skysight-inc/HackerNews huggingface dataset:
Hi everyone, Daniel here (one of the authors, I am the PhD student in the video). Great to see the paper submitted and discussed :-)

Sorry for being a bit late to the discussion, I will try to answer the questions in detail that were asked below.

I want to clarify one misunderstanding that seems to come up several times, namely the distinction between "host security" and "security of the WebAssembly program itself". WebAssembly does have measures and a good design for host security. E.g., in the browser, WebAssembly programs are run in a sandbox (just as JavaScript is), and writes inside WebAssembly's linear memory should never affect values outside of linear memory (e.g., VMs insert bounds checks when reading/writing from/to WebAssembly pointers). Those techniques protect against malicious WebAssembly binaries, which is of course important in the Web.

Here, we look at a different side of WebAssembly's security story: What if the WebAssembly binary is vulnerable and gets fed malicious input? In this attacker model, we can at most do what the host environment allows us to do. But especially for large WebAssembly programs with lots of imports, or WebAssembly binaries for standalone VMs (outside of the browser, without a tried-and-tested sandbox), this can still be a lot of attacker capability! And when we look into the protections inside WebAssembly's linear memory (not between linear memory and host memory), we find that there are very little. All linear memory is always writable, no stack canaries, no guard pages, no ASLR, no safe unlinking in smaller allocators etc. This is worrying as more code gets linked together into a single WebAssembly binary.

If you have any further questions, I am more than happy to answer, here and also via email. Thanks again for the interest!
I'm with you, except I kind of love those videos. The plywood fabri-cobbled infinite energy pendulum that will be generating boundless power "just as soon as I get the friction down" always looks so cool! The enviable commitment to craftsmanship of the backyard free energy crank ends up producing beautiful, relatable work.
Everything you say is correct if it was Revlon's money, but it wasn't. So even if Brigade delay long enough for a restructuring, Brigade still won't be able to keep the money. They are independent events: 1) unjust enrichment is Citibank vs. Brigade. 2) restructuring is Brigade vs. Revlon's other creditors/investors.
yes, i find it's a useful antidote to the existential fear of death
> Does anyone else have any experience updating and rewriting old mainframe batch processes to newer systems and architectures?

A fair bit and key is that the business process and understanding of all that is more key to getting a good transition over anything else.

The other key is small chunks, identify aspects that can be shifted across bit by bit - reports that are using daily data can be a datawharehoused data affair with your reporting system tapping that - that opens up tools for the the various departments to do ad-hoc reports by themselves without suddenly spiking the key-business loads.

But so many avenues and aspects there is no simple list to go thru, as each one depends upon the set-up and more so - business logic.

So I'd take a COBOL programmer who knows the bushiness over a top-end java programmer who does not know the business for a migration project as be easier to teach the COBOL programmer java than it would to teach the java programmer the business logic as would take sooo long and to learn all the nuances and what needs to happen when things go wrong and what is priority and the dependencies. Alas many management and project types will see a glossy top-end java programmer and pick them and ignore their in-house talent all too often.

However - batch stuff is maybe the easiest area to work upon - less users in the equation and with that - less variables to go wrong ;).

Mainframes are also not just large legacy number crunchers - the whole aspect of resilience and fault tolerance goes much deeper than ECC memory, RAID and dual NICs and PSU's. Much deeper and that is why they have up times above and beyond your X86 server class. This with database and messaging systems equally tried, tested and robust. Which gives many factors to work upon.

Though as always - business logic and process along with legal requirements and other constraints for data-flow are key and certainly flowcharting that all out and the dependencies would be key to have anyhow and essential for any migration.
>Germany is still very troubled from the Stasi times, I can see how this issue would receive a special place in the hearts and minds of the German people.

Ironic that the Bundestag MPs who nominated them are from Die Linke, a successor to East Germany's ruling party that ran the Stasi.
So I also googled "hire more men" and I got on the first page 'should schools be trying to hire more men' and the first return was 'small companies hire more men to avoid maternity burden'.

So I don't know how this proves anything either way.
Serious question: what are the 'far-left' analogs of QAnon, Pizzagate, and the anti-vax and flat earth movements?

I'm sure it's just my bias, but I can't think of any right now.
The Schrodinger equation has no random terms. Accordingly, quantum mechanics isn't probabilistic.

If you take it literally, it describes a universe which constantly splits (from a classical perspective), resulting in apparent randomness because you only remember one branch, but you exist in all of them. That's many-worlds.

The pilot wave interpretation adds "Also, only one of them is real; the rest get 'computed' by reality, but any people you think it's computing are philosophical zombies."

The Copenhagen interpretation states that all but one branch spontaneously cease to exist once a physicist looks at it. More or less. Really, just anything that's sufficiently coupled to the environment; physicists are a sure way to ensure that. The choice of which branch remains is random.

