skysight-inc/HackerNews huggingface dataset:
There is no security concern about it in libsecp256k1: The compilation was only happening in a newly written test case and didn't impact the production code.

The miscompilation of the implementation of draft-brezak-win2k-krb-rc4-hmac-04.txt seemed interesting to me and potentially of a security concern. They looked to me like they were potentially significantly reducing the length of the message integrity check in an authentication protocol.

https://github.com/heimdal/heimdal/blob/7ae2dfd853c87f9cbecb...

https://github.com/heimdal/heimdal/blob/7ae2dfd853c87f9cbecb...

https://github.com/heimdal/heimdal/blob/7ae2dfd853c87f9cbecb...

Though its hard to say for sure without even a passing familiarity with that protocol or its implementation. If you wanted to go vulnerability hunting, however, that is where I'd start.

That said, even if there is a bug that is no evidence that it would have been intentional. Sadly, an intentionally introduced bug could be absurdly subtle. One of the downsides of software bugs being relatively common is that you can't be sure if a bug was intentional or not... and at the same time it's silly to assume one was intentional because we know that real bugs are so common.

It's long been my view that if you're not occasionally finding compiler bugs -- even in somewhat older compilers-- you're just not testing hard enough. They've become more rare but are not so rare that a single developer comprehensively testing a small library won't eventually find one (or more). (Libsecp256k1 is ~9,964 lines of code and ~8,235 lines of test code).

Many other cases found by Russell's system wide recompilation were also in test cases or were otherwise pretty obviously not that big of a deal.
Not wanting to die is kind of something that one doesn't tie to their mode of payment...

Not to mention ridesharing apps have incentivized safer driving with their review systems much more than taxi drivers who generally felt they were beholden to no one or "their own" (which is why they felt comfortable doing things like taking people on joyrides) ever did

There's a lot of ambiguity about accident rates when a passenger is not in the vehicle with an Uber driver, but the rates for actual trips are lower than national averages: https://techcrunch.com/2019/12/05/ubers-fatal-accident-tally...
Works everywhere I’ve seen. Give it a try next time you fill up!
If the flu is .1% and CV19 is between 0.5-1%,that means that it is between 5 and 10 times as deadly. I'm not sure I would call that 'about the same'.

Also, these are the numbers for CV19 given unprecedented social distancing measures, entire hospitals dedicated to it, border closures and so on. If nothing had been done, it seems likely, given regional examples like Italy's Bergamo area, the death rate could easily be 10 times what is observed today, if not more.

Equally, with much stronger and more targeted measures, the death and infection rate can be brought to essentially 0 without impacting the whole population as much, as shown by Vietnam.

It is still absurd to call a disease that has already killed many more people than malaria this year 'similar to the flu'. Sure, the flu is bad, but in conservative estimates, Covid19 is 5 times worse (and in more equal comparisons, where we would take similar measures to what we do for flu, it is probably more than 100 times worse).
Interac Online in Canada offers this, for Canadian merchants with Canadian customers. It’s basically cash over the internet. Makes sense you wouldn't have tried this if you weren’t :) [1]

[1] https://www.interac.ca/en/consumers/products/interac-debit/e...
Develop and publish front end projects fast, super fast ️
Hi everybody Last weekend, I finally ticked a box that was in my to-do list for a long while, contributing to the open-source community.
I'm curious to know what you think, and if you find it useful too. Check it out ️
I believe Apple is already heading in the direction of independent watches. The latest update lets you set up a new watch for family members that don’t have an iPhone. After the setup it will function independently. Right now it’s mostly meant for kids.

https://support.apple.com/en-us/HT211768
Sounds about right. :-)
I do not know how you would be aware of Andy Ngo as a source and yet not be aware of the Proud Boys, what they do, and how they operate. I highly suggest you review their Wikipedia article, which contains extensive information on their activities as a hate group.

https://en.wikipedia.org/wiki/Proud_Boys
Canada is literally a Five Eyes member?
So, I’m over 50 myself. And I do have a fair amount of experience in a variety of areas. I’ve made a lot of mistakes, and I do try to provide the value of my experience in helping others to avoid those same mistakes. I do also value economy and effectiveness of communication, even though I also realize that I can tend to be very verbose.

