skysight-inc/HackerNews huggingface dataset:
So in reading that overview, the same attacks that would apply to USB apply PCIe:

> The connection of an untrusted USB device to dom0 is a security risk since the device can attack an arbitrary USB driver (which are included in the linux kernel), exploit bugs during partition-table-parsing or simply pretend to be a keyboard.

This would be the same for any PCIe device. PCIe does not have any cryptographic authentication scheme that I am aware of, and PCIe device drivers are likewise in the linux kernel.

> The whole USB stack is put to work to parse the data presented by the USB device in order to determine if it is a USB mass storage device, to read its configuration, etc. This happens even if the drive is then assigned and mounted in another qube.

I don't see how this would be different versus a PCIe device?

> If you connect USB input devices (keyboard and mouse) to a VM, that VM will effectively have control over your system.

USB controllers use PCIe in order to function.

It seems the primary difference between the two are which set of tools you go after to attck the system. The primary difference is that PCIe device attacks are less so in the wild (I do not know of a PCIe rubber ducky, but there is nothing stopping anyone from making it), and (depending on your system) involve more invasive physical access (USB is a physical port, but then again, Thunderport is effevtiely PCIe in a port: https://tidbits.com/2015/01/09/thunderstrike-proof-of-concep... . There is an example attack against PCIe).

As far an an IOMMU goes, that exists because PCIe uses DMA, so am IOMMU enforces boundaries so that a rogue PCIe device cannot do a DMA attack (here is one such exmaple: https://papers.put.as/papers/macosx/2006/ab_firewire_rux2k6-... . I skimmed through it so I am not sure if it is entrely correct, but the theme of the attack applies). But an IOMMU is typically software based too, so one can attack that and the DMA controller. USB does not use DMA.
Please explain, in detail, why you believe there should be a high barrier to entry for expressing opinions, how doing so would lead to anything but an impoverished marketplace of ideas, and how you reconcile any of that with the fact that you yourself just published an opinion without much justification. Cite at least three peer-reviewed papers to support your position, or else be condemned as a charlatan.
> before fleeing communism to move to China

Is there some level of humour here that I'm missing? (and yes I know all the subtleties around the Chinese system. But still - that's a heck of a sentence to throw out uncritically)
I don't think most people appreciate that in a true proportional world government where the only fair way to allocate power is by population, how truly vastly outweighed the West, with all their ideals of sexual liberty, speech, and religion, would be by the developing and/or more conservative parts of the world.
Siri is useless for the most part. I would not depend on it for anything mission critical.
A teaching moment for using strong passwords.
Intel has this vision for a very long time with their Silicon Photonics in DataCenter. Where you decouple the CPU, Memory and Storage into separate server unit or even racks. Essentially allowing Datacenter as Computer and your Cloud services to spin up / fine grain your CPU / Memory / Storage on Demand.

Still very far from reality though.
The early return pattern was the most effective single piece of advice I received from a senior dev on how to make my code more readable. You end up with clearer code paths than any other pattern I have seen so far and way less indentation making things look (and probably perceived) as less complex.

Pair it with naming your complex and chained expressions and suddenly you have some seriously readable code.

So far, I have never seen a valid scenario where a switch statement is actually any better than if.
I'm using Netlify for one of my side projects. Liking it so far but been getting annoyed by the limited _headers/netlify.toml config these days (especially custom redirects).
I’m probably just grossly misinterpreting this, but it sounds like the extra dimension she mentions here is just a microscopic tube. My naive question is how does that differ from, let’s say, a microscopic piece of penne.

“This problem was solved few years later by Oskar Klein, who assumed that the 4th dimension of space has to be rolled up to a small radius, so you can’t get lost in it. You just wouldn’t notice if you stepped into it, it’s too small. This idea that electromagnetism is caused by a curled-up 4th dimension of space is now called Kaluza-Klein theory.”
Apple gives an OS away for free - users never see advertisements.

