skysight-inc/HackerNews huggingface dataset:
One of they devs did say "C is a bad language to implement parsers for e.g. ASN.1". Unfortunately, there are enough examples out there [0] to prove him right. Not all of them will be mitigated by Rust (e.g. something like CVE-2019-17359), but it's probably worth it long-term (idk, i don't feel the pain of security issues day-to-day, only occasionally).

[0] https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=asn.1
What? Are you calling the context of a HHVM request a container just to confuse people?

Also, there's way more than just the web tier out there.
> Only users on Alpine (musl), BSD, other hardware platforms, and distro packagers are affected.

Not just niche or antique!
If it were underage girls that lied for pornhub amateur and got accepted the argument would not hold, so I don't think it should hold in this case either.

It is the company's job to make sure the screening process is not too permissive.
Yes; it’s particularly bad when you mix languages like this.

I maintain the nodejs foundationdb libraries. Fdb doesn’t have a published wire protocol - bindings are expected to wrap a dynamically linked C library which contains the protocol implementation and net code. And that library is very “clever” - it leans heavily on codegen (via mono) and hand written asm to support a high performance actor model internally. The downstream effect is that FreeBSD support for database clients has only been added recently. There’s no native Apple M1 client support. There’s been issues with code signing in Java ... and so on. Generally you can only talk to a foundationdb server from an x86_64 client that runs Linux/macos/windows. Which is arbitrary and frustrating.

I hope wasm/wasi eventually becomes the standard for libraries like this. Then the binaries/packages we distribute can work in different languages, different OSes and different architectures without needing all this drama. Wasm bundles fit perfectly in pip/npm/etc. Write them in any language you want and they run fast & run everywhere.
This thread seems very insistent on pushing the environmental case when presented with evidence to the contrary. It’s like I stumbled into a Republican convention in the 90s.

Baseless theories: people do this to feel better about LGBT discrimination or the idea of sexuality being out of our control is too scary for dudes who haven’t come to terms with their own masculinity. The latter isn’t necessarily shade, I’m not sure I figured it out until my mid-20s.
If the system is open to a l33t scr1pt k1dd13 who’s hacking knowledge consists of copy-pasting from 2600 articles, it speaks to a system that would stand no chance against a well-resourced adversary. This kind of thing may well be a new kind of front the next time we get into a shooting war “over there.”
It seems more likely for it to be an emergent property of children serving as hunter/gatherer resources but not competing for procreation. It is either a novel mutation or something that is selected for.
Even n=1 is not enough if Covid is any evidence of a pattern.
They've been saying that for ~30yr.

While you can definitely make a respectable living in the cybersecurity industry the fact of the matter is that over that same time period the people vomiting JavaScript trackers all over the internet made the same or more money with less effort invested.
This is the sort of opinion that evaporates once you become the victim of what’s happening here.

IMO Rust should have a C backend, then the maintainers could drop it as a build dependency and not break existing platforms. Though I expect there to be political reasons for Rust’s conspicuous lack of a C backend.
One of my company's clients has a beautiful office right above DNA Lounge (well, across the street or just adjacent - it's been a while and I've only been there once). They told me they can hear sound checks from their rooftop patio.
it's a tough sell imho because AWS has a learning curve but I feel like most devs are okay with being enmeshed for building scalable and secure systems on top of it.

AWS moves so quickly I think it would be a disadvantage to rely on a smaller, unknown 3rd party that tries to replace itself as AWS.
The burden of proof does not suddenly fall on the defendant just because one for-profit conviction company can’t back up their product.
Indeed. If the platforms are business critical then an impacted company should put money on the table to do the necessary work.

If they are not critical then well, why should other people care?

