skysight-inc/HackerNews huggingface dataset:
Syncing software could perhaps do so cyphertext malleability attacks. Changing the ciphertext, and deducing information on the plaintext based on client behavior.

Perhaps they could force you into a password reset for a specific site by corrupting the correct files. That might be an interesting first step for an account takeover.

These are highly complicated, active attacks. I wouldn't worry as long as your sync service isn't literally the Russian or Chinese government.
> in any language

Is anyone using a language other than C, C++ or Rust to target Wasm? Many other languages seem to have experimental support - but are any of them ready for production, or even making significant progress towards being ready?
Free growth idea backlogs for motivated entrepreneurs
Hey Guys, first I want to explain what is Hacktika and then I want to offer some help to young motivated entrepreneurs!
hacktika.com helps you with your business growth. how? we have contracts with so many great Growth hackers and Growth marketers around the world. you can order a growth idea backlog in Hacktika, and our experts will study your business carefully and give you a great customized growth idea backlog that is tailored to your business stage, industry, budget, and market.
how can we help young entrepreneurs? If you know someone who is motivated and has a high potential startup with no money, we can help them with a free idea backlog that has been made by the bests in the market, and then they can start to grow right away.
after all, no one's dreams should be taken away from them, only because they do not have the money to start ...
please share this if you like :)
I meant "interdependent" in the sense that lower-level abstractions should also be geared for the problem at hand and should expose a higher-level interface which satisfies the particular requirements of higher-level abstractions.
> NAT works well enough

Yeah, it works well enough until it doesn't: I love when VoIP calls have one-way audio or when I have to map ports because the traversal method used by this P2P app is not working.
When run at the ISP level it's even more fun: remember when wikipedia blocked the whole Qatar?
Are these mutually exclusive? I've never been through an interview that didn't ask questions about previous work regardless of how the technical test was structured.
> You have no idea where to position it without seeing the spec sheet and Passmark scores.

You can probably get pretty far by adding the 3/5/7 to the generation number and sorting by the sum.
Maybe the problem is risk aversion? I mean, your skills probably led you to a series of good, well-paid positions that gave you enough credit score to buy a scarily large amount of debt (and sink it into property.)

So now you can’t afford risky endeavors that can imperil your financial stability, you actually need boring and conservative projects.

No offense, I’m also in that boat.

Also, what used to be eye-opening hardly earned discoveries look rather mundane to you today. The amount of work needed to achieve that same level or surprise doesn’t grow linearly.
They'll be able to easily go after centralized collateralized stable coins, not so much for decentralized ones (except to the extent that the collateral is centralized, if any collateral exists at all [i.e uncollateralized algo stable coins])…
Because if you want to do it at scale it’s cheaper to install some GW on a field somewhere than bothering with roofs of privately owned residential buildings.
Seems like the same mitigation strategy that was used against the non-GM bugs could be reused against the GM ones.

If it doesn't work, do it harder.
> You work out a mechanism to prevent submitted patches from being merged (e.g. maintainers are notified before bad patches accepted by code review processes are merged).

It is my understanding that this happened and that no bad patches were actually merged.
Reading this Ask HN post and one of your previous ones [0], you need to talk to a professional in the real world. Your problems aren't going to go away by reading random suggestions from people on the internet, no matter how well intentioned they may be.

[0] https://news.ycombinator.com/item?id=21874635
PrivateDrop: Practical Privacy-Preserving Authentication for Apple AirDrop
Two observations:

* Sovereignty is not a binary concept - it is not the case that you either have 1 or 0 sovereignty.

* The geopolitical game is not a zero sum game.

Both observations are trivial and I am surprised that they need to be stated here at all.

Canada choose to amend it's law [1] for the sole reason of complying with USMCA. Thus Canada
sees the agreement a mutually beneficial (no zero sum). Canada "clearly yes" still a sovereign
state so you seem to agree that sovereignty is not binary.

To remain in the game, UK will have to enter into trade agreements with other players
and as a consequence enact compromises either in law or in policy. Immigration is a good example
because 1. one of the stated benefits of leaving the EU is tighter control and reduction of immigration
and 2. as a consequence of the need to negotiate with trade partners, it may very well need to relax those
controls.

Finally note that UK was not forced to join the EU. It did so by choice as a sovereign state. While in EU,
it was a major member of the club and could and did steer policy and legislation to suit it's own needs.

[1] https://www.jdsupra.com/legalnews/what-the-amendments-to-the...
> They would have had to explain why stock keeping and accounting was so much less accurate before. They would also have to explain why their staff was supposedly far more delinquent than staff at comparable shops.

