skysight-inc/HackerNews huggingface dataset:
In general I agree with your points, but:

> What WASM will never be good at is being used for the whole experience.

The Flutter team would disagree.

They are leaning on WASM for browser builds of Flutter apps, with the whole app rendering in a canvas.

They do accessibility via separately created accessibility trees.

The experience far from great at the moment, but give it a few years and I think it will get there. (better wasm optimisations, direct host interop without JS shims, GC, threads, maybe WGPU instead of canvas, ...)

If that's a good thing for the web is another question...
Good job Twitter... get down to their level.
Then the passwords are not secret, the rule is. And figuring out a rule with a couple of examples is much easier than breaking into an encrypted, properly secured password vault.

In case I'm losing you, here's a parallel: if I ask you to pick and remember a random number between 1 and 1 billion, the odds of me figuring it out are low. But if I ask you to pick and remember 200 numbers between 1 and 1 billion, you will likely come up with "a rule", and then if I get a couple of example numbers (in a "password leak"), i can probably figure it out. The numbers are no longer secret, it's the rule that is.
The thing I’m still missing is a detailed explanation of what the heck was going on with the recent bogus commit that triggered the banning. Supposedly the “hypocrite commit” research was all done in 2020 and is now in the past. So what was going on with this latest bad commit? The student who submitted it claimed it was generated by a static analysis tool, which kernel maintainers have plausibly called bullshit on. Was that student lying? If so, what were they actually doing? If not, it seems absolutely necessary at this point to prove that they were telling the truth by publishing how that commit was produced, including the tool’s source code and how it was invoked. Even if the campaign to intentionally introduce security flaws was over in 2020, the more recent issue is that the same research group submitted an apparently intentionally incorrect patch and then seems to have lied about its provenance and why it was submitted. Until that’s cleared up any kind of apology feels premature and impossible to evaluate. How can anyone decide if an apology is sincere without understanding what was done?
Short tribute from Elonka Dunin earlier today, https://www.facebook.com/elonka/posts/10164920101840459
"It's just a prank dude!"

Legitimately these folks have some kind of personality defect. They observed something that everyone already knew and then decided to act on it and pretend they were doing something interesting and new rather than just being twats. They should be treated exactly as should be based on their actions, regardless of their claims of being researchers. This would be a perfect cover for being on the take from a government agency. They should be investigated to ensure they aren't actual malicious actors.

It takes almost no imagination to think of hundreds of "security vulnerabilities" in the world, yet the vast majority of people realize that it's dumb to act on those observations.
Neat, electronic art.
I admit that there might be password managers out there that provide sufficient security for some users’ threat models, but I wouldn’t trust such a sensitive compilation of data on any computing system, especially ones with network access.

If I used a password manager, it would have to be on an airgapped and password protected system, making it essentially useless for me. For me, it’s easier to memorize a password/salting algorithm that generates unique passwords to the website or service I’m using, so that I don’t have to actually memorize any passwords—only the algorithm.
https://en.wikipedia.org/wiki/Apophenia

and in the very wikipedia article you linked the high res images of that hill show no face/structure, almost like it just looked like that with shadows from a certain angle with a low res camera
The mailing list archive for this gig reorganized for some reason, so I imagine the URL for it should now be https://mailman.nanog.org/pipermail/nanog/2015-August/078058...
Thanks; that process seems reasonable, assuming that every "no" can be checked without gaining some nuisance status.
It behaves much like a datagram socket IIRC.
It has battery with twice the capacity of the one that's in the phone itself. That's a bit crazy :) In total this combo will have ~33Wh.
In some places you have the choice of electricity providers and can buy "green" power.
To be fair, you wouldn’t expect these individual researchers to address the governance question. That should come from the University or the department in question.
Hard work is necessary for success. It is merely one of many prerequisites. That's the thing about prerequisites. Miss one and you don't get the same outcome as someone with them all.

