skysight-inc/HackerNews huggingface dataset:
> Can we just admit to ourselves that a lot of global military expenditure is just a certain kind of make work?

Being the imperial power has vast benefits, do you think Rome ruled its provinces just so they had a way to spend money? Being the global power is literally worth money. It's hard to say how much, but I'm pretty sure it's larger than your military expenses.

That said, I'd love to see the US cut back, because your benefit comes at somebody else's cost.

If the net benefit to the US is positive however, do you believe the majority of people would be happy to work more to have the same standard of living, or the majority of well-off Americans would be happy to pay European level taxes to redistribute wealth within the US? I have sincere doubts on both fronts.
"They are finally forced to pay attention to the person inside their minds ... and that can be frightening I suppose."

Or they start comparing their own internal values to those they see in the world and are truly disgusted by what they see.

Secondly, society and the economy are the systems demanding people never take a break. How many job descriptions require being able to "multi-task" or being "self-driven"?

I find it a bit sickening to see people reflecting these deep societal issues back on these individuals, as if it were their fault.
Cookies is just one of many things covered by the regulation that requires consent. Browser fingerprinting or local storage is another one.

Blocking cookies by itself will not do anything against tracking, nor will it remove the need for consent prompts because they still need consent for the aforementioned non-cookie tracking methods.
> There is literally nothing it's well-designed for -- any task more complex than stopping a process and reading/writing a single memory location or register is awkward to execute and prone to errors.

Not only that, if you're writing a debugger you all but have to lean on parsing procfs, which itself is a really horrible API…

> Special mention goes to its use of signals for IPC, which makes ptrace() nearly impossible to use in multithreaded applications or high-level languages, and is especially prone to "gotchas" and implementation errors.

Yep, you really gotta keep track of all your tracees. If you're not aggressively making sure you're notified of every single thing a tracee can possibly do to change itself (and there sure is a lot) you're going to have a really bad time.

> IIRC, tracing a process which receives an external SIGTRAP signal is especially difficult, as ptrace() uses that signal to indicate that the traced process made a system call.

Ooh, I know this! I just came off of implementing it on the kernel side because GDB obviously cares (and if you don't do it right, it won't "rewind" one instruction after the child stops when necessary and your disassembly will be off). You're supposed to call ptrace(PTRACE_GETSIGINFO, …) and check si_code, which for a real signal will be SIGTRAP (yes, the value of SIGTRAP itself; 5 on my machine) and for a syscall stop will be SI_USER (0 on my machine). Of course you'll only get a stop on a system call if you specifically request it, and I think some newer kernels support PTRACE_O_TRACESYSGOOD, which is meant for this kind of thing, but I did the laziest job I possibly could in my implementation and just told userspace I don't support such things ;)
> You got that wrong.

Ahh, my bad! But only the "cannot be changed/mapped." part, right?

foo(externalName internalName: Type) { ... }

Doesn't this strike you as odd at all? The part that looks like the label is not the label, it's the name of the variable. And then there's this extra bit in front that doesn't look like the label, doesn't really look like anything TBH, that will turn into the label. If present.

I kind of see how they got there, but boy is it inconsistent.
And in the meantime we have healthcare that doesn't bankrupt you if you need to go to the ER, affordable education, and better consumer protection laws among other things. Oh, and a police force that in average doesn't kill as many people as the US one does.
Keeping Track of Certificate Expiry with a JWKS to iCalendar Converter
Considering he managed to lose his life over the app, I'd say the comparison is fair.
There are many versions of one Postgres :) If it's not defined in the docs/spec, it may change in the future (without notice).
I'm sure Arthur Whitney would be upset!
“There is no war in ba sing se” is the equivalent of the older phrase “we were never at war with Eurasia”. Which is now more obscure but likely better understood on HN.

OP is saying you’d need to be incredibly delusional to deny police are brutal and there’s a problem.
Especially compared to other countries, the US police seem to show quite the restrained considering most countries do not allow to carry weapons. It is a significant risk for safety of course. But if you look at the data, the often believed stereotype of US police being glorified cowboys seems to be quite untrue.

Frankly I am a bit cynical about politicians declaring the need for police reform. In my country protests are regularly "subdued" with excessive violence but the decision to handle it this way comes from the top, not from police officers.

I think clearer legal rules would help. Also maybe teaching people how to behave in case law enforcement conducts a search. The ability for surveillance and raiding homes should certainly be under intense scrutiny. Because I think the fear of decision makers is the main driver we might see some problems.

> I've been in a few protests and I can easily say that I have never seen more hatred in someone's eyes other than the cops that were beating up people.

