skysight-inc/HackerNews huggingface dataset:
Well, I don't see that the "metadata" are actually obtained from the opened file handle in the Rust version?

Metadata request must happen at the different time point than the open of the file and the API as far as I see works on the path, not on the handle:

https://doc.rust-lang.org/std/fs/fn.metadata.html

which says to me that the Rust version can manifest the bug of the same kind -- there are different time points in which different independent information is checked, and that all the calls correspond to the same opened file handle just can't be assured?

As far as I understand only checking the properties of the opened file via the same file handle is safe for the described kind of bugs, nothing else.
I won’t call some of these reporters journalists, they are more like activists. They aren’t interested in keeping society informed, they just want to push their agenda.
> The numbers are all different but do have the same area code and first 3 digits of my phone number so there is a pattern.

I should have also replied to this as well. This is a common pattern among some of the scammers (remember, at the present time the initiator of the call can send along any caller ID value they like, and your phone simply displays it). What I've seen postulated as a plausible reason why is that the scammers have done A/B testing and determined they get a slightly higher human answer rate when the incoming number is the same area code and exchange as your own number.
I turned off everything I could in firefox and it still phoned home all the time.

Finally I just firewalled it off:

firefox.settings.services.mozilla.com
shavar.services.mozilla.com
aus5.mozilla.org
Canada has been going through a second wave. (Well, Ontario and Quebec are, with Winnipeg as a bubbling hot spot. But given most of the country lives in Ontario and Quebec…)

https://ourworldindata.org/coronavirus/country/canada?countr...

The protests have been very, very small. The population, based on polls, supports masks.

https://www.ctvnews.ca/health/coronavirus/civic-duty-or-infr...

What’s going on in Canada is, I think, what’s going on in Europe: pandemic fatigue. It sucks to be socially distanced for this long, and people’s guards go down. I don’t think we are seeing the almost nihilistic denial that you see in parts of the States here; we’re just tired.
I think the most common reason I’ve had in the past was to connect to the RabbitMQ web admin while dealing with some emergent issue with task throughput, a common problem area with hacked together web apps that start to get real traffic. It’s also handy to be able to use a more advanced SQL client that’s not installed on the server (pgcli, emacs, etc) when digging around for something that’s causing errors in production.
Reddit and Twitter starts video with muted sound on my browser (Edge).

My guess from someone who had to develop a web video player at work, many websites will attempt to autoplay the video with sound and if it fails, it's easy to catch the failure event, they will mute the video and try again.
In Canada we have both a slab of 4 sticks, but also 4 individual sticks in a cardboard box. I like that one a lot, since a stick of butter is too little and a slab the size of 4 sticks is too much. 4 sticks in one pack is perfect.

As a side note though, it’s not just packaging. I’m originally from Germany, and we don’t use salted butter there. In Canada it’s all salted butter by default.
I have used Gmail since you needed an invite to use it and I've never had any other assumption than my e-mails being about as safely tucked away as they would be on a public notice board in a town square, and that Google in addition to this is probably scanning them frenetically to figure out what they, or more specifically their advertisers, can try to sell me.

If I need to send something I actually care about I wouldn't use e-mail in the first place. It's a low-effort type of communication with normal people who don't care about security, so I'm not going to waste time making my end of that line of communication an impenetrable bastion.
Content By Design
If the news could:

1. Stop publishing minority opinions as if they were representative.

2. Stop publishing minor stupidities because they are "exciting".

3. Stop trying to be entertaining or interesting. Stick with informative, and if you get less views, so be it.

4. ???? Open to suggestions. Maybe we could write up a set of voluntary rules for journalists with ethics.
I wonder how much energy gets pissed away for our two comments.
> The author posted elsewhere in this thread that they were signed out of Google entirely. So sync was disabled.

I once had an issue similar to this, and it turned out to be an issue with my profile. Once I manually deleted the site data the problem didn't come back. They admit that this may be a bug and I wouldn't be surprised to find out it is, but regardless there are plenty of other options including ephemeral profiles that you can use by setting a policy. If they aren't signed into sync, then I also suggest they disable syncing from the settings and the policy as well.

> Since Mozilla doesn't do anything similar when not signed into their sync service, this is plainly false.

They _just_ install Pocket and a bunch of other unrelated services and send your DNS queries to third-parties, as well as opting you into recommendations and telemetry.

> If you're not highly technical, you're not entitled to privacy?

You don't have to be highly technical. There are a lot of options for Google accounts to disable ad personalization, history, third-party access, etc. In fact, I find it much easier than almost every other company I come across. The documentation is easy to follow and is so easy my kids could do it. I'm all for privacy, but at the same time the rules need to be applied equally to all companies. Just attacking Google isn't going to fix the issue, in fact it will make it worse by giving a politicized government the ability to go after anyone that they feel doesn't represent their political goals.