The real lie is that there is only a single factor that leads to success, or, conversely, that there is only a single factor that holds one back from success.

These attractive deceptions are offered to people unwilling to think. For children, however, teaching them that hard work and perseverance are critical characteristics successful people have is absolutely valid and useful. Those habits are built between age 6 and 10. Then you start introducing the other textures of life. But there you see one of the other prerequisites: parents willing, and having the ability or circumstance, to spend time and effort to teach their children.
Someone needs to optimize the kernel console rotation on arm64 with some neon. :)
Perhaps the (non-fullscreen) user interface shouldn't be the only recognizable visual cue which the user depends on before proceeding to trust their computer.

Maybe, instead, there ought to not be 'sacred pixels' on the screen, but a secret image to be displayed to the user (which only they recognize and can perhaps even change over time), and only the user, alongside every prompt for user input.

Admittedly, this could engender a false sense of trust if the secret image is ever compromised. I think there is an architecture around this, though.

The daemon providing the secret image service could simply stop screen sharing applications from reading those pixels. Why not expose the screen as a virtual filesystem, where every pixel has mutable unix permissions? Then, in any secure system, the screen sharing services would merely need to be served its pixels by the secret image server. The secret image server then just has to preserve the condition that programs aren't served secret pixels if they aren't run by a user in the 'secret pixel' entry in /etc/group. Then it would just be a matter of (secret) pixel files remaining unreadable for untrusted programs.

This could require some deep hooks into the display system, though, considering that a lot of graphical programs are going to be running on the video driver (well, technically, all of them). I suppose another reason to care about open source and graphics.

I wonder as well if Rio from Plan 9 can accomplish this with a minimal amount of code, since Rio already serves windows through a file server!
,, zig cc is not the main purpose of the Zig project’’

This doesn’t make me confident that it is well maintained. I”m more interested in how it compiles the Linux kernel, or GNU tools, or any complex C code (and how it performs)
I would prefer you not go around saying someone is "apologizing wrong" because you've found the magic formula to turn all apology text into "I'm sorry you feel bad". There's no point in making a statement like that the original person can't respond to, anyway.
Money laundering means the money was illegally obtained. In this case it was allegedly stolen from a bank. It doesn't matter who steals or launders it for the definition.
Spot the leftist.

> elections get stolen

That's what the Dems said in 2016, and Hillary Clinton still denies losing. Don't you believe your own comrades?

https://blogs.lse.ac.uk/usappblog/2018/09/11/many-democrats-...

Regarding 2020, why is there a restraining order against election investigations in Arizona? Surely we all want to know the truth, right?

https://www.azfamily.com/news/politics/arizona_politics/coun...

> scientists are paid to lie by a secret cabal of

The CCP is currently bribing scientists world-wide to commit espionage. It's called the Thousand Talents program, and the FBI has dozens if not hundreds of open cases, including convictions.

https://www.fbi.gov/investigate/counterintelligence/the-chin...

> Just GTFO.

Ignorance is bliss, at least for you, hypocrite.

For those who are interested in facts instead of leftist narrative, everything you've read on social media, cnn.com or msnbc.com is a lie. The closest I've seen to actual reporting is Sky Australia and NTD media, both on Youtube.
Or just not stop after pressing reload, to prevent their paywall from loading.
I know, it may sound absolutely irresponsible, but have the scientists considered practical benefits of sending in some bacterial life from Earth to let it try to colonize the remote destinations ahead of sending in humans for the same purpose?

Supposedly, micro-life has better chance to adapt to new environments, as long as the basic resource is available.

In case of Mars, humans lack the basic resources - water and oxygen. But could there be some bacterial life on Earth which could make use of the abundant carbon dioxide and could adapt to the harsh conditions?

