skysight-inc/HackerNews huggingface dataset:
> With the processor unification, Apple may be able to provide a decent experience if they can think of a system that won't kill the battery (external battery the phone switches to?) and can cool the processor sufficiently while it's in a dock.

Why not just power the device off the lightning (hopefully Usb-c soon) cable used for docking? That's how all docks work now. When you're charging a single cell (most phones) you draw power from the charger, with the battery helping out during bursts if needed. No need to invent anything.
Using a "proper" debugger on a supercomputer tends to be super tricky and the correct setup tends to depend on the machine. And even if you have a debugger attached to all 100k MPI processes, where do you look? And if you try to debug a production run you certainly don't have enough RAM left over for a time travel debugger like rr. The "bad" print debugging still works at that scale. Sure, once you have understood the problem well enough that you can reproduce it on a single node within a couple of minutes a "proper" debugger can be very useful. But you need to get to that point first.

And no core dumps are not a "solves everything solution" either. A) because dumping the entire 1500 TB of memory to disk takes a lot of time and B) because bugs can trash the stack, leading to misleading stack traces.
Back then, there were zero black students at Harvard. The admissions process can’t become more fair by failing to correct for the vast injustices imposed on African-Americans. Arguing that Black students are taking what rightfully belongs Asian students is just as racist as Harvard’s anti-Jewish policies.
Brit here. I refused to install the NHS Covid app until they revamped it to improve privacy. I once received a notice that my device recorded a beacon which was later submitted as from a infected person, but it didn't require me to take action as it was otherwise outside of criteria (either distance or duration). They eventually removed these warnings as they are not helpful.

If it informed me that I had to quarantine and/or get tested I would definitely do so.
It's easy to shit on other people who falls for scams but even someone who has a security focus can fall for it.

I personally used "The Great Suspender" for years until it was bought out and the rug was pulled out from under me.

I do think Apple's requirements are higher than Android for publishing apps, but I would not risk that much money on a mobile device ecosystem. If you're transferring $600,000 worth of BTC, purchase a one-time use laptop and use wallet.trezor.io as your web wallet. This laptop should only be used for this workload and kept offline / powered off otherwise.
Some of the resistance I have encountered from developers and engineering managers to writing sequence diagrams has been because it makes it harder for them to bullshit about what their code does, how it does it, and how complex (or not) it really is.

When you put an abstraction over something its parts can be replacable and in non-growth oriented development cultures this is what people try to avoid. Essentially, resistance to abstraction is often resistance to being managed.
The real problem is that it wasn't done with the informed consent of any kernel maintainers. The information gathered during the exercise is potentially quite valuable for informing policy and procedure around how code is reviewed and accepted, it just wasn't gathered in an ethical way.
I've been using it, finding it less useful for me than stimulant options but sometimes it can unstick a feeling of ADHD helplessness or "death spiral".
Print debugging makes me fast too, but there is eventually a breaking point (get it) where print debugging isn't getting me the answers I need and I have to switch to using other options like interactive debugging.

Still though, I reach for print debugging first.
Very good point, can't believe I missed that.

I have it inside Paletter Lite app.. have a screenshot for you here: https://imgur.com/a/CJvf0fh
I'm no silicon architect but isn't this why performance is so good? They can cut out all those extra pcie lanes and extraneous stuff and focus on performance. If you start adding back big I/O won't you just be back down to Earth with everyone else?
The people who like doing that can buy ICE cars. This represents a teeny tiny minority of all car use. I'd wager that more than half of the driving population of the US has never in their lives driven in a place with hundreds of miles between fill stations.
> It was a massive waste of my time and way off into yak shaving territory that I should have abandoned long before.

I don’t know if I agree with you there. I suppose you did waste your time, since the bug turned out to already be fixed, but every crash has to be investigated by somebody. Otherwise, the wouldn’t get fixed. If they don’t get fixed, they simply waste everyone’s time, over and over again.

The sad statement above was that the commenter saw a crash in a tool, and gave up instead of investigating. Thank you for not giving up when you were in the same situation!

> Embedded debugging is a pile of woe as well

I’ve never done anything of note on embedded platforms, but it certainly sounds like it. You would think that you could pay the vendors for better tools, but it sounds like they all just do the bare minimum, or they just do the bare minimum for anyone who doesn’t pay through the nose.
Search the phrase "I made sure to include all the information available to me" and the tail of woe is incredible, all 79,000 hits of it.
I do think the IRB got this one wrong, but I am not surprised that they got it wrong.

From my experience with an IRB, they were most worried about researchers doing another Tuskegee experiment or a Stanford prison experiment. The question they were interested in was something like “are you going to torture/abuse/harm people directly?”

The people on the board have likely never thought about the issue of introducing a (possibly important) vulnerability into software which is widely used. That also has the potential for harm, but doesn’t look obvious to the IRB in the way that deliberately infecting someone with syphilis would.

