skysight-inc/HackerNews huggingface dataset:
AFAIK this isn't uniquely a Rust problem; build systems are just extremely leaky and easy to fingerprint. In fact, it's part of the reason why reproducible builds are so difficult to pull off.

If I remember correctly, Stuxnet was identified as being a US/Israeli joint cyberattack by, among other things, common home directory names in debug build strings.

>"If it helps, you including user ids like this violates GDPR... so this should be addressed by the rust team."

This isn't true: GDPR covers entities that collect, store, and use user information ("data controllers"). Rust's developers are not data controllers; they're compiler developers. Maybe you could argue that crates.io has inadvertently become a data controller because they store these packages, but that still seems like a stretch. Regardless, the inadvertent leak of user information is directly tied to the legitimate purpose of allowing the compiler's panic machinery to output a usable backtrace. So I don't think you can scream "GDPR" just to get your Github issue more attention.
It's almost universal. Games typically include a ton of local file paths from the developer's computers.
Totally agree. Appears to be using a script called "SmoothScroll".
Thankfully no, I tried it and it requires additional account information. But I was also very honest when I called Amazon about the issue. Since I had shipping addresses, order history, and names of the other person I wonder if social engineering would have worked. Without their phone or credit card I think probably not.
> - I like the various iCloud/multi device integration features

Next time you give linux a try, you might want to check out https://kdeconnect.kde.org/ and https://syncthing.net/. I'm not a Mac user but I'd be surprised if between these you'd be missing any features.
In my experience that essentially never happens.

One of the complaints about c++ is how many obscure features it has. Most of those obscure features are for authors of the standard library implementations (or other libraries intended for widespread use), not for user code. If you look at the standard library source it’s very hard to read because it’s full of things to transparently handle weird corner cases in order to avoid user surprise.

But in my code I don’t use any of that stuff. There’s a pretty straightforward modern language in the middle of that, and not even a huge one.
It seems like a pretty good license to me. I just can't host it (same as GPLv3), but in a few years it switches to an every more free license.

Is the concern simply that governments can only use it to help people?
It's the same point: it won't be as bad as you're implying. Rates will of course go up, but not drastically. The US won't be able to borrow as much, which is good, but it will still be able to borrow close to the same amount as a percentage of GDP.

The US will service the debt the way it always has, by growing its economy. Somewhat higher inflation will actually reduce the debt load in real terms.

The "joy" is that the US will be forced to be more disciplined.
Not going to say it's not a problem or that it doesn't require fixing. I acknowledge that it can be an issue for some people.

However, can someone elaborate the actual (practical) implications. I.e. problems that emerged from such an issue in the past and caused significant damage in some way.
This is not the way.

If we relegate privacy to fringe browsers like this, we'll lose in the long run.

It's not possible to have 0.05% percent of the market, and try and compete with goliaths like Google. So it creates a feedback loop of a browser that people don't really use because it lacks features/popularity. Or/and these companies are also forced to do things like Brave and their in-browser ads.

Meanwhile there'll be a group of people that'll say things like 'if you really want privacy don't use chrome, use these private browsers'. Completely taking off the pressure on the bigger browsers.

Also, catering specifically to privacy is always weird. It makes people think that you have something to hide. Everybody wants privacy, but someone really goes out of their way, it makes you think they have something very serious (i.e. illegal) to hide. It's sketchy.

There needs to be a collective awareness and greater pressure put on browser companies.
Love this comment
So many versions. I just remember wrestling with floppies getting dial up networking on a wIn 95 laptop.
The quotes are taken from this material:
https://equitablemath.org/wp-content/uploads/sites/2/2020/11...

If you s/math/logic then you kind of see the criticism. I haven’t taught math, but this type of distraction motivates me to recommend individual study even more.
I'm running 4 hosts behind 4 different NATs in the same zerotier-virtual-network and never had any issues. By far the easiest way to accomplish connecting different hosts behind different NATs. No config whatsoever required!
I have written at length, in past Pascal posts, about my affinity for the language in my early days... specifically Borland Turbo (later Borland) Pascal[0].

I ended up hacking on some leaked Telegard source code, decided to scrap it after discovering something I thought was suspicious and realizing I couldn't expect to understand every detail of these thousands of lines of code that I shouldn't have had in the first place. I ended up completely rewriting it in time to run it on my own, and a few friends' BBSes for about two years until we all found romance, the internet or both.

