skysight-inc/HackerNews huggingface dataset:
I feel like Airbus planes in general are much quieter than Boeing planes. I flew in a A320 from Bangkok - Singapore and Amsterdam - Moscow and both of these times the flight was much quieter then all of my other flights. Other flights included a diversity of (Boeing) planes including the 737, 747, 777 (300ER) and Embraer 190 (KLMs city hopper). I do usually sit in the front of the plane so it wasn't just the engine noise that was quieter.
You're essentially describing a C compiler with advanced optimisations disabled, no?

If you want improved safety and fewer footguns, the solution is to use a safer language than C, rather than to try to declaw a fundamentally unsafe language. Even MISRA C fails to guarantee the absence of undefined behaviour. (Other far more involved projects have made this a goal. [0][1]) The obvious candidates are Ada, Rust, and Zig.

It doesn't make sense to mandate the absence of serious compiler optimisations, especially for a language like C.

[0] https://github.com/zetzit/zz

[1] https://github.com/microsoft/Armada
it's because they're all made from meat.
That’s a fantastic distinction. I would love to see that happen.
Why are the C-5's engines so small?
The stratosphere is cold. Will water vapor turn into ice crystals instead?
Show HN: Ribbon – Video chat with your own users
Hey HN,

I’m Axel, founder of Ribbon (https://tryribbon.com). Ribbon is a user research platform for people who build websites and apps. It allows people who build products to quickly set up video chats with their own users so that they can get a better understanding of who their users are and how their products can be improved.

Here’s a demo of how it works: https://www.youtube.com/watch?v=JR-5VNZp8iQ

Working as a product manager I grew frustrated with how hard it was to get a good understanding of who was using my products. Booking in user interviews took up to a day each week of emailing potential participants back and forth to coordinate the interviews, and only gave us access to users who we’re willing to book up their time days in advance.

I built Ribbon to solve this. Ribbon makes it super simple for anyone who runs a website to spin up a video chat with people who are browsing that website in seconds instead of days.

I’d love to hear about any ideas, experiences and feedback you might have!
Use `unsigned int` instead of `int`

Overflow for signed types is undefined behavior. Hence the compiler can trap when it happens and remain standards compliant.

For unsigned types, overflow is defined behavior, and hence -ftrap will not trigger on overflow.

An interesting flip side of this is that using signed types can be a lot faster because the compiler is allowed to assume that overflow will not happen, which lets it apply more optimizations.
Claiming it does not make it so.
Linux distros are now required to ship their kernel builds as Windows EXE files that are digitally signed by Microsoft. Talk about a branding iron. It amazes me how no one talks about this. Or maybe there's just some NSA gravy train for online commentators I haven't found yet :(
I think this is what you are referring to:

https://en.wikipedia.org/wiki/Hawking_radiation#Black_hole_e...

"Hawking estimated that any black hole formed in the early universe with a mass of less than approximately 10^15 g would have evaporated completely by the present day."
Why code reviews are good, but not enough
this is like docker for software development.
> Secondly, there's discussion about serving everything from a single domain at https://phabricator.wikimedia.org/T214998 , which I guess would enable the normal mobile browser feature of switching between desktop and mobile.

Except there should not be two versions at all and instead they should just make the desktop version responsive and strip out the bloat - I don't want an article to on desktop to load six different javascript files and have a giant banner at the top any more than on mobile.

https://en.wikipedia.org/wiki/Test is 27 different requests for me - that is inexcusable for mostly text content.
I am not from US, and I imagine you are, but it doesn't seem right that I cannot teach people to play instruments by playing a song.
Just a tendency to either be very timid, or very outgoing and really no in between. It just feels obviously it's a cultural difference that frankly I don't understand.

I've always appreciated competence and rejected unsubstantiated arrogance. So to me it's kind of alien.

I haven't seen the interactions as described in the article, but have noticed things like lunch group clustering that seemed to go beyond a typical US High School. And it wasn't really a grouping by type of work. I was working in a position that was a very large company group that was around 75% Indian H1Bs.

