skysight-inc/HackerNews huggingface dataset:
If your traffic comes from a browser you are fine with this but if you're coming from e.g. Curl you will find that you need to include an intermediate chain.

(The reason for the difference being that browser stay up to date, many old client systems do not.)

We ended up getting a new cert from a different provider.
Is it just generating a random name and birthday?

That seems... underwhelming compared to the hundreds of services that already exist for doing this (see: any of the results given to DDG's query) and generate a much more extensive dossier.
Interesting. Anybody knows if these changes to the blocking API affect brave? I think I remember they said they wouldn't include them, but I don't really trust them.
Most CS students don’t take those classes. They’ll take data structures, algorithms, game design, databases, etc. which are mostly in Java or C++.
It is a shallow dismissal, snarky, and a non sequitur, for starters.
Thanks for the suggestion. Yes, I’m learning the best way to do some businesses analysis on Twitter.

Here is the link to my newsletter where I write in more details https://before90s.substack.com/p/lego-228-million-losses-to-...
This needs to be more emphasized. It doesn't have to be racism, or rather the root cause is not a hate for another it's extreme anxiety of one's position for good cause. There a lot of people in the US who are not immigrant who are members of the precariat.
There could be a revolution regarding EDA thanks to ML : https://ai.googleblog.com/2020/04/chip-design-with-deep-rein...

Google publicized about it, is China at the same level?
> Edit: it seems like turning on optimizations seems to improve the situation quite a bit. Not sure why they were profiling the debug build.

This is the most important point in the thread, since it invalidates the results for most purposes.
how do you think this will impact their world trade?
Is this an example of Dawkins meme theory applied to espionage?
It may no longer be true, but several decades ago it was possible to find sugar-sweetened soft drinks in the US by looking for kosher labels.

(I have a coke can next to me as I type; it is sugar-sweetened)
How is this something that can happen? I mean, the only responsibility of an "authentication" endpoint is to release a JWT authenticating the current user.

At least from the writeup, the bug seems so simple that it is unbelievable that it could have passes a code review and testing.

I suspect things were maybe not as simple as explained here, otherwise this is at the same incompetence level as storing passwords in plaintext :O.
What do you mean simple? The result/exploit is simple, but what is the reason the bug is there? Surely the Apple code base is not that simple.
Out of curiosity, how did you do that in C++?
Ah, the time old argument of “two wrongs make a right!”

China is systemically stealing IP from European companies, research from European universities, and forcing labor into a race to the bottom. Europeans would be wise to stand with Trump on this.
It would be helpful to see an example from a real application, too.
Indeed. The difference is this is happening deterministically, in place (with an optional deferral). A garbage collector has all sorts of different trade-offs.
According to the webcast, weather is expected to clear, so sounds promising so far.
I think the larger models get, the more incentive there is for researchers to look into pruning/distilling them for practical use.

GPT-1,2,3 et al. have all shown that larger is better. While in the short term this means people will simply throw larger and larger clusters at the problem, in the longer term there needs to be inovation in making it more efficient on the clusters we have (as even the cloud has limits).

I think sheer parameter count is an important part of the equation in general intelligence, so it's important that there are labs that work on scaling up promising leads to trillions of parameters on top of labs thinking of new promising directions.
> "Point of Information: the phrase "conspiracy theorist" was developed and fielded by the CIA as a counterintelligence effort."

Why do you think this?

I had never heard this before, and to be honest it immediately gave off whacko vibes, so I Googled it and found this article that says it is false - https://theconversation.com/theres-a-conspiracy-theory-that-...
Winamp Alternative (Online/Offline)
Hey folks,

This is such a pain to find a good playlist app that:

- setting up our own playlist by category,
- working offline and/or online with our mp3,
- sync with PC and mobile,
- Free

Any idea where can we find this kind of Winamp alterlative ?

Thank you in advance.
Rust isn't copying anything; everything in the original code would be a move.
Another endless chill playlist is https://www.nts.live/infinite-mixtapes/poolside.
Wow, I'm in shock. How could Apple let this one slip in? When I was a junior fullstack I had to design a very similar system and this was one of the very basic checks that I had in mind back then. I don't know how could anyone excuse this very basic bug in such critical service.
> In R&D things blow all the time.

There are world's of difference between a prototype accidentally blowing up because a design fault was unnoticed up to that moment, and this absurd spin on this accident about how these accidents are sought after and desirable. They aren't. They are always problematic and a setback, and in some projects even project-killers.