Just thinking about one of the reasons why I did the rewrite reminds me of how incredible that language/ecosystem was--given the early-90s when I used it. The "final nail in the coffin" for me was the code that authenticated a user. Bear in mind, this is the early 90s. You had a "handle" and a number, which a 16-bit unsigned integer (0-65535), assigned sequentially with the admin always being "0", and you could login with the number. Passwords were not only stored in plain-text in a relatively readable format in a file on the drive, but the Admin panel helpfully displayed the user's password every time a 'sysop' viewed a user's account. The background is provided to make clear: this was not a complicated login routine designed to avoid side-channel attacks, perform string comparisons in deterministic times, etc -- if they were, it'd be an amazing waste of time given the total disregard for security throughout the code (and most projects of this era)... and if it were, I wouldn't have been a good enough developer to even identify it.

However, this code had a few `goto` statements, and some inline assembly. The three places that had inline assembly in this code were the ANSI implementation, that I wrote, the 16550 UART driver, that I wrote and this login routine that I did not write and as far as I could tell had absolutely no good reason to be there. After hours of refactoring, I broke the code out into "code that logs a user in" and "code that makes something"; That "something", IIRC, was a round-about way to generate a "master password" that could be used to login with any account (and `0` was `root`). During testing, I discovered that my "skipping the code that makes something" part resulted in an empty string value which meant I could login with no password to any account. I rewrote the whole login routine, and then the whole thing.

Would kind of love to look into that, now, since I'd actually be able to understand what is going on, now (maybe!).

[0] IIRC, the IDE fit on a 5.25" floppy, and Version 5.0 had a whole bunch of new, elaborate, syntax highlighting. It was amazing.
I know someone who freezes on trips in other countries when she enters an underground station and the map stops responding. She just doesn't understand why the magic stopped working. She is so dependant on Google maps that she doesn't trust herself anymore. I tried to explain GPS and satellites, but she is dense.
In some locales they use services like Lasership, but in less densely populated areas they have their own last mile infrastructure

(This is of course separate from people who drive actual Prime delivery vans, who seem to be everywhere)
Do you feel the fundamental precepts of programming don’t generally hold true regardless of the application of the technology?
It's so bad that even some intelligence agency-developed malware gets busted (in part) due to leaky paths and other strings in binaries' metadata.

Here's a leaked CIA Wiki/CMS thread from 2015 discussing some of the fuckups found by Kaspersky in NSA ("Equation Group") malware binaries: https://wikileaks.org/ciav7p1/cms/page_14588809.html

>This is PDB string, right? The PDB path should ALWAYS be stripped (I speak from experience. Ask me about Blackstone some time.). For Visual Studio user mode stuff, the /DEBUG linker switch should NOT be used. For drivers, it's a bit harder to avoid it, but a post-build step using binplace will strip the path information.

>For other strings generally, yeah, search the binary for them. Don't use internal tool names in your code.

Examples from Kaspersky's report (https://securelist.com/files/2015/02/Equation_group_question...):

>"Timeout waiting for the “canInstallNow” event from the
implant-specific EXE!"

"Implant" is NSA lingo for "persistent malware". Probably best not to include routines for helpful error messages in your production-build nation-state malware code.

>"Manual/DRINKPARSLEY/2008-09-30/10:06:46.468-04:00"

Conspicuous all-caps NSA codename.

>"standalonegrok_2.1.1.1"

"The codename GROK appears in several documents published by Der Spiegel, where “a keylogger” is mentioned. Our analysis indicates EQUATIONGROUP’s GROK plugin is indeed a keylogger on steroids that can perform many other functions."

>"c:\users\rmgree5\"

Follows NSA's internal username / @nsa.gov pattern.

(The whole thread's an interesting read in general. You can even hover over all the myriad acronyms/initialisms to see what they mean. Also kind of amusing to see the unsurprising rivalry and passive-aggressive shade between CIA's and NSA's cyber operations teams.)
> "If it helps, you including user ids like this violates GDPR... so this should be addressed by the rust team."

This smells like bullshit to me, but I don't know enough about GDPR to say for sure. Can anyone comment?

edit: more broadly, can free software (ie: rustc), run on individual developer machines, actually run afoul of the GDPR somehow?
533M Facebook users' phone numbers and personal data have been leaked online
I haven't heard it used in English but it is a very commonly used word in French. Perhaps it is in the process of being borrowed, like many other words have been from one language to the other.
(200) places to promote your startup and boost revenue
I’ve actually thought about this a little too much. When I take my dog for long walks, there’s literally no where I can use the bathroom. I can’t even go into a McDonald’s (no dogs). I’m sure homeless people are denied this basic human right everywhere.

