skysight-inc/HackerNews huggingface dataset:
Ironically, your username is one of the neatest Lua[JIT] projects I've seen. https://github.com/malkia/ufo
> I found an italian plum tree growing near my house that I picked clean and saved hundreds of pits from last year.

Don't all plum trees need to be grafted? I was fairly sure that planting most fruit trees including plums from seeds would mostly result in small sour fruits (and in the case of wild plums from my childhood: almost thorny branches)?

I am quite hesitant to ask since you seem to be quite into this and I only have some superficial knowledge about fruit farming but then again we are here to learn aren't we :-)
But afterwards they'd be fine unless their isolation was compromised somehow through for instance arcing. And even in that case, there are ways to stop an arc and leave the system functional (self repair, essentially the coil material evaporates a bit further from the breach point than the isolation material).

In silicon if such an energy pulse would reach the circuitry it would be ruined forever.
An alternative approach is to work through endgame problems. Learning the key different endgames helps you direct the middlegame towards positions you know you can win. There's also something about learning to handle small numbers of pieces well which translates really well to the rest of the game.
I was only thinking of telescopes that currently exist, since it's hard to determine the cost of something before it's built. Inflation and such tends to make a direct comparison a bit trickier— it's not fair to compare JWST dollars spent in 2000 with dollars that won't be spent until 2025. Plus, even though these sorts of things typically end up being more expensive than the original budget, I'm being optimistic :)
Sadly it's not meant as an insult and yet it seems Wells was not able to afford his more passionate sentences a little touch-up. That a feud occurred around writing like this is unfortunate but it's also notable that Joyce was extremely graceful in his correspondence. He demonstrates an open-mindedness that Wells could have used to his own advantage. But Wells seemed strongly captured by his own perceptions and chose to give the finger to what could be called a growth mindset.

Plus it's terrible to tell a friend that you may both be wrong, when they may still have something to say--unless you are ready to be accused of backing out of the entire friendship arrangement. Relationships are all about reconciliation. They're not about subjective meta-narratives which attempt to evenly dole out critique, but from one side. It makes the doling side appear delicate and fearful of their own weaknesses.

Better to listen to friends, ask questions, and present your concerns as if they are third parties to yourself. Otherwise you will end up without friends when you need them most. Wells' own writing was likely gasoline on the fire, but I don't think he knew what he was getting into. Simply admitting possible fault as an entry point to subjective commentary like "BUT you're in the same fault zone with me" is a slap in the face.
Is it just a coincidence that the Eemshaven (eu-west4) datacenter is close to a coal plant then?

I'm pretty sure we're going to close that plant soon though.
Ah, I know exactly what limit you're talking about. I ran into it too.

You can't have more than N local variables, I believe. The problem goes away if you put them into a top-level table.
The most secure work is the work that doesn’t get done. That is to say, if it doesn’t exist, it can’t be stolen. That’s where security above all inevitably takes us, and the defensive guys get to pat themselves on the back and declare victory.
A solution would be that browser maker always check what are the most popular extensions and implement those feature in browsers so you get security and performance. It is more work for the browser maker but you do it for the popular extension (if you care about your users and not about yourself - this applies to GNOME too)
yeah but what are the specific benefits of magnetic amplifiers that you cannot get from SICMOSFETs
The Developer Ecosystem in 2020: How C++ is Doing
He doesn’t like Joyce, what’s so bad about that? I hate Dan Abramov for example, I think he’s the shittiest API writer that ever graced JavaScript (and that’s a wild feat, there are JQuery plugins with more intuitive APIs) what’s the big deal? Some people’s tastes vary. I can’t put it as eloquently as Wells.

Reducers Actions Immutability, three fucking files for a basic fetch call. I honestly hate him. I wish I was HG Wells so I could write a nice well written letter telling him to stop.

I hate Dan Abramov so much, I just had to get it out of the way somewhere.

I figure Wells did too for Joyce.
> Because a marketplace is not a market.

https://stratechery.com/2018/apple-app-store-follow-up-aws-a...

