skysight-inc/HackerNews huggingface dataset:
I agree that formal verification isn't, by itself, some kind of panacea. Reading the paper, though, the effort did uncover some issues. Two examples, though there are more:

"When proving invariants for page ownership used in the noninterference proofs, we identified a race condition in stage 2 page table updates"

"KCore initially did not check if a gfn was mapped before updating a VM’s stage 2 page tables, making it possible to overwrite existing mappings"

So mapping out the rules/flow in Coq, and then seeing what actually happened did uncover some flaws. As to whether the juice was worth the squeeze, I don't know this space well enough to comment.
You can get a condensed version of the new UI by setting browser.uidensity to 1 in about:config.
My hypothesis is that UI designers optimize towards "pretty" at the detriment of functional because pretty is much easier to show with a screenshot in a portfolio or on Twitter.
By cryptocurrencies do you just mean BitCoin? Most new crypto's use proof of stake which doesn't use up GPUs.

Not heard it blamed for using up hard drives before.
Maybe it is possible to detect the kind of activity or identify processes that are written to mine crypto? Then abort those ones.

I'm thinking of behavior analysis, such as the one some network firewalls do... not sure if that's even feasible at the process level, though.
And if looked at carefully, none of those projects require blockchain and blockchain solves none of the problems they have.

> Also oil and gas

What about oil and gas?
I think that would be a great approach. Incomes and asset values are very different and work differently. They benefit from being discussed with different vocabulary in order to make this distinction clear to the general public.
There is no doubt that energy storage will be huge and worth investment at massive scale.

As to Li-ion, well the future is good, but not so certain.
Ah yes, an eye for an eye.
This is so cool. Sending this to my school district, some of whom decided the best way to teach was to open webcamtests.com and share the screen, instead of just using the camera within MS Teams.
Ansible focuses on provisioning machines whereas Terraform focuses on creating Cloud infrastructure. A common combo is using Terraform to provision VMs and networking settings then using Ansible to configure those VMs.

I find few if any reasons to use Ansible over a shell script. IMHO Ansible is just a weird YAML syntax to generate a "shell" script with some utilities to ship that script to nodes over the network. I find it super awkward not to mention slow and inconsistent.

For deployments I much prefer using Nix and for imperative actions I just use actual shell/python.
If the government setup their own Silk Road and busted a bunch of drug dealers it wouldn’t be any different than starting a bank. The first informant said I have drug traffickers asking for banking services. They setup what they were already seeking.

Most likely a few governments and courts in multiple countries were already OK with it by the end.
Just to add some context for muggles such as myself who were unaware of what an SFU is, it stands for "Selective Forwarding Unit".

https://webrtcglossary.com/sfu/

https://stackoverflow.com/questions/60013467/one-to-many-liv...
It might come as a surprise to some but subtitles on Netflix are covered by a license agreement. Some are available in countries and not in others. So this raises some interesting questions on the legality of it all.
When you speak in public, others may feel invited to join in the conversation. This is a good thing.
> But....shares are useless until sold.

I think there are high profile cases of founders getting low interest loans with the shares as collateral. This allows spending of the money without losing control or paying taxes now.

So, no they are useful before they are sold.
LinkedIn Guide for Beginners: Best Practices and Things You Should Not Do
Doesn't require blockchain and doesn't solve the actual problem these companies have: that the records are correct as entered.
Vertical padding make me so angry, vertical space is a scarce resource that is already wasted with giant title bars on top, a dock on the bottom, layers of toolbars stacked on useless icons. If most screens where using a 9x16 ratio it would not be a problem, but they are 16x9 ...
Generally when someone is calling another uneducated it’s offensive. You can probably safely remove that word from online discourse and people wouldn’t react that way.

Talking about anybody’s education level, specifically when saying they can’t do or understand something because of it, is extremely offensive and hateful.
I agree. I’m just talking about whether stepped up basis is fair or unfair.
Eliminating the step up basis would have no impact on small businesses owners so long as they remain owners.
So if someone wanted to demonstrate poor building codes by setting your house on fire, that would be okay too, since you know, it's in the public interest to demonstrate lax building codes?

Privacy is a right that I would think more people on this forum would respect. I don't see why you're so happy to offer up the rights of others as sacrificial lambs to make some political point.
That's a keeper!

Thanks!
Agreed and this has been true forever.

The incredible amount of work that has to go into https://github.com/fastlane/fastlane/releases always impresses me.

APIs and authentication is ever changing all because Apple refuse to embrace modern devops. They have this idea that apps are produced by lone devs in their bedrooms and the process is designed for them.
"Floobledink" is equally informative as to what "Fizzygum" is or does.

Please, HN, give a description of what your Github-for-llamas project is instead of just a nonsensical word.
I'm not so sure that developers of other desktop environments are highly attentive to Plasma's features and look.