Or such an approach would 'spoil' those worlds for the humans and take the conditions out of control?
I thought immediately of LightOns work: https://lighton.ai/photonic-computing-for-ai/

And this is very much already a vetted approach. They use photonics circuits to implement random projections, which can be used to speed up t linear algebra in modern ML workflows. It’s no magic monocle, rather a pretty interesting co-processor racked away in some data center.
I would argue that this is obviously a national security operation and the shell company is operated by the FBI or the NSA, not necessarily some random contracting firm.
Florida family may get life in prison after church sold bleach as Covid-19 cure
> hallmarks of a non-apology

Is that a thing? Like there's some non-apology Bingo card you can fill out? I don't see a connection between the criteria you listed and genuine-vs-false contrition.

You may perceive these things one way, but ultimately you can't know the minds of others well enough to tell if they are sincere or not about anything. You don't get to just declare yourself the arbiter of their feelings because they used "any" instead of "the".
Supply chain attacks are the security buzzthreat of day, at least since Solarwinds. Mucking about with the Linux kernel would be a really juicy target for nation-state actors. If you wanted to study this risk, how would you go about doing it?

I haven't done kernel work since BSD4.3 so my opinion isn't particularly interesting. With that said, I would agree that the researchers were naive and their approach has caused collateral damage. However, I'd also argue that the (apparent) topic of research is quite valid. There are a lot of extremely well funded adversaries who are quite talented at obfuscation. "Be careful out there."
Curated List of Lists
Very nice, examples are in the repository https://github.com/dainiusjocas/lucene-grep#text-analysis
You don't put printf() in critical sections, instead you collect some statistics. Once critical section is over you can freely print collected data for further analyzis. Or you can print it once a second. This simple technique works well for debugging racing conditions, performance issues (profiling), memory leaks, kernel drivers and bare-metal stuff where timing is a concern. So, yes "Print debugging always works...", but must be used wisely. :-)
We applied for a job with a ransomware gang
It doesn't have to be a black box. There are open source password managers. Bitwarden and Keepassxc are two very good ones.

And keep in mind that even if you can create a reasonably strong algorithm which will both be memorable and resistant to reverse engineering, most people won't. Password managers aren't just good for professionals, they're leagues ahead of anything "mere mortals" use. My mom uses 1password -- that's not a slight, I mean that literally; I put her on my family plan.
I am not a stakeholder in this, and my comment is about apologies, even though as a lifelong linux user and technologist responsible for deploying it, I still think there should be a real investigation.

While I had a bunch of notes about what makes the sentiment behing an apology meaningful, it's really separate from the issue that this should have been done privately. A public apology is just another thing about them and their message. They're performing and trying to draw in sympathetic members of an imaginary audience. There is no humility in public displays. I would be surprised if anybody asked for it, and doing it without asking is just more of the same type of behavior. There is no such thing as a public apology.

That said, I have no doubt they have suffered personally over this, and have some compassion for that suffering itself, but not sympathy for this performance. There is no gesture that restores trust. When their contributions and acomplishments become more remarkable than this issue, they will have restored it, but like most things, there is no "back" to go to. Maybe that static analyzer will be the ultimate bug finder, as succeeding at that is probably their only out.
For me, it's not learning the lesson the first time around.

I completely agree their experiment is unethical. However, it's not actually clear cut to most researchers the ethical bounds of their work, especially for study papers that's never really been explored before. Ethics in of itself is largely a active subtopic for many areas in CS, not only security research. AI is one area where qualifying potential harm to human beings remains largely controversial. Ask any ML scientist, and they'll tell you that determining the ethics of a project is not their responsibility.
His car was found abandoned with the engine running. He was murdered.
How to Get $10000 per Month?
Dan answered earnestly and generously to some uninformed questions I emailed him at random one day.

