a rule against high occupancy buildings in a flood plain, or the like, may be okay. While a rule against off street parking in a residential neighborhood, or the like, may not be enforced against churches.

Generally, US governments get into trouble if they put restrictions on religious institutions that are not absolutely necessary.
You are right, this aligns what I know about.
> Updatability can save devices for much longer

I'm skeptical of this. People buy new phones because they are faster, or because they did update and the new version of the OS is very slow on old hardware. People buy new hardware because they want new hardware.

Most non-tech people I know actively avoid updating their phones because it's annoying. They will ignore the notifications and choose older software over the inconvenience of updating and rebooting their phone.
Thanks for sharing. It’s interesting to see the space gaining steam. What sort of things are people looking at?
I wish he'd gone a little further in condemning the rioting. It would have been the courageous thing to do.

The rioting is a mistake. It will not change hearts and minds. It will not undo the problems endemic to police forces. In fact, it may very well exacerbate them.

The problematic archetype is the bigoted cop who's drunk with power and behaves more like an animal operating on instinct than a thinking human. These people, in the collective, are irrational, aggressive, and reactionary. They also hide behind authority and a convenient veneer in the "rule of law". We also are now seeing that there may be many of more of them (and many more enablers of them still) than we thought.

And it is exactly these people who will feel vindicated and emboldened in the face of the rioting currently underway. If we're not careful, it may also give them a pretext to resort to even more horrible tactics in the future. Increased surveillance of political organizers and low-income neighborhoods, more military weaponry at their disposal, laxer guidelines around 'use of force'.

The current trajectory is not the way. We need to use the system of governance we have at our disposal to try and fix this. It's the harder but also only truly effective means of recourse society has at its disposal.
This is certainly logged.
A good generator would come up with something ordinary sounding that doesn't correspond to any known person, I guess?
Again, I’m going to ask for specifics. I run a Haskell company so I’m not unfamiliar with the language.
I sit in an office chair (tilted back slightly) with 3 large HD monitors about 3 feet from my eyes - I have special glasses for that range. The monitors can be switched among 3 computers, and the wireless keyboard/mouse has a switch to move from one computer to another. Most importantly, I have a dog that needs walking several times a day, and that forces me to get up and walk a couple miles every day.
I'd love to see it more. Ibram Kendi makes the point that in the US, there's not really a thing like "neutral" or "non-racist". One either supports the status quo, loudly or quietly. Or one is an anti-racist. Being "apolitical", which is what most companies pretend to be, is just a fancy way of saying, "Things are fine as they are."

As press critic Jay Rosen suggests, we are all political, especially in times like these. The trick is to be political, to advocate for our own values, without politicizing things: https://pressthink.org/2020/05/you-cannot-keep-from-getting-...
Personally I would rather wait 30 minutes for it to charge than try to replace 2,000 pounds of batteries.
I believe that (the odious portmanteau) “greygler” is defined as being over 40.
> we need something like a Haskell 2.0, designed by the community to incorporate everything we learned about Haskell's flaws and make it an absolute powerhouse of productivity

How about PureScript?
I taught myself programming.
* Lots of grit. You needed it, to stay in the game when your shit didn't work.
* Type-in programs from books, magazines (3-2-1 Contact).
* Later on, buying big reference books.
* Trial and error, lots of it.
What calls what?
I always wonder what the next thing like programming is that isn’t mainstream yet. Maybe there is an opportunity in that. Quantum computing? But then they’d hire phds I guess.
Interesting. I thought this would already be a solved problem at FAANG.
You could ship better crypto (and updated CAs) with your app for Android -- then you could get support for whatever you like on all versions. But it might not use hardware acceleration if available, and hardware running Gingerbread needs crypto acceleration if available. TLS 1.3 isn't all that much code if you can use the system x.509 and system ciphers, or maybe pick one or two ciphers to ship if they're not there; I'd guess TLS 1.2 isn't that much code either, the complexity comes from trying to support lots of versions -- and from X.509 which has a lot of stuff to process.

I think Chrome for Android did include TLS 1.2 at least, when it was shipping for Gingerbread.
That part I understand. It’s unclear to me in which auth endpoint(s) and auth flow(s) are affected. Is it the token endpoint, or auth endpoint? Or is it somewhere in the login flow before the user agent is redirected to the token endpoint?
Mengimpor Produk Di Indonesia Dari Luar Negeri Dengan Agen
What commands is Kernighan using in his spell checker example? makewords? lowercase? unique? mismatch? Were these really commands in AT&T unix? I kind of suspect that they created some "unique" shell scripts for this video to make it easier to understand..