Ben already has addressed this kind of defense.

> What exactly is Apple doing with its (non-)monopoly that is illegal?

See the following article. And note that this is just the tip of the iceberg. You might heard about Spotify v. Apple and the recent Hey situation.

https://www.nytimes.com/interactive/2019/09/09/technology/ap...

Not sure if you believe that Apple is on a safe ground for antitrust issues but Apple doesn't seem to share your optimism.

https://www.cnbc.com/2019/09/09/apple-says-it-changed-app-st...
> The problem is usually not Turing completeness [...]

You're technically correct (the best kind of correct), but jandrese wrote "a complete language", not "a Turing-complete language". You don't need Turing-completeness to create security problems – filesystem access alone does that.

> The former is trivial to solve: add a timeout.

That only solves the termination problem, which is a minor concern anyway. You don't need much time to compromise a system if you have filesystem access. No "bugs in the parser implementation" needed.
HSMs make your storage more secure, but don’t really solve the problem of people having to have access to stuff. You can address those issues, but not fully, and it’s much more difficult. I’ve worked in a number of banks where my admin accounts have given me access to things like SWIFT credentials [0]. I’ve always hated having access to stuff like that, but when you start trying to figure out how to fix it you realize that no matter what you do you’re always going to have important assets protected by secrets, and people are always going to have to have some level of interaction with those secrets.

[0]: https://en.m.wikipedia.org/wiki/Bangladesh_Bank_robbery
Isn't it like that for all cloud offerings?
While I'm at it, here are Engelbart, Nelson and Howard Rheingold chatting casually over dinner. I really love this very much. These are two of my favorite bookmarks.

https://www.youtube.com/watch?v=zCLCIw-HSJc&t=221

(I set the start time to skip Rheingold's introduction but feel free to go back and view.)
Is this before or after their new E2EE plans?
> I can see what you meant, but I initially thought this was trying to say that a pointer declared with a single asterisk could only be dereferenced once and never dereferenced again afterwards

Ah, haha, I see! You're right. This could've been me back in the day.

> Also, I think low addresses aren't used for various reasons, but I believe the kernel is stored in the top, high-address region of the address space.

Ah, yea, I was foggy on this.

For what reasons aren't they used then?
Totally happening in the corporate world. Rewarding employee mentality while hoping for not employee mentality.
You agree? 13 worst affected corona countries
Given that we're on HN, I distinctly remember reading on a comment that the new Edge supposedly dials home to MS and is not really secure either.
This is the perfect comment :)
> Start with MMC clock frequency at 52 MHz instaed of 400 kHz.

Whoa there!

Spec violation. Not guaranteed to work. Might work some days but not others.
I also have only superficial knowledge, but I think you would have to first obtain the "wild" version from the pits, and then graft it to produce edible fruit.
It could block ads with monads!
We've made a tool for graph calculations on tabular datasets where the results update immediately on changes. Check it out https://easymorph.com. (Disclaimer: I'm the founder).
The main issue people complain about is that it takes months for Google to review extensions and they shut down extensions randomly without giving reasons, not the amount of permissions.
Firefox devs tools are great. I just use Chrome to play the occasional Stadia game.
Why is configuration performance so important to the application?

Sounds a bit like a missing specification for the distinction of load-time and run-time configuration.

Configuration, to me, is something that happens once and not often, and is therefore "something = foo". Update is a run-time thing, and therefore "if something then bar".

Lua covers both of those cases superlatively. Case A, byte code. Case B, same. Just be sure you have "generate byte code" in the right place, C, too ..
What extensions do you primarily use on Chrome (if you do)?

My list (on brave) includes:

>uBlock Origin

>Decentraleyes

>Stylus
>> Do you know what to do?

> No: Engage users

> Yes: Build

So the task are sequential? I was trying to understand how to best do this parallelly.
Potentially dumb question here, but would it be generally possible to create a permissions system for browser extensions that can distinguish between an extension that is actually sending information based on sensitive sources like page content and browser history and an extension that only sends harmless stuff over the network like e.g. asking for updated ad block lists?