I try very, very hard not to be the grumpy old man. But I have seen some stuff, and it’s a hard balancing act to maintain.

If I have been acting as the grumpy old man, then I would actually really appreciate someone telling me that, because that is not who I want to be. And I do want to connect with younger engineers and developers.

I am actively interested in being a mentor to younger co-workers, and I find that they help me to become a better version of myself, through their questions and their perspective. If nothing else, I have found that the only way to truly and deeply learn some subject is to try to teach it to someone else.

So, I would encourage you to talk to the guy. Maybe he could become a mentor of yours and you could learn how to understand him better and communicate with him better, and he might appreciate that.

Or maybe not. But you won’t know unless you try to talk to him.
There are a couple:

http://blog.notdot.net/2012/10/Build-your-own-FPGA
https://news.ycombinator.com/item?id=24252737

https://github.com/haojunliu/OpenFPGA https://www.eecs.berkeley.edu/Pubs/TechRpts/2014/EECS-2014-4...
It doesn’t seem like a complaint to me. Just a reflection over different situations.
Actually this is a common sort of bug I've seen programmers implement, e.g. using strcpy where memcpy should be used or vice versa. Most common on interface boundaries with other languages, particular "everything is a string" languages.

So it's not that shocking to see a similar sort of bug made inside the compiler.
Real title at website:

How It Feels When Software Watches You Take Tests

Students say that monitoring programs like Proctorio and ExamSoft discourage them in the moments they’re trying to prove themselves.
One can also just append this to WSJ URLs: ?mod=djemalertNEWS

https://www.wsj.com/articles/amd-is-in-advanced-talks-to-buy...
For context, it would represent about 0.3% of the EU population.

Moreover, the 1.44M is not stated as a target anywhere in the report.
Thanks! I hadn't been aware of Michels (although I wouldn't be surprised to find out Orwell had been. Wit komante bosmang kom.) and I guess he, like Pound, demonstrates the relative ease of coopting public intellectuals via promising them a pulpit. Looking back on fascism, we tend to focus on its elites, but it appears that at the time it attracted broader support by its promise to disenfranchise[1] the traditional elites[2].

One might hope to break a chain[3] of oligarchic transmission via transparency, democratisation, and restructuring, but Gorbachev's recent experience suggests any current oligarchies would be very wary.

As far as consent manufacturing goes, I'd claim Orwell's crimestop is exactly congruent to the "internalized assumptions, and self-censorship" of Chomsky et.al. (compare Girard's https://en.wikipedia.org/wiki/Mimetic_theory or https://news.ycombinator.com/item?id=23847087 or https://news.ycombinator.com/item?id=23858477 . The FT and Le Monde often betray strikingly different assumptions as to the immediate viability of the EU, for example.)

[1] Compare the "cynical" circumlocution in https://news.ycombinator.com/item?id=24689867 for the english word "revolt". (a geeky circumlocution: du tu tawu, "2 tau" as a verb, assuming that by that time π has been dethroned.)

[2] to what degree is the G7 Barnett's "Old Core" and the E7 his "New Core"?

[3] 1984 is subtler than popular culture gives it credit for. In principle, Oceania is a pure meritocracy, with inner party admission by examination. (I take Goldstein's "in principle" to mean that on the whole selective school students make it to the inner pary while comprehensive school students wind up in the outer.)

PS. Ellul I will have to explore. Mogut fo to pensa ere da belek amash to bang kapawu ong? (better to think of the cosmos yet steer one's own ship)

The most recent papal encyclical https://news.ycombinator.com/item?id=24684152 seems to echo Ellul in places...
The language would be English not the text itself. An api is an language on how to communicate with something. The language itself shouldn’t be copyrightable but any documentation is copyrightable.
Er..no. Lookup Dokku
I’ve never heard anyone told not to talk about those things because they’re political, but I could believe they were told not to talk about them because they’re controversial.
> No individual would make such a mistake, true, but an organisation of several people could easily fail in the same way.