Our portable bathrooms don’t self clean well enough. We need to think about how to design a better one. I don’t know if that involves building in air vacuums that force pull in everything to avoid clogs, or if we need more high pressure water, or literal acid that floods the floor after someone leaves (self cleans the whole box, and automatically sprays disinfectant, vacuums down all the shit in 2 minutes, then unlocks the door). Maybe have one time plastic bags that seal up and then get flushed down (all automated). Some kind of hosing down of the whole thing with acid is still high on my list.

There’s got to be some tech we can make that would make rolling these out the most hygienic thing to do as a society.
Yes. There is a commercial language called 8th that is pretty cheap and you can get the source with an NDA and the enterprise license. The enterprise license is cheaper than a desktop license for most software, so pretty reasonable IMO.

I've played with it and it is pretty nice and similar to using Python in a way. It has a full REPL, but can compile to single file executables that run on Mac, Windows, Linux, Android, or iOS which is really nice. You can also cross compile to any of those platforms. It has functions for bluetooth, database, GUI, web stuff...etc which isn't common in a lot of Forths. It is probably the most modern of the Forths I've played with and is pleasant to use. It has a small community, but the apps I've seen have been impressive. The creator releases bug fixes and new versions all the time and will sometimes get a fix to a user in just a day or so.

It has all of the functionality one would expect in a modern language like a ton of string functions and I/O. I'm not an expert, but didn't think anything was missing when I was playing with it. I would definitely consider it for hobby projects and maybe for some desktop apps if I was a solo contractor. Unusual software like it might be difficult to get in enterprise IT though where someone would have to support your super niche language that is mostly dependent on one individual.

There are some other Forths to consider that are meant for desktop/server use like 8th. In particular, RetroForth seems nice and there is Factor, but I found using Factor to be very confusing and not straightforward. I'm not sure how much attention Factor gets either these days since the creator left to work on Swift at Apple a few years ago. I think there are some maintainers.
> multi-touch was what got the the smartphone revolution going

Massive citation needed. When I bought the first iPod touch (at the time it was a gen 1 iPhone without the GSM modem) it was because it had a real web browser and not the BS 'mobile' browsers on my Windows Mobile smartphone. I could actually visit a store's website and find their hours, check if an item was in stock, etc. There wasn't even an app store back then... IIRC multitouch was only used for zooming into photos in the photos app.
Classic false equivalence. Compare US democratic and republican parties. While they both have their issues the modern D party versus the R party is a clear winner. One supports the general welfare and has humane policies while respecting the will of the majority while the R party recently tried to install a fascist leader over the votes of the majority of the country, the same leader which also tried to have Congress removed from power by sending his demented minions to attack the Capitol building.
> This worries me because "M1 feels like Apple actually care about the Mac again" I completely disagree with this, I think Apple is aiming to have Macs running mostly iOS applications in the near future and MacOS will eventually be deprecated once we hit critical mass of that.

They’ll be running apps, but the lines between iPhone, iPad, and Mac will be blurred and I think this is fine. Similar to how apps now may have different features or layouts as you switch from iPhone to iPad.

I’m a little less worried about them deprecating macOS. They could do it tomorrow really but there doesn’t seem to be a need to do so. I think the goal here is to actually make the Mac stronger by unlocking access to the iOS App Library. It’s a good goal. I know some will complain about the iOS apps not being open source or something but probably 95% of users (myself included) don’t really care. I find open source software extremely valuable, but I don’t care if Flappy Bird or Office 365 are open source. I just need to use the software and get on with my day.
Your work was so influential! If you are working on hololens I have high hopes for that next step in computing interfaces.
There are a lot of words without a strong definition, but it seems to summarize to:

“Property testing is where you vary the parameters, perhaps within certain well defined constraints, and through randomization ensure certain coverage.”

I think there are other ways of handling this, beyond the way described, but I’m not sure if that’s because I just read a field guide to Hypothesis (again, without a firm definition), or if other approaches - such as test parameterization at key boundaries is more effective.

My hunch is that property based testing provides less value on unit tests - where it could be used to reduce coverage - and more value in integrating those units together - where the number of permutations can grow very quickly.
> a quarter of young women had their first orgasm in masturbation before the age of 13 and one-tenth before the age of 10. Some women reported that they had their first orgasm in masturbation as early as the age of 5.

Is it common for medical professionals to take this kind of self-reporting seriously? I have close to zero memories about age 5. In addition, I know 5-year-olds and know that they have very little awareness of their own bodies, such as when they are about to pee themselves. I find it very hard to imagine that an adult could have reliable memories about orgasming at age 5.
Rust github project has at the moment 6707 open issues. This is just one issue among many. Somewhat obviously at this scale the Rust team can not resolve every issue immediately.
Google's killing off its legacy WiFi app
Also EE getting deep into gardening, plants, soil web, etc. Haven't tried hydroponics but doing site prep for a greenhouse (Growing Spaces kit) where I will have an aquaponic setup.