Also, Python packaging is pure hell.
That's just an incorrect framing, what I described is at least the corporate overlords wanted to portray. FWIW I have friends who work for Google.
That's a surprising claim, how is that measured? I'd love to read the paper you're referencing.
No? Literally no one is saying that a privilege means that everybody of that demographic has an easy life, you're arguing with a strawman. Anyway, why are you coming onto a HN comment thread to find out what privilege means? So much has been written about this.
My nephews are monozygotic twins. One is very straight, and the other is very gay. They happen to be mirror image twins. This points towards genetics.
We're deeply committed to using venture capital to systematically ruin something that you loved. We're just about done with Dropbox, so we'll be bringing that same great ethos to Reddit. Again.
This vaguely reminds me of hell.com.

I don’t remember what was on it - maybe some net art? But it was a rare “private” website requiring an invite to get it - this in the early era when websites were never private.
It does seem that the Vice author is also stanning for Nuclear Energy. The article doesn't mention the word "renewable" or "solar" once to compare it to nuclear power.

What happens when the nuclear inevitably fails or is abandoned? Not if but when?
I think the maintainers mentioned that they don't use semver.
https://github.com/pyca/cryptography/issues/5771#issuecommen...
The mobile site is essentially unusable now. Anything NSFW? gotta have the app. Video? Gotta have the app. Want to view comments more than 3 levels deep? Gonna need the app for that.

I like Sync, but I preferred just loading up reddit.com. This has reduced my usage a reasonable amount.
George Bush introduced a PREA/Safe Prisons Program that has radically changed prison culture. Prisons are far, far safer than ever before and getting even safer as time goes on. (Since I know about Texas in particular), Texas has spent millions per prison to install hundreds of HD cameras covering nearly every square inch of ground (outside of individual cells and showers). When someone commits serious violence, they are segregated for at least 5-10 years, depending on the severity.

There are still some gang-controlled areas, but they are an exception now rather than the rule. The nanny state is firmly in control of most of the prisons.
Agreed, I was a bit confused at first! Also, I found it helpful to turn on constellation overlays to get a sense for how much of the night sky is covered.
Why don't they pin their dependency version? Or is that hard to do with transitive dependencies in Python? (I'm not familiar with Python)
Is that “Arrington” user I see in so many comments the Arrington I think it is (TC)?
>That stuff is nasty as its in liquid form and easy to spill and even inhale. Also not a good idea for pipes despite how they're sold because such acids are hell on cast iron--i.e. what main sewage drains are made out of in older buildings and in jurisdictions that aren't favorable to PVC.

Eh, at the end of the day it's just acid. You can always throw something basic at it to neutralize it. It's not like it's a heavy metal.
Prediction: Mountain dew will announce a winner. Then, they will have to demonstrate/prove it. Then, computer analysis will show that they miscounted/or the number will be disputed.
You gotta respect the suggested approach to take preventive measures by banning requests to this individual image without a User Agent header and to try to identify who might be affected. I’m sure I’m not the only one here who would just treat it as abuse and ban without followup.
New York Times refuses to delete my account
It seems plausible to me that the, ahem, "spread" of the image was greatly increased through the efforts of 4chan.
I don’t think I ever found the information or techniques challenging. I do think that having the prior experience of a “wholesome” life made it occur to me as a potential solution to malaise. It’s very sad that some kids never experience that baseline.
hmm sounds like it could be related to a parasitic influence then. Many behavior modifying parasites infect mammals,wouldn't be surprised on its affects on humans.
The government drags it's feet as much as possible when it comes to holding the government accountable.