Clearly they did not have to do these things.
WroclawVelocity – an open-source 3D racing game written in C++
Because it happens to people? It happens to me, that's why I have a bookmark folder with a bunch of search engines. Do you think that I'll put that much effort on searching in several engines if it wasn't because it happend to me time and time again.
Thanks for sharing. Interesting to hear someone is trying to take care of this aspect. Especially since it's very much underplayed in our industry.
PrivateDrop – Breaking and Fixing Apple AirDrop
Is it useless for first graders to learn to read, because they won’t be able to understand James Joyce?

Are students who design and launch cubestats wasting their time because they can’t possible compete with commercial satellites?

You managed to miss the point of this program completely.

This program allows students and hobbyists to design and produce their own custom silicon. For free. They learn a ton, they’ll make mistakes, they’ll be able to see how others are solving issues, they go through the thrill of actually making their own chips, they’ll be able to test and characterize the result.

Nobody, well, except you apparently, expects the result to be competitive with a state-of-the-art process or an FPGA.
Life will optimize itself to fit harsh conditions at Mars, then return back to Earth, and outcompete original life forms.
If you have a black plastic object, why would you show it over a black background?

It’s very stylish but I just can’t see it.
Is this what the 419 scam stories are based on?
That fifth word is a mistake and the apology certainly has flaws, but you are being extreme.

A more substantial criticism is that blending we’re sorry with excuses and mitigating explanations is what makes it lose impact.

But really, they acknowledge the harm they did and they said sorry and I hope you give them some credit for doing so.
This is an excellent comment and illuminates what I’ve come to realise myself re. the parallels of writing and programming.

In fact, writing is a core part of my workflow: I write to problem solve. A clear problem definition and potential solution makes building the solution much, much easier.

The linked article, unfortunately, buries the lede. When the headline is “Simple Writing”, it’d be a better piece if it started with that from the first sentence.
By the same way we have doctors do surgery in place, construction workers do a toy house, teachers give a class for free, cooks spend one day serving meals for free,...
I'm about the same age and have been coding for about the same number of years. I have a different problem. I enjoy my work most of the time, but I have no will to code anything outside of my work. Even though I sometimes think about how great it would be and that I should get into it.

I still find coding interesting overall. One thing that keeps it exciting is that pretty much every year I do something new. Be it a different architecture or a new language or a new framework.
I've got a mate who lives there. I'd better warn him about the dinosaurs.
Maybe you'll never find the flame that you had originally, maybe it was only because things were new or just that you'll never have a teenager's mindset again. Or maybe you will if you try out new languages or new domains or new responsibilities.

In my late 20s, I felt pretty competent at all the things my jobs could give me, so the only thing I could think of more was to do everything, so I became a technical co-founder. That forced me to understand and own many things that I used to take for granted or only understood tangentially, and that was quite a lot of fun.

Now in my late 30s, I derive joy from mainly two aspects. The first is when I can feel the power of leverage, that I can make a large impact with a small amount of work. So that's a combination of, that my setup and my knowledge allows me to make certain types of changes and improvements quickly, and then that I can see how these changes end up having a lot of value to the company and customers.

The second is when I get to solve a puzzle, so something that I know should be possible, have a rough idea of the end goal, and just having to tease out all the details and everything along the way. So I get that feeling of pushing along the edges of my knowledge, and then the sense of accomplishment at the end. If this puzzle then also has a lot of value to the company and customers, then even better.
The Future of Ransomware (2017)
Unsurprisingly this will be an anecdotal advice but here goes: Find a new job that nobody expects you to code. I know, it sounds hard - especially if your whole career is dedicated to one thing - but you probably have picked up other skills as you are doing your job.

The thing is I began this thing as a wonderful skill to build new things. I was coding in C64 when I was 8-9 years old. But we lose our "mojo" as it turns into a humdrum everyday job where we know our limits. Add in the business related constraints, you slowly begin to develop a toxic relationship. And like any toxic relationship, ending it is better in the long run for your mental health. It was for me.

Taking a long vacay doesn't work if you implicitly know that you will return to the same routine by the way.

Hope it helps.

Edit:
Currently working as a general IT troubleshooter guy who is also doing some coding in his spare time.
Compound documents are not only for reducing network latency. It also about giving your clients a nice single point of entry and not having them call 5 endpoints to get what they need.
I guess mainly because POSIX and UNIX in general doesn't matter that much on server room, only Linux APIs.
> Perhaps they could force you into a password reset for a specific site by corrupting the correct files. That might be an interesting first step for an account takeover.

It would be interesting to see that accomplished without making it obvious (particularly: without corrupting large parts of or the entire database). KeePass encrypts the whole database.
Of course they cry foul, those two things aren't comparable at all.

