skysight-inc/HackerNews huggingface dataset:
I truly hate Trump, but the one thing I agree with him on is taking on China via a trade war. We really do need to use economic pressure to force them to act in a fair way especially with trade and stealing company secrets. I don't think any other president would be dumb enough to attempt this, but even a broken clock is right twice a day.
It's a total comp. I'm not sure why we don't talk about TC especially when it's a public company.
You need to actually read that case. It was relevant that at the time the plaintiffs failed to show that Apple had a single brand market... Epic did not make the same mistake.
Too late to fix a misplaced modifier now.
This is a good article. It covers all the facets of radiation hardening pretty well.

I worked on a radiation hardened processor chipset that had to be very rad hard - total dose, prompt dose, SEU all had to be addressed. That required measures be taken at the process, physical layout and architecture levels while making it performant and low power. Conclusion: very difficult, but possible, and some very interesting problems to solve (like how to mitigate the effects of an SEU in the instruction register at the moment of execution).

I also was peripherally involved with testing COTS memory chips for radiation hardness. They only had a modest total dose requirement. That was messy for the reasons mentioned in the article, like the fact that the manufacturers are always tweaking process and design parameters to optimize for the commercial DRAM market. So from one lot to the next the radiation hardness was unpredictable. Conclusion: costly, time consuming and not sustainable.
No 3rd party apps stores will not guarantee my one click subscription cancelation Like Apple does, for example
Apple claims to have "hundreds"[0] of reviewers (which was notable to me because they didn't say "thousands"). So, we know it's somewhere between 200 and 1999. Just for fun, let's say it's 1500. Again, just for fun let's calculate: 1500 reviewers x $50,000 = $75 million.

So, their (likely) largest expense is 0.5% of their total revenue. Even if I'm off by a factor of 10, the numbers are absolutely mind-blowing.
How to Compete in Cyberspace: An Accompaniment
Well, it's more objective than asking a subjective question.
> could this also not be made easily accessible?

Google anything you want to know. There are quite a few sites/blogs with info about HN. The HN site is lightweight, people like it that way. There is a guidelines page, which you should pay a lot more attention to (I looked at your comments). There's a lot of wisdom in those guidelines. Put more effort into writing good comments. Some of yours are good, but half are downvoted, and it's not hard to see why. Having trouble reaching 501 points is a problem of someone who arrived here yesterday. Focus, for now at least, on what you can give HN, not what you can get. Does your comment leave the page better than you found it? If not, delete it. (e.g. complaints about being downvoted never add to a page) I do that quite a lot! - write a comment, then when finished, see it adds little or nothing, so delete it and move on. It was enough to write it.

Try to avoid the "I'm downvoted because I'm right" disease, which you seem to be developing a strong case of. Consider for a moment that that problem is you, not HN.

Even after you've done that, if you focus on political comments, as you seem to do – particularly of the "All government is slavery" kind, to quote from one of your comments – you may still attract more downvotes than upvotes. I suspect there are far better sites for such discussions.
Creepy much? What am I missing? Why is this important?
I conjecture that much of the legitimate pain from checked exceptions in Java were because the language to talk about exceptions was so limited.

For instance, consider fold or map functions. There was no way of saying "this might throw anything that might throw", so the only option was "this won't throw anything and that cannot throw anything" or "this might throw anything".

Without the necessary flexibility, developers aren't "forced" to consider only error paths but also manifold impossible paths that aren't easily distinguished from legitimate error paths.
I got into trouble any time I said “guys” as a generic term for “y’all”. Also, I got in trouble for saying ladies or girls or women. I’m honestly not sure how I was supposed to describe a group of women. But no matter what noun I used, a colleague got offended. I quit that job as fast as I could. The company is now defunct, but I’m sure that colleague is still a real pleasure to work with wherever he ended up.
Fraud Prevention Startup NS8 CEO Departs Amid SEC Fraud Investigation
> maven-central required a form of proof of ownership of the domain

They do. There's even a manual review procedure.
But without the VPN, you're already the equivalent of on the LAN because all of these services are exposed to the public internet.

