skysight-inc/HackerNews huggingface dataset:
No mention of Spectre or Meltdown?

I'm all for improving formal verification but their method ignores the fact that there are leaky abstractions throughout the stack, those of which enable vulnerabilities. That is, this seems like total BS:

> we introduce security-preserving layers to modularize the proof without hiding information leakage so we can prove each layer of the implementation refines its specification

Edit: they do mention it:

> Side-channel attacks [20],[21], [22], [23], [24], [25] are beyond the scope of the paper

So basically they've developed a method for formally verifying components of systems, by making assumptions about the periphery.
Woh, works on Wayland?!? Very surprised by this.
There is a saying where my folks are from: "Dying from fear of death will just as well kill you".

But what I learned the last few years is that I don't miss the things that I thought were "living" when I was young. Drinking or "Nights out" is one of them. Also: Everything "Internet" (Netflix, Youtube, News, ...). Especially when it actually hinders me from experiencing life (it will steal your day).

That does not mean I regret anything. I made my experiences, everyone should, I think this is an important part of growing up for a lot of people.

Nowadays, eating healthy/well, exercise, etc. are the things that make me feel more alive and well - these are the things that make life "better".

But also I have two small kids, so there is no time and space for all these "silly things". And for the same reason I eat to much crap and don't exercise nearly enough for my taste. And I watch way too much YouTube.

Moral: Do your best and try to enjoy it. Nobody can tell you if the bus is waiting for you the next corner. But wether it changes anything if you are drunk at the time is up to you.
Barge up the Rhine
scherer's intricately patterned roots could be a carbon capturing eco-material
The Panama Papers Double Cross
Brain vs. Labor: Are You Hired for What You Know, or What You Do?
Income tax in the USA was meant to be a temporary measure to support a war effort.

There are similar stories in other countries.

There's nothing more permanent than a temporary government plan.
It omits shift-cursor inputs, however it seems to finally answer for me the mystery of what those weird modes are that are entered by shift-selection: ‘select visual’ and ‘insert select’, if I'm not mistaken. Also apparently I forgot about ctrl-g, though it likely has a different meaning in Emacs' Evil.
Your strategy is not optimal. If you want to be efficiently freeloading, you should not be announcing your position.

Freeloading with vaccination only works if just a small enough minority of people are doing it. In order to minimize your personal risk from both covid and potential side effects of vaccination, you should be advocating for others to get vaccinated but not get the shot yourself.

If you publicly announce that you are not going to get the vaccination, that may encourage others to avoid it as well. That's against your own interests, because then it's more likely that you get covid when the vaccination coverage in the population is lower.
Seems like a lot of the work to replace radar are things that are generally useful additions to the neural net.

It can also save 40+ million a year so its pretty nice from a business perspective.
Newly developed vaccines for debilitating diseases aren't given to children indiscriminately en masse. We are dealing with a completely different scale here and we should be more careful about it.

Rushing the medical feedback process has huge potential downsides.
Yes. These were both dick moves, but I think they are very different. In one it was a democratically elected government closing the airspace through diplomatic pressure, indirectly resulting in the pilot having land the plane. The plane in question was a private jet not in commercial traffic, so it wasn't full of people.

In this case a dictatorship forced a commercial plane traveling between two EU/nato countries, full of people, to land in a country without a transparent or independent justice system. The grounding was made with a false bomb threat from the plane and actions by Belo(?)rusian agents on the plane intervening. There was no ruse in the Austria situation - the technical reasons were reported by the pilot. The US pressure was to close the french/spanish airspace.

Again, both dick moves, but to me completely different things.

If the US realized Snowden was crossing US airspace and diverted a plane full of people flying between (say) Brazil and Canada to land in the US by using US agents to cause trouble on board or make false bomb threats to force the plane down, I'd be almost as upset (Almost, because I give democratic governments more of a pass, and because the US justice system is at least slightly more transparent and independent, although a Snowden process certainly would show its terrible side)

> In both cases, a country used their muscle to land a flight.