> It's simple. Some of us believe that a base level of privacy is a human right. And the only entities capable of facilitating those human rights are governments.

We don't live in a socialist society that believes that humans have fundamental rights to basic necessities. I'm all for privacy being a human right, but shouldn't housing, healthcare, etc also be human rights? Google gives a lot away for free. Until we start addressing other issues, privacy as a human right will never be on the table and when it happens you can't just apply the rules to one or two companies. It has to be equal.
> In Finland, the authorities reserved 6M to create a contact tracing app and all support systems.

In Canada, Shopify and Blackberry donated some engineering time:

* https://en.wikipedia.org/wiki/COVID_Alert

Can't find anything on the back-end costs.
> Search for the news right now and you will see their cases are increasing and they're dealing with trying to control it.

This applies to all of Europe though. Places like France, Germany, Belgium, and Italy are all seeing skyrocketing daily cases.

From what I remember, it’s not that Sweden didn’t encourage mask wearing or social distancing, it just didn’t make anything mandatory, and it didn’t enforce any lockdowns. It hasn’t particularly saved their economy from any damage, although it didn’t seem to cause them to have rates of infection or deaths to get much worse than the average in Europe, and their hospitals didn’t get overwhelmed.

If anything, it seems to demonstrate that the idea that avoiding lockdowns will save the economy isn’t realistic, and the economy, but lockdowns aren’t going to help much either.

At this point it seems like all anyone can do is wear a mask, do what you can to socially distance while living a relatively normal life, and wait for either a vaccine or the pandemic to pass its course.
This is an unfortunate title. For a moment, I thought this was going to be something I could run on my old NextStation.
In my experience you win Risk by declining to play.
Some less-known search engines
Draze - family frendly search engine:
http://www.draze.com/

Owinda combines automated search results with editorial curation:
https://www.owinda.com/

With GoGoPrivate you can now search the web without tracking your search history or any personally identifiable information, making sure you are not tracked:
https://gogoprivate.com
Does it take into account money supply on customer side?

My impression was that it only considers supply and demand of a given good, treats money differently as something else that everybody has infinite demand for and wants to supply in minimal quantity in exchange for good.

Is there a theory that treats money just as any other good? With limited demand and sometimes oversupply?
I had the same realization as you - I thought Flexbox was endgame until I really got into Grid. Both are still very useful, but more and more I see myself using Grid over display flex.
the EU is incredibly hostile towards the U.S. lately.
I think he means there is little to no protectionism in Europe when it comes to software - so we get 'digitally colonised' by the USA.

Whereas China and Russia have stricter rules about what foreign corporations can do, so there that allows for the creation of homegrown solutions like Baidu - would Baidu exist today if Google was able to run their services without interference in China since the start?
On POSIX filesystems, deleting a file removes the name from the directory list, but the actual file is still available to open file descriptors.

The point is, if I go by names, there is no guarantee of identity. File-descrpitors ensure that.

Same could be done with c++, but the libraries are not designed that way.

Still, I don't find it terribly convincing.
Hidden services are safer in the sense that your connection can't be deanonymized with the help of your third relay (which would have been an exit node in the case of a clearnet connection) but if the hidden service in question were to be a honeypot and your entrypoint (ISP or tor guard node) were to be monitored by the same entity (this second requirement also holds for clearnet connection monitoring BTW), it would be possible to deanonymize your connection to the hidden service.

How easy it is to perform the traffic analysis would have to depend on the amount of data being transferred, if I had to guess, so downloading a video would probably be worse than browsing a plaintext forum like hackernews. But if we're talking about a honeypot, your browser could be easily tricked into downloading large-enough files even from a plaintext website (just add several megabytes of comments in the webpage source for instance).

> In order to be really anon you would need a custom client side engine that randomizes the order of external resources, and pauses/resumes requests (given 206 or chunked encoding is supported), and/or introduces null bytes to have a different stream bytesize after TLS encryption is added.

It's unclear to me how any of this helps avoid traffic analysis. I believe tor already pads data into 512-byte cells, which might help a little bit.
Personally, I think there's a market opportunity for someone who actually treats people with respect and decency.
I use Fedora on my VPS and up to date Firewalld is really limited compared to OpenWrt firewall3 config. Inter zone forwarding rules are still not a thing, MSS Clamping not sure, and not sure if there are anything close to OpenWrt mwan3. SFC is just legal representation, and joining it will not change anything to the development. As pointed by others, RCE (or equivalent) in package managers affected all of them, so this issue alone to switch seems an overreaction to me.
How Egypt is growing forests in middle of the desert
This. The person that erased the database in my case came forward to me as soon as we realized what had happened. At that moment I was very happy it was an "inside job", it meant I could discard hacking.