In the discussion we're having, we're going from a setup where there is no equivalent to a private network because everything is public, to having a private network that only allows you access to the things that were previously public.
> One of the absolute best techniques I've found for breaking it is a trick I learned from DBT called "Improve the moment" where you simply think about what pleasant sensory experience could you introduce right now to make you feel better and then you do that quickly.

That'd probably be smoking a cigarette. But that's no good, either.
I bet we could save even more lives by banning tobacco and alcohol.
> Pretty sure...

Now you know that you were wrong. Windows allows you to disable telemetry and certainly doesn't report apps you install to Microsoft if you don't want it to. Same for Android and obviously for desktop and server Linux distros. This is simply not possible on iOS.
The point seemed to be that checked exceptions are a bit of a help, whereas you seem to be responding to an implied claim that they aren't helpful. I think that's why you're being downvoted.
Talking about ironic, Rust is often mentioned as the language Mozilla invented to write exactly that - a browser..
I’ve Learnt to Handle Disagreements
Marco is purposely being dense, and wildly sarcastic about the rules. Not sure what his problem is these days about Apple
Me: You need it when? Whenever? Whenever is never. Pick a date.

Me: How long? Couple of days. Which means a week. Which means it won't ship for a month.
If I had space in my life for more retro-junk I'd definitely love to have a working DEC VT100 or Lear Siegler ADM-3A if I could find one with the tube in good sharp condition so you could actually really use it to hack code on... but they probably go for a fortune by now, and ... well I just don't have space. For a slightly less rare and valuable terminal, a Wyse 60 would also be a good option (unless I'm misremembering, the keyboards were very nice and you could absolutely work on one of those today). When I was a kid all the libraries had Wyse 60s as catalogue search terminals, and I also learned how to use Unix through one of those beautiful things.
This guy overstates his case somewhat. Consider:

"If the original study says an intervention raises math scores by .5 standard deviations and the replication finds that the effect is .2 standard deviations (though still significant), that is considered a success that vindicates the original study!"

Why the exclamation point here? The replication study isn't magically more accurate than the original study. If the original paper finds an 0.5 standard deviation effect and the replication study finds an 0.2 standard deviation effect, that increases our confidence that a real effect was measured, but there's no reason to believe that the replication study is more accurate than the original study. Maybe the true effect is less than measured, but maybe not. So yes, it should be considered a success.
Likewise, the Fender Telecaster and Stratocaster were incredibly '50s names (and awesome names, but very in line with '50s branding).
Banking Software uses all sorts of security through obscurity. Infact Unisys used to make custom 48bit CPUs for their clearpath OS to make targeting the hardware very difficult without inside knowledge of the chip architecture.
Popularity does not validate stupidity.

Security policies at most companies are often generic and not secret. Reporting chains for emergency remediation and asset identification are secret because those identities are potential attack vectors. Information sensitivity of that nature means it must be protected from disclosure and not that it should otherwise be hidden. The key phrase for sensitivity management is: need to know.
I can't believe how many people claim to have years of experience but are completely unfamiliar with terms like "binary", "library", "compiler", and "filesystem".
Marco doesn’t represent most devs, He is just another guy who’s like some more money, so he complaints
My heart goes out to anyone on the teams to modernise the depths of windows, the eternal thankless task.

Damned if you do, people complain you have a new thing not exactly like the old thing. Can't kill the old thing or people freak out.

Damned if you don't, "look how janky and old windows is" etc.