Getting an exempt determination for this research would likely have been extremely easy at any IRB at any university in the country. Applications from CS departments are probably less than 1% of what they do (that figure is a guess so if anyone knows better please correct it!).
> What do you mean by 'people didn't want to live on the ocean'

I remember Arnold Schwarzenegger being confused why "nobody" wanted to live in Santa Monica or Venice Beach to a point that the government was subsidizing it to attract people.

For instance north of San Diego there are old apartment buildings on the water that have only window facing the ocean in their bathroom.

Historically ocean was considered as a hassle. You have to deal with the salty air that breaks down many material quite swiftly.

In Turkey, fathers would give the prime land to their sons (pastures) and the crap land to their daughters (ocean fronts). How the world changed.

> what do you mean by 'vast swaths of empty land in the PNW'
If you go anywhere outside of the majors settlements there are major swaths of empty land which is fairly cheap, but there is no infrastructure there and people don't want to be the city founders anymore.
I think you are misreading the article, so let me be clear:

If you enter your card in a compromised device, then you lose control over

1) how many transactions are being made

2) who you are paying

3) how much

Because the chip has no way of asking you for confirmation about the identity and amount of the transaction. There is no secure keypad entry connected to the chip or secure bus going out.

All you have is physical presence. The chip can prove to the input device that it is present, and the input device cam forward that proof to the bank. That is all the chip does. It does not prevent you from paying the wrong person, and it does not prevent you from paying the wrong amount. This is why compromised input devices are created, so that you can be charged the wrong amount and to the wrong party when you think you are buying gas.

The chip only guarantees physical presence. Checking the CVV is only when there is no presence and you are trying to milk the attack into an offline attack rather in addition to the MITM attack. Why are offline attacks also possible? Because vendors want to support online purchases, where there is no physical presence. But that' not the MITM attack I was describing.

Offline (card not present) transactions are a second issue, and indeed they are much larger (80-20) not present:present in terms of card fraud, but you don't need shimmers to conduct card not present fraud, although you can certainly use them for that.

Finally, not verifying CVV is not an abuse of the protocol, it's how you do a card not present transaction, which is also supported in the same payment protocol. It's not some weird form of protocol violation vendors are all mysteriously doing. It is not "doing it wrong".
Any opinion on the move to BTRFS as the default filesystem? Would it be a transparent change for the user? Obviously it will only apply to fresh installs.
There are better examples out there than porn companies. And mindgeek is probably the porn company which monetizes the highest amount of their traffic through legitimate offers (paysites) instead of straight-up scams.
I love this tactic. To me, if this was an actually controlled experiment, the last step in the experiment would be to undo the bugs they intentionally created. If they did not, this would definitely be sabotage. Based on that, they should have no problem being able to identify what they did.

It's kind of a catch-22 for the UMN.
>I don't know what I will do

>I will probably buy another phone and install LineageOS
To do that you would have had to either use the entire tank of gas at the highway MPG rating, or exceed it. That seems perfectly doable and that's not an everyday scenario.

You can do the same in an EV, there have been plenty of times where I left the house and returned with more charge due to using hills and regenerative braking.

That being said, it's unusual and you wouldn't expect go get highway MPG ratings under regular use unless your regular use is strictly highway driving under optimal conditions.
UML as "Language to depict diagrams + set of tools on top of it + unified process and all the waterfall-ish bureaucracy around it" - yeah, sure, it's dead in the sense barely anyone uses it in such form.

UML as "Language to depict diagrams" - not so sure, I use component, state and sequence diagrams all the time (in both interview and main job settings).
Closed Standards
You've posted the same link twice.
I’m not a cardiologist but this detail seems believable on its face and it is supported by the surrounding statements. Do you disagree with it?
The rest of industry have declared most Google products spyware... so I guess it all evens out?
> Apple is quite popular among developers...

The great majority of developers use Windows or Linux according to every Stack Overflow survey from the past ten years. Only ~25% use a Mac.
In every safety system, there is a point where human intervention can override automated activity. In almost every car these systems have standard tactile controls so you can override through muscle memory in an emergency without taking your eyes off the road. (If you haven't noticed, even the icons used on stalks and buttons are standardized across the industry as a matter of safety). In a Tesla, overriding the auto sense wiper feature is available through an interaction with the touch screen at the precise moment when a driver should not be distracted (ie, when they are having trouble seeing through the windshield). As far as I know, they are the only auto manufacturer that doesn't stick with standard stalks for things that affect visibility (wipers/headlights/turn signals, etc).

This is why I don't think a Tesla is a feature complete car -- it simply lacks the common set of safety features found in every other modern vehicle.
You mean Message Sequence Charts? :) https://en.wikipedia.org/wiki/Message_sequence_chart
If this is the extent of your economic analysis, it's not very good.
So community lawyers and other interested parties should make sure that their business model doesn't scale this way.
Corporations lobby for their interests.