Microsoft charges $100 for Windows 10, virtually every corner of the experience is riddled with advertisements and marketing crap.
On the flip side, the open source tech has gotten good enough that you can basically roll your own now.
Interesting.
Don't you all think there is a site missing in the recommendation list that most average PC users would prefer? Perhaps a way to search the web?
You probably don't have enough end-to-end automation for your product
Seriously? "Veganism, Feminism ... He/him. #BlackLivesMatter" in his bio are all direct references to social justice.
How do you find freelance developer roles? I see those as extremely underpaid?
I've seen this bandied around quite a lot (iOS being more profitable).

The only source I've seen cited for this comes from 2012 (https://www.pcworld.com/article/253335/ios_more_profitable_f...) and relates to Google getting more profit from iOS device users than Android device users.

Do you have anything from the last year or two? Or are you basing your comment on the article from 2012?
And the USA would go all the way to block this. Otherwise a lot of current and former government is at risk of prison if they leave the US.
At a glance, it looks like there are no provisions for supporting Language Server Protocol. That's unfortunate as I've come to use gopls, rls, tsserver and clangd quite a bit. Getting accurate autocompletion in complex situations and errors as you type are not absolutely necessary, but once you have them it's hard to go back.

edit: rust-analyzer, not rls.
And we have other insecticides, so the dichotomy "Either use DDT or have 500 millions of people killed by insects" is false.

I think that the idea that is being sold here is: "there is a lot of toxic stuff yet dumped in the ocean, so why care about a few radioactive water?

They are trying to made people fight the wrong strawman ideas. Adding a bullet will not made any change in the world, there are lots of bullets yet around, but if this single tiny bullet enters in your body, it suddenly became the most important thing in the world to you.

It does not matter how many radioactivity is yet in the water. They just should not add more just to save some money. Period.

Is a specially stupid move in a country that heavily relies in the sea to feed them, and that has a big aquaculture and fisheries sector. People that will lose also money with that move. Much more money that TEPCO will save probably.

The solution for the japanese problems of money will not be destroying also other sectors and ruining the economy for every japanese.
Again, Spring is usable with Maven as it ever was.

Pivotal is always chasing the latest fad in Java community as means to attract developers, almost every JVM guest language and build system has at a given time had Spring first class support, then it was removed when it stopped being cool.

Sorry, but Netflix could be using Brainfuck and it wouldn't affect anything outside their building, without any relevant meanint to the actual quality of their product.

If anything it just proves that Netflix is able to deliver despite the tooling they happen to choose.
I think it's telling that writers and social media figures that would otherwise take a stronger stance against some of the content on substack are happy to coexist with that content if they are making significant amounts of money.

This feels like an imperative for substack -- ensure that some of their most formidable critics have a personal stake in the platform as a means to deflect criticism. Money speaks.
Sea-lioning isn't nicely asking someone to elaborate on their view or asking for more specifics.

This is not sea-lioning:

Person 1: I really think X is bad because A, B C.

Person 2: I disagree, X is fine because D, E, F.

Person 1: eh... I disagree. And I think D is problematic too.

That's merely a civil discussion.

This is sea-lioning:

Person 1: I really think X is bad because A, B, and C.

Person 2: You're wrong. X is fine. Why don't you explain why its wrong hmm?

Person 1: I just said, because A B and C....

Person 2: A B and C are irrelevant; Why don't you explain to me why X is bad. You can't do it! You don't know what you're talking about!

Person 1: I'm actually an expert in X, I've worked on it for two decades. I don't understand why you don't see A, B, and C are problematic?

Person 2: I highly doubt you know anything about X. If you can't explain why X is bad perhaps its your own limited understanding of X. All you talk about is A B and C but you don't explain why X is bad!

(Person 2 isn't providing any real counter-arguments; they are just saying Person 1 is wrong, asking for additional evidence, and then rejecting Person 1's arguments/evidence without explaining why Person 1 is wrong.)