Nobody really believes the Copenhagen interpretation, but it gives correct predictions so long as you don't try to explain why any of that should happen.

... Mostly. There's a cottage industry of trying to prevent decoherence in larger and larger objects, which makes it look less and less reasonable as the list of exceptions grows.
They do cover this in their FAQ.

If you are used to it, landing unexpectedly is quite undramatic. This can happen if you foil at the lowest speed limit, or if you attempt to cross a wake or seastate that is beyond the capabilities of the boat, which is approximately 1 meter of wave height.

Water is fairly forgiving when landing unexpectedly at the speed at which the Candela Seven can operate, although you might get a bit wet.
Your comment assumes the entire purpose of a (nearly) sealed mask is to protect the wearer from incoming droplets or particles. I don't understand where this ignorance comes from; it's been widely known and repeated for some time that masks do much more to protect others from infection from the wearer. There's only a small amount of protection for the wearer from infection from others.

An inhalation valve preserves the mask's primary purpose by closing off during exhalation. It gives up a small amount of protection for the wearer, but obviously a lot of people aren't interested in that anyway and refuse to wear masks. With an inhalation valve they could at least protect others.
yeah, i guess so.

Look, I can appreciate art, when the intention and meaning is legitimate - that is up to the audience to judge for themselves. When it's random crap being monetized as art (very pretentiously), I can't get behind it.
From CDC on antibody tests:

A positive test result shows you may have antibodies from an infection with the virus that causes COVID-19. However, there is a chance a positive result means that you have antibodies from an infection with a virus from the same family of viruses (called coronaviruses), such as the one that causes the common cold.

https://www.cdc.gov/coronavirus/2019-ncov/testing/serology-o...

I have not read enough on this specific NYC testing to know for sure if they control for that somehow, or if controlling for it is even possible. Seems like it would be a factor, though.
Not crazy about that. I do effectively randomize the file names played from the stick.

As stated elsewhere, I don't really want the 'smart' part, but the screen is large, good quality and was relatively inexpensive.
That article made my head hurt, then it made me a lot sad, then very angry.

I can't tell if these people have just lost their minds, or if they are actually racists who are posing as anti-racists in order to undermine the efforts.
> It makes sense that the universe just bounces instead of 'coming from nowhere'

This is why people are getting tired of scientism. Instead of being unbiased, some so called scientists are putting dogmas ahead of their observations and pushing for an agenda under the guise of science.
> 20% of the African population is dependent on food aid. There are now more Africans living in Poverty than at any time in history.

> How much of our agricultural bounty is sent as food aid, and serves to create only more hungry mouths?

Also, I've read that such aid basically kneecaps the local economies. A large fraction of the local population is employed in food or clothing production, and the aid ends up just undercutting them and increasing unemployment (and even more dependence on aid).
Thankfully there are very strong incentives for audit companies not to f-up. They themselves are not audited and are not public. Their reputation means a lot to them.

With this situation, there is a reasonable expectation for EY to lose clients. Partners will also face some consequence. Most likely they will be let go and removed from accreditation by CPA (in the US). There are several high profile cases where partners get sacked[0].

[0]: https://www.ft.com/content/5179fb94-fd6c-11e8-ac00-57a2a8264...
Seems like curation and curated discovery would be an easy way to assail google's discovery "feature," which is oftentimes obnoxious anyway.
Rejection with no feedback for a long standing app that excels in its category is a real shame.
Vox Media Agrees to Settle Worker-Exploitation Lawsuits for Millions
It's possible to be self-aware of one's own faults and want to change, but still exhibit the errant behaviour.
Can someone tell me how these large financial transfers work, and why there isn't a time period when the money can be returned? I think an error of this magnitude would have been recognized almost immediately, no?

I mean, if someone does an ACH transfer into my bank account, it can 'clear', but it can still be revoked days later if there was something wrong with the transaction. Indeed, this was the basis for a bunch of "Nigerian Prince" scams where scammers would send money to someone's account, that person would see it 'cleared', then they'd send some larger amount of money to the Nigerian Prince, after which the original deposit was revoked, and the bank account holder was on the hook for the now (usually large) negative balance.
Kinda looks like 432 Park Avenue!

https://en.wikipedia.org/wiki/432_Park_Avenue
I think a lot of people at HN just hate IBM for no real reason. An economy doesn't have to be composed entirely of scrappy startups, bleeding-edge tech (and IBM does do a lot of great systems research). Super odd to me that in such a 'rational' community there's a ton of brand affiliation - something like nationalism reduced to the tech industry.