Absolutely. But in one it was diplomatic muscle or "soft power" from a democratic country. In the other it wasn't.
So is this Zircon kernel based? Or just fancy name for linux?
Will Fb,twiiter be banned in India?
Chrome is not open-sourced, Chronium is. I cannot rebuild Chrome with full protection against tracking, for example, but with all other parts unchanged.

Android "open sourced" as well, but literally nobody runs AOSP, stock OSS apps are staled for years, Google makes a lot to make system barely usable without proprietary parts from Google Services.
Do you have any good links?
~$60 billion/year of federal funds goes to transportation.
~$1,000 billion/year goes to health care.
~100 billion/year goes to education.

The money we pay in federal taxes (whether it be income or other taxes) doesn't just vanish into the ether, it comes back via various government programs.
Yeah, I'm always amazed when I end up looking at the Arch wiki for a Debian issue, simply because the Arch wiki is more relevant and up to date.
It's actually pretty standard to fork QEMU when you want to emulate a custom kernel/board. QEMU is a good common emulation platform, but in no way it can emulate correctly every quirks of a custom pci or even PIC device expected by the system.
The phrase here is "The State" and no.

c. 30 states are "free", c. 130 are dictatorships now.

Those numbers get worse as you wind back the clock.
~$60 billion/year of federal funds goes to transportation.
~$1,000 billion/year goes to health care.
~100 billion/year goes to education.

Regardless of any specific programs I did or didn't list above, the money we pay in federal taxes doesn't just vanish into the ether, it comes back via various government programs.
why would anyone still use an alt-right product from a fascist corporation that would never respect their privacy? you people are fucking retarded
What OS are you on? IME it's the best browser on windows particularly with ublock origin.
Very true: my personal solution is to shop for better countries. There's no way to meaningfully influence the government's overreach.
Hopefully this will become a trend and the cheapest countries will attract better talent.
How to Build a Brand Story Through Marketing
> But at a higher scale it’s purely incidental complexity: you only need one direction for all languages. All languages are linear. No language uses direction to encode meaning. Direction in language is just “stuff starts one place and ends in another”.

I think an interesting example here is Chinese which is traditionally written top-down-right-left but these days is just as if not more commonly written left-right-top-down. There seems to be almost no push for supporting vertical text while its just assumed that RTL is a must, why is that?
this guy probably has a swastika for a tattoo
Use svelte, it is the easiest and fastest of these three. To use react it is good to have a good command of javascript. The vue is easier than the react, but the vuex is very complicated. The svelte stores are very easy to use. And vue has some structures in the svelte are addressed in a simplified way, as methods and data computed.

Svelte is the present and the future!

Automatically translated.
Huawei develops its first RISC-V design based HiSilicon development board
Huawei’s semiconductor firm HiSilicon has started using open-source RISC-V architecture and has even released its first RISC-V architecture-based HiSilicon Hi3861 development board for Harmony OS developers.
Engineering Levels at Carta
As opposed to, say, travelling to Minsk?
Nope. There are border controls.
These are good arguments, but my peeve with this is, that once a line reaches the same indent as, say a function definition, it visually looks like the function is defined at that step.

def f(x):
Pass # visually inside

def f(
X # visually inside
): # visually outside of function
pass
I am living outside of Belarus right now in a country with decent government, so i don't really worry about this. But ofc i use my own wireguard vpn and mtproto proxy for telegram when i am traveling to Belarus. I am not going to censor myself, but it pays to be cautious.
I'm a bit baffled that this is coming now, where a good part of the population is probably still working from home and not leaving the house much.

If they want any kind of meaningful data, wouldn't this invalidate basically everything they measure?
Google’s data terms are now in Germany’s competition crosshairs
Florida governor signs bill to ban Big Tech 'deplatforming'
> pretty shocking

Inkscape shouldn't be including this, but just an fyi since you say you were shocked by this: many apps include such metadata in their default save formats.

The main distinction with Inkscape is that most apps have a proprietary save format which you are less likely to publish publicly. Inkscape's use of an open standard for their default metadata-rich save format means that metadata often gets published.