But I do agree that it tends to see key features implemented well ahead of its biggest competitors. It also has really good built-ins, and imo something that doesn't get emphasized enough when discussing its configurability is how _usable_ its configuration interfaces are. Plasma has a much better story for configuring global keyboard shortcuts than macOS does, for example. I generally find the KDE conventions for organizing configuration options impressively orderly and discoverable, especially given how much functionality they expose.
> The profit motive is what causes those regulations in the first place! It has always been like that, especially in the states.

Actually, that's not true. The regulations were created as a result of a series of well-intentioned but catastrophic policy decisions, starting in World War 2. FDR instituted a wage cap to discourage private sector employment, which resulted in employers using non-wage benefits to participate in a competitive labor market. After a decade or so, it became an expected benefit (sort of like company cars, at the time). Eventually around the '70s, the Federal government decided it was time to incentivize remaining employers to provide health insurance by making premiums tax deductible; again a well-intentioned attempt to expand access. It finally all culminated in ACA which _mandated_ that employers provide health insurance. None of this can be attributed to lobbying, almost all of it attributed to well-intentioned regulations gone awry, not the profit motive.

In fact, the best shot we have right now of decoupling health insurance from employment is the ICHRA (https://ichra.com/), which allows employers to fulfill their healthcare obligations by providing tax-advantaged cash to employees that can be used to cover health insurance premiums on the individual market; and I imagine that came about due to lobbying.

Again, the easiest way to falsify a causal line between the profit motive and the current outcome is by finding instances of markets wherein there is a profit motive, but with differing outcomes. That's exactly what we see in Medicare Advantage, Switzerland, and the Netherlands.

> Don't try and create some sort of a fairy tale place where the profit motive won't try to rig regulations in their favor, they will always try to, this is what the incentive to make more and more profit creates.

No disagreements that industries will try to rig regulations in their favor. This is true everywhere in the world, and yet we see wildly differing outcomes. Notably, I'm yet to see an argument explaining away the Medicare Part A/B vs Part C outcomes in the US.
I think this is one of those things that superficially sound not that complicated but when you look closer, it is a gargantuan complex task. If I think only about Photoshop and PSD, this seems terrible to implement and maintain.

Also, I guess that the need is not really there, because otherwise, Adobe or some other company would have implemented this in the past 30 years.
Here is the list with current exhibitions if you want to have a look:

https://www.deutsches-museum.de/en/exhibitions/overview/

The replica mine and the high-voltage section with arcs to a Faraday cage in which a staff member is sitting might be particularily interesting/entertaining.

The museum is so large and varied that one could easily spent days there without becoming bored.
Depends on the hobby. Individually hosted forums will most likely be your best bet here, though due to Facebook and Reddit they’ve been on the downslope.
Hmm, how did you do this? AFAIK, Safari extension on a Mac required to be bundled with a macOS application, and there's no way to install Mac apps on iOS. The one listed in the "More Extensions" link in Settings right now are the one that uses Action Extension which has been available for a very long time (and not the new Web Extension support).

(On the other hand, I've seen 1Password people got their Web Extension version working on iPadOS, and it looks amazing[1])

[1]: https://twitter.com/firebeyer/status/1402085111424708612
And it's just as unethical in that case as well
If you’re in Pythonland, Streamlit is an okay-ish way of quickly building interactive demos. Like in a couple of hours in lieu of a PPT.
There simply isn't a way to implement this on Firefox as it is. It's lacking the necessary API for end-to-end encryption: https://news.ycombinator.com/item?id=27432001

Yes, many pages support only Chrome for no good reason at all, but in this instance, the ball is 100% with Mozilla.
This is theoretical. DNS as it is implemented today does not use blockchain (at least, not as a standard).
Getting started in product management? Any recommended books?
To those seasoned product managers, any recommended books to read for someone to get started? One book I see often is Inspired by Marty Cagan.

Any others, or blogs to recommend?

Thanks for sharing
You might want to review that knowledge. You can spawn a few thousand threads on a modern machine without much contention.
Any locals in any country are coercible to their government, if it really wants to.
I think you don't understand what is going on here. ANOM was just admitted by the Australian Police and FBI to have been specifically built to infiltrate organized crime. The whole app was a plot to get access to the messages of these purported criminals.

This analysis came out a couple months ago, and was exactly correct. Also, you are blaming the style of the writing but ignoring the substance, which is that the app is most definitely making encrypted connections where it has no need to do so.
Which amounts to almost 20% of those arrested. Maybe it's partly due to Sweden historically having strong computer literacy. Only time will tell.
Ah, it worked on my phone (Chrome/Android)! No luck on desktop though, Firefox desktop redirects to pn.com LOL.
Hey I've used this at work! Love it. Pdfplumber is very useful too. Although these tools are only useful when the text in a PDF is "selectable". If someone scans a document to PDF, there may be no text in the file for these tools to extract.
SEO for Startups: tips to drive more traffic to your website
Nope. I have. That's why I know.