So, enough with the bullshit about how this accident is good news. It isn't. Even if the project can easily recover from this setback, it's still a setback.
So I'm writing what I'd use right now. :) It's not yet quite done enough for public consumption but it's an app framework, rather than a web framework, and it expresses its HTTP layer through a facet that uses Fastify as its web server. It also includes an "event responder" facet for responding to events off of an event bus, a Redis queue, etc., and it's all wrapped up with a dependency injector that bears more similarities to a real one (dependency injection rather than module-welding service location) than to Angular's. The key structural difference to me is that there's a unified way for all of these systems to interrelate in a way that you see more with a mature framework like Spring Boot, over less mature tools like NestJS.

I'm agnostic as to ORM layers but both Objection and TypeORM are worthy of consideration. My project's DI container will play nicely with both--it supports dynamic scopes and so it's really easy to do something like "create a transaction scope and request a service from it, and that service automatically wires up transition-backed TypeORM repositories." Which is hard, hard sledding in existing systems.

I hope to open source it relatively soon.
In this case it was nationalistically inflammatory. This kind of thing is guaranteed to rile people up and get them attacking each other stupidly (because humans get more stupid as we get more activated) instead of conversing curiously.
Foo = procedural (c)

Bar = functional (haskell)

Baz = bash ?

Bong = hard to say because bash has a perfectly good interface to sql so im just super confused now.
Whales are a keystone species akin to wolves in Yellowstone, which prey on deer and allow a greater regeneration of plants.

Whales also pump a large amount of nutrients to the surface because they eat deep water species and excrete near the surface when they breathe.
If it's anything like what happened at my alma mater, they may well have switched to Java for everything.

It's really a disservice to students. Developing competence in a variety of programming paradigms is a career-expanding experience. It makes picking up a new language - and, by extension, a new technology stack - a quick and easy thing to do, because there will be very few ways of doing things that you haven't seen before. Which, in turn, makes it a lot more feasible to pivot your career or act quickly when an opportunity arrives.

A bunch of students who know only Java, on the other hand, is exactly what big corporate employers want. For employers, it maximizes the interchangeability of employees. For employees, it minimizes the interchangeability of employers.
I've used plenty of Oracle; it's a poor choice (probably the worst) for organisations of any size. People buy Oracle in large corporations because that's what their leaders and their team know, and it helps them stay relevant in the company. Especially in places where daily work is more about engaging in office politics than dealing with technology.

And the other one is bribing. From mild to criminal, involving payments via vendors to decision makers -
http://allthingsd.com/20120816/oracle-settles-sec-bribery-ca...
Are there attacks on RSA with appropriate key sizes? We replaced SHA-1 because the attacks, even if just theoretical, were clearly on the horizon (and we replaced with sha-256 which is basically the same thing with a few tweaks and some parameters increased). RSA certainly has attacks, but they have been compensated with bigger key sizes. Is there any reason to suspect that 4096 bit RSA will be unsafe anytime soon, other than quantum computers?

Disclaimer: Iana cryptographer
> I’m actually very curious why it takes this long; is Rust memseting the buffer when dropping it?

Regardless of memset and optimizations, consider a particularly complicated object which lives on the heap and contains hundreds of other nested objects (which themselves contain nested objects, etc). Now imagine that a significant fraction of them make use of RAII. That cleanup code can't be elided.

That being said, it's a pretty bad example if they were actually profiling the debug build ...
Most CS students certainly do take compiler classes, at least for any decent CS course.
years ago somebody tried to add a new astrological symbol to account for this but of course astrology followers weren't having it.

https://www.today.com/popculture/your-life-lie-zodiac-has-ch...
Why can't it cleanup right after the work?
This seems to be cutting edge web design. You would need to follow the trendsetters directly to get a name. They may not have even named it yet. Try emailing the websites admins.
Vietnam managed to keep its Covid-19 death toll “at zero”
Hard to say, as we don't have any insights into the client-side. But we can say that only ~2% of our clients had expiring root certificates in their chain in the last few weeks, so it's definitely a minority.

Since you don't control the clients in anyway, it might be that there are clients that haven't updated their local certificate stores in ages and don't yet trust the new root certificates.
There are some nice tax breaks for tech companies on the island. If you freelance or do contract work, it would be best to get a company setup for that.
We could sum up the post as:

"I don't like Oracle DB because:

- "Takes up more space

- "Is slower to start/stop/init

- "Is not free

- "Has bugs"

Umm... Sure, Oracle's slower to start/stop. Sure, it takes up more space. So what though?

And then, "it has a lot of bugs and that causes downtime." Would be great to list some examples. All software has bugs.

Why is this on the front page? Does it have any value what so ever other than "someone found a free alternative to Oracle DB"..?
What Does Sacrifice Means to You?
That is what I think but you have to be over a certain age I suspect.