I want Window to succeed, Apple wont make Macs in 15 years from now and don't ship high powered machines for under $5K today, as much as I wish Linux would be viable Adobe and other creative software companies will never ship Linux versions so all you're left with as an artist who needs computers is Windows.
Anyone with a software engineering background interested probabilistic model checking and learning automata should check out the work from ICSAS led by Prof. Lijun Zhang, Yong Li and Andrea Turrini. In particular their work on ePMC and ROLL are really excellent:

https://github.com/ISCAS-PMC/ePMC

https://github.com/ISCAS-PMC/roll-library

Storm is another probabilistic model checker from RWTH Aachen, developed Christian Hensel, Sebastian Junges, Tim Quatmann, Matthias Volk et al. at , which has a nice Python API:

https://www.stormchecker.org
How would they go with coffee beans, I wonder!
The existence of a third party App Store doesn’t prevent you from voting with your feet and sticking with Apples App Store, if that’s a valuable feature to you.
This is a great article. It is really sad how "DevOps" has become just another way to label the Ops team, or the developer tools team, or the release managers, without trying to break any silos between the teams...
The Maven Central repository will not allow you to publish a Java package com.example.foo.
China is actually opening up their economy, but they still have quite a number of bans on foreign companies:

https://www.registrationchina.com/articles/china-negative-li...
> Even if all the statistical, p-hacking, publication bias, etc. issues were fixed, we'd still be left with a ton of ad-hoc hypotheses based, at best, on (WEIRD) folk intuitions.

This is the quiet part which most social scientists, particularly psychologists, don't want to discuss or admit: WEIRD [0] selection bias massively distorts which effects are inherent to humans and which are socially learned. You'll hear people today crowing about how Big Five [1] is globally reproducible, but never explaining why, and never questioning whether personality traits are shaped by society; it's hard not to look at them as we look today at Freudians and Jungians, arrogantly wrong about how people think.

[0] https://en.wikipedia.org/wiki/Psychology#WEIRD_bias

[1] https://en.wikipedia.org/wiki/Big_Five_personality_traits
When I expressed these fears to the reporter, he said that it was New York Times policy to include real names, and he couldn’t change that. [0]

Hahaha when deep-state TLA assholes want to scare us out of more money and freedom, anonymity is sacrosanct. A regular citizen with opinions? Oh, that's a doxxing! We know where NYT's priorities lie...

[0] https://slatestarcodex.com/2020/06/22/nyt-is-threatening-my-...

[EDIT:] Haha never underestimate TLA downvote brigading... this comment was +4 five minutes after I posted it but now an hour later it is -4. Impressive!
>This just shows how ignorant you (and most) are on the topic of port knocking.

You, uh, do know who you're replying to, right? https://sockpuppet.org/me/ if not - I don't mention this to go "lol he must be right because of who he is", but calling a well respected security researcher with plenty of real world street cred ignorant is a bit much.

>SPA port knocking is cryptographically secure and does not suffer from replay attacks.

SPA port knocking doesn't suffer from passive replay attacks, but it does suffer from block and replay attacks. An active MITM can still get you.

His suggestion hasn't been "if you care about security just don't do port knocking", his suggestion has been "if you care about security just throw up a VPN it'll be more secure and just as much work"
Aspiring Baba Yaga: Catherine Connors Interview
Not the OP, but from my experience teaching web dev, one possible reason is nerves. I’ve seen some of the smartest students make that mistake on an assessment simply because they were under pressure. A simple conversation afterwards shows that they do understand the difference (as expected). In the moment though, sometimes you just have a brain fart.
Interesting to speculate on the “extremely generous” offer from Substack. They’re obviously willing to devote a decent amount of dev time to making Scott comfortable, and I’m sure they have a good idea of how having SSC on board would promote their platform on its take-over-the-blog-market mission, so it could be generous indeed.
So first you said that “people like me” didn’t complain, but now you are saying that people did complain? All of the well known Apple pundits complained - John Gruber, Marco Arment, John Siracusa, etc.

The difference was that people who owned the devices complained. How many Apple pundits spent time complaining about Android devices instead of just not buying them?

Well Gruber always buys the top of the line Android device that Google sells and had a lot of good things to say about the assistant and the camera but that’s besides the point.