He was a good man. My condolences to his friends and family.
Well, I asked if _anybody_ had liability. Like the store that (perhaps) filed the charges without determining for sure if she had rented that title and/or was given the opportunity listed in their (presumed) terms to replace it. I know the business is no longer in existence, but did a business file the criminal complaint, or did a person?
1) Use none of them for software you open-source. Write free software - use any of the BSD licenses, MIT, Apache, etc

2) Actively avoid using AGPL and GPLv3 licenses if you can - don't encourage software socialism
If you live in Marin homes aren't expensive because of foreigners. It's because Marin is full of ravenous NIMBYs who haven't allowed any homes to be built since 1970.

Especially "foreigners are buying homes to leave them vacant" is not a real thing - that does nothing except lose them money.
Had to look up MPW (Multi Project Wafer).

The MPW I'm most familiar with is a development environment for the 68K-era Macintosh computers . . . :-)
10% difference from native, or 10% of native performance?
That runs the risk of forgetting to remove it.
The TV shown has modest power requirements. And CRT displays are fun.

Whether anyone does this or not will have basically zero impact on energy concerns.
Awesome set of tips!
I'm not sure how much <details> can be customized, but there's also a CSS-only route using a hidden checkbox beneath the hamburger icon and looking for the input[type="checkbox"]:checked selector. (Example: https://codepen.io/plavookac/pen/qomrMw)
Leave them banned.
If your language is supported by LLVM, then Emscripten can compile it to WASM.
An apology should be for actions taken, not for how the other party felt about it. Acknowledging those feelings is important, but taking credit for those feelings takes agency away from the other person.
Not cheap enough to stop subsidizing it, of course
This is a common take on password managers but in practice it doesn't really hold, because humans are bad at security and good password managers are really fucking good at it. That's not to say there aren't weaknesses to the password manager model, but you're overestimating them and underestimating the ones in your scheme.

I also invite you to read my response above to someone else regarding the security of such an algorithm: with some examples, brute forcing an algorithm is easier than brute forcing a master password.
> Americans need to feel unsafe all the time so they agree to pay for new weapons in new taxes.

When is the last time this happened?
So it is a different world now than in 1996. Parsers are much more solved now than they were back then.

I've written production compiler, but well before the Dragon book was written. I found it valuable, but kind of after the fact.

The references that we used included "A Compiler Generator" by David B. Wortman, Jim Horning, William M. MacKeeman. There weren't that many other parser generators available at the time.

Lots of valuable work has been done to make parsers easier to write. At MWC, dgc (David G. Conroy, author of MicroEMACS, which is now 'mg' on most systems) said that "YACC parsers make the hard part harder and the easy part easier". He wrote the C compiler with a hand-crafted parser. Starting in assembler, then bootstrapped it to C. Of the folks you know that write compilers, I wonder if they started writing after 1996, or even 2006.

If you are simply a user of parsers, then maybe you don't need to know how they work.
>They behaved like jerks and they still cannot see that.

They just come off as disconnected academics. Samething with the experiments with algorithms from Facebook. They are so wrapped up in what they are doing, they no longer see the "users" as human beings. There are some times this is almost required to survive like being an ER doctor. If you lose that many people, it could be debilitating unless you were able to disconnect. That's far and away much different than these robots.
An open letter to the Linux community
Or download the public domain movies from Peertube (ajroach42) and schedule a playlist.

Or maybe run xscreensaver with sfeed and some RSS news feeds.

Or maybe as a shitty terminal (good fonts for small displays exists, Unifont should adapt to the worst displays ever).
Ah that makes more sense, thanks.
There's something to be said for not sending the TV to the landfill, and I imagine these use less power than a typical incandescent bulb.

But more importantly, there's some je ne sais quoi that you just can't get from an e-ink display. Hacking old things and giving them new lives is a pleasure in itself, I suppose.
I’m in support of password managers if they promote better security hygiene for the average user. Particularly, preventing the most heinous of all password crimes: reuse.
And Microsoft's Edge too.
Show us your best evidence. I'm not going to waste my time looking for something you may dismiss as being from an invalid source.
More irresponsible than letting the human race exhaust and suffocate itself on this planet?