Keep in mind the stress here is on the personal opinion - and not statement of fact. For example, whether or not code has "cruft" is entirely a subjective manner. There is no objective measure of "cruft" in code. You cannot "prove" code is crufty. However, you can put a group of engineers in a room, have them examine some code, and they can establish a consensus as to whether or not code is in fact "crufty" despite there being no formal criteria to define it as such. Generally, it means "messy and difficult to maintain". If you are a core maintainer, and your job is to interact with this code on a regular basis, you're the de-facto expert on its quality (albeit with some personal biases). If you think the code you have to work on is bad, and people don't work on that code are saying you're wrong after just skimming it, it's going to drive you insane.
Statement of FSF board on election of Richard Stallman
>Or they simply sign up with their personal email. If you have more user objects than people in your system, you are doing something wrong.

I have three discord accounts and there is no way to avoid that.
MeetingBar – Display Your Next meeting in the macOS menu bar
Probably Facebook and Youtube. :)
The company I worked at was acquired more than a decade ago.

We were in a small local office. It took many months before they started integrating. Pay adjustments, moving into their local office. The product was integrated into their offering over a few years and the original product finally killed off.

I left within the first few months. Didn't want to work in a big company with lots of baggage.
That shouldn't hold them back. Let the US throw the first stone.
This is 100% correct. For those that can’t understand the value of NFTs, it’s the same reason a “squares and circles” modern art piece can be worth millions - it’s the story of who made it, the collective belief, the rarity... Ultimately it has value because people agree it has value. It’s the same reason the Tom Brady football rookie card sold for millions despite it being nothing more than ink on flimsy cardboard. The actual item itself is secondary to the story it tells.
Universal remote control makes all Comcast remotes.
We're a bootstrapped team of 2. We don't find people thinking like this. It was a question. I answered in the affirmative.

We have bet all our savings on saying a bold YES to this question. I think we have the right to comment here. We've spent a good 15 months thinking about this problem.

We've read a ton of material. From the Principles of Product Development Flow to Joel Spolsky's article on Evidence-based Scheduling, distilling everything down into our product.

When you make something, and run into trouble finding early adopters, I'd like to hear all your thoughts on self-promotion.
If you don't have a 'return' there's nothing to say that some time later some junior developer would not modify throw to be something else or forget that throw does not return.
Ask HN: What do you recommend for Visual Regression Testing in 2021?
I have a legacy ecommerce codebase that is primarily wordpress / php that has many plugins that want to be updated regularly.

While I'm triaging bugs and working toward a sane deployment I need to be able to more safely test that plugin updates are not breaking the site.

Ideally, I'd like to avoid anchoring the company to a paid service, and instead invest in building infrastructure if feasible.

I have the flexibility of running any testing tools I want, (I can set up a VPS and run anything against staging and production.)

I prefer / am best at Python and prefer containerization where possible.

I'm very experienced with github actions and ultimately want visual regression to be a part of CI/CD.

There hasn't been a post about this in some time, the active FOSS options I'm seeing include:

- BackstopJS

- Cypress

Active commercial solutions include:

- Applitude

- Diffy

- Screenster

Any feedback on picking a headless browser or really the entire technology stack for visual testing would be appreciated.
Any cutoff between use and overuse is artificial. It is still use. If it is use, and if it is with billions of people, one day, some resources will be consumed. Maybe sooner, maybe later, but on million-years-scale, it doesn't make any sense anyway.

Overheating, oversheltering, both seems very artificial to me. Ok, you can have a wood cabin in forests, but what's next? Are antibiotics use or overuse? Is internet use or overuse? And who is supposed to decide? Using nonrenevables/using renevables is nice in a thing it is black/white, it has no value component in it.

I don't know how removing interest could help except making some operations nonviable. Without interest, all ventures would have to use different sources of financing. I think a demand for risky lending (where risk is compensated in a form of interest) is natural and would exist in some way anyway.
European/American environmental activists get a bit frothy when they hear of damage to rainforests. Nevermind that most of these people have never been to one and don't investigate reports more thoroughly than reading a headline on Facebook from half a world away.