Was Apple correct yesterday or today after the change? Is not Apple perfect and developers and users should stop complaining starting today because this was the exact last issue missing from Apple perfection?

No one ever said that Apple was perfect. I’ve bought a few Apple duds. What I am saying is that people want the government involved instead of just not buying the device when their are alternatives.
When I visited Germany, I giggled every time I saw the road sign that looked like it said: “Ass fart”
I remember circa 1985 I said the solution to smoking was to reduce the amount of nicotine in cigarettes by 5% a year.
Archie McPhee hit with even weirder PayPal problem, foiling Tardigrade sales
Anthropic principle has been used by too many people to meaning too many different ideas. It really should just refer to the mere tautology that "I can only find myself exist, and the world in a state compatible with my existence". That is a perspective specific statement. It answers questions formulated from my/our first-person perspective: "why do I find the fundamental constants compatible with my existence?". However, it does not apply to questions formulated objectively (i.e. when it requires a perspective invariant response), for example "why are the fundamental constants have these values?". That question calls for an impartial causal model or scientific answer. Anthropic principle simply isn't it.

That doesn't mean AP is wrong, it is a tautology, correct by definition. Neither is AP useless. It is the correct counter to teleological arguments such as fine-tuning. However, treating it as a scientific explanation is not correct.

That being said, that confusion is totally understandable. The current state of anthropic reasoning is quite messy. There are contending theories on many related paradoxes. The sleeping beauty problem, the doomsday argument, the fine-tuned universe, the simulation argument, etc. Like before, I find these paradoxes are caused by ignoring the role of perspectives as well. I explained my solution to the related debate on my website https://www.sleepingbeautyproblem.com if anyone is interested.
Bypass networking is generally more akin to how device drivers in microkernels work: a core trusted set of functionality that needs to be in the kernel is (e.g., programming the MMU or I/O MMU, scheduling) and all the device control and network stack stuff is in some process or task outside.
core is very comprehensive and alloc adds dynamic allocation once your kernel supports a heap. The complicated data structures in kernels are much easier to write in Rust, in my opinion. And you can be certain of their consistency when you have multiple cores running kernel code because of the ownership model.

I prefer doing bare metal development in Rust if possible
I think the key point in the OP’s statement is “early on”

I think unit tests (or just more generally a test suite) is invaluable. But when you’re starting out small (1-3 person dev team) and the API is changing so rapidly (we learned something this week we didn’t know last week so that new service now only does 1 thing instead of 5 things), tests can _really_ slow down development. And as mentioned by the OP as well, adding unit tests (or a test suite in general) shouldn’t be too hard once you get a stable API

I might be preaching to the choir so to speak, but that’s just my $0.02
I have read the case in its entirety, see the entire section under B. Market definition: Alleged "Mac OS-capable computers" market.

(It's true that Psystar's attempt to establish "Mac OS" as a single-brand market in section A also failed, but that is not what I am referring to here.)

If you have a more substantive criticism feel free to elaborate in more detail, otherwise making a drive by comment to accuse someone else of not reading just seems hostile and unnecessary.
I agree about the terrible homepage. I had looked previously (when they weren't accepting new sign-ups) and assumed it was Mac-only based on the screenshots.

I created an account today (realizing it was actually web-based, no client at all) to try it out and like you, couldn't believe that there was no way to do so without giving credit card info.

However, the "thanks for registering" email does include a link to a playground/test site.

https://roamresearch.com/#/app/help
more homotopy than topology, but still may be interesitng to you:

https://staff.math.su.se/anders.mortberg/papers/cubicalsynth...
Only apache.org can claim their org.apache on Maven Central. This is checked the first time you upload a new package.
Also, related, the kind of traffic needed to probe in a reasonable amount of time can easily be spot.
Comparing AMD and Intel boot times
I am hopeful that the initiative which uses waste stream plastics as a component of asphalt will allow us to finally get some decent alternative to landfill for plastics. The best part about it was that the plastics didn't need to be sorted or clean; it is just going to be melted, pelletized and then mixed with hot tar to make asphalt. Since asphalt is now nearly infinitely recycled the plastics will be kept in use for a very long time with only minor amounts escaping in to the environment.
I work in a large cloud provider.