At some point we need to realise colonizing another planet is going to be necessary, and it is going to cause lots of damage.
its not that they're 'powerless'. It's that 99.8% of people just don't care. They want it the way it is.
I guess you could view it that way although I prefer to think of what Smalltalk developers do as living inside a REPL. And that is indeed something I can relate to. I program Julia and I basically stay in a REPL all day. But I don't regard that as the same as using a debugger. Like a Smalltalk developer, I evaluate specific functions/methods with particular values. I don't step through code. I am pretty sure Smalltalk developers don't step through code a lot.

Rather they do live changes of their code, and then evaluate various objects to verify that things work as expected. That how I seem to remember working in Smalltalk many years ago.

I am not a fan of debuggers, although I do use the REPL a lot. I suppose like Rob Pike, I used them only for very limited tasks, such as getting a stack trace or getting some sense of control flow. But as soon as I have that, I spend more time looking at code and reasoning about it, than stepping in a debugger. With a REPL I can try out assumptions I make about the code, rather than being forced to step through it.
> GNOME is an open source project, asking them to reconsider a position doesn't make sense -- the default response to every feature request is "no" unless someone volunteers to implement it

I don't think GNOME would accept a pull-request adding SSD regardless of where it came from (I'd love to be proven wrong though). In fact, someone asked this exact question [0] and it got no reply. But after reading the whole thread a while ago my takeaway was that such a pull-request would not be accepted.

> [...] it will work on any window manager that doesn't provide decorations, not just GNOME.

GNOME is the only real desktop compositor that doesn't support SSD. The main reason no one is complaining about Weston not supporting server-side decorations is because there aren't many (any?) people running Weston on the desktop. Also, there's no technical reason why SSD couldn't be added to Weston too.

Again, as I've mentioned before I think both SSD and CSD have their use-cases. GNOME thinks otherwise and that's okay. But it doesn't seem to be (only) due to lack of resources.

[0] - https://gitlab.gnome.org/GNOME/mutter/-/issues/217#note_3569...
The Dragon Book is just not very good. The newer editions spend far too long on parsing, which is not a big problem, and just make it look scary.

Grune's Parsing Techniques is a good book (IIRC when I read it ten years ago), and there are some other ones here.

https://gcc.gnu.org/wiki/ListOfCompilerBooks
Hopefully not too off topic. How do people monitor these BGP announcements? Is it possible for laymen to monitor such route rules?
I think there is something to be applauded about people who genuinely apologize even though they can't see things from the other person's point of view.

They didn't decide to conduct this research on a whim. They had full approval of their university ethics board as well. They published a paper and had it peer reviewed without (as far as I know) anyone immediately calling for their heads.

They can't immediately turn heel face and believe their actions are wrong, always were wrong, and the wrongness should have been obvious to them.

Yet, despite this they recognize the hurt they've caused and are genuinely apologetic and will never do it again. Asking them to dismantle their world view in a week is a bit much, even criminals are given a few years of quiet contemplation before being asked to tell a parole board they have changed their hearts and minds.
No, only 30 or so.
Itty-Durable
Cloudflare Durable Objects + Itty Router = shorter code
It would make sense if they were talking about mice, in which case "on" is still more accurate but "with" is probably correctly assumed to be equivalent. Research with humans involves them being on the author list...
Can you trust literacy rate?
There is a high literacy rate in my homeland, but in reality everything is different. I meet so many people there and I don't think they can even think critically.

Why are countries not taking into account the quality of education as a factor in literacy rates?

The ruling politicians take this rate to win hearts of people in my homeland.
How to make teaching/learning Rust easier
Someone should come up with a way of cryptographically storing those records so that you can go from model+serial -> purchaser without the ability to do the reverse. That way the feds get what they say they want, but in a way that isn't isomorphic to "gun registry".

This article also does an incredibly poor job of describing why people want to avoid a gun registry.