That can be true for protesters and criminals too. I am aware of the irony of mentioning them in the same sentence. But the "psychology" study should show, that police is just often required to just do the dirty work and some might adjust to the crime they see in their daily routines. The systematic problems are programs like war on drugs or excessive militarization.
This PoW is rather complex and takes nontrivial amounts of time and memory to verify. It accepts these downsides in an attempt to achieve "ASIC resistance", which means limiting the potential efficiency gains of custom chips to a small factor like 2x or 3x. This should make their design and manufacture economically unattractive, with long ROI times. And thus allow commodity hardware to remain competitive.
Same can be said about most cloud platforms that programmers would store their code. "What if Google Cloud shuts down", "What if service X changes their API", "What if your CI/CD provider makes a breaking change in their YAML syntax".

This happens, it sucks, but it's not a reason to not host on cloud, use an API, or deploy with a CI/CD. Outsourcing is a calculated risk.
I did not want to say Jitsi is bad. It is one of the best solutions around. But you still have to trust the server if e2ee is not turned on and more than 2 participants are using it [1]: "This outer layer of DTLS-SRTP encryption is removed while packets are traversing Jitsi Videobridge"

I believe it is correct to say, that WebRTC is end-to-end encrypted. What you are referring to is, if you can trust to have a direct connection to the other participant and that you can make sure she is the person she pretends to be. This layer is indeed missing and will be added [2]

I would very much appreciate your help on the project to eliminate those concerns.

[1] https://jitsi.org/security/

[2] https://github.com/holtwick/briefing/issues/1
> because police brutality is kind of a global phenomenon

No it's not. Police in Europe is, on average, very kind. When they stop you, you don't have to be afraid of anything, and more often than not you stop them to ask for help, even if it's just to ask for directions.
'Already there' in that case is just 'there's a package for Rust and cargo' (but not necessarily RusTLS). That still leaves a significant integration challenge.
A Spike in Ammunition Sales Indicates Rise in African American Gun Ownership
Ridiculous. What exactly is this going to achieve? It's not like using the words with this meaning "celebrate" racism. For those like me who are liberals I can tell you this crap will guarantee populists like Trump continue to get into power.
Whether you choose to trust them or not, they have a history of publishing content that is false and serves to advance and protect Russia's interests.

One such example on the Skripal poisoning: https://www.rt.com/news/452946-skripal-anniversary-truth-nov...

If you want you can read more about RT and Sputnik here: https://www.kcl.ac.uk/policy-institute/research-analysis/wea...
Yeah, I mean clearly half of the money is going to RENT.

;)
That's why he said apocryphal..
> TLS-01-004 - Data Truncation in DER Encoding Implementation (low). This finding rightly points out a function in rustls that produces incorrect output when applied to an X.501 Name that is larger than 64KB. While that’s an exceedingly unlikely case, and the bug does not cause unsafe operation (but perhaps connection failure), the function has been corrected to produce valid output for all inputs.

The ISO 7816 smartcard standard uses this same ASN.1-based scheme for command and reply encoding. I found a memmove overflow and a separate off-by-one bug in Yubico's PC/SC library, and an off-by-one bug in the Yubikey 4 firmware, all related to their handling of this encoding.

It's possible that the Yubikey 4 bug could have been leveraged into an information leak, a buffer overflow, or some other exploit of the firmware.[1] The firmware was calculating a command reply length based on what the proper, compact length of the object should be, not the actual length of the stored object with malformed internal encoding, leading to corrupt reply chains. But I never explored it. I'm not an exploit developer, and didn't have time to go down that rabbit hole. I only discovered the bugs tracking down a bug in my own PC/SC library. It turned out I was generating an overlong encoding ({0x82 0x00 0xff} instead of {0x81 0xff}) for an object, tickling the Yubikey 4 issue. Yubico quickly fixed their library, but the engineer resolving the ticket downplayed the firmware issue, which seemed far more concerning as it suggested bug-prone buffer management techniques in the firmware.[2] (Indeed, it suggested that the firmware reused the buggy library code.) I haven't gone back to see what happened with the firmware since then.

Anyhow, paying attention to small encoding and decoding issues like these are important--the details always matter. "This couldn't possibly lead to an exploit" are famous last words.

[1] Hopefully not a leak of the key itself as I presume it was inaccessible to the firmware, but who knows--it's a black box.

[2] IIRC, their argument was garbage in, garbage out (GIGO), which is a dangerous misapplication of that principle. A malformed object should never result in malformed, corrupt responses by other layers of the protocol stack. In fact, the GIGO principle usually implies the opposite--that the behavior of other layers of the stack is invariant to bad data, not conditioned by it.