Employees lobby for their interest by negotiating with their managers/contract or organizing into a union etc. or if they’ve been seriously slighted by lawyering up.

Arguing about race relations, gun rights, cancel culture, policing, trans rights, income inequality at large is irrelevant to 99% of employees. They’re just venting opinions and creating drama over something that they can’t change and usually is irrelevant to their workplace. They can be activists on their own time or keep it in private channels. I think all the “no politics” people want to avoid is Twitter-like conflict and drama, not a ban on all things human or real advocacy for your own interests.
Sure, that's entirely reasonable. But that's not what the Linux Foundation is demanding, apparently.
I really enjoyed the book Getting Things Done by David Allen. It talks a lot about his productivity system "GTD" and his rules on prioritizing. It contains a lot of fluff, so I'd recommend buying a hard copy (or going to a library) so you can skim it more easily.
On iOS, you have to trust Apple and everyone who writes code for Apple, directly or indirectly.

If any Apple code that runs as root is evil, then your location data can be stolen in exactly the same way.

In the case of Android, the equivalent is code written by Google, the OEM, the chipset maker, and anyone those people gave root access to (which is often a long list of 'sponsorware' apps).

Overall, the class of vulnerability is the same, but Apple just does a far better job of vetting and controlling the list of people/code.
> Our water goes with those exports too.

Now, that kind of nationalism is very uncalifornian.
I feel like there's more to this story but I'm just shocked that trezor transactions can be authorized from the app. I know that with ledger your keys/password are not exposed to the device and you need to enter a pin for every transaction, he'd know he was authorizing a transaction at the moment of entering his PIN!

I've never used a trezor before so I had to look it up:

When considering the security in entering our passwords, in Trezor wallets, the password is entered via the keyboard of the connected device, making it vulnerable for attackers to read it.

However, in Ledger wallets, the password is linked to another PIN which is entered using the normal keys.
Compiler writers are pretty quick to add support for new features--I'd say it's about a year-ish between being added to the standard (which is not the same as the actual release it's in!) and actually being usable in a compiler.

Where the delay comes into play is that most projects require a minimum support of a compiler that's several years out of date. And if you're required to support 4-year-old compilers, then C++17 features aren't going to be available, despite them being available in the newest versions of all compilers. Back in 2018, I was working on a project where I gave up and used C++17 features (constexpr if) because I knew I could get away with only supporting a Clang that's a few weeks old.
While that’s true, and this is no instanthouse.exe, these are all proof of concept projects. Things like longevity or other challenges might not even be the focus. So while this is no holy grail, it’s a stepping stone towards certain building solutions or local solutions (think quick emergency shelters, or off world for instance, to name a few)
I don't have an Android device presicely because of this. I don't use Google Chrome, search, etc. I block all GA,Tagmanager,blahblahblah as well.
They tried cutting taxes like crazy since Reagan and it's been a complete and utter bust.
Tesla Sold $272M Bitcoin in Q1 - Musk Responds To Allegations Of Pump And Dump
I think there's a practical difference between what an app could do with root permissions and what is widely understood to be likely or acceptable. The "anything the app could do it is doing" model isn't really the right model to apply for vendor apps that are generally trusted by consumers (and observed by security researchers). We're not talking malware with root; we're talking the regular system health and monitoring apps that vendors install.

So it's real unlikely that MotoCare is intentionally trying to de-anonymize someone's COVID-19 data by code injection or continuous GPS logging. It is extremely likely and expected that the app is periodically grabbing the syslog as a crash report, and that means Google's claim of keeping your data private now has to implicitly assume that MotoCare, without doing anything special other than its regular behavior, is also keeping your data private. That's not a claim Google should be implicitly making on behalf of MotoCare (let alone on behalf of every app that could hypothetically be installed on your system and is understood to be well-behaved in the sense that it just reads the syslog).

It's really incumbent on a privacy-protecting application to not put private data in the syslog. If it's in the syslog, it's not private (even though it's more private than, say, a notification on the homescreen).
> Covid's fatality rate in the states was around 0.00125 and I'm assuming other places as well.

Totally wrong. Johns Hopkins says the case fatality rate in the states is 1.8% [1]. Many others are worse, like Canada at 2.0% and 2.9% for the United Kingdom.

[1] https://coronavirus.jhu.edu/data/mortality
Meanwhile thre were videos of the full hospitals in the UK being empty at the height of the second wave, while we were being told they were overwhelmed.
i hope one day someone hacks google and puts all their servers offline and puts a text saying: this service is not inline with our guidelines. Even if it's for 1 day, just to give them a small taste of their own non-sense. If you buy something, it should be yours to control. If i buy a plate, you dont get to decide what food i eat. The phone space is currently completely controlled by 2 giants... it's sad.
Why would you need to wait for the transaction to confirm? That’s not how bitcoin payments work.
> jelly trouser moment

Thank you! I now have a new phrase to use! lol :-D
> Running electrical, plumbing, air conditioning etc through this structure is doable but much harder,

You realize there are lots of brick houses out there and those things aren't run through the brick walls either right?