I believe GP was imagining these types gaining control and trying to force the world to comply instead of actually helping the world to care about protecting the environment.
Yes. I wonder if this will be the future of Intel. They seems to be quite far ahead in Silicon Photonics than every one else. And I dont see an end for our need for more bandwidth in the near future, at least not in the next 10 years.
Related: Microsoft Edge’s user numbers are continuing to grow while Firefox's, which at one point was the second-most popular browser behind Chrome, keeps falling: https://www.techspot.com/news/89180-mircosoft-edge-user-numb...

Advertisements or recommendations in Windows 10 are definitely helping Edge
And you about Maven, thankfully I don't have to touch Gradle beyond Android builds.

When Fuchsia finally happens, not even that.
Everyone has finite time in this life.

We can't defend every intuition or opinion we have ever mentioned. People can disagree and carry on with the business of life.

In that spirit, you're perfectly entitled to have a differing opinion from mine and I will defend your right to disagree with me or anyone.
apple doesnt give their os away for free
I would argue that macOS does have some advertisements , mostly for Apple services, they just tend to be cleaner and better integrated. (Also the free bit is a little fuzzy as the costs are baked into the hardware.) Microsoft is far more guilty however.

Imagine how nice Windows 10 would be if Microsoft didn't own Bing, Xbox, and Office.
lottery is the only charity work I do
There's Bing in the recommendation lolol and MSN news feed too
But even in Diffie-Helman the DH parameters will be signed with with server's RSA key. This is how the client can be sure who it is negotiating with. As such the bank analogy for public key crypto is still worthwhile.

Also your comment seems like an odd nitpick given the author states in the first paragraph:

>"I won't be covering how the protocol itself works in detail here ..."

And in the sentence before that they also linked to previous articles they've published on both DH and RSA which go heavily into the details of how each works. It's seems to me like they actually were being quite careful to avoid the very thing you are being critical of even though it was obvious that it wasn't the point in the article.
True but plug-in API for better language support is apparently on the roadmap
Building a Chat with Firebase
I'm preferential to "Echo Chamber"
There is no institution or court where we Europeans can appeal against the "unacceptableness" of it all, though.
You're kidding, right? South American countries have much bigger problems to deal with than the Amazon. Nobody is gonna go to war over this. I'm not even sure there's enough strategic value in the Amazon to justify dying over it.
No, that is standard language that gives a website the right to store and display content you post to it (e.g., to show your avatar on a profile page or show forum posts or chats.) Many websites use it; see this search for examples: https://www.google.com/search?hl=en&q=%22any%20time%20you%20...

This is the text from Skype’s terms: “Notwithstanding any rights or obligations governed by the Additional Terms (as defined below) if, at any time you choose to upload or post User Submissions to the Skype Websites or through the Software (excluding Reports and excluding the content of your communications) you automatically grant Skype a non-exclusive, worldwide, irrevocable, royalty-free, perpetual, sub-licensable and transferable license of all rights to use, edit, modify, include, incorporate, adapt, record, publicly perform, display, transmit and reproduce the User Submissions including, without limitation, all trade marks associated therewith, in connection with the Skype Websites and Skype’s Software and Products including for the purpose of promoting or redistributing part or all of the Skype Websites and/or the Software or Products, in any and all media now known or hereafter devised. You also hereby grant each user of the Skype Website and/or Skype’s Software or Products a non-exclusive license to access your User Submission through the Skype Website and/or Software or Products and to use, copy, distribute, prepare derivative works of, display, perform and transmit such User Submissions solely as permitted through the functionality of the Skype Websites and/or Software or Products and pursuant to these Terms of Use. In addition, you waive any so-called “moral rights” in and to the User Submissions, to the extent permitted by applicable law.”
> How do hidden solar panels (tiles or whatever other option) raise the value less?