You might be able to claim that it's unlikely for someone to make this mistake if the changes were in one single change (I doubt even this!), but the same person revisiting code at multiple points in time might as well be different people.
>Anything that actually changes the data requires a server roundtrip

I mean, of course, but clearly I've outlined a situation where you can easily prefetch some objects to have an instant user experience. These are plentiful.

Additionally, you enable responsiveness in other ways server rendering can't accomplish with an SPA. You can display loading status of async resources, you can optimistically display changes so the user can begin editing another piece of data without waiting for latency-bound UI, etc..

Finally, "simpler" is a hard sell. Simpler for who? Someone who is writing a simple HTML data table page? Yes. For someone who is building a collaborative graph editor? Give me a break.

This is my point this whole comment thread - the anti-SPA crowd here sometimes hates JS and browsers so much they are willing to completely sacrifice user performance inside application use-cases because they find the idea of an SPA unappealing. It's pretty absurd, facile really, to claim "it's faster AND simpler".
1.Do a postmortem on every project that you undertake.

2.Go through existing projects and see if you can structure them differently and the benefits changing the structure will provide.

3.Buy and read The Fifth Discipline by Peter Senge https://amzn.to/30IKxdZ .
It is one of the best books on systems thinking.

4.It takes time to build the systems thinking muscle so be patient with yourself.
Have a look at this: https://alternativebit.fr/posts/ultimate-writer/
Is PoE to everything a common layout? I didn't realize it could support anywhere near that much power.
https://www.law.cornell.edu/uscode/text/26/5845

>The term “destructive device” means (1) any explosive, incendiary, or poison gas (A) bomb, (B) grenade, (C) rocket having a propellent charge of more than four ounces, (D) missile having an explosive or incendiary charge of more than one-quarter ounce, (E) mine, or (F) similar device;

I would argue that packing tannerite into a capped pipe turns it into a grenade or bomb, and thus a destructive device.
I'll pretty much pay for anything which takes the packaging out of the equation. There's value in not having to build and distribute my own stuff (and those mechanisms need financing).
Please remember who the director of the CDC was at that time.

https://www.vox.com/2018/3/22/17150322/robert-redfield-cdc-d...

Robert Redfield was a Trump appointee coming from directorial positions at organizations putting out "abstinence-only education for HIV prevention."

https://www.vox.com/2018/3/22/17150322/robert-redfield-cdc-d...

He is about as representative of your average doctor, as Donald Trump is representative of the average North Dakotan.
Contrary to popular belief, the government is not a group of ten old men sitting in a conference room in DC. Different departments have different priorities.
You are still requesting and receiving the ads as they are part of the results page. View source in your browser to verify. Your ad blocker is probably modifying the page after you receive it so the ads do not display. I can do the same thing without an ad blocker using something like curl and sed. I edit out the ads, then view the page. The parent commenter OTOH is referring to DNS-based "blocking". In that case, the ads come from another domain and because we control DNS the ads are never requested, never sent and thus never received. There is nothing to discard. The word "block" is really not the best term to describe what is happening.
I don't buy your translation argument. We have similar transations going on in the case of music for example.
Care to quote the part of the parent comment where he said anything remotely like that?

This is obnoxious, dishonest, bullying.
Whole FAANG for one.
Probably related to this https://spdx.org/licenses/Linux-syscall-note.html
Gates and Co. have been on a PR push for the last twenty years. It appears to have worked.
It represents 1.7% of the German population - in one year on top of everything else.
Doesn’t that just mean providing equal facilities? If you put hand sanitizer in one bathroom, you should try to provide it in all of them.
Basics of capitalism in less than 2 minutes
Check out,