I never really knew how the caste system worked, but in retrospect it makes a lot of sense. At the time I just chalked it up to a culture thing.
Thanks for the reply. How does its package-detection stack up against CMake? One of CMake's advantages is that there's a Find module for most well-known libraries.
Every implementation (compiler and arch combo) defines behavior as far as I know, and I’ve tested dozens of combos.

What combo does not have implementation defined behavior for C/C++ signed overflow? Are there any?
We are continuously amazed at neuroplasticity so, possibly, sight maybe useless for a while after gaining it but with everything we know about the brain one single aspect persists through all topics: the brain adapts.
It's a bad library design to rely on a process-global setting, because one day you'll have two libraries in your project that rely on opposite values of such a global setting, and then you'll start to see very funny things.

And the library design that relies on an application it's used in being killed by the OS so that the library don't have to tidy things up after itself or to properly handle error conditions is really bad. Don't you just like when one of your random indirect dependency, thrice-removed, decides to call std::abort() just because it's tired of living?
Thank you for clarifying that.

What about withdrawing rewards? Is Uphold still the only option? And is it safe?
First thing that came to my mind when I saw the project title was the opentracing.io project. Glad to see that this is actually opentracing and opencensus merging their approaches.
But what about when underlying code doesn't exist yet, or isn't working correctly? Is there something one can do to fix what should be in this conversation (as opposed to what actually results)
The answer: Electron. Always.

What is also baffling is that a multi-billion dollar company with hundreds of employees is unable to create a cross-platform native desktop app, yet it takes ONE PERSON [0] to create a desktop client for Slack and Discord. The fact that Slack is already 'optimising' Electron via offloading / rewriting JS code in C++ / Rust tells me that JS will never give them the performance requirements they need.

For Slack there are no more excuses to try the Qt option.

[0] https://cancel.fm/ripcord/
what you're after is specified behavior. C/C++ essentially has specified, unspecified, and undefined behavior. I can't recall correct terminology.

Basically (in order), universally defined behavior, architecturally defined (under/overflow semantics, argument evaluation order, etc), things that cannot be defined (UaF, buffer under/overflows, etc).

The problem is that there is a depressing amount of undefined behavior is unnecessarily undefined. UB should be specifically limited to things that cannot have a predictable/defined behavior on any arbitrary platform - e.g. memory errors, etc.
hey fellow sociologist!

the one that imho is really missing is "work", from smith to marx till the present day it has been a cornerstone of social science
I tend to agree with this sentiment and it's what's driven me to build the mvp for https://sqwok.im. At least for this type of app/product, I don't believe a simple poc would be enough. I needed to get a working mvp into peoples hands to even have a shot of conveying the idea. Some people close to me have challenged me on this topic, which is healthy, but we will see how it plays out.
We probably need different integer types to express the differences.

Perhaps whether or not we check for overflow can be encoded in the type of the integer.
Sure, but that didn't change much between x86 and x86-64. Perhaps it got a little worse because the SIMD instructions aren't overflow check friendly.
At what performance differential are those factors relevant? For a 5% difference I would share your sceptisism. However, the effect size is a 4x difference (3x slowdown vs 12x slowdown). To me, it seems very unlikely to be a result of inconsistent benchmarking. However, I am not an expert on the subject.
New C++ features in GCC 10
Looking at it now, I wanted to copy files into the build folder after build step was done with add_custom_command() with copy_if_different and with target TARGET <project> POST_BUILD, but when I would put that in a subdirectory it wouldn't work because there was no target.

add_custom_command(TARGET project POST_BUILD
COMMAND ${CMAKE_COMMAND} -E copy_if_different
some.dll
$<TARGET_FILE_DIR:project>)
5-6 per cycle per thread is more typical. Can be faster with a micro-op cache or a loop stream buffer.
I was under the impression that the local part is hit or miss due to the efficiency differences between large national/global supply chains and small local ones.
Secure Boot is trustable, if...