> Are they hiring for a single role or a whole team?

YES.

That's right, while the teams might have different responsibilities, but some remain constant. like provisioning infrastructure, going oncall and solving tickets, writing your actual software and think about and design the next iteration.

The expectation for team members is that one should be able to do all that, not at once obviously, but when needed will rise to the task.
See the plugins here, for example: https://www.pro-tools-expert.com/production-expert-1/2016/5/...
So the lesson for those who maintain anonymous or pseudo-anonymous identities online-

As your pseudonym's popularity grows, chances increase that someone will be interested in unmasking your identity. The only solutions are to reduce your pseudonym's visibility or staying fully anonymous in the first place.
Thank you for your replying.

It is for team environment.

Yeah, I agree with you.

I have experienced mid~long period project and struggled with them so I asked this topic.
I appreciate the thoughtfulness of your response. I hear and appreciate both your points and also the obviously long and uncomfortable, reflective path it has taken for you to write them down so clearly. I will reread this for a long time to come. Please be well and reach out if you would like to talk further on any of these topics.
http://www.adamponting.com/

I might show individual pages to people, but it covers diverse topics, (music, maths, art, writing, quotes, movies etc) whatever interests me, so.. I'd need a single-focus site/blog for a particular subject to use professionally. Or just linking to that area of the site would work, I guess.
The 30% fee is factored into all the prices you're looking at.

Your argument that apple created and maintains the user base would be a lot stronger if google and all of the other phone makers were not quietly waiting to snatch up any customers that got sick of apple.
I used GCP to create the transcripts for my Podcast
IMO, "capricious" is a word that could be used to describe any interview process that isn't a structured, formalized process. You don't get a good signal out of ad hoc interviews, you can't calibrate across interviewers, and you can't compare accurately across candidates, so why bother?
If someone is selling you on rethinking an entire discipline they are probably overstating their case a bit. Or you’re ignoring them outright.

That doesn’t mean they’re wrong, necessarily. Overcoming inertia is a huge challenge. Daunting, even.
It depends on how the replication is done, but the big replication projects typically use very large sample sizes compared to the original studies, so their error bars are much smaller.
What I didn’t understand was how much it would cost to live
> I think you massively overestimate how many people would use that functionality.

I admit that I know very little about Fortnite and am not a regular Android user, but my understanding is that, right now, anyone who wants to play Fortnite on Android is sideloading it. That's a lot of people who are opening up a pretty brutal attack vector to be able to play a game that got kicked out of the official Play Store.

https://www.theverge.com/2020/8/13/21368079/fortnite-epic-an...
I think get where you're coming from here, but I don't fully agree.

>f your reason for deploying a VPN is because you fear to expose unknown bugs in sshd to the Internet the same could be said about every vpn solution.

Yeah. You might have a VPN zero day - but then you still have to get into the other SSH servers. Two zero days simultaneously active for openssh and your VPN solution? Pretty unlikely, especially public ones. Someone burning two private zero days on you means you're an incredibly high value target and neither of these would suffice as your sole defense to begin with.

The rest of your argument, if I'm understanding it correctly, is that you think people will get more lax with securing SSH on a box only reachable via VPN than if it was reachable by port knocking? It's possible, but I don't know that the evidence really shows that - lots of comments on this article are along the lines of "i set up port knocking and I've never even seen a malicious ssh connection attempt since then!" - no details of the rest of the security measures they've got in place.

And yeah, going from 'I set up a VPN to connect to my web servers via ssh' to 'I have VPN access to a whole network with all sorts of things running on it' is a big step up, but I don't think it's really in the boundaries of this discussion. Port knocking was never going to be a replacement for a larger VPN deployment, and when you're opening up network access to a wider range of things then how you approach things definitely needs to change.