D+ doesn't let you download shows for offline viewing in the browser, only apps. Cover is not an alternative to Comixology because it doesn't work with most Comixology purchases. Kindle desktop app has settings hidden away in the file bar, requiring awkward touches or a mouse to use.
I find the leak objectionable. It doesn’t disclose any nefarious doings or tax evasion. All it does is verify what we already know. No revelation.

So this is more about shaming the witch rather than showing the witch did witchery.
As far as I'm aware it only provides subtitles that are available for your market on Netflix. (I.E it uses netflix's subtitles... it doesn't provide it's own.)
Surveillance is already on CPU level, sadly.
How Netflix uses eBPF flow logs at scale for network insight
Cool, thanks. We designed everything around play-based learning, so each toy we make for the Playroom puts kids at the centre of the experience and has them taking an active role in the play (and therefore, their learning).
Show HN: Glific, an open source, two-way communication platform for NGOs
Only borrow half of what they allow you to. Don't borrow the full amount. In that case it would require more than a 50% drop before you run into issues.
Where does the leak show theft?

If you earn $100 a week and tax withholding let you have $80 to yourself. That $20 didn’t belong to the government. It belonged to you. You however, having entered into an implicit agreement with society agree you will part with your money and give it to the government (which is different from its being theirs). Now, if you donated some of the $100 to charity or whatever and reduce your tax liability, that’s not “theft”. That’s part of the initial implicit agreement.
Jamstack: Each static host serve HTML files differently
Well, this analysis specifically points out that the app is making connections to suspicious places where it shouldn't need to.
Adding on, I think in the context of the recent internal emails uncovered during the Epic lawsuit, it's agreeable that there's an ongoing story about Apple's ulterior motives to damage the competition by artificially limiting their outreach to customers on other platforms.

But IMO the solution there wouldn't be to remove the red/blue distinction, which as noted in this thread serves as important security and feature indicator — the solution would be to compel Apple to serve their customers better by not having them caught in the crossfire in their marketplace battles with Android.

I also noted that it would be more accurate for Apple to display a padlock to display the security status of a chat, but that would actually be even more derogatory. It's basically saying "this chat is unsafe."

I really hope Apple at least announces iMessages for the web, and a native client for Android. A lot of households are multi-ecosystem.
My understanding is that it's totally feasible, but ends up being a game of cat-and-mouse (just like most security projects).

The question is whether or not it's worth the effort (for Dockerhub). If they were leading in their space, and had a successful business, then maybe, but in the current situation it would be a large investment in providing something for free.

Remember that this change only applies to the free plans, not to anyone paying.
You’re not just selling your labour though, you’re cultivating your own career. That’s why people generally advance with more years of experience. You are the 100% majority stake owner in the startup of you.
I have about a dozen horror stories about being sent on-site to assist a customer who was having a massive production outage, only to discover that they were "smothering" all exceptions in a global handler... (because the hosting platform their components ran in was notorious for generating thousands of useless exceptions)

With no logging... But invariably, they would not want log files created in their production environment...

So, we would add at least an OutputDebugString() to the catch... prepare a build - then in the production environment we would use the Sysinternals "DebugView" to find out why things were breaking... (And typically - it was a missing dependency or DLL version miss-match from dev to production)

Fun times.
Memory use. Even though threads / processes are “cheap” right now, it wasn’t the case in the past and they are still quite far from the couple-of-kbs per connection needed in async servers. You’re not getting a million paralel processes processing requests any time soon.
Worth noting that, over the last 30 years, their sphere of influence has shrunk inward by a thousand miles, all driven by the US encouraging their neighbors to join the EU or NATO.

I'm not saying the USSR was great for eastern europe or anything but it's also unfair to call them aggressors for the couple of times they've resisted this continual inward push from NATO.
Jitsi is great. But Jitsi doesnt have a shared whiteboard (with graphing calculators etc) yet which I think is Nettu Meet's main strength when doing online learning
A better analogy would be breaking and entering to collect evidence that a building was unsafe for occupancy, and I’d support that as well under the assumption that due process had failed and there was risk to those marginalized.

I don’t believe there is an absolute right to privacy. As always, there’s nuance.
They're not competition. I use Terraform for infra provisioning, and Ansible for post-provisioning application setup. I also use Packer + Ansible playbooks to build my AMIs.
So, there's a doc on building Dashboards, where I seem to be able to put a map of the USA or a randomly generated scatterplot into a dashboard... But how to I actually get useful data into the system from some external source?
After the Snowden revelations, those agencies have no benefit of the doubt anymore.
I'm not arguing with you, but I like the "feel" of the padding for the tab area, as someone with a 27" 1440p screen. I /don't/ like padding on repeated elements like lists (gmail, reddit, etc.) that are cumulative when evaluating dozens of items on a page, though.