2x4 dimensional lumber framing is used inside and those are run through the studs.
>> "Can't you just make us a general-purpose computer that runs all the programs, except the ones that scare and anger us? Can't you just make us an Internet that transmits any message over any protocol between any two points, unless it upsets us?"[1]

The War On General Purpose Computing continues. Far too many business models depend on selling general purpose computers as "appliances". They presume it is possible to sell a computer that isn't Turing complete.

[1] https://boingboing.net/2012/01/10/lockdown.html
Once there is no way to run Termux that will be the end of the line for me and I've been on the Android train since the G1 days. I am ok with installing it from F-Droid or adb as long as it remains runnable. (I guess I am in the bargaining phase)

I don't think that I am ok with not being able to easily run my own executables since I rely on running a few Go utilities in the Termux CLI.
AI Is Neither Artificial nor Intelligent
> Phillipe Christodoulou wanted to check his bitcoin balance last month, so he searched the App Store on his iPhone for “Trezor,” the maker of a small hardware device he uses to store his cryptocurrency. Up popped the company’s padlock logo set against a bright green background. The app was rated close to five stars. He downloaded it and typed in his credentials.

The whole point of a hardware wallet is to keep the credentials (private keys / seed phrase) locked up in there, and be safe from any malicious wallet app.

Entering his credentials in the app destroyed the security of his hardware wallet.
Just learned that double tapping the Super button opens the app drawer. game changer for me
> What I don't see is that they ever went back to the policies to check if that was legit. If it wasn't and you tell Google, "right, that was totally a feature but we've removed it," then, you just indicated that you deliberately implemented a feature that violated the terms of your agreement.

A user reverse-engineering your app to pull out its AdMob ID is neither a feature nor something the app dev can reasonably be faulted for.
UML is totally useless abstraction and all until you somehow need to explain your architecture to 30+ developers/architects on the call.
Pick a C++ version and use that then. Compilers are not dropping old versions of the std, but the new versions are just that new. No deprecation affects an older version of C++ and no one is forcing developers(as seen by the 20-30% that still use C++98/03) to upgrade their code bases.
Perfect timing, I was just about to start looking into SIMD again as my toy game engine is almost at a point where I want to see if I can vectorize some of my processing (much of it is already stored in SOA format, so hopefully it won't be too much trouble). I'm thinking especially about tasks like frustum culling, but also other things. We'll see, after I read this :) I've used SIMD intrinsics before, but I could definitely do with a refresher!
I don't think that is weird. There is only so much partying and drinking I can do. The real friendship happens outside the club. Meeting once a month at a happy hour doesn't cut it even. It's volunteering together, workouts, game nights, dinners, where that happens.
Kicking learns off on a cluster is surely a thing as well. And in some fields, as you correctly mentioned, memory requirements may be measured in terabytes. It's more of a 'production use case' though - what I meant is the 'dev use case'. For instance, playing with mid/high frequency market data, plotting various things, just quickly looking at the data and various metrics, trying and testing things out often requires up too 100gb of memory at disposal at any time. It's definitely not only about model training. And 'something smaller to work on' principle doesn't always work in these cases. If the whole thing fits in my local ram, I would of course prefer to work on it locally until I actually need cluster resources.

(But seriously though... what is 16gb these days? Looking at process monitor, I think my firefox takes over 5gb now since I have over a thousand tabs in treestyletab, clion + pycharm take another 5gb, parallels vm for some work stuff is another 10gb; if doing any local data science work that's usually at least a dozen gb or a few dozen or more)
No A could sue B for whatever damages they sustained, but also B could turn around and sue A. If their damages were exactly the same then they would both end up in the same position they were originally, minus lawyer fees, so there isn't much motivation for either of them to do this.
Prosecuted for what? Not only was it legal back then it was generally recognized as the best method of disposal. Plus as others have pointed out nearly everyone involved is dead by now.
Now that I re-read it, it is harsh. I meant no personal attacks. Sorry.

But it's what I would feel if I see a colleague (C) programmer doing that.
How are the reactions incompatible? People like me, who don't need more than 16 GB of RAM and one monitor, are happy with the M1. Other people are waiting on the M1X/M2 chip to bring what they need.

> meanwhile the Intel Surface Book was fanless in 2017

The MacBook was fanless in 2015 and, like many other fanless designs using Intel chips, it was slow.
The referenced article has 13 mentions of Montrose:
https://www.latimes.com/projects/la-coast-ddt-dumping-ground...