...you have verified the silicon of your TPM chip, motherboard, etc.
Covid-19: UK volunteers could be given virus to test vaccine
Don't forget about intercepting each ftell() though...
At this point in time you have to be slightly paranoid to see the evil side of this development.

Erosion of freedom is almost always volontary at first.
Conservative perceptions of their opponents have very little basis in reality as most of what conservatives perceive regarding their opponents is projection intended to deflect from their own misbehavior.

Conservative messaging is driven almost exclusively by fabricated outrage for which there is no non-conservative equivalent; non-conservative messaging is driven by outrage over actual conservative behavior.

Non-conservative media spreads outrage at factual abuses of power by conservative elites (such as the dismantling democratic norms, or police brutality) while conservative media creates outrage by giving voice to fabricated controversies created over trivialities, such as over tan suits and arugula, or by amplifying non-genuine controversies manufactured by astroturf groups.

There's no more of an equivalency between conservative and non-conservative media any more than there's an equivalency between actual public health experts and the kind of people who think injecting bleach cures COVID-19. There is such a thing as objective reality and the history of the past forty years of conservative politics is a history of conservatives abandoning objective reality in favor of delusions they find comforting.
We're talking costs, not pay. You have to pay taxes and provide various benefits to meet the legal requirements of employing someone.
with the current Tory government the chances of taxing those assets significantly is indeed low.

with the assets out of the country the chances of taxing them at all is zero. As well as losing any possible indirect benefits from them being around (not saying there are benefits, but we certainly won't get them if there are)
Yeah, creating problems in people for which you conveniently sell solutions is the job of marketing.

As for building a solution to "a problem that the intended users don’t understand that they have", I'll agree that this may not be a good thing for a startup to do - but when I see how basic research is being defunded and drowned in red tape, and people saying that startups are the new, distributed R&D departments, I feel the middle has fallen out. When startups do a greedy gradient descent, and academia struggles doing science, who's going to work on solving problems that require solutions one or two steps beyond what the intended audience can understand? FLOSS community? What about outside software?
This is a view which is increasingly disfavoured by scientists. Theories which attempt to modify the mathmatics to explain dark matter have failed to hold up to observation, and more and more evidence is mounting that dark matter does in fact act like matter.
Right, that's really what I was asking. Thanks.
are you talking about US? where everyone is able to buy and use mobile devices? I am talking about India.
It's amazing that you disregard the most basic attack in your threat model (https://safeboot.dev/threats/): going after the TPM itself. TPMs are usually FIPS 140-2 L2: not something that's meant to be hardened against even basic hardware attacks.

IMHO the TPM should be a required piece but not the only piece of the puzzle. If I loose my laptop, I don't want the goods to be protected exclusively by a key that's trivial to recover from it (stored in something that's not a secure-element).

I've covered it in a talk I gave at 44con:
https://www.youtube.com/watch?v=YZTWjLTz4AE

tl;dr; Use the TPM (and potentially other technologies like SGX) as part of your KDF to strengthen PIN/passphrase that the user provides. This breaks the asymmetry of offline attacks (attacker will always be bound by TPM/SGX-speed). Do NOT give it the only key required to decrypt your data.
The difficulty is using the established methods to build out a whole system that is workable in realistic conditions.

A system that handle sending messages when one party is off-line. A system that doesn't require up-front key agreement between all parties. A system that handles moving devices somewhat gracefully. A system that gives decent guarantees on the identity of your counter party, without being very onerous.

Making a system that meets the above requirements and others I missed, and that remains as usable as if the encryption weren't there is hard.
On the other hand, they're a reaction to that exact thing in e.g. Twitter's enforcement of their rules. They'll decide what's kind and what's not.

