skysight-inc/HackerNews huggingface dataset:
It seems to me like it’s in the best interest of the community to have an understanding of what steps were asked to be taken in the event contributions are made by those parties in the future. I feel it is important for regaining trust, overall project transparency and for setting a certain degree of precedent.
> he couldn't blindly trust something coming from the same source.

This is not the same source! It's the same UNIVERSITY, which has thousands of students every year. And the source of the bugs wasn't even from university addresses, it was from random gmail addresses.

Aditya submitted LEGITIMATE patches based on his static analysis tool.

He is being slandered because people won't take 5 seconds to learn the facts.
Besides, love means never having to say you're sorry. Like you said, if you let them go, and they say sorry but don't follow it up with action, maybe they were not yours to begin with.
It is pretty clearly a rejection to me, though a polite one. He's stating that their message is irrelevant and he doesn't care for it.
I'd very much recommend Child of Light. At the time there was talk about how Ubisoft had made a whole new engine for games based on 2D drawings, although I never heard any more about it since.
> once that party has been shown to act maliciously, extra scrutiny is warranted

It's nonsense that they acted maliciously. The original research was handled terribly, but it was not malicious. They intended to help, not hurt, even if they did so very poorly.

Further, that is one advisor, whose name is not being dragged. Aditya's name, however, is, thanks to Greg's slanderous comments.

https://twitter.com/trishalynn/status/1385410960278491137
"I am disgusted by the actions of Aditya Pakki"

https://twitter.com/hedleyroos/status/1386290204298735617
"Aditya Pakki is going to have a hard time finding employment."
(this one directly retweeted Greg's post)

https://twitter.com/_mackal/status/1384910754151866370
"The simple fact that Aditya Pakki is so butt hurt proves this
wasn't in good faith and their only reason for doing it is to
shit out another hit piece. That email you quoted is fucking insane."

https://twitter.com/BeardyNotes/status/1384900450059788288
"Sleazeballs like Aditya Pakki should be fired and disbarred from doing
any "research" anywhere in the world!"

https://twitter.com/seakoz/status/1384895697414148096
"Aditya Pakki will forever be googleable as the guy who deliberately
tried to make Linux insecure."

Does that seem right to you? Are these the "consequences" you think are justified, because Aditya was trying to add legitimate patches for a tool he was working on to contribute to the kernel?

Greg should publicly apologize to Aditya.
Aditya should’ve talked to his advisor before suggesting the gatekeepers were, gasp, gatekeeping
> Time is too precious to waste

Sure. Which is why my default youtube playback speed is 1.5X.
Gang gang
It's not until Apple goes under: it's until whatever licensing deal Apple got for some movie is over.
So it's bad for the researchers to deliberately deceive the community because a rule says patches must be good faith but it's not bad for the community to be abusive because there's no rule that says it shouldn't?

so the community can be abusive but no one may abuse the community?

If so, I think that sounds like the basis for bullying culture which perhaps unsurprisingly is what is observed.

I think it's naive for them to assume that all submissions are done in good faith, just as it's naive for participants to assume that all interactions will be nice. It's not the community's fault they were deceived nor is it the participants fault they were abused.

My point is there is an equality. That personal responsibility, ethics and integrity should apply to everyone not just to some labeled group.

What it sounds to me like you're saying is, it's the researchers fault that they deceived us and we have a right to be outraged but it's not our fault that we're abusive to participants and they have no right to be surprised at that. Am i hearing you wrong?

my point i think is to draw attention to the apparently unequal application of these principles of ethics responsibility and integrity. Additionally I'm a little worried that your reluctance to compare your different groups is an attempt to conceal, and justify, a continued unequal application of responsibility ethics and integrity.

That sounds pretty harsh towards you and so I doubt that's actually what you're saying because I don't think you're someone who lacks a moral character like that. I think probably you and I are just misunderstanding what each other is saying. Perhaps.

For instance I don't think either of us believe that bad behavior on either side whether the deception of the researchers or the abusiveness of the community is okay.