I think it's surprising it's even going to trial.
Most contests do this.
You're on HN. You should say such blatantly false things like

"Thankfully they basically never happen on phones"

There has probably never been a phone OS update that didn't break things. And not in a "technically something broke so haha gotcha! way"

Broken in a "half the apps out there need to be rebuilt with a new SDK version and/or deprecated or there'll be obvious bugs" way
Fn programming framework and language official web page
is an expert == is an "expert"
They can pin, they just didn't.
You aren't sending a referrer header (a good thing).
At least we can use old.reddit.com, although I'm not sure how long that'll last.
This might sound like a troll, but what’s wrong with using the app? Do you not use any apps?
Seems like mathematical clarity is what Matlab is good at, at least compared to e.g. python and C.
First, they don't use semver [0]

Python is all over the place with versioning, making it hard to predict what scheme anyone is using. People either falsely assume semver or just don't do any version constraints, both leading to problems. Whats unfortunate, is the Poetry project is putting their head in the sand on this and not letting you patch transitive dependency versions [1]

Even if they did use semver, its still a contentious topic within projects using semver of what all is "included". Some people take an idealistic perspective of "if it might break me" but any change can break them [2], making it impractical. I've seen others take this as a sign that semver is impractical and shouldn't be used. I feel its a limited but useful communication tool; we have to accept imperfections in its use.

[0] https://cryptography.io/en/latest/api-stability.html#version...

[1] https://github.com/python-poetry/poetry/issues/697

[2] https://xkcd.com/1172/
They both expose Remote Desktop to the internet given the proper credentials, and I’m guessing here but I think it’s pretty likely that the attacker had credentials. Whether it was a disgruntled insider, a dumb password, or (most likely) a reused password from a leak somewhere.

I would be interested to know if the TeamViewer account in question had 2FA... probably not.
Steve Jobs introduces the Macintosh (1984)
I can't think of a major, user-driven[1] site that's more actively hostile to being used than Reddit.

If I Google and find a Reddit link, I'll try just about anything else first. Actually participating? Only if I must.

[1]: in the sense that without users, Reddit is nothing
I'd wager the porn calculation is wrong by at least two orders of magnitude. It's grossly ineptly inaccurate. Data-centers do work. Sending porn/videos to people is easy, hardly work at all. sendfile() is amazing. Try it.

This article you linked is trying to re-set the numbers, argue that most other calculations are significantly high. Many calculations are well over 7.5GW. The 5.25 this article presents is a conservative number. Even if it's half that number, it's still astronomically high. And it's not going to be an order of magnitude over the reality. Unlike this no-good lying dirtbag porn estimate.

Driving down the coast is supposed to drill home what a giant flaming pile of garbage energy efficiency bitcoin has. It's supposed to try to impress what 5.25GW of power means, make real what each transaction's 1/4 of a second of that sort of power consumption can do. It's supposed to impress upon us how irresponsible it is that anyone would use this system, how desperate they would have to be to waste so much energy, to screw over humanity with such a gratuitous waste of energy supporting this deranged insane scheme, just to avoid using the monetary systems the world has. Yes. Unfortunately many people lack other means to put their wealth into into stable currencies, & that is sad, causes big hardships for them that are cruel, but for every other reason brought forth: bitcoin is a ruinous colossal waste & it's presence on this earth is an embarrassment.
The story of reddit: “And then it got worse...”
Rust supports musl and a bunch of BSDs, so if something broke with their packages, it should be only a matter of fixing the builds. That's a much smaller problem than adding a new old architecture to LLVM and rustc.
LLVM had a C backend which went unmaintained until the Julia folks picked it up and updated it for LLVM 10. I'm not sure about its current state.
>however I feel you are being unfair to the kid

I agree with you overall, but I don't think I am being unfair to the kid. That's the entire reason why I am extremely hesitant to say that it was all his own fault. I don't think it was purely his fault. And there is a reason safeguards for trading options exist, but he was smart enough to google what specifically he should lie about on that application to get the permission for trading options from his broker.

>"this man's failure to do less than a few minutes of googling" is true if you know what to google, but not if you are clueless.

>Setting up OAuth is a few minutes of googling to me, but not to the boss of my boss.

Makes perfect sense. But if the boss of your boss goes around the company rules, gets access to modifying live prod (by lying to whoever is in charge of granting permissions), and then makes some clueless changes to OAuth in prod that end up bringing down the entire auth infrastructure, I don't think it would be fair to blame OAuth for this. Not a perfect analogy, given that the kid didn't actually blow his account, he just couldn't read the charts for the type of options he was trading. But the main point of what i am trying to illustrate with that analogy still holds.
> gotta have the app.

