skysight-inc/HackerNews huggingface dataset:
I found a bug. I'm on Firefox on Windows and when I open genres in new tabs, they dont open properly. The new tab just shows the top of the genres list, even though the url is full of information regarding which genre I clicked.
> EMP-proof

This detail caught my eye. Very cool.
No, they don't. You can provide them with symbol files for your application so they can symbolicate crashes on your behalf, but this isn't required. (Interestingly, there are teams at Apple that reverse engineer applications for compatibility reasons, and the occasional "someone got an obfuscated binary past app review and we need to know what it does".)
FYI: for people in the know, what Stallman wrote 100% made sense at the time, and we just faintly hoped he was wrong.

Of course, anybody familiar with US IP law knew that hope was very misplaced, as a single company like Disney can lobby for federal copyright law to be rewritten at will - it has been extended to 100+ years at this point to make Mickey Mouse eternally exclusive.

What blind-sided even cynics are the non-competes on hair stylists and sandwich-makers in the same town. These expose the true nature of business owners to enslave their staff at every opportunity.

Amazon's lobbying to retain non-competes for professional staff (salaries over $100k) in Seattle is another indicator.

(I have chosen to work in California for that reason.)

Make no mistake, corporations are waging a war to control the American population, who don't even know they've been targeted yet. One of their most effective weapons is arbitration of both employees and consumers. After all, who pays the arbitration firm?

The only potential good news is that when courts get fed up enough, they sometimes toss out one-sided non-competes and ToS links.

This happened in Canada a few decades ago. Insurance companies wrote more-and-more clever policy language until the courts ruled that simplified language was required so that the average consumer could understand the meaning.

(Note that the courts in Canada are scholarly and experienced appointees, rather than lobbied and elected officials as in the US.)
Thanks, I’ve been trying to do this, I’m slowly moving some of the services to GCP, and thereby getting my hands dirty thanks for the suggestion, I’ll try to look for more opportunities.
All big strategic companies are supported by their respective governments one or the other way. Nothing is wrong about it. And the Government will have their cut in return eventually. I think it helps Joe Schmoe in the end as well.
> I didn't accuse, I simply asked a question.

Yeah, in exactly the kind of snooty passive-aggressive way that climate-deniers are just "asking questions". I didn't want to come out all hot at you and gently encouraged you to consider having more empathy, but here we are, down a spiral of your increasing defensiveness and hostility. This is now totally about how you feel slighted for being challenged on your victim-blaming.

> Empathy is not the same as agreeing with him

It's clear that you don't agree with this person and already have pre-formed judgments, and that constantly surfaces as outright incredulity. It's difficult for you to process how infuriating that is for minorities who do experience racism to have to fight their way through a lack of shared experience and a wall of denial masquerading as "asking questions". Asking questions isn't "listening", it's just pushback. Racism is real. Listen to people to experience it.

> I'm just trying to get people to stop jumping to conclusions

Please, could you just let people who are close to the situation talk instead of putting yourself in there and muddying the waters?
Sorry to hear this. I hope things are OK, I’m trying to find it too, failing almost everyday.
The Kingdom of France 1791?
Monaco in 1793? Prussia in 1794?

When do you want to start this? Maybe 20th century instead? The October Revolution in 1917, Poland 1932, Denmark 1933?

Oh you're talking LGBT protected class discrimination for employment! Pennsylvania, 1975, Wisconsin 1982?

Maybe you're talking about Bostock v. Clayton County(2020) which got to the SCOTUS because a private corporation, in 2019, fired an employee for being gay. That's how it got there, a private company not respecting LGBT rights.

So maybe you mean the courts? When was the first case in lgbt's people's favour? One, Inc. v. Olesen 1958. Nineteen fifty eight.

So yeah, probably government. Feel free to move the goalposts around if you want. I'm pretty confident on this on wherever you decide to place them
Ask HN: What are your tips for improving online communication?
These days a lot of work is done through video conferences and meetings.