I suppose what I'm doing is addressing, or trying to, to contrast the reactions of either side to those things and expose what I see as an unfairness or a double standard or an unequal application. hope that helps you understand what I'm saying. Anyway have a good doi
Yet they're also actively exploring alternatives. (Go, Rust, Haxe, etc)
Copyright is not a natural right, the balance is totally out of whack. Copyright terms have become abusively long; the deal is not fair anymore.

On the other hand, the inability of small copyright holders to effectively enforce their theoretical rights is also unfair and totally out of whack, but in the other direction.

I am sympathetic to the idea that DRM shouldn't be able to lock people out of accessing works they have a legitimate right to access, and I agree that such abuse needs to be dealt with through updating the legal frameworks for copyright and consumer rights.

However, I think to credibly change the law as you suggest (so, essentially, a publisher can choose DRM or copyright but not both) you'd also have to introduce meaningful criminal penalties for possibly willful and certainly commercial copyright infringement and treat it akin to fraud or theft. Otherwise, why wouldn't the little guy who has a genuine concern about copying reducing the value of the work they are publishing forego copyright entirely and rely only on the DRM, with no rights even theoretically for society as a whole to ever benefit from that work?
Absolutely, when they claim to be a trained Marxist that doesn't believe in capitalism. That proves she loves capatalism and would never actually live a marxist life. Marxism is her hustle for dumb whites on the left.
Meanwhile, your neopets haven't died, they're just still starving :(
For a simpler option without Docker, but still with GIT Heroku-style, check out Polybox[0].

Polybox[0] is an itty-bitty PaaS that uses git push to deploy micro-services and websites on your own servers.

[0]https://github.com/mardix/polybox
The hell are you talking about?

Aditya submitted patches, and Greg alleged that they were malicious and insulted him repeatedly, completely crossing the line from any reasonable technical review over to a direct attack.

Aditya's reputation has suffered massively as a result of doing research to try to help the Linux kernel.

These are the facts of the situation.
I wonder, has Bjarne Stroustrup even shipped any industrial-grade software? Because he's mostly an academic AFAIK.
Was UML ever alive? I’d never seen it adopted beyond curiosity anywhere.
I think the comparison is quite apt. Allowing new and radical features in production sometimes takes quite a few years :-/
Why are you using valuable computing hardware -- not to mention power -- wasting time commenting on a sentimental article?

Close that laptop! Save it for computation that _matters_. Don't be an environmental terrorist!
This daemon handles as much of the weird signal-specific stuff and exposes an easier to use API. It handles things like encrypting and decrypting messages, generating and storing keys, syncing with linked devices and a bunch of others.

signald doesn't really "trigger actions" or anything, but it would be pretty easy to write something that does using it.
I'll assume it's a terrible idea, whisperd and whisperclient are probably too on the nose.

Beacon is pretty great =)
How to lie without statistics
The reason is stupid for the problem it solves.
I 100% believe him. What we define as plastic may have changed. Perhaps we are all eating things that were formally classified as plastic. Perhaps someone was making a joke on their way to quitting.

I never discount a person or a users memory. They are usually right over my assumption. When I look closer I see more reasonable answers that I never considered before.
Doesn't really matter what I think: companies will offer you the absolute minimum they think you will accept. If you accept their first offer, you're probably leaving money on the table. If their first offer meets or exceeds what you're willing to work for, fine. If not, you either negotiate or decline.
I believe it is actually updated manually.
Maybe a stupid question: PoS means mining will make 0 money instead of a little less, right? Maybe you meant the pruning update, but I'm curious about later this summer. They're turning a 3-body problem of stakeholders (owners, users, and miners) into a 2-body problem (owners, users) which is owned either by early adoption or early wealth, from my amateur viewpoint. I'm not sure that this is a great thing long-term, but I also don't know what alternatives exist for Eth given that PoW has a lot of issues!