I would recommend learning about soil and fungi. You will be less interested in electronics and computers afterwards...
My NAS exposes itself over the internet without permission
I know this is vaguely off topic. But main point was that boot up times aren't bothersome for stable systems with long uptime. When boot loops feel almost mandatory to get anywhere, with pretty much a virgin OS, and it takes days to actually get anywhere - it is an issue.
Genocide isn't "shady stuff" it's fucking genocide.
It just means maybe there is a market for boat rental pen-testing and security consultancies. There are probably lots of similar vulns in the rental business's process, which can be demonstrated by white hats and corrected. In this case, it was the business incorrectly trusting the thieves' story and foolishly delivering a product they had no way to repossess.
Ask HN: What is something you want to build from scratch?
I've often heard that the best way to learn how something really works is to try to build your own version of it from scratch. I think the basis of this idea is that having to re-derive relevant abstractions and then implement them on your own requires/engenders a much deeper, intimate understanding of the concepts involved.

As someone who loves learning and wants to improve my knowledge of computer science and programming (among other things), I often ask myself what things I'd like to build from scratch, given the time and energy. Right now this includes a compiler and an OS.

So, HN, I ask you, what thing(s) do you have a burning desire to build from scratch?
UK has the same problem with jerks ruining their public toilets causing them to close

https://www.theguardian.com/world/2020/jun/10/closure-of-pub...
Doesn't surprise me at all. The reality is that journalists are just that, journalists. They rarely have any relevant expertise about what they write. Coupled with strict limits on content size enforced by publishers and an audience that often understands even less about the topics discussed you get major errors like these.

The amount of text necessary to explain to the average NYT reader what a rendering engine is probably more then the allotted text size for this piece of pseudo-intellectual garbage. Should make you worry about everything else journalists write with the same lack of care and understanding of details.

This is why podcasts and longform youtube content form actual experts is thriving while traditional media is dying. They have optimized so much for short attention span, clickbaity and inflammatory content that they have lost all resemblance of quality and expertise. In short, for any given topic, if the explanation is less than an hour long discussion piece, it's almost guaranteed to be simplified to the point of being wrong and useless.
http://news.bbc.co.uk/sport1/hi/athletics/4454315.stm

"peeing". On live TV.
It has been posted here before. I posted it when we first made it: https://news.ycombinator.com/item?id=11533539
I still have my Diamond Rio player just need to find a paralell port to see if I can get it wroking.
No, it’s more like he sold his coat for $300 and left with the last of his belongings in the duffel bag
I’ve never heard of anyone being forced to take a leisure walk.
Is it illegal to have a paid toilet/bathroom?

EDIT: Oh, I guess is it illegal in the USA to install a paid bathroom facility. I think that's dumb.

Ignoring the startup cost, if you have a paid bathroom in a relatively public area, and it costs say, 1 dollar for a usage, conservatively with 2 minute usage time that's about 30 bucks an hour.

Surely 30 bucks an hour revenue minus expenses to have someone refill water/pump out waste/occasional clean would make this a decent business similar to like a vending machine biz?
Last time I used Lazarus I could figure out how to layout controls. I was also disappointed by the control selection, although it was interesting watching the entire IDE recompile when I pulled in a 3rd party control.
Your team’s velocity will be faster from week 2 through the end of the 2nd year if you build the rapid feedback cycles provided by automated testing and CI/CD into your progress from the beginning

UNLESS your team lacks the experience to build and maintain a test suite with a high benefit-to-cost ratio, which is unfortunately the case for most teams.

In this case I don’t have any good solutions, other than choosing one’s team and teammates carefully, before starting the project.
>It would be nice if the rest of the macOS respected the wishes of the hardware's owner equally.

Who the real owner is is going to depend on how Right To Repair initiatives work out.
Personally:

Windows 2000 GUI any day. clear, concise and consistent.
What matters to normal people are the results. When you bomb their houses, cause ruin, starvation, mass displacement etc. etc the victims do not give a shit about your "noble" goals. To them you are just as bad if not worse.
Aside from the privacy angle, this means it's harder to create verified builds, since building from source will generate arbitrary differences in the binary.

Since this is rust, I'm even more offended from a software quality perspective than the privacy perspective. It's just sloppy.
America Is Not Made for People Who Pee

https://www.nytimes.com/2021/03/06/opinion/sunday/public-toi...
SCO Successor Xinuos Files Lawsuit Against IBM