What are some tips that online meetings are less painful for other people? I believe programmers should also put some efforts on speaking well.
The obvious answer is practising, but what exactly? Stick to ideas on verbal skills, presenting and clarity on the online meetings.
I've seen "Patrick Henry Winston - How to speak" and "Edward Tufte - The cognitive style of Powerpoint".

Any other seminal resources and your own tips on speaking and presenting in the online systems?
Depends on the type of security researcher -- some profit from it!
Bytecode is not required for applications targeting iOS. And I will note that the latter is fairly difficult to actually check in principle, and it's mainly enforced (actually, in certain cases it's not ;) ) in practice by the threat of consequences if they catch you doing it rather than testing.
You can't patch Snap to not care because the safetynet process is (roughly) like that: The App asks the Play libraries whether the phone is okay. This is verified (in part) on the Google servers, so the Snap servers can ask Google whether a call came from a non-tampered phone. The client can't do anything about it, except tricking google into believing the phone is not tampered with. Which is notoriously hard, because nobody knows how the process really works.
I think pwm is fairly rare these days. I have two dirt cheap AOC 24" 1080p monitors (about $150 each) and they don't use pwm.
Huh, thanks. I thought they reviewed the source of all apps to make sure they aren't doing anything naughty.
I would think Airbnb has the same problems with content, abuse, and fraud, except it's 100x worse because it's happening in real life.
If I understand correctly, the author presents a case for securing DNS by moving away from a shared directory toward application-specific directories. At the end, he takes a sharp turn to worry that such a move will tear apart the openness of the internet. I suppose an analogy is moving from phone numbers, with shared telco-managed directories, to chat apps managing their own directories. You can’t contact me on Instagram with my HN handle because they don’t use shared directories.

Ok, but there are more important reasons. Walled-garden directories is a symptom not a cause. For that matter, SNI and path-based load balancers are examples of the application-level address resolution overlay already in practice. Those techniques merely implement, not drive, balkanization.

Basically, application-layer DNS doesn’t pass the “but for” test. As in, it is not correct to say “but for application-layer DNS, Facebook/WeChat/Google couldn’t build walled gardens. With it they can.”
It's more a convenience thing for the tenant. Landlord can perform maintenance without the tenant being home, and door guards are common otherwise. Plus US laws tend to give landlords more power.
Not by default, it doesn't
Azure Ad Managed Identity: Connecting Azure Web App and Slots with Azure SQL DB
___________
| ooo . |
| ooo . |
| ooo .o |
| o . |
| oo .o |
| o . |
| oo .o o|
| ooo .oo |
| oo . o|
| oo o. |
| o. o |
___________
I'm dubious of some of these -- the code signing thing strikes me as not that compelling for reasons other comments have already pointed out. Others are very valid.

But more than "how are we doing vs Apple and Microsoft?" I'd kinda prefer to set the bar a bit higher. Desktop operating systems (all of them, at least with actual users) are just completely architecturally backwards for the reality of our modern security landscape, and what users need from their system. Protection boundaries are still mostly between different users. for most systems that's borderline useless, as there's only one user. Meanwhile every app runs with the full authority of the user and can do anything they can do.

Smartphones are a little better; Android equates "user" with "app" which is at least vaguely useful. But the permissions you end up with are still too coarse grained.

There are better designs out there. For example: web pages can ask the user for a file without getting access to everything the user owns (or at least in the case of Android, all of their files). Why can't native apps do this?
Depends on the kind of work it is. A janitor doesn't go around telling you to make a mess so they can remain employed…
Context for why someone would want to burn a police car?
I'm fairly sure Lambda functions have always been part of javascript?
I’ll pile onto this- your security process also has to be user friendly. No security tooling in the world is going to protect you if it’s so hard to get a new product out the door that business users actively start subverting the system.

I’ve had US government customers take 3 months to review a CR to connect two systems. I’ve been tossed non-sensical documentation and told to fill it out without any help, a process that can take literally weeks of person time. And I’ve seen security teams cripple critical business functionality for, at best, marginal security gains.