I do have a stake in mostly Eth but it is sized for fun.
Here’s a recording of another guy doing it to “Ride of the Valkyries”: https://youtu.be/iXYGo9KO2nI
any closed-source software, should not be eligible for copyright

This is how you get software companies running almost everything on their own servers, subscription-only, updates-mandatory, so no-one ever gets a copy of the work themselves and copyright is irrelevant. I think it is abundantly clear by now that this is not necessarily a beneficial direction for the industry to be moving, at least not from the point of view of purchaser/user rights and future-proofing.
Xcode is nowhere near that large, unless you never clear out its caches.
>"...choosing it for a new project borders on malpractice..."

That's one healthy and balanced approach.
Before you answer, consider the opposite
Interesting... now I'm thinking maybe I was confusing it with interprocedural analysis? I've definitely seen the distinction made between them before, though I'm not sure if I've seen them mentioned alongside local analysis in the same text. I guess if you want to have fun this week, go ask your colleagues what the difference between local, interprocedural, and global analysis is. See if they say the last two are synonymous. :-)

Regarding the difference for interprocedural analysis: I'm not entirely sure I follow it unfortunately. Let's say you can do everything within a function. Can't you just inline all of its callees (at whatever depth you want) and do your analysis/optimizations based off the result of that? Inlining itself is a rather trivial mechanical transformation, and after that everything is inside one function again, which you can already handle. The only real obstacle here seems to be recursion, but if you just treat that as any other opaque function call that you can't optimize across, you should otherwise get the rest of the way there, right? What am I missing?
Past Year's Informed Emails
How to get the informed emails for the past year?
Possible? Thanks.
Were these really ever expensive? Maybe they only reached my part of the world when it’d become cheap plastic. At least I certainly don’t remember ever considering them expensive (though for a child nothing is cheap).
Franklin Faraday Insights Roundup: Technology and Common Sense (April 25, 2021)
I have "purchased" movies from Amazon, movies for which Amazon later lost streaming rights, and which are no longer in their catalogue - and so my "purchase" was temporary. I am sure their EULA expressly permits this but it's irrelevant now as I have learned my lesson. I now longer "purchase" digital products unless I can download them after purchase. When this first occurred, I was angry. Now, I just consider myself educated to avoid Amazon at all cost.
Non serviam.
> It is pretty clearly a rejection to me, though a polite one. He's stating that their message is irrelevant and he doesn't care for it.

Considering he thanks them for their response, this is not a rejection. It's a tacit acceptance while simultaneously stating what's necessary because an email apology is simply inadequate.
In earlier versions of X-Plane flight simulator you could design aircraft to fly on Mars. Lots of fun. Anything from helicopters like Ingenuity to fixed wing rocket planes.
The physics/math behind it is accurate enough that NASA has used it in the design of terrestrial aircraft.
Is there an example of a video that can be encoded at 5MB with H.264 that can be encoded at an equivalent quality with VP9 at 3MB? There are a lot of things to say about this article, but that seems most glaring.
I have no idea what "industrial grade software is", but I ship a cross-platform DAW written in C++, and RAII is tremendously awesome.
> What an incredible negativity here in the comments

This might seem strange, but I think the negativity here makes sense, and is justified on multiple fronts.

On a technical front, Xcode is pretty awful. It’s slow and unstable, and seems to have only gotten worse over the last decade. Many comments here express this in detail.

This matters so much because tools become an extension of our bodies. Using bad tools makes us feel ineffective, weak and slow. If I can’t trust Xcode to receive keystrokes (yes, a real bug I encounter frequently), my brain interprets that bug as me being physically impaired and unable to type. It’s awful.

This is made so much worse because Xcode - and any bad product from Apple - betrays Apple’s promise to it’s customers. Apple’s promise is “we sell premium products which are worth the extra cost because they’re delightful. Buy from us and we’ll take care of you”. Steve jobs used to say this sort of thing quite explicitly. This is why people hold Apple to a higher standard - because Apple promises a higher standard with their branding and their prices. It wouldn’t matter so much if Xcode were part of an open ecosystem and we had choice - I wasn't angry a few years ago when Atom was laggy and slow. I just shrugged, uninstalled and used something else. But iOS devs are mostly locked in. They have nowhere to go.