His full command is:

$ makewords sentence | lowercase | sort | unique | mismatch
We used precisely this optimization in [sorbet](https://sorbet.org), a brand-new type checker for Ruby, which also contains a high-performance LSP server.

We wrote the entire thing (and tested, using ASAN and fuzzers and other techniques) to avoid leaking memory, and then strategically inserted [the equivalent of a rust `mem::forget`](https://github.com/sorbet/sorbet/blob/0aae56e73c7680ec6053b3...) into the end of the `main` driver during standalone mode, to avoid calling those destructors when we're about to exit anyways.

This optimization is definitely still relevant for new systems today.
How many people did they foreclose upon during the mortgage crisis? How many people have they extracted usurious amounts of interest from? How many people have they lured into debt and deceitful loans?

This is a large corporation with as much a hand in perpetuating systemic inequality as any other large corporation. Moreso because it exists in the financial sector. Calling out inequality and donating funds generated from parasitic practices is not enough. Let's talk about debt forgiveness, defunding the carceral state and dismantling other structures of oppression.
A lot of the expenses in flying arise out of regulatory requirements. Want to carry passengers? Pilot needs a license that take several hundred hours minimum to obtain. Want to use a part in an airplane? Getting it through the FAA certificating process will inflate its cost by several multiples. Want to operate an aircraft? You need to get it inspected every $fixnum number of hours of operation by a mechanic who in turn has to do everything the 'certified' way and is himself certified by the FAA.

It's these costs, not fuel costs, that account for a big percentage of the cost of flying. There's no meaningful way to reduce the cost of flying without reducing them. Perhaps electrics will incur much lower costs in maintenance, reducing costs somehow.
DeepMind’s New AI Helps Detecting Breast Cancer
What's up with requirements. That's a lot and I don't see all being used. did you line them for new features?
Some classic old textbooks are about that size but they are very dense. A Discipline aof Programming comes to mind. It's about deriving imperative code from the weakest precondition you need to give to the next statement and about proving programs correct with a big emphasis on loop termination.
u/Teever was making a joke, I think.
The CIC on the SNES is a different one, turns out it was already reverse engineered during the lifetime of the product.
Maybe with only a finite amount of attention at his disposal, he opted to focus on the cause of the rioting?

I know there's a whole bunch of galaxy-brain takes on this about how counterproductive the rioting is, but it's not like cops have needed any pretext to resort to "more horrible tactics" already.
Generally that’s for Server certs, Roots and Intermediates will be multiple years from what I’ve seen. Roots in particular 10+ years.
While you are not necessarily wrong, such a system would add complexity and currently they don't seem to need it to be competitive, so why bother? It is the kind of innovation which will come if the flight type becomes sufficiently common.
If you're on mobile, you need Materialistic.
https://whiteprivilegeisntreal.org/black-vs-white-crime-stat...
summarizes its conclusions as follows (see article for details):

"Black vs White Crime Statistics Conclusion

- It’s an uncomfortable truth but blacks commit crimes at nearly three times the rate that whites do.

- Blacks commit 36% of the violent crime in the US even though they are only 13% of the population.

- Blacks in England commit crimes at nearly three times the rate of their population rate.

- The parity in black crime rates in the US and black crime rates in the UK prove that there is no systemic or institutional racial bias in the US, and that the judicial system is not unfairly targeting blacks.

- There is no systemic racism in US Judicial System.

- There is no racial bias that unfairly targets innocent blacks in the US Criminal system.

- The cycle of black crime begins with the breakdown of family values that has 72% of black pregnancies creating low-income single parent households.

- Black children growing up in single-parent low-income situations are likely to repeat this cycle unless they raise children in a married two-parent household with more stability.

- White privilege isn’t creating a system that unfairly arrests and prosecutes blacks, the black parents making bad life choices are creating situations that increase the likelihood of bad outcomes happening are the ones responsible.

- White privilege isn’t real and isn’t responsible for blacks committing more crimes, black adults making poor life choices are the ones responsible.
I think you probably are, if you go by date you started working to the date you stopped! Even Ken Thompson and Dennis Ritchie seem to have started their first programming jobs a few years after you.

Welcome to HN! I hope you stick around, it can be a great place.