> Gotta have the app.

> Gonna need the app for that.

This is why I changed my Reddit avatar to the Digg logo.
Sticking the word material in front of things doesn't make them true. Full stop.
I don’t want to seem like minimising (if I may say) all these works and similar ones. This is not surprising at all and they’re not new results actually.
Cf. Donsker-like theorems.
To the people who grew up before 4chan, pls don’t mention tubgirl
Does anyone have a take on where Reddit might be, say, 5 years from now? A view on the path to profitability? The obvious outcome for an unprofitable Reddit is an acquisition by a big media company but I’m curious if anyone has a contrary view on how it can become profitable and what sort of shifts it’ll need to make.
> Unlike stocks and bonds, options are a zero sum game

If each party only makes the one trade and has no other securities in his portfolio, maybe. That's almost never the case.

For example, if you're a market maker at Goldman Sachs and you sell 10k calls to a hedge fund, you want the stock to go up monotonically and gradually so that the customer profits on direction, you profit on volatility, and you can make money on the unwind trade as well. Win-win.
Hmm, what happened to Loop Quantum Gravity?
If they're fueling the dumpster fire that is their new website that looks like it was designed by 3 junior React engineers over a 1 month hackathon you might want to stand back because it's going to get even worse.

Their new layout is slow, hides information, full of dark patterns, full of egregious tracking and user hostile in a way that is rare to see.

Are there Reddit employees who are actually proud of this abomination? It's terrible!
I’ve worked in the HR tech space and we integrated with all of the big applicant tracking systems.

Many of them have screening questions. So you can ask something like “can you lift 50 lbs?” And set it up so answering no will screen the candidate out. But even in that case recruiters and hiring managers will usually still look at the candidate anyway.

There are also 3rd party addons that will score candidates, and resume parsers that will let recruiters search resumes for keywords.

But as far as I know there are no widely used AI solutions that will actually flat out reject candidates with no human intervention.

Even if it worked, the risk is too great that your model will start over rejecting people from protected classes and no one will notice until you’re hit with a lawsuit.
There are enough twin studies out there to rule out environmental factors as the sole cause.
Is there a UI/color science reason why the author chooses a yellow background?
How about "state actor could have easily sabotaged critical infrastructure but teenager got there first" ?
Wasn't that the game mechanics for the sprint event in Summer Games? Diving was the best in that.

I did really enjoy surfing in California Games.
The real question is: what was wrong with the website in the first place?
>It's not size, but power. Twitter's curation algorithms have massive unilateral influence on public opinion (reaching far beyond its own user-base) probably including the ability to sway national presidential elections.

Yes, and? "The ability to sway national presidential elections" (or any other elections) was of course one of the founding points of free speech in America. You just described major newspapers and publishers throughout the history of our nation, even before the advent of broadcast radio and television. Fox News also has massive unilateral influence on public opinion, as does CNN. That doesn't make them quasi-government at all

>I'm not aware of any utility companies with such power.

Then I must assume you aren't aware of any utility companies. It's not particularly challenging to imagine utility companies getting together and just deciding to cut off Republicans or Democrats. Like, literally just denying them any access to the electric grid, water/sewage, or data transfer beyond what they could then jury rig together themselves in regions where that's possible. You think that's less power then fucking Twitter? Are you for real?

>What proportion of your speech is by telegraph these days? I'm guessing it's a lot less than it would have been in 1891. For much of America, much of our speech especially our political speech takes place on social media, and thus "traditional" channels enjoy a much smaller proportion.

So what? It's not like we're forced to do that, and indeed I do not.

>Moreover, social media introduces an entirely new dimension: it's multicast. Your telegraph or phone call conveyed information to 1 other party at a time. A Tweet can be seen by millions or more.