Ultimately, you actually often need something like an IBM to be around to acquire your small company so you can run away with the money.
"Employment" is actually below 62%, if we look at the percentage of the working age population that is employed. [1]

1. https://www.bls.gov/charts/employment-situation/civilian-lab...
Still buying the old cold war propaganda huh?
KeePassXC has a thing where it asks you before it will give the browser the password the first time for a given URL. I don't know if you can force it to always prompt you, but that would seem a better solution—as others have pointed out, copy/paste and even auto-type opens you up to more attacks.
Good point, for those who need to implement a slick compareFunction for numbers, Math.sign is great:

[min, num, max].sort((a, b) => Math.sign(a - b))[1]

An entirely different alternative is poor man's match:

switch (true) {
case num > max: return max;
case num < min: return min;
default: return num;
}
"...arguing is a choice."

What are the choices?

How would I even know I might like chocolate if I've only ever heard of vanilla?
Do people actually have trouble with this repeatedly, or just when they first learn about it? I started using this implementation of clamp a few years ago, and while it gave me some trouble when I first implemented it, the pattern is very simple, and I got used to it very quickly.

I use Common Lisp:

> (max min (min max n))

Is the difference my choice of language, my personal mental hardware, the amount of familiarity one has with the pattern, or none of the above?
You Need to Be Stubborn?
If you are already including VR into your workout routine, have you considered using VRWorkout [1] (disclaimer: self-promotion). It's a free and open-source full-body workout in VR. Still a bit rough around the edges but _very_ intense workout.

[1] https://vrworkout.at
That's not totally true. Don Trump had a lot of trouble borrowing money, eventually only Deutsche Bank would deal with him, because they were probably the least ethical bank on Wall Street at the time, and even for them there was a lot of internal controversy about working with him. Yes, ultimately he got the loans and was able to stay in business, but there are other shady operators who didn't and failed, you don't hear as much about them.

Conversely, Warren Buffet famously has a "halo" which means he gets favorable terms because people know that doing business with him will reflect well on them.

Different pockets of finance have different norms about who it's OK to screw and how, and even as an investment professional I don't understand the conventions in areas outside of my specialty. So it's very hard to judge as an outsider what is considered unethical and reputation-destroying, and what is considered aggressive business practices that happen to come at the expense of other sophisticated professionals.
If the guy was auditing Enron or Madoff, that explains a lot ....
There are entire cohorts of interested companies and industries that will be looking to benefit from a reduction in Apple's standard pricing policies.

Do we know how / if Apple charges SaaS companies who enable adding seats through their App Store apps? I'm thinking the likes of Slack, Trello, Zoom, Notion etc, I haven't heard that they get charged by Apple?
It's taller (assuming just 10 feet per floor) than the Burg Khalifa. Super tall structures require a far larger base to support against winds, as you go up winds get faster and their leverage against the base increases.
Ah, yes, I still had ISO27001 in mind.
Wow. That's tough. If a working demo doesn't convince them, I'm not sure what will. "See this? Do you want this?" is a pretty simple question. Do they need more evidence of unit- and integration testing? Do they need some/more user feedback before proceeding?

Remember, some people don't listen to reason, some of your wise seed will fall on rocky ground, and don't try to teach a pig to sing. I'll stop now :-) Best of luck again.
It has worked for me perfectly for quite a long time. All my personal documents and photos are synced between an Android phone, my RPi 4 and my laptop. I haven't touched the settings for years. It just always works, 100% perfectly. I don't understand why it isn't more popular.
I wonder what might be the motivation behind that. Sounds like a strange policy if they have confidence in their product. Maybe it's for legal reasons.
Show HN: Feetlot – Never buy the wrong size shoes ever again
BOSTON - In the most comprehensive study of COVID-19 pediatric patients to date, Massachusetts General Hospital (MGH) and Mass General Hospital for Children (MGHfC) researchers provide critical data showing that children play a larger role in the community spread of COVID-19 than previously thought. In a study of 192 children ages 0-22, 49 children tested positive for SARS-CoV-2, and an additional 18 children had late-onset, COVID-19-related illness. The infected children were shown to have a significantly higher level of virus in their airways than hospitalized adults in ICUs for COVID-19 treatment.
I am really curious what would happen if a case like this ever made it to court. Copyright law was designed when copying was a difficult and intentional act; how that computers are ubiquitous, that is very much no longer the case.

Sure, there have been lots of successful lawsuits against BitTorrent users, but the level of sophistication involved with using BitTorrent in the traditional way is high enough that it's pretty clear it's being used intentionally. But if you showed a jury what the purported infringement consisted of with a PeerTube video (clicking play on a video in a webpage, something that almost all of us do every day)... do you think they would convict?

If that ever did make it to court, and someone did end up losing a suit after playing a video, I would hope it'd make the news and that we'd get new legislation that reflects the reality of the internet today.
Stimulus and Credit
Hey HN! I'm Alexander. I love making stuff that solves my own problems.

If you ever ordered shoes online, you know how tricky sizing is. I personally own shoes ranging from size 11 and up to size 13.