In environments where things like the above are happening you start users and even business organizations rebel, they start operating outside of the it systems (txt message driven shadow business processes are common) and IT broadly and security specifically begin to be seen as the enemy.

How to fix this? Well one, i think security teams really need to focus on making themselves aids to everyone else rather than traffic cops. One model I like is to embed security team members in any development process or acquisition effort as team members, with the expectation these v-team members actually deliver work, including advocating for the team with in the security process and creating any security artifacts. That’s expensive, so they’ll have to be some cross billing set up or something, but it’s worth it IMO.

Regardless, security that reduces an organizations ability to do its mission runs the risk of getting avoided altogether.
The Healing Power of Birdsong
barf barf barf aaaaand barf.
In-board motors, one per wheel, have all those advantages you state for wheel motors, but none of the disadvantage of excessive unsprung weight. Additionally, a bad pothole means only replacing a cheap wheel and not an expensive motor.

Steel wheels on a 112kW car do not weigh near 43 kg. Don't fall for the empty promises.

(Random first hit: 23 lbs for a steel wheel: https://www.amazon.com/dp/B01MA3OFTN)

They'll never be cost-effective for freeway-capable cars. I'll make a long term bet on it with anybody.

EDIT: your linked study says you can add features to somewhat make up for the excessive unsprung weight. Sure, which is why I'm pointing out not that it can't be done, but that it costs more for the same performance and always will (at Earth gravity and freeway speeds).
Reminds me Stripe, the payment processor, who wrote a custom internal social media network: https://stripe.com/blog/stripe-home It seems many tech companies have trouble de-engineering themselves and get stuck in a loop of endlessly rewriting/migrating/redesigning because they have a massive technical staff all trying to prove their value. Google definitely suffers from this. No glory in fixing the existing chat app, so just write a new one with new problems, justifying the creation of a newer one etc. Microsoft has it even worse because they can't delete any of the old interfaces for compatability reasons, so they just pile on layers of parallel systems.
The use of Roman ingots to investigate dark matter and neutrinos (2013)
What about firejail?
The problem is usually not Turing completeness but complexity, which invites bugs in the parser implementation. (The former is trivial to solve: add a timeout.)
Great find!
Another interesting and rather different take on Finnegan's Wake is Terence McKenna's FW talk : https://www.youtube.com/watch?v=CdXBulkqH5s , worth listening to.
International digital platform tax plan in disarray after US warning
To be honest I don't know. I'm not involved in the decisions or thinking about that about YC, but I can connect with the people who are.
Growing up, my grandmother would often tell me I needed to be "twice as good as the next best white person" to be taken seriously. I resented the premise behind that statement but she was not wrong.

It's a feeling that doesn't go away & often compounds on imposter syndrome.
Does their E2E even matter if they are using flawed encryption?

https://theintercept.com/2020/04/03/zooms-encryption-is-not-...
Couple of links:

https://store.level1techs.com/products/kvm-switch-usbc-model

https://www.amazon.com/Sabrent-2-Port-Type-C-Delivery-USB-KC...

https://www.blackbox.com/en-us/store/product/detail/usb-c-4k...

(From: https://www.reddit.com/r/UsbCHardware/)
Depending on the margins length, reading on a kindle can be pretty good. If there are diagrams and tables that won't be convenient.
Most usable alternative front-ends for such services are usually just parse web API or even plain html in case of YouTube. Snapchat don't have any web app so parsing it is tricky and Instagram provide only limited set of features on the web.
Writing old-style pure code to do changes in a deeply nested structure is cumbersome, both to write and read. Eventually every language will find nicer ways to allow programmers to express these mutations.

JavaScript doesn't provide a nice way to extend the language syntax, unlike some other programming languages. So most DSLs end up looking like imperative code but do pure mutations underneath. I understand, for the reader it's confusing, because unless you know that it's a DSL you never know whether the mutations are pure or not.