Cost of switching to Android from Apple: walking down the street and buying a new phone. Cost of switching from the EU to some other jurisdiction: move to another continent. Additionally, it's not the eu's market, Apple actually created the app Store and did significant work to make it real. It is apples, due to the long-standing principle of private property rights. The EU has done nothing to create that, mostly just taking control of pre-existing markets and infrastructures, so it is dystopian to talk about a government as if it owns the people within it. That's not how government is meant to be
Try to open() or seek() a socket file descriptor.
Many years ago I was playing around with an Acorn Archimedes (RISC OS) anagram application. It wouldn't let me create anagrams of the programmer's name, William Tunstall-Pedoe.
I have +1000 entries in my KeePass. Some of them don't have a username associated. Or a service (passphrases to decrypt private keys for instance). I use different usernames for different aspects of my online life anyway. I also store the randomly generated "mother's maiden name" or "name of first pet" in the entry notes.

When you have a simple software managing this mental burden for you it expands your possibilities.
Thanks for the link; would you like to submit that as a separate HN submission as well, including [video] in the title? (I think that'd be within the site guidelines[1])

Might post it myself if you'd prefer not to; I figured it might make sense for you to claim the credit/karma.

[1] - https://news.ycombinator.com/newsguidelines.html
Agree that it's exciting to see, but what's the actual potential? Flutter developing into a latter-day Macromedia Flash?
Could you give some specific counterexamples—teach us something—instead of that fairly unhelpful remark? Thanks.
NXDOMAIN :(
I think people should prevent themselves from using words like "abstraction", "scale" and "powerful" when they really want to talk about something.

> Designing complex conceptual structure is basically what software engineering really is

You cannot quote Brooks and assume that you are going to do something complex anyway. Otherwise you fall for the most common form of accidental complexity: sloppiness. It doesn't have to be complex. Assuming it is going to be complex is the wrong default value.

But really what the author is talking about is API design. The only way for a library or framework to reduce the essential complexity is to skip on some aspects (not implementation details - this would be an abstraction). Like making variables constants so users don't have to fill in weird parameters only an expert of the domain would know what they are about.

This is precisely those choices that matter in API design. If you don't make those choices, you end up with a complex API through which you can see all the details (remember the trend of devices with transparent shells in the 90ies? That's the image).
So you make choices. There's some things your users won't be able to do because your API fill in the annoying variables for them. But of course "One man's constant is another man's variable" (applies to women too) so may you'll have to present different interfaces or sub-APIs.

This is interface segregation.
What you've described is an unenviable position in that you're dealing with a second order emotion, to paraphrase what you said, you're dissatisfied with your own dissatisfaction. That can just send a person around in circles endlessly. You might try just doing your best to not think about whether or not you're having fun in your work, try to avoid watching the clock or procrastinating, just thing about doing your work well. You'll likely enjoy it more that you are right now.

If you're able to and not already exercising regularly and getting enough sleep, I find both these things put my work in a totally different perspective. I was chronically sleep deprived and not exercising enough in my 20s and I was often in a bad mood and rarely felt much awe about anything.
You're right, the car isn't trying to outsmart anyone - physics is trying to outsmart engineers.
Build a product on your spare time. You can start by something simple that you can finish, then publish it.

Even if it's a website that converts miles to kilometers or whatever... it doesn't matter. Just build something that you own.

Even if it's the 1000th clone of 2048 or flappy bird. This one will be yours.

Then do it again, and again, and again... until you get better at it and you do not need a job anymore.
Nice job! It's been a little daunting to write the HTML for reveal.js for quite some time and I'm not really a fan of any GUI editor either. This seems perfect for scratching up a neat little presentation really fast for a meeting or something alike. Thank you!
I've seen a few other implementations of MD slides before. This is the first one that really clicks for me by having all the features I need. Thanks for sharing!
I suppose, but if I want to consume
it in an app or library, not only do I have to write the platform-specific parser, but I also have to write the platform-specific bytes-getter. Seems silly to me to not make it available to standard unix tools (ie cat, grep, sed, awk).
Here's the California Independent System Operator (CAISO) data that shows the share of different energy sources over the course of each day:

http://www.caiso.com/todaysoutlook/pages/supply.aspx

Power is being exported in the afternoons, but even at that time natural gas plants continue to run.
I don't have access to the computer nor the raw data. I was underwhelmed by the original news article and never saw anything that changed my mind thereafter. I'm not refusing too look at a computer nobody has access to.

Maybe they ought to have leaked the raw data for me to look at.
Cisco says computer chip shortage to last six months
For better or worse, yes other malls exist.

Firstly, there's the web. Secondly, Android allows you to create alternative app stores and install them, or install apps entirely outside app stores. Thirdly, there were and still are competitors to both Android and ios, the fact that they suck and nobody uses them is not Apple or Google's fault. Finally, many people live in places where there are only one or two large malls.
> A browser is way too complex attack surface to trust. Only way I get a password is to ssh into the isolated host, decrypt password and cut & paste.