I'm imagining something like a sufficiently advanced type system that could tag data from sensitive sources, and force you to use a different API if you e.g. want to put that kind of tagged information in a network request. Though even if this would be available, I suspect there are many more indirect methods of exfiltrating information e.g. if you have the permission to change page content, which are probably very hard to impossible to distinguish effectively from benign stuff.

Some of the most useful extensions need really scary permissions. I don't see any good way to robustly fix malicious extensions than to create a permissions system that would make the scary permissions unnecessary for most cases.

The current system is broken enough that I try very hard to minimize which extensions I use. It's essentially just an ad blocker and a password safe in my main browser. And then a bunch of dev tools in a different browser I use for development, but not for browsing in general.
I hated it the first time I tried. Every seven or ten years I’d give it a shot and decide it’s not worth trying or finishing. But it has its charms for sure, which had drawn me back to it over the years since because maybe I was wrong or not ready.

It was like my fourth or fifth attempt like six years ago (at 32) where it clicked. Honestly love it now.

The trick is to let go of this notion that Ulysses is some kind of schoolboy challenge. You have to let it wash over you, allow the language to intoxicate you mind. You need to be in an altered state where you are more open to symbolism in general.

I think the key to enjoying it is familiarity. There are many balls you need to juggle mentally and it’s hard to enjoy Ulysses when everything is too different to what you’d normally expect from a book.

But start with Dubliners first. See how it goes from there.
That’s horrific and amazing
Bandwagon Effect
Haha, I do view mathematics as "software engineering but then purely for numbers".

I view things like the quadratic formula as little software programs. I view complex numbers as the necessary "software system" to allow for negative square roots.

Other views I have on mathematics look at this perspective and shout "blasphemy! How could you insult such an intellectual pursuit!". But it works quite well for in me when I'm doing math.

I like your lesson. I never saw it that clearly. And with respect to numbers, I don't think I saw this at all.
Wow, cool, that is a really nifty language!

I don't care for the syntax (at all) but I am seriously impressed by the careful design. I've always wondered where you'd need to draw the line between plaintext config files and executable code, and Dhall is much further into "programming language" territory than I would've expected.

*Dhall homepage for anyone else that's interested - https://dhall-lang.org
Along the same lines, one of my biggest pet peeves is rewarding using Metric C, which is used not because it actually correlates with your goals, but because it is easy to measure and get a concrete number. An example would be using lines of code written per day as a measure of developer productivity.
I heard this situation mentioned as big use-case for bitcoin. Is bitcoin actually used to send money back to Africa families?

Also, what is the network you mention? Is this official WhatsApp payment system or some group of stores using WhatsApp as ledger?
> Indeed, E2EE will enable criminals to go undetected. And this is a real problem. However, it’s an arms race that will end with criminals having proper, strong E2EE anyways.

Individual child abusers aren’t part of a monolithic organization with training on how to secure their comms and practice OpSec.

The number of criminals who still create evidence against themselves on unencrypted platforms (SMS, phone, etc) is significant, despite E2EE options already being available. People are even being arrested for rioting after admitting on public TikTok videos to participating.

I think the only way criminals will standardize on E2EE is if every platform and communication mechanism is E2EE by default. Otherwise they will continue to make mistakes or think they can slip under the radar.
Why give away so much composure and relationship capital with a public shaming? Writing is a gift to subjective thoughts and emotions like these. And you can write, but mainly passionately? Don't stop with the soil. Get to the heart. This is what encrypted journals are for. Nobody needs to see your writing skill level, nobody's real-life experience is detonated by needlessly inflammatory words, and you get access to all the feelings and harsh thoughts you want, expressed until finally you break through the other side and start writing your own shit-free API.
> https://i.imgur.com/zZ7UGVW.png

I'm assuming the peaks and valleys correspond to weeks, but why are deaths correlating so strongly with the day of the week?
Yea, I agree. That's why I said there's a lot to learn. Especially also when I think about how things bind, and so on.