And practically speaking, people from all over the tech industry are on HN. Plenty of people at Apple are here - even if they can’t say so. Hopefully a bit of public shaming will be read by someone at Apple with the authority to right the ship. We can hope.
This is a known and hard problem. A lot of companies are trying to internally do some sort of analysis of their own content libraries and intelligently tune their encoders. Netflix is definitely the most known for their tech related to video analysis and introduction of VMAF[1], but other metrics also exist which enable you to compare the original/master and the encoded variant (PSNR, SSIM, etc). Bottom line is that you need a lot of trial and error and fitting different curves on your bitrate/quality graphs and often times what metrics consider to be good quality human visual system doesn't agree 100% with. It's a very interesting problem nonetheless, and I recommend [2] if you want to learn more.

[1] https://en.wikipedia.org/wiki/Video_Multimethod_Assessment_F...

[2] https://netflixtechblog.com/toward-a-practical-perceptual-vi...
> humans can feel powerful sentimentality towards inanimate objects

I guess it’s interesting, but it’s also just a fact of life. Feeling sentimental over stuff is why I have so much I don’t actually need.
> Having worked in the auto industry I can say this is the sort of thing was never, ever expected from a supply shortage.

Having not worked in the auto industry, but having worked in the logistics industry, I and many many others like me have consistently warned about global catastrophes like pandemics causing unforeseen consequences of the kind we're currently experiencing.

To say that it's "frustrating" that nothing has been done before now, and nothing will likely be done - when I've literally written detailed reports complete with advanced statistical analysis for my upper management - is a massive understatement.

Hopefully the next pandemic will be severe enough that society itself is disrupted to the point where "rich" people suffer, perhaps even die. For many readers, this comment will come off as "morbid" or perhaps even be misinterpreted as a "call to violence", but in reality, this is simply "logical" behavior (survival instinct) that would result in a truly massive supply chain breakdown, and humanity as a whole doesn't learn a lesson unless there's unbearable suffering involved. I imagine a pandemic that kills 10% of the people it infects instead of 1% would cause sufficient pain for "elites" who very wrongly believe themselves to be above such inconveniences to seriously rethink their desire for "profits"... especially when a bunch of poor people who can't hoard food all raid their little compounds and the resulting unpleasantness that will result from such an outcome. It's unfortunate that I have to wish for such a thing to make people reconsider something as simple as warehousing additional supplies for unforeseen circumstances, but clearly we're there.
I'm just going to quote part of the UMN response, which should clear up the constant misconceptions I see from people who are doing real harm to legitimate researchers.

The “hypocrite commits” work was carried out in August 2020; it aimed to improve the security of the patching process in Linux. As part of the project, we studied potential issues with the patching process of Linux, including causes of the issues and suggestions for addressing them.

This work did not introduce vulnerabilities into the Linux code. The three incorrect patches were discussed and stopped during exchanges in a Linux message board, and never committed to the code. We reported the findings and our conclusions (excluding the incorrect patches) of the work to the Linux community before paper submission, collected their feedback, and included them in the paper.

All the other 190 patches being reverted and re-evaluated were submitted as part of other projects and as a service to the community; they are not related to the “hypocrite commits” paper.

These 190 patches were in response to real bugs in the code and all correct--as far as we can discern--when we submitted them.

We understand the desire of the community to gain access to and examine the three incorrect patches. Doing so would reveal the identity of members of the community who responded to these patches on the message board. Therefore, we are working to obtain their consent before revealing these patches.