http://www.founderweekly.com/

https://www.pythonweekly.com/

https://www.programmerweekly.com/
Ask HN: Is there any alternative to Dropbox?
I have been using paid Dropbox for 4 years. But in the recent year, Dropbox has added a lot of unnecessary features to the tool that slow down my machine significantly. I really don't like that. I only want a plain simple file synchronization app that works for files, symlinks and UNIX permission. That's it. I don't need friend list or complicated document collaboration feature. This is personal use only. I don't mind paying money but I don't want to buy pain.
How to get followers on Instagram faster?
Same. Maybe later in life, I will have resources and time for all the hacks I have in mind.
They don't claim that.
It really is a terrible book and basically says nothing useful at all. If you are into these kinds of books “The Wealthy Barber” is a bit annoying and I think there are some mildly sexist anecdotes but it’s not terrible advice besides that. Does anyone have a book on financial literacy they’d recommend?
Those are really cool, but not exactly what I was imagining. I was thinking more of a temporary virtual space like a zoom meeting / boardroom type setting. Gotta be packaged like an app / solution to take off
"copy writable" ?

what does writability has to do with anything?
I’m a weirdo that has a brunch of phantom loads on a power bar that I flip off when I leave for a while.

You should consider cycling more often if your ISP purges IP assignment records and tries to assign new IPs upon reconnect.

Mine keeps records for 30 days after lease expiry (usually your session end date)
PoE is dark magic to me. How can you send any amperage at all through those hair thick leads?!
New list of latest Instagram video download applications for free
I googled the question, and found a fascinating discussion by academics from around the world here https://www.researchgate.net/post/Will_the_Youngs_Modulus_E_...
> but AMD won't win on performance alone.

Yup. Let's talk about price and TDP...

> Intel has a huge SKU lineup,

Why is that supposed to be an advantage?

> much more volume,

ok

> and a much richer vendor and platform ecosystem

This is just marketing-speak.

richer vendor...ecosystem = more resellers

richer...platform ecosystem - what does that even mean?

> AMD should build demand

How?

And have you noticed how many people here saying they want to buy intel?

> otherwise they'll just recapitulate their rise & fall during the 2000s.

Who's in the stronger position now in terms of price and performance?
As a studio apartment dweller, it seems downright foreign to me to even have a space for where to stick a rack.
It certainly looks like it. Which raises the question — and I know font copyrights are complicated — can they really license this as SIL OFL when it contains designs from Chicago?
I think GP was thinking about early humans, back when other species of humans still existed.

From what I understand, the most common view is that in hunter-gatherer times there was much less inter-group violence than there was after the advent of agriculture, simply because there was much less of a notion of territory and any need to defend it before agriculture was a thing.
>Apple would make no revenue from the store / hosting / curation / platform they provide.

Again, they are paying $99/year. Whether that is enough is different set of questions though.
Ok, fair enough. That's a good point.

But, I'm not convinced because the pipe doesn't seem all that dissimilar to the 'target container' that the explosive is placed in prior to legal use.

From the Tannerite website, these are the instructions for use:

1. Start by emptying the contents of the target into the mixing container.

2. Next, open the packet containing the catalyst and pour it into the mixing container.

3. Secure the lid and shake the container until you achieve a uniform color throughout the mixture.

4. Then pour the combined mixture back into the target container until it completely fills the target container then secure the lid.

5. Always place Tannerite® Brand targets at least 100 yards away from the shooter and/or spectators.

https://tannerite.com/binary-target-faq/

What is the difference between a capped pipe and the 'target container?'

Legally, what makes the leap from legal, to 'destructive device.'
Yeah, agreed. If I'm reading it right and they're putting the TV on PoE too, they're way out of the power budget which is only 30 watts per port.

And I say this as someone who's currently going nuts with PoE going to home automation (speakers, cameras, soil monitor sensors, sprinkler relays, etc).
IBM to split into two as it reinvents itself
This is a great article, and I'll link from podnews.net today. I don't like the title: it doesn't really say that, and it's a pejorative clickbaity title, but the data is really interesting.
Or, alternately, it's a conspiracy which is intended to have very tight coverage; it's very difficult to detect, if most code slips it by.
> not permanently exploited without his knowledge.

You may be thinking of the narrow use of exploit in relation to computer device exploits, which may or may not grant permanent access.