Before Feetlot, the solution was to google "SHOE_NAME sizing reddit" and browse through countless threads on Reddit.
There, people would post something like "If I'm size 12 in shoe A, what size shoe B should I buy?"
Being a programmer, I decided to automate this process. That's how Feetlot was born.

The idea is simple: allow people to enter which shoes in which sizes they wear, then use this data to calculate size differences between shoes.

Example:

User 1 wears shoe A in size 10, shoe B in size 9.5.

User 2 wears shoe A in size 12, is looking to buy shoe B.

Based on User 1 data, we can calculate that there is a -0.5 difference between shoe A and shoe B.

So when User 2 signs up and enters "Shoe A, size 12", we recommend shoe B in size 11.5 to them.

Obviously the real world scenarios involve more shoes.

As of today, 12,152 people signed up and submitted 22,848 sizes resulting in staggering 303,139 unique shoe-to-shoe size differences!

What I love the most about Feetlot is that when people sign up and enter their sizes to get a recommendation, they are actually providing value to other users! I love the "I help you, you help me" model working here.
Yeah, I recall College Humor attributing the deceptive FB stats as something that hurt their focus on what was important to stay alive come to think of it.
How is this implemented? Is there a feature in the browser that opens a TCP port to receive incoming connections? If so, how can I switch this off?
Yet another way that legislation creates monopoly-like pressures on the market, and makes it more difficult for smaller players to get in and compete.
> Bellingcat, in collaboration with its investigative partners Der Spiegel and the Insider,

Ugh, one of the former top journalists of "Der Spiegel" has shown they will happily publish anything that fits their readers narrative. It wouldn't be surprising if half of the facts they found were made up to make the story look more epic than it is.
From Fortnite to China, Apple Is Having a Bad Summer
The Sound of Your Colleagues
I don't know, that seems mostly limited to the U.S. who everyone else mostly just pities at this point. I'm in Canada and I wholeheartedly wish the U.S. was faring better. But unfortunately it just comes down to wishing they voted for leaders who exhibited a modicum of empathy instead of blaming it on external factors.

For most of the other areas it's a shared journey. Mourning with Italy because they were hit so early. Being scared for Sweden and the UK in their decisions to try to build up herd immunity. Tribalism is "us vs them", I don't think most people have that attitude for coronavirus. Everyone wants everyone to succeed so that we can all learn from it.
I saw the Anti Racist author, Ibram Kendi, speak. Honestly I wasn't really impressed with what he was saying. Yes, structural racism is a real problem. But the concept of anti-racism just did not feel well defined and just begging for semantic ambiguity that distracts from the point at hand, much like how feminism suffered from allowing detractors to claim it was about females asserting supremacy. Ideological terms move the conversation away from ideas and towards meta-arguments around what the ideology is. I found this article somewhat hard to follow but it's last paragraph seems to resonate with that.

What is anti-racism? Is it:

* taking proactive steps to combat racism rather than trying to avoid taking part in it?

* asserting more power to minority communities that have been harmed by structural racism?

* a means to justify breaking down dominantly white structures even if there's not obviously malicious racial actions at play?

Which of these are good? Which of these are obviously good without nuanced discussion? If it's something like the third one, does it seem like a good idea to call that model "anti-racist" in a way that clearly antagonizes the other party merely for existing?
What if the app is required to "do stuff" during the installation? Ex: informing a related app of its availability, writing an installation date for trial period expiration, etc. You need to do that with a script or auxiliary program, which is invoked at installation.
I'm not sure I follow. Browser extensions aren't simulating keyboard strokes, so they absolutely would save you in that case.
Mainframes (Z/OS) will mainly run batches (most often COBOL programs controlled by JCL jobs) but there is also CICS (https://en.wikipedia.org/wiki/CICS) which runs COBOL (and probably others) "on demand".

My experience with connecting UNIX to Z/OS was not with a real API (HTTPS) but UNIX > TIBCO EMS > something called TIBCO Substation > CICS. It was horrible, mainly because of Substation which needs to translate on the fly between two completely different platforms.
The epic campaign to win Elon Musk’s Tesla factory with memes
> People don't turn out for centrists

Centrists have been in unbroken power since suffrage began in most countries, so this is simply false
I agree that they will just find a work around but I think it still helps. The more of an effort they need to party the less it will happen. The city can just keep adding problems to the party until it becomes too much of a hassle. They could hire parking enforcers for night shifts and when a party happens start towing cars not parked properly. They can set up police road blocks and annoy people and hassle them. I’m not very creative but I’m sure there are enough ways a city can mess with you to deter a party. They can do property assessments and city could argue due to popularity this property is worth even more and tax them. Just sitting idle certainly will not deter them though.
Which, in a highly political discussion, is often equivalent.