Compare that with Haskell, with its support for custom operators, allows for some quite succinct code to express deep mutations (cf. lens library)
To his comment about truly disabling Font Smoothing on Windows I think that, in addition to disabling ClearType, there is also a font smoothing setting to turn off as well. You can disable it by:
* Open System in the Control Panel
* Click on Advanced System settings
* Go to the Advanced tab
* Click on Settings button under Performance.
* Uncheck the box for Smooth edges of screen font.
* Click on Apply
OP has been putting out a series of useful tools lately [1] and been very transparent about his process on Twitter [2].

Seeing this thread derail into a discussion about PHP is pretty annoying. It seems to happen to anything PHP-related here. Do that all day long please, if someone comes here saying PHP is the best language... but he created something useful and open sourced it - that deserves more than toxic bike shedding about your favorite toys.

[1] https://beyondco.de/software

[2] https://twitter.com/marcelpociot
Probably just a voltage regulator, a clock source, reset pin logic, a couple ROM chips (2 8-bit wide chips or 1 16-bit wide), some static RAM, a PAL/GAL/74xx logic for address decoding and chip select pins, stuff to deal with the multiplexing, and whatever input/output you want (bus buffers for parallel I/O, off the shelf UART chips, etc)

I’ve only done it with the 6502 and Z80, but the 8086 shouldn’t be too much harder. There are plenty of resources available online for those two chips that you could adapt!
Interesting bit of trivia on why the frame rate is '119.88' instead of 120: It's using the NTSC/ATSC frame-base of 1.001.

Ever since old TV standards moved from black and white to color within the US, the timing has been "frames per one and one onethousandth of a second". So 120/1.001 = 119.88.

Was a neat trick in the analog days to maintain compatibility with the older black and white TV sets. Fastforward to the digital age and that fractional timing difference makes keeping audio and video sync an absolute nightmare.
Not parent poster but, as somebody who works on macOS, my problem is that the switch between the high-density laptop screen and a “pixelated” external one is extremely jarring. At one point I had an additional, average Dell monitor and every time I moved my eyes I cringed. After a couple of days I just removed it - better to have fewer screens than forcing my eyes to readjust every few minutes.

So yeah, if your primary device is a modern Mac, you really want a high-res, high-density screen.
Why not just wire the Linux box to the car battery? Most after market dash cams do this to capture accidents during parking. Certainly a low power device is enough ?
The way to test this is to follow all people that donate blood.
I think the author is generally right (especially about sandboxing!), but picked a few funny examples:

* Windows page signing is a feature of Authenticode, and applies specifically to "high integrity" kernel drivers. It's basically a niche of normal code signing and should be treated as such.

* Windows just (as in, within the last 6 months) got hardware-backed control flow protection, via Intel CET. They had to add a new debug type (`IMAGE_DEBUG_TYPE_EX_DLLCHARACTERISTICS`) to the debug section to make space for it in the PE format. It'll probably take a few years to become popular, assuming that Microsoft hasn't badly broken it the way they did RFG.

* Modern iOS/Apple mobile hardware is generally a poor contrast: it's homogenous in terms of CPU features in ways that Linux can only dream of, and benefits from Apple's walled garden approach. Linux distros can barely get people to fetch automatic updates; getting them to buy CPUs with hardware CFI features (a la Apple's PAC) is a pipe dream.
Some LG's cheap 4KTV have RGBW panel that's not suitable for reading text. Should check review and spec even it came from big brand.
The popular meme section is totally overfitted. It even reproduces the artefacts of the Jpeg compression on the surprised pikachu.
About 15 years ago there was a series of papers by Andreas Gal (then future and now former CTO of Mozilla) about precisely this aspect of JIT-compilers design.

If you have a program and represent it as a series of VM instructions, and you try to jit them individually the kit compiler has very limited ability for optimization. Plus, after each such instruction the execution comes back to the piece of the interpreter that selects the next instruction to execute: essentially a giant switch statement that makes branch prediction on CPU very difficult and inefficient.