As its said before: he made a mistake. The error was allowing the prod database to to be port forwarded from a non prod environment. As head of eng that was MY error. So I owned to it and we changed policies.
Yes it was fixed when pointed out to them, after all openwrt users from 18.06+ had been exposed to this for three years. There's no known way to guard against bugs in the end, but... you can empirically test... they didn't check at all if their package signature check could detect tampering after patching it? For 3 years?

Then no infrastructure changes as a reaction to what happened? Like I said good for them, the PR mentions they will get some funding this is the kind of thing they can spend it on.
Show HN: Classicops - time based Production access for AWS
Step away from the screen
LIDL (the supermarket) is going there too:

https://stackit.de/en/#about-us
Is this to make sure their browser sign sync feature works? I recall that being a thing years ago.
Quora question: Why is slam poetry so bad? : https://www.quora.com/Why-is-slam-poetry-so-bad
I've found a Pascal compiler targeting the PDP-8 based on Pascal-P4. I think it generates bytecode. But the interpreter seems missing: http://www.dbit.com/pub/pdp8/pascal/compiler/
A content writer makes a WordPress site about their offerings.

Posts the link to Hacker News with the title "Launched My First Startup".

Hits the front page.

Fabulous.

Especially since the English on that site is on the brink of nonsense. Is it is machine-translated from another language?

Anyhow. I am flagging this. I am not sure how it got on the frontpage. But that it did is a sign that something is wrong here.
I'm every bit as surprised as you. I don't think it's a significant fraction of congress though, I think it's specifically senator Mark Warner. He did work with tech before, and my take is that he knows what he is talking about and was waiting for a good political moment to present such unpalatable proposals (unpalatable to the tech companies, that is).

See his Wikipedia article:
https://en.wikipedia.org/wiki/Mark_Warner#Early_life,_educat...

Last year he (meaning, most likely his staff under his supervision) put out a "whitepaper" outlining 20 possible proposals to regulate social media and tech companies. Notably, 4 of the things discussed were introduced as bills in one form or another.

I posted about them last year, see the discussion and links here:
https://news.ycombinator.com/item?id=21389809
I am no economist, so I am probably wrong there: USA or China have a better GDP than France or Germany, yet the European countries have better healthcare, education systems and life expectancy. Different priorities?
How is it the default in Rust? Like C++, the Rust stdlib gives you both options (std::path::Path::metadata). It boils down to calling stat vs fstat (on posix systems), and it's up to the programmer to make the right choice.
> So adding a data-saferedirecturl attribute and using that in the click handler is entirely different.

The end result is the same. Gmail is rewriting url in their web interface. While there isn't enough evidence yet to decide whether they're attempting to do the same for IMAP, the fact that they do it in the web interface is undeniably true.
And on the day that “mktemp” fails for some reason, that script will then delete your entire home directory.
I'd argue that even very good C++ programmers make mistakes that can be harmfull, and that those mistakes will be hard to catch by the average programmer who will deploy the new code. That's in my opinion why on a small to medium project where objects are not needed, it is better to use C than C++.
I would love to see some peer-reviewed sources on those claims, specifically that canola oil is actively bad for you, that "temperate oils" are bad for you in general, and the rancidification claim (I keep mine in a cupboard and I have literally never had it go rancid).

I cook mostly with (actual genuine) extra-virgin olive oil or peanut oil, since I prefer the smell and taste over the more commonly used canola/sunflower oil, and yes you can fry in olive oil just fine. But I still want to see some credible research that supports your claims.

Edit: here's a good article with plenty of citations that strongly disagrees with your claims: https://www.hsph.harvard.edu/nutritionsource/2015/04/13/ask-...
Show HN: Willow Patch Games - online games with friends and family
> think fixed-instruction, l[...]. That's what RISC really means today.

> No variable-length instructions.

So, ARM is not a RISC instruction set, because T32 (Thumb-2) instruction can be 2 or 4 bytes long.

Similarly, RISC-V has variable-length instructions for extensibility. See p. 8ff of https://github.com/riscv/riscv-isa-manual/releases/download/... (section "Expanded Instruction-Length Encoding").
The Agile Methodology is to argue about The Agile Methodology.

It's the CIA Simple Sabotage Field Manual applied to project management.

Any work accomplished is entirely accidental, and will be remedied during the next sprint planning meeting.
You can get it from a File too: https://doc.rust-lang.org/std/fs/struct.File.html#method.met...