Still, I do think the trove of metadata many apps leave in their files is probably unnecessary and should definitely be addressed (in all apps, including Inkscape).
Medical science has feedback latency. Be careful about trusting brand new scientific claims that haven't gone through rigorous testing.
> Appreciate the feature but I don't want Google to have anything to do with my searches, password-protected or otherwise.

That's actually very easy to fix, don't use Google for your searches.

Otherwise, obviously, the property you're using to do X with, will be able to see that you're doing X, otherwise it wouldn't work in the first place.

Not sure what you're arguing for/against here really.
So who should decide then?

If China/Russia/Iran/North Korea launches a lot of satellites is that okay too? What if they mainly fly around above the US for whatever reason? If space is free the US can't complain.
I was not aware that english is the only left-to-right language.
"The fact that some geniuses were laughed at does not imply that all who are laughed at are geniuses. They laughed at Columbus, they laughed at Fulton, they laughed at the Wright brothers. But they also laughed at Bozo the Clown."

- Carl Sagan
It depends solely on the definition of "stale".

An issue where the reporter is unreachable and developers do not have local reproduction should absolutely be closed as it serves no function other than generating noise in the issue tracker.

Open issues is a liability to overview and planning, and having bad open issues is therefore directly harmful to maintainers, reporters and users.

Closing a bad but ultimately real issue will just make way for a possibly good report to take it's place (i.e. a new reporter rather an old unresponsive one) so it only provides benefit.
Looks like a complete copycat of Mailmeteor (same wording, same interface)
Is it? Who is at risk in Moscow but not in Minsk?
I have always wanted to implement pie menus as a Firefox or Chrome extension, but I've never been able to find a sufficient API that enables me to pop up a modal dialog window at any place on the screen (specifically: centered on the current mouse cursor position, and in an operating system window that exists outside of the browser tab, overlapping all other windows). Or reshape it to any shape (or simply respect the alpha channel of the document and not show any chrome), so I can make a round or arbitrarily shaped window shrink wrapped to the items.

https://developer.chrome.com/docs/extensions/reference/windo...

Is there a way with that (or any other) API to pop up and precisely measure and position an arbitrarily shaped (alpha channeled) window, without any other chrome or window frames? And then globally capture and track mouse and keyboard events?

Does anyone know if there's now a way for a browser extension to do that in any browser? Or would it require hacking platform specific C++ operating system code?

Here's a demo of an ancient implementation of pie menus I made for ActiveX around 1997, that shows pie menus with arbitrarily shaped windows:

ActiveX Pie Menus: Demo of the free ActiveX Pie Menu Control, developed and demonstrated by Don Hopkins.

https://www.youtube.com/watch?v=nnC8x9x3Xag

ActiveX Pie Menus doc, examples, sources, etc:

https://www.donhopkins.com/home/catalog/piemenus/ActiveXPieM...

https://www.donhopkins.com/home/catalog/piemenus/PieMenuDesc...

I did all the drawing with Win32 calls, so you could configure the fonts and colors and sizes and window shapes and styles, but you couldn't style everything arbitrarily with css, embed arbitrary web content, or anything nice like that.

At the end of the demo video, I concluded that:

>I ran up into a wall of complexity with this ActiveX control, in that I wanted to be able to have as the menu items animated gifs, mpeg movies, fonts with nice attributes, and things like that.

>So the first thought was "well let's just put a whole web browser in every item!"

>But that was a little heavy-handed. So instead, I put the pie menus into the web browser as a Dynamic HTML Component. Which I'll show next.

Of course it makes a lot more sense to draw and style the pie menus with the browser's renderer, but I still want the best of both worlds, where I can pop browser-drawn pie menus in arbitrarily shaped and positioned operating system windows, and track the mouse globally (capturing the mouse and keyboard events and receiving mouse motion and up and key events outside the window, to pop up and track sub-menus properly).