If you're on Twitter's good side and retweet somebody with "get em!", you're good. If you do the same while not aligned with Twitter politically, you're asking your followers to harass individuals and will be punished.
Who's Tweeting about scientific research? And why?
As 'CPLX says, for many of us the article itself is just a discussion prompt. Quite often (I'd say half of the time), the tangents and off-topics in the HN discussions are way more insightful and interesting than the submitted article.
Previous discussion on HN:

https://news.ycombinator.com/item?id=23442027
it seems a lot of work to run so many code analysis tools but I guess it's required for a tool is used widely as curl.
Yo yuchi, thanks for the comment ;):). I tried not to make an in-depth comparison between React and Svelte and wrote this article with a single view. I have a passion for web performance, so I like every single JS line that is not shipped.

Nevertheless, I found your comments reasonable and constructive and edited most of the parts you mentioned. I'll deploy the updated version in the next days.
Now that Zoom meetings have been normalized, a lot of business travel is not going to come back (ever).

Vacations will still exist.
This was made slightly more confusing by you making the same typo; presumably you meant to say that ordnance explodes.
a system that grinds to a halt because of overflowing logfiles is already faulty.

What fantasy world do you live in?
What if you name a branch in your repo "master"?
VS Code is a formidable piece of engineering, I've used it for years and have mostly been impressed by the quality.

The problem is that I sense a potential bait & switch tactic.

I don't want to live in world where the norm is that everything in on the so-called "cloud".

I want full ownership of my files and my tools.
No more scattered notes! Build a “Productivity System” using this Notion setup
I had a bug on my site—Sry about that. I did a quick fix to reject any cookie/tracking settings quickly and that the consent won't pop-up again.

I hate these cookie pop-ups more than you could imagine, but I need to know how my site performs. And as I have my business registered in the EU, I need a cookie consent to my website. On the roadmap, I have a task to replace GA with any other analytics compliant with GDPR, CCPA, and PECR so that I won't need any cookie.
That would continue a trend of willfull ignorance and stupidity that is not out of character.

Firstly, the evidence is that the Chinese are excellent at manufacturing and will likely be churning out high quality nuclear reactors.

Secondly, high quality energy production is a bad topic for nationalism. The West decided not to pursue nuclear decades ago. But it remains the most technically excellent form of energy production and we should be grateful that there are still nations in the world pushing technology and engineering forward. It isn't like there are a lot of choices; the obvious options the world has right now are either Chinese nuclear or Chinese solar.
Perhaps we can have both. E.g.

__checked__ int a; // aborts on overflow
__throwing_checked__ int b; // throws exception on overflow

You could have the same syntax for unsigned ints.
There is only one nuclear plant operating in California, the twin reactor Diablo Canyon, owned by PG&E. They stated in 2016 it will close the first reactor in 2024 and the second in 2025. PG&E estimates the decommission will take twenty years and cost $4 billion. Of course, it will never be closed since the spent fuel will exist in concrete casks on the property.

Since it was built in 1968, two faults were discovered, one a few miles offshore and another less than a mile inland. PG&E made structural changes to the plant in 1981. In 2011, PG&E told the NRC to hold the twenty year renewal permit until the company could do a seismic study in wake of the Fukushima disaster because coastal California suffers from both earthquakes and tsunamis. PG&E determined it was too expensive to continue to operate the plant and it could not take on the liability if a Fukushima type disaster happened at Diablo.
There needs to be something in case the implementation forgot something. These are dangerous of course, but they can also save the day when something unexpected happens.
Depends on the country and depends on the state. E.g. in California the basic overhead in terms of taxes payed by the employer is slightly below 10%. Then the personal income tax is 13%. You have to include other costs like matching 401k, medical premiums, other operational costs associated with each employee. $200k doesn't seem that outrageous from the employer POV since the employee is left with around $120k at the end of the day.
I suggested it, because it would be the correct way to do it, and a good way to realize you’re asking for something extreme.

The social pressures you’re advocating are not a weaker form of serving justice. They are stronger. They circumvent our legal system, they’re arbitrary, they’re simply mob justice. No one can keep them in check and indeed they frequently go too far. This is not ok.
Yes indeed, in India there are extremely cheap and powerful devices available to a huge lot of the population.
And yet things like the .NET Core debugger which is touted around has an closed license. (Microsoft .NET Core Debugger licensing and Microsoft Visual Studio Code) - https://github.com/OmniSharp/omnisharp-vscode/wiki/Microsoft...