When I look at a statement like this, I really have to sit for it and just reason though it a few times.

You might be able to tell: I'm not a C programmer ;-)

I simply self-taught C in order to get some homework assignments done with some security classes. Example: we had to make our own packet sniffer in C. Actually, we had to make all kinds of tools in C.
Agreed. I expect more products released with new interfaces.

BTW current GeForce and RADEON supports DisplayPort DSC that could enable more resolution / frame rate by compression theorically but I don't know any existing displays.
Here are more details about 'X-Client-Data'. I'm not saying it's necessarily a good practice (and maybe it's something they should stop doing), but I wouldn't call it "spying". It's analytics, used to test new Chrome features.

https://9to5google.com/2020/02/06/google-chrome-x-client-dat...
Mine is a moonshot non-profit in the edtech space. And it is at an ideation stage. Not sure if that will be acceptable. Would love to get some feedback and or mentoring though, if not funding.
>What's wrong with all of the simulators that already exist?

They're displacing the real thing.

I like incredibly accurate physics/chemistry in reality.

There's so much room for improvement in some fundamentals that would lead to more ideal simulations, seems like some of today's simulations are a bit premature.
If people are infectious for some finite number of days, f'/f will always tend to zero, even if f' stays constant.
Wow talk about revisionism!
Chrome was meant as a hedge against IE and lesser so against Firefox. Microsoft owned the desktop with Windows and could easily shut Google out. See the reason surrounding the creation of the Google toolbar.

Similarly Android is a hedge against IOS and mobile search.
I hate Chrome with a passion. But: Annoyingly, Firefox hides the the call stack for some error messages which is especially painful if these come from a framework. Chrome never fails me to show the entire call stack.

As well inspection of request and response content is painful. Mouse scroll doesn't work and the horizontal bar shows only up when scrolling all the way down.

Finally copying and pasting any header content is abysmal. I never get it to work.

I use Firefox, even for development because I reject any support for Google but I wish there weren't these usability issues.
100% agree. Same with :any in typescript. When it comes to bugs... I tend to think that a good configured linter is more important than the degree of the type system. It’s nice to have a strong type system but people forget that a lot of programmers are bad and a good type system won’t change that fact.
TF can compile to optimized C++. When you use PyTorch with TPU, it'll internally use the TF XLA backend. If you intend to deploy on mobile, TF is easy and PyTorch is pain. But TF has obscure bugs and error messages.
The goal is to not configure the MMC at all in Linux, but just rely on the bootloader has already configured it.

Btw, where can I find the spec? And where in the spec can I read about this? Is this true even if we know the MMC supports 52 MHz?
Using Frida for Windows Reverse Engineering
That's marvelous! "It was like having Galileo and Newton over for dinner, as far as I'm concerned."

I did go back and view Howard's intro and it's very nice as well. His love shines through.
Apparently, mined lead ore is already contaminated with Pb-210[1] from the natural U-238 decay chain, so currently the only way to remove the Pb-210 is to protect the lead and wait a very long time for the Pb-210 to decay naturally

[1]https://www.mdpi.com/2075-163X/8/5/211/htm

If there was some way to get uncontaminated lead ore, perhaps from deep inside an old ore vein, then it would be very valuable, if it was possible to refine it without introducing Pb-210 contamination
Let's say you want the user of your service to be able to write and upload a configuration file, but you specifically don't want them to be able to execute arbitrary code on your server(s).

It would be nice to be able to statically verify that their submitted configuration "behaves nicely", but the moment you introduce any kind of Turing-complete configuration language all guarantees go out the window because the problem becomes literally undecidable. [And then you try to mitigate it by imposing limits like "kill the parse process if it takes longer than X seconds or uses more than Y megabytes of memory".]

The advantage of, say, a simple .INI file for configuration purposes is that the time required to parse it (and storage space required to remember what's in it) is O(n) where n=size of config file...