Take off eh?
Conspiracy theory often happens when coincidence becomes unbelievable. (I like the phrase someone else coined in this thread, 'coincidence theory', when we hold onto the coincidence explanation too long.) NSA spying was believed by many long before snowden, because the coincidences were piling up even though intent was not proven.

I don't think it's fair to conclude there's a mental health defect in people more skeptical of the status quo (If we want to go that route, perhaps there is a similar mental health defect that allows belief in improbable coincidence to flourish among some people and not others?).
Humpbacked .... people?
> it seems like turning on optimizations seems to improve the situation quite a bit.

I'm not seeing that on my local machine? Were you comparing on the Playground which would be quite variable in its results?

> cargo build
Compiling foo v0.1.0 (/private/tmp/foo)
Finished dev [unoptimized + debuginfo] target(s) in 0.42s
> ./target/debug/foo
drop in another thread 52.121µs
drop in this thread 514.687233ms
>
>
> cargo build --release
Compiling foo v0.1.0 (/private/tmp/foo)
Finished release [optimized] target(s) in 0.47s
> ./target/release/foo
drop in another thread 48.418µs
drop in this thread 548.005373ms
No, that's about right. Oracle DB is seriously that bad.
Can confirm it builds very fast, including extensions. And on many-core machines it scales quite a bit (make -j64)...
Apple has had more simple "unbelievable" bugs, e.g

https://news.ycombinator.com/item?id=15800676 (Anyone can login as root without any technical effort required)

And to top it off (https://news.ycombinator.com/item?id=15828767)

Apple keeps having all sorts of very simple "unbelievable" bugs.
Even if there was clear evidence that this system underwent a proper security audit, with a failure this basic you would have to ask why it didn't work. What is going on inside Apple that brought them to the point of releasing a lock that simply opens with any key, despite the efforts of their state of the art lock design process and qualified lock auditors?
Its valid in American English too, frankly and see it used frequently.

Out of the ether, Ethernet and so on.
Your first paragraph is totally ridiculous. Maybe you started with $0, but maybe that was 30 years ago and losing all your savings from then till now, including your home, is more than an inconvenience. If you have dependants then that loss could directly impact their lives and especially their education – what if some of that money had been for a college fund? In the US especially, and also to some extent in Europe, having less money affects what medical care you can afford, so it actually can cause physical harm. At the extreme end of things admittedly, these changes could put strain on relationships which could even mean you really do lose loved ones.

I actually do agree it's unlikely that Oracle will follow through with their implied threat, but let's not pretend that their threat is meaningless.
> at my alma mater

Where would that be? Why is everyone here avoiding being specific? If you are not specific, why should we believe in what you say?
I am the person that would be the one most likely to adopt haskell in the company I work in. Now, I don't and I won't even though I used it for several pet projects and I would say have learned a lot of haskell and associated patterns.

It's not that haskell doesn't have merits. However I feel like they are oversold. While you can build programs that lack certain error classes, they are not bug free and at the same time debugging often was a lot harder than in other languages. The laziness is especially problematic in that regard.

Another problem is cultural. Haskell and Scala community have been the most hostile communities I have experienced. And the friendliness of communities is a sure predictor for growth.

Another important problem is the docs. For some reasons they hardly contain examples. You don't get adoption that way. Even if the maintainers feel that the type signatures are documentation enough.

And as a last remark, the combinatoric complexity of compiler flags is a problem and needs to be fixed. But the ecosystem is in a deadlock there that no compromise could be found on what should be in the language and what shouldn't be. And it kind of indicates a deeper problem in the haskell design process.
Facts about Crew Dragon Launch: Flying Dinosaur and Christmas Trees in Space
What is the name of text on metallurgy?
Recruiters who do contact me will be named and shamed publicly.

I would applaud any recruiter who went through all that trouble just to contact a person, regardless of my interest in their offer.
Saving Lydia: A path from diagnosis to treatment in 3 months
Ask HN: Is iOS, Bluetooth and contact tracing apps even possible?
Context:

- French government decided NOT to use the new Apple/Google OS level API for contact tracing [1], and build their own natives app based on bluetooth connexion.
- App launch is June 2 2020 on Apple/Google app stores
- UK took same direction as FR, but those 2 are the exception having most west EU countries taken the OS level API route.
- Insiders beta testers have access to the apps

The one liner is : Android devices wakes iPhone bluetooth.

Is this possible or BS ?

>The government claims to have managed to circumvent these limitations to make the application work on iPhone. Our findings show that it did not actually shut down after two days, even when it was relegated to the background. Our tests also confirmed that it continues to transmit a Bluetooth signal in the background for several tens of minutes. While this does not tell us what kind of information this signal can transmit, it seems to confirm what the government is saying.

