skysight-inc/HackerNews huggingface dataset:
I think what you're missing is that Signal does not need to place any files on any phones for their purpose, and likely will not ever do so.

Their intention is to render using Cellebrite for court evidence worthless by suggesting that the record could have been tampered with at any point, if any phone the user scanned had Signal on it.

Proving that no phones ever had an 'aesthetic' file that could cause damage to Cellebrite is impossible, and they've provided clear reason why it is impossible to prove.
I understand the incentives, but teaching is part of their job even if they need to do research, and from the student perspective they are bad professors. If all I needed was to learn it from the book/youtube/internet and take tests, there would be no need for professors and they wouldn't exist.

I've had professors that did more damage by 'teaching' (I use that term loosely) than if they had just said 'learn it from the book/online and show up for labs/tests/exams'. Mostly it was because they had no idea how teaching worked.

It's a very faculty-centric view because from a student's perspective, the teaching is 99% of the school. Very few will go on to research. They come to school to learn and earn a degree. If the University cannot provide good teachers, they are not a good university. If a professor cannot teach, they are not a good professor. That isn't a moral judgement, its just the subjective judgement from the other side of the school-desk.
Yeah, it's definitely not gonna be that explicit. There's a section under Cover called "Introduction to the Guide" that explains their objectives.

Anyways, this doc is gonna be useful for me because while I took computer science & engineering as a major in college, I never ended up taking a course that taught me how to holistically look at software engineering as a discipline and all the terms that come with it.
In discussions about programming languages, you have to always remember to add "equally"/"to the same degree" to statements such as this one:

> all languages are capable of producing maintainable software

Once you add that, you understand what the original poster actually meant.
Oh cool, yeah I wasn't sure if they were talking specifically about DLL hijacking or about injection in general.
>I have yet to see a codebase with no unit testing which doesn't have problems

I've seen many code bases work much better with a bundle of integration tests and no unit tests.

IMHO tests which hit a real database are always more useful than ones that mock it out.
I agree that TOML sucks for nested structures.

JSON5 is probably the best option at the moment.

https://json5.org/

* Instantly obvious what the structure is (unlike YAML or TOML).

* Everyone knows JSON already. This just makes it a bit nicer.

* No noob security mistakes or type confusion caused by underquoting like YAML.
It depends on the degree. If you're becoming a medical doctor you'll have to do a ton of memorization, but in other fields doctorates are the least memorization-intensive part of your education, because the focus is on generation and synthesis, on the assumption that you've already learned the rote knowledge. You don't need to memorize anything to write a dissertation but that doesn't make it easy (and you'll end up memorizing everything anyway).
What's even weirder: church attendance is super low compared the US, the average German pays not to go but on the flipside churches act like social service arms of the government (meals on wheels, eldercare, etc.)

Schools also have religious instruction as a main class, although you can opt out. I'm a lifelong atheist but thoroughly enjoyed the religion classes, even picked it as a minor in my upper division classes. This might have changed, though, I left Germany 30yrs ago.
>Launches in 2027.

Hopes/Scheduled to launch in 2027 seems more accurate. Even when the rocket is fueled and on the pad, it can still get scrubbed.
IIRC we had to put together a significant analogue circuit, without any real guidance as to how we'd achieve the high baudrate. The software was running on a minimal CPU that we wired up by hand, the address bus, the databus, the memory chips and everything else... hundreds of cables on breadboards, just for the digital part, and the analog electronics took up more boards. A loose connection caused by moving the boards could cost you hours when restarting.

It was definitely too difficult _for me_.
Assume you have a number of cards organized in rows and columns. You could define how many columns to show between each breakpoint using several media queries. However, a better approach would be to use a flex container with `flex-wrap:wrap`. Specify `flex-basis` for its children and the browser will automatically wrap them accordingly. No break points needed.
I actually just stumbled upon an article where someone went through HCL and finally landed at Lua: http://dnaeon.github.io/choosing-lua-as-the-ddl-and-config-l...
Yes you are right. It is just very multi leveled and not directly a budget or law.

I think we are quite active on protecting our interests. Just enforcing a Germany first politic is a complete break from our public agenda.
And during! Which was, of course, illegal.
While this report is entertaining to read, I have to wonder about possible downstream repercussions of the implications within the last paragraph; if you're in police custody or worse and your Signal app contains some 'aesthetically pleasing files' that interfere with the authoritarian software, it's likely going to be your ass on the line for all sorts of charges.

Don't get me wrong, the implication is enough to discredit Cellebrite, but my initial thoughts are that either this bluff gets called, or there's a non-zero risk of someone landing in even hotter water down the line for using Signal. Of course, this assumes that you're not already neck-deep for having encrypted data and upholding your right to privacy.
I've only used it for a few minutes, but here's my first impressions.