(This doesn’t invalidate your point, of course, just saying you can do this.)
There's no reason to believe that lurkers have substantially different behavior than commenters. More likely is that those who use firefox are more passionate and informed about browser issues.
Did anyone really expected better from Google?
Yeah I’m amazed how many Mac users use Chrome when it’s such a resource hog. Safari has better privacy and battery life as well. Maybe people use Chrome syncing or something and that’s why I don’t understand but it seems like they went out of their way to get a worse experience.
Overlays on 8" floppies, the whirr-kerchunk of retries has left a scar across my soul.
My personal feed on https://github.com/
FWIW I never heard of that either, despite living in Japan on and off for a couple of years, marrying a Japanese woman, and being decent at Japanese

My guess is that it's just a 1960s meme that's fallen out of use

Actually, I've never seen or heard of any of the butter-related stuff.. Maybe those butter tools are a regional thing, or they're relatively unknown. I've never seen them on TV, and I couldn't find any butter dishes for sale when I was looking for one in Tokyo, so I ended up having to use a plastic box from the dollar store.

My in-laws were furious when I kept hiding butter in a tray outside of the fridge so it'd stay soft, and all their friends agreed with them that I was being a crazy foreign fool
Ba dam bum.
OP says you can't really avoid it in Rust either, but argues that because there's not a separate check it's more robust. I agree w/ you though that it's not a strong argument, and that you can do the same thing in C++; it's a confusing/arguably incorrect point IMO.

More broadly, this is kind of a bad example. Handling files is surprisingly difficult and that's really where the dragons lie here. IME the dragons exist for both Rust and C++, because they're platform problems rather than stdlib/language problems.

NB: the correct thing to do here for POSIX platforms is to call fstat, which is true regardless of systems language.
Median household income in dollar value has absolutely nothing to do with what I wrote.
> government says it's the only option.

Over here in the UK, the government was dragged into this with their feet kicking. The fact that we were slow to act to stem the initial explosion of cases is the reason why a longer and more drastic lockdown was needed according to the modelling and borne out by data subsequently.

Three weeks ago the UK government was warned to start re-imposing measures to stem the second wave. The government ignored this, and now this week they are again forced screaming and kicking into a new lockdown regime as COVID hospital admissions start rising to levels last seen in March.
Trying again since my earlier post didn't get much traction :-)

Hey HN!

I’m Alex Scheel, co-founder of Willow Patch Games (https://willowpatchgames.com#about).

We’re creating online games that are fun to play with friends and families unable to meet in person during these times. Unlike most other competitors in this space, we’re looking to keep things simple: we’d like to bootstrap the company, we won’t sell user data for advertisements, and we’ll avoid gaudy graphics that require the latest phone as much as possible. We’re trying to be good stewards and provide quality games rather than being just another race-to-the-bottom game company. We’re trying to be as friendly to join and play as possible: joining someone’s game will always be free.

I started this project in August with my brother, Nick, our other co-founder. We’re still in the early stages, but very curious to hear feedback about what we’ve built so far. We have lots of ideas and plans for the future but figured we might as well see what HN has to say! At least for us, we've had a lot of fun playing this under our states' quarantines. We've recruited several friends and family members to help beta test and it has been a blast reconnecting with everyone.

Some cool things we have brewing are:

- Video and text chat integration

- Other types of games, including some of our favorite card games

- Improving the experience on older devices

- Building mobile apps

- Alternative dictionary support

Feel free to email us at willowpatchgames@gmail.com if you have any questions.

Let us know what you think and may the odds be ever in your favor!
Time Series Database Lectures: Kdb+ (2017)
Sounds like you are the one lacking credible references.
As long as the boomers get their retirement payments, who cares about future generations?
Is anyone aware of a similar list but for systems programmer learning path?
> even very good C++ programmers make mistakes that can be harmfull

Are you seriously saying that this isn't also true for C, (and indeed for all programming languages)?

A challenge - try writing a program in C to read a text file containing lines of unspecified length, sort them, and output them in sorted order. Compare the C++ and C code and tell me which you think is the cleaner and safer.
It doesn't help that the best engineers work for GAFA because of big salaries. European companies pay smaller salaries compared to the US ones.
A good engineer can double his salary by going to the US. Sure, he may see more social issues there because of no safety net, but maybe he doesn't care.
Yep - I will often just scroll down to the "densist" area. Keyboard shortcuts are not the problem.
Hi ratherbefuddled,

Thank you for the insight. We are definitely working on generalized efforts to make 'most/all/everything' faster (including speeding up the app overhead), but those types of projects unsurprisingly take a little longer to finish.

On the other hand, specific user feedback might be 'the most annoying thing to me is that pages with Links load slowly, I need the links to load earlier because of X', or 'I need inline comments to load faster than page comments, because of reason Y'

-> this type of feedback could give us something we can fix quickly and alleviate user frustration sooner. Hopefully the intention makes sense.

Of course, in general, we're also always looking for any feedback that can help us improve Confluence!