They don't. They probably raise it more in fact. But given that both raise the resale value, but the solar roof is phenomenally more expensive, most opt for standard PV, and think it looks plenty fine.
Most parts of Los Angeles are not even dense enough to make rail effective for the investment.

Think about it this way. There are about 100 busses in Austin right now.

The $7B rail network could easily buy 10,000 new busses, fully-loaded cost of 10-year service life.

Or put another way, free bus service for 100% of Austin’s commutes, forever. Maybe block off a special lane for busses and you get pseudo-rail at 1% of the cost. Maybe think about rail when the demand is proven. The pneumatic tire is an amazing invention for flexible human transport.

Light rail is almost always a waste of money, and it will probably never even get built, and if it does, it will take forever, and create more traffic than it solves. But if you can credibly suggest otherwise with a single example of a low-density light rail system in any comparable city that got better ROI than busses and bike lanes, I will consider that I may be wrong.

https://youtu.be/ZDOI0cq6GZM
There’s portability and there’s portability.

I don’t really care about targeting, say, IRIX, or z/OS, or the early-2000s-era Windows POSIX Subsystem. But I do care about targeting Linux, macOS/iOS, all the modern living BSDs, and Android (where applicable.) I also maybe care about letting my software run under a Linux Busybox userland.

It’d be great to know what the lowest-common-demoninator standard is for just that set of targets. I don’t care about POSIX, but if that set of targets had a common formal named standard, I’d adhere to it rigorously.

Since it doesn’t, I just mostly adhere to POSIX — except where it gets to be too much (like having to write 1000-line Bourne Shell scripts.) When that happens, I look around to see if the set of targets I care about all do something the same way. If they do (such as all happening to ship some — perhaps ancient — version of Bash), then I break away from POSIX and take advantage of that commonality.

I don’t know enough about all the things these OSes do or do not have in common to truly code to the implicit standard 100% of the time. I wish I did. So, in most respects, wherever I haven’t done independent research, I have to hold myself to a much stricter standard — POSIX. But it’s only ignorance keeping me doing it!
I could imagine a somewhat cynical science fiction story where Earth manages to communicate with an intelligent alien species using fundamental constants and rules of mathematics. But then, the aliens transmit a prime that the humans have happened to have declared illegal and have no choice but descend into interplanetary copyright war.
> Getting started with Cloudflare Pages is as easy as connecting your repository and selecting your framework and build commands.

> Once you’re set up, the only magic words you’ll need are `git commit` and `git push`. We’ll take care of building and deploying your sites for you, so you won’t ever have to leave your current workflow.

> Supporting static sites is just the beginning of the journey for Cloudflare Pages. With redirects support, we’re starting to introduce the first bit of dynamic functionality to Pages, but our ambitions extend far beyond.

> Our long term goal with Pages is to make full-stack application development as breezy an experience as static site development is today. We want to make Pages the deployment target for your static assets, and the APIs that make them dynamic. With Workers and Durable Objects, we believe we have just the toolset to build upon.

> We’ll be starting by allowing you to deploy a Worker function by including it in your /api or /functions directory. Over time, we’ll be introducing new ways for you to deploy Durable Objects or utilize the KV namespaces in the same way.

> Imagine, your entire application — frontend, APIs, storage, data — all deployed with a single commit, easily testable in staging, and a single merge to deploy to production.

What sets it apart from Heroku ?
There is lots of public health effort expended on dietary health, way more than nothing.
So you're not about to do the grind. Thank you for so neatly illustrating why it looked like magic to the author's teammates.
That's the kind of awful name that surely cost hundreds of thousands of dollars in consultant fees.
If Windows devices started charging Apple prices for hardware, would they now be giving the OS away for free too?
Lightmatter [0] is doing something along those lines. But IIUC they're only attempting optical computing for certain mathematical ops (FMA and/or convolution?)

[0] https://lightmatter.co/