Our recent patches in April 2021 are not part of the “hypocrite commits” paper either. We had been conducting a new project that aims to automatically identify bugs introduced by other patches (not from us). Our patches were prepared and submitted to fix the identified bugs to follow the rules of Responsible Disclosure, and we are happy to share details of this newer project with the Linux community.

tl;dr Greg attacked a researcher, alleging malice where there was none. This was someone trying to legitimately help the kernel.

p.s. here's Linus's response

> Linus Torvalds: "most of the patches are valid (and the ones that aren't are generally 'useless' rather than 'actively malicious'), so it's basically a huge waste of people's time to now go over those things again just because one source has shown itself to not be above board."
It’s a gift either way (love or truth).
No, the performance issues are real. GC programs have more page demand and higher peak memory use, which is specifically what the iOS memory model (jetsam and memory compression) can't deal with well. They can have some wins due to compacting.

There is of course a GC language on iOS (JavaScript) but expensive webpages get killed quickly.
The parts of the US with the highest rates of homelessness tend to be the least Christian, and vice versa. Make of that what you will. https://i.ibb.co/KVpHXPF/datamap.png
https://vitalik.ca/general/2020/11/06/pos2020.html
Remember the Sokal Hoax [1] and the New Sokal Hoax [2]? And other publishing stings [3]?

How are they different? Honest question.

At least those journals did not ban researchers from the whole university...

1. https://en.wikipedia.org/wiki/Sokal_affair

2. https://www.theatlantic.com/ideas/archive/2018/10/new-sokal-...

3. https://en.wikipedia.org/wiki/List_of_scholarly_publishing_s...
No, property lists have a limited number of types that they support: https://developer.apple.com/library/archive/documentation/Ge...
There’s definitely room to shift the work but I think it’s really easy to look at the amount of time spent writing code after the specification is “done” and say that it’s overhead without questioning how much of it was really due to errors, gaps, or misunderstandings in the spec (thinking memorably of a couple of projects “overruns” where the managers who thought the plan was done were wildly out of touch with their direct reports who’d been excluded from the planning process).

I think a lot of business people also liked the idea of having one expensive architect giving diagrams to cheaper coders (probably in a different county), avoiding needing to give higher pay and social status than they needed to offer to be able to hire decent programmers. Something like UML is appealing if you want something you can look at to say it’s ready to hand over to be implemented and the numbers salespeople toss around for projected cost savings can make it appealing to pretend really hard that it’s that simple.
A Related Tangent is how FB handles different photo requests by saving 4 copies with different resolutions at the time of upload. It's even worse because according to [1]:

" The number of Haystack photos written is 12 times the number of photos uploaded since the application scales each image to 4 sizes and saves each size in 3 different locations. "

[1] https://bigdata.devcodenote.com/2015/04/haystack-facebooks-p...
While I agree with the sentiment, my impression is that the GP's point is about memory safety rather than performance. So yes, this applies for common patterns like per-frame memory in games, in which case the "it" is the arena. Otherwise, as a general rule, profile first, then optimize.
> But as it turned out, that was a false premise. The real blueprints for software ended up being the code itself. And the legacy of UML lives on in simpler boxes and arrow diagrams.

IMO the bad rap UML gets is undeserved. The value of a detailed design in UML may be limited. But high level design elements like use case diagrams, sequence diagrams, activity diagrams - these are super useful.

Simpler "boxes and arrow diagrams" are fine but it's nice to have some consistency in the visual representation of these elements.
OOP and Boost also Templates has benefits when it comes to increasing barrier of static reverse engineering.

For example, Security researcher "Marcus Hutchins" famously echoed that Boost is a cluster fuck of OOP sadness [0]

Similarly, a close friend of mine "Omer Yair" mentioned [1],

"A well written OOP malware might be harder to RE statically than a poorly written C code. Writing OOP malware badly though just makes it similar to C code so not sure of the benefits going that route."

[0] https://www.malwaretech.com/2017/04/the-kelihos-botnet.html
[1] https://twitter.com/yair_omer/status/1262020385203200000
I don’t think “forever” is a promise anyone can realistic/honestly make.

As others have pointed out, refunds aren’t realistic either, and the path can be abused.

A better solution is that you should be able to download your purchases when your account is terminated (or even when it’s active).

An active account should not be required to use your downloaded purchases.
$17.99.