Microsoft mainly does things that helps lock people into their systems. Why do you need to connect to their server at all? It's all about control.
New satellite images to allow anyone to monitor tropical deforestation
TSMC is a valuable company. However it relies on ASML, a Dutch company, for the machines it uses.

Global supply chains are complicated and interconnected. TSMC would be worth a lot less without ASML. That's a good thing for peace and cooperation!
Yeah, this is exactly the kind of bullshit that will be used to force people to work from a "thin client" with 0% ownership.
Do you think category theory is more useful than type theory or logic?

I’ve personally gotten a lot more out of treating tuples as product types or logical AND, and disjoint unions as sum types or logical OR, as opposed to categorical limits.

(Basically, what’s the extra value added from Curry-Howard-Lambek, as opposed to just Curry-Howard, in terms of programming?)

(I’m not trying to be argumentative, I’m genuinely curious.)
Your "peak healthcare", available to your landed gentry, is the best in the world, no doubt.

One could stop all research for decades, and the US as a whole would still be better off if what was available now was distributed evenly.
PGP and S/MIME are widely considered as insufficient.

Certainly, they existed for a long time, and yet it did not seem to impede police investigations. Whilst I don't think the current complaints aren't exaggerated I do believe police when they say "Because of whatsapp, we are hitting cases where we would normally send a warrant, but now we can't". This wasn't the case before with PGP, and with decent reasons. (PGP is not very user friendly)
> At the end of the day this is signalling. We all know that the best thing we can do is eat a local, veg-friendly (vegetarian/vegan) diet.

Local doesn’t belong in there. As a reductio ad absurdum would it be better to eat a diet of nothing but imported NZ lamb or to grow all food locally at McMurdo Base in Antarctica? Grass is next to free. Ocean shipping is the most efficient means of transport for bulk freight there is. To grow food at McMurdo you’d need to heat the environment, insulate it and light it half the year.

Eat local is class signaling, not environmentalism.
I generally agree the benchmark is too small, but I have serious issues with Lemire's approach to benchmarking in general. Things get pretty nuts at that small of a timescale and things like frequency scaling can make a huge difference. I would draw absolutely zero conclusions on these reported results.
Seems like it would be easier to open it up earlier than later with something like a complete listing and documentation of assets? That way if people are interested they can assist in re-building “unencumbered” assets.
E-pub is a ziped html and css
How does this relate to the change in the C++20 standard about two's complement? "signed integers are now defined to be represented using two's complement (signed integer overflow remains undefined behavior)"
"I'm not sure how we can save the climate without it [lab-grown meat]."

Why? It doesn't seem logical at all - I'm pretty sure there are more efficient and healthier ways to feed humans and it seems that the main reason for making lab-meat is to cater to our current habits and tastes. Maybe that's important enough, but perhaps you have more pros?
>What I will not do

>When security comes up in relation to curl, some people like to mention and propagate for other programming languages, But curl will not be rewritten in another language. Instead we will increase our efforts in writing good C and detecting problems in our code earlier and better.
This could be an interesting read, but so far I've only had time to skim it. What I did notice, however, is that some of your images are too wide and get cut off :)
Interesting post, as Regehr's posts tend to be.

Presumably .Net goes to great lengths to optimise overflow-checking, as the checks are enabled for production use. I wonder if they manage to get the overhead to below the 8.7% mentioned in the article.

edit: I had put OpenJDK and .Net but tom_mellior is right to point out that Java has wrapping arithmetic
Which makes me wonder, why people insist on having a headline AND an article in 2020?

It only creates a confusion when most people don't bother reading articles when the headline is strong enough to inflict a response. It has become a tool to say something and deny saying it.
A Survival Guide to Meanness