JavaScript Pie Menus: Pie menus for JavaScript on Internet Explorer version 5, configured in XML, rendered with dynamic HTML, by Don Hopkins:

https://www.youtube.com/watch?v=R5k4gJK-aWw&ab_channel=DonHo...
The java.io package has problems with no support for symbolic links
Yeah, but it is one of the last options that does not involve using buses\trains to get to minsk rn.
That looks like a title from The Onion.
Border Patrol Helicopter Had 100mph Encounter with “Highly Modified” Drone
Check if string is a number JavaScript
I've only recently started fiddling with Fuchsia and I'd be interested to see it running on a device and see how truly usable it could be in the real world. It seems the community is pretty active online which is a good thing: I raised a concern about building Fuchsia on non-Debian based distros and potential solutions(one of which I tested and workes) and I had 4 or 5 replies in a couple of hours. And while the thread has turned into yet another "bash Google" thread, I'd like to thank the engineers for their work and hoping to see more in the future. As I said I haven't tested it on an actual device but if it is as lightweight and versatile as advertised, it has the potential to become incredibly big and valuable. I guess only time will tell.
Oh, come on. Trump said all sorts of things that the media didn't oppose. And some of the battles that he fought actually made some sense. He also spouted some ridiculous BS pretty frequently.

The reason why the Hydroxychloroquine suggestions were dismissed is simple: science involves an empirical epistemology and that means undemonstrated hypotheses are not treated as true.
Oh, I know that the Secretary of State is not (officially) a civil servant. Both are indeed part of government. But as you rightly point out, the person that they do get to independently assess this is overwhelmingly likely to agree to whatever the executive wants: it will be a rubber stamp and thus an approval in all but name from the Secretary of State. I very much doubt that if you found yourself in that job saying 'no' a lot, you'd be in a position to keep it for much longer.
So I've done the same when I bought my last house(conservatory built 20 years ago, seller couldn't produce the correct paperwork for it), but the issue wasn't the planning permissions per se, it was that the original builder of the house(Belway) hasn't given permission and they reserve the right to do so for 99 years after construction(even though the house is a freehold now, the entire estate is still Belway's leasehold). So the insurance was against that as well.

Like, are the chances of Belway complaining and landing us in legal trouble close to zero? Yes, they are, but like said above - it was £50 and I got the seller to pay for it. When we sell the house I'll do the same just to avoid any bumps in the process because of it.
REST Servers in Go: Authentication
I am one of those people. Not only can I not stand hearing people chew their food, I get irritated hearing people swallow.
There were peaceful mass protests every day since August, with millions of participants in some days. It didn’t help. Local police and state security tracks, jails and tortures the protest leaders and journalists. Or do you want a violent revolution instead?
Google doesn't provide services in China, because to do so they'd have to censor for the CCP, like Apple does.
I hope that no one is making this same comment about masks and social distancing in 20 years.
There is a pattern. It looks that cerebral introverts (or well: nerds) are more likely to answer these questions.
It sort of works. If you refactor their example to use contexts, the rule misses the leak:

func requestFromSlowServer(ctx context.Context) string {
select {
case <-ctx.Done():
return ctx.Err().Error()
case <-time.After(time.Second):
}
return "very important data"
}

func requestData(timeout time.Duration) string {
dataChan := make(chan string)

go func() {
ctx := context.Background()
newData := requestFromSlowServer(ctx)
select {
case <-ctx.Done():
case dataChan <- newData:
}
}()
select {
case result := <- dataChan:
fmt.Printf("[+] request returned: %s", result)
return result
case <- time.After(timeout):
// Hitting this case doesn't cancel the context, so you're still leaking goroutines.
fmt.Println("[!] request timeout!")
return ""
}
}

You can try this example in their playground (https://semgrep.dev/s/Q8Bo/) and note that it basically does the exact same thing as before (context.Background() never gates the channel sends or receives, but it does convince the linter that you aren't leaking). I got here by using context.WithTimeout(...) first, which was correctly marked as not leaking. But it's faked out by any gating, not by actually useful gating. So it just pushes the problem to more subtle cases that are even easier for code reviewers to miss. "foo <- bar" is always something a code reviewer is going to worry about, but creating a context ten levels up and still leaking goroutines is much more subtle and would be just the thing that static analysis could make the reviewer aware of. (Basically saying, "hey, you did this right, but there are some implementation details that prevent it from working".)