EDIT: Looking at my Git logs it seems my code was never buggy. My library couldn't read back some certificates generated by another, third, project and written to the card using the Yubico SDK. That third project was generating the over long encoding, and in the process of tracking down the root of the issue I stumbled upon the Yubico bugs. IIRC, that third project was never reading back the certificate as they had a very convoluted scheme for 2FA and client-side SSH X.509 certificates that relied heavily on the bespoke behavior of their client-side Go daemon.
Really? You and the cops you just got rid of?
https://en.wikipedia.org/wiki/List_of_killings_by_law_enforc...

The rate of police killings is vastly higher in the US than any other Western country. So something is going on there that is not a universal phenomenon.
In my experience that's not actually true. People might be able to drop some graphical elements into place, but they can't fix bugs in their "programs".
This site tracks them really well https://www.covidvax.news
It's weird that I've read so many people say "your computer isn't slow because of transistors degrading, but because of other thing like software/driver/OS stuff".
This is difficult when police literally have a union. If the union were acting in good faith they would be eager to learn & fire. Instead we get the “blue wall of silence” & turn otherwise “good” cops into ones indistinguishable from “bad” cops.

I mean there’s even a “good cop/bad cop” trope that’s got to be the best example of this kind of behavior—I can’t count how many times police are complicit with straight up torture and abuse of rights on Law & Order.
Ok, I guess it is my bias.
It seems like the possibility that photos-of-undress are promoted by organic engagement is not discussed? (aka people seem to be clicking on this).

Confession: this is the first thing that sprang to mind for me. Not that algorithms suck or companies suck (though both of those are true) but that people suck.
Learning C++ with Borland Turbo C++ for DOS can have some learning value, but landing a C++ job with that may not be easy.

gcc and clang are distributed free of cost, and so is Linux. They should switch to those compilers and teach a modern dialect of C++.
I see nothing wrong in learning progaming using old tools. The key thing is to deliver the basic concepts required for problem solving. In all honesty a student can learn "proper" C++ at a later stage.
The website is down, but can still be read using google cache: https://webcache.googleusercontent.com/search?q=cache:Dk1y0u...
Hi. This will be a series of 4 posts, the next three will have a link to the GitHub repo
I live in EU (where, generally, the police is trained to minimize-harm, rather than take-control-by-all-means), and I feel a bit the same about this list; a sizeable share of those videos show regular-ish riot control techniques IMO (pushing the crowd down the street etc.). Then, many show police overreaction or outright brutality.

But, then, why mix all of those in one big list and call them simply 'brutality'?

As much I sympathise with protestors and the cause, there's this not-very-wise tendency among this side of the conflict to portray themselves as 100% peaceful victims, and police as almost universally working for the forces of darkness.

So, I see it as a sad (yet, probably, temporary) tendency, that even the side which I'm sympathising with is feeling that treating me like a gullible person is OK - "The first casualty of War is Truth".
I don't even need to read the article to know that a more accurate title would be: 'Undress or fail: Instagrams user patterns strong-arms users into showing skin' or the classic 'Sex Sells'
Does anyone have a better tutorial on webrtc?

I didn't find the article particularly good.
Soooooo, the author moved away from waveapps because the system did no allow him to link multiple pictures to 1 receipt. So he started implementing his own no-code solution which... also doesn't allow him to link multiple pictures to 1 receipt...
One of the main reasons I jumped to duckduckgo. Google only directs you were it wants to and doesn't actually offer the real search result.
I can sort of see how post-9/11 'kids' who grew up in a society that sees terrorism everywhere might think that it's odd to assume it was just a plane crash.

As a teen, I also thought it was just a crash. I was at school and someone mentioned it and we went to look for a tv. It's difficult to forget how the mood went from 'shit, that sucks but cool explosion and most people below the crash site will probably get out' to 'shit, another plane, and now the towers are collapsing'.
You can fix a software, but you can only punish a human driver, hoping it will fix itself. Also, both can be forced to train, but you can reproducibly test only the software, no guarantee that your retrained human driver will not succomb to the same road rage in the near future.
The importance of quick start guides
That's correct, I use https://github.com/tensorflow/tfjs-models/tree/master/body-p...

It is indeed slow. The video signal first is drawn to a canvas and then from there streamed as a video again. Some browsers perform better than others. Probably due to WASM support, but I did not dig deeper here.

The "pro" though is it all happens on the client in the browser.
> This is the state of science in a lot fields unfortunately. Many reviewers skim the paper, put in a thinly veiled complaint about why their own paper was not cited, and don't bother with the code.

Excuse me. Is this your actual experience or the meme that everybody is simply repeating?

In the admittedly few papers I have published, the reviewers’ feedback has been a net positive I wouldn’t be without.