I seem to vaguely recall these things, like way back in the day when we rode dinosaurs to work, called "newspapers", "books", "radio", "TV", and "web sites". All seemed somehow to have the ability to "broadcast" the ideas of individual people to large numbers of the public at a time. We seemed to do ok. And indeed that more recent one, the "web site" (I won't try to break your mind with "email", "IRC", or "newsgroups", baby steps), let you put out whatever you like to the world. It was lightweight and quite possible to host even on computing power of the level we now have in cereal box gadgets. It could All seemed to predate social media by a bit.

Oh wait we've still those? You can still use them? Oh.

What was your point again?
They probably write click-baity headlines because those sorts of headlines work though - so bit of a chicken and egg scenario, isn't it?
No, Python is dead because the maintainers decided to create a new, defective, language with a intentionally-misleading name, and then threatened trademark lawsuits against anyone who kept maintaining the original. That sort of thing is (I assume) why lvass was asking about trademark waivers in the first place.
I think it was popularized back in the days of Slashdot.
Google suggests its mostly used to remove unruly kids from school. So... yeah... that does sound bad.
If you are using open source packages in a corporate setting you really should be
a) pinning versions
b) maintaining secure, internal mirrors instead of always pulling from Github etc.
That would prevent breaking your builds without being intentional about it, regardless of what changes upstream introduces.
> This makes systems designed never to be shut down and turned back on again

Not necessarily; you just need a way to bootstrap the memory. Plan9 is pretty easy to run a fully functional terminal from memory/network access. Live CDs work pretty well, too.
I'll take another look when you start supporting Org features like adding clients with seats. I would love to have something simple to use for an admin product.
That's totally unusable on a small screen though.
I find it funny that software with relatively no r+d or initial costs have become burdened with VC.
By "mirror image", do you mean very identical looking, or do they also have different handedness or something? I could go 50/50 on this being some term for twins I haven't heard before.
Next up, ask me how I feel about space tourism!
I wonder how they handle the power supply from solar and also how coal plants are managed during excess power from solar.

Coal plants are usually most efficient when running in a continuous, almost max generation condition.
There's mrustc which compiles Rust to C. Rustc itself supports two back-ends now (LLVM and cranelift), so more should be possible if someone wanted to contribute and maintain them.

I don't think there's any ideological opposition to having more back-ends. It's just a huge amount of work, and is lacking volunteers, especially for niche platforms.
Their majority shareholder is a big media company.
I don’t use social media apps if I can avoid it. You don’t really know what information is being collected about you. Even the website collects an obscene amount of information. Combined with the fact that Reddit is full of incendiary content, it’s better to avoid being fingerprinted.
I think there are alternative implementations that are (much) less mature than rustc.
And I wonder if using those implementations would be good for a project, that requires security...
well, this script, for example, gave me all sorts of fits trying to run on the then-new version of MATLAB I tried it on:
http://cpc.cs.qub.ac.uk/summaries/AEJS_v1_0.html
The reason they broke the website to push the app is to get more user data to sell to advertisers and to make ad blockers harder to use.
No, it's a simple form that you have to fill out at every brokerage nowadays. It asks questions about your risk tolerance, how well you handle volatility, etc...
They are a top ten site on the internet. I don't see why Twitter is 45 B market cap but Reddit should be so hopeless, especially when their subreddit model lends itself much more clearly to ads than the "stream of conscious" of Twitter. They don't even need to worry about tracking/privacy as much, since just the subreddit name and nothing else is a huge hint as to what ads should be relevant.
These guys figured out that the money is in the award stand. That was clever.
Why would area and population matter?

On that basis we could conclude there are 2-3 times as many languages spoken in China than in Europe.
Don't know if this is the case with United but I experienced a few companies where the first round of recruiting defense was in India - so it's possible someone got your app in the middle of their workday.