Faking out the linter easily is pretty scary. I ran into a big memory leak with Sentry's client library where they weren't closing http.Response.Body. They had a lint rule to make sure they were closing the body, but it didn't fire because they managed to fake out the linter (by passing the response to a helper function, which didn't close the body).

Overall I think this is too simplistic to benefit from unless you have found a particular pattern used by a particular author in a particular codebase, and want to get a list of places to fix. Certainly, a lot of new programmers to Go forget that channel writes block, and don't gate the write with a timeout condition. But fixing this is kind of the second thing you learn in Go ;)

I thought "do I need to integrate semgrep with my CI", and was underwhelmed by the default Go ruleset: https://semgrep.dev/p/golang. Making sure that people don't connect to SSH without verifying the server's host key is not in my top 15 lint rules (no complaints about including that, but it's very situational), but that's the sort of thing they provide out of the box. This particular rule doesn't even make it into their default list of rules.
DeSantis’s Big Tech Crusade
This was one fun game. Hard as nails, but fun.

Most ports were really good too. Here's a "Let's compare" video. https://www.youtube.com/watch?v=gMtJSz0KC9I
> The word Butt is derived from the Anglo French word 'bouter' meaning to expel.

Wow. I suppose that’s the same etymology for “butt” in the anatomological sense?
Didn’t work on Japanese text for me just a few months ago. 2018 MacBook Pro.
>Anyway, to reiterate: folks interested in systems languages should read the C/C++ literature and actually become a systems engineer first.

This is an extremely weird take. So before I can code some rust I should first get a new career and master C/C++? Talk about barriers of entry and gatekeeping. I think I may have toyed around a bit with rust - because its fun, and as I am not a systems engineer (just an other type of engineer) I am deeply sorry.
What Future for Human Rights? Decision-Making by Algorithm
as a human we can see face in bread with two tomato slices and some ketchup, yes they have similarity in ux but no they are not same check landing page demo video please
0% works fine. That's how we've had it under Islamic law, and it worked (and works) out perfectly.
Top Computer Chairs for Developers in 2021
Donald Trump was president and was making a lot of offensive inflammatory comments, like calling covid “the China virus.” WaPo and other increasingly politicized news outlets did no investigation into this, instead calling all discussions of facts around this Occam’s razor explanation “conspiracy theories.” Now Donald Trump is not president so now we are slowly re-examining some actual evidence.
> Still, mobile computer in your pocket, wow.

it really bothers me, you know?

we've got so much storage and so many/good sensors, yet the software kinda pushes you to use the device for watching dumb videos and/or to argue worthlessly with other random people, so that you can get served ads in the meantime.
If you are logged in on a device, then somoene can see all your emails. Is the history of all your searches more sensitive than your emails? Perhaps, but it's not 100% obvious where to draw the line. The main determinant is probably that people check their history legitimately so rarely that re-auth is a small burden.
Just to prevent indexing - a sub devoted to a person currently running for NYC mayor. Some would say this person's grassroots persona wouldn't have existed without this sub, but that person certainly doesn't think so :)
At least in my circle no one is asking to pass the 'chocolate hazelnut spread' everyone calls it Nutella, even if it is not the Ferrero brand. Not US
Show HN: A good business name generator
Right, but people who 20 years ago for reasons other than needing the ruggedness would have driven jeeps now mostly drive SUVs.

I'm not saying that people call them SUVs now. I'm saying they buy SUVs instead if they just want a big vehicle to use on road.
They were needed at some point. They did corrections and even peer reviews. Now it is just a lucrative enterprise.

But they sill serve as reference for how many papers someone published and how often someone gets referenced. The reputation of the journal is relevant as well. I think this worsens the replication crisis.