The alternative is to not only jit the instructions but also embed pieces of the interpreter between them so that the compiler can see how those instructions are connected and generate the code for the whole sequence of them. This the compiler can make better assumptions about the code and optimize it a lot more.

This work eventually made it to all sorts of virtual machines. Adobe used it for Flash, Mozilla for their SpiderMonkey javascript engine, Google used this design for early versions of Android Dalvik VM.

PyPy uses it, too. That's why they call it a meta-compiler. It compiles pieces of your code and pieces of its own interpreter together to produce the more optimized binary.
#1 I was aware of the flaw in legal system. But the flaws I know was that the Chinese legal system was ineffective, inefficient, and quite a bit corrupted.

#2 I was not aware of the details of harassing on corruption suspects' relatives.

#3 I think it was reasonable to not able to link these 2 facts automatically together as self-evident.
I had the job of repairing some of these. They were made by Westinghouse in 1964 as part of a control system running an 6 stand rolling mill. The nice thing about them is you can have several inputs, all electrically isolated from each other (separate sense windings) and they worked all the way down to DC, which surprised the heck out of me.

The driver was a 10khz square wave, so the frequency response was DC to 1khz... fast enough for control loops.
John Collison – Growing the Internet Economy – [Invest Like the Best, EP.178]
A few bits of deep JavaScript that I’ve learned from Deep JavaScript:

– The % operator calculates the remainder, not the modulus, which makes difference for negative numbers.

– Constructors can return a Promise.

– Function names are stored as the .name property.
There's more info here on their relationship: https://www.brainpickings.org/2016/03/09/henry-james-h-g-wel...
Yes, but that's not a matter of "just add[ing] some address lines"; it's a matter of adding additional bits to the registers (and probably the ALU and internal data buses, but the registers are the limiting factor: if you don't have 32-bit registers you can't have (32-bit) flat address space). Even if it were "just", it would be "just add some register bits".
function () {}'s have been there forever, but () => {}'s have different semantics and are somewhat new
You're either exponentially growing or exponentially shrinking. (some) People are being more careful or wearing masks, which probably has a bigger effect on superspreader events than just "herd immunity". It slows the rise, but that doesn't mean that without intervention you have escaped the pandemic even though it was tamped down quickly.

I agree that CA (especially NorCal) is probably over conservative... but only because there is so much travel that it doesn't matter if they get to zero, when a few travelers form Arizona, Nevada, or LA (ignoring air travel) will bring it all back in a jiffy. What is likely to be the real boom is when kids go back to school... most of them won't get too sick, but most of them have parents or teachers who will. That's your real second wave when everyone is already tired of caring.

Remember, a guy can have unprotected sex with a lot of women before anyone notices they're pregnant. It's probably 3 weeks from infection to ICU and 5 or 6 weeks to death so looking at deaths or even hospitalizations only gives you informations so delayed it's useless when the doubling time can be 3day (and even when it's 10 days). You're up 10x before you know it...
Anonymous functions indeed have. I think he means the arrow function syntax.
Very nice article. Great piece of work.
There are commercial products that largely automate these techniques through metadata. See Arxan.
A QR code on paper has the benefit that it lasts centuries
But why? An EMP would still induce energy into the coils, largely disrupting operation, no?
Yes, if you have constant inputs, it will produce mostly constant outputs (timestamps, etc).

But once you start getting time differential and caching, you run into... if not bugs, faults - your cached image came from a month ago, apt is now invalid. Sure, I should've used a private dpkg repository, but I want the side-effects from all of those.

A docker image I built today, is very likely to be ostensibly the same as the one I build in five minutes, but it doesn't guarantee that because its cache is at the image-level and the externalities (see: every possible step that isn't an ADD or COPY) is variadic.

It does a very valiant attempt at consistency to be clear, and I have my own gripes about it, but it's not like it creates a new planet from which technology can be built upon; It's more like creating a moon on which you can build a base, but you're still subject to the orbit of the earth.