What I really liked: I didn't have to read any documentation to understand how to do the things I'm used to in tmux, the CTRL+[KEY] menus with hints are really helpful and well designed.

What I didn't like so much: The interface doesn't feel as snappy as tmux over a remote connection, and I couldn't find any way in the "CTRL-menu" to detach (like tmux CTRL+B,D)

Looking forward to future releases!
Honestly, any tests I took that were open book were long enough that if you were constantly looking things up you'd never finish. Same would occur if you were talking to someone and they were having to relay the info.
Countries regularly kill others in the name of international laws about the preservation of peace and security. This has been the case since at least the Second World War, when many countries allied together to crush the Nazis and Imperial Japan. This was wholesale killing on a global scale for the sake of preventing certain states from doing more of their own vast killing while breaking many international norms, agreements and laws. Much of it was unjust, yes, but would you argue that an absolutist stance of it being wrong to kill others in the name of the law justified doing nothing while these ruthless empires conquered more territory and enslaved millions more people into a slow death?

Or how about self defense? If a person is protecting their lawful rights, home, property and family and in the process must kill an aggressor to do these things, should they just not do so out of a certain absolute ethical posture about the wrongness of killing other human beings? Just to clarify where your own fundamental posture on killing in the name of the law this draws some lines or exceptions.
He just presented C++ as being another over-complicated language :-)
not really - with being in that project since years, the only guys who make money are the machine builders and the project maintainers on Patreon.
You are a freelancer right? I always feel the US salaries are more comparable to EU freelancer salaries; I never made less than E100/hr as freelancer for the past 25 years working for EU companies. And often (if the economy is good etc), over 250/hr is doable. Sure you need to buy your own insurance (if you don't want public hospitals or minimum welfare if you get fired) but other than that I don't think it's that far off.
Wow! It's so involved and deep!

Feels like I'm reading a technical manual on organized crime.

Any idea why Italy is so susceptible to this compared to the rest of Europe? Or is the Italian version just glamourized by the media more?

Mexican cartels kind of make sense being the gate way for drugs from South America to the U.S.

Does Italy serve a similar function for Europe maybe?
I actually do have a gaming mouse I really like using. Not sure if I want to downgrade for that. It has to be Gnome issue, I've used Sway (Wayland) where everything was super smooth.
> Not sure what's meant by this; Rust has a standardized Result type, with dedicated syntax for early-returning errors and type checks that make sure you handle them (or at least explicitly ignore them). Go, on the other hand, has a shaky error story and from what I've heard it's a constant problem due to enforcement-by-convention.

You may not like Go's convention (indeed, I don't love it although I think it works fine in practice), but the only error handling mechanism in Go is `if err != nil { ... }`. On the other hand Rust has many. This is not incompatible with your observation of "a standardized Result type". Here is a survey of the error handling landscape circa 2019: https://blog.yoshuawuyts.com/error-handling-survey/

> Not really sure what this means either... the owner of a value generally falls out naturally from how you're trying to use it. It's not really an either/or option

Or you have code which clones gratuitously out of convenience, often because some API unnecessarily asks for ownership of its arguments. Cloning is often just easier than battling the borrow checker, so in the real world with its deadlines, we tend to see a lot of clones because it's more convenient and performance is rarely a concern.

> I've seen generics make TypeScript codebases impenetrable, and I think there's a decent case to be made for not having them at all.

In fairness to TypeScript, I suspect much of this 'impenetrability' is because type annotations were added to existing JavaScript. I suspect the gratuitously complex types were already present in the original JavaScript, but the type annotations brought the pain to the surface. Similarly, I suspect TypeScript has a massive amount of developers who have only ever developed in JavaScript, many of whom are trying to shoehorn their bad JS habits into a statically typed language. You see this in other statically typed languages as well, but never on a scale that leaves a mark on the overall ecosystem.

That said, I think everyone should learn pre-generics Go if only to experience the value of an ecosystem that doesn't value egregious abstraction (again, I say this as someone who personally values egregious abstraction). And no, I don't think Java 1.0 counts (wherein people tried to shoehorn everything into implementation inheritance rather than generics).
How does the title feel misleading? It says directly and exactly what was done, and it appears that you agree that this happened.

From what I understand, it seems that it's entirely possible for this scenario to be replicated "in real life" by a driver losing consciousness or being in a state of partial consciousness.
I'm a physics grad student, and this is completely wrong. The purpose of graduate classes (at least in physics) is to teach you how to navigate a the standard reference texts. For example, the main thing I learned in my grad E&M class was where to find information in Jackson (aka "Classical Electrodynamics"). Classical mechanics was a mix of Goldsmith and Landau and Lifshitz. Quantum mechanics used Sakauri. And statistical mechanics used Pathria. Also, referring to these classic texts by author is very common, much moreso than by title.
Only every second xx.04, to the best of my knowledge. 20.04 was an LTS release, the next LTS will be 22.04. 21.04 is a standard release supported for 6 months.