EDIT: so take the example Lua file from the original post but change the loop limits from "32" to "16777216":

for i = 0, 16777216 do
for j = 0, 1677216 do
add_body({x = 20 * i, y = 20 * j, mass = -0.1, rad = 2})
end
end

Congrats! Your 128 byte long configuration file now requires 2^48 iterations of the inner loop to parse and generates 2^48 instances of the "body" object. That's an expansion factor of at least 2^41 generated bytes for every byte of input, which is a shockingly bad Denial-of-Service attack against whatever is responsible for parsing the evil config file.
It's being sensitive to how words can undermine entire classes of people. Growing up kids used to say "that's so gay" all the time in school. Did they literally mean a shoe was homosexual? No, but they're using a sexuality in a bad or derogatory sense. And that sucks and is wrong, and being gay, it was offensive and destructive to hear. Luckily people eventually shifted away from it with some awareness.

This isn't the same thing as a government censoring opposition or 'insults' to the dear leader.
Why is DoubleClick in the whitelist?
>It would require a Herculean amount of effort for an unclear payoff, unfortunately.

Yup, almost like a virtual moonshot or something . . .
> Ted might do an AMA on Hacker News

Yes please!
I'd expect that starlink could be disabled within a few hundred miles around green banks etc. Would that help?
They could but just like we don't just have this same sentiment towards electrical companies. Where we don't say hey use a smaller utility company because its so difficult to bifurcate a natural monopoly like that.

Also you'd also need to remove article 230 because they need to explain why they are doing this if they are actively doing it to make sure its not prejudice. I feel like the democrats politicians and the super left people are ok with it now but this opens the door for them to be effected in the same way if this isn't monitored, but they are thinking short sighted.
Unfortunately that would also remove the reason that people are using the extension in the first place.
It appears you're trying to be balanced, but if you invert everything you wrote, that would be mostly the truth.

Disney actually decides what copyright law is, not Congress or other rights holders.

Currently, if a small song copyright owner doesn't cross every "t", a commercial organization just keeps their royalties until the small owner sues, wins and has each corporation add an entry in their database of owners. They still won't get back royalties, but they will get future - years later, of course.

I don't see any complaint by the Senator for that behavior.

The only owner that has substantial rights and the ability to collect at this point is the songwriter, because they have powerful laws in their favor. The performers are lucky to get anything, really, from any streaming platform, including Youtube.

And corporations who aggregate performance revenue collection, and "forget" to cut a check to the actual owners. (No practical penalty for not paying the artist.)

What I tell songwriters is to register your songs with Songtrust and DistroKid, and don't sign anything with anybody else. Actually, give the corporate lawyers the finger, since their whole goal is to steal from the artists.

https://www.songtrust.com/

https://techcrunch.com/2013/10/10/philip-kaplan-officially-l...
It's very common on smartphone/tablet. Less common but also on PC.
It falls down exponentially! Just look at it. If you do a bit of math you will see that f will just converge.
You can start a lua VM with an empty environment (basically no standard library).
>Also, Ubiquiti has their own issues to sort out as well.

I also own a UDM Pro, and this is an understatement.
You could say it guarantees initial reproducity -- the docker image itself stays constant -- not that it guarantees complete reproducity. I would imagine nix is the solution for that goal, though I don't know nix well enough to be confident.

But an app built in a docker container is not guaranteed to have reproducible builds, because docker doesn't say anything about what happens beyond loading the initial image
So, if I were to write in a private encrypted journal about a brogrammer that hates Dan Abramov, I’d have him risk public shaming (because he recently broke up with his girlfriend, or something awful like 50 karma lost for attacking a paragon) and reply to you with:

‘Yeah but I want Dan Abramov to know he stinks, don’t care if he works for a FAANG, can’t big O your way out of writing a sensible API’

Then I’d have him close the browser tab, and describe the trite emptiness of the act.

So in so many words, at some point, you must say what you mean.

Think Wells needed to let people know ‘hey, that Joyce guy kinda stinks’.

Wish I could write better, I’d be writing those letters all day. Surprised Wells restricted himself to just one.