In general, to exploit something means simply to take advantage of or utilize it. For example, to exploit natural resources or to exploit a weakness in the other team's defense.
The optics backfire, though. Instead of saying, 'This establishment is likely to have manipulated reviews', the appearance to the average user is, 'This establishment has been accused of racist behaviour' - the latter sticks out far more than the former.
Amazon turned into 'the everything store' thanks to an email to 1K random people
Tried to explain CAP Theorem in this tweet to understand it better myself
> I’m never going to need a dongle, or say the word dongle, ever again now that Apple is out of my life.

I find connecting devices through a dongle convenient in certain cases. I mostly work in my home office with 3-4 devices connected and when I want to move around a bit, it is easier to disconnect the single dongle - rather than disconnecting each individual cable.
Every founder should build a knowledge base for their business
The same kind of complaint was raised against the previous post and someone posted a link to the authors tweet about that. Seems like they prefer to publish the content first and then do proofreading passes.
> I wonder if Oracle winning would reinvigorate software developement

This is a future I like to envisage as well. New programming languages (for example), struggling for traction, might feel obliged to clearly open source their APIs, to demonstrate their openness. Corporates, tech giants etc. might in turn gravitate towards such more-open platforms, leading to a virtuous circle of innovation and steady migration away from technologies that try to use their APIs for extortion.
Ok boss. We'll keep a cache of the best known route for the most common queries or fallback onto the existing algo.
I guess I really haven't been paying attention!
I'm not sure I understand your point about the difference between the API code (where the names are mangled and meaningless) and the API design. Surely the API code is irrelevant here because it is not the part that humans interact with?

In this case the naming is an important factor, as that is the competitive advantage leveraged by Google in copying Oracle's Java API. They were able to tap into a developer resource who was familiar with the style, naming and conventions of Java

The API is the interface between the human and the code, and so copying a familiar interface design can be an advantage when building a platform
I find it utterly strange that drugs, hallucinogens, concussions, alcohol, electromagnetic stimulation, etc. could all reliably affect consciousness but that a brain identical to mine might be a pzombie. Like; who or what could possibly be doing the detailed-enough tracking to be sure to give my brain consciousness (but not my sleeping brain) while my molecular twin gets none?
>For whatever it's worth, we issue CSAT surveys to every candidate who interviews (about 6,000 onsite interviews in 2019)

I interviewed in 2019 and never got a CSAT. The recruiter (and rest of the team) completely ghosted me after telling me an offer was coming. No further communication, and certainly no CSAT.

It seems that could be a huge hole and your entire CSAT program is subject to confirmation bias if you are not even sending them to the people who are most likely to respond with a negative experience. I'm not sure I would trust this "empirical data" you have.
The amount of work going into supporting x hardware on Linux is just amazing.
Glad it works for this bro, but not really insightful.
Where's the prefetching? The table loads with the page. Loading it after with JS will only go slower.

> "server rendering can't accomplish with an SPA"

Again, you don't need a SPA to have some interactive DOM manipulation. Nobody is saying everything requires fresh HTML from the server, but something like jQuery Datatables will give you 99.99% of instant client features while working with server-rendered tables. htmx.js is another great library that solves most use-cases.

> "For someone who is building a collaborative graph editor?"

Obviously not, because that's one of the few times where a SPA is needed.

> "the anti-SPA crowd here sometimes hates JS and browsers so much"

What's with the extremes? Nobody is against SPAs or JS or browsers. In fact we want browsers to be used for what they do best, which is rendering URLs into pages very quickly. SPAs make a tradeoff in trying to emulate most of the browser performance and reliability in return for complex interactivity. The issue is that most sites don't need that interactivity, and what little they do need can easily be done with much less.
It’s ok, the cable will act as a fuse when necessary.
I really like his workshop. Tools are well organized. No dirt. Enough space for working.

That’s one of my life goals.
Propeller Shaft
I'm not arguing for oracle's case here. I'm not enabling the system to be more dysfunctional.

I'm merely responding to the parent's post that is interpreting a worst-case scenario that is vanishingly unlikely.

I'd appreciate if you didn't read into my comment an intent that isn't there. I am absolutely not arguing for "enabling further madness", and you asking a question that assumes I want that is not furthering this thread.