Also, the general focus on code in science here on HN is so incredibly myopic and narrow minded. Code for research are not high-profile software projects. They are a piece in the toolbox used to solve a problem. Some grow to become larger projects, some fulfill their purpose and stay fixed in time.
sadly webrtc p2p does not scale. Sadly current HTML-based solutions for media servers are slow and highly CPU intensive. Even more sadly, adobe flash has solved the problem of multi video chat decades ago, but we have decided to deprecate without alternative
Well, teachers aren't interested in all these. They just teach in some rote learning fashion. But at least having CS as subject helps to create interest in students about programming. That's it.

Even in Engineering courses, some teachers don't even properly indent code and can't even write themselves a recursive algorithm for eg: printing a number in binary. This is not an issue limited to CS/programming, but manifests more because it is a practical subject and a fast growing fields.

But some students get interested in programming earlier rather than rote learning other choices of subjects (eg: biology). That's the benefit of having CompSci/Programming in curriculum.

Source: learned programming in turbo C++ in India during my HS (called +2 or Pre-university here).
> Just look at what they are willing to do for China.

... What are they willing to do? Aren't they both banned in China?
Kindergarten Kids Science Without Long Parental Preparations
I am a stay at home mum of twins & previously a scientist . I spend many hours trying to teach my twins through play and the part I struggled the most, is the long preparations before an activity. I tried watching Youtube videos with science activities together with my kids. The idea was that we will be watching the videos together, and follow their instructions to setup and play our own science activities! I thought that if they participate in the preparation, it would be great as they won’t get bored or upset. I hoped that we would all end up with positiveness and willingness to do the experiments after-all. But we failed to this as well! The videos we found were:

Too long and therefore not so interesting for my 4 year olds
Not stimulating enough to keep young children’s attention
Requiring too many or complicated items that we usually didn’t have at home OR
*Not accurate enough for us to replicate the experiments quickly and easily

So, I did a Youtube channel with videos designed especially for parents and young kids to watch together. Its a channel where you can follow along, together with your child, to prepare and play easy, fun, STEM activities using household items.

For example, this paper cutting craft was very popular with young kids and even though basic, very educational. It helps young children gain spatial knowledge and understand the concept of symmetry. Additionally, they get to practice their scissor skills! Every time a child repeats the experiment, a unique result is produced, which makes it super engaging, fun and something they can do on their own! You can talk all about shapes and colour it or stick it to a different paper creating a beautiful symmetrical card.

Please have a look and let me know what you think! Your feedback would be very valuable.
Thanks!
I remember the time when I was a teen and started out with TurboPascal 8. It was a really polished experience with the inbuilt library being enough to do anything console (even a GUI framework). Very found memories and it did show me the basics that I use today without overwhelming with details, squabblings and arcanea (it was fairly consistent). Very different to the patchwork you find if you start today and the constraints to work with a limited set of tools was really great for starting out. Throw an NPM ecosystem with a million terms at a kid today who tries to start out and you have lost the spark. Kids only categorize programming as fun or chore once and it sticks. Luckily there is still Python (you can get very far by limiting yourself to the standard library and it leaves space to actually focus on the exploration of programming).
Real-Time Messaging in a Distributed Architecture Using SingalR and RabbitMQ,ABP
We will build a basic real-time messaging application in a distributed architecture. We will use Abp Framework for infrastructure and tiered startup template, SignalR for real-time server-client communication, and RabbitMQ as the distributed event bus.
You might be surprised.
Do you see any irony in your comment complaining about CEOs over promising and then you go on to describe “immeasurable” gains and “limitless” technology?
companies like github should remain apolitical. this is pure nonesense, merely a show of force by otherwise impotent and misguided liberals. take your outrage somewhere else.
Yes, me too. Give me something I can hold in my hand and read with a cup of tea in a completely distraction-free environment any day.

(The UX of e-book readers may get there one day, but it's not there yet.)
I know it's tempting to do the whole ”oh that's a problem over in terrible USA” (a very common european way of thinking) but I'd be careful about it.

Granted I think european police is less violent than US (a low bar), but to say that we don't have a problem with this at all is pretty naive. Just look at how french or swedish police have responded to black lives matters protests for example.
One thing that really improves your experience is storing your data in something that grafana can read. I like graphite, but your mileage may vary.

There are lots of DBs that you can use, including postgres. the flexibility and configurability that you get is outstanding. With the alerts subsystem you can easily attach triggers for bots.

Also having really simple and configurable graphs that look good.
The function declarations are formatted in such a way that it makes you think the prototypes come after.

Solid project, but I suggest you run the file through something like clang-format.
Many teaching faculty are resistant to change because it requires them to learn something. That's the biggest problem. although some boards have successfully switched to teaching python.
Facial Recognition: Last Week Tonight with John Oliver (HBO)
Well, it’s a problem the floss community will have to deal with sooner or later—it feels pretty awkwardly papered over with snap.
Get client public IP address with Nginx