Inria confirms that Bluetooth operation is limited on the iPhone as soon as StopCovid is put in the background. "BLE advertising (the transmission of messages) is totally interrupted but BLE scanning (listening to messages from devices in the vicinity) can continue," the institute explains.

"The presence of one or more Android device(s) near an iPhone will allow the application to be woken up and Android models will therefore be well detected by the iPhone," says Inria. On the other hand, Android devices cannot detect the iPhone directly because the iPhone does not emit "advertising" messages to signal itself. To resolve this limitation, Inria engineers have arranged for an explicit Bluetooth exchange to be initiated from the iPhone to Android devices to inform them of the presence of the iPhone nearby.

[1] : https://en.wikipedia.org/wiki/Exposure_Notification
[2] : https://www.rtl.fr/actu/futur/coronavirus-on-a-teste-l-application-stopcovid-sur-iphone-et-android-avant-sa-sortie-mardi-7800558768
Apple has really lost their touch, software quality has declined dramatically
It was off topic but it could have been on topic if you'd linked it to the theme in a curious way rather than a hostile way. "Holland spreading the lazy southerners myth, again. In particular this stupid journal cover selling outrage and hate yesterday" is just not the kind of argument we want to be having here. No one is coming from a place of curiosity when they fight about things like this. It mechanically evokes worse from others, as it did in this subthread.

Meanwhile the OP actually does evoke curiosity, and is not mean at all.
The one case (and about the only case) I can think of where they can claim above is:

If they have a log of all JWTs issued that records which user requested and which email in JWT, then they can retroactively check if they issued any (user, email) pair that they shouldn't have.
Then they can assert that there was no misuse, if they only found this researcher's attempt.
Their recent history, where security and privacy was an afterthought.
I'm sure we all wish that were true.

There are people who have flown around the world many times who have gone down the flat earth rabbit hole.

Unfortunately the people who aren't confident they can actually learn about what they are afraid of, or correctly judge probabilities of things being true, spend their energy choosing who to believe instead of gathering information and forming a coherent understanding.
It depends. Either iterate over the vector and delete the objects or just call clear(). Obviously you have to be sure that nobody else is accessing it at the same time.
> Thats a lot of mental health defects.

https://news.ycombinator.com/item?id=23329867
Apple has let all sorts of things slip in which seem unbelievable.

e.g https://news.ycombinator.com/item?id=15800676 and

https://news.ycombinator.com/item?id=15828767

So I don't get shocked anymore seeing Apple security issues.
Elon Musk's SpaceX suit is like a tuxedo for the Starship Enterprise
Haven't finished reading it yet (couple more paragraphs) but one of the most important lines in this entire article is this:
"Nobody knows exactly who or what owns Huawei."

Really bizarre company the way it's structured and run. Owned by employees, run by employees, and it's private as well.
The big and annoying issue with the Crew Dragon design seems to be the chosen RCS fuel (AFAIK, monomethylhydrazine and N2O4), which makes both fueling and clearing after landing a delicate process.

Hopefully Crew Dragon proves itself as a capable platform for Earth-orbit transportation, but this fuel issue is a hard one to counter.
You shouldn't need to send the root certificate (unless the clients are _really_ dumb, but I worked with a lot of dumb clients, and did not see any issues with only sending intermediates and the entity cert), but a fair number of cert chain verifiers are fairly dumb and won't stop when they get to a root they know which makes things tricky.

If some of your clients don't have the UserTrust CA, but do have the AddTrust CA, up until today, you probably wanted to include the UserTrust CA cert signed by AddTrust. Clients with the UserTrust CA should see that the intermediate cert is signed by UserTrust and not even read that cross signed cert, but many do see the cross signed cert and then make the trust decision based on the AddTrust CA.

It's hard to identify clients in the TLS handshake to give them a cert chain tailored to their individual needs; there's some extensions for CA certs supported, but they're largely unused.
> The only way to drop an extensively nested structure like this any faster than traversing it would be an arena allocator, and forgetting about the entire arena.

Isn't that incompatible with RAII though?
Félicette – the first cat launched into space
Just because someone puts something in a ToS, that doesn't mean it's necessarily lawful to do it or that the term carries legal weight in any other way. Consumer protection laws are full of rules that say, roughly speaking, "You may not do this, and any attempt to permit it shall be void/illegal". That's why in my country you often see signs in shops, usually underneath whatever guarantee/refund/exchange policy the store voluntarily offers, that say "Your statutory rights are not affected." It's the same sort of argument that results in contracts disclaiming liability for everything under the sun but also including a clause that says they explicitly do not disclaim liability for certain specific outcomes like causing serious injury or death.
What do you think is the theory you believe that is most outside the mainstream?