Edit: Ninja'd by jpace121, should have refreshed before commenting.
It's a common misspelling, and I find it particularly grating (that, and "tounge" *shivers*). However, I've been getting better at reflexively requesting corrections as I also have some words I constantly misspell.
If they will beat you with a wrench for that they will beat you regardless of what is in your phone. If they do find something they dont like you get hit with the wrench, if they don't find anything you must be hiding it so you get beat with the wrench.

So now we are saying don't protect yourself because if you do that would imply you have something to hide,and are therefore guilty and deserving of the wrench beating.
Not really disagreeing with the spirit of your comment, but choice of RDBMS is rarely based on the desktop environment of the developers, except in maybe small/hobby projects where the differences don't really matter anyway.

As someone who works in a .NET shop, it's been possible for a while to run MS SQL Server on Linux, anyway. This leads to a smaller overall footprint for those of us using dockerfiles to spin up test environments and such.
>looking around in the room or blinking too much

>And I tend to close my eyes a lot because it helps me visualize the problem

Nvidia has added eye-correction feature to it's Maxine platform(SDK with set of ML features for video conferencing) it can correct our eyes in real-time to show that we're looking at the camera even when we didn't. When I first saw it's demo the first thing which came to my mind was these proctoring tools[1]. It's a matter of time before all major video conferencing tools add these features or 3rd party plugins/hacks which enable it.

I'm not against these proctoring tools, Especially since there are not many options during lockdowns but considering what's at stake they deserve all the scrutiny they can get and if a company threatens with lawsuits for genuine criticisms it tells a lot about their business practice; Sadly this seems to be very common in the e-education sector(Checkout unicorns claiming to have placed 10 year old in Google after taking their 'coding' class and the retribution faced by activists for showcasing the lies).

[1]https://twitter.com/heavyinfo/status/1381831802315177989
Right, I didn't indicate its illegal, I said it is not allowed.
On Being an Outsider
I never understood why a company would enforce the use of a specific IDE. If they can’t set up .gitignore files and formatting properly, they should not be doing IT.
I think what is actually going on is that Rob Pike's ideas about how software engineering should work resonate strongly with you, while Anders Hejlsberg, Don Syme, James Gosling, Christ Lattner, and Rich Hinkey does not resonate with you.

I think it would be a difficult argument to suggest that those other people do not have similar engineering chops, or haven't been around a long time.

But if you are right we should see Go winning in the marketplace more and more in the future in a way unprecedented for programming languages.
As we seem to be discussing the Gizmodo article in addition to the post from Moxie, I'm going to copy & paste my thoughts from the other thread:

While this report is entertaining to read, I have to wonder about possible downstream repercussions of the implications within the last paragraph; if you're in police custody or worse and your Signal app contains some 'aesthetically pleasing files' that interfere with the authoritarian software, it's likely going to be your ass on the line for all sorts of charges.

Don't get me wrong, the implication is enough to discredit Cellebrite, but my initial thoughts are that either this bluff gets called, or there's a non-zero risk of someone landing in even hotter water down for using Signal. Of course, this assumes that you're not already neck-deep for having encrypted data and upholding your right to privacy.
Just curious but what is the use-case here, other than scamming people?
Darktrace’s float will test London’s market
Netflix to Announce the Release Date for Season 4 of ‘Cobra Kai’
Every Apple product to be carbon neutral by 2030
Sedation without going into general anesthesia is not an easy thing at all, and even experienced anesthesia providers will sometimes struggle. However, patients moving or being otherwise disoriented is quite frequent and in itself is a non-event except when trying to reach for the surgical site, as you describe. As for distress, it's often not from pain but rather confusion, which can somtimes devolve into agitation and necessity to deepen the anesthesia. In my experience, true awareness is exceptionally rare. It's true that some procedures, such as cardiac or emergency C-section have an increased risk of event due to the particular context, though.
I commonly use it on mobile, it's on the right side at the bottom, a very easy position to reach for my thumb
As someone who grew up in the US, and works as a software engineer in Europe, I can't understand why anyone would ever choose to work as a developer in America. :)

I have a very high quality of life here, strong protections as a permanent employee (increasingly less common in other industries in Germany, but not in tech!), a salary that is excellent compared to many of my peers, and comes with a purchasing power that I imagine meets or exceeds someone in my same position in New York or the Bay Area.