OTOH, I don't see why they couldn't have kept things adjustable with a ratio. And I miss the Status Bar on the bottom.
sounds like it was a relatively small company, but was it? how many people were there?
It takes years of complexity to achieve this level of simplicity
Seems that the most common retort in this thread is to hammer down on the principle that unrealised gains should not be taxed.

This is directly addressed in the article. Unrealised gains can still work as collateral for loans. The spending habits appear as if your unrealised gains were bonafide income. At what point does the distinction between wealth and income become arbitrary?

There seems to be a large amount of "missing the point" in this thread. As a wage labourer my wealth growth is significantly hampered by taxation. For the small group of people with net worth tied up in financial assets, taxation doesn't slow their growth in any meaningful capacity. If we ignore any ideological predispositions and instead simply ask what limit this system is approaching I think the answer seems terrifying.

A common sentiment here is that inequality is not a problem in and of itself. "How does Bezos wealth possibly impact me?". Having seen the difference in equality in Scandinavia, USA, and South Africa I would beg to differ. Inequality eats at a society at all levels. The rich I met in America seemed less happy than the poor in Sweden. In South Africa even more so.
PiPifier is already on iOS https://apps.apple.com/us/app/pipifier/id1234771095
It's actually very simple. If a year from now you find that the authors (Engelberg and Tofel, others?) of this project are still free then everyone whose data they published was a legit "celebrity" and the leak was OK with the current administration. If you suddenly discover that all of ProPublica are actually sex offenders and evade justice by hiding out in embassies (or something similar) then they overreached and leaked the wrong data on an off-limits "non-celebrity". Makes sense.
Ask HN: What are the best resources to crack system design interviews?
Hi,
I have seen many resources about algorithms and leetcode questions, but as engineers became senior, there is more emphasis on "System Design interviews" and "SW architecture".

There are many important components (CAP, Load balancers, DNS, Availability, Consistent Hashing, TCP/IP etc.) in any system design interview, some also dive deeper into the database storage engine, need to explain the algorithms and data structures that the storage engine uses on disk, and how it affects the whole system performance-wise.

I am trying to compile a list of these resources . The typical suspects are always these two

http://highscalability.com/

https://github.com/donnemartin/system-design-primer

I have read also Designing Data-Intensive Applications book.

Please feel free to recommend some of the things that you found rewarding in your journey as an experienced developer.
Woow, that's really cool. Thanks for sharing the project :)
I recently accepted a job two months ago but when I was interviewing it was a complete disaster from my perspective.

The worst were companies that were hiring frontend developers (what I specialize in) but during the interview process they ask questions about the backend or creating microservices (Qs more advanced than basic crud/pagination stuff). Like the only person available to interview was some BE dev writing microservices asking very basic questions about JS.

Github was the absolute worst at this, applied for an accessibility FE position and the online assessment was to create a REST api. I just abandoned the process. Other companies were asking Qs about the frontend at least.

I feel like I can put up with the interviewing process from Facebook or Google because those companies pay the absolute best in our industry; most companies aren't paying the best but they all want to interview like they are FB. It's completely odd. Companies like Capital One, Fidelity were asking LC hards and paying below industry averages.

Another thing that I will absolutely never do are take homes, they are often too cryptic and while everyone says "spend no more than 3-hours" it feels like you need to put in 40 to stand a chance against those that do. They also require zero effort from the company. I want them to have some skin in the interviewing game. This is why I prefer white board style interviews, at least we are both awkwardly solving a problem. There is nothing absolutely worst than having a great talk with the HM and completing a take-home to only get completely ghosted.

The process for the position I accepted was this: spoke to recruiter, spoke to HM, "on-site" where I spoke to 6 different people in a 3-hour span with a decision being made that day. Probably spent a total of 5-hours interviewing. This is a decent company too; while pay is average for my location they give employees equity, have 401k matching, and an ESPP.

I think the onus should be put on companies. They often lament about candidates but the interview process is anything but accessible or reasonable.
I don’t know, I can thing of reasons not to. They want to discourage companies both from lax security standards and from paying ransoms when they get attacked. Not paying them back would provide economic incentive that even if the DOJ is working to combat hacking, they won’t be saving you from your own incompetence.

Not saying that’s what they will do, just that I think it would make sense to me.
There's no analysis here. There's no detail whatsoever; those are intentionally omitted, supposedly to protect the readers from being bored. Instead, the blogger offers only opinion with no support at best, and falsehoods presented as truth at worst.

I choose not to let them think for me. I will not disavow social media simply because some blogger expressed their own irrational, negative opinions of it.