A browser is too complex but an OS and SSH aren't? There are vulnerabilities in both disclosed regularly.
They don’t need to do anything. People aren’t morally entitled to demand information from a grieving family just because it would sate their curiosity.
The sad fact is, that by the time you're thirty you are physically, mentally, and morally an adult. And being an adult is defined by one thing: RESPONSIBILITY -- to yourself and to others who might depend on you.

This means that it doesn't matter whether you particularly like your work. That's why they call it work. What matters is if you are good at it and will you get paid well for it. If you can earn enough money to support yourself and the others who depend on you (if any) by doing something else, do that and cultivate coding as a hobby. Otherwise, keep coding professionally and find joy in other activities, like fishing or woodworking.

Or, you know, rally and protest to convince your government to pass laws for universal basic income and the abolition of private property.
If it was so good, they'd have followed their own advice.

It took them 250+ words to write "simplicity is good".
My favorite is still the Rust Container Cheat Sheet[0] from the Rust Performance Book[1]. Great overview on just one page - that's what I call a cheat sheet.

Edit: Also recommended: The Little Book of Rust Macros[2]

[0] https://docs.google.com/presentation/d/1q-c7UAyrUlM-eZyTo1pd...

[1] https://nnethercote.github.io/perf-book/title-page.html

[2] https://veykril.github.io/tlborm/introduction.html
But they did not introduce security vulnerabilities as there prevented the bad patches from being merged
So now it gets interesting when the linux maintainers themselves cannot seperate good from bad patches.

It's a 190 vs 3 bad, against ~50 vs 143 bad.

Let's hope the maintainers can correctly identify the good ones, now with the given hints (August 2020 only). Or if they still keep staying in witchhunt mode. Word against word. Some of the latest patches do look wrong, but I'm not an expert. Analysis will need a few weeks.
Here is GitHub repo of OpenAstroTech project.[0]

[0] https://github.com/OpenAstroTech
I'm in my thirties and began coding when I was 16. I have similar thoughts. I used to research topics and create personal projects based on that. Basically I did a lot of in-depth projects. Nowadays I enjoy expanding my breath of knowledge instead without digging to deep. It only seems natural for me. I feel this is a sign of maturity on a personal and professional level. You may be ready to become an architect or another more high-level title. I never read books about IT/CS before,but I started this year and I feel they support my hunch,they are also a lot of fun and contain new information if you pick the right books.
I find it motivating to create tools that help coworkers. Something satisfying about the direct feedback, vs a faceless customer.

Creating things for myself alone no longer has much excitement, or only brief bursts of excitement. It used to, like OP notes.
Werewolf? Where can I play? I used to do 24 hours binge sessions in college.

I love the game. It has taught me so much about general human decision-making. For example, I have had multiple occasions where mob mentality occurred when the day before that a (now dead) villager had the perfect plan to win the game. Except, now he is dead, and the wolves have been able to sow enough chaos for the other villages to forget the importance of the plan.

I also had games where this didn’t happen.

Or games where rare plays happened. One time the witch did a switcheroo (killed one person, saved the other). Based on this another villager noticed who the witch was (by using deduction). Says to the everyone “I am the witch”. She used herself as a scapegoat and got killed by the wolves who now believed the witch was dead.

I love that game.
You'd think so, but from my experience the folk that are very interested in algorithmic design and so forth produce highly abstract and hard to understand solutions to simple problems, which, in the end, are the majority in the regular dev work.

Sure if you're applying for a job that really demands algorithmic design skills it should be a great asset but in general the most valuable skills any programmer has is producing simple and robust code that works and others can continue building on. I don't deny that knowing algorithmic design skills well helps a lot but it does seem to feed the egos of the programmers to produce overly complicated solutions.
Great work!

"Allocate T bytes on stack bound as x" may sound a bit like T is a size instead of a type.
I just wanted to say I agree with you and I don’t know why you were downvoted. This seems to me a well-intentioned and quite reasonable request.
Hm the author mentions several times that he builds drums. And I would like to check out his drums, but there isn't a clear place to view them?

That said, the point he makes is a good one, and one seems obvious in retrospect!
Ah great, so now smartphones never happen at all because regulations say general purpose computers must allow windowed applications? You seem to have a remarkable faith in government regulations! All the attempts to regulate tech I've directly had experience with were disaster zones of unintended consequences.
8pm bedtime + this stuff:

https://www.cibdol.com/cbd-supplements/meladol

I originally got it from Zamnesia in the Netherlands, but they stopped selling it under their own brand in 2019 or so, but it was clear this was the same product.

It cured my night terrors and broken sleep, which was enough to get me settled enough over 6 months to establish a 8pm / 5am bed routine. I still take it today, even with better sleep patterns, and it’s part of a ritual before bed.

Downsides: tastes like ditch water might, consider it an acquired taste.
Sleep when tired. Get up when ready. With occasional exceptions. Glass of water before. Night pot.