I won't pretend there aren't downsides (for example, stock as compensation is rare here, and not incentivised by the legal situation), but for me the upsides win over raw actuarial comparisons. I'd much rather have my compensation in Berlin than trade it for 2x or even 4x that in the US.

(Edit to add: once you bring rent, medical insurance and associated out-of-pocket costs, and paid time off into the picture, compensation in the US starts to look like a pretty raw deal IMO.)
I agree. One reason I think people hate VBA so much is because the tooling is abysmal. If you've ever had to work with VBA code in the Excel code editor, you'll understand what I'm talking about. Ironically, both that and Visual Studio are made by the same company.
It doesn’t appear that this uses any nightly or unstable features. The parent didn’t say why this doesn’t compile, it’s probably something else. Maybe they have an older rustc.
That is not the scenario I'm outlining.

I am outlining a hypothetical scenario where the authorities choose to look through my phone for ${UNRELATED_REASON}, and the presence of Signal's hypothetical exploit files would cause their digital forensics software to crash. In this hypothetical scenario, that crash in and of itself could then be taken as a reason to charge me. I don't believe "the app software maker selected my phone at random to have those files on it!" would help me out in that situation; that's the sort of nuance that tends to get completely lost.

The opt-out option would help me because, having opted out in advance, the hypothetical exploit files would not be on my phone.

I do agree that this is a slightly far-fetched scenario. However, I am very confused how HN can generally be of the opinion that having unwanted malware on your phone is a good thing, even if Signal put it there.
Yes, I think you should absolutely get one!

For once, it will always place your resume above the ones without a masters degree. And even if you look at the topics and think you won't like it or need it - you will always learn things that will likely be useful in the future! Be it to just get a different perspective on things or be able to suggest or bounce some ideas.

For me personally, the masters degree was the best thing I could have done. It helped me academically, made me a better programmer and helped several times when applying for jobs!

So yes, I highly recommend it!
Nvidia suggests uninstalling latest Windows 10 updates to fix gaming issues
I get frustrated trying to improve things both big and small. As a small example, our endpoints return a list of JSON objects, as well as the length of that list, as though we're passing C pointers or something. I was under the impression that Javascript could determine the length of a list without help, but apparently that's the way it's done and it's not really worth a confrontation with the client to change such a small thing. Bigger changes are, of course, even more difficult.

Even in the best circumstances there is a slight adversarial relationship with the clients, I think that is the source of a lot of problems.
I hope they don't. The intent of these devices are different.
That's the point of the demo. If Ingenuity's processor survives, then NASA can consider these more advanced processors. If it doesn't, then that means continued use of lesser capable but rad hardened processors will still need to be used. OR, it could mean a re-evaluation of mission lengths. if more science can be done using a more capable processor that is known to have a limited lifespan, then that will have to be evaluated against the benefits of longer missions with less processing requirements
Exactly. So you live in the house. The question is whether a €1k should be saved or invested or paid towards the house so you leave it (after say 10-20 years) with 50% loans instead of 70%?
Not the OP, but I think I know what they mean. If you zoom in so that you see a div full of text that would get wider than the screen, Opera will reflow the text to fit the width of the screen even if the underlying page layout is wider. This allows you to read pages at high zoom level without having to pan the page side to side for each line of text.
I think one thing I can't protect against is students completely faking their identities. Meaning if I expect Matt Smith, and Matt Smith has hired John Doe to interact with me all semester, I can't detect that, because I don't really know who Matt Smith is. But Matt Smith would have to know that John Doe will be available to impersonate him for the next 3 years because they will be taking several courses with me. If Matt Smith is rich enough to hire a double to essentially go through college for him, then good on Matt Smith for being independently wealthy I guess.

The other thing I do is I don't make exams so weighty. If you ace the exam but you don't do well on the assignments, you're not getting an A in the course. So the hypothetical wealthy cheater will have to keep their body double on retainer for the semester.

But I will say that the students who earn an "A" are ones I interact with fairly regularly. "A" students typically come to class, ask questions, engage with the assignments, start their assignments early, etc. And before anyone accuses me of playing favorites, I don't do any grading, and grading is anonymized. But I can easily predict the "A" students just by their work ethic. The idea of the brilliant student who doesn't come to class and effortlessly breezes through the exam is as far as I can tell after teaching thousands of students a myth. At least at my university. Maybe all of those kids go to MIT.
One of my favorite custom bash function is to use up() function to abstract away all the cd ../../../ command.

Up 3 will put me 3 directories behind the current one.
Not disagreeing with your stats, but it seems that the long-term trend is decreasing support for the death penalty in the UK: https://www.bsa.natcen.ac.uk/media-centre/archived-press-rel...